3534 Commits

Author	SHA1	Message	Date
Bruce Ashfield	cb79d2f107	linux-yocto/6.6: update to v6.6.147 ... Updating linux-yocto/6.6 to the latest korg -stable release that comprises the following commits: a1153c0deb44f Linux 6.6.147 12a891c773aeb posix-cpu-timers: Prevent UAF caused by non-leader exec() race ae068b6761967 Linux 6.6.146 d8a1f7420d2d5 mm: refactor mm_access() to not return NULL c5596480c50e0 Linux 6.6.145 bd37e81cb475c selftests/bpf: Add simple strscpy() implementation 8fa926d33f082 tools/testing: add linux/args.h header and fix radix, VMA tests 2f48e29ce9dca driver core: Guard deferred probe timeout extension with delayed_work_pending() d329ff4039abd driver core: Fix missing jiffies conversion in deferred_probe_extend_timeout() 8cd66ea50f3b1 jiffies: Cast to unsigned long in secs_to_jiffies() conversion a48236b8889e8 jiffies: Define secs_to_jiffies() df9757a9f5213 writeback: drop now-unnecessary rcu_barrier() in cgroup_writeback_umount() 19ec404b079be writeback: Fix use after free in inode_switch_wbs_work_fn() 96ae4c663f127 xfs: fix stupid compiler warning 2ec1d9d1cd538 Bluetooth: btmtk: remove #ifdef around declarations 88a04d42aa6c0 Bluetooth: btmtk: Fix btmtk.c undefined reference build error harder 9f53402757671 selftests/hid: ensure CKI can compile our new tests on old kernels 4893deede7bbc Bluetooth: 6lowpan: Fix using chan->conn as indication to no remote netdev 6d012b730fd22 Bluetooth: hci_sync: Fix attempting to send HCI_Disconnect to BIS handle 3d65aa0fd012e Bluetooth: hci_core: Remove check of BDADDR_ANY in hci_conn_hash_lookup_big_state fcd446bbe7446 ksmbd: fix durable reconnect double-bind race in ksmbd_reopen_durable_fd faa3ff1dd933c seqlock: fix scoped_seqlock_read kernel-doc 90d35d2b8e47a KVM: Move kvm_io_bus_get_dev() locking responsibilities to callers 83b22d7f7c384 Bluetooth: hci_conn: Fix null ptr deref in hci_abort_conn() e51042ddc0b20 Bluetooth: hci_sync: annotate data-races around hdev->req_status 436b54dfa0fb7 Bluetooth: separate CIS_LINK and BIS_LINK link types 3053a0be28cfa Bluetooth: hci_core: Enable buffer flow control for SCO/eSCO 097b159d43407 btrfs: fix incorrect buffered IO fallback for append direct writes 7236d59f58f39 btrfs: fix false IO failure after falling back to buffered write d0bf0a7d75bb0 exfat: preserve benign secondary entries during rename and move 1058a40273237 exfat: move exfat_chain_set() out of __exfat_resolve_path() 2e22bced8e7e7 exfat: add exfat_get_dentry_set_by_ei() helper e603c5487f365 exfat: rename argument name for exfat_move_file and exfat_rename_file 04fe6ca144141 exfat: remove unnecessary read entry in __exfat_rename() fa0d1c1ff406b exfat: move free cluster out of exfat_init_ext_entry() 744b23aa430d5 mm: do file ownership checks with the proper mount idmap e2baf8ea13fb4 regulator: scmi: fix of_node refcount leak in scmi_regulator_probe() 7c90aa5cae6f5 regulator: scmi: Simplify with scoped for each OF child loop 1526f3c9884c4 audit: fix potential integer overflow in audit_log_n_hex() fc7e17d2f742c audit: add audit_log_nf_skb helper function 3ba204896c144 crypto: qat - fix restarting state leak on allocation failure 08f1388e09886 btrfs: check and set EXTENT_DELALLOC_NEW before clearing EXTENT_DELALLOC e2e4042d86664 usb: gadget: f_fs: Tie read_buffer lifetime to ffs_epfile 80cd28b56ab62 nvmet-auth: validate reply message payload bounds against transfer length 824425c42253a nvmet: return DHCHAP status codes from nvmet_setup_auth() 981ccee1414ba nvmet: remove superfluous initialization d5631081be07f usb: gadget: f_fs: initialize reset_work at allocation time 7b20686bf065b crypto: atmel-sha204a - drop hwrng quality reduction for ATSHA204A 9379d998f86d5 crypto: atmel - Drop explicit initialization of struct i2c_device_id::driver_data to 0 f37d00b9d28d5 usb: typec: tcpm: Fix VDM type for Enter Mode commands f2a6abc670104 usb: atm: ueagle-atm: wait for pre-firmware load in .disconnect() 6be54e2c8ea48 usb: iowarrior: remove inherent race with minor number ec662a8b2cde0 bpf: Allow LPM map access from sleepable BPF programs 85f16dd3f4872 bpf: Consistently use bpf_rcu_lock_held() everywhere b6a481642ea19 hfs/hfsplus: fix u32 overflow in check_and_correct_requested_length d6be467a9eb23 hfs/hfsplus: prevent getting negative values of offset/length 587afb06a5d1d serial: 8250_mid: Disable DMA for selected platforms 184579feec824 serial: 8250_mid: Remove 8250_pci usage 05e3decc55d1d HID: appleir: fix UAF on pending key_up_timer in remove() 120306ea29e99 treewide: Switch/rename to timer_delete[_sync]() 7456ae990a973 proc: protect ptrace_may_access() with exec_update_lock (part 1) 42417d36cf084 seqlock: Change do_task_stat() to use scoped_seqlock_read() 7d9295e319ec7 seqlock: Introduce scoped_seqlock_read() 6256899c3a346 mm/slab: do not limit zeroing to orig_size when only red zoning is enabled a6d5ce2e1a2d7 HID: multitouch: fix out-of-bounds bit access on mt_io_flags 7c29bc073a1f7 HID: add haptics page defines a018a7c37d5ae perf/x86/intel/uncore: Defer ADL global PMON enable to enable_box() 5c3265f3252b2 writeback: fix race between cgroup_writeback_umount() and inode_switch_wbs() ac7b2c21f2269 writeback: Avoid contention on wb->list_lock when switching inodes 138c692d2b2d6 proc: protect ptrace_may_access() with exec_update_lock (FD links) 5e7fc3518a48d proc: rename proc_setattr to proc_nochmod_setattr ea5c9bf99f626 ksmbd: track the connection owning a byte-range lock 875f1fde874f3 ksmbd: centralize ksmbd_conn final release to plug transport leak 1e112c47ec5dd ksmbd: use opener credentials for FSCTL mutations aa3c0cab4b28c smb: client: resolve SWN tcon from live registrations 5bb65ae76d055 smb: client: Improve unlocking of a mutex in cifs_get_swn_reg() 8c37e4338c801 Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_new_connection_cb() 080a5a42810a4 Bluetooth: 6lowpan: fix cyclic locking warning on netdev unregister 8daaf7f73fe99 Bluetooth: L2CAP: cancel pending_rx_work before taking conn->lock 9e6c5169db423 netfilter: ebtables: zero chainstack array 101358689d262 netfilter: ebtables: Use vmalloc_array() to improve code d22fb719654bf media: nxp: imx8-isi: Fix use-after-free on remove 8b8358c7ce216 media: nxp: imx8-isi: use devm_pm_runtime_enable() to simplify code e522a5ec70b88 media: nxp: imx8-isi: Convert to platform remove callback returning void 7a550256d68bb gpio: sch: use raw_spinlock_t in the irq startup path c23a7bbb0277f coresight: etb10: restore atomic_t for shared reading state e441cbfbd0eaa mm/shrinker: do not hold RCU lock in shrinker_debugfs_count_show() 1455793885772 mm: shrinker: remove redundant shrinker_rwsem in debugfs operations 91047a4396a8b Bluetooth: L2CAP: Fix UAF in channel timeout by holding conn ref f344a369d0380 crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() b27ecba3196f6 staging: rtl8723bs: fix OOB reads in rtw_get_sec_ie(), rtw_get_wapi_ie(), and rtw_get_wps_attr() 425e1db64b5a6 staging: rtl8723bs: fix spaces around binary operators e2d5e8e8f758f staging: rtl8723bs: core: move constants to right side in comparison 7d41a98a0d22e PCI: Skip Resizable BAR restore on read error 51b254181df29 PCI: Move Resizable BAR code to rebar.c fd0e8911770f5 PCI: Add kerneldoc for pci_resize_resource() 0b52ed5ec3deb PCI: Fix restoring BARs on BAR resize rollback path 56f89adc050b6 PCI: Free saved list without holding pci_bus_sem c3e11419a630c PCI: Prevent resource tree corruption when BAR resize fails fe8c701a53c28 PCI: mediatek: Fix IRQ domain leak when port fails to enable 87129460aacb8 PCI: mediatek: Use generic MACRO for TPVPERL delay 5bbdcf407209d PCI: mediatek: Convert bool to single quirks entry and bitmap 81842201d74a9 PCI: controller: Use dev_fwnode() instead of of_fwnode_handle() 4860120380916 PCI: imx6: Fix IMX6SX_GPR12_PCIE_TEST_POWERDOWN handling f1db80a67da92 vfio/mlx5: Fix racy bitfields and tighten struct layout a25bfa2a6665a PCI: altera: Fix resource leaks on probe failure 2ee9c46fd2dcd ALSA: aoa: check snd_ctl_new1() return value f2315b1675bd3 iio: common: st_sensors: honour channel endianness in read_axis_data 668e305b743fa bitops: make BYTES_TO_BITS() treewide-available 5022f4ed5aae9 iio: pressure: mpl115: fix runtime PM leak on read error f88ae94a69ce7 iio: imu: inv_icm42600: fix timestamping by limiting FIFO reading 4700ad28cfdd3 iio: imu: inv_icm42600: stabilized timestamp in interrupt e56fac319bb99 iio: invensense: fix timestamp glitches when switching frequency 3822181f61903 iio: invensense: remove redundant initialization of variable period a5df36432d8cc iio: hid-sensor-rotation: Fix stale or zero output when reading raw values bd3c53b25b241 iio: imu: adis: add IRQF_NO_THREAD to non-FIFO trigger IRQ 8e63297ca0af2 ACPI: NFIT: core: Fix possible deadlock and missing notifications 5dfed5a90e2ca ACPI: NFIT: core: Use devm_acpi_install_notify_handler() c5570ebe8ec65 ACPI: bus: Introduce devm_acpi_install_notify_handler() f1e12d81f9cd2 ACPI: driver: Check ACPI_COMPANION() against NULL during probe c127dbd832bd4 ACPI: NFIT: core: Fix acpi_nfit_init() error cleanup ac44b4a3d6137 perf/x86/amd/brs: Fix kernel address leakage bd4a622786f92 mtd: rawnand: lpc32xx_slc: fail DMA transfer on completion timeout f51f5acaeee65 mtd: rawnand: lpc32xx_mlc: fail DMA transfers on timeout f3da9bc7c8c2d mtd: rawnand: fsl_ifc: return errors for failed page reads 7ee7a77ec2f44 mmc: vub300: defer reset until cmd_mutex is unlocked 7c0a3a73dccc9 mtd: mchp23k256: use SPI match data for chip caps 35568121adfc5 mtd: onenand: samsung: report DMA completion timeouts deb5f0ae384f1 wifi: mwifiex: fix permanently busy scans after multiple roam iterations 5d9f700511a52 wifi: mac80211: free ack status frame on TX header build failure d97a8f3668949 powerpc/spufs: fix out-of-bounds access in spufs_mem_mmap_access() 6dc0c8cd9c8a8 reset: sunxi: fix memory region leak on ioremap failure ac6ac3d35bfc0 ipvs: reload ip header after head reallocation a3f0d5b605cd5 ipvs: fix more places with wrong ipv6 transport offsets d5db3439ee8d1 memstick: ms_block: reject a card that reports too many blocks 9735bc3aacc28 macsec: fix promiscuity refcount leak in macsec_dev_open() 75866e80e31e9 llc: fix SAP refcount leak when creating incoming sockets 68c5a2a19987c Bluetooth: btrtl: validate firmware patch bounds d573250d22840 net: openvswitch: reject oversized nested action attrs e1f485f5ea8cd regulator: ltc3676: Fix incorrect IRQSTAT bit offsets a02b52fe54f7b wifi: mac80211: fix memory leak in ieee80211_register_hw() eb7474d0253bb wifi: rt2x00: avoid full teardown before work setup in probe 8bf359e2547e8 powerpc/pseries: fix memory leak on krealloc failure in papr_init 87af3ebc112fb pmdomain: imx: Fix i.MX8MP VC8000E power up sequence 5c5d58fff3401 pmdomain: imx: Fix i.MX8MP power notifier 02f67c4f88be8 cgroup/cpuset: rebind mm mempolicy to effective_mems, not mems_allowed 3c693635bb7b3 tracing/osnoise: Call synchronize_rcu() when unregistering b5f92cc4e24a2 riscv: Prevent NULL pointer dereference in machine_kexec_prepare() f16866c626568 drbd: reject data replies with an out-of-range payload size f21fa533a3ed1 macsec: don't read an unset MAC header in macsec_encrypt() 9e36602cbec55 ipvs: reset full ip_vs_seq structs in ip_vs_conn_new 9cb5ac594ca76 ipvs: use parsed transport offset in SCTP state lookup c7881b6088276 llc: fix SAP refcount leak in llc_ui_autobind() b91e5248dd7af mac802154: remove interfaces with RCU list deletion 036bc56610607 s390/monwriter: Reject buffer reuse with different data length 5da5cf48a432e riscv: probes: save original sp in rethook trampoline 76392d35c8df4 hwmon: (asus_atk0110) Check package count before accessing element 2b822df8e498a net: wwan: iosm: bound device offsets in the MUX downlink decoder 566d5bf1e27c8 ata: pata_pxa: Fix DMA channel leak on probe error 07c05601a9a8e orangefs: keep the readdir entry size 64-bit in fill_from_part() 1b7687fc56c9b tracing/probes: Fix double addition of offset for @+FOFFSET 6ee5a7665a908 net/sched: sch_taprio: Replace direct dequeue call with peek and qdisc_dequeue_peeked 86a61e46a1919 net/sched: sch_multiq: Replace direct dequeue call with peek and qdisc_dequeue_peeked 6523daa6852b1 net: lan743x: Initialize eth_syslock spinlock before use ffb13fe1947bc fsl/fman: Free init resources on KeyGen failure in fman_init() e7fd81e9fb1fe hwmon: (occ) unregister sysfs devices outside occ lock b74f293e5f380 net: liquidio: fix BAR resource leak on PF number failure 22f864f7471a5 hwmon: (w83793) remove vrm sysfs file on probe failure 43d49fa630edf hwmon: (w83627hf) remove VID sysfs files on error and remove 22fa00dac08c7 rtc: mpfs: fix counter upload completion condition 5576ee19a6a4a bnx2x: fix potential memory leak in bnx2x_alloc_mem_bp() 54d73f18f8919 espintcp: use sk_msg_free_partial to fix partial send e8a916579e427 LoongArch: Fix missing dirty page tracking in {pte,pmd}_wrprotect() f2423da55976e batman-adv: clean untagged VLAN on netdev registration failure e6640923afee6 batman-adv: ensure minimal ethernet header on TX f19259395b44a batman-adv: retrieve ethhdr after potential skb realloc on RX 29dbd6e27d0f8 net/sched: sch_teql: move rcu_read_lock()/spin_lock() from _bh variants 1fe2643d0b24c ieee802154: ca8210: fix pointer truncation in kfifo on 64-bit b9071dc7889be ieee802154: ca8210: fix cas_ctl leak on spi_async failure 66f3053070c0b ieee802154: allow legacy LLSEC ADD/DEL ops to pass strict validation 5abe94a205539 ieee802154: admin-gate legacy LLSEC dump operations 1d4d8ee002083 net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink 983cc4aa7e6f6 net: ipip: require CAP_NET_ADMIN in the device netns for changelink 33fd93961557e net: ip_vti: require CAP_NET_ADMIN in the device netns for changelink c64b9ae7eb97e net: ip6_vti: require CAP_NET_ADMIN in the device netns for changelink f2ff634d95f8a net: ena: clean up XDP TX queues when regular TX setup fails 2400c4b05d588 net/sched: act_ct: preserve tc_skb_cb across defragmentation fd0b939ebd1ee net: ixp4xx_hss: fix duplicate HDLC netdev allocation fd01247bde1ad net: wwan: t7xx: destroy DMA pool on CLDMA late init failure 388ccffbd2e7e net: sit: require CAP_NET_ADMIN in the device netns for changelink f916210f9d64e gpios: palmas: add .get_direction() op 0ea41686d72f6 gpio-f7188x: Add support for NCT6126D version B 998f66e9ce320 cpu: hotplug: Bound hotplug states sysfs output 7a68257b90d8a cpu: hotplug: Preserve per instance callback errors cff8281bacd28 posix-cpu-timers: Use u64 multiplication in update_rlimit_cpu() 218cc15a4c907 net/mlx5e: macsec: fix use-after-free of metadata_dst on RX SC delete 08bf4b6ee2898 Input: ims-pcu - fix type confusion in CDC union descriptor parsing 129187ec3f868 Input: ims-pcu - fix race condition in reset_device sysfs callback e3f93d63dcd48 Input: ims-pcu - fix potential infinite loop in CDC union descriptor parsing 3fd7c0ace2453 Input: ims-pcu - fix out-of-bounds read in ims_pcu_irq() debug logging 477149c848d40 Input: ims-pcu - fix DMA mapping violation in line setup f7f5afeed31ba Input: ims-pcu - add response length checks aa1885f87e60c Input: ims-pcu - validate control endpoint type ae05b7a600c07 Input: ims-pcu - release data interface on disconnect 6a6c373e6a82e Input: ims-pcu - fix use-after-free and double-free in disconnect 8c689a8f22922 scsi: elx: efct: Fix I/O leak on unsupported additional CDB 62cf39a9770a6 scsi: elx: efct: Fix refcount leak in efct_hw_io_abort() a040004846f1f scsi: target: core: Fix iSCSI ISID use-after-free in REGISTER AND MOVE 6ca5de8782e67 scsi: target: Bound PR-OUT TransportID parsing to the received buffer fa588f2840110 scsi: xen: scsiback: Free unsubmitted command instead of double-putting it 18d4f86816592 scsi: xen: scsiback: Free the command tag on the TMR submit-failure path 5594ee5a2653b scsi: sg: Report request-table problems when any status is set c3f4e40766154 scsi: lpfc: Fix memory leak in lpfc_sli4_driver_resource_setup() a61de4d7e22a9 scsi: hpsa: Fix DMA mapping leak on IOACCEL2 reset path 29b8d12278d20 dm-verity: increase sprintf buffer size 1f04b390add2e dm-verity: fix a possible NULL pointer dereference cf9feed8c131e dm-integrity: don't increment hash_offset twice 259ce9e3fc3a3 dm_early_create: fix freeing used table on dm_resume failure 9964ae466c589 dm-stats: fix merge accounting 04ca47b6768d8 dm-stats: fix dm_jiffies_to_msec64 d05e0edfecf52 dm-log: fix a bitset_size overflow on 32bit machines 29536a9ff146d dm-ioctl: fix a possible overflow in list_version_get_info ae7fac9cb5bb0 dm-bufio: fix wrong count calculation in dm_bufio_issue_discard 7e1822f83c5a1 dm era: fix out-of-bounds memory access for non-zero start sector 3dc9ae1029320 dm thin metadata: fix metadata snapshot consistency on commit failure a887bf1f0de8e dm thin metadata: fix superblock refcount leak on snapshot shadow failure cf419c869e0d0 net: sparx5: unregister blocking notifier on init failure 8b719cef5ac30 bpf: Add missing access_ok call to copy_user_syms c3fd6f28c7ce1 bpf,fork: wipe ->bpf_storage before bailouts that access it f53bdab85e64e can: bcm: add missing rcu list annotations and operations 0f6f9f95294b4 can: bcm: fix lockless bound/ifindex race and silent RX_SETUP failure 4177762f70646 can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF 6280eda96e070 can: isotp: use unconditional synchronize_rcu() in isotp_release() a02e1d8f19132 can: esd_usb: kill anchored URBs before freeing netdevs 7c96581169c9d nvmet-rdma: handle inline data with a nonzero offset a257b41ddfe9e sctp: validate STALE_COOKIE cause length before reading staleness 49f6705d80b5e spi: uniphier: Fix completion initialization order before devm_request_irq() 64b4197d013bf time: Fix off-by-one in compat settimeofday() usec validation 9c513dabd4540 tpm: Make the TPM character devices non-seekable 0084fd985fe28 tpm: fix event_size output in tpm1_binary_bios_measurements_show e9c90756f10da xfrm: xfrm_interface: require CAP_NET_ADMIN in the device netns for changelink 9257c256efa27 xfrm: use compat translator only for u64 alignment mismatch 311011f8cc206 xen/gntdev: fix error handling in ioctl c3f2f080b21f8 ice: fix ice_init_link() error return preventing probe 5290a52533e09 i2c: mlxbf: Fix use-after-free in mlxbf_i2c_init_resource() 6239860c5581f i2c: mediatek: fix WRRD for SoCs without auto_restart option 1f45a48035bdb hwmon: (ltc2992) add missing 'select REGMAP_I2C' to Kconfig b1d16cecefbcd ksmbd: fix integer overflow in set_file_allocation_info() ecf3107bfa717 smb: client: use kvzalloc() for megabyte buffer in simple fallocate 9a14297744686 platform/x86/amd/pmc: Add delay_suspend module parameter b977cfb193aad platform/x86/amd/pmc: Delay suspend for some Lenovo Laptops 1ec0f176f793e platform/x86/amd/pmc: Check for intermediate wakeup in function 3ee0f478bb29b dmaengine: dw-edma: Add spinlock to protect DONE_INT_MASK and ABORT_INT_MASK 8f0f5de109111 dmaengine: tegra: Fix burst size calculation 6b068a97958aa tpm: tpm_tis_spi: Use wait_woken() in wait_for_tmp_stat() 424130169dc03 irqchip/crossbar: Use correct index in crossbar_domain_free() 44c6abf5d823d mtd: maps: vmu-flash: fix NULL pointer dereference in initialization dc341272cf8e1 mtd: spi-nor: swp: Improve locking user experience 0d3766fecd9b2 fpga: microchip-spi: fix zero header_size OOB read in mpf_ops_parse_header() 2b3b4e5ff5a58 net: thunderbolt: Fix frags[] overflow by bounding frame_count 7a563dbb3d8d5 bus: mhi: ep: Protect mhi_ep_handle_syserr() in the error path b2f6220e929b2 fpga: dfl: add bounds check in dfh_get_param_size() 38c1ef7ce50eb ocfs2: reject non-inline dinodes with i_size and zero i_clusters b363e2c77de8e ocfs2: reject dinodes whose i_rdev disagrees with the file type a5b555bcabbb0 ocfs2: reject dinodes with non-canonical i_mode type 7da7e4ac21895 ocfs2: add journal NULL check in ocfs2_checkpoint_inode() f14aaaa130356 ocfs2: fix NULL h_transaction deref in ocfs2_assure_trans_credits e281d892ce587 ocfs2: avoid moving extents to occupied clusters 3da4eb15c7b42 mtd: rawnand: fix condition in 'nand_select_target()' f62a1f245a716 net/9p: fix infinite loop in p9_client_rpc on fatal signal afddc64840351 mtd: rawnand: pl353: fix probe resource allocation 6ab9356517c7b ocfs2: use kzalloc for quota recovery bitmap allocation 17400e4d9dd57 scsi: sas: Skip opt_sectors when DMA reports no real optimization hint e1919423f1b92 scsi: smartpqi: Use shost_to_hba() in pqi_scan_finished() a5a682b016ef5 9p: skip nlink update in cacheless mode to fix WARN_ON 200b8bc5b6065 mtd: slram: remove failed entries from the device list 511a60e71aec3 mm/mm_init: fix uninitialized struct pages for ZONE_DEVICE 31bfda8ca7745 proc: only bump parent nlink when registering directories 50a753171d255 mm/damon/sysfs-schemes: put stats for scheme_add_dirs() internal error a8c0592a80e95 mm/damon/sysfs-schemes: fix dir put orders in access_pattern_add_dirs() 51afb7da697b6 riscv: cacheinfo: Fix node reference leak in populate_cache_leaves 3446ffb5d03c3 mips: sched: Fix CPUMASK_OFFSTACK memory corruption e44ad91e9f75f power: supply: charger-manager: fix refcount leak in is_full_charged() bd77afca2ae9b ntfs3: fix out-of-bounds read in decompress_lznt b232eb5c9fe11 ntfs3: validate split-point offset in indx_insert_into_buffer 53c5f3b2da377 ntfs3: bound to_move in indx_insert_into_root before hdr_insert_head 7ac4c86915c24 ntfs3: cap RESTART_TABLE free-chain walker at rt->used 429d653ca641d fs/ntfs3: bound NTFS_DE view.data_off in UpdateRecordData{Root,Allocation} 96fb64f9da86f fs/ntfs3: add depth limit to indx_find_buffer to prevent stack overflow 57c071e2c4f30 fs/ntfs3: validate lcns_follow in log_replay conversion 546518468e6c9 fs/ntfs3: bound attr_off in UpdateResidentValue against data_off 9b7c28d8c61bd fs/ntfs3: bound copy_lcns dp->page_lcns[] index in analysis pass 4c8aac931c1cd fs/ntfs3: bound DeleteIndexEntryAllocation memmove length af08e689ec260 fs/ntfs3: fix syncing wrong inode on DIRSYNC cross-directory rename c31067bf5c8dc mm/damon/core: make charge_addr_from aware of end-address exclusivity 700c225d829a1 power: supply: cpcap-battery: Fix missing nvmem_device_put() causing reference leak 27857db30c985 MIPS: DEC: Ensure 32-bit stack location for o32 prom_printf() fadd0af657f35 MIPS: ip22-gio: fix device reference leak in probe 22c4c06006721 MIPS: ip22-gio: fix kfree() of static object 9d19995c61977 MIPS: ip22-gio: fix gio device memory leak 65104d6eb43f0 remoteproc: qcom: Fix leak when custom dump_segments addition fails 4a1148f2739d5 SUNRPC: Bound-check xdr_buf_to_bvec() stores before writing 7ce4c23e783e7 lockd: Plug nlm_file refcount leak on cached nlm_do_fopen() failure ddfbd816273b4 lockd: Plug nlm_file leak when nlm_do_fopen() fails 0d8ceb3988414 sunrpc: wait for in-flight TLS handshake callback when cancel loses race f3b55945dd99f sunrpc: pin svc_xprt across the asynchronous TLS handshake callback 0b0d9404951aa nvdimm/btt: Free arena sub-allocations on discover_arenas() error path 5804e6a6912b5 nvdimm/btt: Free arenas on btt_init() error paths fb9b49618ed72 jbd2: fix integer underflow in jbd2_journal_initialize_fast_commit() d141d9b769bcd Bluetooth: SCO: hold sk properly in sco_conn_ready 44a203afaedb4 Bluetooth: SCO: fix sleeping under spinlock in sco_conn_ready 6df7b63afb666 HID: playstation: validate num_touch_reports in DualShock 4 reports 614b6c5ad99c6 mfd: tps6586x: Fix OF node refcount 9015475f766b3 cifs: invalidate cfid on unlink/rename/rmdir 604bd5042fbcd batman-adv: tt: prevent TVLV OOB check overflow d2148aeee9319 batman-adv: frag: fix primary_if leak on failed linearization 740542f11bf8c batman-adv: frag: free unfragmentable packet 5ae95378caa59 batman-adv: fix VLAN priority offset 067e413eec2e6 batman-adv: tt: avoid request storms during pending request ddfea9b5089c7 batman-adv: dat: fix tie-break for candidate selection 3c62694c31f04 batman-adv: dat: ensure accessible eth_hdr proto field ab2bac47a0263 batman-adv: bla: reacquire gw address after skb realloc 3404be97b940a batman-adv: dat: acquire ARP hw source only after skb realloc ed90eb5c68420 batman-adv: access unicast_ttvn skb->data only after skb realloc afac8096bde49 batman-adv: gw: acquire ethernet header only after skb realloc 27206bb57c47b s390/perf_cpum_cf: Add missing array_index_nospec() to __hw_perf_event_init() 5be478c1e0898 perf/x86/amd/lbr: Fix kernel address leakage 7ab30a12b88bf x86/boot: Reject too long acpi_rsdp= values 9a77a7639dfdc x86/boot: Validate console=uart8250 baud rate to fix early boot hang db938eb9a3c13 tools/power/x86/intel-speed-select: Harden daemon pidfile open a3e340d506c10 mfd: sm501: Fix reference leak on failed device registration 8bf529571cca6 leds: uleds: Fix potential buffer overread 30500acfc43ef selinux: fix incorrect execmem checks on overlayfs e507633bf76bc selinux: check connect-related permissions on TCP Fast Open bb29a484dee0b soc: fsl: qe: panic on ioremap() failure in qe_reset() f747a76004dac soc: ti: k3-ringacc: Fix access mode for k3_ringacc_ring_pop_tail_io/proxy edc7267b59a46 gpu: host1x: Fix device reference leak in host1x_device_parse_dt() error path c141f69d0a0fb netfilter: bridge: fix stale prevhdr pointer in br_ip6_fragment() a842dab87cab2 netfilter: xt_nat: reject unsupported target families bca4bfb9cc5c5 netfilter: ecache: fix inverted time_after() check 7bdc3c0985ecf netfilter: nf_conncount: fix zone comparison in tuple dedup cd0d7bbc027b4 netfilter: nf_conntrack_reasm: guard mac_header adjustment after IPv6 defrag 57e4e29644ec0 netfilter: nf_nat_sip: reload possible stale data pointer 3f03a2d225c66 netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst fac2fdac3baad netfilter: xt_cluster: reject template conntracks in hash match 893319e9950d0 netfilter: nfnl_cthelper: apply per-class values when updating policies 2b70f61f569bb netfilter: nf_conntrack_irc: fix parse_dcc() off-by-one OOB read ec369eac0795c ASoC: qcom: q6apm: fix NULL pointer dereference in graph_callback 48b6c39883637 ASoC: mediatek: mt8183: Release reserved memory on cleanup 989cbe8cc86f4 ASoC: mediatek: mt8192: Release reserved memory on cleanup ee781058cd4d7 ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control 1adde1941bba7 ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get 8d16e5bc78478 fbdev: tridentfb: fix potential memory leak in trident_pci_probe() 6ca48f23ce61a fbdev: nvidia: fix potential memory leak in nvidiafb_probe() 124df55c7201d fbdev: vesafb: fix memory leak in vesafb_probe() d21e6747f3f68 fbdev: carminefb: fix potential memory leak in alloc_carmine_fb() dfbb1a695d889 fbdev: tdfxfb: fix potential memory leak in tdfxfb_probe() c53fdf7ee65af fbdev: uvesafb: fix potential memory leak in uvesafb_probe() 0d0fa8425b296 fbdev: s3fb: fix potential memory leak in s3_pci_probe() e1ecbaeec5fbf fbdev: i740fb: fix potential memory leak in i740fb_probe() f4dacbfd885f3 fbdev: radeon: fix potential memory leak in radeonfb_pci_register() 200375909216b fbdev: sm712: Fix operator precedence in big_swap macro 2952767e399e2 fbdev: hecubafb: fix potential memory leak in hecubafb_probe() 4ce94f9e3bfb3 fbdev: broadsheetfb: fix potential memory leak in broadsheetfb_probe() 01708cf3dca2f fbdev: metronomefb: fix potential memory leak in metronomefb_probe() 8e9f7a95279bf KVM: x86: Ignore pending PV EOI if the vCPU has since disabled PV EOIs 3ef3190e30601 KVM: s390: pci: Fix handling of AIF enable without AISB 654be81c4c637 KVM: arm64: vgic: Check the interrupt is still ours before migrating it 6e69317cd44a2 KVM: s390: pci: Fix GISC refcount leak on AIF enable failure 1237c24ea3ceb arm64: dts: qcom: sdm630: describe adsp_mem region properly cedcabcd3c826 arm64: fpsimd: Fix type mismatch in sve_{save,load}_state() 9433578bff9c1 net: ife: require ETH_HLEN to be pullable in ife_decode() 513f820b3f0cf net: atm: reject out-of-range traffic classes in QoS validation d0597074e9973 net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post() 7c6d2d2baeb1e ASoC: SOF: topology: validate vendor array size before parsing 0dce240145f47 ASoC: SOF: ipc3-control: Fix TOCTOU in bytes_put and bytes_get 89a2309a9eec8 ASoC: SOF: ipc3-control: Use overflow checks in control_update size calc 266f936db83ae ASoC: SOF: ipc4-control: Fix TOCTOU in sof_ipc4_bytes_put d7e7c813834c6 vduse: Fix race in vduse_dev_msg_sync and vduse_dev_read_iter 220d41bdce41f mlxsw: fix refcount leak in mlxsw_sp_vrs_lpm_tree_replace() 8b3350eacd9df mlxsw: fix refcount leak in mlxsw_sp_port_lag_join() 160045fc943f6 smb: client: fix overflow in passthrough ioctl bounds check 212c59e5e4168 octeontx2-af: fix VF bringup affecting PF promiscuous state 6c97f394bb15f net/mlx5: Fix L3 tunnel entropy refcount leak 75a59698886cc selftests/net: fix EVP_MD_CTX leak in tcp_mmap 29a7953e9adea regulator: core: regulator_lock_two() should test for EDEADLK not EDEADLOCK 889374b8e4a60 dm era: fix NULL pointer dereference in metadata_open() 79cd550f8c884 SUNRPC: pin upper rpc_clnt across the TLS connect_worker ce4d29a99878c SUNRPC: release lower rpc_clnt if killed waiting for XPRT_LOCKED d64b6be5740ce cifs: validate DFS referral string offsets 25e7c0fc304bd s390/zcrypt: Remove the empty file 9bc9b95aee2b2 ipvs: ensure inner headers in ICMP errors are in headroom accee8e53a760 ipvs: fix PMTU for GUE/GRE tunnel ICMP errors d45f73c274435 ipvs: use parsed transport offset in TCP state lookup 946e09454b1a0 ipvs: pass parsed transport offset to state handlers 9815e834f5ff8 ipv6: mcast: Fix potential UAF in MLD delayed work 8374a462c74ec ipv6: mcast: Replace locking comments with lockdep annotations. 40a1e998cb266 ipv4: igmp: Fix potential UAF in igmp_gq_start_timer() 75a7e03ad7336 octeontx2-pf: check DMAC extraction support before filtering 336c1e414fc0e net/sched: cake: reject overhead values that underflow length ff431529d3773 net: usb: lan78xx: disable VLAN filter in promiscuous mode 0e75abbc36ed1 net: usb: lan78xx: move functions to avoid forward definitions 0867b0f2513eb net/tls: Consume empty data records in tls_sw_read_sock() dbcb8635b1eb7 ring-buffer: Fix event length with forced 8-byte alignment f80b4afe893df Bluetooth: bpa10x: avoid OOB read of revision string in bpa10x_setup() 85f5e3a9885a3 Bluetooth: ISO: exclude RFU bits from ISO_SDU_Length 5aabbd01ac315 Bluetooth: MGMT: Fix adv monitor add failure cleanup ba1f1ef6522e6 Bluetooth: 6lowpan: hold L2CAP conn across debugfs control dd54267a70e32 amt: fix size calculation in amt_get_size() 647b19e5cc145 net/smc: fix UAF in smc_cdc_rx_handler() by pinning the socket 0d8532a5e972a net/sched: act_pedit: fix TOCTOU heap OOB write in tc offload 3868c3244369a net: qualcomm: rmnet: validate MAP frame length before ingress parsing 0bf78df2d3ecb qede: fix off-by-one in BD ring consumption on build_skb failure 786456d0a244b net: microchip: vcap: fix races on the shared Super VCAP block 24c77044cdfcf net/mlx5e: Fix HV VHCA stats agent registration race 5b927dcec5f10 net/mlx5e: Fix HV VHCA stats zero-sized buffer allocation 8ace320ac4416 netfilter: xt_connmark: reject invalid shift parameters 2fd89a50a9783 netfilter: ip6tables: mark malformed IPv6 extension headers for hotdrop 5da915fc159c6 netfilter: xt_rateest: fix u64 truncation in xt_rateest_mt() 0a8b7a6d76377 netfilter: xt_u32: reject invalid shift counts 2a99224c12082 gue: validate REMCSUM private option length 685e92934f11d net: usb: net1080: validate packet_len before pad-byte access in rx_fixup 6a3e06f1d1185 selftests/hid: Cover hid_bpf_get_data() size overflow 56558ef8eb2f8 selftests/hid: convert the hid_bpf selftests with struct_ops 4dee51c96e870 selftests/hid: force using our compiled libbpf headers b52c523eb8fc9 selftests/hid: do not manually call headers_install 75e9e9f1bc6ca selftests/hid: ensure we can compile the tests on kernels pre-6.3 6a10e76a56f81 arm64/mm: Optimize TLB flush in unmap_hotplug_[pmd|pud]_range() 33833e83cf552 arm64/mm: convert ptep_clear() to ptep_get_and_clear() 3be7e80fc59b2 arm64/mm: convert set_pte_at() to set_ptes(..., 1) 3ea68f5ec9bfe arm64/mm: convert READ_ONCE(*ptep) to ptep_get(ptep) c973d53bcd420 HID: core: Fix OOB read in hid_get_report for numbered reports a02d5d7ad7ae5 HID: picolcd: prevent NULL pointer dereference in picolcd_send_and_wait() 9eae03f0df96b ata: sata_gemini: unwind clocks on IDE pinctrl errors a11ebaab50d27 minix: avoid overflow in bitmap block count calculation 598f8ba4e8818 afs: Fix unchecked-length string display in debug statement 1607075220cf5 afs: Fix the volume AFS_VOLUME_RM_TREE is set on bef5514f6b6cb afs: Fix vllist leak 5a39b145a8fb4 afs: Fix callback service message parsers to pass through -EAGAIN ac428553b5a3d afs: use kvfree() to free memory allocated by kvcalloc() 9ad9016e3333c afs: Fix error code in afs_extract_vl_addrs() bac8fb0d60254 fs: refuse O_TMPFILE creation with an unmapped fsuid or fsgid d3b5adfa2f008 net/sched: hhf: clear heavy-hitter state on reset fb64c5a232808 pinctrl: meson: restore non-sleeping GPIO access 1bc19683c8bbb gpio: timberdale: Return -ENOMEM on dynamic memory allocation in probe fb978d7205270 ksmbd: fix use-after-free of fp->owner.name in durable handle owner check 515195c5e508c smb: move some duplicate definitions to common/cifsglob.h 16fb65ec15fe7 ksmbd: reject undersized DACLs before parsing ACEs 17efa598efd94 net/sched: act_bpf: use rcu_dereference_bh() to read the filter d04abfe08e4f8 cxgb4: Fix decode strings dump for T6 adapters 97cc510eafb6e virtio_net: disable cb when NAPI is busy-polled e6b674dc341c6 irqchip/ts4800: Fix missing chained handler cleanup on remove 57a48d17a789c irqchip/gic-v3-its: Fix OF node reference leak 284928533c7ed tracing: eprobe: read the complete FILTER_PTR_STRING pointer 63d5fd8f5e2db tracing/events: Fix to check the simple_tsk_fn creation 4c40eec06eeac bridge: stp: Fix a potential use-after-free when deleting a bridge 735567bde7401 net/sched: sch_teql: Introduce slaves_lock to avoid race condition and UAF e8c714acf5573 net: gianfar: dispose irq mappings on probe failure and device removal d2c37f26d1a37 net: phy: sfp: free mii_bus in sfp_i2c_mdiobus_destroy 573418f7ea8f8 usbnet: gl620a: fix out-of-bounds read in genelink_rx_fixup() 2106bf4056858 hwmon: (pmbus) Fix passing events to regulator core 39a581bd64a0e hwmon: adm1275: Prevent reading uninitialized stack 8c693f988ce1b MIPS: DEC: Ensure RTC platform device deregistration upon failure dcb0940c3df1e sctp: fix SCTP_RESET_STREAMS stream list length limit f55276160ffad net: enetc: check the number of BDs needed for xdp_frame e30af53dca803 qede: fix out-of-bounds check for cqe->len_list[] 804bb969f194c seg6: validate SRH length before reading fixed fields a05c848a94bbc gpio: htc-egpio: use managed gpiochip registration f0320c623f4d4 gpio: mvebu: fail probe if gpiochip registration fails 0567b5bcbd793 spi: sh-msiof: abort transfers when reset times out edce0203a4fc0 tracing: probes: fix typo in a log message cde84429e0fae dt-bindings: net: renesas,ether: Drop example "ethernet-phy-ieee802.3-c22" fallback d805c95580b23 ASoC: fsl_asrc_dma: fix eDMA maxburst misalignment with channel count 1596d8ecb6680 net: ethernet: sunplus: spl2sw: fix phy_node refcount leak in remove a63eaf7605d15 net: sungem: fix probe error cleanup be626ac1faadd net: mvneta: re-enable percpu interrupt on resume aa6e2b431070b rtc: cmos: unregister HPET IRQ handler on probe failure ebe5ad5937dbc rtc: ds1307: Fix off-by-one issue with wday for rx8130 0d6d5194d9bba smb/client: preserve errors from smb2_set_sparse() ea8e946b09baf ipv6: fix error handling in disable_policy sysctl 2474255868717 ipv6: fix error handling in forwarding sysctl 7469cebbd8107 ipv6: fix error handling in ignore_routes_with_linkdown sysctl bcf9266fc3cd1 ipv6: fix error handling in disable_ipv6 sysctl 447d493034a9c net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle 83090f5e7b547 veth: fix NAPI leak in XDP enable error path fc62bfd30d30a net: dsa: sja1105: round up PTP perout pin duration 3876318ea54e8 net, bpf: check master for NULL in xdp_master_redirect() bd9e5220ffb15 alpha/PCI: Fix __pci_mmap_fits() overflow for zero-length BARs 4de5ff924c0a8 alpha/PCI: Add security_locked_down() check to pci_mmap_resource() 4e5ed2a7dda54 NTB: epf: Fix doorbell bitmask and IRQ vector handling 3fb009699812a NTB: epf: Report 0-based doorbell vector via ntb_db_event() ba1a84de32848 NTB: epf: Make db_valid_mask cover only real doorbell bits efc17b9240d82 netfilter: nft_compat: ebtables emulation must reject non-bridge targets 1655ca28c5b6d netfilter: nft_synproxy: stop bypassing the priv->info snapshot abef7f817217f netfilter: nf_conncount: prevent connlimit drops for early confirmed ct 87f7a720de254 netfilter: nf_nat: avoid invalid nat_net pointer use on failed nf_nat_init() 6b44c6660aa1c bpf: Disable xfrm_decode_session hook attachment b3b4719429d5c bpf, lsm: Add disabled BPF LSM hook list 49eaf14032013 ipv4: fib: Don't ignore error route in local/main tables. 302d57ed78728 ipv6: Fix null-ptr-deref in fib6_nh_mtu_change(). 7470511d085af ksmbd: fix use-after-free of conn->preauth_info in concurrent SMB2 NEGOTIATE 52c73b6992b46 rtc: msc313: fix NULL deref in shared IRQ handler at probe 3186a301d65d5 i40e: Fix i40e_debug() to use struct i40e_hw argument d662269211c49 ice: fix AQ error code comparison in ice_set_pauseparam() 335c2dd21ad9d ice: fix FDIR CTRL VSI resource leak in ice_reset_all_vfs() 2465d1bdf84e0 PCI: endpoint: pci-epf-ntb: Add check to detect 'db_count' value of 0 014dd1c8617ba PCI: endpoint: pci-epf-vntb: Add check to detect 'db_count' value of 0 bfa05d89dc3ca drm/edid: fix OOB read in drm_parse_tiled_block() 525e408c27ae7 bpf: Fix effective prog array index with BPF_F_PREORDER 9fe373020cc9d bpf: zero-initialize the fib lookup flow struct 475405593de2b bpf: Fix stack slot index in nospec checks 48c16ed988790 rtc: ds1307: handle oscillator stop flag for ds1337/ds1339/ds3231 429025d25ac24 rtc: abx80x: fix the RTC_VL_CLR clearing all status flags e88b1ff95f2ed octeontx2-pf: mcs: Fix mcs resources free on PF shutdown ab9c0b007c7fd octeontx2-pf: Clear stats of all resources when freeing resources 9ab0fb5758cbb octeontx2-af: mcs: Fix unsupported secy stats read 754dfaddde3a1 net: ethernet: mtk_ppe: Fix rhashtable leak in mtk_ppe_init error paths 5e215bf1c47fd tipc: fix use-after-free of the discoverer in tipc_disc_rcv() a07f77e995a63 net: marvell: prestera: initialize err in prestera_port_sfp_bind c6edb7532c8e7 selftests/mm: fix exclusive_cow test fork() handling 75ec9461a4623 selftests/mm: allow PUD-level entries in compound testcase of hmm tests 04dfc21465992 selftests/mm: clarify alternate unmapping in compaction_test b508e7542d683 irqchip/crossbar: Fix parent domain resource leak f73b7de5338fc netfilter: nft_meta_bridge: fix NFT_META_BRI_IIFPVID stack leak 76d1bc5498c72 netfilter: nf_reject: skip iphdr options when looking for icmp header d01b4b471f0fc netfilter: ipset: fix order of kfree_rcu() and rcu_assign_pointer() 6329d3a9afe71 netfilter: ipset: Don't use test_bit() in lockless RCU readers in hash types 28642b1420f27 netfilter: ipset: annotate "pos" for concurrent readers/writers bead63993e05e netfilter: ipset: Fix data race between add and dump in all hash types c66ed3e6371f5 md/raid1: free r1_bio when REQ_NOWAIT is set and read would block on retry 71b5add66c51d ieee802154: fix kernel-infoleak in dgram_recvmsg() ded58bfebcb32 ieee802154: Remove WARN_ON() in cfg802154_pernet_exit() e74488982ecfd ACPI: IPMI: Fix inverted interface check in ipmi_bmc_gone() e3987bc539630 ACPI: resource: Amend kernel-doc style e432404e63edd thermal: intel: Fix dangling resources on thermal_throttle_online() failure 79417b08f747d arm64/hw_breakpoint: reject unaligned watchpoints that would truncate BAS bcdd5a7363bdd ALSA: usb-audio: Kill MIDI 2.0 URBs before freeing endpoints 9a65860959db5 flow_dissector: check device type before reading ETH_ADDRS f104794507099 devlink: Fix parent ref leak in devl_rate_node_create() 0ce4f958ddeb8 dpaa2-switch: fix VLAN upper check not rejecting bridge join 38e94d63e29f4 virtio-net: fix len check in receive_big() 154e29d0c6a23 spi: rpc-if: Use correct device for hardware reinitialization on resume e58aef585d173 PCI: iproc: Restore .map_irq() for the platform bus driver 722576aba0a6d sctp: hold socket lock when dumping endpoints in sctp_diag befe1ebe7fc2c net: psample: fix info leak in PSAMPLE_ATTR_DATA 19d2d36e193c3 octeontx2-pf: Fix leak of SQ timestamp buffer on teardown cfbffc8091f51 drm/amdgpu: initialize irq.lock spinlock earlier 506e635aed05d drm/amdkfd: fix list_del corruption in kfd_criu_resume_svm 283e77af49fda drm/amdkfd: Avoid double-unpin of DOORBELL/MMIO BOs on free a6d0abb35052c ASoC: tlv320aic3x: restrict CLKDIV bypass Q values in dual-rate mode efa9e3b9f3dea xfrm: validate selector family and prefixlen during match a1c6d68ddee37 xfrm: annotate data-races around xfrm_policy_count[] and xfrm_policy_default[] be8cdef5c93d5 xfrm: Support crypto offload for inbound IPv6 ESP packets not in GRO path 22d554d9ba241 xfrm: Use the XFRM_GRO to indicate a GRO call on input cb4f93bdade99 spi: dw: fix wrong BAUDR setting after resume 6564da2814a79 gpio: mlxbf3: fail probe if gpiochip registration fails e1a215900d2ed sparc: led: avoid trimming a newline from empty writes 5feaaa1d34b29 apparmor: fix label can not be immediately before a declaration b8e89081a97b6 i3c: master: Prevent reuse of dynamic address on device add failure 07fea242a8942 apparmor: put secmark label after secid lookup 58817bf37ccc4 apparmor: aa_getprocattr free procattr leak on format failure 5cba148eae6e8 apparmor: fix potential UAF in aa_replace_profiles 5acb878db4132 apparmor: grab ns lock and refresh when looking up changehat child profiles 6a26de6c05542 apparmor: fix rawdata_f_data implicit flex array cc2192899d502 apparmor: aa_label_alloc use aa_label_free on alloc failure b7c45c05a396a apparmor: check label build before no_new_privs test 79d80d70b03d1 security/apparmor/apparmorfs.c: conditionally compile get_loaddata_common_ref() 6848ca381edff Revert "PCI/MSI: Unmap MSI-X region on error" 2e605bef29e09 PCI: mediatek: Use actual physical address instead of virt_to_phys() 26b30daf73ae8 PCI: mediatek: Fix possible truncation in mtk_pcie_parse_port() b3c60e4f962dd tools lib api: Fix mount_overload() snprintf truncation and toupper range bd0a73192c3a9 tools lib api: Fix filename__write_int() writing uninitialized stack data 20a17dd8a0c7e tools lib api: Fix missing null termination in filename__read_int/ull() 05457b1241d74 xprtrdma: Return sendctx slot after Send preparation failure 4322fd9645ee7 xprtrdma: Repost Receive buffers for malformed replies 4163424214017 xprtrdma: Sanitize the reply credit grant after parsing 88b5346284a18 xprtrdma: Fix bcall rep leak and unbounded peek e967e82e372f4 xprtrdma: Resize reply buffers before reposting receives 2b84ff4da343b xprtrdma: Document and assert reply-handler invariants dd798b76a3481 xprtrdma: Check frwr_wp_create() during connect 65a04db641fdb PCI: rcar-host: Remove unused LIST_HEAD(res) 2097a2537d9d1 fs/ntfs3: resize log->one_page_buf when adopting on-disk page size 018359b048c4c PCI: meson: Propagate devm_add_action_or_reset() failure b0c5bc5068f8c PCI: mediatek: Fix operator precedence in PCIE_FTS_NUM_L0 macro 4bc7e5c789b62 NFSv4/flexfiles: honor FF_FLAGS_NO_IO_THRU_MDS in pg_get_mirror_count_write 502b282f2f452 NFSv4/flexfiles: honor FF_FLAGS_NO_IO_THRU_MDS on fatal DS connect errors c31ce9fd8b349 nfs: keep PG_UPTODATE clear after read errors in page groups 02e00663846b2 NFSv4/pnfs: defer return_range callbacks until after inode unlock 9f3d9b68c1c6c xprtrdma: Decouple req recycling from RPC completion d006a5fb63b92 xprtrdma: Use sendctx DMA state for Send signaling d1b159356a358 xprtrdma: Post receive buffers after RPC completion 9d17e2618037d xprtrdma: Close lost-wakeup race in xprt_rdma_alloc_slot b7070614baeba xprtrdma: Avoid 250 ms delay on backlog wakeup e253e1a0b360e xprtrdma: Remove temp allocation of rpcrdma_rep objects b6c4002122573 pNFS/filelayout: fix cheking if a layout is striped a64d70d5e33f8 clk: qcom: a53: Corrected frequency multiplier for 1152MHz 5876f38b67a30 dmaengine: Fix possible use after free 98cc38b541014 dmaengine: qcom: gpi: set DMA_PRIVATE capability ba8b410c7c4f6 perf: Fix off-by-one stack buffer overflow in kallsyms__parse() b67a3bcc1cb49 dmaengine: imx-sdma: Refine spba bus searching in probe bca364c4c7579 drm/amd/display: Add missing kdoc for ALLM parameters 914a77aa7a24e fs/ntfs3: fix mount failure on 64K page-size kernels 8afc24a884aff fs/ntfs3: add bounds check to run_get_highest_vcn() 6c63a4ed26927 HID: logitech-hidpp: remove excess kernel-doc member in hidpp_scroll_counter eda31b3b90f15 clk: at91: keep securam node alive while mapping it 8ac30431ca7e4 iio: tcs3472: power down chip on probe failure eed69f8a10b82 iio: accel: mma8452: handle I2C read error(s) in mma8452_read() 94d158985b6ea iio: adc: xilinx-ams: fix out-of-bounds channel lookup in event handling 8cf3460745333 iio: magnetometer: ak8975: fix potential kernel stack memory leak 922e9be5c41a2 iio: light: si1133: prevent race condition on timeout 4799162324a84 iio: light: si1133: reset counter to prevent race condition 764723bd67a6c char: tlclk: fix use-after-free in tlclk_cleanup() 2bb0cfa1392c3 usb: host: max3421: Reject hub port requests for non-existent ports d512bdefd241b usb: host: max3421: Fix shift-out-of-bounds in max3421_hub_control() 4928096212b78 staging: most: video: avoid double free on video register failure e519c1d8c5efb mailbox: mtk-adsp: fix UAF during device teardown 9c55eb9a0f6f4 phy: phy-can-transceiver: Check driver match and driver data against NULL 4d6628c106697 bus: mhi: ep: Fix potential deadlock in mhi_ep_reset_worker() 78a0d1fa5d7a3 PCI: loongson: Do not ignore downstream devices on external bridges f67b187af7493 platform/x86: xo15-ebook: Fix wakeup source and GPE handling 37b43903ef0f0 x86/platform/olpc: xo15: Drop wakeup source on driver removal 4997873e3abba PCI: Check ROM header and data structure addr before accessing 01b03bc88bd8d PCI: Introduce named defines for PCI ROM a397bf58445ff PCI/ASPM: Don't reconfigure ASPM entering low-power state d887844028cd6 coresight: etm4x: Correct TRCVMIDCCTLR1 save and restore 66433aca6e806 coresight: cti: Fix DT filter signals silently ignored 08626fcfe1230 staging: nvec: fix use-after-free in nvec_rx_completed() 8aadc136d8e8d net/9p: fix race condition on rdma->state in trans_rdma.c 49b34bd3ad696 ocfs2: fix circular locking dependency in ocfs2_dio_end_io_write 2ce02059ceb63 mfd: cs42l43: Sanity check firmware size 7c3264d273d52 ksmbd: fix use-after-free in same_client_has_lease() 179966099aa10 ionic: Fix check in ionic_get_link_ext_stats 572fff10819df tcp: ipv6: clamp default adverting MSS to avoid GSO_BY_FRAGS (0xFFFF) 50ff092633b06 tipc: fix UAF in tipc_l2_send_msg() 00cd01ea0cf53 KEYS: Use acquire when reading state in keyring search 55d0edf94c19c powerpc/kexec: fix double get_cpu() imbalance in kexec_prepare_cpus 7c75878359bd2 powerpc/powernv: fix preempt count leak in pnv_kexec_wait_secondaries_down 5397142d60aa2 powerpc/perf: fix preempt count underflow in fsl_emb_pmu_del ac7385af1dca8 MIPS: mm: Fix out-of-bounds write in maar_res_walk() c05a0ec1cdced bpf, sockmap: fix integer overflow in bpf_msg_pop_data() bounds check 888706a76286c bpf, sockmap: reject overflowing copy + len in bpf_msg_push_data() 5c5fccbcf3e1c bpf: Fix bpf_get/setsockopt to tos for ipv4-mapped ipv6 socket 98219ce3e1c96 selftests/bpf: Initialize operation name before use 6fb80feea3099 smb/client: always return a value for FS_IOC_GETFLAGS 4465ebe67d893 cifs: remove all cifs files before kill super 3ff31b83aacf2 ALSA: core: Fix unintuitive behavior of snd_power_ref_and_wait() 68d0415c16e5e netfilter: nf_conncount: callers must hold rcu read lock b8c90823cdfb5 kcm: use WRITE_ONCE() when changing lower socket callbacks 498a667dc9542 net: bcmgenet: Use weighted round-robin TX DMA arbitration 7edd4db82f942 net: wwan: t7xx: check skb_clone in control TX 8d654fa6ebf45 net/mlx5: Check max_macs devlink param value against max capability b6dced2150081 bpf: Run generic devmap egress prog on private skb 637639118ef33 net: mana: guard TX wq object destroy with INVALID_MANA_HANDLE check 8e52a247d9aa9 net: mana: initialize gdma queue id to INVALID_QUEUE_ID e8c6dbadf139c net/sched: sch_codel: Do not call qdisc_tree_reduce_backlog during peek before restoring qlen acc08a0c7f37e net/sched: sch_fq_codel: Do not call qdisc_tree_reduce_backlog during peek before restoring qlen 25fb53e43ec00 handshake: Require admin permission for DONE command 23a29ee1d9de3 power: supply: core: fix supplied_from allocations 820a87639e9aa ASoC: adau1372: Clear PLL_EN on failed PLL lock without reset GPIO dfab0d4698a64 spi: xilinx: use FIFO occupancy register to determine buffer size cbc2fcf580882 crypto: rng - Free default RNG on module exit 8afd1007ef798 crypto: cavium/cpt - fix DMA cleanup using wrong loop index ed374dbc70c10 crypto: marvell/octeontx - fix DMA cleanup using wrong loop index 66bdbb8e6c5c8 cxl/test: Add check after kzalloc() memory in alloc_mock_res() f1715d92ee309 tipc: reject inverted service ranges from peer bindings 47ed873e4ceda tipc: prevent snt_unacked underflow on CONN_ACK 9b937de4b3ded tipc: require net admin for TIPCv2 netlink mutators b2a017bfcf565 net/sched: sch_hfsc: Don't make class passive twice 85f54cf589163 sctp: validate embedded address parameter length 53788b134519e bridge: cfm: reject invalid CCM interval at configuration time a7ef30753353b net: fib_rules: Don't dump dying fib_rule in fib_rules_dump(). 3d05400186027 net/sched: cls_flow: Dont expose folded kernel pointers 4bcb23635d505 ASoC: tegra: tegra210_ahub: Validate written enum value 0b10c6203e62d ASoC: fsl: fsl_audmix: Validate written enum values 8cbf24714d6b3 ASoC: codecs: hdac_hdmi: Validate written enum value aabfc845838ef RDMA/mlx5: Release the HW‑provided UAR index rather than the SW one 6fc874fdfb366 RDMA/mlx5: Fix undefined shift of user RQ WQE size 87262e60adfe1 RDMA/mlx5: Remove raw RSS QP restrack tracking 60fa67263a772 fs: efs: remove unneeded debug prints 41d3e5526fcd6 Bluetooth: vhci: validate devcoredump state before side effects 290b36f9d1eb9 Bluetooth: hci: validate codec capability element length 809230cc25dde Bluetooth: hci_qca: fix NULL pointer dereference in qca_dmp_hdr() for non-serdev device b43dee28b7c81 s390/process: Fix kernel thread function pointer type eb73056ce2a6f bpf: Tighten cgroup storage cookie checks for prog arrays b0dbe5f70ee8d of: cpu: add check in __of_find_n_match_cpu_property() 7f10e0f35ac1d cxl/test: Zero out LSA backing memory to avoid leaking to user 0101d4000a124 cxl/test: Fix integer overflow in mock LSA bounds checks 2a0ee19de6e89 selftests/bpf: Fix bpf_iter/task_vma test 260830a9a706f ext4: fix kernel BUG in ext4_write_inline_data_end 015e32e264a9b bonding: 3ad: fix mux port state on oper down 3c75cd8e68f1f ASoC: cs35l56: Don't leave parent IRQ disabled if system_suspend fails b72d5d2d8fe76 ASoC: cs35l56: Fix missing calls to wm_adsp2_remove() 67fb36b508ce7 tools/virtio: check mmap return value in vringh_test 6445b945024f4 vhost/net: complete zerocopy ubufs only once f8e1f130689a2 vduse: Requeue failed read to send_list head 2b3f79b90b231 vhost/vdpa: validate virtqueue index in mmap and fault paths 93ed4692f2299 vduse: hold vduse_lock across IDR lookup in open path dbc63fe645f09 ASoC: codecs: aw88261: fix incorrect masks for boost regs a28ad91dc5d80 spi: meson-spifc: fix runtime PM leak on remove 407472df02dba IB/mlx4: Fill in the access_flags if IB_MR_REREG_ACCESS is not specified fcce8a44dfa39 btrfs: zoned: don't account data relocation space-info in statfs free space 5a15f8d87a007 hwmon: (it87) Clamp negative values to zero in set_fan() b2ff450f7f5cf fbdev: sm501fb: Fix buffer errors in OF binding code 015dc4a1e0c2c btrfs: fix invalid pointer dereference in __btrfs_run_delayed_refs() 06010aab6ec04 wifi: mt76: mt7921: fix potential tx_retries underflow d42f6f25211a4 wifi: mt76: mt7915: fix potential tx_retries underflow e93b18ddc18a2 wifi: mt76: fix argument to ieee80211_is_first_frag() 66f21eecda2a2 sched/fair: Fix cpu_util runnable_avg arithmetic 6abaa8ec1b986 hwspinlock: qcom: avoid uninitialized struct members af71c2b88ccae vmalloc: fix NULL pointer dereference in is_vm_area_hugepages() 310958030dc02 pinctrl: mediatek: mt8167: Fix Schmitt trigger register offset of pins 34-39 9f56b6dbefa85 pinctrl: mediatek: mt8516: Fix Schmitt trigger register offset of pins 34-39 8c888a062c6de scsi: target: Remove tcm_loop target reset handling 0165403da5086 scsi: target: Fix hexadecimal CHAP_I handling 89184909634e5 watchdog: unregister PM notifier on watchdog unregister 9e57e2863872e configfs: fix lockless traversals of ->s_children 38149b57427c7 firmware_loader: Fix recursive lock in device_cache_fw_images() 43c9646d98a04 spi: ep93xx: fix double-free of zeropage on DMA setup failure 94f7e50eb6b2c IB/mlx5: Properly support implicit ODP rereg_mr 52d0e6527716f IB/mlx5: Don't take the rereg_mr fallback without a new translation 2bc08fe88e578 cpufreq: Documentation: fix conservative governor freq_step description e67b984f8c142 ACPI: IPMI: Fix message kref handling on dead device e0c3edd864145 ALSA: seq: Clear variable event pointer on read dba54c80f86eb riscv: stacktrace: Remove bogus -0x4 offset in non-FP walk_stackframe 32b482fbda6b5 ALSA: seq: Fix partial userptr event expansion c07aa0534d503 wifi: wcn36xx: fix OOB read from short trigger BA firmware response 64228dfc4247a wifi: wcn36xx: fix OOB read from firmware count in PRINT_REG_INFO indication cfc67aee0c83e wifi: wcn36xx: fix heap overflow from oversized firmware HAL response 5e630134d11d4 bpf: Update transport_header when encapsulating UDP tunnel in lwt 1bfabe51760db bpf: Check tail zero of bpf_prog_info f8ab1c1bf42ee arm64: dts: tqma8mpql-mba8mpxl: configure sai clock in audio codec as well 3982121730f91 RDMA/irdma: Initialize iwmr->access during MR registration ad360a31092a8 RDMA/irdma: Fix OOB read during CQ MR registration 9b82054dfe69a IB/cm: Fix av cm device leak on an error path in cm_init_av_by_path() c121473586603 netfilter: conntrack: call nf_ct_gre_keymap_destroy() if master helper is pptp 6bba4846f196d netfilter: conntrack: revert ct extension genid infrastructure 8d86b4041d219 netfilter: synproxy: protect nf_ct_seqadj_init() with conntrack lock cc5d7dadb6d87 netfilter: nfnetlink_osf: fix mss parsing on big-endian architectures f38fb17c8758e ocfs2: fix race between ocfs2_control_install_private() and ocfs2_control_release() aa7883b6a3c76 ocfs2/dlm: require a ref for locking_state debugfs open 346314bb0cc2f ocfs2: reject FITRIM ranges shorter than a cluster ecb3f9386f435 ocfs2: fix buffer head management in ocfs2_read_blocks() 6b38a5b8ee951 ocfs2: rebase copied fsdlm LVB pointers in locking_state a97a5f842c68f perf/x86/amd/core: Always use the NMI latency mitigation c35dce681145f bpftool: Use libbpf error code for flow dissector query 71323880be792 drm/amdgpu: set sub_block_index for mca ras sub-blocks eee07d769da5a configfs_lookup(): don't leave ->s_dentry dangling on failure b0799d03b709f lib/test_meminit: use && for bools e8bbcc00760df sched: restore timer_slack_ns when resetting RT policy on fork 8990dbb7065b0 ext2: fix ignored return value of generic_write_sync() 4af4f0b04964a mm/fake-numa: fix under-allocation detection in uniform split c70d0f9114c3c bpf: fix UAF by restoring RCU-delayed inode freeing in bpffs 10e05b5ff05ce scsi: ufs: Fix wrong value printed in unexpected UPIU response case 4f944acca6379 scsi: pm8001: Fix error code in non_fatal_log_show() da4853eb4616f scsi: Revert "scsi: Fix sas_user_scan() to handle wildcard and multi-channel scans" 73e35c1bdfa16 nvdimm/btt: Handle preemption in BTT lane acquisition c225bb49c697f ARM: imx31: Fix IIM mapping leak in revision check ddab66c9a90d6 ata: libata: Fix ata_exec_internal() 21b8e6afbd1bb HID: wiimote: Fix table layout and whitespace errors 7eb7c42ec4930 ARM: imx3: Fix CCM node reference leak 93bc5642fbda3 ASoC: rsnd: Fix RSND_SOC_MASK width to single nibble 70b1c71b1fdfb ext4: fix LOGFLUSH shutdown ordering to allow ordered-mode data writeback ce3030e92f143 md/raid10: reset read_slot when reusing r10bio for discard 964a44a990d61 rpmsg: use generic driver_override infrastructure 04c18c43d250e media: qcom: venus: relax encoder frame/blur step size on v6 061a2f302fc50 media: qcom: venus: relax encoder frame/blur dimension steps on v4 c4f0846d1d246 media: qcom: venus: drop extra padding in NV12 raw size calculation fc72fd61cc8b2 RDMA/rxe: Copy WQE to local buffer in non-SRQ receive path cd19a6345e372 RDMA/rxe: Fix TOCTOU heap overflow in get_srq_wqe 0c16d7c01284a EDAC/{skx_common,skx}: Fix UBSAN shift-out-of-bounds in skx_get_dimm_info 01623d834b5e8 drm/msm/dp: Fix the ISR_* enum values fee0e0eefcd41 drm/msm/dp: fix HPD state status bit shift value 86145b5c5a7c2 crypto: hisilicon/qm - disable error report before flr cc7d67197c51a ocfs2: kill osb->system_file_mutex lock b460f8d01a120 ocfs2: don't BUG_ON an invalid journal dinode acd54f42abbbd rapidio/tsi721: prevent a bad dereference in tsi721_db_dpc() d47b0b8a69a13 dax/kmem: account for partial discontiguous resource upon removal ca06e163e5181 libbpf: Fix UAF in strset__add_str() fb203d0e21dc0 libbpf: Harden parse_vma_segs() path parsing 9980c66ad2d4f drm/nouveau/bios: specify correct display fuse register for Ampere and Ada 13d9e73955c91 drm/tegra: Fix iommu_map_sgtable() return value check 3ac173e46ef6f gpu: host1x: Fix iommu_map_sgtable() return value check 3d211fb43a04e drm/tegra: dc: Fix device node reference leak in tegra_dc_has_output() 71c017b3f83ff gpu: host1x: Allow entries in BO caches to be freed 4b731af227c69 drm/tegra: gr2d/gr3d: Contain PM in the gr*d_probe/gr*d_remove 6e22d5ad61cfa drm/tegra: gr2d/gr3d: Initialize address register map before HOST1X client is registered 4a76953c3ed04 net/sched: cls_bpf: prevent unbounded recursion in offload rollback 1e3db30a88815 ipv6: guard against possible NULL deref in __in6_dev_stats_get() ec2644cc69e14 workqueue: drop spurious '*' from print_worker_info() fn declaration 9ffdd11bd6c96 nvme-multipath: fix flex array size in struct nvme_ns_head 2f7c245d4601d pinctrl: cs42l43: Fix polarity on debounce 936641af564c3 ALSA: seq: midi: Serialize output teardown with event_input 82d6a87de7843 mtd: spi-nor: Drop duplicate Kconfig dependency 5b36ed8cc78f5 mips: n64: add __iomem for writel call 9291ea4dc7b05 mips: ralink: mt7621: add missing __iomem 17f5de95069b8 MIPS: DEC: Remove do_IRQ() call indirection f3d1b0c22466f MIPS: Fix big-endian stack argument fetching in o32 wrapper 59096e2aa0f66 PM: sleep: Use complete() in device_pm_sleep_init() a22346dc47b02 RDMA/counter: Fix incorrect port index in rdma_counter_init() error cleanup a075a7acd155f RDMA/hns: Fix warning in poll cq direct mode 1035807ed1aba IB/mlx4: Fix refcount leak in add_port() error path 665fb7d22a700 RDMA/rxe: Fix a use-after-free problem in rxe_mmap 9f8f0d2099e3d RDMA/irdma: Fix out-of-bounds write in irdma_copy_user_pgaddrs b0c4c1d8d42f4 bus: sunxi-rsb: Always check register address validity 5ff037ec8b5e9 pwm: imx27: Fix variable truncation in .apply() 7a832f4070be1 cpufreq: conservative: Simplify frequency limit handling de8f81c0e7d3e cpufreq: Documentation: fix sampling_down_factor range 9f1de8e384012 Revert "treewide: Fix probing of devices in DT overlays" 73323db56aae6 driver core: Use mod_delayed_work to prevent lost deferred probe work 08739321420f0 device property: fix fwnode reference leak in fwnode_graph_get_endpoint_by_id() 0c584c27f6649 tracing: Bound synthetic-field strings with seq_buf 0a1d6bbba52ae arm64: dts: qcom: sm8450: Add power-domain and iface clk for ice node 30aa348494531 firmware: arm_scmi: Fix OOB in scmi_power_name_get() 8972d8f38373e media: rockchip: rga: fix too small buffer size ed4e2f9f7e54b net/sched: sch_drr: annotate data-races around cl->deficit 8bfe280576b2a regulator: dt-bindings: mt6359: Drop regulator-name pattern restrictions e05e423fff76c bitops: use common function parameter names 969203772e515 sysfs: clamp show() return value in sysfs_kf_read() 457136c9719af firmware: arm_scmi: Read sensor config as 32-bit value f8c7669f57056 media: atomisp: Fix memory leak in atomisp_fixed_pattern_table() dcf7a986f377c RDMA/srpt: fix integer overflow in immediate data length check 1025dc2f7ba29 RDMA/mlx5: Fix devx subscribe-event unwind NULL dereference 0ccf70ea84330 RDMA/hns: Fix arithmetic overflow in calc_hem_config() 2c3b2667dad69 IB/mlx5: Fix transport-domain rollback and initialize lb mutex earlier 8ed0ce9ea58d6 ipv6: addrconf: bail out of dad_failure when state is no longer POSTDAD 1134ff0c8228f net/sched: sch_htb: annotate data-races (I) dc56c30c50cee net/sched: sch_htb: do not change sch->flags in htb_dump() e9c1d78836cef spi: hisi-kunpeng: Use dev_err_probe() for host registration failure 50c3c7df4f26d crypto: ccp - Treat zero-length cert chain as query for blob lengths 5543dd4d8eb58 net/sched: sch_hfsc: annotate data-races in hfsc_dump_class_stats() 1029bb377700e clk: scpi: Unregister child clock providers on remove 345675e960ab4 thermal: hwmon: Fix critical temperature attribute removal a36cbfb85f26e evm: terminate and bound the evm_xattrs read buffer 31f5ad37509d6 drm/hisilicon/hibmc: use clock to look up the PLL value 08bb9f3fdd4e6 drm/hisilicon/hibmc: move display contrl config to hibmc_probe() cca79a18f6275 arm64: dts: qcom: sm8450: Fix ICE reg size 79784c80d570e clk: scmi: Fix clock rate rounding c10d7a84e5a1a arm64: dts: mediatek: mt8192-asurada: Move PCIe DMA bounce buffer to host 747a1775c4ee1 iommu/amd: Fix a stale comment about which legacy mode is user visible ac3d1a11397a4 nilfs2: fix backing_dev_info reference leak ae9e534e502a0 dlm: fix add msg handle in send_queue ordered 627938383761f crypto: asymmetric_keys - fix OOB read in pefile_digest_pe_contents 32e50358edf05 crypto: ecrdsa - fix unknown OID check in ecrdsa_param_curve e833e865e4944 crypto: atmel-sha204a - fix blocking and non-blocking rng logic f79c80f173fda vxlan: Fix potential null-ptr-deref in vxlan_gro_prepare_receive(). 95b9fff4036e3 arm64: dts: imx8x-colibri: Correct SODIMM PAD settings 118930f6c9dcf arm64: dts: rockchip: fix rk809 interrupt pin on rk3566-roc-pc c399e66507af1 pinctrl: sunxi: fix regulator leak in sunxi_pmx_request() error path 42fbc613682f5 media: v4l2-common: Add YUV24 format info d011267be9a3f media: cedrus: Fix failure to clean up hardware on probe failure 0b22f0181250b watchdog: sprd_wdt: Remove redundant sprd_wdt_disable() on register failure 72b77aa04b50a watchdog: sama5d4_wdt: Fix WDDIS detection on SAM9X60 and SAMA7G5 886c7101db617 watchdog: sp5100_tco: Use EFCH MMIO for newer Hygon FCH ee346dcb5ebcd ARM: dts: am335x-sl50: Fix audio bitclock and frame master endpoint 46ca1451f61b5 wifi: ath9k: fix OOB access from firmware tx status queue ID 3e135495c1657 kconfig: fix potential NULL pointer dereference in conf_askvalue 6a3c384393d3f wifi: rtw88: fix OOB read from firmware RX descriptor exceeding DMA buffer 966fbed4b4463 wifi: rtw89: Correct data type for scan index to avoid infinite loop 5e79e0180515b driver core: use READ_ONCE() for dev->driver in dev_has_sync_state() 89a75e3349c4f drm/amdkfd: Validate CRIU-restored IDs before idr_alloc d2ebe124d3633 dt-bindings: pinctrl: nvidia,tegra234: Add missing required block da4a14062bbcb arm64: tegra: Fix Tegra234 MGBE PTP clock dbb66f78931b1 wifi: cfg80211: fix grammar in MLO group key error message 2ed6b94441cf6 arm64: dts: qcom: sdm845-mezzanine: Fix camss ports unit_address_vs_reg warning 6d7ef14197b71 arm64: dts: rockchip: Fix gmac0 reset pin for NanoPi R5S b6f6a8b8c3f92 Documentation: proc: fix section numbering in table of contents 126549251ce38 libbpf: Report error when a negative kprobe offset is specified 1c9ba32308c02 drm/radeon: fix memory leak in radeon_ring_restore() on lock failure b7b44937c548c drm/radeon: fix integer overflow in radeon_align_pitch() a5d13544cacb3 drm/amdgpu: fix integer overflow in amdgpu_gem_align_pitch() a0a24f75f8420 drm/tidss: Drop extra drm_mode_config_reset() call c0d5266a945a4 drm/rockchip: Test for imported buffers with drm_gem_is_imported() e3e69cfb053e6 clocksource/drivers/sun5i: Handle error returns from devm_reset_control_get_optional_exclusive() 9b783b7e03dc7 fbcon: fix NULL pointer dereference for a console without vc_data f34fa27d4ac18 afs: Fix further netns teardown to cancel the preallocation charger 867b3ea146a04 afs: fix NULL pointer dereference in afs_get_tree() 85d5fb80fe4f0 afs: Fix netns teardown to cancel the preallocation charger 86eff3140c9d4 rxrpc: Fix leak of released call in recvmsg(MSG_PEEK) 8bbede0afced3 rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc c004ef925faf0 serial: 8250_omap: clear rx_running on zero-length DMA completes abc1926c88c18 serial: msm: Disable DMA for kernel console UART 6c9ac3417de7b dt-bindings: power: imx93: Add MIPI PHY power domain 3a9c0bee69e68 dt-bindings: media: sun4i-a10-video-engine: Add interconnect properties 47ca0107e6a65 media: uvcvideo: Fix sequence number when no EOF e1052f8406019 media: uvcvideo: Fix buffer sequence in frame gaps 3351da80ca645 media: uvcvideo: Avoid partial metadata buffers 116f0e0890896 bpf: Prefer dirty packs for eBPF allocations 8d65c431e1037 bpf: Prefer packs that won't trigger an IBPB flush on allocation 1f232626a42b6 bpf: Skip redundant IBPB in pack allocator 3b3b23c80202c bpf: Restrict JIT predictor flush to cBPF cb27f3bf915cc x86/bugs: Enable IBPB flush on BPF JIT allocation 6e52c240c43a6 bpf: Support for hardening against JIT spraying 9badc789a500a crypto: hisi-trng - Remove crypto_rng interface 9a0e68b66e7ce crypto: crypto4xx - Remove insecure and unused rng_alg 05b7812164cee crypto: crypto4xx - Remove ahash-related code b2dbc71fe33b4 x86/mm: Fix check/use ordering in switch_mm_irqs_off() 306ded31bfa00 crypto: sun4i-ss - Remove insecure and unused rng_alg e091ff83d962f nvmet-tcp: Fix potential UAF when ddgst mismatch e602c93b25bda nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path 477145860dba4 KVM: arm64: Clear __hyp_running_vcpu when flushing the pKVM hyp vCPU 2c5e72b9fbf83 KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU 7b91e51d0eb7c crypto: algif_skcipher - force synchronous processing on trees without ctx->state 5a3218fbdeacb sched/fair: Only update stats for allowed CPUs when looking for dst group d6998ddd507c8 block: skip sync_blockdev() on surprise removal in bdev_mark_dead() c2e252e04fdcc smb/server: do not require delete access for non-replacing links 50f0012da1040 xfs: resample the data fork mapping after cycling ILOCK d0ae7ec3aa61d xfs: fail recovery on a committed log item with no regions 36bfa52459e45 smb: client: reject overlapping data areas in SMB2 responses 0e4a5a000123d fuse: re-lock request before returning from fuse_ref_folio() 018e33d403946 fuse: fix device node leak in cuse_process_init_reply() b2e26c955f8dd RDMA/siw: bound Read Response placement to the RREAD length 2912f3d40355d RDMA/rtrs-srv: Bound RDMA-Write length to chunk size in rdma_write_sg 04781ba93e362 Input: maplecontrol - set driver data before registering input device 985cb452c2d10 Input: maplemouse - set driver data before registering input device 330f7b37f838c Input: maple_keyb - set driver data before registering input device d89daead87d9b Input: mms114 - fix multi-touch slot corruption a72f944864b45 Input: maplemouse - fix NULL pointer dereference in open() 5d2ea15ba03bf Input: mms114 - reject an oversized device packet size 431ad239f2924 Input: touchwin - reset the packet index on every complete packet 112666835071d Input: mms114 - fix touch indexing for MMS134S and MMS136 c21295616a8a5 Input: iforce - bound the device-reported force-feedback effect index 719d1a2c83a46 Input: goodix - clamp the device-reported contact count 8c1db3418a419 Input: elan_i2c - prevent division by zero and arithmetic underflow 26c895928d711 Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count ba57f43032853 Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count 5bd64ed8dd76f Input: synaptics-rmi4 - unregister function handlers on physical driver registration failure 8f9b0cb58a10f i2c: stm32f7: truncate clock period instead of rounding it 0c36f72fc4d94 i2c: mpc: Fix timeout calculations 9882a9bd74db0 i2c: core: fix adapter deregistration race 051be2ed4d073 udmabuf: fix DMA direction mismatch in release_udmabuf() ffaaff82336db KVM: VMX: Grab vmcs12 on CR8 interception update iff vCPU is in guest mode 8192763d0ad78 KVM: VMX: Refresh GUEST_PENDING_DBG_EXCEPTIONS.BS on all injected #DBs 503fdfdcac243 NTB: epf: Fix request_irq() unwind in ntb_epf_init_isr() ce4736c1e6c4c exfat: bound uniname advance in exfat_find_dir_entry() afcc0515bbdd2 module: decompress: check return value of module_extend_max_pages() 22c1fd1355ad4 NFSv4: include MAY_WRITE in open permission mask for O_TRUNC 35ae19764eabf tracing: Prevent out-of-bounds read in glob matching 0cab02d06307c watchdog: apple: Add "apple,t8103-wdt" compatible caf08fd5ed742 EDAC/i10nm: Don't fail probing if ADXL is missing e65505d91fa03 spi: fsl-lpspi: terminate the RX channel on TX prepare failure path bf69ee9355c26 spi: fsl-lpspi: replace dmaengine_terminate_all() with dmaengine_terminate_sync() 51ffc1f5d8981 arm64: fpsimd: Fix type mismatch in sme_{save,load}_state() 7953af378a19f crypto: talitos/hash - fix SEC2 64k - 1 ahash request limitation 0fae6fb13c49e crypto: talitos/hash - remove useless wrapper c9a65ad48bd24 crypto: talitos/hash - rename first_desc/last_desc to first_request/last_request d1731c1798f8f crypto: talitos/hash - drop workqueue mechanism for SEC1 44174532b459a crypto: talitos/hash - use descriptor chaining for SEC1 instead of workqueue 49ca4ff6d6432 crypto: talitos/hash - prepare SEC1 descriptor chaining, remove additional descriptor 9c68f257f9b29 crypto: talitos - move code in current_desc_hdr() into a standalone function a9ba45af2788f crypto: talitos - move dma mapping code in talitos_submit() into a standalone dma_map_request() function 03ab5ac0dc382 crypto: talitos - move dma unmapping code in flush_channel() into a standalone dma_unmap_request() function c25be6c4e4bef crypto: talitos - add chaining of arbitrary number of descriptor for the SEC1 3d1d94445ab01 crypto: talitos - use dma_sync_single_for_cpu() before reading descriptor header 500319830d769 crypto: qat - validate RSA CRT component lengths e3155eb0ea98f crypto: drbg - Fix the fips_enabled priority boost d955e2127c34c crypto: drbg - Fix drbg_max_addtl() on 64-bit kernels cc42fb40171c2 crypto: drbg - Fix returning success on failure in CTR_DRBG 82789a44415e3 crypto: pcrypt - restore callback for non-parallel fallback 677450e5ef850 crypto: ecc - Fix carry overflow in vli multiplication c8cfe11e48b2a crypto: caam - use print_hex_dump_devel to guard key hex dumps again ebd37eef6e4f4 crypto: caam - use print_hex_dump_devel to guard key hex dumps 425d2001df58c crypto: af_alg - Remove zero-copy support from skcipher and aead b736b12108fd1 isofs: bound Rock Ridge symlink components to the SL record fd94a779020f2 partitions: aix: bound the pp_count scan to the ppe array 9c894159c5b8a btrfs: do not trim a device which is not writeable be5e5553b1e2a nvme-multipath: set BIO_REMAPPED on bios remapped to per-path namespace disks ee4465a245c14 dm-ioctl: report an error if a device has no table 93dfe94d55676 hwrng: jh7110 - fix refcount leak in starfive_trng_read() 7285276aa50d2 udf: validate sparing table length as an entry count, not a byte count bb0d384c1f42a udf: validate VAT header length against the VAT inode size fb49099206c5c udf: validate free block extents against the partition length 7f91201b1e486 PCI: Always lift 2.5GT/s restriction in PCIe failed link retraining edcbc218c39f6 iio: temperature: ltc2983: Fix n_wires default bypassing rotation check 97a5da403566c usb: typec: ucsi: cancel pending work on system suspend c32df11147822 usb: typec: ucsi: ccg: Fix use-after-free of ucsi on remove af040c5b300c0 usb: typec: ucsi: Pass full DP config payload in SET_NEW_CAM for DP alt mode 0195c30c77e3a usb: typec: ucsi: Invert DisplayPort role assignment 012406f89abc5 usb: typec: tcpm: Validate SVID index in svdm_consume_modes() a82450bcb7ae4 usb: typec: class: drop PD lookup reference 58b26ba693008 usb: typec: anx7411: use devm_pm_runtime_enable() d0ebf9cc7c2dd usbip: vudc: fix NULL deref in vep_dequeue() 5bd3654a778bd usbip: tools: support SuperSpeedPlus devices 0b0651f8ed4f0 USB: usb-storage: ene_ub6250: restore media-ready check 5c098f20f15db USB: ulpi: fix memory leak on registration failure 699dfb6917503 USB: serial: digi_acceleport: fix write buffer corruption bcfeae431db99 USB: serial: digi_acceleport: fix hard lockup on disconnect 8d50a910194f6 USB: serial: digi_acceleport: fix broken rx after throttle 64a115456397c USB: serial: option: add Telit Cinterion FE990D50 compositions 2f7a6b8ab3845 USB: serial: keyspan_pda: fix information leak 4183874b7925f usb: mtu3: unmap request DMA on queue failure 0b3073f40cc9f USB: misc: uss720: unregister parport on probe failure 6a935158d01f9 USB: storage: include US_FL_NO_SAME in quirks mask bb545c4dd22a3 usb: sl811-hcd: disable controller wakeup on remove 0b57e5ddbd89d USB: legousbtower: fix use-after-free on disconnect race 9b40d283ac2ad USB: quirks: add NO_LPM for the Samsung T5 EVO Portable SSD 164398601a7f1 USB: iowarrior: fix use-after-free on disconnect 02ca08fff74cf USB: ldusb: fix use-after-free on disconnect race 60fc5ef4ecea3 USB: idmouse: fix use-after-free on disconnect race 75c0ad13e1369 usb: gadget: f_printer: take kref only for successful open 7a5214dae906d usb: gadget: udc: Fix use-after-free in gadget_match_driver 56add2b9b2e89 usb: gadget: composite: fix dead empty check in the USB_DT_OTG handler be5004395dfd0 usb: free iso schedules on failed submit 164a966035039 usb: dwc3: meson-g12a: fix refcount leak in dwc3_meson_g12a_resume() dd338e4ffa7fe USB: core: add USB_QUIRK_NO_LPM for VIA Labs USB 2.0 hub fde3c095e1d48 usb: cdnsp: fix stream context array leak in cdnsp_alloc_stream_info() 19d9ff2b423d1 usb: cdc_acm: Add quirk for Uniden BC125AT scanner 46ab32870d010 net: usb: kalmia: bound RX frame length in kalmia_rx_fixup() 702d75f1a6025 bpf: Restore sysctl new-value from 1 to 0 bccbab36ff228 bpf: Reject fragmented frames in devmap 2c590972a2735 xfs: fix unreachable BIGTIME check in dquot flush validation 960b29769c909 xfs: use null daddr for unset first bad log block 0fed0fc34ce73 media: mtk-jpeg: cancel workqueue on release for supported platforms only 286f77d002a33 nilfs2: reject CLEAN_SEGMENTS ioctl with out-of-range segment numbers 16ca053c2be5f hfs/hfsplus: zero-initialize buffer in hfs_bnode_read 798d762a5e55b HID: sensor-hub: Add sensor_hub_input_attr_read_values() for multi-byte reads 33cd1a000daf9 HID: lg-g15: cancel pending work on remove to fix a use-after-free 523db788c0f84 HID: letsketch: fix UAF on inrange_timer at driver unbind 1a1ebdcb56ae5 HID: wacom: stop hardware after post-start probe failures 5b535bde893f5 tools/mm/slabinfo: fix total_objects attribute name d2468e241af4c tools/mm/slabinfo: Fix trace disable logic inversion 459b3a373d197 X.509: Fix validation of ASN.1 certificate header 9638d3d28f9fe clocksource/drivers/timer-tegra186: Fix support for multiple watchdog instances e5ffc638faf5d posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path 982c9f92d57bd cpufreq: pcc: fix use-after-free and double free in _OSC evaluation 73255d702c756 cpufreq: Fix hotplug-suspend race during reboot 860aaff72c844 sched/rt: Have RT_PUSH_IPI be default off for non PREEMPT_RT 069ae9502f27f cpufreq: intel_pstate: Sync policy->cur during CPU offline 46d403da376a8 firmware_loader: fix device reference leak in firmware_upload_register() f0776d142e530 OPP: of: Fix potential memory leak in opp_parse_supplies() 08c600b7e1818 smb: client: mask server-provided mode to 07777 in modefromsid 0de5b8e76847f smb: client: harden POSIX SID length parsing b723097775598 smb: client: use unaligned reads in parse_posix_ctxt() 9136a08dc2932 smb: client: Fix next buffer leak in receive_encrypted_standard() 037511726228a smb: client: fix double-free in SMB2_close() replay 02bc2896bdc3e smb: client: fix double-free in SMB2_open() replay 6e27f40b682a5 smb: client: fix double-free in SMB2_flush() replay 5821f9dbb8b5b smb: client: fix change notify replay double-free 0be4bc64882ed smb: client: fix double-free in SMB2_ioctl() replay 100fb7c455fa8 smb: client: fix query_info() replay double-free 3409aedf3c81a smb: client: fix query directory replay double-free f08b3f451f12e ksmbd: use opener credentials for delete-on-close 2b9d2a370d639 ksmbd: add per-handle permission check to FILE_LINK_INFORMATION 288a4abc16fe5 ksmbd: enforce FILE_READ_ATTRIBUTES on SMB_FIND_FILE_POSIX_INFORMATION b35afd5cf8fab ksmbd: run set info with opener credentials e6aa731f1b4b3 ksmbd: add a WRITE_DAC/WRITE_OWNER check to SMB2 SET_INFO SECURITY 67bdad9cf01b2 ksmbd: require source read access for duplicate extents 7703fd9aba1f2 ksmbd: fix UAF of struct file_lock in SMB2_LOCK deferred-lock cancellation 2a64dbf9c739d ksmbd: serialize QUERY_DIRECTORY requests per file 3072d82461f49 ksmbd: add a permission check for FSCTL_SET_ZERO_DATA 620d133d46929 ksmbd: add permission checks for FSCTL_DUPLICATE_EXTENTS_TO_FILE aa37f5fef78dd smb/client: Fix error code in smb2_aead_req_alloc() 38dbc8db8341c coresight: ultrasoc-smb: Fix OOB write in smb_sync_perf_buffer() ea59d9dbc5504 fs/ntfs3: fix missing run load for vcn0 in attr_data_get_block_locked() 3ca13af5a4004 fs/ntfs3: zero-fill folios beyond i_valid in ntfs_read_folio() 92300ac7ff17c fs/ntfs3: handle attr_set_size() errors when truncating files caa36a91c9c51 fs/ntfs3: fsync files by syncing parent inodes 98d93c226bdfa Bluetooth: L2CAP: validate option length before reading conf opt value c66a95e60b65d Bluetooth: fix UAF in bt_accept_dequeue() 21e60eb4d9585 Bluetooth: btnxpuart: Fix out-of-bounds firmware read in nxp_recv_fw_req_v3() ae215c5b6422d Bluetooth: bnep: pin L2CAP connection during netdev registration 466540e045d01 Bluetooth: btmtksdio: fix infinite loop in btmtksdio_txrx_work() 2664f537ca5bc netfilter: ebtables: terminate table name before find_table_lock() d2367d99f2455 netfilter: ebtables: module names must be null-terminated e44f78f5f0585 netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump 09d2407985b8c mm: shrinker: fix NULL pointer dereference in debugfs 729ae27dc2503 mfd: cros_ec: Delay dev_set_drvdata() until probe success e81f805824a81 net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes 76d030ac95e17 ipv4: igmp: remove multicast group from hash table on device destruction ea61b04e1d724 io_uring/io-wq: re-check IO_WQ_BIT_EXIT for each linked work item 19d63fd528719 gpio: eic-sprd: use raw_spinlock_t in the irq startup path 1dba8444ac010 NTB: epf: Avoid calling pci_irq_vector() from hardirq context 946046841013e fs/ntfs3: validate Dirty Page Table capacity in log_replay copy_lcns d663fbf28b2ee debugobjects: Plug race against a concurrent OOM disable caed4a96d5575 Bluetooth: MGMT: Fix UAF of hci_conn_params in add_device_complete 7ff42312ccde5 audit: Fix data races of skb_queue_len() readers on audit_queue 273c06b81d2e9 net: af_key: initialize alg_key_len for IPComp states b8e274e69ab09 ksmbd: fix use-after-free of a deferred file_lock on SMB2_CLOSE then SMB2_CANCEL f30e2b879bda1 crypto: amlogic - avoid double cleanup in meson_crypto_probe() bb3b942da4123 staging: rtl8723bs: fix OOB write in HT_caps_handler() 6f26cc55affd9 staging: rtl8723bs: fix OOB reads in is_ap_in_tkip() IE loop 4c21eec80cf50 staging: rtl8723bs: fix OOB reads in IE loops in issue_assocreq() and join_cmd_hdl() 9193c34f75fd9 staging: rtl8723bs: fix OOB read in update_beacon_info() IE loop 0406d746574e8 staging: rtl8723bs: fix OOB read in OnAssocRsp() IE loop 1f6c9d255bdda staging: rtl8723bs: fix WEP length underflow and OOB read in OnAuth() 5d7812360abf3 staging: rtl8723bs: fix heap buffer overflow in rtw_cfg80211_set_wpa_ie() 85263739e810d staging: media: atomisp: reduce load_primary_binaries() stack usage b7da3b9f7c3c5 media: staging: ipu3-imgu: Add range check for imgu_css_cfg_acc_stripe eef048dd77ebf staging: vme_user: fix location monitor leak in tsi148 bridge 0471a3c725326 staging: vme_user: fix location monitor leak in fake bridge 573e502d14714 smb: client: restrict implied bcc[0] exemption to responses without data area adc8b9c30d716 staging: vme_user: bound slave read/write to the kern_buf size 9a51115fcdc78 tipc: fix out-of-bounds read in broadcast Gap ACK blocks a8e3a94711134 6lowpan: fix NHC entry use-after-free on error path 5e5798880eb15 usb: dwc3: run gadget disconnect from sleepable suspend context 6c82f88bc7a84 USB: chaoskey: Fix slab-use-after-free in chaoskey_release() fde19b0d4eeab hwrng: virtio: clamp device-reported used.len at copy_data() 74a4cac9603d3 virtio-mmio: fix device release warning on module unload 96fbafc20ebd9 netfilter: ipset: fix race between dump and ip_set_list resize 74fef68d52115 mm/damon/ops-common: handle extreme intervals in damon_hot_score() 0f90c4fadef8c PCI: host-common: Request bus reassignment when not probe-only b8189e8b0343d PCI: altera: Do not dispose parent IRQ mapping ce2e36e8759df usb: typec: tcpci_rt1711h: unregister TCPCI port with devres 10666ac9c5529 usb: xhci: Fix sleep in atomic context in xhci_free_streams() 45df558c543bb binder: fix UAF in binder_free_transaction() faa070c7ad8ba binder: fix UAF in binder_thread_release() 7370cb0dccd6d Bluetooth: btusb: fix wakeup source leak on probe failure 6e1b10df890f4 Bluetooth: btusb: fix use-after-free on marvell probe failure e6313b800da61 Bluetooth: btusb: fix use-after-free on registration failure 9cc0350f2677e Bluetooth: btusb: Add USB ID 2c4e:0128 for Mercusys MA60XNB 8e872c07e40d5 vfio: prevent infinite loop in vfio_mig_get_next_state() on blocked arc 08b74e320c7a2 vfio/pci: Fix racy bitfields and tighten struct layout 9e0a3f642e607 vfio/pci: Release the VGA arbiter client on register_device() failure 654710ef3135c vfio/pci: Latch disable_idle_d3 per device 28f92b8d3fefc vfio/pci: Use a private flag to prevent power state change with VFs 90310e29ca74e ALSA: usb-audio: Update US-16x08 EQ/comp shadow state after successful writes 73178209f2fec ALSA: usb-audio: Update Babyface Pro control caches only after successful writes b31c5faf77cdf ALSA: usb-audio: Roll back quirk control caches on write errors a851636ef95a3 ALSA: usb-audio: Propagate US-16x08 write errors in route/mix EQ-switch put callbacks 29dc393ab69b8 ALSA: usb-audio: Propagate errors in scarlett_ctl_enum_put() a47ecd904c51a ALSA: usb-audio: avoid kobject path lookup in DualSense match ea672a9f6cc38 ALSA: seq: Fix uninitialised heap leak in snd_seq_event_dup() 69bf1dfa32155 ALSA: ice1712: check snd_ctl_new1() return value eccf8e91266e3 ALSA: gus: check snd_ctl_new1() return value 3ed2fa1ed8cc6 ALSA: firewire: isight: bound the sample count to the packet payload 7531a37720c25 ALSA: es1938: check snd_ctl_new1() return value 8825a06bfa793 ALSA: cmipci: check snd_ctl_new1() return value 05df59b9a61f7 ALSA: caiaq: fix out-of-bounds read in the Traktor Kontrol S4 input parser 91095474eea29 ALSA: ymfpci: check snd_ctl_new1() return value c31679fedfedc ALSA: virtio: Add missing 384 kHz PCM rate mapping 46a2cbf57dc3e iio: temperature: ltc2983: Fix reinit_completion() called after conversion start ae73df471a835 iio: magnetometer: ak8975: Add missed pm_runtime_put_autosuspend() call 664376579d1fd iio: light: veml6030: fix channel type when pushing events 4337683a3639d iio: light: tsl2591: return actual error from probe IRQ failure 140117813afde iio: light: opt3001: fix missing state reset on timeout f350883989ced iio: light: gp2ap002: fix runtime PM leak on read error 06158c241f9a3 iio: light: al3010: fix incorrect scale for the highest gain range 34d9d5c81e9df iio: imu: st_lsm6dsx: deselect shub page before reading whoami 00982b61d026b iio: imu: inv_icm42600: fix timestamp clock period by using lower value 5a62be142e28e iio: imu: bmi160: add IRQF_NO_THREAD to data-ready trigger IRQ 5240dd5cf02ba iio: gyro: bmg160: wait full startup time after mode change at probe 8d202515baea4 iio: gyro: bmg160: bail out when bandwidth/filter is not in table 0d4a646d7f87e iio: event: Fix event FIFO reset race b131f0011dfef iio: chemical: scd30: Cleanup initializations and fix sign-extension bug 030fb84816471 iio: adc: ti-ads124s08: Return reset GPIO lookup errors f3f90bc7b38ba iio: adc: spear: Initialize completion before requesting IRQ 820c4f15353ef iio: adc: lpc32xx: Initialize completion before requesting IRQ 36154171385a8 iio: accel: kxsd9: fix runtime PM imbalance on write_raw() error bfffc98f3de92 iio: accel: bmc150: clamp the device-reported FIFO frame count d6ef5af7d0fe1 usb: gadget: function: rndis: add length check for header caea8b1206043 usb: gadget: function: rndis: add length check to response query e1919d0267065 MIPS: smp: report dying CPU to RCU in stop_this_cpu() cd2463ec60f0d net: Drop the lock in skb_may_tx_timestamp() b0b39425b5202 LoongArch: Add PIO for early access before ACPI PCI root register 865a048a3f5ac virtio_net: Support dynamic rss indirection table size dbab796ff3803 arm64: sysreg: Correct sign definitions for EIESB and DoubleLock 804e2e41641bd arm64: Revamp HCR_EL2.E2H RES1 detection 6e5714bcc98f3 KVM: arm64: Initialize SCTLR_EL1 in __kvm_hyp_init_cpu() a2c343370351f KVM: arm64: Initialize HCR_EL2.E2H early 153ed820d525b arm64: Fix early handling of FEAT_E2H0 not being implemented 4f25422239d09 arm64: Treat HCR_EL2.E2H as RES1 when ID_AA64MMFR4_EL1.E2H0 is negative d087272c49aa5 arm64: sysreg: Add layout for ID_AA64MMFR4_EL1 5b8729416ee88 crypto: talitos - rename first/last to first_desc/last_desc 22e2db16c8011 crypto: talitos - fix SEC1 32k ahash request limitation 1981cde2f0be4 crypto: talitos - stop using crypto_ahash::init 7c3ba8f490f5b Revert "crypto: talitos - fix SEC1 32k ahash request limitation" f35e5399c97b1 Revert "crypto: talitos - rename first/last to first_desc/last_desc" 4cdb1b3ab96eb perf/core: Detach event groups during remove_on_exec a44343fe230aa ACPI: NFIT: core: Fix possible NULL pointer dereference 2fb80e9620290 ACPI: CPPC: Suppress UBSAN warning caused by field misuse 140133dac0ae9 perf trace beauty fcntl: Fix build with older kernel headers 927ef409f7139 Bluetooth: ISO: Copy BASE if service data matches EIR_BAA_SERVICE_UUID a444c3de7187b xfs: move ->iop_recover to xfs_defer_op_type 5e327f772ca89 xfs: use xfs_defer_finish_one to finish recovered work items ce9d7f9188f18 xfs: dump the recovered xattri log item if corruption happens 9395d11f63415 xfs: recreate work items when recovering intent items 9af37d8be0fb6 mm/vmscan: flush deferred TLB before freeing large folios 420e5aad7ba89 team: fix header_ops type confusion with non-Ethernet ports 9532d0d0ad1d7 bonding: prevent potential infinite loop in bond_header_parse() 5d0fb9806ab6c bonding: fix type confusion in bond_setup_by_slave() 4128ccd7683f8 bonding: fix xfrm offload feature setup on active-backup mode 8d5c8ac644554 bonding: use common function to compute the features a1d397dbc00a7 net: add a common function to compute features for upper devices ed976725dba37 bonding: Correctly support GSO ESP offload 3b2bd2018938b bonding: add ESP offload features when slaves support 4a85b335f8704 bonding: Fix initial {vlan,mpls}_feature set in bond_compute_features 7cf5a74558e31 net, team, bonding: Add netdev_base_features helper 1f1fe94e0c727 net: team: rename team to team_core for linking f59f8c2addba0 nfsd: change nfs4_client_to_reclaim() to allocate data 2a8ff394907fe nfsd: move name lookup out of nfsd4_list_rec_dir() 42726c616d958 apparmor: advertise the tcp fast open fix is applied 655349816642f nfsd: Don't reset the write verifier on a commit EAGAIN eeabb9020721d NFSv4/flexfiles: reject zero filehandle version count a7a526fbc847f fbdev: fbcon: fix out-of-bounds read in err_out of fbcon_do_set_font() da9d8d9711f78 i2c: core: fix adapter registration race 4a0034756c2a6 i2c: core: fix adapter debugfs creation ad4322d84ebf7 i2c: core: fix NULL-deref on adapter registration failure 2f8a894e148a0 i2c: core: fix hang on adapter registration failure 055aff407db51 i2c: core: fix irq domain leak on adapter registration failure 1a02a5028bd6d block: Avoid mounting the bdev pseudo-filesystem in userspace 92fc631b69deb KVM: Replace guest-triggerable BUG_ON() in ioeventfd datamatch with get_unaligned() 2770041f34b52 f2fs: fix listxattr handling of corrupted xattr entries 1436031b33fa2 f2fs: fix potential deadlock in gc_merge path of f2fs_balance_fs() 345c1d1ff7511 f2fs: fix potential deadlock in f2fs_balance_fs() 76e1a05cf6d40 f2fs: bound i_inline_xattr_size for non-inline-xattr inodes 7d3ae21783e59 f2fs: atomic: fix UAF issue on f2fs_inode_info.atomic_inode d2f236196d542 f2fs: validate orphan inode entry count f0b4e1cc8ad76 device property: initialize the remaining fields of fwnode_handle in fwnode_init() e54c05ed3d9c2 net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink c717f052d7023 drm/amd: Fix set but not used warnings 290014c798763 slimbus: qcom-ngd-ctrl: Register callbacks after creating the ngd c75f153e5d547 slimbus: Convert to platform remove callback returning void e43819a198b56 slimbus: qcom-ngd-ctrl: Correct PDR and SSR cleanup ownership da82ec28a0cf1 slimbus: qcom-ngd-ctrl: Fix probe error path ordering ade787f047906 Bluetooth: btmtk: Fix btmtk.c undefined reference build error f6290849b88a0 perf: Fix dangling cgroup pointer in cpuctx backport 5f4dbdb0a8759 userfaultfd: gate must_wait writability check on pte_present() 9440a6980fc63 Bluetooth: btmtk: Fix wait_on_bit_timeout interruption during shutdown 51c4b6e9c0e56 Bluetooth: btmtk: Fix failed to send func ctrl for MediaTek devices. f344a2d77d47e Bluetooth: btmtk: move btusb_mtk_[setup, shutdown] to btmtk.c 9eca71da3b843 Bluetooth: btusb: mediatek: return error for failed reg access 6501b60129664 Bluetooth: btusb: mediatek: remove the unnecessary goto tag 6b6d985e7a889 Bluetooth: btusb: mediatek: add MT7922 subsystem reset 1c770a550df2f Bluetooth: btusb: mediatek: reset the controller before downloading the fw eae5bb7c0c160 Bluetooth: btmtk: apply the common btmtk_fw_get_filename 1fa22de588a65 LoongArch: Report dying CPU to RCU in stop_this_cpu() dd699a60a29ee ext4: get rid of ppath in get_ext_path() 666e837b247fc nfsd: reset write verifier on deferred writeback errors 48a586e382e4d nfsd: release layout stid on setlease failure c39973ebd7329 bpf, arm64: Reject out-of-range B.cond targets bb51b626b5a8e ia64: Make acpi_cpufreq_cpu_exit return void (From OE-Core rev: 735dd46d8557280b0a4a79dd5d5bd0467a18fe5f) Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> Signed-off-by: Fabien Thomas <fabien.thomas@smile.fr> Signed-off-by: Paul Barker <paul@pbarker.dev>	2026-08-24 11:43:46 +01:00
Alexander Kanavin	b18a694103	perf: drop newt from tui build requirements ... As the comment says this was used by very old kernels (pre 3.10), and slang has been the only option for a long time. Also, correct the option to disable slang TUI. (From OE-Core rev: 426655c63733ed0f29a47275cd4cab5b2f90ad78) Signed-off-by: Alexander Kanavin <alex@linutronix.de> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit a36a84490b943e6f0638c0430ad1eac7740e9be3) Signed-off-by: Shinu Chandran <shinucha@cisco.com> Signed-off-by: Fabien Thomas <fabien.thomas@smile.fr> Signed-off-by: Paul Barker <paul@pbarker.dev>	2026-08-24 11:43:45 +01:00
Yoann Congal	e5c6f86964	linux-yocto/6.6: update CVE exclusions (6.6.144) ... $ ./meta/recipes-kernel/linux/generate-cve-exclusions.py .../cvelistV5/ 6.6.144 > meta/recipes-kernel/linux/cve-exclusion_6.6.inc Generated at 2026-07-23 08:09:32.765073+00:00 for kernel version 6.6.144 From cvelistV5 cve_2026-07-23_0700Z (From OE-Core rev: 9b5c90be9cd6dfa5ed42f2e05935068ba31bac1b) Signed-off-by: Yoann Congal <yoann.congal@smile.fr> Signed-off-by: Paul Barker <paul@pbarker.dev>	2026-07-30 13:21:15 +01:00
Bruce Ashfield	600aca66db	linux-yocto/6.6: update to v6.6.144 ... Updating linux-yocto/6.6 to the latest korg -stable release that comprises the following commits: da47cbc254661 Linux 6.6.144 6848a6e39cac4 crypto: qat - remove unused character device and IOCTLs 1a42f84b0f6b5 crypto: qat - Return pointer directly in adf_ctl_alloc_resources 30d648e225447 crypto: qat - Replace kzalloc() + copy_from_user() with memdup_user() c0b8e6eea1b2b Documentation: ioctl-number: Extend "Include File" column width 802e113cf120d drivers/base/memory: set mem->altmap after successful device registration 511d2b92f8d20 serial: 8250_dw: unregister 8250 port if clk_notifier_register() fails 851e1847f881e serial: qcom_geni: Fix RX DMA stall when SE_DMA_RX_LEN_IN is zero 36599894fa853 ksmbd: fix out-of-bounds read in smb_check_perm_dacl() 2ef8f2a5695ae NFS: Prevent resource leak in nfs_alloc_server() 6c344fff2feff NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr abc978daffd26 nfsd: check get_user() return when reading princhashlen 1e96239fddcef nfsd: fix posix_acl leak on SETACL decode failure 1e04be34cafae NFSD: Fix SECINFO_NO_NAME decode error cleanup 1a7ee9f9f3957 fbdev: modedb: Fix misaligned fields in the 1920x1080-60 mode c7dc382439f7b fbdev: modedb: fix a possible UAF in fb_find_mode() 7640b4f68acb5 fbdev: Fix fb_new_modelist to prevent null-ptr-deref in fb_videomode_to_var c04d606f8b35e power: reset: linkstation-poweroff: fix use-after-free in the linkstation_poweroff_init() 889c2a9c59897 KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path d18756b12aab3 KVM: x86: hyper-v: Bound the bank index when querying sparse banks b84f46179c806 9p: avoid putting oldfid in p9_client_walk() error path c5a125eadba05 ocfs2: reject oversized group bitmap descriptors ddf13f91ca82c rpmsg: char: Fix use-after-free on probe error path fbaf509ad7cb2 fpga: region: fix use-after-free in child_regions_with_firmware() 44567537a2623 irqchip/imgpdc: Fix resource leak, add missing chained handler cleanup on remove 7e37e9b3e82ad pNFS: Fix use-after-free in pnfs_update_layout() eaca7dae02fab tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done 96e545410c4f7 blk-cgroup: fix UAF in __blkcg_rstat_flush() 508a0139d3bf6 hdlc_ppp: sync per-proto timers before freeing hdlc state 4fe388218826d gfs2: fix use-after-free in gfs2_qd_dealloc 8e0abc17fbd7e exfat: fix potential use-after-free in exfat_find_dir_entry() ab465495b1ed5 MIPS: DEC: Prevent initial console buffer from landing in XKPHYS 81fc9a13acae9 bpf: use kvfree() for replaced sysctl write buffer fda128096fc84 f2fs: keep atomic write retry from zeroing original data 7e4d8f98be63f f2fs: fix incorrect FI_NO_EXTENT handling in __destroy_extent_node() 1ddf3fd21c4c6 f2fs: validate ACL entry sizes in f2fs_acl_from_disk() 24f8c87070c3e f2fs: fix to round down start offset of fallocate for pin file 13e4b59d3a941 f2fs: validate compress cache inode only when enabled bd499f138ccf7 wifi: iwlwifi: mvm: fix race condition in PTP removal 2b2060c2075a7 wifi: rtw88: usb: fix memory leaks on USB write failures 6579dcb5e0f74 wifi: rtw88: increase TX report timeout to fix race condition 16eef2a52687b wifi: rtlwifi: rtl8821ae: Fix C2H bit location in RX descriptor 318703b6f71d1 wifi: ath11k: fix warning when unbinding a2e631fa91bb2 wifi: mt76: mt76x2u: Add support for ELECOM WDC-867SU3S 35ab4db86774d keys: Pin request_key_auth payload in instantiate paths 5966e4e2ba213 KEYS: fix overflow in keyctl_pkey_params_get_2() 03ef56495f0be err.h: use __always_inline on all error pointer helpers 5267eab88fa4c fbdev: fix use-after-free in store_modes() 06f6dd2ff2bd0 NTB: epf: Avoid pci_iounmap() with offset when PEER_SPAD and CONFIG share BAR 15fd83a1e42ed apparmor: fix use-after-free in rawdata dedup loop faea60deaa05c apparmor: mediate the implicit connect of TCP fast open sendmsg 0eb4c16c4adb2 net: skmsg: preserve sg.copy across SG transforms e28e7fd34c449 mac802154: llsec: add skb_cow_data() before in-place crypto 82c17e13d404f af_unix: Set gc_in_progress to true in unix_gc(). 5f0b95ef68ab9 nvmet-tcp: fix race between ICReq handling and queue teardown e8852ae29868e ntfs3: reject direct userspace writes to reserved $LX* xattrs ce494707a9c07 ipv4: account for fraggap on the paged allocation path f79f0db614160 inet: add indirect call wrapper for getfrag() calls 65fb14cbebb0c ipv6: account for fraggap on the paged allocation path 2660bd8333ab6 batman-adv: tvlv: avoid race of cifsnotfound handler state 9c9f4e69368a4 batman-adv: tvlv: enforce 2-byte alignment d7fdbab25eae6 batman-adv: dat: prevent false sharing between VLANs a8da361cdd929 batman-adv: tt: track roam count per VID e82a02a0c1aa2 batman-adv: tt: don't merge change entries with different VIDs 0e868200cf042 batman-adv: tp_meter: handle overlapping packets 31dec4dc86cf6 batman-adv: tp_meter: prevent parallel modifications of last_recv be3af0c705a13 batman-adv: tp_meter: annotate last_recv_time access with READ/WRITE_ONCE f8c499fd275e5 batman-adv: tp_meter: restrict number of unacked list entries 97644fdaaf644 batman-adv: v: prevent OGM aggregation on disabled hardif 3af7f10d5fe44 batman-adv: frag: avoid underflow of TTL cb96aa1737200 batman-adv: frag: ensure fragment is writable before modifying TTL 5263ff0bbd132 batman-adv: fix (m|b)cast csum after decrementing TTL 4741001ca0b04 batman-adv: ensure bcast is writable before modifying TTL 29f59324e61fc batman-adv: tp_meter: initialize last_recv_time during init b88f8f4e5e78e batman-adv: prevent ELP transmission interval underflow b5cf66cdc49b1 batman-adv: bla: annotate lasttime access with READ/WRITE_ONCE 75445cf501ac7 batman-adv: tp_meter: add only finished tp_vars to lists 4774a32baec46 batman-adv: tp_meter: handle seqno wrap-around for fast recovery detection ec8ef37fea33c batman-adv: tp_meter: fix fast recovery precondition cd74176cf1685 batman-adv: tp_meter: avoid divide-by-zero for dec_cwnd f58e5df92180e batman-adv: tp_meter: avoid window underflow 774d22045a8fa batman-adv: tp_meter: initialize dec_cwnd explicitly 0c610db91bbde batman-adv: tp_meter: initialize dup_acks explicitly edae04afb11f6 batman-adv: tp_meter: keep unacked list in ascending ordered bc6c380c1159d selinux: fix overlayfs mmap() and mprotect() access checks 41c5b269af8b1 lsm: add backing_file LSM hooks ba3ebdd89fa20 fs: prepare for adding LSM blob to backing_file 922a03b26e354 Bluetooth: btmtk: accept too short WMT FUNC_CTRL events 36c85f7029484 Bluetooth: btmtk: validate WMT event SKB length before struct access 7536ebe0473d9 Revert "ptp: add testptp mask test" 48b91ed7e22bb KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level 9291654d69e08 KVM: x86: Fix shadow paging use-after-free due to unexpected role 2de4db145b299 eventpoll: fix ep_remove struct eventpoll / struct file UAF a0e685da1efe0 eventpoll: move epi_fget() up 20423e2c1c84a eventpoll: rename ep_remove_safe() back to ep_remove() 0a4a2db528b0e eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() f484ab90b2290 eventpoll: kill __ep_remove() 903070f8f3552 eventpoll: split __ep_remove() ff4fe83a9aabb eventpoll: use hlist_is_singular_node() in __ep_remove() 44e8907b81fea file: add fput() cleanup helper 2181a09ba980f virtiofs: fix UAF on submount umount cd923dadefadb media: vidtv: fix NULL pointer dereference in vidtv_mux_push_si d2bbbb6c55812 ksmbd: reject non-VALID session in compound request branch 8232fca738011 vc_screen: fix null-ptr-deref in vcs_notifier() during concurrent vcs_write 08fbcba06e968 scripts/sorttable: Fix endianness handling in build-time mcount sort 80514e97c50ab scripts/sorttable: Allow matches to functions before function entry 9ba53f9808e1e scripts/sorttable: Use normal sort if theres no relocs in the mcount section e115e9fa69b48 ftrace: Check against is_kernel_text() instead of kaslr_offset() 379e755ec2c54 ftrace: Test mcount_loc addr before calling ftrace_call_addr() bf802b936a7b2 ftrace: Do not over-allocate ftrace memory 4c30b173b6176 ftrace: Have ftrace pages output reflect freed pages dc06779d338de ftrace: Update the mcount_loc check of skipped entries 4893af6318fe8 scripts/sorttable: Zero out weak functions in mcount_loc table bbfbacec9e000 scripts/sorttable: Always use an array for the mcount_loc sorting 38be2ffe9808b scripts/sorttable: Have mcount rela sort use direct values fe0434d604a94 arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 8297f13962063 scripts/sorttable: Use a structure of function pointers for elf helpers ff7e015d63849 scripts/sorttable: Get start/stop_mcount_loc from ELF file directly ecbb09356560c scripts/sorttable: Move code from sorttable.h into sorttable.c 7fbddce9a2685 scripts/sorttable: Use uint64_t for mcount sorting 23b5a9659a27d scripts/sorttable: Add helper functions for Elf_Sym 8cd6caaa4a244 scripts/sorttable: Add helper functions for Elf_Shdr a03240485cf57 scripts/sorttable: Add helper functions for Elf_Ehdr 1dd7def1ae877 scripts/sorttable: Convert Elf_Sym MACRO over to a union 1afca399cc4d5 scripts/sorttable: Replace Elf_Shdr Macro with a union 7ce5ed40d976e scripts/sorttable: Convert Elf_Ehdr to union e6bb2482b5b17 scripts/sorttable: Make compare_extable() into two functions d5e14532a8b86 scripts/sorttable: Have the ORC code use the _r() functions to read 4f2fba2de0620 scripts/sorttable: Remove unneeded Elf_Rel c13a4c1fd1b74 scripts/sorttable: Remove unused write functions d9e259e63b36b scripts/sorttable: Remove unused macro defines 030fe3e9d8abd fuse: re-lock request before replacing page cache folio fe95e90559bce slimbus: qcom-ngd-ctrl: Balance pm_runtime enablement for NGD e65ae7c948640 slimbus: qcom-ngd-ctrl: Fix up platform_driver registration 5d1ae4e17a3ec rxrpc: Fix the ACK parser to extract the SACK table for parsing 09c9b92c20104 net: phonet: free phonet_device after RCU grace period 210ac54bdd8df phonet: Pass net and ifindex to phonet_address_notify(). cf30797ea8cea phonet: Pass ifindex to fill_addr(). 6707d7e0b7174 locking/rtmutex: Skip remove_waiter() when waiter is not enqueued 67fde21e4522e Drivers: hv: vmbus: Improve the logic of reserving fb_mmio on Gen2 VMs 5df8310a41391 hv: utils: handle and propagate errors in kvp_register 23e5a1b9ae954 mptcp: pm: fix extra_subflows underflow on userspace PM subflow creation 4830fb44d12f5 netfilter: nf_tables: always walk all pending catchall elements 7109d69bec6ed dlm: prevent NPD when writing a positive value to event_done c84860dac7af7 regulator: core: fix locking in regulator_resolve_supply() error path c2716362ec335 ring-buffer: Remove ring_buffer_read_prepare_sync() f155b8f1c9576 selftests/bpf: Update comments find_equal_scalars->sync_linked_regs 8e655dbef4c9e selftests/bpf: Tests for per-insn sync_linked_regs() precision tracking 78da8e1be90c5 bpf: Remove mark_precise_scalar_ids() 0252b9d262222 bpf: Track equal scalars history on per-instruction level b741c9c6ef59f af_unix: Reject SIOCATMARK on non-stream sockets f68f34033d403 selftests/bpf: Add test to ensure kprobe_multi is not sleepable 89327ed787746 bpf: Reject sleepable kprobe_multi programs at attach time eb045714bc6a2 agp/amd64: Fix broken error propagation in agp_amd64_probe() 1078ae8175777 net: qualcomm: rmnet: fix endpoint use-after-free in rmnet_dellink() 1c4ffe6b4f043 i2c: stub: Reject I2C block transfers with invalid length c19b360fa10c5 RDMA/bnxt_re: zero shared page before exposing to userspace 218c24bfc3334 KVM: VMX: Update SVI during runtime APICv activation de1ba6c93868f ARM: fix branch predictor hardening 1f7cc85046f1c ARM: fix hash_name() fault 98b209cd62ef9 ARM: allow __do_kernel_fault() to report execution of memory faults 89b37df6f805f ARM: group is_permission_fault() with is_translation_fault() 5d95f6b267f3d debugobjects: Dont call fill_pool() in early boot hardirq context a3383df76f0d7 debugobjects: Do not fill_pool() if pi_blocked_on c8cd2ca8f085c debugobjects: Use LD_WAIT_CONFIG instead of LD_WAIT_SLEEP 0d2a64411b097 debugobjects: Allow to refill the pool before SYSTEM_SCHEDULING 40fe77146137b batman-adv: tt: prevent TVLV entry number overflow abb069fdf51a9 drm/v3d: Skip CSD when it has zeroed workgroups 756724002c5a6 drm/v3d: Store the active job inside the queue's state f4b6b4af7ef06 ip6_vti: set netns_immutable on the fallback device. 499c6b43a79dd drm/amd/display: Bound VBIOS record-chain walk loops b685d6ef6f07a net/sched: fix pedit partial COW leading to page cache corruption 8bef2f840b43e fuse: limit FUSE_NOTIFY_RETRIEVE to uptodate folios (From OE-Core rev: 6eeed0e2fee69c3c13f3b20f419d0ca25c9d8def) Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> Signed-off-by: Yoann Congal <yoann.congal@smile.fr> Signed-off-by: Paul Barker <paul@pbarker.dev>	2026-07-30 13:21:15 +01:00
Bruce Ashfield	9852ff8b42	linux-yocto/6.6: update to v6.6.143 ... Updating linux-yocto/6.6 to the latest korg -stable release that comprises the following commits: d1cfde2d5d15 Linux 6.6.143 726abf975668 netfilter: require Ethernet MAC header before using eth_hdr() 05bd072e97fe x86/CPU/AMD: Rename init_amd_zn() to init_amd_zen_common() 4a83b435acf8 x86/CPU/AMD: Call the spectral chicken in the Zen2 init function 5e0c93dca433 x86/CPU/AMD: Move the Zen3 BTC_NO detection to the Zen3 init function 217f53b5e3c6 Revert "selftest/ptp: update ptp selftest to exercise the gettimex options" 189c7e57826f mptcp: fix missing wakeups in edge scenarios c12e67a0ef93 mptcp: add-addr: always drop other suboptions 1111ab94fd49 arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU e5b6bdc3d8b8 arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU e717a4d08779 arm64: errata: Mitigate TLBI errata on various Arm CPUs baf63e6a6435 arm64: cputype: Add C1-Premium definitions 1e4a5225b4d3 arm64: cputype: Add C1-Ultra definitions f58e88f8653f arm64: cputype: Add NVIDIA Olympus definitions 2602d4b53925 ALSA: hda/hdmi: Add quirk for TUXEDO IBS14G6 9aa7edc1347b ipvs: skip ipv6 extension headers for csum checks 2de5c8eea0a9 net: bonding: fix use-after-free in bond_xmit_broadcast() 8fe0231adebe RDMA/umem: Fix truncation for block sizes >= 4G 3faebd387ed1 RDMA: Move DMA block iterator logic into dedicated files a7c6be320c0e RDMA/umem: fix kernel-doc warnings 09dc18894148 RDMA: During rereg_mr ensure that REREG_ACCESS is compatible 09b8a7aa5a34 hv_netvsc: use kmap_local_page in netvsc_copy_to_send_buf 77b73b54801a mm/memory-failure: fix hugetlb_lock AA deadlock in get_huge_page_for_hwpoison 252bb328b36f mm/memory-failure: fix missing ->mf_stats count in hugetlb poison 05f1ad6d62a3 mm/hugetlb: rename folio_putback_active_hugetlb() to folio_putback_hugetlb() 471f5d78ea4b mm/migrate: don't call folio_putback_active_hugetlb() on dst hugetlb folio 411fa5113da0 mm/hugetlb: rename isolate_hugetlb() to folio_isolate_hugetlb() eb8a8124484d netfilter: nft_fib: fix stale stack leak via the OIFNAME register 46582b0fd381 usb: typec: ucsi: Don't update power_supply on power role change if not connected c91ea13375f7 serial: qcom_geni: fix kfifo underflow when flush precedes DMA completion IRQ d3e9b79aa794 scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() b4621e5ef634 thunderbolt: property: Cap recursion depth in __tb_property_parse_dir() 078c11224c7f usb: typec: ucsi: Check if power role change actually happened before handling e15c414092b3 usb: gadget: uvc: hold opts->lock across XU walks in uvc_function_bind 5542d2c35930 usb: dwc3: xilinx: fix error handling in zynqmp init error paths b987f380620b usb: musb: omap2430: Fix use-after-free in omap2430_probe() a9c22e0f93ba tty: serial: samsung: Remove redundant port lock acquisition in rx helpers 8809b7941c4a tty: serial: samsung: use u32 for register interactions 33da47d4a003 serial: samsung_tty: Use port lock wrappers 1cdb07d8946c ALSA: firewire-motu: Protect register DSP event queue positions b3f4f82d1315 memfd: deny writeable mappings when implying SEAL_WRITE 2619d9d2aac3 iio: dac: ad5686: fix ref bit initialization for single-channel parts f8dcef820161 usb: cdns3: plat: fix leaked usb2_phy initialization on usb3_phy acquisition failure e85bc501947f iio: chemical: scd30: fix division by zero in write_raw 73d8bf36f217 iio: chemical: scd30: Use guard(mutex) to allow early returns 86298fb6829c iio: gyro: adis16260: fix division by zero in write_raw b35e71b7cc7a mptcp: handle first subflow closing consistently 792fa6eee73e Bluetooth: hci_qca: Convert timeout from jiffies to ms c3fc351d256c Bluetooth: hci_qca: Migrate to serdev specific shutdown function 123724bb6ee5 serdev: Provide a bustype shutdown function ca2f48b9c03d serdev: make serdev_bus_type const c0e37017a452 mm/damon/sysfs-schemes: delete tried region in regions_rmdirs() e7af1b15c884 mm/memory: fix spurious warning when unmapping device-private/exclusive pages fe76413677e7 mptcp: do not drop partial packets 293b0e63136b mptcp: introduce the mptcp_init_skb helper 681d14ef45b1 iio: adc: npcm: fix unbalanced clk_disable_unprepare() 4ed1366f9f90 iio: adc: npcm: Convert to platform remove callback returning void d766a49d9b55 arm64: tlb: Flush walk cache when unsharing PMD tables 4c29603498b0 octeontx2-pf: avoid double free of pool->stack on AQ init failure 26342087fac9 af_unix: Fix UAF read of tail->len in unix_stream_data_wait() db9389042db4 af_unix: Cache state->msg in unix_stream_read_generic(). c2c764b00c0f rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer a05bf6d9e621 rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg 7713f4aafb57 net: hsr: defer node table free until after RCU readers 1dca7e491f07 ipv6: ioam: add NULL check for idev in ipv6_hop_ioam() dcc42d701529 ipv6/addrconf: annotate data-races around devconf fields (II) ada8dcfd5298 mptcp: pm: fix ADD_ADDR timer infinite retry on option space insufficient 04318e252c58 ice: fix VF queue configuration with low MTU values d37a60086ee7 selftests: mptcp: drop nanoseconds width specifier 00ffe9893f4b mptcp: reset rcv wnd on disconnect 1521fecf44fc mptcp: cleanup fallback dummy mapping generation 78f9d747f386 mptcp: use plain bool instead of custom binary enum e043017ac429 octeontx2-af: CGX: add bounds check to cgx_speed_mbps index 1132ca7a1ba8 octeontx2-af: replace deprecated strncpy with strscpy 557edaf01062 platform/x86/intel/vsec: Fix enable_cnt imbalance on PCIe error recovery 969bc6370334 smb: client: require net admin for CIFS SWN netlink e19eff331240 genetlink: Use internal flags for multicast groups 14897ef9341c cgroup/cpuset: Reset DL migration state on can_attach() failure 850452af77f5 ksmbd: fix OOB write in QUERY_INFO for compound requests 6d8f52f3f80a fbdev/vt8500lcdfb: Initialize fb_ops with fbdev macros 666bd0598f37 ipmi:ssif: NULL thread on error 318a0403b270 ipmi:ssif: Remove unnecessary indention ae9d4caf6f13 mm/huge_memory: update file PMD counter before folio_put() 310a8cc74612 soc: qcom: ice: Fix race between qcom_ice_probe() and of_qcom_ice_get() 428a33573dcb mm/hugetlb: avoid false positive lockdep assertion 000e8f55fbc7 driver core: reject devices with unregistered buses b5fa9e32fb67 fs/fcntl: fix SOFTIRQ-unsafe lock order in fasync signaling 201151e120f0 drm/amd/display: Use krealloc_array() in dal_vector_reserve() 7fc4fab4acc3 drm/amd/display: Fix NULL deref and buffer over-read in SDP debugfs 4d1c3c26c2ab drm/amd/display: Clamp VBIOS HDMI retimer register count to array size 79e0273272a0 drm/amd/display: Clamp HDMI HDCP2 rx_id_list read to buffer size 3fe2c6af3f51 drm/amdgpu: restart the CS if some parts of the VM are still invalidated 16dad1fb0d78 drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 62bd09e23a23 drm/amdkfd: fix NULL dereference in get_queue_ids() d54a221b0f3c slimbus: qcom-ngd-ctrl: Avoid ABBA on tx_lock/ctrl->lock 9f4a76c7e9fa slimbus: qcom-ngd-ctrl: fix OF node refcount fc261397295b thunderbolt: Limit XDomain response copy to actual frame size 0dd61ba03d05 thunderbolt: Validate XDomain request packet size before type cast 5db10c8ad8c0 thunderbolt: Clamp XDomain response data copy to allocation size 4d0b1524caad thunderbolt: Bound root directory content to block size 5f56bc6bddff thunderbolt: Reject zero-length property entries in validator 7dd9a42b044a sctp: stream: fully roll back denied add-stream state e97c2a535e23 sctp: diag: reject stale associations in dump_one path 7e60d675288d mmc: sdhci: add signal voltage switch in sdhci_resume_host b46521877611 mmc: renesas_sdhi: Add OF entry for RZ/G2H SoC 6dc14b9b431e mmc: litex_mmc: Set mandatory idle clocks before CMD0 30e727657185 mmc: core: Fix host controller programming for fixed driver type 8d6e1dd3ad13 mm/hugetlb: restore reservation on error in hugetlb folio copy paths f0ca9c7f44a9 octeontx2-af: fix memory leak in rvu_setup_hw_resources() 033d498b0f47 nvmem: layouts: onie-tlv: fix hang on unknown types e7cf30aa5f1f net: rds: clear i_sends on setup unwind 1ccad3ee7998 net: mv643xx: fix OF node refcount a629418d463f net: bonding: fix NULL pointer dereference in bond_do_ioctl() c090df5be6bc net/mlx5: Reorder completion before putting command entry in cmd_work_handler 8fb4a23df5b7 misc: fastrpc: Fix NULL pointer dereference in rpmsg callback d3e26df2e8eb misc: fastrpc: fix DMA address corruption due to find_vma misuse 8b080c891831 misc: fastrpc: fix use-after-free race in fastrpc_map_create df08fadcf0e5 misc: fastrpc: fix use-after-free of fastrpc_user in workqueue context 6560be3f6a5b ipc/shm: serialize orphan cleanup with shm_nattch updates 7a395a147f06 Input: atkbd - skip deactivate for HONOR BCC-N's internal keyboard 81d60181ed55 Input: atkbd - add DMI quirk for Lenovo Yoga Air 14 (83QK) 2d175d6aae9c i2c: tegra: Fix NOIRQ suspend/resume 5bebff5e8492 i2c: stm32f7: fix timing computation ignoring i2c-analog-filter 7107627b8b35 i2c: qcom-cci: Fix NULL pointer dereference in cci_remove() dd92773d4d9c fuse: reject fuse_notify() pagecache ops on directories 254c469a404a pidfd: refuse access to tasks that have started exiting harder 0e823ca0e739 inet: frags: fix use-after-free caused by the fqdir_pre_exit() flush c1234229399f IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN 1a418ad0e5e5 bnxt_en: Fix NULL pointer dereference 6f5285a6054a ASoC: fsl_sai: Fix 32 slots TDM broken by integer shift UB in xMR write dfd853197615 vsock/vmci: fix sk_ack_backlog leak on failed handshake 688fcac7054a wifi: nl80211: reject oversized EMA RNR lists eb13ab2f66e2 selftests: mptcp: add test for extra_subflows underflow on userspace PM 026c4a70e2a9 mptcp: sockopt: check timestamping ret value b1fd13074f22 mptcp: allow subflow rcv wnd to shrink 907ac6b1658e mptcp: close TOCTOU race while computing rcv_wnd f2c9012fc115 mptcp: fix retransmission loop when csum is enabled c2e3aadc8fef ARM: 9475/1: entry: use byte load for KASAN VMAP stack shadow b6290cc96dc8 ARM: 9474/1: io: avoid KASAN instrumentation of raw halfword I/O c35c0763af34 ARM: socfpga: Fix OF node refcount leak in SMP setup 1b585673a224 udp: clear skb->dev before running a sockmap verdict 0c2821665ff7 zram: fix use-after-free in zram_bvec_write_partial() 0d64bc200ebe RDMA/srp: bound SRP_RSP sense copy by the received length 5c97ae9382de mm/damon/ops-common: call folio_test_lru() after folio_get() 5242b5f3c77f drm/amd/display: Reject gpio_bitshift >= 32 in bios_parser_get_gpio_pin_info() 898bd0ccfed7 drm/virtio: fix dma_fence refcount leak on error in virtio_gpu_dma_fence_wait() e2331730175f ALSA: timer: Fix UAF at snd_timer_user_params() a1288cd700f7 USB: serial: kl5kusb105: fix bulk-out buffer overflow f71f8f99a9cd USB: serial: option: add usb-id for Dell Wireless DW5826e-m 4cb722747ed2 USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() d92f17af7097 USB: serial: io_ti: fix heap overflow in get_manuf_info() aa82a078f70f xfrm: espintcp: do not reuse an in-progress partial send 0da2e073f9cb ksmbd: fix use-after-free of a deferred file_lock on double SMB2_CANCEL 07c33be968d9 drm/i915/gem: Fix phys BO pread/pwrite with offset 033d39e41fc3 KVM: Don't WARN if memory is dirtied without a vCPU when the VM is dying 88520b2fecc4 mmc: litex_mmc: Use DIV_ROUND_UP for more accurate clock calculation 1e927a468500 tracing/probes: Point the error offset correctly for eprobe argument error 214a2042b16b Bluetooth: L2CAP: reject BR/EDR signaling packets over MTUsig 1338ee049a89 Bluetooth: hci_sync: reject oversized Broadcast Announcement prepend 8767fe4079af netfilter: nft_tunnel: fix use-after-free on object destroy e0ce103e89d6 drm/vc4: fix krealloc() memory leak ed3e134700a2 drm/virtio: Fix driver removal with disabled KMS c5f438dd2fd8 clk: qcom: dispcc-sc8280xp: Don't park mdp_clk_src at registration time 5e1c1d22268a netfilter: ctnetlink: ensure safe access to master conntrack 5f82b02b4059 ipv6: Fix a potential NPD in cleanup_prefix_route() ccdd7f1949bb net: mvpp2: build skb from XDP-adjusted data on XDP_PASS 580f92f27cb8 net: mvpp2: refill RX buffers before XDP or skb use 26c0986cb613 net: mvpp2: Add metadata support for xdp mode 3b8b0c3631b1 net: mvpp2: limit XDP frame size to the RX buffer bede0f481b91 net: mvpp2: sync RX data at the hardware packet offset cd513e43b4b2 netfilter: nft_exthdr: fix register tracking for F_PRESENT flag 8a81e336da68 netfilter: nf_log: validate MAC header was set before dumping it a0d16941adf3 netfilter: x_tables: avoid leaking percpu counter pointers 29d8cc44bbdf netfilter: nf_conntrack: destroy stale expectfn expectations on unregister eb7e77342e3e rds: mark snapshot pages dirty in rds_info_getsockopt() f513f308cc4b ip6_vti: fix incorrect tunnel matching in vti6_tnl_lookup() 0f22412a2f4f net/rds: fix NULL deref in rds_ib_send_cqe_handler() on masked atomic completion b903e9b5629e net: guard timestamp cmsgs to real error queue skbs 8ce96f118264 sctp: fix uninit-value in __sctp_rcv_asconf_lookup() 22f4ee66614e r8152: handle the return value of usb_reset_device() 25fdf5369853 net: openvswitch: fix possible kfree_skb of ERR_PTR 0bfa7bba1f41 ipv6: sit: reload inner IPv6 header after GSO offloads 41781f278930 net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list 2047c2aa0963 net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove 12fb84dc4dc8 net: phy: clean the sfp upstream if phy probing fails 838f411b8ef8 net/mlx4: avoid GCC 10 __bad_copy_from() false positive ecfe9171b26a tcp: restrict SO_ATTACH_FILTER to priv users 10def23b67b4 ASoC: wm_adsp: Fix NULL dereference when removing firmware controls 7db09011ce62 gpio: mvebu: fix NULL pointer dereference in suspend/resume 07a18f5c90dd netlabel: validate unlabeled address and mask attribute lengths 42827d03f800 xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() f4e4b98cee82 iomap: don't revert iov_iter on partially completed buffered writes fed65bc9de8e arm64: tlb: Optimize ARM64_WORKAROUND_REPEAT_TLBI b7d3add1884c arm64: tlb: Allow XZR argument to TLBI ops 523bc49979b9 KVM: arm64: Remove VPIPT I-cache handling d30aac0fa00c tap: free page on error paths in tap_get_user_xdp() ceafb893b12f net: skbuff: fix missing zerocopy reference in pskb_carve helpers 9eaa4e8d5561 tools/rv: Fix cleanup after failed trace setup 7fce959e9be3 usb: gadget: u_ether: Fix NULL pointer deref in eth_get_drvinfo 36c41e9724c9 usb: gadget: f_ncm: Fix net_device lifecycle with device_move d68b621bb5a4 ALSA: PCM: Fix wait queue list corruption in snd_pcm_drain() on linked streams c12c4cae0cd7 time: Fix off-by-one in settimeofday() usec validation f4aae11abb44 signal: clear JOBCTL_PENDING_MASK for caller in zap_other_threads() 6e39863cefe4 ipmi: Fix rcu_read_unlock to srcu_read_unlock in handle_read_event_rsp 2afc9e684dc7 sctp: purge outqueue on stale COOKIE-ECHO handling 6d6e42e8e17f net/802/mrp: fix vector attribute parsing in mrp_pdu_parse_vecattr 1a827b95e62b ieee802154: 6lowpan: only accept IPv6 packets in lowpan_xmit() 9db4dd019a6b vxlan: vnifilter: fix spurious notification on VNI update 5a7ad529fd53 vxlan: vnifilter: send notification on VNI add e4e7428349d9 octeontx2-af: npc: Fix CPT channel mask in npc_install_flow 72775977e89c net: ethernet: mtk_eth_soc: Fix use-after-free in metadata dst teardown cecdc6574a82 ptp: vclock: Switch from RCU to SRCU 8ff85dbabbbf ipv4: restrict IPOPT_SSRR and IPOPT_LSRR options ba760c38b38b Bluetooth: MGMT: Fix backward compatibility with userspace 0622e527a31d Bluetooth: fix memory leak in error path of hci_alloc_dev() 691f14b6a48b Bluetooth: bnep: reject short frames before parsing 10e90715e68f Bluetooth: bnep: fix incorrect length parsing in bnep_rx_frame() extension handling 98377e6b1a1a Bluetooth: RFCOMM: validate skb length in MCC handlers 74c08e4db35a Bluetooth: MGMT: validate advertising TLV before type checks de31973ef00e Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() 28a6a3762796 net: fec: fix pinctrl default state restore order on resume caeb42f28f00 net: lan743x: permit VLAN-tagged packets up to configured MTU 74e02121be1d net: garp: fix unsigned integer underflow in garp_pdu_parse_attr 271355c2ef61 hsr: Remove WARN_ONCE() in hsr_addr_is_self(). 91cdbb9b308f net: Annotate sk->sk_write_space() for UDP SOCKMAP. daf5a9eef894 pcnet32: stop holding device spin lock during napi_complete_done e732c4444bcf drm/imx: Fix three kernel-doc warnings in dcss-scaler.c 06ce6fc106b1 6lowpan: fix off-by-one in multicast context address compression 8b136f18ac4b net/sched: act_api: use RCU with deferred freeing for action lifecycle b4892561552d dm cache policy smq: check allocation under invalidate lock afd64b59c3de netfilter: bridge: make ebt_snat ARP rewrite writable af80f78ce984 netfilter: nft_ct: bail out on template ct in get eval 7c34f9130529 netfilter: conntrack_irc: fix possible out-of-bounds read 0f8ba5e4c53d netfilter: synproxy: add mutex to guard hook reference counting c6376b9b1b4d ipvs: clear the svc scheduler ptr early on edit 8122abd4fd92 netfilter: xt_NFQUEUE: prefer raw_smp_processor_id 945a86b21b40 ksmbd: fix NULL-deref of opinfo->conn in oplock/lease break notifiers 9a0dc9279d09 tee: optee: prevent use-after-free when the client exits before the supplicant 5d27d2ffe487 net/smc: fix sleep-inside-lock in __smc_setsockopt() causing local DoS 2a613bf49702 ipv6: mcast: Fix use-after-free when processing MLD queries aa6ef7340169 i2c: dev: prevent integer overflow in I2C_TIMEOUT ioctl 067579d5cf8c Disable -Wattribute-alias for clang-23 and newer b26849cffaa7 hwmon: (pmbus/core) Protect regulator operations with mutex d859e53596d1 RDMA/rxe: Fix "trying to register non-static key in rxe_qp_do_cleanup" bug 7502c1cf303b Bluetooth: hci_conn: fix potential UAF in set_cig_params_sync 90dbad14b109 USB: serial: mct_u232: fix memory corruption with small endpoint f8b8f1d4bb76 bpf: Free reuseport cBPF prog after RCU grace period. 37f488be2a82 usb: core: Fix SuperSpeed root hub wMaxPacketSize ff3c2b623bfa HID: core: Fix size_t specifier in hid_report_raw_event() 9e36568e67f8 HID: pass the buffer size to hid_report_raw_event 20a816422e98 HID: core: Add printk_ratelimited variants to hid_warn() etc bb2040484f90 serial: zs: Convert to use a platform device c9e78361fe92 serial: dz: Convert to use a platform device 5fc2943ad6a1 serial: dz: Fix bootconsole handover lockup bef9e8bdbc60 xhci: tegra: Fix ghost USB device on dual-role port unplug 8a65db5edd7b USB: serial: digi_acceleport: fix memory corruption with small endpoints fbf718d5afe2 landlock: Fix handling of disconnected directories 0e96cd314c0d x86/kexec: Disable KCOV instrumentation after load_segments() a55618c0f4ce Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync 4bcaa59f403d USB: serial: cypress_m8: fix memory corruption with small endpoint 36f07474f2b9 serial: zs: Switch to using channel reset 633a33fe1a34 serial: zs: Fix bootconsole handover lockup 6f22119afe53 serial: dz: Fix bootconsole message clobbering at chip reset a8bd09d3d843 drm/amdkfd: Check for pdd drm file first in CRIU restore path 4e5f808b4541 drm/amdkfd: fix a vulnerability of integer overflow in kfd debugger 6495cc09f7e6 drm/amdkfd: fix NULL pointer bug in svm_range_set_attr c33322ef3ce5 serial: fsl_lpuart: fix rx buffer and DMA map leaks in start_rx_dma ea7bdbee9fc3 serial: zs: Fix swapped RI/DSR modem line transition counting 4860f9821baf serial: sh-sci: fix memory region release in error path 70982b7ac673 serial: qcom-geni: fix UART_RX_PAR_EN bit position 3c29f8af029b serial: altera_jtaguart: handle uart_add_one_port() failures a1b9535768ed drm/amd/pm/si: Disregard vblank time when no displays are connected 28b22dbaf407 drm/i915: Fix potential UAF in TTM object purge 049a6b474823 drm/hyperv: validate VMBus packet size in receive callback 1fb565b77b8f drm/hyperv: validate resolution_count and fix WIN8 fallback edd06675a023 scsi: target: iscsi: Validate CHAP_R length before base64 decode 4e9f0c4a645c scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf 163bd704d751 scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 0e3c6e5a8fc1 scsi: fcoe: Reject FIP descriptors with zero fip_dlen in CVL walker 5506c825f14d thunderbolt: property: Reject dir_len < 4 to prevent size_t underflow 8d4a758b407a thunderbolt: property: Reject u32 wrap in tb_property_entry_valid() e835bf9a055f usb: gadget: f_fs: copy only received bytes on short ep0 read a183b47fee46 usb: gadget: dummy_hcd: Reject hub port requests for non-existent ports 046870ff6b6f usb: gadget: composite: fix integer underflow in WebUSB GET_URL handling 5d39924ae38c usb: gadget: f_hid: fix device reference leak in hidg_alloc() 085652fda7f3 usb: gadget: net2280: Fix double free in probe error path 70bb9a2661d3 USB: serial: mct_u232: fix missing interrupt-in transfer sanity check be3a1ed4ae51 USB: serial: mxuport: fix memory corruption with small endpoint 0bde5431037a USB: serial: keyspan: fix missing indat transfer sanity check be50533fe706 USB: serial: cypress_m8: validate interrupt packet headers ffb739a49186 USB: serial: belkin_sa: validate interrupt status length 37a2ac9f5125 USB: serial: option: add missing RSVD(5) flag for Rolling RW135R-GL 5a0e65d56ffd USB: serial: option: add MeiG SRM813Q 17587492179c usb: usbtmc: reject interrupt endpoints with small wMaxPacketSize 5de7df75ef3a usb: usbtmc: check URB actual_length for interrupt-IN notifications a0638db2340e usbip: vudc: Fix use after free bug in vudc_remove due to race condition 02c76e026c06 usb: storage: Add quirks for PNY Elite Portable SSD aec4d38ac605 USB: quirks: add NO_LPM for Lenovo ThinkPad USB-C Dock Gen2 hub controllers e21f5abf80ad usb: core: Fix up Interrupt IN endpoints with bogus wBytesPerInterval 028cc2555eca usb: chipidea: core: convert ci_role_switch to local variable 6dd5c0ea139b tty: serial: pch_uart: add check for dma_alloc_coherent() 68f603bb8622 counter: Fix refcount leak in counter_alloc() error path 9fa854ea4318 comedi: comedi_test: Fix limiting of convert_arg in waveform_ai_cmdtest() 422af0f9ce0c comedi: comedi_test: fix check for valid scan_begin_src in waveform_ai_cmdtest() 2ad3397f3cc5 Input: synaptics - add LEN2058 to SMBus passlist for ThinkPad E490 e9b62996ba53 Input: atmel_mxt_ts - fix boundary check in mxt_prepare_cfg_mem 0fe08c5776a7 ksmbd: OOB read regression in smb_check_perm_dacl() ACE-walk loops ba451cf21f1d Input: xpad - add support for ASUS ROG RAIKIRI II 6e6de3eba8e4 Input: xpad - add "Nova 2 Lite" from GameSir 322e48187e02 xfrm: esp: restore combined single-frag length gate d780c61bd2ef ASoC: qcom: q6asm-dai: do not set stream state in event and trigger callbacks ed4e2ff1ddd1 ASoC: qcom: q6asm-dai: close stream only when running 2bb6d82b586e netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check 32aa292fbcb9 xfrm: ah: use skb_to_full_sk in async output callbacks 00f2c451e57d xfrm: route MIGRATE notifications to caller's netns c4cc6b3b0013 nfc: hci: fix out-of-bounds read in HCP header parsing 1552b979a0b6 iommu, debugobjects: avoid gcc-16.1 section mismatch warnings ed598de9f615 HID: wacom: Fix OOB write in wacom_hid_set_device_mode() f1e89a943ee5 ip6: vti: Use ip6_tnl.net in vti6_changelink(). 48ce101cd630 xfrm: input: hold netns during deferred transport reinjection a29768d56eb3 ipv6: validate extension header length before copying to cmsg 1acfb7d9c6fc ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). 12d957979e4a ipv6: exthdrs: refresh nh after handling HAO option f21a9285147a ASoC: qcom: q6asm-dai: fix error handling in prepare and set_params bddaa4dfc7f3 ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo() 679e13a65e68 macsec: fix replay protection at XPN lower-PN wrap 96b72672ce84 bpf: sockmap: fix tail fragment offset in bpf_msg_push_data 48b0aa9c08a3 Input: elan_i2c - validate firmware size before use 0584af4fe40f usb: dwc2: Fix use after free in debug code c28bfafa9d70 usb: cdns3: plat: fix unbalanced pm_runtime_forbid() call permanently leaks the runtime PM usage counter across bind/unbind cycles 96291794d162 usb: cdns3: gadget: fix request skipping after clearing halt 9a3860454bdf USB: serial: omninet: fix memory corruption with small endpoint 29783e6b6ec0 iio: buffer: hw-consumer: fix use-after-free in error path d291f76e4231 iio: light: cm3323: fix reg_conf not being initialized correctly d534936cf3ac iio: magnetometer: st_magn: fix default DRDY pin selection for LIS2MDL c43741113cd6 iio: temperature: tsys01: fix broken PROM checksum validation b5d9befff543 iio: ssp_sensors: cancel delayed work_refresh on remove 31bbd4b87dd6 iio: gyro: itg3200: fix i2c read into the wrong stack location d434a6abd101 iio: adc: viperboard: Fix error handling in vprbrd_iio_read_raw 1c375f2c4a7a iio: dac: ad5686: acquire lock when doing powerdown control 99d8feee7560 iio: dac: ad5686: fix input raw value check 9a8fca2af3aa iio: dac: max5821: fix return value check in powerdown sync baff1f00d8b5 iio: adc: xilinx-xadc: Fix sequencer mode in postdisable for dual mux 7b9dcbe89d7a wireguard: send: append trailer after expanding head a452ca80b7ad KVM: SVM: Flush the current TLB when transitioning from xAVIC => x2AVIC c881af73ae98 KVM: arm64: PMU: Preserve AArch32 counter low bits ecc9635e7501 USB: cdc-acm: Fix bit overlap and move quirk definitions to header 15b1723c1472 parport: Fix race between port and client registration bcfb4833cd40 Input: xpad - fix out-of-bounds access for Share button 35f68f36d988 Bluetooth: ISO: serialize iso_sock_clear_timer with socket lock 119fb6f80c44 Bluetooth: ISO: fix UAF in iso_recv_frame d313683d6ccd Bluetooth: HIDP: fix missing length checks in hidp_input_report() 63cd225cc13d Bluetooth: L2CAP: fix chan ref leak in l2cap_chan_timeout() on !conn 89dec9204171 Bluetooth: L2CAP: use chan timer to close channels in cleanup_listen() 8776032fe989 auxdisplay: line-display: fix OOB read on zero-length message_store() 157ce2c6836c ipc: limit next_id allocation to the valid ID range 7c58c55a2a16 hpfs: fix a crash if hpfs_map_dnode_bitmap fails dcd2b02b095f Bluetooth: btusb: Allow firmware re-download when version matches 4c52e31e9ea6 HID: quirks: Add ALWAYS_POLL quirk for SIGMACHIP USB mouse 0cd7b3a15a49 Input: ims-pcu - fix usb_free_coherent() size in ims_pcu_buffers_free() 060fca8e0983 media: rc: igorplugusb: fix control request setup packet 9b3145b3001f USB: serial: safe_serial: fix memory corruption with small endpoint 156b6f0aec61 usb: typec: ucsi: validate connector number in ucsi_connector_change() 0af00f1459f5 usb: typec: tcpm/tcpci_maxim: validate header NDO against RX_BYTE_CNT 5cd0e7ac4eef usb: typec: wcove: don't write past struct pd_message in wcove_read_rx_buffer() 70e7045849e9 usb: typec: altmodes/displayport: validate count before reading Status Update VDO 592cbdc644c6 usb: typec: ucsi: displayport: NAK DP_CMD_CONFIGURE without a payload VDO 3f432b820306 usb: typec: ucsi: ccg: reject firmware images without a ':' record header d42ac0bfb6a1 iio: imu: st_lsm6dsx: fix stack leak in tagged FIFO buffer d1c9c79eb06e soc/tegra: pmc: Fix unsafe generic_handle_irq() call 0bb1522d3081 hwmon: (pmbus/adm1266) serialize NVMEM blackbox read with pmbus_lock 96852c116071 hwmon: (pmbus/adm1266) serialize GPIO PMBus accesses with pmbus_lock 7e2476057950 x86/kexec: add a sanity check on previous kernel's ima kexec buffer 566db3370f12 of/kexec: refactor ima_get_kexec_buffer() to use ima_validate_range() 43308106a176 ima: verify the previous kernel's IMA buffer lies in addressable RAM e1d839efc1e4 phy: mscc: Use PHY_ID_MATCH_EXACT for VSC8584, VSC8582, VSC8575, VSC856X 64858b76ec67 arm64: io: Extract user memory type in ioremap_prot() 4356c4d85050 arm64: io: Rename ioremap_prot() to __ioremap_prot() 05ff52238039 drm/i915/psr: Apply Intel DPCD workaround when SDP on prior line used 45e27857b24e drm/dp: Add eDP 1.5 bit definition ac7045d3f6d3 drm/i915/psr: Read Intel DPCD workaround register 28557e9deb23 drm/i915/psr: Add defininitions for INTEL_WA_REGISTER_CAPS DPCD register 22ee4010866d inet: frags: flush pending skbs in fqdir_pre_exit() e0fc5427d6a8 inet: frags: add inet_frag_queue_flush() 711ebd961190 drm, fbcon, vga_switcheroo: Avoid race condition in fbcon setup f707f53f9ff5 drm/fbdev-helper: Set and clear VGA switcheroo client from fb_info 228cc232079d media: rc: ttusbir: fix inverted error logic a7becb58f6b8 media: rc: fix race between unregister and urb/irq callbacks 3edb8ebbf79b mm/page_alloc: clear page->private in free_pages_prepare() a9393751ecf7 batman-adv: bla: avoid double decrement of bla.num_requests 99f17d1cdb37 batman-adv: tt: avoid empty VLAN responses 65a1e67339aa batman-adv: tt: fix TOCTOU race for reported vlans 5bc2d50fb66b batman-adv: tp_meter: directly shut down timer on cleanup 3c19cb8a84ef net: af_key: zero aligned sockaddr tail in PF_KEY exports 100953b5011d batman-adv: tp_meter: avoid role confusion in tp_list cf12f8881832 batman-adv: iv: recover OGM scheduling after forward packet error 13493b00dd1e batman-adv: tvlv: reject oversized TVLV packets 2a8c9e865291 batman-adv: bla: avoid NULL-ptr deref for claim via dropped interface a5904f2c92b0 batman-adv: tt: reject oversized local TVLV buffers fcedc98bd03c batman-adv: tvlv: abort OGM send on tvlv append failure 31dcb9711abd batman-adv: v: stop OGMv2 on disabled interface ae1ada0af162 perf: Fix dangling cgroup pointer in cpuctx 1488367423a6 net: skbuff: fix pskb_carve leaking zcopy pages c87cd3cb3096 ipv6: fix possible infinite loop in fib6_select_path() 279853aec9f5 ipv6: fix possible infinite loop in rt6_fill_node() 634a9af8a26a sctp: fix race between sctp_wait_for_connect and peeloff 95e414f83243 net: mana: Add NULL guards in teardown path to prevent panic on attach failure 88403b42faa8 gpio: rockchip: convert bank->clk to devm_clk_get_enabled() 6319b38fe69f Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp cc2b4f749de0 Bluetooth: l2cap: clear chan->ident on ECRED reconfiguration success 97e06791368c ipv6: rpl: fix hdrlen overflow in ipv6_rpl_srh_decompress() 65674d2489a1 ethtool: eeprom: add more safeties to EEPROM Netlink fallback 091b58d9a65b ethtool: eeprom: add missing ethnl_ops_begin() / _complete() during fallback f4d78a81f57d bonding: refuse to enslave CAN devices b06203ac5f12 Bluetooth: 6lowpan: check skb_clone() return value in send_mcast_pkt() 5fe860af8630 ASoC: codecs: simple-mux: Fix enum control bounds check 3127a884525d ksmbd: fix FSCTL permission bypass by adding a permission check for FSCTL_SET_SPARSE e917d0c69f01 tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() dc3bfa050f87 vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() 76cd9398a047 tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() 5165922a8b5c gpio: mxc: fix irq_high handling a4b64f3e9c7b net: hsr: fix potential OOB access in supervision frame handling e9e1dbdee16e ASoC: Intel: bytcht_es8316: Fix MCLK leak on init errors 8e59d4d0dcde ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() 15fb19af49f2 scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues cd691beafea0 net/iucv: fix locking in .getsockopt ed7a75831301 net/smc: Do not re-initialize smc hashtables e523bb6d1de3 net: netlink: don't set nsid on local notifications 490a6ef32ab2 net: netlink: fix sending unassigned nsid after assigned one 20f977a75333 vsock: keep poll shutdown state consistent 60d9c0d6cdde tun: free page on build_skb failure in tun_xdp_one() 5b34f9e4fe2f tun: free page on short-frame rejection in tun_xdp_one() b80ef316e978 netfilter: nf_tables: fix dst corruption in same register operation ce0712149e21 netfilter: bitwise: add support for doing AND, OR and XOR directly 45cb4821021e netfilter: bitwise: rename some boolean operation functions a27cb7325a6c netfilter: ebtables: fix OOB read in compat_mtw_from_user 21994d11461b netfilter: xt_cpu: prefer raw_smp_processor_id af2c22ccb1f6 netfilter: synproxy: refresh tcphdr after skb_ensure_writable d0cbeaa85b58 nfc: nxp-nci: i2c: use rising-edge IRQ on ACPI systems fccd685b32df xfrm: Check for underflow in xfrm_state_mtu ee2d1a8a1833 nfc: llcp: Fix use-after-free race in nfc_llcp_recv_cc() e00f50f86977 nfc: llcp: Fix use-after-free in llcp_sock_release() 67cca9df4d17 net: cpsw_new: Fix potential unregister of netdev that has not been registered yet 4f33d74ccf69 bcache: fix uninitialized closure object b4a659bae3b8 drm: Remove plane hsub/vsub alignment requirement for core helpers 6c153d97c100 net/sched: sch_sfb: Replace direct dequeue call with peek and qdisc_dequeue_peeked 963537a26fd8 net: mctp: ensure our nlmsg responses are initialised 5df49f0579f7 net/sched: cls_fw: fix NULL dereference of "old" filters before change() d883312061cc Input: usbtouchscreen - clamp NEXIO data_len/x_len to URB buffer size (From OE-Core rev: f716609076112c273dda2809694d6db10ff856e6) Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> Signed-off-by: Yoann Congal <yoann.congal@smile.fr> Signed-off-by: Paul Barker <paul@pbarker.dev>	2026-07-30 13:21:15 +01:00
Ankur Tyagi	211a713181	wireless-regdb: upgrade 2026.03.18 -> 2026.05.30 ... (From OE-Core rev: 2fd02dbbf0328724de521fffdb1dfc56e4ca098e) Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 86e35bc1ab5fb2132b06b666fe73fc9bd6446ab6) Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com> [YC: Changelog: https://git.kernel.org/pub/scm/linux/kernel/git/wens/wireless-regdb.git/log/?qt=range&q=master-2026-03-18..master-2026-05-30 ] Signed-off-by: Yoann Congal <yoann.congal@smile.fr> Signed-off-by: Paul Barker <paul@pbarker.dev>	2026-07-22 21:08:55 +01:00
Ankur Tyagi	4f83b7b498	wireless-regdb: upgrade 2026.02.04 -> 2026.03.18 ... (From OE-Core rev: 67786616508c010b3dfb7f0951b5a70bb69050d7) Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 97a940bfdeaa3f9f4442a6fbb0fabe1ce5eaff69) Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com> [YC: Changelog: https://git.kernel.org/pub/scm/linux/kernel/git/wens/wireless-regdb.git/log/?qt=range&q=master-2026-02-04..master-2026-03-18 "wireless-regdb: Replace M2Crypto with cryptography package" only impacts signing code that maintainers run. ] Signed-off-by: Yoann Congal <yoann.congal@smile.fr> Signed-off-by: Paul Barker <paul@pbarker.dev>	2026-07-22 21:08:55 +01:00
Esa Jaaskela	dbf61c2308	linux-yocto/6.6: update CVE exclusions (6.6.142) ... Regenerated to fix this warning: WARNING: linux-yocto-6.6.142+git-r0 do_cve_check: Kernel CVE status needs updating: generated for 6.6.127 but kernel is 6.6.142 $ ./meta/recipes-kernel/linux/generate-cve-exclusions.py .../cvelistV5/ 6.6.142 > meta/recipes-kernel/linux/cve-exclusion_6.6.inc Generated at 2026-07-07 17:39:10.952928+00:00 for kernel version 6.6.142 From cvelistV5 cve_2026-07-07_1600Z (From OE-Core rev: 923038b75d09c0966ec42b1460faf306adecc8c2) Signed-off-by: Esa Jaaskela <esa.jaaskela@suomi24.fi> Signed-off-by: Yoann Congal <yoann.congal@smile.fr> Signed-off-by: Paul Barker <paul@pbarker.dev>	2026-07-20 09:04:32 +01:00
Bruce Ashfield	3482e7f32a	linux-yocto/6.6: address ltp hang ... Integrating the following commit(s) to linux-yocto/6.6: 1/1 [ Author: Baokun Li Email: libaokun1@huawei.com Subject: ext4: get rid of ppath in get_ext_path() Date: Thu, 22 Aug 2024 10:35:32 +0800 The use of path and ppath is now very confusing, so to make the code more readable, pass path between functions uniformly, and get rid of ppath. After getting rid of ppath in get_ext_path(), its caller may pass an error pointer to ext4_free_ext_path(), so it needs to teach ext4_free_ext_path() and ext4_ext_drop_refs() to skip the error pointer. No functional changes. Signed-off-by: Baokun Li <libaokun1@huawei.com> Reviewed-by: Jan Kara <jack@suse.cz> Reviewed-by: Ojaswin Mujoo <ojaswin@linux.ibm.com> Tested-by: Ojaswin Mujoo <ojaswin@linux.ibm.com> Link: https://patch.msgid.link/20240822023545.1994557-13-libaokun@huaweicloud.com Signed-off-by: Theodore Ts'o <tytso@mit.edu> ] (From OE-Core rev: 737293bead3e7b994347e47f09bc69437479d50c) Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> [YC: more detail at https://lore.kernel.org/openembedded-core/DJGKEQF8GRU1.RF7JY64COTAA@smile.fr/T/#u] Signed-off-by: Yoann Congal <yoann.congal@smile.fr> Signed-off-by: Paul Barker <paul@pbarker.dev>	2026-06-26 16:55:55 +01:00
Bruce Ashfield	8cfb09a6b0	linux-yocto/6.6: genericarm64 fix configuration audit warning ... Integrating the following commit(s) to linux-yocto/.: 1/1 [ Author: Bruce Ashfield Email: bruce.ashfield@gmail.com Subject: genericarm64/serial: change SERIAL_IMX_CONSOLE to =y Date: Fri, 19 Jun 2026 00:54:55 +0200 With the following upstream commit, this option is no longer tristate, so we set it to =y instead: commit 3f8b835a63341163da0400befb3c6e8f6d4085da Author: Randy Dunlap <rdunlap@infradead.org> Date: Sat Jan 10 15:26:40 2026 -0800 serial: imx: change SERIAL_IMX_CONSOLE to bool [ Upstream commit 79527d86ba91c2d9354832d19fd12b3baa66bd10 ] SERIAL_IMX_CONSOLE is a build option for the imx driver (SERIAL_IMX). It does not build a separate console driver file, so it can't be built as a module since it isn't built at all. Change the Kconfig symbol from tristate to bool and update the help text accordingly. Fixes: 0db4f9b91c86 ("tty: serial: imx: enable imx serial console port as module") Signed-off-by: Randy Dunlap <rdunlap@infradead.org> Link: https://patch.msgid.link/20260110232643.3533351-2-rdunlap@infradead.org Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org> Signed-off-by: Sasha Levin <sashal@kernel.org> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> (cherry picked from commit 465cb5bcefd72f429e0b3ad6ab5b3fcff5b390fc) Signed-off-by: Yoann Congal <yoann.congal@smile.fr> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> ] (From OE-Core rev: 535c5940d92c39d220ab2d36b15c2dc31b41b8e0) Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> Signed-off-by: Yoann Congal <yoann.congal@smile.fr> Signed-off-by: Paul Barker <paul@pbarker.dev>	2026-06-26 16:55:55 +01:00
He Zhe	e5db0f30c8	lttng-modules: Fix trace_hrtimer_start build failure ... Fix the following build failure probes/../../include/lttng/tracepoint-event-impl.h:133:6: error: conflicting types for 'trace_hrtimer_start'; have 'void(struct hrtimer *, enum hrtimer_mode)' 133 | void trace_##_name(_proto); | ^~~~~~ (From OE-Core rev: e0598e2bbf9513ad71dea185a540de16996c4114) Signed-off-by: He Zhe <zhe.he@windriver.com> [YC: backported from wrynose commit e32cbc177dae ("lttng-modules: Fix trace_hrtimer_start build failure"). This is a partial backport of commit 7dae5f40e394 ("lttng-modules: fix build against kernel 7.1+")] Signed-off-by: Yoann Congal <yoann.congal@smile.fr> Signed-off-by: Paul Barker <paul@pbarker.dev>	2026-06-26 16:55:55 +01:00
Bruce Ashfield	b61b34f6f8	linux-yocto/6.6: update to v6.6.142 ... Updating linux-yocto/6.6 to the latest korg -stable release that comprises the following commits: 924b4a879cbb Linux 6.6.142 cefa4265b111 security/keys: fix missed RCU read section on lookup 105c6a594b3f LoongArch: kprobes: Fix handling of fatal unrecoverable recursions 1f9c82855641 net: gro: don't merge zcopy skbs f504118252af pds_core: ensure null-termination for firmware version strings d3f3d6fa0cad pds_core: add an error code check in pdsc_dl_info_get 01f7f893d5e1 net: mana: validate rx_req_idx to prevent out-of-bounds array access 3dee2fe0c818 ASoC: cs35l56: Fix flushing of IRQ work in cs35l56_sdw_remove() d798b25c24f4 gpio: cdev: check if uAPI v2 config attributes are correctly zeroed 0f1fd5e83f0b gpiolib: cdev: use !mem_is_zero() instead of memchr_inv(s, 0, n) cd87492b79d1 string: add mem_is_zero() helper to check if memory area is all zeros c9ea01768903 bpf, skmsg: fix verdict sk_data_ready racing with ktls rx 40fc66218ad1 net: ag71xx: check error for platform_get_irq 2a1905730e0c Bluetooth: btmtk: fix urb->setup_packet leak in error paths f04578422154 Bluetooth: btmtk: move btusb_mtk_hci_wmt_sync to btmtk.c 73377cf3056a Bluetooth: btmtk: rename btmediatek_data aa58d8366269 Bluetooth: btusb: mediatek: refactor the function btusb_mtk_reset b748250d778e Bluetooth: btmtk: add the function to get the fw name e91687643c44 tracing: Avoid NULL return from hist_field_name() on truncation 8ba1c4ddbb1c ALSA: seq: Serialize UMP output teardown with event_input e5604a480487 ALSA: seq: ump: Use guard() for locking b6d3d3816c67 ptrace: Convert ptrace_attach() to use lock guards 60ef1675b652 pds_core: fix debugfs_lookup dentry leak and error handling 3231aff8ab26 pds_core: fix error handling in pdsc_devcmd_wait 1900ca8acb92 bridge: mcast: Fix a possible use-after-free when removing a bridge port 6e79715b7b8a net: bridge: Flush multicast groups when snooping is disabled 00904a73272b RDMA/rtrs: Fix use-after-free in path file creation cleanup a7685f4d90c1 platform/x86: intel-vbtn: Check ACPI_HANDLE() against NULL 527a7990e663 platform/x86: intel-hid: Check ACPI_HANDLE() against NULL 6ea1690b24e9 platform/x86: hp_accel: Check ACPI_COMPANION() against NULL 32ba2ce2b15f platform/x86: adv_swbutton: Check ACPI_HANDLE() against NULL 566f42fb67a7 net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer 314a94c47d28 net: dsa: mt7530: preserve VLAN tags on trapped link-local frames 1bddf306212a net: dsa: mt7530: rename mt753x_bpdu_port_fw enum to mt753x_to_cpu_fw d2be607d042d net: dsa: mt7530: fix FDB entries not aging out with short timeout 69a0885079c9 wifi: ath11k: fix peer resolution on rx path when peer_id=0 070e40acc59e drm/msm/snapshot: fix dumping of the unaligned regions dd844b31f4ea spi: mtk-snfi: Fix resource leak in mtk_snand_read_page_cache() 5c54c482934b net/mlx5: Do not restore destination-less TC rules d65b279a1898 tls: Preserve sk_err across recvmsg() when data has been copied 1822997aa8c2 x86/xen: Fix xen_e820_swap_entry_with_ram() 06cc5ad2c112 net: phy: DP83TC811: add reading of abilities d04494596b5e net: phy: c45: add genphy_c45_pma_read_ext_abilities() function acdc12b71c9a net: tls: prevent chain-after-chain in plain text SG 131ef12057d9 net: tls: fix off-by-one in sg_chain entry count for wrapped sk_msg ring d38ba387244e net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot a09d07ac45e2 powerpc/time: Remove redundant preempt_disable|enable() calls from arch_irq_work_raise() 7256e54583ae drm/msm: Fix iommu_map_sgtable() return value check and avoid WARN 567b5e976e2e drm/msm/dsi: don't dump registers past the mapped region b40e10c72df5 ethtool: fix ethnl_bitmap32_not_zero() bit interval semantics 720c76b930c5 net/smc: avoid NULL deref of conn->lnk in smc_msg_event tracepoint 9baafc2fea09 accel/qaic: Add overflow check to remap_pfn_range during mmap f775be13d342 HID: quirks: really enable the intended work around for appledisplay a5db6a7c062f wifi: ath11k: fix error path leak in ath11k_tm_cmd_wmi_ftm() 3d675896ea03 wifi: ath11k: fix error path leaks in some WMI WOW calls b77be98447c4 net: ethernet: cs89x0: remove stale CONFIG_MACH_MX31ADS reference 78cf08b3be47 net: ethernet: cortina: Carry over frag counter 68c9c3ac9ce5 net: ethernet: cortina: Drop half-assembled SKB 3b249988d774 net: ethernet: cortina: Make RX SKB per-port 00efe58bbdcc netfs: Fix overrun check in netfs_extract_user_iter() 0df68fd72b2a zonefs: handle integer overflow in zonefs_fname_to_fno eef4f71b46a9 irq_work: Fix use-after-free in irq_work_single() on PREEMPT_RT 6760af11a26e irqchip/ath79-cpu: Remove unused function 6af5fd2ffda1 phy: marvell: mvebu-a3700-utmi: fix incorrect USB2_PHY_CTRL register access b0cc58e8f749 net: lan966x: avoid unregistering netdev on register failure 9e1c9b957344 ice: fix locking in ice_dcb_rebuild() 07d77d774f71 tcp: Fix imbalanced icsk_accept_queue count. 08d355936fcf test_kprobes: clear kprobes between test runs 8a5f01446021 kprobes: skip non-symbol addresses in kprobe_add_ksym_blacklist() 99948d73a8c7 netfilter: x_tables: unregister the templates first 26b2290baaf6 btrfs: tracepoints: fix sleep while in atomic context in btrfs_sync_file() 542b49d2cf12 ALSA: hda: cs35l56: Put ACPI device after setting companion 508b1193d63b ARM: integrator: Fix early initialization fb3ff02dd444 pinctrl: qcom: Fix wakeirq map by removing disconnected irqs for sm8150 7d694570281a kunit: config: KUNIT_DEBUGFS should depend on DEBUG_FS 0df3f3031517 kunit: config: Enable KUNIT_DEBUGFS by default 8b0f4e3b7ad6 firmware: arm_ffa: Skip free_pages on RX buffer alloc failure adfff93d08a2 firmware: arm_ffa: Check for NULL FF-A ID table while driver registration 58ab91af4124 HID: uclogic: Fix regression of input name assignment a2d1c819348b hwmon: (pmbus/adm1266) reject short block-read responses in the GPIO accessors 20d626463e3f hwmon: (pmbus/adm1266) register the nvmem device after pmbus_do_probe() cba4f1122dfb hwmon: (pmbus/adm1266) register the gpio_chip after pmbus_do_probe() 6b5573b63e30 hwmon: (pmbus/adm1266) don't clobber GPIO bits before PDIO read in get_multiple 4d1da9a6be5a hwmon: (pmbus/adm1266) cap PDIO scan in get_multiple at ADM1266_PDIO_NR 60c4b9fe1a3d hwmon: (pmbus/adm1266) bounce blackbox records through a protocol-sized buffer d94ceb16e55b hwmon: (pmbus/adm1266) include PEC byte in pmbus_block_xfer read buffer f85c81e93dbd hwmon: (pmbus/adm1266) reject implausible blackbox record_count 025cfc7a09c5 hwmon: (pmbus/adm1266) seed timestamp from the real-time clock 32edd2a28e11 batman-adv: tt: fix negative tt_buff_len 22d59c72f4a4 batman-adv: tt: fix negative last_changeset_len c2c88736022c batman-adv: tp_meter: fix race condition in send error reporting 0b1bedf114ea batman-adv: tp_meter: fix tp_vars reference leak in receiver shutdown 53f931e0146a batman-adv: tp_meter: avoid use of uninit sender vars 48663158222b batman-adv: bla: fix report_work leak on backbone_gw purge b54e459cf869 batman-adv: frag: disallow unicast fragment in fragment c1bac194733a batman-adv: fix tp_meter counter underflow during shutdown f653b040dad1 batman-adv: fix fragment reassembly length accounting 866ac1d57040 batman-adv: dat: handle forward allocation error 6de089b545db batman-adv: clear current gateway during teardown 70bcb678561f batman-adv: mcast: fix use-after-free in orig_node RCU release 90c398e822ca drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async fb30a3890d62 drm/amd/display: Validate GPIO pin LUT table size before iterating 266b21b57fbb drm/amd/display: Fix integer overflow in bios_get_image() e4d3d33ab7bd drm/bridge: megachips: remove bridge when irq request fails 25473edcdaef drm/bridge: it66121: acquire reset GPIO in probe 21ab64c77a30 drm/virtio: use uninterruptible resv lock for plane updates 371f53925a67 device property: set fwnode->secondary to NULL in fwnode_init() fb3539b367f5 LoongArch: Remove unused code to avoid build warning 14553be882d9 RDMA/siw: Reject MPA FPDU length underflow before signed receive math f2dc841d7dc9 spi: ti-qspi: fix use-after-free after DMA setup failure 450c319dd04d spi: sprd: fix error pointer deref after DMA setup failure 309c6058622d scsi: isci: Fix use-after-free in device removal path 9d5ae6b8d9ec phy: tegra: xusb: Fix per-pad high-speed termination calibration 45760b72e84c spi: qup: fix error pointer deref after DMA setup failure 3c83a6912c24 drm/bridge: chipone-icn6211: use devm_drm_bridge_add in i2c probe dab9f93251b2 KVM: arm64: vgic-its: Reject restored DTE with out-of-range num_eventid_bits e0790046f6be arm64: probes: Handle probes on hinted conditional branch instructions f383cff9fb38 tracing: Do not call map->ops->elt_free() if elt_alloc() fails bdc349a87f1f cifs: Fix busy dentry used after unmounting 1ced0f5a851f wifi: cfg80211: advance loop vars in cfg80211_merge_profile() a3a4366731a5 ice: fix setting promisc mode while adding VID filter add70e2682c0 ixgbevf: fix use-after-free in VEPA multicast source pruning 3c5411fa4944 ipv4: raw: reject IP_HDRINCL packets with ihl < 5 f50c3ff97c83 wifi: ath11k: clear shared SRNG pointer state on restart ce29d3bf79a2 vsock/virtio: reset connection on receiving queue overflow cc27e989a5df vsock/vmci: fix UAF when peer resets connection during handshake 273a1481c556 ring-buffer: Fix reporting of missed events in iterator 3904b993cc17 qed: fix double free in qed_cxt_tables_alloc() c161ad9157f5 netfilter: nft_inner: Fix IPv6 inner_thoff desync c281e018af98 netfilter: ipset: stop hash:* range iteration at end 1e5e20031c5e netfilter: nf_queue: hold bridge skb->dev while queued 41ec2e242f17 netfilter: ip6t_hbh: reject oversized option lists 16bd798cb6d8 net: ifb: report ethtool stats over num_tx_queues 289499907399 net: bcmgenet: keep RBUF EEE/PM disabled 8420aa490041 phonet/pep: disable BH around forwarded sk_receive_skb() be43e6b40431 Bluetooth: serialize accept_q access a143ce77a529 Bluetooth: MGMT: validate Add Extended Advertising Data length 9d20d48be2c4 Bluetooth: hci_uart: fix UAFs and race conditions in close and init paths fe69f634b076 Bluetooth: bnep: Fix UAF read of dev->name 3af41ee7ebec Bluetooth: ISO: drop ISO_END frames received without prior ISO_START 5d86d2f1b4d9 Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del() 6f63a60580eb net: wwan: iosm: fix potential memory leaks in ipc_imem_init() 686b4283f82c drivers/base/memory: fix memory block reference leak in poison accounting 29cd94e678fc efi: Allocate runtime workqueue before ACPI init 7b6f8c8eb93f ALSA: asihpi: Fix potential OOB array access at reading cache 41a766c64729 ALSA: pcm: Don't setup bogus iov_iter for silencing dade81458966 ALSA: ua101: Reject too-short USB descriptors 0dbf64c50244 hwmon: (pmbus/adm1266) widen blackbox-info buffer to I2C_SMBUS_BLOCK_MAX adcfb16ae402 smb/server: promote S_DEL_ON_CLS to S_DEL_PENDING when close 7df1df6f40c0 smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() 9d378e17c864 ksmbd: fix SID memory leak in set_posix_acl_entries_dacl() on overflow e43cb36d4d78 ksmbd: fix null pointer dereference in compare_guid_key() 082351f9d400 mm/damon/sysfs-schemes: call missing mem_cgroup_iter_break() 31527d80234c sysfs: don't remove existing directory on update failure ad7520628c74 Revert "af_unix: Reject SIOCATMARK on non-stream sockets" f624070c322d Revert "s390/cio: Update purge function to unregister the unused subchannels" 7963b6141b4c Revert "ice: Remove jumbo_remove step from TX path" 6331b0f7b71e Revert "ice: fix double-free of tx_buf skb" 2035acfb1722 smb: client: reject userspace cifs.spnego descriptions 3106f326f67c af_unix: Give up GC if MSG_PEEK intervened. 3a436932eb39 ksmbd: close durable scavenger races against m_fp_list lookups 712cdf917e77 ksmbd: validate owner of durable handle on reconnect 7f0cb478703c ksmbd: add durable scavenger timer 50a23fa28e76 ksmbd: avoid reclaiming expired durable opens by the client 2682bf9a804b Revert "x86/vdso: Fix output operand size of RDPID" ba5b43db126a wifi: mac80211: check tdls flag in ieee80211_tdls_oper a052c2d8399a s390/debug: Reject zero-length input before trimming a newline 492349e5e4a3 driver core: platform: use generic driver_override infrastructure 64a3ee535bd7 driver core: generalize driver_override in struct device fabfed1afe27 spi: spidev: fix lock inversion between spi_lock and buf_lock 6a3af482188f mptcp: pm: ADD_ADDR rtx: free sk if last 9426265e157d mptcp: pm: ADD_ADDR rtx: always decrease sk refcount 19a3ec9ef176 mptcp: pm: ADD_ADDR rtx: allow ID 0 b386aa38b81d mptcp: sync the msk->sndbuf at accept() time (From OE-Core rev: ba0f120f6cdbcc1d2782bef27c101e20a11f0f19) Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> Signed-off-by: Yoann Congal <yoann.congal@smile.fr> Signed-off-by: Paul Barker <paul@pbarker.dev>	2026-06-26 16:55:55 +01:00
Bruce Ashfield	1abb9145fc	linux-yocto/6.6: update to v6.6.141 ... Updating linux-yocto/6.6 to the latest korg -stable release that comprises the following commits: 0a40c6fbd105 Linux 6.6.141 f9957ea12103 netfs: Fix potential uninitialised var in netfs_extract_user_iter() 989214c66884 net: skbuff: propagate shared-frag marker through frag-transfer helpers 78bf6b6bb195 net: skbuff: preserve shared-frag marker during coalescing 9115669faedc net/rds: reset op_nents when zerocopy page pin fails 864889ea15f0 mptcp: pm: ADD_ADDR rtx: resched blocked ADD_ADDR quicker 013dcdc19615 mptcp: pm: ADD_ADDR rtx: fix potential data-race b21823f637e0 spi: sifive: fix controller deregistration 524202b00b91 spi: sifive: Simplify clock handling with devm_clk_get_enabled() bf76b4a58c1a media: nxp: imx8-isi: Reduce minimum queued buffers from 2 to 0 9c7c941d2242 spi: st-ssc4: fix controller deregistration d8cd9fb5e655 spi: st-ssc4: switch to use modern name a7fb771314fb ksmbd: validate inherited ACE SID length 190e570cc0fc RDMA/mana: Fix error unwind in mana_ib_create_qp_rss() 8358a142f2a1 f2fs: fix false alarm of lockdep on cp_global_sem lock 6b050c4cfade f2fs: fix incorrect file address mapping when inline inode is unwritten f63201f674ee mptcp: pm: kernel: correctly retransmit ADD_ADDR ID 0 93a9014029e4 mptcp: pm: prio: skip closed subflows 0750c7935feb mptcp: fix rx timestamp corruption on fastopen 11fdbd033e4c mptcp: drop __mptcp_fastopen_gen_msk_ackseq() 7d7c9f0fcd19 RDMA/mana: Validate rx_hash_key_len cc3c0a0f9657 btrfs: fix missing last_unlink_trans update when removing a directory 397418a9456c btrfs: use btrfs inodes in btrfs_rmdir() to avoid so much usage of BTRFS_I() 546ca2e3e55a btrfs: use inode already stored in local variable at btrfs_rmdir() 39aba0e6d5aa smb: client: Use FullSessionKey for AES-256 encryption key derivation cea7d2688ded drm/v3d: Reject empty multisync extension to prevent infinite loop 958e032618c8 eventfs: Use list_add_tail_rcu() for SRCU-protected children list d2a675f2e238 btrfs: fix double free in create_space_info_sub_group() error path 1ce1ec384486 btrfs: remove fs_info argument from btrfs_sysfs_add_space_info_type() 707cb5df3eab pmdomain: core: Fix detach procedure for virtual devices in genpd c7d1eb27cf37 drm/gma500/oaktrail_lvds: fix i2c adapter leaks on init 4e04b564c005 drm/gma500/oaktrail_lvds: fix hang on init failure 63a2b5906e15 drm/gma500/oaktrail_hdmi: fix i2c adapter leak on setup 4eb9d07b219f drm/panfrost: Fix wait_bo ioctl leaking positive return from dma_resv_wait_timeout() e5eb0a29a8aa drm/i915: skip __i915_request_skip() for already signaled requests 2776f9016f1b iommu/vt-d: Disable DMAR for Intel Q35 IGFX 534ebc08df97 libceph: handle rbtree insertion error in decode_choose_args() ea0d42137f0c libceph: Fix potential out-of-bounds access in crush_decode() d7a65a34d245 libceph: Fix potential null-ptr-deref in decode_choose_args() 0d2dd7e6bb74 libceph: Fix potential out-of-bounds access in osdmap_decode() bcbbdae1b88f netfs: fix error handling in netfs_extract_user_iter() cad72955f8fb powerpc/warp: Fix error handling in pika_dtm_thread d6bda9df0c0a io-wq: check that the predecessor is hashed in io_wq_remove_pending() 4bfdcefdaa60 ceph: fix a buffer leak in __ceph_setxattr() 3d3b2b01a3e7 ALSA: usb-audio: Bound MIDI endpoint descriptor scans fafc97bd01e4 ALSA: usb-audio: Bound MIDI 2.0 endpoint descriptor scans 7eaa514be4c0 drm/i915/dp: Fix VSC dynamic range signaling for RGB formats b41598bf54b3 smb/client: fix possible infinite loop and oob read in symlink_data() a1d4f3d3c0dc ASoC: SOF: Intel: hda: Fix NULL pointer dereference 0f9ac21618c0 ASoC: SOF: Intel: hda-dai: add support for dspless mode beyond HDAudio 1eda406a9432 ASoC: SOF: Intel: hda-dai: remove dspless special case e3ccb11fc824 netfilter: nf_tables: unconditionally bump set->nelems before insertion dde6eca9afae KVM: x86: Fix Xen hypercall tracepoint argument assignment a99a25db131e KVM: s390: pci: fix GAIT table indexing due to double-scaling pointer arithmetic 01b71b930f15 KVM: Reject wrapped offset in kvm_reset_dirty_gfn() 5b6da42fd804 audit: enforce AUDIT_LOCKED for AUDIT_TRIM and AUDIT_MAKE_EQUIV 810d382802a5 net: atlantic: preserve PCI wake-from-D3 on shutdown when WOL enabled ecca618e1e33 netfilter: nft_ct: fix missing expect put in obj eval 151ee470edc3 audit: fix incorrect inheritable capability in CAPSET records b92e124ef30a netfilter: nf_conntrack_sip: get helper before allocating expectation 0088b3328a6f workqueue: Fix wq->cpu_pwq leak in alloc_and_link_pwqs() WQ_UNBOUND path a5712dc25d14 i40e: Cleanup PTP pins on probe failure e4c4a5074532 crypto: af_alg - Cap AEAD AD length to 0x80000000 fa6794c968d4 bonding: fix NULL pointer dereference in actor_port_prio setting 044dcbcb19c3 netconsole: avoid out-of-bounds access on empty string in trim_newline() feb754bde3ef net/sched: sch_pie: annotate more data-races in pie_dump_stats() bf3962084183 ksmbd: validate response sizes in ipc_validate_msg() 52b9f8099369 net: bcmgenet: fix leaking free_bds dda1a2e898ad net: bcmgenet: Initialize u64 stats seq counter f17a4850d1ce crypto: nx - fix bounce buffer leaks in nx842_crypto_{alloc,free}_ctx d65a64755a3d smb: client: fix OOB reads parsing symlink error response ba302d3abb82 smb: client: correctly handle ErrorContextData as a flexible array 2c7d07892ef8 Revert "crypto: nx - Migrate to scomp API" 6c9970847516 Revert "crypto: nx - fix bounce buffer leaks in nx842_crypto_{alloc,free}_ctx" cb4634cb537b Revert "crypto: nx - fix context leak in nx842_crypto_free_ctx" 02ecc0978c45 ntfs: ->d_compare() must not block 9ccd0c1686c3 net/sched: cls_flower: revert unintended changes 131e50acfeed sfc: fix error code in efx_devlink_info_running_versions() 688f12aa4451 net: tls: fix strparser anchor skb leak on offload RX setup failure 3ad2471e61e9 ice: fix NULL pointer dereference in ice_reset_all_vfs() bee6158b8a36 iavf: add VIRTCHNL_OP_ADD_VLAN to success completion handler b90697dd4b45 iavf: wait for PF confirmation before removing VLAN filters 5936b7f29a38 iavf: stop removing VLAN filters from PF on interface down ee587b3b97b7 iavf: rename IAVF_VLAN_IS_NEW to IAVF_VLAN_ADDING 3b7265b3a82f bonding: 3ad: implement proper RCU rules for port->aggregator 2353f43d7ee7 bonding: print churn state via netlink fcf04d6f6943 bonding: add support for per-port LACP actor priority 60fcd5af8279 net: bonding: add broadcast_neighbor option for 802.3ad ee2217012b3a bonding: 802.3ad replace MAC_ADDRESS_EQUAL with __agg_has_partner 71d591d33dc4 drm/amd/display: Read EDID from VBIOS embedded panel info 3dce88cf11d7 drm/amd/display: Allow DCE link encoder without AUX registers e3f95b1ba242 futex: Prevent lockup in requeue-PI during signal/ timeout wakeup d68f753d89f4 ALSA: hda/conexant: Fix missing error check for jack detection 539604dcbf41 ALSA: hda/conexant: Renaming the codec with device ID 0x1f86 and 0x1f87 35b7210e15a6 ALSA: hda/conexant: fix some typos 3eaf81c3553e netconsole: propagate device name truncation in dev_name_store() 3bc2c51a9ba1 net: netconsole: move newline trimming to function 003b52afba79 net/sched: sch_cake: annotate data-races in cake_dump_stats() (V) a0f4e4e8e0f5 bareudp: fix NULL pointer dereference in bareudp_fill_metadata_dst() 0928f17e86a5 ipv6: rename and move ip6_dst_lookup_tunnel() 3bab544ae1e1 ipv4: add new arguments to udp_tunnel_dst_lookup() f933e5a43732 ipv4: remove "proto" argument from udp_tunnel_dst_lookup() 0379c21610f0 ipv4: rename and move ip_route_output_tunnel() 5cb1dd7093d3 sctp: discard stale INIT after handshake completion 043e4b649b4b netfilter: skip recording stale or retransmitted INIT e3610ad82ebd ASoC: codecs: ab8500: Fix casting of private data b884ff67d62e drm/amdgpu/jpeg: set no_user_fence for JPEG v4.0.3 ring d4e0172a1b61 drm/amdgpu/jpeg: set no_user_fence for JPEG v4.0 ring ee035a9d3eed drm/amdgpu/jpeg: set no_user_fence for JPEG v3.0 ring 63691e396105 drm/amdgpu/jpeg: set no_user_fence for JPEG v2.5 ring f675801889b2 drm/amdgpu/jpeg: set no_user_fence for JPEG v2.0 ring c12a5d35033c drm/amdgpu/vcn: set no_user_fence for VCN v4.0.3 enc ring e74fc9c72c1b drm/amdgpu/vcn: set no_user_fence for VCN v3.0 enc/dec rings 2c6fb056567e drm/amdgpu/vcn: set no_user_fence for VCN v2.5 enc/dec rings f264019be80d drm/amdgpu/vcn: set no_user_fence for VCN v2.0 enc/dec rings b233ba52fd2e net: phy: dp83869: fix setting CLK_O_SEL field. 47d017fe3159 net: mctp i2c: check length before marking flow active 924b961d293c ALSA: usb-audio: Fix potential leak of pd at parsing UAC3 streams 9247d59ca15b neigh: let neigh_xmit take skb ownership dbe42409bfeb neighbour: add RCU protection to neigh_tables[] ec2501e361b0 net/sched: taprio: fix NULL pointer dereference in class dump 0d0dd383ac4d NFC: trf7970a: Ignore antenna noise when checking for RF field 17e23e815008 net: usb: rtl8150: free skb on usb_submit_urb() failure in xmit 5db090ca07b2 net: usb: rtl8150: fix use-after-free in rtl8150_start_xmit() 3db8d078f7f6 vrf: Fix a potential NPD when removing a port from a VRF d4f8505517ff net/sched: sch_fq_pie: annotate data-races in fq_pie_dump_stats() 229ad4b2dd86 net/sched: sch_choke: annotate data-races in choke_dump_stats() bd426bda5741 net/sched: netem: check for negative latency and jitter 5c4fe716511d net/sched: netem: fix slot delay calculation overflow 3a3698b96688 net/sched: netem: validate slot configuration 116f10027e61 net/sched: netem: only reseed PRNG when seed is explicitly provided 39a66e83ea41 net/sched: netem: fix queue limit check to include reordered packets d2a74e0ea346 net/sched: netem: fix probability gaps in 4-state loss model 818f7673ed7f netdevsim: zero initialize struct iphdr in dummy sk_buff 47421f8401fc cdrom, scsi: sr: propagate read-only status to block layer via set_disk_ro() ea6e650b079e arm64/scs: Fix potential sign extension issue of advance_loc4 b933de804c84 drm/sysfb: ofdrm: fix PCI device reference leaks 8524b1c04adc spi: rockchip: Read ISR, not IMR, to detect cs-inactive IRQ ea2ecd29b8f4 netfilter: nf_conntrack_sip: don't use simple_strtoul 82664d0f1ba2 netfilter: xt_policy: fix strict mode inbound policy matching f60bc289c555 drm/amdgpu/gfx6: Support harvested SI chips with disabled TCCs (v2) da602e831334 drm/amdgpu/uvd3.1: Don't validate the firmware when already validated 03011db69f5e drm/amdgpu: fix spelling typos 8c4254c8f583 drm/amdgpu: fix AMDGPU_INFO_READ_MMR_REG 1b8595d126ea nvme-pci: fix missed admin queue sq doorbell write ad9973df8e0e netfilter: arp_tables: fix IEEE1394 ARP payload parsing d7c8f95f599b nvmet-tcp: propagate nvmet_tcp_build_pdu_iovec() errors to its callers cbf460bf9492 tracing: branch: Fix inverted check on stat tracer registration f8f643d5ebef btrfs: fix double-decrement of bytes_may_use in submit_one_async_extent() 03d3739a830e mailbox: mailbox-test: make data_ready a per-instance variable 75a365c69bb7 mailbox: mailbox-test: initialize struct earlier 3afca89fae50 mailbox: mailbox-test: don't free the reused channel 14aed0d4e583 mailbox: add sanity check for channel array 0a0ac6cd2e46 cgroup/rdma: fix integer overflow in rdmacg_try_charge() 81c9e7e4030e mailbox: mailbox-test: free channels on probe error 0d2edd20b61b fbdev: offb: fix PCI device reference leak on probe failure 86094f62ba21 rtc: abx80x: Disable alarm feature if no interrupt attached a11372a8b1ce fs/adfs: validate nzones in adfs_validate_bblk() 0897ccf6e930 vhost_net: fix sleeping with preempt-disabled in vhost_net_busy_poll() 0274f24485fc tipc: fix double-free in tipc_buf_append() 0ace0ce02911 nfp: fix swapped arguments in nfp_encode_basic_qdr() calls 6bedc3ff4ba4 net: dsa: realtek: rtl8365mb: fix mode mask calculation d394093ed06e net/sched: sch_sfb: annotate data-races in sfb_dump_stats() 86a6243d8654 net/sched: sch_red: annotate data-races in red_dump_stats() 717bec018ce1 net/sched: sch_fq_codel: remove data-races from fq_codel_dump_stats() 7bdb2b038c35 net/sched: sch_pie: annotate data-races in pie_dump_stats() 046b2d8c9606 net_sched: sch_hhf: annotate data-races in hhf_dump_stats() b6ba93a7b71e net/rds: zero per-item info buffer before handing it to visitors 1ff46c9915c1 ksmbd: scope conn->binding slowpath to bound sessions only 407b6e699ba8 ksmbd: fix durable fd leak on ClientGUID mismatch in durable v2 open 27fca12b9c2c ksmbd: destroy async_ida in ksmbd_conn_free() 8a3cd890fd2a ksmbd: add support for supplementary groups 234681c54581 ksmbd: Use struct_size() to improve smb_direct_rdma_xmit() 1f3235364037 ksmbd: destroy tree_conn_ida in ksmbd_session_destroy() 8db8727ea8d1 arm64: dts: meson-gxl-p230: fix ethernet PHY interrupt number 37537e42e6df slip: bound decode() reads against the compressed packet length c6980e8b1a86 slip: reject VJ receive packets on instances with no rstate array 5d05de2f0928 netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check 32e50f92c7cf netfilter: nfnetlink_osf: fix out-of-bounds read on option matching 5241a3ab2c77 ipvs: fix MTU check for GSO packets in tunnel mode cbeb259f3138 netfilter: xtables: restrict several matches to inet family 1c9fb8aeed06 netfilter: conntrack: remove sprintf usage 8def8fbd23f4 netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO 554cc061ca13 netfilter: nft_osf: restrict it to ipv4 f9ef3db77a38 openvswitch: cap upcall PID array size and pre-size vport replies 8a5e840babc5 pppoe: drop PFC frames d67fbc6dea5d sctp: fix OOB write to userspace in sctp_getsockopt_peer_auth_chunks 0069813e6ca9 ipv6: fix possible UAF in icmpv6_rcv() 733a1b310297 e1000e: Unroll PTP in probe error handling 8a254c6db3ee i40e: don't advertise IFF_SUPP_NOFCS ca6f9d9aee54 ice: fix double-free of tx_buf skb a753619ffecf ice: Remove jumbo_remove step from TX path 982a56c888d3 tcp: annotate data-races around tp->plb_rehash 993847e92765 tcp: annotate data-races around (tp->write_seq - tp->snd_nxt) a445beb84c83 tcp: annotate data-races around tp->dsack_dups 60db862ea01e tcp: annotate data-races around tp->bytes_retrans 3e1b40e4f186 tcp: annotate data-races around tp->bytes_sent 409a02760834 tcp: add data-race annotations around tp->data_segs_out and tp->total_retrans eee072fe16c6 net/sched: taprio: fix use-after-free in advance_sched() on schedule switch aaac3bed0342 nexthop: fix IPv6 route referencing IPv4 nexthop 616db97e3aff net/sched: sch_cake: fix NAT destination port not being updated in cake_update_flowkeys 497925275838 macvlan: fix macvlan_get_size() not reserving space for IFLA_MACVLAN_BC_CUTOFF f250c3772dd7 arm64: dts: imx8mm-tqma8mqml: Correct PAD settings for PMIC_nINT 0fa0bcdebeb0 arm64: dts: imx8mn-tqma8mqnl: Correct PAD settings for PMIC_nINT 3098c905af2f arm64: dts: imx8mm-emtop-som: Correct PAD settings for PMIC_nINT 6d9f35fe4638 PCMCIA: Fix garbled log messages for KERN_CONT ca962d175543 arm64: dts: imx8mp-data-modul-edm-sbc: Correct PAD settings for PMIC_nINT 7adb32513191 arm64: dts: imx8mp-dhcom-som: Correct PAD settings for PMIC_nINT 640aea541eba arm64: dts: imx8mp-icore-mx8mp: Correct PAD settings for PMIC_nINT 1f285713fb8d arm64: dts: imx8mp-debix-som-a: Correct PAD settings for PMIC_nINT 827ccceff758 arm64: dts: imx8mp-debix-model-a: Correct PAD settings for PMIC_nINT eecee15e263c crypto: ccp - copy IV using skcipher ivsize f19a744d5271 crypto: sa2ul - Fix AEAD fallback algorithm names 424df78c8a64 drm/i915/wm: Verify the correct plane DDB entry ed5ca5d5b97c drm/i915: Loop over all active pipes in intel_mbus_dbox_update c2577b18c6e2 drm/i915: Extract intel_dbuf_mdclk_cdclk_ratio_update() c5de9ff7939b drm/i915: Simplify watermark state checker calling convention 73abb7c1fffd drm/i915: Constify watermark state checker cea15f66b7b6 f2fs: protect extension_list reading with sb_lock in f2fs_sbi_show() 756d1a3954fe f2fs: Use sysfs_emit_at() to simplify code 21fe517179f3 clk: visconti: pll: initialize clk_init_data to zero caa74d80d749 lib/hexdump: print_hex_dump_bytes() calls print_hex_dump_debug() db62a24a07b3 clk: qcom: dispcc-sc7180: Add missing MDSS resets 5db0537ddef4 dt-bindings: clock: qcom,dispcc-sc7180: Define MDSS resets 166db4ebae34 clk: xgene: Fix mapping leak in xgene_pllclk_init() bf94322387ab clk: qoriq: avoid format string warning 4ba394f83b3c clk: imx8mq: Correct the CSI PHY sels a778bbd3ab28 clk: imx: imx6q: Fix device node reference leak in of_assigned_ldb_sels() 0d2ba7e2e4c6 clk: imx: imx6q: Fix device node reference leak in pll6_bypassed() 235c36a86cb7 clk: qcom: dispcc-sm8250: Enable parents for pixel clocks 081d334fe42d clk: qcom: dispcc-sm8250: Use shared ops on the mdss vsync clk d18b05a09142 clk: qcom: gcc-sc8180x: Use retention for PCIe power domains 9b54ebbe5d2f clk: qcom: gcc-sc8180x: Use retention for USB power domains a4cee425ae6b clk: qcom: gcc-sc8180x: Add missing GDSCs 9109efceb709 dt-bindings: clock: qcom,gcc-sc8180x: Add missing GDSCs d7aef29573c7 scsi: target: core: Fix integer overflow in UNMAP bounds check b6007cfea4ed clk: qcom: dispcc-sc8280xp: remove CLK_SET_RATE_PARENT from byte_div_clk_src dividers c5f4a211e82d scsi: sg: Resolve soft lockup issue when opening /dev/sgX d85a906b4e51 scsi: sg: Fix sysctl sg-big-buff register during sg_init() f9c921fd5264 scsi: sg: Make sg_sysfs_class constant fa4e1c583c9d clk: qcom: dispcc-sm8450: use RCG2 ops for DPTX1 AUX clock source 137b5918931d RDMA/core: Prefer NLA_NUL_STRING ba0843c19558 platform/x86: dell-wmi-sysman: bound enumeration string aggregation 622754397ac5 platform/x86: dell_rbu: avoid uninit value usage in packet_size_write() 0b11fcbe80a5 fs/ntfs3: terminate the cached volume label after UTF-8 conversion a7fd0d0cb43f nfs/blocklayout: Fix compilation error (`make W=1`) in bl_write_pagelist() ccfa51ea8a40 mfd: mc13xxx-core: Fix memory leak in mc13xxx_add_subdevice_pdata() 3d0e610c43cb platform/x86: panasonic-laptop: Fix OPTD notifier registration and cleanup fed8b8f33a46 tty: hvc_iucv: fix off-by-one in number of supported devices 61599d438e2d leds: lgm-sso: Remove duplicate assignments for priv->mmap bc7998e70fa7 platform/surface: surfacepro3_button: Drop wakeup source on remove e87c4c0095ac backlight: sky81452-backlight: Check return value of devm_gpiod_get_optional() in sky81452_bl_parse_dt() c5be52529ad8 dev_printk: add new dev_err_probe() helpers 10bb319b0b18 i3c: mipi-i3c-hci: fix IBI payload length calculation for final status 54dc499e5cb3 perf util: Kill die() prototype, dead for a long time 2f3548314715 ipmi: ssif_bmc: change log level to dbg in irq callback bffedb7a72e6 ipmi: ssif_bmc: fix message desynchronization after truncated response 7d2a487c275c ipmi: ssif_bmc: fix missing check for copy_to_user() partial failure 128845823138 perf expr: Return -EINVAL for syntax error in expr__find_ids() ea0078135c6a perf lock: Fix option value type in parse_max_stack 9bab7d2a2850 pinctrl: abx500: Fix type of 'argument' variable 92170bd2eadd perf: tools: cs-etm: Fix print issue for Coresight debug in ETE/TRBE trace aceabce300c3 perf branch: Avoid incrementing NULL 8fe5240c7bd8 pinctrl: cy8c95x0: Avoid returning positive values to user space 03e71cc07cba pinctrl: cy8c95x0: Unify messages with help of dev_err_probe() 091709439f88 pinctrl: cy8c95x0: remove duplicate error message a79fdd593c84 pinctrl: pinctrl-pic32: Fix resource leak d216b34a9f69 bpf, arm32: Reject BPF-to-BPF calls and callbacks in the JIT 699e16e65962 bpf: allow UTF-8 literals in bpf_bprintf_prepare() 520454e83971 bpf: Fix NULL deref in map_kptr_match_type for scalar regs 2f954f8a04b7 bpf: Fix precedence bug in convert_bpf_ld_abs alignment check d0d124dbcef9 bpf, sockmap: Take state lock for af_unix iter a94d3dd78ee8 bpf, sockmap: Fix af_unix null-ptr-deref in proto update 3cef33b9813b bpf, sockmap: Fix af_unix iter deadlock 7fd3b41260c6 bpf, arm64: Fix off-by-one in check_imm signed range check ad4505d2ab3a HID: usbhid: fix deadlock in hid_post_reset() 5897c1dd1bfe mtd: rawnand: sunxi: fix sunxi_nfc_hw_ecc_read_extra_oob 295757c3b9de mtd: parsers: ofpart: call of_node_get() for dedicated subpartitions 560c0456e613 mtd: parsers: ofpart: call of_node_put() only in ofpart_fail path cca2c083cfcb mtd: spi-nor: swp: check SR_TB flag when getting tb_mask b194ae62e9e7 mtd: spi-nor: update spi_nor_fixups::post_sfdp() documentation 301e85ff299b mtd: spi-nor: sfdp: introduce smpt_map_id fixup hook 2e472d2bdc14 mtd: spi-nor: sfdp: introduce smpt_read_dummy fixup hook 036a794e7d7f mtd: spi-nor: core: correct the op.dummy.nbytes when check read operations fab6b870dfe6 dt-bindings: interrupt-controller: arm,gic-v3: Fix EPPI range ba91de4f0f98 mtd: physmap_of_gemini: Fix disabled pinctrl state check 033939479b10 HID: asus: do not abort probe when not necessary 08c4fa3f5a9b HID: asus: make asus_resume adhere to linux kernel coding standards 5dcb51558e78 ima: check return value of crypto_shash_final() in boot aggregate 9399a9298935 tracing: Rebuild full_name on each hist_field_name() call c258fbf57113 soundwire: cadence: Clear message complete before signaling waiting thread 0b73d5dfa3fe dmaengine: mxs-dma: Fix missing return value from of_dma_controller_register() 5acbbb205a1c soundwire: bus: demote UNATTACHED state warnings to dev_dbg() faa66f358d30 dmaengine: dw-axi-dmac: Remove unnecessary return statement from void function b9ae3942deec ocfs2: validate group add input before caching bb3c54d1e715 ocfs2: validate bg_bits during freefrag scan d919b905939e ocfs2: fix listxattr handling when the buffer is full f1e38ba97b1a ARM: dts: imx27-eukrea: replace interrupts with interrupts-extended 064494145a70 arm64/xor: fix conflicting attributes for xor_block_template 08c073e8f8d5 ARM: OMAP1: Fix DEBUG_LL and earlyprintk on OMAP16XX 96a30f7cb8e0 arm64: dts: qcom: sm8250: Add missing CPU7 3.09GHz OPP ccff9145cd52 soc: qcom: aoss: compare against normalized cooling state d672c7623306 soc: qcom: llcc: fix v1 SB syndrome register offset 819d8ebad320 ocfs2/dlm: fix off-by-one in dlm_match_regions() region comparison f37de46149db ocfs2/dlm: validate qr_numregions in dlm_match_regions() 813a47b03090 unshare: fix nsproxy leak in ksys_unshare() on set_cred_ucounts() failure 39a8c0df2d5a soc/tegra: cbb: Set ERD on resume for err interrupt b87992ddf49a arm64: dts: imx8qxp-mek: switch Type-C connector power-role to dual 7d6481cf2987 arm64: dts: qcom: sdm845-xiaomi-beryllium: Mark l1a regulator as powered during boot 03d523e50662 arm64: dts: qcom: sm7225-fairphone-fp4: Fix conflicting bias pinctrl a37e61cde05a arm64: dts: qcom: sm8550: Enable UHS-I SDR50 and SDR104 SD card modes 7ce6aa2eca26 arm64: dts: qcom: sm8450: Enable UHS-I SDR50 and SDR104 SD card modes 1563a05cf920 arm64: dts: qcom: sm8550: Fix xo clock supply of platform SD host controller 4322d8c7af96 arm64: dts: qcom: sm8550: Fix GIC_ITS range length 97bacd872319 arm64: dts: qcom: sm8450: Fix GIC_ITS range length 1e014285a3cd soc: qcom: ocmem: return -EPROBE_DEFER is ocmem is not available 9f54516bce15 soc: qcom: ocmem: register reasons for probe deferrals d45c46c0e84f soc: qcom: ocmem: use scoped device node handling to simplify error paths 1637ce361b1d soc: qcom: ocmem: make the core clock optional 2ecad03d6c5d arm64: dts: qcom: msm8953-xiaomi-daisy: fix backlight 5a0dcba6178f arm64: dts: qcom: msm8953-xiaomi-vince: correct wled ovp value 5b94fe0879bc arm64: dts: mediatek: mt7986a: Fix gpio-ranges pin count 167e5fa8feee arm64: dts: mediatek: mt6795: Fix gpio-ranges pin count fe1d1423c524 iommufd: vfio compatibility extension check for noiommu mode 700e54a2beba arm64: dts: imx8mp-evk: Enable pull select bit for PCIe regulator GPIO (M.2 W_DISABLE1) 036f599234e4 arm64: dts: imx8-apalis: Fix LEDs name collision cecc17692ebf memory: tegra30-emc: Fix dll_change check 7e19e72f3064 memory: tegra124-emc: Fix dll_change check c13c938a8058 ARM: dts: mediatek: mt7623: fix efuse fallback compatible 8fcefe840fa8 ksmbd: fix use-after-free from async crypto on Qualcomm crypto engine 8be69e9245f8 efi/capsule-loader: fix incorrect sizeof in phys array reallocation 233a0945a4b1 gfs2: prevent NULL pointer dereference during unmount bf5fcd9c37c2 gfs2: add some missing log locking 6678dde26570 quota: Fix race of dquot_scan_active() with quota deactivation f57b68b36571 ktest: Run POST_KTEST hooks on failure and cancellation aa6b9e38086c ktest: Honor empty per-test option overrides 5bddd0d3a926 ktest: Avoid undef warning when WARNINGS_FILE is unset 232d67974a61 gfs2: Call unlock_new_inode before d_instantiate 18216b8ab690 crypto: jitterentropy - replace long-held spinlock with mutex f57498d2bf16 dm cache: fix missing return in invalidate_committed's error path 3a77b05ff2c4 ALSA: sc6000: Keep the programmed board state in card-private data dcbc2e2b2434 ALSA: sc6000: Use standard print API 3e79a563377a spi: mtk-snfi: unregister ECC engine on probe failure and remove() callback fa7881f3b627 PCI: dwc: Apply ECRC workaround to DesignWare 5.00a as well bf98711d2f33 PCI: tegra194: Use DWC IP core version 5d9c9dfef907 PCI: tegra194: Allow system suspend when the Endpoint link is not up 2c87f49f2082 PCI: tegra194: Disable direct speed change for Endpoint mode 272e9c4bcae8 PCI: tegra194: Use devm_gpiod_get_optional() to parse "nvidia,refclk-select" 997122b96544 PCI: tegra194: Disable PERST# IRQ only in Endpoint mode 39564f51567e PCI: tegra194: Don't force the device into the D0 state before L2 e81f33968542 PCI: tegra194: Rename 'root_bus' to 'root_port_bus' in tegra_pcie_downstream_dev_to_D0() fdb9c5a3a627 PCI: tegra194: Disable LTSSM after transition to Detect on surprise link down 8aa59b1e53a7 PCI: tegra194: Increase LTSSM poll time on surprise link down 8f26b92dc606 PCI: tegra194: Fix polling delay for L2 state 9e225563c5a9 ASoC: SOF: compress: return the configured codec from get_params 2721d23db2e9 ALSA: scarlett2: Add missing sentinel initializer field 7e805fdb16dc selftest: memcg: skip memcg_sock test if address family not supported 05a3fd57cdfa Documentation: fix a hugetlbfs reservation statement 11a810989a4d selftests/mm: skip migration tests if NUMA is unavailable 07a5ecb94768 PCI: mediatek-gen3: Prevent leaking IRQ domains when IRQ not found 0afb2eca25be PCI: Enable AtomicOps only if Root Port supports them 9f1daac27ca2 ASoC: rsnd: Fix potential out-of-bounds access of component_dais[] 5f1035ba3ed9 crypto: qat - use swab32 macro 1ac96689ce29 ASoC: qcom: qdsp6: topology: check widget type before accessing data d39e8c3724a6 ASoC: fsl_easrc: Change the type for iec958 channel status controls 4d427d3f507a ASoC: fsl_easrc: Fix value type in fsl_easrc_iec958_get_bits() a2e9527bc88e ASoC: fsl_easrc: Check the variable range in fsl_easrc_iec958_put_bits() 4428887805ef ASoC: fsl_xcvr: Fix event generation in fsl_xcvr_mode_put() 0dddb5642d64 ASoC: fsl_xcvr: Fix event generation in fsl_xcvr_arc_mode_put() ceb388682ea1 ASoC: fsl_micfil: Fix event generation in micfil_quality_set() 4605327fd688 ASoC: fsl_micfil: Fix event generation in micfil_put_dc_remover_state() a6bc5432055b ASoC: fsl_micfil: Fix event generation in hwvad_put_init_mode() 62c4ab11840d ASoC: fsl_micfil: Fix event generation in hwvad_put_enable() 6adc82ff2f20 ASoC: fsl_micfil: Add access property for "VAD Detected" 4ba05463862c pmdomain: imx: scu-pd: Fix device_node reference leak during ->probe() 3a73abb39037 pmdomain: ti: omap_prm: Fix a reference leak on device node bad87bdd52f5 drm/msm/a6xx: Use barriers while updating HFI Q headers 98fce340ec48 drm/msm/shrinker: Fix can_block() logic 679a533d2235 drm/msm/a6xx: Fix HLSQ register dumping f101e4ebf1fc ASoC: SOF: Intel: hda: Place check before dereference 2958b391d9c5 ALSA: hda/realtek: fix code style (ERROR: else should follow close brace '}') ad08dd4476eb drm/amd/pm/smu7: Add SCLK cap for quirky Hawaii board ef1c7aaa1319 drm/amd/pm/ci: Fill DW8 fields from SMC 9e6d83f651ac drm/amd/pm/ci: Clear EnabledForActivity field for memory levels 4cf77e3298e4 drm/amd/pm/ci: Fix powertune defaults for Hawaii 0x67B0 37f93b3159fa drm/amd/pm/smu7: Fix SMU7 voltage dependency on display clock cc88a98c873b drm/amd/pm/ci: Disable MCLK DPM on problematic CI ASICs 33da7d5b6a50 drm/amd/pm/ci: Use highest MCLK on CI when MCLK DPM is disabled 9a7f12105f0e ALSA: core: Validate compress device numbers without dynamic minors 0558d1b0b5f0 drm/panel: simple: Correct G190EAN01 prepare timing c4fc7ed73a0a drm/panel: sharp-ls043t1le01: make use of prepare_prev_first 97d360a0112e drm/msm/dsi: rename MSM8998 DSI version from V2_2_0 to V2_0_0 af6825d3e446 drm/msm/dsi: add the missing parameter description 9830999c9e06 drm/msm/dpu: fix mismatch between power and frequency 94d99e853617 spi: hisi-kunpeng: prevent infinite while() loop in hisi_spi_flush_fifo 8ebaa3deb04f drm/amdgpu/gfx10: look at the right prop for gfx queue priority a6d44f477000 padata: Put CPU offline callback in ONLINE section to allow failure 0e664e99abb4 padata: Remove cpu online check from cpu add and removal 39024f54f098 crypto: atmel-aes - guard unregister on error in atmel_aes_register_algs 59fce560694d crypto: atmel - Use unregister_{aeads,ahashes,skciphers} 60c571a7d8d0 crypto: atmel - Remove cfb and ofb 3cd5cae11afa fbdev: matroxfb: Mark variable with __maybe_unused to avoid W=1 build break 6f866e941a7e dm init: ensure device probing has finished in dm-mod.waitfor= 5af3d8f2acb6 drm/amdgpu: Add default case in DVI mode validation ef0d045ebbaf drm/sun4i: Fix resource leaks 6040b24095a8 spi: fsl-qspi: Use reinit_completion() for repeated operations dc97ec849559 drm/bridge: cadence: cdns-mhdp8546-core: Handle HDCP state in bridge atomic check b01a582c8c6f drm/bridge: cadence: cdns-mhdp8546-core: Add mode_valid hook to drm_bridge_funcs 5302015daf26 drm/bridge: cadence: cdns-mhdp8546-core: Set the mhdp connector earlier in atomic_enable() d4ac87567f86 dm log: fix out-of-bounds write due to region_count overflow 15c30997dca6 dm cache metadata: fix memory leak on metadata abort retry 2ebe1ab83292 platform/chrome: chromeos_tbmc: Drop wakeup source on remove 12105c7f1837 dm cache: fix dirty mapping checking in passthrough mode switching 89e04987574a dm cache: support shrinking the origin device d90accff225f dm cache: fix concurrent write failure in passthrough mode ac5ee9944389 dm cache policy smq: fix missing locks in invalidating cache blocks ecb10c193cbe dm cache: fix write hang in passthrough mode ceff6df26691 dm cache: fix write path cache coherency in passthrough mode 0aa745fea1f8 dm cache: fix null-deref with concurrent writes in passthrough mode 002a5f925d42 ASoC: sti: use managed regmap_field allocations 686a6b305ec8 ASoC: sti: Return errors from regmap_field_alloc() cf615b90a11a drm/sun4i: backend: fix error pointer dereference d8a541906860 drm/komeda: fix integer overflow in AFBC framebuffer size check 866d3d9b8775 net, bpf: fix null-ptr-deref in xdp_master_redirect() for down master 1943e71a0d6a sctp: fix missing encap_port propagation for GSO fragments cc4dead22ede net: phy: qcom: at803x: Use the correct bit to disable extended next page 22f22f1346b4 net: phy: move at803x PHY driver to dedicated directory e30356c3cf2f net: phy: add Rust Asix PHY driver 014860036d1f net: phy: aquantia: move to separate directory 77a853aec710 Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp 6b4d226d01ab Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER a673cf6c4ac7 Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error 315acf971d75 Bluetooth: L2CAP: Fix printing wrong information if SDU length exceeds MTU 0a04db240eff bpf: reject short IPv4/IPv6 inputs in bpf_prog_test_run_skb 61a9b216ca5b net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() 02c1256f1990 net/mlx5e: Fix features not applied during netdev registration 4f1ca61e5311 dt-bindings: net: dsa: nxp,sja1105: make spi-cpol optional for sja1110 b3682e7ad450 net: ipa: Fix decoding EV_PER_EE for IPA v5.0+ f7361841d0ce net: ipa: Fix programming of QTIME_TIMESTAMP_CFG 954745d0223e ppp: require CAP_NET_ADMIN in target netns for unattached ioctls e19c5ed9f192 bpf: Fix OOB in pcpu_init_value 07035306bf72 net/rds: Restrict use of RDS/IB to the initial network namespace 2c7883d606aa net/rds: Optimize rds_ib_laddr_check f23424a0ddad net/sched: act_ct: Only release RCU read lock after ct_ft e9cf4018d742 net: hamradio: 6pack: fix uninit-value in sixpack_receive_buf f4ed5d750b4a 6pack: propagage new tty types b1f7158a86f3 bpf: Fix RCU stall in bpf_fd_array_map_clear() 8849b50e81a2 netfilter: nft_fwd_netdev: check ttl/hl before forwarding 9ca570236cc0 netfilter: xt_socket: enable defrag after all other checks e8206538cbaf net: bcmgenet: fix racing timeout handler 1b0865a6efce net: bcmgenet: switch to use 64bit statistics 991cd78f95f2 net: bcmgenet: support reclaiming unsent Tx packets 355b61569e84 net: bcmgenet: move DESC_INDEX flow to ring 0 df3a1bb0ae1a net: bcmgenet: add bcmgenet_has_* helpers d650d12d58ef net: bcmgenet: Remove custom ndo_poll_controller() 2a7459017042 net: bcmgenet: fix off-by-one in bcmgenet_put_txcb 03d97b558d80 arm64: kexec: Remove duplicate allocation for trans_pgd 0e72fd7f05ae ACPI: AGDI: fix missing newline in error message 3ff85ae79e1a bpf: reject negative CO-RE accessor indices in bpf_core_parse_spec() 26b380a3ca0b bpf: Drop task_to_inode and inet_conn_established from lsm sleepable hooks d3f280be48f1 wifi: brcmfmac: Fix error pointer dereference a713b72ff88c bpf: Fix stale offload->prog pointer after constant blinding b4b5a20bed82 bpf: fix end-of-list detection in cgroup_storage_get_next_key() 1aa61a6f42ad macvlan: annotate data-races around port->bc_queue_len_used 0adec27bde44 selftests/powerpc: Suppress -Wmaybe-uninitialized with GCC 15 81bc3a2ccc37 selftests/powerpc: Re-order *FLAGS to follow lib.mk 7ca35863213c powerpc/crash: fix backup region offset update to elfcorehdr 6e474972b85e r8152: fix incorrect register write to USB_UPHY_XTAL ea04b9881534 wifi: rtw89: phy: fix uninitialized variable access in rtw89_phy_cfo_set_crystal_cap() 571a05ea1baa bpf: Use RCU-safe iteration in dev_map_redirect_multi() SKB path eefe0c2ea2c3 bpf, devmap: Remove unnecessary if check in for loop 6d5202409467 wifi: mt76: mt7915: fix use-after-free bugs in mt7915_mac_dump_work() 66f2a0becd35 wifi: mt76: mt7996: fix struct mt7996_mcu_uni_event 6cf44608d5e6 arm64: cpufeature: Make PMUVer and PerfMon unsigned 63fe66f10283 wifi: mt76: mt7996: fix FCS error flag check in RX descriptor 4dd75a78cdfb wifi: mt76: mt7915: fix use_cts_prot support 382cbdf6e484 wifi: mt76: mt7615: fix use_cts_prot support c8e46d0664c4 wifi: mt76: mt7921: Reset ampdu_state state in case of failure in mt76_connac2_tx_check_aggr() 231b895daa02 module: Fix freeing of charp module parameters when CONFIG_SYSFS=n e6962cb18a89 params: Replace __modinit with __init_or_module edc90a12073b s390/bpf: Zero-extend bpf prog return values and kfunc arguments e70b9c2292cc dpaa2: compile dpaa2 even CONFIG_FSL_DPAA2_ETH=n 6e8d309bc69b dpaa2: add independent dependencies for FSL_DPAA2_SWITCH c7ad31fb948f bpf: test_run: Fix the null pointer dereference issue in bpf_lwt_xmit_push_encap 5d81743ee3cc bpf: Add CHECKSUM_COMPLETE to bpf test progs 008c456b76e9 wifi: rtlwifi: pci: fix possible use-after-free caused by unfinished irq_prepare_bcn_tasklet 255cc1d30f32 wifi: mwifiex: Fix memory leak in mwifiex_11n_aggregate_pkt() a5af71c6181e firmware: dmi: Correct an indexing error in dmi.h 240f832a9c20 locking: Fix rwlock support in <linux/spinlock_up.h> ca2d280b9b38 hrtimer: Reduce trace noise in hrtimer_start() ece8be21d8c9 hrtimer: Avoid pointless reprogramming in __hrtimer_start_range_ns() 16774f7333fc hrtimers: Update the return type of enqueue_hrtimer() b54f14e1460c irqchip/irq-pic32-evic: Address warning related to wrong printf() formatter c4295487124f s390/cio: use generic driver_override infrastructure 9d606425a752 s390/cio: convert sprintf()/snprintf() to sysfs_emit() 3d0cfecf4ff7 s390/cio: make sch->lock spinlock pointer a member 6325eea40a95 debugfs: fix placement of EXPORT_SYMBOL_GPL for debugfs_create_str() f9c489418b8e debugfs: check for NULL pointer in debugfs_create_str() fc6ecb4b8ef9 thermal/drivers/spear: Fix error condition for reading st,thermal-flags f75ea8cdca54 devres: fix missing node debug info in devm_krealloc() d172f1c8a8b3 ACPI: x86: cmos_rtc: Improve coordination with ACPI TAD driver 9a6f4d85a016 ACPI: x86: cmos_rtc: Clean up address space handler driver da8255040938 pstore/ram: fix resource leak when ioremap() fails 4048ed98860d blk-cgroup: fix disk reference leak in blkcg_maybe_throttle_current() b88f905d4449 nilfs2: reject zero bd_oblocknr in nilfs_ioctl_mark_blocks_dirty() 5dd9d864eb96 loop: fix partition scan race between udev and loop_reread_partitions() 282e06e6d494 drbd: Balance RCU calls in drbd_adm_dump_devices() 131ea3e57fc2 fs/omfs: reject s_sys_blocksize smaller than OMFS_DIR_START 467289e0d0f2 blk-cgroup: wait for blkcg cleanup before initializing new disk (From OE-Core rev: 050911a7705f3bb17d30034f3f16372b2e79b85d) Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> Signed-off-by: Yoann Congal <yoann.congal@smile.fr> Signed-off-by: Paul Barker <paul@pbarker.dev>	2026-06-26 16:55:55 +01:00
Bruce Ashfield	7f8ff2413f	linux-yocto/6.6: update to v6.6.140 ... Updating linux-yocto/6.6 to the latest korg -stable release that comprises the following commits: eac8889a3a1c Linux 6.6.140 4c3ed344a970 smb: client: use kzalloc to zero-initialize security descriptor buffer 2074dfffad76 Bluetooth: MGMT: Fix dangling pointer on mgmt_add_adv_patterns_monitor_complete b94588f5a697 crypto: nx - fix context leak in nx842_crypto_free_ctx d7e42dc47beb Bluetooth: MGMT: Fix memory leak in set_ssp_complete f7c14993dc2f mtd: spi-nor: sst: Fix SST write failure 5bb5faff4837 drm/amdgpu/vcn4: Avoid overflow on msg bound check 1936310f68c5 drm/amdgpu/vcn3: Avoid overflow on msg bound check 9b2c795bb2c6 vsock/virtio: fix length and offset in tap skb for split packets 65c484726e74 vsock/virtio: fix accept queue count leak on transport mismatch a998a7e250bf vsock: fix buffer size clamping order 944d76f749dd KVM: arm64: Wake-up from WFI when iqrchip is in userspace 83ce43a21bb7 ceph: only d_add() negative dentries when they are unhashed 09a69a3d8f97 usb: dwc3: Move GUID programming after PHY initialization 033c80d80fd1 tracing/probes: Limit size of event probe to 3K f5ee467b5676 btrfs: fix btrfs_ioctl_space_info() slot_count TOCTOU which can lead to info-leak 6b57d6e4c302 batman-adv: tp_meter: fix tp_num leak on kmalloc failure 79bc0eaeef2c batman-adv: stop tp_meter sessions during mesh teardown c2287250ba69 pwm: imx-tpm: Count the number of enabled channels in probe 3666c037fbde mtd: spi-nor: sst: Fix write enable before AAI sequence b7cd63d13fae mtd: spi-nor: sst: Factor out common write operation to `sst_nor_write_data()` 0000a7780e0e ksmbd: fix use-after-free in __ksmbd_close_fd() via durable scavenger b32f4cd81ef5 mm/damon/reclaim: detect and use fresh enabled and kdamond_pid values 8e7317598d72 usb: typec: tcpm: reset internal port states on soft reset AMS 2b26b1ec4c1d mm/damon/lru_sort: detect and use fresh enabled and kdamond_pid values 0dd8917f35da mm/damon/core: implement damon_kdamond_pid() 7c504ffab3ef rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present cfa4267b5075 mm/damon/core: disallow time-quota setting zero esz 172dcb67dd35 bonding: fix use-after-free due to enslave fail after slave array update cf1fd517f892 Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_get_sndtimeo_cb() c0428a22daf6 rxrpc: Fix conn-level packet handling to unshare RESPONSE packets 594973a2e549 fbcon: Avoid OOB font access if console rotation fails f4b177f96955 spi: microchip-core-qspi: fix controller deregistration 091499f90e09 spi: microchip-core-qspi: Use helper function devm_clk_get_enabled() 420d6f5e3fb4 mm/hugetlb_cma: round up per_node before logging it fa7aaaed583a spi: uniphier: fix controller deregistration 3e272e6be1a2 spi: uniphier: Simplify clock handling with devm_clk_get_enabled() c9577d966503 spi: uniphier: switch to use modern name 664b60985a77 spi: tegra20-sflash: fix controller deregistration 4541a6cbec27 spi: tegra114: fix controller deregistration df771f250402 spi: sun6i: fix controller deregistration 9da85b209f26 spi: sun6i: switch to use modern name 7fd0c4fd2185 spi: zynq-qspi: fix controller deregistration dc2044ef3647 spi: zynq-qspi: Simplify clock handling with devm_clk_get_enabled() ae6ee9f16538 spi: zynq-qspi: switch to use modern name db96551920e2 spi: ti-qspi: fix controller deregistration 25ba53c43f30 spi: spi-ti-qspi: switch to use modern name 3b6cededf65a spi: spi-ti-qspi: Convert to platform remove callback returning void 1cdba535877d spi: sun4i: fix controller deregistration 79a38ff2bd3d spi: sun4i: switch to use modern name 904ff4e79961 spi: syncuacer: fix controller deregistration 5bbe69946620 spi: synquacer: switch to use modern name 6823f730bf19 Bluetooth: hci_conn: fix potential UAF in create_big_sync b4a53add2fa8 xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete 0555d4f52623 xfrm: ah: account for ESN high bits in async callbacks 9d3968c48367 net: ipv6: stop checking crypto_ahash_alignmask 0841fc6a36c3 net: ipv4: stop checking crypto_ahash_alignmask 7e78a5bcbd65 ALSA: seq: Fix UMP group 16 filtering dbacde3d4755 ALSA: seq: Notify client and port info changes 3915715273cd ALSA: core: Serialize deferred fasync state checks fe337552143f ALSA: misc: Use guard() for spin locks 409fb34c1860 ALSA: hda: cs35l56: Propagate ASP TX source control errors 247ed8a969f9 tracepoint: balance regfunc() on func_add() failure in tracepoint_add_func() e1c50b273298 net: stmmac: Prevent NULL deref when RX memory exhausted 8a2c91de61ff net: stmmac: rename STMMAC_GET_ENTRY() -> STMMAC_NEXT_ENTRY() 6a74af77eba5 net: stmmac: avoid shadowing global buf_sz 2adbfca7452e crypto: caam - guard HMAC key hex dumps in hash_digest_key f3a3e2dac5ec printk: add print_hex_dump_devel() 43a878639b90 erofs: fix unsigned underflow in z_erofs_lz4_handle_overlap() 6923cde8dc1d crypto: nx - fix bounce buffer leaks in nx842_crypto_{alloc,free}_ctx 268ae55a4c4f crypto: nx - Migrate to scomp API c5fa7465794c crypto: nx - Avoid -Wflex-array-member-not-at-end warning bf96052d617b ksmbd: reset rcount per connection in ksmbd_conn_wait_idle_sess_id() e1c24ce7573d wifi: rtl8xxxu: fix potential use of uninitialized value 3ca80e3012c8 hfsplus: fix held lock freed on hfsplus_fill_super() 61a790974ff7 hfsplus: fix uninit-value by validating catalog record size 82fb9da6477d xfs: fix a resource leak in xfs_alloc_buftarg() b58baa1d50aa mmc: core: Optimize time for secure erase/trim for some Kingston eMMCs 058b451b1039 udf: fix partition descriptor append bookkeeping 401a49b7f26e firmware: google: framebuffer: Do not unregister platform device 2a40f8bc9bb7 fbdev: defio: Disconnect deferred I/O from the lifetime of struct fb_info a2c817c62943 spi: fix resource leaks on device setup failure 4c4641366143 net: qrtr: ns: Limit the total number of nodes 0dbec101a707 net: qrtr: ns: Limit the maximum number of lookups e6f6cd501fb5 net: qrtr: ns: Limit the maximum server registration per node 0b9e4bbfb7c9 net: bridge: use a stable FDB dst snapshot in RCU readers 218b772e4815 net: mctp: fix don't require received header reserved bits to be zero 6a2d6273b6c3 RDMA/mana_ib: Disable RX steering on RSS QP destroy 8d4edc89bf71 sched: Use u64 for bandwidth ratio calculations ede9eca9701d block: relax pgmap check in bio_add_page for compatible zone device pages 18d6a7c9e4e6 media: rc: igorplugusb: heed coherency rules 69b3a50dee62 ALSA: aoa: Skip devices with no codecs in i2sbus_resume() 32fbdb6d6718 media: rc: ttusbir: respect DMA coherency rules 35bcafc82254 ALSA: aoa: i2sbus: clear stale prepared state a045146109ea ALSA: aoa: Use guard() for mutex locks 07f9bff69da8 ipmi:ssif: Clean up kthread on errors 1f5e011fc8c8 ipmi:ssif: Fix a shutdown race 37a430a2d4e6 thermal: core: Fix thermal zone governor cleanup issues 78509c488c5d PCI: epf-mhi: Return 0, not remaining timeout, when eDMA ops complete 801000afc9c9 wifi: mt76: mt792x: fix mt7925u USB WFSYS reset handling b3303d6e92f6 wifi: mt76: mt792x: describe USB WFSYS reset with a descriptor b968db3b8b4f wifi: mt76: connac: introduce helper for mt7925 chipset 8dc5b98c20aa arm64/mm: Enable batched TLB flush in unmap_hotplug_range() bf477abd448c lib: test_hmm: evict device pages on file close to avoid use-after-free 11869ce402d9 wifi: mwifiex: fix use-after-free in mwifiex_adapter_cleanup() 7edd983e42ee f2fs: fix to do sanity check on dcc->discard_cmd_cnt conditionally 35baa66a8cd7 ksmbd: replace connection list with hash table b0b3d62d7230 ksmbd: use msleep instaed of schedule_timeout_interruptible() 1171f329cf1c f2fs: fix UAF caused by decrementing sbi->nr_pages[] in f2fs_write_end_io() 8e47d297e7cf smb: client: validate the whole DACL before rewriting it in cifsacl 325d4ac11f52 ksmbd: require minimum ACE size in smb_check_perm_dacl() 1593ddb37bd1 smb: common: change the data type of num_aces to le16 795dddb10687 smb: move some duplicate definitions to common/smbacl.h 65419eb4259a batman-adv: bla: put backbone reference on failed claim hash insert 7b8fbcee3184 batman-adv: bla: only purge non-released claims 368449e467d5 batman-adv: bla: prevent use-after-free when deleting claims aafcbaf1159e batman-adv: stop caching unowned originator pointers in BAT IV e4a3c4a4c8f6 batman-adv: reject new tp_meter sessions during teardown f61499359fa5 batman-adv: fix integer overflow on buff_pos 1bfb06ecb00f sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL ee4c7a919761 drm/amdgpu/pm: align Hawaii mclk workaround with radeon a103f1192dc7 drm/amdgpu/pm: add missing revision check for CI 4f7ca00fa91d drm/amdgpu/sdma4: replace BUG_ON with WARN_ON in fence emission b5de35bafcd3 drm/amdgpu/gfx9: drop unnecessary 64-bit fence flag check in KIQ 91fbb5e635c8 drm/amdgpu: zero-initialize GART table on allocation b8cbc52c73fa drm/radeon: add missing revision check for CI 91c6dc5a4169 drm/amdkfd: validate SVM ioctl nattr against buffer size 6b992591e04f drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() 638d3e0b9eb7 drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg c72a8b4dc6d5 drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg 944db9cfa537 drm/amdgpu/vce: Prevent partial address patches 1dc005775fb5 drm/amdgpu/vcn4: Prevent OOB reads when parsing IB 0fb5cb556b24 drm/amdgpu: Add bounds checking to ib_{get,set}_value 4a8093c7def1 drm/amdkfd: Add upper bound check for num_of_nodes 1db431380879 drm/amdkfd: Clear VRAM on allocation to prevent stale data exposure 01eea4d12fb6 spi: cadence: fix unclocked access on unbind 31e7dd252bf7 spi: cadence: fix controller deregistration bb6b50f709c5 spi: mpc52xx: fix use-after-free on unbind 59abb878f5a6 spi: orion: fix clock imbalance on registration failure 678a461af304 spi: orion: fix runtime pm leak on unbind 1f120e1a3e1e spi: imx: fix runtime pm leak on probe deferral 17aa64b8fe3e spi: img-spfi: fix controller deregistration 77defd64b405 spi: rspi: fix controller deregistration c6f82bd90a71 spi: sprd: fix controller deregistration 6dd37ce42ac7 spi: coldfire-qspi: fix controller deregistration 3ad32a7140eb spi: bcmbca-hsspi: fix controller deregistration 562d954a1449 spi: fsl: fix controller deregistration 59da4cdd0c7b spi: sh-hspi: fix controller deregistration 863edec24c1d spi: mtk-nor: fix controller deregistration 4ea9a1ad663c spi: omap2-mcspi: fix controller deregistration 89c0a7762104 spi: fsl-espi: fix controller deregistration 2be39222d6ca spi: s3c64xx: fix controller deregistration b9d4b9c3457c spi: dln2: fix controller deregistration 951694f9fab9 media: omap3isp: drop the use count of v4l2 pipeline e85f1e23168f media: i2c: ov08d10: fix image vertical start setting 0b49f5dabc3a media: staging: imx: request mbus_config in csi_start 2dde85b42abd media: i2c: imx412: Assert reset GPIO during probe 97dbf8e69f3a media: dib8000: avoid division by 0 in dib8000_set_dds() 492c5292540f media: pci: zoran: fix potential memory leak in zoran_probe() f3290d970bbe platform/x86: hp-wmi: Ignore backlight and FnLock events 3ce8f3057c51 media: saa7164: add ioremap return checks and cleanups 55be73783f11 spi: at91-usart: fix controller deregistration 70c2ee9cab5c spi: qup: fix controller deregistration 5a531cbb3bce spi: lantiq-ssc: fix controller deregistration 38321b03b8c2 regulator: bd9571mwv: fix OF node reference imbalance 0da216314247 regulator: act8945a: fix OF node reference imbalance feb17524aa4e media: videobuf2: Set vma_flags in vb2_dma_sg_mmap da769e8f8e34 regulator: rk808: fix OF node reference imbalance 5b7471dce523 media: rc: streamzap: Error handling in probe 0cc9251833bf media: rc: xbox_remote: heed DMA restrictions cd8f1633c3e8 regulator: max77650: fix OF node reference imbalance e46b3b0c9c44 regulator: mt6357: fix OF node reference imbalance 8c7a281a9922 staging: media: atomisp: Disallow all private IOCTLs f367ddf1299e spi: atmel: fix controller deregistration 725b90ce70a7 spi: bcm63xx: fix controller deregistration fd10fb4c33bd media: i2c: ov8856: free control handler on error in ov8856_init_controls() 6467d656e689 media: uvcvideo: Enable VB2_DMABUF for metadata stream 0bc4cf1a6ba0 HID: playstation: Clamp num_touch_reports df870e104571 exit: Sleep at TASK_IDLE when waiting for application core dump 0b8167e83647 LoongArch: Use per-root-bridge PCIH flag to skip mem resource fixup 07d190e4ec68 LoongArch: Fix potential ADE in loongson_gpu_fixup_dma_hang() db7f65df10bd KVM: arm64: Fix initialisation order in __pkvm_init_finalise() 70d12291805a KVM: arm64: vgic: Fix IIDR revision field extracted from wrong value 42dd1c91f993 f2fs: fix node_cnt race between extent node destroy and writeback 88b98e3cfb92 f2fs: fix incorrect multidevice info in trace_f2fs_map_blocks() 72ec0749a1ba f2fs: fix fiemap boundary handling when read extent cache is incomplete a2bcf16cdf79 f2fs: add READ_ONCE() for i_blocks in f2fs_update_inode() ebeb70e29e37 mptcp: fix scheduling with atomic in timestamp sockopt a79bafdd4b63 mptcp: sockopt: set timestamp flags on subflow socket, not msk bd36fb4f9446 mptcp: use MPTCP_RST_EMPTCP for ACK HMAC validation failure 23e881c7fedb mptcp: use MPJoinSynAckHMacFailure for SynAck HMAC failure 114b4a6d4ede mptcp: fastclose msk when linger time is 0 ecc36a82ecfc RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path e3dc3a2fb05f RDMA/rxe: Reject unknown opcodes before ICRC processing 539cabb7b2d8 RDMA/rxe: Reject non-8-byte ATOMIC_WRITE payloads e01a957561f6 RDMA/ocrdma: Don't NULL deref uctx on errors in ocrdma_copy_pd_uresp() a13c2ac4d480 RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() c5dc30da9900 RDMA/mlx4: Fix resource leak on error in mlx4_ib_create_srq() 92582c6978d9 power: supply: max17042: avoid overflow when determining health 27f7c024ede4 PCI/AER: Stop ruling out unbound devices as error source 3937fa851992 PCI/AER: Clear only error bits in PCIe Device Status b1e9f2d58707 mm/damon/sysfs-schemes: protect memcg_path kfree() with damon_sysfs_lock 971f17f5d910 KVM: x86: check for nEPT/nNPT in slow flush hypercalls ba7f71b6161c smb: client: validate dacloffset before building DACL pointers ef6495d4df6e smb/client: fix out-of-bounds read in symlink_data() dffb44b2e06a smb/client: fix out-of-bounds read in smb2_compound_op() e5c93847bf03 s390/debug: Reject zero-length input in debug_input_flush_fn() fb4ae739811d RDMA/hns: Fix unlocked call to hns_roce_qp_remove() c741433f6c8d openvswitch: vport: fix self-deadlock on release of tunnel ports 9a4d7222c095 nvmet: avoid recursive nvmet-wq flush in nvmet_ctrl_free d525ecf92228 nvme-apple: drop invalid put of admin queue reference count 4af2e558e6fd md/raid10: fix divide-by-zero in setup_geo() with zero far_copies 2ae0afd98432 libceph: Fix slab-out-of-bounds access in auth message processing 470822125b62 lib/scatterlist: fix temp buffer in extract_user_to_sg() 3f17500e86d7 lib/scatterlist: fix length calculations in extract_kvec_to_sg 2aa77a18dc7f lib/crypto: mpi: Fix integer underflow in mpi_read_raw_from_sgl() bb0988ed4f2e isofs: validate block number from NFS file handle in isofs_export_iget c9b37c8b73f6 isofs: validate Rock Ridge CE continuation extent against volume size 5489c98bc681 dm-verity-fec: correctly reject too-small hash devices 2e28bb9cc39f dm-verity-fec: correctly reject too-small FEC devices ae9cd0b46b18 eventfs: Hold eventfs_mutex and SRCU when remount walks events f0b0b09d9840 dm: fix a buffer overflow in ioctl processing 16fc9f57b5d7 dm: don't report warning when doing deferred remove 12161e03d33a dm-thin: fix metadata refcount underflow c2670ec4aa49 btrfs: fix double free in create_space_info() error path f7126b0b2455 ASoC: qcom: q6apm: remove child devices when apm is removed 3141d8b00cad ASoC: qcom: q6apm-lpass-dai: Fix multiple graph opens cb25b46a8dbe ASoC: qcom: q6apm-dai: reset queue ptr on trigger stop ef1b78a68675 ASoC: Intel: bytcr_wm5102: Fix MCLK leak on platform_clock_control error a06bd365a587 ASoC: fsl_easrc: fix comment typo d91e616474c6 ASoC: amd: yc: Add HP OMEN Gaming Laptop 16-ap0xxx product line in quirk table 88f32a6806c8 cpuidle: powerpc: avoid double clear when breaking snooze 47bc7a03449c clk: microchip: mpfs-ccc: fix out of bounds access during output registration be8af24ff376 clk: imx: imx8-acm: fix flags for acm clocks d79e92161b65 spi: topcliff-pch: fix use-after-free on unbind 5f08cbdce0f3 thermal/drivers/sprd: Fix raw temperature clamping in sprd_thm_rawdata_to_temp c040f6c5402c thermal/drivers/sprd: Fix temperature clamping in sprd_thm_temp_to_rawdata 50dfaf4a0277 udf: reject descriptors with oversized CRC length 82bc89fbb82d ibmveth: Disable GSO for packets with small MSS 9415a3fbf677 hv_sock: fix ARM64 support a0ea2ee6ec05 gpio: of: clear OF_POPULATED on hog nodes in remove path 476254a6c87c extcon: ptn5150: handle pending IRQ events during system resume 2a5ed5055d1e cifs: change_conf needs to be called for session setup ff519f87c36b cifs: abort open_cached_dir if we don't request leases 3d2ecbd444b0 block: add pgmap check to biovec_phys_mergeable 0d7e7235bc54 af_unix: Reject SIOCATMARK on non-stream sockets d6c7f32094d6 hwmon: (corsair-psu) Close HID device on probe errors 39f0604bf1ae clk: rk808: fix OF node reference imbalance 0fc5303fa33d hwmon: (ltc2992) Fix u32 overflow in power read path 66daaf79de20 hwmon: (ltc2992) Clamp threshold writes to hardware range c9a3b2fb4003 parisc: Fix IRQ leak in LASI driver f94450ce5053 net: wwan: t7xx: validate port_count against message length in t7xx_port_enum_msg_handler 21d70744e6d3 net/rds: handle zerocopy send cleanup before the message is queued eca62bb0569d ip6_gre: Use cached t->net in ip6erspan_changelink(). d3bd80404979 net: libwx: fix VF illegal register access 6162e8212e88 sound: ua101: fix division by zero at probe 0653c0516234 net: rtnetlink: zero ifla_vf_broadcast to avoid stack infoleak in rtnl_fill_vfinfo 9a80c458320e mtd: spi-nor: debugfs: fix out-of-bounds read in spi_nor_params_show() 895ebbedf883 fanotify: fix false positive on permission events f39501ea776f staging: vme_user: fix root device leak on init failure 1108b8722b9f spi: s3c64xx: fix NULL-deref on driver unbind 487f65651549 spi: zynqmp-gqspi: fix controller deregistration 5105f3e6b2df Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_state_change_cb() ab77c8bc3026 Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_new_connection_cb() 6cb7f67bc28d Bluetooth: hci_event: Fix OOB read and infinite loop in hci_le_create_big_complete_evt 1e1e509b6fd2 Bluetooth: virtio_bt: validate rx pkt_type header length ed41c81d30b2 Bluetooth: virtio_bt: clamp rx length before skb_put 4aec732807c5 selinux: prune /sys/fs/selinux/disable 01231051fa45 selinux: shrink critical section in sel_write_load() ebd425067290 selinux: don't reserve xattr slot when we won't fill it c2efc4956981 ipv6: xfrm6: release dst on error in xfrm6_rcv_encap() 3bf4e93ed085 xfrm: provide message size for XFRM_MSG_MAPPING 0f39c2626617 powerpc/kdump: fix KASAN sanitization flag for core_$(BITS).o cdbd10975b96 ALSA: firewire-tascam: Do not drop unread control events b0c0d44adb55 usb: ulpi: fix memory leak on ulpi_register() error paths 20284bf5cc84 USB: serial: option: add Telit Cinterion LE910Cx compositions 9b92535cb729 USB: omap_udc: DMA: Don't enable burst 4 mode 91c3634bc6ac ALSA: usb-audio: Fix UAC3 cluster descriptor size check e0e3dcf48189 ALSA: usb-audio: Avoid potential endless loop in convert_chmap_v3() a3c42466f45c ALSA: usb-audio: midi2: Restart output URBs on resume d06d937b0a4c usb: usblp: fix uninitialized heap leak via LPGETSTATUS ioctl 6e29c32a2721 usb: usblp: fix heap leak in IEEE 1284 device ID via short response ed4168d1a50f wifi: brcmfmac: Fix potential use-after-free issue when stopping watchdog task c3d7b90dc950 wifi: b43: enforce bounds check on firmware key index in b43_rx() fe75fa1ac9a9 wifi: mac80211: remove station if connection prep fails 83226c71af53 wifi: ath5k: do not access array OOB 95fcb436586d wifi: rsi: fix kthread lifetime race between self-exit and external-stop 03584528bfff wifi: mac80211: drop stray 'static' from fast-RX rx_result 1baaeb6adecb wifi: b43legacy: enforce bounds check on firmware key index in RX path d04bc2355392 wifi: mt76: mt7921: fix ROC abort flow interruption in mt7921_roc_work e451c325b000 wifi: mt76: mt7921: fix a potential clc buffer length underflow 640b4c00fb0e exit: prevent preemption of oopsing TASK_DEAD task e4bbd3521db0 bpf: Don't mark STACK_INVALID as STACK_MISC in mark_stack_slot_misc aa71ab2cc929 selftests/bpf: validate fake register spill/fill precision backtracking logic 2fcd619caecb bpf: handle fake register spill to stack with BPF_ST_MEM instruction f013c1dafe93 selftests/bpf: validate precision logic in partial_stack_load_preserves_zeros c05c8db19cd3 bpf: track aligned STACK_ZERO cases as imprecise spilled registers 9d2cf5a4a378 selftests/bpf: validate zero preservation for sub-slot loads d3b398ee3404 bpf: preserve constant zero when doing partial register restore 6d40191708e1 selftests/bpf: validate STACK_ZERO is preserved on subreg spill 57f41f1eac13 bpf: preserve STACK_ZERO slots on partial reg spills c994886689fe selftests/bpf: add stack access precision test e4da60feca4d bpf: support non-r10 register spill/fill to/from stack in precision tracking 36aa34f42cb6 net/sched: sch_red: Replace direct dequeue call with peek and qdisc_dequeue_peeked 898a1751b620 KVM: SVM: check validity of VMCB controls when returning from SMM 695b491dc3f2 dmaengine: idxd: Fix leaking event log memory 5ba95b119aa7 dmaengine: idxd: Fix crash when the event log is disabled 0305e7118451 net: txgbe: fix RTNL assertion warning when remove module db104b0d8a78 flow_dissector: do not dissect PPPoE PFC frames da54b3039d43 net: Fix icmp host relookup triggering ip_rt_bug d51bf43193b1 iommu/amd: serialize sequence allocation under concurrent TLB invalidations c28c87d9a389 iommu/amd: Use atomic64_inc_return() in iommu.c 488e386484ec KVM: x86: Fix shadow paging use-after-free due to unexpected GFN 4772032a2c62 rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets 4d08401aa13f ext4: validate p_idx bounds in ext4_ext_correct_indexes e3bf143b1e98 rxrpc: Fix potential UAF after skb_unshare() failure 0d645c6d13fa spi: meson-spicc: Fix double-put in remove path e2c2b044458c x86/shstk: Prevent deadlock during shstk sigreturn 21159d8b335a drm/amd/display: Do not skip unrelated mode changes in DSC validation c79cf4232160 x86: shadow stacks: proper error handling for mmap lock 4a0bb8f9f71b spi: rockchip: fix controller deregistration 327a64241f30 ASoC: SOF: Don't allow pointer operations on unconfigured streams cf3eb7c8e705 iommufd: Fix a race with concurrent allocation and unmap 3bb92bac4e27 ACPI: video: force native backlight on HP OMEN 16 (8A44) 95242430c136 ACPI: CPPC: Fix related_cpus inconsistency during CPU hotplug 419d6c640da7 ACPI: scan: Use acpi_dev_put() in object add error paths 4f312c30f036 fbdev: udlfb: add vm_ops to dlfb_ops_mmap to prevent use-after-free ce905b65e649 ipmi:si: Return state to normal if message allocation fails 2418e4b21fb1 ipmi: Check event message buffer response for bad data 67c44e0deba9 ipmi: Add limits to event and receive message requests 1f678d13e939 scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() bffef0acec9c netfilter: reject zero shift in nft_bitwise 6bd17925bd68 net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels 50c6a1f05973 ALSA: caiaq: fix usb_dev refcount leak on probe failure be0376affcaf drm/amdgpu: fix zero-size GDS range init on RDNA4 8e8be63465a5 ipv6: rpl: reserve mac_len headroom when recompressed SRH grows e4389fb74cec ALSA: caiaq: Don't abort when no input device is available be62c8bb03b6 ALSA: caiaq: Fix potentially leftover ep1_in_urb at error path 68532b09cbfc driver core: Add kernel-doc for DEV_FLAG_COUNT enum value b69933e97efe crypto: authencesn - reject short ahash digests during instance creation e3cebcde0114 seg6: fix seg6 lwtunnel output redirect for L2 reduced encap mode 262152ec3710 scsi: sd: fix missing put_disk() when device_add(&disk_dev) fails 8a1fc8d698ac rtmutex: Use waiter::task instead of current in remove_waiter() a954061b334e ntfs3: fix integer overflow in run_unpack() volume boundary check bf7ac4a1d3bf ntfs3: add buffer boundary checks to run_unpack() 98f4ba3480b9 ktest: Fix the month in the name of the failure directory 9d8fd84aab19 IB/core: Fix zero dmac race in neighbor resolution 35f6b3281efd dm mirror: fix integer overflow in create_dirty_log() c5a45d14234b crypto: atmel-sha204a - Fix potential UAF and memory leak in remove path 5281e6e23023 crypto: atmel-tdes - fix DMA sync direction 3061c9bfb3f5 crypto: ccree - fix a memory leak in cc_mac_digest() 5b71db0780f1 crypto: hisilicon - Fix dma_unmap_single() direction 3f92c1de3bf1 crypto: atmel-ecc - Release client on allocation failure b63f1e2f0e31 crypto: atmel-aes - Fix 3-page memory leak in atmel_aes_buff_cleanup d78ee361b365 crypto: arm64/aes - Fix 32-bit aes_mac_update() arg treated as 64-bit 4b7d07747400 can: ucan: fix devres lifetime 204028af77a2 Bluetooth: hci_event: fix potential UAF in SSP passkey handlers 6cbf21775ee6 taskstats: set version in TGID exit notifications ab5fdcd53564 tcp: call sk_data_ready() after listener migration 8bcc1cd237ab inotify: fix watch count leak when fsnotify_add_inode_mark_locked() fails 33698bd1b2db md/raid5: validate payload size before accessing journal metadata 09880592f5a9 md/raid5: fix soft lockup in retry_aligned_read() 1bc1107a3a40 ext4: fix missing brelse() in ext4_xattr_inode_dec_ref_all() ab6da97bc310 ext4: fix bounds check in check_xattrs() to prevent out-of-bounds access 8bbed28f6b42 io_uring/poll: fix multishot recv missing EOF on wakeup race d26f8c361f75 mtd: docg3: fix use-after-free in docg3_release() 980d6ba22747 mtd: docg3: Convert to platform remove callback returning void ddb188b88d55 KVM: nSVM: Add missing consistency check for nCR3 validity 23ccf4affa6c KVM: nSVM: Add missing consistency check for EFER, CR0, CR4, and CS de6d8562a9cf KVM: nSVM: Clear tracking of L1->L2 NMI and soft IRQ on nested #VMEXIT c0095cef7303 KVM: nSVM: Clear EVENTINJ fields in vmcb12 on nested #VMEXIT 83754e459c4b KVM: nSVM: Clear GIF on nested #VMEXIT(INVALID) ddc242a7bb44 KVM: nSVM: Always inject a #GP if mapping VMCB12 fails on nested VMRUN d218a0e8a63c KVM: nSVM: Use vcpu->arch.cr2 when updating vmcb12 on nested #VMEXIT 263640149d81 KVM: nSVM: Ensure AVIC is inhibited when restoring a vCPU to guest mode 36f36a6e4e74 KVM: SVM: Explicitly mark vmcb01 dirty after modifying VMCB intercepts 3ac9d4241d20 KVM: SVM: Inject #UD for INVLPGA if EFER.SVME=0 1709418535a8 KVM: nSVM: Sync interrupt shadow to cached vmcb12 after VMRUN of L2 702ce67817de KVM: nSVM: Sync NextRIP to cached vmcb12 after VMRUN of L2 15003179c74d KVM: nSVM: Mark all of vmcb02 dirty when restoring nested state 35053cdec119 KVM: x86: Defer non-architectural deliver of exception payload to userspace read f3deabe0f5ac userfaultfd: allow registration of ranges below mmap_min_addr 14c643ecdc42 mm/damon/core: use time_in_range_open() for damos quota window start d975c077fbdc rtc: ntxec: fix OF node reference imbalance f92cc1d2c0b4 tpm: tpm_tis: stop transmit if retries are exhausted 2e0fd1cb4de4 tpm: tpm_tis: add error logging for data transfer a866e2b1c65e crypto: talitos - rename first/last to first_desc/last_desc 00463d5f864a crypto: talitos - fix SEC1 32k ahash request limitation a72815210182 arm64: dts: ti: am62-verdin: Enable pullup for eMMC data pins 00b1d0f4e7bb mmc: sdhci-of-dwcmshc: Disable clock before DLL configuration 0aaa43198645 mmc: block: use single block write in retry fdabbc881930 randomize_kstack: Maintain kstack_offset per task c03556448d47 power: supply: axp288_charger: Do not cancel work before initializing it 703fb43600c2 LoongArch: Show CPU vulnerabilites correctly 41aec1d85b88 tpm: avoid -Wunused-but-set-variable 64282a745897 extract-cert: Wrap key_pass with '#ifdef USE_PKCS11_ENGINE' 4b2738b93eda libceph: Prevent potential null-ptr-deref in ceph_handle_auth_reply() 92e7c209036d ipv4: icmp: validate reply type before using icmp_pointers 2fd4f8b74930 RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv 3e75d06cf3e4 drm/arcpgu: fix device node leak fa0c4283efef net: ks8851: Avoid excess softirq scheduling 640a7631d31d net: ks8851: Reinstate disabling of BHs around IRQ handler f0858e1d5624 net/smc: avoid early lgr access in smc_clc_wait_msg e98bd8888e3f net: txgbe: fix firmware version check 8fdbb6262a4a net: rds: fix MR cleanup on copy error ff78ed177a66 net: qrtr: ns: Free the node during ctrl_cmd_bye() 4069329eeba0 tools/accounting: handle truncated taskstats netlink messages d61482be4aae rxrpc: Fix re-decryption of RESPONSE packets f1c6bd0cc786 rxrpc: Fix rxkad crypto unalignment handling c4b8f32e73ea rxrpc: Fix memory leaks in rxkad_verify_response() 97a97090872f iio: adc: ad7768-1: fix one-shot mode data acquisition 528763fd6bb8 ALSA: pcmtest: Fix resource leaks in module init error paths c21ef73713eb ALSA: pcmtest: fix reference leak on failed device registration 99c8060c3b33 ALSA: 6fire: Fix input volume change detection f537e3ad6960 ALSA: caiaq: Handle probe errors properly f4dfbdc1be34 ALSA: caiaq: Fix control_put() result and cache rollback e794e1763e80 ALSA: core: Fix potential data race at fasync handling fafab8b3cd57 io_uring/poll: ensure EPOLL_ONESHOT is propagated for EPOLL_URING_WAKE cf522703d4f1 io_uring/poll: fix signed comparison in io_poll_get_ownership() 89ca27d6d3b2 iio: adc: ti-ads7950: use iio_push_to_buffers_with_ts_unaligned() 44100ed1bdce io_uring/timeout: check unused sqe fields 2f4809a879f0 rbd: fix null-ptr-deref when device_add_disk() fails 1627d6060b45 selftests/mqueue: Fix incorrectly named file 5d1451cb2cf6 remoteproc: xlnx: Only access buffer information if IPI is buffered c9d2f7b9c38c parisc: _llseek syscall is only available for 32-bit userspace 1b4039d8f4f6 nvme: respect NVME_QUIRK_DISABLE_WRITE_ZEROES when wzsl is set 86bffea0b9f2 nvme-pci: add NVME_QUIRK_DISABLE_WRITE_ZEROES for Kingston OM3SGP4 ec7f47706269 mfd: stpmic1: Attempt system shutdown twice in case PMIC is confused 965d6162dd88 md/raid10: fix deadlock with check operation and nowait requests 222055e6b406 erofs: fix the out-of-bounds nameoff handling for trailing dirents 8555d6990432 ALSA: seq_oss: return full count for successful SEQ_FULLSIZE writes 25ded535ee26 ALSA: ctxfi: Add fallback to default RSR for S/PDIF 831074ec21b4 ALSA: aoa: i2sbus: fix OF node lifetime handling 32e0b9255726 ext2: reject inodes with zero i_nlink and valid mode in ext2_iget() 0f313eb6a8f6 net: qrtr: ns: Fix use-after-free in driver remove() 3a5023627ab9 media: i2c: imx219: Check return value of devm_gpiod_get_optional() in imx219_probe() 4a34fd6b04f9 lib/ts_kmp: fix integer overflow in pattern length calculation a34d96381bf8 Revert "ALSA: usb: Increase volume range that triggers a warning" 72099f015d3c PCI: endpoint: pci-epf-ntb: Remove duplicate resource teardown 2209fdae5c2f media: mtk-jpeg: fix use-after-free in release path due to uncancelled work e9ae00490d47 net: strparser: fix skb_head leak in strp_abort_strp() 914c6456fcfc net: caif: clear client service pointer on teardown 1fbe46d2b727 ALSA: control: Validate buf_len before strnlen() in snd_ctl_elem_init_enum_names() 42dc622776f3 media: amphion: Fix race between m2m job_abort and device_run 0ba03e06f037 of: unittest: fix use-after-free in testdrv_probe() 9f1cbca178c0 crypto: pcrypt - Fix handling of MAY_BACKLOG requests 9337ed5e777e f2fs: fix to detect potential corrupted nid in free_nid_list f99165ef0677 spi: imx: fix use-after-free on unbind 8c43ed08643a um: drivers: call kernel_strrchr() explicitly in cow_user.c cc9b6303e7ea wifi: rtw88: check for PCI upstream bridge existence 2d1f18efccdb zram: do not forget to endio for partial discard requests 108f2cd13577 LoongArch: Add spectre boundry for syscall dispatch table 29166a0e732f driver core: Don't let a device probe until it's ready 886f97fa59d0 ocfs2: split transactions in dio completion to avoid credit exhaustion 17b399cbb9fa device property: Make modifications of fwnode "flags" thread safe abc6bdcbc045 regset: use kvzalloc() for regset_get_alloc() e620378aab78 drm/amdgpu: Limit BO list entry count to prevent resource exhaustion be7c5dcfd3c7 drm/amdgpu: Use vmemdup_array_user in amdgpu_bo_create_list_entry_array c7f4dad62813 padata: Remove comment for reorder_work a11a12a9880a padata: Fix pd UAF once and for all 0b60eb04b852 Bluetooth: MGMT: Fix possible UAFs d0b27c41aa09 firmware: google: framebuffer: Do not mark framebuffer as busy fd19eb1c7504 ibmasm: fix heap over-read in ibmasm_send_i2o_message() a672682d39dd ibmasm: fix OOB reads in command_file_write due to missing size checks fc7e9a74e322 misc: ibmasm: fix OOB MMIO read in ibmasm_handle_mouse_interrupt() 28a2e047d037 leds: qcom-lpg: Check for array overflow when selecting the high resolution fa297e919d16 drm/nouveau: fix u32 overflow in pushbuf reloc bounds check 8775fa6e2914 ALSA: usb-audio: Evaluate packsize caps at the right place e3a0ebd80ae6 usb: chipidea: core: allow ci_irq_handler() handle both ID and VBUS change 82d050713073 usb: chipidea: otg: not wait vbus drop if use role_switch 8429841d12ca usb: xhci: Make usb_host_endpoint.hcpriv survive endpoint_disable() d1905dbbb7c0 ALSA: usb-audio: Fix Audio Advantage Micro II SPDIF switch 610ba605a4f7 ALSA: usb-audio: Avoid false E-MU sample-rate notifications ab5ba9fd1387 ALSA: usb-audio: stop parsing UAC2 rates at MAX_NR_RATES 4d922539ad7d Linux 6.6.139 ff6fc65b3bf7 x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache 8f907d345bae ptrace: slightly saner 'get_dumpable()' logic (From OE-Core rev: be37c8721aacb0e9b05b5c6f24f2f28ada746740) Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> Signed-off-by: Yoann Congal <yoann.congal@smile.fr> Signed-off-by: Paul Barker <paul@pbarker.dev>	2026-06-26 16:55:55 +01:00
Bruce Ashfield	cd5bd462a2	linux-yocto/6.6: update to v6.6.138 ... Updating linux-yocto/6.6 to the latest korg -stable release that comprises the following commits: 3b9f64db04968 Linux 6.6.138 50ed1e7873100 xfrm: esp: avoid in-place decrypt on shared skb frags (From OE-Core rev: c5695ca3eef548ac0a2ce9dd933b8c776707c6d8) Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> Signed-off-by: Yoann Congal <yoann.congal@smile.fr> Signed-off-by: Paul Barker <paul@pbarker.dev>	2026-06-26 16:55:55 +01:00
Bruce Ashfield	72cf57fe51	linux-yocto/6.6: update to v6.6.137 ... Updating linux-yocto/6.6 to the latest korg -stable release that comprises the following commits: 258cf62a6dfde Linux 6.6.137 4b4defd2fce3f Buffer overflow in drivers/xen/sys-hypervisor.c 402d84ad9e89b xen/privcmd: fix double free via VMA splitting 710a4ce5d7afd crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl 3ef530ef5585f crypto: authencesn - Fix src offset when decrypting in-place d0c4ff6812386 crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption 60c798725c966 crypto: authenc - use memcpy_sglist() instead of null skcipher c2138c9bd02af crypto: algif_aead - snapshot IV for async AEAD requests 3115af9644c34 crypto: algif_aead - Revert to operating out-of-place dbea57c08acfc crypto: algif_aead - use memcpy_sglist() instead of null skcipher 9ec26b5d193c9 crypto: scatterwalk - Backport memcpy_sglist() (From OE-Core rev: 2c23f41118253f10fa63897b4587bd83421cec55) Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> Signed-off-by: Yoann Congal <yoann.congal@smile.fr> Signed-off-by: Paul Barker <paul@pbarker.dev>	2026-06-26 16:55:55 +01:00
Bruce Ashfield	e0d2943590	linux-yocto/6.6: update to v6.6.136 ... Updating linux-yocto/6.6 to the latest korg -stable release that comprises the following commits: 142cd8382222 Linux 6.6.136 deeaba4c54ae md/raid1: fix data lost for writemostly rdev 1fa36cf495b0 rxrpc: Fix missing validation of ticket length in non-XDR key preparsing 09427bcb1715 crypto: ccp: Don't attempt to copy ID to userspace if PSP command failed b5c14bd4da1f crypto: ccp: Don't attempt to copy PDH cert to userspace if PSP command failed 607ba280f2ad crypto: ccp: Don't attempt to copy CSR to userspace if PSP command failed c89c768734f3 crypto: testmgr - Hide ENOENT errors better 695cac6ed284 crypto: testmgr - Hide ENOENT errors 74e2db36fe50 net/packet: fix TOCTOU race on mmap'd vnet_hdr in tpacket_snd() f6634af5de72 ALSA: caiaq: take a reference on the USB device in create_card() 86fc28191418 ALSA: usb-audio: apply quirk for MOONDROP JU Jiu ef57cd3329b4 f2fs: fix use-after-free of sbi in f2fs_compress_write_end_io() 8d5729350b23 ksmbd: use check_add_overflow() to prevent u16 DACL size overflow ffbce350c6fd ksmbd: fix out-of-bounds write in smb2_get_ea() EA alignment a34d456934fe smb: client: fix OOB read in smb2_ioctl_query_info QUERY_INFO path b53b8e98c233 smb: client: require a full NFS mode SID before reading mode bits 0521a67e4b0f smb: server: fix max_connections off-by-one in tcp accept path 97f8d2648ef4 smb: server: fix active_num_conn leak on transport allocation failure b3e0e7dd53f1 fuse: quiet down complaints in fuse_conn_limit_write f1441a1ecace fuse: Check for large folio with SPLICE_F_MOVE d23ad78bfd20 fuse: reject oversized dirents in page cache a76c1cad4e80 f2fs: fix to avoid memory leak in f2fs_rename() f90b8a1798b7 fs/ntfs3: validate rec->used in journal-replay file record check a6bcf8010af0 rxrpc: only handle RESPONSE during service challenge d6a76b3600e1 rxrpc: Fix anonymous key handling 6669cf805940 scripts/dtc: Remove unused dts_version in dtc-lexer.l cf044df0901f Revert "wifi: cfg80211: stop NAN and P2P in cfg80211_leave" e2c9dc6b6e96 ocfs2: fix out-of-bounds write in ocfs2_write_end_inline 37f074e65f24 ocfs2: validate inline data i_size during inode read 4bf8cd09f427 ocfs2: add inline inode consistency check to ocfs2_validate_inode_block() c98b6fa86b33 rxrpc: Fix key quota calculation for multitoken keys e297bb2c2568 KVM: x86: Use __DECLARE_FLEX_ARRAY() for UAPI structures with VLAs f363c496e203 scripts: generate_rust_analyzer.py: define scripts ceb73484e720 PCI: endpoint: pci-epf-vntb: Stop cmd_handler work in epf_ntb_epc_cleanup 7ad01905831c net: annotate data-races around sk->sk_{data_ready,write_space} fa5d5baf67f6 i40e: Fix preempt count leak in napi poll tracepoint 71ca90c26eef net: ethernet: mtk_eth_soc: initialize PPE per-tag-layer MTU registers f77b51bcee7b wifi: mac80211: always free skb on ieee80211_tx_prepare_skb() failure 10f4ff4baeb6 md/raid1,raid10: don't ignore IO flags 50352fc10392 ipv6: add NULL checks for idev in SRv6 paths e238ab12556b PCI: endpoint: pci-epf-vntb: Remove duplicate resource teardown ebc8815a917f Revert "perf unwind-libdw: Fix invalid reference counts" 45cbaf5c7cdc media: hackrf: fix to not free memory after the device is registered in hackrf_probe() e3957eb26a3d media: vidtv: fix pass-by-value structs causing MSAN warnings 7318e3549518 nilfs2: fix NULL i_assoc_inode dereference in nilfs_mdt_save_to_shadow_map cb8092038e95 media: as102: fix to not free memory after the device is registered in as102_usb_probe() 47fa09fe7f3e bcache: fix cached_dev.sb_bio use-after-free and crash e88354b381e2 ALSA: 6fire: fix use-after-free on disconnect b5d141ea15f1 media: em28xx: fix use-after-free in em28xx_v4l2_open() 9a9bdaf9dc42 media: mediatek: vcodec: fix use-after-free in encoder release path 17cb7957c979 media: vidtv: fix nfeeds state corruption on start_streaming failure 115a5266749d mm: blk-cgroup: fix use-after-free in cgwb_release_workfn() cec74b2ab7df mm/kasan: fix double free for kasan pXds 887632163b54 ASoC: qcom: q6apm: move component registration to unmanaged version dc6a6c3db3a4 KVM: x86: Use scratch field in MMIO fragment to hold small write values 24b1e0d5d254 checkpatch: add support for Assisted-by tag e0c211a0c261 ice: Fix memory leak in ice_set_ringparam() e6661add2d9c nf_tables: nft_dynset: fix possible stateful expression memleak in error path aaba6ee63ba6 blktrace: fix __this_cpu_read/write in preemptible context 9df613ef6e8e nfc: nci: complete pending data exchange on device close 4604b7b4eee6 net: sched: fix TCF_LAYER_TRANSPORT handling in tcf_get_base_ptr() 5afb9356a2e5 KVM: nVMX: Fold requested virtual interrupt check into has_nested_events() 002a73470b56 net: add proper RCU protection to /proc/net/ptype f9d4b618f1b9 iio: common: st_sensors: Fix use of uninitialize device structs 36f127b971c0 btrfs: merge btrfs_orig_bbio_end_io() into btrfs_bio_end_io() 128b03ccb258 net: skb: fix cross-cache free of KFENCE-allocated skb head b670833749ff KVM: SEV: Drop WARN on large size for KVM_MEMORY_ENCRYPT_REG_REGION 6575f9fbf084 ocfs2: handle invalid dinode in ocfs2_group_extend 6f072daefcab ocfs2: fix use-after-free in ocfs2_fault() when VM_FAULT_RETRY 4b80b5a838a3 ocfs2: fix possible deadlock between unlink and dio_end_io_write b7efb4c94797 media: vidtv: fix NULL pointer dereference in vidtv_channel_pmt_match_sections 426ef05e82ee dcache: Limit the minimal number of bucket to two 452894005b4a ALSA: ctxfi: Limit PTP to a single page 6718df49e5a7 Docs/admin-guide/mm/damon/reclaim: warn commit_inputs vs param updates race 554391e7da68 USB: serial: option: add Telit Cinterion FN990A MBIM composition 779412e0e391 staging: sm750fb: fix division by zero in ps_to_hz() f632987306bc wifi: rtw88: fix device leak on probe failure e2f8c5d134f7 scripts: generate_rust_analyzer.py: avoid FD leak cce24f70090e fbdev: udlfb: avoid divide-by-zero on FBIOPUT_VSCREENINFO 301857c5ac27 usb: port: add delay after usb_hub_set_port_power() 8fb82e3555a7 USB: cdc-acm: Add quirks for Yoga Book 9 14IAH10 INGENIC touchscreen 9dec3276d122 usb: storage: Expand range of matched versions for VL817 quirks entry 885c8591784d usbip: validate number_of_packets in usbip_pack_ret_submit() 745a535461bb ksmbd: fix mechToken leak when SPNEGO decode fails after token alloc b5b5d5936a50 ksmbd: require 3 sub-authorities before reading sub_auth[2] 4b73376feecb ksmbd: validate EaNameLength in smb2_get_ea() bfbc74df8bbe smb: client: fix off-by-8 bounds check in check_wsl_eas() 1b2bfedccc4f usb: gadget: renesas_usb3: validate endpoint index in standard request handlers 9ceff1251904 usb: gadget: f_phonet: fix skb frags[] overflow in pn_rx_complete() 0f156bb5334e usb: gadget: f_ncm: validate minimum block_len in ncm_unwrap_ntb() 859a239d58a8 fbdev: tdfxfb: avoid divide-by-zero on FBIOPUT_VSCREENINFO f856f4b6efd5 ALSA: fireworks: bound device-supplied status before string array lookup 63c11b19cdc1 drm/vc4: platform_get_irq_byname() returns an int 2819f34e08bd NFC: digital: Bounds check NFC-A cascade depth in SDD response handler d4e1946bea8d net: usb: cdc-phonet: fix skb frags[] overflow in rx_complete() 932ae5309e53 HID: core: clamp report_size in s32ton() to avoid undefined shift c8cc765253ad HID: alps: fix NULL pointer dereference in alps_raw_event() c65ee4d3be5d staging: rtl8723bs: initialize le_tmp64 in rtw_BIP_verify() fa00738ab30b i2c: s3c24xx: check the size of the SMBUS message before using it 5e9cfffad898 can: raw: fix ro->uniq use-after-free in raw_rcv() 0eb1263a3b8c nfc: llcp: add missing return after LLCP_CLOSED checks e2e0e7884314 drm/i915/psr: Do not use pipe_src as borders for SU area 7ab1832fe163 objtool: Remove max symbol name length limitation 29d39948ce52 ALSA: usb-audio: Improve Focusrite sample rate filtering c5e918390002 netfilter: conntrack: add missing netlink policy validations e86ab1e56613 crypto: algif_aead - Fix minimum RX size check for decryption cfab2c817d2e perf/x86/intel/uncore: Skip discovery table for offline dies 1981e469558b gpio: tegra: fix irq_release_resources calling enable instead of disable 9ccce02d5013 l2tp: Drop large packets with UDP encap ae8343a19ccb net: ipa: fix event ring index not programmed for IPA v5.0+ a7d326dfb13b net: ipa: fix GENERIC_CMD register field masks for IPA v5.0+ b9232421a77a af_unix: read UNIX_DIAG_VFS data under unix_state_lock 00e1d650fa4b net: txgbe: leave space for null terminators on property_entry 288138418bef netfilter: ip6t_eui64: reject invalid MAC header for all packets 36bf0d98e180 netfilter: xt_multiport: validate range encoding in checkentry 368c22aea490 netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator 730663352c91 ipvs: fix NULL deref in ip_vs_add_service error path c4d93470aff0 selftests: net: bridge_vlan_mcast: wait for h1 before querier check d3125c541a96 xfrm_user: fix info leak in build_mapping() b66920a3348c xfrm: Wait for RCU readers during policy netns exit a55793e5a97d xsk: validate MTU against usable frame size on bind 81ab60836b27 xsk: fix XDP_UMEM_SG_FLAG issues cfcc8a82ad03 xsk: respect tailroom for ZC setups a03975beb9f6 xsk: tighten UMEM headroom validation to account for tailroom and min frame c9eef0760db4 e1000: check return value of e1000_read_eeprom d8a747057a17 ixgbevf: add missing negotiate_features op to Hyper-V ops table feba4907c302 tracing/probe: reject non-closed empty immediate strings 7a01c81120f5 dt-bindings: net: Fix Tegra234 MGBE PTP clock 366f890831ff net: stmmac: Fix PTP ref clock for Tegra234 d8c2aa3c4a1e nfc: s3fwrn5: allocate rx skb before consuming bytes 47a8bf52156a ipv4: icmp: fix null-ptr-deref in icmp_build_probe() 363a38044b8c net: lapbether: handle NETDEV_PRE_TYPE_CHANGE eb3765b90eb8 net: sched: act_csum: validate nested VLAN headers a6566cd33f6f eventpoll: defer struct eventpoll free to RCU grace period 34160cca50ec drm/vc4: Protect madv read in vc4_gem_object_mmap() with madv_lock dd5c49787a32 drm/vc4: Fix a memory leak in hang state error path a812008fe3a0 drm/vc4: Fix memory leak of BO array in hang state 5befb65dca90 drm/vc4: Release runtime PM reference after binding V3D 96f71e3a7f9b PCI: hv: Set default NUMA node to 0 for devices without affinity info 6948caaff66d arm64: dts: imx8mq: Set the correct gpu_ahb clock frequency d4d11b70a30f soc: aspeed: socinfo: Mask table entries for accurate SoC ID matching f0288da67320 ASoC: stm32_sai: fix incorrect BCLK polarity for DSP_A/B, LEFT_J 3ec7437e9d11 wifi: brcmfmac: validate bsscfg indices in IF events cf50a1178dfc ata: ahci: force 32-bit DMA for JMicron JMB582/JMB585 e6a445513fbc HID: roccat: fix use-after-free in roccat_report_event 40f40229baa7 ALSA: hda/realtek: Add quirk for Lenovo Yoga Pro 7 14IAH10 e73692e0e271 HID: quirks: add HID_QUIRK_ALWAYS_POLL for 8BitDo Pro 3 a9098b43562f platform/x86/amd: pmc: Add Thinkpad L14 Gen3 to quirk_s2idle_bug 36af81124ca8 pinctrl: intel: Fix the revision for new features (1kOhm PD, HW debouncer) b17dcf3c9cb4 ASoC: amd: yc: Add DMI entry for HP Laptop 15-fc0xxx 5d4fe469fe7d fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath 7b73bea718fe ALSA: usb-audio: Fix quirk flags for NeuralDSP Quad Cortex e51cd8954919 ASoC: soc-core: call missing INIT_LIST_HEAD() for card_aux_list b6ba1eacf276 wifi: wl1251: validate packet IDs before indexing tx_frames d7b59c2e6109 ALSA: hda/realtek: add quirk for Framework F111:000F fa4f1f52528c netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry b345586c9fe8 ALSA: hda/realtek: Add mute LED quirk for HP Pavilion 15-eg0xxx c09a7446aab5 btrfs: tracepoints: get correct superblock from dentry in event btrfs_sync_file() aa77bd6d08f0 can: mcp251x: add error handling for power enable in open and resume 5c37bd025068 ASoC: SOF: topology: reject invalid vendor array size in token parser 64e4ced7dd47 ASoC: amd: yc: Add DMI quirk for Thin A15 B7VF 719df67c2003 ALSA: asihpi: avoid write overflow check warning 384c3f844f53 media: rkvdec: reduce stack usage in rkvdec_init_v4l2_vp9_count_tbl() e0c656cbb2a7 ALSA: hda/realtek: Add quirk for ASUS ROG Flow Z13-KJP GZ302EAC 1e1015643535 ALSA: hda/realtek: Add HP ENVY Laptop 13-ba0xxx quirk 2cd86c2cd771 ASoC: amd: yc: Add DMI quirk for ASUS EXPERTBOOK BM1403CDA 62298a48f8b8 RDMA/irdma: Fix double free related to rereg_user_mr (From OE-Core rev: e1b84d7426c14f41676c40bc3056fb4636ea7900) Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> Signed-off-by: Yoann Congal <yoann.congal@smile.fr> Signed-off-by: Paul Barker <paul@pbarker.dev>	2026-06-26 16:55:55 +01:00
Bruce Ashfield	47c59204c5	linux-yocto/6.6: update to v6.6.135 ... Updating linux-yocto/6.6 to the latest korg -stable release that comprises the following commits: 9760bf04666d Linux 6.6.135 53b86879e92b Revert "PCI: Enable ACS after configuring IOMMU for OF platforms" 9853917f9edf rxrpc: Fix missing error checks for rxkad encryption/decryption failure 1355eb244aa5 rxrpc: Fix key/keyring checks in setsockopt(RXRPC_SECURITY_KEY/KEYRING) 9ce36d28f67c rxrpc: fix reference count leak in rxrpc_server_keyring() 47073aab8a3a rxrpc: reject undecryptable rxkad response tickets b8f66447448d rxrpc: Only put the call ref if one was acquired f1a7a3ab0f35 rxrpc: Fix key reference count leak from call->key 93fc15be44a3 rxrpc: Fix call removal to use RCU safe deletion e63265f188ea net: lan966x: fix page_pool error handling in lan966x_fdma_rx_alloc_page_pool() 88591194df73 mm: filemap: fix nr_pages calculation overflow in filemap_map_pages() b7b8012193fd net: stmmac: fix integer underflow in chain mode 9a56735581d5 net: qualcomm: qca_uart: report the consumed byte on RX skb allocation failure 6468cab1173f mmc: vub300: fix NULL-deref on disconnect 80fd0de89805 pmdomain: imx8mp-blk-ctrl: Keep the NOC_HDCP clock enabled 0985b18c95eb net/mlx5: Update the list of the PCI supported devices ca3f48c3567d drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat 2f55b58b5a0b batman-adv: hold claim backbone gateways by reference 2eb9d67704ca net: altera-tse: fix skb leak on DMA mapping error in tse_start_xmit() 0e43e0a3c940 net/tls: fix use-after-free in -EBUSY error path of tls_do_encryption d3de72e2a2b9 EDAC/mc: Fix error path ordering in edac_mc_alloc() 672b526def1f X.509: Fix out-of-bounds access when parsing extensions 69d61639bc7e batman-adv: reject oversized global TT response buffers 07cb6c72e66b nfc: pn533: allocate rx skb before consuming bytes 0f36273a4b24 arm64: dts: hisilicon: hi3798cv200: Add missing dma-ranges e3d84395a16d arm64: dts: hisilicon: poplar: Correct PCIe reset GPIO polarity e85ee7bd042c arm64: dts: imx8mq-librem5: Bump BUCK1 suspend voltage up to 0.85V 03c00ef6d6df Revert "arm64: dts: imx8mq-librem5: Set the DVS voltages lower" 4bf41c2731a0 wifi: brcmsmac: Fix dma_free_coherent() size 3bcf7aca63f0 tipc: fix bc_ackers underflow on duplicate GRP_ACK_MSG c221ed63a276 xfrm: clear trailing padding in build_polexpire() 070abdf1b043 netfilter: nft_ct: fix use-after-free in timeout object destroy 533e0a0454d0 Revert "drm: Fix use-after-free on framebuffers and property blobs when calling drm_dev_unplug" 32bad10de347 netfilter: nft_set_pipapo: do not rely on ZERO_SIZE_PTR 84d458018b14 seg6: separate dst_cache for input and output paths in seg6 lwtunnel 3e9bf8c3ba89 Revert "mptcp: add needs_id for netlink appending addr" 8ec6a58586f1 usb: gadget: f_hid: move list and spinlock inits from bind to alloc e8984f068e90 virtio_net: clamp rss_max_key_size to NETDEV_RSS_KEY_LEN 0dc539b888fb scsi: ufs: core: Fix use-after free in init error and remove paths 146e25625378 ASoC: simple-card-utils: Don't use __free(device_node) at graph_util_parse_dai() 811b3dccfb0a MIPS: mm: Rewrite TLB uniquification for the hidden bit feature 591f030449ad MIPS: mm: Suppress TLB uniquification on EHINV hardware 8a4de6bcaf01 MIPS: Always record SEGBITS in cpu_data.vmbits 00a4b91f8fac Input: uinput - take event lock when submitting FF request "event" 546c18a14924 Input: uinput - fix circular locking dependency with ff-core 3fd6547f5b8a mptcp: fix slab-use-after-free in __inet_lookup_established 673d2a3eef6e net: rfkill: prevent unlimited numbers of rfkill events from being created e0c8542c3d09 xfrm_user: fix info leak in build_report() 1de5c76bf40e wifi: rt2x00usb: fix devres lifetime 066c760acead lib/crypto: chacha: Zeroize permuted_state before it leaves scope 91f02726b220 x86/CPU: Fix FPDSS on Zen1 (From OE-Core rev: 4536d25fbba2ce23dfb91b25729efe83ac102f61) Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> Signed-off-by: Yoann Congal <yoann.congal@smile.fr> Signed-off-by: Paul Barker <paul@pbarker.dev>	2026-06-26 16:55:55 +01:00
Bruce Ashfield	171afa565f	linux-yocto/6.6: update to v6.6.134 ... Updating linux-yocto/6.6 to the latest korg -stable release that comprises the following commits: 8cee53b8eaeb5 Linux 6.6.134 6b63a54a790a6 net: sfp: Fix Ubiquiti U-Fiber Instant SFP module on mvneta 79bc854d44f9f MPTCP: fix lock class name family in pm_nl_create_listen_socket 83170a05908b6 ext4: handle wraparound when searching for blocks for indirect mapped blocks a070d5a872ffe ext4: publish jinode after initialization e2316c5d759d3 dmaengine: fsl-edma: fix channel parameter config for fixed channel requests 72c0f5de91098 dmaengine: fsl-edma: change to guard(mutex) within fsl_edma3_xlate() 892ba47ef7140 x86/cpu: Enable FSGSBASE early in cpu_init_exception_handling() 7ddcf4a245c1c mm/huge_memory: fix folio isn't locked in softleaf_to_folio() 15f5241d5a523 scsi: target: tcm_loop: Drain commands in target_reset handler d88541ffd56d6 net: mana: fix use-after-free in add_adev() error path ed71cf465c75f net: correctly handle tunneled traffic on IPV6_CSUM GSO fallback a2d3c892115e1 net: macb: Move devm_{free,request}_irq() out of spin lock area 9e7d5b7581ce1 iio: imu: inv_icm42600: fix odr switch when turning buffer off d1e3aa80e6e04 wifi: virt_wifi: remove SET_NETDEV_DEV to avoid use-after-free c6da4fed7537a usb: gadget: f_uac1_legacy: validate control request size cb5316b37288a usb: gadget: f_rndis: Protect RNDIS options with mutex 75776a055b656 usb: gadget: f_subset: Fix unbalanced refcnt in geth_free c78e463ee134b usb: gadget: uvc: fix NULL pointer dereference during unbind race f6813c2b2ae78 usb: gadget: u_ether: Fix race between gether_disconnect and eth_stop 3db70e16fccb4 LoongArch: vDSO: Emit GNU_EH_FRAME correctly cddea0c721106 gfs2: Validate i_depth for exhash directories 514784b8951e7 gfs2: Improve gfs2_consist_inode() usage 3a9fd45afadec btrfs: do not free data reservation in fallback from inline due to -ENOSPC 681377e4e229d btrfs: fix the qgroup data free range for inline data extents f5b469a84400a usb: gadget: dummy_hcd: fix premature URB completion when ZLP follows partial transfer 5aa776c8615be USB: dummy-hcd: Fix interrupt synchronization error 791966f85b439 USB: dummy-hcd: Fix locking/synchronization error 2516336e825fc thunderbolt: Fix property read in nhi_wake_supported() 4b8e527aca357 misc: fastrpc: possible double-free of cctx->remote_heap 9e796001af97a thermal: core: Fix thermal zone device registration error path e208c45c63258 gpio: mxc: map Both Edge pad wakeup to Rising Edge da39ee627fd82 cpufreq: governor: fix double free in cpufreq_dbs_governor_init() error path 8a71911fc7eee net: ftgmac100: fix ring allocation unwind on open failure 602596c69a70e vxlan: validate ND option lengths in vxlan_na_create 28a371be901ef counter: rz-mtu3-cnt: do not use struct rz_mtu3_channel's dev member 885aa739a07ab counter: rz-mtu3-cnt: prevent counter from being toggled multiple times 6cea34d7ec682 netfilter: ipset: drop logically empty buckets in mtype_del aca0938d0bb44 nvmem: imx: assign nvmem_cell_info::raw_len eeb496e82b916 dt-bindings: connector: add pd-disable dependency 1603dd471f477 comedi: me4000: Fix potential overrun of firmware buffer c16ac4e173a05 comedi: me_daq: Fix potential overrun of firmware buffer f517646e008fe comedi: ni_atmio16d: Fix invalid clean-up after failed attach c01bcc67a9a69 comedi: Reinit dev->spinlock between attachments to low-level drivers d5d9df8b08d68 comedi: dt2815: add hardware detection to prevent crash 787c21d2cc13b cdc-acm: new quirk for EPSON HMD e0bfd6d4dc77a bridge: br_nd_send: validate ND option lengths 2e5cbab8ccbfc fork: defer linking file vma until vma is fully initialized 13e8e5bd99849 vfio/pci: Insert full vma on mmap'd MMIO fault 1a0a115843ec4 vfio/pci: Use unmap_mapping_range() 764438b5c5d15 vfio: Create vfio_fs_type with inode per device cfca84f5986af usb: cdns3: gadget: fix state inconsistency on gadget init failure 9ab9b0e5fcdac usb: cdns3: gadget: fix NULL pointer dereference in ep_queue beab10429439e usb: dwc2: gadget: Fix spin_lock/unlock mismatch in dwc2_hsotg_udc_stop() af1e68c43ed88 usb: ehci-brcm: fix sleep during atomic 95e09b07e5029 usb: usbtmc: Flush anchored URBs in usbtmc_release aaeae6533d77e usb: ulpi: fix double free in ulpi_register_interface() error path a6f374ba81dde usb: quirks: add DELAY_INIT quirk for another Silicon Motion flash drive 1f83e4f8509aa iio: gyro: mpu3050: Fix out-of-sequence free_irq() 2a4537653d200 iio: gyro: mpu3050: Move iio_device_register() to correct location 8f237c408f300 iio: gyro: mpu3050: Fix irq resource leak a09171d3f23e1 iio: gyro: mpu3050: Fix incorrect free_irq() variable 4cda5db84e917 iio: imu: st_lsm6dsx: Set FIFO ODR for accelerometer and gyroscope only 11aaba2824a14 iio: imu: bmi160: Remove potential undefined behavior in bmi160_config_pin() dae6048cb63fe iio: light: vcnl4035: fix scan buffer on big-endian 13f4f2d046661 iio: dac: ad5770r: fix error return in ad5770r_read_raw() 97d908087e85c iio: accel: fix ADXL355 temperature signature value 81b90c03dd65f Input: xpad - add support for Razer Wolverine V3 Pro 6260b66c005fa Input: xpad - add support for BETOP BTP-KP50B/C controller's wireless mode 92b1a92857002 Input: i8042 - add TUXEDO InfinityBook Max 16 Gen10 AMD to i8042 quirk table a6d5d972460ca Input: synaptics-rmi4 - fix a locking bug in an error path fa64aab25aba4 iio: adc: ti-adc161s626: use DMA-safe memory for spi_read() 624e292e74769 USB: core: add NO_LPM quirk for Razer Kiyo Pro webcam 619d8d1cc4688 USB: serial: option: add support for Rolling Wireless RW135R-GL d3f78e9cd0bbe USB: serial: io_edgeport: add support for Blackbox IC135A beadc871ccf86 drm/i915/dp: Use crtc_state->enhanced_framing properly on ivb/hsw CPU eDP 32ac48642e71e drm/ast: dp501: Fix initialization of SCU2C 7759f105e9c89 iio: adc: ti-adc161s626: fix buffer read on big-endian 43fa022b56dcd mips: mm: Allocate tlb_vpn array atomically 37ae8fadc74ed hwmon: (occ) Fix division by zero in occ_show_power_1() 4c10f326f628e MIPS: Fix the GCC version check for `__multi3' workaround 91649c02c1baa Bluetooth: SMP: force responder MITM requirements before building the pairing response b1c6a8e554a39 Bluetooth: SMP: derive legacy responder STK authentication from MITM state c8859675f1cf9 ALSA: ctxfi: Fix missing SPDIFI1 index handling a82c1bce2d129 ALSA: caiaq: fix stack out-of-bounds read in init_card 2de70a6149e03 USB: serial: option: add MeiG Smart SRM825WN ffbed27ba15ef wifi: iwlwifi: mvm: fix potential out-of-bounds read in iwl_mvm_nd_match_info_handler() 9907ac9b9a18b wifi: wilc1000: fix u8 overflow in SSID scan buffer size calculation 489f2ef2b9088 drm/ioc32: stop speculation on the drm_compat_ioctl path 0320474d92c69 riscv: kgdb: fix several debug register assignment bugs e01779a5c0283 mips: ralink: update CPU clock index 649ceac79c831 hwmon: (occ) Fix missing newline in occ_show_extended() 164a1b397da0c hwmon: (tps53679) Fix device ID comparison and printing in tps53676_identify() cb048be568a85 dt-bindings: gpio: fix microchip #interrupt-cells 220f29e819244 hwmon: (pxe1610) Check return value of page-select write in probe 2dd67966f39a2 accel/qaic: Handle DBC deactivation if the owner went away 690509a2eea89 iio: imu: bno055: fix BNO055_SCAN_CH_COUNT off by one 8755066f7bd0f bpf: reject direct access to nullable PTR_TO_BUF pointers 5e4ee5dbea134 ipv6: avoid overflows in ip6_datagram_send_ctl() 36a5d17d7ddad net: hsr: fix VLAN add unwind on slave errors 4a09f72007201 net/sched: cls_flow: fix NULL pointer dereference on shared blocks 18328eff2f97d net/sched: cls_fw: fix NULL pointer dereference on shared blocks 1734bd85c5e0a net/x25: Fix overflow when accumulating packets 143d4fa68ae9e net/x25: Fix potential double free of skb 1fc7fbac8b98f net/mlx5: Avoid "No data available" when FW version queries fail 7129632cab3e4 net/mlx5: lag: Check for LAG device before creating debugfs e1f6f47d6e60d net: macb: properly unregister fixed rate clocks b3f799cdf830d net: macb: fix clk handling on PCI glue driver removal a14b568633486 net/sched: sch_netem: fix out-of-bounds access in packet corruption 8d597e3e74027 bpf: sockmap: Fix use-after-free of sk->sk_socket in sk_psock_verdict_data_ready(). 6b0a8de67ac0c rds: ib: reject FRMR registration before IB connection is established 244b639e6a3a8 Bluetooth: MGMT: validate mesh send advertising payload length 5fb69e1eeea9d Bluetooth: hci_event: fix potential UAF in hci_le_remote_conn_param_req_evt f71695e81f4cb Bluetooth: MGMT: validate LTK enc_size on load adb90cd0f9f7a Bluetooth: SCO: fix race conditions in sco_sock_connect() 2504ce3fc39ed Bluetooth: hci_sync: call destroy in hci_cmd_sync_run if immediate 4b12a3cc3f075 netfilter: nf_tables: reject immediate NF_QUEUE verdict f00ac65c90ea4 netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP 2ea0f35f235f7 netfilter: ctnetlink: ignore explicit helper on new expectations a76157a1eee5f netfilter: nf_conntrack_expect: store netns and zone in expectation e7ccaa0a62a8f netfilter: nf_conntrack_expect: use expect->helper d81c3205085b5 netfilter: nf_conntrack_expect: honor expectation helper field 2898080c054ea netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent 2cf2737c85a2b netfilter: nf_conntrack_helper: pass helper to expect cleanup 1b842ade214b9 netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr c2d4a3abb15ca netfilter: x_tables: ensure names are nul-terminated 607245c4dbb86 netfilter: nfnetlink_log: account for netlink header size 5382bb03e9c33 netfilter: flowtable: strictly check for maximum number of actions 6c7fbdb8ffde6 net: ipv6: flowlabel: defer exclusive option free until RCU teardown b99d82706bd15 bpf: Fix regsafe() for pointers to packet 236b564165b49 net: xilinx: axienet: Correct BD length masks to match AXIDMA IP spec 2c1fadd221b21 NFC: pn533: bound the UART receive buffer e35f5195cd44f net: sched: cls_api: fix tc_chain_fill_node to initialize tcm_info to zero to prevent an info-leak 7d9f2f4aabd11 ipv6: prevent possible UaF in addrconf_permanent_addr() 584d8648f859f ASoC: ep93xx: Fix unchecked clk_prepare_enable() and add rollback on failure c56f78614e778 net/sched: sch_hfsc: fix divide-by-zero in rtsc_min() 658261898130d bridge: br_nd_send: linearize skb before parsing ND options a0c4ce9900a10 ip6_tunnel: clear skb2->cb[] in ip4ip6_err() 3d5127d998de6 ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() c64dc67d70da6 tg3: Fix race for querying speed/duplex d1b041080086e net/ipv6: ioam6: prevent schema length wraparound in trace fill 7f56d87e527bb net: ipv6: ndisc: fix ndisc_ra_useropt to initialize nduseropt_padX fields to zero to prevent an info-leak 0fda873092b54 net: qrtr: replace qrtr_tx_flow radix_tree with xarray to fix memory leak 3e52e1b121c28 net: fec: fix the PTP periodic output sysfs interface 7cdf2c6381b21 crypto: af-alg - fix NULL pointer dereference in scatterwalk 31022cfde5235 crypto: caam - fix overflow on long hmac keys a7ecf06d3ee06 crypto: caam - fix DMA corruption on long hmac keys 4073217be3df0 wifi: ath11k: Pass the correct value of each TID during a stop AMPDU session 18e28353074a3 wifi: ath11k: Use dma_alloc_noncoherent for rx_tid buffer allocation 12322d8654cf9 wifi: ath11k: skip status ring entry processing 90afe0af4452b dt-bindings: auxdisplay: ht16k33: Use unevaluatedProperties to fix common property warning ea553dfb630e1 spi: geni-qcom: Check DMA interrupts early in ISR 295f8075d0044 btrfs: reject root items with drop_progress and zero drop_level b404e6b9863ea i2c: tegra: Don't mark devices with pins as IRQ safe c7a27bb4d0f65 HID: multitouch: Check to ensure report responses match the request e9126544fd779 objtool: Fix Clang jump table detection 960159a9f8468 tg3: replace placeholder MAC address with device property c9fc98beeedf0 btrfs: don't take device_list_mutex when querying zone info b256d055da472 atm: lec: fix use-after-free in sock_def_readable() 8bd690ac12423 HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq 7b56b67776520 arm64/scs: Fix handling of advance_loc4 80de0a9581338 Linux 6.6.133 9a3a2ae5efbbc xattr: switch to CLASS(fd) 16d41d32b7c76 Revert "xattr: switch to CLASS(fd)" (From OE-Core rev: 65242fa5eaa679398d2cb782aea5219e49054cfb) Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> Signed-off-by: Yoann Congal <yoann.congal@smile.fr> Signed-off-by: Paul Barker <paul@pbarker.dev>	2026-06-26 16:55:55 +01:00
Bruce Ashfield	c1e0c27492	linux-yocto/6.6: update to v6.6.132 ... Updating linux-yocto/6.6 to the latest korg -stable release that comprises the following commits: 08667c1437c07 Linux 6.6.132 866c39b567bde Revert "rust: pin-init: add references to previously initialized fields" e7ccb57fe7164 Revert "rust: pin-init: internal: init: document load-bearing fact of field accessors" 29242a6238213 Linux 6.6.131 e10af36ac3f7b tcp: Fix bind() regression for v6-only wildcard and v4-mapped-v6 non-wildcard addresses. de7c0c04ad868 futex: Clear stale exiting pointer in futex_lock_pi() retry path 37cf97e37498a dmaengine: idxd: Fix freeing the allocated ida too late 509ff03a3f188 dmaengine: idxd: Remove usage of the deprecated ida_simple_xx() API e3387416ad6b2 btrfs: fix lost error when running device stats on multiple devices fs 94054ffd311a1 btrfs: fix leak of kobject name for sub-group space_info 1ddab07bf2ed5 btrfs: fix super block offset in error message in btrfs_validate_super() 5a0538380d29e dmaengine: xilinx_dma: Fix reset related timeout with two-channel AXIDMA ab4a8624b999a dmaengine: xilinx: xilinx_dma: Fix unmasked residue subtraction 26271695302c8 dmaengine: xilinx: xilinx_dma: Fix residue calculation for cyclic DMA a3142cc1581a5 dmaengine: xilinx: xilinx_dma: Fix dma_device directions 4b6e1da50b22e dmaengine: xilinx: xdma: Fix regmap init error handling afc39537cddcb dmaengine: dw-edma: Fix multiple times setting of the CYCLE_STATE and CYCLE_BIT bits for HDMA. 5893ae3b4591b phy: ti: j721e-wiz: Fix device node reference leak in wiz_get_lane_phy_types() 54d77cc0c40ca dmaengine: idxd: Fix memory leak when a wq is reset 2bb9e9e93adff dmaengine: idxd: Fix not releasing workqueue on .release() cfadf46a67b68 erofs: fix "BUG: Bad page state in z_erofs_do_read_page" 75669e987137f xfs: save ailp before dropping the AIL lock in push callbacks 7121b22b0bac8 xfs: avoid dereferencing log items after push callbacks aba546061341b mm/damon/sysfs: check contexts->nr before accessing contexts_arr[0] 2efbc838a26d3 nvme: fix admin queue leak on controller reset 5a1e865e51063 xattr: switch to CLASS(fd) bb42e9627aa92 libbpf: Fix -Wdiscarded-qualifiers under C23 4913592a3358f gfs2: Fix unlikely race in gdlm_put_lock 8c93e73af8563 mtd: spi-nor: core: avoid odd length/address writes in 8D-8D-8D mode 8cdc84415a4d2 mtd: spi-nor: core: avoid odd length/address reads on 8D-8D-8D mode 0890fba6129dc rust: pin-init: internal: init: document load-bearing fact of field accessors c28fc9b0dbc7a rust: pin-init: add references to previously initialized fields ef41a85a55022 tracing: Fix potential deadlock in cpu hotplug with osnoise 5a9f33294cc04 tracing: Switch trace_osnoise.c code over to use guard() and __free() c9b95ef6f5039 ksmbd: fix memory leaks and NULL deref in smb2_lock() 9e785f004cbc5 ksmbd: fix use-after-free and NULL deref in smb_grant_oplock() d3c4458707e70 powerpc64/bpf: do not increment tailcall count when prog is NULL d419788a834f7 arm64: dts: imx8mn-tqma8mqnl: fix LDO5 power off 1c82f863f090a ext4: always drain queued discard work in ext4_mb_release() ca99cbcc316cd ext4: fix iloc.bh leak in ext4_fc_replay_inode() error paths c84c0272e0b66 ext4: fix the might_sleep() warnings in kvfree() 9449f99ba04f5 ext4: fix use-after-free in update_super_work when racing with umount b77de3fceafbb ext4: reject mount if bigalloc with s_first_data_block != 0 2d31a5073f86a ext4: avoid allocate block from corrupted group in ext4_mb_find_by_goal() ecc50bfca9b5c ext4: avoid infinite loops caused by residual data 65c6c30ce6362 ext4: replace BUG_ON with proper error handling in ext4_read_inline_folio df3cecfc5036f ext4: make recently_deleted() properly work with lazy itable initialization 2b7bf66a09873 ext4: fix fsync(2) for nojournal mode 850e68a1d3b06 ext4: fix stale xarray tags after writeback 699bac4d4c951 ext4: convert inline data to extents when truncate exceeds inline size 17c21b951e87c ext4: fix journal credit check when setting fscrypt context 813f372a3b8aa xfs: fix ri_total validation in xlog_recover_attri_commit_pass2 d38135af04a3a xfs: stop reclaim before pushing AIL during unmount f458dceaa6a35 LoongArch: Workaround LS2K/LS7A GPU DMA hang bug ebf6860ef7093 dmaengine: sh: rz-dmac: Move CHCTRL updates under spinlock 79c4796b2711e dmaengine: sh: rz-dmac: Protect the driver specific lists 75552b2c17124 irqchip/qcom-mpm: Add missing mailbox TX done acknowledgment d536a00f1b451 jbd2: gracefully abort on checkpointing state corruptions fd28c56186991 KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE 78c8b090a3d5c net: macb: Use dev_consume_skb_any() to free TX SKBs d20d3eedbd04e scsi: ses: Handle positive SCSI error from ses_recv_diag() 4ed727e35b0ab scsi: ibmvfc: Fix OOB access in ibmvfc_discover_targets_done() c9e137c26cd45 alarmtimer: Fix argument order in alarm_timer_forward() 5c8ecdcfbfb0b erofs: add GFP_NOIO in the bio completion if needed a58d298a83a3a s390/entry: Scrub r12 register on kernel entry fedd2e1630cac virtio_net: Fix UAF on dst_ops when IFF_XMIT_DST_RELEASE is cleared and napi_tx is false 1a0d9083c24fb media: mc, v4l2: serialize REINIT and REQBUFS with req_queue_mutex ebdd28353b958 hwmon: (peci/cputemp) Fix off-by-one in cputemp_is_visible() 7c0666a26b290 hwmon: (peci/cputemp) Fix crit_hyst returning delta instead of absolute temperature 844a18493173f hwmon: (pmbus/isl68137) Add mutex protection for AVS enable sysfs attributes d4f4364974460 KVM: arm64: Discard PC update state on vcpu reset 501559fbe2097 platform/x86: ISST: Correct locked bit width 2e2c7a6b2958e cpufreq: conservative: Reset requested_freq on limits change cb3d6efa78460 can: isotp: fix tx.buf use-after-free in isotp_sendmsg() 54ecdf76a55e7 can: gw: fix OOB heap access in cgw_csum_crc8_rel() 9e7f353710f85 ASoC: SOF: ipc4-topology: Allow bytes controls without initial payload a2842de6856a7 ALSA: firewire-lib: fix uninitialized local variable 6fafc4c4238e5 ksmbd: do not expire session on binding failure 358cdaa1f7fbf ksmbd: fix potencial OOB in get_file_all_info() for compound requests c3a89e3ec1ccf ksmbd: replace hardcoded hdr2_len with offsetof() in smb2_calc_max_out_buf_len() a11911d94c032 s390/barrier: Make array_index_mask_nospec() __always_inline 7a5260fbc6e79 s390/syscalls: Add spectre boundary for syscall dispatch table adb25339b6611 spi: spi-fsl-lpspi: fix teardown order issue (UAF) ffd860907d0cb ASoC: adau1372: Fix clock leak on PLL lock failure 94577b2e936f0 ASoC: adau1372: Fix unchecked clk_prepare_enable() return value 227b7e14ae408 sysctl: fix uninitialized variable in proc_do_large_bitmap 6ec394998c42a hwmon: (adm1177) fix sysfs ABI violation and current unit conversion e23602eb07797 drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib 9c886e63b6965 ACPI: EC: clean up handlers on probe failure in acpi_ec_setup() d997deaa7de36 ASoC: Intel: catpt: Fix the device initialization 9014a30df4365 spi: sn-f-ospi: Fix resource leak in f_ospi_probe() b5f87d8493f54 PM: hibernate: Drain trailing zero pages on userspace restore 8dda015822771 PM: hibernate: Don't ignore return from set_memory_ro() 6a492d10c2f88 drm/i915/gmbus: fix spurious timeout on 512-byte burst reads daf1396e8f42a x86/efi: efi_unmap_boot_services: fix calculation of ranges_to_free size 8212295549e47 scsi: scsi_transport_sas: Fix the maximum channel scanning issue ad5085d7ef1c5 RDMA/irdma: Return EINVAL for invalid arp index error acb060bc2609c RDMA/irdma: Fix deadlock during netdev reset with active connections 45897c22a93ec RDMA/irdma: Remove reset check from irdma_modify_qp_to_err() 2175c64d27e27 RDMA/irdma: Clean up unnecessary dereference of event->cm_node 18386d84d2ad3 RDMA/irdma: Remove a NOP wait_event() in irdma_modify_qp_roce() d783393d2122b RDMA/irdma: Update ibqp state to error if QP is already in error state af310407f79d5 RDMA/irdma: Initialize free_qp completion before using it e82f2775b50cc RDMA/rw: Fall back to direct SGE on MR pool exhaustion 96c60fb6896e6 regmap: Synchronize cache for the page selector 9524634194516 net: macb: use the current queue number for stats fcec5ce2d73a4 netfilter: ctnetlink: use netlink policy range checks fe463e76c9b4b netfilter: nf_conntrack_sip: fix use of uninitialized rtp_addr in process_sdp 168145c874446 netfilter: nf_conntrack_expect: skip expectations in other netns via proc c6a503a9f4deb netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() a8365d1064ded netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD 2dcf324855c34 tls: Purge async_hold in tls_decrypt_async_wait() 6fba3c3d48c92 Bluetooth: btusb: clamp SCO altsetting table indices 52667c859fe33 Bluetooth: L2CAP: Fix ERTM re-init and zero pdu_len infinite loop 5f84e845648df Bluetooth: btintel: serialize btintel_hw_error() with hci_req_sync_lock 8d83194e8a880 Bluetooth: hci_sync: Remove remaining dependencies of hci_request 0ee469ba7c58c Bluetooth: Remove 3 repeated macro definitions 50c1e5fc7c444 Bluetooth: L2CAP: Fix send LE flow credits in ACL link acfb29f82223e dma-mapping: add missing `inline` for `dma_free_attrs` 47d5f290fab3c net: enetc: fix the output issue of 'ethtool --show-ring' 2297e38114316 udp: Fix wildcard bind conflict check when using hash2 5b5af243e566b tcp: optimize inet_use_bhash2_on_bind() 79a5c9344eaaf tcp: Rearrange tests in inet_csk_bind_conflict(). 34f5fe33e43bc tcp: Use bhash2 for v4-mapped-v6 non-wildcard address. 654386baef228 net: fix fanout UAF in packet_release() via NETDEV_UP race a8ec35bb7b503 ipv6: Don't remove permanent routes with exceptions from tb6_gc_hlist. 9241d441feb40 ipv6: Remove permanent routes from tb6_gc_hlist when all exceptions expire. 6ae421f59bf80 ice: use ice_update_eth_stats() for representor stats 0677d6bf6e853 platform/olpc: olpc-xo175-ec: Fix overflow error message to print inlen b04420f5b9315 rtnetlink: count IFLA_INFO_SLAVE_KIND in if_nlmsg_size 81acbd345d405 net/smc: fix double-free of smc_spd_priv when tee() duplicates splice pipe buffer c1f97152df8df openvswitch: validate MPLS set/set_masked payload length 42f0d3d812096 openvswitch: defer tunnel netdev_put to RCU release 4c3e25a7b711a net: openvswitch: Avoid releasing netdev before teardown completes eb435d150ca74 nfc: nci: fix circular locking dependency in nci_close_device cfd863d4a3f2e ionic: fix persistent MAC address override on PF a4fd36bb000db pinctrl: mediatek: common: Fix probe failure for devices without EINT a04a760c06bb5 Bluetooth: L2CAP: Fix null-ptr-deref on l2cap_sock_ready_cb 28904375d54b4 Bluetooth: hci_ll: Fix firmware leak on error path 45aaca995e4a7 Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold 477ad49760720 Bluetooth: L2CAP: Validate PDU length before reading SDU length in l2cap_ecred_data_rcv() a4bda464c0deb can: statistics: add missing atomic access in hot path d6923498e972b dma: swiotlb: add KMSAN annotations to swiotlb_bounce() d3225e6b9bd51 af_key: validate families in pfkey_send_migrate() 6a3ec6efbc4f9 esp: fix skb leak with espintcp and async crypto e17b0106447ed xfrm: Fix the usage of skb->sk 86f130cf52504 xfrm: call xdo_dev_state_delete during state update 7aac2b997e614 spi: intel-pci: Add support for Nova Lake mobile SPI flash 56bc8de780720 usb: core: new quirk to handle devices with zero configurations 1eed0199dbf41 objtool: Handle Clang RSP musical chairs 006ce15577e76 ALSA: hda/realtek: Add headset jack quirk for Thinkpad X390 f264d4e3a9261 ALSA: hda/realtek: add HP Laptop 14s-dr5xxx mute LED quirk c57276ced3c32 btrfs: set BTRFS_ROOT_ORPHAN_CLEANUP during subvol create 2635d0c715f3f HID: apple: avoid memory leak in apple_report_fixup() d9365789a6fd7 dma-buf: Include ioctl.h in UAPI header 9d43a897a9122 ASoC: fsl_easrc: Fix event generation in fsl_easrc_iec958_put_bits() cb4954fc2520d ASoC: fsl_easrc: Fix event generation in fsl_easrc_iec958_set_reg() 082f15d288732 module: Fix kernel panic when a symbol st_shndx is out of bounds f18c38cb24c9c HID: asus: add xg mobile 2023 external hardware support 4d36b7ad2c18b HID: mcp2221: cancel last I2C command on read error 952e41b0f9238 net: usb: r8152: add TRENDnet TUC-ET2G 7edfe4346b052 HID: magicmouse: avoid memory leak in magicmouse_report_fixup() eac08882569bc HID: magicmouse: fix battery reporting for Apple Magic Trackpad 2 6f12734c4b619 nvme-pci: ensure we're polling a polled queue 50063c576c6ed platform/x86: touchscreen_dmi: Add quirk for y-inverted Goodix touchscreen on SUPI S10 0ab508ace30c7 platform/x86: intel-hid: Enable 5-button array on ThinkPad X1 Fold 16 Gen 1 94cfabcf28209 nvme-fabrics: use kfree_sensitive() for DHCHAP secrets c69b5dd587f6f nvme-pci: cap queue creation to used queues 79dc4ced3bb62 platform/x86: intel-hid: Add Dell 14 Plus 2-in-1 to dmi_vgbs_allow_list f20f17cffbe34 HID: asus: avoid memory leak in asus_report_fixup() 694ea55f1b1c7 bpf: Fix undefined behavior in interpreter sdiv/smod for INT_MIN d47bba0cfdd4c bpf: Release module BTF IDR before module unload 0f46fd10de29e sh: platform_early: remove pdev->driver_override check 0af982240b8f4 hwmon: axi-fan: don't use driver_override as IRQ name e73121faf530e hwmon: (axi-fan-control) Make use of dev_err_probe() 50fe5fbf98290 hwmon: (axi-fan-control) Use device firmware agnostic API bd738f986f6a0 cxl/hdm: Avoid incorrect DVSEC fallback when HDM decoders are enabled 656f35b463995 perf: Make sure to use pmu_ctx->pmu for groups 79cda13757901 perf: Extract a few helpers (From OE-Core rev: f95c69b567abe9a87b15ac38b98b2836cb9a8f0c) Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> Signed-off-by: Yoann Congal <yoann.congal@smile.fr> Signed-off-by: Paul Barker <paul@pbarker.dev>	2026-06-26 16:55:55 +01:00
Bruce Ashfield	73edbddc7f	linux-yocto/6.6: update to v6.6.130 ... Updating linux-yocto/6.6 to the latest korg -stable release that comprises the following commits: c09fbcd31ae6 Linux 6.6.130 1dacf6b3718a xen/privcmd: add boot control for restricted usage in domU 1879319d790f xen/privcmd: restrict usage in unprivileged domU 2cf5eff223fc tools/bootconfig: fix fd leak in load_xbc_file() on fstat failure c1bfc25d62d8 lib/bootconfig: check xbc_init_node() return in override path df1f4a7d9cf6 drm/i915/gt: Check set_default_submission() before deferencing b0158d9d6f4e ksmbd: fix use-after-free in durable v2 replay of active file handles 806f13752652 ksmbd: fix use-after-free of share_conf in compound request 87158a633e9a drm/amd/display: Fix DisplayID not-found handling in parse_edid_displayid_vrr() 6ec8f8ebd023 mtd: rawnand: brcmnand: skip DMA during panic write a80291e577b4 mtd: rawnand: serialize lock/unlock against other NAND operations 69aece634a7e i2c: cp2615: fix serial string NULL-deref at probe 2aeb380c731f i2c: cp2615: replace deprecated strncpy with strscpy 7864c667aed0 netfilter: nft_set_pipapo: split gc into unlink and reclaim phase c51957601d32 x86/platform/uv: Handle deconfigured sockets 197fc4dda1c0 i2c: pxa: defer reset on Armada 3700 when recovery is used c40387488be0 i2c: fsi: Fix a potential leak in fsi_i2c_probe() 994b301a217f USB: serial: f81232: fix incomplete serial port generation 2124d82fd25e Bluetooth: L2CAP: Fix accepting multiple L2CAP_ECRED_CONN_REQ eec4d5758f33 drm: Fix use-after-free on framebuffers and property blobs when calling drm_dev_unplug 5b0578a9a9ec hwmon: (pmbus/isl68137) Fix unchecked return value and use sysfs_emit() 5fcef2e370f3 hwmon: (pmbus/mp2975) Add error check for pmbus_read_word_data() return value b61529c357f1 icmp: fix NULL pointer dereference in icmp_tag_validation() 1a0c3c7b5b14 net: dsa: bcm_sf2: fix missing clk_disable_unprepare() in error paths ff0c54f088f7 net: mvpp2: guard flow control update with global_tx_fc in buffer switching 224f4678812e nfnetlink_osf: validate individual option lengths in fingerprints adee3436ccd2 netfilter: nf_tables: release flowtable after rcu grace period on error d016c216bc75 netfilter: bpf: defer hook memory release until rcu readers are done 0a3f8cd3f370 net: bonding: fix NULL deref in bond_debug_rlb_hash_show a05a2149386f udp_tunnel: fix NULL deref caused by udp_sock_create6 when CONFIG_IPV6=n 3dffc083292e net/mlx5e: Fix race condition during IPSec ESN update 99aaee927800 net/mlx5e: Prevent concurrent access to IPSec ASO context 7712b5ff6967 net/mlx5: qos: Restrict RTNL area to avoid a lock cycle 5da8009be419 net: macb: fix uninitialized rx_fs_lock edf4c2aaee08 ACPI: processor: Fix previous acpi_processor_errata_piix4() fix a6dc74209462 wifi: wlcore: Return -ENOMEM instead of -EAGAIN if there is not enough headroom 0a4da176ae4b wifi: mac80211: fix NULL deref in mesh_matches_local() 58f74dc73d1b iavf: fix VLAN filter lost on add/delete race fb602ed4b19e igc: fix missing update of skb->tail in igc_xmit_frame() 4de6a43e8ecf net: usb: aqc111: Do not perform PM inside suspend callback a73d95b57bf9 clsact: Fix use-after-free in init/destroy rollback asymmetry 125f932a76a9 net: usb: cdc_ncm: add ndpoffset to NDP32 nframes bounds check f1c7701d3ac9 net: usb: cdc_ncm: add ndpoffset to NDP16 nframes bounds check 21c89a0a8de7 net/sched: teql: Fix double-free in teql_master_xmit f00fc26c8a06 net/smc: fix NULL dereference and UAF in smc_tcp_syn_recv_sock() 39f2d86f2ddd PM: runtime: Fix a race condition related to device removal fd8278ffba49 sched: idle: Consolidate the handling of two special cases 249e90557158 net: mana: fix use-after-free in mana_hwc_destroy_channel() by reordering teardown fcdf56bbdade net: bcmgenet: increase WoL poll timeout f5e4f4e4cdb7 netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() 262beb78e95e netfilter: xt_time: use unsigned int for monthday bit shift 63b8097cea19 netfilter: xt_CT: drop pending enqueued packets on template removal e68a8db3a054 netfilter: nft_ct: drop pending enqueued packets on removal b477ef7fa612 netfilter: nft_ct: add seqadj extension for natted connections 52235bf88159 netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case 528b4509c9df netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() f04cc86d5990 netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() 9e5021a90653 netfilter: ctnetlink: remove refcounting in expectation dumpers a75d3be96d70 mpls: add missing unregister_netdevice_notifier to mpls_init 0c9fb70a206a net/rose: fix NULL pointer dereference in rose_transmit_link on reconnect e160b869b0a8 Bluetooth: qca: fix ROM version reading on WCN3998 chips 11a87dd5df42 Bluetooth: L2CAP: Fix use-after-free in l2cap_unregister_user 45ebe5b90020 Bluetooth: HIDP: Fix possible UAF f35209cf4826 Bluetooth: hci_sync: Fix hci_le_create_conn_sync 2d3deaa162a7 Bluetooth: ISO: Fix defer tests being unstable e7899dc538f3 Bluetooth: SMP: make SM/PER/KDU/BI-04-C happy c02860835673 Bluetooth: LE L2CAP: Disconnect if sum of payload sizes exceed SDU b5c20c899246 Bluetooth: LE L2CAP: Disconnect if received packet's SDU exceeds IMTU d30acb4ecbe2 firmware: arm_scpi: Fix device_node reference leak in probe path 37e776e2e0a5 wifi: cfg80211: cancel pmsr_free_wk in cfg80211_pmsr_wdev_down 256f7d4c1123 wifi: mac80211: Fix static_branch_dec() underflow for aql_disable. d21923a8059f soc: fsl: qbman: fix race condition in qman_destroy_fq d0a466caf4ac cache: ax45mp: Fix device node reference leak in ax45mp_cache_init() ccb2262681d6 btrfs: tree-checker: fix misleading root drop_level error message 56e72c8b02d9 btrfs: log new dentries when logging parent dir of a conflicting inode df656e45774f drm/amd/display: Wrap dcn32_override_min_req_memclk() in DC_FP_{START, END} 9085ad02eff0 drm/amdgpu: apply state adjust rules to some additional HAINAN vairants 41b0edc1be8d drm/radeon: apply state adjust rules to some additional HAINAN vairants 2a28ad57d12e drm/amdgpu/mmhub3.0: add bounds checking for cid 46411902afd1 drm/amdgpu/mmhub3.0.2: add bounds checking for cid 0fabdcd12c29 drm/amdgpu/mmhub3.0.1: add bounds checking for cid 6b257be5d3ad drm/amdgpu/mmhub2.3: add bounds checking for cid aa3c80150b0e drm/amdgpu/mmhub2.0: add bounds checking for cid 9f41b9f82ecf drm/amdgpu/gmc9.0: add bounds checking for cid 447f2c6ef11c serial: uartlite: fix PM runtime usage count underflow on probe 59e13f1c9a8c serial: 8250: Add late synchronize_irq() to shutdown to handle DW UART BUSY d2719a0a9c34 serial: 8250: Fix TX deadlock when using DMA 092cb022a454 serial: 8250_pci: add support for the AX99100 85654456e394 iommu/vt-d: Fix intel iommu iotlb sync hardlockup and retry d8570211a2b1 mtd: Avoid boot crash in RedBoot partition table parser 2a79fd98b961 mtd: rawnand: cadence: Fix error check for dma_alloc_coherent() in cadence_nand_init() d55ff6f213be mtd: rawnand: pl353: make sure optimal timings are applied f13100b1f5f1 spi: fix statistics allocation 6bbd385b30c7 spi: fix use-after-free on controller registration failure 9443202d9138 pmdomain: bcm: bcm2835-power: Increase ASB control timeout 4ada013fd7da mmc: sdhci: fix timing selection for 1-bit bus width 451816d430b3 mmc: sdhci-pci-gli: fix GL9750 DMA write corruption 0c5026178856 net: macb: Reinitialize tx/rx queue pointer registers and rx ring during resume fbbd4c07a537 net: macb: Introduce gem_init_rx_ring() 2fd0bdd49e57 net: macb: queue tie-off or disable during WOL suspend 8afb437ea1f7 nfsd: fix heap overflow in NFSv4.0 LOCK replay cache 1ada20331f2d batman-adv: avoid OGM aggregation when skb tailroom is insufficient fc77e0a5600e iio: light: bh1780: fix PM runtime leak on error path 64ad49597d14 btrfs: fix transaction abort on file creation due to name hash collision b19c0465e4da btrfs: fix transaction abort on set received ioctl due to item overflow 6bce705b699c btrfs: fix transaction abort when snapshotting received subvolumes 3f04f871a1d4 kprobes: Remove unneeded warnings from __arm_kprobe_ftrace() 61cfa81f19b9 kprobes: Remove unneeded goto 6ebef4a220a1 ksmbd: unset conn->binding on failed binding request 9229709ec8bf smb: client: fix krb5 mount with username option 807bd1258453 Bluetooth: L2CAP: Validate L2CAP_INFO_RSP payload length before access dd3b221e2107 Bluetooth: L2CAP: Fix type confusion in l2cap_ecred_reconf_rsp() 935c716be860 parisc: Flush correct cache in cacheflush() syscall 5653af416a48 net: macb: fix use-after-free access to PTP clock 70662874f646 NFC: nxp-nci: allow GPIOs to sleep 67f2796354bf LoongArch: Give more information if kmem access failed e48bf8f1d2b1 nvdimm/bus: Fix potential use after free in asynchronous initialization 41f6ba6c98a6 sunrpc: fix cache_request leak in cache_release d1a19217995d NFSD: Hold net reference for the lifetime of /proc/fs/nfs/exports fd 439a6728ec46 io_uring/kbuf: check if target buffer list is still legacy on recycle d77401968c78 mm/mempolicy: fix wrong mmap_read_unlock() in migrate_to_node() 8e7715193e5a s390/zcrypt: Enable AUTOSEL_DOM for CCA serialnr sysfs attribute 2c5c0f4dc8cc s390/stackleak: Fix __stackleak_poison() inline assembly constraint 3e0619a2a61b s390/xor: Fix xor_xc_2() inline assembly constraints 1b3ff4d88b50 mptcp: pm: in-kernel: always set ID as avail when rm endp 268fd5502281 net: stmmac: remove support for lpi_intr_o fbab8c08e1a6 binfmt_misc: restore write access before closing files opened by open_exec() 8c1befea57db sched/fair: Fix pelt clock sync when entering idle d1365d2abfaf f2fs: zone: fix to avoid inconsistence in between SIT and SSA 3da45ec1e485 rcu/nocb: Fix possible invalid rdp's->nocb_cb_kthread pointer access 8af210df4f71 platform/x86/amd/pmc: Add support for Van Gogh SoC 9c05cd8f4232 x86/uprobes: Fix XOL allocation failure for 32-bit tasks 1b24d3e8792b drm/exynos: vidi: use ctx->lock to protect struct vidi_context member variables related to memory alloc/free 2e147aa3169b drm/exynos: vidi: fix to avoid directly dereferencing user pointer 21ca24ba51a2 drm/exynos: vidi: use priv->vidi_dev for ctx lookup in vidi_connection_ioctl() e1903358b215 drm/amdgpu: Add basic validation for RAS header ce63943f9bce l2tp: do not use sock_hold() in pppol2tp_session_get_sock() da249eb3206c drm/amd/pm: Use pm_display_cfg in legacy DPM (v2) b3367ee3e557 drm/amd/display: Add pixel_clock to amd_pp_display_configuration ec2b34acb189 net: dsa: properly keep track of conduit reference 0643aa246819 bpf: Forget ranges when refining tnum after JSET 2cbef9ea5a0a net: fix segmentation of forwarding fraglist GRO e19201b0c67d net: gso: fix tcp fraglist segmentation after pull from frag_list 1f2b859225eb net: add support for segmenting TCP fraglist GSO packets 9b03768037d9 tracing: Add recursion protection in kernel stack trace recording eba0c75670c0 dmaengine: mmp_pdma: Fix race condition in mmp_pdma_residue() 33743ec6679a riscv: Sanitize syscall table indexing under speculation 4357e02cafab btrfs: do not strictly require dirty metadata threshold for metadata writepages bfc717be833f iomap: allocate s_dio_done_wq for async reads as well a426f29ac3fa rxrpc: Fix data-race warning and potential load/store tearing fc3454a20bef x86/sev: Check for MWAITX and MONITORX opcodes in the #VC handler 03c29d6d3719 x86/sev: Harden #VC instruction emulation somewhat f69fec628756 ipv6: use RCU in ip6_xmit() 897d9006e75f dm-verity: disable recursive forward error correction 0464bf75590d rxrpc: Fix recvmsg() unconditional requeue 1b0edd6022a3 ext4: always allocate blocks only from groups inode can use 90336fc3d6f5 eth: bnxt: always recalculate features after XDP clearing, fix null-deref 1e3769aa0946 usb: typec: ucsi: Move unregister out of atomic section c57387d447a2 pNFS: Fix a deadlock when returning a delegation during open() a4810f8beb01 NFS: Fix a deadlock involving nfs_release_folio() 1562138b9cab nfs: pass explicit offset/count to trace events 815db2363e51 dst: fix races in rt6_uncached_list_del() and rt_del_uncached_list() 64d8abd8c530 btrfs: fix NULL dereference on root when tracing inode eviction 54322d95309d arm64: mm: Don't remap pgtables for allocate vs populate 6a36c8e88af7 arm64: mm: Batch dsb and isb when populating pgtables 37413d064396 arm64: mm: Don't remap pgtables per-cont(pte|pmd) block 7d115eb231a6 net: stmmac: dwmac-loongson: Set clk_csr_i to 100-150MHz 9dcd86cb22e1 btrfs: always fallback to buffered write if the inode requires checksum dbc4e10619ed ext4: fix dirtyclusters double decrement on fs shutdown db489778e6f2 f2fs: fix to avoid migrating empty section 5d305a95130a net/tcp-md5: Fix MAC comparison to be constant-time 307afccb751f ksmbd: Compare MACs in constant time 946054b773ed smb: client: Compare MACs in constant time 26a29582980b xfs: ensure dquot item is deleted from AIL only after log shutdown 50c0e03072fc xfs: fix integer overflow in bmap intent sort comparator 2bfc83cee05f crypto: atmel-sha204a - Fix OOM ->tfm_count leak 0629a1a187e4 cifs: open files should not hold ref on superblock 0a47c3889fcd net: macb: Shuffle the tx ring before enabling tx 0bc70491e466 drm/bridge: ti-sn65dsi83: halve horizontal syncs for dual LVDS output 920467466d2d drm/msm: Fix dma_free_attrs() buffer size fec5c70b82af ksmbd: Don't log keys in SMB3 signing and encryption key generation d1cdf0c63947 iomap: reject delalloc mappings during writeback 0ba544dacec2 mm/kfence: fix KASAN hardware tag faults during late enablement 816fa1dfae45 KVM: SVM: Set/clear CR8 write interception when AVIC is (de)activated 5d1e72015b90 KVM: SVM: Add a helper to look up the max physical ID for AVIC 32ca7117e153 KVM: SVM: Limit AVIC physical max index based on configured max_vcpu_ids d146f2775804 usb: gadget: f_tcm: Fix NULL pointer dereferences in nexus handling c24c06ed1849 can: gs_usb: gs_can_open(): always configure bitrates before starting device dfc314d7c767 net/sched: act_gate: snapshot parameters with RCU on replace 0be8c9627556 kbuild: Leave objtool binary around with 'make clean' 2d53b863b401 selftests: mptcp: join: check RM_ADDR not sent over same subflow 1ec68e2096ef selftests: mptcp: add a check for 'add_addr_accepted' 05799c2f1ca5 mptcp: pm: in-kernel: always mark signal+subflow endp as used a29641dc1267 mptcp: pm: avoid sending RM_ADDR over same subflow 7f3b7dc8c6ca drm/amd/display: Use GFP_ATOMIC in dc_create_stream_for_sink c33523b8fd2d net: phy: register phy led_triggers during probe to avoid AB-BA deadlock 71511dae56a7 gve: fix incorrect buffer cleanup in gve_tx_clean_pending_packets for QPL f9f1660b7ffc x86/sev: Allow IBPB-on-Entry feature for SNP guests c8ddb2d30d03 platform/x86: hp-bioscfg: Support allocations of larger data 3c5c818c78b0 wifi: libertas: fix use-after-free in lbs_free_adapter() cf29329a13df ksmbd: call ksmbd_vfs_kern_path_end_removing() on some error paths ca049ef5c8c7 gve: defer interrupt enabling until NAPI registration 212b9632718c drm/bridge: ti-sn65dsi86: Add support for DisplayPort mode with HPD 3161ae587816 i3c: mipi-i3c-hci: Add missing TID field to no-op command descriptor 0911fd8e400e i3c: mipi-i3c-hci: Restart DMA ring correctly after dequeue abort dcd66a0c0388 i3c: mipi-i3c-hci: Use ETIMEDOUT instead of ETIME for timeout errors 5c485bc32551 iio: imu: inv_icm42600: fix odr switch to the same value 27c324ef1638 iio: gyro: mpu3050-i2c: fix pm_runtime error handling 2a86a396aa00 iio: gyro: mpu3050-core: fix pm_runtime error handling 10ea2df061f3 iio: buffer: Fix wait_queue not being removed dd7b7093bb77 iio: chemical: bme680: Fix measurement wait duration calculation 342e5f67fb99 iio: potentiometer: mcp4131: fix double application of wiper shift dcdf1e92674e iio: chemical: sps30_i2c: fix buffer size in sps30_i2c_read_meas() 5a3952ba82f8 iio: chemical: sps30_serial: fix buffer size in sps30_serial_read_meas() fa87bb35b917 iio: frequency: adf4377: Fix duplicated soft reset mask 8f9fca12f2f3 iio: dac: ds4424: reject -128 RAW value fa6fd9aec721 btrfs: abort transaction on failure to update root in the received subvol ioctl 40f7c69eb00d smb: client: fix iface port assignment in parse_server_interfaces 438e77435aee smb: client: fix in-place encryption corruption in SMB2_write() dcd1f1321034 smb: client: fix atomic open with O_DIRECT & O_SYNC 2ca6bdf449b1 lib/bootconfig: check bounds before writing in __xbc_open_brace() bbdb80f29ee9 lib/bootconfig: fix snprintf truncation check in xbc_node_compose_key_after() f59193807211 x86/apic: Disable x2apic on resume if the kernel expects so 35e3ec8e589b scsi: core: Fix error handling for scsi_alloc_sdev() cc7d44c59ea5 lib/bootconfig: fix off-by-one in xbc_verify_tree() unclosed brace error b373ff56ed2d s390/dasd: Copy detected format information to secondary device 3a67baa8eec4 s390/dasd: Move quiesce state with pprc swap 41e91dff2d39 xfs: fix undersized l_iclog_roundoff values eaaaa3abbb20 cifs: make default value of retrans as zero e9311e199ac6 tracing: Fix trace_buf_size= cmdline parameter with sizes >= 2G aeb7255531ba drm/i915: Fix potential overflow of shmem scatterlist length 624f991cac21 drm/bridge: ti-sn65dsi83: fix CHA_DSI_CLK_RANGE rounding 2550d63cc350 drm/amd: Set num IP blocks to 0 if discovery fails c658c1c85ec2 drm/amdgpu: Fix use-after-free race in VM acquire 3704ac6a0d9a net: dsa: microchip: Fix error path in PTP IRQ setup 81431da77792 net: ethernet: arc: emac: quiesce interrupts before requesting IRQ 599625881978 net: ncsi: fix skb leak in error paths 302fef75512b ksmbd: fix use-after-free by using call_rcu() for oplock_info b720c84087cb smb: server: fix use-after-free in smb2_open() bf4d66d72e4a ksmbd: fix use-after-free in smb_lazy_parent_lease_break_close() d156b1c24f72 pmdomain: bcm: bcm2835-power: Fix broken reset status read 57e35502faa9 parisc: Check kernel mapping earlier at bootup 344fde7a3dc0 parisc: Fix initial page table creation for boot 52db5ef163c9 hwmon: (pmbus/q54sj108a2) fix stack overflow in debugfs read 7003352d4327 arm64: mm: Add PTE_DIRTY back to PAGE_KERNEL* to fix kexec/hibernation fad178ae8949 nouveau/dpcd: return EBUSY for aux xfer if the device is asleep 5699359529c6 parisc: Increase initial mapping to 64 MB with KALLSYMS f3ca45673dab batman-adv: Avoid double-rtnl_lock ELP metric worker 422b4524320c tracing: Fix syscall events activation by ensuring refcount hits zero 9298b0806923 ice: fix retry for AQ command 0x06EE 5138cd978bab net: mana: Ring doorbell at 4 CQ wraparounds 1a6da3dbb998 media: dvb-net: fix OOB access in ULE extension header tables 768f25613a9f staging: rtl8723bs: fix potential out-of-bounds read in rtw_restruct_wmm_ie 740bca8bbdb7 staging: rtl8723bs: properly validate the data in rtw_get_ie_ex() 627cf4d1f0ea ixgbevf: fix link setup issue aac3ac27e6da ice: reintroduce retry mechanism for indirect AQ 1fc8c3a0d249 irqchip/gic-v3-its: Limit number of per-device MSIs to the range the ITS supports 3cfdf8d27b66 device property: Allow secondary lookup in fwnode_get_next_child_node() 54f2f0591216 drm/bridge: ti-sn65dsi86: Enable HPD polling if IRQ is not used 98310fe3a2a7 drm/bridge: samsung-dsim: Fix memory leak in error path f3333543326c Revert "tcpm: allow looking for role_sw device in the main node" 70c78429ef38 scsi: hisi_sas: Fix NULL pointer exception during user_scan() 8be15087d037 scsi: hisi_sas: Use macro instead of magic number 228c626df8d5 scsi: hisi_sas: Add time interval between two H2D FIS following soft reset spec a6a894413b04 scsi: ufs: core: Fix SError in ufshcd_rtc_work() during UFS suspend 069307ae8cb9 i3c: dw-i3c-master: Set SIR_REJECT in DAT on device attach and reattach 7d86de3847c5 time/jiffies: Mark jiffies_64_to_clock_t() notrace 657dc653b06a ceph: fix memory leaks in ceph_mdsc_build_path() b3f5513141ec ceph: fix i_nlink underrun during async unlink 59c7bf668c20 libceph: admit message frames only in CEPH_CON_S_OPEN state 5f2806684b05 libceph: Use u32 for non-negative values in ceph_monmap_decode() 50156622eb08 libceph: prevent potential out-of-bounds reads in process_message_header() 3e2e36e9b9f3 libceph: reject preamble if control segment is empty 8bb87547e92d libceph: Fix potential out-of-bounds access in ceph_handle_auth_reply() 8b6767e4141b kprobes: avoid crash when rmmod/insmod after ftrace killed a360d3815aae tipc: fix divide-by-zero in tipc_sk_filter_connect() a8e9cab16771 ASoC: qcom: qdsp6: Fix q6apm remove ordering during ADSP stop and start 270277c2ab63 mmc: core: Avoid bitfield RMW for claim/retune flags d8f20b282418 mm/kfence: disable KFENCE upon KASAN HW tags enablement f36ab071abd0 mmc: mmci: Fix device_node reference leak in of_get_dml_pipe_index() b88ce81232bb mm/tracing: rss_stat: ensure curr is false from kthread context 155f471e38aa usb: image: mdc800: kill download URB on timeout e7b3d154eb08 usb: mdc800: handle signal and read racing 9c6159d5b72d usb: renesas_usbhs: fix use-after-free in ISR during device removal 4ee3062bf2c9 usb: class: cdc-wdm: fix reordering issue in read code path 659c0c7d50a4 USB: core: Limit the length of unkillable synchronous timeouts 39bd4097292f USB: usbtmc: Use usb_bulk_msg_killable() with user-specified timeouts fc26e98b6cb8 USB: usbcore: Introduce usb_bulk_msg_killable() 2872b67951fe usb: roles: get usb role switch from parent only for usb-b-connector 52950203880b usb: cdc-acm: Restore CAP_BRK functionnality to CH343 24aa4caf7f95 usb: core: don't power off roothub PHYs if phy_set_mode() fails 19ef3da0a82d usb: misc: uss720: properly clean up reference in uss720_probe() f1c8b8183abc usb: dwc3: pci: add support for the Intel Nova Lake -H 939e3d17b843 usb: yurex: fix race in probe b2dd9abf8c06 usb: xhci: Prevent interrupt storm on host controller error (HCE) 2e2baa8fb5aa usb: xhci: Fix memory leak in xhci_disable_slot() 2f2418efd495 USB: ezcap401 needs USB_QUIRK_NO_BOS to function on 10gbs usb speed 9105f4d74762 usb/core/quirks: Add Huawei ME906S-device to wakeup quirk 551f82df759c USB: add QUIRK_NO_BOS for video capture several devices ad4394f269dc KVM: SVM: Initialize AVIC VMCB fields if AVIC is enabled with in-kernel APIC 22bd6fea06bc ASoC: amd: yc: Add DMI quirk for ASUS EXPERTBOOK PM1503CDA af834b026bfc net: usb: lan78xx: skip LTM configuration for LAN7850 2aaf0a7be0b8 net: usb: lan78xx: fix TX byte statistics for small packets e94d81319259 net: usb: lan78xx: fix silent drop of packets with checksum errors c5c5a6c53cf3 ALSA: usb-audio: Check endpoint numbers at parsing Scarlett2 mixer interfaces 629cf09464cf ALSA: pcm: fix use-after-free on linked stream runtime in snd_pcm_drain() 3dfd1328c052 cgroup: fix race between task migration and iteration 343d4b4a21a5 Revert "arm64: dts: qcom: sdm845-oneplus: Mark l14a regulator as boot-on" ce0caaed5940 usb: gadget: f_mass_storage: Fix potential integer overflow in check_command_size_in_blocks() 3e2f1628faa3 octeontx2-af: devlink: fix NIX RAS reporter to use RAS interrupt status e4a4ca0b69c5 octeontx2-af: devlink health: use retained error fmsg API fa3183e7c748 octeontx2-af: devlink: fix NIX RAS reporter recovery condition cf6099ef493b net: bonding: Fix nd_tbl NULL dereference when IPv6 is disabled 764039ff6515 ASoC: detect empty DMI strings 35c7624d30cb ASoC: amd: acp3x-rt5682-max9836: Add missing error check for clock acquisition e15b56da10b5 ACPI: OSL: fix __iomem type on return from acpi_os_map_generic_address() 0a1fc25deaba e1000/e1000e: Fix leak in DMA error cleanup e611b36efca1 i40e: fix src IP mask checks and memcpy argument names in cloud filter 628773eba024 nvme-pci: Fix race bug in nvme_poll_irqdisable() 83e6edd63583 nvme-pci: Fix slab-out-of-bounds in nvme_dbbuf_set f691272c3e8c sched: idle: Make skipping governor callbacks more consistent ac8f2dfcecbd regulator: pca9450: Correct interrupt type 28986d1c093f regulator: pca9450: Make IRQ optional 540803559993 netfilter: xt_IDLETIMER: reject rev0 reuse of ALARM timer labels 4a1f6ee69267 netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() 47b1c5d1b094 netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path 9b94f0e42ed2 netfilter: x_tables: guard option walkers against 1-byte tail reads 0a55d62cdb62 netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() 61243ff7e757 amd-xgbe: prevent CRC errors during RX adaptation with AN disabled df65ae0f1330 amd-xgbe: fix link status handling in xgbe_rx_adaptation 86f5334fcb48 mctp: route: hold key->lock in mctp_flow_prepare_output() a3a1ea5d1f8d can: hi311x: hi3110_open(): add check for hi3110_power_enable() return value d7900a43b0a3 mctp: i2c: fix skb memory leak in receive path 8460187b4852 serial: caif: hold tty->link reference in ldisc_open and ser_release bba6c0806a8c net: sfp: improve Huawei MA5671a fixup 17f69ee2ed08 net: sfp: add quirk for Potron SFP+ XGSPON ONU Stick 2369830617a5 net: sfp: improve Nokia GPON sfp fixup 783025a3babb net: sfp: re-implement ignoring the hardware TX_FAULT signal d9744892b8ed ASoC: simple-card-utils: fix graph_util_is_ports0() for DT overlays e03f8d141911 ASoC: simple-card-utils: use __free(device_node) for device node 317a9298c54b ASoC: soc-core: flush delayed work before removing DAIs and widgets 8b76136bd446 ASoC: soc-core: drop delayed_work_pending() check before flush 59b06d8b9bdb net/sched: teql: fix NULL pointer dereference in iptunnel_xmit on TEQL slave xmit 383b37c04a48 net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery 957d2a58f7f8 net/mlx5: Fix deadlock between devlink lock and esw->wq 87db2efa8327 net/mlx5: Query to see if host PF is disabled 0e4dd5078b0c net/mlx5: IFC updates for disabled host PF 11762a893ffc bonding: handle BOND_LINK_FAIL, BOND_LINK_BACK as valid link states 43723dff1a59 drm/msm/dsi: fix pclk rate calculation for bonded dsi 7c370f2cb7fc drm/msm/dsi: Document DSC related pclk_rate and hdisplay calculations c58dcaac49b6 net: dsa: realtek: rtl8365mb: remove ifOutDiscards from rx_packets 74c39a47856b xprtrdma: Decrement re_receiving on the early exit paths 2f91ef68d0ed smb/server: Fix another refcount leak in smb2_open() fd4ff8c64639 powerpc: 83xx: km83xx: Fix keymile vendor prefix a971ce3a39e5 remoteproc: mediatek: Unprepare SCP clock during system suspend f3394234b849 remoteproc: sysmon: Correct subsys_name_len type in QMI request 80bc3c57dd32 powerpc/uaccess: Fix inline assembly for clang build on PPC32 9e5df7e19c44 ALSA: usb-audio: Check max frame size for implicit feedback mode, too 8d66e46ff0f4 ALSA: usb-audio: Avoid implicit feedback mode on DIYINHK USB Audio 2.0 32af15506450 scsi: ufs: core: Fix shift out of bounds when MAXQ=32 0614f5618c24 scsi: ufs: core: Fix possible NULL pointer dereference in ufshcd_add_command_trace() 7b640a732689 ASoC: cs42l43: Report insert for exotic peripherals f43a420065f0 ASoC: amd: yc: Add ASUS EXPERTBOOK BM1503CDA to quirk table 80e35a0a8ab5 scsi: ses: Fix devices attaching to different hosts 486519660bd9 ACPI: OSI: Add DMI quirk for Acer Aspire One D255 b006c61a5d97 wifi: mac80211: set default WMM parameters on all links d7963d6997fe unshare: fix unshare_fs() handling 7da755e0d02e scsi: mpi3mr: Add NULL checks when resetting request and reply queues 5bb47c03024e ACPI: PM: Save NVS memory on Lenovo G70-35 e7919a293f9b scsi: storvsc: Fix scheduling while atomic on PREEMPT_RT ae10787d955f apparmor: fix race between freeing data and fs accessing it 6ef1f2926c41 apparmor: fix race on rawdata dereference f90e3ecd9e1e apparmor: fix differential encoding verification 17debf558602 apparmor: fix unprivileged local user can do privileged policy management 55ef2af7490a apparmor: Fix double free of ns_name in aa_replace_profiles() 7c7cf05e0606 apparmor: fix missing bounds check on DEFAULT table in verify_dfa() 5a184f7cbdea apparmor: fix side-effect bug in match_char() macro usage 3f8699b3ee0c apparmor: fix: limit the number of levels of policy namespaces 33959a491e9f apparmor: replace recursive profile removal with iterative approach 663ce34786e7 apparmor: fix memory leak in verify_header 07cf6320f40e apparmor: validate DFA start states are in bounds in unpack_pdb 7f4d6a5d3429 net: tcp: accept old ack during closing 5a110ddcc99b net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks 59c15b9cc453 tracing: Add NULL pointer check to trigger_data_free() c7919c1c1d80 selftest/arm64: Fix sve2p1_sigill() to hwcap test a0fb59f527d0 xdp: produce a warning when calculated tailroom is negative d5f7daed130c i40e: use xdp.frame_sz as XDP RxQ info frag_size 7b9c0ee7fed9 i40e: fix registering XDP RxQ info 183f940bdf90 xsk: introduce helper to determine rxq->frag_size 8701504563fa xdp: use modulo operation to calculate XDP frag tailroom 5b1449301ca0 net/sched: act_ife: Fix metalist update behavior b299121e7453 net: ipv6: fix panic when IPv4 route references loopback IPv6 nexthop 5f93e6b4d12b net: vxlan: fix nd_tbl NULL dereference when IPv6 is disabled a12cdaa3375f net: bridge: fix nd_tbl NULL dereference when IPv6 is disabled 29629dd7d373 net: ethernet: mtk_eth_soc: Reset prog ptr to old_prog in case of error in mtk_xdp_setup() 3cdb52d6eba0 net: stmmac: Fix error handling in VLAN add and delete paths 722a28b635ec nfc: rawsock: cancel tx_work before socket teardown edc188322caa nfc: nci: clear NCI_DATA_EXCHANGE before calling completion callback dcbcccfc5195 nfc: nci: free skb on nci_transceive early error paths f7d8b5d649dd net: nfc: nci: Fix zero-length proprietary notifications dbd58b0730aa net: sched: avoid qdisc_reset_all_tx_gt() vs dequeue race for lockless qdiscs e42ff5abbd14 nvme: fix memory allocation in nvme_pr_read_keys() be3b61ebcafe nvme: reject invalid pr_read_keys() num_keys values 5d53fe502ef4 drm/sched: Fix kernel-doc warning for drm_sched_job_done() 0c3dce09e8ef amd-xgbe: fix sleep while atomic on suspend/resume 581800298313 ipv6: fix NULL pointer deref in ip6_rt_get_dev_rcu() db93ff008d2e smb/client: fix buffer size for smb311_posix_qinfo in SMB311_posix_query_info() 99acd1ea3499 smb/client: fix buffer size for smb311_posix_qinfo in smb2_compound_op() 9b02c5c4147f bpf: Fix a UAF issue in bpf_trampoline_link_cgroup_shim 4bb55e430d82 bpf: export bpf_link_inc_not_zero. 39959a7d3efe xen/acpi-processor: fix _CST detection using undersized evaluation buffer 8babb2714033 net/rds: Fix circular locking dependency in rds_tcp_tune 11fc15378e87 indirect_call_wrapper: do not reevaluate function pointer 7ae7b093b7db wifi: mt76: Fix possible oob access in mt76_connac2_mac_write_txwi_80211() a6605f619131 wifi: mt76: mt7996: Fix possible oob access in mt7996_mac_write_txwi_80211() aca4c9e4901b wifi: wlcore: Fix a locking bug 78bb63bbabb3 wifi: cw1200: Fix locking in error paths 3bf4ee25f051 octeon_ep: avoid compiler and IQ/OQ reordering 4818b80d20de octeon_ep: Relocate counter updates before NAPI 5c262bd0e393 bpf/bonding: reject vlan+srcmac xmit_hash_policy change when XDP is loaded f8db044a0a47 net: dsa: realtek: rtl8365mb: fix rtl8365mb_phy_ocp_write return value 14cecde3eb07 kunit: tool: copy caller args in run_kernel to prevent mutation eb5632fae6a3 rust: kunit: fix warning when !CONFIG_PRINTK b73832292cd9 can: mcp251x: fix deadlock in error path of mcp251x_open 70e951afad4c can: bcm: fix locking for bcm_op runtime updates b4d1e6d27f93 amd-xgbe: fix MAC_TCR_SS register width for 2.5G and 10M speeds 622062f24644 atm: lec: fix null-ptr-deref in lec_arp_clear_vccs c7becfe3e604 dpaa2-switch: Fix interrupt storm after receiving bad if_id in IRQ handler 420bc92cc966 dpaa2-switch: do not clear any interrupts automatically fb64be8e20dc xsk: Fix zero-copy AF_XDP fragment drop 5172adf9efb8 xsk: Fix fragment node deletion to prevent buffer leak eb66c67b0847 xsk: s/free_list_node/list_node/ 560c974b7ccd xsk: Get rid of xdp_buff_xsk::xskb_list_node 4e58b99c3c33 net: ethernet: ti: am65-cpsw-nuss/cpsw-ale: Fix multicast entry handling in ALE table 391396b5052d drm/solomon: Fix page start when updating rectangle in page addressing mode 352d940bcdbd drm/ssd130x: Replace .page_height field in device info with a constant 3327bb9d474d drm/ssd130x: Store the HW buffer in the driver-private CRTC state be3079b7a328 drm/ssd130x: Use bool for ssd130x_deviceinfo flags 9328cc4e511c e1000e: clear DPG_EN after reset to avoid autonomous power-gating 337ecf555a4b hwmon: (it87) Check the it87_lock() return value 95b14ecc5688 pinctrl: cirrus: cs42l43: Fix double-put in cs42l43_pin_probe() cc06e3f73390 platform/x86: thinkpad_acpi: Fix errors reading battery thresholds 896449ad9053 pinctrl: equilibrium: fix warning trace on load 27fad3a507d6 pinctrl: equilibrium: rename irq_chip function callbacks 70cde1f24ffb hwmon: (aht10) Fix initialization commands for AHT20 166678027ad4 hwmon: (aht10) Add support for dht20 cc7f6f0a2666 ARM: clean up the memset64() C wrapper ec312cb9bd97 selftests: mptcp: join: check removing signal+subflow endp 047de213219d selftests: mptcp: more stable simult_flows tests 7c01b680beaf scsi: core: Fix refcount leak for tagset_refcnt 3990f352bb0a smb: client: Don't log plaintext credentials in cifs_set_cifscreds f65c92e81cb4 smb: client: fix broken multichannel with krb5+signing 874c47503e0f smb: client: fix cifs_pick_channel when channels are equally loaded 6f1d1614f841 drbd: fix null-pointer dereference on local read error e91d8d6565b7 drbd: fix "LOGIC BUG" in drbd_al_begin_io_nonblock() 6b847d65f5b0 Squashfs: check metadata block offset is within range e8ef82cb6443 scsi: target: Fix recursive locking in __configfs_open_file() 7dbffffd5761 net/sched: ets: fix divide by zero in the offload path 1b1fac4c7a3a RDMA/irdma: Fix kernel stack leak in irdma_create_user_ah() d0148965dbca IB/mthca: Add missed mthca_unmap_user_db() for mthca_create_srq() 22a9adea7e26 wifi: mac80211: fix NULL pointer dereference in mesh_rx_csa_frame() 650981e718e6 wifi: mac80211: bounds-check link_id in ieee80211_ml_reconfiguration fa18639deab4 wifi: cfg80211: cancel rfkill_block work in wiphy_unregister() 129c8bb320a7 wifi: radiotap: reject radiotap with unknown bits a0c6ae2ea845 ALSA: usb-audio: Use correct version for UAC3 header validation cf48c2d1db3a platform/x86: dell-wmi: Add audio/mic mute key codes 411ba3cd837f platform/x86: dell-wmi-sysman: Don't hex dump plaintext password data 6a25e2527928 x86/efi: defer freeing of boot services memory 6e330889e6c8 HID: Add HID_CLAIMED_INPUT guards in raw_event callbacks missing them 888f164453f2 can: usb: f81604: handle bulk write errors properly 9b740ff5bc64 can: usb: f81604: handle short interrupt urb messages properly f6e90c113c92 can: usb: etas_es58x: correctly anchor the urb in the read bulk callback 13b646eec3ba can: ucan: Fix infinite loop from zero-length messages 54ee74307165 can: usb: f81604: correctly anchor the urb in the read bulk callback 1818974e1b5e can: ems_usb: ems_usb_read_bulk_callback(): check the proper length of a message 7f8505c7ce3f net: usb: pegasus: validate USB endpoints 12c0243de0ae net: usb: kalmia: validate USB endpoints 72f90f481c6a net: usb: kaweth: validate USB endpoints d1f6d20b3c26 nfc: pn533: properly drop the usb interface reference on disconnect af050ab44fa1 media: dvb-core: fix wrong reinitialization of ringbuffer on reopen 5f8463e43720 eventpoll: Fix integer overflow in ep_loop_check_proc() 1b3ae721257e drm/amdgpu: keep vga memory on MacBooks with switchable graphics aa7f9ef72eae drm/amd: Drop special case for yellow carp without discovery 4b4eee6d0c00 net: arcnet: com20020-pci: fix support for 2.5Mbit cards efc159492b5c ALSA: hda/conexant: Fix headphone jack handling on Acer Swift SF314 f3cb23e1fcf3 hwmon: (max16065) Use READ/WRITE_ONCE to avoid compiler optimization induced race 020bfaac6cb4 ALSA: hda/conexant: Add quirk for HP ZBook Studio G4 c676ab65519c drm/amd: Fix hang on amdgpu unload by using pci_dev_is_disconnected() d637f6ec149f usb: cdns3: fix role switching during resume 3de5fd27af5b usb: cdns3: call cdns_power_is_lost() only once in cdns_resume() 3097fb95e244 usb: cdns3: remove redundant if branch 7b900a94d716 clk: tegra: tegra124-emc: fix device leak on set_rate() 8acf534d5a58 arm64: dts: rockchip: Fix rk356x PCIe range mappings 3469112edc5c mfd: omap-usb-host: Fix OF populate on driver rebind 1d4ea57730bf mfd: omap-usb-host: Convert to platform remove callback returning void 59b76ae68764 mfd: qcom-pm8xxx: Fix OF populate on driver rebind a97ff3b70ff5 mfd: qcom-pm8xxx: Convert to platform remove callback returning void 57e83bfbe1e4 ext4: fix e4b bitmap inconsistency reports e33256b2f927 ext4: convert bd_buddy_page to bd_buddy_folio ccab2af6c19f ext4: convert bd_bitmap_page to bd_bitmap_folio ceee57fd7207 ext4: delete redundant calculations in ext4_mb_get_buddy_page_lock() 31c4c67dec33 mailbox: Prevent out-of-bounds access in fw_mbox_index_xlate() c42ffd816c0f mailbox: Allow controller specific mapping using fwnode cfdb216691ec mailbox: Use guard/scoped_guard for con_mutex bef5ecf09d70 mailbox: Use dev_err when there is error 5e99cbdfcd15 mailbox: remove unused header files 235359afbe0a mailbox: sort headers alphabetically 97b60acdca6f mailbox: don't protect of_parse_phandle_with_args with con_mutex 49ada773c180 mailbox: Use of_property_match_string() instead of open-coding dc7c9b9d03a5 ext4: drop extent cache when splitting extent fails f0931a5c1700 ext4: drop extent cache after doing PARTIAL_VALID1 zeroout 67cdb7bd7442 ext4: don't set EXT4_GET_BLOCKS_CONVERT when splitting before submitting I/O 11406eb96a19 ext4: correct the comments place for EXT4_EXT_MAY_ZEROOUT ed0096fc86b2 ext4: get rid of ppath in ext4_ext_handle_unwritten_extents() d7b04ea31c6e ext4: get rid of ppath in ext4_ext_convert_to_initialized() c24ce099bea9 ext4: get rid of ppath in ext4_convert_unwritten_extents_endio() 147a6a2725b1 ext4: get rid of ppath in ext4_split_convert_extents() cda8a34348d7 ext4: get rid of ppath in ext4_split_extent() 58ddae5d77b1 ext4: don't zero the entire extent if EXT4_EXT_DATA_PARTIAL_VALID1 e766534911b3 ext4: subdivide EXT4_EXT_DATA_VALID1 ffb68fc57207 ext4: get rid of ppath in ext4_split_extent_at() fb138df7d886 ext4: get rid of ppath in ext4_ext_insert_extent() 8f6e910852d8 ext4: get rid of ppath in ext4_ext_create_new_leaf() cafb151eb180 ext4: get rid of ppath in ext4_find_extent() a4a7024448ab bus: omap-ocp2scp: fix OF populate on driver rebind e4be2bd01a76 bus: omap-ocp2scp: Convert to platform remove callback returning void 43bb0a265b26 drm/tegra: dsi: fix device leak on probe ec3be7dc9391 KVM: x86: Ignore -EBUSY when checking nested events from vcpu_block() 5e8bf325ed12 KVM: x86: WARN if a vCPU gets a valid wakeup that KVM can't yet inject ca921be7a117 media: tegra-video: Fix memory leak in __tegra_channel_try_format() 7a9c901edcaf media: tegra-video: Use accessors for pad config 'try_*' fields 32a1889f7bb0 KVM: x86: Return "unsupported" instead of "invalid" on access to unsupported PV MSR 469a8a038d8b KVM: x86: Rename KVM_MSR_RET_INVALID to KVM_MSR_RET_UNSUPPORTED 626ccc6daa7a KVM: x86: Fix KVM_GET_MSRS stack info leak fa0e278a1230 PCI: Use resource_set_range() that correctly sets ->end ffe8617e2e5b resource: Add resource set range and size helpers fffdb0fece19 PCI: Use resource names in PCI log messages bc440d87e655 PCI: Update BAR # and window messages b9eccd59697f memory: mtk-smi: fix device leak on larb probe b16599fedf49 memory: mtk-smi: fix device leaks on common probe 646ac65db6c1 memory: mtk-smi: Convert to platform remove callback returning void 5f5997339cf0 PCI: Correct PCI_CAP_EXP_ENDPOINT_SIZEOF_V2 value 8a95fb9df110 bpf: Fix stack-out-of-bounds write in devmap dfe079bb6ab3 btrfs: fix compat mask in error messages in btrfs_check_features() a1b82706c233 btrfs: fix warning in scrub_verify_one_metadata() 6eac621b2deb btrfs: fix objectid value in error message in check_extent_data_ref() ad567ccfd90c btrfs: fix incorrect key offset in error message in check_dev_extent_item() ab69bf6f8970 btrfs: add support for inserting raid stripe extents cbca08a23773 btrfs: read raid stripe tree from disk fff272a83847 btrfs: add raid stripe tree definitions 9895ddc5efec btrfs: move btrfs_extref_hash into inode-item.h d928f8aec88d btrfs: remove btrfs_crc32c wrapper 971658d3932b btrfs: move btrfs_crc32c_final into free-space-cache.c 37fc52528383 ALSA: hda: cs35l56: Fix signedness error in cs35l56_hda_posture_put() 996d43a72d11 ALSA: pci: hda: use snd_kcontrol_chip() 4f8d58123378 perf: Fix __perf_event_overflow() vs perf_remove_from_context() race 949e15a8dbde ALSA: usb-audio: Use inclusive terms 6ec99e9c90f4 ALSA: usb-audio: Cap the packet size pre-calculations 133c3f3dde72 scsi: ufs: core: Move link recovery for hibern8 exit failure to wl_resume 0990188985f5 rseq: Clarify rseq registration rseq_size bound check comment 7b2c39f7bada ALSA: usb-audio: Remove VALIDATE_RATES quirk for Focusrite devices 8b00427317ba scsi: pm8001: Fix use-after-free in pm8001_queue_command() be4c63507aca scsi: lpfc: Properly set WC for DPP mapping 2edbd1733091 irqchip/sifive-plic: Fix frozen interrupt due to affinity setting 0bd326dffd9e drm/logicvc: Fix device node reference leak in logicvc_drm_config_parse() 7e55d0788b36 drm/vmwgfx: Return the correct value in vmw_translate_ptr functions 2106a0153b5d drm/vmwgfx: Fix invalid kref_put callback in vmw_bo_dirty_release (From OE-Core rev: 5a3cfb5dd393656dae18eece3c006fb1a3dc244a) Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> Signed-off-by: Yoann Congal <yoann.congal@smile.fr> Signed-off-by: Paul Barker <paul@pbarker.dev>	2026-06-26 16:55:54 +01:00
Bruce Ashfield	fe8122e97d	linux-yocto/6.6: update to v6.6.129 ... Updating linux-yocto/6.6 to the latest korg -stable release that comprises the following commits: 4fc00fe35d46 Linux 6.6.129 acf7c8972775 Revert "x86/kexec: add a sanity check on previous kernel's ima kexec buffer" 682d8e2f892b Linux 6.6.128 0ac0e02183c5 arm64: Fix sampling the "stable" virtual counter in preemptible section 18845fb30921 drm/i915/wakeref: clean up INTEL_WAKEREF_PUT_* flag macros fe418ef21efd NTB: ntb_transport: Fix too small buffer for debugfs_name 1cdff5d564fe tracing: Wake up poll waiters for hist files when removing an event e4e5026252b4 tracing: Fix checking of freed trace_event_file for hist files ad058a4317db net: nfc: nci: Fix parameter validation for packet data dc99b25ed4f7 arm64: Force the use of CNTVCT_EL0 in __delay() ad3640895956 x86/kexec: Copy ACPI root pointer address from config table 9c735a7d98c9 net/sched: act_skbedit: fix divide-by-zero in tcf_skbedit_hash() 1e300c33ef3c net: ethernet: ec_bhf: Fix dma_free_coherent() dma handle 6ccfcad1b582 ASoC: amd: yc: Add DMI quirk for ASUS Vivobook Pro 15X M6501RR c854ab481ece cifs: some missing initializations on replay 6a3ce8c8ad80 fbcon: Remove struct fbcon_display.inverse b6de6d481cc2 fbdev: ffb: fix corrupted video output on Sun FFB1 3ed019654234 fbdev: of: display_timing: fix refcount leak in of_get_display_timings() e8c5d5f6cd66 fbdev: vt8500lcdfb: fix missing dma_free_coherent() a785c4e2a999 fbcon: check return value of con2fb_acquire_newinfo() 632d233cf2e6 ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() e075ec9b08f8 atm: fore200e: fix use-after-free in tasklets during device removal 9f8ad199844c net: intel: fix PCI device ID conflict between i40e and ipw2200 6eb571a37631 io_uring/filetable: clamp alloc_hint to the configured alloc range 0f4dcba31bf4 tracing: Fix to set write permission to per-cpu buffer_size_kb ec4445ae9e58 net: macb: Fix tx/rx malfunction after phy link down and up 013ac469596a octeontx2-af: CGX: fix bitmap leaks 0f85a9655445 net: wan/fsl_ucc_hdlc: Fix dma_free_coherent() in uhdlc_memclean() 63afc078bba6 net: ethernet: marvell: skge: remove incorrect conflicting PCI ID 710657d3d31f LoongArch: Disable instrumentation for setup_ptwalker() 6868bd64dc90 LoongArch: Guard percpu handler under !CONFIG_PREEMPT_RT a50371c6ad99 LoongArch: Prefer top-down allocation after arch_mem_init() bb1a54f7f011 LoongArch: Make cpumask_of_node() robust against NUMA_NO_NODE 9efa154609cd ceph: supply snapshot context in ceph_zero_partial_object() 103e9d1d43e6 MIPS: rb532: Fix MMIO UART resource registration 953953abb66e cifs: Fix locking usage for tcon fields cc3f83b6fb37 staging: rtl8723bs: fix null dereference in find_network 369d369ed08f parisc: kernel: replace kfree() with put_device() in create_tree_node() a19b61fdb958 PCI: Fix pci_slot_trylock() error handling 65e794574069 net: cpsw_new: Fix unnecessary netdev unregistration in cpsw_probe() error path 4857c37c7ba9 drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() 7a4fd19c567f tipc: fix RCU dereference race in tipc_aead_users_dec() 8e875cf8851b mtd: rawnand: pl353: Fix software ECC support f5da4c24aa6d usb: dwc2: fix resume failure if dr_mode is host 76c1123ffccf usb: dwc3: gadget: Move vbus draw to workqueue context aa8d68d97c7f scsi: ufs: core: Flush exception handling work when RPM level is zero d3e837e11ee9 perf/arm-cmn: Reject unsupported hardware configurations 9bd98d088f47 remoteproc: imx_rproc: Fix invalid loaded resource table detection d99a08c2b4d5 btrfs: continue trimming remaining devices on failure 41a09925ec68 arm64: Fix non-atomic __READ_ONCE() with CONFIG_LTO=y 1047ca2d8169 PCI/IOV: Fix race between SR-IOV enable/disable and hotplug 639265296fe6 Revert "PCI/IOV: Add PCI rescan-remove locking when enabling/disabling SR-IOV" cfccd3b8c51b kexec: derive purgatory entry from symbol bb273b68c171 ocfs2: fix reflink preserve cleanup issue 649c2e853608 rapidio: replace rio_free_net() with kfree() in rio_scan_alloc_net() 81c44a4bc168 mm/highmem: fix __kmap_to_page() build error 1eabfd2c437b iio: gyro: itg3200: Fix unchecked return value in read_raw 9d0ca11258e7 powerpc/smp: Add check for kcalloc() failure in parse_thread_groups() 442f5db91317 tools: Fix bitfield dependency failure e4709950acd4 dm mpath: make pg_init_delay_msecs settable 542dd6da35eb bus: fsl-mc: fix an error handling in fsl_mc_device_add() 65f5a17b6d56 usb: gadget: tegra-xudc: Add handling for BLCG_COREPLL_PWRDN 22e460b6333a x86/kexec: add a sanity check on previous kernel's ima kexec buffer 57c4fd0f4b02 nvmem: Drop OF node reference on nvmem_add_one_cell() failure 13c1f31f777c nfsd: fix return error code for nfsd_map_name_to_[ug]id d92b8fac294b md/bitmap: fix GPF in write_page caused by resize race 142b1bba3299 PCI: endpoint: Fix swapped parameters in pci_{primary/secondary}_epc_epf_unlink() functions 708e20c66b27 KVM: x86: Add SRCU protection for reading PDPTRs in __get_sregs2() a6f660d62bc1 xfs: fix remote xattr valuelblk check 38613c01f69e xfs: fix freemap adjustments when adding xattrs to leaf blocks ffaf5c99d0f8 xfs: delete attr leaf freemap entries when empty e2e7c275f557 mfd: core: Add locking around 'mfd_of_node_list' 01aed2f1d7cb iommu/vt-d: Flush dev-IOTLB only when PCIe device is accessible in scalable mode a5b1ddbe31f4 media: verisilicon: AV1: Fix tile info buffer size 8be53110395e xfs: mark data structures corrupt on EIO and ENODATA 297bb8b1db60 selftests/mm/charge_reserved_hugetlb: drop mount size for hugetlbfs aa5f25d55cda mm, page_alloc, thp: prevent reclaim for __GFP_THISNODE THP allocations 8dcff1979381 drm: of: drm_of_panel_bridge_remove(): fix device_node leak 52920a853381 media: venus: vdec: restrict EOS addr quirk to IRIS2 only 225f2221b422 media: venus: vdec: fix error state assignment for zero bytesused 272d44fa7bce arm64: dts: rockchip: Do not enable hdmi_sound node on Pinebook Pro ed36f6ae0039 dm-unstripe: fix mapping bug when there are multiple targets in a table fb49f209995f dm-integrity: fix recalculation in bitmap mode de7934627cc4 s390/pci: Handle futile config accesses of disabled devices directly 1c7c87cf18da clk: tegra: tegra124-emc: Fix potential memory leak in tegra124_clk_register_emc() 0f0809bfe4fa media: i2c: ov01a10: Fix digital gain range 85cc6574f21b clk: clk-apple-nco: Add "apple,t8103-nco" compatible 3880e331b0b3 KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation e113339cc7d2 soc: ti: pruss: Fix double free in pruss_clk_mux_setup() d451bf970a0c soc: ti: k3-socinfo: Fix regmap leak on probe failure 7daf279c674d dm: clear cloned request bio pointer when last clone bio completes 2d10a3dad8d6 dm-integrity: fix a typo in the code for write/discard race d03a29cb36d6 media: i2c: ov5647: use our own mutex for the ctrl lock 089625cccd7e media: i2c: ov5647: Fix PIXEL_RATE value for VGA mode c146483bad46 media: i2c: ov5647: Sensor should report RAW color space e5f4aad2627d media: i2c: ov5647: Correct minimum VBLANK value 1f413dac763a media: i2c: ov5647: Correct pixel array offset cabd025182cf media: i2c: ov5647: Initialize subdev before controls c9af1818387f media: ccs: Avoid possible division by zero 0c074e80921f media: qcom: camss: vfe: Fix out-of-bounds access in vfe_isr_reg_update() 8de39720e7a3 media: i2c: ov01a10: Fix test-pattern disabling a14a3cef8017 media: i2c: ov01a10: Add missing v4l2_subdev_cleanup() calls 567a03fe8d08 media: i2c: ov01a10: Fix analogue gain range e2f6d78dc3a8 media: i2c: ov01a10: Fix reported pixel-rate value bb2b049f75f1 media: i2c: ov01a10: Fix the horizontal flip control ccb92def042a media: i2c/tw9906: Fix potential memory leak in tw9906_probe() 9cb9eca33d20 media: i2c/tw9903: Fix potential memory leak in tw9903_probe() 046c5db6bbba media: cx25821: Add missing unmap in snd_cx25821_hw_params() 544215cc37d0 media: cx23885: Add missing unmap in snd_cx23885_hw_params() 10ab64f8efc2 media: cx88: Add missing unmap in snd_cx88_hw_params() 27c508f61963 media: radio-keene: fix memory leak in error path dd8508820246 media: verisilicon: AV1: Set IDR flag for intra_only frame type 8305902ac038 arm64: dts: apple: t8112-j473: Keep the HDMI port powered on b74bf7d0d01f HID: logitech-hidpp: Check maxfield in hidpp_get_report_length() 3f1b21cc67a1 HID: prodikeys: Check presence of pm->input_ep82 243e1165eb03 HID: magicmouse: Do not crash on missing msc->input 449004434e1f HID: hid-pl: handle probe errors cad7442ff23b arm64: Disable branch profiling for all arm64 code deb8f6dfd31d KVM: nSVM: Remove a user-triggerable WARN on nested_svm_load_cr3() succeeding 275e15fd1cf7 ARM: omap2: Fix reference count leaks in omap_control_init() b44eb959159f media: verisilicon: AV1: Fix tx mode bit setting 8ad7e6ea46a9 media: verisilicon: AV1: Fix enable cdef computation 564fd3a63efc media: mtk-mdp: Fix a reference leak bug in mtk_mdp_remove() 12cafc15d246 media: mtk-mdp: Fix error handling in probe function 637510cb5bed media: mediatek: encoder: Fix uninitialized scalar variable issue 031f2adc1499 dm-verity: correctly handle dm_bufio_client_create() failure a9ddc035050a fpga: dfl: use subsys_initcall to allow built-in drivers to be added d6f5aed42760 ASoC: SOF: ipc4-control: Keep the payload size up to date e1dd7092fa8f ASoC: SOF: ipc4-control: Use the correct size for scontrol->ipc_control_data 59fe643f21b9 ASoC: SOF: ipc4-topology: Correct the allocation size for bytes controls 3a5a4b066329 ASoC: SOF: ipc4-control: If there is no data do not send bytes update 955e2d6e5e0a clk: renesas: rzg2l: Select correct div round macro a4be3b90ba9d clk: renesas: rzg2l: Fix intin variable size 90c8353f4718 rpmsg: core: fix race in driver_override_show() and use core helper 7ef82863d422 netfilter: nf_conntrack_h323: fix OOB read in decode_choice() b690635d4719 dpaa2-switch: validate num_ifs to prevent out-of-bounds write 9ac6aebef4b4 net: consume xmit errors of GSO frames 175881094756 net/mlx5: Fix missing devlink lock in SRIOV enable error path 54fb0577ebe7 net/mlx5: DR, Fix circular locking dependency in dump b324327ff6f4 RDMA/umem: Fix double dma_buf_unpin in failure path 35854ed5c40b net: usb: pegasus: enable basic endpoint checking df001db47708 RDMA/efa: Fix typo in efa_alloc_mr() 337d7b4112a4 net: wan: farsync: Fix use-after-free bugs caused by unfinished tasklets 52d469319ced RDMA/core: Fix stale RoCE GIDs during netdev events at registration 0b7d596da5de tipc: fix duplicate publication key in tipc_service_insert_publ() 481ea39b342c Bluetooth: L2CAP: Fix missing key size check for L2CAP_LE_CONN_REQ efcdb4da480c Bluetooth: L2CAP: Fix not checking output MTU is acceptable on L2CAP_ECRED_CONN_REQ 1a138921ce56 Bluetooth: L2CAP: Fix response to L2CAP_ECRED_CONN_REQ 1d93a369b5aa Bluetooth: hci_qca: Cleanup on all setup failures 7247f340f824 Bluetooth: L2CAP: Fix invalid response to L2CAP_ECRED_RECONF_REQ 2983b39f8c0d Remove WARN_ALL_UNSEEDED_RANDOM kernel config option 1f40fde29349 wifi: cfg80211: wext: fix IGTK key ID off-by-one 322437972f0a net: ethernet: xscale: Check for PTP support properly 854f5997df49 net: ixp4xx_eth: convert to ndo_hwtstamp_get() and ndo_hwtstamp_set() 19f359963ae8 net: usb: lan78xx: scan all MDIO addresses on LAN7801 ef9b10a02050 net: usb: kaweth: remove TX queue manipulation in kaweth_set_rx_mode 166801e49a5b xfrm: always flush state and policy upon NETDEV_UNREGISTER event 56d5c0557e53 ipmi: ipmb: initialise event handler read bytes f13e4fe961a7 xfrm: skip templates check for packet offload tunnel mode 719918fc88df xfrm6: fix uninitialized saddr in xfrm6_get_saddr() d0559d07afab ntb: ntb_hw_switchtec: Fix shift-out-of-bounds for 0 mw lut 85c9daa1f831 ntb: ntb_hw_switchtec: Fix array-index-out-of-bounds access a4557dc20df4 rtc: zynqmp: correct frequency value 61bd8787c605 drm/amd/display: Remove conditional for shaper 3DLUT power-on 0b284a7ce311 btrfs: replace BUG() with error handling in __btrfs_balance() 8995fc0e00b3 ALSA: usb-audio: Add sanity check for OOB writes at silencing 6a997eb80644 drm/radeon: Add HAINAN clock adjustment 5b9af0342402 drm/amdgpu: Add HAINAN clock adjustment c26bde6301f2 ALSA: usb-audio: Update the number of packets properly at receiving d2e92247b24a drm/amdgpu: Adjust usleep_range in fence wait 068dee782c8c drm/amd/display: Avoid updating surface with the same surface under MPO 1a7f1116c7f8 ARM: 9467/1: mm: Don't use %pK through printk 44373b1e9c12 include: uapi: netfilter_bridge.h: Cover for musl libc 9f33e83c8393 thermal: int340x: Fix sysfs group leak on DLVR registration failure e1dc45d97975 libceph: define and enforce CEPH_MAX_KEY_LEN a87a445ac1d9 ceph: supply snapshot context in ceph_uninline_data() 2f5c626ea792 fs/ntfs3: avoid calling run_get_entry() when run == NULL in ntfs_read_run_nb_ra() ad0d779cdc26 fs/ntfs3: drop preallocated clusters for sparse and compressed files 8d8c70b57dbe fs: ntfs3: fix infinite loop triggered by zero-sized ATTR_LIST af839013c70a fs: ntfs3: fix infinite loop in attr_load_runs_range on inconsistent metadata 68e32694be23 fs: ntfs3: check return value of indx_find to avoid infinite loop 6dedf0369f2a MIPS: Loongson: Make cpumask_of_node() robust against NUMA_NO_NODE da08099d5f7a iio: magnetometer: Remove IRQF_ONESHOT 53f2152b48d5 iio: Use IRQF_NO_THREAD be5465701341 Revert "mfd: da9052-spi: Change read-mask to write-mask" dc3bc979814b phy: fsl-imx8mq-usb: disable bind/unbind platform driver feature afb941338c8e phy: mvebu-cp110-utmi: fix dr_mode property read from dts d476130e53d3 watchdog: imx7ulp_wdt: handle the nowayout option 0883ddd583ed binder: don't use %pK through printk 1d7120244b54 fix it87_wdt early reboot by reporting running timer 4ff5ab3e7141 serial: 8250: 8250_omap.c: Clear DMA RX running status only after DMA termination is done 8311bb40698b staging: rtl8723bs: fix memory leak on failure path 03a2f7f9864c misc: eeprom: Fix EWEN/EWDS/ERAL commands for 93xx56 and 93xx66 ece3722169ba misc: bcm_vk: Fix possible null-pointer dereferences in bcm_vk_read() c219c20cc357 dmaengine: stm32-mdma: initialize m2m_hw_period and ccr to fix warnings f89324e2e09d dmaengine: sun6i: Choose appropriate burst length under maxburst f9305dda5015 fpga: of-fpga-region: Fail if any bridge is missing b2bbcaa36c1a usb: typec: ucsi: psy: Fix voltage and current max for non-Fixed PDOs 32ccda4895ba serial: 8250_dw: handle clock enable errors in runtime_resume 52b42c24750a staging: rtl8723bs: fix missing status update on sdio_alloc_irq() failure cd496527efa8 soundwire: dmi-quirks: add mapping for Avell B.ON (OEM rebranded of NUC15) 3be7beef4a05 m68k: nommu: fix memmove() with differently aligned src and dest for 68000 6ce681cf8082 clk: microchip: core: correct return value on *_get_parent() e2809ad08252 mailbox: sprd: clear delivery flag before handling TX done 4c4679b31b9d remoteproc: mediatek: Break lock dependency to `prepare_lock` 332fb842181e mailbox: sprd: mask interrupts that are not handled 17ee46882b3e mailbox: imx: Skip the suspend flag for i.MX7ULP 51edcbd17c8d mailbox: pcc: Remove spurious IRQF_ONESHOT usage f720e653aa1a remoteproc: imx_dsp_rproc: Skip RP_MBOX_SUSPEND_SYSTEM when mailbox TX channel is uninitialized cb6c4aa73491 tracing: Fix false sharing in hwlat get_sample() 9566c87101b2 vhost: fix caching attributes of MMIO regions by setting them explicitly f1bf5ebd5fda scsi: buslogic: Reduce stack usage d16337560750 hisi_acc_vfio_pci: update status after RAS error 559e227b1df7 ata: libata: avoid long timeouts on hot-unplugged SATA DAS 55de264a4d32 RDMA/rtrs-clt: For conn rejection use actual err number 3819890d6ab2 nfc: nxp-nci: remove interrupt trigger type 392e3d44841d myri10ge: avoid uninitialized variable use 6e2a6100ac5b PCI: Mark Nvidia GB10 to avoid bus reset 846b226065fe PCI: Add ACS quirk for Qualcomm Hamoa & Glymur ec494c0260bf PCI: Enable ACS after configuring IOMMU for OF platforms a2376e912723 PCI: Fix pci_slot_lock () device locking f5ea62163a78 PCI: Mark ASM1164 SATA controller to avoid bus reset 391200c274e9 net/rds: Clear reconnect pending bit f713dcd2ce83 vmw_vsock: bypass false-positive Wnonnull warning with gcc-16 7a8acafd45a9 net: usb: sr9700: remove code to drive nonexistent multicast filter 87465580215c wifi: ath10k: fix lock protection in ath10k_wmi_event_peer_sta_ps_state_chg() b015d4c70c9a wifi: rtw89: pci: restore LDO setting after device resume d9b549b6951b octeontx2-af: Workaround SQM/PSE stalls by disabling sticky 37f4e6804d98 Bluetooth: btusb: Add device ID for Realtek RTL8761BU c051ef2f61f4 Bluetooth: btusb: Add new VID/PID for RTL8852CE 07960da05c0d Bluetooth: hci_conn: use mod_delayed_work for active mode timeout c06dbfd954c9 Bluetooth: hci_conn: Set link_policy on incoming ACL connections 9eaeba5600e5 ipv4: fib: Annotate access to struct fib_alias.fa_state. 31d4bb68f436 wifi: iwlegacy: add missing mutex protection in il3945_store_measurement() 941e3066441c wifi: iwlegacy: add missing mutex protection in il4965_store_tx_power() 2ace7ac88cb0 net: hns3: extend HCLGE_FD_AD_QID to 11 bits d5cd3bb7794e ipv4: igmp: annotate data-races around idev->mr_maxdelay ab2848d3783a gro: change the BUG_ON() in gro_pull_from_frag0() f0f729bdffb0 net/rds: No shortcut out of RDS_CONN_ERROR db62e9f44838 wifi: iwlwifi: mvm: check the validity of noa_len 116bc0980e91 net: usb: r8152: fix transmit queue timeout f4bf64072c36 openrisc: define arch-specific version of nop() 07a9b32eaae7 netfilter: xt_tcpmss: check remaining length before reading optlen 89f50775d883 netfilter: nf_conntrack: Add allow_clash to generic protocol handler 99c75e53cec0 ext4: mark group extend fast-commit ineligible 0d5fcb063cda ext4: move ext4_percpu_param_init() before ext4_mb_init() 83b074b69022 ext4: mark group add fast-commit ineligible 46ed4e9c8d30 ipv6: exthdrs: annotate data-race over multiple sysctl 55170230de66 ipv6: annotate data-races in ip6_multipath_hash_{policy,fields}() f73528f140f1 wifi: ath12k: fix preferred hardware mode calculation c5547727bd1c wifi: ath11k: add pm quirk for Thinkpad Z13/Z16 Gen1 ddfe47664cc6 PCI: dw-rockchip: Disable BAR 0 and BAR 1 for Root Port d880c9b73890 wifi: rtw89: wow: add reason codes for disassociation in WoWLAN mode f2f65b28d802 iommu/amd: move wait_on_sem() out of spinlock 5bfb25495e39 wifi: libertas: fix WARNING in usb_tx_block 9ff4843e6ea3 iommu/arm-smmu-v3: Improve CMDQ lock fairness and efficiency 4f9e7ca933a9 dm: remove fake timeout to avoid leak request df379f57c2cd dm: replace -EEXIST with -EBUSY dd181178c245 wifi: rtw88: rtw8821cu: Add ID for Mercusys MU6H a96d161cfdb1 wifi: rtw88: 8822b: Avoid WARNING in rtw8822b_config_trx_mode() 9fdce77e38c1 wifi: rtw88: fix DTIM period handling when conf->dtim_period is zero f70fcbc2ac7c jfs: nlink overflow in jfs_rename 68f7fc769243 jfs: Add missing set_freezable() for freezable kthread 34506cb119bb ALSA: usb-audio: Add iface reset and delay quirk for AB13X USB Audio 8fb5c4c979ae modpost: Amend ppc64 save/restfpr symnames for -Os build fecfe41f7ed0 ASoC: es8328: Add error unwind in resume 18c67fb3750b hwmon: (f71882fg) Add F81968 support f8ddbe303419 hwmon: (nct6775) Add ASUS Pro WS WRX90E-SAGE SE 2d48f60307e6 ASoC: codecs: max98390: Check return value of devm_gpiod_get_optional() in max98390_i2c_probe() 3383271464b7 spi: spi-mem: Protect dirmap_create() with spi_mem_access_start/end 19513daa8d13 ASoC: sunxi: sun50i-dmic: Add missing check for devm_regmap_init_mmio d1b6536ac20d gpio: aspeed-sgpio: Change the macro to support deferred probe 98c0e07dc7d6 ALSA: hda/conexant: Add headset mic fix for MECHREVO Wujie 15X Pro 49afc2e5bfae HID: elecom: Add support for ELECOM HUGE Plus M-HT1MRBK 4df1e6252d07 HID: multitouch: add eGalaxTouch EXC3188 support 876bb1eabdb1 media: rkisp1: Fix filter mode register configuration ac2d898da509 drm/atmel-hlcdc: fix use-after-free of drm_crtc_commit after release 80b8b0df370f drm/atmel-hlcdc: don't reject the commit if the src rect has fractional parts ec40702029b0 drm/atmel-hlcdc: fix memory leak from the atomic_destroy_state callback af67b50311e7 virt: vbox: uapi: Mark inner unions in packed structs as packed 34eae7e0ab61 hyper-v: Mark inner union in hv_kvp_exchg_msg_value as packed bbfaa5761f58 drm: Account property blob allocations to memcg e97de3e924b3 drm/amdkfd: Fix GART PTE for non-4K pagesize in svm_migrate_gart_map() 30aaed311f97 media: v4l2-async: Fix error handling on steps after finding a match 4010e596d23c media: cx25821: Fix a resource leak in cx25821_dev_setup() 33af366211ee media: solo6x10: Check for out of bounds chip_id 4ba5c7a1aade media: pvrusb2: fix URB leak in pvr2_send_request_ex 45d9a0cd1b88 media: adv7180: fix frame interval in progressive mode f5a5a824f0ac media: amphion: Clear last_buffer_dequeued flag for DEC_CMD_START 81bc7d5e7897 spi: spi-mem: Limit octal DTR constraints to octal DTR situations 822530fb85d8 ASoC: wm8962: Don't report a microphone if it's shorted to ground on plug 21f6e02a1910 ASoC: wm8962: Add WM8962_ADC_MONOMIX to "3D Coefficients" mask 04184bcb50f5 HID: apple: Add "SONiX KN85 Keyboard" to the list of non-apple keyboards 55462d16cb9c drm/amdgpu: avoid a warning in timedout job handler 40e0b938db37 drm/amdgpu: add support for HDP IP version 6.1.1 b0d35bc9c159 media: mediatek: vcodec: Don't try to decode 422/444 VP9 38ef3e1e1e9b media: omap3isp: set initial format d490523d2374 media: omap3isp: isppreview: always clamp in preview_try_format() a9d1d7d27151 media: omap3isp: isp_video_mbus_to_pix/pix_to_mbus fixes 2663ef70c612 drm/v3d: Set DMA segment size to avoid debug warnings 50e8aac244e7 spi: stm32: fix Overrun issue at < 8bpw 8b971c21603a media: dvb-core: dmxdevfilter must always flush bufs b2a97f2259f6 spi-geni-qcom: use xfer->bits_per_word for can_dma() 5d0814ad6654 spi-geni-qcom: initialize mode related registers to 0 ac9a7c329a56 drm/display/dp_mst: Add protection against 0 vcpi afa0bfe1437d parisc: Prevent interrupts during reboot 12535a5d5d64 arm64: tegra: smaug: Add usb-role-switch support 1da904e84de6 pstore: ram_core: fix incorrect success return when vmap() fails a4345acbe390 char: tpm: cr50: Remove IRQF_ONESHOT 3e656f767407 mailbox: bcm-ferxrm-mailbox: Use default primary handler 7b9394e49720 crypto: hisilicon/qm - move the barrier before writing to the mailbox register 5f007c6acaa7 PCI/MSI: Unmap MSI-X region on error f557c206c32e clocksource/drivers/timer-integrator-ap: Add missing Kconfig dependency on OF 6f113ab549b8 clocksource/drivers/sh_tmu: Always leave device running after probe c8a34bceefbc bpf: verifier improvement in 32bit shift sign extension pattern 47bbd0cb7db3 sparc: don't reference obsolete termio struct for TC* constants 6aa04820dbfe sparc: Synchronize user stack on fork and clone 648aa7ce0bd8 blk-mq-debugfs: add missing debugfs_mutex in blk_mq_debugfs_register_hctxs() 9150176cbf71 xenbus: Use .freeze/.thaw to handle xenbus devices 2050a5cff32c perf/cxlpmu: Replace IRQF_ONESHOT with IRQF_NO_THREAD 84a17b7b292d s390/perf: Disable register readout on sampling events bafd4aa1908a cpufreq: dt-platdev: Block the driver from probing on more QC platforms a61c1bc84c4a md-cluster: fix NULL pointer dereference in process_metadata_update b4a0b646cc28 ACPICA: Abort AML bytecode execution when executing AML_FATAL_OP 01e8751b37a3 ACPI: processor: Fix NULL-pointer dereference in acpi_processor_errata_piix4() 64eb63f573f4 EFI/CPER: don't go past the ARM processor CPER record buffer e0ec99115e13 APEI/GHES: ensure that won't go past CPER allocated record 5a9b1dda8481 EFI/CPER: don't dump the entire memory region 6ea4b7bc2e7b x86/xen/pvh: Enable PAE mode for 32-bit guest only when CONFIG_X86_PAE is set 30868a6a5238 rnbd-srv: Zero the rsp buffer before using it fd7e360845d3 arm64: Add support for TSV110 Spectre-BHB mitigation 94ab05af1d96 perf/arm-cmn: Support CMN-600AE 61cd0b287fb9 s390/purgatory: Add -Wno-default-const-init-unsafe to KBUILD_CFLAGS 7823e09a68b5 tools/power cpupower: Reset errno before strtoull() 93e8e3ee165a smb: client: prevent races in ->query_interfaces() e428670cfb29 gfs2: fiemap page fault fix 048b58edc57d smb: client: add proper locking around ses->iface_last_update 8b5dcfa97bf3 btrfs: handle user interrupt properly in btrfs_trim_fs() 2bb588cede1c minix: Add required sanity checking to minix_check_superblock() 43ccadb866de i3c: master: svc: Initialize 'dev' to NULL in svc_i3c_master_ibi_isr() de9affb698d5 hfsplus: pretend special inodes as regular files f5d27ad99fca audit: add missing syscalls to read class c1b6227555c5 fs/buffer: add alert in try_to_free_buffers() for folios without buffers bccd4ebbdac3 hfsplus: fix volume corruption issue for generic/498 91e27bc79c3b audit: add fchmodat2() to change attributes class 4bde6678bc54 rtc: interface: Alarm race handling should not discard preceding error 4927e2d29b74 libperf build: Always place libperf includes first 5cf6e76e4f4f libperf: Don't remove -g when EXTRA_CFLAGS are used 66e9b70c64df libsubcmd: Fix null intersection case in exclude_cmds() 56042755b72f perf callchain: Fix srcline printing with inlines eddddf4ed7f6 perf unwind-libdw: Fix invalid reference counts 985d844a5997 perf test stat tests: Fix for virtualized machines fa99e8717a68 perf test stat: Update test expectations and events 8f36abf181c2 ASoC: dt-bindings: asahi-kasei,ak5558: Fix the supply names f939f666ec02 ASoC: dt-bindings: asahi-kasei,ak4458: Fix the supply names ce18fa88b154 ASoC: dt-bindings: asahi-kasei,ak4458: set unevaluatedProperties:false 655c9ba9915f SUNRPC: fix gss_auth kref leak in gss_alloc_msg error path df10f23defff SUNRPC: auth_gss: fix memory leaks in XDR decoding error paths 97503a852d3b ata: libata-scsi: refactor ata_scsi_translate() 51680e9a1680 ata: pata_ftide010: Fix some DMA timings f18f70123962 ext4: use optimized mballoc scanning regardless of inode format 4a79fde8db7e ext4: fix memory leak in ext4_ext_shift_extents() 93b2ebbbcb2e ext4: don't cache extent during splitting extent c0155dee51b9 MIPS: Work around LLVM bug when gp is used as global register variable c941c268ad00 drm/amd/display: Use same max plane scaling limits for all 64 bpp formats da0959402742 ASoC: rockchip: i2s-tdm: Use param rate if not provided by set_sysclk 5fed5f6c6a02 x86/hyperv: Fix error pointer dereference 1ee1d006c9fe btrfs: fix invalid leaf access in btrfs_quota_enable() if ref key not found b7bc182ec184 efi: Fix reservation of unaccepted memory table 3222c8020aeb s390/kexec: Make KEXEC_SIG available when CONFIG_MODULES=n 9e5cb7e67fbd spi: wpcm-fiu: Fix potential NULL pointer dereference in wpcm_fiu_probe() a98d73dcc339 spi: wpcm-fiu: Simplify with dev_err_probe() 978137e940de spi: wpcm-fiu: Fix uninitialized res 87e463136302 spi: wpcm-fiu: Use devm_platform_ioremap_resource_byname() 971bf8e61e9b drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 17e94789c216 drm/amdkfd: fix debug watchpoints for logical devices e975148b2c29 ASoC: codecs: aw88261: Fix erroneous bitmask logic in Awinic init 3a2f5a21285b drm/i915/acpi: free _DSM package when no connectors 29b2fbe3498d ASoC: fsl_xcvr: Revert fix missing lock in fsl_xcvr_mode_put() f8a5426652bd drm/amdgpu: Fix memory leak in amdgpu_ras_init() e87c73a80a12 drm/amdgpu: Fix memory leak in amdgpu_acpi_enumerate_xcc() 8dc6beca70f0 apparmor: fix aa_label to return state from compount and component match b25298e89a29 apparmor: fix invalid deref of rawdata when export_binary is unset dbbe0a2e3e4b apparmor: make label_match return a consistent value 0563743d3f70 apparmor: remove apply_modes_to_perms from label_match 32928c1749e8 apparmor: refcount the pdb f89b657e1785 apparmor: provide separate audit messages for file and policy checks e78e00cf9eba apparmor: use passed in gfp flags in aa_alloc_null() 1f736dfe27c8 apparmor: fix rlimit for posix cpu timers 24bb7d11dc30 apparmor: return -ENOMEM in unpack_perms_table upon alloc failure 0dc19bca2260 apparmor: fix NULL sock in aa_sock_file_perm a4ff9e4f4ad4 net/mlx5: Fix multiport device check over light SFs f94a0de7b9f3 bonding: alb: fix UAF in rlb_arp_recv during bond up/down 8bc48c4fb636 octeontx2-af: Fix default entries mcam entry action 3f483a90634d inet: move icmp_global_{credit,stamp} to a separate cache line c9141a794fdc cache: add __cacheline_group_{begin, end}_aligned() (+ couple more) 8dacf34eb427 netns-ipv4: reorganize netns_ipv4 fast path variables 1402ebe132a9 cache: enforce cache groups 4ec8a98b3dc3 tcp: Set pingpong threshold via sysctl b4d5e97679bc tcp: defer regular ACK while processing socket backlog 22023ffad74c icmp: prevent possible overflow in icmp_global_allow() b0da61015db2 icmp: icmp_msgs_per_sec and icmp_msgs_burst sysctls become per netns e0987b6c3b34 icmp: move icmp_global.credit and icmp_global.stamp to per netns storage 19c7d8ac5198 macvlan: observe an RCU grace period in macvlan_common_newlink() error path b5c84070333a ping: annotate data-races in ping_lookup() 6b6b2fbd66d8 bpftool: Fix truncated netlink dumps db4636748c22 ipv6: fix a race in ip6_sock_set_v6only() 7017745068a9 netfilter: nf_tables: fix use-after-free in nf_tables_addchain() 9464ca7a6e56 net: remove WARN_ON_ONCE when accessing forward path array 60e921703943 netfilter: nf_conntrack_h323: don't pass uninitialised l3num value f199874c199b selftests: forwarding: vxlan_bridge_1d_ipv6: fix test failure with br_netfilter enabled 3c2b767a8ae2 selftests: forwarding: vxlan_bridge_1d: fix test failure with br_netfilter enabled d0fdad1bdd21 net: bridge: mcast: always update mdb_n_entries for vlan contexts 779a9ae0ef22 net/rds: rds_sendmsg should not discard payload_len 88b0fced1bbb xen-netback: reject zero-queue configuration from guest 163d04897e57 net: usb: catc: enable basic endpoint checking b067e6c7973b net: sparx5/lan969x: fix PTP clock max_adj value bcc60ad129ae ipv6: Fix out-of-bound access in fib6_add_rt2node(). cc1b179f778f net: mscc: ocelot: add missing lock protection in ocelot_port_xmit_inj() 357a3544a385 net: mscc: ocelot: split xmit into FDMA and register injection paths 487fac2388ad net: mscc: ocelot: extract ocelot_xmit_timestamp() helper d6f03772d9c0 net: sparx5/lan969x: fix DWRR cost max to match hardware register width 9eefda7a03ef selftests: mlxsw: tc_restrictions: Fix test failure with new iproute2 5c577ac939bc cpuidle: Skip governor when only one idle state is available 7bb9178df6f0 ACPI: PM: Add unused power resource quirk for THUNDEROBOT ZERO d389943443c5 selftests/memfd: use IPC semaphore instead of SIGSTOP/SIGCONT 2efc98314a61 selftests/memfd: delete unused declarations d809ee17c0d1 kbuild: Add objtool to top-level clean target e156a104ba26 powercap: intel_rapl_tpmi: Remove FW_BUG from invalid version check 727992102836 ACPI: CPPC: Fix remaining for_each_possible_cpu() to use online CPUs a584b9d1059b fs/ntfs3: Fix slab-out-of-bounds read in DeleteIndexEntryRoot 71c8b966ec56 fs/ntfs3: prevent infinite loops caused by the next valid being the same fb2d7c30d030 io_uring/cancel: de-unionize file and user_data in struct io_cancel_data 533d495f15e4 dmaengine: fsl-edma: don't explicitly disable clocks in .remove() 592833ea0051 dmaengine: fsl-edma-main: Convert to platform remove callback returning void a489f1fd52bc backlight: qcom-wled: Change PM8950 WLED configurations 82f2eaab2f94 backlight: qcom-wled: Support ovp values for PMI8994 97790c9b255d leds: qcom-lpg: Check the return value of regmap_bulk_write() 99cc7352156c pinctrl: single: fix refcount leak in pcs_add_gpio_func() eccf17c0a801 pinctrl: qcom: sm8250-lpass-lpi: Fix i2s2_data_groups definition e8e960c3d23f iio: sca3000: Fix a resource leak in sca3000_probe() 43b6f69e1806 ovl: Fix uninit-value in ovl_fill_real d26685b2d9ad pinctrl: equilibrium: Fix device node reference leak in pinbank_init() 4f531b1a5468 usb: bdc: fix sleep during atomic c5bde5357e10 drivers: iio: mpu3050: use dev_err_probe for regulator request 29040d42d641 mfd: simple-mfd-i2c: Add Delta TN48M CPLD support fd1a3a0b98a9 mfd: simple-mfd-i2c: Keep compatible strings in alphabetical order d9e5d3e1924a mfd: simple-mfd-i2c: Add SpacemiT P1 support 07fb61ff35fd mfd: simple-mfd-i2c: Add compatible strings for Layerscape QIXIS FPGA b07aa526d053 mfd: simple-mfd-i2c: Add MAX77705 support 3ea01691738b mfd: arizona: Fix regulator resource leak on wm5102_clear_write_sequencer() failure 9c858ef369bb Revert "mmc: rtsx_pci_sdmmc: increase power-on settling delay to 5ms" b359ca27c589 coresight: etm3x: Fix cpulocked warning on cpuhp 2fad88d7760c watchdog: starfive-wdt: Fix PM reference leak in probe error path 7281a0c907cc iio: pressure: mprls0025pa: fix scan_type struct 6dd1e95cc554 mmc: rtsx_pci_sdmmc: increase power-on settling delay to 5ms 24ec8015beca serial: SH_SCI: improve "DMA support" prompt c233e1e81873 serial: imx: change SERIAL_IMX_CONSOLE to bool 65f2c608096d staging: greybus: lights: avoid NULL deref e230aee60444 dma: dma-axi-dmac: fix SW cyclic transfers 6be32baf6541 dmaengine: mediatek: uart-apdma: Fix above 4G addressing TX/RX 06c8ed283635 clk: mediatek: Fix error handling in runtime PM setup 547ae2f17349 clk: qcom: gfx3d: add parent to parent request map bb5de8aca640 clk: qcom: dispcc-sdm845: Enable parents for pixel clocks ae56e2c27f6d clk: Move clk_{save,restore}_context() to COMMON_CLK section d81b51c8a7ed clk: qcom: gcc-ipq5018: flag sleep clock as critical 048fbee3e431 clk: qcom: gcc-msm8917: Remove ALWAYS_ON flag from cpp_gdsc df1c437bfca4 clk: qcom: gcc-msm8953: Remove ALWAYS_ON flag from cpp_gdsc 915e7579855e clk: qcom: gcc-qdu1000: Update the SDCC RCGs to use shared_floor_ops d31b1b143819 clk: qcom: gcc-sdx75: Update the SDCC RCGs to use shared_floor_ops 45a013dabc5f clk: qcom: gcc-sm8450: Update the SDCC RCGs to use shared_floor_ops ac003c1a80d9 clk: meson: gxbb: Limit the HDMI PLL OD to /4 on GXL/GXM SoCs 1e1664eb6f24 clk: qcom: rcg2: compute 2d using duty fraction directly 8cb92d27454e clk: qcom: gcc-sm8550: Use floor ops for SDCC RCGs 3e5349e54113 fbdev: au1200fb: Fix a memory leak in au1200fb_drv_probe() 68dae7b64c31 fbdev: of_display_timing: Fix device node reference leak in of_get_display_timings() ca81f7811dfe tracing: Remove duplicate ENABLE_EVENT_STR and DISABLE_EVENT_STR macros 7e6556e9329b tracing: Properly process error handling in event_hist_trigger_parse() aa6e847e2795 fs/nfs: Fix readdir slow-start regression c1f244f7868c nvdimm: virtio_pmem: serialize flush requests 25d623f0d77c scsi: csiostor: Fix dereference of null pointer rn 94a6c85a68bc scsi: ufs: host: mediatek: Require CONFIG_PM fdf1188cfa80 scsi: smartpqi: Fix memory leak in pqi_report_phys_luns() 8e3d91135417 pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN 34276d267742 RDMA/uverbs: Add __GFP_NOWARN to ib_uverbs_unmarshall_recv() kmalloc 685163733ed1 power: supply: qcom_battmgr: Recognize "LiP" as lithium-polymer d2a6ca4c0748 mtd: spinand: Fix kernel doc 9fbbd62436ce mtd: parsers: ofpart: fix OF node refcount leak in parse_fixed_partitions() 5f1a84bb4a95 cxl: Fix premature commit_end increment on decoder commit failure db830aea65e4 RDMA/core: add rdma_rw_max_sge() helper for SQ sizing 6faf28106ea1 svcrdma: Reduce the number of rdma_rw contexts per-QP 63a45e2a1264 svcrdma: Increase the per-transport rw_ctx count 46ccddede7be svcrdma: Clean up comment in svc_rdma_accept() 4965711d22a0 svcrdma: Remove queue-shortening warnings 91cb7ff68604 RDMA/core: Fix a couple of obvious typos in comments 756c93d6df7c RDMA/rxe: Fix race condition in QP timer handlers bf1feed1a788 RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send 0f5e62ea5c43 mtd: parsers: Fix memory leak in mtd_parser_tplink_safeloader_parse() 1733d168099e crypto: ccp - Send PSP_CMD_TEE_RING_DESTROY when PSP_CMD_TEE_RING_INIT fails 2abf05a122cf crypto: ccp - Factor out ring destroy handling to a helper b2e7e269aba9 crypto: ccp - Move direct access to some PSP registers out of TEE 54541017ac6a crypto: ccp - Add an S4 restore flow 21f422a86ded mtd: rawnand: cadence: Fix return type of CDMA send-and-wait helper bc779d426ef1 tools/power/x86/intel-speed-select: Fix file descriptor leak in isolate_cpus() 26793db60925 RDMA/rxe: Fix double free in rxe_srq_from_init 9a0323f5e54e RDMA/rtrs-srv: fix SG mapping 86183153c299 power: supply: wm97xx: Fix NULL pointer dereference in power_supply_changed() 3af85f239648 power: supply: bq27xxx: fix wrong errno when bus ops are unsupported 7ac6501b587c power: reset: nvmem-reboot-mode: respect cell size for nvmem_cell_write 2078830c32d1 power: supply: sbs-battery: Fix use-after-free in power_supply_changed() af261f218a76 power: supply: rt9455: Fix use-after-free in power_supply_changed() 77ea437faa4c power: supply: goldfish: Fix use-after-free in power_supply_changed() cbb9b07f88a9 power: supply: cpcap-battery: Fix use-after-free in power_supply_changed() 0de95d29d847 power: supply: bq25980: Fix use-after-free in power_supply_changed() cb5c743936ed power: supply: bq256xx: Fix use-after-free in power_supply_changed() 697bb5dc0cb4 power: supply: act8945a: Fix use-after-free in power_supply_changed() f50433f2603d power: supply: ab8500: Fix use-after-free in power_supply_changed() 2ad50784c9eb RDMA/hns: Notify ULP of remaining soft-WCs during reset 70a5eb757ace RDMA/hns: Fix WQ_MEM_RECLAIM warning 2fb573fa9d71 IB/cache: update gid cache on client reregister event 04b41f1d0e33 RDMA/rtrs: server: remove dead code d858a1d814d3 octeontx2-pf: Unregister devlink on probe failure 320b54651a59 ionic: Rate limit unknown xcvr type messages 69042a930eae octeon_ep: ensure dbell BADDR updation 664355e6f130 octeon_ep: set backpressure watermark for RX queues dc4d11c5f316 octeon_ep: disable per ring interrupts 2c33c53a9c8c octeon_ep: support Octeon CN10K devices a40e276b9696 octeon_ep: restructured interrupt handlers 77c641b3bd4e octeon_ep: support to fetch firmware info 331e2b705163 serial: caif: fix use-after-free in caif_serial ldisc_close() 2c1f59005da9 xfrm: fix ip_rt_bug race in icmp_route_lookup reverse path d621dd67a72d net: Switch to skb_dstref_steal/skb_dstref_restore for ip_route_input callers 31ca4fbf56d1 net: Add skb_dstref_steal and skb_dstref_restore dea1465394ff net: sunhme: Fix sbus regression e3f80666c273 net: atm: fix crash due to unvalidated vcc pointer in sigd_send() e131aac543cd smb: client: correct value for smbd_max_fragmented_recv_size 0e64bd46a04a procfs: fix missing RCU protection when reading real_parent in do_task_stat() 6dc10494cfe2 net: hns3: fix double free issue for tx spare buffer 44b2256b17f1 PCI: Add ACS quirk for Pericom PI7C9X2G404 switches [12d8:b404] f1535d56fc3f netfilter: nft_set_rbtree: check for partial overlaps in anonymous sets f7eb1903c6e0 netfilter: nft_counter: fix reset of counters on 32bit archs cfe35cb86256 netfilter: nft_set_hash: fix get operation on big endian 77eef9f2eef0 nfc: hci: shdlc: Stop timers and work before freeing context db76b75ede38 inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP 43f4661e9b2c bonding: only set speed/duplex to unknown, if getting speed failed 8b5ed7c5417b octeontx2-af: Fix PF driver crash with kexec kernel booting cf5967514735 mptcp: fix receive space timestamp initialization 2622f355e621 of: unittest: fix possible null-pointer dereferences in of_unittest_property_copy() e7c1e60802d8 ucount: check for CAP_SYS_RESOURCE using ns_capable_noaudit() 7dc4778ee848 ipc: don't audit capability check in ipc_permissions() 2c80b0974047 PCI/ACPI: Restrict program_hpx_type2() to AER bits 89db6475c0b4 PCI: Add defines for bridge window indexing 82bd7f9d08ce PCI: Add PCIE_MSG_CODE_ASSERT_INTx message macros 1f5438cb5d78 PCI: Log bridge info when first enumerating bridge f49c44723a70 PCI: Log bridge windows conditionally 988b8b98103c PCI: Supply bridge device, not secondary bus, to read window details 7fd6672a1bb0 PCI: Move pci_read_bridge_windows() below individual window accessors a79a3d1fd32c PCI: Initialize RCB from pci_configure_device() a7c08278f2d0 wifi: ath10k: sdio: add missing lock protection in ath10k_sdio_fw_crashed_dump() 62c2290dc976 tcp: tcp_tx_timestamp() must look at the rtx queue d3b7ffa90f61 fat: avoid parent link count underflow in rmdir 243f71ed873f nfsd: never defer requests during idmap lookup 0114244ec49a dm: use bio_clone_blkg_association c93f23375d8c iommu/vt-d: Flush cache for PASID table before using it bff7ac6b98fa PCI: Mark 3ware-9650SA Root Port Extended Tags as broken af0f0d30fd02 kallsyms/ftrace: set module buildid in ftrace_mod_address_lookup() ecb0af907733 module: add helper function for reading module_buildid() 767f1a8c8483 netfilter: nf_conncount: fix tracking of connections from localhost abaa1508d5db netfilter: nft_compat: add more restrictions on netlink attributes 0792ad077d77 netfilter: nf_conncount: increase the connection clean up limit to 64 d12e9e90632c netfilter: nf_conncount: make nf_conncount_gc_list() to disable BH 5802782366ba netfilter: nf_tables: reset table validation state on abort 4d7a05da767e wifi: cfg80211: stop NAN and P2P in cfg80211_leave 11f832532440 mctp i2c: initialise event handler read bytes f03666259d22 net: mctp-i2c: fix duplicate reception of old data 37ccd48cf35f quota: fix livelock between quotactl and freeze_super 96ac80ce22bc PCI/portdrv: Fix potential resource leak cf7e6dbb51a7 PCI: Do not attempt to set ExtTag for VFs a4176432d41e Documentation: tracing: Add PCI tracepoint documentation 60b896647d88 Documentation: trace: Refactor toctree b2f972293451 docs: fix WARNING document not included in any toctree bd43a6e85779 Documentation: tracing: Add ring-buffer mapping baa42b756d18 PCI/P2PDMA: Release per-CPU pgmap ref when vm_insert_page() fails d8e7624e2113 PCI/PM: Avoid redundant delays on D3hot->D3cold 63d3556c9a8e Documentation: PCI: endpoint: Fix ntb/vntb copy & paste errors 24c190a5a24e PCI: mediatek: Fix IRQ domain leak when MSI allocation fails f448acd86835 Revert "hwmon: (ibmpex) fix use-after-free in high/low store" 1ae5fd122398 spi: tools: Add include folder to .gitignore 169ae51f31b0 platform/chrome: cros_ec_lightbar: Fix response size initialization e3311645c7c1 media: uvcvideo: Fix allocation for small frame sizes 01fe5a26ccc6 platform/chrome: cros_typec_switch: Don't touch struct fwnode_handle::dev 0347548ccf07 drm/msm/a2xx: fix pixel shader start on A225 661152ffb0f2 media: ccs: Accommodate C-PHY into the calculation e7815709bc97 drm/msm/dpu: fix CMD panels on DPU 1.x - 3.x 33acf9a4d6eb HID: playstation: Add missing check for input_ff_create_memless f0a6e4b27bad regulator: core: move supply check earlier in set_machine_constraints() 2d5b17e8364b drm/msm/disp/dpu: add merge3d support for sc7280 83d3d9ec347a drm/amdgpu: Use explicit VCN instance 0 in SR-IOV init f721f873d3e1 ASoC: nau8821: Fixup nau8821_enable_jack_detect() 88a6bed89eb8 ASoC: nau8821: Avoid unnecessary blocking in IRQ handler e19f5b5d1059 ASoC: nau8821: Consistently clear interrupts before unmasking 1c7ee23dfcd1 smack: /smack/doi: accept previously used values 661d87242dd6 smack: /smack/doi must be > 0 34bacb3cc343 workqueue: Process rescuer work items one-by-one using a cursor c906c9d81fdf workqueue: Only assign rescuer work when really needed c17f947a6fca workqueue: Factor out assign_rescuer_work() e3b15841172e arm64: dts: qcom: sm6115: Add CX_MEM/DBGC GPU regions 4ffe98b89c9c arm64: dts: qcom: sdm845-db845c: specify power for WiFi CH1 c77d1b2f5e51 arm64: dts: qcom: sdm845-db845c: drop CS from SPIO0 1895ad99349e arm64: dts: amlogic: g12: assign the MMC A signal clock 44cd81bbb21b arm64: dts: amlogic: g12: assign the MMC B and C signal clocks 6a47c69a8bba arm64: dts: amlogic: gx: assign the MMC signal clocks 59f3138d11cc arm64: dts: amlogic: axg: assign the MMC signal clocks 716c8ebe0409 arm: dts: lpc32xx: add clocks property to Motor Control PWM device tree node 8461f646f68a ARM: dts: lpc32xx: Set motor PWM #pwm-cells property value to 3 cells 87a1f93986aa powerpc/eeh: fix recursive pci_lock_rescan_remove locking in EEH event handling 06195456c4e4 soc: mediatek: svs: Fix memory leak in svs_enable_debug_write() 993d41578772 soc: qcom: cmd-db: Use devm_memremap() to fix memory leak in cmd_db_dev_probe c43e0a0353e5 powerpc/uaccess: Move barrier_nospec() out of allow_read_{from/write}_user() ac2c85d2a2f6 ARM: dts: allwinner: sun5i-a13-utoo-p66: delete "power-gpios" property dc62cf0814fa arm64: dts: qcom: sdm845-oneplus: Mark l14a regulator as boot-on 1aeb4ed95c3f arm64: dts: qcom: sdm845-oneplus: Don't mark ts supply boot-on 93aaa53ecf20 arm64: dts: qcom: sdm630: fix gpu_speed_bin size e15f1e18cdf4 clk: qcom: Return correct error code in qcom_cc_probe_by_index() 458f7417fae0 arm64: dts: tqma8mpql-mba8mpxl: Fix HDMI CEC pad control settings 063898a3f9ac EDAC/i5400: Fix snprintf() limit calculation in calculate_dimm_size() e37f5e05b5bc EDAC/i5000: Fix snprintf() size calculation in calculate_dimm_size() 8afa17757873 soc: qcom: smem: handle ENOMEM error during probe cff0ef043e16 pstore/ram: fix buffer overflow in persistent_ram_save_old() 8ad5577b2d4a sched/rt: Skip currently executing CPU in rto_next_cpu() 322154c3981e mfd: wm8350-core: Use IRQF_ONESHOT 3db9471b23f5 EDAC/altera: Remove IRQF_ONESHOT adb69cc223d7 scsi: efct: Use IRQF_ONESHOT and default primary handler ddc34a1b8550 bpf: Fix bpf_xdp_store_bytes proto for read-only arg 74081d6c1da1 crypto: hisilicon/trng - support tfms sharing the device 260a9e382996 crypto: hisilicon/trng - modifying the order of header files 9681044e45c9 bpf, sockmap: Fix FIONREAD for sockmap acaf1ea47bbf bpf, sockmap: Fix incorrect copied_seq calculation 7111701a09cc hrtimer: Fix trace oddity 33a30bf9e0d4 crypto: hisilicon/sec2 - support skcipher/aead fallback for hardware queue unavailable 6eae58af0c31 crypto: hisilicon/zip - adjust the way to obtain the req in the callback function ab8b2eaf7add crypto: hisilicon/zip - remove zlib and gzip 70b2f4fc1ede crypto: hisilicon/zip - support deflate algorithm 0aa430f4661d crypto: octeontx - fix dma_free_coherent() size 53e97a309cc3 crypto: cavium - fix dma_free_coherent() size 2b757fea9f4f ARM: VDSO: Patch out __vdso_clock_getres() if unavailable e1767524765e libbpf: Fix OOB read in btf_dump_get_bitfield_value 542bf32cf757 selftests/bpf: veristat: fix printing order in output_stats() 6e6abc72accf crypto: qat - fix warning on adf_pfvf_pf_proto.c abb6e07f46a7 s390/cio: Fix device lifecycle handling in css_alloc_subchannel() 27d7a35b8052 PM: sleep: wakeirq: harden dev_pm_clear_wake_irq() against races 70e8af620210 perf: arm_spe: Properly set hw.state on failures 3deb7b6a2e31 PM: wakeup: Handle empty list in wakeup_sources_walk_start() d6749d0b8ddc Partial revert "x86/xen: fix balloon target initialization for PVH dom0" ef3b74d20f5e x86/xen: make some functions static 31cac6acf77e ublk: Validate SQE128 flag before accessing the cmd 8f3d79abdec0 iomap: fix submission side handling of completion side errors 597ec9e7f5cc md/raid10: fix any_working flag handling in raid10_sync_request 72b2db83705b cpuidle: governors: menu: Always check timers with tick stopped 0add3e6f91aa cpuidle: menu: Cleanup after loadavg removal ca762fa01f64 io_uring/sync: validate passed in offset f2cf475d23b8 ACPICA: Fix NULL pointer dereference in acpi_ev_address_space_dispatch() 9cc9efa703f0 xen/virtio: Don't use grant-dma-ops when running as Dom0 7425453ea16d smb: client: fix potential UAF and double free in smb2_open_file() e3d1fd084319 btrfs: fix block_group_tree dirty_list corruption 46fb7ee9f852 btrfs: qgroup: return correct error when deleting qgroup relation item a51cff9be046 tpm: st33zp24: Fix missing cleanup on get_burstcount() error 948966e546f2 tpm: tpm_i2c_infineon: Fix locality leak on get_burstcount() failure 20ac431e02dc i3c: dw: Initialize spinlock to avoid upsetting lockdep d87268326b27 gfs2: Fix use-after-free in iomap inline data write path 4991b13cc9f1 gfs2: Add metapath_dibh helper 7e3b7a47867a gfs2: Retries missing in gfs2_{rename,exchange} b68be2b8b564 i3c: master: Update hot-join flag only on success 5560116126da fs: add <linux/init_task.h> for 'init_fs' 4b2a0a4e9428 i3c: Move device name assignment after i3c_bus_init e2647d540bea audit: move the compat_xxx_class[] extern declarations to audit_arch.h 979c708e6c9d rcu: Fix rcu_read_unlock() deadloop due to softirq dffd52d0d14e rcu: Remove local_irq_save/restore() in rcu_preempt_deferred_qs_handler() 3ccd035ef99d rcu: Refactor expedited handling check in rcu_read_unlock_special() 6cc7a424a39a rcu/exp: Move expedited kthread worker creation functions above rcutree_prepare_cpu() cb9eaff659dd rcu: s/boost_kthread_mutex/kthread_mutex 7b57ada854b3 hfsplus: return error when node already exists in hfs_bnode_create 2e000d8a5306 auxdisplay: arm-charlcd: fix release_mem_region() size a6a3e4af1099 RDMA/umad: Reject negative data_len in ib_umad_write ffba40b67663 RDMA/siw: Fix potential NULL pointer dereference in header processing (From OE-Core rev: 620a32621b5e7c33609fc6dbff01758303f41189) Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> Signed-off-by: Yoann Congal <yoann.congal@smile.fr> Signed-off-by: Paul Barker <paul@pbarker.dev>	2026-06-26 16:55:54 +01:00
Yoann Congal	ec940f36ea	linux-yocto/6.6: update CVE exclusions (6.6.127) ... Regenerated to fix this warning: WARNING: linux-yocto-6.6.127+git-r0 do_cve_check: Kernel CVE status needs updating: generated for 6.6.123 but kernel is 6.6.127 $ ./meta/recipes-kernel/linux/generate-cve-exclusions.py .../cvelistV5/ 6.6.127 > meta/recipes-kernel/linux/cve-exclusion_6.6.inc Generated at 2026-05-27 12:02:49.732909+00:00 for kernel version 6.6.127 From cvelistV5 cve_2026-05-27_0900Z (From OE-Core rev: d0d02d0f45b4c5108ae648fb16d2a2a0dc1ae0e7) Signed-off-by: Yoann Congal <yoann.congal@smile.fr> Signed-off-by: Paul Barker <paul@pbarker.dev>	2026-06-10 14:35:21 +01:00
Bruce Ashfield	535e57ab6d	linux-yocto/6.6: update to v6.6.127 ... Updating linux-yocto/6.6 to the latest korg -stable release that comprises the following commits: 7a137e9bfa0e Linux 6.6.127 f478b8239d65 net: tunnel: make skb_vlan_inet_prepare() return drop reasons 35ac888bf8ac USB: serial: option: add Telit FN920C04 RNDIS compositions d4534a7f6c92 f2fs: fix to avoid mapping wrong physical block for swapfile 20a8bad29d18 f2fs: fix zoned block device information initialization acc2c97fc000 f2fs: fix to avoid UAF in f2fs_write_end_io() 75e19da068ad f2fs: fix IS_CHECKPOINTED flag inconsistency issue caused by concurrent atomic commit and checkpoint writes eebd72cff518 f2fs: fix out-of-bounds access in sysfs attribute read/write 81193503af1f f2fs: fix to add gc count stat in f2fs_gc_range 0634e8d65099 fbdev: smscufx: properly copy ioctl memory to kernelspace 78daf5984d96 fbdev: rivafb: fix divide error in nv3_arb() f42a2d49c465 LoongArch: Add writecombine support for DMW-based ioremap() 6e5eccdef67e cpuset: Fix missing adaptation for cpuset_is_populated ff37dd18ce77 mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather 2eeca9383efe mm/hugetlb: fix two comments related to huge_pmd_unshare() 51dcf459845f mm/hugetlb: fix hugetlb_pmd_shared() 8c9a1b071051 mm/hugetlb: fix copy_hugetlb_page_range() to use ->pt_share_count 168ee1549fa2 Revert "wireguard: device: enable threaded NAPI" 78e706f9b197 LoongArch: Rework KASAN initialization for PTW-enabled systems f507fc06c7cd LoongArch: Add WriteCombine shadow mapping in KASAN 16f137fb74c1 gpiolib: acpi: Fix gpio count with string references 61e007657bf7 ASoC: fsl_xcvr: fix missing lock in fsl_xcvr_mode_put() f49d2497da14 ASoC: cs42l43: Correct handling of 3-pole jack load detection 329bb274a3a9 platform/x86: panasonic-laptop: Fix sysfs group leak in error path e8f5d1306a3a platform/x86/amd/pmc: Add quirk for MECHREVO Wujie 15X Pro c3876edb0184 ASoC: amd: yc: Add quirk for HP 200 G2a 16 d7d7b93aca64 ASoC: Intel: sof_es8336: Add DMI quirk for Huawei BOD-WXX9 9cf4b9b8ad09 platform/x86: classmate-laptop: Add missing NULL pointer checks e120bae4c56d drm/tegra: hdmi: sor: Fix error: variable ‘j’ set but not used cbd9931e6456 romfs: check sb_set_blocksize() return value 79100c3bc0c4 ASoC: cs35l45: Corrects ASP_TX5 DAPM widget channel 6834804ad484 ALSA: hda/realtek: Add quirk for Inspur S14-G1 b204c5ec24a2 gpio: sprd: Change sprd_gpio lock to raw_spin_lock 4cfb1aed4753 ASoC: amd: yc: Add ASUS ExpertBook PM1503CDA to quirks list 2accd79be906 ALSA: hda/realtek: Fix headset mic for TongFang X6AR55xU b19838402873 bus: fsl-mc: fix use-after-free in driver_override_show() 3118a9c6875b bus: fsl-mc: Replace snprintf and sprintf with sysfs_emit in sysfs show functions 8cb905eca739 PCI: endpoint: Avoid creating sub-groups asynchronously 68c9fdb01af8 PCI: endpoint: Remove unused field in struct pci_epf_group 74e7458537cd scsi: qla2xxx: Fix bsg_done() causing double free (From OE-Core rev: a1a509419ca18a193eff978c97aac5d86a06e6e7) Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> Signed-off-by: Fabien Thomas <fabien.thomas@smile.fr> Signed-off-by: Paul Barker <paul@pbarker.dev>	2026-05-12 21:31:33 +01:00
Bruce Ashfield	9524eaf69d	linux-yocto/6.6: update to v6.6.126 ... Updating linux-yocto/6.6 to the latest korg -stable release that comprises the following commits: 56865d9b7074c Linux 6.6.126 673dafb9a8634 Revert "driver core: enforce device_lock for driver_match_device()" ae462074fde3b Linux 6.6.125 1c04c3a4de8d4 gpio: omap: do not register driver in probe() 455e882192c98 mptcp: fix race in mptcp_pm_nl_flush_addrs_doit() 2b890bc3a5774 selftests: mptcp: pm: ensure unknown flags are ignored 8df235f768cea spi: cadence-quadspi: Implement refcount to handle unbind during busy 665e570600733 vsock/test: verify socket options after setting them a9e757473561d netfilter: nft_set_pipapo: prevent overflow in lookup table allocation 1c4f72fa96993 netfilter: nf_tables: missing objects with no memcg accounting 30405b23b4d5e nfsd: don't ignore the return code of svc_proc_register() 57770faaff8ee net: sfp: Fix quirk for Ubiquiti U-Fiber Instant SFP module dccf7bc011d0e scsi: qla2xxx: Query FW again before proceeding with login aed16d37696f4 scsi: qla2xxx: Free sp in error path to fix system crash 528b2f1027edf scsi: qla2xxx: Delay module unload while fabric scan in progress ccbfcaa4b88e5 scsi: qla2xxx: Allow recovery for tape devices 949010291bb94 scsi: qla2xxx: Validate sp before freeing associated memory 71dee092903ad wifi: rtw88: Fix alignment fault in rtw_core_enable_beacon() df1e20796c9f3 nilfs2: Fix potential block overflow that cause system hang dd1f6c9206385 crypto: virtio - Remove duplicated virtqueue_kick in virtio_crypto_skcipher_crypt_req d6f0d58680868 crypto: virtio - Add spinlock protection with virtqueue notification 6edf8df4bd29f crypto: omap - Allocate OMAP_CRYPTO_FORCE_COPY scatterlists correctly 7dbeeafcb6e50 crypto: octeontx - Fix length check to avoid truncation in ucode_load_store 6dda9f0699054 Bluetooth: btusb: Add USB ID 7392:e611 for Edimax EW-7611UXB adc1796eced46 driver core: enforce device_lock for driver_match_device() 787769c8cc504 smb: server: fix leak of active_num_conn in ksmbd_tcp_new_connection() 5accdc5b7f28a ksmbd: fix infinite loop caused by next_smb2_rcv_hdr_off reset in error paths 4386f6af8aaed smb: client: split cached_fid bitfields to avoid shared-byte RMW races (From OE-Core rev: d5ac249edb6ca794fc72cef09a27c65ffed8879c) Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> Signed-off-by: Fabien Thomas <fabien.thomas@smile.fr> Signed-off-by: Paul Barker <paul@pbarker.dev>	2026-05-12 21:31:33 +01:00
Bruce Ashfield	8676d6c57f	linux-yocto/6.6: update to v6.6.124 ... Updating linux-yocto/6.6 to the latest korg -stable release that comprises the following commits: 1b4ef5214f17e Linux 6.6.124 23897ece6167c ALSA: hda/realtek: Really fix headset mic for TongFang X6AR55xU. d0a6e43d7cccc spi: tegra114: Preserve SPI mode bits in def_command1_reg 126a09f4fcd2b spi: tegra: Fix a memory leak in tegra_slink_probe() dfc6367898077 spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer 712cde8d91688 spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer 53eba2a4a4666 spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one f9cafa63039b8 spi: tegra210-quad: Move curr_xfer read inside spinlock 552e3d8a8bef2 spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer a168f2002b2b4 gve: Correct ethtool rx_dropped calculation d4a81b8ec6398 btrfs: fix racy bitfield write in btrfs_clear_space_info_full() 0e0120214b5dc ASoC: amd: fix memory leak in acp3x pdm dma ops 50b7c7a255858 ipv6: Fix ECMP sibling count mismatch when clearing RTF_ADDRCONF 42c574c1504aa netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() 8c934bafd10b9 hwmon: (occ) Mark occ_init_attribute() as __printf 3f89a4ef6505a drm/mgag200: fix mgag200_bmc_stop_scanout() 9d40a85138568 net: gro: fix outer network offset 00a7512ff7195 net: ethernet: adi: adin1110: Check return value of devm_gpiod_get_optional() in adin1110_check_spi() 17d340e81c4b5 tipc: use kfree_sensitive() for session key material b2c9edad3620f net: don't touch dev->stats in BPF redirect paths 11ba9f0dc8651 macvlan: fix error recovery in macvlan_common_newlink() f89e33c9c37f0 dpaa2-switch: add bounds check for if_id in IRQ handler 3bf519e39b51c net: liquidio: Fix off-by-one error in VF setup_nic_devices() cleanup a0d2389c8cdc1 net: liquidio: Fix off-by-one error in PF setup_nic_devices() cleanup c0ed6c77ec340 net: liquidio: Initialize netdev pointer before queue setup b97415c4362f7 dpaa2-switch: prevent ZERO_SIZE_PTR dereference when num_ifs is zero 13336a6239b9d net/sched: cls_u32: use skb_header_pointer_careful() fcbda653b5a88 net: add skb_header_pointer_careful() helper 3a6d6b332f929 smb/client: fix memory leak in smb2_open_file() f54886e18b856 platform/x86: hp-bioscfg: Skip empty attribute names 9423990550a2a platform/x86: intel_telemetry: Fix PSS event register mask ca9ff71c15bc8 platform/x86: toshiba_haps: Fix memory leaks in add/remove routines bae0565fa975d wifi: mac80211: don't increment crypto_tx_tailroom_needed_cnt twice ccd1843b63f64 wifi: mac80211: correctly check if CSA is active 73b487d44bf4f scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() 29fe5ff92433a ALSA: hda/realtek: Fix headset mic for TongFang X6AR55xU 11ebafffce31e scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() 2f4f008f622d4 wifi: cfg80211: Fix bitrate calculation overflow for HE rates d61171cf09715 regmap: maple: free entry on mas_store_gfp() failure f9b06d28a60b3 spi: hisi-kunpeng: Fixed the wrong debugfs node name in hisi_spi debugfs initialization 254f303cd6663 ASoC: tlv320adcx140: Propagate error codes during probe e2c03961b01a8 ASoC: amd: yc: Fix microphone on ASUS M6500RE f532b29b0e313 nvmet-tcp: fixup hang in nvmet_tcp_listen_data_ready() 7c54d3f5ebbc5 nvme-fc: release admin tagset if init fails 1d395dae332ba ASoC: davinci-evm: Fix reference leak in davinci_evm_probe db1bef623ae32 wifi: mac80211: collect station statistics earlier when disconnect 1fbb409652e3d ring-buffer: Avoid softlockup in ring_buffer_resize() during memory free f63f30607dd8e HID: Apply quirk HID_QUIRK_ALWAYS_POLL to Edifier QR30 (2d99:a101) cff3f619fd1cb HID: i2c-hid: fix potential buffer overflow in i2c_hid_get_report() 68ab5057e690e HID: quirks: Add another Chicony HP 5MP Cameras to hid_ignore_list 383bc94e90661 netfilter: replace -EEXIST with -EBUSY a58fbeda600fe ALSA: hda/realtek: add HP Laptop 15s-eq1xxx mute LED quirk bfcfb9e548bc1 HID: playstation: Center initial joystick axes to prevent spurious events 9edee94001b63 HID: intel-ish-hid: Reset enum_devices_done before enumeration 28b97fcbbf523 btrfs: fix reservation leak in some error paths when inserting inline extent 9ab846d8dd027 HID: multitouch: add MT_QUIRK_STICKY_FINGERS to MT_CLS_VTL 5b25505b52dff HID: intel-ish-hid: Update ishtp bus match to support device ID table 07df5ff4f6490 smb/server: fix refcount leak in parse_durable_handle_context() 73ede654d9daa LoongArch: Enable exception fixup for specific ADE subcode 2456fde2b1377 smb/server: fix refcount leak in smb2_open() 5fbdf95d2575e LoongArch: Set correct protection_map[] for VM_NONE/VM_SHARED 04dd114b682a4 smb/server: call ksmbd_session_rpc_close() on error path in create_smb2_pipe() b03415955ed31 block,bfq: fix aux stat accumulation destination 8365785e59ea4 net: usb: sr9700: support devices with virtual driver CD b167312390fdd wifi: wlcore: ensure skb headroom before skb_push ffe1e19c3b0e5 wifi: mac80211: ocb: skip rx_no_sta when interface is not joined d75245dad5cc6 tracing: Fix ftrace event field alignments df54838ab6182 gve: Fix stats report corruption on queue count change a8adf1ceee4e1 KVM: selftests: Add -U_FORTIFY_SOURCE to avoid some unpredictable test failures 46c93903e4c19 binderfs: fix ida_alloc_max() upper bound ebb6aa6928d5c binder: fix BR_FROZEN_REPLY error log 9f6022b2573ae sched/rt: Fix race in push_rt_task 64c0b7e229375 ublk: fix deadlock when reading partition table c3db89ea1ed3d hfsplus: fix slab-out-of-bounds read in hfsplus_uni2asc() df524a68d9021 netfilter: nft_set_pipapo: clamp maximum map bucket size to INT_MAX b61f9b2fcf181 KVM: Don't clobber irqfd routing type when deassigning irqfd d2bddc2da2b3b Revert "drm/amd: Check if ASPM is enabled from PCIe subsystem" 7f7467be748eb ARM: 9468/1: fix memset64() on big-endian 4f9f1fdc0ebdf rbd: check for EOD after exclusive lock is ensured to be held 071159ff5c0bf pmdomain: imx8m-blk-ctrl: fix out-of-range access of bc->domains 7aa0c2bb0771a pmdomain: imx8mp-blk-ctrl: Keep usb phy power domain on for system wakeup e2e1c77319d52 pmdomain: imx: gpcv2: Fix the imx8mm gpu hang due to wrong adb400 reset 1267af5b2033d pmdomain: imx8mp-blk-ctrl: Keep gpc power domain on for system wakeup c28dcc1cb4fda pmdomain: qcom: rpmpd: fix off-by-one error in clamping to the highest state 302651ccef698 platform/x86: intel_telemetry: Fix swapped arrays in PSS output c56b4c84b3b21 x86/kfence: fix booting on 32bit non-PAE systems dca1a6ba0da9f nvmet-tcp: add bounds checks in nvmet_tcp_build_pdu_iovec (From OE-Core rev: 0844b7e2205b530febbc7a9b6640e3e30d3c8dd1) Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> Signed-off-by: Fabien Thomas <fabien.thomas@smile.fr> Signed-off-by: Paul Barker <paul@pbarker.dev>	2026-05-12 21:31:33 +01:00
Daniel Turull	7488cae173	lttng-ust: upgrade 2.13.8 -> 2.13.10 ... Changelog for lttng-ust: 2.13.8 -> 2.13.10 ============================================================ 2026-02-13 lttng-ust 2.13.10 * Fix: ustctl: sigbus handling: statement with no effect 2025-04-14 (National Gardening Day) lttng-ust 2.13.9 * Fix: Use UATOMIC_HAS_ATOMIC_{BYTE,SHORT} for counter atomics * Fix: lttng-ust-tp regex warnings * lttng-ust-java: Load lttng-ust-context-jni before other JNI libraries * doc/examples: set minimal CMake version to 3.5.0 * Fix: Update get_mempolicy check to handle EPERM * Fix: Correct numa_available return code checks * Fix: test_benchmark: do not match CPU(s) scaling MHz: * Tests: Fix abi conflict test when building with clang * Fix: Build examples when rpath is stripped from in-build-tree libs * ust-fd: Add close_range declaration * docs: Correct GitHub URLs in lttng-ust.3 * fix: handle EINTR correctly in get_cpu_mask_from_sysfs (From OE-Core rev: 90f529115ed175652d2ab8c538d1c213550056f8) Signed-off-by: Daniel Turull <daniel.turull@ericsson.com> Signed-off-by: Yoann Congal <yoann.congal@smile.fr> Signed-off-by: Paul Barker <paul@pbarker.dev>	2026-05-04 13:57:33 +01:00
Martin Jansa	0092522376	dtc: backport fix for build with glibc-2.43 ... glibc-2.43 isn't used in OE builds yet, but this fixes dtc-native: https://errors.yoctoproject.org/Errors/Details/903983/ ../sources/dtc-1.7.2/libfdt/fdt_overlay.c: In function ‘overlay_fixup_phandle’: ../sources/dtc-1.7.2/libfdt/fdt_overlay.c:424:21: error: assignment discards ‘const’ qualifier from pointer target type [-Werror=discarded-qualifiers] 424 | sep = memchr(fixup_str, ':', fixup_len); | ^ ../sources/dtc-1.7.2/libfdt/fdt_overlay.c:434:21: error: assignment discards ‘const’ qualifier from pointer target type [-Werror=discarded-qualifiers] 434 | sep = memchr(name, ':', fixup_len); | ^ cc1: all warnings being treated as errors (From OE-Core rev: 7e9f4ab3d1839cef771675091e5ce49eccc39169) Signed-off-by: Martin Jansa <martin.jansa@gmail.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 28552a7b6c94060c7ab3899619ab8afb74124d02) Signed-off-by: Yoann Congal <yoann.congal@smile.fr> Signed-off-by: Paul Barker <paul@pbarker.dev>	2026-05-04 13:57:32 +01:00
João Marcos Costa (Schneider Electric)	75ffda84c1	linux-yocto/6.6: update CVE exclusions (6.6.123) ... This new version of cve-exclusion_6.6.inc was generated with oe-core's latest version of the generate-cve-exclusions.py. Regarding the database used and how this file was generated: Generated at 2026-04-03 09:30:32.247568+00:00 for kernel version 6.6.123 From cvelistV5 cve_2026-04-03_0700Z The backporting of the generate-cve-exclusions.py script from master to Scarthgap is handled in a different patch. (From OE-Core rev: 4bdf5345c32c9e294a64d61af49ce2adabdaf1db) Signed-off-by: João Marcos Costa (Schneider Electric) <joaomarcos.costa@bootlin.com> Signed-off-by: Yoann Congal <yoann.congal@smile.fr> Signed-off-by: Paul Barker <paul@pbarker.dev>	2026-05-04 13:57:32 +01:00
Bruce Ashfield	7a3c441dc7	kernel-devsrc: make tools/Build optional ... kernel-devsrc fails to copy files for v6.12+ as the following upstream commit has removed the file tools/build/Build: commit ea974028a049f2cea4bb6be963ee3e3844a03f6d Author: Brian Norris <briannorris@chromium.org> Date: Mon Jul 15 13:32:43 2024 -0700 tools build: Avoid circular .fixdep-in.o.cmd issues We make the failed copy of this file non-fatal to support all kernel versions. (From OE-Core rev: 005b57b805228f2793265d6d1d1a2f52342935b3) Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 13e16e5be25f379211c7329fa1462464174c0f2d) Suggested-by: Calvin Owens <calvin@wbinvd.org> Signed-off-by: Yoann Congal <yoann.congal@smile.fr> Signed-off-by: Paul Barker <paul@pbarker.dev>	2026-05-04 13:57:32 +01:00
João Marcos Costa (Schneider Electric)	3b059913f4	linux/generate-cve-exclusions: backport script from master branch ... The current version of this script in Scarthgap is outdated, since it still uses data from linux_kernel_cves. This repository was archived in 2024. To avoid any risks of conflicts, and/or a patch series longer than it needs to be, I copied the generate-cve-exclusions.py script from oe-core's master branch (rev. "e954a94b5b528b2430e8da331107d7d58287f89b") as-is. (From OE-Core rev: 66a13f93403533b95ed27eed24931aa310f8ce79) Signed-off-by: João Marcos Costa (Schneider Electric) <joaomarcos.costa@bootlin.com> Signed-off-by: Yoann Congal <yoann.congal@smile.fr> Signed-off-by: Paul Barker <paul@pbarker.dev>	2026-05-04 13:57:31 +01:00
Ankur Tyagi	78193f7a83	wireless-regdb: upgrade 2025.10.07 -> 2026.02.04 ... (From OE-Core rev: a26cdcc31b97b5eed545b9859bee8b5c098d394b) Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit f86c38b13121788fe6a654df04800d24b2b28b61) Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com> [YC: logs: https://git.kernel.org/pub/scm/linux/kernel/git/wens/wireless-regdb.git/log/?h=master-2026-02-04] Signed-off-by: Yoann Congal <yoann.congal@smile.fr> Signed-off-by: Paul Barker <paul@pbarker.dev>	2026-03-25 17:34:13 +00:00
Bruce Ashfield	7ba05c3301	linux-yocto/6.6: update to v6.6.123 ... Updating linux-yocto/6.6 to the latest korg -stable release that comprises the following commits: c56aaf1a85ae9 Linux 6.6.123 7e0d31c47b8a9 bpf/selftests: test_select_reuseport_kern: Remove unused header 5a530c8ead06e Revert "net: Remove conditional threaded-NAPI wakeup based on task state." 507692c056363 Revert "net: Allow to use SMP threads for backlog NAPI." dd4c7800a905d drm/amd/display: use udelay rather than fsleep 572777a258c04 ptr_ring: do not block hard interrupts in ptr_ring_resize_multiple() 1891abe832cbf ksmbd: fix recursive locking in RPC handle list access b6978c565ce33 xsk: Fix race condition in AF_XDP generic RX path c74e2dbb53168 drm/amdgpu: fix NULL pointer dereference in amdgpu_gmc_filter_faults_remove a3f75ee1a436e drm/amdkfd: Don't use sw fault filter if retry cam enabled 21bad75012f76 pinctrl: qcom: sm8350-lpass-lpi: Merge with SC7280 to fix I2S2 and SWR TX pins 38a0f2215aee4 mptcp: avoid dup SUB_CLOSED events after disconnect 73408fa92742b writeback: fix 100% CPU usage when dirtytime_expire_interval is 0 d84a4836dc246 perf: sched: Fix perf crash with new is_user_task() helper e57bda247f29c drm/msm/a6xx: fix bogus hwcg register updates e228ad913b0d2 pinctrl: lpass-lpi: implement .get_direction() for the GPIO driver daf8a4eb70ff4 ALSA: usb-audio: Fix missing unlock at error path of maxpacksize check db24153fc77a8 net/sched: act_ife: convert comma to semicolon 1d14f86e813f6 btrfs: prevent use-after-free on page private data in btrfs_subpage_clear_uptodate() 9d0ed508a9e2a drm/radeon: delete radeon_fence_process in is_signaled, no deadlock e26235840fd96 team: Move team device type change at the end of team_port_add 27ca8004ba93a wifi: ath11k: add srng->lock for ath11k_hal_srng_* in monitor mode fb2b9a1e85bdd wifi: mac80211: move TDLS work to wiphy work 6b615a8fb3af0 ksmbd: Fix race condition in RPC handle list access d1bda2ab0cf95 drm/amdgpu: Replace Mutex with Spinlock for RLCG register access to avoid Priority Inversion in SRIOV 4d1e9a4a450aa ksmbd: smbd: fix dma_unmap_sg() nents 143980bd2be75 mei: trace: treat reg parameter as string ce820dd4e6e2d arm64/fpsimd: signal: Fix restoration of SVE context 40b73f0519d3c arm64/fpsimd: signal: Consistently read FPSIMD context 15110f9cdc877 arm64/fpsimd: signal: Mandate SVE payload for streaming-mode state e527e695fdfc1 mm/kfence: randomize the freelist on initialization 38c32baf6d2c7 gpio: rockchip: Stop calling pinctrl for set_direction e618b52a1589a drm/amdgpu/gfx11: fix wptr reset in KGQ init c61c93218956c drm/amdgpu/gfx10: fix wptr reset in KGQ init cbf4d79e5c619 drm/amdgpu/soc21: fix xclk for APUs 9a15d3fdc22d4 drm/imx/tve: fix probe device leak cdaf07ec0b698 scripts: generate_rust_analyzer: Add compiler_builtins -> core dep 884b2590ffcc7 flex_proportions: make fprop_new_period() hardirq safe 4bed436cdef70 selftests: mptcp: join: fix local endp not being tracked ba58cd70a4223 selftests: mptcp: check subflow errors in close events 8b5061c3400a7 selftests: mptcp: check no dup close events after error d761d42be060b mptcp: only reset subflow errors when propagated 510a16f1c5c16 efivarfs: fix error propagation in efivar_entry_get() a9c96f113a5f3 scsi: qla2xxx: edif: Fix dma_free_coherent() size 122751f43f930 gpio: pca953x: mask interrupts in irq shutdown c2fc0aae3cf42 ASoC: amd: yc: Add DMI quirk for Acer TravelMate P216-41-TCO 441d129ba899e scsi: be2iscsi: Fix a memory leak in beiscsi_boot_get_sinfo() 28a1e5e97c899 ASoC: fsl: imx-card: Do not force slot width to sample width 018e9e9cae7b3 rust: kbuild: give `--config-path` to `rustfmt` in `.rsi` target 929e568a83da5 riscv: compat: fix COMPAT_UTS_MACHINE definition 8519c9231ce23 pinctrl: meson: mark the GPIO controller as sleeping be1cebabb3cd2 dma/pool: distinguish between missing and exhausted atomic pools 0368794dc28a1 gpiolib: acpi: use BIT_ULL() for u64 mask in address space handler 2f45c46661911 ASoC: Intel: sof_es8336: fix headphone GPIO logic inversion ac3a2ea06f3c8 scsi: firewire: sbp-target: Fix overflow in sbp_make_tpg() 0d434670eb0bb net/mlx5e: Skip ESN replay window setup for IPsec crypto offload e43fdee29a96f net: bridge: fix static key check 546eba0b10989 nfc: nci: Fix race between rfkill and nci_unregister_device(). 970526dde3686 net/mlx5e: Account for netdev stats in ndo_get_stats64 e014f11f741be net/mlx5e: Report rx_discards_phy via rx_dropped 62e1d8920f692 net/mlx5e: TC, delete flows only for existing peers fd30aa82df73b ice: stop counting UDP csum mismatch as rx_errors f8d002626d434 nfc: llcp: Fix memleak in nfc_llcp_send_ui_frame(). d448bf96889f1 rocker: fix memory leak in rocker_world_port_post_fini() 2a0522f564acd net: wwan: t7xx: fix potential skb->frags overflow in RX path 96595848c6fd6 ipv6: use the right ifindex when replying to icmpv6 from localhost 509b526d64290 net: mvpp2: cls: Fix memory leak in mvpp2_ethtool_cls_rule_ins() 8c0be3277e7ae bonding: annotate data-races around slave->last_rx 5058d3f8f1720 octeon_ep: Fix memory leak in octep_device_setup() 724c9d346a3ac net: bcmasp: fix early exit leak with fixed phy 923379f1d7e3a can: gs_usb: gs_usb_receive_bulk_callback(): fix error message dc5d1eb935be0 net/mlx5: Fix memory leak in esw_acl_ingress_lgcy_setup() 186d147cf7689 Bluetooth: hci_uart: fix null-ptr-deref in hci_uart_write_work 2cf6f68313dcc Linux 6.6.122 96aa13ff68ef5 net: phy: fix phy_uses_state_machine() 043aa41c43f8c net: phy: allow MDIO bus PM ops to start/stop state machine for phylink-controlled PHY b5a933535cc34 net: phy: move phy_link_change() prior to mdio_bus_phy_may_suspend() 1e2848bda819a x86/fpu: Clear XSTATE_BV[i] in guest XSAVE state whenever XFD[i]=1 8db5de0cf02fc wifi: ath11k: fix RCU stall while reaping monitor destination ring 8d2979b9bb1be drm/amdgpu: csa unmap use uninterruptible lock 7d52c592cf53f fs/ntfs3: Initialize allocated memory before use 1067361a1cc6a ksmbd: fix use-after-free in ksmbd_session_rpc_open 17fbad93879e8 usbnet: Fix using smp_processor_id() in preemptible code warnings 8120e420013d9 NFSD: fix race between nfsd registration and exports_proc d89f3037d54d3 nvme: fix PCIe subsystem reset controller state transition 7dfb39b0186dd nvme-pci: do not directly handle subsys reset fallout ca88419cf0623 nvme-fc: rename free_ctrl callback to match name pattern f83824b023c75 ASoC: codecs: wsa883x: fix unnecessary initialisation 0ded4420b54e9 ASoC: codecs: wsa881x: fix unnecessary initialisation ea2474ea2eef4 ASoC: codecs: wsa881x: Drop unused version readout ebae26dd15140 phy: rockchip: inno-usb2: Fix a double free bug in rockchip_usb2phy_probe() 479fab9aeade1 phy: phy-rockchip-inno-usb2: Use dev_err_probe() in the probe path d6705bcc5fe7c mm: kmsan: fix poisoning of high-order non-compound pages 4a04ff9cd816e mm/page_alloc: prevent pcp corruption with SMP=n 93464499df42b dmaengine: stm32: dmamux: fix OF node leak on route allocation failure 1a179ac01ff39 dmaengine: stm32: dmamux: fix device leak on route allocation 041863dd410bd iio: adc: exynos_adc: fix OF populate on driver rebind 91a756d22f048 ALSA: scarlett2: Fix buffer overflow in config retrieval 6b20590c43538 arm64: dts: rockchip: remove redundant max-link-speed from nanopi-r4s fb3c1f24f3b7e mm/rmap: fix two comments related to huge_pmd_unshare() 522e580524106 iio: core: add separate lockdep class for info_exist_lock 31c3c9f3b1b9b iio: core: add missing mutex_destroy in iio_dev_release() 5596ce564a8c3 mm/damon/sysfs-scheme: cleanup quotas subdirs on scheme dir setup failure e9711bd0e6481 mm/damon/sysfs-scheme: cleanup access_pattern subdirs on scheme dir setup failure adec5e1f9c99f can: esd_usb: esd_usb_read_bulk_callback(): fix URB memory leak 4d3c2a1d4c7c3 bridge: mcast: Fix use-after-free during router port configuration 8670b53b8ee91 bpf: Do not let BPF test infra emit invalid GSO types to stack 1da48da947d0c selftests/bpf: Check for timeout in perf_link test 526394af4e8ad migrate: correct lock ordering for hugetlb file folios 59ff56992bba2 can: usb_8dev: usb_8dev_read_bulk_callback(): fix URB memory leak 179f6f0cf5ae4 can: mcba_usb: mcba_usb_read_bulk_callback(): fix URB memory leak 7c308f7530bff can: kvaser_usb: kvaser_usb_read_bulk_callback(): fix URB memory leak e9410fdd4d5f7 can: ems_usb: ems_usb_read_bulk_callback(): fix URB memory leak 1b32339156035 irqchip/gic-v3-its: Avoid truncating memory addresses dd40d94ffd7c8 perf/x86/intel: Do not enable BTS for guests cad7003d951e8 pmdomain: imx8m-blk-ctrl: Remove separate rst and clk mask for 8mq vpu 6384f7851838f platform/x86: hp-bioscfg: Fix automatic module loading bd8955337e376 netrom: fix double-free in nr_route_frame() 43f233eb6e7b9 uacce: ensure safe queue release with state management 4c042bc71474d uacce: implement mremap in uacce_vm_ops to return -EPERM 9ab05cdcac354 uacce: fix isolate sysfs check condition d9031575a2f8a uacce: fix cdev handling in the cleanup path bf7785434b5d0 intel_th: fix device leak on output open() 98ecbfb2598c9 tracing: Fix crash on synthetic stacktrace field usage 2ddc09f6a0a22 slimbus: core: fix device reference leak on report present dd58835fba5d6 slimbus: core: fix runtime PM imbalance on report present d2846f8a89fd6 octeontx2: Fix otx2_dma_map_page() error return code 8557bdd9af8dd arm64: Set __nocfi on swsusp_arch_resume() 19b2c3f3ca1b4 arm64/fpsimd: signal: Allocate SSVE storage when restoring ZA 7761d7801f40e wifi: rsi: Fix memory corruption due to not set vif driver data size 5d0ab96350e06 wifi: mwifiex: Fix a loop in mwifiex_update_ampdu_rxwinsize() 36e0bc5e8b282 wifi: ath12k: fix dma_free_coherent() pointer 1928851334ecf wifi: ath10k: fix dma_free_coherent() pointer f2677d6e2bbc5 mmc: sdhci-of-dwcmshc: Prevent illegal clock reduction in HS200/HS400 mode bcb72b6a39e90 mmc: rtsx_pci_sdmmc: implement sdmmc_card_busy function 7bff0156d13f0 ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free() a8c42d11b0526 ALSA: ctxfi: Fix potential OOB access in audio mixer handling cbe409f68380a iio: dac: ad5686: add AD5695R to ad5686_chip_info_tbl c2d6e00829cbf iio: chemical: scd4x: fix reported channel endianness 9795fe80976f8 iio: adc: at91-sama5d2_adc: Fix potential use-after-free in sama5d2_adc driver 8271e1860c7cd iio: adc: ad9467: fix ad9434 vref mask 9e77ef924fe31 iio: accel: iis328dq: fix gain values c0ebc3d8ad6b5 of: platform: Use default match table for /firmware f4c270975fe1d of: fix reference count leak in of_alias_scan() 2757f7748ce2d leds: led-class: Only Add LED to leds_list when it is fully ready 93dfcc59b2bf3 x86: make page fault handling disable interrupts properly 03710cebfc0bc net/sched: act_ife: avoid possible NULL deref d9d5f222558b4 vsock/virtio: cap TX credit to local buffer size 17c9b158bc4d7 vsock/test: fix seqpacket message bounds test 02f9af192b98d vsock/virtio: fix potential underflow in virtio_transport_get_credit() c70e99dd37163 net: openvswitch: fix data race in ovs_vport_get_upcall_stats 77c6aa2c388e9 octeontx2-af: Fix error handling 4ad32b1e0ca42 net: dsa: fix off-by-one in maximum bridge ID determination 0efee0b992f28 bonding: provide a net pointer to __skb_flow_dissect() a142ae1c56131 selftests: net: amt: wait longer for connection before sending packets e206fb415db36 be2net: Fix NULL pointer dereference in be_cmd_get_mac_from_list baafbbc23d421 drm/amd/pm: Workaround SI powertune issue on Radeon 430 (v2) 2c1fc0547a870 drm/amd/pm: Don't clear SI SMC table when setting power limit c378cdae46369 usbnet: limit max_mtu based on device's hard_mtu fad8f4ff7928f ipv6: annotate data-race in ndisc_router_discovery() fc8ba17fd3337 mISDN: annotate data-race around dev->work bfb030a377e05 net: hns3: fix the HCLGE_FD_AD_NXT_KEY error setting issue 3a1601756a905 net: hns3: fix wrong GENMASK() for HCLGE_FD_AD_COUNTER_NUM_M 42e16254f1d3e be2net: fix data race in be_get_new_eqd a111d1fb91ae3 net: hns3: fix data race in hns3_fetch_stats f1f9cfd2f46a7 netdevsim: fix a race issue related to the operation on bpf_bound_progs list 7f523dd499b72 ALSA: usb: Increase volume range that triggers a warning 408bfa8d70f79 scsi: qla2xxx: Sanitize payload size to prevent member overflow 9fdc6f28d5e81 scsi: core: Wake up the error handler when final completions race against each other 0df7ecb393db7 riscv: clocksource: Fix stimecmp update hazard on RV32 1b47e6d3bc026 kconfig: fix static linking of nconf 24f31be6ad705 regmap: Fix race condition in hwspinlock irqsave routine 417cdfd9b9f98 spi: spi-sprd-adi: Fix double free in probe error path 1a27bd3c6949f spi: sprd-adi: switch to use spi_alloc_host() 74634f4a64897 spi: sprd: adi: Use devm_register_restart_handler() aa79a5a959c7c interconnect: debugfs: initialize src_node and dst_node to empty strings ce8d8a3368128 iio: adc: ad7280a: handle spi_setup() errors in probe() 7673167fac932 iio: imu: st_lsm6dsx: fix iio_chan_spec for sensors without event detection 85eb83694a91c io_uring/io-wq: check IO_WQ_BIT_EXIT inside work run loop eb5ff1025c921 platform/x86: hp-bioscfg: Fix kernel panic in GET_INSTANCE_ID macro 29917c80aa96a platform/x86: hp-bioscfg: Fix kobject warnings for empty attribute names 6484f43740cc9 comedi: Fix getting range information for subdevices 16 to 255 bf843b0624d89 x86/kfence: avoid writing L1TF-vulnerable PTEs 8adc31a561a55 arm64: dts: rockchip: Fix voltage threshold for volume keys for Pinephone Pro 929229fdd116a arm64: dts: rockchip: remove dangerous max-link-speed from helios64 f86264ec0e2b1 scsi: xen: scsiback: Fix potential memory leak in scsiback_remove() 156284ab2f641 scsi: storvsc: Process unsupported MODE_SENSE_10 21937a189daa8 Input: i8042 - add quirk for ASUS Zenbook UX425QA_UM425QA dcecb4269dd4b Input: i8042 - add quirks for MECHREVO Wujie 15X Pro 93cbf6d80da2a Revert "nfc/nci: Add the inconsistency check between the input data length and count" 9367b4709b528 w1: fix redundant counter decrement in w1_attach_slave_device() 6a5820ecfa5a7 w1: therm: Fix off-by-one buffer overflow in alarms_store aaff8f3a35c9d comedi: dmm32at: serialize use of paged registers dce0865a5828a serial: 8250_pci: Fix broken RS485 for F81504/508/512 b0a9609283a5c crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec 93b8635974fb0 net/sched: qfq: Use cl_is_active to determine whether class is active in qfq_rm_from_ag 0686bedfed341 net/sched: Enforce that teql can only be used as root qdisc fcf8cd4654790 octeontx2: cn10k: fix RX flowid TCAM mask handling 04ba6de6eff61 ipvlan: Make the addrs_lock be per port 68e92085427c8 l2tp: avoid one data-race in l2tp_tunnel_del_work() 0bb986d83922c veth: fix data race in veth_get_ethtool_stats 1cc98b8887cab fou: Don't allow 0 for FOU_ATTR_IPPROTO. 4170ec351e456 tools: ynl: Specify --no-line-number in ynl-regen.sh. f87b9b7a618c8 gue: Fix skb memleak with inner IP protocol 0. 8a8a5a43fef4e amd-xgbe: avoid misleading per-packet error log e7e81abbcc562 sctp: move SCTP_CMD_ASSOC_SHKEY right after SCTP_CMD_PEER_INIT ce4352057fc5a can: gs_usb: gs_usb_receive_bulk_callback(): unanchor URL on usb_submit_urb() error 4b37dc63957cb selftests: net: fib-onlink-tests: Convert to use namespaces by default 8ba4cf99c61cd selftests/net: convert fib-onlink-tests.sh to run it in unique namespace 80c881e53a4fa bonding: limit BOND_MODE_8023AD to Ethernet devices b66dfde203fb4 net: usb: dm9601: remove broken SR9700 support b36bbac746ee6 igc: fix race condition in TX timestamp read for register 0 9a151fd0bd7d9 ice: Avoid detrimental cleanup for bond during interface stop a6a0dd00178ea ice: initialize ring_stats->syncp e635e5b7eac83 ata: libata: Print features also for ATAPI devices 02fc7c01a35d3 ata: libata: Call ata_dev_config_lpm() for ATAPI devices 1c6714932c3df ata: libata-core: Introduce ata_dev_config_lpm() 557b62028c077 ata: libata: Add cpr_log to ata_dev_print_features() early return e2d46e0b76cab pmdomain: qcom: rpmhpd: Add MXC to SC8280XP f0070413c6580 dt-bindings: power: qcom,rpmpd: Add SC8280XP_MXC_AO 230c9ed464eda dt-bindings: power: qcom-rpmpd: split RPMh domains definitions 564752b42d137 dt-bindings: power: qcom,rpmpd: add Turbo L5 corner 64a0b97df8366 dt-bindings: power: qcom,rpmpd: document the SM8750 RPMh Power Domains 658e1879ebe68 dt-bindings: power: rpmpd: Update part number to X1E80100 ce649f43c4936 dt-bindings: power: qcom,rpmpd: document the SM8650 RPMh Power Domains 25ebc01125e60 dt-bindings: power: rpmpd: Add MSM8917, MSM8937 and QM215 f33305f0925be dt-bindings: power: qcom,rpmpd: Add SM7150 ce5ee09c0aeea btrfs: fix missing fields in superblock backup with BLOCK_GROUP_TREE 774089dc718f5 Drivers: hv: Always do Hyper-V panic notification in hv_kmsg_dump() fe11f976dd0ad hyperv-tlfs: Change prefix of generic HV_REGISTER_* MSRs to HV_MSR_* 11536f3371f4a arm64: dts: qcom: sc8280xp: Add missing VDD_MXC links 8d9f22c570ba3 testptp: Add option to open PHC in readonly mode 4f3c8c7f4e1bd selftest/ptp: update ptp selftest to exercise the gettimex options 59ac47a0275fc ptp: add testptp mask test 4fbfc6bca4e37 ptp: Add PHC file mode checks. Allow RO adjtime() without FMODE_WRITE. ba3a97c832725 posix-clock: Store file pointer in struct posix_clock_context ea2d9bfd422e9 Fix memory leak in posix_clock_open() 221e4d1e29bb4 posix-clock: introduce posix_clock_context concept 2c590e4b3d4cc io_uring: move local task_work in exit cancel loop 99da896614d17 btrfs: fix deadlock in wait_current_trans() due to ignored transaction type 696ebf74738b9 dmaengine: ti: k3-udma: fix device leak on udma lookup 6fdf168f57e33 dmaengine: ti: dma-crossbar: fix device leak on am335x route allocation 8df7c3e6d1e5e dmaengine: ti: dma-crossbar: fix device leak on dra7x route allocation 4e45ae701b816 dmaengine: sh: rz-dmac: Fix rz_dmac_terminate_all() 6bf4ef078fd11 dmaengine: qcom: gpi: Fix memory leak in gpi_peripheral_config() 9fba97baa520c dmaengine: lpc18xx-dmamux: fix device leak on route allocation c81ea0222eaaa dmaengine: idxd: fix device leaks on compat bind and unbind db7c79c1bbfb1 dmaengine: dw: dmamux: fix OF node leak on route allocation failure c80ca7bdff158 dmaengine: bcm-sba-raid: fix device leak on probe 987c71671367f dmaengine: at_hdmac: fix device leak on of_dma_xlate() 2838cb6133ac2 dmaengine: apple-admac: Add "apple,t8103-admac" compatible 1f70af89b0893 drm/vmwgfx: Fix an error return check in vmw_compat_shader_add() bc0b17bdba383 drm/panel-simple: fix connector type for DataImage SCF0700C48GGU18 panel cb4c9fc5e79a7 drm/nouveau/disp/nv50-: Set lock_core in curs507a_prepare 3dc1a40180264 drm/amdkfd: fix a memory leak in device_queue_manager_init() a4218ac0bb8e7 drm/amd: Clean up kfd node on surprise disconnect d9a82256a4c7e drm/amd/display: Bump the HDMI clock to 340MHz 1d8f4d24fc1b3 LoongArch: Fix PMU counter allocation for mixed-type event groups 43964644348f6 mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure 6ef36b329bbe2 mm/page_alloc: make percpu_pagelist_high_fraction reads lock-free b73f2834e1bc6 x86/resctrl: Fix memory bandwidth counter width for Hygon a78dca14fb2b0 x86/resctrl: Add missing resctrl initialization for Hygon 71c5bc6720b60 tcpm: allow looking for role_sw device in the main node bfefcc78a8ec5 EDAC/i3200: Fix a resource leak in i3200_probe1() dc2365df328a9 EDAC/x38: Fix a resource leak in x38_probe1() ac92563601513 hrtimer: Fix softirq base check in update_needs_ipi() 0b06cde92f2f9 ext4: fix iloc.bh leak in ext4_xattr_inode_update_ref ed61badfc2bc8 nvme-pci: disable secondary temp for Wodposit WPBSNM8 3f6a36c9dc73d USB: serial: ftdi_sio: add support for PICAXE AXE027 cable f890044ad2959 USB: serial: option: add Telit LE910 MBIM composition 384084a094c74 USB: OHCI/UHCI: Add soft dependencies on ehci_platform 93f21786487cd usb: core: add USB_QUIRK_NO_BOS for devices that hang on BOS descriptor 928e7d022d167 usb: dwc3: Check for USB4 IP_NAME ee82bc9f1df97 phy: tegra: xusb: Explicitly configure HS_DISCON_LEVEL to 0x7 9e0d336e71c47 phy: rockchip: inno-usb2: fix disconnection in gadget mode 16a6a73087fb4 phy: freescale: imx8m-pcie: assert phy reset during power on 942381794fc31 phy: rockchip: inno-usb2: fix communication disruption in gadget mode 9716e427489f6 x86/kaslr: Recognize all ZONE_DEVICE users as physaddr consumers 809a437e27a3b net: can: j1939: j1939_xtp_rx_rts_session_active(): deactivate session upon receiving the second rts 58d236065ba65 can: ctucanfd: fix SSP_SRC in cases when bit-rate is higher than 1 MBit. f905bcfa971ed can: gs_usb: gs_usb_receive_bulk_callback(): fix URB memory leak 1a3286edf4d48 null_blk: fix kmemleak by releasing references to fault configfs items 2de6d3348937f ALSA: pcm: Improve the fix for race of buffer access at PCM OSS layer 8fab42516eb3c scsi: core: Fix error handler encryption support 60e450eec5d63 drm/amd/display: Check dce_hwseq before dereferencing it d64557b61c1dd HID: usbhid: paper over wrong bNumDescriptor field d66d8ad31057d i2c: qcom-geni: make sure I2C hub controllers can't use SE DMA 88a9483f093bb dmaengine: omap-dma: fix dma_pool resource leak in error paths 2a7ddafac3820 phy: broadcom: ns-usb3: Fix Wvoid-pointer-to-enum-cast warning (again) 76b870fdaad82 phy: stm32-usphyc: Fix off by one in probe() beba460a29915 phy: qcom-qusb2: Fix NULL pointer dereference on early suspend 8151ecaaf08e3 phy: drop probe registration printks 7070ed66aba3b phy: phy-snps-eusb2: refactor constructs names 0b347b180ad5e phy: fsl-imx8mq-usb: Clear the PCS_TX_SWING_FULL field before using it 0fd2001907fea dmaengine: xilinx_dma: Fix uninitialized addr_width when "xlnx,addrwidth" property is missing 59cb421b0902f dmaengine: tegra-adma: Fix use-after-free df8a131a41ff6 dmaengine: xilinx: xdma: Fix regmap max_register 7602a67114cd5 mm, kfence: describe @slab parameter in __kfence_obj_info() f332d75388ea5 textsearch: describe @list member in ts_ops search 805f1c634817a ASoC: tlv320adcx140: fix word length 659939d08e5f7 ASoC: tlv320adcx140: fix null pointer 0a234660dc70c net/sched: sch_qfq: do not free existing class in qfq_change_class() a3f895d4494a8 selftests: drv-net: fix RPS mask handling for high CPU numbers 9356b69d03d0f ipv6: Fix use-after-free in inet6_addr_del(). 82c9039c8ebb7 net: hv_netvsc: reject RSS hash key programming without RX indirection table 58208907c4044 btrfs: fix memory leaks in create_space_info() error paths 0bd151ce4200c btrfs: introduce btrfs_space_info sub-group 42c8d48bf3abe btrfs: factor out check_removing_space_info() from btrfs_free_block_groups() 34d5cd41418af btrfs: factor out init_space_info() from create_space_info() 1fe74715ccb4e btrfs: store fs_info in space_info 6126877f90fe7 net/mlx5e: Restore destroying state bit after profile cleanup 147b9a2fc7a35 vsock/test: add a final full barrier after run all tests 06fe0801396a3 ipv4: ip_gre: make ipgre_header() robust 15f6faf36e162 macvlan: fix possible UAF in macvlan_forward_source() 0ba0a79500fcf net: update netdev_lock_{type,name} 2f03dafea0a80 ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() 98151bb13af1e net: bridge: annotate data-races around fdb->{updated,used} 9f1ac4c98add7 net: bridge: Set BR_FDB_ADDED_BY_USER early in fdb_add_entry f2dc6ab3a14c2 btrfs: send: check for inline extents in range_is_hole_in_parent() fdecd3b6aac10 nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec 50f80e82e7966 nvmet-tcp: remove boilerplate code 611e839d2d552 can: etas_es58x: allow partial RX URB allocation to succeed 869862056e100 pnfs/flexfiles: Fix memory leak in nfs4_ff_alloc_deviceid_node() 55787a73fbb61 xfrm: Fix inner mode lookup in tunnel mode GSO segmentation 6eb597cb4e37f ASoC: codecs: wsa884x: fix codec initialisation ca72af7608d68 Revert "gfs2: Fix use of bio_chain" 30f9b41b03903 efi/cper: Fix cper_bits_to_str buffer handling and return value 73069e1134029 firmware: imx: scu-irq: Set mu_resource_id before get handle cbb31f77b879f Linux 6.6.121 0b1ac9743f3d9 riscv: Replace function-like macro by static inline function d03ee41854866 gpio: pca953x: fix wrong error probe return value 5192f17d1127a bpf: test_run: Fix ctx leak in bpf_prog_test_run_xdp error path 83eef6f904a84 scsi: sg: Fix occasional bogus elapsed time that exceeds timeout 06f90c7dce191 ASoC: fsl_sai: Add missing registers to cache default 2c4404d6e4edb ASoC: amd: yc: Add quirk for Honor MagicBook X16 2025 be3923930a71b ALSA: usb-audio: Update for native DSD support quirks 78d87b72cebe2 can: j1939: make j1939_session_activate() fail if device is no longer registered f73d92997388b drm/amd/display: Fix DP no audio issue 53de1e6cde8f9 netfilter: nf_tables: avoid chain re-validation if possible c04b3a832c062 powercap: fix sscanf() error return value handling e07dea55aa134 powercap: fix race condition in register_control_type() 98676ee71fd4e bpf: Fix reference count leak in bpf_prog_test_run_xdp() 7c81ad5e580bd bpf, test_run: Subtract size of xdp_frame from allowed metadata size d08b4193cd55a bpf: Support specifying linear xdp packet data size for BPF_PROG_TEST_RUN 875d7cb4fe156 bpf: Make variables in bpf_prog_test_run_xdp less confusing a60c827903b45 bpf: Fix an issue in bpf_prog_test_run_xdp when page size greater than 4K 77c956152a3a7 riscv: uprobes: Add missing fence.i after building the XOL buffer 5c7c4131beade x86/microcode/AMD: Select which microcode patch to load 90c4cb136e398 NFSD: Remove NFSERR_EAGAIN 249d45ca97381 nfs_common: factor out nfs_errtbl and nfs_stat_to_errno 93a2e7eaf876d NFS: trace: show TIMEDOUT instead of 0x6e 21f8bc5179bed ALSA: ac97: fix a double free in snd_ac97_controller_register() 3b7c1a3805a51 ALSA: ac97bus: Use guard() for mutex locks a19df91b5b93b LoongArch: Add more instruction opcodes and emit_* helpers 029935507d0af arp: do not assume dev_hard_header() does not change skb->head 0d254b0a15f29 net: enetc: fix build warning when PAGE_SIZE is greater than 128K 93f18eaa19037 net: usb: pegasus: fix memory leak in update_eth_regs_async() 11bf9134613f6 net/sched: sch_qfq: Fix NULL deref when deactivating inactive aggregate in qfq_reset 9be826178831c HID: quirks: work around VID/PID conflict for appledisplay 88bea149db205 net: fix memory leak in skb_segment_list for GRO packets 970a1ac90325f bnxt_en: Fix potential data corruption with HW GRO/LRO dc6f73f73ce88 net: wwan: iosm: Fix memory leak in ipc_mux_deinit() 81e7205b82a7f net/mlx5e: Don't print error message due to invalid module 0ab968d9c56bd netdev: preserve NETIF_F_ALL_FOR_ALL across TSO updates 582a5e922a965 net: sock: fix hardened usercopy panic in sock_recv_errqueue 874794fb4f3db inet: ping: Fix icmp out counting 2985712dc76df net: mscc: ocelot: Fix crash when adding interface under a lag 4c8facf028ec7 bridge: fix C-VLAN preservation in 802.1ad vlan_tunnel egress 94e070cd50790 net: marvell: prestera: fix NULL dereference on devlink_alloc() failure 3cd717359e56f netfilter: nf_conncount: update last_gc only when GC has been performed c6cfd76700551 netfilter: nf_tables: fix memory leak in nf_tables_newrule() 76f4218bdadde gpio: pca953x: handle short interrupt pulses on PCAL devices 4d7652d1a3525 gpio: pca953x: Add support for level-triggered interrupts 26f64b3ee5172 gpio: pca953x: Utilise temporary variable for struct device 2a968d1fd7bd6 gpio: pca953x: Utilise dev_err_probe() where it makes sense 62ecdf65b8ab0 netfilter: nft_synproxy: avoid possible data-race on update operation 51ea246778e57 arm64: dts: imx8mp: Fix LAN8740Ai PHY reference clock on DH electronics i.MX8M Plus DHCOM b6600d9d893f6 ARM: dts: imx6q-ba16: fix RTC interrupt level 837fe3df68601 arm64: dts: add off-on-delay-us for usdhc2 regulator c6f7b3cf44856 scsi: Revert "scsi: libsas: Fix exp-attached device scan after probe failure scanned in again after probe failed" cf73e6020b3d7 scsi: ufs: core: Fix EH failure after W-LUN resume error ac01c92333497 scsi: ipr: Enable/disable IRQD_NO_BALANCING during reset afd993bababfe smb/client: fix NT_STATUS_NO_DATA_DETECTED value bbbc1a48f121a smb/client: fix NT_STATUS_DEVICE_DOOR_OPEN value ca9b4aaa7e63b smb/client: fix NT_STATUS_UNABLE_TO_FREE_VM value f18975f2cd41c NFS: Fix up the automount fs_context to use the correct cred f719a300eaa05 NFSv4: ensure the open stateid seqid doesn't go backwards af4fc583fd900 dm-snapshot: fix 'scheduling while atomic' on real-time kernels fc220dae3cf89 alpha: don't reference obsolete termio struct for TC* constants be3bc3d84a2a5 ARM: 9461/1: Disable HIGHPTE on PREEMPT_RT kernels 78faf283336dc csky: fix csky_cmpxchg_fixup not working 13159c7125636 tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock(). 381261f24f4e4 NFSD: NFSv4 file creation neglects setting ACL 4c06b7cb87e5b nfsd: set security label during create operations d761a185f8950 nfsd: Fix NFSv3 atomicity bugs in nfsd_setattr() ab2b5755269cf nfsd: convert to new timestamp accessors 1310640f9ae92 net: Add locking to protect skb->dev access in ip_output 9c2f8a9b68024 ksm: use range-walk function to jump over holes in scan_get_next_rmap_item 4ebc711b738d1 libceph: make calc_target() set t->paused, not just clear it 90a60fe61908a libceph: reset sparse-read state in osd_fault() e097cd858196b libceph: return the handler error from mon_handle_auth_done() 8081faaf089db libceph: make free_choose_arg_map() resilient to partial allocation d3613770e2677 libceph: replace overzealous BUG_ON in osdmap_apply_incremental() ef208ea331ef6 libceph: prevent potential out-of-bounds reads in handle_auth_done() d21ec867d84c9 wifi: avoid kernel-infoleak from struct iw_point 16e107d586208 pinctrl: qcom: lpass-lpi: mark the GPIO controller as sleeping 7291ef23491f9 gpio: rockchip: mark the GPIO controller as sleeping e23882b11f8d3 drm/radeon: Remove __counted_by from ClockInfoArray.clockInfo[] 526bd4bfa1206 drm/pl111: Fix error handling in pl111_amba_probe 1c5a3175aecf8 counter: interrupt-cnt: Drop IRQF_NO_THREAD flag 8a1b8778b7868 counter: 104-quad-8: Fix incorrect return value in IRQ handler 84875a1d92243 lib/crypto: aes: Fix missing MMU protection for AES S-box e1e8d4973c1a7 mei: me: add nova lake point S DID a63998cd6687c btrfs: always detect conflicting inodes when logging inode refs 28b2a80560969 net: 3com: 3c59x: fix possible null dereference in vortex_probe1() 8f5211fc891d0 atm: Fix dma_free_coherent() size 06600719d0f7a nfsd: provide locking for v4_end_grace e15e59b5aa624 NFSD: Fix permission check for read access to executable-only files (From OE-Core rev: 3a8ee137c9147e6bf717fb903ea4c27b9d58fa34) Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> Signed-off-by: Yoann Congal <yoann.congal@smile.fr> Signed-off-by: Paul Barker <paul@pbarker.dev> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>	2026-02-27 17:45:06 +00:00
Bruce Ashfield	1997141268	linux-yocto/6.6: update to v6.6.120 ... Updating linux-yocto/6.6 to the latest korg -stable release that comprises the following commits: c596736dadab Linux 6.6.120 0eb7d3da258b ext4: fix error message when rejecting the default hash 52c4538a92da ext4: filesystems without casefold feature cannot be mounted with siphash bb4511b55fd3 Revert "iommu/amd: Skip enabling command/event buffers for kdump" 0e8ac70521e6 firmware: arm_scmi: Fix unused notifier-block in unregister 21e82354cdd7 tty: fix tty_port_tty_*hangup() kernel-doc 25466e5b4bb1 blk-mq: setup queue ->tag_set before initializing hctx d292db57e915 pwm: stm32: Always program polarity b92ec4a84872 net: stmmac: make sure that ptp_rate is not 0 before configuring EST f6dcbd2bbea5 virtio_console: fix order of fields cols and rows 8d8a670c1c28 mm/damon/tests/core-kunit: handle alloc failures in damon_test_update_monitoring_result() 8bf34bd12231 mm/damon/tests/core-kunit: handle alloc failure on damon_test_set_attrs() c45dcf86c75e mm/damon/tests/core-kunit: handle alloc failures in damon_test_ops_registration() d41809aa8e24 mm/damon/tests/core-kunit: handle alloc failures in damon_test_set_regions() e471ed55f3d6 mm/damon/tests/core-kunit: handle alloc failures on damos_test_filter_out() 8b6d3b7c12bd mm/damon/tests/core-kunit: handle memory alloc failure from damon_test_aggregate() 520e8b12f0a4 mm/damon/tests/core-kunit: handle alloc failures on damon_test_split_regions_of() 945e0575dcfc mm/damon/tests/core-kunit: handle memory failure from damon_test_target() 3fc04a106f87 mm/damon/tests/core-kunit: handle alloc failures on damon_test_merge_two() 7110f671d86a mm/damon/tests/core-kunit: handle alloc failures on dasmon_test_merge_regions_of() 8feb7885b769 mm/damon/tests/core-kunit: handle alloc failures on damon_test_split_at() c6e1f6e91e9c mm/damon/tests/core-kunit: handle allocation failures in damon_test_regions() 5988035dd57a mm/damon/tests/core-kunit: handle alloc failres in damon_test_new_filter() 1c5a0de26879 mm/damon/tests/vaddr-kunit: handle alloc failures on damon_test_split_evenly_succ() c62c5296fdb8 RDMA/rxe: Fix the failure of ibv_query_device() and ibv_query_device_ex() tests 32ca3557d968 RDMA/rxe: Remove the direct link to net_device f3652768a89c net: Allow to use SMP threads for backlog NAPI. 03765d5c1808 net: Remove conditional threaded-NAPI wakeup based on task state. 51445190c10a sched/fair: Proportional newidle balance 5b7949a95c39 sched/fair: Small cleanup to update_newidle_cost() 38d080768c85 sched/fair: Small cleanup to sched_balance_newidle() 17d3103325e8 RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem 339bcd3d051c mm/damon/tests/vaddr-kunit: handle alloc failures on damon_do_test_apply_three_regions() b75608e7547d mm/damon/tests/vaddr-kunit: handle alloc failures in damon_test_split_evenly_fail() 65a02ffb5223 KVM: SVM: Fix redundant updates of LBR MSR intercepts 35c53e4eae0f KVM: nSVM: Fix and simplify LBR virtualization handling with nested e6ff197547a9 KVM: nSVM: Always recalculate LBR MSR intercepts in svm_update_lbrv() 991d961055d0 KVM: SVM: Introduce svm_recalc_lbr_msr_intercepts() 2c1ea6214827 media: mediatek: vcodec: Use spinlock for context list protection lock cc12debd518b media: amphion: Remove vpu_vb_is_codecconfig e42ccf472feb media: amphion: Make some vpu_v4l2 functions static 93f537ffaece media: amphion: Add a frame flush mode for decoder 37304368a2a9 KVM: nVMX: Immediately refresh APICv controls as needed on nested VM-Exit 2f3139eaae99 powerpc/pseries/cmm: adjust BALLOON_MIGRATE when migrating pages 47dee8b41fd7 mm/balloon_compaction: convert balloon_page_delete() to balloon_page_finalize() 3339e058b80d mm/balloon_compaction: we cannot have isolated pages in the balloon list 98a5af4a8eae media: verisilicon: Fix CPU stalls on G2 bus error 5acc3c7d3c4c media: verisilicon: g2: Use common helpers to compute chroma and mv offsets 381a387ececd media: verisilicon: Store chroma and motion vectors offset f7b8851c541e f2fs: fix to detect recoverable inode during dryrun of find_fsync_dnodes() be4c3a3c6c23 f2fs: use global inline_xattr_slab instead of per-sb slab cache 34c817843cb3 f2fs: fix to propagate error from f2fs_enable_checkpoint() bcd0086ee5a2 f2fs: fix to avoid updating compression context during writeback b54cdce20f86 f2fs: drop inode from the donation list when the last file is closed 1a00afcdaefc f2fs: keep POSIX_FADV_NOREUSE ranges 64ed96a21f0f f2fs: remove unused GC_FAILURE_PIN ec3656a8cb42 genirq/irq_sim: Initialize work context pointers properly 72295ae05d13 mm: fix arithmetic for max_prop_frac when setting max_ratio bcf2450f46cd mm: fix arithmetic for bdi min_ratio 4584486cfcca net: dsa: sja1105: fix kasan out-of-bounds warning in sja1105_table_delete_entry() 4914c0a16654 page_pool: Fix use-after-free in page_pool_recycle_in_ring b86dc510308d xfrm: state: fix out-of-bounds read during lookup 3c591353956f ext4: fix out-of-bound read in ext4_xattr_inode_dec_ref_all() 36acfec981d8 ext4: introduce ITAIL helper 48098bb42a9f powerpc/64s/radix/kfence: map __kfence_pool at page granularity 668350eba983 LoongArch: Refactor register restoration in ftrace_common_return 6940c1d0c84a drm/amd/display: Fix null pointer deref in dcn20_resource.c d767ce15045d net: Remove RTNL dance for SIOCBRADDIF and SIOCBRDELIF. dbf427663ce2 usb: xhci: Apply the link chain quirk on NEC isoc endpoints bbda96e97a00 usb: xhci: move link chain bit quirk checks into one helper function. bf4127db6cb7 xhci: dbgtty: fix device unregister: fixup dff9dd015331 tty: introduce and use tty_port_tty_vhangup() helper 21e52dc77629 drm/tilcdc: Fix removal actions in case of failed probe 5bc791132f62 drm/tilcdc: request and mapp iomem with devres 205aa0c83cd4 drm/mediatek: Fix probe resource leaks fef6d1474ab3 drm/mediatek: Fix probe memory leak 11dba925f5fe drm/amdgpu: Forward VMID reservation errors 5c7c7135468f mptcp: ensure context reset on disconnect() a902343f1331 net: phy: mediatek: fix nvmem cell reference leak in mt798x_phy_calibration b2e7973d83a8 pmdomain: imx: Fix reference count leak in imx_gpc_probe() 4544cfa16834 pmdomain: Use device_get_match_data() d7ba1b448f2a mm: consider non-anon swap cache folios in folio_expected_ref_count() 7e0fcf9d71c2 mm: simplify folio_expected_ref_count() 6e5bff40bb38 wifi: mac80211: Discard Beacon frames to non-broadcast address 46b9fd1433d2 lockd: fix vfs_test_lock() calls c9bf31522828 mptcp: fallback earlier on simult connection 38a053796019 PCI: brcmstb: Fix disabling L0s capability cf74785c00b8 fuse: fix readahead reclaim deadlock 7ba826aae1d4 svcrdma: bound check rq_pages index in inline path 8ca34c5cedec ARM: dts: microchip: sama7g5: fix uart fifo size to 32 2ce95f8656b6 gpiolib: acpi: Add quirk for Dell Precision 7780 2e14206551bc NFSD: Clear SECLABEL in the suppattr_exclcreat bitmap 8bd6dff8b801 f2fs: fix to avoid potential deadlock c375c4b3997e f2fs: use f2fs_err_ratelimited() to avoid redundant logs 5ceea587c4e2 mptcp: pm: ignore unknown endpoint flags d1d03d9184a6 scsi: ufs: core: Add ufshcd_update_evt_hist() for UFS suspend error b0d2a7ccd17c usb: ohci-nxp: fix device leak on probe failure 2a16f46eef6d usb: ohci-nxp: Use helper function devm_clk_get_enabled() c08838ce6b50 mm/ksm: fix exec/fork inheritance support for prctl 93e4a783d34c wifi: mt76: Fix DTS power-limits on little endian systems bb2805532f76 btrfs: don't rewrite ret from inode_permission 0baa9f64bf79 gfs2: fix freeze error handling 35521feb614d jbd2: fix the inconsistency between checksum and data in memory for journal sb 902ca2356f1e ext4: fix string copying in parse_apply_sb_mount_options() 7a35a505d76a ALSA: hda: cs35l41: Fix NULL pointer dereference in cs35l41_hda_read_acpi() 931c86fc7989 ALSA: wavefront: Clear substream pointers on close 4425583a691a ALSA: wavefront: Use guard() for spin locks 02b63f3bc292 ALSA: wavefront: Fix integer overflow in sample size validation 596b04a1638e ALSA: wavefront: Use standard print API eee39f83246a mptcp: Initialise rcv_mss before calling tcp_send_active_reset() in mptcp_do_fastclose(). d88481653d74 tpm: Cap the number of PCR banks dbd0829d2458 blk-mq: add helper for checking if one CPU is mapped to specified hctx 9202337a2d90 usb: gadget: lpc32xx_udc: fix clock imbalance in error path 23525fc0ea62 drm/nouveau/dispnv50: Don't call drm_atomic_get_crtc_state() in prepare_fb 0336188cc85d drm/i915/gem: Zero-initialize the eb.vma array in i915_gem_do_execbuffer 678d1c86566d drm/msm/dpu: Add missing NULL pointer check for pingpong interface 56f07bc0a0ff drm/mgag200: Fix big-endian support 3d004f7341d4 drm/ttm: Avoid NULL pointer deref for evicted BOs 3144af03d517 drm/mediatek: Fix device node reference leak in mtk_dp_dt_parse() ed51ddd5d449 drm/gma500: Remove unused helper psb_fbdev_fb_setcolreg() f6916363112c drm/msm/a6xx: Fix out of bound IO access in a6xx_get_gmu_registers e05d53454b55 drm/amdgpu: add missing lock to amdgpu_ttm_access_memory_sdma 9a8837f9a3e3 net: macb: Relocate mog_init_rings() callback from macb_mac_link_up() to macb_open() 6b93c8ab6f6c net: nfc: fix deadlock between nfc_unregister_device and rfkill_fop_write 907e8a8f506d net: usb: sr9700: fix incorrect command used to write single register cff353b7d1c7 nfsd: Drop the client reference in client_states_open() fd43edf357a3 LoongArch: BPF: Sign extend kfunc call arguments 446c851e338b LoongArch: BPF: Zero-extend bpf_tail_call() index ad6ea65f154b fjes: Add missing iounmap in fjes_hw_init() 2c4c0c09f964 e1000: fix OOB in e1000_tbi_should_accept() c0acdee51323 RDMA/cm: Fix leaking the multicast GID table reference 9d85524789c2 RDMA/core: Check for the presence of LS_NLA_TYPE_DGID correctly a94bd2d93f7e samples/ftrace: Adjust LoongArch register restore order in direct calls b8f12a3ecf03 tools/mm/page_owner_sort: fix timestamp comparison for stable sorting 45b44c3a5e62 x86/microcode/AMD: Fix Entrysign revision check for Zen5/Strix Halo 3e3c0dc025f0 idr: fix idr_alloc() returning an ID out of range c9acbaec693b kasan: refactor pcpu kasan vmalloc unpoison e53bfe453059 compiler_types.h: add "auto" as a macro for "__auto_type" b9b5f45cc1b7 LoongArch: Use unsigned long for _end and _text f0b9e0bdc8bc LoongArch: Use __pmd()/__pte() for swap entry conversions 582c1dcc5bb5 LoongArch: Fix build errors for CONFIG_RANDSTRUCT 155d6a8f5d5f LoongArch: Correct the calculation logic of thread_count 4632c8b0966d LoongArch: Add new PCI ID for pci_fixup_vgadev() 80617b75fd70 media: mediatek: vcodec: Fix a reference leak in mtk_vcodec_fw_vpu_init() 53e256b5c360 media: i2c: adv7842: Remove redundant cancel_delayed_work in probe a8e6cf7fa2be media: i2c: ADV7604: Remove redundant cancel_delayed_work in probe 4b139f88c2ab media: amphion: Cancel message work before releasing the VPU core 52604951b90c media: vpif_display: fix section mismatch 08c6c6f2a570 media: vpif_capture: fix section mismatch 1ad7c8174109 media: videobuf2: Fix device reference leak in vb2_dc_alloc error path 99293be855c3 media: verisilicon: Protect G2 HEVC decoder against invalid DPB index b93abb4385b8 media: TDA1997x: Remove redundant cancel_delayed_work in probe 1b5602078557 media: samsung: exynos4-is: fix potential ABBA deadlock on init 4d8da22db935 media: renesas: rcar_drif: fix device node reference leak in rcar_drif_bond_enabled 3a294b90cd1a media: msp3400: Avoid possible out-of-bounds array accesses in msp3400c_thread() 4972ad7eec91 media: cec: Fix debugfs leak on bus_register() failure 6b5dd195993b fbdev: tcx.c fix mem_map to correct smem_start offset cce58e4cc535 fbdev: pxafb: Fix multiple clamped values in pxafb_adjust_timing 243b674b2b52 fbdev: gbefb: fix to use physical address instead of dma address 2b0b703a3483 dm-bufio: align write boundary on physical block size 34f6abd6e4c4 dm-ebs: Mark full buffer dirty even on partial write 4654800c51be firmware: stratix10-svc: Add mutex in stratix10 memory management a73881ae085d media: adv7842: Avoid possible out-of-bounds array accesses in adv7842_cp_log_status() 318d470f64ba powerpc/pseries/cmm: call balloon_devinfo_init() also without CONFIG_BALLOON_COMPACTION 40feb7bcde49 parisc: entry: set W bit for !compat tasks in syscall_restore_rfi() d3842cbf13b7 parisc: entry.S: fix space adjustment on interruption for 64-bit userspace 13cf5cd4d535 media: rc: st_rc: Fix reset control resource leak 52bae1ff6805 mfd: max77620: Fix potential IRQ chip conflict when probing two devices 1b630d8f2c27 mfd: altera-sysmgr: Fix device leak on sysmgr regmap lookup fbf57f5e453d clk: samsung: exynos-clkout: Assign .num before accessing .hws ae80fb3d4e8c leds: leds-lp50xx: Enable chip before any communication cc468490d143 leds: leds-lp50xx: LP5009 supports 3 modules for a total of 9 LEDs a406e6c74bd9 leds: leds-lp50xx: Allow LED 0 to be added to module bank b13a3dbfa196 powerpc/64s/slb: Fix SLB multihit issue during SLB preload db9c8e8d3cd6 powerpc, mm: Fix mprotect on book3s 32-bit 14b08c85cb88 arm64: dts: ti: k3-j721e-sk: Fix pinmux for pin Y1 used by power regulator a1d55aa866db PCI/PM: Reinstate clearing state_saved in legacy and !PM codepaths 9024cb893f17 HID: logitech-dj: Remove duplicate error logging 240cd7f2812c iommu: disable SVA when CONFIG_X86 is set 3627e0e773f1 iommu/tegra: fix device leak on probe_device() 0314de9c844d iommu/sun50i: fix device leak on of_xlate() 7b1df346f6c5 iommu/qcom: fix device leak on of_xlate() 21a0e8bdee72 iommu/omap: fix device leaks on probe_device() 173ff5fc9a15 iommu/mediatek: fix device leak on of_xlate() 83f3010de73c iommu/mediatek-v1: fix device leaks on probe() e7bcedf59b28 iommu/mediatek-v1: fix device leak on probe_device() 83a8e18f30a6 iommu/ipmmu-vmsa: fix device leak on of_xlate() e83739232b9f iommu/exynos: fix device leak on of_xlate() aa749c2daf02 iommu/apple-dart: fix device leak on of_xlate() b3e9fa847b2d iommu/amd: Fix pci_segment memleak in alloc_pci_segment() 17ec295d3981 ASoC: qcom: qdsp6: q6asm-dai: set 10 ms period and buffer alignment. c4a8098b2985 ASoC: qcom: q6adm: the the copp device only during last instance 54b1b731d235 ASoC: qcom: q6asm-dai: perform correct state check before closing ed120b75aef2 ASoC: qcom: q6apm-dai: set flags to reflect correct operation of appl_ptr 4054a3597d04 ASoC: stm32: sai: fix OF node leak on probe 8a6826a43d8d ASoC: stm32: sai: fix clk prepare imbalance on probe failure 637d027bb75c ASoC: stm32: sai: fix device leak on probe 49c2ef075dbe ntfs: Do not overwrite uptodate pages 6c32d5bb9f8f selftests/ftrace: traceonoff_triggers: strip off names 21077a775094 blk-mq: skip CPU offline notify on unmapped hctx 0fbd2d4a1e2c blk-mq: don't schedule block kworker on isolated CPUs 1d0026c1e4bc RDMA/bnxt_re: fix dma_free_coherent() pointer 0ca967c599fd RDMA/rtrs: Fix clt_path::max_pages_per_mr calculation 5012b4c81223 ksmbd: Fix memory leak in get_file_all_info() 77645e82b739 RDMA/bnxt_re: Fix to use correct page size for PDE table 639e07bbfa17 RDMA/bnxt_re: Fix IB_SEND_IP_CSUM handling in post_send 689eb90b703b RDMA/bnxt_re: Fix incorrect BAR check in bnxt_qplib_map_creq_db() 78d9259378aa RDMA/core: Fix logic error in ib_get_gids_from_rdma_hdr() c67499757bcf RDMA/efa: Remove possible negative shift fc23d05f0b3f RDMA/irdma: avoid invalid read in irdma_net_event 9f6185a32496 net: rose: fix invalid array index in rose_kill_by_device() 5979338c8301 ipv4: Fix reference count leak when using error routes with nexthop objects c53aa6a5086f ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() 4d0ceb7677e1 net: stmmac: fix the crash issue for zero copy XDP_TX action b23a2e155894 octeontx2-pf: fix "UBSAN: shift-out-of-bounds error" cf7ae870560b platform/x86: hp-bioscfg: Fix out-of-bounds array access in ACPI package parsing 25be7178446c net: bridge: Describe @tunnel_hash member in net_bridge_vlan_group struct 38722e69ee64 net: usb: asix: validate PHY address before use 0e85ce7a3755 net: dsa: b53: skip multicast entries for fdb_dump() 328dc0b12fb8 firewire: nosy: Fix dma_free_coherent() size 535ce34a5bdb genalloc.h: fix htmldocs warning ef277ae121b3 smc91x: fix broken irq-context in PREEMPT_RT 2ac08f3dcd0c selftests: net: fix "buffer overflow detected" for tap.c 4bd4ea3eb326 net: usb: rtl8150: fix memory leak on usb_submit_urb() failure e5ee9d93229b amd-xgbe: reset retries and mode on RX adapt failures 6bfb62b6010a team: fix check for port enabled in team_queue_override_port_prio_changed() 859bf9688bfb platform/x86: ibm_rtl: fix EBDA signature search pointer arithmetic ec24f3b4a831 platform/x86: msi-laptop: add missing sysfs_remove_group() 1717357007db ip6_gre: make ip6gre_header() robust 0fc642f011cb net: openvswitch: Avoid needlessly taking the RTNL on vport destroy 248dadfee95a net: mdio: aspeed: add dummy read to avoid read-after-write issue c0ecb3e4451f Bluetooth: btusb: revert use of devm_kzalloc in btusb 0279978adec6 crypto: seqiv - Do not use req->iv after crypto_aead_encrypt 18de0e41d69d iavf: fix off-by-one issues in iavf_config_rss_reg() f38cca04a23f i40e: fix scheduling in set_rx_mode e27036473d39 wifi: mac80211: do not use old MBSSID elements 8e628bebb109 wifi: cfg80211: sme: store capped length in __cfg80211_connect_result() 34e9dd0a1281 wifi: rtw88: limit indirect IO under powered off for RTL8822CS 5c04217d06a1 iommu/mediatek: fix use-after-free on probe deferral e19578444587 ARM: dts: microchip: sama5d2: fix spi flexcom fifo size to 32 84716eb9dc31 hwmon: (w83l786ng) Convert macros to functions to avoid TOCTOU f94800fbc26c hwmon: (w83791d) Convert macros to functions to avoid TOCTOU 3769c56a1f0d hwmon: (max16065) Use local variable to avoid TOCTOU 237a3095bcd6 i2c: amd-mp2: fix reference leak in MP2 PCI device ad296c4e19c7 platform/x86: intel: chtwc_int33fe: don't dereference swnode args c6210714347f rpmsg: glink: fix rpmsg device leak 3ccb504e8045 soc: amlogic: canvas: fix device leak on lookup c8ddc5f321d1 soc: qcom: ocmem: fix device leak on lookup 98bf1dece54c tracing: Fix fixed array of synthetic event b3b689729cbc amba: tegra-ahb: Fix device leak on SMMU enable 206c012bcbd1 crypto: caam - Add check for kcalloc() in test_len() 84238876e3b3 crypto: af_alg - zero initialize memory allocated via sock_kmalloc d3c094e07853 selftests: openvswitch: Fix escape chars in regexp. 4cd6081860a5 drm/amd/display: Use GFP_ATOMIC in dc_create_plane_state() 0126560370ed io_uring/poll: correctly handle io_poll_add() return value on update ec5aadc4fa49 gpio: regmap: Fix memleak in error path in gpio_regmap_register() 8c4e5a643de3 s390/ipl: Clear SBP flag when bootprog is set 7359e1d39c78 btrfs: don't log conflicting inode if it's a dir moved in the current transaction d790ef0c4819 powerpc/kexec: Enable SMT before waking offline CPUs 7452d53f2933 SUNRPC: svcauth_gss: avoid NULL deref on zero length gss_token in gss_read_proxy_verf 21a64218450e svcrdma: return 0 on success from svc_rdma_copy_inline_range 354834eb7867 nfsd: Mark variable __maybe_unused to avoid W=1 build break cd8cf2be3717 net/handshake: restore destructor on submit failure e0643d46759d fsnotify: do not generate ACCESS/MODIFY events on child for special files 19d4c57ae91b r8169: fix RTL8117 Wake-on-Lan in DASH mode a143c3677662 PM: runtime: Do not clear needs_force_resume with enabled runtime PM 65b1971147ec tracing: Do not register unsupported perf events 079f1c3f5619 xfs: fix a memory leak in xfs_buf_item_init() 97bf1f137364 KVM: nSVM: Clear exit_code_hi in VMCB when synthesizing nested VM-Exits d6d257ce44af KVM: nSVM: Set exit_code_hi to -1 when synthesizing SVM_EXIT_ERR (failed VMRUN) d44197b5281d KVM: SVM: Mark VMCB_PERM_MAP as dirty on nested VMRUN 2d1d833b4025 KVM: nSVM: Propagate SVM_EXIT_CR0_SEL_WRITE correctly for LMSW emulation 99c709294ac8 KVM: SVM: Mark VMCB_NPT as dirty on nested VMRUN aab88dcc4fb4 KVM: nSVM: Avoid incorrect injection of SVM_EXIT_CR0_SEL_WRITE 7b54ccef865e KVM: x86: Fix VM hard lockup after prolonged inactivity with periodic HV timer 73f77550086f KVM: x86: Explicitly set new periodic hrtimer expiration in apic_timer_fn() 8ff24d46a4b2 KVM: x86: WARN if hrtimer callback for periodic APIC timer fires with period=0 e927ab132b87 libceph: make decode_pool() more resilient against corrupted osdmaps e09fd2eb6d4c parisc: Do not reprogram affinitiy on ASP chip 062774439d44 scs: fix a wrong parameter in __scs_magic 393b8f9bedc7 platform/chrome: cros_ec_ishtp: Fix UAF after unbinding driver e30a69bf891e KVM: x86: Don't clear async #PF queue when CR0.PG is disabled (e.g. on #SMI) 96f1b074c98c ocfs2: fix kernel BUG in ocfs2_find_victim_chain fb9bd6d8d314 media: vidtv: initialize local pointers upon transfer of memory ownership 1e90812c0220 tools/testing/nvdimm: Use per-DIMM device handle a4c67d96f92e f2fs: fix return value of f2fs_recover_fsync_data() 4ce9eecb7466 f2fs: fix age extent cache insertion skip on counter overflow 3d65e27e57aa f2fs: invalidate dentry cache on failed whiteout creation efe3371001f5 f2fs: fix to avoid updating zero-sized extent in extent cache c3031cf2b61f f2fs: ensure node page reads complete before f2fs_put_super() finishes 0260ad551b08 scsi: target: Reset t_task_cdb pointer in error case 71074ea29886 NFSD: use correct reservation type in nfsd4_scsi_fence_client e354793a7ab9 scsi: aic94xx: fix use-after-free in device removal path e9e601b7df58 scsi: Revert "scsi: qla2xxx: Perform lockless command completion in abort path" 6741f90220dc cpufreq: nforce2: fix reference count leak in nforce2 dffe25224f51 cpuidle: governors: teo: Drop misguided target residency check ed023a179150 intel_th: Fix error handling in intel_th_output_open d285517429a7 char: applicom: fix NULL pointer dereference in ac_ioctl 96e001d20405 usb: renesas_usbhs: Fix a resource leak in usbhs_pipe_malloc() 679e15fb53f9 usb: dwc3: keep susphy enabled during exit to avoid controller faults fa8747590b0e usb: dwc3: of-simple: fix clock resource leak in dwc3_of_simple_probe 75c5d9bce072 usb: phy: isp1301: fix non-OF device reference imbalance 319f7a85b3c4 usb: phy: fsl-usb: Fix use-after-free in delayed work during device removal 848132371006 USB: lpc32xx_udc: Fix error handling in probe 4824123c9f87 phy: broadcom: bcm63xx-usbh: fix section mismatches f4cacf8827ba media: pvrusb2: Fix incorrect variable used in trace message 4a54d8fcb093 media: dvb-usb: dtv5100: fix out-of-bounds in dtv5100_i2c_msg() 22847606976c usb: usb-storage: Maintain minimal modifications to the bcdDevice range. 252892d5a6a2 mptcp: avoid deadlock on fallback while reinjecting 17b470ee53dd mptcp: schedule rtx timer only after pushing data fa4a445f832b media: v4l2-mem2mem: Fix outdated documentation 94a16a3a1001 jbd2: use a weaker annotation in journal handling 815327958ec4 jbd2: use a per-journal lock_class_key for jbd2_trans_commit_key 79a0e4d3fbef ext4: align max orphan file size with e2fsprogs limit dc06c9dc5e1d ext4: fix incorrect group number assertion in mb_check_buddy 36bf0f765333 ext4: clear i_state_flags when alloc inode b5d942922182 ext4: xattr: fix null pointer deref in ext4_raw_inode() 2c0acd1a1e94 ktest.pl: Fix uninitialized var in config-bisect.pl 5fd1a6c631b2 fs/ntfs3: fix mount failure for sparse runs in run_unpack() 7ad2c3ae0795 kallsyms: Fix wrong "big" kernel symbol type read from procfs 037cf435316e floppy: fix for PAGE_SIZE != 4KB 59e7ee37d5f8 block: rate-limit capacity change info log 075e7d288ca3 s390/dasd: Fix gendisk parent after copy pair swap 4f4515f02497 lib/crypto: x86/blake2s: Fix 32-bit arg treated as 64-bit fe2ce8f925b0 mmc: sdhci-msm: Avoid early clock doubling during HS400 transition 18b99fa603d0 io_uring: fix filename leak in __io_openat_prep() 19166de97372 KEYS: trusted: Fix a memory leak in tpm2_load_cmd bc390b273720 cifs: Fix memory and information leak in smb3_reconfigure() 23a89dda39f4 vhost/vsock: improve RCU read sections around vhost_vsock_get() cebfc2ba2e6f block: rnbd-clt: Fix signedness bug in init_dev() 8d8cd3d315db platform/x86/intel/hid: Add Dell Pro Rugged 10/12 tablet to VGBS DMI quirks e3ef3e4888de nvme-fc: don't hold rport lock when putting ctrl 62641daa93cb i2c: designware: Disable SMBus interrupts to prevent storms from mis-configured firmware 92544ae44c44 libperf cpumap: Fix perf_cpu_map__max for an empty/NULL map 1abf4ddeda5c serial: sprd: Return -EPROBE_DEFER when uart clock is not ready 72ab74fce63b usb: usb-storage: No additional quirks need to be added to the EL-R12 optical drive. 4373a81f6b0a usb: xhci: limit run_graceperiod for only usb 3.0 devices 1803fe66c9f2 iio: adc: ti_am335x_adc: Limit step_avg to valid range for gcc complains 914605b0de81 usb: typec: ucsi: Handle incorrect num_connectors capability de6dd14643e5 usbip: Fix locking bug in RT-enabled kernels 44c8dccb09a2 exfat: fix remount failure in different process environments b1cad002d69a reset: fix BIT macro reference d2c7c90aca7b via_wdt: fix critical boot hang due to unnamed resource allocation b39fa021839b fuse: Invalidate the page cache after FOPEN_DIRECT_IO write 6c6a81d86a3c fuse: Always flush the page cache before FOPEN_DIRECT_IO write 69f05f3e5390 scsi: qla2xxx: Use reinit_completion on mbx_intr_comp 0ec5059916f5 scsi: qla2xxx: Fix initiator mode with qlini_mode=exclusive 61c409780367 scsi: qla2xxx: Fix lost interrupts with qlini_mode=disabled b5020721e953 powerpc/addnote: Fix overflow on 32-bit builds 71f543a56177 clk: mvebu: cp110 add CLK_IGNORE_UNUSED to pcie_x10, pcie_x11 & pcie_x4 cad4dfddaf69 ti-sysc: allow OMAP2 and OMAP4 timers to be reserved on AM33xx a6f1ced333a6 firmware: imx: scu-irq: Init workqueue before request mbox channel aafed85dbff7 ipmi: Fix __scan_channels() failing to rescan channels 42985fb28312 ipmi: Fix the race between __scan_channels() and deliver_response() 2f21a7cbaaa9 ALSA: usb-mixer: us16x08: validate meter packet indices ba2d15635e59 ALSA: pcmcia: Fix resource leak in snd_pdacf_probe error path 930acded6bbf ALSA: vxpocket: Fix resource leak in vxpocket_probe error path 8f289fa12926 net/hsr: fix NULL pointer dereference in prp_get_untagged_frame() 97575fb2b714 dt-bindings: mmc: sdhci-of-aspeed: Switch ref to sdhci-common.yaml d9bd2d0985b2 mmc: sdhci-esdhc-imx: add alternate ARCH_S32 dependency to Kconfig 3dd6d0138482 spi: fsl-cpm: Check length parity before switching to 16 bit mode a287987af354 ACPI: CPPC: Fix missing PCC check for guaranteed_perf ef0f9059a647 ACPI: PCC: Fix race condition by removing static qualifier 20dbeaed2459 can: gs_usb: gs_can_open(): fix error handling 3f3c1c05c6ff Input: i8042 - add TUXEDO InfinityBook Max Gen10 AMD to i8042 quirk table bf95ec558058 Input: ti_am335x_tsc - fix off-by-one error in wire_order validation 2bee957f6155 HID: input: map HID_GD_Z to ABS_DISTANCE for stylus/pen a28a375a5439 ksmbd: fix buffer validation by including null terminator size in EA length e54fb2a47725 ksmbd: Fix refcount leak when invalid session is found on session lookup da29cd197246 ksmbd: skip lock-range check on equal size to avoid size==0 underflow 378a5d288598 block: rnbd-clt: Fix leaked ID in init_dev() d9479998c19a spi: cadence-quadspi: Fix clock disable on probe failure path a0fee4e618f1 x86/xen: Fix sparse warning in enlighten_pv.c 79ee93cb007e x86/xen: Move Xen upcall handler 86fcc629fdc0 drm/panel: sony-td4353-jdi: Enable prepare_prev_first fd8bb8fa7bc9 MIPS: Fix a reference leak bug in ip22_check_gio() 11dddaed6978 hwmon: (tmp401) fix overflow caused by default conversion rate value fa37adcf1d56 hwmon: (ibmpex) fix use-after-free in high/low store b7b4f3bf118f net: hns3: add VLAN id validation before using 3708637cb0d4 net: hns3: using the num_tqps to check whether tqp_index is out of range when vf get ring info from mbx 1956d47a03eb net: hns3: using the num_tqps in the vf driver to apply for resources 049538a3aa98 net: enetc: do not transmit redirected XDP frames when the link is down 011ae80c49d9 net/handshake: duplicate handshake cancellations leak socket 7646e5d8188b net/mlx5: Serialize firmware reset with devlink 873cb8bb91ba net/mlx5: Skip HotPlug check on sync reset using hot reset de0560f2c33c net/mlx5: fw_tracer, Handle escaped percent properly 8ac688c0e430 net/mlx5: fw_tracer, Validate format string parameters 0b0e4639a827 net/mlx5: Drain firmware reset in shutdown callback 24d3f86df879 net/mlx5: fw reset, clear reset requested on drain_fw_reset ca9983bc3a11 ethtool: Avoid overflowing userspace buffer on stats query 4cc829d61f10 iommufd/selftest: Check for overflow in IOMMU_TEST_OP_ADD_RESERVED a9c87779df20 netfilter: nf_tables: remove redundant chain validation on register store 1816619b2fe8 netfilter: nf_tables: allow loads only when register is initialized fb1347c5c016 netfilter: nf_tables: pass context structure to nft_parse_register_load 8bc10b03e705 nfc: pn533: Fix error code in pn533_acr122_poweron_rdr() 2f125ebe47d6 net/sched: ets: Remove drr class from the active list if it changes to strict f818cd472565 caif: fix integer underflow in cffrml_receive() 4729ff0581fb ipvs: fix ipv4 null-ptr-deref in route error path 325eb61bb307 netfilter: nf_conncount: fix leaked ct in error paths 3e778855fbce broadcom: b44: prevent uninitialized value usage 10ffc558246f net: openvswitch: fix middle attribute validation in push_nsh() action 5f2831fc593c mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats 4a3c569005f4 mlxsw: spectrum_router: Fix neighbour use-after-free 5a182635fef3 mlxsw: spectrum_router: Fix possible neighbour reference count leak 17aefe815462 ipvlan: Ignore PACKET_LOOPBACK in handle_mode_l2() 9987cda315c0 net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change 156a0f6341dc netrom: Fix memory leak in nr_sendmsg() 0e26e3ef8e5c net: fec: ERR007885 Workaround for XDP TX path ab794ec9f374 gfs2: Fix use of bio_chain 96a60775dbb1 Bluetooth: btusb: Add new VID/PID 13d3/3533 for RTL8821CE 6d9a87ecf31f Bluetooth: btusb: Add new VID/PID 2b89/6275 for RTL8761BUV 5adad9727a81 ksmbd: vfs: fix race on m_flags in vfs_cache d64977495e44 ksmbd: fix use-after-free in ksmbd_tree_connect_put under concurrency c4d7795fa55e smb/server: fix return value of smb2_ioctl() 11860cf9cc87 gfs2: fix remote evict for read-only filesystems 58d3e00853e4 btrfs: scrub: always update btrfs_scrub_progress::last_physical 935284aaf233 wifi: brcmfmac: Add DMI nvram filename quirk for Acer A1 840 tablet 857e7a2d5a94 hfsplus: fix volume corruption issue for generic/073 05ec9af3cc43 hfsplus: Verify inode mode when loading from disk b9d1c6bb5f19 hfsplus: fix missing hfs_bnode_get() in __hfs_bnode_create 6348bea92f4f hfsplus: fix volume corruption issue for generic/070 44a38eb4f787 ntfs: set dummy blocksize to read boot_block when mounting fb9e2f99ac10 kbuild: Use objtree for module signing key path f5c2a7cb2f00 fs/ntfs3: Support timestamps prior to epoch fefb29d64e7b livepatch: Match old_sympos 0 and 1 in klp_find_func() e71e8079adfe cpuidle: menu: Use residency threshold in polling state override decisions ae7ead58d949 cpufreq: s5pv210: fix refcount leak 9ba782fbe66a cpufreq: dt-platdev: Add JH7110S SOC to the allowlist ce2bdfc4af3f ACPI: property: Use ACPI functions in acpi_graph_get_next_endpoint() only 1bc34293dfbd ACPICA: Avoid walking the Namespace if start_node is NULL 30917f8d4383 x86/ptrace: Always inline trivial accessors 6c074ccf7705 sched/fair: Revert max_newidle_lb_cost bump 91e448e69aca sched/deadline: only set free_cpus for online runqueues 6e41d9ec8d7c perf/x86/amd: Check event before enable to avoid GPF 011e356fe41e iomap: account for unaligned end offsets when truncating read range 82b60ffbb532 iomap: adjust read range correctly for non-block-aligned positions c0c0951b9cd4 btrfs: fix memory leak of fs_devices in degraded seed device path f64105c91557 bpf, arm64: Do not audit capability check in do_jit() beeed972ab48 btrfs: fix a potential path leak in print_data_reloc_error() 54ac15426326 btrfs: do not skip logging new dentries when logging a new name e5daff089b92 ipv6: add exception routes to GC list in rt6_insert_exception 90f7d995b861 ipv6: avoid possible NULL deref in modify_prefix_route() dea3ed2c16f9 ALSA: dice: fix buffer overflow in detect_stream_formats() dbf2d472323d usb: phy: Initialize struct usb_phy list_head 4ef659d1f2e1 usb: gadget: tegra-xudc: Always reinitialize data toggle when clear halt 7c0b3edb6c77 net: lan743x: Allocate rings outside ZONE_DMA 95eb965ce0a6 LoongArch: Add machine_kexec_mask_interrupts() implementation 8d9d121e3799 ocfs2: fix memory leak in ocfs2_merge_rec_left() c21c606ad398 irqchip/mchp-eic: Fix error code in mchp_eic_domain_alloc() 94a4c58d7195 efi/cper: align ARM CPER type with UEFI 2.9A/2.10 specs f5a28c4ee058 efi/cper: Adjust infopfx size to accept an extra space b930724424b7 efi/cper: Add a new helper function to print bitmasks 99bc41d7d796 dm log-writes: Add missing set_freezable() for freezable kthread 448092910421 dm-raid: fix possible NULL dereference with undefined raid type ca8764c0ea1f block: Use RCU in blk_mq_[un]quiesce_tagset() instead of set->tag_list_lock fd7e7353a5ba ARM: 9464/1: fix input-only operand modification in load_unaligned_zeropad() 6d4f17782ce4 ALSA: firewire-motu: add bounds check in put_user loop for DSP events 2e09c882a66e rtc: gamecube: Check the return value of ioremap() 5ef0faed120a ALSA: uapi: Fix typo in asound.h comment 74f2a6b2cff8 dma/pool: eliminate alloc_pages warning in atomic_pool_expand ddd32ec66bc4 ALSA: firewire-motu: fix buffer overflow in hwdep read for DSP events 1e59c7587bb0 nvme-auth: use kvfree() for memory allocated with kvcalloc() 27d20907debf block: fix comment for op_is_zone_mgmt() to include RESET_ALL 94f146df56fb blk-mq: Abort suspend when wakeup events are pending 5e3230f9f644 ASoC: ak5558: Disable regulator when error happens 8465515b8689 ASoC: ak4458: Disable regulator when error happens 5fd617128b57 ASoC: bcm: bcm63xx-pcm-whistler: Check return value of of_dma_configure() 1edf1b4467d3 platform/x86: asus-wmi: use brightness_set_blocking() for kbd led 4543d9ccd99e fs/nls: Fix inconsistency between utf8_to_utf32() and utf32_to_utf8() a98719b6af3e NFS: Fix inheritance of the block sizes when automounting 52cfde819a96 Expand the type of nfs_fattr->valid dce10c59211e NFS: Automounted filesystems should inherit ro,noexec,nodev,sync flags e04647b63cfd Revert "nfs: ignore SB_RDONLY when mounting nfs" 350e69eb93ef Revert "nfs: clear SB_RDONLY before getting superblock" b2ed74f8ccd2 Revert "nfs: ignore SB_RDONLY when remounting nfs" f718f9ea6094 NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid b8045ad0d53a NFS: Initialise verifiers for visible dentries in nfs_atomic_open() 991609c4a7b1 NFS: Initialise verifiers for visible dentries in readdir and lookup 29e8d9b274c9 fs/nls: Fix utf16 to utf8 conversion 796318ae388f NFS: Avoid changing nlink when file removes and attribute updates race f1fe47f592d3 9p: fix cache/debug options printing in v9fs_show_options a888905f2874 fbdev: ssd1307fb: fix potential page leak in ssd1307fb_probe() ae836bfac958 pinctrl: single: Fix incorrect type for error return variable de0711dbfb5c pinctrl: single: Fix PIN_CONFIG_BIAS_DISABLE handling 7438b1d70bf2 perf tools: Fix split kallsyms DSO counting d01f0e072dad net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop 84a7efd23b78 clk: keystone: fix compile testing fe78b35d19ae md/raid5: fix IO hang when array is broken with IO inflight 61f371ade3b6 remoteproc: qcom_q6v5_wcss: fix parsing of qcom,halt-regs d31af068650c mtd: lpddr_cmds: fix signed shifts in lpddr_cmds c44e376a533e selftests: bonding: add delay before each xvlan_over_bond connectivity check 4035ea8f02fd selftests: bonding: add ipvlan over bond testing 194788280708 selftests: bonding: Add more missing config options 12364ab3a790 selftests: bonding: add missing build configs d29034c70f15 mtd: rawnand: renesas: Handle devm_pm_runtime_enable() errors 660936cb5155 net: stmmac: fix rx limit check in stmmac_rx_zc() 8286c02fe910 netfilter: nft_connlimit: update the count if add was skipped da9f247fb5ef netfilter: nf_conncount: rework API to use sk_buff directly 11b01b8ef1b1 netfilter: flowtable: check for maximum number of encapsulations in bridge vlan c327ca1b2de5 Reinstate "resource: avoid unnecessary lookups in find_next_iomem_res()" 14f860fb0873 resource: introduce is_type_match() helper and use it 7c5527d18857 resource: replace open coded resource_intersection() 9bf08dab7041 resource: Reuse for_each_resource() macro 09811a83b214 regulator: core: Protect regulator_supply_alias_list with regulator_list_mutex 6338e278de4a ARM: dts: samsung: exynos4412-midas: turn off SDIO WLAN chip during system suspend 7236e72a91ee ARM: dts: samsung: exynos4210-trats: turn off SDIO WLAN chip during system suspend 3ff05c6af301 ARM: dts: samsung: exynos4210-i9100: turn off SDIO WLAN chip during system suspend 83a9770432f5 ARM: dts: samsung: universal_c210: turn off SDIO WLAN chip during system suspend 886c8f5af8a9 ASoC: Intel: catpt: Fix error path in hw_params() 84b3ea5ba85c vdpa/pds: use %pe for ERR_PTR() in event handler registration c1947cecdd5c virtio: fix virtqueue_set_affinity() docs 1c7d1ef95abf virtio: fix whitespace in virtio_config_ops 83dc689e138b virtio: fix typo in virtio_device_ready() comment 22b11e8f0b8f virtio_vdpa: fix misleading return in void function 55b273382c52 ext4: improve integrity checking in __mb_check_buddy by enhancing order-0 validation 0adc8de19be0 ext4: remove unused return value of __mb_check_buddy db5deba07f53 ublk: prevent invalid access with DEBUG 0a0a51092c1c ublk: complete command synchronously on error 84ea891dc897 ublk: make sure io cmd handled in submitter task context c242024efd1b ACPI: processor_core: fix map_x2apic_id for amd-pstate on am4 1968f2ab4188 hwmon: sy7636a: Fix regulator_enable resource leak on error path e84690a05e47 drm/amd/display: Fix logical vs bitwise bug in get_embedded_panel_info_v2_1() 6dca0f3f61ab ASoC: fsl_xcvr: clear the channel status control memory aaf2a6097116 RDMA/irdma: Do not directly rely on IB_PD_UNSAFE_GLOBAL_RKEY 715fdb3b3054 RDMA/irdma: Add support to re-register a memory region 8c7b21f37494 RDMA/irdma: Fix data race in irdma_free_pble 444de2316b09 RDMA/irdma: Fix data race in irdma_sc_ccq_arm 599632e08859 iommu/arm-smmu-qcom: Enable use of all SMR groups when running bare-metal 136ff909dfb9 backlight: lp855x: Fix lp855x.h kernel-doc warnings 30cbe4b64274 backlight: led-bl: Add devlink to supplier LEDs 26fa6991683f wifi: ieee80211: correct FILS status codes e3676761efb2 iomap: always run error completions in user context 4ae9ff07bc2b iomap: factor out a iomap_dio_done helper 7e50ce619ec6 drm/nouveau: restrict the flush page to a 32-bit address 96c56c5ff4e4 PCI: dwc: Fix wrong PORT_LOGIC_LTSSM_STATE_MASK definition 5928832a90c1 btrfs: fix leaf leak in an error path in btrfs_del_items() 3cfa3d4b155a staging: fbtft: core: fix potential memory leak in fbtft_probe_common() d6ce96e10e4d firmware: stratix10-svc: fix make htmldocs warning for stratix10_svc 1c3c234af940 mt76: mt7615: Fix memory leak in mt7615_mcu_wtbl_sta_add() ccc585db618c RDMA/bnxt_re: Fix the inline size for GenP7 devices e3e1c7416be8 RISC-V: KVM: Fix guest page fault within HLV* instructions 76ae0cc39673 crypto: ccree - Correctly handle return of sg_nents_for_len 6cd14414394b crypto: starfive - Correctly handle return of sg_nents_for_len 6a17f898a8bf selftests/bpf: Improve reliability of test_perf_branches_no_hw() e5343f28814d selftests/bpf: skip test_perf_branches_hw() on unsupported platforms 3915c76df201 usb: raw-gadget: cap raw_io transfer length to KMALLOC_MAX_SIZE b6943283343b usb: dwc2: fix hang during suspend if set as peripheral bac021bf0733 usb: dwc2: fix hang during shutdown if set as peripheral 7e993b9d6d24 usb: dwc2: disable platform lowlevel hw resources during shutdown b90c743a0a32 usb: chaoskey: fix locking for O_NONBLOCK cca3e7df3c0f ima: Handle error code returned by ima_filter_rule_match() dc153401fb26 wifi: rtl818x: rtl8187: Fix potential buffer underflow in rtl8187_rx_cb() 06a5e91764ed cpuset: Treat cpusets in attaching as populated 49dc43b25d34 net: phy: adin1100: Fix software power-down ready condition 8d946fccf5b4 phy: renesas: rcar-gen3-usb2: Fix an error handling path in rcar_gen3_phy_usb2_probe() c23e0dfb05f1 mfd: mt6358-irq: Fix missing irq_domain_remove() in error path eb09da83e409 mfd: mt6397-irq: Fix missing irq_domain_remove() in error path 19eda47ce3f1 wifi: mac80211: fix CMAC functions not handling errors 7fce2c2ce881 wifi: mac80211: remove RX_DROP_UNUSABLE 4bccd506a1f1 scsi: qla2xxx: Fix improper freeing of purex item 6b4cd95bd746 pwm: bcm2835: Make sure the channel is enabled after pwm_request() f153fc44c760 perf arm_spe: Fix memset subclass in operation 64378caea949 perf arm-spe: Extend branch operations cb2b0caa8ca9 ipv6: clear RA flags when adding a static route bd12abe294c7 net/ipv6: Remove expired routes with a separated list of routes. d258ebe7059a drm/mediatek: Fix CCORR mtk_ctm_s31_32_to_s1_n function issue 9068cfff4cab fs/ntfs3: Prevent memory leaks in add sub record ba125e8f8d11 fs/ntfs3: out1 also needs to put mi 800153219f04 powerpc/64s/ptdump: Fix kernel_hash_pagetable dump for ISA v3.00 HPTE format e95d7d5821f6 powerpc/64s/hash: Restrict stress_hpt_struct memblock region to within RMA limit bf2c990b0121 bpf: Fix invalid prog->stats access when update_effective_progs fails c8201d1353c5 bpf: Improve program stats run-time calculation bf8513dfa31e wifi: rtl818x: Fix potential memory leaks in rtl8180_init_rx_ring() 5ed033c54133 drm/msm/a2xx: stop over-complaining about the legacy firmware 9f7ab3fbadf3 NFSD/blocklayout: Fix minlength check in proc_layoutget 07a031029201 tracefs: fix a leak in eventfs_create_events_dir() 74f25cec6e26 watchdog: starfive: Fix resource leak in probe error path 0592410b31f1 watchdog: wdat_wdt: Fix ACPI table leak in probe function 97b876fa8832 bpf: Check skb->transport_header is set in bpf_skb_check_mtu 67d295d202e2 selftests/bpf: Fix failure paths in send_signal test edcb09848a32 bpf: Handle return value of ftrace_set_filter_ip in register_fentry bf8f8528b762 ps3disk: use memcpy_{from,to}_bvec index f5391a065c15 arm64: dts: rockchip: Add eeprom vcc-supply for Radxa ROCK 5A 6b73166d3b4b arm64: dts: rockchip: Move the EEPROM to correct I2C bus on Radxa ROCK 5A 3800c97efff2 PCI: keystone: Exit ks_pcie_probe() for invalid mode 994d6303ed0b bpf: Free special fields when update [lru_,]percpu_hash maps df38a4843ab5 leds: netxbig: Fix GPIO descriptor leak in error paths 796037ca2fab scsi: sim710: Fix resource leak by adding missing ioport_unmap() calls 39c754efb3e1 ACPI: property: Fix fwnode refcount leak in acpi_fwnode_graph_parse_endpoint() bcb94288d95c ocfs2: relax BUG() to ocfs2_error() in __ocfs2_move_extent() 7c8a7d87af9d lib/vsprintf: Check pointer before dereferencing in time_and_date() 43e2c9203d0f clk: renesas: r9a06g032: Fix memory leak in error path bb5f23ae16be coresight: etm4x: Add context synchronization before enabling trace 289d9a2a98ba coresight: etm4x: Extract the trace unit controlling 60f664206be2 coresight: etm4x: Correct polling IDLE bit 2e5e0665a594 nbd: defer config unlock in nbd_genl_connect cbfcd8ee53c2 wifi: cw1200: Fix potential memory leak in cw1200_bh_rx_helper() 61abf8c3162d macintosh/mac_hid: fix race condition in mac_hid_toggle_emumouse d5720e4045af powerpc/32: Fix unpaired stwcx. on interrupt exit a68afb6d6540 cpufreq/amd-pstate: Call cppc_set_auto_sel() only for online CPUs ef2bbc11b82b scsi: ufs: core: fix incorrect buffer duplication in ufshcd_read_string_desc() 907bf69c6b6c ntfs3: init run lock for extend inode 86322d5110ae ARM: dts: stm32: stm32mp157c-phycore: Fix STMPE811 touchscreen node properties d76abca88045 RDMA/rtrs: server: Fix error handling in get_or_create_srv 841ccb2df19b dt-bindings: PCI: amlogic: Fix the register name of the DBI region 6cbba9229348 staging: most: remove broken i2c driver bb0f288a2c4b staging: most: i2c: Drop explicit initialization of struct i2c_device_id::driver_data to 0 6d2390653d82 scsi: smartpqi: Fix device resources accessed after device removal 1867723a98c8 scsi: stex: Fix reboot_notifier leak in probe error path 1ba2ced2bbdf nbd: defer config put in recv_work e432944735ed regulator: core: disable supply if enabling main regulator fails 313ab3b06f77 perf/x86/intel: Correct large PEBS flag check 22b62f223c07 ext4: correct the checking of quota files before moving extents b5ed17a40909 mfd: da9055: Fix missing regmap_del_irq_chip() in error path e4d11160a77d efi/libstub: Fix page table access in 5-level to 4-level paging transition 6f16ed9c8401 x86/boot: Fix page table access in 5-level to 4-level paging transition 182b0cc9c6d5 ARM: dts: omap3: n900: Correct obsolete TWL4030 power compatible 4c1dd8da5386 ARM: dts: omap3: beagle-xm: Correct obsolete TWL4030 power compatible 2470624c4a21 ARM: dts: am335x-netcom-plus-2xx: add missing GPIO labels c934e40246da spi: tegra210-quad: Fix timeout handling 577d1ef18499 fs/9p: Don't open remote file with APPEND mode when writeback cache is used 3b8431f15cdd scsi: target: Do not write NUL characters into ASCII configfs output 4eee4a5b9b2e power: supply: apm_power: only unset own apm_get_power_status ea3bdf099e6e power: supply: wm831x: Check wm831x_set_bits() return value 0fcbaf9e99dc power: supply: rt9467: Prevent using uninitialized local variable in rt9467_set_value_from_ranges() 5e9308f3539b power: supply: rt9467: Return error on failure in rt9467_set_value_from_ranges() 1f309df63785 power: supply: cw2015: Check devm_delayed_work_autocancel() return code 42c1d38de86e perf record: skip synthesize event when open evsel failed 4dc555120afc perf lock contention: Load kernel map before lookup 9dd3998165ea perf maps: Add maps__load_first() 23411ba96edc interconnect: debugfs: Fix incorrect error handling for NULL path 92087be48b6d arm64: dts: qcom: msm8996: add interconnect paths to USB2 controller 7bfe9e5e31e3 interconnect: qcom: msm8996: add missing link to SLAVE_USB_HS bbd054492101 i3c: master: svc: Prevent incomplete IBI transaction 82a09b9965ed i3c: fix refcount inconsistency in i3c_master_register 4fc6af9d9e6d i3c: master: Inherit DMA masks and parameters from parent device 5f133ebe6836 pinctrl: stm32: fix hwspinlock resource leak in probe function ea954e50d312 soc: qcom: smem: fix hwspinlock resource leak in probe error paths 6135d225cca7 tools/nolibc/stdio: let perror work when NOLIBC_IGNORE_ERRNO is set 2d3e5c1e76e9 x86/dumpstack: Prevent KASAN false positive warnings in __show_regs() b2a39b1a3cde task_work: Fix NMI race condition 1d733fcbfe61 mtd: rawnand: lpc32xx_slc: fix GPIO descriptor leak on probe error and remove 4e6526697dcb mtd: nand: relax ECC parameter validation check 9ce7cbd355ae Revert "mtd: rawnand: marvell: fix layouts" 4a493d02ff46 ARM: dts: renesas: r9a06g032-rzn1d400-db: Drop invalid #cells properties eb8ac04f1036 ARM: dts: renesas: gose: Remove superfluous port property 58aca869babd RDMA/rxe: Fix null deref on srq->rq.queue after resize failure 8f2602a83f66 sctp: Defer SCTP_DBG_OBJCNT_DEC() to sctp_destroy_sock(). 85ede044f43d phy: mscc: Fix PTP for VSC8574 and VSC8572 32d9c68af133 arm64: dts: qcom: sdm845-oneplus: Correct gpio used for slider a649992b7eb3 firmware: imx: scu-irq: fix OF node leak in abdbffb6a087 arm64: dts: ti: k3-am62p: Fix memory ranges for GPU bb04d3610f08 s390/ap: Don't leak debug feature files if AP instructions are not available 772ded5a84e0 s390/smp: Fix fallback CPU detection 4304bd7a334e wifi: ath11k: fix peer HE MCS assignment 9484379c88e1 crypto: hisilicon/qm - restore original qos values 5b8ac617c8da crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id 4a1535593fff clk: qcom: camcc-sm6350: Fix PLL config of PLL2 77197835a735 clk: qcom: camcc-sm6350: Specify Titan GDSC power domain as a parent to other 285dadbb3cb0 uio: uio_fsl_elbc_gpcm:: Add null pointer check to uio_fsl_elbc_gpcm_probe 433e72bf0f4e PCI: rcar-gen2: Drop ARM dependency from PCI_RCAR_GEN2 631786221875 arm64: dts: imx8mp-venice-gw702x: remove off-board sdhc1 5db023188615 arm64: dts: imx8mp-venice-gw702x: remove off-board uart e2060f8513b5 arm64: dts: imx8mm-venice-gw72xx: remove unused sdhc1 pinctrl d553d5e13edb arm64: dts: freescale: imx8mp-venice-gw7905-2x: remove duplicate usdhc1 props cf5cd55287a1 iio: imu: st_lsm6dsx: Fix measurement unit for odr struct member 23b2b6af8dc6 inet: Avoid ehash lookup race in inet_ehash_insert() ad12d25edbbe rculist: Add hlist_nulls_replace_rcu() and hlist_nulls_replace_init_rcu() dcb5e3cd96b7 ntfs3: Fix uninit buffer allocated by __getname() 8bf729b96303 ntfs3: fix uninit memory after failed mi_read in mi_format_new 3f8878c15753 crypto: authenc - Correctly pass EINPROGRESS back up to the caller 2629742ccd3a irqchip/qcom-irq-combiner: Fix section mismatch c696fb981d7d irqchip/imx-mu-msi: Fix section mismatch 1fbdca7341d9 irqchip/irq-brcmstb-l2: Fix section mismatch 7a57553d2123 irqchip/irq-bcm7120-l2: Fix section mismatch f00b32894c51 irqchip/irq-bcm7038-l1: Fix section mismatch b0515a899ad1 sched/fair: Forfeit vruntime on yield a8fdcac66666 objtool: Fix weak symbol detection fe6ff6e24ae8 objtool: Fix standalone --hacks=jump_label c5f56b7faa80 HID: logitech-hidpp: Do not assume FAP in hidpp_send_message_sync() c9a86c677b48 clk: renesas: cpg-mssr: Read back reset registers to assure values latched e8c730499293 clk: renesas: Pass sub struct of cpg_mssr_priv to cpg_clk_register 224a0d7c8449 clk: renesas: Use str_on_off() helper d349d7dc3243 clk: renesas: rzg2l: Use %x format specifier to print CLK_ON_R() 3cf222e052ca clk: renesas: rzg2l: Remove critical area 73fcc27a9795 clk: renesas: rzg2l: Simplify the logic in rzg2l_mod_clock_endisable() 2ba9e39f1aed clk: renesas: cpg-mssr: Add missing 1ms delay into reset toggle callback 094b1827d2f7 USB: Fix descriptor count when handling invalid MBIM extended descriptor 9dc3c78d21e1 drm/vgem-fence: Fix potential deadlock on release 2f97ed8e88a3 drm/panel: visionox-rm69299: Don't clear all mode flags 6245cce711e2 gpu: host1x: Fix race in syncpt alloc/free f8fd5491100f smack: fix bug: unprivileged task can create labels c173ce97d3f0 staging: rtl8723bs: fix out-of-bounds read in OnBeacon ESR IE parsing 34620eb602aa staging: rtl8723bs: fix stack buffer overflow in OnAssocReq IE parsing 30c558447e90 staging: rtl8723bs: fix out-of-bounds read in rtw_get_ie() parser b975f91de5f8 comedi: check device's attached status in compat ioctls 049f14557450 comedi: multiq3: sanitize config options in multiq3_attach() 72b3627b0d3b comedi: c6xdigio: Fix invalid PNP driver unregistration 24cb00b9804c wifi: rtw88: Add USB ID 2001:3329 for D-Link AC13U rev. A1 2f5e6805246c samples: work around glibc redefining some of our defines wrong a32eddf2bb52 LoongArch: Mask all interrupts during kexec/kdump e9b3a97e852a HID: elecom: Add support for ELECOM M-XT3URBK (018F) e7915f55ab15 platform/x86/amd/pmc: Add spurious_8042 to Xbox Ally 919a9f1422e3 platform/x86/amd: pmc: Add Lenovo Legion Go 2 to pmc quirk list f42f958c4f42 platform/x86: huawei-wmi: add keys for HONOR models db78f96e150a HID: apple: Add SONiX AK870 PRO to non_apple_keyboards quirk list d046f04f223d platform/x86: acer-wmi: Ignore backlight event fc59674bb41f pinctrl: qcom: msm: Fix deadlock in pinmux configuration a505f0ba36ab nvme: fix admin request_queue lifetime 37786f27ee0e HID: hid-input: Extend Elan ignore battery quirk to USB a9f626396bfe bfs: Reconstruct file type when loading from disk 4943ed83f80e ALSA: usb-audio: Add native DSD quirks for PureAudio DAC series 727197a77874 smb: fix invalid username check in smb3_fs_context_parse_param() 2b37f5b27f13 Bluetooth: btrtl: Avoid loading the config file on security chips d6c24a5e6cdc drm/vmwgfx: Use kref in vmw_bo_dirty 88edfeca040c spi: imx: keep dma request disabled before dma transfer setup 5f061d0ed906 spi: xilinx: increase number of retries before declaring stall 27b2a8f45ed1 ftrace: bpf: Fix IPMODIFY + DIRECT in modify_ftrace_direct() 3915997ad777 USB: serial: kobil_sct: fix TIOCMBIS and TIOCMBIC cae7aa183ca4 USB: serial: belkin_sa: fix TIOCMBIS and TIOCMBIC 5a8c2136dc5e serial: add support of CPCI cards 53a633786718 USB: serial: ftdi_sio: match on interface number for jtag 510db76553c9 USB: serial: option: move Telit 0x10c7 composition in the right place 63d6bf5b19bf USB: serial: option: add Telit Cinterion FE910C04 new compositions 85e8739c5ce7 USB: serial: option: add Foxconn T99W760 152289a51107 KVM: SVM: Don't skip unrelated instruction if INT3/INTO is replaced 88d99ca5adbd comedi: pcl818: fix null-ptr-deref in pcl818_ai_cancel() 144c48da33a0 ext4: add i_data_sem protection in ext4_destroy_inline_data_nolock() 39d2ef113416 locking/spinlock/debug: Fix data-race in do_raw_write_lock 708a620b471a ksmbd: ipc: fix use-after-free in ipc_msg_send_request 1687a055a555 ext4: refresh inline data size before write operations b4f8eabf6d99 jbd2: avoid bug_on in jbd2_journal_get_create_access() when file system corrupted 46c73ff89d73 Documentation: process: Also mention Sasha Levin as stable tree maintainer 732fe5cbd6ad leds: spi-byte: Use devm_led_classdev_register_ext() 25f34fd52144 xfrm: flush all states in xfrm_state_fini 763e5c351206 xfrm: also call xfrm_state_delete_tunnel at destroy time for states that were never added 88ed2012b8c7 Revert "xfrm: destroy xfrm_state synchronously on net exit path" d0e0d1097118 xfrm: delete x->tunnel as we delete x (From OE-Core rev: bdf9c70e0c6ddebb599c56ed9a4c17ba0db516c0) Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> Signed-off-by: Yoann Congal <yoann.congal@smile.fr> Signed-off-by: Paul Barker <paul@pbarker.dev> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>	2026-02-27 17:45:06 +00:00
Bruce Ashfield	2adde7bee1	linux-yocto/6.6: update to v6.6.119 ... Updating linux-yocto/6.6 to the latest korg -stable release that comprises the following commits: 5fa4793a2d2d Linux 6.6.119 810189546cb6 HID: core: Harden s32ton() against conversion to 0 bits e7e8e9b1a1b1 net: dsa: microchip: Free previously initialized ports on init failures 3b5a6115d6ea net: dsa: microchip: Fix symetry in ksz_ptp_msg_irq_{setup/free}() 70ad6455139e ksmbd: fix use-after-free in session logoff 3a13454fd098 mptcp: fix duplicate reset on fastclose b77075c08d7e selftests: mptcp: join: properly kill background tasks f12f4c657617 staging: rtl8712: Remove driver using deprecated API wext 2b9719ccad38 net: macb: fix unregister_netdev call order in macb_remove() a395121fe29e iio: adc: rtq6056: Correct the sign bit index 094f10f3f290 can: rcar_canfd: Fix CAN-FD mode as default eecd163fa6da usb: typec: ucsi: psy: Set max current to zero when disconnected f02a412c0a18 usb: gadget: udc: fix use-after-free in usb_gadget_state_work 92234ee7fc23 usb: udc: Add trace event for usb_gadget_set_state 0722d804f7ad nfsd: Replace clamp_t in nfsd4_get_drc_mem() 5106da73b016 bonding: check xdp prog when set bond mode 694a354ddf98 bonding: return detailed error when loading native XDP fails becc488a4d86 libceph: replace BUG_ON with bounds check for map->max_osd ccbccfba25e9 libceph: prevent potential out-of-bounds writes in handle_auth_session_key() 183ad6e3b651 libceph: fix potential use-after-free in have_mon_and_osd_map() 1c6fb1cc5035 net: dsa: microchip: ptp: Fix checks on irq_find_mapping() 1759edf0e688 net: dsa: microchip: common: Fix checks on irq_find_mapping() 9d1a65cbe3ec drm/amd/display: Check NULL before accessing 748ed1b6a2ca drm: sti: fix device leaks at component probe 28a385af4a94 USB: serial: option: add support for Rolling RW101R-GL 17cab1f3aefb USB: serial: ftdi_sio: add support for u-blox EVK-M101 b75d20301703 xhci: dbgtty: fix device unregister da7a52bcee3f xhci: dbgtty: Fix data corruption when transmitting data form DbC to host afc0e34f161c usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths 5428c75e92e4 usb: dwc3: pci: Sort out the Intel device IDs 9dab9859b10e usb: dwc3: pci: add support for the Intel Nova Lake -S e3a55221f4de usb: uas: fix urb unmapping issue when the uas device is remove during ongoing data transfer 04a8a6393f3f usb: storage: sddr55: Reject out-of-bound new_pba f5b6b214db12 USB: storage: Remove subclass and protocol overrides from Novatek quirk cb1401b5bcc2 usb: storage: Fix memory leak in USB bulk transport 9d86bc8b188a usb: renesas_usbhs: Fix synchronous external abort on unbind 41434488ca71 usb: gadget: f_eem: Fix memory leak in eem_unwrap 730c13a9701c usb: cdns3: Fix double resource release in cdns3_pci_probe 993bfdc38428 most: usb: fix double free on late probe failure 41ae1203c5ab serial: amba-pl011: prefer dma_mapping_error() over explicit address checking ce318ec9864b mptcp: clear scheduled subflows on retransmit 71796c91ee8e firmware: stratix10-svc: fix bug in saving controller data 87b3d0105192 slimbus: ngd: Fix reference count leak in qcom_slim_ngd_notify_slaves c4ba90485bfd thunderbolt: Add support for Intel Wildcat Lake f62ffdfb431b smb: client: fix memory leak in cifs_construct_tcon() 4c257170c81d drivers/usb/dwc3: fix PCI parent check f8d1f166289f dm-verity: fix unreliable memory allocation 5a3f3e39b187 ceph: fix crash in process_v2_sparse_read() for encrypted directories 61089dd37ccd can: sun4i_can: sun4i_can_interrupt(): fix max irq loop handling c952664fd54f can: sja1000: fix max irq loop handling 9917ba597cf9 atm/fore200e: Fix possible data race in fore200e_open() 5b88725e5ea1 ARM: dts: nxp: imx6ul: correct SAI3 interrupt line b4abe6826926 ALSA: usb-audio: Add DSD quirk for LEAK Stereo 230 231ac951faba MIPS: mm: kmalloc tlb_vpn array to avoid stack overflow 135713cd0751 MIPS: mm: Prevent a TLB shutdown on initial uniquification ad70338c1b87 iio: adc: ad7280a: fix ad7280_store_balance_timer() a9fa254af33a iio: accel: fix ADXL355 startup race condition cdd4a9e98004 iio: accel: bmc150: Fix irq assumption regression a8f6a8256a68 iio:common:ssp_sensors: Fix an error handling path ssp_probe() 936e082a7c07 iio: imu: st_lsm6dsx: fix array size for st_lsm6dsx_settings fields d59a7824444e Revert "perf/x86: Always store regs->ip in perf_callchain_kernel()" c538dae04a4c spi: bcm63xx: fix premature CS deassertion on RX-only transactions 01511983d7b8 spi: nxp-fspi: Propagate fwnode in ACPI case as well 5fc6f8175b8b spi: nxp-fspi: Support per spi-mem operation frequency switches a25cc746f7d0 spi: spi-mem: Add a new controller capability f1ea0e8b4a15 spi: spi-mem: Extend spi-mem operations with a per-operation maximum frequency 94b3c7558748 spi: spi-mem: Allow specifying the byte order in Octal DTR mode 99aff13bcc13 spi: amlogic-spifc-a1: Handle devm_pm_runtime_enable() errors dbb60bd12950 spi: tegra114: remove Kconfig dependency on TEGRA20_APB_DMA f29b58e974c7 mailbox: pcc: don't zero error register ea621f472cfe mailbox: pcc: Refactor error handling in irq handler into separate function 5550f9021895 mailbox: mailbox-test: Fix debugfs_create_dir error checking 826785925627 usb: gadget: renesas_usbf: Handle devm_pm_runtime_enable() errors cad94b17e276 iio: st_lsm6dsx: Fixed calibrated timestamp calculation 21f867e3da98 net: fec: do not register PPS event for PEROUT 2648b8b51992 net: fec: do not allow enabling PPS and PEROUT simultaneously b332c433489e net: fec: do not update PEROUT if it is enabled 2d8f6acf5623 net: fec: cancel perout_timer when PEROUT is disabled 3be37c3c96b1 net: atlantic: fix fragment overflow handling in RX path 90daa70a4d62 net: dsa: sja1105: fix SGMII linking at 10M or 100M but not passing traffic d25c17507e80 net: dsa: sja1105: simplify static configuration reload 0be4d79f8a1b drm/amdgpu: fix cyan_skillfish2 gpu info fw handling 7fd789d6ea49 net: sxgbe: fix potential NULL dereference in sxgbe_rx() aa20dcff033c net/mlx5e: Fix validation logic in rate limiting 58c411509141 net: lan966x: Fix the initialization of taprio 30a1d3db72bc net: aquantia: Add missing descriptor cache invalidation on ATL2 3e7442c58021 platform/x86: intel: punit_ipc: fix memory corruption ff45dd52bd18 net: phy: mxl-gpy: fix bogus error on USXGMII and integrated PHY fd6a1261d05d Bluetooth: SMP: Fix not generating mackey and ltk when repairing fe68510fc99b Bluetooth: hci_sock: Prevent race in socket write iter and sock bind 4ffac725154c can: gs_usb: gs_usb_receive_bulk_callback(): check actual_length before accessing data 3433680b7596 can: gs_usb: gs_usb_receive_bulk_callback(): check actual_length before accessing header 1a588c40a422 can: gs_usb: gs_usb_xmit_callback(): fix handling of failed transmitted URBs e9dd83a75a72 can: kvaser_usb: leaf: Fix potential infinite loop in command parsers (From OE-Core rev: 01535e428d4fbab6d467644339d37ff828ddfa88) Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> Signed-off-by: Yoann Congal <yoann.congal@smile.fr> Signed-off-by: Paul Barker <paul@pbarker.dev> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>	2026-02-27 17:45:06 +00:00
Bruce Ashfield	3ad8559850	linux-yocto/6.6: update to v6.6.118 ... Updating linux-yocto/6.6 to the latest korg -stable release that comprises the following commits: 4791134e4aeb Linux 6.6.118 c602cc344b4b mptcp: fix a race in mptcp_pm_del_add_timer() 19de79aaea33 mm/mempool: fix poisoning order>0 pages with HIGHMEM 0d40c4ef4b4b mm/mempool: replace kmap_atomic() with kmap_local_page() f38b91f7aded HID: amd_sfh: Stop sensor before starting 4948db9c9ca8 selftests: mptcp: join: endpoints: longer transfer 378e6136b8c0 pmdomain: imx: Fix reference count leak in imx_gpc_remove a5958b1bcf4a pmdomain: imx-gpc: Convert to platform remove callback returning void ad120c08b89a pmdomain: arm: scmi: Fix genpd leak on provider registration failure 7ea2ea68df08 ftrace: Fix BPF fexit with livepatch f01f9c348d76 crash: fix crashkernel resource shrink b3d24038eb77 wifi: cfg80211: Add missing lock in cfg80211_check_and_end_cac() 29150018bf19 maple_tree: fix tracepoint string pointers bf07df375d20 uio_hv_generic: Set event for all channels on the device fc3139d9f4c1 KVM: arm64: Check the untrusted offset in FF-A memory share 64332afa9f76 smb: client: fix incomplete backport in cfids_invalidation_worker() 6917e894f86f tracing/tools: Fix incorrcet short option in usage text for --threads 952637c5b9be net: ethernet: ti: netcp: Standardize knav_dma_open_channel to return NULL on error 1ee10e90e160 ALSA: usb-audio: fix uac2 clock source at terminal parser 5d604d40cd32 f2fs: compress: fix UAF of f2fs_inode_info in f2fs_free_dic e822e902f8e6 s390/mm: Fix __ptep_rdp() inline assembly 4e9efe0d56e7 f2fs: compress: change the first parameter of page_array_{alloc,free} to sbi d0141cf6ab1f kconfig/nconf: Initialize the default locale at startup be46fa4de9da kconfig/mconf: Initialize the default locale at startup 6ae0613ea6f5 net: tls: Cancel RX async resync request on rcd_delta overflow 1bc765f0f75a selftests: net: use BASH for bareudp testing 3ab328a0258f x86/microcode/AMD: Limit Entrysign signature checking to known generations 5d778778b40b scsi: core: Fix a regression triggered by scsi_host_busy() 1f8e4d6c1d20 cifs: fix typo in enable_gcm_256 module parameter d89ae707cfe6 bcma: don't register devices disabled in OF 5998da5a8208 vsock: Ignore signal/timeout on connect() if already established 7627864dc312 cifs: fix memory leak in smb3_fs_context_parse_param error path 496d1383e441 LoongArch: Use UAPI types in ptrace UAPI header 69e043bce09c net/mlx5: Clean up only new IRQ glue on request_irq() failure 715d9cda646a devlink: rate: Unset parent pointer in devl_rate_nodes_destroy 6d9f0036d21e pinctrl: s32cc: initialize gpio_pin_config::list after kmalloc() 3b90bd8aaeb2 pinctrl: s32cc: fix uninitialized memory in s32_pinctrl_desc f0923011c126 net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() 57752d523a3f kernel.h: Move ARRAY_SIZE() to a separate header 9bbb4afff974 platform/x86/intel/speed_select_if: Convert PCIBIOS_* return codes to errnos 3b177b2ded56 s390/ctcm: Fix double-kfree e2a897ad5f53 nvme-multipath: fix lockdep WARN due to partition scan work 0b903f33c31c net: openvswitch: remove never-working support for setting nsh fields f8c496e20b7a net: mlxsw: linecards: fix missing error check in mlxsw_linecard_devlink_info_get() 385fd7ec3214 net: dsa: hellcreek: fix missing error handling in LED registration 2e78580e6e7d drm/tegra: Add call to put_pid() ddb483ce2136 mlxsw: spectrum: Fix memory leak in mlxsw_sp_flower_stats() 9026f31a520d pinctrl: cirrus: Fix fwnode leak in cs42l43_pin_probe() a620b091c4df xfrm: Prevent locally generated packets from direct output in tunnel mode a2b61573e6a3 xfrm: Determine inner GSO type from packet inner protocol b3b27876f3be drm/amd/display: Move sleep into each retry for retrieve_link_cap() e688c20f088e drm/amd/display: Increase DPCD read retries 06a79f1bffe7 drm/amdgpu: Skip emit de meta data on gfx11 with rs64 enabled 8b57f8127086 drm/tegra: dc: Fix reference leak in tegra_dc_couple() 642561238c98 mptcp: do not fallback when OoO is present 8a5d1ceef950 mptcp: decouple mptcp fastclose from tcp close 28e4d5fd731e mptcp: avoid unneeded subflow-level drops d019cbb455ee mptcp: fix premature close in case of fallback 3d513efe18a9 mptcp: fix ack generation for fallback msk 8f9ba1a99a89 mptcp: fix race condition in mptcp_schedule_work() fe694895d3b7 LoongArch: Don't panic if no valid cache info for PCI 6aa22377ef27 dt-bindings: pinctrl: toshiba,visconti: Fix number of items in groups 5ea58bb47c50 MIPS: Malta: Fix !EVA SOC-it PCI MMIO a6ef60898dda scsi: target: tcm_loop: Fix segfault in tcm_loop_tpg_address_show() b343cee5df7e scsi: sg: Do not sleep in atomic context 33f64600a120 nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl() 5fe335a80548 nvme: nvme-fc: move tagset removal to nvme_fc_delete_ctrl() 7d1977b4ae5c nouveau/firmware: Add missing kfree() of nvkm_falcon_fw::boot d344ea1baf19 Input: pegasus-notetaker - fix potential out-of-bounds access ca9a08de9b29 Input: imx_sc_key - fix memory corruption on unload 8a2d2a536c76 Input: goodix - add support for ACPI ID GDIX1003 9cf59f4724a9 Input: cros_ec_keyb - fix an invalid memory access 7419d8064dab Revert "drm/tegra: dsi: Clear enable register if powered by bootloader" 00c56d55332c net: dsa: microchip: lan937x: Fix RGMII delay tuning ce0a3699244a be2net: pass wrb_params in case of OS2BMC 5968bcf785c6 ata: libata-scsi: Add missing scsi_device_put() in ata_scsi_dev_rescan() 2a494b9e6364 smb: client: introduce close_cached_dir_locked() b8113c1ca469 ata: libata-scsi: Fix system suspend for a security locked drive 037cc5058964 mptcp: Fix proto fallback detection with BPF 2ecd37dae7a6 mptcp: Disallow MPTCP subflows from sockmap e65f1a2807c5 exfat: check return value of sb_min_blocksize in exfat_read_boot_sector 583990e7dcea shmem: fix tmpfs reconfiguration (remount) when noswap is set 457376c6fbf0 mtdchar: fix integer overflow in read/write ioctls b146e0b085d9 mtd: rawnand: cadence: fix DMA device NULL pointer dereference 49365455a63c HID: quirks: work around VID/PID conflict for 0x4c4a/0x4155 6665fbd7730b timers: Fix NULL function pointer race in timer_shutdown_sync() 1e89a1be4fe9 Linux 6.6.117 0fdb596476c0 memcg: fix data-race KCSAN bug in rstats 541e85e1c9c9 ACPI: HMAT: Remove register of memory node for generic target 41ea28dc3c0c mm: memcg: optimize parent iteration in memcg_rstat_updated() 6b97ad92d932 mm/memory-tier: fix abstract distance calculation overflow 206a8665f9cc memory tiers: use default_dram_perf_ref_source in log message e2f7c76758be cachestat: do not flush stats in recency check 1f45e5c84684 net: netpoll: ensure skb_pool list is always initialized 03695541b334 isdn: mISDN: hfcsusb: fix memory leak in hfcsusb_probe() 42d486d35a41 mm/secretmem: fix use-after-free race in fault handler 46185cdfc9ed mm/truncate: unmap large folio on split failure 7e239675ae51 mm/memory: do not populate page table entries beyond i_size fe601b70eac6 filemap: cap PTE range to be created to allowed zero fill in folio_map_range() e5dffca89b4a mm: memcg: restore subtree stats flushing 68849411ce9e mm: workingset: move the stats flush into workingset_test_recent() 1b201161f34b mm: memcg: make stats flushing threshold per-memcg b68fc4f792bb mm: memcg: move vmstats structs definition above flushing code 68e727bdb68b mm: memcg: change flush_next_time to flush_last_time b283ba3ddc9f mm: memcg: add per-memcg zswap writeback stat 2c3568736912 mm: memcg: add THP swap out info for anonymous reclaim 57692c303132 scsi: ufs: ufs-pci: Set UFSHCD_QUIRK_PERFORM_LINK_STARTUP_ONCE for Intel ADL aca6f63e803e scsi: ufs: core: Add a quirk to suppress link_startup_again 753ca4b5beff scsi: ufs: core: Add a quirk for handling broken LSDBS field in controller capabilities register d1f293ee8dc3 scsi: ufs: core: Add UFSHCD_QUIRK_KEYS_IN_PRDT aba8384b2311 scsi: ufs: core: Add fill_crypto_prdt variant op f108b6a34856 scsi: ufs: core: Add UFSHCD_QUIRK_BROKEN_CRYPTO_ENABLE bd77a15c3a8d scsi: ufs: core: fold ufshcd_clear_keyslot() into its caller 7e3bfaaf0208 scsi: ufs: core: Add UFSHCD_QUIRK_CUSTOM_CRYPTO_PROFILE 960dab23f6d4 net: stmmac: Fix accessing freed irq affinity_hint ef49378864bb f2fs: fix to avoid overflow while left shift operation c645693180a9 net: netpoll: fix incorrect refcount handling causing incorrect cleanup a3a476cb65a4 net: netpoll: flush skb pool during cleanup dc67d67a995e net: netpoll: Individualize the skb pool e9ab9dec36bb netpoll: remove netpoll_srcu 94b01ef5186c mm, percpu: do not consider sleepable allocations atomic 4c8a4f1d34ec iommufd: Don't overflow during division for dirty tracking 066ee13f05fb btrfs: ensure no dirty metadata is written back for an fs with errors df1ad5de2197 drm/mediatek: Disable AFBC support on Mediatek DRM driver a299478ac16f Revert "perf dso: Add missed dso__put to dso__load_kcore" ee59d88353e8 selftests: mptcp: connect: trunc: read all recv data 8b644440d16a selftests: mptcp: join: rm: set backup flag b78aae82ea75 selftests: mptcp: connect: fix fallback note due to OoO 4e833774cdc2 pmdomain: samsung: plug potential memleak during probe 22330f5f0052 btrfs: do not update last_log_commit when logging inode due to a new name 4020f18436ea btrfs: scrub: put bio after errors in scrub_raid56_parity_stripe() 4a351adbbd72 EDAC/altera: Use INTTEST register for Ethernet and USB SBE injection d58afbd05627 EDAC/altera: Handle OCRAM ECC enable after warm reset ca9f11fe0926 LoongArch: Use physical addresses for CSR_MERRENTRY/CSR_TLBRENTRY 2612f0e0b8dc selftests/user_events: fix type cast for write_index packed member in perf_test 21bedc6eeb51 x86/microcode/AMD: Add Zen5 model 0x44, stepping 0x1 minrev 70f73dde0ad7 spi: Try to get ACPI GPIO IRQ earlier ca2bd7a717d5 smb: client: fix cifs_pick_channel when channel needs reconnect bfdcd67e0fcb crypto: hisilicon/qm - Fix device reference leak in qm_get_qos_value 868fc62811d3 cifs: client: fix memory leak in smb3_fs_context_parse_param ece3b981bb66 ALSA: usb-audio: Fix potential overflow of PCM transfer buffer 082b6b511432 mmc: sdhci-of-dwcmshc: Change DLL_STRBIN_TAPNUM_DEFAULT to 0x4 159244b55095 mm/mm_init: fix hash table order logging in alloc_large_system_hash() 67272c11f379 fs/proc: fix uaf in proc_readdir_de() ad4a84daf6f8 wifi: mac80211: reject address change while connecting c3cbf016a697 selftests/tracing: Run sample events to clear page cache events 041ab9ca6e80 ipv4: route: Prevent rt_bind_exception() from rebinding stale fnhe c6201eb32371 LoongArch: Let {pte,pmd}_modify() record the status of _PAGE_DIRTY f4b4146c1cf0 LoongArch: Use correct accessor to read FWPC/MWPC 4c49fe089661 dma-mapping: benchmark: Restore padding to ensure uABI remained consistent b30421bc31c0 strparser: Fix signed/unsigned mismatch bug 5746b2a0f5eb ksmbd: close accepted socket when per-IP limit rejects connection 142b2990e64f gcov: add support for GCC 15 29fbb3ad4018 NFSD: free copynotify stateid in nfs4_free_ol_stateid() e18c368d8611 KVM: SVM: Mark VMCB_LBR dirty when MSR_IA32_DEBUGCTLMSR is updated 79f851a65c47 HID: uclogic: Fix potential memory leak in error path 9e8863f3fe34 ARM: dts: BCM53573: Fix address of Luxul XAP-1440's Ethernet PHY 57473eec8080 HID: hid-ntrig: Prevent memory leak in ntrig_report_version() 6546dd0c6ad2 ARM: dts: imx51-zii-rdu1: Fix audmux node names adee209bb898 arm64: dts: rockchip: Set correct pinctrl for I2S1 8ch TX on odroid-m1 3f358a66a045 netfilter: nf_tables: reject duplicate device on updates dd3a38574f93 mtd: onenand: Pass correct pointer to IRQ handler 7ce9bb0b95fc Bluetooth: hci_sync: fix double free in 'hci_discovery_filter_clear()' c157fa22c400 lib/crypto: arm/curve25519: Disable on CPU_BIG_ENDIAN d8d79cf8c2b7 espintcp: fix skb leaks 2e93bf719462 net: dsa: improve shutdown sequence ed8a77fee461 net: allow small head cache usage with large MAX_SKB_FRAGS values 52b44d8c6534 net: fix NULL pointer dereference in l3mdev_l3_rcv e91ecc2e30b4 irqchip/riscv-intc: Add missing free() callback in riscv_intc_domain_ops 64b12dca2b0a bpf: account for current allocated stack depth in widen_imprecise_scalars() baa61dcaa50b bpf: Add bpf_prog_run_data_pointers() 872c04306b02 acpi/hmat: Fix lockdep warning for hmem_register_resource() 6015ad3b210e base/node / ACPI: Enumerate node access class for 'struct access_coordinate' 356d4d79dc18 acpi: numa: Add setting of generic port system locality attributes e507071185fb acpi: Break out nesting for hmat_parse_locality() 1fec7730896f acpi: numa: Add genport target allocation to the HMAT parsing d0e2cbe79e5d acpi: numa: Create enum for memory_target access coordinates indexing 994c51070c95 base/node / acpi: Change 'node_hmem_attrs' to 'access_coordinates' 519af3fa0263 acpi, hmat: calculate abstract distance with HMAT 7e9fa5cdcc4f acpi, hmat: refactor hmat_register_target_initiators() 9c8ffc4f91a8 memory tiering: add abstract distance calculation algorithms management 57f607c11296 ALSA: usb-audio: Fix NULL pointer dereference in snd_usb_mixer_controls_badd c2d65ce1d035 NFSv4: Fix an incorrect parameter when calling nfs4_call_sync() 0ad6db4438ef NFS: sysfs: fix leak when nfs_client kobject add fails b6137b4906f4 pnfs: Set transport security policy to RPC_XPRTSEC_NONE unless using TLS 45ea5a60adbc NFS: enable nconnect for RDMA 275369632f6a pnfs: Fix TLS logic in _nfs4_pnfs_v4_ds_connect() b5de1eb5bc20 ASoC: tas2781: fix getting the wrong device number b5df9e06eed3 drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE aaaa8531896f ASoC: codecs: va-macro: fix resource leak in probe error path 7fd65a5f9701 ASoC: cs4271: Fix regulator leak on probe failure 34294379ea4e regulator: fixed: fix GPIO descriptor leak on register failure 83475ce43fa7 acpi,srat: Fix incorrect device handle check for Generic Initiator 25d6e7663932 cifs: Fix uncached read into ITER_KVEC iterator 581c65fd0b0e cifs: stop writeback extension when change of size is detected ad141380d768 Bluetooth: L2CAP: export l2cap_chan_hold for modules 335266ea359e ACPI: CPPC: Limit perf ctrs in PCC check only to online CPUs 4470b8bb9a8e ACPI: CPPC: Perform fast check switch only for online CPUs a851ebcdc2e2 ACPI: CPPC: Check _CPC validity for only the online CPUs f6a7808cadde hsr: Fix supervision frame sending on HSRv0 873f985f3bdf virtio-net: fix incorrect flags recording in big mode 14aba9bd583e net_sched: limit try_bulk_dequeue_skb() batches aa9f57c077f2 net/mlx5e: Fix potentially misleading debug message df953d41a579 net/mlx5e: Fix wraparound in rate limiting for values above 255 Gbps 29f62b3d4466 net/mlx5e: Fix maxrate wraparound in threshold between units a676a296af65 net: sched: act_ife: initialize struct tc_ife to fix KMSAN kernel-infoleak 31e4aa93e2e5 net: sched: act_connmark: initialize struct tc_ife to fix kernel leak a6d1bb631af9 net_sched: act_connmark: use RCU in tcf_connmark_dump() 4cd8d755c7d4 af_unix: Initialise scc_index in unix_add_edge(). f01f007c9cc9 wifi: mac80211: skip rate verification for not captured PSDUs 2a5c3396f6d9 net: mdio: fix resource leak in mdiobus_register_device() c92dbf85627b tipc: Fix use-after-free in tipc_mon_reinit_self(). e9800b8b77f2 net/handshake: Fix memory leak in tls_handshake_accept() e5afb55625ac net/smc: fix mismatch between CLC header and proposal ed71f801249d sctp: prevent possible shift-out-of-bounds in sctp_transport_update_rto a5059df18988 Bluetooth: 6lowpan: Don't hold spin lock over sleeping functions 2a9ff4086c26 Bluetooth: 6lowpan: fix BDADDR_LE vs ADDR_LE_DEV address type confusion c24ac6cfe4f9 Bluetooth: 6lowpan: reset link-local header on ipv6 recv path 1c28c1e1522c Bluetooth: btusb: reorder cleanup in btusb_disconnect to avoid UAF 2927ff643607 Bluetooth: MGMT: cancel mesh send timer when hdev removed 65c74343da8e net: fec: correct rx_bytes statistic for the case SHIFT16 is set d6f93bba3d7d selftests: net: local_termination: Wait for interfaces to come up 8085b6cdb0e0 wifi: ath11k: zero init info->status in wmi_process_mgmt_tx_comp() 4fbfef04d957 ASoC: max98090/91: fixed max98091 ALSA widget powering up/down e671f9bb9780 smb/server: fix possible refcount leak in smb2_sess_setup() 63d8706a2c09 smb/server: fix possible memory leak in smb2_read() 113de3341728 HID: quirks: Add ALWAYS_POLL quirk for VRS R295 steering wheel a74a8be2652b NFS: check if suid/sgid was cleared after a write as needed dad9857bbe64 HID: quirks: avoid Cooler Master MM712 dongle wakeup bug df712250acdd NFS4: Fix state renewals missing after boot 1243e396148a drm/amdgpu: Fix NULL pointer dereference in VRAM logic for APU devices 21dbe5fa22df drm/amd/pm: Disable MCLK switching on SI at high pixel clocks fdf2ea31ce40 riscv: acpi: avoid errors caused by probing DT devices when ACPI is used 7a635df5ef26 RISC-V: clear hot-unplugged cores from all task mm_cpumasks to avoid rfence errors ea5b1db5569c compiler_types: Move unused static inline functions warning to W=2 36bc0502c2de drm/amd: Fix suspend failure with secure display TA e5a4b227bc6e iommufd: Make vfio_compat's unmap succeed if the range is already empty d6ab7ef52aaf smb: client: fix refcount leak in smb2_set_path_attr c63dc33e3794 drm/i915: Fix conversion between clock ticks and nanoseconds 3dec22bde207 drm/i915: Avoid lock inversion when pinning to GGTT on CHV/BXT+VTD c6fc325d8434 selftests: netdevsim: set test timeout to 10 minutes 885827bc1518 riscv: stacktrace: fix backtracing through exceptions 8fa7f51d3725 drm/amd/display: Fix black screen with HDMI outputs f10a6f51984b drm/amdgpu: Fix function header names in amdgpu_connectors.c d96aa80f5f2e extcon: adc-jack: Cleanup wakeup source only if it was enabled 3335f9054365 scsi: ufs: ufs-pci: Fix S0ix/S3 for Intel controllers 62b013354dcf lib/crypto: curve25519-hacl64: Fix older clang KASAN workaround for GCC 946dec89c417 virtio-net: fix received length check in big packets cb52d9c86d70 smb: client: fix potential UAF in smb2_close_cached_fid() 018179e955a8 smb: client: validate change notify buffer before copy 24bef9ca5830 x86/microcode/AMD: Add more known models to entry sign checking 193b2c5e5443 rtc: rx8025: fix incorrect register reference 5f7350ff2b17 Bluetooth: MGMT: Fix OOB access in parse_adv_monitor_pattern() 70150b9443dd drm/sched: Fix deadlock in drm_sched_entity_kill_jobs_cb 8bcadabc3c12 drm/amd/display: Enable mst when it's detected but yet to be initialized e70d2e1f876a tracing: Fix memory leaks in create_field_var() 1b29b6898ed8 net: bridge: fix MST static key usage 3b60ce334c1c net: bridge: fix use-after-free due to MST port state bypass 5a5d2f772775 lan966x: Fix sleeping in atomic context 8cb474cd65bf net: dsa: microchip: Fix reserved multicast address table programming 8bf679ebbecd net/mlx5e: SHAMPO, Fix skb size check for 64K pages 96d20e36c6df net/mlx5e: Fix return value in case of module EEPROM read error 9b37f576d2c0 net/mlx5e: Use extack in get module eeprom by page callback c729f0049561 wifi: mac80211_hwsim: Limit destroy_on_close radio removal to netgroup 7ee2eb85755d bnxt_en: Fix a possible memory leak in bnxt_ptp_init dd03780c29f8 net: usb: qmi_wwan: initialize MAC header offset in qmimux_rx_fixup 2ad229bc61ba sctp: Hold sock lock while iterating over address list c9119f243d9c sctp: Prevent TOCTOU out-of-bounds write 48d161b3c815 sctp: Hold RCU read lock while iterating over address list 1ac40030b4e9 net: dsa: b53: stop reading ARL entries if search is done 32e43d361bac net: dsa: b53: fix enabling ip multicast c95c731efee0 net: dsa: b53: fix resetting speed and pause on forced link ddf9fc39548e net: vlan: sync VLAN features with lower device d8a729fd4427 selftests: netdevsim: Fix ethtool-coalesce.sh fail by installing ethtool-common.sh f680e2eb8c21 netdevsim: add Makefile for selftests efad140b6284 selftests/net: use destination options instead of hop-by-hop 28f2d15e27af selftests/net: fix GRO coalesce test and add ext header coalesce tests deff55caa564 selftests/net: fix out-of-order delivery of FIN in gro:tcp test cb5a4c715521 net: dsa: tag_brcm: legacy: fix untagged rx on unbridged ports for bcm63xx f44b8bbb1b7e Bluetooth: btrtl: Fix memory leak in rtlbt_parse_firmware_v2() 779f83a91d4f Bluetooth: hci_event: validate skb length for unknown CC opcode 59b9ed956c7d riscv: ptdump: use seq_puts() in pt_dump_seq_puts() macro f34ba22989da riscv: stacktrace: Disable KASAN checks for non-current tasks 19682d62547c riscv: Improve exception and system call latency d4187ec26410 net: libwx: fix device bus LAN ID 6d7567cc0bc0 Revert "wifi: ath10k: avoid unnecessary wait for service ready message" 994ec06b7ba1 media: uvcvideo: Use heuristic to find stream entity 85866cbd5edb ALSA: hda/realtek: Audio disappears on HP 15-fc000 after warm boot again ad71f31b62a4 ceph: refactor wake_up_bit() pattern of calling 34353a0cd39b ceph: add checking of wait_for_completion_killable() return value 068e002bc0b6 ASoC: meson: aiu-encoder-i2s: fix bit clock polarity 32df8c333071 kbuild: uapi: Strip comments before size type check 05a378912231 rtc: pcf2127: fix watchdog interrupt mask on pcf2131 86df8ade88d2 fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds 81e829f699ee tools: lib: thermal: use pkg-config to locate libnl3 fe6d58972d3d tools: lib: thermal: don't preserve owner in install fa7d0c8b2350 tools bitmap: Add missing asm-generic/bitsperlong.h include a1a09685874e ACPI: property: Return present device nodes only on fwnode interface 6a1e5fa2d1fd scsi: ufs: core: Include UTP error in INT_FATAL_ERRORS ece711f11c0d 9p: sysfs_init: don't hardcode error to ENOMEM 4f3926f060d7 cpufreq: tegra186: Initialize all cores to max frequencies cdd2b67dec44 9p: fix /sys/fs/9p/caches overwriting itself 0ab9ef66a89e NTB: epf: Allow arbitrary BAR mapping 751734d4cc7f clk: ti: am33xx: keep WKUP_DEBUGSS_CLKCTRL enabled 824b92e6d24a clk: at91: clk-sam9x60-pll: force write to PLL_UPDT register 7235f9969d9e clk: at91: clk-master: Add check for divide by 3 544f8254c1fb ARM: at91: pm: save and restore ACR during PLL disable/enable 9f9110995873 rtc: pcf2127: clear minute/second interrupt 30e5bbcb98a9 clk: sunxi-ng: sun6i-rtc: Add A523 specifics 3c5e016d2328 um: Fix help message for ssl-non-raw c34d6dd9ab35 fs/hpfs: Fix error code for new_inode() failure in mkdir/create/mknod/symlink da98803bccaf btrfs: mark dirty extent range for out of bound prealloc extents 352056b6b669 RDMA/hns: Fix wrong WQE data when QP wraps around d4837e720ff0 RDMA/hns: Fix the modification of max_send_sge bc8c9b8f6387 RDMA/irdma: Set irdma_cq cq_num field during CQ create d559ddd687ed RDMA/irdma: Remove unused struct irdma_cq fields cd7e3bb8e200 RDMA/irdma: Fix SD index calculation 57d352e198de ACPICA: Update dsmethod.c to get rid of unused variable warning f1d84a3d6521 char: misc: restrict the dynamic range to exclude reserved minors d2993a7e98eb ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr c3e4a6de0d1f smb: client: transport: avoid reconnects triggered by pending task work a024cf4d9f84 ksmbd: use sock_create_kern interface to create kernel socket e81e6d6d99b1 ftrace: Fix softlockup in ftrace_module_enable e09a096104fc orangefs: fix xattr related buffer overflow... df7517553995 page_pool: Clamp pool size to max 16K pages 2648c810a25f 6pack: drop redundant locking and refcounting e1806387c7f9 exfat: limit log print for IO error 3a18f8ae062e ALSA: usb-audio: add mono main switch to Presonus S1824c 799cd62cbcc3 Bluetooth: bcsp: receive data only if registered 03371c021818 Bluetooth: SCO: Fix UAF on sco_conn_free c9d6e46c2fe8 Bluetooth: btusb: Check for unexpected bytes when defragmenting HCI frames 7eab99ffe36e net: macb: avoid dealing with endianness in macb_set_hwaddr() deb3d014d98c net/mlx5e: Don't query FEC statistics when FEC is disabled 2bccb8072b28 ASoC: tlv320aic3x: Fix class-D initialization for tlv320aic3007 91a5cec5b9d6 ASoC: stm32: sai: manage context in set_sysclk callback 93f8d67ef8b5 amd/amdkfd: resolve a race in amdgpu_amdkfd_device_fini_sw d932fb292f83 ext4: increase IO priority of fastcommit 199ab7b43c5e fs: ext4: change GFP_KERNEL to GFP_NOFS to avoid deadlock 7ec8ac9f73d4 accel/habanalabs: support mapping cb with vmalloc-backed coherent memory f6108a8164c4 accel/habanalabs/gaudi2: read preboot status after recovering from dirty state a7d72a80e24a accel/habanalabs: return ENOMEM if less than requested pages were pinned 193e269df045 scsi: mpt3sas: Add support for 22.5 Gbps SAS link rate 88d6a9ea0688 accel/habanalabs/gaudi2: fix BMON disable configuration e30995ccd9b8 scsi: libfc: Fix potential buffer overflow in fc_ct_ms_fill() 31116de5ee11 net: bridge: Install FDB for bridge MAC on VLAN 0 eacfd08b26a0 nfs4_setup_readdir(): insufficient locking for ->d_parent->d_inode dereferencing e30618333212 NFSv4.1: fix mount hang after CREATE_SESSION failure 4e2f5f7e07f9 NFSv4: handle ERR_GRACE on delegation recalls 1b65fb8723ed drm/amd/display: Add AVI infoframe copy in copy_stream_update_to_stream 7f097986b342 wifi: ath12k: Increase DP_REO_CMD_RING_SIZE to 256 a5cb7c982210 remoteproc: qcom: q6v5: Avoid handling handover twice 221952c07b58 PCI/PM: Skip resuming to D0 if device is disconnected b679c74e5598 vfio: return -ENOTTY for unsupported device feature 5561974e62e0 sparc64: fix prototypes of reads[bwl]() d170582b4bd4 sparc/module: Add R_SPARC_UA64 relocation handling 1810b2fd7375 PCI: cadence: Check for the existence of cdns_pcie::ops before using it 0b02dc2b4e78 r8169: set EEE speed down ratio to 1 4e21e047a25c net: intel: fm10k: Fix parameter idx set but not used c9e7bb702b80 wifi: ath10k: Fix connection after GTK rekeying df0a0f229f73 iommu/vt-d: Replace snprintf with scnprintf in dmar_latency_snapshot() 4cacebe3dca9 net: ethernet: microchip: sparx5: make it selectable for ARCH_LAN969X 855cd3a0c4d5 net: phy: clear link parameters on admin link down c5fa9fed6272 ASoC: qcom: sc8280xp: explicitly set S16LE format in sc8280xp_be_hw_params_fixup() 2a9575a37218 jfs: fix uninitialized waitqueue in transaction manager ce054a366c54 jfs: Verify inode mode when loading from disk ec2b3f83b4c8 ipv6: np->rxpmtu race annotation 765f8816d395 f2fs: fix infinite loop in __insert_extent_tree() 97e01c389402 usb: xhci: plat: Facilitate using autosuspend for xhci plat devices 8b21ba5da050 usb: mon: Increase BUFF_MAX to 64 MiB to support multi-MB URBs 2611313d3bf4 allow finish_no_open(file, ERR_PTR(-E...)) 3c0725aceb14 scsi: lpfc: Define size of debugfs entry for xri rebalancing 1169f4f03fb1 scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup a0eb7e8f8266 scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET 88ac95b17a03 scsi: ufs: core: Disable timestamp functionality if not supported 58b8f44a64ed selftests/Makefile: include $(INSTALL_DEP_TARGETS) in clean target to clean net/lib dependency 0df3da8888fa drm/amdgpu: reject gang submissions under SRIOV a7efc2b0359c HID: i2c-hid: Resolve touchpad issues on Dell systems during S4 0d0be8117eda ethernet: Extend device_get_mac_address() to use NVMEM 7613c06ffa89 page_pool: always add GFP_NOWARN for ATOMIC allocations fe3f8b671618 drm/amd/display: Disable VRR on DCE 6 ced20843717e drm/amd/display: Fix DVI-D/HDMI adapters eeb8ea76c912 drm/amd: Avoid evicting resources at S5 19618f480cda drm/amdgpu: Use memdup_array_user in amdgpu_cs_wait_fences_ioctl a8a9f053e1d4 ALSA: serial-generic: remove shared static buffer 59efb432c318 wifi: mt76: mt7996: Temporarily disable EPCS bf0b265fcb95 wifi: mt76: mt7921: Add 160MHz beamformee capability for mt7922 device 81f9b19af302 net/cls_cgroup: Fix task_get_classid() during qdisc run 160b03e57e62 crypto: caam - double the entropy delay interval for retry 01be9fad74e4 PCI: dwc: Verify the single eDMA IRQ in dw_pcie_edma_irq_verify() 27598de36043 crypto: sun8i-ce - remove channel timeout field a3d9de6ac510 watchdog: s3c2410_wdt: Fix max_timeout being calculated larger 705c5a2f5517 HID: asus: add Z13 folio to generic group for multitouch to work c018a87942bf udp_tunnel: use netdev_warn() instead of netdev_WARN() ee957d6c0886 selftests: Replace sleep with slowwait 518319c98097 eth: 8139too: Make 8139TOO_PIO depend on !NO_IOPORT_MAP c85be890e057 selftests: Disable dad for ipv6 in fcnal-test.sh 2ddd6bf6b671 x86/kvm: Prefer native qspinlock for dedicated vCPUs irrespective of PV_UNHALT 1a6ffaeddf76 netfilter: nf_reject: don't reply to icmp error messages b94b57fd7eb9 selftests: traceroute: Use require_command() 5df7e8bc4d23 media: redrat3: use int type to store negative error codes d15b3e4107b4 selftests: net: replace sleeps in fcnal-test with waits f5781438ba04 net: sh_eth: Disable WoL if system can not suspend cedcc490241b phy: rockchip: phy-rockchip-inno-csidphy: allow writes to grf register 0 f0cc4b6c443a phy: renesas: r8a779f0-ether-serdes: add new step added to latest datasheet cf6781d97c69 phy: cadence: cdns-dphy: Enable lower resolutions in dphy 9406ec01a077 wifi: mac80211: Fix HE capabilities element check 17249b2a6527 ntfs3: pretend $Extend records as regular files b96d08ce3f72 scsi: ufs: host: mediatek: Disable auto-hibern8 during power mode changes 30220dda83f8 net: phy: marvell: Fix 88e1510 downshift counter errata 5122665ca5f3 scsi: ufs: host: mediatek: Enhance recovery on hibernation exit failure 8fefca6a12e6 scsi: ufs: host: mediatek: Enhance recovery on resume failure 5bde774bbfbf media: i2c: og01a1b: Specify monochrome media bus format instead of Bayer f32fe18efc95 media: ov08x40: Fix the horizontal flip control 81015dd217a4 char: Use list_del_init() in misc_deregister() to reinitialize list pointer d89343fce39a drm/msm: make sure to not queue up recovery more than once ea37884097a0 usb: cdns3: gadget: Use-after-free during failed initialization and exit of cdnsp gadget 38c179c52d22 usb: gadget: f_hid: Fix zero length packet transfer 3c66bc0acc08 drm/amdgpu: add support for cyan skillfish gpu_info 65240044398e drm/amdgpu: don't enable SMU on cyan skillfish b17fe7f5a2de drm/amd: add more cyan skillfish PCI ids aa98b4c1f84c iommu/apple-dart: Clear stream error indicator bits for T8110 DARTs 44a764aec64b iommu/amd: Skip enabling command/event buffers for kdump a5c425011c31 smsc911x: add second read of EEPROM mac when possible corruption seen 170bd191fa6c net: call cond_resched() less often in __release_sock() 194a056bdc6f ALSA: usb-audio: apply quirk for MOONDROP Quark2 56384ec84c15 media: verisilicon: Explicitly disable selection api ioctls for decoders 98dfcb4c287b media: adv7180: Only validate format in querystd 20e3fe278b2f media: adv7180: Do not write format to device in set_fmt f195ac1e3542 media: adv7180: Add missing lock in suspend callback 7ad7e582de8e net: nfc: nci: Increase NCI_DATA_TIMEOUT to 3000 ms 7816b60922c8 ipv6: Add sanity checks on ipv6_devconf.rpl_seg_enabled 2412c6aa42fc drm/amdgpu: Allow kfd CRIU with no buffer objects 0d629175a7ee drm/msm/dsi/phy_7nm: Fix missing initial VCO rate b093c81df23f drm/msm/dsi/phy: Toggle back buffer resync after preparing PLL 196a75590f40 dmaengine: dw-edma: Set status for callback_result 269d69a50f21 dmaengine: mv_xor: match alloc_wc and free_wc bb434f67b46b dmaengine: sh: setup_xref error handling a3eebe03da5f ptp: Limit time setting of PTP clocks ffdcbb30d3cd scsi: pm8001: Use int instead of u32 to store error codes c1751c5fdddf crypto: qat - use kcalloc() in qat_uclo_map_objs_from_mof() 49d9ac3af3a1 mips: lantiq: danube: rename stp node on EASY50712 reference board e20d0efe03ea mips: lantiq: xway: sysctrl: rename stp clock 98654c8434c6 mips: lantiq: danube: add missing device_type in pci node ae51686278ce mips: lantiq: danube: add model to EASY50712 dts 6c7de5a8957f mips: lantiq: danube: add missing properties to cpu node f589021c3347 drm/amdgpu: Respect max pixel clock for HDMI and DVI-D (v2) 1a91de0fdbdf media: fix uninitialized symbol warnings 3e283f38792e drm/amdkfd: Tie UNMAP_LATENCY to queue_preemption 1de2e48b1f33 drm/amdkfd: fix vram allocation failure for a special case a7953bf98522 fuse: zero initialize inode private data bb9b505f02e2 net: phy: fixed_phy: let fixed_phy_unregister free the phy_device 4aa5acd88fb4 remoteproc: wkup_m3: Use devm_pm_runtime_enable() helper 742f354124aa extcon: adc-jack: Fix wakeup source leaks on device unbind 22c24c7c5e81 scsi: pm80xx: Fix race condition caused by static variables bbfe60eba369 scsi: mpi3mr: Fix controller init failure on fault during queue creation df64a4d69d3d rds: Fix endianness annotation for RDS_MPATH_HASH dcaec33d8deb ALSA: usb-audio: Add validation of UAC2/UAC3 effect units 31014c39d6d7 PCI/P2PDMA: Fix incorrect pointer usage in devm_kfree() call 9b8dfaea5cea net: Call trace_sock_exceed_buf_limit() for memcg failure with SK_MEM_RECV. 63fbe0e64132 net: stmmac: Correctly handle Rx checksum offload errors c1d2b289b9fc net: When removing nexthops, don't call synchronize_net if it is not necessary 7d4ad49ba0c1 char: misc: Does not request module for miscdevice with dynamic minor 4a61f3eb8913 char: misc: Make misc_register() reentry for miscdevice who wants dynamic minor 9001552e105f usb: gadget: f_ncm: Fix MAC assignment NCM ethernet 9e2c2d3e7209 iio: adc: imx93_adc: load calibrated values even calibration failed 8bbda8e00cde iio: adc: spear_adc: mask SPEAR_ADC_STATUS channel and avg sample before setting register fdd587be5936 drm/amdkfd: Handle lack of READ permissions in SVM mapping 2b5128caee83 drm/bridge: display-connector: don't set OP_DETECT for DisplayPorts 8231e8011846 media: imon: make send_packet() more robust f28dde240160 net: ipv6: fix field-spanning memcpy warning in AH output b34fc4fe9a85 scsi: ufs: host: mediatek: Fix invalid access in vccqx handling 2d5551640dde scsi: ufs: host: mediatek: Change reset sequence for improved stability 83a26fa18d47 scsi: ufs: host: mediatek: Assign power mode userdata before FASTAUTO mode change 137dea7d7d00 scsi: ufs: host: mediatek: Fix auto-hibern8 timer configuration 68245d8fe2fa bridge: Redirect to backup port when port is administratively down 86e4faf48539 s390/pci: Use pci_uevent_ers() in PCI recovery 8a54de9609d8 powerpc/eeh: Use result of error_detected() in uevent 74e9ec803b6d thunderbolt: Use is_pciehp instead of is_hotplug_bridge 7d87c41061e8 ice: Don't use %pK through printk or tracepoints bbfcf5db8c08 net: stmmac: Check stmmac_hw_setup() in stmmac_resume() 7a500e923127 x86/vsyscall: Do not require X86_PF_INSTR to emulate vsyscall 79a27f405d02 media: i2c: Kconfig: Ensure a dependency on HAVE_CLK for VIDEO_CAMERA_SENSOR 07f3f65682a9 drm/tidss: Set crtc modesetting parameters with adjusted mode 1f950a449a4d drm/bridge: cdns-dsi: Don't fail on MIPI_DSI_MODE_VIDEO_BURST be9fc98a4198 drm/bridge: cdns-dsi: Fix REG_WAKEUP_TIME value 105ed683b400 drm/tidss: Use the crtc_* timings when programming the HW 3f964091abb0 media: amphion: Delete v4l2_fh synchronously in .release() 48bb7f8ab984 media: pci: ivtv: Don't create fake v4l2_fh b567d1c40c70 drm/amdkfd: return -ENOTTY for unsupported IOCTLs 153353da60d0 wifi: rtw88: sdio: use indirect IO for device registers before power-on da9d28d79342 selftests/net: Ensure assert() triggers in psock_tpacket.c 517abdc57cfb selftests/net: Replace non-standard __WORDSIZE with sizeof(long) * 8 d7f4354d3de9 PCI: Disable MSI on RDC PCI to PCIe bridges ce054c331334 drm/nouveau: replace snprintf() with scnprintf() in nvkm_snprintbf() cb02acebd3d0 drm/amdgpu/jpeg: Hold pg_lock before jpeg poweroff a0a44b1e0873 drm/amd/pm: Use cached metrics data on arcturus d4b2c3a3bc01 drm/amd/pm: Use cached metrics data on aldebaran f17f0100f702 drm/amd/display: update dpp/disp clock from smu clock table 8c05069ce157 drm/amd/display: add more cyan skillfish devices 2728e38ac27e drm/amd/display: Increase AUX Intra-Hop Done Max Wait Duration acb3c23080ca drm/amd/display: ensure committing streams is seamless f6bea0255090 mfd: da9063: Split chip variant reading in two bus transactions 830c39871f16 mfd: madera: Work around false-positive -Wininitialized warning d9e793728021 mfd: stmpe-i2c: Add missing MODULE_LICENSE 784f62e68a6c mfd: stmpe: Remove IRQ domain upon removal 5ebb9bc9a662 tools/power x86_energy_perf_policy: Prefer driver HWP limits 941ac2bcb1ac tools/power x86_energy_perf_policy: Enhance HWP enable 91d267901aab tools/power x86_energy_perf_policy: Fix incorrect fopen mode usage 5b69364cbef1 tools/cpupower: Fix incorrect size in cpuidle_state_disable() efa623350136 hwmon: (dell-smm) Add support for Dell OptiPlex 7040 52d4d91db6f8 hwmon: (asus-ec-sensors) increase timeout for locking ACPI mutex 1721c2938d00 uprobe: Do not emulate/sstep original instruction when ip is changed 1a8ca4b9b3e3 nvme: Use non zero KATO for persistent discovery connections 9c55db583707 bpf: Clear pfmemalloc flag when freeing all fragments d8d03481351e riscv: bpf: Fix uninitialized symbol 'retval_off' e1729523759c blk-cgroup: fix possible deadlock while configuring policy 8613bed1f283 clocksource/drivers/vf-pit: Replace raw_readl/writel to readl/writel f3c6ae35a7e8 spi: rpc-if: Add resume support for RZ/G3E 4aced32596ea futex: Don't leak robust_list pointer on exec race b8961542d2ae cpuidle: Fail cpuidle device registration if there is one already 4b78d57b7dd3 bpftool: Fix -Wuninitialized-const-pointer warnings with clang >= 21 c77fcb6cc6f0 power: supply: qcom_battmgr: handle charging state change notifications 877d4689e546 pmdomain: apple: Add "apple,t8103-pmgr-pwrstate" 5aeb8550e8c3 tools/cpupower: fix error return value in cpupower_write_sysfs() 7d0e0563256f video: backlight: lp855x_bl: Set correct EPROM start for LP8556 edf3b828871d bpf: Do not limit bpf_cgroup_from_id to current's namespace 25f4bf1f7979 nvme-fc: use lock accessing port_state and rport state 601ed47b2363 nvmet-fc: avoid scheduling association deletion twice 5ca9367da5be tee: allow a driver to allocate a tee_device without a pool 12296895e962 ACPICA: dispatcher: Use acpi_ds_clear_operands() in acpi_ds_call_control_method() 8c1c0ac31949 mmc: sdhci-msm: Enable tuning for SDR50 mode for SD card 46fc8ad19ce9 ARM: tegra: transformer-20: fix audio-codec interrupt 0c9a3917a61e ARM: tegra: transformer-20: add missing magnetometer interrupt ca7c230fff41 soc/tegra: fuse: Add Tegra114 nvmem cells and fuse lookups c7117d25e3db arm64: zynqmp: Revert usb node drive strength and slew rate for zcu106 e60b141dfc93 irqchip/loongson-pch-lpc: Use legacy domain for PCH-LPC IRQ controller 552659030ab8 hwmon: sy7636a: add alias 8161d9b78915 power: supply: sbs-charger: Support multiple devices 0babd39ceb5d pinctrl: keembay: release allocated memory in detach path 4f8d061ac497 hwmon: (sbtsi_temp) AMD CPU extended temperature range support 5617c8165cf5 hwmon: (k10temp) Add device ID for Strix Halo 44729682b694 hwmon: (k10temp) Add thermal support for AMD Family 1Ah-based models 3c4c5184631a power: supply: qcom_battmgr: add OOI chemistry dcba7b98dcb7 ACPI: scan: Add Intel CVS ACPI HIDs to acpi_ignore_dep_ids[] 338f490a04c6 ACPI: PRM: Skip handlers with NULL handler_address or NULL VA 3e121479021d irqchip/gic-v2m: Handle Multiple MSI base IRQ Alignment fea338c7e46f selftests/bpf: Upon failures, exit with code 1 in test_xsk.sh 233317cc29dd arc: Fix __fls() const-foldability via __builtin_clzl() 8d6791c480f2 cpufreq/longhaul: handle NULL policy in longhaul_exit 854241f8e4ff selftests/bpf: Fix bpf_prog_detach2 usage in test_lirc_mode2 d45325fc6a73 irqchip/sifive-plic: Respect mask state when setting affinity 0f7149ac7691 memstick: Add timeout to prevent indefinite waiting 4cfc3b63ea09 mmc: host: renesas_sdhi: Fix the actual clock fa7c118e0b83 pinctrl: single: fix bias pull up/down handling in pin_config_set 667789d3e29f bpf: Don't use %pK through printk 8c8f8f7f84e8 spi: loopback-test: Don't use %pK through printk 3f274df8526e soc: qcom: smem: Fix endian-unaware access of num_entries 2a0db48dd8c2 soc: aspeed: socinfo: Add AST27xx silicon IDs fc1141a530df usb: gadget: f_fs: Fix epfile null pointer access after ep enable. b63c061be622 s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump b61ed8005bd3 drm/sysfb: Do not dereference NULL pointer in plane reset b5493968ac7a drm/sched: Fix race in drm_sched_entity_select_rq() 7088465f1081 s390: Disable ARCH_WANT_OPTIMIZE_HUGETLB_VMEMMAP a2ae01c674e1 sched/fair: Use all little CPUs for CPU-bound workloads 4ced68c43a15 sched/pelt: Avoid underestimation of task utilization fe04654ecb65 net: phy: dp83867: Disable EEE support as not implemented a60be7339353 cpuidle: governors: menu: Select polling state in some more cases 58c347aa881d cpuidle: governors: menu: Rearrange main loop in menu_select() 6e43d5f0e593 s390/pci: Restore IRQ unconditionally for the zPCI device 49888b3b457b mptcp: fix MSG_PEEK stream corruption a5a896f8315d drm/mediatek: Fix device use-after-free on unbind 2664bfd8969d regmap: slimbus: fix bus_context pointer in regmap init calls 482b568e8680 block: make REQ_OP_ZONE_OPEN a write operation 37089e2258d6 block: fix op_is_zone_mgmt() to handle REQ_OP_ZONE_RESET_ALL 02a16148f842 drm/amd/pm/powerplay/smumgr: Fix PCIeBootLinkLevel value on Iceland e69d5d11ed0c drm/amd/pm/powerplay/smumgr: Fix PCIeBootLinkLevel value on Fiji 224932faac5c drm/amd/pm: fix smu table id bound check issue in smu_cmn_update_table() ca5dc7ef4c1a sfc: fix potential memory leak in efx_mae_process_mport() 25191342d576 net: hns3: return error code when function fails 1cd109318d69 drm/etnaviv: fix flush sequence logic 83312609ff32 Bluetooth: hci_core: Fix tracking of periodic advertisement e3ba2b1f7d1a Bluetooth: ISO: Fix another instance of dst_type handling 48d31ac5af5f Bluetooth: HCI: Fix tracking of advertisement set/instance 0x00 504554dbcbb4 Bluetooth: btmtksdio: Add pmctrl handling for BT closed state during reset 932c0a4f77ac Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once 9a579d6a3951 usbnet: Prevents free active kevent 5d8f28a8b50e libbpf: Fix powerpc's stack register definition in bpf_tracing.h 2e97da83839f ASoC: fsl_sai: fix bit order for DSD format 06d711b4d620 ASoC: Intel: avs: Unprepare a stream when XRUN occurs 0dd6474ced33 crypto: aspeed - fix double free caused by devm 8e8bcd7b2925 crypto: aspeed-acry - Convert to platform remove callback returning void 42f848f8e5ea bpf: Do not audit capability check in do_jit() 5b81a79bada2 scsi: ufs: core: Initialize value of an attribute returned by uic cmd 645114110354 bpf: Sync pending IRQ work before freeing ring buffer c898547ed64e ALSA: usb-audio: fix control pipe direction 431da7f85430 drm/msm/a6xx: Fix GMU firmware parser ad5852941409 wifi: ath12k: free skb during idr cleanup callback 0ec88db40ce0 wifi: ath11k: Add missing platform IDs for quirk table b8850b4370fa wifi: ath10k: Fix memory leak on unsupported WMI command 1811c610653c x86/fpu: Ensure XFD state on signal delivery 939c4e33005e smb: client: fix potential cfid UAF in smb2_query_info_compound 6dbd3d9573e1 ASoC: qdsp6: q6asm: do not sleep while atomic aa826b05c68f mptcp: restore window probe f7e5fc50791b mptcp: drop bogus optimization in __mptcp_check_push() 4a28d1898392 fbdev: valkyriefb: Fix reference count leak in valkyriefb_init e097cdbac72e fbdev: pvr2fb: Fix leftover reference to ONCHIP_NR_DMA_CHANNELS 64e3175d1c8a wifi: brcmfmac: fix crash while sending Action Frames in standalone AP Mode e059b0560040 Bluetooth: rfcomm: fix modem control handling 9ba1a7802ca9 fbdev: bitblit: bound-check glyph index in bit_putcs* e992faffa846 ACPI: button: Call input_free_device() on failing input device registration 4e85246ec0d0 ACPI: video: Fix use-after-free in acpi_video_switch_brightness() 3fe5494db5fe fbdev: atyfb: Check if pll_ops->init_pll failed 468f78276a37 fbcon: Set fb_display[i]->mode to NULL when the mode is released 814a55f44d8a net: usb: asix_devices: Check return value of usbnet_get_endpoints 03524ccff698 NFSD: Fix crash in nfsd4_read_release() (From OE-Core rev: 8af342d12598e3d7c3aca6a81ca4e16aee4b639b) Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> Signed-off-by: Yoann Congal <yoann.congal@smile.fr> Signed-off-by: Paul Barker <paul@pbarker.dev> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>	2026-02-27 17:45:06 +00:00
Bruce Ashfield	2c30acaf10	linux-yocto/6.6: update to v6.6.116 ... Updating linux-yocto/6.6 to the latest korg -stable release that comprises the following commits: 0a805b6ea8cda Linux 6.6.116 63dde0eec59b4 gpio: idio-16: Define fixed direction of the GPIO lines 92a15817f0fbd gpio: regmap: add the .fixed_direction_output configuration parameter 38f50558b50cf gpio: regmap: Allow to allocate regmap-irq device ddd31f5a5ff39 bits: introduce fixed-type GENMASK_U*() 739aa67ef147b bits: add comments and newlines to #if, #else and #endif directives 0e660d8224d07 xhci: dbc: fix bogus 1024 byte prefix if ttyDBC read races with stall event 3aa367e6aae7a xhci: dbc: Avoid event polling busyloop if pending rx transfers are inactive. dae8555062cf0 xhci: dbc: Improve performance by removing delay in transfer event polling. 6f126ef0117c9 xhci: dbc: Allow users to modify DbC poll interval via sysfs 1c5cec6625a3f xhci: dbc: poll at different rate depending on data transfer activity afdf4f5108513 serial: sc16is7xx: remove useless enable of enhanced features 74c8eafd42b48 serial: sc16is7xx: refactor EFR lock 7db1a5451bcb9 serial: sc16is7xx: reorder code to remove prototype declarations 2f7592e0bdfc6 serial: sc16is7xx: remove unused to_sc16is7xx_port macro 39a7305e2abad selftests: mptcp: join: mark 'delete re-add signal' as skipped if not supported f87c246d7c1ef selftests: mptcp: disable add_addr retrans in endpoint_tests 1f1632dd97dae mptcp: pm: in-kernel: C-flag: handle late ADD_ADDR 4784326cb26a4 arch: Add the macro COMPILE_OFFSETS to all the asm-offsets.c 797f15c2b15e9 btrfs: use smp_mb__after_atomic() when forcing COW in create_pending_snapshot() 93bcd360c503e btrfs: use level argument in log tree walk callback replay_one_buffer() ef64d81fb7ddd btrfs: always drop log root tree reference in btrfs_replay_log() 3b838f39f4be8 btrfs: scrub: replace max_t()/min_t() with clamp() in scrub_throttle_dev_io() fb6ceb6cde7bc btrfs: zoned: refine extent allocator hint selection 8fabf4d56fd8f btrfs: zoned: return error from btrfs_zone_finish_endio() 625aecafb1bd2 EDAC/mc_sysfs: Increase legacy channel support to 16 0956cdef60de8 x86/bugs: Fix reporting of LFENCE retpoline 077823b06f1cc x86/bugs: Report correct retbleed mitigation status 5c63fb0b382f9 perf: Skip user unwind if the task is a kernel thread 89fbfc799e1d5 perf: Have get_perf_callchain() return NULL if crosstask and user are set 34b5aba8511a1 perf: Use current->flags & PF_KTHREAD|PF_USER_WORKER instead of current->mm == NULL a61ed1fb165b0 audit: record fanotify event regardless of presence of rules 6ffa9d6618718 net/sched: sch_qfq: Fix null-deref in agg_dequeue e5bbb12db2c75 Linux 6.6.115 2dc125f5da134 ksmbd: transport_ipc: validate payload size before reading handle 2ae71c3770c39 gpio: ljca: Initialize num before accessing item in ljca_gpio_config bfd17b6138df0 fuse: fix livelock in synchronous file put from fuseblk workers c7ec75f3cbf73 fuse: allocate ff->release_args only if release is needed c34b09cbd6fc0 s390/cio: Update purge function to unregister the unused subchannels 41fe20cfbcd43 x86/resctrl: Fix miscount of bandwidth event when reactivating previously unavailable RMID bc1c6b803e14e fs/notify: call exportfs_encode_fid with s_umount df75bfc287029 xfs: always warn about deprecated mount options b89e20a365442 devcoredump: Fix circular locking dependency with devcd->mutex. 7c691e10ca958 serial: 8250_mtk: Enable baud clock and manage in runtime PM a8527907f28d7 serial: 8250_exar: add support for Advantech 2 port card with Device ID 0x0018 f354f7510ff0e serial: 8250_dw: handle reset control deassert error 928a9c9b97ea2 dt-bindings: usb: dwc3-imx8mp: dma-range is required only for imx8mp 91b2d5fcde526 tcpm: switch check for role_sw device with fw_node 6fb8fbc0aa542 most: usb: hdm_probe: Fix calling put_device() before device initialization 72427dc6f8752 most: usb: Fix use-after-free in hdm_disconnect 9a297a68c3ba4 misc: fastrpc: Fix dma_buf object leak in fastrpc_map_lookup a068cbe71c1cb mei: me: add wildcat lake P DID d4854eff25efb comedi: fix divide-by-zero in comedi_buf_munge() c055480e04561 binder: remove "invalid inc weak" check 3a25640814ff8 x86/microcode: Fix Entrysign revision check for Zen1/Naples 03d7e8c749428 xhci: dbc: enable back DbC in resume if it was enabled before suspend 2c217d0e86885 usb: raw-gadget: do not limit transfer length cbf278c90c64a usb/core/quirks: Add Huawei ME906S to wakeup quirk 102b9b8942e11 USB: serial: option: add Telit FN920C04 ECM compositions da06de8f1656f USB: serial: option: add Quectel RG255C 7070c31465f1c USB: serial: option: add UNISOC UIS7720 6d63703bec0c1 sched: Remove never used code in mm_cid_get() 770b33a1a8e46 io_uring: correct __must_hold annotation in io_install_fixed_file 5ba12858b664f gpio: ljca: Fix duplicated IRQ mapping 7efa69e0688b5 gpio: update Intel LJCA USB GPIO driver d11f2156a93e3 hwmon: (sht3x) Fix error handling dc1ac7c1a355b RISC-V: Don't print details of CPUs disabled in DT 00b58d2c25d10 RISC-V: Define pgprot_dmacoherent() for non-coherent devices c7849e8cb22a9 firmware: arm_scmi: Fix premature SCMI_XFER_FLAG_IS_RAW clearing in raw mode d719ce9f286c4 firmware: arm_scmi: Account for failed debug initialization e42ec4eccebe2 spi: spi-nxp-fspi: add extra delay after dll locked 18d1c06b72d56 selftests: mptcp: join: mark implicit tests as skipped if not supported c8aa3fd5b4a03 selftests: mptcp: join: mark 'flush re-add' as skipped if not supported 5e46e4dc829e1 net: ravb: Ensure memory write completes before ringing TX doorbell d064092c3fc34 net: ravb: Enforce descriptor type ordering 36838ece81545 net: usb: rtl8150: Fix frame padding 9f2db04c21cff net: stmmac: dwmac-rk: Fix disabling set_clock_selection 42ed0784d11ad vsock: fix lock inversion in vsock_assign_transport() aa6a21409dd62 ocfs2: clear extent cache after moving/defragmenting extents c7ae6b99c982d MIPS: Malta: Fix keyboard resource preventing i8042 driver from registering fa41d6f4b1382 cifs: Fix TCP_Server_Info::credits to be signed 356c7fdf684cd can: netlink: can_changelink(): allow disabling of automatic restart a9da00c9cee99 ACPICA: Work around bogus -Wstringop-overread warning since GCC 11 29d96bcc14952 Revert "cpuidle: menu: Avoid discarding useful information" a0c16f20d23cf gpio: 104-idio-16: Define maximum valid register address offset 67adc5500ad7c gpio: pci-idio-16: Define maximum valid register address offset 3373f263bb647 arch_topology: Fix incorrect error check in topology_parse_cpu_capacity() 941096f618c50 dma-debug: don't report false positives with DMA_BOUNCE_UNALIGNED_KMALLOC 15b80f63269d3 net: bonding: fix possible peer notify event loss or dup issue cb9055ba30306 sctp: avoid NULL dereference when chunk data buffer is missing 4f32f754343a8 arm64, mm: avoid always making PTE dirty in pte_mkwrite() 8b051d7f530e8 net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for striding RQ 72328f25755ee net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for legacy RQ 9d7bc56c550eb net/mlx5e: Reuse per-RQ XDP buffer to avoid stack zeroing overhead b411759b9c1a9 selftests: net: fix server bind failure in sctp_vrf.sh bbcbbb9d68626 selftests/net: convert sctp_vrf.sh to run it in unique namespace dd2a7aba7f8d8 can: bxcan: bxcan_start_xmit(): use can_dev_dropped_skb() instead of can_dropped_invalid_skb() 05e2c6ef4a9da dpaa2-eth: fix the pointer passed to PTR_ALIGN on Tx path 050732ace1dbd net: enetc: correct the value of ENETC_RXB_TRUESIZE 2781ca82ce8ca net: enetc: fix the deadlock of enetc_mdio_lock 74c94df40ede9 net: Tree wide: Replace xdp_do_flush_map() with xdp_do_flush(). 6993a51388bdc rtnetlink: Allow deleting FDB entries in user namespace 362f4c52efd05 net/mlx5e: Return 1 instead of 0 in invalid case in mlx5e_mpwrq_umr_entry_size() 550e311e1b16f Unbreak 'make tools/*' for user-space targets 6aef39551e60a smb: server: let smb_direct_flush_send_list() invalidate a remote key first 6ef6ac49fdf1d drivers/perf: hisi: Relax the event ID check in the framework 99bdd0580d7f2 powerpc/32: Remove PAGE_KERNEL_TEXT to fix startup failure 6aee82d0bfeee m68k: bitops: Fix find_*_bit() signatures 5f43ab41ddab1 lkdtm: fortify: Fix potential NULL dereference on kmalloc failure 24cac083a76b9 hfsplus: return EIO when type of hidden directory mismatch in hfsplus_fill_super() cfafefcb0e1fc hfs: fix KMSAN uninit-value issue in hfs_find_set_zero_bits() 8c18c84ecbfa3 dlm: check for defined force value in dlm_lockspace_release 2bb8bc99b1a7a hfsplus: fix KMSAN uninit-value issue in hfsplus_delete_cat() 4f40a2b3969da hfs: validate record offset in hfsplus_bmap_alloc a5bfb13b4f406 hfsplus: fix KMSAN uninit-value issue in __hfsplus_ext_cache_extent() 714e70f603bee hfs: make proper initalization of struct hfs_find_data 7870fbdce00ef hfs: clear offset and space out of valid records in b-tree node b1ec9faef7e36 nios2: ensure that memblock.current_limit is set when setting pfn limits 813d3d18cfe47 exec: Fix incorrect type for ret (From OE-Core rev: 99d8bdc07f708158cc98dfce11739e1fbaa08d31) Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> Signed-off-by: Yoann Congal <yoann.congal@smile.fr> Signed-off-by: Paul Barker <paul@pbarker.dev> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>	2026-02-27 17:45:06 +00:00
Bruce Ashfield	7754aa3731	linux-yocto/6.6: update to v6.6.114 ... Updating linux-yocto/6.6 to the latest korg -stable release that comprises the following commits: 4a243110dc88 Linux 6.6.114 d060f49771b5 PCI: tegra194: Reset BARs when running in PCIe endpoint mode ed518734a3c1 PCI: j721e: Fix programming sequence of "strap" settings d763fffd4284 PCI: j721e: Enable ACSPCIE Refclk if "ti,syscon-acspcie-proxy-ctrl" exists 92b82e232b8d mm/ksm: fix flag-dropping behavior in ksm_madvise 499089376206 ksmbd: browse interfaces list on FSCTL_QUERY_INTERFACE_INFO IOCTL 65dc89d5cf40 PCI/sysfs: Ensure devices are powered for config reads (part 2) 9c1c7edfea46 nfsd: decouple the xprtsec policy check from check_nfsd_access() 2e0aab9ddaf1 ixgbevf: fix mailbox API compatibility by negotiating supported features 8aebc9367911 ixgbevf: fix getting link speed data for E610 devices 52ffb51de64f ixgbevf: Add support for Intel(R) E610 device 6d4597351818 PCI: Add PCI_VDEVICE_SUB helper macro 247d1fff85e0 phy: cadence: cdns-dphy: Update calibration wait time for startup state machine 01829af7656b ext4: avoid potential buffer over-read in parse_apply_sb_mount_options() cebfbf40056a vfs: Don't leak disconnected dentries on umount f7353208c91a NFSD: Define a proc_layoutcommit for the FlexFiles layout type f846eacde280 fs: quota: create dedicated workqueue for quota_release_work d7d942c9a182 quota: remove unneeded return value of register_quota_format 6c79b23f1c52 padata: Reset next CPU when reorder sequence wraps around 5fb3328e927c xfs: use deferred intent items for reaping crosslinked blocks a4970f5087e2 iio: imu: inv_icm42600: Avoid configuring if already pm_runtime suspended 353c69c7898e iio: imu: inv_icm42600: reorganize DMA aligned buffers in structure 0af89c7e640a phy: cadence: cdns-dphy: Fix PLL lock and O_CMN_READY polling 3594108460db phy: cdns-dphy: Store hs_clk_rate and return it 11d10382a4df iio: imu: inv_icm42600: Simplify pm_runtime setup cbdd55050b78 PM: runtime: Add new devm functions 2c3f01bb6ee4 xfs: fix log CRC mismatches between i386 and other architectures 4245f6c66a3c xfs: rename the old_crc variable in xlog_recover_process c896618807a2 NFSD: Fix last write offset handling in layoutcommit 4138321e9d41 NFSD: Minor cleanup in layoutcommit processing daa0ff1780c9 NFSD: Rework encoding and decoding of nfsd4_deviceid 30a6a61c5828 nilfs2: fix deadlock warnings caused by lock dependency in init_nilfs() a0caf1de97e1 block: fix race between set_blocksize and read paths 8fdd0ad43977 arm64: errata: Apply workarounds for Neoverse-V3AE d9d3e9ff1e2a arm64: cputype: Add Neoverse-V3AE definitions 4f5ab4a9c6ab hfsplus: fix slab-out-of-bounds read in hfsplus_strcasecmp() b1ec27375dea selftests: arg_parsing: Ensure data is flushed to disk before reading. a0ed8ae58a83 HID: multitouch: fix name of Stylus input devices ef45e08141f8 HID: hid-input: only ignore 0 battery events for digitizers 576312eb4363 ALSA: usb-audio: Fix NULL pointer deference in try_to_register_card d776af255d19 selftests/bpf: make arg_parsing.c more robust to crashes 48b1d42286bf accel/qaic: Treat remaining == 0 as error in find_and_map_user_pages() af7e3989e241 ALSA: firewire: amdtp-stream: fix enum kernel-doc warnings 66c29d9fc1dc sched/fair: Fix pelt lost idle time detection 3359a93f45c3 sched/balancing: Rename newidle_balance() => sched_balance_newidle() 8942165d0c3f drm/rockchip: vop2: use correct destination rectangle height check 025db46dbcf8 drm/amd/powerplay: Fix CIK shutdown temperature 7a4482d59fcb drm/i915/guc: Skip communication warning on reset in progress b82efea81a15 ASoC: nau8821: Add DMI quirk to bypass jack debounce circuit 1746416e885c ASoC: nau8821: Generalize helper to clear IRQ status ce1aa07aea2b ASoC: nau8821: Cancel jdet_work before handling jack ejection 9e32cb91bfb3 ASoC: codecs: Fix gain setting ranges for Renesas IDT821034 codec 001f1fb0e4e3 drm/bridge: lt9211: Drop check for last nibble of version register 706ed11aa9e8 riscv: kprobes: Fix probe address validation 06da9b0f87da nvme-multipath: Skip nr_active increments in RETRY disposition a22c03011dac net: usb: lan78xx: fix use of improperly initialized dev->chipid in lan78xx_reset db00e3bdf69a net: usb: lan78xx: Add error handling to lan78xx_init_mac_address 9c470a536556 tls: don't rely on tx_work during send() c61d4368197d tls: wait for pending async decryptions if tls_strp_msg_hold fails b9e21d676def tls: always set record_type in tls_process_cmsg f6c40bf4078d tls: wait for async encrypt in case of error during latter iterations of sendmsg f61dfccc5a3e net: tls: wait for async completion on last message 071377a13834 tls: trim encrypted message to match the plaintext on short splice 3dd3aa80e5af tg3: prevent use of uninitialized remote_adv and local_adv variables 2bd8352df493 tcp: fix tcp_tso_should_defer() vs large RTT 939a7d837167 amd-xgbe: Avoid spurious link down messages during interface toggle 48294a67863c net/ip6_tunnel: Prevent perpetual tunnel growth 932f7cd27905 r8169: fix packet truncation after S4 resume on RTL8168H/RTL8111H deb6ab171fd1 doc: fix seg6_flowlabel path 3f4a318dec64 net: dlink: handle dma_map_single() failure properly e3fdc2b2c61e can: m_can: m_can_plat_remove(): add missing pm_runtime_disable() 627a7ebd8954 dax: skip read lock assertion for read-only filesystems d280c138e66b HID: multitouch: fix sticky fingers 5f65c8ad8c72 usb: gadget: f_rndis: Refactor bind path to use __free() 1cde4516295a usb: gadget: f_ncm: Refactor bind path to use __free() e348d18fb012 usb: gadget: f_acm: Refactor bind path to use __free() 070f341d86cf usb: gadget: f_ecm: Refactor bind path to use __free() 70a766743173 usb: gadget: Introduce free_usb_request helper 167ac21abb82 usb: gadget: Store endpoint pointer in usb_request 50c721be2cff media: nxp: imx8-isi: m2m: Fix streaming cleanup on release 211728b9b282 media: nxp: imx8-isi: Drop unused argument to mxc_isi_channel_chain() 7a27f07948ef drm/exynos: exynos7_drm_decon: remove ctx->suspended cbbe08268a13 drm/exynos: exynos7_drm_decon: properly clear channels during bind 98c15dc95009 drm/exynos: exynos7_drm_decon: fix uninitialized crtc reference in functions fbc8589975ef drm/msm/a6xx: Fix PDC sleep sequence 8e245d3a2ab8 drm/msm/adreno: De-spaghettify the use of memory barriers eb0d280c2751 eventpoll: Replace rwlock with spinlock f72553935a53 epoll: Remove ep_scan_ready_list() in comments dfacd00818ce Bluetooth: btusb: Add USB ID 2001:332a for D-Link AX9U rev. A1 e19e401b059a cpufreq: CPPC: Avoid using CPUFREQ_ETERNAL as transition delay 59a6e61863e2 drm/amd: Check whether secure display TA loaded successfully db4bdb550ce1 drm/amdgpu: use atomic functions with memory barriers for vm fault info 57239762aa90 drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies 15c73964da9d cifs: parse_dfs_referrals: prevent oob on malformed input 00e7da6ca640 can: gs_usb: increase max interface to U8_MAX be19fcf0baed can: gs_usb: gs_make_candev(): populate net_device->dev_port 289498da343b btrfs: do not assert we found block group item when creating free space tree ebbf0d45be41 btrfs: fix incorrect readahead expansion length 7c068bcc12d2 btrfs: fix clearing of BTRFS_FS_RELOC_RUNNING if relocation already running cb6039b68efa ext4: detect invalid INLINE_DATA + EXTENTS flag combination 6e85cc404a7e ext4: wait for ongoing I/O to complete before freeing blocks 870e14104978 jbd2: ensure that all ongoing I/O complete before freeing blocks f13ef730370b f2fs: fix wrong block mapping for multi-devices 67a664eebf11 r8152: add error handling in rtl8152_driver_init d7dd034c1492 smb: client: Fix refcount leak for cifs_sb_tlink f231f248323d Linux 6.6.113 99c704e44cab perf test stat: Avoid hybrid assumption when virtualized 163f15370c55 writeback: Avoid excessively long inode switching times 7594dae6cc95 writeback: Avoid softlockup when switching many inodes ab0d0138803c cramfs: Verify inode mode when loading from disk 5a7602d64e1c fs: Add 'initramfs_options' to set initramfs mount options 09d227c59d97 pid: Add a judgment for ns null in pid_nr_ns d47cdfddeb49 minixfs: Verify inode mode when loading from disk 030a01fbcc42 irqchip/sifive-plic: Avoid interrupt ID 0 handling during suspend/resume 6d09bbbca3e5 irqchip/sifive-plic: Make use of __assign_bit() 63c44fa29ef2 mptcp: pm: in-kernel: usable client side with C-flag 06d82c3a1f7f selftests/mm: skip soft-dirty tests when CONFIG_MEM_SOFT_DIRTY is disabled ef8a0b37f11d s390/bpf: Write back tail call counter for BPF_TRAMP_F_CALL_ORIG 1527222f3549 s390/bpf: Write back tail call counter for BPF_PSEUDO_CALL 2c768a9d1c17 s390/bpf: Describe the frame using a struct instead of constants 10358217e30c s390/bpf: Centralize frame offset calculations 9b378246e7ef s390/bpf: Change seen_reg to a mask 63d2008affae ACPI: property: Do not pass NULL handles to acpi_attach_data() af0ff085cd56 ACPI: property: Add code comments explaining what is going on 156819a04732 ACPI: property: Disregard references in data-only subnode lists 1ed161347ad9 ACPI: battery: Add synchronization between interface updates 8f03b1bf2bcd ACPI: battery: Check for error code from devm_mutex_init() call e6c83bbb0119 ACPI: battery: initialize mutexes through devm_ APIs 346975d62660 ACPI: battery: allocate driver data through devm_ APIs b8c7d40b4cb3 arm64: mte: Do not flag the zero page as PG_mte_tagged 7f4f031e66ad arm64: kprobes: call set_memory_rox() for kprobe page ca603d157694 ipmi: Fix handling of messages with provided receive message pointer 348121b29594 ipmi: Rework user message limit handling aafae78e6d79 KVM: SVM: Emulate PERF_CNTR_GLOBAL_STATUS_SET for PerfMonV2 d0d9fa88d7ab rseq: Protect event mask against membarrier IPI 1810b6084aea btrfs: fix the incorrect max_bytes value for find_lock_delalloc_range() 0c5ce6b6ccc2 PCI: endpoint: pci-epf-test: Add NULL check for DMA channels before release 93b8a612db29 PCI: endpoint: Remove surplus return statement from pci_epf_test_clean_dma_chan() 0fa2185104df misc: fastrpc: Save actual DMA size in fastrpc_map structure 78e5fa79ed7c misc: fastrpc: Add missing dev_err newlines bc718d0bd87e ksmbd: add max ip connections parameter cd3efb93677c KVM: SVM: Skip fastpath emulation on VM-Exit if next RIP isn't valid ad25061d1d73 mm/ksm: fix incorrect KSM counter handling in mm_struct during fork 1a301228c0a8 tracing: Fix race condition in kprobe initialization causing NULL pointer dereference 8d2a77ccefee mfd: intel_soc_pmic_chtdc_ti: Set use_single_read regmap_config flag 3cb4b35687a9 mfd: intel_soc_pmic_chtdc_ti: Drop unneeded assignment for cache_type d7b038045ea0 mfd: intel_soc_pmic_chtdc_ti: Fix invalid regmap-config max_register value 7bd4e5367d09 media: mc: Clear minor number before put device 8c7aad767518 Squashfs: reject negative file sizes in squashfs_read_inode() f5a1b04e5df2 Squashfs: add additional inode sanity checking edb6425f5935 lib/crypto/curve25519-hacl64: Disable KASAN with clang-17 and older abdfc4704e0b ext4: free orphan info with kvfree f775f821de46 ACPICA: Allow to skip Global Lock initialization 720a66fdaa6c ext4: validate ea_ino and size in check_xattrs 79ea7f3e11ef ext4: guard against EA inode refcount underflow in xattr update 9e642ab8e5b2 ext4: fix an off-by-one issue during moving extents d1e681c0bb03 ext4: correctly handle queries for metadata mappings 871b6894a3fa ext4: increase i_disksize to offset + len in ext4_update_disksize_before_punch() 304fc34ff6fc ext4: verify orphan file size is not too big e7e0e3eae0c1 nfsd: nfserr_jukebox in nlm_fopen should lead to a retry 925ed83efbe7 NFSD: Fix destination buffer size in nfsd4_ssc_setup_dul() 677ebfe5d00f mm/damon/vaddr: do not repeat pte_offset_map_lock() until success bb5ef60ee84f mm/hugetlb: early exit from hugetlb_pages_alloc_boot() when max_huge_pages=0 81a6d6011acb mm/page_alloc: only set ALLOC_HIGHATOMIC for __GPF_HIGH allocations 69336589df5d wifi: mt76: mt7921u: Add VID/PID for Netgear A7500 d0ca2f9fbb96 wifi: ath11k: HAL SRNG: don't deinitialize and re-initialize again 3454c79780dd selftests: mptcp: join: validate C-flag + def limit 1264edbed45e x86/umip: Fix decoding of register forms of 0F 01 (SGDT and SIDT aliases) c5bceeb4c569 x86/umip: Check that the instruction opcode is at least two bytes d7760884ee3f spi: cadence-quadspi: Flush posted register writes before DAC access 8bf417e1d36c spi: cadence-quadspi: Flush posted register writes before INDAC access eef57e03d5c1 PCI: tegra194: Handle errors in BPMP response 315001252acd PCI: tegra194: Fix broken tegra_pcie_ep_raise_msi_irq() a1a7a80dbe08 PCI: rcar-host: Convert struct rcar_msi mask_lock into raw spinlock f5770bba83d1 PCI: rcar-host: Drop PMSR spinlock 608ab627d966 PCI: keystone: Use devm_request_irq() to free "ks-pcie-error-irq" on exit 61aeab7178aa PCI/AER: Support errors introduced by PCIe r6.0 741b78395083 PCI/AER: Fix missing uevent on recovery when a reset is requested a3a52f85a211 PCI/ERR: Fix uevent on failure to recover 36039348bca7 PCI/IOV: Add PCI rescan-remove locking when enabling/disabling SR-IOV bd27ddb68a42 PCI/sysfs: Ensure devices are powered for config reads 7a9dee3e4c9d PCI: tegra: Convert struct tegra_msi mask_lock into raw spinlock a5f1934fea37 rseq/selftests: Use weak symbol reference, not definition, to link with glibc 9f16da9b549a rtc: interface: Fix long-standing race when setting alarm 31a81d9ad81b rtc: interface: Ensure alarm irq is enabled when UIE is enabled 5dd821744377 memory: samsung: exynos-srom: Fix of_iomap leak in exynos_srom_probe 587b819fbcbf mmc: core: SPI mode remove cmd7 6a5b401c745f mtd: rawnand: fsmc: Default to autodetect buswidth 151bd8885947 xtensa: simdisk: add input size check in proc_write_simdisk 3572290dfa7c sparc: fix error handling in scan_one_device() 612d10ce8490 sparc64: fix hugetlb for sun4u ed3044b9c810 sctp: Fix MAC comparison to be constant-time 04181645643d scsi: hpsa: Fix potential memory leak in hpsa_big_passthru_ioctl() ebf2b91a09fd sched/deadline: Fix race in push_dl_task() f4aab940ae9e Revert "ipmi: fix msg stack when IPMI is disconnected" dc3a1c6237e7 pwm: berlin: Fix wrong register in suspend/resume 9f88a6fd9748 powerpc/pseries/msi: Fix potential underflow and leak issue 83319fa81e60 powerpc/powernv/pci: Fix underflow and leak issue 4307297a5fe4 power: supply: max77976_charger: fix constant current reporting fc6ce639b9a7 pinctrl: samsung: Drop unused S3C24xx driver data 4bfba41d80d3 nvme-pci: Add TUXEDO IBS Gen8 to Samsung sleep quirk 62fcb12c1f80 parisc: Remove spurious if statement from raw_copy_from_user() eb67aaf2c2f3 parisc: don't reference obsolete termio struct for TC* constants dd21dc8d7451 openat2: don't trigger automounts with RESOLVE_NO_XDEV ff770d10cfeb of: unittest: Fix device reference count leak in of_unittest_pci_node_verify babe2b53fa7d lib/genalloc: fix device leak in of_gen_pool_get() db2fcc8189bf KEYS: trusted_tpm1: Compare HMAC values in constant time 132f827e7bac kernel/sys.c: fix the racy usage of task_lock(tsk->group_leader) in sys_prlimit64() paths 8d982bdd5dfd iommu/vt-d: PRS isn't usable if PDS isn't supported ff416637ef07 iio: imu: inv_icm42600: Drop redundant pm_runtime reinitialization in resume dad6e796b10f init: handle bootloader identifier in kernel parameters 759329336a77 iio: xilinx-ams: Unmask interrupts after updating alarms 26242971663d iio: xilinx-ams: Fix AMS_ALARM_THR_DIRECT_MASK 54e7b86d1ab0 iio: frequency: adf4350: Fix prescaler usage. 3f88f4e8f178 iio: dac: ad5421: use int type to store negative error codes a832682cf6c9 iio: dac: ad5360: use int type to store negative error codes f7fed2af0ad8 fs/ntfs3: Fix a resource leak bug in wnd_extend() feac989493ca fbdev: Fix logic error in "offb" name match 41b17a237e1e crypto: rockchip - Fix dma_unmap_sg() nents value 4b3770692262 crypto: atmel - Fix dma_unmap_sg() direction 11bb6f3cc21b crypto: aspeed - Fix dma_unmap_sg() direction 69a18ff6c60e cpufreq: intel_pstate: Fix object lifecycle issue in update_qos_request() 2e9ae62b1ca3 copy_sighand: Handle architectures where sizeof(unsigned long) < sizeof(u64) ed9cf7c460e8 bus: mhi: host: Do not use uninitialized 'dev' pointer in mhi_init_irq_setup() 108c50494c2b bus: mhi: ep: Fix chained transfer handling in read path 0276c8582488 btrfs: avoid potential out-of-bounds in btrfs_encode_fh() f74a135c5617 blk-crypto: fix missing blktrace bio split events fd7b6b31475e drm/nouveau: fix bad ret code in nouveau_bo_move_prep 07c0125e21a6 drm/rcar-du: dsi: Fix 1/2/3 lane support b4ba1c81de30 media: lirc: Fix error handling in lirc_register() ec02275a6317 media: venus: firmware: Use correct reset sequence for IRIS2 f9d61ee68937 media: pci: ivtv: Add missing check after DMA map 4c656fd59e9e media: mc: Fix MUST_CONNECT handling for pads with no links d429c3bb06fa media: i2c: mt9v111: fix incorrect type for ret c0ad66984750 media: cx18: Add missing check after DMA map dbcbac8c47cb firmware: meson_sm: fix device leak at probe 135eacbb111f xen/events: Update virq_to_irq on migration 612ef6056855 xen/events: Return -EEXIST for bound VIRQs 536a7e676fbe xen/manage: Fix suspend error path 9ac86c75148f xen/events: Cleanup find_virq() return codes 76165e048c1b dt-bindings: phy: rockchip-inno-csi-dphy: make power-domains non-required 4d74d17ab18e ARM: OMAP2+: pm33xx-core: ix device node reference leaks in amx3_idle_init 61683c2e7019 arm64: dts: ti: k3-am62a-main: Fix main padcfg length d9560998550d arm64: dts: qcom: sdm845: Fix slimbam num-channels/ees ac7ce5c869f8 arm64: dts: qcom: msm8939: Add missing MDSS reset 0a5e8961cd0f arm64: dts: qcom: msm8916: Add missing MDSS reset 9cfc586847fa ACPI: debug: fix signedness issues in read/write helpers debf3c347330 ACPI: TAD: Add missing sysfs_remove_group() for ACPI_TAD_RT 1ae9cdd6b479 ACPI: property: Fix buffer properties extraction for subnodes b6e9645be9eb bpf: Avoid RCU context warning when unpinning htab with internal structs c14f73ecc365 gpio: wcd934x: mark the GPIO controller as sleeping 380c23baf030 tpm_tis: Fix incorrect arguments in tpm_tis_probe_irq_single 436cfdbc57d9 cifs: Query EA $LXMOD in cifs_query_path_info() for WSL reparse points a133e2699f8e smb: client: fix missing timestamp updates after utime(2) f37e7860dc5e crypto: essiv - Check ssize for decryption and in-place encryption 46362cdd9df6 bridge: br_vlan_fill_forward_path_pvid: use br_vlan_group_rcu() 0028e0134c64 netfilter: nft_objref: validate objref and objrefmap expressions df0ffc4b51e9 netfilter: nf_tables: drop unused 3rd argument from validate callback ops 71fe3c3381de drm/amd/display: Properly disable scaling on DCE6 914b1f47fb6a drm/amd/display: Properly clear SCL_*_FILTER_CONTROL on DCE6 9973e4ee0e93 drm/amd/display: Add missing DCE6 SCL_HORZ_FILTER_INIT* SRIs 0e69ecbbd562 drm/amdgpu: Add additional DCE6 SCL registers b6bfe44b6dbb bpf: Fix metadata_dst leak __bpf_redirect_neigh_v{4,6} d3f97bef535e mailbox: zynqmp-ipi: Remove dev.parent check in zynqmp_ipi_free_mboxes c6cdac3cb34f mailbox: zynqmp-ipi: Remove redundant mbox_controller_unregister() call 8078f8570e86 tcp: take care of zero tp->window_clamp in tcp_set_rcvlowat() 5e51bb7ffca1 perf python: split Clang options when invoking Popen 44f838a60551 tools build: Align warning options with perf 988519923e33 net: fsl_pq_mdio: Fix device node reference leak in fsl_pq_mdio_probe 422c1c173c39 tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request(). c21f45cfa4a9 net/sctp: fix a null dereference in sctp_disposition sctp_sf_do_5_1D_ce() 77e402b0af5e drm/vmwgfx: Fix copy-paste typo in validation 867bda5d95d3 drm/vmwgfx: Fix Use-after-free in validation 299cfb5a7dea drm/vmwgfx: Fix a null-ptr access in the cursor snooper 2646a49e6286 net/mlx4: prevent potential use after free in mlx4_en_do_uc_filter() e9aff0d0b173 LoongArch: Init acpi_gbl_use_global_lock to false d243aaafddea LoongArch: Remove CONFIG_ACPI_TABLE_UPGRADE in platform_init() 2d02309c2f05 ASoC: SOF: ipc4-topology: Correct the minimum host DMA buffer size 3c90f583d679 scsi: mvsas: Fix use-after-free bugs in mvs_work_queue 949545ef80f7 cpufreq: tegra186: Set target frequency for all cpus in policy d497fef5b957 clk: tegra: do not overallocate memory for bpmp clocks 58f9a3f0acf9 clk: nxp: Fix pll0 rate check condition in LPC18xx CGU driver 586211feb242 clk: nxp: lpc18xx-cgu: convert from round_rate() to determine_rate() 5c2213b9aa44 clk: mediatek: clk-mux: Do not pass flags to clk_mux_determine_rate_flags() 9ea18c668db0 clk: mediatek: mt8195-infra_ao: Fix parent for infra_ao_hdmi_26m fbfd0ae59013 perf evsel: Ensure the fallback message is always written to 4a1f44e54664 perf tools: Add fallback for exclude_guest f6b458071302 perf test: Add a test for default perf stat command 4163822f8c03 perf test: Don't leak workload gopipe in PERF_RECORD_* 1501f779e794 perf session: Fix handling when buffer exceeds 2 GiB 398657434c61 perf arm_spe: Correct memory level for remote access 6f6ab20a6a3d perf arm-spe: Rename the common data source encoding ec2cc8ed15fd perf arm_spe: Correct setting remote access 3966ea7d5405 rtc: optee: fix memory leak on driver removal 0decf468c71e rtc: x1205: Fix Xicor X1205 vendor prefix 41eac6ed9e2a perf util: Fix compression checks returning -1 as bool 64419ecff19f clk: at91: peripheral: fix return value afa0b258e073 libperf event: Ensure tracing data is multiple of 8 sized 52571a05bcd2 perf evsel: Avoid container_of on a NULL leader fdd428149a88 asm-generic/io.h: Skip trace helpers if rwmmio events are disabled ed30811fbed4 media: v4l2-subdev: Fix alloc failure check in v4l2_subdev_call_state_try() 8ea08bcab31d iio: frequency: adf4350: Fix ADF4350_REG3_12BIT_CLKDIV_MODE cc1216f33ad4 clocksource/drivers/clps711x: Fix resource leaks in error paths 9f13f727bed6 fscontext: do not consume log entries when returning -EMSGSIZE bc7372c05a07 fs: always return zero on success from replace_fd() (From OE-Core rev: 7f47c7812a2e08dce8c9a379b540fa5ed37ecfd4) Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> Signed-off-by: Yoann Congal <yoann.congal@smile.fr> Signed-off-by: Paul Barker <paul@pbarker.dev> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>	2026-02-27 17:45:06 +00:00
Bruce Ashfield	40a0b2c80d	linux-yocto/6.6: update to v6.6.112 ... Updating linux-yocto/6.6 to the latest korg -stable release that comprises the following commits: 0bbbd97a442d Linux 6.6.112 acad20578817 usb: cdns3: cdnsp-pci: remove redundant pci_disable_device() call 5c25a2a403b3 arm64: dts: qcom: qcm2290: Disable USB SS bus instances in park mode 540aaab034b5 usb: typec: tipd: Clear interrupts first 724a9db84188 net: usb: asix: hold PM usage ref to avoid PM/MDIO + RTNL deadlock 78e87b8a3cf8 bus: fsl-mc: Check return value of platform_get_resource() 1a2ea887a5cd pinctrl: check the return value of pinmux_ops::get_function_name() 66821fdb723d remoteproc: pru: Fix potential NULL pointer dereference in pru_rproc_set_ctable() 81cec07d3031 sunrpc: fix null pointer dereference on zero-length checksum fd8a23ecbc60 Input: uinput - zero-initialize uinput_ff_upload_compat to avoid info leak bbd8f90c3bf4 Input: atmel_mxt_ts - allow reset GPIO to sleep d7513b47082c misc: fastrpc: Skip reference for DMA handles 3ad42dc66445 misc: fastrpc: fix possible map leak in fastrpc_put_args 6e0d6cc39f41 misc: fastrpc: Fix fastrpc_map_lookup operation b808a3590c28 nvdimm: ndtest: Return -ENOMEM if devm_kcalloc() fails in ndtest_probe() 964598e6f70a mm: hugetlb: avoid soft lockup when mprotect to large memory area c6effaab2427 ext4: fix checks for orphan inodes c6b15a82a56c ksmbd: fix error code overwriting in smb2_get_info_filesystem() 7eca645917bc LoongArch: Automatically disable kaslr if boot from kexec_file 846cafc4725c dm: fix NULL pointer dereference in __dm_suspend() ed6877417298 dm: fix queue start/stop imbalance under suspend/load/resume races 2647603d42d9 mfd: vexpress-sysreg: Check the return value of devm_gpiochip_add_data() 6c21c4a425d3 mfd: rz-mtu3: Fix MTU5 NFCR register offset 0ba68bea1e35 net: nfc: nci: Add parameter validation for packet data a70dcfa8d0a0 fs: udf: fix OOB read in lengthAllocDescs handling 28d0e8af8c0a ASoC: SOF: ipc3-topology: Fix multi-core and static pipelines tear down e04aa0b00107 ASoC: wcd934x: fix error handling in wcd934x_codec_parse_data() 2af39ab5e6dc uio_hv_generic: Let userspace take care of interrupt mask c28b0ca029ed Squashfs: fix uninit-value in squashfs_get_parent 3bce44b34404 bpf: Reject negative offsets for ALU ops 78dc7362662f vhost: vringh: Modify the return value check aa57822ade41 Revert "net/mlx5e: Update and set Xon/Xoff upon MTU set" ba905a567105 smb: client: fix crypto buffers in non-linear memory 3311f0d15bb3 net/mlx5: fw reset, add reset timeout work 3df251a65b4e net/mlx5: pagealloc: Fix reclaim race during command interface teardown dda27f370cde net/mlx5: Stop polling for command response if interface goes down ea87151df398 net: dlink: handle copy_thresh allocation failure 5e627ae572b2 net: ena: return 0 in ena_get_rxfh_key_size() when RSS hash key is not configurable 07a92ab8b479 nfp: fix RSS hash key size when RSS is not supported 75287554a92e mtd: rawnand: atmel: Fix error handling path in atmel_nand_controller_add_nands 53683b4d3740 drivers/base/node: fix double free in register_one_node() 7e76fe9dfadb ocfs2: fix double free in user_cluster_connect() f4238064379a hwrng: ks-sa - fix division by zero in ks_sa_rng_init 96ca6913042e KEYS: X.509: Fix Basic Constraints CA flag parsing 2ef583b45fe7 Bluetooth: hci_sync: Fix using random address for BIG/PA advertisements 8fd355f54a62 Bluetooth: ISO: don't leak skb in ISO_CONT RX 5319145a07d8 Bluetooth: ISO: Fix possible UAF on iso_conn_free 868196cc8ba8 Bluetooth: MGMT: Fix not exposing debug UUID on MGMT_OP_READ_EXP_FEATURES_INFO 781226e11d5b vhost: vringh: Fix copy_to_iter return value check 6394bade9daa net: usb: Remove disruptive netif_wake_queue in rtl8150_set_multicast 7c853408ee24 RDMA/siw: Always report immediate post SQ errors 48edf187fdd4 usb: vhci-hcd: Prevent suspending virtually attached devices 6459dba4f350 scsi: mpt3sas: Fix crash in transport port remove by using ioc_info() 8cbe2a21d857 ipvs: Defer ip_vs_ftp unregister during netns cleanup 0901fa02ccf7 NFSv4.1: fix backchannel max_resp_sz verification check 9768536f8260 coresight: trbe: Return NULL pointer for allocation failures e926dfde8ad1 coresight: etm4x: Support atclk 4960e17a3543 coresight-etm4x: Conditionally access register TRCEXTINSELR db1261fe50ff remoteproc: qcom: q6v5: Avoid disabling handover IRQ twice f321de0b3847 PCI: tegra194: Fix duplicate PLL disable in pex_ep_event_pex_rst_assert() f22d898e080a wifi: rtw89: avoid circular locking dependency in ser_state_run() 85288bcf7ffe RDMA/rxe: Fix race in do_task() when draining 1750f1ec143e crypto: hisilicon/qm - set NULL to qm->debug.qm_diff_regs f0e6e7b43511 vfio/pds: replace bitmap_free with vfree e7979228b3bd sparc: fix accurate exception reporting in copy_{from,to}_user for M7 9cbb5ebf409e sparc: fix accurate exception reporting in copy_to_user for Niagara 4 8cdeb5e482d3 sparc: fix accurate exception reporting in copy_{from_to}_user for Niagara dc766c4830a7 sparc: fix accurate exception reporting in copy_{from_to}_user for UltraSPARC III 674ff598148a sparc: fix accurate exception reporting in copy_{from_to}_user for UltraSPARC 77fe706ff086 wifi: mac80211: fix Rx packet handling when pubsta information is not available 15bd3f0d0e99 wifi: ath10k: avoid unnecessary wait for service ready message 12ff1858301e Documentation: trace: historgram-design: Separate sched_waking histogram section heading and the following diagram 8410e7d65b16 IB/sa: Fix sa_local_svc_timeout_ms read race 925ff361460b RDMA/core: Resolve MAC of next-hop device without ARP support eb976d02c889 Revert "usb: xhci: Avoid Stop Endpoint retry loop if the endpoint seems Running" e0a9a737c9a2 f2fs: fix zero-sized extent for precache extents 8eb6dacd5c23 scsi: qla2xxx: Fix incorrect sign of error code in qla_nvme_xmt_ls_rsp() 111b64b98874 scsi: qla2xxx: Fix incorrect sign of error code in START_SP_W_RETRIES() 19a09c909372 scsi: qla2xxx: edif: Fix incorrect sign of error code 8012e298b968 ACPI: NFIT: Fix incorrect ndr_desc being reportedin dev_err message 7d9b97e61350 f2fs: fix to mitigate overhead of f2fs_zero_post_eof_page() 83a8e4efea02 f2fs: fix to truncate first page in error path of f2fs_truncate() 045375172dd4 f2fs: fix to update map->m_next_extent correctly in f2fs_map_blocks() ec4a608bca40 wifi: mt76: fix potential memory leak in mt76_wmac_probe() dac556dd2d44 RDMA/cm: Rate limit destroy CM ID timeout error message 4a594f5c64bf drivers/base/node: handle error properly in register_one_node() d12f4499585a watchdog: mpc8xxx_wdt: Reload the watchdog timer when enabling the watchdog 54f4da8629cf ipvs: Use READ_ONCE/WRITE_ONCE for ipvs->enable a2e10d05f5c3 netfilter: ipset: Remove unused htable_bits in macro ahash_region 9170730674cf iio: consumers: Fix offset handling in iio_convert_raw_to_processed() 289cbdb27afb iio: consumers: Fix handling of negative channel scale in iio_convert_raw_to_processed() 978aac54e93e fs/ntfs3: reject index allocation if $BITMAP is empty but blocks exist a86c8b9d03f7 fs: ntfs3: Fix integer overflow in run_unpack() 528807934790 drm/msm/dpu: fix incorrect type for ret f197894de2f4 ASoC: Intel: bytcr_rt5651: Fix invalid quirk input mapping 29a41bf64226 ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping d75a561ba1ea ASoC: Intel: bytcht_es8316: Fix invalid quirk input mapping cf71834a0cfc pps: fix warning in pps_register_cdev when register device fail b859d612303a misc: genwqe: Fix incorrect cmd field being reported in error c36785f9de03 tty: n_gsm: Don't block input queue by waiting MSC 0924d8563043 usb: gadget: configfs: Correctly set use_os_string at bind f0c98b011e01 usb: phy: twl6030: Fix incorrect type for ret a7d262359018 drm/amdkfd: Fix error code sign for EINVAL in svm_ioctl() 18897db75121 tcp: fix __tcp_close() to only send RST when required 8120c4638416 PCI: tegra: Fix devm_kcalloc() argument order for port->phys allocation 1fc4717f5190 wifi: mwifiex: send world regulatory domain to driver 531a50b2db6d drm/amd/pm: Disable SCLK switching on Oland with high pixel clocks (v3) 5e64cc74159c drm/amd/pm: Disable MCLK switching with non-DC at 120 Hz+ (v2) 4e27e18f64a2 drm/amd/pm: Treat zero vblank time as too short in si_dpm (v3) 1320d1e834c1 drm/amd/pm: Adjust si_upload_smc_data register programming (v3) dd3d6befe7db drm/amd/pm: Fix si_upload_smc_data (v3) 2f68f6f7cec4 drm/amd/pm: Disable ULV even if unsupported (v3) d0e0b2c9a2b7 drm/amdgpu: Power up UVD 3 for FW validation (v2) 553af70d3d68 coresight: Only register perf symlink for sinks with alloc_buffer 91e487452d5a inet: ping: check sock_net() in ping_get_port() and ping_lookup() 3a7802716da2 crypto: hisilicon/qm - check whether the input function and PF are on the same device c9035e9ba528 crypto: hisilicon - re-enable address prefetch after device resuming 94b09b0ac0b8 crypto: hisilicon/zip - remove unnecessary validation for high-performance mode configurations 30a4e81edb15 media: st-delta: avoid excessive stack usage 6e41267d52ec ALSA: lx_core: use int type to store negative error codes ca61e32fcf27 RDMA/mlx5: Fix vport loopback forcing for MPV device f891dce0d397 media: rj54n1cb0c: Fix memleak in rj54n1_probe() f97f08b9351d scsi: myrs: Fix dma_alloc_coherent() error check e62251954a12 scsi: pm80xx: Fix array-index-out-of-of-bounds on rmmod c1a15609eade hwrng: nomadik - add ARM_AMBA dependency c5d08ff97cdb crypto: keembay - Add missing check after sg_nents_for_len() 9c5cfe544a63 drm/amd/display: Remove redundant semicolons ef3600c6fec3 serial: max310x: Add error checking in probe() ac4d189aaa93 usb: misc: qcom_eud: Access EUD_MODE_MANAGER2 through secure calls b0439e3762ac usb: host: max3421-hcd: Fix error pointer dereference in probe cleanup 8de227e62a53 phy: rockchip: naneng-combphy: Enable U3 OTG port for RK3568 20f744fea1b1 media: zoran: Remove zoran_fh structure d2e29c36eb5f drm/bridge: it6505: select REGMAP_I2C 32270c3a65bd f2fs: fix condition in __allow_reserved_blocks() 08eb6043c9e5 drm/radeon/r600_cs: clean up of dead code in r600_cs 9c704b291d5d drm/panel: novatek-nt35560: Fix invalid return value 08cb3dc9d2b4 bpf: Enforce expected_attach_type for tailcall compatibility 44045b107a4e i2c: designware: Add disabling clocks when probe fails 6d621778e378 i2c: designware: Fix clock issue when PM is disabled 59d467bd07ee i2c: mediatek: fix potential incorrect use of I2C_MASTER_WRRD a4b5eac932ca thermal/drivers/qcom/lmh: Add missing IRQ includes d2e0755412bf thermal/drivers/qcom: Make LMH select QCOM_SCM c07e759b3f53 hwmon: (mlxreg-fan) Separate methods of fan setting coming from different subsystems c38998ed0e88 once: fix race by moving DO_ONCE to separate section 2158121117c9 tools/nolibc: make time_t robust if __kernel_old_time_t is missing in host headers 748bbe2c1673 smp: Fix up and expand the smp_call_function_many() kerneldoc cdeafacb4f9f bpf: Explicitly check accesses to bpf_sock_addr ec9a5b4f0eee selftests: watchdog: skip ping loop if WDIOF_KEEPALIVEPING not supported 5477b0045056 i3c: master: svc: Recycle unused IBI slot 20ff7004c9a0 i3c: master: svc: Use manual response for IBI events 060ecc81240e nvmet-fc: move lsop put work to nvmet_fc_ls_req_op 8963484b7e15 ACPICA: Fix largest possible resource descriptor index c3202fce0cea pwm: tiehrpwm: Fix corner case in clock divisor calculation 6926fc62b777 arm64: dts: mediatek: mt8516-pumpkin: Fix machine compatible 8063e535a5a2 arm64: dts: mediatek: mt6795-xperia-m5: Fix mmc0 latch-ck value 7e538e84ca7d arm64: dts: mediatek: mt6331: Fix pmic, regulators, rtc, keys node names 2af05a03b1d2 cpuidle: qcom-spm: fix device and OF node leaks at probe aa30d3077298 firmware: firmware: meson-sm: fix compile-test default 4f9e6ff6319d nbd: restrict sockets to TCP and UDP 37e5190d4bfe arm64: dts: mediatek: mt8195: Remove suspend-breaking reset from pcie0 341a1b62a024 null_blk: Fix the description of the cache_size module argument 70d4e6996a5d pinctrl: renesas: Use int type to store negative error codes 82b71f330cd0 power: supply: cw2015: Fix a alignment coding style issue 80eab6a9df7e PM / devfreq: mtk-cci: Fix potential error pointer dereference in probe() 585499f17d1d ARM: dts: omap: am335x-cm-t335: Remove unused mcasp num-serializer property 396ee23da443 ARM: dts: ti: omap: omap3-devkit8000-lcd: Fix ti,keep-vref-on property to use correct boolean syntax in DTS dcc72335190c ARM: dts: ti: omap: am335x-baltos: Fix ti,en-ck32k-xtal property in DTS to use correct boolean syntax 96adc664ff27 PM: sleep: core: Clear power.must_resume in noirq suspend error path fa2a1c33e081 block: use int to store blk_stack_limits() return value 12ef6fe2b4ea selftests/nolibc: fix EXPECT_NZ macro aac29a895144 regulator: scmi: Use int type to store negative error codes 5ce4e7a5fe46 arm64: dts: apple: t8103-j457: Fix PCIe ethernet iommu-map e9d02b09ded8 ARM: at91: pm: fix MCKx restore routine 06c4826b1d90 blk-mq: check kobject state_in_sysfs before deleting in blk_mq_unregister_hctx 299cd1f5fdaa pinctrl: meson-gxl: add missing i2c_d pinmux 3433843693e0 soc: qcom: rpmh-rsc: Unconditionally clear _TRIGGER bit for TCS 5b8ac5689739 ACPI: processor: idle: Fix memory leak when register cpuidle device failed 24a67e7dfd03 cpufreq: scmi: Account for malformed DT in scmi_dev_used_by_cpus() 64db56dc1fe5 leds: flash: leds-qcom-flash: Update torch current clamp setting ca782b2a61d6 ARM: dts: renesas: porter: Fix CAN pin group 5c6246bc147d libbpf: Fix reuse of DEVMAP ab8b2403103f bpf: Remove migrate_disable in kprobe_multi_link_prog_run 7db2f54be7d5 bpf/selftests: Fix test_tcpnotify_user c99c6c593ee2 regmap: Remove superfluous check for !config in __regmap_init() 0401de6d1665 arm64: dts: renesas: rzg2lc-smarc: Disable CAN-FD channel0 db82a94b0c10 x86/vdso: Fix output operand size of RDPID 8100b6c0f908 EDAC/i10nm: Skip DIMM enumeration on a disabled memory controller a993be82c512 smb: server: fix IRD/ORD negotiation with the client 379cae2cb982 perf: arm_spe: Prevent overflow in PERF_IDX2OFF() 35e5f3759010 coresight: trbe: Prevent overflow in PERF_IDX2OFF() 239c49a99d63 gfs2: Fix GLF_INVALIDATE_IN_PROGRESS flag clearing in do_xmote 69e2a7c30750 selftests: arm64: Check fread return value in exec_target 00f1726e6412 seccomp: Fix a race with WAIT_KILLABLE_RECV if the tracer replies too fast 9d8b6c9f18e5 init: INITRAMFS_PRESERVE_MTIME should depend on BLK_DEV_INITRD a312ec6d768a filelock: add FL_RECLAIM to show_fl_flags() macro (From OE-Core rev: af6ac5a200e41b6de6e32b258ccae222948b989b) Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> Signed-off-by: Yoann Congal <yoann.congal@smile.fr> Signed-off-by: Paul Barker <paul@pbarker.dev> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>	2026-02-27 17:45:06 +00:00
Ankur Tyagi	bc0e06b3b1	wireless-regdb: upgrade 2024.10.07 -> 2025.10.07 ... (From OE-Core rev: e0bdf9b4134b1c1f90687fb6e12e33bf77d4192c) Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>	2025-11-14 06:45:29 -08:00
Yannic Moog	b33a8abe77	perf: add arm64 source files for unistd_64.h ... kernel commit bfb713ea53c7 ("perf tools: Fix arm64 build by generating unistd_64.h") introduces a new dependency on source files for arm64, specifically include/uapi/asm-generic. Build fails with: [..]/perf/1.0/perf-1.0/scripts/Makefile.asm-headers:33: [...]/perf/1.0/perf-1.0/include/uapi/asm-generic/Kbuild: No such file or directory make[4]: *** No rule to make target '[...]/perf/1.0/perf-1.0/include/uapi/asm-generic/Kbuild'. Stop. Add the directory to PERF_SRC. Fix whitespace error while at it. (From OE-Core rev: 06d4981313ce67a8d53b1c14be9845b4b5a9f4cf) Signed-off-by: Yannic Moog <y.moog@phytec.de> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> Signed-off-by: Steve Sakoman <steve@sakoman.com>	2025-11-07 06:54:41 -08:00
Bruce Ashfield	dba2d4436d	linux-yocto/6.6: update to v6.6.111 ... Updating linux-yocto/6.6 to the latest korg -stable release that comprises the following commits: 655054d2c3c1 Linux 6.6.111 3d3abf3f7e8b KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O 284e67a93b8c net/9p: fix double req put in p9_fd_cancelled ab172f4f4262 crypto: rng - Ensure set_ent is always present f5f235be7612 riscv: mm: Do not restrict mmap address based on hint 1602c9b4578a riscv: mm: Use hint address in mmap if available e242e52fdfe4 driver core/PM: Set power.no_callbacks along with power.no_pm e857421992ce staging: axis-fifo: flush RX FIFO on read errors a3c71d6c8332 staging: axis-fifo: fix TX handling on copy_from_user() failure 6d953e9d3981 staging: axis-fifo: fix maximum TX packet length check bfeea103cad9 serial: stm32: allow selecting console when the driver is module cb7630e714d6 hid: fix I2C read buffer overflow in raw_event() for mcp2221 dc4874366cf6 ALSA: usb-audio: fix race condition to UAF in snd_usbmidi_free 647410a7da46 ALSA: usb-audio: Kill timer properly at removal 97e87f367c91 platform/x86/amd/pmc: Add Stellaris Slim Gen6 AMD to spurious 8042 quirks list bf28f5db40d5 can: rcar_canfd: Fix controller mode setting e93af787187e can: hi311x: fix null pointer dereference when resuming from sleep before interface was enabled 03510f5fce33 btrfs: ref-verify: handle damaged extent root tree bcccd0220751 ASoC: rt5682s: Adjust SAR ADC button mode to fix noise issue 081f14b9a3eb perf subcmd: avoid crash in exclude_cmds when excludes is empty 6d59f7467f83 platform/x86/amd/pmc: Add MECHREVO Yilong15Pro to spurious_8042 list 4b91d0c5781a dm-integrity: limit MAX_TAG_SIZE to 255 7f7187118bb5 ASoC: amd: acp: Adjust pdm gain value 8281c2a63bbc wifi: rtlwifi: rtl8192cu: Don't claim USB ID 07b8:8188 96dc17ae64b1 USB: serial: option: add SIMCom 8230C compositions 228d06c4cbfc media: i2c: tc358743: Fix use-after-free bugs caused by orphan timer in probe 71ed8b81a490 media: tuner: xc5000: Fix use-after-free in xc5000_release f82dc869220d media: tunner: xc5000: Refactor firmware load 250b6e009ff9 KVM: arm64: Fix softirq masking in FPSIMD register saving sequence (From OE-Core rev: 2a947cb13d0d46747f14aa6a1aa39a486459ee8a) Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>	2025-10-24 06:23:40 -07:00
Bruce Ashfield	787bcb1b6f	linux-yocto/6.6: update to v6.6.110 ... Updating linux-yocto/6.6 to the latest korg -stable release that comprises the following commits: e617101e5626 Linux 6.6.110 70e1e5fe9f7e ASoC: qcom: audioreach: fix potential null pointer dereference f617d515d66c media: uvcvideo: Mark invalid entities with id UVC_INVALID_ENTITY_ID 71da40648741 media: rc: fix races with imon_disconnect() bb10a9ddc8d6 media: b2c2: Fix use-after-free causing by irq_check_work in flexcop_pci_remove f03aa5e39da7 scsi: target: target_core_configfs: Add length check to avoid buffer overflow e28d05370969 gcc-plugins: Remove TODO_verify_il for GCC >= 16 5d646a763232 crypto: sha256 - fix crash at kexec (From OE-Core rev: 42854520a9476ce5ac210097a5f6ce18ecc66c80) Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>	2025-10-24 06:23:40 -07:00
Bruce Ashfield	c4fd9fd38f	linux-yocto/6.6: update to v6.6.109 ... Updating linux-yocto/6.6 to the latest korg -stable release that comprises the following commits: f34f16e5c6323 Linux 6.6.109 eb53056323f13 drm/i915/backlight: Return immediately when scale() finds invalid parameters 4529bb0b6be3d minmax.h: remove some #defines that are only expanded once 1a899044a0f5a minmax.h: simplify the variants of clamp() 9955044f552b5 minmax.h: move all the clamp() definitions after the min/max() ones 26c3d697becf3 minmax.h: use BUILD_BUG_ON_MSG() for the lo < hi test in clamp() 511e7d2e4d51f minmax.h: reduce the #define expansion of min(), max() and clamp() 85d619594313e minmax.h: update some comments 6012f69bf7495 minmax.h: add whitespace around operators and after commas 46648b94e6ebb minmax: fix up min3() and max3() too f0be4c5dc213d minmax: improve macro expansion and type checking 7194a302345da minmax: don't use max() in situations that want a C constant expression bb63c996c2db0 minmax: simplify min()/max()/clamp() implementation 6183c6579356a minmax: make generic MIN() and MAX() macros available everywhere c0c83f4cd074b i40e: add validation for ring_len param 6e4251690710d i40e: increase max descriptors for XL710 7ea47a560a7a3 drm/ast: Use msleep instead of mdelay for edid read ed6fa21f68973 gpiolib: Extend software-node support to support secondary software-nodes 457d2c5e112fd loop: Avoid updating block size under exclusive owner 78f579cb7d825 mm/migrate_device: don't add folio to be freed to LRU in migrate_device_finalize() e7a85efb873fa mm: migrate_device: use more folio in migrate_device_finalize() 684a9a995748c ARM: bcm: Select ARM_GIC_V3 for ARCH_BRCMSTB 53888cd32a3f6 s390/cpum_cf: Fix uninitialized warning after backport of ce971233242b 09e3bda3a7ba2 fbcon: Fix OOB access in font allocation adac90bb1aaf4 fbcon: fix integer overflow in fbcon_do_set_font c9c2a51f91aea mm/hugetlb: fix folio is still mapped when deleted df1fa034c0fc2 kmsan: fix out-of-bounds access to shadow memory cab278cead49a afs: Fix potential null pointer dereference in afs_put_server 58d304a89178d ARM: dts: socfpga: sodia: Fix mdio bus probe and PHY address 3887f3814c0e7 tracing: dynevent: Add a missing lockdown check on dynevent 8703940bd30b5 crypto: af_alg - Fix incorrect boolean values in af_alg_ctx b769490521cf9 i40e: improve VF MAC filters accounting b247cdd04750e i40e: add mask to apply valid bits for itr_idx edecce7abd715 i40e: add max boundary check for VF filters e748f1ee493f8 i40e: fix validation of VF state in get resources 3883e9702b6a4 i40e: fix input validation logic for action_meta 2cc26dac0518d i40e: fix idx validation in config queues msg 50a1e2f50f6c2 i40e: fix idx validation in i40e_validate_queue_map 3cefd898b7aa1 HID: asus: add support for missing PX series fn keys ba7bcfd52c66d smb: client: fix wrong index reference in smb2_compound_op() 348736955ed6c futex: Prevent use-after-free during requeue-PI 6ffa6b5bc861a drm/gma500: Fix null dereference in hdmi teardown df2c071061ed5 octeontx2-pf: Fix potential use after free in otx2_tc_add_flow() 7b209698e648b net: dsa: lantiq_gswip: suppress -EINVAL errors for bridge FDB entries added to the CPU port 816d30afbad52 net: dsa: lantiq_gswip: move gswip_add_single_port_br() call to port_setup() a7a2b29c1ee44 net: dsa: lantiq_gswip: do also enable or disable cpu port be0bd592298f8 selftests: fib_nexthops: Fix creation of non-FDB nexthops 24046d31f6f92 nexthop: Forbid FDB status change while nexthop is in a group 31ae2fbc9fcb9 net: allow alloc_skb_with_frags() to use MAX_SKB_FRAGS 98a76bd96f382 bnxt_en: correct offset handling for IPv6 destination address 82a1463c968b1 vhost: Take a reference on the task in struct vhost_task. bcce99f613163 Bluetooth: hci_event: Fix UAF in hci_acl_create_conn_sync 6a0070c5c3ad3 Bluetooth: hci_sync: Fix hci_resume_advertising_sync c957284701353 ethernet: rvu-af: Remove slash from the driver name 17edec1830e48 can: peak_usb: fix shift-out-of-bounds issue 3664ae91b26d1 can: mcba_usb: populate ndo_change_mtu() to prevent buffer overflow 2e423e1990f39 can: sun4i_can: populate ndo_change_mtu() to prevent buffer overflow be1b25005fd0f can: hi311x: populate ndo_change_mtu() to prevent buffer overflow cbc1de71766f3 can: etas_es58x: populate ndo_change_mtu() to prevent buffer overflow 0baf92d0b1590 xfrm: xfrm_alloc_spi shouldn't use 0 as SPI f64abeebf763c bpf: Reject bpf_timer for PREEMPT_RT 865eec09b6e44 can: rcar_can: rcar_can_resume(): fix s2ram with PSCI 210b91bfe355b wifi: virt_wifi: Fix page fault on connect c5be7edd42602 smb: server: don't use delayed_work for post_recv_credits_work 6017196aabf1d cpufreq: Initialize cpufreq-based invariance before subsys 35bb271de241d ARM: dts: kirkwood: Fix sound DAI cells for OpenRD clients ebe7a2e46d189 arm64: dts: imx8mp: Correct thermal sensor index 1744aff07b833 mm: folio_may_be_lru_cached() unless folio_test_large() d37ec803b2813 mm/gup: local lru_add_drain() to avoid lru_add_drain_all() 768c44cc8b638 mm/gup: check ref_count instead of lru before migration dc58ab1eb90c9 mm: add folio_expected_ref_count() for reference count calculation 4ed203f79821c mm/gup: revert "mm: gup: fix infinite loop within __get_longterm_locked" df2580fbcedea IB/mlx5: Fix obj_type mismatch for SRQ event subscriptions 943754ad81131 ALSA: usb-audio: Add mute TLV for playback volumes on more devices 0aac2fa4d0c75 ALSA: usb-audio: move mixer_quirks' min_mute into common quirk ea6016c9ec61d ALSA: usb-audio: Add DSD support for Comtrue USB Audio device b61b90b07416f i2c: designware: Add quirk for Intel Xe 41ea28a2de255 mmc: sdhci-cadence: add Mobileye eyeQ support 306697a775fbc usb: core: Add 0x prefix to quirks debug output dc77154e83048 ALSA: usb-audio: Fix build with CONFIG_INPUT=n a3961b1f7f79e ALSA: usb-audio: Convert comma to semicolon d04d301614630 ALSA: usb-audio: Add mixer quirk for Sony DualSense PS5 8fa69bd18148e ALSA: usb-audio: Remove unneeded wmb() in mixer_quirks 9db2614986bd0 ALSA: usb-audio: Simplify NULL comparison in mixer_quirks e8c605fece5b9 ALSA: usb-audio: Avoid multiple assignments in mixer_quirks bafc648b82c3b ALSA: usb-audio: Drop unnecessary parentheses in mixer_quirks 08a96e22bd37f ALSA: usb-audio: Fix block comments in mixer_quirks 18f9e77de5272 firewire: core: fix overlooked update of subsystem ABI version ca3e48e96816c scsi: ufs: mcq: Fix memory allocation checks for SQE and CQE (From OE-Core rev: 5234d795417f97cfce7bcd891e7bdeabc6f36e9e) Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>	2025-10-24 06:23:40 -07:00
Bruce Ashfield	623cf58e62	linux-yocto/6.6: update to v6.6.108 ... Updating linux-yocto/6.6 to the latest korg -stable release that comprises the following commits: 147338df3487 Linux 6.6.108 42a6aeb4b238 Revert "loop: Avoid updating block size under exclusive owner" 06146c26f5cf minmax: add a few more MIN_T/MAX_T users af8b531ecfd4 minmax: simplify and clarify min_t()/max_t() implementation 2d396aa8264d minmax: avoid overly complicated constant expressions in VM code 532733ff82b9 mptcp: propagate shutdown to subflows when possible 3ef938f6f0b3 rtc: pcf2127: fix SPI command byte for PCF2131 backport 075abf0b1a95 iommu/amd/pgtbl: Fix possible race while increase page table level 564f2312e2ff xhci: dbc: Fix full DbC transfer ring after several reconnects 3c6dd29a460f xhci: dbc: decouple endpoint allocation from initialization 27b04564f7a3 phy: ti: omap-usb2: fix device leak at unbind 34a8d5a198bb phy: Use device_get_match_data() 0ee0ef483aae selftests: mptcp: userspace pm: validate deny-join-id0 flag 650150cc9a3e mptcp: pm: nl: announce deny-join-id0 flag a6157484bee3 vmxnet3: unregister xdp rxq info in the reset path e7b7a9387955 smb: client: fix smbdirect_recv_io leak in smbd_negotiate() error path 2374c11189ef crypto: af_alg - Set merge to zero early in af_alg_sendmsg 6a075f80f303 drm: bridge: cdns-mhdp8546: Fix missing mutex unlock on error path 15a77e1ab0a9 drm: bridge: anx7625: Fix NULL pointer dereference with early IRQ e6b0616a360f ASoC: SOF: Intel: hda-stream: Fix incorrect variable used in error message 7740da20a3a0 ASoC: wm8974: Correct PLL rate rounding b4e8741955dc ASoC: wm8940: Correct typo in control name b7e4884dd853 ASoC: wm8940: Correct PLL rate rounding abc9f859a9ea io_uring: include dying ring in task_work "should cancel" state c8e69b783bc4 io_uring: backport io_should_terminate_tw() 115e7d4d5ee8 ALSA: hda/realtek: Fix mute led for HP Laptop 15-dw4xx 0a3d5a4d4adc selftests: mptcp: avoid spurious errors on TCP disconnect 9ef1af5d4040 selftests: mptcp: connect: catch IO errors on listen side 666b49c848f1 rds: ib: Increment i_fastreg_wrs before bailing out 689aee35ce67 net: rfkill: gpio: Fix crash due to dereferencering uninitialized pointer 7e4c3cd7f0a1 KVM: SVM: Sync TPR from LAPIC into VMCB::V_TPR even if AVIC is active 6584e7ecfa7d mmc: mvsdio: Fix dma_unmap_sg() nents value ac4e940dc7da ASoC: qcom: q6apm-lpass-dais: Fix missing set_fmt DAI op for I2S 411f7d4f7038 ASoC: qcom: q6apm-lpass-dais: Fix NULL pointer dereference if source graph failed 468bb23472b7 ASoC: qcom: audioreach: Fix lpaif_type configuration for the I2S interface fc7bd02dadb8 btrfs: tree-checker: fix the incorrect inode ref size check 090b61b87420 iommu/vt-d: Fix __domain_mapping()'s usage of switch_to_super_page() 561eef41aaa3 LoongArch: Check the return value when creating kobj 2ff7ef2f71b4 LoongArch: Align ACPI structures if ARCH_STRICT_ALIGN enabled fb6ee62d3082 LoongArch: Update help info of ARCH_STRICT_ALIGN 90c0ffa1e0d9 power: supply: bq27xxx: restrict no-battery detection to bq27000 84ac57c4bbfd power: supply: bq27xxx: fix error return in case of no bq27000 hdq battery 7c4491b5644e crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg ee74d69af170 nilfs2: fix CFI failure when accessing /sys/fs/nilfs2/features/* d3cb3f209d35 ksmbd: smbdirect: verify remaining_data_length respects max_fragmented_recv_size eb0378dde086 ksmbd: smbdirect: validate data_offset and data_length field of smb_direct_data_transfer d2cfefa14ce8 octeontx2-pf: Fix use-after-free bugs in otx2_sync_tstamp() 8eeb2091e72d cnic: Fix use-after-free bugs in cnic_delete_task cd093e8bdcfe net: liquidio: fix overflow in octeon_init_instr_queue() 13f57d484676 Revert "net/mlx5e: Update and set Xon/Xoff upon port speed set" 4cefe5be7388 tls: make sure to abort the stream if headers are bogus dfd06131107e tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect(). 97d797c5fc6f bonding: don't set oif to bond dev when getting NS target destination 2cb17c88edd3 net/mlx5e: Harden uplink netdev access against device unbind fd74bd40f1a4 net/mlx5e: Consider aggregated port speed during rate configuration a7f10a466d36 i40e: remove redundant memory barrier when cleaning Tx descs 0255c5100470 net: natsemi: fix `rx_dropped` double accounting on `netif_rx()` failure af114ef225e5 selftests: mptcp: sockopt: fix error messages dedaa9bcf79c mptcp: tfo: record 'deny join id0' info 36d9f72e5d66 mptcp: set remote_deny_join_id0 on SYN recv 29a5fd482cd5 bonding: set random address only when slaves already exist ea53e6a47e14 qed: Don't collect too many protection override GRC elements 2f4b68e7905e dpaa2-switch: fix buffer pool seeding for control traffic 4f364023ddcf um: virtio_uml: Fix use-after-free after put_device in probe 5d2c34ff78b8 btrfs: fix invalid extref key setup when replaying dentry 4a1e3ec28e80 cgroup: split cgroup_destroy_wq into 3 workqueues 9ba2b399dee2 pcmcia: omap_cf: Mark driver struct with __refdata to prevent section mismatch eae22a2573a0 wifi: mac80211: fix incorrect type for ret 93e063f15e17 wifi: mac80211: increase scan_ies_len for S1G 0ffb49ba247c ALSA: firewire-motu: drop EPOLLOUT from poll return values as write is not supported 6085291a1a58 wifi: wilc1000: avoid buffer overflow in WID string configuration (From OE-Core rev: 0b5c6e21160e54b3b571343d932614b23231e273) Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>	2025-10-24 06:23:40 -07:00
Bruce Ashfield	0eb11e9267	linux-yocto/6.6: update to v6.6.107 ... Updating linux-yocto/6.6 to the latest korg -stable release that comprises the following commits: no ids found, dumping: af1544b5d072 Linux 6.6.107 f075a33ef204 x86: disable image size check for test builds 23f24d0a538e drm/i915/power: fix size for for_each_set_bit() in abox iteration 0a87bf8bd5d7 drm/amdgpu: fix a memory leak in fence cleanup when unloading d70b5910ca31 net: mdiobus: release reset_gpio in mdiobus_unregister_device() cce57cd8c5de ksmbd: fix null pointer dereference in alloc_preauth_hash() ce807c4c88d2 phy: ti-pipe3: fix device leak at unbind 7c89ea3ab302 phy: tegra: xusb: fix device and OF node leak at probe 221f6739369b dmaengine: dw: dmamux: Fix device reference leak in rzn1_dmamux_route_allocate ebf6c7c908e5 dmaengine: qcom: bam_dma: Fix DT error handling for num-channels/ees e0727853992a usb: gadget: midi2: Fix MIDI2 IN EP max packet size a04b32b0ec1b usb: gadget: midi2: Fix missing UMP group attributes initialization bea1946b6919 USB: gadget: dummy-hcd: Fix locking bug in RT-enabled kernels 26f296e4c497 xhci: fix memory leak regression when freeing xhci vdev devices depth first 0d861bc0b5c4 RISC-V: Remove unnecessary include from compat.h 156677ea10ba hrtimers: Unconditionally update target CPU base after offline timer migration b1fa39fb3026 hrtimer: Rename __hrtimer_hres_active() to hrtimer_hres_active() 6276a6b2c84e hrtimer: Remove unused function c504b5aaaaa5 regulator: sy7636a: fix lifecycle of power good gpio 1baed10553fc dmaengine: ti: edma: Fix memory allocation size for queue_priority_map df82c7901513 dmaengine: idxd: Fix double free in idxd_setup_wqs() f0e460925679 dmaengine: idxd: Fix refcount underflow on module unload 0e95ee7f532b dmaengine: idxd: Remove improper idxd_free 608c14c671a8 hsr: use hsr_for_each_port_rtnl in hsr_port_get_hsr b072e32e0874 hsr: use rtnl lock when iterating over ports 72dbae1f2f21 net: hsr: Add VLAN CTAG filter support 64a58ae64da5 net: hsr: Add support for MC filtering at the slave device 94b050726288 can: xilinx_can: xcan_write_frame(): fix use-after-free of transmitted SKB deedea599e87 can: j1939: j1939_local_ecu_get(): undo increment when j1939_local_ecu_get() fails 1e1adfffd3fe can: j1939: j1939_sk_bind(): call j1939_priv_put() immediately when j1939_local_ecu_get() failed 23431998a377 i40e: fix IRQ freeing in i40e_vsi_request_irq_msix error path ff00b2ed7c64 igb: fix link test skipping when interface is admin down e450b4966f72 docs: networking: can: change bcm_msg_head frames member to support flexible array e6867c0ae100 tunnels: reset the GSO metadata before reusing the skb 5e84e18f6727 net: bridge: Bounce invalid boolopts fe78891f296a net: fec: Fix possible NPD in fec_enet_phy_reset_after_clk_enable() 092e5703d400 Disable SLUB_TINY for build testing 8a8f093e621c USB: serial: option: add Telit Cinterion LE910C4-WWX new compositions e88b7810b43e USB: serial: option: add Telit Cinterion FN990A w/audio compositions bb3498089f86 dt-bindings: serial: brcm,bcm7271-uart: Constrain clocks a0da801d3ea0 serial: sc16is7xx: fix bug in flow control levels init 1e92afef6061 tty: hvc_console: Call hvc_kick in hvc_write unconditionally af253b1a5daa Revert "net: usb: asix: ax88772: drop phylink use in PM to avoid MDIO runtime PM wakeups" 7bd41f9c96dd Input: i8042 - add TUXEDO InfinityBook Pro Gen10 AMD to i8042 quirk table 27e126072ee0 Input: iqs7222 - avoid enabling unused interrupts 854baafc00c4 kernfs: Fix UAF in polling when open file is released 5de7b4141af1 cifs: fix pagecache leak when do writepages 9f4b38ad41d6 mm/khugepaged: fix the address passed to notifier on testing young c95c22402b00 mm/khugepaged: convert hpage_collapse_scan_pmd() to use folios 394547b9113f btrfs: fix corruption reading compressed range when block size is smaller than page size a29f891d4f37 btrfs: use readahead_expand() on compressed extents 7bb675c9f025 mm/damon/lru_sort: avoid divide-by-zero in damon_lru_sort_apply_parameters() 9fe0415156fb mm/damon/reclaim: avoid divide-by-zero in damon_reclaim_apply_parameters() 60d7a3d2b985 mm/damon/sysfs: fix use-after-free in state_show() 23538cfbeed8 libceph: fix invalid accesses to ceph_connection_v1_info b97edd195442 mtd: nand: raw: atmel: Respect tAR, tCLR in read setup timing 252bc25d7aac mtd: nand: raw: atmel: Fix comment in timings preparation cfdde9197ecd drm/amdgpu/vcn4: Fix IB parsing with multiple engine info packages 9adb902be26b drm/amdgpu/vcn: Allow limiting ctx to instance 0 for AV1 at any time b2fbe0f9f80b drm/mediatek: fix potential OF node use-after-free 6632845292a4 mm/damon/core: set quota->charged_from to jiffies at first charge window 3d278e89c2ea mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory 8577ded2ee3d fuse: prevent overflow in copy_file_range return value 01e1eba64860 fuse: check if copy_file_range() returns larger than requested size c50336dfcb24 mtd: rawnand: stm32_fmc2: fix ECC overwrite 06d8ef8f8537 mtd: rawnand: stm32_fmc2: avoid overlapping mappings on ECC buffer 31dc1603aa43 net: usb: asix: ax88772: drop phylink use in PM to avoid MDIO runtime PM wakeups 9d55370cc4e2 i2c: i801: Hide Intel Birch Stream SoC TCO WDT 0709bc11b942 ocfs2: fix recursive semaphore deadlock in fiemap call 8345a93b9bda mptcp: sockopt: make sync_socket_options propagate SOCK_KEEPOPEN e69f61b8c08e compiler-clang.h: define __SANITIZE_*__ macros only when undefined deedce87471e Revert "SUNRPC: Don't allow waiting for exiting tasks" 6f628d7dd8ac EDAC/altera: Delete an inappropriate dma_free_coherent() call 2089d8a316f4 KVM: SVM: Set synthesized TSA CPUID flags 2b8a1969cae5 rcu-tasks: Maintain real-time response in rcu_tasks_postscan() d89abc4fbee8 rcu-tasks: Eliminate deadlocks involving do_exit() and RCU tasks 4e86206b6967 rcu-tasks: Maintain lists to eliminate RCU-tasks/do_exit() deadlocks 8be3d52101b0 proc: fix type confusion in pde_set_flags() 66bcb04a441f tcp_bpf: Call sk_msg_free() when tcp_bpf_send_verdict() fails to allocate psock->cork. 449682e76f32 bpf: Tell memcg to use allow_spinning=false path in bpf_timer_init() d660c8d8142e s390/cpum_cf: Deny all sampling events by counter PMU 1262bda871da tracing: Silence warning when chunk allocation fails in trace_pid_write 69d99a936f00 NFSv4/flexfiles: Fix layout merge mirror check. c288e4c39d21 NFSv4.2: Serialise O_DIRECT i/o and copy range 9f2fdb18d0bf NFSv4.2: Serialise O_DIRECT i/o and clone range 4089fd70a508 NFSv4.2: Serialise O_DIRECT i/o and fallocate() 320a0954e2c8 NFS: Serialise O_DIRECT i/o and truncate() 275d9fd06d96 fs/nfs/io: make nfs_start_io_*() killable 06c26a679029 ftrace/samples: Fix function size computation f7ec68cc74d8 tracing: Fix tracing_marker may trigger page fault during preempt_disable 781ec30354e6 NFSv4: Clear the NFS_CAP_XATTR flag if not supported by the server b39234ede545 NFSv4: Clear the NFS_CAP_FS_LOCATIONS flag if it is not set a022c9a46455 NFSv4: Don't clear capabilities that won't be reset 9339b4e75a81 SUNRPC: call xs_sock_process_cmsg for all cmsg fd00ae04c5aa flexfiles/pNFS: fix NULL checks on result of ff_layout_choose_ds_for_read 0214b96a6a63 ima: limit the number of ToMToU integrity violations 905d43b8ad24 net: Fix null-ptr-deref by sock_lock_init_class_and_name() and rmmod. 9da2a9d3ccd8 media: i2c: imx214: Fix link frequency validation 817a962db3f3 NFSD: nfsd_unlink() clobbers non-zero status returned from fh_fill_pre_attrs() 913ff520714f nfsd: Fix a regression in nfsd_setattr() 392260eb8e67 kasan: fix GCC mem-intrinsic prefix with sw tags d699575d00ff mm: introduce and use {pgd,p4d}_populate_kernel() 3f8810b2d22d kunit: kasan_test: disable fortify string checker on kasan_strings() test (From OE-Core rev: 4964bdf8bf8b4c889928478db3e0d901e748fe55) Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>	2025-10-24 06:23:40 -07:00
Bruce Ashfield	d78bf37c9c	linux-yocto/6.6: update to v6.6.106 ... Updating linux-yocto/6.6 to the latest korg -stable release that comprises the following commits: no ids found, dumping: 60a9e718726f Linux 6.6.106 3b9e7e5c5298 x86/vmscape: Add old Intel CPUs to affected list 1e1dc1f9edb9 x86/vmscape: Warn when STIBP is disabled with SMT a5d029f1152a x86/bugs: Move cpu_bugs_smt_update() down 34e566704105 x86/vmscape: Enable the mitigation f866eef8d1c6 x86/vmscape: Add conditional IBPB mitigation 813cb831439c x86/vmscape: Enumerate VMSCAPE bug 9d1677060428 Documentation/hw-vuln: Add VMSCAPE documentation fe9731e10004 Linux 6.6.105 be4e6a221467 spi: fsl-qspi: Fix double cleanup in probe error path 054a444b4c17 dmaengine: mediatek: Fix a flag reuse error in mtk_cqdma_tx_status() b718de5904a6 cpufreq: intel_pstate: Check turbo_is_disabled() in store_no_turbo() d0b26a9f5742 cpufreq: intel_pstate: Read global.no_turbo under READ_ONCE() a44d0904d673 cpufreq: intel_pstate: Rearrange show_no_turbo() and store_no_turbo() 524ee2606a30 riscv: use lw when reading int cpu in asm_per_cpu 522ffe298627 mm: slub: avoid wake up kswapd in set_track_prepare ad2df864033e slub: Reflow ___slab_alloc() c866c40d07c4 tools: gpio: remove the include directory on make clean 3c331f7fc5b6 tools: gpio: rm .*.cmd on make clean 7e4f8e09d577 drm/amd/amdgpu: Fix missing error return on kzalloc failure 718c248902dd drm/amdgpu: Replace DRM_* with dev_* in amdgpu_psp.c c9c4635a6d55 perf bpf-event: Fix use-after-free in synthesis 85da7f36d9a0 drm/bridge: ti-sn65dsi86: fix REFCLK setting 1a7d3947a5dd spi: spi-fsl-lpspi: Clear status register after disabling the module cd53048e7460 spi: spi-fsl-lpspi: Reset FIFO and disable module on transfer abort a339956545a5 spi: spi-fsl-lpspi: Set correct chip-select polarity bit a786ef5f693b spi: spi-fsl-lpspi: Fix transmissions when using CONT 2313baff36d0 hwmon: mlxreg-fan: Prevent fans from getting stuck at 0 RPM 8699358b6ac9 pcmcia: Add error handling for add_interval() in do_validate_mem() 3ee8f5c8938f pcmcia: omap: Add missing check for platform_get_resource 8d7ee56bf530 Revert "drm/amdgpu: Avoid extra evict-restore process." b9cf42a8f034 ALSA: hda/realtek: Fix headset mic for TongFang X6[AF]R5xxY 5f46882be912 ALSA: hda/hdmi: Add pin fix for another HP EliteDesk 800 G4 model 7d98166183d6 drm/mediatek: Fix device/node reference count leaks in mtk_drm_get_all_drm_priv 2c6c9d319017 drm/mediatek: Fix using wrong drm private data to bind mediatek-drm 13d0854e3538 drm/mediatek: Add crtc path enum for all_drm_priv array d5875a478b1b vmxnet3: update MTU after device quiesce 5174ea81d6ca net: dsa: microchip: linearize skb for tail-tagging switches 3b6a5df36604 net: dsa: microchip: update tag_ksz masks for KSZ9477 family 16fea5067092 dmaengine: mediatek: Fix a possible deadlock error in mtk_cqdma_tx_status() dd2b7abd0da3 ALSA: hda/realtek - Add new HP ZBook laptop with micmute led fixup 7df63b5ddd07 ALSA: hda/realtek: Add support for HP Agusta using CS35L41 HDA 47aba94a924c iio: pressure: mprls0025pa: use aligned_s64 for timestamp e791bf216c9e iio: light: opt3001: fix deadlock due to concurrent flag access 91da53307391 iio: chemical: pms7003: use aligned_s64 for timestamp fb6a7c1da207 iio: imu: inv_mpu6050: align buffer for timestamp 977849e8acd2 btrfs: adjust subpage bit start based on sectorsize b088ae4e4184 PCI/MSI: Add an option to write MSIX ENTRY_DATA before any reads 30d201ee3a37 thermal/drivers/mediatek/lvts: Disable low offset IRQ for minimum threshold 50ae352c1848 spi: fsl-qspi: use devm function instead of driver remove 0ef7058b4dc6 mm/slub: avoid accessing metadata when pointer is invalid in object_err() ba0ccc1be52c nouveau: fix disabling the nonstall irq due to storm code 033f09b647db cpufreq: intel_pstate: Unchecked MSR aceess in legacy mode 83440514ef2a cpufreq: intel_pstate: Do not update global.turbo_disabled after initialization 86cade7791a2 cpufreq: intel_pstate: Fold intel_pstate_max_within_limits() into caller e7f4f16ff167 cpufreq: intel_pstate: Revise global turbo disable check de6b545bcdba Revert "spi: spi-cadence-quadspi: Fix pm runtime unbalance" 94f7d9070382 Revert "spi: cadence-quadspi: fix cleanup of rx_chan on failure paths" f4f7cde70f59 net: pcs: rzn1-miic: Correct MODCTRL register offset 50a84d5c8140 e1000e: fix heap overflow in e1000_set_eeprom 1cfa5dd05847 cifs: prevent NULL pointer dereference in UTF16 conversion bb37252c9af1 batman-adv: fix OOB read/write in network-coding decode d96cc9a1b577 scsi: lpfc: Fix buffer free/clear order in deferred receive path abab31c377cb platform/x86/amd/pmc: Add TUXEDO IB Pro Gen10 AMD to spurious 8042 quirks list 350bfdd2841f drm/amdgpu: drop hw access in non-DC audio fini 9e4293766e4f wifi: mt76: mt7996: Initialize hdr before passing to skb_put_data() 9df29aa5637d wifi: mwifiex: Initialize the chan_stats array to zero bc983b834354 soc: qcom: mdt_loader: Deal with zero e_shentsize 698abcf08818 proc: fix missing pde_set_flags() for net proc files e9188f66e949 ocfs2: prevent release journal inode after journal shutdown f9b8d4dba8e7 sched: Fix sched_numa_find_nth_cpu() if mask offline 6797a8b3f71b mm: move page table sync declarations to linux/pgtable.h 26ff568f390a x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings() 2ee32c4c4f63 pcmcia: Fix a NULL pointer dereference in __iodyn_find_io_region() 50f2f392eb6e arm64: ftrace: fix unreachable PLT for ftrace_caller in init_module with CONFIG_DYNAMIC_FTRACE 90e9372ec0b0 ACPI/IORT: Fix memory leak in iort_rmr_alloc_sids() ad17940a6618 ALSA: usb-audio: Add mute TLV for playback volumes on some devices a4e366fbec8a phy: mscc: Stop taking ts_lock for tx_queue and use its own lock 9b035445b7c9 selftest: net: Fix weird setsockopt() in bind_bhash.c. 85c1c86a67e0 ppp: fix memory leak in pad_compress_skb 01d2690c09e6 net: atm: fix memory leak in atm_register_sysfs when device_register fail 7d449b7a6c8e ax25: properly unshare skbs in ax25_kiss_rcv() 5852cee1d8f6 mctp: return -ENOPROTOOPT for unknown getsockopt options 7f8869586dd6 net/smc: Remove validation of reserved bits in CLC Decline message 90ab05ed47c1 ipv4: Fix NULL vs error pointer check in inet_blackhole_dev_init() bee1e19cf1fa net: thunder_bgx: decrement cleanup index before use 4535729550cf net: thunder_bgx: add a missing of_node_put e472f59d02c8 wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() 609f6debdff3 wifi: libertas: cap SSID len in lbs_associate() ccb839602a82 wifi: cw1200: cap SSID length in cw1200_do_join() 61b80fbdc072 net: ethernet: mtk_eth_soc: fix tx vlan tag for llc packets 5d7b2d45770e wifi: ath11k: fix group data packet drops during rekey 6bf934426760 wifi: ath11k: avoid forward declaration of ath11k_mac_start_vdev_delay() 38b86b0a37df wifi: ath11k: rename ath11k_start_vdev_delay() 14ed9f84c7c0 wifi: ath11k: Introduce and use ath11k_sta_to_arsta() fb216d980fae i40e: Fix potential invalid access when MAC list is empty f18d9b3abf9c net/smc: fix one NULL pointer dereference in smc_ib_is_sg_need_sync() 668f4f6382c3 macsec: read MACSEC_SA_ATTR_PN with nla_get_uint 1cf0b558cbb7 netlink: add variable-length / auto integers 5430388a8111 net: macb: Fix tx_ptr_lock locking 8d09b13789ba icmp: fix icmp_ndo_send address translation for reply direction 1dda64fb3f5e mISDN: Fix memory leak in dsp_hwec_enable() 9a4abe262df9 xirc2ps_cs: fix register access when enabling FullDuplex 6077d16b5c0f Bluetooth: Fix use-after-free in l2cap_sock_cleanup_listen() bd75eba88e88 Bluetooth: vhci: Prevent use-after-free by removing debugfs files early 2acc8d3f0a3c netfilter: conntrack: helper: Replace -EEXIST by -EBUSY 50db11e2bbb6 netfilter: br_netfilter: do not check confirmed bit in br_nf_local_in() after confirm f1150153c4e5 wifi: brcmfmac: fix use-after-free when rescheduling brcmf_btcoex_info work b7d08929178c wifi: cfg80211: fix use-after-free in cmp_bss() 4a05520d12a7 arm64: dts: imx8mp: Fix missing microSD slot vqmmc on Data Modul i.MX8M Plus eDM SBC f7a48ef44576 arm64: dts: imx8mp: Fix missing microSD slot vqmmc on DH electronics i.MX8M Plus DHCOM 5b94a825945a tee: optee: ffa: fix a typo of "optee_ffa_api_is_compatible" 0383e172435f arm64: dts: rockchip: Add vcc-supply to SPI flash on rk3399-pinebook-pro add1ecc8f3ad tee: fix NULL pointer dereference in tee_shm_put bf89b1f87c72 fs: writeback: fix use-after-free in __mark_inode_dirty() 41e168db5942 Bluetooth: hci_sync: Avoid adding default advertising on startup 703ea9e34f96 cpupower: Fix a bug where the -t option of the set subcommand was not working. 2b21fd1cf77e drm/amd/display: Don't warn when missing DCE encoder caps 235a4c0a8aaa cdc_ncm: Flag Intel OEM version of Fibocom L850-GL as WWAN ee58a0a35378 LoongArch: Save LBT before FPU in setup_sigcontext() dc4a024b1990 btrfs: avoid load/store tearing races when checking if an inode was logged 48545620ca8f btrfs: fix race between setting last_dir_index_offset and inode logging 9f76a2e19baf btrfs: fix race between logging inode and checking if it was logged before 7acfa07c585e bpf: Fix oob access in cgroup local storage dbd8ec2261b8 bpf: Move bpf map owner out of common struct 8e573ac21fcd bpf: Move cgroup iterator helpers to bpf.h 3eeefeb9d62d bpf: Add cookie object to bpf maps 355bd0b51d2f Linux 6.6.104 d3cc7476b89f xfs: do not propagate ENODATA disk errors into xattr code 0699faf70413 Revert "drm/dp: Change AUX DPCD probe address from DPCD_REV to LANE0_1_STATUS" 6c9552de7f7e HID: mcp2221: Handle reads greater than 60 bytes 5a809b34250c HID: mcp2221: Don't set bus speed on every transfer 1b3ccc394807 net/mlx5: SF, Fix add port error handling ea687c003663 net: rose: fix a typo in rose_clear_routes() 4e86e5ba325e drm/nouveau/disp: Always accept linear modifier 1424f6132fc8 smb3 client: fix return code mapping of remap_file_range 3c3321091733 net: usb: qmi_wwan: add Telit Cinterion LE910C4-WWX new compositions 4191ea1f0bb3 fs/smb: Fix inconsistent refcnt update 4f43a6d376da dma/pool: Ensure DMA_DIRECT_REMAP allocations are decrypted 8911ec881cd7 Revert "drm/amdgpu: fix incorrect vm flags to map bo" e422370e6ab2 HID: hid-ntrig: fix unable to handle page fault in ntrig_report_version() b9166ea27d0a HID: wacom: Add a new Art Pen 2 88d3c2790c33 HID: logitech: Add ids for G PRO 2 LIGHTSPEED 8783b2a0b740 HID: quirks: add support for Legion Go dual dinput modes d4e6e2680807 HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() 5f3c0839b173 HID: asus: fix UAF via HID_CLAIMED_INPUT validation c84ba4cdf4c6 x86/microcode/AMD: Handle the case of no BIOS microcode f49161646e03 KVM: x86: use array_index_nospec with indices that come from guest 925599eba460 efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare 463aa96fca62 sctp: initialize more fields in sctp_v6_from_sk() 9c547c8eee9d net: rose: include node references in rose_neigh refcount f8c29fc437d0 net: rose: convert 'use' field to refcount_t 4998ab3eb2b8 net: rose: split remove and free operations in rose_remove_neigh() b0f8725196ae net: stmmac: Set CIC bit only for TX queues with COE dc38d0111c16 net: stmmac: xgmac: Correct supported speed modes d02d635fc03d net: stmmac: Rename phylink_get_caps() callback to update_caps() ce006b60fc49 net: stmmac: xgmac: Do not enable RX FIFO Overflow interrupts 9b0acd3bb291 net/mlx5e: Set local Xoff after FW update dec9d873bdf7 net/mlx5e: Update and set Xon/Xoff upon port speed set cdd96ed12524 net/mlx5e: Update and set Xon/Xoff upon MTU set 3e07c623fbc5 net/mlx5: Nack sync reset when SFs are present a623e80aaa85 net/mlx5: Convert SF port_indices xarray to function_ids xarray a7e9da4d3afb net/mlx5: Use devlink port pointer to get the pointer of container SF struct 25659835c7af net/mlx5: Call mlx5_sf_id_erase() once in mlx5_sf_dealloc() ddac9d0fe249 net/mlx5: Fix lockdep assertion on sync reset unload event 8da591ae2614 net/mlx5: Add support for sync reset using hot reset 6292688e07d0 net/mlx5: Add device cap for supporting hot reset in sync reset flow 09fd27c8621e net/mlx5: Reload auxiliary drivers on fw_activate 7acefa4c66aa phy: mscc: Fix when PTP clock is register and unregister b3c70f6fc258 net: dlink: fix multicast stats being counted incorrectly 589edd3dc8fb dt-bindings: display/msm: qcom,mdp5: drop lut clock dc70ea942fcd ice: fix incorrect counter for buffer allocation failures 05fc7307e352 ice: stop storing XDP verdict within ice_rx_buf 29bcd31ace16 ice: gather page_count()'s of each frag right before XDP prog call 40a9f217cde1 ice: Introduce ice_xdp_buff 4de399767ddc drm/nouveau: remove unused memory target test 32a498445641 drm/nouveau: remove unused increment in gm200_flcn_pio_imem_wr 3c80c230d6e3 atm: atmtcp: Prevent arbitrary write in atmtcp_recv_control(). 4bd2866db002 Bluetooth: hci_sync: fix set_local_name race condition 961abec8184a Bluetooth: hci_event: Detect if HCI_EV_NUM_COMP_PKTS is unbalanced f356ed87c78c Bluetooth: hci_event: Mark connection as closed during suspend disconnect 4c549d87f016 Bluetooth: hci_event: Treat UNKNOWN_CONN_ID on disconnect as success 430786612abe HID: input: report battery status changes immediately 61d733a568d8 HID: input: rename hidinput_set_battery_charge_status() e7d0bd359f4c powerpc/kvm: Fix ifdef to remove build warning 6de90c2a3b6c drm/msm: Defer fd_install in SUBMIT ioctl a208d67cb44b net: ipv4: fix regression in local-broadcast routes 9b2700151660 vhost/net: Protect ubufs with rcu read lock in vhost_net_ubuf_put() 181feb41f0b2 NFS: Fix a race when updating an existing write 9a1963404cc2 nfs: fold nfs_page_group_lock_subrequests into nfs_lock_and_join_requests b15342e09644 ACPI: EC: Add device to acpi_ec_no_wakeup[] qurik list 612527136e0c erofs: fix atomic context detection when !CONFIG_DEBUG_LOCK_ALLOC 8f8e6a781783 ASoC: codecs: tx-macro: correct tx_macro_component_drv name 24b9ed739c8c smb: client: fix race with concurrent opens in rename(2) bc1427a48371 smb: client: fix race with concurrent opens in unlink(2) 43662b846c7a scsi: core: sysfs: Correct sysfs attributes access rights 28c8fb7ae2ad ftrace: Fix potential warning in trace_printk_seq during ftrace_dump 9e0743eb6dcf of: dynamic: Fix use after free in of_changeset_add_prop_helper() 749137b41e70 of: Add a helper to free property struct d3be2b8cff6f mips: lantiq: xway: sysctrl: rename the etop node e877b861dab9 mips: dts: lantiq: danube: add missing burst length property 6e59b8483e6e pinctrl: STMFX: add missing HAS_IOMEM dependency 43e3118c677a of: dynamic: Fix memleak when of_pci_add_properties() failed (From OE-Core rev: 212df1778245f7b299b549285ea0994234e163fa) Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>	2025-10-24 06:23:40 -07:00
Bruce Ashfield	7b08b57feb	linux-yocto/6.6: update to v6.6.103 ... Updating linux-yocto/6.6 to the latest korg -stable release that comprises the following commits: no ids found, dumping: cc1a1c5b404a Linux 6.6.103 40b36d9a612b alloc_fdtable(): change calling conventions. a0a3ace2a578 netfilter: nf_reject: don't leak dst refcount for loopback packets c1aa819059b8 s390/hypfs: Enable limited access during lockdown 972d84075e3b s390/hypfs: Avoid unnecessary ioctl registration in debugfs 81a0f002e4fd ALSA: usb-audio: Use correct sub-type for UAC3 feature unit validation 7d67d591ecb0 net/mlx5e: Preserve shared buffer capacity during headroom updates dacf1ca11735 net/mlx5: Base ECVF devlink port attrs from 0 c71a3e2b02e7 Octeontx2-af: Skip overlap check for SPI field 2919ca876e15 bonding: send LACPDUs periodically in passive mode after receiving partner's LACPDU 45b70352d186 bonding: Add independent control state machine f0c7885ef8d3 bonding: update LACP activity flag after setting lacp_active ca88ac44368c net/sched: Remove unnecessary WARNING condition for empty child qdisc in htb_activate aa12ee1c1bd2 net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit ee7134481ff7 igc: fix disabling L1.2 PCI-E link substate on I226 on init d10f670b6f86 ixgbe: xsk: resolve the negative overflow of budget in ixgbe_xmit_zc 5189c0b7c251 LoongArch: Optimize module load time by optimizing PLT/GOT counting 070b4af44c4b net/smc: fix UAF on smcsk after smc_listen_out() ba51d73408ed gve: prevent ethtool ops after shutdown 748da8083122 net: usb: asix_devices: Fix PHY address mask in MDIO bus initialization 3a4eeea79a46 phy: mscc: Fix timestamping for vsc8584 ca18d751bcc9 ppp: fix race conditions in ppp_fill_forward_path 06a7acd45a8f net: ethernet: mtk_ppe: add RCU lock around dev_fill_forward_path 87f78799e358 ipv6: sr: validate HMAC algorithm ID in seg6_hmac_info_add 2156d9e9f2e4 net: gso: Forbid IPv6 TSO with extensions on devices with only IPV6_CSUM 857b8387a977 drm/amd/display: Add null pointer check in mod_hdcp_hdcp1_create_session() b79027f7ebb7 ALSA: usb-audio: Fix size validation in convert_chmap_v3() f93032e5d68f drm/hisilicon/hibmc: fix the hibmc loaded failed bug e50599adc966 mlxsw: spectrum: Forward packets with an IPv4 link-local source IP 469c45c8a16a Bluetooth: hci_conn: do return error from hci_enhanced_setup_sync() ae1d9779f089 Bluetooth: hci_event: fix MTU for BN == 0 in CIS Established 8f80c633cba1 iommu/amd: Avoid stack buffer overflow from kernel cmdline f5ad0819f902 scsi: qla4xxx: Prevent a potential error pointer dereference 96476b043efb net: bridge: fix soft lockup in br_multicast_query_expired() 7aee3d519d63 RDMA/bnxt_re: Fix to initialize the PBL array 5d3f018fc09a RDMA/bnxt_re: Fix to remove workload check in SRQ limit path 7b044e925aba RDMA/bnxt_re: Fix to do SRQ armena by default acf0dea8dc90 RDMA/erdma: Fix ignored return value of init_kernel_qp 76588276fcf8 iosys-map: Fix undefined behavior in iosys_map_clear() 34c3bc762bc4 cgroup/cpuset: Use static_branch_enable_cpuslocked() on cpusets_insane_config_key 72553fe19317 drm/nouveau/nvif: Fix potential memory leak in nvif_vmm_ctor(). ad994eda5d95 spi: spi-fsl-lpspi: Clamp too high speed_hz 7207923d8453 x86/cpu/hygon: Add missing resctrl_cpu_detect() in bsp_init helper 4986548825fe usb: typec: maxim_contaminant: disable low power mode when reading comparator values f56e75b85b54 usb: typec: maxim_contaminant: re-enable cc toggle if cc is open and port is clean e600de541c37 usb: xhci: Fix slot_id resource race conflict 8d2b63fbfd4d iio: imu: inv_icm42600: change invalid data error to -EBUSY 0af5812acfac iio: imu: inv_icm42600: Convert to uXX and sXX integer types ec3310a5168b iio: imu: inv_icm42600: use = { } instead of memset() f52d8ba43259 iio: imu: inv_icm42600: switch timestamp type from int64_t __aligned(8) to aligned_s64 f13768b9b829 iio: temperature: maxim_thermocouple: use DMA-safe buffer for spi_read() 99b508340d0d iio: light: as73211: Ensure buffer holes are zeroed 58ff8064cb4c tracing: Limit access to parser->buffer when trace_get_user failed 648e01a023cb tracing: Remove unneeded goto out logic c09dd3773b59 tls: fix handling of zero-length records on the rx_list 93879b3ba967 powerpc/boot: Fix build with gcc 15 5c67f7e4330e mmc: sdhci-pci-gli: GL9763e: Mask the replay timer timeout of AER 03695cdfcb5e compiler: remove __ADDRESSABLE_ASM{_STR,}() again fa833df2ba9e drm/amd/display: Don't overclock DCE 6 by 15% 7660124e6506 usb: dwc3: pci: add support for the Intel Wildcat Lake 84c95dbf5bec usb: dwc3: Remove WARN_ON for device endpoint command timeouts 319aba29a486 usb: dwc3: Ignore late xferNotReady event to prevent halt timeout dbfaa79103b4 USB: storage: Ignore driver CD mode for Realtek multi-mode Wi-Fi dongles bf29c9618160 usb: storage: realtek_cr: Use correct byte order for bcs->Residue adfdc6ed189b USB: storage: Add unusual-devs entry for Novatek NTK96550-based camera cd3bace9c9a3 usb: renesas-xhci: Fix External ROM access timeouts 3b4a57b5cc3b usb: core: hcd: fix accessing unmapped memory in SINGLE_STEP_SET_FEATURE test d84f6e77ebe3 comedi: Fix use of uninitialized memory in do_insn_ioctl() and do_insnlist_ioctl() 0eb4ed2aa261 comedi: pcl726: Prevent invalid irq number 842f307a1d11 comedi: Make insn_rw_emulate_bits() do insn->n samples decaa5401cb4 usb: quirks: Add DELAY_INIT quick for another SanDisk 3.2Gen1 Flash Drive 20729b825914 cdx: Fix off-by-one error in cdx_rpmsg_probe() 4de009fc0a3a most: core: Drop device reference after usage in get_channel() bc4e3186a2e2 iio: proximity: isl29501: fix buffered read on big-endian systems 6a605d307b02 iio: pressure: bmp280: Use IS_ERR() in bmp280_common_probe() 3b114a3282ab ftrace: Also allocate and copy hash for reading of filter files bb912a20fab0 fpga: zynq_fpga: Fix the wrong usage of dma_map_sgtable() 65e46aeaf84a drm/dp: Change AUX DPCD probe address from DPCD_REV to LANE0_1_STATUS d404824f3d25 cpuidle: governors: menu: Avoid selecting states with too much latency 3a92598c3e55 cpuidle: menu: Remove iowait influence f0aa8591ba0c mmc: sdhci-pci-gli: Add a new function to simplify the code 1eae029f79b6 mmc: sdhci-pci-gli: Use PCI AER definitions, not hard-coded values fd269466abe6 selftests: mptcp: pm: check flush doesn't reset limits a9cf4362d4d0 mptcp: disable add_addr retransmission when timeout is 0 ebe3d8cf1ee6 mptcp: remove duplicate sk_reset_timer call 1982e18bbcc1 use uniform permission checks for all mount propagation changes c5aa6ba11273 fs/buffer: fix use-after-free when call bh_read() helper 212eb86f75b4 smb: server: split ksmbd_rdma_stop_listening() out of ksmbd_rdma_destroy() 740ccba37a12 arm64: dts: ti: k3-am62-main: Remove eMMC High Speed DDR support 342f7a1dda77 ext4: preserve SB_I_VERSION on remount 047b4cb30e42 scsi: mpi3mr: Serialize admin queue BAR writes on 32-bit systems c065c8d20dd0 scsi: mpi3mr: Drop unnecessary volatile from __iomem pointers 6d53b2a134da scsi: ufs: exynos: Fix programming of HCI_UTRL_NEXUS_TYPE 0c3333f7bfee PCI: imx6: Add IMX8MM_EP and IMX8MP_EP fixed 256-byte BAR 4 in epc_features d0252e69b932 PCI: imx6: Delay link start until configfs 'start' written cee067ef2055 PCI: rockchip: Set Target Link Speed to 5.0 GT/s before retraining 7b688b365ace PCI: rockchip: Use standard PCIe definitions 72ff3acf0044 soc: qcom: mdt_loader: Fix error return values in mdt_header_valid() ef2f64dff281 drm/amd/display: Fill display clock and vblank time in dce110_fill_display_configs a98aa702c74f drm/amd/display: Find first CRTC and its line time in dce110_fill_display_configs e95f4fd56f6c drm/amd/display: Fix DP audio DTO1 clock source on DCE 6. 5b011264c5da drm/amd/display: Fix fractional fb divider in set_pixel_clock_v3 36a6b43573d1 drm/amd/display: Avoid a NULL pointer dereference 86c2825791c3 s390/sclp: Fix SCCB present check 50db1ab0f3ec ALSA: hda/realtek: Add support for HP EliteBook x360 830 G6 and EliteBook 830 G6 0a1385336970 mm/memory-failure: fix infinite UCE for VM_PFNMAP pfn 63962ff932ef mm/debug_vm_pgtable: clear page table entries at destroy_args() 8d03bce0dcb2 squashfs: fix memory leak in squashfs_fill_super 92c9689646c8 mmc: sdhci-pci-gli: GL9763e: Rename the gli_set_gl9763e() for consistency 0207d8faa1fb memstick: Fix deadlock by moving removing flag earlier 28b82be094e2 KVM: arm64: Fix kernel BUG() due to bad backport of FPSIMD/SVE/SME fix d1446050a29a sched/fair: Fix frequency selection for non-invariant case 858e035ea448 topology: Set capacity_freq_ref in all cases 68df021d3cfa arm64/amu: Use capacity_ref_freq() to set AMU ratio cf4faefd3a7b cpufreq/cppc: Set the frequency used for computing the capacity 11da2b1ae4c9 energy_model: Use a fixed reference frequency 6688eb926932 cpufreq/schedutil: Use a fixed reference frequency 9771732ab39c cpufreq: Use the fixed and coherent frequency for scaling capacity 46db6d4797f1 sched/topology: Add a new arch_scale_freq_ref() method 0ed2068de1f9 kbuild: userprogs: use correct linker when mixing clang and GNU ld 5b7912d83962 ata: libata-scsi: Return aborted command when missing sense and result TF 9e9b1fa7ecaa PM: runtime: Take active children into account in pm_runtime_get_if_in_use() ac2e62cab097 PM: runtime: Simplify pm_runtime_get_if_active() usage c0f179c1547f ata: Fix SATA_MOBILE_LPM_POLICY description in Kconfig dc35f594b0d2 usb: dwc3: imx8mp: fix device leak at unbind 1636b5e9c354 mm/ptdump: take the memory hotplug lock inside ptdump_walk_pgd() 365771ee3dc8 wifi: mac80211: check basic rates validity in sta_link_apply_parameters b59bea60396c KVM: x86: Take irqfds.lock when adding/deleting IRQ bypass producer 65b6b10fc005 s390/mm: Remove possible false-positive warning in pte_free_defer() 0852c97fec9c btrfs: send: make fs_path_len() inline and constify its argument 8f3aae5fd76d btrfs: send: use fallocate for hole punching with send stream v2 f942e47453a8 btrfs: send: avoid path allocation for the current inode when issuing commands dbda681a0a93 btrfs: send: keep the current inode's path cached ffc19fe2a7ad btrfs: send: add and use helper to rename current inode when processing refs bfed58ed10f1 btrfs: send: only use boolean variables at process_recorded_refs() 253557254f8d btrfs: send: factor out common logic when sending xattrs b1947464c041 btrfs: populate otime when logging an inode item d7badc2ba4da btrfs: constify more pointer parameters 9dfdea89ceb3 btrfs: fix ssd_spread overallocation 9c64d6b07cbb btrfs: open code timespec64 in struct btrfs_inode 8f85af32692d xfs: fully decouple XFS_IBULK* flags from XFS_IWALK* flags 4734255ef39b btrfs: abort transaction on unexpected eb generation at btrfs_copy_root() 467dcf7e4a61 btrfs: always abort transaction on failure to add block group to free space tree 8c5bf13905f3 btrfs: move transaction aborts to the error site in add_block_group_free_space() b172535ccba1 btrfs: qgroup: fix race between quota disable and quota rescan ioctl d6f1a6c2f567 btrfs: don't ignore inode missing when replaying log tree a779d1dd7f2d usb: typec: fusb302: cache PD RX state 827f7b4fe051 PCI/ACPI: Fix runtime PM ref imbalance on Hot-Plug Capable ports 80617b3926b6 block: Make REQ_OP_ZONE_FINISH a write operation 6c77d4e0f6ad block: reject invalid operation in submit_bio_noacct 3bbd52a413fc fscrypt: Don't use problematic non-inline crypto engines c8a1e1f02921 leds: flash: leds-qcom-flash: Fix registry access after re-bind 71230248a711 leds: flash: leds-qcom-flash: Limit LED current based on thermal condition 84a24fb446ee net/sched: ets: use old 'nbands' while purging unused classes 81505f137b3a net_sched: sch_ets: implement lockless ets_dump() 00dc616e6cb5 smb: client: fix netns refcount leak after net_passive changes 2668e038800b net: better track kernel sockets lifetime ac90037bf398 net: Add net_passive_inc() and net_passive_dec(). 5dd481868eb1 selftests/memfd: add test for mapping write-sealed memfd read-only 2e4179698f84 mm: reinstate ability to map write-sealed memfd mappings read-only 87a75f68eaba mm: update memfd seal write check to include F_SEAL_WRITE 17c5d49beb6c mm: drop the assumption that VM_SHARED always implies writable 440d36847a12 mptcp: pm: kernel: flush: do not reset ADD_ADDR limit 253b7d8bafe6 mptcp: drop skb if MPTCP skb extension allocation fails cf0a88124e35 ACPI: pfr_update: Fix the driver update version check 3ddd55cf19ed ipv6: sr: Fix MAC comparison to be constant-time b117c41b0090 net, hsr: reject HSR frame if skb can't hold tag 3afdeb96dc5f drm/amd/display: Don't overwrite dce60_clk_mgr 39f187cbf7ed drm/amd/display: Add primary plane to commits for correct VRR handling 74ee7445c3b6 drm/amdkfd: Destroy KFD debugfs after destroy KFD wq 627f30a328f2 drm/amdgpu: update mmhub 3.0.1 client id mappings a3201e3b7cf1 drm/amdgpu: Avoid extra evict-restore process. 0e7f5f9aa498 drm/amd: Restore cached power limit during resume 002860142ceb media: venus: venc: Clamp param smaller than 1fps and bigger than 240 f866778583b6 media: venus: vdec: Clamp param smaller than 1fps and bigger than 240. f54be97bc69b media: venus: protect against spurious interrupts during probe 041015a46597 media: venus: hfi: explicitly release IRQ during teardown ba567c2e52fb media: venus: Add a check for packet size after reading from shared memory 03c0e00ccf59 media: qcom: camss: cleanup media device allocated resource on error path 3c0e4cc4f55f media: ivsc: Fix crash at shutdown due to missing mei_cldev_disable() calls 61f267b77dbc media: ov2659: Fix memory leaks in ov2659_probe() 1c2769dc8025 media: rainshadow-cec: fix TOCTOU race condition in rain_interrupt() 3d83d0b5ae50 media: usbtv: Lock resolution while streaming ecb7382089bc media: v4l2-ctrls: Don't reset handler's error in v4l2_ctrl_handler_free() b3433cffee8d media: verisilicon: Fix AV1 decoder clock frequency 6a41dc143e3c media: vivid: fix wrong pixel_array control size 8ad57bd4a952 media: imx: fix a potential memory leak in imx_media_csc_scaler_device_init() c231d1964878 media: hi556: correct the test pattern configuration 0148fcdd9140 media: gspca: Add bounds checking to firmware parser 85bfcb0e40fe parisc: Update comments in make_insert_tlb 9827b2b0c64e parisc: Try to fixup kernel exception in bad_area_nosemaphore path of do_page_fault() 8bccf47adbf6 parisc: Revise gateway LWS calls to probe user read access 4c981077255a parisc: Revise __get_user() to probe user read access d6ac1e11c4a0 parisc: Rename pte_needs_flush() to pte_needs_cache_flush() in cache.c 033605fb20a3 parisc: Makefile: explain that 64BIT requires both 32-bit and 64-bit compilers 69cf90e5aa50 parisc: Drop WARN_ON_ONCE() from flush_cache_vmap 0199adb6d1f2 parisc: Define and use set_pte_at() b334724f6b31 parisc: Check region is readable by user in raw_copy_from_user() fe0886c98b63 soc/tegra: pmc: Ensure power-domains are in a known state 41f40038de62 jbd2: prevent softlockup in jbd2_log_do_checkpoint() 92ef491b506a f2fs: fix to avoid out-of-boundary access in dnode page 5d109edb38c9 phy: qcom: phy-qcom-m31: Update IPQ5332 M31 USB phy initialization sequence adb482170045 vhost/vsock: Avoid allocating arbitrarily-sized SKBs ee438c492b2e vsock/virtio: Validate length in packet header before skb_put() 6ee4578274d1 PCI: endpoint: Fix configfs group removal on driver teardown 0758862386f1 PCI: endpoint: Fix configfs group list head handling d1f59c792c6f mtd: rawnand: renesas: Add missing check after DMA map fcb12d1e4163 mtd: rawnand: fsmc: Add missing check after DMA map 9de4819feef9 mtd: spinand: propagate spinand_wait() errors from spinand_write_page() b9e9afc35a89 mtd: spi-nor: Fix spi_nor_try_unlock_all() 749ccc175ca5 hwmon: (gsc-hwmon) fix fan pwm setpoint show functions 747977aeefd4 pwm: mediatek: Fix duty and period setting 070236488cc9 pwm: mediatek: Handle hardware enable and clock enable separately cbf3815d8c11 pwm: imx-tpm: Reset counter if CMOD is 0 aa48271f7bef wifi: ath11k: fix dest ring-buffer corruption when ring is full ee3c10c9738b wifi: ath11k: fix source ring-buffer corruption 069819aa84d2 wifi: ath11k: fix dest ring-buffer corruption daa2b66fa569 wifi: ath12k: fix dest ring-buffer corruption when ring is full bfd4918b2b9b wifi: ath12k: fix source ring-buffer corruption b5b6201a2b75 wifi: ath12k: fix dest ring-buffer corruption 97e07460ba85 wifi: brcmsmac: Remove const from tbl_ptr parameter in wlc_lcnphy_common_read_table() 296bcff76d41 iio: adc: ad_sigma_delta: change to buffer predisable 50e823a23816 iio: imu: bno055: fix OOB access of hw_xlate array e22e5ac22736 zynq_fpga: use sgtable-based scatterlist wrappers 981c845f2983 soc: qcom: mdt_loader: Ensure we don't read past the ELF header bfa87a2cafb5 ata: libata-scsi: Fix CDL control 6f5d34088250 scsi: ufs: ufs-pci: Fix default runtime and system PM levels 03d559670ccd scsi: ufs: ufs-pci: Fix hibernate state transition for Intel MTL-like host controllers 8247c4269acb ata: libata-scsi: Fix ata_to_sense_error() status handling 728abc895294 scsi: mpi3mr: Fix race between config read submit and interrupt completion 78f1d313442c dt-bindings: display: sprd,sharkl3-dsi-host: Fix missing clocks constraints c4adc491a326 dt-bindings: display: sprd,sharkl3-dpu: Fix missing clocks constraints 745c9b114eaf arm64: dts: ti: k3-am62-verdin: Enable pull-ups on I2C buses d1aca165c1f1 arm64: dts: ti: k3-am62a7-sk: fix pinmux for main_uart1 06c3fda2bda8 arm64: dts: ti: k3-pinctrl: Enable Schmitt Trigger by default 2fdddc181262 btrfs: zoned: fix write time activation failure for metadata block group 5fc0345e1af3 ext4: fix hole length calculation overflow in non-extent inodes e0bb195aea7a ext4: use kmalloc_array() for array space allocation 173270d9fe86 ext4: don't try to clear the orphan_present feature block device is r/o d387cee49cfe ext4: fix reserved gdt blocks handling in fsmap 052cd20d8d75 ext4: fix fsmap end of range reporting with bigalloc ab1cc862e55e ext4: check fast symlink for ea_inode correctly d0570a5b9ccc tracing: fprobe-event: Sanitize wildcard for fprobe event name d9e157fcfebc ksmbd: extend the connection limiting mechanism to support IPv6 a1d2bab4d533 ksmbd: fix refcount leak causing resource not released 820949bbf33f Revert "vgacon: Add check for vc_origin address range in vgacon_scroll()" 5858448a6c65 crypto: qat - flush misc workqueue during device shutdown fd2844179567 crypto: qat - lower priority for skcipher and aead algorithms ea95d4e8a263 lib/crypto: mips/chacha: Fix clang build and remove unneeded byteswap c82ad93be639 vt: defkeymap: Map keycodes above 127 to K_HOLE c0942ce38843 vt: keyboard: Don't process Unicode characters in K_OFF mode 5e17429679a8 bus: mhi: host: Detect events pointing to unexpected TREs 38de63c2876e bus: mhi: host: Fix endianness of BHI vector table e192ebb7521c usb: dwc3: meson-g12a: fix device leaks at unbind d52ad077933f usb: musb: omap2430: fix device leak at unbind 21c400de1079 usb: gadget: udc: renesas_usb3: fix device leak at unbind 295425f52052 usb: atm: cxacru: Merge cxacru_upload_firmware() into cxacru_heavy_init() e06e9ef1912c m68k: Fix lost column on framebuffer debug console b4b21367cb9c platform/chrome: cros_ec: Unregister notifier in cros_ec_unregister() 1bf5cc1edb37 cpufreq: armada-8k: Fix off by one in armada_8k_cpufreq_free_table() cb7b3633ed74 serial: 8250: fix panic due to PSLVERR 2328010117d0 rcu: Fix racy re-initialization of irq_work causing hangs 049874a185aa HID: apple: avoid setting up battery timer for devices without battery 05a40e70ff5a HID: magicmouse: avoid setting up battery timer when not needed 5661fdd218c2 RDMA/siw: Fix the sendmsg byte count in siw_tcp_sendpages b9669bedc63d tools/nolibc: fix spelling of FD_SETBITMASK in FD_* macros fdd1c9f78c24 media: uvcvideo: Do not mark valid metadata as invalid 8f274e2b05fd media: venus: Fix OOB read due to missing payload bound check a97e062e4ff3 media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format() 1da95d3d4b7b mm/kmemleak: avoid deadlock by moving pr_warn() outside kmemleak_lock e21a3ddd5873 mm/kmemleak: avoid soft lockup in __kmemleak_do_cleanup() 74fb3b1b335b parisc: Makefile: fix a typo in palo.conf 2a70cbd1aef8 hv_netvsc: Fix panic during namespace deletion with VF 27b118aebdd8 fbdev: Fix vmalloc out-of-bounds write in fast_imageblit f83d4c81bda3 btrfs: do not allow relocation of partially dropped subvolumes 77e07f7226f4 btrfs: zoned: do not select metadata BG as finish target 6b801da8e146 btrfs: fix log tree replay failure due to file with 0 links and extents a002525b2fd7 btrfs: clear dirty status from extent buffer on error at insert_new_root() 99e36ff41a74 btrfs: zoned: do not remove unwritten non-data block group e02bdb223399 btrfs: abort transaction during log replay if walk_log_tree() failed ec5bfcfb6e0d btrfs: zoned: use filesystem size not disk size for reclaim decision 9dfe40cb6c2c cdc-acm: fix race between initial clearing halt and open 729ac69a3e81 thunderbolt: Fix copy+paste error in match_service_id() 5c4a2ffcbd05 comedi: fix race between polling and detaching e613904fa419 usb: typec: ucsi: Update power_supply on power role change ca9fb654f89b misc: rtsx: usb: Ensure mmc child device is active when card is present 5badd56c711e usb: core: config: Prevent OOB read in SS endpoint companion parsing 492207cf8372 ext4: fix largest free orders lists corruption on mb_optimize_scan switch 88d02c333989 ext4: fix zombie groups in average fragment size lists d19b817540c0 iommufd: Prevent ALIGN() overflow 2ccccb0e4178 iommufd: Report unmapped bytes in the error path of iopt_unmap_iova_range a11b6ee7cab8 iommu/arm-smmu-qcom: Add SM6115 MDSS compatible 7e0c0664e9aa cifs: reset iface weights when we cannot find a candidate 1b6310d14b13 drm/amdgpu: fix incorrect vm flags to map bo 3fbc2e43ab12 ASoC: fsl_sai: replace regmap_write with regmap_update_bits 8270fbcc1ec4 scsi: lpfc: Remove redundant assignment to avoid memory leak 063fe9b16be1 rtc: ds1307: remove clear of oscillator stop flag (OSF) in probe 24334f3cf8a2 pNFS: Fix uninited ptr deref in block/scsi layout 198f26c55779 pNFS: Handle RPC size limit for layoutcommits 2c5b079bcb31 pNFS: Fix disk addr range check in block/scsi layout cf949a960653 pNFS: Fix stripe mapping in block/scsi layout 3b9d69f0e68a block: avoid possible overflow for chunk_sectors check in blk_stack_limits() 1df5970cd93d ASoC: Intel: avs: Fix uninitialized pointer error in probe() f2e480950d1c net: phy: smsc: add proper reset flags for LAN8710A 6b93ab1ad84a ipmi: Fix strcpy source and destination the same 9da4d5c3ea6b kconfig: lxdialog: fix 'space' to (de)select options 44337363300f kconfig: gconf: fix potential memory leak in renderer_edited() e55c6f052032 kconfig: gconf: avoid hardcoding model2 in on_treeview2_cursor_changed() 933992c60c07 ipmi: Use dev_warn_ratelimited() for incorrect message warnings 2e07a9fe5117 vfio/mlx5: fix possible overflow in tracking max message size 48d7bdd8759c scsi: aacraid: Stop using PCI_IRQ_AFFINITY 0787a522cc9c scsi: target: core: Generate correct identifiers for PR OUT transport IDs a40c4af8083d scsi: Fix sas_user_scan() to handle wildcard and multi-channel scans 28d64271510e kconfig: nconf: Ensure null termination where strncpy is used 106ab3cd026f vfio/type1: conditional rescheduling while pinning 98b7b47cebe3 kconfig: lxdialog: replace strcpy() with strncpy() in inputbox.c b45134f72642 f2fs: check the generic conditions first 868f23286c1a exfat: add cluster chain loop check for dir 6af18148675f i2c: Force DLL0945 touchpad i2c freq to 100khz f8c001884bb4 apparmor: use the condition in AA_BUG_FMT even with debug disabled dd45d42ab290 dm-table: fix checking for rq stackable devices f4133dc2b93d dm-mpath: don't print the "loaded" message if registering fails cf4a40ad2116 i3c: master: Initialize ret in i3c_i2c_notifier_call() 4e24a6a42d91 i3c: don't fail if GETHDRCAP is unsupported 2e487c0fdeb9 apparmor: shift ouid when mediating hard links in userns ef8814a9d64a rtc: ds1307: handle oscillator stop flag (OSF) for ds1341 6e3733fe88a0 i3c: add missing include to internal header 6dd90afb3945 module: Prevent silent truncation of module name in delete_module(2) d386c8e4e587 md: dm-zoned-target: Initialize return variable r to avoid uninitialized use b0cab3d9c70d soundwire: Move handle_nested_irq outside of sdw_dev_lock 1e3697578567 soundwire: amd: serialize amd manager resume sequence during pm_prepare d2974cfd4fa6 crypto: octeontx2 - add timeout for load_fvc completion poll ae5a0993f1e4 media: uvcvideo: Fix bandwidth issue for Alcor camera 6bbaec6a0369 media: dvb-frontends: w7090p: fix null-ptr-deref in w7090p_tuner_write_serpar and w7090p_tuner_read_serpar 09906650484a media: dvb-frontends: dib7090p: fix null-ptr-deref in dib7090p_rw_on_apb() 77ac2addb1dc media: usb: hdpvr: disable zero-length read messages 1512ced62c87 media: tc358743: Increase FIFO trigger level to 374 9b023149b97a media: tc358743: Return an appropriate colorspace from tc358743_set_fmt 5c809ef89e1b media: tc358743: Check I2C succeeded during probe 815cb5818eef pinctrl: stm32: Manage irq affinity settings 67bca5b04313 scsi: mpi3mr: Correctly handle ATA device errors 80726da54c29 scsi: mpt3sas: Correctly handle ATA device errors 924226822419 power: supply: qcom_battmgr: Add lithium-polymer entry 7925dd68807c scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure 8c449e588d81 RDMA/core: reduce stack using in nldev_stat_get_doit() 89fdac333a17 RDMA: hfi1: fix possible divide-by-zero in find_hw_thread_mask() 773612b1edf3 dmaengine: stm32-dma: configure next sg only if there are more than 2 sgs 01c412e31d98 leds: leds-lp50xx: Handle reg to get correct multi_index 07cba8891f2c media: v4l2-common: Reduce warnings about missing V4L2_CID_LINK_FREQ control f54eacb5b7f8 MIPS: lantiq: falcon: sysctrl: fix request memory check logic f22de2027b20 MIPS: Don't crash in stack_top() for tasks without ABI or vDSO 9021924d8893 crypto: jitter - fix intermediary handling 173cfd741ad7 jfs: upper bound check of tree index in dbAllocAG 78989af5bbf5 jfs: Regular file corruption check 34d8e982bac4 jfs: truncate good inode pages when hard link is 0 39cfe2c83146 scsi: bfa: Double-free fix 2b98d2c23317 watchdog: iTCO_wdt: Report error if timeout configuration fails 7fe9533fb069 MIPS: vpe-mt: add missing prototypes for vpe_{alloc,start,stop,free} 6caa737a77a5 clk: qcom: ipq5018: keep XO clock always on 16e245176777 hwmon: (emc2305) Set initial PWM minimum value during probe based on thermal state d202efb10a4b watchdog: dw_wdt: Fix default timeout 478bd3bc4e7f fs/orangefs: use snprintf() instead of sprintf() 66a373f50b42 scsi: libiscsi: Initialize iscsi_conn->dd_data only if memory is allocated 4db46a83d817 phy: rockchip-pcie: Properly disable TEST_WRITE strobe signal 41368857a354 mfd: axp20x: Set explicit ID for AXP313 regulator 6c9e12fef997 clk: tegra: periph: Fix error handling and resolve unsigned compare warning d960f4b79391 ext4: do not BUG when INLINE_DATA_FL lacks system.data xattr de6af003239a crypto: hisilicon/hpre - fix dma unmap sequence cbe740de32bb fbdev: fix potential buffer overflow in do_register_framebuffer() 6daa13c20190 cifs: Fix calling CIFSFindFirst() for root path without msearch 74e7af8334c9 watchdog: sbsa: Adjust keepalive timeout to avoid MediaTek WS0 race condition 3a5236c610e2 drm/amd/display: Avoid configuring PSR granularity if PSR-SU not supported 8708914f05ec drm/amd/display: Only finalize atomic_obj if it was initialized 110822d339a0 vhost: fail early when __vhost_add_used() fails c2bdb45f366a vsock/virtio: Resize receive buffers so that each SKB fits in a 4K page bc9ef9783c6b net: dsa: b53: fix IP_MULTICAST_CTRL on BCM5325 e7a375453cca rcu: Fix rcu_read_unlock() deadloop due to IRQ work 58ed3ac8538c drm/ttm: Respect the shrinker core free target 39de3ce65635 drm/amd/display: Avoid trying AUX transactions on disconnected ports d02ee5eebbcf selftests/bpf: Fix a user_ringbuf failure with arm64 64KB page size c03a532fe1d3 bpf: Make reg_not_null() true for CONST_PTR_TO_MAP 86f3cff54956 uapi: in6: restore visibility of most IPv6 socket options 3c9ca275100e drm/ttm: Should to return the evict error e4b67ceb8634 drm: renesas: rz-du: mipi_dsi: Add min check for VCLK range 1df5e6eb71e4 net: ncsi: Fix buffer overflow in fetching version id 859c54bb0120 ionic: clean dbpage in de-init ec33caca7662 wifi: rtlwifi: fix possible skb memory leak in _rtl_pci_init_one_rxdesc() c2e719bcaa26 ptp: Use ratelimite for freerun error message 868b52651f69 bpftool: Fix JSON writer resource leak in version command d930e738c0a8 net: dsa: b53: prevent SWITCH_CTRL access on BCM5325 8609f3c44e27 net: dsa: b53: prevent DIS_LEARNING access on BCM5325 bc0e01d663f4 net: dsa: b53: prevent GMII_PORT_OVERRIDE_CTRL access on BCM5325 668280aa65fc net: dsa: b53: fix b53_imp_vlan_setup for BCM5325 7f36d13d5243 gve: Return error for unknown admin queue command a1172cbfe51c net: vlan: Replace BUG() with WARN_ON_ONCE() in vlan_dev_* stubs 8d1f4798c876 net: vlan: Make is_vlan_dev() a stub when VLAN is not configured 63acb8e26620 drm/amd: Allow printing VanGogh OD SCLK levels without setting dpm to manual 50dbeff47178 dpaa_eth: don't use fixed_phy_change_carrier 7c299d0bc983 neighbour: add support for NUD_PERMANENT proxy entries a70c31416ddd wifi: iwlegacy: Check rate_idx range after addition ad8742e2d1da netmem: fix skb_frag_address_safe with unreadable skbs 88517afa7401 powerpc: floppy: Add missing checks after DMA map eb1e1526b82b wifi: ath12k: Decrement TID on RX peer frag setup error handling 9874a00ba22b wifi: ath12k: Enable REO queue lookup table feature on QCN9274 hw2.0 afb39537d894 wifi: rtlwifi: fix possible skb memory leak in `_rtl_pci_rx_interrupt()`. c387d8fcd330 wifi: mac80211: update radar_required in channel context after channel switch cf48c230a17a drm/amd/display: Fix 'failed to blank crtc!' c43b6b0a8342 wifi: iwlwifi: fw: Fix possible memory leak in iwl_fw_dbg_collect 83aba958e33f wifi: iwlwifi: dvm: fix potential overflow in rs_fill_link_cmd() 5c942d80f3e8 wifi: ath12k: Add memset and update default rate value in wmi tx completion 9febff30eb52 drm/amd/display: Separate set_gsl from set_gsl_source_select f2a4ca5397f5 net: fec: allow disable coalescing b3472b9d9d42 net: atlantic: add set_power to fw_ops for atl2 to fix wol 3d8090bb5342 xfrm: Duplicate SPI Handling 81667abecebc net: thunderbolt: Fix the parameter passing of tb_xdomain_enable_paths()/tb_xdomain_disable_paths() 99f142ec75dd net: thunderbolt: Enable end-to-end flow control also in transmit bdd66b918215 kselftest/arm64: Specify SVE data when testing VL set in sve-ptrace b6c39aaa85c4 wifi: mt76: mt7915: mcu: re-init MCU before loading FW patch 51eb6a5f209b wifi: rtw89: Disable deep power saving for USB/SDIO ecf449ef73a5 wifi: rtw89: Fix rtw89_mac_power_switch() for USB f3d4fa12d6b0 drm/msm: use trylock for debugfs e457e0560b55 wifi: mac80211: fix rx link assignment for non-MLO stations f7bc50927b4e ipv6: mcast: Check inet6_dev->dead under idev->mc_lock in __ipv6_dev_mc_inc(). 5a9b21808323 (powerpc/512) Fix possible `dma_unmap_single()` on uninitialized pointer ffa3a8007d2f wifi: mac80211: don't complete management TX on SAE commit c73e54dba107 sched/fair: Bump sd->max_newidle_lb_cost when newidle balance fails 3f8bcc32050e s390/stp: Remove udelay from stp_sync_clock() 11238e68cb68 wifi: iwlwifi: mvm: fix scan request validation 6cd174be9239 um: Re-evaluate thread flags repeatedly dae6099edf91 wifi: iwlwifi: mvm: set gtk id also in older FWs 8baba93e2e95 perf/cxlpmu: Remove unintended newline from IRQ name format string 05ee035af6d8 net: phy: micrel: Add ksz9131_resume() fd6a21638a1e net: thunderx: Fix format-truncation warning in bgx_acpi_match_id() c133a9327d2d net: ipv4: fix incorrect MTU in broadcast routes 606908835bc4 wifi: cfg80211: Fix interface type validation a4d2cdb31cf4 net: mctp: Prevent duplicate binds b55947b725f1 rcu: Protect ->defer_qs_iw_pending from data race e424653498e4 arm64: Mark kernel as tainted on SAE and SError panic ac361868f134 net/mlx5e: Properly access RCU protected qdisc_sleeping variable d1c8d2426a63 net: ag71xx: Add missing check after DMA map b0862e88b887 et131x: Add missing check after DMA map 72cdcaeaa95b wifi: rtw89: Lower the timeout in rtw89_fw_read_c2h_reg() for USB b16dfa7b4c94 be2net: Use correct byte order and format string for TCP seq and ack_seq d46484e9dbb2 s390/time: Use monotonic clock in get_cycles() 65b7c838736d wifi: cfg80211: reject HTC bit for management frames 7eb1e485bc84 ktest.pl: Prevent recursion of default variable options 30cad8797805 wifi: ath12k: Correct tid cleanup when tid setup fails 5d3559880e9c net: usb: cdc-ncm: check for filtering capability 8f5015143227 xen/netfront: Fix TX response spurious interrupts 5ac23fc080be Bluetooth: hci_sock: Reset cookie to zero in hci_sock_free_cookie() b84f88749ecf powerpc/thp: tracing: Hide hugepage events under CONFIG_PPC_BOOK3S_64 245d23754f5b ASoC: qcom: use drvdata instead of component to keep id c3d3492b12dd ASoC: codecs: rt5640: Retry DEVICE_ID verification 70b3c831cfea iio: adc: ad7768-1: Ensure SYNC_IN pulse minimum timing requirement 2925edfa98f7 ALSA: usb-audio: Avoid precedence issues in mixer_quirks macros 2f81d6e98f32 ALSA: pcm: Rewrite recalculate_boundary() to avoid costly loop 0de69bc9b366 ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control 7731b7d596c5 platform/chrome: cros_ec_typec: Defer probe on missing EC parent 8c046583a234 platform/x86: thinkpad_acpi: Handle KCOV __init vs inline mismatches c2c252d2c180 soc: qcom: mdt_loader: Actually use the e_phoff 7589729947aa imx8m-blk-ctrl: set ISI panic write hurry level ac62b8f82b24 pm: cpupower: Fix the snapshot-order of tsc,mperf, clock in mperf_stop() 454a27cbab9b usb: core: usb_submit_urb: downgrade type check 0455858931ff usb: typec: intel_pmc_mux: Defer probe if SCU IPC isn't present 41f53afe53a5 ASoC: core: Check for rtd == NULL in snd_soc_remove_pcm_runtime() 789aa0b98854 ALSA: intel8x0: Fix incorrect codec index usage in mixer for ICH4 2828f2c4f2e9 ASoC: hdac_hdmi: Rate limit logging on connection and disconnection b80d6972859b x86/bugs: Avoid warning when overriding return thunk 16cdf4f5b959 ALSA: hda: Disable jack polling at shutdown 240e611b784d ALSA: hda: Handle the jack polling always via a work d54d1405f2c6 mmc: rtsx_usb_sdmmc: Fix error-path in sd_set_power_mode() 24f4ceeaeee7 mei: bus: Check for still connected devices in mei_cl_bus_dev_release() a29868db6dcf char: misc: Fix improper and inaccurate error code returned by misc_init() f8818e29d268 reset: brcmstb: Enable reset drivers for ARCH_BCM2835 ff28f5dc3872 pps: clients: gpio: fix interrupt handling order in remove path d9d611639bea ACPI: APEI: GHES: add TAINT_MACHINE_CHECK on GHES panic path d3dd520206bd mmc: sdhci-msm: Ensure SD card power isn't ON when card removed f95174d4d5c4 ACPI: processor: fix acpi_object initialization e656c2db4922 PM: sleep: console: Fix the black screen issue 753cd9f3d396 thermal: sysfs: Return ENODATA instead of EAGAIN for reads 64d78290599a PM: runtime: Clear power.needs_force_resume in pm_runtime_reinit() 5aa770f45da7 firmware: tegra: Fix IVC dependency problems ab3bf61d9351 ACPI: PRM: Reduce unnecessary printing to avoid user confusion 783a726d509e selftests: tracing: Use mutex_unlock for testing glob filter 6ec6282acd89 tools/build: Fix s390(x) cross-compilation with clang 46b3a7a3a36d ARM: tegra: Use I/O memcpy to write to IRAM 149b733d5f80 gpio: tps65912: check the return value of regmap_update_bits() 3c3454b02c62 iio: adc: ad_sigma_delta: don't overallocate scan buffer 0a4757bf988e tools/nolibc: define time_t in terms of __kernel_old_time_t 58a39eda7f95 thermal/drivers/qcom-spmi-temp-alarm: Enable stage 2 shutdown when required cfa9b873a29c ASoC: soc-dapm: set bias_level if snd_soc_dapm_set_bias_level() was successed 7423fc4da94d EDAC/synopsys: Clear the ECC counters on init f53e16dde8ad PM / devfreq: governor: Replace sscanf() with kstrtoul() in set_freq_store() d7d6d076ee95 ARM: rockchip: fix kernel hang during smp initialization 6a8b0c7e93df cpufreq: Exit governor when failed to start old governor 20bbe54f454f gpio: wcd934x: check the return value of regmap_update_bits() 6b8a8eac58a9 remoteproc: imx_rproc: skip clock enable when M-core is managed by the SCU 082735fbcdb6 ACPI: APEI: send SIGBUS to current task if synchronous memory error not recovered 84518ec7f928 soc: qcom: rpmh-rsc: Add RSC version 4 support 16a5088670e6 usb: xhci: Avoid showing errors during surprise removal dabf502ee893 usb: xhci: Set avg_trb_len = 8 for EP0 during Address Device Command 4a62f49f3d04 usb: xhci: Avoid showing warnings for dying controller 6cd81d4ffbaa usb: typec: ucsi: psy: Set current max to 100mA for BC 1.2 and Default b2ba2ad06d8a selftests/futex: Define SYS_futex on 32-bit architectures with 64-bit time_t 146262a48be2 cpufreq: CPPC: Mark driver with NEED_UPDATE_LIMITS flag f5611a58f7af platform/x86/amd: pmc: Add Lenovo Yoga 6 13ALC6 to pmc quirk list 2d32f522c33a usb: xhci: print xhci->xhc_state when queue_command failed 839312bff2c9 tracefs: Add d_delete to remove negative dentries d7e28036b0e9 securityfs: don't pin dentries twice, once is enough... 270ea0b61725 fix locking in efi_secret_unlink() 327276cb8a7e ext2: Handle fiemap on empty files to prevent EINVAL 6c7fadac6cbc fs/ntfs3: correctly create symlink for relative path 3572737a768d fs/ntfs3: Add sanity check for file name 934065fd3024 ata: libata-sata: Disallow changing LPM state if not supported 847a204d3067 better lockdep annotations for simple_recursive_removal() cb7b59560400 hfs: fix not erasing deleted b-tree node issue 9f53b2433ad2 drbd: add missing kref_get in handle_write_conflicts 5a1e1ab83796 udf: Verify partition map count ce8da5d13d8c loop: Avoid updating block size under exclusive owner 3d2c05cbc6a3 gfs2: Set .migrate_folio in gfs2_{rgrp,meta}_aops 524ce0f943d7 nvme-pci: try function level reset on init failure 1e858a7a51c7 smb/server: avoid deadlock when linking with ReplaceIfExists 61ad294996c0 arm64: Handle KCOV __init vs inline mismatches b3359392b753 hfsplus: don't use BUG_ON() in hfsplus_create_attributes_file() 291bb5d931c6 hfsplus: fix slab-out-of-bounds read in hfsplus_uni2asc() 8583d067ae22 hfsplus: fix slab-out-of-bounds in hfsplus_bnode_read() 384a66b89f95 hfs: fix slab-out-of-bounds in hfs_bnode_read() 4f032979b63a hfs: fix general protection fault in hfs_find_init() f1fe99919f62 tls: handle data disappearing from under the TLS ULP acfb4da42fc4 ptp: prevent possible ABBA deadlock in ptp_clock_freerun() 7337a6356dff cpuidle: governors: menu: Avoid using invalid recent intervals data c11f3802d349 intel_idle: Allow loading ACPI tables for any family ea094f38d387 sctp: linearize cloned gso packets in sctp_rcv 7f94af487c7f net: ti: icss-iep: Fix incorrect type for return value in extts_enable() 30cf81105855 netfilter: ctnetlink: fix refcount leak on table dump 19e01bc8c1ac udp: also consider secpath when evaluating ipsec use for checksumming e65ad9a14256 KVM: VMX: Preserve host's DEBUGCTLMSR_FREEZE_IN_SMM while running the guest 91fa23d5b9e5 KVM: VMX: Wrap all accesses to IA32_DEBUGCTL with getter/setter APIs 8867d91ef824 KVM: nVMX: Check vmcs12->guest_ia32_debugctl on nested VM-Enter d1e28ef79b43 KVM: VMX: Extract checking of guest's DEBUGCTL into helper 48ebed8bd66b KVM: VMX: Allow guest to set DEBUGCTL.RTM_DEBUG if RTM is supported ec70c3f25777 KVM: x86: Drop kvm_x86_ops.set_dr6() in favor of a new KVM_RUN flag 0d87da9d6065 KVM: x86: Convert vcpu_run()'s immediate exit param into a generic bitmap d5aa9bb5e348 KVM: x86: Fully defer to vendor code to decide how to force immediate exit 62f586df29ca KVM: VMX: Handle KVM-induced preemption timer exits in fastpath for L2 ca3cc405a3bc KVM: x86: Move handling of is_guest_mode() into fastpath exit handlers 1c1158aceaf2 KVM: VMX: Handle forced exit due to preemption timer in fastpath 1fc288e74cf3 KVM: VMX: Re-enter guest in fastpath for "spurious" preemption timer exits baf9c96e4e9d KVM: x86: Plumb "force_immediate_exit" into kvm_entry() tracepoint a1d4091f94c6 KVM: x86: Snapshot the host's DEBUGCTL after disabling IRQs 76025761e8f3 KVM: x86: Snapshot the host's DEBUGCTL in common x86 cf04778ae1b5 KVM: nVMX: Defer SVI update to vmcs01 on EOI when L2 is active w/o VID ebc281bf14aa KVM: x86: Plumb in the vCPU to kvm_x86_ops.hwapic_isr_update() abe3d6a559f9 KVM: SVM: Set RFLAGS.IF=1 in C code, to get VMRUN out of the STI shadow d5784ea45663 KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush edc450030b20 smb: client: don't wait for info->send_pending == 0 on error 429112e9709b smb: client: let send_done() cleanup before calling smbd_disconnect_rdma_connection() 19849010c9e1 ACPI: processor: perflib: Move problematic pr->performance check cb2e6e275d19 ACPI: processor: perflib: Fix initial _PPC limit application 8c09ad855fbf Documentation: ACPI: Fix parent device references 2a0c0c974bea eventpoll: Fix semi-unbounded recursion 237e416eb621 fs: Prevent file descriptor table allocations exceeding INT_MAX a5ff67c66208 sunvdc: Balance device refcount in vdc_port_mpgroup_check 17c010fe45de LoongArch: BPF: Fix jump offset calculation in tailcall d89d47abbad2 PCI: Extend isolated function probing to LoongArch 987c20428f06 NFS: Fix the setting of capabilities when automounting a new filesystem f0b89916d2fe NFSD: detect mismatch of file handle and delegation stateid in OPEN op d71abd1ae4e0 nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() 3b53dc1c641f io_uring/net: commit partial buffers on retry ccef5ee4adf5 net: usb: asix_devices: add phy_mask for ax88772 mdio bus eb2d79333f79 net: dpaa: fix device leak when querying time stamp info fd5c51a187ba net: ti: icss-iep: fix device and OF node leaks at probe 5daff127b292 net: mtk_eth_soc: fix device leak at probe 9adaf9a04f9a net: enetc: fix device and OF node leak at probe dc395c838610 net: gianfar: fix device leak when querying time stamp info 8dae82f81e34 net: phy: micrel: fix KSZ8081/KSZ8091 cable test 346c820ef513 netlink: avoid infinite retry looping in netlink_unicast() c66caf21b1d0 Revert "leds: trigger: netdev: Configure LED blink interval for HW offload" 16a46f2e84d7 gpio: mlxbf3: use platform_get_irq_optional() c1aa0743e54b Revert "gpio: mlxbf3: only get IRQ for device instance 0" a157478521b3 gpio: mlxbf2: use platform_get_irq_optional() 50ae9f2d90b2 gpio: virtio: Fix config space reading. 217e18011663 smb: client: remove redundant lstrp update in negotiate protocol a0620e152566 smb3: fix for slab out of bounds on mount to ksmbd d63e929bac53 ALSA: hda/realtek: Add Framework Laptop 13 (AMD Ryzen AI 300) to quirks fb5000cfd7bc ALSA: hda/realtek: Fix headset mic on HONOR BRB-X 1034719fdefd ALSA: usb-audio: Validate UAC3 cluster segment descriptors 07c8d78dbb5e ALSA: usb-audio: Validate UAC3 power domain descriptors, too 17a66aef7ddc io_uring: don't use int for ABI (From OE-Core rev: f9c140c4856790ae7b752849f4df6533ca5d0027) Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>	2025-10-24 06:23:40 -07:00
Bruce Ashfield	a9224824c3	linux-yocto/6.6: update to v6.6.102 ... Updating linux-yocto/6.6 to the latest korg -stable release that comprises the following commits: no ids found, dumping: bb9c90ab9c5a Linux 6.6.102 aada327a9f80 usb: gadget : fix use-after-free in composite_dev_cleanup() e1ee74b9eeb2 mm/hmm: move pmd_to_hmm_pfn_flags() to the respective #ifdeffery d98b34c40dc7 MIPS: mm: tlb-r4k: Uniquify TLB entries on init ab85071a0354 x86/fpu: Delay instruction pointer fixup until after warning 575b71627529 ALSA: scarlett2: Add retry on -EPROTO from scarlett2_usb_tx() 48a8a2dfc3f5 ALSA: intel_hdmi: Fix off-by-one error in __hdmi_lpe_audio_probe() 1fb873971e23 x86/sev: Evict cache lines during SNP memory validation fdf6959b700b net: usbnet: Fix the wrong netif_carrier_on() call 3c6236588dc8 net: usbnet: Avoid potential RCU stall on LINK_CHANGE event 2b98a1539736 Bluetooth: btusb: Add USB ID 3625:010b for TP-LINK Archer TX10UB Nano ae591cf2348a sched,freezer: Remove unnecessary warning in __thaw_task 036bdae8c985 freezer,sched: Clean saved_state when restoring it during thaw 2e62985121b7 freezer,sched: Do not restore saved_state of a thawed task e241ca2f0ec3 freezer,sched: Use saved_state to reduce some spurious wakeups 8afa818c7733 sched/core: Remove ifdeffery for saved_state 2c9a096e202c i2c: stm32f7: unmap DMA mapped buffer bab0986dc045 i2c: stm32f7: simplify status messages in case of errors d786b6592030 i2c: stm32f7: perform most of irq job in threaded handler 9bfaaa964014 i2c: stm32f7: use dev_err_probe upon calls of devm_request_irq de7c7caea59b i2c: stm32f7: Use devm_clk_get_enabled() 66bf243531ee USB: serial: option: add Foxconn T99W709 2f4d88f5e5ee smb: server: Fix extension string in ksmbd_extract_shortname() fa1c47af4ff6 ksmbd: limit repeated connections from clients with the same IP 62d136d30621 ksmbd: fix corrupted mtime and ctime in smb2_open b69fd87076da ksmbd: fix Preauh_HashValue race condition d79c8bebaa62 ksmbd: fix null pointer dereference error in generate_encryptionkey 44bd006d5c93 vsock: Do not allow binding to VMADDR_PORT_ANY 88caf46db823 net/packet: fix a race in packet_set_ring() and packet_notifier() 29d417b1a0d5 selftests/perf_events: Add a mmap() correctness test 6757a31a8e29 perf/core: Prevent VMA split of buffer mappings f41e9eba77bf perf/core: Exit early on perf_mmap() fail f07ab7a4b572 perf/core: Don't leak AUX buffer refcount on allocation failure b1df39462171 sunrpc: fix handling of server side tls alerts d2622f38652c smb: client: return an error if rdma_connect does not return within 5 seconds bd7f84df5436 pptp: fix pptp_xmit() error path 4e5cf39e4064 smb: client: let recv_done() cleanup before notifying the callers. 83d2a4185f5a smb: client: make sure we call ib_dma_unmap_single() only if we called ib_dma_map_single already f069f7c14204 smb: client: make use of common smbdirect_socket 947569b95987 smb: smbdirect: add smbdirect_socket.h 61f0a6849005 smb: client: Correct typos in multiple comments across various files 91d7e6cbb3f8 smb: client: Use min() macro c29dbc44fbf7 smb: server: let recv_done() avoid touching data_transfer after cleanup/move 66110b35bebc smb: server: let recv_done() consistently call put_recvmsg/smb_direct_disconnect_rdma_connection e67aff50476f smb: server: make sure we call ib_dma_unmap_single() only if we called ib_dma_map_single already 28db0cb8a0da smb: server: remove separate empty_recvmsg_queue 2e4463f44e9b ALSA: hda/ca0132: Fix missing error handling in ca0132_alt_select_out() cd2a7f950038 irqchip: Build IMX_MU_MSI only on ARM 39491e859fd4 net/sched: mqprio: fix stack out-of-bounds write in tc entry parsing c377ba2be943 benet: fix BUG when creating VFs a55b3d153318 sunrpc: fix client side handling of tls alerts a7176675c39a net/sched: taprio: enforce minimum value for picos_per_byte 0d45954034f8 net: drop UFO packets in udp_rcv_segment() ef05007b403d ipv6: reject malicious packets in ipv6_gso_segment() 194cd28c889a net/mlx5: Correctly set gso_segs when LRO is used 97ed92a23f0b netlink: specs: ethtool: fix module EEPROM input/output arguments 5005d2437737 pptp: ensure minimal skb length in pptp_xmit() 5fde6e016004 net: ipa: add IPA v5.1 and v5.5 to ipa_version_string() b80353a72958 phy: mscc: Fix parsing of unicast frames b0cf318f5cc6 netpoll: prevent hanging NAPI when netcons gets enabled 227154eb7567 md/md-cluster: handle REMOVE message earlier 75ed1f6ed8ee NFS: Fixup allocation flags for nfsiod's __GFP_NORETRY 1116e66111f8 NFSv4.2: another fix for listxattr 12ad3def2e5e NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() 30a739931ed8 NFS: Fix wakeup of __nfs_lookup_revalidate() in unblock_revalidate() 147216030e46 sched: Add test_and_clear_wake_up_bit() and atomic_dec_and_wake_up() 3bdb29df2f0d pNFS/flexfiles: don't attempt pnfs on fatal DS errors 6e7b24c71e53 PCI: pnv_php: Fix surprise plug detection and recovery a426e8a6ae16 powerpc/eeh: Make EEH driver device hotplug safe 3f49abdf88b6 powerpc/eeh: Export eeh_unfreeze_pe() 17dabd7efb28 PCI: pnv_php: Work around switches with broken presence detection 32173edf3fe2 PCI: pnv_php: Clean up allocated IRQs on unplug 9184a2bb522c sched/psi: Fix psi_seq initialization 9ea1cc8b0e95 kconfig: qconf: fix ConfigList::updateListAllforAll() 05b450da93c6 scsi: sd: Make sd shutdown issue START STOP UNIT appropriately 450b2a5cf6e4 scsi: ufs: core: Use link recovery when h8 exit fails during runtime resume 4933567ef9e6 scsi: Revert "scsi: iscsi: Fix HW conn removal use after free" 087a8a7ca354 scsi: mpt3sas: Fix a fw_event memory leak 349436bf11b8 vfio/pci: Separate SR-IOV VF dev_set 7dbfae90c5a3 vfio/pds: Fix missing detach_ioas op 9546b26d391f vfio: Prevent open_count decrement to negative a6c5e25861e3 vfio: Fix unbalanced vfio_df_close call in no-iommu mode f289690f50a0 f2fs: fix to trigger foreground gc during f2fs_map_blocks() in lfs mode 704613681c1c f2fs: fix to calculate dirty data during has_not_enough_free_secs() e33c22f2eeba f2fs: fix to update upper_p in __get_secs_required() correctly 1023836d1b94 f2fs: vm_unmap_ram() may be called from an invalid context 345fc8d1838f f2fs: fix to avoid out-of-boundary access in devs.path 880ef748e78a f2fs: fix to avoid panic in f2fs_evict_inode 3d37cadaac1a f2fs: fix to avoid UAF in f2fs_sync_inode_meta() a96f2bf49fbd f2fs: doc: fix wrong quota mount option description dabfa3952c8e f2fs: fix KMSAN uninit-value in extent_info usage c1c818b636d4 rtc: rv3028: fix incorrect maximum clock rate handling f5790cc2ee6f rtc: pcf8563: fix incorrect maximum clock rate handling e337c72b17c6 rtc: pcf85063: fix incorrect maximum clock rate handling 8456b3e28acf rtc: nct3018y: fix incorrect maximum clock rate handling 17827903802b rtc: hym8563: fix incorrect maximum clock rate handling bb94a96374db rtc: ds1307: fix incorrect maximum clock rate handling 15da236904ec ucount: fix atomic_long_inc_below() argument type f9bd692540d8 module: Restore the moduleparam prefix length check 7500ba6533ab apparmor: fix loop detection used in conflicting attachment resolution fad01f7e0d3e apparmor: ensure WB_HISTORY_SIZE value is a power of 2 4795bcafe9a8 bpf: Check netfilter ctx accesses are aligned f56f6054791e bpf: Check flow_dissector ctx accesses are aligned d3bf3088f7e9 vhost-scsi: Fix log flooding with target does not exist errors ebc6e1d0e97a mtd: rawnand: atmel: set pmecc data setup time a01bc4245e43 mtd: rawnand: rockchip: Add missing check after DMA map 7d0b53a6d199 mtd: rawnand: atmel: Fix dma_mapping_error() address 505f4111dd98 jfs: fix metapage reference count leak in dbAllocCtl 4b5d36cc3014 fbdev: imxfb: Check fb_add_videomode to prevent null-ptr-deref 0aa273dbcf53 crypto: qat - fix seq_file position update in adf_ring_next() 1c178ccb6caf crypto: qat - fix DMA direction for compression on GEN2 devices 9ff4de5bd11a perf tools: Remove libtraceevent in .gitignore 106891c7bdbc sh: Do not use hyphen in exported variable name f658f3676538 ASoC: fsl_xcvr: get channel status data when PHY is not exists 3187ffe08ff0 dmaengine: nbpfaxi: Add missing check after DMA map 06ddbb28b72b dmaengine: mv_xor: Fix missing check after DMA map and missing unmap 25d15b0d2b42 fs/orangefs: Allow 2 more characters in do_c_string() b93d06499b6f PCI: endpoint: pci-epf-vntb: Fix the incorrect usage of __iomem attribute bdbaa1041816 soundwire: stream: restore params when prepare ports fail ac961f6c6dc5 crypto: img-hash - Fix dma_unmap_sg() nents value 06bc14f9d047 crypto: keembay - Fix dma_unmap_sg() nents value 5d481d4bea06 hwrng: mtk - handle devm_pm_runtime_enable errors 9c590ae73c3e watchdog: ziirave_wdt: check record length in ziirave_firm_verify() a23fa17e6bec scsi: isci: Fix dma_unmap_sg() nents value 401fcb7e557d scsi: mvsas: Fix dma_unmap_sg() nents value cf9c5b15c4ab scsi: elx: efct: Fix dma_unmap_sg() nents value 214f94ee5d77 scsi: ibmvscsi_tgt: Fix dma_unmap_sg() nents value 5b63d6dec556 clk: sunxi-ng: v3s: Fix de clock definition c07e017a56d6 perf tests bp_account: Fix leaked file descriptor 9b2a3e718902 pinmux: fix race causing mux_owner NULL with active mux_usecount 33c778ea0bd0 proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al adf2da0bf119 kernel: trace: preemptirq_delay_test: use offstack cpu mask 5449e60e1cbb RDMA/hns: Fix -Wframe-larger-than issue db1114685317 crypto: ccp - Fix crash when rebind ccp device for ccp.ko a762bbe11269 crypto: inside-secure - Fix `dma_unmap_sg()` nents value b86fd2e61a2c perf sched: Fix memory leaks in 'perf sched latency' 282d4b34694f perf sched: Fix memory leaks for evsel->priv in timehist 16ce5ce11145 perf sched: Free thread->priv using priv_destructor e5de9ea7796e perf dso: Add missed dso__put to dso__load_kcore 9fe9f9459951 perf tools: Fix use-after-free in help_unknown_cmd() a99cae46ab16 Fix dma_unmap_sg() nents value 8724a228be43 clk: clk-axi-clkgen: fix fpfd_max frequency for zynq 45338af03ff3 fanotify: sanitize handle_type values when reporting fid e8b4c9e60a7a pinctrl: sunxi: Fix memory leak on krealloc failure 85a7746a05ea PCI: endpoint: pci-epf-vntb: Return -ENOENT if pci_epc_get_next_free_bar() fails 3f5186fd43be crypto: arm/aes-neonbs - work around gcc-15 warning f693be157c59 power: supply: max14577: Handle NULL pdata when CONFIG_OF is not set 8e9bdb563916 power: supply: cpcap-charger: Fix null check for power_supply_get_by_name 51990eecf22f clk: xilinx: vcu: unregister pll_post only if registered correctly a2b437a88370 media: v4l2-ctrls: Fix H264 SEPARATE_COLOUR_PLANE check 1d92608a2925 clk: davinci: Add NULL check in davinci_lpsc_clk_register() 530d4db6fb89 mtd: fix possible integer overflow in erase_xfer() aff3e6eacef2 crypto: marvell/cesa - Fix engine load inaccuracy be1e15938a16 crypto: qat - use unmanaged allocation for dc_data 25c161a8bed1 crypto: sun8i-ce - fix nents passed to dma_unmap_sg() 0c93cd98d0c8 PCI: rockchip-host: Fix "Unexpected Completion" log message e1c3d14c8252 bpf/preload: Don't select USERMODE_DRIVER 3bb72c2e9622 ipv6: annotate data-races around rt->fib6_nsiblings 9cb6de8ee144 ipv6: fix possible infinite loop in fib6_info_uses_dev() e1b7932af47f ipv6: prevent infinite loop in rt6_nlmsg_size() f237664113fe vrf: Drop existing dst reference in vrf_ip6_input_dst dddfc5a996af selftests: rtnetlink.sh: remove esp4_offload after test 314f568b84b0 net/mlx5e: Remove skb secpath if xfrm state is not found 4d81205d27c3 net/mlx5e: Clear Read-Only port buffer size in PBMC before update 58004aa21e79 netfilter: xt_nfacct: don't assume acct name is null-terminated 9705b8b92d6a can: kvaser_usb: Assign netdev.dev_port based on device channel index 56a17d28c3dd can: kvaser_pciefd: Store device channel index 2ac7efc5deef can: peak_usb: fix USB FD devices potential malfunction c9be5abdaf2e tools/rv: Do not skip idle in trace ee2502485702 bpf: Disable migration in nf_hook_run_bpf(). 9d5aecb57e93 Bluetooth: hci_event: Mask data status from LE ext adv reports cdb509f59aaf kcsan: test: Initialize dummy variable bf88b7c114d4 wifi: mac80211: Write cnt before copying in ieee80211_copy_rnr_beacon() 50e98be435df wifi: brcmfmac: fix P2P discovery failure in P2P peer due to missing P2P IE 21e317484d3b wifi: ath12k: fix endianness handling while accessing wmi service bit dde152043f6d Reapply "wifi: mac80211: Update skb's control block key in ieee80211_tx_dequeue()" 9c8e9da118a8 wifi: mac80211: Check 802.11 encaps offloading in ieee80211_tx_h_select_key() f74d4525ebad wifi: mac80211: Don't call fq_flow_idx() for management frames bc6f35967d9a wifi: mac80211: Do not schedule stopped TXQs 2874717012d1 wifi: plfxlc: Fix error handling in usb driver probe 378ae9ccaea3 wifi: mac80211: reject TDLS operations when station is not associated df51cc1e965a iommu/amd: Fix geometry.aperture_end for V2 tables 03df73480547 mwl8k: Add missing check after DMA map 5cb4349d0c35 wifi: rtl8xxxu: Fix RX skb size for aggregation disabled 20a1e6536424 tcp: call tcp_measure_rcv_mss() for ooo packets 9a20c9da5ff1 xen/gntdev: remove struct gntdev_copy_batch from stack c9eeae9639ea net_sched: act_ctinfo: use atomic64_t for three counters 103c4e27ec9f net/sched: Restrict conditions for adding duplicating netems to qdisc tree 0967ee88ec1e um: rtc: Avoid shadowing err in uml_rtc_start() 98f1a97d8627 arch: powerpc: defconfig: Drop obsolete CONFIG_NET_CLS_TCINDEX 9ac58afb0cca netfilter: nf_tables: adjust lockdep assertions handling b488bee5e92f netfilter: nf_tables: Drop dead code from fill_*_info routines f56a863397f5 fbcon: Fix outdated registered_fb reference in comment b1c6b13f48a8 sched/psi: Optimize psi_group_change() cpu_clock() usage dabe5fc2ee7a drm/amd/pm/powerplay/hwmgr/smu_helper: fix order of mask and value 6e2f7903241c m68k: Don't unregister boot console needlessly 7f0377ca6993 drm/msm/dpu: Fill in min_prefill_lines for SC8180X 6d029d85aa2b kselftest/arm64: Fix check for setting new VLs in sve-ptrace f73c0bc2d1d3 net: dst: annotate data-races around dst->output e0b8b6687b7d net: dst: annotate data-races around dst->input 62d7cf455c88 net/mlx5: Check device memory pointer before usage c45a33903e24 tcp: fix tcp_ofo_queue() to avoid including too much DUP SACK range 5bf201c55fdf wifi: ath11k: clear initialized flag for deinit-ed srng lists ca980f1911a7 iwlwifi: Add missing check for alloc_ordered_workqueue d5491ff785f4 wifi: iwlwifi: Fix memory leak in iwl_mvm_init() 14ca6952691f wifi: rtl818x: Kill URBs before clearing tx status queue 892b29eab44b wifi: rtw89: avoid NULL dereference when RX problematic packet on unsupported 6 GHz band 655e3f51de5a caif: reduce stack size, again 0abd1f48cd25 bpftool: Fix memory leak in dump_xx_nlmsg on realloc failure 0f18414f1d6b drm/vmwgfx: Fix Host-Backed userspace on Guest-Backed kernel cc7af1b89c55 net: ipv6: ip6mr: Fix in/out netdev to pass to the FORWARD chain 3ca8e73c58bb selftests/bpf: fix signedness bug in redir_partial() 0e853c1464bc bpf, ktls: Fix data corruption when using bpf_msg_pop_data() in ktls c69d06498ea2 bpf, sockmap: Fix psock incorrectly pointing to sk c4a298ae0d36 drm/rockchip: cleanup fb when drm_gem_fb_afbc_init failed 8b0285fbbd81 selftests/tracing: Fix false failure of subsystem event test faa45887a63c staging: nvec: Fix incorrect null termination of battery manufacturer cc03984d7035 interconnect: qcom: sc8180x: specify num_nodes 37dfd6d6c9e4 interconnect: qcom: sc8280xp: specify num_links for qnm_a1noc_cfg 2fffa72282ed soc: qcom: pmic_glink: fix OF node leak 272cd1f24741 samples: mei: Fix building on musl libc f7e5ae0ddd12 cpufreq: Init policy->rwsem before it may be possibly used 39a0d418b321 cpufreq: Initialize cpufreq-based frequency-invariance later 1bc35f9a50e1 cpufreq: intel_pstate: Always use HWP_DESIRED_PERF in passive mode 81f506193700 PM / devfreq: Check governor before using governor->name 759b918c8f2e arm64: dts: imx8mn-beacon: Fix HS400 USDHC clock speed 1661ee5c2a41 arm64: dts: imx8mm-beacon: Fix HS400 USDHC clock speed d7b49f4f0da7 ARM: dts: imx6ul-kontron-bl-common: Fix RTS polarity for RS485 interface 4f886798e1a4 soc/tegra: cbb: Clear ERR_FORCE register with ERR_STATUS 632c151355ba arm: dts: ti: omap: Fixup pinheader typo 40ff7460a9a6 usb: early: xhci-dbc: Fix early_ioremap leak c6ec27091cf5 powercap: dtpm_cpu: Fix NULL pointer dereference in get_pd_power_uw() 91a177aafc53 Revert "vmci: Prevent the dispatching of uninitialized payloads" 7ed42b79118d pps: fix poll support 6696a46f4ebd vmci: Prevent the dispatching of uninitialized payloads b31cf6f7716a staging: fbtft: fix potential memory leak in fbtft_framebuffer_alloc() 6031a54f4eac spi: stm32: Check for cfg availability in stm32_spi_probe 490877203b40 usb: misc: apple-mfi-fastcharge: Make power supply names unique f24e5b445ab9 usb: host: xhci-plat: fix incorrect type for of_match variable in xhci_plat_probe() 448800900925 ARM: dts: vfxxx: Correctly use two tuples for timer address 964db8725937 arm64: dts: qcom: msm8976: Make blsp_dma controlled-remotely e1b4ca59f633 arm64: dts: qcom: sc7180: Expand IMEM region 2f4bad6b27c3 arm64: dts: qcom: sdm845: Expand IMEM region 603df70062fb soc: qcom: QMI encoding/decoding for big endian 41917d9ce43a selftests: Fix errno checking in syscall_user_dispatch test aa771d2928fe ASoC: mediatek: use reserved memory or enable buffer pre-allocation 4c39fc79ae25 ASoC: ops: dynamically allocate struct snd_ctl_elem_value ee1c30d7c6fc ASoC: soc-dai: tidyup return value of snd_soc_xlate_tdm_slot_mask() 1a91ba12abef gfs2: No more self recovery a936be9b5f51 Revert "fs/ntfs3: Replace inode_trylock with inode_lock" 084933961ecd hfsplus: remove mutex_lock check in hfsplus_free_extents 0926e13a47fc hfs: make splice write available again 1de5895fe68d hfsplus: make splice write available again d89f71aece34 ublk: use vmalloc for ublk_device's __queues b35a50d639ca fs/ntfs3: cancle set bad inode after removing name fails 8d1bfdd30d17 fs_context: fix parameter name in infofc() macro 15da73210929 audit,module: restore audit logging in load failure case 5974c913d6d9 ASoC: amd: yc: add DMI quirk for ASUS M6501RM 61e5aeff2424 ASoC: Intel: fix SND_SOC_SOF dependencies 7e98b00615c6 ASoC: amd: yc: Add DMI entries to support HP 15-fb1xxx 18196a40af52 ethernet: intel: fix building with large NR_CPUS 5f577d47bba6 ASoC: amd: yc: Add DMI quirk for HP Laptop 17 cp-2033dx (From OE-Core rev: 9c0af64f5b688d89349a80cb27bbbc451abfab38) Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>	2025-10-24 06:23:40 -07:00
Bruce Ashfield	d0302e3d94	linux-yocto/6.6: update to v6.6.101 ... Updating linux-yocto/6.6 to the latest korg -stable release that comprises the following commits: no ids found, dumping: 3a8ababb8b6a Linux 6.6.101 41d3c751fcb4 Revert "selftests/bpf: Add a cgroup prog bpf_get_ns_current_pid_tgid() test" 1af6d1696ca4 spi: cadence-quadspi: fix cleanup of rx_chan on failure paths aed4053c506b drm/sched: Remove optimization that causes hang when killing dependent jobs 79c8d935147c ARM: 9448/1: Use an absolute path to unified.h in KBUILD_AFLAGS 3277cf433815 mptcp: reset fallback status gracefully at disconnect() time 7c96d519ee15 mptcp: plug races between subflow fail and subflow creation 75a4c9ab8a7a mptcp: make fallback action and fallback decision atomic 23a5773a5da5 arm64/cpufeatures/kvm: Add ARMv8.9 FEAT_ECBHB bits in ID_AA64MMFR1 register 52f5a52dc17a ksmbd: add free_transport ops in ksmbd connection 034adb78fc43 wifi: mt76: mt7921: prevent decap offload config before STA initialization 79e2dd573116 perf/x86/intel: Fix crash in icl_update_topdown_event() 9ef6abbb2868 mtd: rawnand: qcom: Fix last codeword read in qcom_param_page_type_exec() 1da8bd9a10ec ksmbd: fix use-after-free in __smb2_lease_break_noti() 5ea224eaf636 iio: hid-sensor-prox: Restore lost scale assignments a56b79a43f83 iio: hid-sensor-prox: Fix incorrect OFFSET calculation 796c96cf6685 crypto: qat - add shutdown handler to qat_dh895xcc 4b5e07702b67 crypto: powerpc/poly1305 - add depends on BROKEN for now da3e9f0fac60 erofs: address D-cache aliasing 1d117f79b5c6 mm: khugepaged: fix call hpage_collapse_scan_file() for anonymous vma 37c7f0f24b8e drm/i915/dp: Fix 2.7 Gbps DP_LINK_BW value on g4x c383033b0ac8 ALSA: hda: Add missing NVIDIA HDA codec IDs 0a776c273e71 ALSA: hda/tegra: Add Tegra264 support 4e954080d218 comedi: comedi_test: Fix possible deletion of uninitialized timers 45fd8421081e jfs: reject on-disk inodes of an unsupported type 98be604d96a6 x86/bugs: Fix use of possibly uninit value in amd_check_tsa_microcode() f9377bdf86ea usb: typec: tcpm: apply vbus before data bringup in tcpm_src_attach 457d02e71ae9 usb: typec: tcpm: allow switching to mode accessory to mux properly 8f65f4565cab usb: typec: tcpm: allow to use sink in accessory mode 145a56bd68f4 drm/amdkfd: Don't call mmput from MMU notifier callback cc690930cb24 mm/zsmalloc: do not pass __GFP_MOVABLE if CONFIG_COMPACTION=n 325325923a1d selftests: mptcp: connect: also cover checksum 5cdfb402bae9 selftests: mptcp: connect: also cover alt modes a2cd4dcbb725 resource: fix false warning in __request_region() bf585ee198bb nilfs2: reject invalid file types when reading inodes 57104237cd6c kasan: use vmalloc_dump_obj() for vmalloc error reports 3028f2a4e746 ice: Fix a null pointer dereference in ice_copy_and_init_pkg() eaf242ea6fca gve: Fix stuck TX queue for DQ queue format c229192417d4 e1000e: ignore uninitialized checksum word on tgp 1624f9de4432 e1000e: disregard NVM checksum on tgp when valid checksum bit is not set 04d098fbca47 dpaa2-switch: Fix device reference count leak in MAC endpoint handling 1c135ff95167 dpaa2-eth: Fix device reference count leak in MAC endpoint handling 9433a5f437b0 arm64/entry: Mask DAIF in cpu_switch_to(), call_on_irq_stack() 140ca2cac147 ALSA: hda/realtek - Add mute LED support for HP Pavilion 15-eg0xxx e5354899f625 sprintf.h requires stdarg.h 72584a9178af bus: fsl-mc: Fix potential double device reference in fsl_mc_get_endpoint() 6e7836c83635 i2c: virtio: Avoid hang by using interruptible completion wait 68ceeb06316e i2c: tegra: Fix reset error handling with ACPI 0d33913fce67 i2c: qup: jump out of the loop in case of timeout 60962eed62b9 platform/x86: ideapad-laptop: Fix kbd backlight not remembered among boots 989b2c5322dc net: hns3: default enable tx bounce buffer when smmu enabled adbf6f476cd1 net: hns3: fixed vf get max channels bug f377792c4186 net: hns3: disable interrupt when ptp init failed 3cc42004f65b net: hns3: fix concurrent setting vlan filter issue faf44487dfc8 s390/ism: fix concurrency management in ism_cmd() 42e42d64d851 drm/bridge: ti-sn65dsi86: Remove extra semicolon in ti_sn_bridge_probe() cf81a60a9733 can: netlink: can_changelink(): fix NULL pointer deref of struct can_priv::do_set_mode 359492c2024a can: dev: can_restart(): move debug message and stats after successful restart 71a2dc442e12 can: dev: can_restart(): reverse logic to remove need for goto 0ede6ce4fcf2 net/sched: sch_qfq: Avoid triggering might_sleep in atomic context in qfq_delete_class e4f1564c5b69 net: appletalk: Fix use-after-free in AARP proxy probe d989748e9dbb i40e: When removing VF MAC filters, only check PF-set MAC 0c399fd6ac5a i40e: report VF tx_dropped with tx_errors instead of tx_discards a05b3883083b i40e: Add rx_missed_errors for buffer exhaustion e4ca597d3116 net/mlx5: E-Switch, Fix peer miss rules to use peer eswitch c3d8a80d9557 net/mlx5: Fix memory leak in cmd_exec() bfebdb85496e xfrm: interface: fix use-after-free after changing collect_md xfrm interface 2e18442d22c6 staging: vchiq_arm: Make vchiq_shutdown never fail 6758f73f172d platform/x86: Fix initialization order for firmware_attributes_class d72c97b6160d x86/hyperv: Fix usage of cpu_online_mask to get valid cpu 0915f1856c48 regmap: fix potential memory leak of regmap_bus 881f3066fd8d iio: adc: ad7949: use spi_is_bpw_supported() 6a85c96e61c1 interconnect: qcom: sc7280: Add missing num_links to xm_pcie3_1 node fb93e41ecc75 RDMA/core: Rate limit GID cache warning messages 233d3c54c962 regulator: core: fix NULL dereference on unbind due to stale coupling data 0e8c65939ba2 virtio_ring: Fix error reporting in virtqueue_resize fa53beab4740 Input: gpio-keys - fix a sleep while atomic with PREEMPT_RT (From OE-Core rev: 40092b395a04921dd8f0f54f352d958084167227) Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>	2025-10-24 06:23:40 -07:00