Skip to content
Snippets Groups Projects
  1. Mar 10, 2025
  2. Mar 04, 2025
  3. Mar 03, 2025
  4. Feb 28, 2025
  5. Feb 27, 2025
  6. Feb 26, 2025
  7. Feb 25, 2025
    • Anil Veshala Veshala's avatar
      dmaengine: msm_gpi: fix to avoid null pointer access · 058833b0
      Anil Veshala Veshala authored
      
      A null pointer dereference is possible in gpi_prep_slave_sg.
      Client drivers will allocate buffer and initiate bus xfer
      through qup over i2c. I2c geni driver will queue the buffer
      address to TRE'S using scatter-gather. Clients can pass NULL
      buffer, so added null pointer check before accessing the TRE.
      
      This is leading to dereferencing null pointer issue.
      To solve this, add check for null in transfer ring.
      
      Change-Id: I3a25a7da0d38c58f725e0996c458b1fb64c0069b
      Signed-off-by: default avatarAnil Veshala Veshala <quic_aveshala@quicinc.com>
      058833b0
  8. Feb 24, 2025
  9. Feb 20, 2025
    • Sivasri Kumar, Vanka's avatar
      Merge keystone/android13-5.15-keystone-qcom-release.170 (718e5ce2) into msm-5.15 · 7e8ffb17
      Sivasri Kumar, Vanka authored
      
      * remotes/origin/tmp-718e5ce2:
        Revert "build.config.aarch64: Test change"
        build.config.aarch64: Test change
        Revert "ANDROID: Adding vendor fields and hooks to support hostless PCM"
        UPSTREAM: cgroup: remove cgroup_rstat_flush_atomic()
        UPSTREAM: memcg: remove mem_cgroup_flush_stats_atomic()
        UPSTREAM: memcg: calculate root usage from global state
        UPSTREAM: memcg: flush stats non-atomically in mem_cgroup_wb_stats()
        UPSTREAM: writeback: move wb_over_bg_thresh() call outside lock section
        UPSTREAM: memcg: do not modify rstat tree for zero updates
        UPSTREAM: vmscan: memcg: sleep when flushing stats during reclaim
        UPSTREAM: workingset: memcg: sleep when flushing stats in workingset_refault()
        UPSTREAM: memcg: sleep during flushing stats in safe contexts
        UPSTREAM: memcg: replace stats_flush_lock with an atomic
        UPSTREAM: memcg: do not flush stats in irq context
        UPSTREAM: memcg: rename mem_cgroup_flush_stats_"delayed" to "ratelimited"
        UPSTREAM: cgroup: rename cgroup_rstat_flush_"irqsafe" to "atomic"
        ANDROID: Adding vendor fields and hooks to support hostless PCM
        UPSTREAM: ALSA: usb-audio: Fix a DMA to stack memory bug
        UPSTREAM: ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices
        UPSTREAM: bpf: sync_linked_regs() must preserve subreg_def
        UPSTREAM: ALSA: usb-audio: Fix a DMA to stack memory bug
        ANDROID: GKI: Update oplus symbol list
        UPSTREAM: dma-fence: Fix reference leak on fence merge failure path
        UPSTREAM: dma-buf: fix an error pointer vs NULL bug
        UPSTREAM: dma-buf: actually set signaling bit for private stub fences
        UPSTREAM: dma-buf: set signaling bit for the stub fence
        UPSTREAM: dma-buf/sync_file: use strscpy to replace strlcpy
        BACKPORT: dma-buf: generalize dma_fence unwrap & merging v3
        BACKPORT: dma-buf: keep the signaling time of merged fences v3
        BACKPORT: dma-buf: cleanup dma_fence_unwrap implementation
        UPSTREAM: dma-buf: cleanup dma_fence_unwrap selftest v2
        UPSTREAM: dma-buf: handle empty dma_fence_arrays gracefully
        UPSTREAM: ALSA: usb-audio: Fix out of bounds reads when finding clock sources
        UPSTREAM: ALSA: usb-audio: Fix out of bounds reads when finding clock sources
        UPSTREAM: ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices
        Revert "UPSTREAM: unicode: Don't special case ignorable code points"
        UPSTREAM: ACPI: PRM: Clean up guid type in struct prm_handler_info
        UPSTREAM: vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans
        UPSTREAM: f2fs: modify f2fs_is_checkpoint_ready logic to allow more data to be written with the CP disable
        BACKPORT: f2fs: introduce get_available_block_count() for cleanup
        UPSTREAM: xhci: Fix Link TRB DMA in command ring stopped completion event
        Revert "genetlink: hold RCU in genlmsg_mcast()"
        UPSTREAM: HID: core: zero-initialize the report buffer
        ANDROID: GKI: fix up build break where timer_delete_sync() was used
        ANDROID: KVM: arm64: Always check state from host_ack_unshare()
        FROMLIST: KVM: arm64: Always check the state from hyp_ack_unshare()
        BACKPORT: udf: Allocate name buffer in directory iterator on heap
        ANDROID: mm: Fix SPF-aware fast-mremap
        UPSTREAM: scsi: ufs: core: Do not set link to OFF state while waking up from hibernation
        UPSTREAM: usb: gadget: uvc: Correct documentation formatting
        UPSTREAM: net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT
        UPSTREAM: f2fs: support SEEK_DATA and SEEK_HOLE for compression files
        ANDROID: add file for recording allowed ABI breaks
        UPSTREAM: netfilter: xtables: fix typo causing some targets not to load on IPv6
        Revert "i2c: smbus: Use device_*() functions instead of of_*()"
        Revert "i2c: create debugfs entry per adapter"
        Revert "i2c: core: Lock address during client device instantiation"
        ANDROID: GKI: update symbol list for honor
        ANDROID: vendor_hooks: add hook to record reboot reason
        ANDROID: GKI: update symbol list for honor
        ANDROID: Allow vendor modules perform more operations on memleak detect
        Revert "net: Add l3mdev index to flow struct and avoid oif reset for port devices"
        Revert "netfilter: rpfilter/fib: Populate flowic_l3mdev field"
        Revert "netfilter: rpfilter/fib: Set ->flowic_uid correctly for user namespaces."
        Revert "netfilter: fib: check correct rtable in vrf setups"
        Revert "xfrm: Pass flowi_oif or l3mdev as oif to xfrm_dst_lookup"
        Revert "net: Handle l3mdev in ip_tunnel_init_flow"
        ANDROID: GKI: rexport __qdisc_calculate_pkt_len
        BACKPORT: FROMGIT: binder: add delivered_freeze to debugfs output
        BACKPORT: FROMGIT: binder: fix memleak of proc->delivered_freeze
        FROMGIT: binder: allow freeze notification for dead nodes
        FROMGIT: binder: fix BINDER_WORK_CLEAR_FREEZE_NOTIFICATION debug logs
        FROMGIT: binder: fix BINDER_WORK_FROZEN_BINDER debug logs
        BACKPORT: FROMGIT: binder: fix freeze UAF in binder_release_work()
        FROMGIT: binder: fix OOB in binder_add_freeze_work()
        FROMGIT: binder: fix node UAF in binder_add_freeze_work()
        Revert "xhci: fix event ring segment table related masks and variables in header"
        Revert "xhci: remove xhci_test_trb_in_td_math early development check"
        Revert "xhci: Refactor interrupter code for initial multi interrupter support."
        Revert "xhci: Preserve RsvdP bits in ERSTBA register correctly"
        Revert "xhci: Add a quirk for writing ERST in high-low order"
        Revert "usb: xhci: fix loss of data on Cadence xHC"
        ANDROID: GKI: update symbol list for honor
        ANDROID: vendor_hooks: add hook to record slab alloc and free
        BACKPORT: f2fs: return true if all cmd were issued or no cmd need to be issued for f2fs_issue_discard_timeout()
        BACKPORT: f2fs: don't call f2fs_issue_discard_timeout() when discard_cmd_cnt is 0 in f2fs_put_super()
        Revert "PCI: xilinx-nwl: Clean up clock on probe failure/removal"
        Revert "i2c: Add i2c_get_match_data()"
        Revert "hwmon: (max16065) Remove use of i2c_match_id()"
        Revert "hwmon: (max16065) Fix alarm attributes"
        ANDROID: GKI: Update symbol list for Amlogic
        UPSTREAM: Revert "arm64: dts: qcom: sm8250: switch UFS QMP PHY to new style of bindings"
        Revert "bareudp: Pull inner IP header in bareudp_udp_encap_recv()."
        Revert "cgroup: Make operations on the cgroup root_list RCU safe"
        Revert "cgroup: Move rcu_head up near the top of cgroup_root"
        Revert "inet: inet_defrag: prevent sk release while still in use"
        BACKPORT: f2fs: compress: fix to update i_compr_blocks correctly
        UPSTREAM: USB: media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format
        riscv: Remove duplicated GET_RM
        riscv: Remove unused GENERATING_ASM_OFFSETS
        riscv: Use '%u' to format the output of 'cpu'
        riscv: efi: Set NX compat flag in PE/COFF header
        riscv: vdso: Prevent the compiler from inserting calls to memset()
        nilfs2: fix potential deadlock with newly created symlinks
        iio: light: veml6030: fix microlux value calculation
        iio: adc: ad7124: fix division by zero in ad7124_set_channel_odr()
        staging: iio: frequency: ad9832: fix division by zero in ad9832_calc_freqreg()
        wifi: iwlegacy: Clear stale interrupts before resuming device
        wifi: ath10k: Fix memory leak in management tx
        wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
        Revert "driver core: Fix uevent_show() vs driver detach race"
        xhci: Use pm_runtime_get to prevent RPM on unsupported systems
        xhci: Fix Link TRB DMA in command ring stopped completion event
        usb: typec: fix unreleased fwnode_handle in typec_port_register_altmodes()
        usb: phy: Fix API devm_usb_put_phy() can not release the phy
        usbip: tools: Fix detach_port() invalid port error path
        misc: sgi-gru: Don't disable preemption in GRU driver
        NFS: remove revoked delegation from server's delegation list
        net: amd: mvme147: Fix probe banner message
        scsi: scsi_transport_fc: Allow setting rport state to current state
        fs/ntfs3: Additional check in ni_clear()
        fs/ntfs3: Fix possible deadlock in mi_read
        fs/ntfs3: Fix warning possible deadlock in ntfs_set_state
        fs/ntfs3: Check if more than chunk-size bytes are written
        ACPI: CPPC: Make rmw_lock a raw_spin_lock
        firmware: arm_sdei: Fix the input parameter of cpuhp_remove_state()
        netfilter: nft_payload: sanitize offset and length before calling skb_checksum()
        net: skip offload for NETIF_F_IPV6_CSUM if ipv6 header contains extension
        netfilter: Fix use-after-free in get_info()
        bpf: Fix out-of-bounds write in trie_get_next_key()
        netdevsim: Add trailing zero to terminate the string in nsim_nexthop_bucket_activity_write()
        net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT
        gtp: allow -1 to be specified as file description from userspace
        ipv4: ip_tunnel: Fix suspicious RCU usage warning in ip_tunnel_init_flow()
        net: stmmac: TSO: Fix unbalanced DMA map/unmap for non-paged SKB data
        ASoC: cs42l51: Fix some error handling paths in cs42l51_probe()
        wifi: iwlwifi: mvm: Fix response handling in iwl_mvm_send_recovery_cmd()
        wifi: iwlwifi: mvm: disconnect station vifs if recovery failed
        mac80211: Add support to trigger sta disconnect on hardware restart
        mac80211: do drv_reconfig_complete() before restarting all
        RDMA/bnxt_re: synchronize the qp-handle table array
        RDMA/mlx5: Round max_rd_atomic/max_dest_rd_atomic up instead of down
        RDMA/cxgb4: Dump vendor specific QP details
        wifi: brcm80211: BRCM_TRACING should depend on TRACING
        wifi: mac80211: skip non-uploaded keys in ieee80211_iter_keys
        mac80211: MAC80211_MESSAGE_TRACING should depend on TRACING
        cgroup: Fix potential overflow issue when checking max_depth
        ACPI: PRM: Find EFI_MEMORY_RUNTIME block for PRM handler and context
        ACPI: PRM: Change handler_addr type to void pointer
        ACPI: PRM: Remove unnecessary blank lines
        ksmbd: fix user-after-free from session log off
        selftests/mm: fix incorrect buffer->mirror size in hmm2 double_map test
        Linux 5.15.170
        xfrm: validate new SA's prefixlen using SA family when sel.family is unset
        ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe()
        net: phy: dp83822: Fix reset pin definitions
        serial: protect uart_port_dtr_rts() in uart_shutdown() too
        selinux: improve error checking in sel_write_load()
        hv_netvsc: Fix VF namespace also in synthetic NIC NETDEV_REGISTER event
        xfrm: fix one more kernel-infoleak in algo dumping
        ALSA: hda/realtek: Add subwoofer quirk for Acer Predator G9-593
        KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory
        openat2: explicitly return -E2BIG for (usize > PAGE_SIZE)
        nilfs2: fix kernel bug due to missing clearing of buffer delay flag
        ACPI: button: Add DMI quirk for Samsung Galaxy Book2 to fix initial lid detection issue
        ACPI: resource: Add LG 16T90SP to irq1_level_low_skip_override[]
        drm/amd: Guard against bad data for ATIF ACPI method
        btrfs: zoned: fix zone unusable accounting for freed reserved extent
        ALSA: hda/realtek: Update default depop procedure
        ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()
        bpf,perf: Fix perf_event_detach_bpf_prog error handling
        posix-clock: posix-clock: Fix unbalanced locking in pc_clock_settime()
        r8169: avoid unsolicited interrupts
        net: sched: fix use-after-free in taprio_change()
        net: usb: usbnet: fix name regression
        net: wwan: fix global oob in wwan_rtnl_policy
        xfrm: respect ip protocols rules criteria when performing dst lookups
        tracing: Consider the NULL character when validating the event length
        netfilter: xtables: fix typo causing some targets not to load on IPv6
        xfrm: extract dst lookup parameters into a struct
        jfs: Fix sanity check in dbMount
        net: dsa: mv88e6xxx: Fix error when setting port policy on mv88e6393x
        platform/x86: dell-sysman: add support for alienware products
        net: plip: fix break; causing plip to never transmit
        ASoC: qcom: sm8250: add qrb4210-rb2-sndcard compatible string
        be2net: fix potential memory leak in be_xmit()
        arm64/uprobes: change the uprobe_opcode_t typedef to fix the sparse warning
        net/sun3_82586: fix potential memory leak in sun3_82586_send_packet()
        platform/x86: dell-wmi: Ignore suspend notifications
        usb: dwc3: core: Fix system suspend on TI AM62 platforms
        KVM: s390: gaccess: Check if guest address is in memslot
        udf: fix uninit-value use in udf_get_fileshortad
        XHCI: Separate PORT and CAPs macros into dedicated file
        KVM: s390: gaccess: Cleanup access to guest pages
        arm64: Force position-independent veneers
        usb: gadget: Add function wakeup support
        KVM: s390: gaccess: Refactor access address range check
        ASoC: fsl_sai: Enable 'FIFO continue on error' FCONT bit
        KVM: s390: gaccess: Refactor gpa and length calculation
        ASoC: codecs: lpass-rx-macro: add missing CDC_RX_BCL_VBAT_RF_PROC2 to default regs values
        drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLA
        exec: don't WARN for racy path_noexec check
        block, bfq: fix procress reference leakage for bfqq in merge chain
        arm64: probes: Fix uprobes for big-endian kernels
        arm64:uprobe fix the uprobe SWBP_INSN in big-endian
        Bluetooth: bnep: fix wild-memory-access in proto_unregister
        s390: Initialize psw mask in perf_arch_fetch_caller_regs()
        usb: typec: altmode should keep reference to parent
        smb: client: fix OOBs when building SMB2_IOCTL request
        scsi: target: core: Fix null-ptr-deref in target_alloc_device()
        genetlink: hold RCU in genlmsg_mcast()
        tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
        net: systemport: fix potential memory leak in bcm_sysport_xmit()
        net: xilinx: axienet: fix potential memory leak in axienet_start_xmit()
        net/smc: Fix searching in list of known pnetids in smc_pnet_add_pnetid
        net: ethernet: aeroflex: fix potential memory leak in greth_start_xmit_gbit()
        macsec: don't increment counters for an unrelated SA
        octeontx2-af: Fix potential integer overflows on integer shifts
        net: usb: usbnet: fix race in probe failure
        drm/msm: Allocate memory for disp snapshot with kvzalloc()
        drm/msm: Avoid NULL dereference in msm_disp_state_print_regs()
        drm/msm/dsi: fix 32-bit signed integer extension in pclk_rate calculation
        RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages
        RDMA/bnxt_re: Return more meaningful error
        ipv4: give an IPv4 dev to blackhole_netdev
        RDMA/irdma: Fix misspelling of "accept*"
        RDMA/cxgb4: Fix RDMA_CM_EVENT_UNREACHABLE error for iWARP
        ALSA: hda/cs8409: Fix possible NULL dereference
        ARM: dts: bcm2837-rpi-cm3-io3: Fix HDMI hpd-gpio pin
        x86/resctrl: Avoid overflow in MB settings in bw_validate()
        RDMA/bnxt_re: Add a check for memory allocation
        RDMA/bnxt_re: Fix incorrect AVID type in WQE structure
        bpf: devmap: provide rxq after redirect
        bpf: Make sure internal and UAPI bpf_redirect flags don't overlap
        Linux 5.15.169
        ALSA: hda/conexant - Use cached pin control for Node 0x1d on HP EliteOne 1000 G2
        powerpc/mm: Always update max/min_low_pfn in mem_topology_setup()
        nilfs2: propagate directory read errors from nilfs_find_entry()
        mptcp: prevent MPC handshake on port-based signal endpoints
        mptcp: pm: fix UaF read in mptcp_pm_nl_rm_addr_or_subflow
        mptcp: fallback when MPTCP opts are dropped after 1st data
        tcp: fix mptcp DSS corruption due to large pmtu xmit
        mptcp: handle consistently DSS corruption
        mptcp: track and update contiguous data status
        irqchip/gic-v4: Don't allow a VMOVP on a dying VPE
        pinctrl: ocelot: fix system hang on level based interrupts
        x86/entry_32: Clear CPU buffers after register restore in NMI return
        x86/entry_32: Do not clobber user EFLAGS.ZF
        x86/apic: Always explicitly disarm TSC-deadline timer
        x86/resctrl: Annotate get_mem_config() functions as __init
        parport: Proper fix for array out-of-bounds access
        USB: serial: option: add Telit FN920C04 MBIM compositions
        USB: serial: option: add support for Quectel EG916Q-GL
        xhci: Mitigate failed set dequeue pointer commands
        xhci: Fix incorrect stream context type macro
        Bluetooth: btusb: Fix regression with fake CSR controllers 0a12:0001
        Bluetooth: Remove debugfs directory on module init failure
        iio: adc: ti-ads124s08: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig
        iio: proximity: mb1232: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig
        iio: light: opt3001: add missing full-scale range value
        iio: light: veml6030: fix IIO device retrieval from embedded device
        iio: light: veml6030: fix ALS sensor resolution
        iio: hid-sensors: Fix an error handling path in _hid_sensor_set_report_latency()
        iio: adc: ti-ads8688: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig
        iio: dac: stm32-dac-core: add missing select REGMAP_MMIO in Kconfig
        iio: dac: ltc1660: add missing select REGMAP_SPI in Kconfig
        iio: dac: ad5770r: add missing select REGMAP_SPI in Kconfig
        drm/vmwgfx: Handle surface check failure correctly
        drm/radeon: Fix encoder->possible_clones
        io_uring/sqpoll: close race on waiting for sqring entries
        blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
        x86/bugs: Do not use UNTRAIN_RET with IBPB on entry
        x86/bugs: Skip RSB fill at VMEXIT
        x86/entry: Have entry_ibpb() invalidate return predictions
        x86/cpufeatures: Add a IBPB_NO_RET BUG flag
        x86/cpufeatures: Define X86_FEATURE_AMD_IBPB_RET
        KVM: s390: Change virtual to physical address access in diag 0x258 handler
        s390/sclp_vt220: Convert newlines to CRLF instead of LFCR
        iommu/vt-d: Fix incorrect pci_for_each_dma_alias() for non-PCI devices
        io_uring/sqpoll: do not put cpumask on stack
        io_uring/sqpoll: retain test for whether the CPU is valid
        io_uring/sqpoll: do not allow pinning outside of cpuset
        drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
        KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
        dm-crypt, dm-verity: disable tasklets
        wifi: mac80211: fix potential key use-after-free
        secretmem: disable memfd_secret() if arch cannot set direct map
        mm/swapfile: skip HugeTLB pages for unuse_vma
        fat: fix uninitialized variable
        irqchip/gic-v3-its: Fix VSYNC referencing an unmapped VPE on GIC v4.1
        net: macb: Avoid 20s boot delay by skipping MDIO bus registration for fixed-link PHY
        arm64: probes: Fix simulate_ldr*_literal()
        arm64: probes: Remove broken LDR (literal) uprobe support
        posix-clock: Fix missing timespec64 check in pc_clock_settime()
        net: enetc: add missing static descriptor and inline keyword
        net: enetc: remove xdp_drops statistic from enetc_xdp_drop()
        udf: Fix bogus checksum computation in udf_rename()
        udf: Don't return bh from udf_expand_dir_adinicb()
        udf: Handle error when expanding directory
        udf: Remove old directory iteration code
        udf: Convert udf_link() to new directory iteration code
        udf: Convert udf_mkdir() to new directory iteration code
        udf: Convert udf_add_nondir() to new directory iteration
        udf: Implement adding of dir entries using new iteration code
        udf: Convert udf_unlink() to new directory iteration code
        udf: Convert udf_rmdir() to new directory iteration code
        udf: Convert empty_dir() to new directory iteration code
        udf: Convert udf_get_parent() to new directory iteration code
        udf: Convert udf_lookup() to use new directory iteration code
        udf: Convert udf_readdir() to new directory iteration
        udf: Convert udf_rename() to new directory iteration code
        udf: Provide function to mark entry as deleted using new directory iteration code
        udf: Implement searching for directory entry using new iteration code
        udf: Move udf_expand_dir_adinicb() to its callsite
        udf: Convert udf_expand_dir_adinicb() to new directory iteration
        udf: New directory iteration code
        ALSA: hda/conexant - Fix audio routing for HP EliteOne 1000 G2
        Linux 5.15.168
        net: xilinx: axienet: Schedule NAPI in two steps
        selftests: net: more strict check in net_helper
        net: axienet: start napi before enabling Rx/Tx
        ext4: fix warning in ext4_dio_write_end_io()
        netfilter: ip6t_rpfilter: Fix regression with VRF interfaces
        net: vrf: determine the dst using the original ifindex for multicast
        net: seg6: fix seg6_lookup_any_nexthop() to handle VRFs using flowi_l3mdev
        net: Handle l3mdev in ip_tunnel_init_flow
        xfrm: Pass flowi_oif or l3mdev as oif to xfrm_dst_lookup
        net: geneve: add missing netlink policy and size for IFLA_GENEVE_INNER_PROTO_INHERIT
        i2c: smbus: Check for parent device before dereference
        block, bfq: fix uaf for accessing waker_bfqq after splitting
        kthread: unpark only parked kthread
        nouveau/dmem: Fix vulnerability in migrate_to_ram upon copy error
        mptcp: pm: do not remove closing subflows
        net: dsa: lan9303: ensure chip reset and wait for READY status
        net: Fix an unsafe loop on the list
        net: explicitly clear the sk pointer, when pf->create fails
        drm/v3d: Stop the active perfmon before being destroyed
        hid: intel-ish-hid: Fix uninitialized variable 'rv' in ish_fw_xfer_direct_dma
        usb: storage: ignore bogus device raised by JieLi BR21 USB sound chip
        usb: xhci: Fix problem with xhci resume from suspend
        usb: dwc3: core: Stop processing of pending events if controller is halted
        Revert "usb: yurex: Replace snprintf() with the safer scnprintf() variant"
        HID: plantronics: Workaround for an unexcepted opposite volume key
        resource: fix region_intersects() vs add_memory_driver_managed()
        HID: amd_sfh: Switch to device-managed dmam_alloc_coherent()
        hwmon: (adt7470) Add missing dependency on REGMAP_I2C
        hwmon: (adm9240) Add missing dependency on REGMAP_I2C
        hwmon: (tmp513) Add missing dependency on REGMAP_I2C
        x86/fpu: Avoid writing LBR bit to IA32_XSS unless supported
        RDMA/hns: Fix UAF for cq async event
        slip: make slhc_remember() more robust against malicious packets
        ppp: fix ppp_async_encode() illegal access
        mctp: Handle error of rtnl_register_module().
        rtnetlink: Add bulk registration helpers for rtnetlink message handlers.
        net: rtnetlink: add msg kind names
        netfilter: fib: check correct rtable in vrf setups
        netfilter: rpfilter/fib: Set ->flowic_uid correctly for user namespaces.
        netfilter: rpfilter/fib: Populate flowic_l3mdev field
        net: Add l3mdev index to flow struct and avoid oif reset for port devices
        netfilter: xtables: avoid NFPROTO_UNSPEC where needed
        sctp: ensure sk_state is set to CLOSED if hashing fails in sctp_listen_start
        net: ibm: emac: mal: fix wrong goto
        net/sched: accept TCA_STAB only for root qdisc
        igb: Do not bring the device up after non-fatal error
        i40e: Fix macvlan leak by synchronizing access to mac_filter_hash
        ice: Fix netif_is_ice() in Safe Mode
        gpio: aspeed: Use devm_clk api to manage clock source
        gpio: aspeed: Add the flush write to ensure the write complete.
        net: dsa: b53: fix jumbo frames on 10/100 ports
        net: dsa: b53: allow lower MTUs on BCM5325/5365
        net: dsa: b53: fix max MTU for BCM5325/BCM5365
        net: dsa: b53: fix max MTU for 1g switches
        net: dsa: b53: fix jumbo frame mtu check
        thermal: intel: int340x: processor: Fix warning during module unload
        thermal: int340x: processor_thermal: Set feature mask before proc_thermal_add
        net: phy: bcm84881: Fix some error handling paths
        Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
        netfilter: br_netfilter: fix panic with metadata_dst skb
        tcp: fix tcp_enter_recovery() to zero retrans_stamp when it's safe
        tcp: fix to allow timestamp undo if no retransmits were sent
        net: phy: dp83869: fix memory corruption when enabling fiber
        NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
        SUNRPC: Fix integer overflow in decode_rc_list()
        ice: fix VLAN replay after reset
        NFSD: Mark filecache "down" if init fails
        RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
        fbdev: sisfb: Fix strbuf array overflow
        drm/amd/display: Check null pointer before dereferencing se
        driver core: bus: Return -EIO instead of 0 when show/store invalid bus attribute
        tools/iio: Add memory allocation failure check for trigger_name
        virtio_pmem: Check device status before requesting flush
        comedi: ni_routing: tools: Check when the file could not be opened
        usb: dwc2: Adjust the timing of USB Driver Interrupt Registration in the Crashkernel Scenario
        usb: chipidea: udc: enable suspend interrupt after usb reset
        clk: imx: Remove CLK_SET_PARENT_GATE for DRAM mux for i.MX7D
        remoteproc: imx_rproc: Use imx specific hook for find_loaded_rsc_table
        media: videobuf2-core: clear memory related fields in __vb2_plane_dmabuf_put()
        ntb: ntb_hw_switchtec: Fix use after free vulnerability in switchtec_ntb_remove due to race condition
        PCI: Mark Creative Labs EMU20k2 INTx masking as broken
        i2c: i801: Use a different adapter-name for IDF adapters
        PCI: Add ACS quirk for Qualcomm SA8775P
        clk: bcm: bcm53573: fix OF node leak in init
        RDMA/rtrs-srv: Avoid null pointer deref during path establishment
        PCI: Add function 0 DMA alias quirk for Glenfly Arise chip
        RDMA/mad: Improve handling of timed out WRs of mad agent
        ktest.pl: Avoid false positives with grub2 skip regex
        s390/cpum_sf: Remove WARN_ON_ONCE statements
        ext4: nested locking for xattr inode
        ext4: don't set SB_RDONLY after filesystem errors
        bpf, x64: Fix a jit convergence issue
        s390/mm: Add cond_resched() to cmm_alloc/free_pages()
        s390/facility: Disable compile time optimization for decompressor code
        bpf: Check percpu map value size first
        Input: synaptics-rmi4 - fix UAF of IRQ domain on driver removal
        virtio_console: fix misc probe bugs
        fs/ntfs3: Refactor enum_rstbl to suppress static checker
        selftests: net: Remove executable bits from library scripts
        selftests/net: synchronize udpgro tests' tx and rx connection
        selftests/net: give more time to udpgro bg processes to complete startup
        tracing: Have saved_cmdlines arrays all in one allocation
        drm/crtc: fix uninitialized variable use even harder
        tracing: Remove precision vsnprintf() check from print event
        net: ethernet: cortina: Drop TSO support
        unicode: Don't special case ignorable code points
        ALSA: usb-audio: Fix possible NULL pointer dereference in snd_usb_pcm_has_fixed_rate()
        perf report: Fix segfault when 'sym' sort key is not used
        vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
        9p: add missing locking around taking dentry fid list
        ext4: fix inode tree inconsistency caused by ENOMEM
        Revert "arm64: dts: qcom: sm8250: switch UFS QMP PHY to new style of bindings"
        ACPI: battery: Fix possible crash when unregistering a battery hook
        ACPI: battery: Simplify battery hook locking
        clk: qcom: gcc-sc8180x: Add GPLL9 support
        r8169: add tally counter fields added with RTL8125
        r8169: Fix spelling mistake: "tx_underun" -> "tx_underrun"
        dt-bindings: clock: qcom: Add GPLL9 support on gcc-sc8180x
        dt-bindings: clock: qcom: Add missing UFS QREF clocks
        media: imx335: Fix reset-gpio handling
        media: i2c: imx335: Enable regulator supplies
        drm/rockchip: vop: clear DMA stop bit on RK3066
        drm/rockchip: support gamma control on RK3399
        drm/rockchip: define gamma registers for RK3399
        lib/buildid: harden build ID parsing logic
        build-id: require program headers to be right after ELF header
        drm/amd/display: Allow backlight to go below `AMDGPU_DM_DEFAULT_MIN_BACKLIGHT`
        uprobes: fix kernel info leak via "[uprobes]" vma
        arm64: errata: Expand speculative SSBS workaround once more
        arm64: cputype: Add Neoverse-N3 definitions
        arm64: Add Cortex-715 CPU part definition
        ext4: dax: fix overflowing extents beyond inode size when partially writing
        ext4: properly sync file size update after O_SYNC direct IO
        spi: bcm63xx: Fix missing pm_runtime_disable()
        i2c: xiic: Fix pm_runtime_set_suspended() with runtime pm enabled
        i2c: xiic: Use devm_clk_get_enabled()
        i2c: core: Lock address during client device instantiation
        i2c: create debugfs entry per adapter
        i2c: smbus: Use device_*() functions instead of of_*()
        device property: Add fwnode_irq_get_byname
        device property: Add fwnode_iomap()
        kconfig: qconf: fix buffer overflow in debug links
        drm/amd/display: Fix system hang while resume with TBT monitor
        drm/sched: Add locking to drm_sched_entity_modify_sched
        close_range(): fix the logics in descriptor table trimming
        tracing/timerlat: Fix a race during cpuhp processing
        tracing/hwlat: Fix a race during cpuhp processing
        gpio: davinci: fix lazy disable
        btrfs: wait for fixup workers before stopping cleaner kthread during umount
        btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
        ACPI: resource: Add Asus ExpertBook B2502CVA to irq1_level_low_skip_override[]
        ACPI: resource: Add Asus Vivobook X1704VAP to irq1_level_low_skip_override[]
        Input: adp5589-keys - fix adp5589_gpio_get_value()
        Input: adp5589-keys - fix NULL pointer dereference
        rtc: at91sam9: fix OF node leak in probe() error path
        net: stmmac: Fix zero-division error when disabling tc cbs
        tomoyo: fallback to realpath if symlink's pathname does not exist
        iio: magnetometer: ak8975: Fix reading for ak099xx sensors
        clk: qcom: gcc-sc8180x: Fix the sdcc2 and sdcc4 clocks freq table
        clk: qcom: gcc-sm8250: Do not turn off PCIe GDSCs during gdsc_disable()
        media: venus: fix use after free bug in venus_remove due to race condition
        clk: qcom: gcc-sm8150: De-register gcc_cpuss_ahb_clk_src
        clk: qcom: clk-rpmh: Fix overflow in BCM vote
        media: uapi/linux/cec.h: cec_msg_set_reply_to: zero flags
        media: sun4i_csi: Implement link validate for sun4i_csi subdev
        clk: qcom: dispcc-sm8250: use CLK_SET_RATE_PARENT for branch clocks
        clk: rockchip: fix error for unknown clocks
        aoe: fix the potential use-after-free problem in more places
        NFSD: Fix NFSv4's PUTPUBFH operation
        nfsd: map the EBADMSG to nfserr_io to avoid warning
        nfsd: fix delegation_blocked() to block correctly for at least 30 seconds
        perf hist: Update hist symbol when updating maps
        exfat: fix memory leak in exfat_load_bitmap()
        riscv: define ILLEGAL_POINTER_VALUE for 64bit
        ext4: mark fc as ineligible using an handle in ext4_xattr_set()
        ext4: use handle to mark fc as ineligible in __track_dentry_update()
        ext4: fix fast commit inode enqueueing during a full journal commit
        ext4: fix incorrect tid assumption in jbd2_journal_shrink_checkpoint_list()
        ext4: fix incorrect tid assumption in ext4_wait_for_tail_page_commit()
        ext4: update orig_path in ext4_find_extent()
        ext4: fix double brelse() the buffer of the extents path
        ext4: aovid use-after-free in ext4_ext_insert_extent()
        ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
        ext4: fix incorrect tid assumption in __jbd2_log_wait_for_space()
        ext4: propagate errors from ext4_find_extent() in ext4_insert_range()
        ext4: fix slab-use-after-free in ext4_split_extent_at()
        ext4: correct encrypted dentry name hash when not casefolded
        ext4: no need to continue when the number of entries is 1
        ALSA: hda/realtek: Add quirk for Huawei MateBook 13 KLV-WX9
        ALSA: line6: add hw monitor volume control to POD HD500X
        ALSA: usb-audio: Add native DSD support for Luxman D-08u
        ALSA: usb-audio: Add delay quirk for VIVO USB-C HEADSET
        ALSA: core: add isascii() check to card ID generator
        drm: Consistently use struct drm_mode_rect for FB_DAMAGE_CLIPS
        parisc: Fix itlb miss handler for 64-bit programs
        perf/core: Fix small negative period being ignored
        power: supply: hwmon: Fix missing temp1_max_alarm attribute
        spi: bcm63xx: Fix module autoloading
        firmware: tegra: bpmp: Drop unused mbox_client_to_bpmp()
        i2c: xiic: Wait for TX empty to avoid missed TX NAKs
        i2c: qcom-geni: Use IRQF_NO_AUTOEN flag in request_irq()
        i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
        platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
        selftests: vDSO: fix vdso_config for s390
        selftests: vDSO: fix ELF hash table entry size for s390x
        selftests/mm: fix charge_reserved_hugetlb.sh test
        selftests: vDSO: fix vDSO symbols lookup for powerpc64
        selftests: vDSO: fix vdso_config for powerpc
        selftests: vDSO: fix vDSO name for powerpc
        selftests: breakpoints: use remaining time to check if suspend succeed
        spi: s3c64xx: fix timeout counters in flush_fifo
        spi: spi-imx: Fix pm_runtime_set_suspended() with runtime pm enabled
        usb: typec: tcpm: Check for port partner validity before consuming it
        blk-integrity: register sysfs attributes on struct device
        blk-integrity: convert to struct device_attribute
        blk-integrity: use sysfs_emit
        ext4: fix i_data_sem unlock order in ext4_ind_migrate()
        ext4: avoid use-after-free in ext4_ext_show_leaf()
        ext4: ext4_search_dir should return a proper error
        of/irq: Refer to actual buffer size in of_irq_parse_one()
        drm/amd/pm: ensure the fw_info is not null before using it
        drm/radeon/r100: Handle unknown family in r100_cp_init_microcode()
        scsi: aacraid: Rearrange order of struct aac_srb_unit
        drm/printer: Allow NULL data in devcoredump printer
        drm/amd/display: Initialize get_bytes_per_element's default to 1
        drm/amd/display: Fix index out of bounds in DCN30 color transformation
        drm/amd/display: Fix index out of bounds in degamma hardware format translation
        drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
        drm/amd/display: Check stream before comparing them
        platform/x86: touchscreen_dmi: add nanote-next quirk
        HID: multitouch: Add support for Thinkpad X12 Gen 2 Kbd Portfolio
        drm/amdgpu: enable gfxoff quirk on HP 705G4
        drm/amdgpu: add raven1 gfxoff quirk
        jfs: Fix uninit-value access of new_ea in ea_buffer
        scsi: smartpqi: correct stream detection
        jfs: check if leafidx greater than num leaves per dmap tree
        jfs: Fix uaf in dbFreeBits
        jfs: UBSAN: shift-out-of-bounds in dbFindBits
        drm/amd/display: Check null pointers before using dc->clk_mgr
        ata: sata_sil: Rename sil_blacklist to sil_quirks
        drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
        iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count
        iommu/vt-d: Always reserve a domain ID for identity setup
        power: reset: brcmstb: Do not go into infinite loop if reset fails
        iommu/arm-smmu-qcom: hide last LPASS SMMU context bank from linux
        rcuscale: Provide clear error when async specified without primitives
        fbdev: pxafb: Fix possible use after free in pxafb_task()
        x86/syscall: Avoid memcpy() for ia32 syscall_get_arguments()
        ALSA: hdsp: Break infinite MIDI input flush loop
        ALSA: asihpi: Fix potential OOB array access
        tools/x86/kcpuid: Protect against faulty "max subleaf" values
        ALSA: usb-audio: Add logitech Audio profile quirk
        ALSA: usb-audio: Define macros for quirk table entries
        x86/ioapic: Handle allocation failures gracefully
        ALSA: usb-audio: Add input value sanity checks for standard types
        signal: Replace BUG_ON()s
        nfp: Use IRQF_NO_AUTOEN flag in request_irq()
        wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
        wifi: mt76: mt7915: hold dev->mt76.mutex while disabling tx worker
        proc: add config & param to block forcing mem writes
        ACPICA: iasl: handle empty connection_node
        tcp: avoid reusing FIN_WAIT2 when trying to find port in connect() process
        net: atlantic: Avoid warning about potential string truncation
        ipv4: Mask upper DSCP bits and ECN bits in NETLINK_FIB_LOOKUP family
        ipv4: Check !in_dev earlier for ioctl(SIOCSIFADDR).
        net: mvpp2: Increase size of queue_name buffer
        tipc: guard against string buffer overrun
        ACPICA: check null return of ACPI_ALLOCATE_ZEROED() in acpi_db_convert_to_package()
        ACPI: EC: Do not release locks during operation region accesses
        wifi: rtw88: select WANT_DEV_COREDUMP
        wifi: ath11k: fix array out-of-bound access in SoC stats
        nvme-pci: qdepth 1 quirk
        blk_iocost: fix more out of bound shifts
        net: sched: consistently use rcu_replace_pointer() in taprio_change()
        ACPICA: Fix memory leak if acpi_ps_get_next_field() fails
        ACPICA: Fix memory leak if acpi_ps_get_next_namepath() fails
        ACPI: PAD: fix crash in exit_round_robin()
        net: hisilicon: hns_mdio: fix OF node leak in probe()
        net: hisilicon: hns_dsaf_mac: fix OF node leak in hns_mac_get_info()
        net: hisilicon: hip04: fix OF node leak in probe()
        net/xen-netback: prevent UAF in xenvif_flush_hash()
        ice: Adjust over allocation of memory in ice_sched_add_root_node() and ice_sched_add_node()
        wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
        wifi: ath9k: fix possible integer overflow in ath9k_get_et_stats()
        f2fs: Require FMODE_WRITE for atomic write ioctls
        ALSA: hda/conexant: Fix conflicting quirk for System76 Pangolin
        ASoC: imx-card: Set card.owner to avoid a warning calltrace if SND=m
        ALSA: hda/generic: Unconditionally prefer preferred_dacs pairs
        ALSA: hda/realtek: Fix the push button function for the ALC257
        ALSA: mixer_oss: Remove some incorrect kfree_const() usages
        media: usbtv: Remove useless locks in usbtv_video_free()
        i2c: xiic: Try re-initialization on bus busy timeout
        i2c: xiic: improve error message when transfer fails to start
        i2c: xiic: xiic_xfer(): Fix runtime PM leak on error path
        i2c: xiic: Fix RX IRQ busy check
        i2c: xiic: Switch from waitqueue to completion
        i2c: xiic: Fix broken locking on tx_msg
        sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
        ppp: do not assume bh is held in ppp_channel_bridge_input()
        ipv4: ip_gre: Fix drops of small packets in ipgre_xmit
        net: stmmac: dwmac4: extend timeout for VLAN Tag register busy bit check
        net: stmmac: Disable automatic FCS/Pad stripping
        stmmac_pci: Fix underflow size in stmmac_rx
        net: add more sanity checks to qdisc_pkt_len_init()
        net: avoid potential underflow in qdisc_pkt_len_init() with UFO
        net: ethernet: lantiq_etop: fix memory disclosure
        Bluetooth: btmrvl: Use IRQF_NO_AUTOEN flag in request_irq()
        netfilter: nf_tables: prevent nf_skb_duplicated corruption
        net: ieee802154: mcr20a: Use IRQF_NO_AUTOEN flag in request_irq()
        netfilter: uapi: NFTA_FLOWTABLE_HOOK is NLA_NESTED
        net/mlx5e: Fix NULL deref in mlx5e_tir_builder_alloc()
        net/mlx5: Added cond_resched() to crdump collection
        net/mlx5: Fix error path in multi-packet WQE transmit
        ieee802154: Fix build error
        ceph: remove the incorrect Fw reference check when dirtying pages
        mailbox: bcm2835: Fix timeout during suspend mode
        mailbox: rockchip: fix a typo in module autoloading
        static_call: Replace pointless WARN_ON() in static_call_module_notify()
        static_call: Handle module init failure correctly in static_call_del_module()
        spi: lpspi: Simplify some error message
        usb: yurex: Fix inconsistent locking bug in yurex_read()
        i2c: isch: Add missed 'else'
        i2c: aspeed: Update the stop sw state when the bus recovery occurs
        mm: only enforce minimum stack gap size if it's sensible
        lockdep: fix deadlock issue between lockdep and rcu
        bpf: lsm: Set bpf_lsm_blob_sizes.lbs_task to 0
        x86/entry: Remove unwanted instrumentation in common_interrupt()
        x86/idtentry: Incorporate definitions/declarations of the FRED entries
        pps: add an error check in parport_attach
        pps: remove usage of the deprecated ida_simple_xx() API
        usb: xhci: fix loss of data on Cadence xHC
        xhci: Add a quirk for writing ERST in high-low order
        xhci: Preserve RsvdP bits in ERSTBA register correctly
        xhci: Refactor interrupter code for initial multi interrupter support.
        xhci: remove xhci_test_trb_in_td_math early development check
        xhci: fix event ring segment table related masks and variables in header
        USB: misc: yurex: fix race between read and write
        usb: yurex: Replace snprintf() with the safer scnprintf() variant
        soc: versatile: realview: fix soc_dev leak during device remove
        soc: versatile: realview: fix memory leak during device remove
        padata: use integer wrap around to prevent deadlock on seq_nr overflow
        EDAC/igen6: Fix conversion of system address to physical memory address
        nfs: fix memory leak in error path of nfs4_do_reclaim
        fs: Fix file_set_fowner LSM hook inconsistencies
        vfs: fix race between evice_inodes() and find_inode()&iput()
        arm64: dts: rockchip: Correct the Pinebook Pro battery design capacity
        arm64: dts: rockchip: Raise Pinebook Pro's panel backlight PWM frequency
        hwrng: cctrng - Add missing clk_disable_unprepare in cctrng_resume
        hwrng: bcm2835 - Add missing clk_disable_unprepare in bcm2835_rng_init
        debugobjects: Fix conditions in fill_pool()
        hwrng: mtk - Use devm_pm_runtime_enable
        wifi: mt76: mt7615: check devm_kasprintf() returned value
        f2fs: avoid potential int overflow in sanity_check_area_boundary()
        wifi: rtw88: 8822c: Fix reported RX band width
        f2fs: prevent possible int overflow in dir_block_index()
        perf/x86/intel/pt: Fix sampling synchronization
        efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
        ACPI: resource: Add another DMI match for the TongFang GMxXGxx
        ACPI: sysfs: validate return type of _STR method
        drbd: Add NULL check for net_conf to prevent dereference in state validation
        drbd: Fix atomicity violation in drbd_uuid_set_bm()
        crypto: ccp - Properly unregister /dev/sev on sev PLATFORM_STATUS failure
        xhci: Set quirky xHC PCI hosts to D3 _after_ stopping and freeing them.
        tty: rp2: Fix reset with non forgiving PCIe host bridges
        firmware_loader: Block path traversal
        bus: integrator-lm: fix OF node leak in probe()
        usb: dwc2: drd: fix clock gating on USB role switch
        usb: cdnsp: Fix incorrect usb_request status
        USB: class: CDC-ACM: fix race between get_serial and set_serial
        USB: misc: cypress_cy7c63: check for short transfer
        USB: appledisplay: close race between probe and completion handler
        usbnet: fix cyclical race on disconnect with work queue
        scsi: mac_scsi: Disallow bus errors during PDMA send
        scsi: mac_scsi: Refactor polling loop
        scsi: mac_scsi: Revise printk(KERN_DEBUG ...) messages
        drm/amd/display: Validate backlight caps are sane
        drm/amd/display: Round calculated vtotal
        Input: i8042 - add another board name for TUXEDO Stellaris Gen5 AMD line
        Input: i8042 - add TUXEDO Stellaris 15 Slim Gen6 AMD to i8042 quirk table
        Input: i8042 - add TUXEDO Stellaris 16 Gen5 AMD to i8042 quirk table
        Revert "media: tuners: fix error return code of hybrid_tuner_request_state()"
        soc: versatile: integrator: fix OF node leak in probe() error path
        ASoC: rt5682: Return devm_of_clk_add_hw_provider to transfer the error
        PCI: xilinx-nwl: Fix off-by-one in INTx IRQ handler
        Remove *.orig pattern from .gitignore
        selinux,smack: don't bypass permissions check in inode_setsecctx hook
        vfio/pci: fix potential memory leak in vfio_intx_enable()
        x86/mm: Switch to new Intel CPU model defines
        powercap: RAPL: fix invalid initialization for pl4_supported field
        Input: goodix - use the new soc_intel_is_byt() helper
        drm/amd/display: Fix Synaptics Cascaded Panamera DSC Determination
        netfilter: ctnetlink: compile ctnetlink_label_size with CONFIG_NF_CONNTRACK_EVENTS
        netfilter: nf_tables: Keep deleted flowtable hooks until after RCU
        bonding: Fix unnecessary warnings and logs from bond_xdp_get_xmit_slave()
        net: qrtr: Update packets cloning when broadcasting
        tcp: check skb is non-NULL in tcp_rto_delta_us()
        net: ipv6: select DST_CACHE from IPV6_RPL_LWTUNNEL
        net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition
        netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
        net: xilinx: axienet: Fix packet counting
        net: axienet: Switch to 64-bit RX/TX statistics
        net: axienet: Use NAPI for TX completion path
        net: axienet: Be more careful about updating tx_bd_tail
        net: axienet: add coalesce timer ethtool configuration
        net: axienet: reduce default RX interrupt threshold to 1
        net: axienet: implement NAPI and GRO receive
        net: axienet: don't set IRQ timer when IRQ delay not used
        net: axienet: Clean up DMA start/stop and error handling
        net: axienet: Clean up device used for DMA calls
        Revert "dm: requeue IO if mapping table not yet available"
        vhost_vdpa: assign irq bypass producer token correctly
        vdpa: Add eventfd for the vdpa callback
        interconnect: qcom: sm8250: Enable sync_state
        coresight: tmc: sg: Do not leak sg_table
        iio: adc: ad7606: fix standby gpio state to match the documentation
        iio: adc: ad7606: fix oversampling gpio array
        f2fs: get rid of online repaire on corrupted directory
        spi: spi-fsl-lpspi: Undo runtime PM changes at driver exit time
        f2fs: clean up w/ dotdot_name
        spi: lpspi: release requested DMA channels
        f2fs: introduce F2FS_IPU_HONOR_OPU_WRITE ipu policy
        spi: lpspi: Silence error message upon deferred probe
        f2fs: fix to wait page writeback before setting gcing flag
        nfsd: return -EINVAL when namelen is 0
        f2fs: optimize error handling in redirty_blocks
        nfsd: call cache_put if xdr_reserve_space returns NULL
        f2fs: reduce expensive checkpoint trigger frequency
        ntb_perf: Fix printk format
        f2fs: remove unneeded check condition in __f2fs_setxattr()
        f2fs: fix to update i_ctime in __f2fs_setxattr()
        f2fs: fix typo
        ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
        RDMA/irdma: fix error message in irdma_modify_qp_roce()
        RDMA/cxgb4: Added NULL check for lookup_atid
        riscv: Fix fp alignment bug in perf_callchain_user()
        RDMA/hns: Optimize hem allocation performance
        RDMA/hns: Fix VF triggering PF reset in abnormal interrupt handler
        RDMA/hns: Refactor the abnormal interrupt handler function
        RDMA/hns: Fix the wrong type of return value of the interrupt handler
        RDMA/hns: Remove unused abnormal interrupt of type RAS
        RDMA/hns: Fix spin_unlock_irqrestore() called with IRQs enabled
        RDMA/hns: Fix the overflow risk of hem_list_calc_ba_range()
        RDMA/hns: Don't modify rq next block addr in HIP09 QPC
        watchdog: imx_sc_wdt: Don't disable WDT in suspend
        IB/core: Fix ib_cache_setup_one error flow cleanup
        pinctrl: mvebu: Fix devinit_dove_pinctrl_probe function
        pinctrl: mvebu: Use devm_platform_get_and_ioremap_resource()
        nfsd: fix refcount leak when file is unhashed after being found
        nfsd: remove unneeded EEXIST error check in nfsd_do_file_acquire
        clk: ti: dra7-atl: Fix leak of of_nodes
        RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
        RDMA/rtrs: Reset hb_missed_cnt after receiving other traffic from peer
        pinctrl: single: fix missing error code in pcs_probe()
        RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
        PCI: xilinx-nwl: Clean up clock on probe failure/removal
        PCI: xilinx-nwl: Fix register misspelling
        PCI: keystone: Fix if-statement expression in ks_pcie_quirk()
        drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error
        drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
        Input: ilitek_ts_i2c - add report id message validation
        Input: ilitek_ts_i2c - avoid wrong input subsystem sync
        clk: rockchip: Set parent rate for DCLK_VOP clock on RK3228
        remoteproc: imx_rproc: Initialize workqueue earlier
        remoteproc: imx_rproc: Correct ddr alias for i.MX8M
        clk: imx: imx8qxp: Parent should be initialized earlier than the clock
        clk: imx: imx8qxp: Register dc0_bypass0_clk before disp clk
        clk: imx: imx8mp: fix clock tree update of TF-A managed clocks
        perf time-utils: Fix 32-bit nsec parsing
        perf sched timehist: Fixed timestamp error when unable to confirm event sched_in time
        perf sched timehist: Fix missing free of session in perf_sched__timehist()
        perf mem: Free the allocated sort string, fixing a leak
        bpf: Fix bpf_strtol and bpf_strtoul helpers for 32bit
        nilfs2: fix potential oob read in nilfs_btree_check_delete()
        nilfs2: determine empty node blocks as corrupted
        nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
        ext4: avoid OOB when system.data xattr changes underneath the filesystem
        ext4: return error on ext4_find_inline_entry
        ext4: avoid negative min_clusters in find_group_orlov()
        ext4: avoid potential buffer_head leak in __ext4_new_inode()
        ext4: avoid buffer_head leak in ext4_mark_inode_used()
        smackfs: Use rcu_assign_pointer() to ensure safe assignment in smk_set_cipso
        ext4: clear EXT4_GROUP_INFO_WAS_TRIMMED_BIT even mount with discard
        kthread: fix task state in kthread worker if being frozen
        xz: cleanup CRC32 edits from 2018
        selftests/bpf: Fix C++ compile error from missing _Bool type
        selftests/bpf: Fix error compiling test_lru_map.c
        selftests/bpf: Fix errors compiling cg_storage_multi.h with musl libc
        selftests/bpf: Fix compiling core_reloc.c with musl-libc
        selftests/bpf: Fix compiling tcp_rtt.c with musl-libc
        selftests/bpf: Fix compiling flow_dissector.c with musl-libc
        tpm: Clean up TPM space after command failure
        selftests/bpf: Fix compiling kfree_skb.c with musl-libc
        xen/swiotlb: add alignment check for dma buffers
        selftests/bpf: Fix missing ARRAY_SIZE() definition in bench.c
        xen: use correct end address of kernel for conflict checking
        selftests/bpf: Fix error compiling bpf_iter_setsockopt.c with musl libc
        drivers:drm:exynos_drm_gsc:Fix wrong assignment in gsc_bind()
        selftests/bpf: Fix compile error from rlim_t in sk_storage_map.c
        drm/msm: fix %s null argument error
        ipmi: docs: don't advertise deprecated sysfs entries
        drm/msm/a5xx: workaround early ring-buffer emptiness check
        drm/msm: Drop priv->lastctx
        drm/msm/a5xx: fix races in preemption evaluation stage
        drm/msm/a5xx: properly clear preemption records on resume
        drm/msm/a5xx: disable preemption in submits by default
        drm/msm: Fix incorrect file name output in adreno_request_fw()
        powerpc/8xx: Fix kernel vs user address comparison
        powerpc/8xx: Fix initial memory mapping
        powerpc/32: Remove 'noltlbs' kernel parameter
        powerpc/32: Remove the 'nobats' kernel parameter
        drm/mediatek: Use spin_lock_irqsave() for CRTC event lock
        jfs: fix out-of-bounds in dbNextAG() and diAlloc()
        scsi: elx: libefc: Fix potential use after free in efc_nport_vport_del()
        drm/bridge: lontium-lt8912b: Validate mode in drm_bridge_funcs::mode_valid()
        drm/radeon/evergreen_cs: fix int overflow errors in cs track offsets
        drm/rockchip: dw_hdmi: Fix reading EDID when using a forced mode
        drm/rockchip: vop: Allow 4096px width scaling
        scsi: NCR5380: Check for phase match during PDMA fixup
        scsi: NCR5380: Add SCp members to struct NCR5380_cmd
        drm/radeon: properly handle vbios fake edid sizing
        drm/radeon: Replace one-element array with flexible-array member
        drm/amdgpu: properly handle vbios fake edid sizing
        drm/amdgpu: Replace one-element array with flexible-array member
        drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
        drm/stm: Fix an error handling path in stm_drm_platform_probe()
        pmdomain: core: Harden inter-column space in debug summary
        mtd: powernv: Add check devm_kasprintf() returned value
        fbdev: hpfb: Fix an error handling path in hpfb_dio_probe()
        power: supply: max17042_battery: Fix SOC threshold calc w/ no current sense
        power: supply: axp20x_battery: Remove design from min and max voltage
        hwmon: (ntc_thermistor) fix module autoloading
        mtd: slram: insert break after errors in parsing the map
        hwmon: (max16065) Fix alarm attributes
        hwmon: (max16065) Remove use of i2c_match_id()
        m68k: Fix kernel_clone_args.flags in m68k_clone()
        i2c: Add i2c_get_match_data()
        clocksource/drivers/qcom: Add missing iounmap() on errors in msm_dt_timer_init()
        hwmon: (max16065) Fix overflows seen when writing limits
        reset: k210: fix OF node leak in probe() error path
        reset: berlin: fix OF node leak in probe() error path
        ARM: versatile: fix OF node leak in CPUs prepare
        ARM: dts: imx7d-zii-rmu2: fix Ethernet PHY pinctrl property
        ARM: dts: microchip: sam9x60: Fix rtc/rtt clocks
        arm64: dts: renesas: r9a07g044: Correct GICD and GICR sizes
        spi: ppc4xx: Avoid returning 0 when failed to parse and map IRQ
        spi: ppc4xx: handle irq_of_parse_and_map() errors
        block: fix potential invalid pointer dereference in blk_add_partition
        block: print symbolic error name instead of error code
        block, bfq: don't break merge chain in bfq_split_bfqq()
        block, bfq: choose the last bfqq from merge chain in bfq_setup_cooperator()
        block, bfq: fix possible UAF for bfqq->bic with merge chain
        net: tipc: avoid possible garbage value
        net: ipv6: rpl_iptunnel: Fix memory leak in rpl_input
        r8169: disable ALDPS per default for RTL8125
        net: enetc: Use IRQF_NO_AUTOEN flag in request_irq()
        bareudp: Pull inner IP header on xmit.
        geneve: Fix incorrect inner network header offset when innerprotoinherit is set
        net: geneve: support IPv4/IPv6 as inner protocol
        bareudp: Pull inner IP header in bareudp_udp_encap_recv().
        Bluetooth: btusb: Fix not handling ZPL/short-transfer
        can: m_can: m_can_close(): stop clocks after device has been shut down
        can: bcm: Clear bo->bcm_proc_read after remove_proc_entry().
        sock_map: Add a cond_resched() in sock_hash_free()
        wifi: wilc1000: fix potential RCU dereference issue in wilc_parse_join_bss_param
        wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop()
        wifi: cfg80211: fix two more possible UBSAN-detected off-by-one errors
        wifi: mt76: mt7915: fix rx filter setting for bfee functionality
        wifi: cfg80211: fix UBSAN noise in cfg80211_wext_siwscan()
        x86/sgx: Fix deadlock in SGX NUMA node search
        cpufreq: ti-cpufreq: Introduce quirks to handle syscon fails appropriately
        netfilter: nf_tables: remove annotation to access set timeout while holding lock
        netfilter: nf_tables: reject expiration higher than timeout
        netfilter: nf_tables: reject element expiration with no timeout
        netfilter: nf_tables: elements with timeout below CONFIG_HZ never expire
        ACPI: CPPC: Fix MASK_VAL() usage
        ACPI: bus: Avoid using CPPC if not supported by firmware
        can: j1939: use correct function name in comment
        padata: Honor the caller's alignment in case of chunk_size 0
        wifi: iwlwifi: mvm: increase the time between ranging measurements
        mount: handle OOM on mnt_warn_timestamp_expiry
        fs/namespace: fnic: Switch to use %ptTd
        mount: warn only once about timestamp range expiration
        fs: explicitly unregister per-superblock BDIs
        wifi: rtw88: remove CPT execution branch never used
        net: stmmac: dwmac-loongson: Init ref and PTP clocks rate
        wifi: ath9k: Remove error checks when creating debugfs entries
        wifi: ath9k: fix parameter check in ath9k_init_debug()
        ACPI: PMIC: Remove unneeded check in tps68470_pmic_opregion_probe()
        crypto: xor - fix template benchmarking
        wifi: rtw88: always wait for both firmware loading attempts
        EDAC/synopsys: Fix error injection on Zynq UltraScale+
        EDAC/synopsys: Fix ECC status and IRQ control race condition
        EDAC/synopsys: Re-enable the error interrupts on v3 hw
        EDAC/synopsys: Use the correct register to disable the error interrupt on v3 hw
        EDAC/synopsys: Add support for version 3 of the Synopsys EDAC DDR
        USB: usbtmc: prevent kernel-usb-infoleak
        USB: serial: pl2303: add device id for Macrosilicon MS3020
        cgroup: Move rcu_head up near the top of cgroup_root
        gpiolib: cdev: Ignore reconfiguration without direction
        inet: inet_defrag: prevent sk release while still in use
        gpio: prevent potential speculation leaks in gpio_device_get_desc()
        Revert "wifi: cfg80211: check wiphy mutex is held for wdev mutex"
        netfilter: nf_tables: missing iterator type in lookup walk
        netfilter: nft_set_pipapo: walk over current view on netlink dump
        cgroup: Make operations on the cgroup root_list RCU safe
        ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry()
        ocfs2: add bounds checking to ocfs2_xattr_find_entry()
        spi: spidev: Add missing spi_device_id for jg10309-01
        x86/hyperv: Set X86_FEATURE_TSC_KNOWN_FREQ when Hyper-V provides frequency
        spi: bcm63xx: Enable module autoloading
        drm: komeda: Fix an issue related to normalized zpos
        spi: spidev: Add an entry for elgin,jg10309-01
        ASoC: tda7419: fix module autoloading
        ASoC: intel: fix module autoloading
        wifi: iwlwifi: clear trans->state earlier upon error
        wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
        wifi: iwlwifi: mvm: pause TCM when the firmware is stopped
        wifi: iwlwifi: mvm: fix iwl_mvm_scan_fits() calculation
        net: ftgmac100: Ensure tx descriptor updates are visible
        wifi: iwlwifi: lower message level for FW buffer destination
        microblaze: don't treat zero reserved memory regions as error
        pinctrl: at91: make it work with current gpiolib
        scsi: lpfc: Fix overflow build issue
        ALSA: hda/realtek - FIxed ALC285 headphone no sound
        ALSA: hda/realtek - Fixed ALC256 headphone no sound
        ASoC: allow module autoloading for table db1200_pids
        ASoC: meson: axg-card: fix 'use-after-free'
        dma-buf: heaps: Fix off-by-one in CMA heap fault handler
        soundwire: stream: Revert "soundwire: stream: fix programming slave ports for non-continous port maps"
        spi: nxp-fspi: fix the KASAN report out-of-bounds bug
        net: dpaa: Pad packets to ETH_ZLEN
        netfilter: nft_socket: fix sk refcount leaks
        net: ftgmac100: Enable TX interrupt to avoid TX timeout
        octeontx2-af: Modify SMQ flush sequence to drop packets
        octeontx2-af: Set XOFF on other child transmit schedulers during SMQ flush
        fou: fix initialization of grc
        net/mlx5: Add missing masks and QoS bit masks for scheduling elements
        net/mlx5: Add IFC bits and enums for flow meter
        net/mlx5: Add support to create match definer
        net/mlx5: Explicitly set scheduling element and TSAR type
        net/mlx5e: Add missing link modes to ptys2ethtool_map
        igb: Always call igb_xdp_ring_update_tail() under Tx lock
        ice: fix accounting for filters shared by multiple VSIs
        hwmon: (pmbus) Conditionally clear individual status bits for pmbus rev >= 1.2
        hwmon: (pmbus) Introduce and use write_byte_data callback
        selftests/bpf: Support SOCK_STREAM in unix_inet_redir_to_connected()
        eeprom: digsy_mtc: Fix 93xx46 driver probe failure
        arm64: dts: rockchip: fix PMIC interrupt pin in pinctrl for ROCK Pi E
        fs/ntfs3: Use kvfree to free memory allocated by kvmalloc
        mm: avoid leaving partial pfn mappings around in error case
        net: tighten bad gso csum offset check in virtio_net_hdr
        minmax: reduce min/max macro expansion in atomisp driver
        arm64: dts: rockchip: override BIOS_DISABLE signal via GPIO hog on RK3399 Puma
        mptcp: pm: Fix uaf in __timer_delete_sync
        platform/x86: panasonic-laptop: Allocate 1 entry extra in the sinf array
        platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
        NFS: Avoid unnecessary rescanning of the per-server delegation list
        NFSv4: Fix clearing of layout segments in layoutreturn
        Input: i8042 - add Fujitsu Lifebook E756 to i8042 quirk table
        drm/msm/adreno: Fix error return if missing firmware-name
        platform/surface: aggregator_registry: Add support for Surface Laptop Go 3
        scripts: kconfig: merge_config: config files: add a trailing newline
        HID: multitouch: Add support for GT7868Q
        Input: synaptics - enable SMBus for HP Elitebook 840 G2
        Input: ads7846 - ratelimit the spi_sync error message
        btrfs: update target inode's ctime on unlink
        powerpc/mm: Fix boot warning with hugepages and CONFIG_DEBUG_VIRTUAL
        net: phy: vitesse: repair vsc73xx autonegotiation
        net: ethernet: use ip_hdrlen() instead of bit shift
        usbnet: ipheth: fix carrier detection in modes 1 and 4
        ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
        ocfs2: fix null-ptr-deref when journal load failed.
        ocfs2: remove unreasonable unlock in ocfs2_read_blocks
        ocfs2: cancel dqi_sync_work before freeing oinfo
        ocfs2: reserve space for inline xattr before attaching reflink tree
        ocfs2: fix uninit-value in ocfs2_get_block()
        ocfs2: fix the la space leak when unmounting an ocfs2 volume
        mm: krealloc: consider spare memory for __GFP_ZERO
        jbd2: correctly compare tids with tid_geq function in jbd2_fc_begin_commit
        jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
        drm: omapdrm: Add missing check for alloc_ordered_workqueue
        of/irq: Support #msi-cells=<0> in of_msi_get_domain
        parisc: Fix stack start for ADDR_NO_RANDOMIZE personality
        parisc: Fix 64-bit userspace syscall path
      
      Conflicts:
      	drivers/clk/qcom/clk-rpmh.c
              drivers/clk/qcom/gcc-sc8180x.c
              drivers/spi/spidev.c
              include/dt-bindings/clock/qcom,gcc-sc8180x.h
              net/qrtr/af_qrtr.c
      
      Change-Id: I9ffa7b11b50c08a3a4c4ed9be14b1d4d0e53a566
      Signed-off-by: default avatarSivasri Kumar, Vanka <quic_svanka@quicinc.com>
      7e8ffb17
  10. Feb 17, 2025
  11. Feb 14, 2025
  12. Feb 12, 2025
  13. Feb 10, 2025
  14. Feb 07, 2025
  15. Feb 03, 2025
  16. Jan 30, 2025
  17. Jan 29, 2025
  18. Jan 28, 2025
  19. Jan 24, 2025
  20. Jan 23, 2025
  21. Jan 22, 2025
  22. Jan 21, 2025
  23. Jan 20, 2025
    • Sriram Dash's avatar
      usb: dwc3-msm: Trivial Rename Extra input register to input 6 · 51030d4d
      Sriram Dash authored
      
      Rename Extra input register to DWC_EXTRA_INPUT_6 and update
      corresponding register bit names.
      
      Change-Id: I28c62d7fd0ed177eb80698456a5d79a0bf458fe3
      Signed-off-by: default avatarSriram Dash <quic_sriramd@quicinc.com>
      51030d4d
    • Uttkarsh Aggarwal's avatar
      sound: usb: xhci-sec: Prevent Null pointer deference in xhci-sec · 74ef4329
      Uttkarsh Aggarwal authored
      
      CPU1:                                         CPU2:
      handle_uaudio_stream_req              uaudio_dev_cleanup
      prepare_qmi_response                  uaudio_event_ring_cleanup_free
      xhci_sec_event_ring_cleanup           xhci_sec_event_ring_cleanup
      sec_event_ring_cleanup                sec_event_ring_cleanup
                                            xhci_handle_sec_intr_evnt
      
      There could be a chance that CPU1 running thread is trying to clean the
      "sec" list, and at the same time, after cleanup, CPU2 running thread
      is trying to fetch "ir_set" and "erst->entries."
      
      Call trace:
      xhci_sec_event_ring_cleanup [snd_usb_audio_qmi]
      uaudio_event_ring_cleanup_free [snd_usb_audio_qmi]
      uaudio_dev_cleanup [snd_usb_audio_qmi]
      uaudio_disconnect [snd_usb_audio_qmi]
      usb_audio_disconnect
      usb_unbind_interface
      device_release_driver_internal
      device_release_driver
      bus_remove_device
      device_del
      usb_disable_device
      usb_disconnect
      hub_event
      
      Adding spin_lock in xhci_sec_ring_cleanup to avoid
      multiple access to same function.
      
      Change-Id: Ie0fa7a69ac6ab4ef105570b8d3569ee4e1f45204
      Signed-off-by: default avatarUttkarsh Aggarwal <quic_uaggarwa@quicinc.com>
      Signed-off-by: default avatarManish Nagar <quic_mnagar@quicinc.com>
      74ef4329
  24. Jan 14, 2025
  25. Jan 13, 2025
Loading