bka
8329 Commits
| Author | SHA1 | Message | Date | |
|---|---|---|---|---|
Arian
|
3d0796a379 |
input: touchscreen: xiaomi: Add support for fold_status
Change-Id: I7729b71625173eb5f4caa8768aa75965981c3fff |
||
|
Arian
|
6dd1565ca8 |
input: touchscreen: xiaomi: Introduce fod_finger_state node
This serves as a node to allow userspace to poll on a node to read the real fod press status reported by userspace. This is necessary for some fingerprint.goodix_fod.default.so hwmodules. Change-Id: Ieef5973f8f91e298e57a19b89b9cb7d49563e5a4 Signed-off-by: Arian <arian.kulmer@web.de> |
||
|
Arian
|
c68242dc7c |
input: touchscreen: Add xiaomi touch driver as common user space interface
Change-Id: I29cd2712b0d3011f7f83742b40c1f7c4d4f6612d Signed-off-by: Arian <arian.kulmer@web.de> |
||
|
Michael Bestas
|
4450b3fd20 |
Merge branch 'android12-5.10-lts' of https://android.googlesource.com/kernel/common into android13-5.10-waipio
* 'android12-5.10-lts' of https://android.googlesource.com/kernel/common: Revert "genirq: Export affinity setter for modules" Revert "genirq: Provide new interfaces for affinity hints" Revert "i40e: Use irq_update_affinity_hint()" Revert "i40e: fix IRQ freeing in i40e_vsi_request_irq_msix error path" Revert "qed: Don't collect too many protection override GRC elements" Linux 5.10.245 mm/hugetlb: fix folio is still mapped when deleted i40e: fix validation of VF state in get resources i40e: fix idx validation in config queues msg i40e: add validation for ring_len param i40e: increase max descriptors for XL710 mm/migrate_device: don't add folio to be freed to LRU in migrate_device_finalize() fbcon: Fix OOB access in font allocation fbcon: fix integer overflow in fbcon_do_set_font tracing: dynevent: Add a missing lockdown check on dynevent i40e: add mask to apply valid bits for itr_idx i40e: add max boundary check for VF filters i40e: fix input validation logic for action_meta i40e: fix idx validation in i40e_validate_queue_map crypto: af_alg - Fix incorrect boolean values in af_alg_ctx drm/gma500: Fix null dereference in hdmi teardown selftests: fib_nexthops: Fix creation of non-FDB nexthops nexthop: Forbid FDB status change while nexthop is in a group nexthop: Emit a notification when a single nexthop is replaced nexthop: Emit a notification when a nexthop is added rtnetlink: Add RTNH_F_TRAP flag nexthop: Pass extack to nexthop notifier bnxt_en: correct offset handling for IPv6 destination address can: peak_usb: fix shift-out-of-bounds issue can: mcba_usb: populate ndo_change_mtu() to prevent buffer overflow can: sun4i_can: populate ndo_change_mtu() to prevent buffer overflow can: hi311x: populate ndo_change_mtu() to prevent buffer overflow can: rcar_can: rcar_can_resume(): fix s2ram with PSCI cpufreq: Initialize cpufreq-based invariance before subsys arm64: dts: imx8mp: Correct thermal sensor index IB/mlx5: Fix obj_type mismatch for SRQ event subscriptions usb: core: Add 0x prefix to quirks debug output ALSA: usb-audio: Fix build with CONFIG_INPUT=n ALSA: usb-audio: Convert comma to semicolon ALSA: usb-audio: Add mixer quirk for Sony DualSense PS5 ALSA: usb-audio: Remove unneeded wmb() in mixer_quirks ALSA: usb-audio: Simplify NULL comparison in mixer_quirks ALSA: usb-audio: Avoid multiple assignments in mixer_quirks ALSA: usb-audio: Drop unnecessary parentheses in mixer_quirks ALSA: usb-audio: Fix block comments in mixer_quirks mptcp: propagate shutdown to subflows when possible btrfs: tree-checker: fix the incorrect inode ref size check net: rfkill: gpio: Fix crash due to dereferencering uninitialized pointer net: rfkill: gpio: add DT support phy: ti: omap-usb2: fix device leak at unbind phy: Use device_get_match_data() phy: broadcom: ns-usb3: fix Wvoid-pointer-to-enum-cast warning phy: phy-bcm-ns-usb3: drop support for deprecated DT binding phy: ti: convert to devm_platform_ioremap_resource(_byname) phy: broadcom: convert to devm_platform_ioremap_resource(_byname) xhci: dbc: Fix full DbC transfer ring after several reconnects xhci: dbc: decouple endpoint allocation from initialization USB: gadget: dummy-hcd: Fix locking bug in RT-enabled kernels usb: gadget: dummy_hcd: remove usage of list iterator past the loop body serial: sc16is7xx: fix bug in flow control levels init crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg drm: bridge: cdns-mhdp8546: Fix missing mutex unlock on error path ASoC: SOF: Intel: hda-stream: Fix incorrect variable used in error message ASoC: wm8974: Correct PLL rate rounding ASoC: wm8940: Correct typo in control name rds: ib: Increment i_fastreg_wrs before bailing out KVM: SVM: Sync TPR from LAPIC into VMCB::V_TPR even if AVIC is active mmc: mvsdio: Fix dma_unmap_sg() nents value power: supply: bq27xxx: restrict no-battery detection to bq27000 power: supply: bq27xxx: fix error return in case of no bq27000 hdq battery nilfs2: fix CFI failure when accessing /sys/fs/nilfs2/features/* cnic: Fix use-after-free bugs in cnic_delete_task net: liquidio: fix overflow in octeon_init_instr_queue() Revert "net/mlx5e: Update and set Xon/Xoff upon port speed set" tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect(). i40e: remove redundant memory barrier when cleaning Tx descs net: natsemi: fix `rx_dropped` double accounting on `netif_rx()` failure qed: Don't collect too many protection override GRC elements um: virtio_uml: Fix use-after-free after put_device in probe cgroup: split cgroup_destroy_wq into 3 workqueues pcmcia: omap_cf: Mark driver struct with __refdata to prevent section mismatch wifi: mac80211: fix incorrect type for ret ALSA: firewire-motu: drop EPOLLOUT from poll return values as write is not supported mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory drm/i915/power: fix size for for_each_set_bit() in abox iteration soc: qcom: mdt_loader: Deal with zero e_shentsize phy: ti-pipe3: fix device leak at unbind dmaengine: qcom: bam_dma: Fix DT error handling for num-channels/ees dmaengine: ti: edma: Fix memory allocation size for queue_priority_map can: j1939: j1939_local_ecu_get(): undo increment when j1939_local_ecu_get() fails can: j1939: j1939_sk_bind(): call j1939_priv_put() immediately when j1939_local_ecu_get() failed i40e: fix IRQ freeing in i40e_vsi_request_irq_msix error path i40e: Use irq_update_affinity_hint() genirq: Provide new interfaces for affinity hints genirq: Export affinity setter for modules genirq/affinity: Add irq_update_affinity_desc() igb: fix link test skipping when interface is admin down tunnels: reset the GSO metadata before reusing the skb net: fec: Fix possible NPD in fec_enet_phy_reset_after_clk_enable() USB: serial: option: add Telit Cinterion LE910C4-WWX new compositions USB: serial: option: add Telit Cinterion FN990A w/audio compositions tty: hvc_console: Call hvc_kick in hvc_write unconditionally Input: i8042 - add TUXEDO InfinityBook Pro Gen10 AMD to i8042 quirk table mtd: nand: raw: atmel: Respect tAR, tCLR in read setup timing mtd: nand: raw: atmel: Fix comment in timings preparation mtd: rawnand: stm32_fmc2: avoid overlapping mappings on ECC buffer mtd: rawnand: stm32_fmc2: Fix dma_map_sg error check mm/khugepaged: fix the address passed to notifier on testing young fuse: prevent overflow in copy_file_range return value fuse: check if copy_file_range() returns larger than requested size mtd: rawnand: stm32_fmc2: fix ECC overwrite ocfs2: fix recursive semaphore deadlock in fiemap call compiler-clang.h: define __SANITIZE_*__ macros only when undefined EDAC/altera: Delete an inappropriate dma_free_coherent() call overflow: Allow mixed type arguments compiler.h: drop fallback overflow checkers overflow: Correct check_shl_overflow() comment tcp_bpf: Call sk_msg_free() when tcp_bpf_send_verdict() fails to allocate psock->cork. NFSv4/flexfiles: Fix layout merge mirror check. tracing: Fix tracing_marker may trigger page fault during preempt_disable NFSv4: Clear the NFS_CAP_XATTR flag if not supported by the server NFSv4: Don't clear capabilities that won't be reset flexfiles/pNFS: fix NULL checks on result of ff_layout_choose_ds_for_read mtd: Add check for devm_kcalloc() net: Fix null-ptr-deref by sock_lock_init_class_and_name() and rmmod. media: i2c: imx214: Fix link frequency validation media: mtk-vcodec: venc: avoid -Wenum-compare-conditional warning mptcp: pm: kernel: flush: do not reset ADD_ADDR limit Linux 5.10.244 x86/vmscape: Add old Intel CPUs to affected list x86/vmscape: Warn when STIBP is disabled with SMT x86/bugs: Move cpu_bugs_smt_update() down x86/vmscape: Enable the mitigation x86/vmscape: Add conditional IBPB mitigation x86/vmscape: Enumerate VMSCAPE bug Documentation/hw-vuln: Add VMSCAPE documentation Change-Id: I9ba23937cd301392516e1c3fe7ad43dbebc1115e |
||
|
Michael Bestas
|
3283efc9f2 |
Merge tag 'ASB-2025-10-06_12-5.10' of https://android.googlesource.com/kernel/common into android13-5.10-waipio
https://source.android.com/docs/security/bulletin/2025-10-01 * tag 'ASB-2025-10-06_12-5.10' of https://android.googlesource.com/kernel/common: BACKPORT: mm/userfaultfd: fix uninitialized output field for -EAGAIN race BACKPORT: FROMGIT: selinux: enable per-file labeling for functionfs UPSTREAM: vsock: Do not allow binding to VMADDR_PORT_ANY BACKPORT: FROMGIT: f2fs: add reserved nodes for privileged users FROMGIT: f2fs: fix condition in __allow_reserved_blocks() Revert "e1000e: fix heap overflow in e1000_set_eeprom" Revert "wifi: cw1200: cap SSID length in cw1200_do_join()" Revert "wifi: libertas: cap SSID len in lbs_associate()" Linux 5.10.243 dmaengine: mediatek: Fix a flag reuse error in mtk_cqdma_tx_status() cifs: fix integer overflow in match_server() clk: qcom: gdsc: Set retain_ff before moving to HW CTRL spi: spi-fsl-lpspi: Reset FIFO and disable module on transfer abort spi: spi-fsl-lpspi: Set correct chip-select polarity bit spi: spi-fsl-lpspi: Fix transmissions when using CONT pcmcia: Add error handling for add_interval() in do_validate_mem() ALSA: hda/hdmi: Add pin fix for another HP EliteDesk 800 G4 model net: phy: microchip: force IRQ polling mode for lan88xx net: phy: microchip: remove the use of .ack_interrupt() net: phy: microchip: implement generic .handle_interrupt() callback randstruct: gcc-plugin: Fix attribute addition randstruct: gcc-plugin: Remove bogus void member arm64: dts: marvell: uDPU: define pinctrl state for alarm LEDs vmxnet3: update MTU after device quiesce net: dsa: microchip: linearize skb for tail-tagging switches net: dsa: microchip: update tag_ksz masks for KSZ9477 family dmaengine: mediatek: Fix a possible deadlock error in mtk_cqdma_tx_status() ALSA: hda/realtek - Add new HP ZBook laptop with micmute led fixup gpio: pca953x: fix IRQ storm on system wake up iio: light: opt3001: fix deadlock due to concurrent flag access iio: chemical: pms7003: use aligned_s64 for timestamp KVM: x86: Take irqfds.lock when adding/deleting IRQ bypass producer cpufreq/sched: Explicitly synchronize limits_changed flag handling mm/slub: avoid accessing metadata when pointer is invalid in object_err() mm/khugepaged: fix ->anon_vma race e1000e: fix heap overflow in e1000_set_eeprom batman-adv: fix OOB read/write in network-coding decode scsi: lpfc: Fix buffer free/clear order in deferred receive path drm/amdgpu: drop hw access in non-DC audio fini wifi: mwifiex: Initialize the chan_stats array to zero pcmcia: Fix a NULL pointer dereference in __iodyn_find_io_region() ALSA: usb-audio: Add mute TLV for playback volumes on some devices ppp: fix memory leak in pad_compress_skb net: atm: fix memory leak in atm_register_sysfs when device_register fail ax25: properly unshare skbs in ax25_kiss_rcv() ipv4: Fix NULL vs error pointer check in inet_blackhole_dev_init() net: thunder_bgx: decrement cleanup index before use net: thunder_bgx: add a missing of_node_put wifi: libertas: cap SSID len in lbs_associate() wifi: cw1200: cap SSID length in cw1200_do_join() net: ethernet: mtk_eth_soc: fix tx vlan tag for llc packets i40e: Fix potential invalid access when MAC list is empty icmp: fix icmp_ndo_send address translation for reply direction mISDN: Fix memory leak in dsp_hwec_enable() xirc2ps_cs: fix register access when enabling FullDuplex Bluetooth: Fix use-after-free in l2cap_sock_cleanup_listen() netfilter: conntrack: helper: Replace -EEXIST by -EBUSY wifi: cfg80211: fix use-after-free in cmp_bss() arm64: dts: rockchip: Add vcc-supply to SPI flash on rk3399-pinebook-pro tee: fix NULL pointer dereference in tee_shm_put drm/amd/display: Don't warn when missing DCE encoder caps ANDROID: GKI: fix up crc issue caused by new .h inclusion Linux 5.10.242 xfs: do not propagate ENODATA disk errors into xattr code ASoC: Intel: sof_da7219_mx98360a: fail to initialize soundcard ASoC: Intel: sof_da7219_max98373: shrink platform_id below 20 characters ASoC: Intel: glk_rt5682_max98357a: shrink platform_id below 20 characters ASoC: Intel: sof_rt5682: shrink platform_id names below 20 characters ASoC: Intel: bxt_da7219_max98357a: shrink platform_id below 20 characters Revert "drm/dp: Change AUX DPCD probe address from DPCD_REV to LANE0_1_STATUS" HID: mcp2221: Handle reads greater than 60 bytes HID: mcp2221: Don't set bus speed on every transfer drm/nouveau/disp: Always accept linear modifier net: usb: qmi_wwan: add Telit Cinterion LE910C4-WWX new compositions dma/pool: Ensure DMA_DIRECT_REMAP allocations are decrypted Revert "drm/amdgpu: fix incorrect vm flags to map bo" HID: hid-ntrig: fix unable to handle page fault in ntrig_report_version() HID: wacom: Add a new Art Pen 2 HID: asus: fix UAF via HID_CLAIMED_INPUT validation KVM: x86: use array_index_nospec with indices that come from guest efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare sctp: initialize more fields in sctp_v6_from_sk() net: stmmac: xgmac: Do not enable RX FIFO Overflow interrupts net/mlx5e: Set local Xoff after FW update net/mlx5e: Update and set Xon/Xoff upon port speed set net/mlx5e: Update and set Xon/Xoff upon MTU set net: dlink: fix multicast stats being counted incorrectly atm: atmtcp: Prevent arbitrary write in atmtcp_recv_control(). Bluetooth: hci_event: Detect if HCI_EV_NUM_COMP_PKTS is unbalanced powerpc/kvm: Fix ifdef to remove build warning net: ipv4: fix regression in local-broadcast routes vhost/net: Protect ubufs with rcu read lock in vhost_net_ubuf_put() NFS: Fix a race when updating an existing write nfs: fold nfs_page_group_lock_subrequests into nfs_lock_and_join_requests x86/cpu/hygon: Add missing resctrl_cpu_detect() in bsp_init helper scsi: core: sysfs: Correct sysfs attributes access rights ftrace: Fix potential warning in trace_printk_seq during ftrace_dump pinctrl: STMFX: add missing HAS_IOMEM dependency Revert "i3c: add missing include to internal header" Revert "PCI/ACPI: Fix runtime PM ref imbalance on Hot-Plug Capable ports" Revert "media: venus: vdec: Clamp param smaller than 1fps and bigger than 240." Revert "media: dvb-frontends: w7090p: fix null-ptr-deref in w7090p_tuner_write_serpar and w7090p_tuner_read_serpar" Linux 5.10.241 alloc_fdtable(): change calling conventions. netfilter: nf_reject: don't leak dst refcount for loopback packets netfilter: nft_reject_inet: allow to use reject from inet ingress netfilter: nft_reject: unify reject init and dump into nft_reject s390/hypfs: Enable limited access during lockdown s390/hypfs: Avoid unnecessary ioctl registration in debugfs ALSA: usb-audio: Use correct sub-type for UAC3 feature unit validation net/sched: Remove unnecessary WARNING condition for empty child qdisc in htb_activate net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit ixgbe: xsk: resolve the negative overflow of budget in ixgbe_xmit_zc ipv6: sr: validate HMAC algorithm ID in seg6_hmac_info_add ALSA: usb-audio: Fix size validation in convert_chmap_v3() mlxsw: spectrum: Forward packets with an IPv4 link-local source IP iommu/amd: Avoid stack buffer overflow from kernel cmdline scsi: qla4xxx: Prevent a potential error pointer dereference RDMA/bnxt_re: Fix to initialize the PBL array cgroup/cpuset: Use static_branch_enable_cpuslocked() on cpusets_insane_config_key mm/page_alloc: detect allocation forbidden by cpuset and bail out early iio: light: as73211: Ensure buffer holes are zeroed tracing: Limit access to parser->buffer when trace_get_user failed tracing: Remove unneeded goto out logic iio: imu: inv_icm42600: change invalid data error to -EBUSY usb: xhci: Fix slot_id resource race conflict compiler: remove __ADDRESSABLE_ASM{_STR,}() again net: usbnet: Fix the wrong netif_carrier_on() call selftests: mptcp: pm: check flush doesn't reset limits gpio: rcar: Use raw_spinlock to protect register access usb: dwc3: core: remove lock of otg mode during gadget suspend/resume to avoid deadlock usb: dwc3: Remove DWC3 locking during gadget suspend/resume dm rq: don't queue request to blk-mq during DM suspend dm: rearrange core declarations for extended use from dm-zone.c uio_hv_generic: Fix another memory leak in error handling paths media: venus: vdec: Clamp param smaller than 1fps and bigger than 240. f2fs: fix to avoid out-of-boundary access in dnode page media: qcom: camss: cleanup media device allocated resource on error path drm/dp: Change AUX DPCD probe address from DPCD_REV to LANE0_1_STATUS drm/amd/display: Don't overclock DCE 6 by 15% media: venus: protect against spurious interrupts during probe media: venus: Add support for SSR trigger using fault injection media: venus: hfi: explicitly release IRQ during teardown media: venus: don't de-reference NULL pointers at IRQ time media: v4l2-ctrls: Don't reset handler's error in v4l2_ctrl_handler_free() media: v4l2-ctrls: always copy the controls on completion wifi: ath11k: fix dest ring-buffer corruption when ring is full asm-generic: Add memory barrier dma_mb() locking/barriers, kcsan: Support generic instrumentation pwm: mediatek: Fix duty and period setting pwm: mediatek: Handle hardware enable and clock enable separately pwm: mediatek: Implement .apply() callback platform/chrome: cros_ec: Unregister notifier in cros_ec_unregister() platform/chrome: cros_ec: remove unneeded label and if-condition platform/chrome: cros_ec: Use per-device lockdep key platform/chrome: cros_ec: Make cros_ec_unregister() return void ext4: fix hole length calculation overflow in non-extent inodes minmax: add umin(a, b) and umax(a, b) ACPI: processor: idle: Check acpi_fetch_acpi_dev() return value btrfs: populate otime when logging an inode item usb: musb: omap2430: fix device leak at unbind soc: qcom: mdt_loader: Ensure we don't read past the ELF header iio: adc: ad_sigma_delta: change to buffer predisable scsi: ufs: exynos: Fix programming of HCI_UTRL_NEXUS_TYPE ata: Fix SATA_MOBILE_LPM_POLICY description in Kconfig mm/ptdump: take the memory hotplug lock inside ptdump_walk_pgd() net/sched: ets: use old 'nbands' while purging unused classes net_sched: sch_ets: implement lockless ets_dump() net/sched: sch_ets: properly init all active DRR list handles NFS: Fix the setting of capabilities when automounting a new filesystem NFS: Create an nfs4_server_set_init_caps() function NFSv4: Fix nfs4_bitmap_copy_adjust() NFS: Don't set NFS_INO_REVAL_PAGECACHE in the inode cache validity scsi: pm80xx: Fix memory leak during rmmod scsi: lpfc: Fix link down processing to address NULL pointer dereference RDMA/rxe: Return CQE error if invalid lkey was supplied drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume dma-buf: insert memory barrier before updating num_fences selftests/memfd: add test for mapping write-sealed memfd read-only mm: reinstate ability to map write-sealed memfd mappings read-only mm: update memfd seal write check to include F_SEAL_WRITE mm: drop the assumption that VM_SHARED always implies writable dpaa2-eth: Fix device reference count leak in MAC endpoint handling dpaa2-eth: retry the probe when the MAC is not yet discovered on the bus dpaa2-mac: export MAC counters even when in TYPE_FIXED dpaa2-mac: split up initializing the MAC object from connecting to it ARM: 9448/1: Use an absolute path to unified.h in KBUILD_AFLAGS btrfs: fix deadlock when cloning inline extents and using qgroups block: don't call rq_qos_ops->done_bio if the bio isn't tracked ptp: Fix possible memory leak in ptp_clock_register() comedi: Fail COMEDI_INSNLIST ioctl if n_insns is too large cdc-acm: fix race between initial clearing halt and open USB: cdc-acm: do not log successful probe on later errors hv_netvsc: Fix panic during namespace deletion with VF block: Make REQ_OP_ZONE_FINISH a write operation PCI/ACPI: Fix runtime PM ref imbalance on Hot-Plug Capable ports usb: typec: fusb302: cache PD RX state net: usbnet: Avoid potential RCU stall on LINK_CHANGE event ALSA: scarlett2: Add retry on -EPROTO from scarlett2_usb_tx() x86/fpu: Delay instruction pointer fixup until after warning mm/zsmalloc: do not pass __GFP_MOVABLE if CONFIG_COMPACTION=n mm/zsmalloc.c: convert to use kmem_cache_zalloc in cache_alloc_zspage() drm/sched: Remove optimization that causes hang when killing dependent jobs ice: Fix a null pointer dereference in ice_copy_and_init_pkg() pmdomain: governor: Consider CPU latency tolerance from pm_domain_cpu_gov tracing: Add down_write(trace_event_sem) when adding trace event smb: client: fix use-after-free in crypt_message when using async crypto usb: hub: Don't try to recover devices lost during warm reset. usb: hub: avoid warm port reset during USB3 disconnect x86/mce/amd: Add default names for MCA banks and blocks iio: hid-sensor-prox: Fix incorrect OFFSET calculation f2fs: fix to do sanity check on ino and xnid kbuild: userprogs: use correct linker when mixing clang and GNU ld usb: dwc3: Ignore late xferNotReady event to prevent halt timeout USB: storage: Ignore driver CD mode for Realtek multi-mode Wi-Fi dongles usb: storage: realtek_cr: Use correct byte order for bcs->Residue USB: storage: Add unusual-devs entry for Novatek NTK96550-based camera usb: renesas-xhci: Fix External ROM access timeouts usb: quirks: Add DELAY_INIT quick for another SanDisk 3.2Gen1 Flash Drive most: core: Drop device reference after usage in get_channel() iio: proximity: isl29501: fix buffered read on big-endian systems iio: pressure: bmp280: Use IS_ERR() in bmp280_common_probe() ftrace: Also allocate and copy hash for reading of filter files fpga: zynq_fpga: Fix the wrong usage of dma_map_sgtable() use uniform permission checks for all mount propagation changes move_mount: allow to add a mount into an existing group fs/buffer: fix use-after-free when call bh_read() helper selftests: mptcp: connect: also cover alt modes drm/amd/display: Fill display clock and vblank time in dce110_fill_display_configs drm/amd/display: Find first CRTC and its line time in dce110_fill_display_configs drm/amd/display: Fix DP audio DTO1 clock source on DCE 6. drm/amd/display: Fix fractional fb divider in set_pixel_clock_v3 ALSA: hda/realtek: Add support for HP EliteBook x360 830 G6 and EliteBook 830 G6 squashfs: fix memory leak in squashfs_fill_super mmc: sdhci-pci-gli: GL9763e: Rename the gli_set_gl9763e() for consistency memstick: Fix deadlock by moving removing flag earlier sch_htb: make htb_deactivate() idempotent codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() sch_qfq: make qfq_qlen_notify() idempotent sch_hfsc: make hfsc_qlen_notify() idempotent sch_drr: make drr_qlen_notify() idempotent sch_htb: make htb_qlen_notify() idempotent net, hsr: reject HSR frame if skb can't hold tag drm/amd: Restore cached power limit during resume media: venus: Add a check for packet size after reading from shared memory media: ov2659: Fix memory leaks in ov2659_probe() media: rainshadow-cec: fix TOCTOU race condition in rain_interrupt() media: usbtv: Lock resolution while streaming media: imx: fix a potential memory leak in imx_media_csc_scaler_device_init() media: hi556: correct the test pattern configuration media: gspca: Add bounds checking to firmware parser soc/tegra: pmc: Ensure power-domains are in a known state jbd2: prevent softlockup in jbd2_log_do_checkpoint() PCI: endpoint: Fix configfs group removal on driver teardown PCI: endpoint: Fix configfs group list head handling mtd: rawnand: fsmc: Add missing check after DMA map hwmon: (gsc-hwmon) fix fan pwm setpoint show functions pwm: imx-tpm: Reset counter if CMOD is 0 wifi: ath11k: fix source ring-buffer corruption wifi: brcmsmac: Remove const from tbl_ptr parameter in wlc_lcnphy_common_read_table() zynq_fpga: use sgtable-based scatterlist wrappers ata: libata-scsi: Fix ata_to_sense_error() status handling ext4: fix reserved gdt blocks handling in fsmap ext4: fix fsmap end of range reporting with bigalloc ext4: check fast symlink for ea_inode correctly Revert "vgacon: Add check for vc_origin address range in vgacon_scroll()" lib/crypto: mips/chacha: Fix clang build and remove unneeded byteswap vt: defkeymap: Map keycodes above 127 to K_HOLE vt: keyboard: Don't process Unicode characters in K_OFF mode bus: mhi: host: Fix endianness of BHI vector table usb: dwc3: meson-g12a: fix device leaks at unbind usb: gadget: udc: renesas_usb3: fix device leak at unbind usb: atm: cxacru: Merge cxacru_upload_firmware() into cxacru_heavy_init() m68k: Fix lost column on framebuffer debug console cpufreq: armada-8k: Fix off by one in armada_8k_cpufreq_free_table() serial: 8250: fix panic due to PSLVERR media: uvcvideo: Do not mark valid metadata as invalid media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format() mm/kmemleak: avoid deadlock by moving pr_warn() outside kmemleak_lock mm/kmemleak: avoid soft lockup in __kmemleak_do_cleanup() parisc: Makefile: fix a typo in palo.conf btrfs: fix log tree replay failure due to file with 0 links and extents thunderbolt: Fix copy+paste error in match_service_id() comedi: fix race between polling and detaching usb: typec: ucsi: Update power_supply on power role change misc: rtsx: usb: Ensure mmc child device is active when card is present usb: core: config: Prevent OOB read in SS endpoint companion parsing drm/amdgpu: fix incorrect vm flags to map bo ASoC: fsl_sai: replace regmap_write with regmap_update_bits ASoC: soc-dai.c: add missing flag check at snd_soc_pcm_dai_probe() scsi: lpfc: Remove redundant assignment to avoid memory leak rtc: ds1307: remove clear of oscillator stop flag (OSF) in probe pNFS: Fix uninited ptr deref in block/scsi layout pNFS: Handle RPC size limit for layoutcommits pNFS: Fix disk addr range check in block/scsi layout pNFS: Fix stripe mapping in block/scsi layout block: avoid possible overflow for chunk_sectors check in blk_stack_limits() net: phy: smsc: add proper reset flags for LAN8710A ipmi: Fix strcpy source and destination the same kconfig: lxdialog: fix 'space' to (de)select options kconfig: gconf: fix potential memory leak in renderer_edited() kconfig: gconf: avoid hardcoding model2 in on_treeview2_cursor_changed() ipmi: Use dev_warn_ratelimited() for incorrect message warnings scsi: aacraid: Stop using PCI_IRQ_AFFINITY scsi: Fix sas_user_scan() to handle wildcard and multi-channel scans kconfig: nconf: Ensure null termination where strncpy is used kconfig: lxdialog: replace strcpy() with strncpy() in inputbox.c i2c: Force DLL0945 touchpad i2c freq to 100khz dm-mpath: don't print the "loaded" message if registering fails i3c: don't fail if GETHDRCAP is unsupported rtc: ds1307: handle oscillator stop flag (OSF) for ds1341 i3c: add missing include to internal header md: dm-zoned-target: Initialize return variable r to avoid uninitialized use media: uvcvideo: Fix bandwidth issue for Alcor camera media: dvb-frontends: w7090p: fix null-ptr-deref in w7090p_tuner_write_serpar and w7090p_tuner_read_serpar media: dvb-frontends: dib7090p: fix null-ptr-deref in dib7090p_rw_on_apb() media: usb: hdpvr: disable zero-length read messages media: tc358743: Increase FIFO trigger level to 374 media: tc358743: Return an appropriate colorspace from tc358743_set_fmt media: tc358743: Check I2C succeeded during probe pinctrl: stm32: Manage irq affinity settings scsi: mpt3sas: Correctly handle ATA device errors scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure RDMA/core: reduce stack using in nldev_stat_get_doit() RDMA: hfi1: fix possible divide-by-zero in find_hw_thread_mask() leds: leds-lp50xx: Handle reg to get correct multi_index MIPS: Don't crash in stack_top() for tasks without ABI or vDSO jfs: upper bound check of tree index in dbAllocAG jfs: Regular file corruption check jfs: truncate good inode pages when hard link is 0 scsi: bfa: Double-free fix MIPS: vpe-mt: add missing prototypes for vpe_{alloc,start,stop,free} watchdog: dw_wdt: Fix default timeout fs/orangefs: use snprintf() instead of sprintf() scsi: libiscsi: Initialize iscsi_conn->dd_data only if memory is allocated ext4: do not BUG when INLINE_DATA_FL lacks system.data xattr cifs: Fix calling CIFSFindFirst() for root path without msearch vhost: fail early when __vhost_add_used() fails net: dsa: b53: fix IP_MULTICAST_CTRL on BCM5325 uapi: in6: restore visibility of most IPv6 socket options drm/ttm: Should to return the evict error net: ncsi: Fix buffer overflow in fetching version id wifi: rtlwifi: fix possible skb memory leak in _rtl_pci_init_one_rxdesc() net: dsa: b53: prevent SWITCH_CTRL access on BCM5325 net: dsa: b53: prevent GMII_PORT_OVERRIDE_CTRL access on BCM5325 net: dsa: b53: fix b53_imp_vlan_setup for BCM5325 gve: Return error for unknown admin queue command net: vlan: Replace BUG() with WARN_ON_ONCE() in vlan_dev_* stubs wifi: iwlegacy: Check rate_idx range after addition netmem: fix skb_frag_address_safe with unreadable skbs wifi: rtlwifi: fix possible skb memory leak in `_rtl_pci_rx_interrupt()`. drm/amd/display: Fix 'failed to blank crtc!' wifi: iwlwifi: fw: Fix possible memory leak in iwl_fw_dbg_collect wifi: iwlwifi: dvm: fix potential overflow in rs_fill_link_cmd() drm/amd/display: Separate set_gsl from set_gsl_source_select net: fec: allow disable coalescing (powerpc/512) Fix possible `dma_unmap_single()` on uninitialized pointer s390/stp: Remove udelay from stp_sync_clock() wifi: iwlwifi: mvm: fix scan request validation net: thunderx: Fix format-truncation warning in bgx_acpi_match_id() net: ipv4: fix incorrect MTU in broadcast routes wifi: cfg80211: Fix interface type validation rcu: Protect ->defer_qs_iw_pending from data race net: ag71xx: Add missing check after DMA map et131x: Add missing check after DMA map be2net: Use correct byte order and format string for TCP seq and ack_seq s390/time: Use monotonic clock in get_cycles() wifi: cfg80211: reject HTC bit for management frames ktest.pl: Prevent recursion of default variable options xen/netfront: Fix TX response spurious interrupts ASoC: codecs: rt5640: Retry DEVICE_ID verification iio: adc: ad7768-1: Ensure SYNC_IN pulse minimum timing requirement ALSA: usb-audio: Avoid precedence issues in mixer_quirks macros ALSA: pcm: Rewrite recalculate_boundary() to avoid costly loop ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control platform/chrome: cros_ec_typec: Defer probe on missing EC parent platform/x86: thinkpad_acpi: Handle KCOV __init vs inline mismatches pm: cpupower: Fix the snapshot-order of tsc,mperf, clock in mperf_stop() usb: core: usb_submit_urb: downgrade type check usb: typec: intel_pmc_mux: Defer probe if SCU IPC isn't present ASoC: core: Check for rtd == NULL in snd_soc_remove_pcm_runtime() ALSA: intel8x0: Fix incorrect codec index usage in mixer for ICH4 ASoC: hdac_hdmi: Rate limit logging on connection and disconnection x86/bugs: Avoid warning when overriding return thunk mmc: rtsx_usb_sdmmc: Fix error-path in sd_set_power_mode() reset: brcmstb: Enable reset drivers for ARCH_BCM2835 ACPI: APEI: GHES: add TAINT_MACHINE_CHECK on GHES panic path mmc: sdhci-msm: Ensure SD card power isn't ON when card removed ACPI: processor: fix acpi_object initialization PM: sleep: console: Fix the black screen issue thermal: sysfs: Return ENODATA instead of EAGAIN for reads PM: runtime: Clear power.needs_force_resume in pm_runtime_reinit() selftests: tracing: Use mutex_unlock for testing glob filter ARM: tegra: Use I/O memcpy to write to IRAM gpio: tps65912: check the return value of regmap_update_bits() ASoC: soc-dapm: set bias_level if snd_soc_dapm_set_bias_level() was successed PM / devfreq: governor: Replace sscanf() with kstrtoul() in set_freq_store() ARM: rockchip: fix kernel hang during smp initialization cpufreq: Exit governor when failed to start old governor gpio: wcd934x: check the return value of regmap_update_bits() usb: xhci: Avoid showing errors during surprise removal usb: xhci: Set avg_trb_len = 8 for EP0 during Address Device Command usb: xhci: Avoid showing warnings for dying controller usb: typec: ucsi: psy: Set current max to 100mA for BC 1.2 and Default selftests/futex: Define SYS_futex on 32-bit architectures with 64-bit time_t cpufreq: CPPC: Mark driver with NEED_UPDATE_LIMITS flag usb: xhci: print xhci->xhc_state when queue_command failed securityfs: don't pin dentries twice, once is enough... ata: libata-sata: Disallow changing LPM state if not supported better lockdep annotations for simple_recursive_removal() hfs: fix not erasing deleted b-tree node issue drbd: add missing kref_get in handle_write_conflicts udf: Verify partition map count arm64: Handle KCOV __init vs inline mismatches hfsplus: don't use BUG_ON() in hfsplus_create_attributes_file() hfsplus: fix slab-out-of-bounds read in hfsplus_uni2asc() hfsplus: fix slab-out-of-bounds in hfsplus_bnode_read() hfs: fix slab-out-of-bounds in hfs_bnode_read() cpuidle: governors: menu: Avoid using invalid recent intervals data intel_idle: Allow loading ACPI tables for any family sctp: linearize cloned gso packets in sctp_rcv netfilter: ctnetlink: fix refcount leak on table dump udp: also consider secpath when evaluating ipsec use for checksumming ACPI: processor: perflib: Move problematic pr->performance check ACPI: processor: perflib: Fix initial _PPC limit application Documentation: ACPI: Fix parent device references fs: Prevent file descriptor table allocations exceeding INT_MAX sunvdc: Balance device refcount in vdc_port_mpgroup_check NFSD: detect mismatch of file handle and delegation stateid in OPEN op nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() net: dpaa: fix device leak when querying time stamp info net: gianfar: fix device leak when querying time stamp info netlink: avoid infinite retry looping in netlink_unicast() ALSA: usb-audio: Validate UAC3 cluster segment descriptors ALSA: usb-audio: Validate UAC3 power domain descriptors, too io_uring: don't use int for ABI usb: gadget : fix use-after-free in composite_dev_cleanup() mm/hmm: move pmd_to_hmm_pfn_flags() to the respective #ifdeffery MIPS: mm: tlb-r4k: Uniquify TLB entries on init USB: serial: option: add Foxconn T99W709 vsock: Do not allow binding to VMADDR_PORT_ANY net/packet: fix a race in packet_set_ring() and packet_notifier() perf/core: Prevent VMA split of buffer mappings perf/core: Exit early on perf_mmap() fail perf/core: Don't leak AUX buffer refcount on allocation failure pptp: fix pptp_xmit() error path smb: client: let recv_done() cleanup before notifying the callers. ALSA: hda/ca0132: Fix missing error handling in ca0132_alt_select_out() benet: fix BUG when creating VFs net: drop UFO packets in udp_rcv_segment() ipv6: reject malicious packets in ipv6_gso_segment() pptp: ensure minimal skb length in pptp_xmit() phy: mscc: Fix parsing of unicast frames netpoll: prevent hanging NAPI when netcons gets enabled NFS: Fixup allocation flags for nfsiod's __GFP_NORETRY XArray: Add calls to might_alloc() mm: extract might_alloc() debug check NFSv4.2: another fix for listxattr NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() pNFS/flexfiles: don't attempt pnfs on fatal DS errors pNFS/flexfiles: Avoid spurious layout returns in ff_layout_choose_ds_for_read PCI: pnv_php: Fix surprise plug detection and recovery powerpc/eeh: Make EEH driver device hotplug safe powerpc/eeh: Rely on dev->link_active_reporting powerpc/eeh: Export eeh_unfreeze_pe() PCI: pnv_php: Work around switches with broken presence detection PCI: pnv_php: Clean up allocated IRQs on unplug kconfig: qconf: fix ConfigList::updateListAllforAll() scsi: ufs: core: Use link recovery when h8 exit fails during runtime resume f2fs: fix to avoid out-of-boundary access in devs.path f2fs: fix to avoid panic in f2fs_evict_inode f2fs: fix to avoid UAF in f2fs_sync_inode_meta() f2fs: doc: fix wrong quota mount option description rtc: rv3028: fix incorrect maximum clock rate handling rtc: pcf8563: fix incorrect maximum clock rate handling rtc: pcf85063: fix incorrect maximum clock rate handling rtc: hym8563: fix incorrect maximum clock rate handling rtc: ds1307: fix incorrect maximum clock rate handling module: Restore the moduleparam prefix length check apparmor: ensure WB_HISTORY_SIZE value is a power of 2 bpf: Check flow_dissector ctx accesses are aligned vhost-scsi: Fix log flooding with target does not exist errors mtd: rawnand: atmel: set pmecc data setup time mtd: rawnand: atmel: Fix dma_mapping_error() address jfs: fix metapage reference count leak in dbAllocCtl fbdev: imxfb: Check fb_add_videomode to prevent null-ptr-deref crypto: qat - fix seq_file position update in adf_ring_next() sh: Do not use hyphen in exported variable name dmaengine: nbpfaxi: Add missing check after DMA map dmaengine: mv_xor: Fix missing check after DMA map and missing unmap fs/orangefs: Allow 2 more characters in do_c_string() soundwire: stream: restore params when prepare ports fail crypto: img-hash - Fix dma_unmap_sg() nents value hwrng: mtk - handle devm_pm_runtime_enable errors watchdog: ziirave_wdt: check record length in ziirave_firm_verify() scsi: isci: Fix dma_unmap_sg() nents value scsi: mvsas: Fix dma_unmap_sg() nents value scsi: ibmvscsi_tgt: Fix dma_unmap_sg() nents value clk: sunxi-ng: v3s: Fix de clock definition perf tests bp_account: Fix leaked file descriptor crypto: ccp - Fix crash when rebind ccp device for ccp.ko crypto: inside-secure - Fix `dma_unmap_sg()` nents value pinctrl: sunxi: Fix memory leak on krealloc failure power: supply: max14577: Handle NULL pdata when CONFIG_OF is not set clk: davinci: Add NULL check in davinci_lpsc_clk_register() mtd: fix possible integer overflow in erase_xfer() crypto: marvell/cesa - Fix engine load inaccuracy PCI: rockchip-host: Fix "Unexpected Completion" log message vrf: Drop existing dst reference in vrf_ip6_input_dst selftests: rtnetlink.sh: remove esp4_offload after test netfilter: xt_nfacct: don't assume acct name is null-terminated can: kvaser_usb: Assign netdev.dev_port based on device channel index can: kvaser_pciefd: Store device channel index wifi: brcmfmac: fix P2P discovery failure in P2P peer due to missing P2P IE Reapply "wifi: mac80211: Update skb's control block key in ieee80211_tx_dequeue()" wifi: mac80211: Check 802.11 encaps offloading in ieee80211_tx_h_select_key() mwl8k: Add missing check after DMA map wifi: rtl8xxxu: Fix RX skb size for aggregation disabled xen/gntdev: remove struct gntdev_copy_batch from stack net_sched: act_ctinfo: use atomic64_t for three counters net/sched: Restrict conditions for adding duplicating netems to qdisc tree arch: powerpc: defconfig: Drop obsolete CONFIG_NET_CLS_TCINDEX netfilter: nf_tables: adjust lockdep assertions handling drm/amd/pm/powerplay/hwmgr/smu_helper: fix order of mask and value m68k: Don't unregister boot console needlessly tcp: fix tcp_ofo_queue() to avoid including too much DUP SACK range wifi: ath11k: clear initialized flag for deinit-ed srng lists iwlwifi: Add missing check for alloc_ordered_workqueue wifi: iwlwifi: Fix memory leak in iwl_mvm_init() wifi: rtl818x: Kill URBs before clearing tx status queue caif: reduce stack size, again bpftool: Fix memory leak in dump_xx_nlmsg on realloc failure bpf, ktls: Fix data corruption when using bpf_msg_pop_data() in ktls drm/rockchip: cleanup fb when drm_gem_fb_afbc_init failed selftests/tracing: Fix false failure of subsystem event test staging: nvec: Fix incorrect null termination of battery manufacturer samples: mei: Fix building on musl libc cpufreq: Init policy->rwsem before it may be possibly used cpufreq: Initialize cpufreq-based frequency-invariance later arm64: dts: imx8mm-beacon: Fix HS400 USDHC clock speed ARM: dts: imx6ul-kontron-bl-common: Fix RTS polarity for RS485 interface usb: early: xhci-dbc: Fix early_ioremap leak Revert "vmci: Prevent the dispatching of uninitialized payloads" pps: fix poll support vmci: Prevent the dispatching of uninitialized payloads staging: fbtft: fix potential memory leak in fbtft_framebuffer_alloc() ARM: dts: vfxxx: Correctly use two tuples for timer address ASoC: ops: dynamically allocate struct snd_ctl_elem_value ASoC: soc-dai: tidyup return value of snd_soc_xlate_tdm_slot_mask() hfsplus: remove mutex_lock check in hfsplus_free_extents fs_context: fix parameter name in infofc() macro ASoC: Intel: fix SND_SOC_SOF dependencies ethernet: intel: fix building with large NR_CPUS usb: phy: mxs: disconnect line when USB charger is attached usb: chipidea: add USB PHY event ALSA: hda: Add missing NVIDIA HDA codec IDs comedi: comedi_test: Fix possible deletion of uninitialized timers x86/bugs: Fix use of possibly uninit value in amd_check_tsa_microcode() nilfs2: reject invalid file types when reading inodes gve: Fix stuck TX queue for DQ queue format e1000e: ignore uninitialized checksum word on tgp e1000e: disregard NVM checksum on tgp when valid checksum bit is not set ALSA: hda/realtek - Add mute LED support for HP Pavilion 15-eg0xxx i2c: qup: jump out of the loop in case of timeout net: hns3: fixed vf get max channels bug net: hns3: refine the struct hane3_tc_info net/sched: sch_qfq: Avoid triggering might_sleep in atomic context in qfq_delete_class net: appletalk: Fix use-after-free in AARP proxy probe net: appletalk: fix kerneldoc warnings i40e: report VF tx_dropped with tx_errors instead of tx_discards i40e: Add rx_missed_errors for buffer exhaustion RDMA/core: Rate limit GID cache warning messages regulator: core: fix NULL dereference on unbind due to stale coupling data xhci: Disable stream for xHC controller with XHCI_BROKEN_STREAMS virtio-net: ensure the received length does not exceed allocated size mm/vmalloc: leave lazy MMU mode on PTE mapping error ASoC: fsl_sai: Force a software reset when starting in consumer mode usb: dwc3: qcom: Don't leave BCR asserted usb: musb: fix gadget state on disconnect usb: musb: Add and use inline functions musb_{get,set}_state usb: hub: Fix flushing of delayed work used for post resume purposes usb: hub: Fix flushing and scheduling of delayed work that tunes runtime pm usb: hub: fix detection of high tier USB3 devices behind suspended hubs net/sched: Return NULL when htb_lookup_leaf encounters an empty rbtree net: vlan: fix VLAN 0 refcount imbalance of toggling filtering during runtime Bluetooth: L2CAP: Fix attempting to adjust outgoing MTU Bluetooth: SMP: Fix using HCI_ERROR_REMOTE_USER_TERM on timeout Bluetooth: SMP: If an unallowed command is received consider it a failure Bluetooth: Fix null-ptr-deref in l2cap_sock_resume_cb() usb: net: sierra: check for no status endpoint hwmon: (corsair-cpro) Validate the size of the received input buffer rpl: Fix use-after-free in rpl_do_srh_inline(). net/sched: sch_qfq: Fix race condition on qfq_aggregate net: emaclite: Fix missing pointer increment in aligned_read() comedi: Fix initialization of data for instructions that write to subdevice comedi: Fix use of uninitialized data in insn_rw_emulate_bits() comedi: Fix some signed shift left operations comedi: das6402: Fix bit shift out of bounds comedi: das16m1: Fix bit shift out of bounds comedi: aio_iiro_16: Fix bit shift out of bounds comedi: pcl812: Fix bit shift out of bounds iio: adc: stm32-adc: Fix race in installing chained IRQ handler iio: adc: max1363: Reorder mode_list[] entries iio: adc: max1363: Fix MAX1363_4X_CHANS/MAX1363_8X_CHANS[] soc: aspeed: lpc-snoop: Don't disable channels that aren't enabled soc: aspeed: lpc-snoop: Cleanup resources in stack-order mmc: sdhci_am654: Workaround for Errata i2312 mmc: sdhci-pci: Quirk for broken command queuing on Intel GLK-based Positivo models mmc: bcm2835: Fix dma_unmap_sg() nents value memstick: core: Zero initialize id_reg in h_memstick_read_dev_id() isofs: Verify inode mode when loading from disk dmaengine: nbpfaxi: Fix memory corruption in probe() af_packet: fix soft lockup issue caused by tpacket_snd() af_packet: fix the SO_SNDTIMEO constraint not effective on tpacked_snd() phonet/pep: Move call to pn_skb_get_dst_sockaddr() earlier in pep_sock_accept() HID: core: do not bypass hid_hw_raw_request HID: core: ensure __hid_request reserves the report ID as the first byte HID: core: ensure the allocated report buffer can contain the reserved report ID pch_uart: Fix dma_sync_sg_for_device() nents value Input: xpad - set correct controller type for Acer NGR200 thunderbolt: Fix bit masking in tb_dp_port_set_hops() i2c: stm32: fix the device used for the DMA map usb: gadget: configfs: Fix OOB read on empty string write USB: serial: ftdi_sio: add support for NDI EMGUIDE GEMINI USB: serial: option: add Foxconn T99W640 USB: serial: option: add Telit Cinterion FE910C04 (ECM) composition phy: tegra: xusb: Fix unbalanced regulator disable in UTMI PHY mode Conflicts: drivers/mmc/host/sdhci-msm.c drivers/soc/qcom/mdt_loader.c Change-Id: Ibd0c3241478d126b2744db7a07361717b132d9b3 |
||
|
Greg Kroah-Hartman
|
eaeaea6fdc |
Merge 5.10.245 into android12-5.10-lts
Changes in 5.10.245 mptcp: pm: kernel: flush: do not reset ADD_ADDR limit media: mtk-vcodec: venc: avoid -Wenum-compare-conditional warning media: i2c: imx214: Fix link frequency validation net: Fix null-ptr-deref by sock_lock_init_class_and_name() and rmmod. mtd: Add check for devm_kcalloc() flexfiles/pNFS: fix NULL checks on result of ff_layout_choose_ds_for_read NFSv4: Don't clear capabilities that won't be reset NFSv4: Clear the NFS_CAP_XATTR flag if not supported by the server tracing: Fix tracing_marker may trigger page fault during preempt_disable NFSv4/flexfiles: Fix layout merge mirror check. tcp_bpf: Call sk_msg_free() when tcp_bpf_send_verdict() fails to allocate psock->cork. overflow: Correct check_shl_overflow() comment compiler.h: drop fallback overflow checkers overflow: Allow mixed type arguments EDAC/altera: Delete an inappropriate dma_free_coherent() call compiler-clang.h: define __SANITIZE_*__ macros only when undefined ocfs2: fix recursive semaphore deadlock in fiemap call mtd: rawnand: stm32_fmc2: fix ECC overwrite fuse: check if copy_file_range() returns larger than requested size fuse: prevent overflow in copy_file_range return value mm/khugepaged: fix the address passed to notifier on testing young mtd: rawnand: stm32_fmc2: Fix dma_map_sg error check mtd: rawnand: stm32_fmc2: avoid overlapping mappings on ECC buffer mtd: nand: raw: atmel: Fix comment in timings preparation mtd: nand: raw: atmel: Respect tAR, tCLR in read setup timing Input: i8042 - add TUXEDO InfinityBook Pro Gen10 AMD to i8042 quirk table tty: hvc_console: Call hvc_kick in hvc_write unconditionally USB: serial: option: add Telit Cinterion FN990A w/audio compositions USB: serial: option: add Telit Cinterion LE910C4-WWX new compositions net: fec: Fix possible NPD in fec_enet_phy_reset_after_clk_enable() tunnels: reset the GSO metadata before reusing the skb igb: fix link test skipping when interface is admin down genirq/affinity: Add irq_update_affinity_desc() genirq: Export affinity setter for modules genirq: Provide new interfaces for affinity hints i40e: Use irq_update_affinity_hint() i40e: fix IRQ freeing in i40e_vsi_request_irq_msix error path can: j1939: j1939_sk_bind(): call j1939_priv_put() immediately when j1939_local_ecu_get() failed can: j1939: j1939_local_ecu_get(): undo increment when j1939_local_ecu_get() fails dmaengine: ti: edma: Fix memory allocation size for queue_priority_map dmaengine: qcom: bam_dma: Fix DT error handling for num-channels/ees phy: ti-pipe3: fix device leak at unbind soc: qcom: mdt_loader: Deal with zero e_shentsize drm/i915/power: fix size for for_each_set_bit() in abox iteration mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory ALSA: firewire-motu: drop EPOLLOUT from poll return values as write is not supported wifi: mac80211: fix incorrect type for ret pcmcia: omap_cf: Mark driver struct with __refdata to prevent section mismatch cgroup: split cgroup_destroy_wq into 3 workqueues um: virtio_uml: Fix use-after-free after put_device in probe qed: Don't collect too many protection override GRC elements net: natsemi: fix `rx_dropped` double accounting on `netif_rx()` failure i40e: remove redundant memory barrier when cleaning Tx descs tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect(). Revert "net/mlx5e: Update and set Xon/Xoff upon port speed set" net: liquidio: fix overflow in octeon_init_instr_queue() cnic: Fix use-after-free bugs in cnic_delete_task nilfs2: fix CFI failure when accessing /sys/fs/nilfs2/features/* power: supply: bq27xxx: fix error return in case of no bq27000 hdq battery power: supply: bq27xxx: restrict no-battery detection to bq27000 mmc: mvsdio: Fix dma_unmap_sg() nents value KVM: SVM: Sync TPR from LAPIC into VMCB::V_TPR even if AVIC is active rds: ib: Increment i_fastreg_wrs before bailing out ASoC: wm8940: Correct typo in control name ASoC: wm8974: Correct PLL rate rounding ASoC: SOF: Intel: hda-stream: Fix incorrect variable used in error message drm: bridge: cdns-mhdp8546: Fix missing mutex unlock on error path crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg serial: sc16is7xx: fix bug in flow control levels init usb: gadget: dummy_hcd: remove usage of list iterator past the loop body USB: gadget: dummy-hcd: Fix locking bug in RT-enabled kernels xhci: dbc: decouple endpoint allocation from initialization xhci: dbc: Fix full DbC transfer ring after several reconnects phy: broadcom: convert to devm_platform_ioremap_resource(_byname) phy: ti: convert to devm_platform_ioremap_resource(_byname) phy: phy-bcm-ns-usb3: drop support for deprecated DT binding phy: broadcom: ns-usb3: fix Wvoid-pointer-to-enum-cast warning phy: Use device_get_match_data() phy: ti: omap-usb2: fix device leak at unbind net: rfkill: gpio: add DT support net: rfkill: gpio: Fix crash due to dereferencering uninitialized pointer btrfs: tree-checker: fix the incorrect inode ref size check mptcp: propagate shutdown to subflows when possible ALSA: usb-audio: Fix block comments in mixer_quirks ALSA: usb-audio: Drop unnecessary parentheses in mixer_quirks ALSA: usb-audio: Avoid multiple assignments in mixer_quirks ALSA: usb-audio: Simplify NULL comparison in mixer_quirks ALSA: usb-audio: Remove unneeded wmb() in mixer_quirks ALSA: usb-audio: Add mixer quirk for Sony DualSense PS5 ALSA: usb-audio: Convert comma to semicolon ALSA: usb-audio: Fix build with CONFIG_INPUT=n usb: core: Add 0x prefix to quirks debug output IB/mlx5: Fix obj_type mismatch for SRQ event subscriptions arm64: dts: imx8mp: Correct thermal sensor index cpufreq: Initialize cpufreq-based invariance before subsys can: rcar_can: rcar_can_resume(): fix s2ram with PSCI can: hi311x: populate ndo_change_mtu() to prevent buffer overflow can: sun4i_can: populate ndo_change_mtu() to prevent buffer overflow can: mcba_usb: populate ndo_change_mtu() to prevent buffer overflow can: peak_usb: fix shift-out-of-bounds issue bnxt_en: correct offset handling for IPv6 destination address nexthop: Pass extack to nexthop notifier rtnetlink: Add RTNH_F_TRAP flag nexthop: Emit a notification when a nexthop is added nexthop: Emit a notification when a single nexthop is replaced nexthop: Forbid FDB status change while nexthop is in a group selftests: fib_nexthops: Fix creation of non-FDB nexthops drm/gma500: Fix null dereference in hdmi teardown crypto: af_alg - Fix incorrect boolean values in af_alg_ctx i40e: fix idx validation in i40e_validate_queue_map i40e: fix input validation logic for action_meta i40e: add max boundary check for VF filters i40e: add mask to apply valid bits for itr_idx tracing: dynevent: Add a missing lockdown check on dynevent fbcon: fix integer overflow in fbcon_do_set_font fbcon: Fix OOB access in font allocation mm/migrate_device: don't add folio to be freed to LRU in migrate_device_finalize() i40e: increase max descriptors for XL710 i40e: add validation for ring_len param i40e: fix idx validation in config queues msg i40e: fix validation of VF state in get resources mm/hugetlb: fix folio is still mapped when deleted Linux 5.10.245 Change-Id: I8125b2740db8dc9a06c956323964b8d8453f2441 Signed-off-by: Greg Kroah-Hartman <gregkh@google.com> |
||
|
Ido Schimmel
|
bdcad48c96 |
rtnetlink: Add RTNH_F_TRAP flag
[ Upstream commit 968a83f8cf6fd5a107289c57ee3197a52c72f02c ] The flag indicates to user space that the nexthop is not programmed to forward packets in hardware, but rather to trap them to the CPU. This is needed, for example, when the MAC of the nexthop neighbour is not resolved and packets should reach the CPU to trigger neighbour resolution. The flag will be used in subsequent patches by netdevsim to test nexthop objects programming to device drivers and in the future by mlxsw as well. Changes since RFC: * Reword commit message Signed-off-by: Ido Schimmel <idosch@nvidia.com> Reviewed-by: David Ahern <dsahern@gmail.com> Signed-off-by: Jakub Kicinski <kuba@kernel.org> Stable-dep-of: 390b3a300d78 ("nexthop: Forbid FDB status change while nexthop is in a group") Signed-off-by: Sasha Levin <sashal@kernel.org> |
||
|
Michael Bestas
|
7d9f9c49ac |
Merge tag 'ASB-2025-09-05_12-5.10' of https://android.googlesource.com/kernel/common into android13-5.10-waipio
https://source.android.com/docs/security/bulletin/2025-09-01 CVE-2025-21755 CVE-2025-38352 CVE-2025-021701 * tag 'ASB-2025-09-05_12-5.10' of https://android.googlesource.com/kernel/common: UPSTREAM: perf/core: Fix potential NULL deref UPSTREAM: net/packet: fix a race in packet_set_ring() and packet_notifier() BACKPORT: FROMGIT: f2fs: add sysfs entry for effective lookup mode BACKPORT: FROMGIT: f2fs: add lookup_mode mount option ANDROID: 16K: Allocate pad vma on the stack ANDROID: 16K: Don't copy data vma for maps/smaps output ANDROID: GKI: Update oplus symbol list ANDROID: vendor_hooks: add hooks in cpu_cgroup subsystem ANDROID: vendor_hooks: Add hooks in reweight_entity ANDROID: GKI: Export css_task_iter_start() UPSTREAM: regulator: core: Fix deadlock in create_regulator() UPSTREAM: coresight-etm4x: add isb() before reading the TRCSTATR UPSTREAM: usb: gadget: f_uac2: Fix incorrect setting of bNumEndpoints UPSTREAM: f2fs: fix to avoid use GC_AT when setting gc_mode as GC_URGENT_LOW or GC_URGENT_MID UPSTREAM: usb: typec: fix unreleased fwnode_handle in typec_port_register_altmodes() UPSTREAM: xhci: Mitigate failed set dequeue pointer commands ANDROID: refresh ABI following type change UPSTREAM: net/sched: Always pass notifications when child class becomes empty Revert "vm_sockets: Add flags field in the vsock address data structure" Revert "vm_sockets: Add VMADDR_FLAG_TO_HOST vsock flag" Revert "af_vsock: Set VMADDR_FLAG_TO_HOST flag on the receive path" Revert "af_vsock: Assign the vsock transport considering the vsock address flags" Revert "vsock: Fix transport_* TOCTOU" Linux 5.10.240 rseq: Fix segfault on registration when rseq_cs is non-zero x86/process: Move the buffer clearing before MONITOR KVM: SVM: Advertise TSA CPUID bits to guests KVM: x86: add support for CPUID leaf 0x80000021 x86/bugs: Add a Transient Scheduler Attacks mitigation x86/bugs: Rename MDS machinery to something more generic x86/mm: Disable hugetlb page table sharing on 32-bit vhost-scsi: protect vq->log_used with vq->mutex Input: atkbd - do not skip atkbd_deactivate() when skipping ATKBD_CMD_GETID HID: quirks: Add quirk for 2 Chicony Electronics HP 5MP Cameras HID: Add IGNORE quirk for SMARTLINKTECHNOLOGY vt: add missing notification when switching back to text mode net: usb: qmi_wwan: add SIMCom 8230C composition um: vector: Reduce stack usage in vector_eth_configure() atm: idt77252: Add missing `dma_map_error()` bnxt_en: Set DMA unmap len correctly for XDP_REDIRECT bnxt_en: Fix DCB ETS validation net: ll_temac: Fix missing tx_pending check in ethtools_set_ringparam() can: m_can: m_can_handle_lost_msg(): downgrade msg lost in rx message to debug level net: phy: microchip: limit 100M workaround to link-down events on LAN88xx net: appletalk: Fix device refcount leak in atrtr_create() md/raid1: Fix stack memory use after return in raid1_reshape wifi: zd1211rw: Fix potential NULL pointer dereference in zd_mac_tx_to_dev() dma-buf: fix timeout handling in dma_resv_wait_timeout v2 Input: xpad - support Acer NGR 200 Controller Input: xpad - add VID for Turtle Beach controllers Input: xpad - add support for Amazon Game Controller netlink: make sure we allow at least one dump skb netlink: Fix rmem check in netlink_broadcast_deliver(). pwm: mediatek: Ensure to disable clocks in error path rtc: lib_test: add MODULE_LICENSE ethernet: atl1: Add missing DMA mapping error checks and count errors Revert "ACPI: battery: negate current when discharging" usb: gadget: u_serial: Fix race condition in TTY wakeup drm/sched: Increment job count before swapping tail spsc queue pinctrl: qcom: msm: mark certain pins as invalid for interrupts x86/mce: Make sure CMCI banks are cleared during shutdown on Intel x86/mce: Don't remove sysfs if thresholding sysfs init fails x86/mce/amd: Fix threshold limit reset x86/its: FineIBT-paranoid vs ITS x86/its: Fix build errors when CONFIG_MODULES=n x86/its: Use dynamic thunks for indirect branches x86/modules: Set VM_FLUSH_RESET_PERMS in module_alloc() x86/its: Add "vmexit" option to skip mitigation on some CPUs x86/its: Enable Indirect Target Selection mitigation x86/its: Fix undefined reference to cpu_wants_rethunk_at() x86/its: Add support for ITS-safe return thunk x86/alternatives: Remove faulty optimization x86/alternative: Optimize returns patching x86/its: Add support for ITS-safe indirect thunk x86/alternatives: Teach text_poke_bp() to patch Jcc.d32 instructions x86/alternatives: Introduce int3_emulate_jcc() x86/its: Enumerate Indirect Target Selection (ITS) bug x86/bhi: Define SPEC_CTRL_BHI_DIS_S Documentation: x86/bugs/its: Add ITS documentation rxrpc: Fix oops due to non-existence of prealloc backlog struct fs/proc: do_task_stat: use __for_each_thread() net/sched: Abort __tc_modify_qdisc if parent class does not exist atm: clip: Fix NULL pointer dereference in vcc_sendmsg() atm: clip: Fix infinite recursive call of clip_push(). atm: clip: Fix memory leak of struct clip_vcc. atm: clip: Fix potential null-ptr-deref in to_atmarpd(). net: phy: smsc: Fix link failure in forced mode with Auto-MDIX net: phy: smsc: Fix Auto-MDIX configuration when disabled by strap vsock: Fix IOCTL_VM_SOCKETS_GET_LOCAL_CID to check also `transport_local` vsock: Fix transport_* TOCTOU af_vsock: Assign the vsock transport considering the vsock address flags af_vsock: Set VMADDR_FLAG_TO_HOST flag on the receive path vm_sockets: Add VMADDR_FLAG_TO_HOST vsock flag vm_sockets: Add flags field in the vsock address data structure vsock: Fix transport_{g2h,h2g} TOCTOU tipc: Fix use-after-free in tipc_conn_close(). netlink: Fix wraparounds of sk->sk_rmem_alloc. fix proc_sys_compare() handling of in-lookup dentries perf: Revert to requiring CAP_SYS_ADMIN for uprobes ASoC: fsl_asrc: use internal measured ratio for non-ideal ratio mode drm/exynos: exynos7_drm_decon: add vblank check in IRQ handling staging: rtl8723bs: Avoid memset() in aes_cipher() and aes_decipher() media: uvcvideo: Rollback non processed entities on error media: uvcvideo: Send control events for partial succeeds media: uvcvideo: Return the number of processed controls ACPI: PAD: fix crash in exit_round_robin() usb: typec: displayport: Fix potential deadlock Logitech C-270 even more broken xhci: dbc: Flush queued requests before stopping dbc xhci: dbctty: disable ECHO flag by default dpaa2-eth: fix xdp_rxq_info leak net: dpaa2-eth: rearrange variable in dpaa2_eth_get_ethtool_stats dpaa2-eth: Update SINGLE_STEP register access dpaa2-eth: Update dpni_get_single_step_cfg command dpaa2-eth: rename dpaa2_eth_xdp_release_buf into dpaa2_eth_recycle_buf btrfs: use btrfs_record_snapshot_destroy() during rmdir btrfs: propagate last_unlink_trans earlier when doing a rmdir NFSv4/flexfiles: Fix handling of NFS level errors in I/O flexfiles/pNFS: update stats on NFS4ERR_DELAY for v4.1 DSes RDMA/mlx5: Fix vport loopback for MPV device drm/v3d: Disable interrupts before resetting the GPU mtk-sd: reset host->mrq on prepare_data() error mtk-sd: Prevent memory corruption from DMA map failure mmc: mediatek: use data instead of mrq parameter from msdc_{un}prepare_data() regulator: gpio: Fix the out-of-bounds access to drvdata::gpiods rcu: Return early if callback is not specified ACPICA: Refuse to evaluate a method if arguments are missing wifi: ath6kl: remove WARN on bad firmware input wifi: mac80211: drop invalid source address OCB frames scsi: target: Fix NULL pointer dereference in core_scsi3_decode_spec_i_port() powerpc: Fix struct termio related ioctl macros ata: pata_cs5536: fix build on 32-bit UML ALSA: sb: Force to disable DMAs once when DMA mode is changed net/sched: Always pass notifications when child class becomes empty nui: Fix dma_mapping_error() check rose: fix dangling neighbour pointers in rose_rt_device_down() net: rose: Fix fall-through warnings for Clang enic: fix incorrect MTU comparison in enic_change_mtu() amd-xgbe: align CL37 AN sequence as per databook lib: test_objagg: Set error message in check_expect_hints_stats() drm/i915/gt: Fix timeline left held on VMA alloc error drm/i915/selftests: Change mock_request() to return error pointers spi: spi-fsl-dspi: Clear completion counter before initiating transfer drm/exynos: fimd: Guard display clock control with runtime PM calls btrfs: fix missing error handling when searching for inode refs during log replay RDMA/mlx5: Fix CC counters query for MPV scsi: ufs: core: Fix spelling of a sysfs attribute name scsi: qla4xxx: Fix missing DMA mapping error in qla4xxx_alloc_pdu() scsi: qla2xxx: Fix DMA mapping test in qla24xx_get_port_database() NFSv4/pNFS: Fix a race to wake on NFS_LAYOUT_DRAIN nfs: Clean up /proc/net/rpc/nfs when nfs_fs_proc_net_init() fails. RDMA/mlx5: Initialize obj_event->obj_sub_list before xa_insert platform/mellanox: mlxbf-tmfifo: fix vring_desc.len assignment mtk-sd: Fix a pagefault in dma_unmap_sg() for not prepared data usb: typec: altmodes/displayport: do not index invalid pin_assignments Revert "mmc: sdhci: Disable SD card clock before changing parameters" mmc: sdhci: Add a helper function for dump register in dynamic debug mode vsock/vmci: Clear the vmci transport packet properly when initializing it rtc: cmos: use spin_lock_irqsave in cmos_interrupt arm64: Restrict pagetable teardown to avoid false warning Revert "ipv6: save dontfrag in cork" s390: Add '-std=gnu11' to decompressor and purgatory CFLAGS PCI: hv: Do not set PCI_COMMAND_MEMORY to reduce VM boot time drm/bridge: cdns-dsi: Wait for Clk and Data Lanes to be ready drm/bridge: cdns-dsi: Check return value when getting default PHY config drm/bridge: cdns-dsi: Fix connecting to next bridge drm/bridge: cdns-dsi: Fix the clock variable for mode_valid() drm/amdkfd: Fix race in GWS queue scheduling drm/udl: Unregister device before cleaning up on disconnect drm/tegra: Fix a possible null pointer dereference drm/tegra: Assign plane type before registration HID: wacom: fix kobject reference count leak HID: wacom: fix memory leak on sysfs attribute creation failure HID: wacom: fix memory leak on kobject creation failure btrfs: update superblock's device bytes_used when dropping chunk dm-raid: fix variable in journal device check Bluetooth: L2CAP: Fix L2CAP MTU negotiation dt-bindings: serial: 8250: Make clocks and clock-frequency exclusive atm: Release atm_dev_mutex after removing procfs in atm_dev_deregister(). net: enetc: Correct endianness handling in _enetc_rd_reg64 um: ubd: Add missing error check in start_io_thread() vsock/uapi: fix linux/vm_sockets.h userspace compilation errors wifi: mac80211: fix beacon interval calculation overflow libbpf: Fix null pointer dereference in btf_dump__free on allocation failure attach_recursive_mnt(): do not lock the covering tree when sliding something under it ALSA: usb-audio: Fix out-of-bounds read in snd_usb_get_audioformat_uac3() atm: clip: prevent NULL deref in clip_push() i2c: robotfuzz-osif: disable zero-length read messages i2c: tiny-usb: disable zero-length read messages net_sched: sch_sfq: reject invalid perturb period PCI: cadence-ep: Correct PBA offset in .set_msix() callback uio_hv_generic: Align ring size to system page uio_hv_generic: Query the ringbuffer size for device Drivers: hv: vmbus: Add utility function for querying ring size Drivers: hv: Rename 'alloced' to 'allocated' Drivers: hv: vmbus: Fix duplicate CPU assignments within a device uio: uio_hv_generic: use devm_kzalloc() for private data alloc RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction RDMA/core: Use refcount_t instead of atomic_t on refcount of iwcm_id_private f2fs: don't over-report free space or inodes in statvfs can: tcan4x5x: fix power regulator retrieval during probe media: omap3isp: use sgtable-based scatterlist wrappers jfs: validate AG parameters in dbMount() to prevent crashes fs/jfs: consolidate sanity checking in dbMount usb: typec: tcpm/tcpci_maxim: Fix bounds check in process_rx() usb: typec: tcpci_maxim: add terminating newlines to logging usb: typec: tcpci_maxim: remove redundant assignment usb: typec: tcpci_maxim: Fix uninitialized return variable VMCI: fix race between vmci_host_setup_notify and vmci_ctx_unset_notify VMCI: check context->notify_page after call to get_user_pages_fast() to avoid GPF ovl: Check for NULL d_inode() in ovl_dentry_upper() ceph: fix possible integer overflow in ceph_zero_objects() ALSA: hda: Add new pci id for AMD GPU display HD audio controller ALSA: hda: Ignore unsol events for cards being shut down usb: typec: displayport: Receive DP Status Update NAK request exit dp altmode usb: cdc-wdm: avoid setting WDM_READ for ZLP-s usb: Add checks for snprintf() calls in usb_alloc_dev() usb: common: usb-conn-gpio: use a unique name for usb connector device usb: potential integer overflow in usbg_make_tpg() um: Add cmpxchg8b_emu and checksum functions to asm-prototypes.h iio: pressure: zpa2326: Use aligned_s64 for the timestamp bcache: fix NULL pointer in cache_set_flush() md/md-bitmap: fix dm-raid max_write_behind setting dmaengine: xilinx_dma: Set dma_device directions hwmon: (pmbus/max34440) Fix support for max34451 leds: multicolor: Fix intensity setting while SW blinking mfd: max14577: Fix wakeup source leaks on device unbind mailbox: Not protect module_put with spin_lock_irqsave NFSv4.2: fix listxattr to return selinux security label cifs: Fix cifs_query_path_info() for Windows NT servers Conflicts: Documentation/devicetree/bindings/serial/8250.yaml Documentation/devicetree/bindings~HEAD android/abi_gki_aarch64.xml Change-Id: I597d5cad10f85d9f2b543c8429cb785eedbf40dc |
||
|
Greg Kroah-Hartman
|
eabc85af45 |
Merge 5.10.241 into android12-5.10-lts
Changes in 5.10.241
phy: tegra: xusb: Fix unbalanced regulator disable in UTMI PHY mode
USB: serial: option: add Telit Cinterion FE910C04 (ECM) composition
USB: serial: option: add Foxconn T99W640
USB: serial: ftdi_sio: add support for NDI EMGUIDE GEMINI
usb: gadget: configfs: Fix OOB read on empty string write
i2c: stm32: fix the device used for the DMA map
thunderbolt: Fix bit masking in tb_dp_port_set_hops()
Input: xpad - set correct controller type for Acer NGR200
pch_uart: Fix dma_sync_sg_for_device() nents value
HID: core: ensure the allocated report buffer can contain the reserved report ID
HID: core: ensure __hid_request reserves the report ID as the first byte
HID: core: do not bypass hid_hw_raw_request
phonet/pep: Move call to pn_skb_get_dst_sockaddr() earlier in pep_sock_accept()
af_packet: fix the SO_SNDTIMEO constraint not effective on tpacked_snd()
af_packet: fix soft lockup issue caused by tpacket_snd()
dmaengine: nbpfaxi: Fix memory corruption in probe()
isofs: Verify inode mode when loading from disk
memstick: core: Zero initialize id_reg in h_memstick_read_dev_id()
mmc: bcm2835: Fix dma_unmap_sg() nents value
mmc: sdhci-pci: Quirk for broken command queuing on Intel GLK-based Positivo models
mmc: sdhci_am654: Workaround for Errata i2312
soc: aspeed: lpc-snoop: Cleanup resources in stack-order
soc: aspeed: lpc-snoop: Don't disable channels that aren't enabled
iio: adc: max1363: Fix MAX1363_4X_CHANS/MAX1363_8X_CHANS[]
iio: adc: max1363: Reorder mode_list[] entries
iio: adc: stm32-adc: Fix race in installing chained IRQ handler
comedi: pcl812: Fix bit shift out of bounds
comedi: aio_iiro_16: Fix bit shift out of bounds
comedi: das16m1: Fix bit shift out of bounds
comedi: das6402: Fix bit shift out of bounds
comedi: Fix some signed shift left operations
comedi: Fix use of uninitialized data in insn_rw_emulate_bits()
comedi: Fix initialization of data for instructions that write to subdevice
net: emaclite: Fix missing pointer increment in aligned_read()
net/sched: sch_qfq: Fix race condition on qfq_aggregate
rpl: Fix use-after-free in rpl_do_srh_inline().
hwmon: (corsair-cpro) Validate the size of the received input buffer
usb: net: sierra: check for no status endpoint
Bluetooth: Fix null-ptr-deref in l2cap_sock_resume_cb()
Bluetooth: SMP: If an unallowed command is received consider it a failure
Bluetooth: SMP: Fix using HCI_ERROR_REMOTE_USER_TERM on timeout
Bluetooth: L2CAP: Fix attempting to adjust outgoing MTU
net: vlan: fix VLAN 0 refcount imbalance of toggling filtering during runtime
net/sched: Return NULL when htb_lookup_leaf encounters an empty rbtree
usb: hub: fix detection of high tier USB3 devices behind suspended hubs
usb: hub: Fix flushing and scheduling of delayed work that tunes runtime pm
usb: hub: Fix flushing of delayed work used for post resume purposes
usb: musb: Add and use inline functions musb_{get,set}_state
usb: musb: fix gadget state on disconnect
usb: dwc3: qcom: Don't leave BCR asserted
ASoC: fsl_sai: Force a software reset when starting in consumer mode
mm/vmalloc: leave lazy MMU mode on PTE mapping error
virtio-net: ensure the received length does not exceed allocated size
xhci: Disable stream for xHC controller with XHCI_BROKEN_STREAMS
regulator: core: fix NULL dereference on unbind due to stale coupling data
RDMA/core: Rate limit GID cache warning messages
i40e: Add rx_missed_errors for buffer exhaustion
i40e: report VF tx_dropped with tx_errors instead of tx_discards
net: appletalk: fix kerneldoc warnings
net: appletalk: Fix use-after-free in AARP proxy probe
net/sched: sch_qfq: Avoid triggering might_sleep in atomic context in qfq_delete_class
net: hns3: refine the struct hane3_tc_info
net: hns3: fixed vf get max channels bug
i2c: qup: jump out of the loop in case of timeout
ALSA: hda/realtek - Add mute LED support for HP Pavilion 15-eg0xxx
e1000e: disregard NVM checksum on tgp when valid checksum bit is not set
e1000e: ignore uninitialized checksum word on tgp
gve: Fix stuck TX queue for DQ queue format
nilfs2: reject invalid file types when reading inodes
x86/bugs: Fix use of possibly uninit value in amd_check_tsa_microcode()
comedi: comedi_test: Fix possible deletion of uninitialized timers
ALSA: hda: Add missing NVIDIA HDA codec IDs
usb: chipidea: add USB PHY event
usb: phy: mxs: disconnect line when USB charger is attached
ethernet: intel: fix building with large NR_CPUS
ASoC: Intel: fix SND_SOC_SOF dependencies
fs_context: fix parameter name in infofc() macro
hfsplus: remove mutex_lock check in hfsplus_free_extents
ASoC: soc-dai: tidyup return value of snd_soc_xlate_tdm_slot_mask()
ASoC: ops: dynamically allocate struct snd_ctl_elem_value
ARM: dts: vfxxx: Correctly use two tuples for timer address
staging: fbtft: fix potential memory leak in fbtft_framebuffer_alloc()
vmci: Prevent the dispatching of uninitialized payloads
pps: fix poll support
Revert "vmci: Prevent the dispatching of uninitialized payloads"
usb: early: xhci-dbc: Fix early_ioremap leak
ARM: dts: imx6ul-kontron-bl-common: Fix RTS polarity for RS485 interface
arm64: dts: imx8mm-beacon: Fix HS400 USDHC clock speed
cpufreq: Initialize cpufreq-based frequency-invariance later
cpufreq: Init policy->rwsem before it may be possibly used
samples: mei: Fix building on musl libc
staging: nvec: Fix incorrect null termination of battery manufacturer
selftests/tracing: Fix false failure of subsystem event test
drm/rockchip: cleanup fb when drm_gem_fb_afbc_init failed
bpf, ktls: Fix data corruption when using bpf_msg_pop_data() in ktls
bpftool: Fix memory leak in dump_xx_nlmsg on realloc failure
caif: reduce stack size, again
wifi: rtl818x: Kill URBs before clearing tx status queue
wifi: iwlwifi: Fix memory leak in iwl_mvm_init()
iwlwifi: Add missing check for alloc_ordered_workqueue
wifi: ath11k: clear initialized flag for deinit-ed srng lists
tcp: fix tcp_ofo_queue() to avoid including too much DUP SACK range
m68k: Don't unregister boot console needlessly
drm/amd/pm/powerplay/hwmgr/smu_helper: fix order of mask and value
netfilter: nf_tables: adjust lockdep assertions handling
arch: powerpc: defconfig: Drop obsolete CONFIG_NET_CLS_TCINDEX
net/sched: Restrict conditions for adding duplicating netems to qdisc tree
net_sched: act_ctinfo: use atomic64_t for three counters
xen/gntdev: remove struct gntdev_copy_batch from stack
wifi: rtl8xxxu: Fix RX skb size for aggregation disabled
mwl8k: Add missing check after DMA map
wifi: mac80211: Check 802.11 encaps offloading in ieee80211_tx_h_select_key()
Reapply "wifi: mac80211: Update skb's control block key in ieee80211_tx_dequeue()"
wifi: brcmfmac: fix P2P discovery failure in P2P peer due to missing P2P IE
can: kvaser_pciefd: Store device channel index
can: kvaser_usb: Assign netdev.dev_port based on device channel index
netfilter: xt_nfacct: don't assume acct name is null-terminated
selftests: rtnetlink.sh: remove esp4_offload after test
vrf: Drop existing dst reference in vrf_ip6_input_dst
PCI: rockchip-host: Fix "Unexpected Completion" log message
crypto: marvell/cesa - Fix engine load inaccuracy
mtd: fix possible integer overflow in erase_xfer()
clk: davinci: Add NULL check in davinci_lpsc_clk_register()
power: supply: max14577: Handle NULL pdata when CONFIG_OF is not set
pinctrl: sunxi: Fix memory leak on krealloc failure
crypto: inside-secure - Fix `dma_unmap_sg()` nents value
crypto: ccp - Fix crash when rebind ccp device for ccp.ko
perf tests bp_account: Fix leaked file descriptor
clk: sunxi-ng: v3s: Fix de clock definition
scsi: ibmvscsi_tgt: Fix dma_unmap_sg() nents value
scsi: mvsas: Fix dma_unmap_sg() nents value
scsi: isci: Fix dma_unmap_sg() nents value
watchdog: ziirave_wdt: check record length in ziirave_firm_verify()
hwrng: mtk - handle devm_pm_runtime_enable errors
crypto: img-hash - Fix dma_unmap_sg() nents value
soundwire: stream: restore params when prepare ports fail
fs/orangefs: Allow 2 more characters in do_c_string()
dmaengine: mv_xor: Fix missing check after DMA map and missing unmap
dmaengine: nbpfaxi: Add missing check after DMA map
sh: Do not use hyphen in exported variable name
crypto: qat - fix seq_file position update in adf_ring_next()
fbdev: imxfb: Check fb_add_videomode to prevent null-ptr-deref
jfs: fix metapage reference count leak in dbAllocCtl
mtd: rawnand: atmel: Fix dma_mapping_error() address
mtd: rawnand: atmel: set pmecc data setup time
vhost-scsi: Fix log flooding with target does not exist errors
bpf: Check flow_dissector ctx accesses are aligned
apparmor: ensure WB_HISTORY_SIZE value is a power of 2
module: Restore the moduleparam prefix length check
rtc: ds1307: fix incorrect maximum clock rate handling
rtc: hym8563: fix incorrect maximum clock rate handling
rtc: pcf85063: fix incorrect maximum clock rate handling
rtc: pcf8563: fix incorrect maximum clock rate handling
rtc: rv3028: fix incorrect maximum clock rate handling
f2fs: doc: fix wrong quota mount option description
f2fs: fix to avoid UAF in f2fs_sync_inode_meta()
f2fs: fix to avoid panic in f2fs_evict_inode
f2fs: fix to avoid out-of-boundary access in devs.path
scsi: ufs: core: Use link recovery when h8 exit fails during runtime resume
kconfig: qconf: fix ConfigList::updateListAllforAll()
PCI: pnv_php: Clean up allocated IRQs on unplug
PCI: pnv_php: Work around switches with broken presence detection
powerpc/eeh: Export eeh_unfreeze_pe()
powerpc/eeh: Rely on dev->link_active_reporting
powerpc/eeh: Make EEH driver device hotplug safe
PCI: pnv_php: Fix surprise plug detection and recovery
pNFS/flexfiles: Avoid spurious layout returns in ff_layout_choose_ds_for_read
pNFS/flexfiles: don't attempt pnfs on fatal DS errors
NFS: Fix filehandle bounds checking in nfs_fh_to_dentry()
NFSv4.2: another fix for listxattr
mm: extract might_alloc() debug check
XArray: Add calls to might_alloc()
NFS: Fixup allocation flags for nfsiod's __GFP_NORETRY
netpoll: prevent hanging NAPI when netcons gets enabled
phy: mscc: Fix parsing of unicast frames
pptp: ensure minimal skb length in pptp_xmit()
ipv6: reject malicious packets in ipv6_gso_segment()
net: drop UFO packets in udp_rcv_segment()
benet: fix BUG when creating VFs
ALSA: hda/ca0132: Fix missing error handling in ca0132_alt_select_out()
smb: client: let recv_done() cleanup before notifying the callers.
pptp: fix pptp_xmit() error path
perf/core: Don't leak AUX buffer refcount on allocation failure
perf/core: Exit early on perf_mmap() fail
perf/core: Prevent VMA split of buffer mappings
net/packet: fix a race in packet_set_ring() and packet_notifier()
vsock: Do not allow binding to VMADDR_PORT_ANY
USB: serial: option: add Foxconn T99W709
MIPS: mm: tlb-r4k: Uniquify TLB entries on init
mm/hmm: move pmd_to_hmm_pfn_flags() to the respective #ifdeffery
usb: gadget : fix use-after-free in composite_dev_cleanup()
io_uring: don't use int for ABI
ALSA: usb-audio: Validate UAC3 power domain descriptors, too
ALSA: usb-audio: Validate UAC3 cluster segment descriptors
netlink: avoid infinite retry looping in netlink_unicast()
net: gianfar: fix device leak when querying time stamp info
net: dpaa: fix device leak when querying time stamp info
nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm()
NFSD: detect mismatch of file handle and delegation stateid in OPEN op
sunvdc: Balance device refcount in vdc_port_mpgroup_check
fs: Prevent file descriptor table allocations exceeding INT_MAX
Documentation: ACPI: Fix parent device references
ACPI: processor: perflib: Fix initial _PPC limit application
ACPI: processor: perflib: Move problematic pr->performance check
udp: also consider secpath when evaluating ipsec use for checksumming
netfilter: ctnetlink: fix refcount leak on table dump
sctp: linearize cloned gso packets in sctp_rcv
intel_idle: Allow loading ACPI tables for any family
cpuidle: governors: menu: Avoid using invalid recent intervals data
hfs: fix slab-out-of-bounds in hfs_bnode_read()
hfsplus: fix slab-out-of-bounds in hfsplus_bnode_read()
hfsplus: fix slab-out-of-bounds read in hfsplus_uni2asc()
hfsplus: don't use BUG_ON() in hfsplus_create_attributes_file()
arm64: Handle KCOV __init vs inline mismatches
udf: Verify partition map count
drbd: add missing kref_get in handle_write_conflicts
hfs: fix not erasing deleted b-tree node issue
better lockdep annotations for simple_recursive_removal()
ata: libata-sata: Disallow changing LPM state if not supported
securityfs: don't pin dentries twice, once is enough...
usb: xhci: print xhci->xhc_state when queue_command failed
cpufreq: CPPC: Mark driver with NEED_UPDATE_LIMITS flag
selftests/futex: Define SYS_futex on 32-bit architectures with 64-bit time_t
usb: typec: ucsi: psy: Set current max to 100mA for BC 1.2 and Default
usb: xhci: Avoid showing warnings for dying controller
usb: xhci: Set avg_trb_len = 8 for EP0 during Address Device Command
usb: xhci: Avoid showing errors during surprise removal
gpio: wcd934x: check the return value of regmap_update_bits()
cpufreq: Exit governor when failed to start old governor
ARM: rockchip: fix kernel hang during smp initialization
PM / devfreq: governor: Replace sscanf() with kstrtoul() in set_freq_store()
ASoC: soc-dapm: set bias_level if snd_soc_dapm_set_bias_level() was successed
gpio: tps65912: check the return value of regmap_update_bits()
ARM: tegra: Use I/O memcpy to write to IRAM
selftests: tracing: Use mutex_unlock for testing glob filter
PM: runtime: Clear power.needs_force_resume in pm_runtime_reinit()
thermal: sysfs: Return ENODATA instead of EAGAIN for reads
PM: sleep: console: Fix the black screen issue
ACPI: processor: fix acpi_object initialization
mmc: sdhci-msm: Ensure SD card power isn't ON when card removed
ACPI: APEI: GHES: add TAINT_MACHINE_CHECK on GHES panic path
reset: brcmstb: Enable reset drivers for ARCH_BCM2835
mmc: rtsx_usb_sdmmc: Fix error-path in sd_set_power_mode()
x86/bugs: Avoid warning when overriding return thunk
ASoC: hdac_hdmi: Rate limit logging on connection and disconnection
ALSA: intel8x0: Fix incorrect codec index usage in mixer for ICH4
ASoC: core: Check for rtd == NULL in snd_soc_remove_pcm_runtime()
usb: typec: intel_pmc_mux: Defer probe if SCU IPC isn't present
usb: core: usb_submit_urb: downgrade type check
pm: cpupower: Fix the snapshot-order of tsc,mperf, clock in mperf_stop()
platform/x86: thinkpad_acpi: Handle KCOV __init vs inline mismatches
platform/chrome: cros_ec_typec: Defer probe on missing EC parent
ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control
ALSA: pcm: Rewrite recalculate_boundary() to avoid costly loop
ALSA: usb-audio: Avoid precedence issues in mixer_quirks macros
iio: adc: ad7768-1: Ensure SYNC_IN pulse minimum timing requirement
ASoC: codecs: rt5640: Retry DEVICE_ID verification
xen/netfront: Fix TX response spurious interrupts
ktest.pl: Prevent recursion of default variable options
wifi: cfg80211: reject HTC bit for management frames
s390/time: Use monotonic clock in get_cycles()
be2net: Use correct byte order and format string for TCP seq and ack_seq
et131x: Add missing check after DMA map
net: ag71xx: Add missing check after DMA map
rcu: Protect ->defer_qs_iw_pending from data race
wifi: cfg80211: Fix interface type validation
net: ipv4: fix incorrect MTU in broadcast routes
net: thunderx: Fix format-truncation warning in bgx_acpi_match_id()
wifi: iwlwifi: mvm: fix scan request validation
s390/stp: Remove udelay from stp_sync_clock()
(powerpc/512) Fix possible `dma_unmap_single()` on uninitialized pointer
net: fec: allow disable coalescing
drm/amd/display: Separate set_gsl from set_gsl_source_select
wifi: iwlwifi: dvm: fix potential overflow in rs_fill_link_cmd()
wifi: iwlwifi: fw: Fix possible memory leak in iwl_fw_dbg_collect
drm/amd/display: Fix 'failed to blank crtc!'
wifi: rtlwifi: fix possible skb memory leak in `_rtl_pci_rx_interrupt()`.
netmem: fix skb_frag_address_safe with unreadable skbs
wifi: iwlegacy: Check rate_idx range after addition
net: vlan: Replace BUG() with WARN_ON_ONCE() in vlan_dev_* stubs
gve: Return error for unknown admin queue command
net: dsa: b53: fix b53_imp_vlan_setup for BCM5325
net: dsa: b53: prevent GMII_PORT_OVERRIDE_CTRL access on BCM5325
net: dsa: b53: prevent SWITCH_CTRL access on BCM5325
wifi: rtlwifi: fix possible skb memory leak in _rtl_pci_init_one_rxdesc()
net: ncsi: Fix buffer overflow in fetching version id
drm/ttm: Should to return the evict error
uapi: in6: restore visibility of most IPv6 socket options
net: dsa: b53: fix IP_MULTICAST_CTRL on BCM5325
vhost: fail early when __vhost_add_used() fails
cifs: Fix calling CIFSFindFirst() for root path without msearch
ext4: do not BUG when INLINE_DATA_FL lacks system.data xattr
scsi: libiscsi: Initialize iscsi_conn->dd_data only if memory is allocated
fs/orangefs: use snprintf() instead of sprintf()
watchdog: dw_wdt: Fix default timeout
MIPS: vpe-mt: add missing prototypes for vpe_{alloc,start,stop,free}
scsi: bfa: Double-free fix
jfs: truncate good inode pages when hard link is 0
jfs: Regular file corruption check
jfs: upper bound check of tree index in dbAllocAG
MIPS: Don't crash in stack_top() for tasks without ABI or vDSO
leds: leds-lp50xx: Handle reg to get correct multi_index
RDMA: hfi1: fix possible divide-by-zero in find_hw_thread_mask()
RDMA/core: reduce stack using in nldev_stat_get_doit()
scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure
scsi: mpt3sas: Correctly handle ATA device errors
pinctrl: stm32: Manage irq affinity settings
media: tc358743: Check I2C succeeded during probe
media: tc358743: Return an appropriate colorspace from tc358743_set_fmt
media: tc358743: Increase FIFO trigger level to 374
media: usb: hdpvr: disable zero-length read messages
media: dvb-frontends: dib7090p: fix null-ptr-deref in dib7090p_rw_on_apb()
media: dvb-frontends: w7090p: fix null-ptr-deref in w7090p_tuner_write_serpar and w7090p_tuner_read_serpar
media: uvcvideo: Fix bandwidth issue for Alcor camera
md: dm-zoned-target: Initialize return variable r to avoid uninitialized use
i3c: add missing include to internal header
rtc: ds1307: handle oscillator stop flag (OSF) for ds1341
i3c: don't fail if GETHDRCAP is unsupported
dm-mpath: don't print the "loaded" message if registering fails
i2c: Force DLL0945 touchpad i2c freq to 100khz
kconfig: lxdialog: replace strcpy() with strncpy() in inputbox.c
kconfig: nconf: Ensure null termination where strncpy is used
scsi: Fix sas_user_scan() to handle wildcard and multi-channel scans
scsi: aacraid: Stop using PCI_IRQ_AFFINITY
ipmi: Use dev_warn_ratelimited() for incorrect message warnings
kconfig: gconf: avoid hardcoding model2 in on_treeview2_cursor_changed()
kconfig: gconf: fix potential memory leak in renderer_edited()
kconfig: lxdialog: fix 'space' to (de)select options
ipmi: Fix strcpy source and destination the same
net: phy: smsc: add proper reset flags for LAN8710A
block: avoid possible overflow for chunk_sectors check in blk_stack_limits()
pNFS: Fix stripe mapping in block/scsi layout
pNFS: Fix disk addr range check in block/scsi layout
pNFS: Handle RPC size limit for layoutcommits
pNFS: Fix uninited ptr deref in block/scsi layout
rtc: ds1307: remove clear of oscillator stop flag (OSF) in probe
scsi: lpfc: Remove redundant assignment to avoid memory leak
ASoC: soc-dai.c: add missing flag check at snd_soc_pcm_dai_probe()
ASoC: fsl_sai: replace regmap_write with regmap_update_bits
drm/amdgpu: fix incorrect vm flags to map bo
usb: core: config: Prevent OOB read in SS endpoint companion parsing
misc: rtsx: usb: Ensure mmc child device is active when card is present
usb: typec: ucsi: Update power_supply on power role change
comedi: fix race between polling and detaching
thunderbolt: Fix copy+paste error in match_service_id()
btrfs: fix log tree replay failure due to file with 0 links and extents
parisc: Makefile: fix a typo in palo.conf
mm/kmemleak: avoid soft lockup in __kmemleak_do_cleanup()
mm/kmemleak: avoid deadlock by moving pr_warn() outside kmemleak_lock
media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format()
media: uvcvideo: Do not mark valid metadata as invalid
serial: 8250: fix panic due to PSLVERR
cpufreq: armada-8k: Fix off by one in armada_8k_cpufreq_free_table()
m68k: Fix lost column on framebuffer debug console
usb: atm: cxacru: Merge cxacru_upload_firmware() into cxacru_heavy_init()
usb: gadget: udc: renesas_usb3: fix device leak at unbind
usb: dwc3: meson-g12a: fix device leaks at unbind
bus: mhi: host: Fix endianness of BHI vector table
vt: keyboard: Don't process Unicode characters in K_OFF mode
vt: defkeymap: Map keycodes above 127 to K_HOLE
lib/crypto: mips/chacha: Fix clang build and remove unneeded byteswap
Revert "vgacon: Add check for vc_origin address range in vgacon_scroll()"
ext4: check fast symlink for ea_inode correctly
ext4: fix fsmap end of range reporting with bigalloc
ext4: fix reserved gdt blocks handling in fsmap
ata: libata-scsi: Fix ata_to_sense_error() status handling
zynq_fpga: use sgtable-based scatterlist wrappers
wifi: brcmsmac: Remove const from tbl_ptr parameter in wlc_lcnphy_common_read_table()
wifi: ath11k: fix source ring-buffer corruption
pwm: imx-tpm: Reset counter if CMOD is 0
hwmon: (gsc-hwmon) fix fan pwm setpoint show functions
mtd: rawnand: fsmc: Add missing check after DMA map
PCI: endpoint: Fix configfs group list head handling
PCI: endpoint: Fix configfs group removal on driver teardown
jbd2: prevent softlockup in jbd2_log_do_checkpoint()
soc/tegra: pmc: Ensure power-domains are in a known state
media: gspca: Add bounds checking to firmware parser
media: hi556: correct the test pattern configuration
media: imx: fix a potential memory leak in imx_media_csc_scaler_device_init()
media: usbtv: Lock resolution while streaming
media: rainshadow-cec: fix TOCTOU race condition in rain_interrupt()
media: ov2659: Fix memory leaks in ov2659_probe()
media: venus: Add a check for packet size after reading from shared memory
drm/amd: Restore cached power limit during resume
net, hsr: reject HSR frame if skb can't hold tag
sch_htb: make htb_qlen_notify() idempotent
sch_drr: make drr_qlen_notify() idempotent
sch_hfsc: make hfsc_qlen_notify() idempotent
sch_qfq: make qfq_qlen_notify() idempotent
codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog()
sch_htb: make htb_deactivate() idempotent
memstick: Fix deadlock by moving removing flag earlier
mmc: sdhci-pci-gli: GL9763e: Rename the gli_set_gl9763e() for consistency
squashfs: fix memory leak in squashfs_fill_super
ALSA: hda/realtek: Add support for HP EliteBook x360 830 G6 and EliteBook 830 G6
drm/amd/display: Fix fractional fb divider in set_pixel_clock_v3
drm/amd/display: Fix DP audio DTO1 clock source on DCE 6.
drm/amd/display: Find first CRTC and its line time in dce110_fill_display_configs
drm/amd/display: Fill display clock and vblank time in dce110_fill_display_configs
selftests: mptcp: connect: also cover alt modes
fs/buffer: fix use-after-free when call bh_read() helper
move_mount: allow to add a mount into an existing group
use uniform permission checks for all mount propagation changes
fpga: zynq_fpga: Fix the wrong usage of dma_map_sgtable()
ftrace: Also allocate and copy hash for reading of filter files
iio: pressure: bmp280: Use IS_ERR() in bmp280_common_probe()
iio: proximity: isl29501: fix buffered read on big-endian systems
most: core: Drop device reference after usage in get_channel()
usb: quirks: Add DELAY_INIT quick for another SanDisk 3.2Gen1 Flash Drive
usb: renesas-xhci: Fix External ROM access timeouts
USB: storage: Add unusual-devs entry for Novatek NTK96550-based camera
usb: storage: realtek_cr: Use correct byte order for bcs->Residue
USB: storage: Ignore driver CD mode for Realtek multi-mode Wi-Fi dongles
usb: dwc3: Ignore late xferNotReady event to prevent halt timeout
kbuild: userprogs: use correct linker when mixing clang and GNU ld
f2fs: fix to do sanity check on ino and xnid
iio: hid-sensor-prox: Fix incorrect OFFSET calculation
x86/mce/amd: Add default names for MCA banks and blocks
usb: hub: avoid warm port reset during USB3 disconnect
usb: hub: Don't try to recover devices lost during warm reset.
smb: client: fix use-after-free in crypt_message when using async crypto
tracing: Add down_write(trace_event_sem) when adding trace event
pmdomain: governor: Consider CPU latency tolerance from pm_domain_cpu_gov
ice: Fix a null pointer dereference in ice_copy_and_init_pkg()
drm/sched: Remove optimization that causes hang when killing dependent jobs
mm/zsmalloc.c: convert to use kmem_cache_zalloc in cache_alloc_zspage()
mm/zsmalloc: do not pass __GFP_MOVABLE if CONFIG_COMPACTION=n
x86/fpu: Delay instruction pointer fixup until after warning
ALSA: scarlett2: Add retry on -EPROTO from scarlett2_usb_tx()
net: usbnet: Avoid potential RCU stall on LINK_CHANGE event
usb: typec: fusb302: cache PD RX state
PCI/ACPI: Fix runtime PM ref imbalance on Hot-Plug Capable ports
block: Make REQ_OP_ZONE_FINISH a write operation
hv_netvsc: Fix panic during namespace deletion with VF
USB: cdc-acm: do not log successful probe on later errors
cdc-acm: fix race between initial clearing halt and open
comedi: Fail COMEDI_INSNLIST ioctl if n_insns is too large
ptp: Fix possible memory leak in ptp_clock_register()
block: don't call rq_qos_ops->done_bio if the bio isn't tracked
btrfs: fix deadlock when cloning inline extents and using qgroups
ARM: 9448/1: Use an absolute path to unified.h in KBUILD_AFLAGS
dpaa2-mac: split up initializing the MAC object from connecting to it
dpaa2-mac: export MAC counters even when in TYPE_FIXED
dpaa2-eth: retry the probe when the MAC is not yet discovered on the bus
dpaa2-eth: Fix device reference count leak in MAC endpoint handling
mm: drop the assumption that VM_SHARED always implies writable
mm: update memfd seal write check to include F_SEAL_WRITE
mm: reinstate ability to map write-sealed memfd mappings read-only
selftests/memfd: add test for mapping write-sealed memfd read-only
dma-buf: insert memory barrier before updating num_fences
drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume
RDMA/rxe: Return CQE error if invalid lkey was supplied
scsi: lpfc: Fix link down processing to address NULL pointer dereference
scsi: pm80xx: Fix memory leak during rmmod
NFS: Don't set NFS_INO_REVAL_PAGECACHE in the inode cache validity
NFSv4: Fix nfs4_bitmap_copy_adjust()
NFS: Create an nfs4_server_set_init_caps() function
NFS: Fix the setting of capabilities when automounting a new filesystem
net/sched: sch_ets: properly init all active DRR list handles
net_sched: sch_ets: implement lockless ets_dump()
net/sched: ets: use old 'nbands' while purging unused classes
mm/ptdump: take the memory hotplug lock inside ptdump_walk_pgd()
ata: Fix SATA_MOBILE_LPM_POLICY description in Kconfig
scsi: ufs: exynos: Fix programming of HCI_UTRL_NEXUS_TYPE
iio: adc: ad_sigma_delta: change to buffer predisable
soc: qcom: mdt_loader: Ensure we don't read past the ELF header
usb: musb: omap2430: fix device leak at unbind
btrfs: populate otime when logging an inode item
ACPI: processor: idle: Check acpi_fetch_acpi_dev() return value
minmax: add umin(a, b) and umax(a, b)
ext4: fix hole length calculation overflow in non-extent inodes
platform/chrome: cros_ec: Make cros_ec_unregister() return void
platform/chrome: cros_ec: Use per-device lockdep key
platform/chrome: cros_ec: remove unneeded label and if-condition
platform/chrome: cros_ec: Unregister notifier in cros_ec_unregister()
pwm: mediatek: Implement .apply() callback
pwm: mediatek: Handle hardware enable and clock enable separately
pwm: mediatek: Fix duty and period setting
locking/barriers, kcsan: Support generic instrumentation
asm-generic: Add memory barrier dma_mb()
wifi: ath11k: fix dest ring-buffer corruption when ring is full
media: v4l2-ctrls: always copy the controls on completion
media: v4l2-ctrls: Don't reset handler's error in v4l2_ctrl_handler_free()
media: venus: don't de-reference NULL pointers at IRQ time
media: venus: hfi: explicitly release IRQ during teardown
media: venus: Add support for SSR trigger using fault injection
media: venus: protect against spurious interrupts during probe
drm/amd/display: Don't overclock DCE 6 by 15%
drm/dp: Change AUX DPCD probe address from DPCD_REV to LANE0_1_STATUS
media: qcom: camss: cleanup media device allocated resource on error path
f2fs: fix to avoid out-of-boundary access in dnode page
media: venus: vdec: Clamp param smaller than 1fps and bigger than 240.
uio_hv_generic: Fix another memory leak in error handling paths
dm: rearrange core declarations for extended use from dm-zone.c
dm rq: don't queue request to blk-mq during DM suspend
usb: dwc3: Remove DWC3 locking during gadget suspend/resume
usb: dwc3: core: remove lock of otg mode during gadget suspend/resume to avoid deadlock
gpio: rcar: Use raw_spinlock to protect register access
selftests: mptcp: pm: check flush doesn't reset limits
net: usbnet: Fix the wrong netif_carrier_on() call
compiler: remove __ADDRESSABLE_ASM{_STR,}() again
usb: xhci: Fix slot_id resource race conflict
iio: imu: inv_icm42600: change invalid data error to -EBUSY
tracing: Remove unneeded goto out logic
tracing: Limit access to parser->buffer when trace_get_user failed
iio: light: as73211: Ensure buffer holes are zeroed
mm/page_alloc: detect allocation forbidden by cpuset and bail out early
cgroup/cpuset: Use static_branch_enable_cpuslocked() on cpusets_insane_config_key
RDMA/bnxt_re: Fix to initialize the PBL array
scsi: qla4xxx: Prevent a potential error pointer dereference
iommu/amd: Avoid stack buffer overflow from kernel cmdline
mlxsw: spectrum: Forward packets with an IPv4 link-local source IP
ALSA: usb-audio: Fix size validation in convert_chmap_v3()
ipv6: sr: validate HMAC algorithm ID in seg6_hmac_info_add
ixgbe: xsk: resolve the negative overflow of budget in ixgbe_xmit_zc
net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit
net/sched: Remove unnecessary WARNING condition for empty child qdisc in htb_activate
ALSA: usb-audio: Use correct sub-type for UAC3 feature unit validation
s390/hypfs: Avoid unnecessary ioctl registration in debugfs
s390/hypfs: Enable limited access during lockdown
netfilter: nft_reject: unify reject init and dump into nft_reject
netfilter: nft_reject_inet: allow to use reject from inet ingress
netfilter: nf_reject: don't leak dst refcount for loopback packets
alloc_fdtable(): change calling conventions.
Linux 5.10.241
Change-Id: Idccdcccd9b3f5b96e3ea9e5a692fb719ba0658ed
Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>
|
||
|
Michael Bestas
|
314aa5ce56 |
Merge tag 'ASB-2025-08-05_12-5.10' of https://android.googlesource.com/kernel/common into android13-5.10-waipio
https://source.android.com/docs/security/bulletin/2025-08-01 * tag 'ASB-2025-08-05_12-5.10' of https://android.googlesource.com/kernel/common: ANDROID: bpf: do not fail to load if log is full BACKPORT: Add support for PIO p flag UPSTREAM: rtc: lib_test: add MODULE_LICENSE Revert "mm: hugetlb: independent PMD page table shared count" UPSTREAM: f2fs: compress: fix error path of inc_valid_block_count() BACKPORT: f2fs: compress: fix to avoid inconsistence bewteen i_blocks and dnode Revert "net: Rename ->stream_memory_read to ->sock_is_readable" Revert "net: Fix TOCTOU issue in sk_is_readable()" UPSTREAM: posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() Linux 5.10.239 scsi: qedf: Use designated initializer for struct qed_fcoe_cb_ops bpf: fix precision backtracking instruction iteration arm64/ptrace: Fix stack-out-of-bounds read in regs_get_kernel_stack_nth() perf: Fix sample vs do_exit() s390/pci: Fix __pcilg_mio_inuser() inline assembly rtc: test: Fix invalid format specifier. hwmon: (occ) Fix P10 VRM temp sensors mm/huge_memory: fix dereferencing invalid pmd migration entry net_sched: sch_sfq: move the limit validation net_sched: sch_sfq: use a temporary work area for validating configuration net_sched: sch_sfq: don't allow 1 packet limit net_sched: sch_sfq: handle bigger packets net_sched: sch_sfq: annotate data-races around q->perturb_period rtc: Make rtc_time64_to_tm() support dates before 1970 rtc: Improve performance of rtc_time64_to_tm(). Add tests. bpf: Fix L4 csum update on IPv6 in CHECKSUM_COMPLETE net: Fix checksum update for ILA adj-transport net/ipv4: fix type mismatch in inet_ehash_locks_alloc() causing build failure arm64: proton-pack: Add new CPUs 'k' values for branch mitigation arm64: insn: Add support for encoding DSB arm64: bpf: Only mitigate cBPF programs loaded by unprivileged users arm64: insn: add encoders for atomic operations arm64: bpf: Add BHB mitigation to the epilogue for cBPF programs arm64: move AARCH64_BREAK_FAULT into insn-def.h arm64: spectre: increase parameters that can be used to turn off bhb mitigation individually arm64: insn: Add barrier encodings arm64: proton-pack: Expose whether the branchy loop k value arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list arm64: errata: Assume that unknown CPUs _are_ vulnerable to Spectre BHB arm64: proton-pack: Expose whether the platform is mitigated by firmware serial: sh-sci: Increment the runtime usage counter for the earlycon device ARM: dts: am335x-bone-common: Increase MDIO reset deassert delay to 50ms ARM: dts: am335x-bone-common: Increase MDIO reset deassert time ARM: dts: am335x-bone-common: Add GPIO PHY reset on revision C3 board net: atm: fix /proc/net/atm/lec handling net: atm: add lec_mutex calipso: Fix null-ptr-deref in calipso_req_{set,del}attr(). tipc: fix null-ptr-deref when acquiring remote ip of ethernet bearer tcp: fix tcp_packet_delayed() for tcp_is_non_sack_preventing_reopen() behavior atm: atmtcp: Free invalid length skb in atmtcp_c_send(). mpls: Use rcu_dereference_rtnl() in mpls_route_input_rcu(). wifi: carl9170: do not ping device which has failed to load firmware net: ice: Perform accurate aRFS flow match aoe: clean device rq_list in aoedev_downdev() mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race mm: hugetlb: independent PMD page table shared count mm/hugetlb: unshare page tables during VMA split, not before hugetlb: unshare some PMDs when splitting VMAs ALSA: hda/realtek: enable headset mic on Latitude 5420 Rugged pldmfw: Select CRC32 when PLDMFW is selected ALSA: hda/intel: Add Thinkpad E15 to PM deny list hwmon: (occ) fix unaligned accesses hwmon: (occ) Rework attribute registration for stack usage hwmon: (occ) Add soft minimum power cap attribute hwmon: (occ) Add new temperature sensor type drm/nouveau/bl: increase buffer size to avoid truncate warning erofs: remove unused trace event erofs_destroy_inode ALSA: usb-audio: Rename ALSA kcontrol PCM and PCM1 for the KTMicro sound card Input: sparcspkr - avoid unannotated fall-through HID: usbhid: Eliminate recurrent out-of-bounds bug in usbhid_parse() atm: Revert atm_account_tx() if copy_from_iter_full() fails. selinux: fix selinux_xfrm_alloc_user() to set correct ctx_len udmabuf: use sgtable-based scatterlist wrappers scsi: s390: zfcp: Ensure synchronous unit_add scsi: storvsc: Increase the timeouts to storvsc_timeout jffs2: check jffs2_prealloc_raw_node_refs() result in few other places jffs2: check that raw node were preallocated before writing summary drivers/rapidio/rio_cm.c: prevent possible heap overwrite Revert "x86/bugs: Make spectre user default depend on MITIGATION_SPECTRE_V2" on v6.6 and older powerpc/eeh: Fix missing PE bridge reconfiguration during VFIO EEH recovery platform/x86: dell_rbu: Stop overwriting data buffer platform/x86: dell_rbu: Fix list usage platform: Add Surface platform directory Revert "bus: ti-sysc: Probe for l4_wkup and l4_cfg interconnect devices first" tee: Prevent size calculation wraparound on 32-bit kernels ARM: OMAP2+: Fix l4ls clk domain handling in STANDBY bus: fsl-mc: increase MC_CMD_COMPLETION_TIMEOUT_MS value watchdog: da9052_wdt: respect TWDMIN i40e: fix MMIO write access to an invalid page in i40e_clear_hw sock: Correct error checking condition for (assign|release)_proto_idx() scsi: lpfc: Use memcpy() for BIOS version software node: Correct a OOB check in software_node_get_reference_args() vxlan: Do not treat dst cache initialization errors as fatal iommu/amd: Ensure GA log notifier callbacks finish running before module unload scsi: lpfc: Fix lpfc_check_sli_ndlp() handling for GEN_REQUEST64 commands clk: rockchip: rk3036: mark ddrphy as critical wifi: mac80211: do not offer a mesh path if forwarding is disabled net: mlx4: add SOF_TIMESTAMPING_TX_SOFTWARE flag when getting ts info pinctrl: armada-37xx: propagate error from armada_37xx_gpio_get() pinctrl: armada-37xx: propagate error from armada_37xx_pmx_gpio_set_direction() pinctrl: armada-37xx: propagate error from armada_37xx_gpio_get_direction() pinctrl: armada-37xx: propagate error from armada_37xx_pmx_set_by_name() net: atlantic: generate software timestamp just before the doorbell ipv4/route: Use this_cpu_inc() for stats on PREEMPT_RT tcp: fix initial tp->rcvq_space.space value for passive TS enabled flows tcp: always seek for minimal rtt in tcp_rcv_rtt_update() net: dlink: add synchronization for stats update i2c: npcm: Add clock toggle recovery sctp: Do not wake readers in __sctp_write_space() wifi: mt76: mt76x2: Add support for LiteOn WN4516R,WN4519R emulex/benet: correct command version selection in be_cmd_get_stats() i2c: designware: Invoke runtime suspend on quick slave re-registration tipc: use kfree_sensitive() for aead cleanup net: macb: Check return value of dma_set_mask_and_coherent() cpufreq: Force sync policy boost with global boost on sysfs update thermal/drivers/qcom/tsens: Update conditions to strictly evaluate for IP v2+ nios2: force update_mmu_cache on spurious tlb-permission--related pagefaults media: platform: exynos4-is: Add hardware sync wait to fimc_is_hw_change_mode() media: tc358743: ignore video while HPD is low drm/amdkfd: Set SDMA_RLCx_IB_CNTL/SWITCH_INSIDE_IB drm/msm/dpu: don't select single flush for active CTL blocks jfs: Fix null-ptr-deref in jfs_ioc_trim drm/amdgpu/gfx9: fix CSIB handling drm/amdgpu/gfx8: fix CSIB handling drm/amdgpu/gfx7: fix CSIB handling ext4: prevent stale extent cache entries caused by concurrent get es_cache media: uapi: v4l: Change V4L2_TYPE_IS_CAPTURE condition sunrpc: fix race in cache cleanup causing stale nextcheck time drm/amdgpu/gfx10: fix CSIB handling media: rkvdec: Initialize the m2m context before the controls drm/msm/a6xx: Increase HFI response timeout jfs: fix array-index-out-of-bounds read in add_missing_indices drm/amd/display: Add NULL pointer checks in dm_force_atomic_commit() ext4: ext4: unify EXT4_EX_NOCACHE|NOFAIL flags in ext4_ext_remove_space() media: uapi: v4l: Fix V4L2_TYPE_IS_OUTPUT condition drm/msm/hdmi: add runtime PM calls to DDC transfer function exfat: fix double free in delayed_free drm/bridge: analogix_dp: Add irq flag IRQF_NO_AUTOEN instead of calling disable_irq() sunrpc: update nextcheck time when adding new cache entries drm/amdgpu/gfx6: fix CSIB handling ACPI: battery: negate current when discharging PM: runtime: fix denying of auto suspend in pm_suspend_timer_fn() ASoC: tegra210_ahub: Add check to of_device_get_match_data() ACPICA: utilities: Fix overflow check in vsnprintf() power: supply: bq27xxx: Retrieve again when busy ACPICA: fix acpi parse and parseext cache leaks ASoC: tas2770: Power cycle amp on ISENSE/VSENSE change ACPICA: Avoid sequence overread in call to strncmp() clocksource: Fix the CPUs' choice in the watchdog per CPU verification ACPICA: fix acpi operand cache leak in dswstate.c iio: adc: ad7606_spi: fix reg write value mask iio: imu: inv_icm42600: Fix temperature calculation PCI: Fix lock symmetry in pci_slot_unlock() PCI: Add ACS quirk for Loongson PCIe uio_hv_generic: Use correct size for interrupt and monitor pages regulator: max14577: Add error check for max14577_read_reg() mips: Add -std= flag specified in KBUILD_CFLAGS to vdso CFLAGS staging: iio: ad5933: Correct settling cycles encoding per datasheet net: ch9200: fix uninitialised access during mii_nway_restart ftrace: Fix UAF when lookup kallsym after ftrace disabled dm-mirror: fix a tiny race condition mtd: nand: sunxi: Add randomizer configuration before randomizer enable mtd: rawnand: sunxi: Add randomizer configuration in sunxi_nfc_hw_ecc_write_chunk mm: fix ratelimit_pages update error in dirty_ratio_handler() ipc: fix to protect IPCS lookups using RCU clk: meson-g12a: add missing fclk_div2 to spicc parisc: fix building with gcc-15 vgacon: Add check for vc_origin address range in vgacon_scroll() fbdev: Fix fb_set_var to prevent null-ptr-deref in fb_videomode_to_var EDAC/altera: Use correct write width with the INTTEST register NFC: nci: uart: Set tty->disc_data only in success path f2fs: fix to do sanity check on sit_bitmap_size f2fs: prevent kernel warning due to negative i_nlink from corrupted image Input: ims-pcu - check record size in ims_pcu_flash_firmware() ext4: ensure i_size is smaller than maxbytes ext4: factor out ext4_get_maxbytes() ext4: fix calculation of credits for extent tree modification ext4: inline: fix len overflow in ext4_prepare_inline_data bus: fsl-mc: do not add a device-link for the UAPI used DPMCP device ata: pata_via: Force PIO for ATAPI devices on VT6415/VT6330 bus: mhi: host: Fix conflict between power_up and SYSERR ARM: omap: pmic-cpcap: do not mess around without CPCAP or OMAP4 ARM: 9447/1: arm/memremap: fix arch_memremap_can_ram_remap() media: vivid: Change the siize of the composing media: vidtv: Terminating the subsequent process of initialization failure media: videobuf2: use sgtable-based scatterlist wrappers media: venus: Fix probe error handling media: v4l2-dev: fix error handling in __video_register_device() media: gspca: Add error handling for stv06xx_read_sensor() media: cxusb: no longer judge rbuf when the write fails media: ov8856: suppress probe deferral errors wifi: rtlwifi: disable ASPM for RTL8723BE with subsystem ID 11ad:1723 jbd2: fix data-race and null-ptr-deref in jbd2_journal_dirty_metadata() nfsd: Initialize ssc before laundromat_work to prevent NULL dereference nfsd: nfsd4_spo_must_allow() must check this is a v4 compound request wifi: p54: prevent buffer-overflow in p54_rx_eeprom_readback() net/mlx5: Add error handling in mlx5_query_nic_vport_node_guid() net/mlx5_core: Add error handling inmlx5_query_nic_vport_qkey_viol_cntr() ASoC: meson: meson-card-utils: use of_property_present() for DT parsing ASoC: qcom: sdm845: Add error handling in sdm845_slim_snd_hw_params() gfs2: move msleep to sleepable context crypto: marvell/cesa - Do not chain submitted requests configfs: Do not override creating attribute file failure in populate_attrs() tcp: tcp_data_ready() must look at SOCK_DONE kbuild: hdrcheck: fix cross build with clang kbuild: userprogs: fix bitsize and target detection on clang net: usb: aqc111: debug info before sanitation calipso: unlock rcu before returning -EAFNOSUPPORT x86/iopl: Cure TIF_IO_BITMAP inconsistencies xen/arm: call uaccess_ttbr0_enable for dm_op hypercall usb: Flush altsetting 0 endpoints before reinitializating them after reset. drm/amd/display: Do not add '-mhard-float' to dcn2{1,0}_resource.o for clang kbuild: Add KBUILD_CPPFLAGS to as-option invocation kbuild: add $(CLANG_FLAGS) to KBUILD_CPPFLAGS kbuild: Add CLANG_FLAGS to as-instr mips: Include KBUILD_CPPFLAGS in CHECKFLAGS invocation drm/amd/display: Do not add '-mhard-float' to dml_ccflags for clang kbuild: Update assembler calls to use proper flags and language target MIPS: Prefer cc-option for additions to cflags MIPS: Move '-Wa,-msoft-float' check from as-option to cc-option x86/boot/compressed: prefer cc-option for CFLAGS additions posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() fs/filesystems: Fix potential unsigned integer underflow in fs_name() net_sched: ets: fix a race in ets_qdisc_change() sch_ets: make est_qlen_notify() idempotent net_sched: tbf: fix a race in tbf_change() net_sched: red: fix a race in __red_change() net_sched: prio: fix a race in prio_tune() net/mlx5: Fix return value when searching for existing flow group net/mlx5: Ensure fw pages are always allocated on same NUMA net/mdiobus: Fix potential out-of-bounds read/write access net: mdio: C22 is now optional, EOPNOTSUPP if not provided macsec: MACsec SCI assignment for ES = 0 net: Fix TOCTOU issue in sk_is_readable() net: Rename ->stream_memory_read to ->sock_is_readable bpf: Clean up sockmap related Kconfigs tcp: factorize logic into tcp_epollin_ready() i40e: retry VFLR handling if there is ongoing VF reset i40e: return false from i40e_reset_vf if reset is in progress ath10k: snoc: fix unbalanced IRQ enable in crash recovery powerpc/vas: Return -EINVAL if the offset is non-zero in mmap() ath10k: prevent deinitializing NAPI twice powerpc/vas: Move VAS API to book3s common platform ath10k: add atomic protection for device recovery net_sched: sch_sfq: fix a potential crash on gso_skb handling serial: sh-sci: Clean sci_ports[0] after at earlycon exit scsi: iscsi: Fix incorrect error path labels for flashnode operations serial: sh-sci: Move runtime PM enable to sci_probe_single() serial: sh-sci: Check if TX data was written to device in .tx_empty() arm64: dts: ti: k3-am65-main: Add missing taps to sdhci0 arm64: dts: ti: k3-am65-main: Fix sdhci node properties arm64: dts: ti: k3-am65-main: Drop deprecated ti,otap-del-sel property Input: synaptics-rmi - fix crash with unsupported versions of F34 Input: synaptics-rmi4 - convert to use sysfs_emit() APIs pmdomain: core: Fix error checking in genpd_dev_pm_attach_by_id() do_change_type(): refuse to operate on unmounted/not ours mounts PM: sleep: Fix power.is_suspended cleanup for direct-complete devices vmxnet3: correctly report gso type for UDP tunnels ice: create new Tx scheduler nodes for new queues only Bluetooth: L2CAP: Fix not responding with L2CAP_CR_LE_ENCRYPTION spi: bcm63xx-hsspi: fix shared reset spi: bcm63xx-spi: fix shared reset net/mlx4_en: Prevent potential integer overflow calculating Hz driver: net: ethernet: mtk_star_emac: fix suspend/resume issue net: tipc: fix refcount warning in tipc_aead_encrypt gve: Fix RX_BUFFERS_POSTED stat to report per-queue fill_cnt net: stmmac: platform: guarantee uniqueness of bus_id vt: remove VT_RESIZE and VT_RESIZEX from vt_compat_ioctl() MIPS: Loongson64: Add missing '#interrupt-cells' for loongson64c_ls7a iio: adc: ad7124: Fix 3dB filter frequency reading serial: Fix potential null-ptr-deref in mlb_usio_probe() usb: renesas_usbhs: Reorder clock handling and power management in probe rtc: Fix offset calculation for .start_secs < 0 PCI/DPC: Initialize aer_err_info before using it dmaengine: ti: Add NULL check in udma_probe() PCI: cadence: Fix runtime atomic count underflow rtc: sh: assign correct interrupts with DT nfs: ignore SB_RDONLY when remounting nfs nfs: clear SB_RDONLY before getting superblock perf record: Fix incorrect --user-regs comments perf tests switch-tracking: Fix timestamp comparison mfd: stmpe-spi: Correct the name used in MODULE_DEVICE_TABLE mfd: exynos-lpass: Avoid calling exynos_lpass_disable() twice in exynos_lpass_remove() rpmsg: qcom_smd: Fix uninitialized return variable in __qcom_smd_send() perf scripts python: exported-sql-viewer.py: Fix pattern matching with Python 3 backlight: pm8941: Add NULL check in wled_configure() perf ui browser hists: Set actions->thread before calling do_zoom_thread() perf build: Warn when libdebuginfod devel files are not available fbdev: core: fbcvt: avoid division by 0 in fb_cvt_hperiod() soc: aspeed: Add NULL check in aspeed_lpc_enable_snoop() soc: aspeed: lpc: Fix impossible judgment condition arm64: dts: rockchip: disable unrouted USB controllers and PHY on RK3399 Puma with Haikou ARM: dts: qcom: apq8064 merge hw splinlock into corresponding syscon device bus: fsl-mc: fix double-free on mc_dev nilfs2: do not propagate ENOENT error from nilfs_btree_propagate() calipso: Don't call calipso functions for AF_INET sk. nilfs2: add pointer check for nilfs_direct_propagate() net: lan743x: rename lan743x_reset_phy to lan743x_hw_reset_phy Squashfs: check return result of sb_min_blocksize net: usb: aqc111: fix error handling of usbnet read calls arm64: dts: imx8mm-beacon: Fix RTC capacitive load netfilter: nft_tunnel: fix geneve_opt dump ARM: dts: at91: at91sam9263: fix NAND chip selects vfio/type1: Fix error unwind in migration dirty bitmap allocation ARM: dts: at91: usb_a9263: fix GPIO for Dataflash chip select f2fs: fix to correct check conditions in f2fs_cross_rename f2fs: use d_inode(dentry) cleanup dentry->d_inode net: phy: mscc: Stop clearing the the UDPv4 checksum for L2 frames net: openvswitch: Fix the dead loop of MPLS parse netfilter: nf_tables: nft_fib_ipv6: fix VRF ipv4/ipv6 result discrepancy wifi: ath9k_htc: Abort software beacon handling if disabled s390/bpf: Store backchain even for leaf progs clk: qcom: gcc-msm8939: Fix mclk0 & mclk1 for 24 MHz bpf: Fix WARN() in get_bpf_raw_tp_regs pinctrl: at91: Fix possible out-of-boundary access libbpf: Use proper errno value in nlattr ktls, sockmap: Fix missing uncharge operation clk: bcm: rpi: Add NULL check in raspberrypi_clk_register() RDMA/mlx5: Fix error flow upon firmware failure for RQ destruction netfilter: bridge: Move specific fragmented packet to slow_path instead of dropping it f2fs: clean up w/ fscrypt_is_bounce_page() RDMA/hns: Include hnae3.h in hns_roce_hw_v2.h wifi: rtw88: do not ignore hardware read error during DPK net: ncsi: Fix GCPS 64-bit member variables f2fs: fix to do sanity check on sbi->total_valid_block_count wifi: ath11k: fix node corruption in ar->arvifs list firmware: SDEI: Allow sdei initialization without ACPI_APEI_GHES drm/tegra: rgb: Fix the unbound reference count drm/vkms: Adjust vkms_state->active_planes allocation type drm: rcar-du: Fix memory leak in rcar_du_vsps_init() selftests/seccomp: fix syscall_restart test for arm compat firmware: psci: Fix refcount leak in psci_dt_init m68k: mac: Fix macintosh_config for Mac II media: rkvdec: Fix frame size enumeration drm/vmwgfx: Add seqno waiter for sync_files spi: sh-msiof: Fix maximum DMA transfer size ACPI: OSI: Stop advertising support for "3.0 _SCP Extensions" x86/mtrr: Check if fixed-range MTRRs exist in mtrr_save_fixed_ranges() PM: wakeup: Delete space in the end of string shown by pm_show_wakelocks() power: reset: at91-reset: Optimize at91_reset() EDAC/skx_common: Fix general protection fault crypto: sun8i-ce - move fallback ahash_request to the end of the struct crypto: xts - Only add ecb if it is not already there crypto: lrw - Only add ecb if it is not already there crypto: marvell/cesa - Avoid empty transfer descriptor crypto: marvell/cesa - Handle zero-length skcipher requests x86/cpu: Sanitize CPUID(0x80000000) output crypto: sun8i-ss - do not use sg_dma_len before calling DMA functions perf/core: Fix broken throttling when max_samples_per_tick=1 gfs2: gfs2_create_inode error handling fix netfilter: nft_socket: fix sk refcount leaks thunderbolt: Do not double dequeue a configuration request usb: usbtmc: Fix timeout value in get_stb usb: storage: Ignore UAS driver for SanDisk 3.2 Gen2 storage device usb: quirks: Add NO_LPM quirk for SanDisk Extreme 55AE acpi-cpufreq: Fix nominal_freq units to KHz in get_max_boost_ratio() pinctrl: armada-37xx: set GPIO output value before setting direction pinctrl: armada-37xx: use correct OUTPUT_VAL register for GPIOs > 31 tracing: Fix compilation warning on arm32 ANDROID: fix kernelci build breaks for dcn_calcs FROMGIT: f2fs: sysfs: export linear_lookup in features directory FROMGIT: f2fs: sysfs: add encoding_flags entry FROMGIT: f2fs: support to disable linear lookup fallback Revert "ANDROID: usb: Optimization the transfer rate of accessory mode in USB3.2 mode" BACKPORT: binder: Create safe versions of binder log files UPSTREAM: binder: Refactor binder_node print synchronization Revert "ipv6: save dontfrag in cork" UPSTREAM: tracing: Fix compilation warning on arm32 Revert "coredump: hand a pidfd to the usermode coredump helper" Revert "tcp: bring back NUMA dispersion in inet_ehash_locks_alloc()" Linux 5.10.238 perf/arm-cmn: Initialise cmn->cpu earlier xen/swiotlb: relax alignment requirements platform/x86: thinkpad_acpi: Ignore battery threshold change event notification platform/x86: fujitsu-laptop: Support Lifebook S2110 hotkeys tpm: tis: Double the timeout B to 4s spi: spi-sun4i: fix early activation um: let 'make clean' properly clean underlying SUBARCH as well platform/x86: thinkpad_acpi: Support also NEC Lavie X1475JAS nfs: don't share pNFS DS connections between net namespaces HID: quirks: Add ADATA XPG alpha wireless mouse support coredump: hand a pidfd to the usermode coredump helper fork: use pidfd_prepare() pid: add pidfd_prepare() coredump: fix error handling for replace_fd() net_sched: hfsc: Address reentrant enqueue adding class to eltree twice smb: client: Reset all search buffer pointers when releasing buffer smb: client: Fix use-after-free in cifs_fill_dirent drm/i915/gvt: fix unterminated-string-initialization warning kbuild: Disable -Wdefault-const-init-unsafe spi: spi-fsl-dspi: Reset SR flags before sending a new message spi: spi-fsl-dspi: Halt the module after a new message transfer spi: spi-fsl-dspi: restrict register range for regmap access mm/page_alloc.c: avoid infinite retries caused by cpuset race memcg: always call cond_resched() after fn() drm/edid: fixed the bug that hdr metadata was not reset llc: fix data loss when reading from a socket in llc_ui_recvmsg() ALSA: pcm: Fix race of buffer access at PCM OSS layer can: bcm: add missing rcu read protection for procfs content can: bcm: add locking for bcm_op runtime updates padata: do not leak refcount in reorder_work crypto: algif_hash - fix double free in hash_accept net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() net: dwmac-sun8i: Use parsed internal PHY address instead of 1 bridge: netfilter: Fix forwarding of fragmented packets xfrm: Sanitize marks before insert __legitimize_mnt(): check for MNT_SYNC_UMOUNT should be under mount_lock xenbus: Allow PVH dom0 a non-local xenstore btrfs: correct the order of prelim_ref arguments in btrfs__prelim_ref nvmet-tcp: don't restore null sk_state_change ALSA: hda/realtek: Add quirk for HP Spectre x360 15-df1xxx ASoC: Intel: bytcr_rt5640: Add DMI quirk for Acer Aspire SW3-013 pinctrl: meson: define the pull up/down resistor value as 60 kOhm drm: Add valid clones check drm/atomic: clarify the rules around drm_atomic_state->allow_modeset regulator: ad5398: Add device tree support spi: zynqmp-gqspi: Always acknowledge interrupts wifi: rtw88: Don't use static local variable in rtw8822b_set_tx_power_index_by_rate perf/amd/ibs: Fix perf_ibs_op.cnt_mask for CurCnt bpftool: Fix readlink usage in get_fd_type drm/ast: Find VBIOS mode from regular display size HID: usbkbd: Fix the bit shift number for LED_KANA scsi: st: Restore some drive settings after reset scsi: lpfc: Handle duplicate D_IDs in ndlp search-by D_ID routine rcu: fix header guard for rcu_all_qs() rcu: handle quiescent states for PREEMPT_RCU=n, PREEMPT_COUNT=y vxlan: Annotate FDB data races hwmon: (xgene-hwmon) use appropriate type for the latency value wifi: rtw88: Fix download_firmware_validate() for RTL8814AU ip: fib_rules: Fetch net from fib_rule in fib[46]_rule_configure(). net/mlx5e: reduce rep rxq depth to 256 for ECPF net/mlx5e: set the tx_queue_len for pfifo_fast net/mlx5: Extend Ethtool loopback selftest to support non-linear SKB drm/amd/display: Initial psr_version with correct setting phy: core: don't require set_mode() callback for phy_get_mode() to work net/mlx4_core: Avoid impossible mlx4_db_alloc() order value media: v4l: Memset argument to 0 before calling get_mbus_config pad op smack: recognize ipv4 CIPSO w/o categories pinctrl: devicetree: do not goto err when probing hogs in pinctrl_dt_to_map ASoC: soc-dai: check return value at snd_soc_dai_set_tdm_slot() ASoC: tas2764: Power up/down amp on mute ops ASoC: ops: Enforce platform maximum on initial value net/mlx5: Apply rate-limiting to high temperature warning net/mlx5: Modify LSB bitmask in temperature event to include only the first bit ACPI: HED: Always initialize before evged PCI: Fix old_size lower bound in calculate_iosize() too eth: mlx4: don't try to complete XDP frames in netpoll can: c_can: Use of_property_present() to test existence of DT property EDAC/ie31200: work around false positive build warning net: pktgen: fix access outside of user given buffer in pktgen_thread_write() wifi: rtw88: Fix rtw_desc_to_mcsrate() to handle MCS16-31 wifi: rtw88: Fix rtw_init_ht_cap() for RTL8814AU wifi: rtw88: Fix rtw_init_vht_cap() for RTL8814AU scsi: mpt3sas: Send a diag reset if target reset fails clocksource: mips-gic-timer: Enable counter when CPUs start MIPS: pm-cps: Use per-CPU variables as per-CPU, not per-core MIPS: Use arch specific syscall name match function libbpf: Fix out-of-bound read cpuidle: menu: Avoid discarding useful information x86/nmi: Add an emergency handler in nmi_desc & use it in nmi_shootdown_cpus() soc: ti: k3-socinfo: Do not use syscon helper to build regmap bonding: report duplicate MAC address in all situations net: xgene-v2: remove incorrect ACPI_PTR annotation drm/amdkfd: KFD release_work possible circular locking net/mlx5: Avoid report two health errors on same syndrome PCI: brcmstb: Add a softdep to MIP MSI-X driver PCI: brcmstb: Expand inbound window size up to 64GB fpga: altera-cvp: Increase credit timeout drm/mediatek: mtk_dpi: Add checks for reg_h_fre_con existence hwmon: (gpio-fan) Add missing mutex locks x86/bugs: Make spectre user default depend on MITIGATION_SPECTRE_V2 clk: imx8mp: inform CCF of maximum frequency of clocks ipv4: fib: Move fib_valid_key_len() to rtm_to_fib_config(). net: pktgen: fix mpls maximum labels list parsing net: ethernet: ti: cpsw_new: populate netdev of_node pinctrl: bcm281xx: Use "unsigned int" instead of bare "unsigned" media: cx231xx: set device_caps for 417 drm/amdgpu: Do not program AGP BAR regs under SRIOV in gfxhub_v1_0.c orangefs: Do not truncate file size dm cache: prevent BUG_ON by blocking retries on failed device resumes media: c8sectpfe: Call of_node_put(i2c_bus) only once in c8sectpfe_probe() ARM: tegra: Switch DSI-B clock parent to PLLD on Tegra114 ieee802154: ca8210: Use proper setters and getters for bitwise types rtc: ds1307: stop disabling alarms on probe tcp: bring back NUMA dispersion in inet_ehash_locks_alloc() powerpc/prom_init: Fixup missing #size-cells on PowerBook6,7 arm64: tegra: p2597: Fix gpio for vdd-1v8-dis regulator ipv6: save dontfrag in cork mmc: sdhci: Disable SD card clock before changing parameters arm64/mm: Check PUD_TYPE_TABLE in pud_bad() netfilter: conntrack: Bound nf_conntrack sysctl writes posix-timers: Add cond_resched() to posix_timer_add() search loop xen: Add support for XenServer 6.1 platform device dm: restrict dm device size to 2^63-512 bytes kbuild: fix argument parsing in scripts/config rtc: rv3032: fix EERD location tcp: reorganize tcp_in_ack_event() and tcp_count_delivered() scsi: st: ERASE does not change tape location scsi: st: Tighten the page format heuristics with MODE SELECT ext4: reorder capability check last um: Update min_low_pfn to match changes in uml_reserved um: Store full CSGSFS and SS register from mcontext btrfs: send: return -ENAMETOOLONG when attempting a path that is too long btrfs: avoid linker error in btrfs_find_create_tree_block() i2c: pxa: fix call balance of i2c->clk handling routines i2c: qup: Vote for interconnect bandwidth to DRAM mmc: host: Wait for Vdd to settle on card power off libnvdimm/labels: Fix divide error in nd_label_data_init() pNFS/flexfiles: Report ENETDOWN as a connection error tools/build: Don't pass test log files to linker dql: Fix dql->limit value when reset. thermal/drivers/qoriq: Power down TMU on system suspend SUNRPC: rpcbind should never reset the port to the value '0' SUNRPC: rpc_clnt_set_transport() must not change the autobind setting NFSv4: Treat ENETUNREACH errors as fatal for state recovery fbdev: core: tileblit: Implement missing margin clearing for tileblit fbcon: Use correct erase colour for clearing in fbcon fbdev: fsl-diu-fb: add missing device_remove_file() mailbox: use error ret code of of_parse_phandle_with_args() NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() kconfig: merge_config: use an empty file as initfile cgroup: Fix compilation issue due to cgroup_mutex not being exported dma-mapping: avoid potential unused data compilation warning scsi: target: iscsi: Fix timeout on deleted connection ice: arfs: fix use-after-free when freeing @rx_cpu_rmap netfilter: nf_tables: do not defer rule destruction via call_rcu netfilter: nf_tables: wait for rcu grace period on net_device removal netfilter: nf_tables: pass nft_chain to destroy function, not nft_ctx btrfs: don't BUG_ON() when 0 reference count at btrfs_lookup_extent_info() selftests/mm: compaction_test: support platform with huge mount of memory usb: typec: fix pm usage counter imbalance in ucsi_ccg_sync_control() usb: typec: fix potential array underflow in ucsi_ccg_sync_control() usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute group drm/vmwgfx: Fix a deadlock in dma buf fence polling ASoC: q6afe-clocks: fix reprobing of the driver clocksource/i8253: Use raw_spinlock_irqsave() in clockevent_i8253_disable() dmaengine: ti: k3-udma: Use cap_mask directly from dma_device structure instead of a local copy dmaengine: ti: k3-udma: Add missing locking wifi: mt76: disable napi on driver removal phy: renesas: rcar-gen3-usb2: Set timing registers only once phy: Fix error handling in tegra_xusb_port_init tracing: samples: Initialize trace_array_printk() with the correct function ALSA: es1968: Add error handling for snd_pcm_hw_constraint_pow2() ACPI: PPTT: Fix processor subtable walk dmaengine: Revert "dmaengine: dmatest: Fix dmatest waiting less when interrupted" NFSv4/pnfs: Reset the layout state after a layoutreturn qlcnic: fix memory leak in qlcnic_sriov_channel_cfg_cmd() ALSA: sh: SND_AICA should depend on SH_DMA_API net: dsa: sja1105: discard incoming frames in BR_STATE_LISTENING net: cadence: macb: Fix a possible deadlock in macb_halt_tx. net_sched: Flush gso_skb list too during ->change() spi: loopback-test: Do not split 1024-byte hexdumps nfs: handle failure of nfs_get_lock_context in unlock path RDMA/rxe: Fix slab-use-after-free Read in rxe_queue_cleanup bug iio: chemical: sps30: use aligned_s64 for timestamp iio: adc: ad7768-1: Fix insufficient alignment of timestamp. platform/x86: asus-wmi: Fix wlan_ctrl_by_user detection do_umount(): add missing barrier before refcount checks in sync case nvme: unblock ctrl state transition for firmware update drm/panel: simple: Update timings for AUO G101EVN010 MIPS: Fix MAX_REG_OFFSET iio: adc: dln2: Use aligned_s64 for timestamp types: Complement the aligned types with signed 64-bit one usb: usbtmc: Fix erroneous generic_read ioctl return usb: usbtmc: Fix erroneous wait_srq ioctl return usb: usbtmc: Fix erroneous get_stb ioctl error returns USB: usbtmc: use interruptible sleep in usbtmc_read usb: typec: ucsi: displayport: Fix NULL pointer access usb: typec: tcpm: delay SNK_TRY_WAIT_DEBOUNCE to SRC_TRYWAIT transition usb: host: tegra: Prevent host controller crash when OTG port is used usb: gadget: tegra-xudc: ACK ST_RC after clearing CTRL_RUN ocfs2: stop quota recovery before disabling quotas ocfs2: implement handshaking with ocfs2 recovery thread ocfs2: switch osb->disable_recovery to enum module: ensure that kobject_put() is safe for module type kobjects xenbus: Use kref to track req lifetime usb: uhci-platform: Make the clock really optional iio: imu: st_lsm6dsx: fix possible lockup in st_lsm6dsx_read_tagged_fifo iio: imu: st_lsm6dsx: fix possible lockup in st_lsm6dsx_read_fifo iio: adis16201: Correct inclinometer channel resolution iio: adc: ad7606: fix serial register access staging: axis-fifo: Correct handling of tx_fifo_depth for size validation staging: axis-fifo: Remove hardware resets for user errors staging: iio: adc: ad7816: Correct conditional logic for store mode Input: synaptics - enable InterTouch on TUXEDO InfinityBook Pro 14 v5 Input: synaptics - enable SMBus for HP Elitebook 850 G1 Input: synaptics - enable InterTouch on Dell Precision M3800 Input: synaptics - enable InterTouch on Dynabook Portege X30L-G Input: synaptics - enable InterTouch on Dynabook Portege X30-D net: dsa: b53: fix learning on VLAN unaware bridges net: dsa: b53: fix VLAN ID for untagged vlan on bridge leave net: dsa: b53: allow leaky reserved multicast netfilter: ipset: fix region locking in hash types can: gw: fix RCU/BH usage in cgw_create_job() rcu/kvfree: Add kvfree_rcu_mightsleep() and kfree_rcu_mightsleep() can: gw: use call_rcu() instead of costly synchronize_rcu() openvswitch: Fix unsafe attribute parsing in output_userspace() can: mcp251xfd: mcp251xfd_remove(): fix order of unregistration calls scsi: target: Fix WRITE_SAME No Data Buffer crash dm: fix copying after src array boundaries usb: chipidea: ci_hdrc_imx: implement usb_phy_init() error handling usb: chipidea: ci_hdrc_imx: use dev_err_probe() irqchip/gic-v2m: Prevent use after free of gicv2m_get_fwnode() irqchip/gic-v2m: Mark a few functions __init irqchip/gic-v2m: Add const to of_device_id Revert "drm/meson: vclk: fix calculation of 59.94 fractional rates" of: module: add buffer overflow check in of_modalias() PCI: imx6: Skip controller_id generation logic for i.MX7D net: fec: ERR007885 Workaround for conventional TX net: lan743x: Fix memleak issue when GSO enabled nvme-tcp: fix premature queue removal and I/O failover bnxt_en: Fix ethtool -d byte order for 32-bit values net: ipv6: fix UDPv6 GSO segmentation with NAT net: dlink: Correct endianness handling of led_mode net_sched: qfq: Fix double list add in class with netem as child qdisc net_sched: ets: Fix double list add in class with netem as child qdisc net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc net_sched: drr: Fix double list add in class with netem as child qdisc net/mlx5: E-switch, Fix error handling for enabling roce net/mlx5: Remove return statement exist at the end of void function net/mlx5: E-Switch, Initialize MAC Address for Default GID net/sched: act_mirred: don't override retval if we already lost the skb tracing: Fix oob write in trace_seq_to_buffer() iommu/vt-d: Apply quirk_iommu_igfx for 8086:0044 (QM57/QS57) iommu/amd: Fix potential buffer overflow in parse_ivrs_acpihid dm: always update the array size in realloc_argv on success dm-integrity: fix a warning on invalid table line wifi: brcm80211: fmac: Add error handling for brcmf_usb_dl_writeimage() mmc: renesas_sdhi: Fix error handling in renesas_sdhi_probe amd-xgbe: Fix to ensure dependent features are toggled with RX checksum offload parisc: Fix double SIGFPE crash i2c: imx-lpi2c: Fix clock count when probe defers EDAC/altera: Set DDR and SDMMC interrupt mask before registration EDAC/altera: Test the correct error reg offset drm/nouveau: Fix WARN_ON in nouveau_fence_context_kill() ALSA: usb-audio: Add second USB ID for Jabra Evolve 65 headset Conflicts: Makefile drivers/bus/mhi/host/pm.c drivers/platform/Kconfig drivers/platform/Makefile scripts/Kbuild.include Change-Id: I301b8b5a24eeb219f74eeb64929641a8d76d6dd3 |
||
|
Pavel Tikhomirov
|
75d4019201 |
move_mount: allow to add a mount into an existing group
[ Upstream commit 9ffb14ef61bab83fa818736bf3e7e6b6e182e8e2 ] Previously a sharing group (shared and master ids pair) can be only inherited when mount is created via bindmount. This patch adds an ability to add an existing private mount into an existing sharing group. With this functionality one can first create the desired mount tree from only private mounts (without the need to care about undesired mount propagation or mount creation order implied by sharing group dependencies), and next then setup any desired mount sharing between those mounts in tree as needed. This allows CRIU to restore any set of mount namespaces, mount trees and sharing group trees for a container. We have many issues with restoring mounts in CRIU related to sharing groups and propagation: - reverse sharing groups vs mount tree order requires complex mounts reordering which mostly implies also using some temporary mounts (please see https://lkml.org/lkml/2021/3/23/569 for more info) - mount() syscall creates tons of mounts due to propagation - mount re-parenting due to propagation - "Mount Trap" due to propagation - "Non Uniform" propagation, meaning that with different tricks with mount order and temporary children-"lock" mounts one can create mount trees which can't be restored without those tricks (see https://www.linuxplumbersconf.org/event/7/contributions/640/) With this new functionality we can resolve all the problems with propagation at once. Link: https://lore.kernel.org/r/20210715100714.120228-1-ptikhomirov@virtuozzo.com Cc: Eric W. Biederman <ebiederm@xmission.com> Cc: Alexander Viro <viro@zeniv.linux.org.uk> Cc: Christian Brauner <christian.brauner@ubuntu.com> Cc: Mattias Nissler <mnissler@chromium.org> Cc: Aleksa Sarai <cyphar@cyphar.com> Cc: Andrei Vagin <avagin@gmail.com> Cc: linux-fsdevel@vger.kernel.org Cc: linux-api@vger.kernel.org Cc: lkml <linux-kernel@vger.kernel.org> Co-developed-by: Andrei Vagin <avagin@gmail.com> Acked-by: Christian Brauner <christian.brauner@ubuntu.com> Signed-off-by: Pavel Tikhomirov <ptikhomirov@virtuozzo.com> Signed-off-by: Andrei Vagin <avagin@gmail.com> Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com> Stable-dep-of: cffd0441872e ("use uniform permission checks for all mount propagation changes") Signed-off-by: Sasha Levin <sashal@kernel.org> |
||
|
Jakub Kicinski
|
281c1cff81 |
uapi: in6: restore visibility of most IPv6 socket options
[ Upstream commit 31557b3487b349464daf42bc4366153743c1e727 ] A decade ago commit |
||
|
Pavel Begunkov
|
27df8ad87f |
io_uring: don't use int for ABI
commit cf73d9970ea4f8cace5d8f02d2565a2723003112 upstream.
__kernel_rwf_t is defined as int, the actual size of which is
implementation defined. It won't go well if some compiler / archs
ever defines it as i64, so replace it with __u32, hoping that
there is no one using i16 for it.
Cc: stable@vger.kernel.org
Fixes:
|
||
|
Greg Kroah-Hartman
|
d32c80babb |
Revert "vm_sockets: Add flags field in the vsock address data structure"
This reverts commit
|
||
|
Greg Kroah-Hartman
|
75080868be |
Revert "vm_sockets: Add VMADDR_FLAG_TO_HOST vsock flag"
This reverts commit
|
||
|
Greg Kroah-Hartman
|
cab4cd3ccf |
Merge 5.10.240 into android12-5.10-lts
Changes in 5.10.240
cifs: Fix cifs_query_path_info() for Windows NT servers
NFSv4.2: fix listxattr to return selinux security label
mailbox: Not protect module_put with spin_lock_irqsave
mfd: max14577: Fix wakeup source leaks on device unbind
leds: multicolor: Fix intensity setting while SW blinking
hwmon: (pmbus/max34440) Fix support for max34451
dmaengine: xilinx_dma: Set dma_device directions
md/md-bitmap: fix dm-raid max_write_behind setting
bcache: fix NULL pointer in cache_set_flush()
iio: pressure: zpa2326: Use aligned_s64 for the timestamp
um: Add cmpxchg8b_emu and checksum functions to asm-prototypes.h
usb: potential integer overflow in usbg_make_tpg()
usb: common: usb-conn-gpio: use a unique name for usb connector device
usb: Add checks for snprintf() calls in usb_alloc_dev()
usb: cdc-wdm: avoid setting WDM_READ for ZLP-s
usb: typec: displayport: Receive DP Status Update NAK request exit dp altmode
ALSA: hda: Ignore unsol events for cards being shut down
ALSA: hda: Add new pci id for AMD GPU display HD audio controller
ceph: fix possible integer overflow in ceph_zero_objects()
ovl: Check for NULL d_inode() in ovl_dentry_upper()
VMCI: check context->notify_page after call to get_user_pages_fast() to avoid GPF
VMCI: fix race between vmci_host_setup_notify and vmci_ctx_unset_notify
usb: typec: tcpci_maxim: Fix uninitialized return variable
usb: typec: tcpci_maxim: remove redundant assignment
usb: typec: tcpci_maxim: add terminating newlines to logging
usb: typec: tcpm/tcpci_maxim: Fix bounds check in process_rx()
fs/jfs: consolidate sanity checking in dbMount
jfs: validate AG parameters in dbMount() to prevent crashes
media: omap3isp: use sgtable-based scatterlist wrappers
can: tcan4x5x: fix power regulator retrieval during probe
f2fs: don't over-report free space or inodes in statvfs
RDMA/core: Use refcount_t instead of atomic_t on refcount of iwcm_id_private
RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction
uio: uio_hv_generic: use devm_kzalloc() for private data alloc
Drivers: hv: vmbus: Fix duplicate CPU assignments within a device
Drivers: hv: Rename 'alloced' to 'allocated'
Drivers: hv: vmbus: Add utility function for querying ring size
uio_hv_generic: Query the ringbuffer size for device
uio_hv_generic: Align ring size to system page
PCI: cadence-ep: Correct PBA offset in .set_msix() callback
net_sched: sch_sfq: reject invalid perturb period
i2c: tiny-usb: disable zero-length read messages
i2c: robotfuzz-osif: disable zero-length read messages
atm: clip: prevent NULL deref in clip_push()
ALSA: usb-audio: Fix out-of-bounds read in snd_usb_get_audioformat_uac3()
attach_recursive_mnt(): do not lock the covering tree when sliding something under it
libbpf: Fix null pointer dereference in btf_dump__free on allocation failure
wifi: mac80211: fix beacon interval calculation overflow
vsock/uapi: fix linux/vm_sockets.h userspace compilation errors
um: ubd: Add missing error check in start_io_thread()
net: enetc: Correct endianness handling in _enetc_rd_reg64
atm: Release atm_dev_mutex after removing procfs in atm_dev_deregister().
dt-bindings: serial: 8250: Make clocks and clock-frequency exclusive
Bluetooth: L2CAP: Fix L2CAP MTU negotiation
dm-raid: fix variable in journal device check
btrfs: update superblock's device bytes_used when dropping chunk
HID: wacom: fix memory leak on kobject creation failure
HID: wacom: fix memory leak on sysfs attribute creation failure
HID: wacom: fix kobject reference count leak
drm/tegra: Assign plane type before registration
drm/tegra: Fix a possible null pointer dereference
drm/udl: Unregister device before cleaning up on disconnect
drm/amdkfd: Fix race in GWS queue scheduling
drm/bridge: cdns-dsi: Fix the clock variable for mode_valid()
drm/bridge: cdns-dsi: Fix connecting to next bridge
drm/bridge: cdns-dsi: Check return value when getting default PHY config
drm/bridge: cdns-dsi: Wait for Clk and Data Lanes to be ready
PCI: hv: Do not set PCI_COMMAND_MEMORY to reduce VM boot time
s390: Add '-std=gnu11' to decompressor and purgatory CFLAGS
Revert "ipv6: save dontfrag in cork"
arm64: Restrict pagetable teardown to avoid false warning
rtc: cmos: use spin_lock_irqsave in cmos_interrupt
vsock/vmci: Clear the vmci transport packet properly when initializing it
mmc: sdhci: Add a helper function for dump register in dynamic debug mode
Revert "mmc: sdhci: Disable SD card clock before changing parameters"
usb: typec: altmodes/displayport: do not index invalid pin_assignments
mtk-sd: Fix a pagefault in dma_unmap_sg() for not prepared data
platform/mellanox: mlxbf-tmfifo: fix vring_desc.len assignment
RDMA/mlx5: Initialize obj_event->obj_sub_list before xa_insert
nfs: Clean up /proc/net/rpc/nfs when nfs_fs_proc_net_init() fails.
NFSv4/pNFS: Fix a race to wake on NFS_LAYOUT_DRAIN
scsi: qla2xxx: Fix DMA mapping test in qla24xx_get_port_database()
scsi: qla4xxx: Fix missing DMA mapping error in qla4xxx_alloc_pdu()
scsi: ufs: core: Fix spelling of a sysfs attribute name
RDMA/mlx5: Fix CC counters query for MPV
btrfs: fix missing error handling when searching for inode refs during log replay
drm/exynos: fimd: Guard display clock control with runtime PM calls
spi: spi-fsl-dspi: Clear completion counter before initiating transfer
drm/i915/selftests: Change mock_request() to return error pointers
drm/i915/gt: Fix timeline left held on VMA alloc error
lib: test_objagg: Set error message in check_expect_hints_stats()
amd-xgbe: align CL37 AN sequence as per databook
enic: fix incorrect MTU comparison in enic_change_mtu()
net: rose: Fix fall-through warnings for Clang
rose: fix dangling neighbour pointers in rose_rt_device_down()
nui: Fix dma_mapping_error() check
net/sched: Always pass notifications when child class becomes empty
ALSA: sb: Force to disable DMAs once when DMA mode is changed
ata: pata_cs5536: fix build on 32-bit UML
powerpc: Fix struct termio related ioctl macros
scsi: target: Fix NULL pointer dereference in core_scsi3_decode_spec_i_port()
wifi: mac80211: drop invalid source address OCB frames
wifi: ath6kl: remove WARN on bad firmware input
ACPICA: Refuse to evaluate a method if arguments are missing
rcu: Return early if callback is not specified
regulator: gpio: Fix the out-of-bounds access to drvdata::gpiods
mmc: mediatek: use data instead of mrq parameter from msdc_{un}prepare_data()
mtk-sd: Prevent memory corruption from DMA map failure
mtk-sd: reset host->mrq on prepare_data() error
drm/v3d: Disable interrupts before resetting the GPU
RDMA/mlx5: Fix vport loopback for MPV device
flexfiles/pNFS: update stats on NFS4ERR_DELAY for v4.1 DSes
NFSv4/flexfiles: Fix handling of NFS level errors in I/O
btrfs: propagate last_unlink_trans earlier when doing a rmdir
btrfs: use btrfs_record_snapshot_destroy() during rmdir
dpaa2-eth: rename dpaa2_eth_xdp_release_buf into dpaa2_eth_recycle_buf
dpaa2-eth: Update dpni_get_single_step_cfg command
dpaa2-eth: Update SINGLE_STEP register access
net: dpaa2-eth: rearrange variable in dpaa2_eth_get_ethtool_stats
dpaa2-eth: fix xdp_rxq_info leak
xhci: dbctty: disable ECHO flag by default
xhci: dbc: Flush queued requests before stopping dbc
Logitech C-270 even more broken
usb: typec: displayport: Fix potential deadlock
ACPI: PAD: fix crash in exit_round_robin()
media: uvcvideo: Return the number of processed controls
media: uvcvideo: Send control events for partial succeeds
media: uvcvideo: Rollback non processed entities on error
staging: rtl8723bs: Avoid memset() in aes_cipher() and aes_decipher()
drm/exynos: exynos7_drm_decon: add vblank check in IRQ handling
ASoC: fsl_asrc: use internal measured ratio for non-ideal ratio mode
perf: Revert to requiring CAP_SYS_ADMIN for uprobes
fix proc_sys_compare() handling of in-lookup dentries
netlink: Fix wraparounds of sk->sk_rmem_alloc.
tipc: Fix use-after-free in tipc_conn_close().
vsock: Fix transport_{g2h,h2g} TOCTOU
vm_sockets: Add flags field in the vsock address data structure
vm_sockets: Add VMADDR_FLAG_TO_HOST vsock flag
af_vsock: Set VMADDR_FLAG_TO_HOST flag on the receive path
af_vsock: Assign the vsock transport considering the vsock address flags
vsock: Fix transport_* TOCTOU
vsock: Fix IOCTL_VM_SOCKETS_GET_LOCAL_CID to check also `transport_local`
net: phy: smsc: Fix Auto-MDIX configuration when disabled by strap
net: phy: smsc: Fix link failure in forced mode with Auto-MDIX
atm: clip: Fix potential null-ptr-deref in to_atmarpd().
atm: clip: Fix memory leak of struct clip_vcc.
atm: clip: Fix infinite recursive call of clip_push().
atm: clip: Fix NULL pointer dereference in vcc_sendmsg()
net/sched: Abort __tc_modify_qdisc if parent class does not exist
fs/proc: do_task_stat: use __for_each_thread()
rxrpc: Fix oops due to non-existence of prealloc backlog struct
Documentation: x86/bugs/its: Add ITS documentation
x86/bhi: Define SPEC_CTRL_BHI_DIS_S
x86/its: Enumerate Indirect Target Selection (ITS) bug
x86/alternatives: Introduce int3_emulate_jcc()
x86/alternatives: Teach text_poke_bp() to patch Jcc.d32 instructions
x86/its: Add support for ITS-safe indirect thunk
x86/alternative: Optimize returns patching
x86/alternatives: Remove faulty optimization
x86/its: Add support for ITS-safe return thunk
x86/its: Fix undefined reference to cpu_wants_rethunk_at()
x86/its: Enable Indirect Target Selection mitigation
x86/its: Add "vmexit" option to skip mitigation on some CPUs
x86/modules: Set VM_FLUSH_RESET_PERMS in module_alloc()
x86/its: Use dynamic thunks for indirect branches
x86/its: Fix build errors when CONFIG_MODULES=n
x86/its: FineIBT-paranoid vs ITS
x86/mce/amd: Fix threshold limit reset
x86/mce: Don't remove sysfs if thresholding sysfs init fails
x86/mce: Make sure CMCI banks are cleared during shutdown on Intel
pinctrl: qcom: msm: mark certain pins as invalid for interrupts
drm/sched: Increment job count before swapping tail spsc queue
usb: gadget: u_serial: Fix race condition in TTY wakeup
Revert "ACPI: battery: negate current when discharging"
ethernet: atl1: Add missing DMA mapping error checks and count errors
rtc: lib_test: add MODULE_LICENSE
pwm: mediatek: Ensure to disable clocks in error path
netlink: Fix rmem check in netlink_broadcast_deliver().
netlink: make sure we allow at least one dump skb
Input: xpad - add support for Amazon Game Controller
Input: xpad - add VID for Turtle Beach controllers
Input: xpad - support Acer NGR 200 Controller
dma-buf: fix timeout handling in dma_resv_wait_timeout v2
wifi: zd1211rw: Fix potential NULL pointer dereference in zd_mac_tx_to_dev()
md/raid1: Fix stack memory use after return in raid1_reshape
net: appletalk: Fix device refcount leak in atrtr_create()
net: phy: microchip: limit 100M workaround to link-down events on LAN88xx
can: m_can: m_can_handle_lost_msg(): downgrade msg lost in rx message to debug level
net: ll_temac: Fix missing tx_pending check in ethtools_set_ringparam()
bnxt_en: Fix DCB ETS validation
bnxt_en: Set DMA unmap len correctly for XDP_REDIRECT
atm: idt77252: Add missing `dma_map_error()`
um: vector: Reduce stack usage in vector_eth_configure()
net: usb: qmi_wwan: add SIMCom 8230C composition
vt: add missing notification when switching back to text mode
HID: Add IGNORE quirk for SMARTLINKTECHNOLOGY
HID: quirks: Add quirk for 2 Chicony Electronics HP 5MP Cameras
Input: atkbd - do not skip atkbd_deactivate() when skipping ATKBD_CMD_GETID
vhost-scsi: protect vq->log_used with vq->mutex
x86/mm: Disable hugetlb page table sharing on 32-bit
x86/bugs: Rename MDS machinery to something more generic
x86/bugs: Add a Transient Scheduler Attacks mitigation
KVM: x86: add support for CPUID leaf 0x80000021
KVM: SVM: Advertise TSA CPUID bits to guests
x86/process: Move the buffer clearing before MONITOR
rseq: Fix segfault on registration when rseq_cs is non-zero
Linux 5.10.240
Change-Id: I75c56007632194306321eca64ab10f3d2531da3d
Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>
|
||
|
Andra Paraschiv
|
29dbdd234b |
vm_sockets: Add VMADDR_FLAG_TO_HOST vsock flag
[ Upstream commit caaf95e0f23f9ed240b02251aab0f6fdb652b33d ] Add VMADDR_FLAG_TO_HOST vsock flag that is used to setup a vsock connection where all the packets are forwarded to the host. Then, using this type of vsock channel, vsock communication between sibling VMs can be built on top of it. Changelog v3 -> v4 * Update the "VMADDR_FLAG_TO_HOST" value, as the size of the field has been updated to 1 byte. v2 -> v3 * Update comments to mention when the flag is set in the connect and listen paths. v1 -> v2 * New patch in v2, it was split from the first patch in the series. * Remove the default value for the vsock flags field. * Update the naming for the vsock flag to "VMADDR_FLAG_TO_HOST". Signed-off-by: Andra Paraschiv <andraprs@amazon.com> Reviewed-by: Stefano Garzarella <sgarzare@redhat.com> Signed-off-by: Jakub Kicinski <kuba@kernel.org> Stable-dep-of: 687aa0c5581b ("vsock: Fix transport_* TOCTOU") Signed-off-by: Sasha Levin <sashal@kernel.org> |
||
|
Andra Paraschiv
|
40e6fbd09c |
vm_sockets: Add flags field in the vsock address data structure
[ Upstream commit dc8eeef73b63ed8988224ba6b5ed19a615163a7f ] vsock enables communication between virtual machines and the host they are running on. With the multi transport support (guest->host and host->guest), nested VMs can also use vsock channels for communication. In addition to this, by default, all the vsock packets are forwarded to the host, if no host->guest transport is loaded. This behavior can be implicitly used for enabling vsock communication between sibling VMs. Add a flags field in the vsock address data structure that can be used to explicitly mark the vsock connection as being targeted for a certain type of communication. This way, can distinguish between different use cases such as nested VMs and sibling VMs. This field can be set when initializing the vsock address variable used for the connect() call. Changelog v3 -> v4 * Update the size of "svm_flags" field to be 1 byte instead of 2 bytes. v2 -> v3 * Add "svm_flags" as a new field, not reusing "svm_reserved1". v1 -> v2 * Update the field name to "svm_flags". * Split the current patch in 2 patches. Signed-off-by: Andra Paraschiv <andraprs@amazon.com> Reviewed-by: Stefano Garzarella <sgarzare@redhat.com> Signed-off-by: Jakub Kicinski <kuba@kernel.org> Stable-dep-of: 687aa0c5581b ("vsock: Fix transport_* TOCTOU") Signed-off-by: Sasha Levin <sashal@kernel.org> |
||
|
Stefano Garzarella
|
162ac8836c |
vsock/uapi: fix linux/vm_sockets.h userspace compilation errors
[ Upstream commit 22bbc1dcd0d6785fb390c41f0dd5b5e218d23bdd ]
If a userspace application just include <linux/vm_sockets.h> will fail
to build with the following errors:
/usr/include/linux/vm_sockets.h:182:39: error: invalid application of ‘sizeof’ to incomplete type ‘struct sockaddr’
182 | unsigned char svm_zero[sizeof(struct sockaddr) -
| ^~~~~~
/usr/include/linux/vm_sockets.h:183:39: error: ‘sa_family_t’ undeclared here (not in a function)
183 | sizeof(sa_family_t) -
|
Include <sys/socket.h> for userspace (guarded by ifndef __KERNEL__)
where `struct sockaddr` and `sa_family_t` are defined.
We already do something similar in <linux/mptcp.h> and <linux/if.h>.
Fixes:
|
||
|
Greg Kroah-Hartman
|
50582c0538 |
Merge 5.10.239 into android12-5.10-lts
Changes in 5.10.239
tracing: Fix compilation warning on arm32
pinctrl: armada-37xx: use correct OUTPUT_VAL register for GPIOs > 31
pinctrl: armada-37xx: set GPIO output value before setting direction
acpi-cpufreq: Fix nominal_freq units to KHz in get_max_boost_ratio()
usb: quirks: Add NO_LPM quirk for SanDisk Extreme 55AE
usb: storage: Ignore UAS driver for SanDisk 3.2 Gen2 storage device
usb: usbtmc: Fix timeout value in get_stb
thunderbolt: Do not double dequeue a configuration request
netfilter: nft_socket: fix sk refcount leaks
gfs2: gfs2_create_inode error handling fix
perf/core: Fix broken throttling when max_samples_per_tick=1
crypto: sun8i-ss - do not use sg_dma_len before calling DMA functions
x86/cpu: Sanitize CPUID(0x80000000) output
crypto: marvell/cesa - Handle zero-length skcipher requests
crypto: marvell/cesa - Avoid empty transfer descriptor
crypto: lrw - Only add ecb if it is not already there
crypto: xts - Only add ecb if it is not already there
crypto: sun8i-ce - move fallback ahash_request to the end of the struct
EDAC/skx_common: Fix general protection fault
power: reset: at91-reset: Optimize at91_reset()
PM: wakeup: Delete space in the end of string shown by pm_show_wakelocks()
x86/mtrr: Check if fixed-range MTRRs exist in mtrr_save_fixed_ranges()
ACPI: OSI: Stop advertising support for "3.0 _SCP Extensions"
spi: sh-msiof: Fix maximum DMA transfer size
drm/vmwgfx: Add seqno waiter for sync_files
media: rkvdec: Fix frame size enumeration
m68k: mac: Fix macintosh_config for Mac II
firmware: psci: Fix refcount leak in psci_dt_init
selftests/seccomp: fix syscall_restart test for arm compat
drm: rcar-du: Fix memory leak in rcar_du_vsps_init()
drm/vkms: Adjust vkms_state->active_planes allocation type
drm/tegra: rgb: Fix the unbound reference count
firmware: SDEI: Allow sdei initialization without ACPI_APEI_GHES
wifi: ath11k: fix node corruption in ar->arvifs list
f2fs: fix to do sanity check on sbi->total_valid_block_count
net: ncsi: Fix GCPS 64-bit member variables
wifi: rtw88: do not ignore hardware read error during DPK
RDMA/hns: Include hnae3.h in hns_roce_hw_v2.h
f2fs: clean up w/ fscrypt_is_bounce_page()
netfilter: bridge: Move specific fragmented packet to slow_path instead of dropping it
RDMA/mlx5: Fix error flow upon firmware failure for RQ destruction
clk: bcm: rpi: Add NULL check in raspberrypi_clk_register()
ktls, sockmap: Fix missing uncharge operation
libbpf: Use proper errno value in nlattr
pinctrl: at91: Fix possible out-of-boundary access
bpf: Fix WARN() in get_bpf_raw_tp_regs
clk: qcom: gcc-msm8939: Fix mclk0 & mclk1 for 24 MHz
s390/bpf: Store backchain even for leaf progs
wifi: ath9k_htc: Abort software beacon handling if disabled
netfilter: nf_tables: nft_fib_ipv6: fix VRF ipv4/ipv6 result discrepancy
vfio/type1: Fix error unwind in migration dirty bitmap allocation
netfilter: nft_tunnel: fix geneve_opt dump
net: usb: aqc111: fix error handling of usbnet read calls
net: lan743x: rename lan743x_reset_phy to lan743x_hw_reset_phy
calipso: Don't call calipso functions for AF_INET sk.
net: openvswitch: Fix the dead loop of MPLS parse
net: phy: mscc: Stop clearing the the UDPv4 checksum for L2 frames
f2fs: use d_inode(dentry) cleanup dentry->d_inode
f2fs: fix to correct check conditions in f2fs_cross_rename
ARM: dts: at91: usb_a9263: fix GPIO for Dataflash chip select
ARM: dts: at91: at91sam9263: fix NAND chip selects
arm64: dts: imx8mm-beacon: Fix RTC capacitive load
Squashfs: check return result of sb_min_blocksize
nilfs2: add pointer check for nilfs_direct_propagate()
nilfs2: do not propagate ENOENT error from nilfs_btree_propagate()
bus: fsl-mc: fix double-free on mc_dev
ARM: dts: qcom: apq8064 merge hw splinlock into corresponding syscon device
arm64: dts: rockchip: disable unrouted USB controllers and PHY on RK3399 Puma with Haikou
soc: aspeed: lpc: Fix impossible judgment condition
soc: aspeed: Add NULL check in aspeed_lpc_enable_snoop()
fbdev: core: fbcvt: avoid division by 0 in fb_cvt_hperiod()
perf build: Warn when libdebuginfod devel files are not available
perf ui browser hists: Set actions->thread before calling do_zoom_thread()
backlight: pm8941: Add NULL check in wled_configure()
perf scripts python: exported-sql-viewer.py: Fix pattern matching with Python 3
rpmsg: qcom_smd: Fix uninitialized return variable in __qcom_smd_send()
mfd: exynos-lpass: Avoid calling exynos_lpass_disable() twice in exynos_lpass_remove()
mfd: stmpe-spi: Correct the name used in MODULE_DEVICE_TABLE
perf tests switch-tracking: Fix timestamp comparison
perf record: Fix incorrect --user-regs comments
nfs: clear SB_RDONLY before getting superblock
nfs: ignore SB_RDONLY when remounting nfs
rtc: sh: assign correct interrupts with DT
PCI: cadence: Fix runtime atomic count underflow
dmaengine: ti: Add NULL check in udma_probe()
PCI/DPC: Initialize aer_err_info before using it
rtc: Fix offset calculation for .start_secs < 0
usb: renesas_usbhs: Reorder clock handling and power management in probe
serial: Fix potential null-ptr-deref in mlb_usio_probe()
iio: adc: ad7124: Fix 3dB filter frequency reading
MIPS: Loongson64: Add missing '#interrupt-cells' for loongson64c_ls7a
vt: remove VT_RESIZE and VT_RESIZEX from vt_compat_ioctl()
net: stmmac: platform: guarantee uniqueness of bus_id
gve: Fix RX_BUFFERS_POSTED stat to report per-queue fill_cnt
net: tipc: fix refcount warning in tipc_aead_encrypt
driver: net: ethernet: mtk_star_emac: fix suspend/resume issue
net/mlx4_en: Prevent potential integer overflow calculating Hz
spi: bcm63xx-spi: fix shared reset
spi: bcm63xx-hsspi: fix shared reset
Bluetooth: L2CAP: Fix not responding with L2CAP_CR_LE_ENCRYPTION
ice: create new Tx scheduler nodes for new queues only
vmxnet3: correctly report gso type for UDP tunnels
PM: sleep: Fix power.is_suspended cleanup for direct-complete devices
do_change_type(): refuse to operate on unmounted/not ours mounts
pmdomain: core: Fix error checking in genpd_dev_pm_attach_by_id()
Input: synaptics-rmi4 - convert to use sysfs_emit() APIs
Input: synaptics-rmi - fix crash with unsupported versions of F34
arm64: dts: ti: k3-am65-main: Drop deprecated ti,otap-del-sel property
arm64: dts: ti: k3-am65-main: Fix sdhci node properties
arm64: dts: ti: k3-am65-main: Add missing taps to sdhci0
serial: sh-sci: Check if TX data was written to device in .tx_empty()
serial: sh-sci: Move runtime PM enable to sci_probe_single()
serial: sh-sci: Clean sci_ports[0] after at earlycon exit
ath10k: add atomic protection for device recovery
ath10k: prevent deinitializing NAPI twice
ath10k: snoc: fix unbalanced IRQ enable in crash recovery
scsi: iscsi: Fix incorrect error path labels for flashnode operations
net_sched: sch_sfq: fix a potential crash on gso_skb handling
powerpc/vas: Move VAS API to book3s common platform
powerpc/vas: Return -EINVAL if the offset is non-zero in mmap()
i40e: return false from i40e_reset_vf if reset is in progress
i40e: retry VFLR handling if there is ongoing VF reset
tcp: factorize logic into tcp_epollin_ready()
bpf: Clean up sockmap related Kconfigs
net: Rename ->stream_memory_read to ->sock_is_readable
net: Fix TOCTOU issue in sk_is_readable()
macsec: MACsec SCI assignment for ES = 0
net: mdio: C22 is now optional, EOPNOTSUPP if not provided
net/mdiobus: Fix potential out-of-bounds read/write access
net/mlx5: Ensure fw pages are always allocated on same NUMA
net/mlx5: Fix return value when searching for existing flow group
net_sched: prio: fix a race in prio_tune()
net_sched: red: fix a race in __red_change()
net_sched: tbf: fix a race in tbf_change()
sch_ets: make est_qlen_notify() idempotent
net_sched: ets: fix a race in ets_qdisc_change()
fs/filesystems: Fix potential unsigned integer underflow in fs_name()
posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del()
x86/boot/compressed: prefer cc-option for CFLAGS additions
MIPS: Move '-Wa,-msoft-float' check from as-option to cc-option
MIPS: Prefer cc-option for additions to cflags
kbuild: Update assembler calls to use proper flags and language target
drm/amd/display: Do not add '-mhard-float' to dml_ccflags for clang
mips: Include KBUILD_CPPFLAGS in CHECKFLAGS invocation
kbuild: Add CLANG_FLAGS to as-instr
kbuild: add $(CLANG_FLAGS) to KBUILD_CPPFLAGS
kbuild: Add KBUILD_CPPFLAGS to as-option invocation
drm/amd/display: Do not add '-mhard-float' to dcn2{1,0}_resource.o for clang
usb: Flush altsetting 0 endpoints before reinitializating them after reset.
xen/arm: call uaccess_ttbr0_enable for dm_op hypercall
x86/iopl: Cure TIF_IO_BITMAP inconsistencies
calipso: unlock rcu before returning -EAFNOSUPPORT
net: usb: aqc111: debug info before sanitation
kbuild: userprogs: fix bitsize and target detection on clang
kbuild: hdrcheck: fix cross build with clang
tcp: tcp_data_ready() must look at SOCK_DONE
configfs: Do not override creating attribute file failure in populate_attrs()
crypto: marvell/cesa - Do not chain submitted requests
gfs2: move msleep to sleepable context
ASoC: qcom: sdm845: Add error handling in sdm845_slim_snd_hw_params()
ASoC: meson: meson-card-utils: use of_property_present() for DT parsing
net/mlx5_core: Add error handling inmlx5_query_nic_vport_qkey_viol_cntr()
net/mlx5: Add error handling in mlx5_query_nic_vport_node_guid()
wifi: p54: prevent buffer-overflow in p54_rx_eeprom_readback()
nfsd: nfsd4_spo_must_allow() must check this is a v4 compound request
nfsd: Initialize ssc before laundromat_work to prevent NULL dereference
jbd2: fix data-race and null-ptr-deref in jbd2_journal_dirty_metadata()
wifi: rtlwifi: disable ASPM for RTL8723BE with subsystem ID 11ad:1723
media: ov8856: suppress probe deferral errors
media: cxusb: no longer judge rbuf when the write fails
media: gspca: Add error handling for stv06xx_read_sensor()
media: v4l2-dev: fix error handling in __video_register_device()
media: venus: Fix probe error handling
media: videobuf2: use sgtable-based scatterlist wrappers
media: vidtv: Terminating the subsequent process of initialization failure
media: vivid: Change the siize of the composing
ARM: 9447/1: arm/memremap: fix arch_memremap_can_ram_remap()
ARM: omap: pmic-cpcap: do not mess around without CPCAP or OMAP4
bus: mhi: host: Fix conflict between power_up and SYSERR
ata: pata_via: Force PIO for ATAPI devices on VT6415/VT6330
bus: fsl-mc: do not add a device-link for the UAPI used DPMCP device
ext4: inline: fix len overflow in ext4_prepare_inline_data
ext4: fix calculation of credits for extent tree modification
ext4: factor out ext4_get_maxbytes()
ext4: ensure i_size is smaller than maxbytes
Input: ims-pcu - check record size in ims_pcu_flash_firmware()
f2fs: prevent kernel warning due to negative i_nlink from corrupted image
f2fs: fix to do sanity check on sit_bitmap_size
NFC: nci: uart: Set tty->disc_data only in success path
EDAC/altera: Use correct write width with the INTTEST register
fbdev: Fix fb_set_var to prevent null-ptr-deref in fb_videomode_to_var
vgacon: Add check for vc_origin address range in vgacon_scroll()
parisc: fix building with gcc-15
clk: meson-g12a: add missing fclk_div2 to spicc
ipc: fix to protect IPCS lookups using RCU
mm: fix ratelimit_pages update error in dirty_ratio_handler()
mtd: rawnand: sunxi: Add randomizer configuration in sunxi_nfc_hw_ecc_write_chunk
mtd: nand: sunxi: Add randomizer configuration before randomizer enable
dm-mirror: fix a tiny race condition
ftrace: Fix UAF when lookup kallsym after ftrace disabled
net: ch9200: fix uninitialised access during mii_nway_restart
staging: iio: ad5933: Correct settling cycles encoding per datasheet
mips: Add -std= flag specified in KBUILD_CFLAGS to vdso CFLAGS
regulator: max14577: Add error check for max14577_read_reg()
uio_hv_generic: Use correct size for interrupt and monitor pages
PCI: Add ACS quirk for Loongson PCIe
PCI: Fix lock symmetry in pci_slot_unlock()
iio: imu: inv_icm42600: Fix temperature calculation
iio: adc: ad7606_spi: fix reg write value mask
ACPICA: fix acpi operand cache leak in dswstate.c
clocksource: Fix the CPUs' choice in the watchdog per CPU verification
ACPICA: Avoid sequence overread in call to strncmp()
ASoC: tas2770: Power cycle amp on ISENSE/VSENSE change
ACPICA: fix acpi parse and parseext cache leaks
power: supply: bq27xxx: Retrieve again when busy
ACPICA: utilities: Fix overflow check in vsnprintf()
ASoC: tegra210_ahub: Add check to of_device_get_match_data()
PM: runtime: fix denying of auto suspend in pm_suspend_timer_fn()
ACPI: battery: negate current when discharging
drm/amdgpu/gfx6: fix CSIB handling
sunrpc: update nextcheck time when adding new cache entries
drm/bridge: analogix_dp: Add irq flag IRQF_NO_AUTOEN instead of calling disable_irq()
exfat: fix double free in delayed_free
drm/msm/hdmi: add runtime PM calls to DDC transfer function
media: uapi: v4l: Fix V4L2_TYPE_IS_OUTPUT condition
drm/amd/display: Add NULL pointer checks in dm_force_atomic_commit()
drm/msm/a6xx: Increase HFI response timeout
drm/amdgpu/gfx10: fix CSIB handling
media: uapi: v4l: Change V4L2_TYPE_IS_CAPTURE condition
drm/amdgpu/gfx7: fix CSIB handling
ext4: ext4: unify EXT4_EX_NOCACHE|NOFAIL flags in ext4_ext_remove_space()
jfs: fix array-index-out-of-bounds read in add_missing_indices
media: rkvdec: Initialize the m2m context before the controls
sunrpc: fix race in cache cleanup causing stale nextcheck time
ext4: prevent stale extent cache entries caused by concurrent get es_cache
drm/amdgpu/gfx8: fix CSIB handling
drm/amdgpu/gfx9: fix CSIB handling
jfs: Fix null-ptr-deref in jfs_ioc_trim
drm/msm/dpu: don't select single flush for active CTL blocks
drm/amdkfd: Set SDMA_RLCx_IB_CNTL/SWITCH_INSIDE_IB
media: tc358743: ignore video while HPD is low
media: platform: exynos4-is: Add hardware sync wait to fimc_is_hw_change_mode()
nios2: force update_mmu_cache on spurious tlb-permission--related pagefaults
thermal/drivers/qcom/tsens: Update conditions to strictly evaluate for IP v2+
cpufreq: Force sync policy boost with global boost on sysfs update
net: macb: Check return value of dma_set_mask_and_coherent()
tipc: use kfree_sensitive() for aead cleanup
i2c: designware: Invoke runtime suspend on quick slave re-registration
emulex/benet: correct command version selection in be_cmd_get_stats()
wifi: mt76: mt76x2: Add support for LiteOn WN4516R,WN4519R
sctp: Do not wake readers in __sctp_write_space()
i2c: npcm: Add clock toggle recovery
net: dlink: add synchronization for stats update
tcp: always seek for minimal rtt in tcp_rcv_rtt_update()
tcp: fix initial tp->rcvq_space.space value for passive TS enabled flows
ipv4/route: Use this_cpu_inc() for stats on PREEMPT_RT
net: atlantic: generate software timestamp just before the doorbell
pinctrl: armada-37xx: propagate error from armada_37xx_pmx_set_by_name()
pinctrl: armada-37xx: propagate error from armada_37xx_gpio_get_direction()
pinctrl: armada-37xx: propagate error from armada_37xx_pmx_gpio_set_direction()
pinctrl: armada-37xx: propagate error from armada_37xx_gpio_get()
net: mlx4: add SOF_TIMESTAMPING_TX_SOFTWARE flag when getting ts info
wifi: mac80211: do not offer a mesh path if forwarding is disabled
clk: rockchip: rk3036: mark ddrphy as critical
scsi: lpfc: Fix lpfc_check_sli_ndlp() handling for GEN_REQUEST64 commands
iommu/amd: Ensure GA log notifier callbacks finish running before module unload
vxlan: Do not treat dst cache initialization errors as fatal
software node: Correct a OOB check in software_node_get_reference_args()
scsi: lpfc: Use memcpy() for BIOS version
sock: Correct error checking condition for (assign|release)_proto_idx()
i40e: fix MMIO write access to an invalid page in i40e_clear_hw
watchdog: da9052_wdt: respect TWDMIN
bus: fsl-mc: increase MC_CMD_COMPLETION_TIMEOUT_MS value
ARM: OMAP2+: Fix l4ls clk domain handling in STANDBY
tee: Prevent size calculation wraparound on 32-bit kernels
Revert "bus: ti-sysc: Probe for l4_wkup and l4_cfg interconnect devices first"
platform: Add Surface platform directory
platform/x86: dell_rbu: Fix list usage
platform/x86: dell_rbu: Stop overwriting data buffer
powerpc/eeh: Fix missing PE bridge reconfiguration during VFIO EEH recovery
Revert "x86/bugs: Make spectre user default depend on MITIGATION_SPECTRE_V2" on v6.6 and older
drivers/rapidio/rio_cm.c: prevent possible heap overwrite
jffs2: check that raw node were preallocated before writing summary
jffs2: check jffs2_prealloc_raw_node_refs() result in few other places
scsi: storvsc: Increase the timeouts to storvsc_timeout
scsi: s390: zfcp: Ensure synchronous unit_add
udmabuf: use sgtable-based scatterlist wrappers
selinux: fix selinux_xfrm_alloc_user() to set correct ctx_len
atm: Revert atm_account_tx() if copy_from_iter_full() fails.
HID: usbhid: Eliminate recurrent out-of-bounds bug in usbhid_parse()
Input: sparcspkr - avoid unannotated fall-through
ALSA: usb-audio: Rename ALSA kcontrol PCM and PCM1 for the KTMicro sound card
ALSA: hda/intel: Add Thinkpad E15 to PM deny list
ALSA: hda/realtek: enable headset mic on Latitude 5420 Rugged
hugetlb: unshare some PMDs when splitting VMAs
mm/hugetlb: unshare page tables during VMA split, not before
mm: hugetlb: independent PMD page table shared count
mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race
erofs: remove unused trace event erofs_destroy_inode
drm/nouveau/bl: increase buffer size to avoid truncate warning
hwmon: (occ) Add new temperature sensor type
hwmon: (occ) Add soft minimum power cap attribute
hwmon: (occ) Rework attribute registration for stack usage
hwmon: (occ) fix unaligned accesses
pldmfw: Select CRC32 when PLDMFW is selected
aoe: clean device rq_list in aoedev_downdev()
net: ice: Perform accurate aRFS flow match
wifi: carl9170: do not ping device which has failed to load firmware
mpls: Use rcu_dereference_rtnl() in mpls_route_input_rcu().
atm: atmtcp: Free invalid length skb in atmtcp_c_send().
tcp: fix tcp_packet_delayed() for tcp_is_non_sack_preventing_reopen() behavior
tipc: fix null-ptr-deref when acquiring remote ip of ethernet bearer
calipso: Fix null-ptr-deref in calipso_req_{set,del}attr().
net: atm: add lec_mutex
net: atm: fix /proc/net/atm/lec handling
ARM: dts: am335x-bone-common: Add GPIO PHY reset on revision C3 board
ARM: dts: am335x-bone-common: Increase MDIO reset deassert time
ARM: dts: am335x-bone-common: Increase MDIO reset deassert delay to 50ms
serial: sh-sci: Increment the runtime usage counter for the earlycon device
arm64: insn: Add barrier encodings
arm64: move AARCH64_BREAK_FAULT into insn-def.h
arm64: insn: add encoders for atomic operations
arm64: insn: Add support for encoding DSB
arm64: proton-pack: Expose whether the platform is mitigated by firmware
arm64: errata: Assume that unknown CPUs _are_ vulnerable to Spectre BHB
arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list
arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists
arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays
arm64: proton-pack: Expose whether the branchy loop k value
arm64: spectre: increase parameters that can be used to turn off bhb mitigation individually
arm64: bpf: Add BHB mitigation to the epilogue for cBPF programs
arm64: bpf: Only mitigate cBPF programs loaded by unprivileged users
arm64: proton-pack: Add new CPUs 'k' values for branch mitigation
net/ipv4: fix type mismatch in inet_ehash_locks_alloc() causing build failure
net: Fix checksum update for ILA adj-transport
bpf: Fix L4 csum update on IPv6 in CHECKSUM_COMPLETE
rtc: Improve performance of rtc_time64_to_tm(). Add tests.
rtc: Make rtc_time64_to_tm() support dates before 1970
net_sched: sch_sfq: annotate data-races around q->perturb_period
net_sched: sch_sfq: handle bigger packets
net_sched: sch_sfq: don't allow 1 packet limit
net_sched: sch_sfq: use a temporary work area for validating configuration
net_sched: sch_sfq: move the limit validation
mm/huge_memory: fix dereferencing invalid pmd migration entry
hwmon: (occ) Fix P10 VRM temp sensors
rtc: test: Fix invalid format specifier.
s390/pci: Fix __pcilg_mio_inuser() inline assembly
perf: Fix sample vs do_exit()
arm64/ptrace: Fix stack-out-of-bounds read in regs_get_kernel_stack_nth()
bpf: fix precision backtracking instruction iteration
scsi: qedf: Use designated initializer for struct qed_fcoe_cb_ops
Linux 5.10.239
Change-Id: If83691fc44267d4d5e1bc04eb0d2ef52becfe05c
Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>
|
||
|
Greg Kroah-Hartman
|
7f7c970412 |
Merge 0ef6153de6 ("drm/amdgpu/gfx7: fix CSIB handling") into android12-5.10-lts
Steps on the way to 5.10.239 Change-Id: Ia2f4e0d9e4d01d18cb236e9cbbfea99e686b9bf4 Signed-off-by: Greg Kroah-Hartman <gregkh@google.com> |
||
|
Kir Kolyshkin
|
14799d9a3c |
sched/headers: Move 'struct sched_param' out of uapi, to work around glibc/musl breakage
Both glibc and musl define 'struct sched_param' in sched.h, while kernel
has it in uapi/linux/sched/types.h, making it cumbersome to use
sched_getattr(2) or sched_setattr(2) from userspace.
For example, something like this:
#include <sched.h>
#include <linux/sched/types.h>
struct sched_attr sa;
will result in "error: redefinition of ‘struct sched_param’" (note the
code doesn't need sched_param at all -- it needs struct sched_attr
plus some stuff from sched.h).
The situation is, glibc is not going to provide a wrapper for
sched_{get,set}attr, thus the need to include linux/sched_types.h
directly, which leads to the above problem.
Thus, the userspace is left with a few sub-par choices when it wants to
use e.g. sched_setattr(2), such as maintaining a copy of struct
sched_attr definition, or using some other ugly tricks.
OTOH, 'struct sched_param' is well known, defined in POSIX, and it won't
be ever changed (as that would break backward compatibility).
So, while 'struct sched_param' is indeed part of the kernel uapi,
exposing it the way it's done now creates an issue, and hiding it
(like this patch does) fixes that issue, hopefully without creating
another one: common userspace software rely on libc headers, and as
for "special" software (like libc), it looks like glibc and musl
do not rely on kernel headers for 'struct sched_param' definition
(but let's Cc their mailing lists in case it's otherwise).
The alternative to this patch would be to move struct sched_attr to,
say, linux/sched.h, or linux/sched/attr.h (the new file).
Oh, and here is the previous attempt to fix the issue:
https://lore.kernel.org/all/20200528135552.GA87103@google.com/
While I support Linus arguments, the issue is still here
and needs to be fixed.
[ mingo: Linus is right, this shouldn't be needed - but on the other
hand I agree that this header is not really helpful to
user-space as-is. So let's pretend that
<uapi/linux/sched/types.h> is only about sched_attr, and
call this commit a workaround for user-space breakage
that it in reality is ... Also, remove the Fixes tag. ]
Change-Id: I3943f8f4a11a9007ccc392de3ece9e62841e8fcb
Signed-off-by: Kir Kolyshkin <kolyshkin@gmail.com>
Signed-off-by: Ingo Molnar <mingo@kernel.org>
Cc: Linus Torvalds <torvalds@linux-foundation.org>
Cc: Peter Zijlstra <peterz@infradead.org>
Link: https://lore.kernel.org/r/20230808030357.1213829-1-kolyshkin@gmail.com
|
||
|
Michael Bestas
|
e6bcea7ca8 |
Merge tag 'ASB-2025-06-05_12-5.10' of https://android.googlesource.com/kernel/common into android13-5.10-waipio
https://source.android.com/docs/security/bulletin/2025-06-01 * tag 'ASB-2025-06-05_12-5.10' of https://android.googlesource.com/kernel/common: ANDROID: binder: fix minimum node priority comparison ANDROID: 16K: Remove ELF padding entry from map_file ranges ANDROID: GKI: Add bpf_redirect_info to virtual_device symbol list. UPSTREAM: binder: fix potential UAF of target_{proc,thread} ANDROID: GKI: fix up crc issue in crypto_get_default_null_skcipher() Revert "blk-cgroup: support to track if policy is online" Revert "blk-iocost: do not WARN if iocg was already offlined" Revert "net: defer final 'struct net' free in netns dismantle" Revert "PCI: Introduce domain_nr in pci_host_bridge" Revert "PCI: Coalesce host bridge contiguous apertures" Revert "PCI: Assign PCI domain IDs by ida_alloc()" Revert "PCI: Fix use-after-free in pci_bus_release_domain_nr()" Revert "PCI: Fix reference leak in pci_register_host_bridge()" Linux 5.10.237 media: venus: hfi_parser: Check for instance after hfi platform get media: venus: Fix uninitialized variable count being checked for zero soc: samsung: exynos-chipid: correct helpers __init annotation PCI: Fix use-after-free in pci_bus_release_domain_nr() nvme: fixup scan failure for non-ANA multipath controllers MIPS: cm: Fix warning if MIPS_CM is disabled xdp: Reset bpf_redirect_info before running a xdp's BPF prog. crypto: atmel-sha204a - Set hwrng quality to lowest possible comedi: jr3_pci: Fix synchronous deletion of timer md/raid1: Add check for missing source disk in process_checks() scsi: pm80xx: Set phy_attached to zero when device is gone ext4: make block validity check resistent to sb bh corruption x86/bugs: Don't fill RSB on VMEXIT with eIBRS+retpoline x86/bugs: Use SBPB in write_ibpb() if applicable selftests/mincore: Allow read-ahead pages to reach the end of the file objtool: Stop UNRET validation on UD2 nvme: re-read ANA log page after ns scan completes ACPI PPTT: Fix coding mistakes in a couple of sizeof() calls nvme: requeue namespace scan on missed AENs selftests: ublk: fix test_stripe_04 udmabuf: fix a buf size overflow issue during udmabuf creation KVM: s390: Don't use %pK through tracepoints sched/isolation: Make CONFIG_CPU_ISOLATION depend on CONFIG_SMP ntb: reduce stack usage in idt_scan_mws qibfs: fix _another_ leak objtool, ASoC: codecs: wcd934x: Remove potential undefined behavior in wcd934x_slim_irq_handler() usb: gadget: aspeed: Add NULL pointer check in ast_vhub_init_dev() dmaengine: dmatest: Fix dmatest waiting less when interrupted usb: host: max3421-hcd: Add missing spi_device_id table parisc: PDT: Fix missing prototype warning clk: check for disabled clock-provider in of_clk_get_hw_from_clkspec() crypto: null - Use spin lock instead of mutex MIPS: cm: Detect CM quirks from device tree USB: VLI disk crashes if LPM is used usb: quirks: Add delay init quirk for SanDisk 3.2Gen1 Flash Drive usb: quirks: add DELAY_INIT quirk for Silicon Motion Flash Drive usb: dwc3: gadget: check that event count does not exceed event buffer length USB: OHCI: Add quirk for LS7A OHCI controller (rev 0x02) usb: cdns3: Fix deadlock when using NCM gadget USB: serial: simple: add OWON HDS200 series oscilloscope support USB: serial: option: add Sierra Wireless EM9291 USB: serial: ftdi_sio: add support for Abacus Electrics Optical Probe serial: sifive: lock port in startup()/shutdown() callbacks KVM: x86: Reset IRTE to host control if *new* route isn't postable mei: me: add panther lake H DID USB: storage: quirk for ADATA Portable HDD CH94 mcb: fix a double free bug in chameleon_parse_gdd() KVM: SVM: Allocate IR data using atomic allocation virtio_console: fix missing byte order handling for cols and rows iommu/amd: Return an error if vCPU affinity is set for non-vCPU IRTE net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too net_sched: hfsc: Fix a UAF vulnerability in class handling tipc: fix NULL pointer dereference in tipc_mon_reinit_self() net: phy: leds: fix memory leak cpufreq: scpi: Fix null-ptr-deref in scpi_cpufreq_get_rate() dma/contiguous: avoid warning about unused size_bytes drm/amdgpu/dma_buf: fix page_link check drm/amdgpu: Remove amdgpu_device arg from free_sgt api (v2) drm/amd/amdgpu/amdgpu_vram_mgr: Add missing descriptions for 'dev' and 'dir' selftests/mm: generate a temporary mountpoint for cgroup filesystem PCI: Fix reference leak in pci_register_host_bridge() PCI: Assign PCI domain IDs by ida_alloc() PCI: Coalesce host bridge contiguous apertures PCI: Introduce domain_nr in pci_host_bridge cifs: avoid NULL pointer dereference in dbg call cifs: print TIDs as hex backlight: led_bl: Hold led_access lock when calling led_sysfs_disable() iio: adc: ad7768-1: Fix conversion result sign iio: adc: ad7768-1: Move setting of val a bit later to avoid unnecessary return value check soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe() soc: samsung: exynos-chipid: Pass revision reg offsets soc: samsung: exynos-chipid: avoid soc_device_to_device() soc: samsung: exynos-chipid: convert to driver and merge exynos-asv soc: samsung: exynos-chipid: initialize later - with arch_initcall net: dsa: mv88e6xxx: fix VTU methods for 6320 family media: venus: hfi_parser: refactor hfi packet parsing logic media: venus: Get codecs and capabilities from hfi platform media: venus: hfi_plat: Add codecs and capabilities ops media: venus: Rename venus_caps to hfi_plat_caps media: venus: Create hfi platform and move vpp/vsp there media: venus: pm_helpers: Check instance state when calculate instance frequency media: venus: hfi: Correct session init return error media: venus: Limit HFI sessions to the maximum supported media: venus: venc: Init the session only once in queue_setup media: streamzap: fix race between device disconnection and urb callback media: streamzap: remove unused struct members media: streamzap: less chatter media: streamzap: no need for usb pid/vid in device name media: streamzap: remove unnecessary ir_raw_event_reset and handle tracing: Fix synth event printk format for str fields tracing: Allow synthetic events to pass around stacktraces platform/x86: ISST: Correct command storage data length drivers: staging: rtl8723bs: Fix locking in rtw_scan_timeout_handler() pmdomain: ti: Add a null pointer check to the omap_prm_domain_init s390/dasd: fix double module refcount decrement drivers: staging: rtl8723bs: Fix deadlock in rtw_surveydone_event_callback() mm: fix apply_to_existing_page_range() fs/proc: do_task_stat: use sig->stats_lock to gather the threads/children stats drm/i915/gt: Cleanup partial engine discovery failures kernel/resource: fix kfree() of bootmem memory again vfio/pci: fix memory leak during D3hot to D0 transition dm cache: fix flushing uninitialized delayed_work on cache_ctr error jfs: Fix shift-out-of-bounds in dbDiscardAG MIPS: ds1287: Match ds1287_set_base_clock() function types MIPS: cevt-ds1287: Add missing ds1287.h include MIPS: dec: Declare which_prom() as static net: defer final 'struct net' free in netns dismantle scsi: ufs: bsg: Set bsg_queue to NULL after removal scsi: lpfc: Fix a possible data race in lpfc_unregister_fcf_rescan() openvswitch: fix lockup on tx to unregistering netdev with carrier net: openvswitch: fix race on port output ipvs: properly dereference pe in ip_vs_add_service net/mlx5e: Fix use-after-free of encap entry in neigh update handler ext4: fix timer use-after-free on failed mount blk-iocost: do not WARN if iocg was already offlined blk-cgroup: support to track if policy is online bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers bpf: avoid holding freeze_mutex during mmap operation smb: client: fix NULL ptr deref in crypto_aead_setkey() smb: client: fix UAF in async decryption smb: client: fix potential UAF in cifs_stats_proc_show() smb: client: fix potential deadlock when releasing mids cifs: Fix UAF in cifs_demultiplex_thread() smb: client: fix use-after-free bug in cifs_debug_data_proc_show() smb: client: fix potential UAF in cifs_debug_files_proc_show() nvmet-fc: Remove unused functions drm/amd/display: Fix out-of-bounds access in 'dcn21_link_encoder_create' drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links wifi: ath10k: avoid NULL pointer error during sdio remove phy: tegra: xusb: Fix return value of tegra_xusb_find_port_node function powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas() nvme: avoid double free special payload x86/pvh: Call C code via the kernel virtual mapping misc: pci_endpoint_test: Fix 'irq_type' to convey the correct type misc: pci_endpoint_test: Fix displaying 'irq_type' after 'request_irq' error misc: pci_endpoint_test: Avoid issue of interrupts remaining after request_irq error mptcp: sockopt: fix getting IPV6_V6ONLY mptcp: only inc MPJoinAckHMacFailure for HMAC failures mptcp: fix NULL pointer in can_accept_new_subflow tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink(). kbuild: Add '-fno-builtin-wcslen' cpufreq: Reference count policy in cpufreq_update_limits() drm/sti: remove duplicate object names drm/nouveau: prime: fix ttm_bo_delayed_delete oops drm/amd/pm/powerplay/hwmgr/vega20_thermal: Prevent division by zero drm/amd/pm/powerplay/hwmgr/smu7_thermal: Prevent division by zero drm/amd/pm/powerplay: Prevent division by zero drm/repaper: fix integer overflows in repeat functions module: sign with sha512 instead of sha1 by default perf/x86/intel/uncore: Fix the scale of IIO free running counters on ICX perf/x86/intel/uncore: Fix the scale of IIO free running counters on SNR perf/x86/intel: Allow to update user space GPRs from PEBS records virtiofs: add filesystem context source name check tracing: Fix filter string testing riscv: Avoid fortify warning in syscall_get_arguments() isofs: Prevent the use of too small fid i2c: cros-ec-tunnel: defer probe if parent EC is not present hfs/hfsplus: fix slab-out-of-bounds in hfs_bnode_read_key crypto: caam/qi - Fix drv_ctx refcount bug btrfs: correctly escape subvol in btrfs_show_options() nfsd: decrease sc_count directly if fail to queue dl_recall nfs: add missing selections of CONFIG_CRC32 nfs: move nfs_fhandle_hash to common include file asus-laptop: Fix an uninitialized variable writeback: fix false warning in inode_to_wb() cpufreq/sched: Fix the usage of CPUFREQ_NEED_UPDATE_LIMITS riscv: KGDB: Remove ".option norvc/.option rvc" for kgdb_compiled_break riscv: KGDB: Do not inline arch_kgdb_breakpoint() net: b53: enable BPDU reception for management port cxgb4: fix memory leak in cxgb4_init_ethtool_filters() error path net: openvswitch: fix nested key length validation in the set() action igc: cleanup PTP module if probe fails igc: handle the IGC_PTP_ENABLED flag correctly Revert "wifi: mac80211: Update skb's control block key in ieee80211_tx_dequeue()" Bluetooth: btrtl: Prevent potential NULL dereference Bluetooth: hci_event: Fix sending MGMT_EV_DEVICE_FOUND for invalid address RDMA/core: Silence oversized kvmalloc() warning RDMA/hns: Fix wrong maximum DMA segment size RDMA/usnic: Fix passing zero to PTR_ERR in usnic_ib_pci_probe() scsi: iscsi: Fix missing scsi_host_put() in error path wifi: wl1251: fix memory leak in wl1251_tx_work wifi: mac80211: Purge vif txq in ieee80211_do_stop() wifi: mac80211: Update skb's control block key in ieee80211_tx_dequeue() wifi: at76c50x: fix use after free access in at76_disconnect HSI: ssi_protocol: Fix use after free vulnerability in ssi_protocol Driver Due to Race Condition pwm: mediatek: always use bus clock for PWM on MT7622 Bluetooth: hci_uart: Fix another race during initialization x86/e820: Fix handling of subpage regions when calculating nosave ranges in e820__register_nosave_regions() pinctrl: qcom: Clear latched interrupt status when changing IRQ type PCI: Fix reference leak in pci_alloc_child_bus() PCI: brcmstb: Fix missing of_node_put() in brcm_pcie_probe() of/irq: Fix device node refcount leakages in of_irq_init() of/irq: Fix device node refcount leakage in API irq_of_parse_and_map() of/irq: Fix device node refcount leakages in of_irq_count() ntb: use 64-bit arithmetic for the MSI doorbell mask gpio: zynq: Fix wakeup source leaks on device unbind ftrace: Add cond_resched() to ftrace_graph_set_hash() dm-integrity: set ti->error on memory allocation failure crypto: ccp - Fix check for the primary ASP device thermal/drivers/rockchip: Add missing rk3328 mapping entry sctp: detect and prevent references to a freed transport in sendmsg mm: add missing release barrier on PGDAT_RECLAIM_LOCKED unlock sparc/mm: disable preemption in lazy mmu mode arm64: dts: mediatek: mt8173: Fix disp-pwm compatible string mtd: rawnand: Add status chack in r852_ready() mtd: inftlcore: Add error check for inftl_read_oob() lib: scatterlist: fix sg_split_phys to preserve original scatterlist offsets locking/lockdep: Decrease nr_unused_locks if lock unused in zap_class() mfd: ene-kb3930: Fix a potential NULL pointer dereference jbd2: remove wrong sb->s_sequence check i3c: Add NULL pointer check in i3c_master_queue_ibi() vdpa/mlx5: Fix oversized null mkey longer than 32bit ext4: fix off-by-one error in do_split ASoC: qdsp6: q6asm-dai: fix q6asm_dai_compr_set_params error path wifi: mac80211: fix integer overflow in hwmp_route_info_get() clocksource/drivers/stm32-lptimer: Use wakeup capable instead of init wakeup mtd: Replace kcalloc() with devm_kcalloc() net: dsa: mv88e6xxx: workaround RGMII transmit delay erratum for 6320 family media: venus: hfi_parser: add check to avoid out of bound access media: i2c: ov7251: Introduce 1 ms delay between regulators and en GPIO media: i2c: ov7251: Set enable GPIO low in probe media: v4l2-dv-timings: prevent possible overflow in v4l2_detect_gtf() media: streamzap: prevent processing IR data on URB failure mtd: rawnand: brcmnand: fix PM resume warning spi: cadence-qspi: Fix probe on AM62A LP SK arm64: errata: Add QCOM_KRYO_4XX_GOLD to the spectre_bhb_k24_list arm64: cputype: Add MIDR_CORTEX_A76AE xenfs/xensyms: respect hypervisor's "next" indication media: siano: Fix error handling in smsdvb_module_init() media: vim2m: print device name after registering device media: venus: hfi: add check to handle incorrect queue size media: venus: hfi: add a check to handle OOB in sfr region media: i2c: adv748x: Fix test pattern selection mask ext4: don't treat fhandle lookup of ea_inode as FS corruption ext4: reject casefold inode flag without casefold feature bpf: support SKF_NET_OFF and SKF_LL_OFF on skb frags bpf: Add endian modifiers to fix endian warnings pwm: fsl-ftm: Handle clk_get_rate() returning 0 pwm: rcar: Improve register calculation pwm: rcar: Simplify multiplication/shift logic pwm: mediatek: Prevent divide-by-zero in pwm_mediatek_config() pwm: mediatek: Always use bus clock fbdev: omapfb: Add 'plane' value check drm/mediatek: mtk_dpi: Explicitly manage TVD clock in power on/off drm/amdkfd: Fix pqm_destroy_queue race with GPU reset drm/amdkfd: clamp queue size to minimum drm/bridge: panel: forbid initializing a panel with unknown connector type drm: panel-orientation-quirks: Add new quirk for GPD Win 2 drm: panel-orientation-quirks: Add support for AYANEO 2S drm: allow encoder mode_set even when connectors change for crtc Bluetooth: hci_uart: fix race during initialization tracing: fix return value in __ftrace_event_enable_disable for TRACE_REG_UNREGISTER net: vlan: don't propagate flags on open wifi: mt76: mt76x2u: add TP-Link TL-WDN6200 ID to device table scsi: st: Fix array overflow in st_setup() ext4: ignore xattrs past end ext4: protect ext4_release_dquot against freezing ahci: add PCI ID for Marvell 88SE9215 SATA Controller f2fs: fix to avoid out-of-bounds access in f2fs_truncate_inode_blocks() ata: libata-eh: Do not use ATAPI DMA for a device limited to PIO mode jfs: add sanity check for agwidth in dbMount jfs: Prevent copying of nlink with value 0 from disk inode fs/jfs: Prevent integer overflow in AG size calculation fs/jfs: cast inactags to s64 to prevent potential overflow page_pool: avoid infinite loop to schedule delayed worker ALSA: usb-audio: Fix CME quirk for UF series keyboards ALSA: hda: intel: Fix Optimus when GPU has no sound HID: pidff: Fix null pointer dereference in pidff_find_fields HID: pidff: Do not send effect envelope if it's empty HID: pidff: Convert infinite length from Linux API to PID standard xen/mcelog: Add __nonstring annotations for unterminated strings arm64: cputype: Add QCOM_CPU_PART_KRYO_3XX_GOLD perf: arm_pmu: Don't disable counter in armpmu_add() x86/cpu: Don't clear X86_FEATURE_LAHF_LM flag in init_amd_k8() on AMD when running in a virtual machine pm: cpupower: bench: Prevent NULL dereference on malloc failure umount: Allow superblock owners to force umount nft_set_pipapo: fix incorrect avx2 match of 5th field octet net: ppp: Add bound checking for skb data on ppp_sync_txmung nvmet-fcloop: swap list_add_tail arguments ata: sata_sx4: Add error handling in pdc20621_i2c_read() ata: sata_sx4: Drop pointless VPRINTK() calls and convert the remaining ones net: tls: explicitly disallow disconnect tipc: fix memory leak in tipc_link_xmit ata: pata_pxa: Fix potential NULL pointer dereference in pxa_ata_probe() Conflicts: android/abi_gki_aarch64.xml drivers/media/platform/qcom/venus/hfi_parser.c Change-Id: I2497be1f1a54db6c9883b8186c3c4a2d39f42b6d |
||
|
Paul Chaignon
|
7474e42a12 |
bpf: Fix L4 csum update on IPv6 in CHECKSUM_COMPLETE
commit ead7f9b8de65632ef8060b84b0c55049a33cfea1 upstream.
In Cilium, we use bpf_csum_diff + bpf_l4_csum_replace to, among other
things, update the L4 checksum after reverse SNATing IPv6 packets. That
use case is however not currently supported and leads to invalid
skb->csum values in some cases. This patch adds support for IPv6 address
changes in bpf_l4_csum_update via a new flag.
When calling bpf_l4_csum_replace in Cilium, it ends up calling
inet_proto_csum_replace_by_diff:
1: void inet_proto_csum_replace_by_diff(__sum16 *sum, struct sk_buff *skb,
2: __wsum diff, bool pseudohdr)
3: {
4: if (skb->ip_summed != CHECKSUM_PARTIAL) {
5: csum_replace_by_diff(sum, diff);
6: if (skb->ip_summed == CHECKSUM_COMPLETE && pseudohdr)
7: skb->csum = ~csum_sub(diff, skb->csum);
8: } else if (pseudohdr) {
9: *sum = ~csum_fold(csum_add(diff, csum_unfold(*sum)));
10: }
11: }
The bug happens when we're in the CHECKSUM_COMPLETE state. We've just
updated one of the IPv6 addresses. The helper now updates the L4 header
checksum on line 5. Next, it updates skb->csum on line 7. It shouldn't.
For an IPv6 packet, the updates of the IPv6 address and of the L4
checksum will cancel each other. The checksums are set such that
computing a checksum over the packet including its checksum will result
in a sum of 0. So the same is true here when we update the L4 checksum
on line 5. We'll update it as to cancel the previous IPv6 address
update. Hence skb->csum should remain untouched in this case.
The same bug doesn't affect IPv4 packets because, in that case, three
fields are updated: the IPv4 address, the IP checksum, and the L4
checksum. The change to the IPv4 address and one of the checksums still
cancel each other in skb->csum, but we're left with one checksum update
and should therefore update skb->csum accordingly. That's exactly what
inet_proto_csum_replace_by_diff does.
This special case for IPv6 L4 checksums is also described atop
inet_proto_csum_replace16, the function we should be using in this case.
This patch introduces a new bpf_l4_csum_replace flag, BPF_F_IPV6,
to indicate that we're updating the L4 checksum of an IPv6 packet. When
the flag is set, inet_proto_csum_replace_by_diff will skip the
skb->csum update.
Fixes:
|
||
|
Nas Chung
|
a048f06d85 |
media: uapi: v4l: Change V4L2_TYPE_IS_CAPTURE condition
[ Upstream commit ad2698efce37e910dcf3c3914263e6cb3e86f8cd ] Explicitly compare a buffer type only with valid buffer types, to avoid matching a buffer type outside of the valid buffer type set. Signed-off-by: Nas Chung <nas.chung@chipsnmedia.com> Reviewed-by: Michael Tretter <m.tretter@pengutronix.de> Signed-off-by: Sebastian Fricke <sebastian.fricke@collabora.com> Signed-off-by: Hans Verkuil <hverkuil@xs4all.nl> Signed-off-by: Sasha Levin <sashal@kernel.org> |
||
|
Nas Chung
|
35662a6ec6 |
media: uapi: v4l: Fix V4L2_TYPE_IS_OUTPUT condition
[ Upstream commit f81f69a0e3da141bdd73a16b8676f4e542533d87 ] V4L2_TYPE_IS_OUTPUT() returns true for V4L2_BUF_TYPE_VIDEO_OVERLAY which definitely belongs to CAPTURE. Signed-off-by: Nas Chung <nas.chung@chipsnmedia.com> Signed-off-by: Sebastian Fricke <sebastian.fricke@collabora.com> Signed-off-by: Hans Verkuil <hverkuil@xs4all.nl> Signed-off-by: Sasha Levin <sashal@kernel.org> |
||
|
Greg Kroah-Hartman
|
2ed49dc1be |
Merge 5.10.238 into android12-5.10-lts
Changes in 5.10.238 ALSA: usb-audio: Add second USB ID for Jabra Evolve 65 headset drm/nouveau: Fix WARN_ON in nouveau_fence_context_kill() EDAC/altera: Test the correct error reg offset EDAC/altera: Set DDR and SDMMC interrupt mask before registration i2c: imx-lpi2c: Fix clock count when probe defers parisc: Fix double SIGFPE crash amd-xgbe: Fix to ensure dependent features are toggled with RX checksum offload mmc: renesas_sdhi: Fix error handling in renesas_sdhi_probe wifi: brcm80211: fmac: Add error handling for brcmf_usb_dl_writeimage() dm-integrity: fix a warning on invalid table line dm: always update the array size in realloc_argv on success iommu/amd: Fix potential buffer overflow in parse_ivrs_acpihid iommu/vt-d: Apply quirk_iommu_igfx for 8086:0044 (QM57/QS57) tracing: Fix oob write in trace_seq_to_buffer() net/sched: act_mirred: don't override retval if we already lost the skb net/mlx5: E-Switch, Initialize MAC Address for Default GID net/mlx5: Remove return statement exist at the end of void function net/mlx5: E-switch, Fix error handling for enabling roce net_sched: drr: Fix double list add in class with netem as child qdisc net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc net_sched: ets: Fix double list add in class with netem as child qdisc net_sched: qfq: Fix double list add in class with netem as child qdisc net: dlink: Correct endianness handling of led_mode net: ipv6: fix UDPv6 GSO segmentation with NAT bnxt_en: Fix ethtool -d byte order for 32-bit values nvme-tcp: fix premature queue removal and I/O failover net: lan743x: Fix memleak issue when GSO enabled net: fec: ERR007885 Workaround for conventional TX PCI: imx6: Skip controller_id generation logic for i.MX7D of: module: add buffer overflow check in of_modalias() Revert "drm/meson: vclk: fix calculation of 59.94 fractional rates" irqchip/gic-v2m: Add const to of_device_id irqchip/gic-v2m: Mark a few functions __init irqchip/gic-v2m: Prevent use after free of gicv2m_get_fwnode() usb: chipidea: ci_hdrc_imx: use dev_err_probe() usb: chipidea: ci_hdrc_imx: implement usb_phy_init() error handling dm: fix copying after src array boundaries scsi: target: Fix WRITE_SAME No Data Buffer crash can: mcp251xfd: mcp251xfd_remove(): fix order of unregistration calls openvswitch: Fix unsafe attribute parsing in output_userspace() can: gw: use call_rcu() instead of costly synchronize_rcu() rcu/kvfree: Add kvfree_rcu_mightsleep() and kfree_rcu_mightsleep() can: gw: fix RCU/BH usage in cgw_create_job() netfilter: ipset: fix region locking in hash types net: dsa: b53: allow leaky reserved multicast net: dsa: b53: fix VLAN ID for untagged vlan on bridge leave net: dsa: b53: fix learning on VLAN unaware bridges Input: synaptics - enable InterTouch on Dynabook Portege X30-D Input: synaptics - enable InterTouch on Dynabook Portege X30L-G Input: synaptics - enable InterTouch on Dell Precision M3800 Input: synaptics - enable SMBus for HP Elitebook 850 G1 Input: synaptics - enable InterTouch on TUXEDO InfinityBook Pro 14 v5 staging: iio: adc: ad7816: Correct conditional logic for store mode staging: axis-fifo: Remove hardware resets for user errors staging: axis-fifo: Correct handling of tx_fifo_depth for size validation iio: adc: ad7606: fix serial register access iio: adis16201: Correct inclinometer channel resolution iio: imu: st_lsm6dsx: fix possible lockup in st_lsm6dsx_read_fifo iio: imu: st_lsm6dsx: fix possible lockup in st_lsm6dsx_read_tagged_fifo usb: uhci-platform: Make the clock really optional xenbus: Use kref to track req lifetime module: ensure that kobject_put() is safe for module type kobjects ocfs2: switch osb->disable_recovery to enum ocfs2: implement handshaking with ocfs2 recovery thread ocfs2: stop quota recovery before disabling quotas usb: gadget: tegra-xudc: ACK ST_RC after clearing CTRL_RUN usb: host: tegra: Prevent host controller crash when OTG port is used usb: typec: tcpm: delay SNK_TRY_WAIT_DEBOUNCE to SRC_TRYWAIT transition usb: typec: ucsi: displayport: Fix NULL pointer access USB: usbtmc: use interruptible sleep in usbtmc_read usb: usbtmc: Fix erroneous get_stb ioctl error returns usb: usbtmc: Fix erroneous wait_srq ioctl return usb: usbtmc: Fix erroneous generic_read ioctl return types: Complement the aligned types with signed 64-bit one iio: adc: dln2: Use aligned_s64 for timestamp MIPS: Fix MAX_REG_OFFSET drm/panel: simple: Update timings for AUO G101EVN010 nvme: unblock ctrl state transition for firmware update do_umount(): add missing barrier before refcount checks in sync case platform/x86: asus-wmi: Fix wlan_ctrl_by_user detection iio: adc: ad7768-1: Fix insufficient alignment of timestamp. iio: chemical: sps30: use aligned_s64 for timestamp RDMA/rxe: Fix slab-use-after-free Read in rxe_queue_cleanup bug nfs: handle failure of nfs_get_lock_context in unlock path spi: loopback-test: Do not split 1024-byte hexdumps net_sched: Flush gso_skb list too during ->change() net: cadence: macb: Fix a possible deadlock in macb_halt_tx. net: dsa: sja1105: discard incoming frames in BR_STATE_LISTENING ALSA: sh: SND_AICA should depend on SH_DMA_API qlcnic: fix memory leak in qlcnic_sriov_channel_cfg_cmd() NFSv4/pnfs: Reset the layout state after a layoutreturn dmaengine: Revert "dmaengine: dmatest: Fix dmatest waiting less when interrupted" ACPI: PPTT: Fix processor subtable walk ALSA: es1968: Add error handling for snd_pcm_hw_constraint_pow2() tracing: samples: Initialize trace_array_printk() with the correct function phy: Fix error handling in tegra_xusb_port_init phy: renesas: rcar-gen3-usb2: Set timing registers only once wifi: mt76: disable napi on driver removal dmaengine: ti: k3-udma: Add missing locking dmaengine: ti: k3-udma: Use cap_mask directly from dma_device structure instead of a local copy clocksource/i8253: Use raw_spinlock_irqsave() in clockevent_i8253_disable() ASoC: q6afe-clocks: fix reprobing of the driver drm/vmwgfx: Fix a deadlock in dma buf fence polling usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute group usb: typec: fix potential array underflow in ucsi_ccg_sync_control() usb: typec: fix pm usage counter imbalance in ucsi_ccg_sync_control() selftests/mm: compaction_test: support platform with huge mount of memory btrfs: don't BUG_ON() when 0 reference count at btrfs_lookup_extent_info() netfilter: nf_tables: pass nft_chain to destroy function, not nft_ctx netfilter: nf_tables: wait for rcu grace period on net_device removal netfilter: nf_tables: do not defer rule destruction via call_rcu ice: arfs: fix use-after-free when freeing @rx_cpu_rmap scsi: target: iscsi: Fix timeout on deleted connection dma-mapping: avoid potential unused data compilation warning cgroup: Fix compilation issue due to cgroup_mutex not being exported kconfig: merge_config: use an empty file as initfile NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() mailbox: use error ret code of of_parse_phandle_with_args() fbdev: fsl-diu-fb: add missing device_remove_file() fbcon: Use correct erase colour for clearing in fbcon fbdev: core: tileblit: Implement missing margin clearing for tileblit NFSv4: Treat ENETUNREACH errors as fatal for state recovery SUNRPC: rpc_clnt_set_transport() must not change the autobind setting SUNRPC: rpcbind should never reset the port to the value '0' thermal/drivers/qoriq: Power down TMU on system suspend dql: Fix dql->limit value when reset. tools/build: Don't pass test log files to linker pNFS/flexfiles: Report ENETDOWN as a connection error libnvdimm/labels: Fix divide error in nd_label_data_init() mmc: host: Wait for Vdd to settle on card power off i2c: qup: Vote for interconnect bandwidth to DRAM i2c: pxa: fix call balance of i2c->clk handling routines btrfs: avoid linker error in btrfs_find_create_tree_block() btrfs: send: return -ENAMETOOLONG when attempting a path that is too long um: Store full CSGSFS and SS register from mcontext um: Update min_low_pfn to match changes in uml_reserved ext4: reorder capability check last scsi: st: Tighten the page format heuristics with MODE SELECT scsi: st: ERASE does not change tape location tcp: reorganize tcp_in_ack_event() and tcp_count_delivered() rtc: rv3032: fix EERD location kbuild: fix argument parsing in scripts/config dm: restrict dm device size to 2^63-512 bytes xen: Add support for XenServer 6.1 platform device posix-timers: Add cond_resched() to posix_timer_add() search loop netfilter: conntrack: Bound nf_conntrack sysctl writes arm64/mm: Check PUD_TYPE_TABLE in pud_bad() mmc: sdhci: Disable SD card clock before changing parameters ipv6: save dontfrag in cork arm64: tegra: p2597: Fix gpio for vdd-1v8-dis regulator powerpc/prom_init: Fixup missing #size-cells on PowerBook6,7 tcp: bring back NUMA dispersion in inet_ehash_locks_alloc() rtc: ds1307: stop disabling alarms on probe ieee802154: ca8210: Use proper setters and getters for bitwise types ARM: tegra: Switch DSI-B clock parent to PLLD on Tegra114 media: c8sectpfe: Call of_node_put(i2c_bus) only once in c8sectpfe_probe() dm cache: prevent BUG_ON by blocking retries on failed device resumes orangefs: Do not truncate file size drm/amdgpu: Do not program AGP BAR regs under SRIOV in gfxhub_v1_0.c media: cx231xx: set device_caps for 417 pinctrl: bcm281xx: Use "unsigned int" instead of bare "unsigned" net: ethernet: ti: cpsw_new: populate netdev of_node net: pktgen: fix mpls maximum labels list parsing ipv4: fib: Move fib_valid_key_len() to rtm_to_fib_config(). clk: imx8mp: inform CCF of maximum frequency of clocks x86/bugs: Make spectre user default depend on MITIGATION_SPECTRE_V2 hwmon: (gpio-fan) Add missing mutex locks drm/mediatek: mtk_dpi: Add checks for reg_h_fre_con existence fpga: altera-cvp: Increase credit timeout PCI: brcmstb: Expand inbound window size up to 64GB PCI: brcmstb: Add a softdep to MIP MSI-X driver net/mlx5: Avoid report two health errors on same syndrome drm/amdkfd: KFD release_work possible circular locking net: xgene-v2: remove incorrect ACPI_PTR annotation bonding: report duplicate MAC address in all situations soc: ti: k3-socinfo: Do not use syscon helper to build regmap x86/nmi: Add an emergency handler in nmi_desc & use it in nmi_shootdown_cpus() cpuidle: menu: Avoid discarding useful information libbpf: Fix out-of-bound read MIPS: Use arch specific syscall name match function MIPS: pm-cps: Use per-CPU variables as per-CPU, not per-core clocksource: mips-gic-timer: Enable counter when CPUs start scsi: mpt3sas: Send a diag reset if target reset fails wifi: rtw88: Fix rtw_init_vht_cap() for RTL8814AU wifi: rtw88: Fix rtw_init_ht_cap() for RTL8814AU wifi: rtw88: Fix rtw_desc_to_mcsrate() to handle MCS16-31 net: pktgen: fix access outside of user given buffer in pktgen_thread_write() EDAC/ie31200: work around false positive build warning can: c_can: Use of_property_present() to test existence of DT property eth: mlx4: don't try to complete XDP frames in netpoll PCI: Fix old_size lower bound in calculate_iosize() too ACPI: HED: Always initialize before evged net/mlx5: Modify LSB bitmask in temperature event to include only the first bit net/mlx5: Apply rate-limiting to high temperature warning ASoC: ops: Enforce platform maximum on initial value ASoC: tas2764: Power up/down amp on mute ops ASoC: soc-dai: check return value at snd_soc_dai_set_tdm_slot() pinctrl: devicetree: do not goto err when probing hogs in pinctrl_dt_to_map smack: recognize ipv4 CIPSO w/o categories media: v4l: Memset argument to 0 before calling get_mbus_config pad op net/mlx4_core: Avoid impossible mlx4_db_alloc() order value phy: core: don't require set_mode() callback for phy_get_mode() to work drm/amd/display: Initial psr_version with correct setting net/mlx5: Extend Ethtool loopback selftest to support non-linear SKB net/mlx5e: set the tx_queue_len for pfifo_fast net/mlx5e: reduce rep rxq depth to 256 for ECPF ip: fib_rules: Fetch net from fib_rule in fib[46]_rule_configure(). wifi: rtw88: Fix download_firmware_validate() for RTL8814AU hwmon: (xgene-hwmon) use appropriate type for the latency value vxlan: Annotate FDB data races rcu: handle quiescent states for PREEMPT_RCU=n, PREEMPT_COUNT=y rcu: fix header guard for rcu_all_qs() scsi: lpfc: Handle duplicate D_IDs in ndlp search-by D_ID routine scsi: st: Restore some drive settings after reset HID: usbkbd: Fix the bit shift number for LED_KANA drm/ast: Find VBIOS mode from regular display size bpftool: Fix readlink usage in get_fd_type perf/amd/ibs: Fix perf_ibs_op.cnt_mask for CurCnt wifi: rtw88: Don't use static local variable in rtw8822b_set_tx_power_index_by_rate spi: zynqmp-gqspi: Always acknowledge interrupts regulator: ad5398: Add device tree support drm/atomic: clarify the rules around drm_atomic_state->allow_modeset drm: Add valid clones check pinctrl: meson: define the pull up/down resistor value as 60 kOhm ASoC: Intel: bytcr_rt5640: Add DMI quirk for Acer Aspire SW3-013 ALSA: hda/realtek: Add quirk for HP Spectre x360 15-df1xxx nvmet-tcp: don't restore null sk_state_change btrfs: correct the order of prelim_ref arguments in btrfs__prelim_ref xenbus: Allow PVH dom0 a non-local xenstore __legitimize_mnt(): check for MNT_SYNC_UMOUNT should be under mount_lock xfrm: Sanitize marks before insert bridge: netfilter: Fix forwarding of fragmented packets net: dwmac-sun8i: Use parsed internal PHY address instead of 1 sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done crypto: algif_hash - fix double free in hash_accept padata: do not leak refcount in reorder_work can: bcm: add locking for bcm_op runtime updates can: bcm: add missing rcu read protection for procfs content ALSA: pcm: Fix race of buffer access at PCM OSS layer llc: fix data loss when reading from a socket in llc_ui_recvmsg() drm/edid: fixed the bug that hdr metadata was not reset memcg: always call cond_resched() after fn() mm/page_alloc.c: avoid infinite retries caused by cpuset race spi: spi-fsl-dspi: restrict register range for regmap access spi: spi-fsl-dspi: Halt the module after a new message transfer spi: spi-fsl-dspi: Reset SR flags before sending a new message kbuild: Disable -Wdefault-const-init-unsafe drm/i915/gvt: fix unterminated-string-initialization warning smb: client: Fix use-after-free in cifs_fill_dirent smb: client: Reset all search buffer pointers when releasing buffer net_sched: hfsc: Address reentrant enqueue adding class to eltree twice coredump: fix error handling for replace_fd() pid: add pidfd_prepare() fork: use pidfd_prepare() coredump: hand a pidfd to the usermode coredump helper HID: quirks: Add ADATA XPG alpha wireless mouse support nfs: don't share pNFS DS connections between net namespaces platform/x86: thinkpad_acpi: Support also NEC Lavie X1475JAS um: let 'make clean' properly clean underlying SUBARCH as well spi: spi-sun4i: fix early activation tpm: tis: Double the timeout B to 4s platform/x86: fujitsu-laptop: Support Lifebook S2110 hotkeys platform/x86: thinkpad_acpi: Ignore battery threshold change event notification xen/swiotlb: relax alignment requirements perf/arm-cmn: Initialise cmn->cpu earlier Linux 5.10.238 Change-Id: I35ae49dcc741e7a596a8faadb9fb8c9de436f5c0 Signed-off-by: Greg Kroah-Hartman <gregkh@google.com> |
||
|
Andy Shevchenko
|
90ca39f915 |
types: Complement the aligned types with signed 64-bit one
[ Upstream commit e4ca0e59c39442546866f3dd514a3a5956577daf ] Some user may want to use aligned signed 64-bit type. Provide it for them. Signed-off-by: Andy Shevchenko <andriy.shevchenko@linux.intel.com> Link: https://patch.msgid.link/20240903180218.3640501-2-andriy.shevchenko@linux.intel.com Signed-off-by: Jonathan Cameron <Jonathan.Cameron@huawei.com> Stable-dep-of: 5097eaae98e5 ("iio: adc: dln2: Use aligned_s64 for timestamp") Signed-off-by: Sasha Levin <sashal@kernel.org> |
||
|
Michael Bestas
|
a41b13bfbf |
Merge tag 'ASB-2025-05-05_12-5.10' of https://android.googlesource.com/kernel/common into android13-5.10-waipio
https://source.android.com/docs/security/bulletin/2025-05-01 * tag 'ASB-2025-05-05_12-5.10' of https://android.googlesource.com/kernel/common: ANDROID: GKI: Enable CONFIG_MEMFD_ASHMEM_SHIM ANDROID: mm: shmem: Use memfd-ashmem-shim ioctl handler ANDROID: mm/memfd-ashmem-shim: Introduce shim layer Revert "hrtimers: Handle CPU state correctly on hotplug" ANDROID: Repurpose a reserved slot in ipv6_devconf for backports UPSTREAM: net_sched: Prevent creation of classes with TC_H_ROOT FROMGIT: cgroup/cpuset-v1: Add missing support for cpuset_v2_mode Revert "netfilter: conntrack: convert to refcount_t api" Revert "netfilter: conntrack: fix crash due to confirmed bit load reordering" Revert "netfilter: nft_ct: fix use after free when attaching zone template" Revert "netfilter: nft_ct: Use __refcount_inc() for per-CPU nft_ct_pcpu_template." ANDROID: fix build error in trace_events_synth.c Linux 5.10.236 tracing: Do not use PERF enums when perf is not defined x86/kexec: Fix double-free of elf header buffer netfilter: conntrack: fix crash due to confirmed bit load reordering NFSD: Skip sending CB_RECALL_ANY when the backchannel isn't up nfsd: put dl_stid if fail to queue dl_recall jfs: add index corruption check to DT_GETPAGE() jfs: fix slab-out-of-bounds read in ea_get() ext4: fix OOB read when checking dotdot dir ext4: don't over-report free space or inodes in statvfs tracing: Ensure module defining synth event cannot be unloaded while tracing tracing: Fix use-after-free in print_graph_function_flags during tracer switching mmc: sdhci-pxav3: set NEED_RSP_BUSY capability ACPI: resource: Skip IRQ override on ASUS Vivobook 14 X1404VAP acpi: nfit: fix narrowing conversion in acpi_nfit_ctl x86/mm: Fix flush_tlb_range() when used for zapping normal PMDs x86/tsc: Always save/restore TSC sched_clock() on suspend/resume btrfs: handle errors from btrfs_dec_ref() properly ntb_perf: Delete duplicate dmaengine_unmap_put() call in perf_copy_chunk() drm/amd/display: Skip inactive planes within ModeSupportAndSystemConfiguration drm/amd/pm: Fix negative array index read tty: serial: fsl_lpuart: disable transmitter before changing RS485 related registers tty: serial: fsl_lpuart: use UARTMODIR register bits for lpuart32 platform can: flexcan: only change CAN state when link up in system PM arcnet: Add NULL check in com20020pci_probe() net: fix geneve_opt length integer overflow net: dsa: mv88e6xxx: propperly shutdown PPU re-enable timer on destroy ipv6: fix omitted netlink attributes when using RTEXT_FILTER_SKIP_STATS netfilter: nft_tunnel: fix geneve_opt type confusion addition tunnels: Accept PACKET_HOST in skb_tunnel_check_pmtu(). vsock: avoid timeout during connect() if the socket is closing net_sched: skbprio: Remove overly strict queue assertions netlabel: Fix NULL pointer exception caused by CALIPSO on IPv4 sockets ntb: intel: Fix using link status DB's ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans spufs: fix a leak in spufs_create_context() spufs: fix a leak on spufs_new_file() failure hwmon: (nct6775-core) Fix out of bounds access for NCT679{8,9} can: statistics: use atomic access in hot path ALSA: hda/realtek: Add mute LED quirk for HP Pavilion x360 14-dy1xxx locking/semaphore: Use wake_q to wake up processes outside lock critical section sched/deadline: Use online cpus for validating runtime platform/x86: intel-hid: fix volume buttons on Microsoft Surface Go 4 tablet affs: don't write overlarge OFS data block size fields affs: generate OFS sequence numbers starting at 1 nvme-pci: skip CMB blocks incompatible with PCI P2P DMA nvme-pci: clean up CMBMSC when registering CMB fails nvme-tcp: fix possible UAF in nvme_tcp_poll wifi: iwlwifi: fw: allocate chained SG tables for dump sched/smt: Always inline sched_smt_active() octeontx2-af: Fix mbox INTR handler when num VFs > 64 ACPI: processor: idle: Return an error if both P_LVL{2,3} idle states are invalid ring-buffer: Fix bytes_dropped calculation issue rtnetlink: Allocate vfinfo size for VF GUIDs when supported exfat: fix the infinite loop in exfat_find_last_cluster() objtool, media: dib8000: Prevent divide-by-zero in dib8000_set_dds() fs/procfs: fix the comment above proc_pid_wchan() perf python: Check if there is space to copy all the event perf python: Don't keep a raw_data pointer to consumed ring buffer space perf python: Decrement the refcount of just created event on failure perf python: Fixup description of sample.id event member NFSv4: Don't trigger uneccessary scans for return-on-close delegations ocfs2: validate l_tree_depth to avoid out-of-bounds access kexec: initialize ELF lowest address to ULONG_MAX perf units: Fix insufficient array space iio: accel: mma8452: Ensure error return on failure to matching oversampling ratio coresight: catu: Fix number of pages while using 64k pages isofs: fix KMSAN uninit-value bug in do_isofs_readdir() crypto: hisilicon/sec2 - fix for aead auth key length x86/dumpstack: Fix inaccurate unwinding from exception stacks due to misplaced assignment mfd: sm501: Switch to BIT() to mitigate integer overflows RDMA/mlx5: Fix mlx5_poll_one() cur_qp update flow power: supply: max77693: Fix wrong conversion of charge input threshold value x86/entry: Fix ORC unwinder for PUSH_REGS with save_ret=1 clk: amlogic: g12a: fix mmc A peripheral clock clk: amlogic: gxbb: drop non existing 32k clock parent clk: amlogic: g12b: fix cluster A parent data pinctrl: tegra: Set SFIO mode to Mux Register IB/mad: Check available slots before posting receive WRs clk: rockchip: rk3328: fix wrong clk_ref_usb3otg parent pinctrl: renesas: rza2: Fix missing of_node_put() call lib: 842: Improve error handling in sw842_compress() bpf: Use preempt_count() directly in bpf_send_signal_common() clk: samsung: Fix UBSAN panic in samsung_clk_init() remoteproc: qcom_q6v5_pas: Make single-PD handling more robust clk: amlogic: gxbb: drop incorrect flag on 32k clock fbdev: sm501fb: Add some geometry checks. mdacon: rework dependency list fbdev: au1100fb: Move a variable assignment behind a null pointer check PCI: pciehp: Don't enable HPIE when resuming in poll mode drm/mediatek: dsi: fix error codes in mtk_dsi_host_transfer() PCI: xilinx-cpm: Fix IRQ domain leak in error path of probe PCI: Remove stray put_device() in pci_register_host_bridge() drm/amd/display: fix type mismatch in CalculateDynamicMetadataParameters() PCI/portdrv: Only disable pciehp interrupts early when needed PCI: brcmstb: Use internal register to change link capability PCI: cadence-ep: Fix the driver to send MSG TLP for INTx without data payload PCI/ASPM: Fix link state exit during switch upstream function removal drm/mediatek: mtk_hdmi: Fix typo for aud_sampe_size member drm/mediatek: mtk_hdmi: Unregister audio platform device on failure drm: xlnx: zynqmp: Fix max dma segment size drm/dp_mst: Fix drm RAD print ASoC: ti: j721e-evm: Fix clock configuration for ti,j7200-cpb-audio compatible ALSA: hda/realtek: Always honor no_shutup_pins perf/ring_buffer: Allow the EPOLLRDNORM flag for poll lockdep: Don't disable interrupts on RT in disable_irq_nosync_lockdep.*() PM: sleep: Fix handling devices with direct_complete set on errors thermal: int340x: Add NULL check for adev EDAC/ie31200: Fix the error path order of ie31200_init() EDAC/ie31200: Fix the DIMM size mask for several SoCs EDAC/ie31200: Fix the size of EDAC_MC_LAYER_CHIP_SELECT layer selinux: Chain up tool resolving errors in install_policy.sh PM: sleep: Adjust check before setting power.must_resume x86/platform: Only allow CONFIG_EISA for 32-bit x86/fpu: Avoid copying dynamic FP state from init_task in arch_dup_task_struct() cpufreq: governor: Fix negative 'idle_time' handling in dbs_update() cpufreq: scpi: compare kHz instead of Hz x86/mm/pat: cpa-test: fix length for CPA_ARRAY test watch_queue: fix pipe accounting mismatch i2c: dev: check return value when calling dev_set_name() media: i2c: et8ek8: Don't strip remove function when driver is builtin serial: 8250_dma: terminate correct DMA in tx_dma_flush() memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove net: usb: usbnet: restore usb%d name exception for local mac addresses net: usb: qmi_wwan: add Telit Cinterion FE990B composition net: usb: qmi_wwan: add Telit Cinterion FN990B composition tty: serial: 8250: Add some more device IDs counter: microchip-tcb-capture: Fix undefined counter channel state on probe counter: stm32-lptimer-cnt: fix error handling when enabling ALSA: hda/realtek: Support mute LED on HP Laptop 15s-du3xxx netfilter: socket: Lookup orig tuple for IPv6 SNAT ARM: Remove address checking for MMUless devices ARM: 9351/1: fault: Add "cut here" line for prefetch aborts ARM: 9350/1: fault: Implement copy_from_kernel_nofault_allowed() atm: Fix NULL pointer dereference HID: hid-plantronics: Add mic mute mapping and generalize quirks ALSA: usb-audio: Add quirk for Plantronics headsets to fix control names drm/radeon: fix uninitialized size issue in radeon_vce_cs_parse() soc: qcom: pdr: Fix the potential deadlock batman-adv: Ignore own maximum aggregation size during RX bpf, sockmap: Fix race between element replace and close() Bluetooth: hci_event: Align BR/EDR JUST_WORKS paring with LE drm/amdgpu: Fix even more out of bound writes from debugfs ARM: shmobile: smp: Enforce shmobile_smp_* alignment proc: fix UAF in proc_get_inode() mmc: atmel-mci: Add missing clk_disable_unprepare() regulator: check that dummy regulator has been probed before using it drm/v3d: Don't run jobs that have errors flagged in its fence i2c: omap: fix IRQ storms net/neighbor: add missing policy for NDTPA_QUEUE_LENBYTES net: atm: fix use after free in lec_send() ipv6: Set errno after ip_fib_metrics_init() in ip6_route_info_create(). ipv6: Fix memleak of nhc_pcpu_rth_output in fib_check_nh_v6_gw(). Bluetooth: Fix error code in chan_alloc_skb_cb() RDMA/hns: Fix wrong value of max_sge_rd RDMA/hns: Fix soft lockup during bt pages loop RDMA/hns: Remove redundant 'phy_addr' in hns_roce_hem_list_find_mtt() RDMA/bnxt_re: Avoid clearing VLAN_ID mask in modify qp path ARM: dts: bcm2711: Don't mark timer regs unconfigured RDMA/bnxt_re: Add missing paranthesis in map_qp_id_to_tbl_indx ARM: dts: bcm2711: PL011 UARTs are actually r1p5 xfrm_output: Force software GSO only in tunnel mode firmware: imx-scu: fix OF node leak in .probe() drm/amd/display: Fix null check for pipe_ctx->plane_state in resource_build_scaling_params drm/amd/display: Check for invalid input params when building scaling params drm/amd/display: fix odm scaling drm/amd/display: Reject too small viewport size when validating plane drm/amd/display/dc/core/dc_resource: Staticify local functions drm/amd/display: Check plane scaling against format specific hw plane caps. i2c: sis630: Fix an error handling path in sis630_probe() i2c: ali15x3: Fix an error handling path in ali15x3_probe() i2c: ali1535: Fix an error handling path in ali1535_probe() ASoC: codecs: wm0010: Fix error handling path in wm0010_spi_probe() drm/gma500: Add NULL check for pci_gfx_root in mid_get_vbt_data() qlcnic: fix memory leak issues in qlcnic_sriov_common.c drm/amd/display: Fix slab-use-after-free on hdcp_work drm/amd/display: Assign normalized_pix_clk when color depth = 14 drm/atomic: Filter out redundant DPMS calls x86/microcode/AMD: Fix out-of-bounds on systems with CPU-less NUMA nodes USB: serial: option: match on interface class for Telit FN990B USB: serial: option: fix Telit Cinterion FE990A name USB: serial: option: add Telit Cinterion FE990B compositions USB: serial: ftdi_sio: add support for Altera USB Blaster 3 block: fix 'kmem_cache of name 'bio-108' already exists' drm/nouveau: Do not override forced connector status mptcp: safety check before fallback x86/irq: Define trace events conditionally fuse: don't truncate cached, mutated symlink ASoC: tas2764: Set the SDOUT polarity correctly ASoC: tas2764: Fix power control mask ASoC: tas2770: Fix volume scale nvme: only allow entering LIVE from CONNECTING state sctp: Fix undefined behavior in left shift operation nvmet-rdma: recheck queue state is LIVE in state lock in recv done ASoC: SOF: Intel: hda: add softdep pre to snd-hda-codec-hdmi module ASoC: arizona/madera: use fsleep() in up/down DAPM event delays. ASoC: rsnd: don't indicate warning on rsnd_kctrl_accept_runtime() thermal/cpufreq_cooling: Remove structure member documentation s390/cio: Fix CHPID "configure" attribute caching HID: ignore non-functional sensor in HP 5MP Camera HID: intel-ish-hid: fix the length of MNG_SYNC_FW_CLOCK in doorbell vboxsf: fix building with GCC 15 alpha/elf: Fix misc/setarch test of util-linux by removing 32bit support ACPI: resource: IRQ override for Eluktronics MECH-17 scsi: qla1280: Fix kernel oops when debug level > 2 iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic() powercap: call put_device() on an error path in powercap_register_control_type() hrtimers: Mark is_migration_base() with __always_inline nvme-fc: go straight to connecting state when initializing net/mlx5e: Prevent bridge link show failure for non-eswitch-allowed devices netfilter: nft_exthdr: fix offset with ipv4_find_option() net_sched: Prevent creation of classes with TC_H_ROOT ipvs: prevent integer overflow in do_ip_vs_get_ctl() netfilter: nf_conncount: Fully initialize struct nf_conncount_tuple in insert_tree() net/mlx5: handle errors in mlx5_chains_create_table() Drivers: hv: vmbus: Don't release fb_mmio resource in vmbus_free_mmio() netpoll: hold rcu read lock in __netpoll_send_skb() ice: fix memory leak in aRFS after reset netfilter: nft_ct: Use __refcount_inc() for per-CPU nft_ct_pcpu_template. netfilter: nft_ct: fix use after free when attaching zone template netfilter: conntrack: convert to refcount_t api pinctrl: bcm281xx: Fix incorrect regmap max_registers value fbdev: hyperv_fb: iounmap() the correct memory when removing a device x86/kexec: fix memory leak of elf header buffer KVM: x86: Reject Hyper-V's SEND_IPI hypercalls if local APIC isn't in-kernel ipv6: Fix signed integer overflow in __ip6_append_data sched/isolation: Prevent boot crash when the boot CPU is nohz_full clockevents/drivers/i8253: Fix stop sequence for timer 0 vlan: fix memory leak in vlan_newlink() Revert "NFSD: fix hang in nfsd4_shutdown_callback" ANDROID: GKI: fix build warning in mokvar-table.c Revert "usb: xhci: Add timeout argument in address_device USB HCD callback" Revert "usb: xhci: Fix NULL pointer dereference on certain command aborts" Linux 5.10.235 net: ipv6: fix dst refleaks in rpl, seg6 and ioam6 lwtunnels udf: Fix use of check_add_overflow() with mixed type arguments perf cs-etm: Add missing variable in cs_etm__process_queues() usb: xhci: Enable the TRB overfetch quirk on VIA VL805 btrfs: bring back the incorrectly removed extent buffer lock recursion support crypto: hisilicon/qm - inject error before stopping queue kbuild: userprogs: use correct lld when linking through clang sched: sch_cake: add bounds checks to host bulk flow fairness counts vsock: Orphan socket after transport release vsock: Keep the binding until socket destruction bpf, vsock: Invoke proto::close on close() Revert "media: uvcvideo: Require entities to have a non-zero unique ID" media: uvcvideo: Remove dangling pointers media: uvcvideo: Only save async fh if success nilfs2: handle errors that nilfs_prepare_chunk() may return nilfs2: eliminate staggered calls to kunmap in nilfs_rename nilfs2: move page release outside of nilfs_delete_entry and nilfs_set_link spi-mxs: Fix chipselect glitch mtd: rawnand: cadence: fix unchecked dereference eeprom: digsy_mtc: Make GPIO lookup table match the device slimbus: messaging: Free transaction ID in delayed interrupt scenario intel_th: pci: Add Panther Lake-P/U support intel_th: pci: Add Panther Lake-H support intel_th: pci: Add Arrow Lake support mei: me: add panther lake P DID Squashfs: check the inode number is not the invalid value of zero xhci: pci: Fix indentation in the PCI device ID definitions usb: gadget: Check bmAttributes only if configuration is valid usb: gadget: Fix setting self-powered state on suspend usb: gadget: Set self-powered based on MaxPower and bmAttributes usb: typec: tcpci_rt1711h: Unmask alert interrupts to fix functionality usb: typec: ucsi: increase timeout for PPM reset operations usb: atm: cxacru: fix a flaw in existing endpoint checks usb: renesas_usbhs: Flush the notify_hotplug_work usb: quirks: Add DELAY_INIT and NO_LPM for Prolific Mass Storage Card Reader usb: renesas_usbhs: Use devm_usb_get_phy() usb: renesas_usbhs: Call clk_put() Revert "drivers/card_reader/rtsx_usb: Restore interrupt based detection" gpio: rcar: Fix missing of_node_put() call net: ipv6: fix missing dst ref drop in ila lwtunnel net: ipv6: fix dst ref loop in ila lwtunnel net-timestamp: support TCP GSO case for a few missing flags vlan: enforce underlying device type ppp: Fix KMSAN uninit-value warning with bpf be2net: fix sleeping while atomic bugs in be_ndo_bridge_getlink drm/sched: Fix preprocessor guard hwmon: fix a NULL vs IS_ERR_OR_NULL() check in xgene_hwmon_probe() llc: do not use skb_get() before dev_queue_xmit() ALSA: usx2y: validate nrpacks module parameter on probe hwmon: (ad7314) Validate leading zero bits and return error hwmon: (ntc_thermistor) Fix the ncpXXxh103 sensor table hwmon: (pmbus) Initialise page count in pmbus_identify() caif_virtio: fix wrong pointer check in cfv_probe() net: gso: fix ownership in __udp_gso_segment nvmet-tcp: Fix a possible sporadic response drops in weakly ordered arch HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() HID: google: fix unused variable warning under !CONFIG_ACPI wifi: iwlwifi: limit printed string from FW file mm/page_alloc: fix uninitialized variable block: fix conversion of GPT partition name to 7-bit s390/traps: Fix test_monitor_call() inline assembly rapidio: fix an API misues when rio_add_net() fails rapidio: add check for rio_add_net() in rio_scan_alloc_net() wifi: nl80211: reject cooked mode if it is set along with other flags wifi: cfg80211: regulatory: improve invalid hints checking x86/cpu: Properly parse CPUID leaf 0x2 TLB descriptor 0x63 x86/cpu: Validate CPUID leaf 0x2 EDX output x86/cacheinfo: Validate CPUID leaf 0x2 EDX output platform/x86: thinkpad_acpi: Add battery quirk for ThinkPad X131e drm/radeon: Fix rs400_gpu_init for ATI mobility radeon Xpress 200M ALSA: hda/realtek: update ALC222 depop optimize ALSA: hda: intel: Add Dell ALC3271 to power_save denylist gpio: aggregator: protect driver attr handlers against module unload HID: appleir: Fix potential NULL dereference at raw event handle Revert "of: reserved-memory: Fix using wrong number of cells to get property 'alignment'" efi: Don't map the entire mokvar table to determine its size drm/amdgpu: disable BAR resize on Dell G5 SE drm/amdgpu: Check extended configuration space register when system uses large bar smb: client: Add check for next_buffer in receive_encrypted_standard() acct: perform last write from workqueue kernel/acct.c: use dedicated helper to access rlimit values kernel/acct.c: use #elif instead of #end and #elif drop_monitor: fix incorrect initialization order pfifo_tail_enqueue: Drop new packet when sch->limit == 0 intel_idle: Handle older CPUs, which stop the TSC in deeper C states, correctly sched/core: Prevent rescheduling when interrupts are disabled vmlinux.lds: Ensure that const vars with relocations are mapped R/O mptcp: always handle address removal under msk socket lock phy: exynos5-usbdrd: fix MPLL_MULTIPLIER and SSC_REFCLKSEL masks in refclk phy: tegra: xusb: reset VBUS & ID OVERRIDE usbnet: gl620a: fix endpoint checking in genelink_bind() i2c: npcm: disable interrupt enable bit before devm_request_irq perf/core: Fix low freq setting via IOC_PERIOD ftrace: Avoid potential division by zero in function_stat_show() x86/CPU: Fix warm boot hang regression on AMD SC1100 SoC systems net: ipv6: fix dst ref loop on input in rpl lwt net: ipv6: rpl_iptunnel: mitigate 2-realloc issue include: net: add static inline dst_dev_overhead() to dst.h net: use indirect call helpers for dst_output net: use indirect call helpers for dst_input net: ipv6: rpl_iptunnel: simplify the return expression of rpl_do_srh() net: mvpp2: cls: Fixed Non IP flow, with vlan tag flow defination. tcp: Defer ts_recent changes until req is owned ipvs: Always clear ipvs_property flag in skb_scrub_packet() ASoC: es8328: fix route from DAC to output net: cadence: macb: Synchronize stats calculations net: loopback: Avoid sending IP packets without an Ethernet header Bluetooth: L2CAP: Fix L2CAP_ECRED_CONN_RSP response ALSA: usb-audio: Avoid dropping MIDI events at closing multiple ports sunrpc: suppress warnings for unused procfs functions RDMA/mlx5: Fix bind QP error cleanup flow IB/mlx5: Set and get correct qp_num for a DCT QP x86/cpu/kvm: SRSO: Fix possible missing IBPB on VM-Exit mtd: rawnand: cadence: fix incorrect device in dma_unmap_single mtd: rawnand: cadence: use dma_map_resource for sdma address mtd: rawnand: cadence: fix error code in cadence_nand_init() acct: block access to kernel internal filesystems ALSA: hda/conexant: Add quirk for HP ProBook 450 G4 mute LED nfp: bpf: Add check for nfp_app_ctrl_msg_alloc() tee: optee: Fix supplicant wait loop bpf: skip non exist keys in generic_map_lookup_batch power: supply: da9150-fg: fix potential overflow flow_dissector: Fix port range key handling in BPF conversion flow_dissector: Fix handling of mixed port and port-range keys net: extract port range fields from fl_flow_key geneve: Suppress list corruption splat in geneve_destroy_tunnels(). gtp: Suppress list corruption splat in gtp_net_exit_batch_rtnl(). geneve: Fix use-after-free in geneve_find_dev(). powerpc/code-patching: Fix KASAN hit by not flagging text patching area as VM_ALLOC ALSA: hda/realtek: Fixup ALC225 depop procedure powerpc/64s: Rewrite __real_pte() and __rpte_to_hidx() as static inline powerpc/64s/mm: Move __real_pte stubs into hash-4k.h USB: gadget: f_midi: f_midi_complete to call queue_work usb/gadget: f_midi: Replace tasklet with work usb: dwc3: Fix timeout issue during controller enter/exit from halt state usb: dwc3: Increase DWC3 controller halt timeout batman-adv: Drop unmanaged ELP metric worker batman-adv: Drop initialization of flexible ethtool_link_ksettings batman-adv: Add new include for min/max helpers tpm: Change to kvalloc() in eventlog/acpi.c tpm: Use managed allocation for bios event log drm/rockchip: cdn-dp: Use drm_connector_helper_hpd_irq_event() drm/probe-helper: Create a HPD IRQ event helper for a single connector memcg: fix soft lockup in the OOM process mm: update mark_victim tracepoints fields crypto: testmgr - some more fixes to RSA test vectors crypto: testmgr - populate RSA CRT parameters in RSA test vectors crypto: testmgr - fix version number of RSA tests crypto: testmgr - Fix wrong test case of RSA crypto: testmgr - fix wrong key length for pkcs1pad arm64: mte: Do not allow PROT_MTE on MAP_HUGETLB user mappings nvme-pci: fix multiple races in nvme_setup_io_queues vlan: move dev_put into vlan_dev_uninit vlan: introduce vlan_dev_free_egress_priority ima: Fix use-after-free on a dentry's dname.name pps: Fix a use-after-free btrfs: avoid monopolizing a core when activating a swap file Revert "btrfs: avoid monopolizing a core when activating a swap file" x86/i8253: Disable PIT timer 0 when not in use f2fs: fix to wait dio completion selftests: rtnetlink: update netdevsim ipsec output format netdevsim: print human readable IP address parport_pc: add support for ASIX AX99100 serial: 8250_pci: add support for ASIX AX99100 can: ems_pci: move ASIX AX99100 ids to pci_ids.h nilfs2: protect access to buffers with no active references nilfs2: do not force clear folio if buffer is referenced nilfs2: do not output warnings when clearing dirty buffers alpha: replace hardcoded stack offsets with autogenerated ones x86/static-call: Remove early_boot_irqs_disabled check to fix Xen PVH dom0 kdb: Do not assume write() callback available drm/tidss: Clear the interrupt status for interrupts being disabled drm/tidss: Fix issue in irq handling causing irq-flood issue ndisc: extend RCU protection in ndisc_send_skb() openvswitch: use RCU protection in ovs_vport_cmd_fill_info() arp: use RCU protection in arp_xmit() neighbour: use RCU protection in __neigh_notify() neighbour: delete redundant judgment statements ndisc: use RCU protection in ndisc_alloc_skb() ipv6: use RCU protection in ip6_default_advmss() ipv4: use RCU protection in inet_select_addr() ipv4: use RCU protection in rt_is_expired() net: add dev_net_rcu() helper net: treat possible_net_t net pointer as an RCU one and add read_pnet_rcu() clocksource: Use migrate_disable() to avoid calling get_random_u32() in atomic context clocksource: Use pr_info() for "Checking clocksource synchronization" message clocksource: Replace cpumask_weight() with cpumask_empty() clocksource: Replace deprecated CPU-hotplug functions. clocksource: Limit number of CPUs checked for clock synchronization mlxsw: Add return value check for mlxsw_sp_port_get_stats_raw() arm64: Handle .ARM.attributes section in linker scripts regmap-irq: Add missing kfree() partitions: mac: fix handling of bogus partition table gpio: stmpe: Check return value of stmpe_reg_read in stmpe_gpio_irq_sync_unlock alpha: align stack for page fault and user unaligned trap handlers serial: 8250: Fix fifo underflow on flush efi: Avoid cold plugged memory for placing the kernel alpha: make stack 16-byte aligned (most cases) can: j1939: j1939_sk_send_loop(): fix unable to send messages with data length zero can: c_can: fix unbalanced runtime PM disable in error path USB: serial: option: drop MeiG Smart defines USB: serial: option: fix Telit Cinterion FN990A name USB: serial: option: add Telit Cinterion FN990B compositions USB: serial: option: add MeiG Smart SLM828 usb: cdc-acm: Fix handling of oversized fragments usb: cdc-acm: Check control transfer buffer size before access USB: cdc-acm: Fill in Renesas R-Car D3 USB Download mode quirk USB: hub: Ignore non-compliant devices with too many configs or interfaces usb: gadget: f_midi: fix MIDI Streaming descriptor lengths USB: Add USB_QUIRK_NO_LPM quirk for sony xperia xz1 smartphone USB: quirks: add USB_QUIRK_NO_LPM quirk for Teclast dist usb: core: fix pipe creation for get_bMaxPacketSize0 USB: pci-quirks: Fix HCCPARAMS register error for LS7A EHCI usb: dwc2: gadget: remove of_node reference upon udc_stop usb: gadget: udc: renesas_usb3: Fix compiler warning usb: roles: set switch registered flag early on perf/x86/intel: Ensure LBRs are disabled when a CPU is starting batman-adv: Ignore neighbor throughput metrics in error case batman-adv: fix panic during interface removal ASoC: Intel: bytcr_rt5640: Add DMI quirk for Vexia Edu Atla 10 tablet 5V orangefs: fix a oob in orangefs_debug_write Grab mm lock before grabbing pt lock vfio/pci: Enable iowrite64 and ioread64 for vfio pci PCI/DPC: Quirk PIO log size for Intel Raptor Lake-P media: vidtv: Fix a null-ptr-deref in vidtv_mux_stop_thread media: cxd2841er: fix 64-bit division on gcc-9 x86/xen: allow larger contiguous memory regions in PV guests xen: remove a confusing comment on auto-translated guest I/O gpio: bcm-kona: Add missing newline to dev_err format string gpio: bcm-kona: Make sure GPIO bits are unlocked when requesting IRQ gpio: bcm-kona: Fix GPIO lock/unlock for banks above bank 0 arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array team: better TEAM_OPTION_TYPE_STRING validation vrf: use RCU protection in l3mdev_l3_out() ndisc: ndisc_send_redirect() must use dev_get_by_index_rcu() HID: multitouch: Add NULL check in mt_input_configured NFSD: fix hang in nfsd4_shutdown_callback nfsd: clear acl_access/acl_default after releasing them mptcp: prevent excessive coalescing on receive ocfs2: check dir i_size in ocfs2_find_entry MIPS: ftrace: Declare ftrace_get_parent_ra_addr() as static ptp: Ensure info->enable callback is always set net/ncsi: wait for the last response to Deselect Package before configuring channel misc: fastrpc: Fix registered buffer page address mtd: onenand: Fix uninitialized retlen in do_otp_read() NFC: nci: Add bounds checking in nci_hci_create_pipe() nilfs2: fix possible int overflows in nilfs_fiemap() ocfs2: handle a symlink read error correctly ocfs2: fix incorrect CPU endianness conversion causing mount failure pnfs/flexfiles: retry getting layout segment for reads vfio/platform: check the bounds of read/write syscalls nvmem: core: improve range check for nvmem_cell_write() nvmem: qcom-spmi-sdam: Set size in struct nvmem_config crypto: qce - unregister previously registered algos in error path crypto: qce - fix goto jump in error path media: uvcvideo: Remove redundant NULL assignment media: uvcvideo: Fix event flags in uvc_ctrl_send_events media: ov5640: fix get_light_freq on auto media: mc: fix endpoint iteration soc: qcom: smem_state: fix missing of_node_put in error path iio: light: as73211: fix channel handling in only-color triggered buffer x86/boot: Use '-std=gnu11' to fix build with GCC 15 kbuild: Move -Wenum-enum-conversion to W=2 scsi: storvsc: Set correct data length for sending SCSI command without payload scsi: qla2xxx: Move FCE Trace buffer allocation to user control ALSA: hda/realtek: Enable headset mic on Positivo C6400 dm-crypt: track tag_offset in convert_context dm-crypt: don't update io->sector after kcryptd_crypt_write_io_submit() powerpc/pseries/eeh: Fix get PE state translation serial: sh-sci: Do not probe the serial port if its slot in sci_ports[] is in use serial: sh-sci: Drop __initdata macro for port_cfg soc: qcom: socinfo: Avoid out of bounds read of serial number usb: gadget: f_tcm: Don't prepare BOT write request twice usb: gadget: f_tcm: ep_autoconfig with fullspeed endpoint usb: gadget: f_tcm: Decrement command ref count on cleanup usb: gadget: f_tcm: Translate error to sense wifi: brcmfmac: fix NULL pointer dereference in brcmf_txfinalize() wifi: rtlwifi: rtl8821ae: Fix media status report HID: hid-sensor-hub: don't use stale platform-data on remove of: reserved-memory: Fix using wrong number of cells to get property 'alignment' of: Fix of_find_node_opts_by_path() handling of alias+path+options of: Correct child specifier used as input of the 2nd nexus node perf bench: Fix undefined behavior in cmpworker() efi: libstub: Use '-std=gnu11' to fix build with GCC 15 blk-cgroup: Fix class @block_class's subsystem refcount leakage clk: qcom: clk-rpmh: prevent integer overflow in recalc_rate clk: qcom: clk-alpha-pll: fix alpha mode configuration clk: sunxi-ng: a100: enable MMC clock reparenting Bluetooth: L2CAP: accept zero as a special value for MTU auto-selection Bluetooth: L2CAP: handle NULL sock pointer in l2cap_sock_alloc drm/komeda: Add check for komeda_get_layer_fourcc_list() KVM: s390: vsie: fix some corner-cases when grabbing vsie pages KVM: Explicitly verify target vCPU is online in kvm_get_vcpu() arm64: dts: rockchip: increase gmac rx_delay on rk3399-puma binfmt_flat: Fix integer overflow bug on 32 bit systems m68k: vga: Fix I/O defines s390/futex: Fix FUTEX_OP_ANDN implementation drm/modeset: Handle tiled displays in pan_display_atomic. leds: lp8860: Write full EEPROM, not only half of it cpufreq: s3c64xx: Fix compilation warning tun: revert fix group permission check netem: Update sch->q.qlen before qdisc_tree_reduce_backlog() x86/xen: add FRAME_END to xen_hypercall_hvm() x86/xen: fix xen_hypercall_hvm() to not clobber %rbx net: rose: lock the socket in rose_bind() net: atlantic: fix warning during hot unplug gpio: pca953x: Improve interrupt support udp: gso: do not drop small packets when PMTU reduces tg3: Disable tg3 PCIe AER on system reboot gpu: drm_dp_cec: fix broken CEC adapter properties check firmware: iscsi_ibft: fix ISCSI_IBFT Kconfig entry nvme: handle connectivity loss in nvme_set_queue_count usb: xhci: Fix NULL pointer dereference on certain command aborts net: usb: rtl8150: enable basic endpoint checking usb: xhci: Add timeout argument in address_device USB HCD callback net: usb: rtl8150: use new tasklet API x86/mm: Don't disable PCID when INVLPG has been fixed by microcode Input: allocate keycode for phone linking selftests/net/ipsec: Fix Null pointer dereference in rtattr_pack() tipc: re-order conditions in tipc_crypto_key_rcv() mmc: sdhci-msm: Correctly set the load for the regulator APEI: GHES: Have GHES honor the panic= setting i2c: Force ELAN06FA touchpad I2C bus freq to 100KHz net/mlx5: use do_aux_work for PHC overflow checks HID: Wacom: Add PCI Wacom device support mfd: lpc_ich: Add another Gemini Lake ISA bridge PCI device-id tomoyo: don't emit warning in tomoyo_write_control() wifi: brcmsmac: add gain range check to wlc_phy_iqcal_gainparams_nphy() mmc: core: Respect quirk_max_rate for non-UHS SDIO card tun: fix group permission check safesetid: check size of policy writes printk: Fix signed integer overflow when defining LOG_BUF_LEN_MAX x86/amd_nb: Restrict init function to AMD-based systems lockdep: Fix upper limit for LOCKDEP_*_BITS configs sched: Don't try to catch up excess steal time. btrfs: convert BUG_ON in btrfs_reloc_cow_block() to proper error handling btrfs: fix use-after-free when attempting to join an aborted transaction btrfs: output the reason for open_ctree() failure usb: gadget: f_tcm: Don't free command immediately media: uvcvideo: Fix double free in error path HID: core: Fix assumption that Resolution Multipliers must be in Logical Collections usb: typec: tcpm: set SRC_SEND_CAPABILITIES timeout to PD_T_SENDER_RESPONSE usb: gadget: f_tcm: Fix Get/SetInterface return value drivers/card_reader/rtsx_usb: Restore interrupt based detection ktest.pl: Check kernelrelease return in get_version netfilter: nf_tables: reject mismatching sum of field_len with set key length NFSD: Reset cb_seq_status after NFS4ERR_DELAY hexagon: Fix unbalanced spinlock in die() hexagon: fix using plain integer as NULL pointer warning in cmpxchg genksyms: fix memory leak when the same symbol is read from *.symref file genksyms: fix memory leak when the same symbol is added from source net: hsr: fix fill_frame_info() regression vs VLAN packets net: sh_eth: Fix missing rtnl lock in suspend/resume path bgmac: reduce max frame size to support just MTU 1500 vsock: Allow retrying on connect() failure perf trace: Fix runtime error of index out of bounds net: davicom: fix UAF in dm9000_drv_remove net: netdevsim: try to close UDP port harness races net: rose: fix timer races against user threads PM: hibernate: Add error handling for syscore_suspend() ipmr: do not call mr_mfc_uses_dev() for unres entries net: fec: implement TSO descriptor cleanup net: hns3: fix oops when unload drivers paralleling ubifs: skip dumping tnc tree when zroot is null rtc: pcf85063: fix potential OOB write in PCF85063 NVMEM read dmaengine: ti: edma: fix OF node reference leaks in edma_driver xfrm: replay: Fix the update of replay_esn->oseq_hi for GSO tools/bootconfig: Fix the wrong format specifier NFSv4.2: fix COPY_NOTIFY xdr buf size calculation module: Extend the preempt disabled section in dereference_symbol_descriptor(). ocfs2: mark dquot as inactive if failed to start trans while releasing dquot scsi: ufs: bsg: Delete bsg_dev when setting up bsg fails scsi: mpt3sas: Set ioc->manu_pg11.EEDPTagMode directly to 1 PCI: rcar-ep: Fix incorrect variable used when calling devm_request_mem_region() staging: media: imx: fix OF node leak in imx_media_add_of_subdevs() mtd: hyperbus: hbmc-am654: fix an OF node reference leak media: uvcvideo: Propagate buf->error to userspace media: camif-core: Add check for clk_enable() media: mipi-csis: Add check for clk_enable() media: marvell: Add check for clk_enable() PCI: endpoint: Destroy the EPC device in devm_pci_epc_destroy() media: lmedm04: Handle errors for lme2510_int_read media: lmedm04: Use GFP_KERNEL for URB allocation/submission. media: rc: iguanair: handle timeouts fbdev: omapfb: Fix an OF node leak in dss_of_port_get_parent_device() ARM: dts: mediatek: mt7623: fix IR nodename arm64: dts: qcom: sm8250: correct sleep clock frequency arm64: dts: qcom: msm8994: correct sleep clock frequency arm64: dts: qcom: msm8916: correct sleep clock frequency arm64: dts: mediatek: mt8173-evb: Fix MT6397 PMIC sub-node names arm64: dts: mediatek: mt8173-elm: Fix MT6397 PMIC sub-node names arm64: dts: mediatek: mt8173-elm: Drop regulator-compatible property arm64: dts: mediatek: mt8173-evb: Drop regulator-compatible property rdma/cxgb4: Prevent potential integer overflow on 32bit RDMA/mlx4: Avoid false error about access to uninitialized gids array arm64: dts: mediatek: mt8516: reserve 192 KiB for TF-A arm64: dts: mediatek: mt8516: add i2c clock-div property arm64: dts: mediatek: mt8516: remove 2 invalid i2c clocks arm64: dts: mediatek: mt8516: fix wdt irq type arm64: dts: mediatek: mt8516: fix GICv2 range padata: avoid UAF for reorder_work padata: add pd get/put refcnt helper padata: fix UAF in padata_reorder bpf: Send signals asynchronously if !preemptible perf report: Fix misleading help message about --demangle perf top: Don't complain about lack of vmlinux when not resolving some kernel samples padata: fix sysfs store callback check ktest.pl: Remove unused declarations in run_bisect_test function perf bpf: Fix two memory leakages when calling perf_env__insert_bpf_prog_info() perf env: Conditionally compile BPF support code on having HAVE_LIBBPF_SUPPORT perf header: Fix one memory leakage in process_bpf_prog_info() perf header: Fix one memory leakage in process_bpf_btf() ASoC: sun4i-spdif: Add clock multiplier settings tools/testing/selftests/bpf/test_tc_tunnel.sh: Fix wait for server bind net/rose: prevent integer overflows in rose_setsockopt() net: ethernet: ti: am65-cpsw: fix freeing IRQ in am65_cpsw_nuss_remove_tx_chns() net: sched: Disallow replacing of child qdisc from one parent to another net/mlxfw: Drop hard coded max FW flash image size net: let net.core.dev_weight always be non-zero pwm: stm32: Add check for clk_enable() clk: analogbits: Fix incorrect calculation of vco rate delta wifi: cfg80211: adjust allocation of colocated AP data wifi: cfg80211: Handle specific BSSID in 6GHz scanning selftests: harness: fix printing of mismatch values in __EXPECT() cpufreq: ACPI: Fix max-frequency computation wifi: mt76: mt76u_vendor_request: Do not print error messages when -EPROTO net/smc: fix data error when recvmsg with MSG_PEEK flag wifi: wlcore: fix unbalanced pm_runtime calls regulator: of: Implement the unwind path of of_regulator_match() team: prevent adding a device which is already a team device lower clk: imx8mp: Fix clkout1/2 support cpufreq: schedutil: Fix superfluous updates caused by need_freq_update cpufreq: schedutil: Simplify sugov_update_next_freq() leds: netxbig: Fix an OF node reference leak in netxbig_leds_get_of_pdata() cpupower: fix TSC MHz calculation ACPI: fan: cleanup resources in the error path of .probe() wifi: rtlwifi: pci: wait for firmware loading before releasing memory wifi: rtlwifi: fix memory leaks and invalid access at probe error path wifi: rtlwifi: destroy workqueue at rtl_deinit_core wifi: rtlwifi: remove unused check_buddy_priv wifi: rtlwifi: remove unused dualmac control leftovers wifi: rtlwifi: remove unused timer and related code rtlwifi: replace usage of found with dedicated list iterator variable dt-bindings: mmc: controller: clarify the address-cells description spi: zynq-qspi: Add check for clk_enable() wifi: rtlwifi: usb: fix workqueue leak when probe fails wifi: rtlwifi: fix init_sw_vars leak when probe fails wifi: rtlwifi: wait for firmware loading before releasing memory rtlwifi: remove redundant assignment to variable err wifi: rtlwifi: rtl8192se: rise completion of firmware loading as last step wifi: rtlwifi: do not complete firmware loading needlessly ipmi: ipmb: Add check devm_kasprintf() returned value genirq: Make handle_enforce_irqctx() unconditionally available drm/amdgpu: Fix potential NULL pointer dereference in atomctrl_get_smc_sclk_range_table drm/etnaviv: Fix page property being used for non writecombine buffers afs: Fix the fallback handling for the YFS.RemoveFile2 RPC call select: Fix unbalanced user_access_end() partitions: ldm: remove the initial kernel-doc notation nvme: Add error check for xa_store in nvme_get_effects_log nbd: don't allow reconnect after disconnect afs: Fix directory format encoding struct afs: Fix EEXIST error returned from afs_rmdir() to be ENOTEMPTY Conflicts: Documentation/devicetree/bindings/mmc/mmc-controller.yaml Documentation/devicetree/bindings~HEAD drivers/mmc/host/sdhci-msm.c drivers/soc/qcom/socinfo.c Change-Id: Ie7189758f83611ac505a39a3f6be5682c0dd4043 |
||
|
Greg Kroah-Hartman
|
757ad9827a |
Merge 5.10.237 into android12-5.10-lts
Changes in 5.10.237 ata: pata_pxa: Fix potential NULL pointer dereference in pxa_ata_probe() tipc: fix memory leak in tipc_link_xmit net: tls: explicitly disallow disconnect ata: sata_sx4: Drop pointless VPRINTK() calls and convert the remaining ones ata: sata_sx4: Add error handling in pdc20621_i2c_read() nvmet-fcloop: swap list_add_tail arguments net: ppp: Add bound checking for skb data on ppp_sync_txmung nft_set_pipapo: fix incorrect avx2 match of 5th field octet umount: Allow superblock owners to force umount pm: cpupower: bench: Prevent NULL dereference on malloc failure x86/cpu: Don't clear X86_FEATURE_LAHF_LM flag in init_amd_k8() on AMD when running in a virtual machine perf: arm_pmu: Don't disable counter in armpmu_add() arm64: cputype: Add QCOM_CPU_PART_KRYO_3XX_GOLD xen/mcelog: Add __nonstring annotations for unterminated strings HID: pidff: Convert infinite length from Linux API to PID standard HID: pidff: Do not send effect envelope if it's empty HID: pidff: Fix null pointer dereference in pidff_find_fields ALSA: hda: intel: Fix Optimus when GPU has no sound ALSA: usb-audio: Fix CME quirk for UF series keyboards page_pool: avoid infinite loop to schedule delayed worker fs/jfs: cast inactags to s64 to prevent potential overflow fs/jfs: Prevent integer overflow in AG size calculation jfs: Prevent copying of nlink with value 0 from disk inode jfs: add sanity check for agwidth in dbMount ata: libata-eh: Do not use ATAPI DMA for a device limited to PIO mode f2fs: fix to avoid out-of-bounds access in f2fs_truncate_inode_blocks() ahci: add PCI ID for Marvell 88SE9215 SATA Controller ext4: protect ext4_release_dquot against freezing ext4: ignore xattrs past end scsi: st: Fix array overflow in st_setup() wifi: mt76: mt76x2u: add TP-Link TL-WDN6200 ID to device table net: vlan: don't propagate flags on open tracing: fix return value in __ftrace_event_enable_disable for TRACE_REG_UNREGISTER Bluetooth: hci_uart: fix race during initialization drm: allow encoder mode_set even when connectors change for crtc drm: panel-orientation-quirks: Add support for AYANEO 2S drm: panel-orientation-quirks: Add new quirk for GPD Win 2 drm/bridge: panel: forbid initializing a panel with unknown connector type drm/amdkfd: clamp queue size to minimum drm/amdkfd: Fix pqm_destroy_queue race with GPU reset drm/mediatek: mtk_dpi: Explicitly manage TVD clock in power on/off fbdev: omapfb: Add 'plane' value check pwm: mediatek: Always use bus clock pwm: mediatek: Prevent divide-by-zero in pwm_mediatek_config() pwm: rcar: Simplify multiplication/shift logic pwm: rcar: Improve register calculation pwm: fsl-ftm: Handle clk_get_rate() returning 0 bpf: Add endian modifiers to fix endian warnings bpf: support SKF_NET_OFF and SKF_LL_OFF on skb frags ext4: reject casefold inode flag without casefold feature ext4: don't treat fhandle lookup of ea_inode as FS corruption media: i2c: adv748x: Fix test pattern selection mask media: venus: hfi: add a check to handle OOB in sfr region media: venus: hfi: add check to handle incorrect queue size media: vim2m: print device name after registering device media: siano: Fix error handling in smsdvb_module_init() xenfs/xensyms: respect hypervisor's "next" indication arm64: cputype: Add MIDR_CORTEX_A76AE arm64: errata: Add QCOM_KRYO_4XX_GOLD to the spectre_bhb_k24_list spi: cadence-qspi: Fix probe on AM62A LP SK mtd: rawnand: brcmnand: fix PM resume warning media: streamzap: prevent processing IR data on URB failure media: v4l2-dv-timings: prevent possible overflow in v4l2_detect_gtf() media: i2c: ov7251: Set enable GPIO low in probe media: i2c: ov7251: Introduce 1 ms delay between regulators and en GPIO media: venus: hfi_parser: add check to avoid out of bound access net: dsa: mv88e6xxx: workaround RGMII transmit delay erratum for 6320 family mtd: Replace kcalloc() with devm_kcalloc() clocksource/drivers/stm32-lptimer: Use wakeup capable instead of init wakeup wifi: mac80211: fix integer overflow in hwmp_route_info_get() ASoC: qdsp6: q6asm-dai: fix q6asm_dai_compr_set_params error path ext4: fix off-by-one error in do_split vdpa/mlx5: Fix oversized null mkey longer than 32bit i3c: Add NULL pointer check in i3c_master_queue_ibi() jbd2: remove wrong sb->s_sequence check mfd: ene-kb3930: Fix a potential NULL pointer dereference locking/lockdep: Decrease nr_unused_locks if lock unused in zap_class() lib: scatterlist: fix sg_split_phys to preserve original scatterlist offsets mtd: inftlcore: Add error check for inftl_read_oob() mtd: rawnand: Add status chack in r852_ready() arm64: dts: mediatek: mt8173: Fix disp-pwm compatible string sparc/mm: disable preemption in lazy mmu mode mm: add missing release barrier on PGDAT_RECLAIM_LOCKED unlock sctp: detect and prevent references to a freed transport in sendmsg thermal/drivers/rockchip: Add missing rk3328 mapping entry crypto: ccp - Fix check for the primary ASP device dm-integrity: set ti->error on memory allocation failure ftrace: Add cond_resched() to ftrace_graph_set_hash() gpio: zynq: Fix wakeup source leaks on device unbind ntb: use 64-bit arithmetic for the MSI doorbell mask of/irq: Fix device node refcount leakages in of_irq_count() of/irq: Fix device node refcount leakage in API irq_of_parse_and_map() of/irq: Fix device node refcount leakages in of_irq_init() PCI: brcmstb: Fix missing of_node_put() in brcm_pcie_probe() PCI: Fix reference leak in pci_alloc_child_bus() pinctrl: qcom: Clear latched interrupt status when changing IRQ type x86/e820: Fix handling of subpage regions when calculating nosave ranges in e820__register_nosave_regions() Bluetooth: hci_uart: Fix another race during initialization pwm: mediatek: always use bus clock for PWM on MT7622 HSI: ssi_protocol: Fix use after free vulnerability in ssi_protocol Driver Due to Race Condition wifi: at76c50x: fix use after free access in at76_disconnect wifi: mac80211: Update skb's control block key in ieee80211_tx_dequeue() wifi: mac80211: Purge vif txq in ieee80211_do_stop() wifi: wl1251: fix memory leak in wl1251_tx_work scsi: iscsi: Fix missing scsi_host_put() in error path RDMA/usnic: Fix passing zero to PTR_ERR in usnic_ib_pci_probe() RDMA/hns: Fix wrong maximum DMA segment size RDMA/core: Silence oversized kvmalloc() warning Bluetooth: hci_event: Fix sending MGMT_EV_DEVICE_FOUND for invalid address Bluetooth: btrtl: Prevent potential NULL dereference Revert "wifi: mac80211: Update skb's control block key in ieee80211_tx_dequeue()" igc: handle the IGC_PTP_ENABLED flag correctly igc: cleanup PTP module if probe fails net: openvswitch: fix nested key length validation in the set() action cxgb4: fix memory leak in cxgb4_init_ethtool_filters() error path net: b53: enable BPDU reception for management port riscv: KGDB: Do not inline arch_kgdb_breakpoint() riscv: KGDB: Remove ".option norvc/.option rvc" for kgdb_compiled_break cpufreq/sched: Fix the usage of CPUFREQ_NEED_UPDATE_LIMITS writeback: fix false warning in inode_to_wb() asus-laptop: Fix an uninitialized variable nfs: move nfs_fhandle_hash to common include file nfs: add missing selections of CONFIG_CRC32 nfsd: decrease sc_count directly if fail to queue dl_recall btrfs: correctly escape subvol in btrfs_show_options() crypto: caam/qi - Fix drv_ctx refcount bug hfs/hfsplus: fix slab-out-of-bounds in hfs_bnode_read_key i2c: cros-ec-tunnel: defer probe if parent EC is not present isofs: Prevent the use of too small fid riscv: Avoid fortify warning in syscall_get_arguments() tracing: Fix filter string testing virtiofs: add filesystem context source name check perf/x86/intel: Allow to update user space GPRs from PEBS records perf/x86/intel/uncore: Fix the scale of IIO free running counters on SNR perf/x86/intel/uncore: Fix the scale of IIO free running counters on ICX module: sign with sha512 instead of sha1 by default drm/repaper: fix integer overflows in repeat functions drm/amd/pm/powerplay: Prevent division by zero drm/amd/pm/powerplay/hwmgr/smu7_thermal: Prevent division by zero drm/amd/pm/powerplay/hwmgr/vega20_thermal: Prevent division by zero drm/nouveau: prime: fix ttm_bo_delayed_delete oops drm/sti: remove duplicate object names cpufreq: Reference count policy in cpufreq_update_limits() kbuild: Add '-fno-builtin-wcslen' tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink(). mptcp: fix NULL pointer in can_accept_new_subflow mptcp: only inc MPJoinAckHMacFailure for HMAC failures mptcp: sockopt: fix getting IPV6_V6ONLY misc: pci_endpoint_test: Avoid issue of interrupts remaining after request_irq error misc: pci_endpoint_test: Fix displaying 'irq_type' after 'request_irq' error misc: pci_endpoint_test: Fix 'irq_type' to convey the correct type x86/pvh: Call C code via the kernel virtual mapping nvme: avoid double free special payload powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas() phy: tegra: xusb: Fix return value of tegra_xusb_find_port_node function wifi: ath10k: avoid NULL pointer error during sdio remove drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links drm/amd/display: Fix out-of-bounds access in 'dcn21_link_encoder_create' nvmet-fc: Remove unused functions smb: client: fix potential UAF in cifs_debug_files_proc_show() smb: client: fix use-after-free bug in cifs_debug_data_proc_show() cifs: Fix UAF in cifs_demultiplex_thread() smb: client: fix potential deadlock when releasing mids smb: client: fix potential UAF in cifs_stats_proc_show() smb: client: fix UAF in async decryption smb: client: fix NULL ptr deref in crypto_aead_setkey() bpf: avoid holding freeze_mutex during mmap operation bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers blk-cgroup: support to track if policy is online blk-iocost: do not WARN if iocg was already offlined ext4: fix timer use-after-free on failed mount net/mlx5e: Fix use-after-free of encap entry in neigh update handler ipvs: properly dereference pe in ip_vs_add_service net: openvswitch: fix race on port output openvswitch: fix lockup on tx to unregistering netdev with carrier scsi: lpfc: Fix a possible data race in lpfc_unregister_fcf_rescan() scsi: ufs: bsg: Set bsg_queue to NULL after removal net: defer final 'struct net' free in netns dismantle MIPS: dec: Declare which_prom() as static MIPS: cevt-ds1287: Add missing ds1287.h include MIPS: ds1287: Match ds1287_set_base_clock() function types jfs: Fix shift-out-of-bounds in dbDiscardAG dm cache: fix flushing uninitialized delayed_work on cache_ctr error vfio/pci: fix memory leak during D3hot to D0 transition kernel/resource: fix kfree() of bootmem memory again drm/i915/gt: Cleanup partial engine discovery failures fs/proc: do_task_stat: use sig->stats_lock to gather the threads/children stats mm: fix apply_to_existing_page_range() drivers: staging: rtl8723bs: Fix deadlock in rtw_surveydone_event_callback() s390/dasd: fix double module refcount decrement pmdomain: ti: Add a null pointer check to the omap_prm_domain_init drivers: staging: rtl8723bs: Fix locking in rtw_scan_timeout_handler() platform/x86: ISST: Correct command storage data length tracing: Allow synthetic events to pass around stacktraces tracing: Fix synth event printk format for str fields media: streamzap: remove unnecessary ir_raw_event_reset and handle media: streamzap: no need for usb pid/vid in device name media: streamzap: less chatter media: streamzap: remove unused struct members media: streamzap: fix race between device disconnection and urb callback media: venus: venc: Init the session only once in queue_setup media: venus: Limit HFI sessions to the maximum supported media: venus: hfi: Correct session init return error media: venus: pm_helpers: Check instance state when calculate instance frequency media: venus: Create hfi platform and move vpp/vsp there media: venus: Rename venus_caps to hfi_plat_caps media: venus: hfi_plat: Add codecs and capabilities ops media: venus: Get codecs and capabilities from hfi platform media: venus: hfi_parser: refactor hfi packet parsing logic net: dsa: mv88e6xxx: fix VTU methods for 6320 family soc: samsung: exynos-chipid: initialize later - with arch_initcall soc: samsung: exynos-chipid: convert to driver and merge exynos-asv soc: samsung: exynos-chipid: avoid soc_device_to_device() soc: samsung: exynos-chipid: Pass revision reg offsets soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe() iio: adc: ad7768-1: Move setting of val a bit later to avoid unnecessary return value check iio: adc: ad7768-1: Fix conversion result sign backlight: led_bl: Hold led_access lock when calling led_sysfs_disable() cifs: print TIDs as hex cifs: avoid NULL pointer dereference in dbg call PCI: Introduce domain_nr in pci_host_bridge PCI: Coalesce host bridge contiguous apertures PCI: Assign PCI domain IDs by ida_alloc() PCI: Fix reference leak in pci_register_host_bridge() selftests/mm: generate a temporary mountpoint for cgroup filesystem drm/amd/amdgpu/amdgpu_vram_mgr: Add missing descriptions for 'dev' and 'dir' drm/amdgpu: Remove amdgpu_device arg from free_sgt api (v2) drm/amdgpu/dma_buf: fix page_link check dma/contiguous: avoid warning about unused size_bytes cpufreq: scpi: Fix null-ptr-deref in scpi_cpufreq_get_rate() net: phy: leds: fix memory leak tipc: fix NULL pointer dereference in tipc_mon_reinit_self() net_sched: hfsc: Fix a UAF vulnerability in class handling net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too iommu/amd: Return an error if vCPU affinity is set for non-vCPU IRTE virtio_console: fix missing byte order handling for cols and rows KVM: SVM: Allocate IR data using atomic allocation mcb: fix a double free bug in chameleon_parse_gdd() USB: storage: quirk for ADATA Portable HDD CH94 mei: me: add panther lake H DID KVM: x86: Reset IRTE to host control if *new* route isn't postable serial: sifive: lock port in startup()/shutdown() callbacks USB: serial: ftdi_sio: add support for Abacus Electrics Optical Probe USB: serial: option: add Sierra Wireless EM9291 USB: serial: simple: add OWON HDS200 series oscilloscope support usb: cdns3: Fix deadlock when using NCM gadget USB: OHCI: Add quirk for LS7A OHCI controller (rev 0x02) usb: dwc3: gadget: check that event count does not exceed event buffer length usb: quirks: add DELAY_INIT quirk for Silicon Motion Flash Drive usb: quirks: Add delay init quirk for SanDisk 3.2Gen1 Flash Drive USB: VLI disk crashes if LPM is used MIPS: cm: Detect CM quirks from device tree crypto: null - Use spin lock instead of mutex clk: check for disabled clock-provider in of_clk_get_hw_from_clkspec() parisc: PDT: Fix missing prototype warning usb: host: max3421-hcd: Add missing spi_device_id table dmaengine: dmatest: Fix dmatest waiting less when interrupted usb: gadget: aspeed: Add NULL pointer check in ast_vhub_init_dev() objtool, ASoC: codecs: wcd934x: Remove potential undefined behavior in wcd934x_slim_irq_handler() qibfs: fix _another_ leak ntb: reduce stack usage in idt_scan_mws sched/isolation: Make CONFIG_CPU_ISOLATION depend on CONFIG_SMP KVM: s390: Don't use %pK through tracepoints udmabuf: fix a buf size overflow issue during udmabuf creation selftests: ublk: fix test_stripe_04 nvme: requeue namespace scan on missed AENs ACPI PPTT: Fix coding mistakes in a couple of sizeof() calls nvme: re-read ANA log page after ns scan completes objtool: Stop UNRET validation on UD2 selftests/mincore: Allow read-ahead pages to reach the end of the file x86/bugs: Use SBPB in write_ibpb() if applicable x86/bugs: Don't fill RSB on VMEXIT with eIBRS+retpoline ext4: make block validity check resistent to sb bh corruption scsi: pm80xx: Set phy_attached to zero when device is gone md/raid1: Add check for missing source disk in process_checks() comedi: jr3_pci: Fix synchronous deletion of timer crypto: atmel-sha204a - Set hwrng quality to lowest possible xdp: Reset bpf_redirect_info before running a xdp's BPF prog. MIPS: cm: Fix warning if MIPS_CM is disabled nvme: fixup scan failure for non-ANA multipath controllers PCI: Fix use-after-free in pci_bus_release_domain_nr() soc: samsung: exynos-chipid: correct helpers __init annotation media: venus: Fix uninitialized variable count being checked for zero media: venus: hfi_parser: Check for instance after hfi platform get Linux 5.10.237 Change-Id: I3b961978fc69facfdad653bcb6dcd5ecc8961451 Signed-off-by: Greg Kroah-Hartman <gregkh@google.com> |
||
|
David Yat Sin
|
399dddc8ff |
drm/amdkfd: clamp queue size to minimum
[ Upstream commit e90711946b53590371ecce32e8fcc381a99d6333 ] If queue size is less than minimum, clamp it to minimum to prevent underflow when writing queue mqd. Signed-off-by: David Yat Sin <David.YatSin@amd.com> Reviewed-by: Jay Cornwall <jay.cornwall@amd.com> Reviewed-by: Harish Kasiviswanathan <Harish.Kasiviswanathan@amd.com> Signed-off-by: Alex Deucher <alexander.deucher@amd.com> Signed-off-by: Sasha Levin <sashal@kernel.org> |
||
|
Michael Bestas
|
c48021f43c |
Merge tag 'ASB-2025-02-05_12-5.10' of https://android.googlesource.com/kernel/common into android13-5.10-waipio
https://source.android.com/docs/security/bulletin/2025-02-01 CVE-2024-53104 CVE-2025-0088 * tag 'ASB-2025-02-05_12-5.10' of https://android.googlesource.com/kernel/common: BACKPORT: sched/fair: Move update_nohz_stats() to the CONFIG_NO_HZ_COMMON block to simplify the code & fix an unused function warning ANDROID: KABI macros to release excess KABI fields for use with backports UPSTREAM: usb: gadget: u_audio: Check return codes from usb_ep_enable and config_ep_by_speed. UPSTREAM: usb: dwc3: core: remove lock of otg mode during gadget suspend/resume to avoid deadlock UPSTREAM: xhci: Handle TD clearing for multiple streams case UPSTREAM: KVM: arm64: Fix AArch32 register narrowing on userspace write UPSTREAM: usb: gadget: u_audio: Fix race condition use of controls after free during gadget unbind. UPSTREAM: coresight: etm4x: Do not hardcode IOMEM access for register restore UPSTREAM: coresight: etm4x: Fix unbalanced pm_runtime_enable() UPSTREAM: ubsan: fix unused variable warning in test module BACKPORT: powercap: dtpm_cpu: Fix error check against freq_qos_add_request() UPSTREAM: usb: gadget: ncm: Fix indentations in documentation of NCM section BACKPORT: scs: add CONFIG_MMU dependency for vfree_atomic() UPSTREAM: mm/damon/vaddr: change asm-generic/mman-common.h to linux/mman.h UPSTREAM: ASoC: hdmi-codec: fix missing report for jack initial status UPSTREAM: usb: gadget: uvc: fix dropped frame after missed isoc BACKPORT: exfat: fix overflow for large capacity partition FROMGIT: f2fs: Introduce linear search for dentries ANDROID: GKI: Add additional symbols for honor ANDROID: GKI: Update symbol list for honor ANDROID: ABI: update symbol list for honor ANDROID: arm64: add vendor hooks for bad_stack. UPSTREAM: selinux: ignore unknown extended permissions ANDROID: GKI: Update symbol list for honor ANDROID: Allow vendor modules perform more operationson on sock. ANDROID: GKI: virtual_device: add blk_mq_quiesce_queue_nowait to the symbol list ANDROID: ABI: update symbol list for honor ANDROID: mm: add vendor hook in fault and read file Revert "tracing: Constify string literal data member in struct trace_event_call" Revert "skb_expand_head() adjust skb->truesize incorrectly" BACKPORT: block, bfq: fix UAF problem in bfqg_stats_init() Linux 5.10.233 mm: vmscan: account for free pages to prevent infinite Loop in throttle_direct_reclaim() drm: adv7511: Drop dsi single lane support net/sctp: Prevent autoclose integer overflow in sctp_association_init() sky2: Add device ID 11ab:4373 for Marvell 88E8075 pinctrl: mcp23s08: Fix sleeping in atomic context due to regmap locking RDMA/uverbs: Prevent integer overflow issue modpost: fix the missed iteration for the max bit in do_input() modpost: fix input MODULE_DEVICE_TABLE() built for 64-bit on 32-bit host btrfs: don't set lock_owner when locking extent buffer for reading btrfs: locking: remove the recursion handling code ARC: build: Try to guess GCC variant of cross compiler irqchip/gic: Correct declaration of *percpu_base pointer in union gic_base net: usb: qmi_wwan: add Telit FE910C04 compositions bpf: fix potential error return sound: usb: format: don't warn that raw DSD is unsupported btrfs: flush delalloc workers queue before stopping cleaner kthread during unmount wifi: mac80211: wake the queues in case of failure in resume tracing: Prevent bad count for tracing_cpumask_write kernel: Initialize cpumask before parsing btrfs: fix use-after-free when COWing tree bock and tracing is enabled btrfs: rename and export __btrfs_cow_block() btrfs: locking: remove all the blocking helpers btrfs: switch extent buffer tree lock to rw_semaphore dmaengine: dw: Select only supported masters for ACPI devices ila: serialize calls to nf_register_net_hooks() af_packet: fix vlan_get_protocol_dgram() vs MSG_PEEK af_packet: fix vlan_get_tci() vs MSG_PEEK RDMA/rtrs: Ensure 'ib_sge list' is accessible eth: bcmsysport: fix call balance of priv->clk handling routines ALSA: usb-audio: US16x08: Initialize array before use net: llc: reset skb->transport_header netfilter: nft_set_hash: unaligned atomic read on struct nft_set_ext netrom: check buffer length before accessing it drm/bridge: adv7511_audio: Update Audio InfoFrame properly RDMA/bnxt_re: Fix the locking while accessing the QP table RDMA/bnxt_re: Fix max_qp_wrs reported RDMA/bnxt_re: Fix reporting hw_ver in query_device RDMA/bnxt_re: Add check for path mtu in modify_qp RDMA/mlx5: Enforce same type port association for multiport RoCE net/mlx5: Make API mlx5_core_is_ecpf accept const pointer thunderbolt: Add support for Intel Panther Lake-M/P thunderbolt: Add support for Intel Lunar Lake thunderbolt: Add Intel Barlow Ridge PCI ID thunderbolt: Add support for Intel Meteor Lake thunderbolt: Add support for Intel Raptor Lake thunderbolt: Add support for Intel Alder Lake selinux: ignore unknown extended permissions x86/hyperv: Fix hv tsc page based sched_clock for hibernation ipv6: prevent possible UAF in ip6_xmit() skb_expand_head() adjust skb->truesize incorrectly nfsd: cancel nfsd_shrinker_work using sync mode in nfs4_state_shutdown_net btrfs: avoid monopolizing a core when activating a swap file power: supply: gpio-charger: Fix set charge current limits tracing: Constify string literal data member in struct trace_event_call arm64: Ensure bits ASID[15:8] are masked out when the kernel uses 8-bit ASIDs arm64: mm: Rename asid2idx() to ctxid2asid() drm/dp_mst: Fix MST sideband message body length check bpf: fix recursive lock when verdict program return SK_PASS bpf: Check validity of link->type in bpf_link_show_fdinfo() ipv6: fix possible UAF in ip6_finish_output2() ipv6: use skb_expand_head in ip6_xmit ipv6: use skb_expand_head in ip6_finish_output2 skbuff: introduce skb_expand_head() MIPS: Probe toolchain support of -msym32 virtio-blk: don't keep queue frozen during system suspend scsi: storvsc: Do not flag MAINTENANCE_IN return of SRB_STATUS_DATA_OVERRUN as an error scsi: mpt3sas: Diag-Reset when Doorbell-In-Use bit is set during driver load time platform/x86: asus-nb-wmi: Ignore unknown event 0xCF regmap: Use correct format specifier for logging range errors ALSA: hda/conexant: fix Z60MR100 startup pop issue scsi: megaraid_sas: Fix for a potential deadlock scsi: qla1280: Fix hw revision numbering for ISP1020/1040 watchdog: it87_wdt: add PWRGD enable quirk for Qotom QCML04 tracing/kprobe: Make trace_kprobe's module callback called after jump_label update mtd: rawnand: fix double free in atmel_pmecc_create_user() dmaengine: at_xdmac: avoid null_prt_deref in at_xdmac_prep_dma_memset dmaengine: mv_xor: fix child node refcount handling in early exit phy: core: Fix that API devm_phy_destroy() fails to destroy the phy phy: core: Fix that API devm_of_phy_provider_unregister() fails to unregister the phy provider phy: core: Fix that API devm_phy_put() fails to release the phy phy: core: Fix an OF node refcount leakage in of_phy_provider_lookup() phy: core: Fix an OF node refcount leakage in _of_phy_get() mtd: diskonchip: Cast an operand to prevent potential overflow nfsd: restore callback functionality for NFSv4.0 bpf: Check negative offsets in __bpf_skb_min_len() tcp_bpf: Charge receive socket buffer in bpf_tcp_ingress() mm/vmstat: fix a W=1 clang compiler warning media: dvb-frontends: dib3000mb: fix uninit-value in dib3000_write_reg epoll: Add synchronous wakeup support for ep_poll_callback ceph: validate snapdirname option length when mounting of: Fix refcount leakage for OF node returned by __of_get_dma_parent() of: Fix error path in of_parse_phandle_with_args_map() udmabuf: also check for F_SEAL_FUTURE_WRITE nilfs2: prevent use of deleted inode of/irq: Fix using uninitialized variable @addr_len in API of_irq_parse_one() NFS/pnfs: Fix a live lock between recalled layouts and layoutget Drivers: hv: util: Avoid accessing a ringbuffer not initialized yet btrfs: tree-checker: reject inline extent items with 0 ref count zram: refuse to use zero sized block device as backing device sh: clk: Fix clk_enable() to return 0 on NULL clk hwmon: (tmp513) Fix interpretation of values of Temperature Result and Limit Registers USB: serial: option: add Telit FE910C04 rmnet compositions USB: serial: option: add MediaTek T7XX compositions USB: serial: option: add Netprisma LCUK54 modules for WWAN Ready USB: serial: option: add MeiG Smart SLM770A USB: serial: option: add TCL IK512 MBIM & ECM efivarfs: Fix error on non-existent file i2c: riic: Always round-up when calculating bus period chelsio/chtls: prevent potential integer overflow on 32bit mmc: sdhci-tegra: Remove SDHCI_QUIRK_BROKEN_ADMA_ZEROLEN_DESC quirk netfilter: ipset: Fix for recursive locking warning net: ethernet: bgmac-platform: fix an OF node reference leak net: hinic: Fix cleanup in create_rxqs/txqs() ionic: use ee->offset when returning sprom data netdevsim: prevent bad user input in nsim_dev_health_break_write() netdevsim: switch to memdup_user_nul() net/smc: check return value of sock_recvmsg when draining clc data net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg net/smc: check sndbuf_space again after NOSPACE flag is set in smc_poll erofs: fix incorrect symlink detection in fast symlink erofs: fix order >= MAX_ORDER warning due to crafted negative i_size i2c: pnx: Fix timeout in wait functions usb: dwc2: gadget: Don't write invalid mapped sg entries into dma_desc with iommu enabled usb: cdns3: Add quirk flag to enable suspend residency PCI: Add ACS quirk for Broadcom BCM5760X NIC ALSA: usb: Fix UBSAN warning in parse_audio_unit() MIPS: Loongson64: DTS: Fix msi node for ls7a PCI: Use preserve_config in place of pci_flags PCI/AER: Disable AER service on suspend net: sched: fix ordering of qlen adjustment UPSTREAM: Revert "usb: gadget: composite: fix OS descriptors w_value logic" ANDROID: GKI: Update the ABI symbol list UPSTREAM: bpf: sync_linked_regs() must preserve subreg_def ANDROID: fix up crc problems 5.10.231 Revert "xfrm: rename xfrm_state_offload struct to allow reuse" Revert "xfrm: store and rely on direction to construct offload flags" Revert "netdevsim: rely on XFRM state direction instead of flags" Revert "netdevsim: copy addresses for both in and out paths" Revert "i3c: fix incorrect address slot lookup on 64-bit" Revert "i3c: master: Replace hard code 2 with macro I3C_ADDR_SLOT_STATUS_BITS" Revert "i3c: master: Extend address status bit to 4 and add I3C_ADDR_SLOT_EXT_DESIRED" Revert "i3c: master: Fix dynamic address leak when 'assigned-address' is present" Linux 5.10.232 x86/static-call: fix 32-bit build ALSA: usb-audio: Fix a DMA to stack memory bug x86/xen: remove hypercall page x86/xen: use new hypercall functions instead of hypercall page x86/xen: add central hypercall functions x86/xen: don't do PV iret hypercall through hypercall page x86/static-call: provide a way to do very early static-call updates objtool/x86: allow syscall instruction x86: make get_cpu_vendor() accessible from Xen code xen/netfront: fix crash when removing device Revert "clkdev: remove CONFIG_CLKDEV_LOOKUP" Revert "clocksource/drivers:sp804: Make user selectable" drm/i915: Fix memory leak by correcting cache object name in error handler tracing/kprobes: Skip symbol counting logic for module symbols in create_local_trace_kprobe() bpf: sync_linked_regs() must preserve subreg_def blk-iocost: Avoid using clamp() on inuse in __propagate_weights() ACPICA: events/evxfregn: don't release the ContextMutex that was never acquired team: Fix feature propagation of NETIF_F_GSO_ENCAP_ALL bonding: Fix feature propagation of NETIF_F_GSO_ENCAP_ALL net: bonding, dummy, ifb, team: advertise NETIF_F_GSO_SOFTWARE net/sched: netem: account for backlog updates from child qdisc qca_spi: Make driver probing reliable qca_spi: Fix clock speed for multiple QCA7000 cxgb4: use port number to set mac addr ACPI: resource: Fix memory resource type union access net: lapb: increase LAPB_HEADER_LEN selftests: mlxsw: sharedbuffer: Remove duplicate test cases selftests: mlxsw: sharedbuffer: Remove h1 ingress test case tipc: fix NULL deref in cleanup_bearer() batman-adv: Do not let TT changes list grows indefinitely batman-adv: Remove uninitialized data in full table TT response batman-adv: Do not send uninitialized TT changes acpi: nfit: vmalloc-out-of-bounds Read in acpi_nfit_ctl exfat: fix potential deadlock on __exfat_get_dentry_set virtio/vsock: Fix accept_queue memory leak bpf, sockmap: Fix update element with same xfs: fix scrub tracepoints when inode-rooted btrees are involved xfs: don't drop errno values when we fail to ficlone the entire range usb: gadget: u_serial: Fix the issue that gs_start_io crashed due to accessing null pointer usb: ehci-hcd: fix call balance of clocks handling routines usb: dwc2: hcd: Fix GetPortStatus & SetPortFeature ata: sata_highbank: fix OF node reference leak in highbank_initialize_phys() usb: host: max3421-hcd: Correctly abort a USB request. tcp: check space before adding MPTCP SYN options Linux 5.10.231 octeontx2-pf: Fix otx2_get_fecparam() octeontx2: Fix condition. media: uvcvideo: Require entities to have a non-zero unique ID ALSA: usb-audio: Fix out of bounds reads when finding clock sources scsi: core: Fix scsi_mode_select() buffer length handling scsi: sd: Fix sd_do_mode_sense() buffer length handling PCI: rockchip-ep: Fix address translation unit programming Revert "drm/amdgpu: add missing size check in amdgpu_debugfs_gprwave_read()" modpost: Add .irqentry.text to OTHER_SECTIONS ocfs2: Revert "ocfs2: fix the la space leak when unmounting an ocfs2 volume" drm/amd/display: Check BIOS images before it is used xhci: dbc: Fix STALL transfer event handling jffs2: Fix rtime decompressor jffs2: Prevent rtime decompress memory corruption KVM: arm64: vgic-its: Clear ITE when DISCARD frees an ITE KVM: arm64: vgic-its: Clear DTE when MAPD unmaps a device KVM: arm64: vgic-its: Add a data length check in vgic_its_save_* Revert "unicode: Don't special case ignorable code points" btrfs: fix missing snapshot drew unlock when root is dead during swap activation sched/core: Prevent wakeup of ksoftirqd during idle load balance sched/fair: Check idle_cpu() before need_resched() to detect ilb CPU turning busy sched/fair: Add NOHZ balancer flag for nohz.next_balance updates sched/fair: Trigger the update of blocked load on newly idle cpu sched/fair: Merge for each idle cpu loop of ILB sched/fair: Remove unused parameter of update_nohz_stats sched/fair: Remove update of blocked load from newidle_balance sched/core: Remove the unnecessary need_resched() check in nohz_csd_func() misc: eeprom: eeprom_93cx6: Add quirk for extra read clock cycle powerpc/prom_init: Fixup missing powermac #size-cells MIPS: Loongson64: DTS: Really fix PCIe port nodes for ls7a usb: chipidea: udc: handle USB Error Interrupt if IOC not set i3c: Use i3cdev->desc->info instead of calling i3c_device_get_info() to avoid deadlock PCI: Add ACS quirk for Wangxun FF5xxx NICs PCI: Add 'reset_subordinate' to reset hierarchy below bridge f2fs: fix f2fs_bug_on when uninstalling filesystem call f2fs_evict_inode. nvdimm: rectify the illogical code within nd_dax_probe() pinctrl: qcom-pmic-gpio: add support for PM8937 scsi: st: Add MTIOCGET and MTLOAD to ioctls allowed after device reset scsi: st: Don't modify unknown block number in MTIOCGET leds: class: Protect brightness_show() with led_cdev->led_access mutex scsi: hisi_sas: Add cond_resched() for no forced preemption model tracing: Use atomic64_inc_return() in trace_clock_counter() pinctrl: freescale: fix COMPILE_TEST error with PINCTRL_IMX_SCU netpoll: Use rcu_access_pointer() in __netpoll_setup net/neighbor: clear error in case strict check is not set rocker: fix link status detection in rocker_carrier_init() ASoC: hdmi-codec: reorder channel allocation list Bluetooth: btusb: Add RTL8852BE device 0489:e123 to device tables wifi: brcmfmac: Fix oops due to NULL pointer dereference in brcmf_sdiod_sglist_rw() wifi: ipw2x00: libipw_rx_any(): fix bad alignment drm/amdgpu: set the right AMDGPU sg segment limitation drm/amdgpu: skip amdgpu_device_cache_pci_state under sriov jfs: add a check to prevent array-index-out-of-bounds in dbAdjTree jfs: fix array-index-out-of-bounds in jfs_readdir jfs: fix shift-out-of-bounds in dbSplit jfs: array-index-out-of-bounds fix in dtReadFirst dma-debug: fix a possible deadlock on radix_lock drm/amdgpu: refine error handling in amdgpu_ttm_tt_pin_userptr wifi: ath5k: add PCI ID for Arcadyan devices wifi: ath5k: add PCI ID for SX76X net: inet6: do not leave a dangling sk pointer in inet6_create() net: inet: do not leave a dangling sk pointer in inet_create() net: ieee802154: do not leave a dangling sk pointer in ieee802154_create() net: af_can: do not leave a dangling sk pointer in can_create() Bluetooth: L2CAP: do not leave dangling sk pointer on error in l2cap_sock_create() af_packet: avoid erroring out after sock_init_data() in packet_create() net/sched: cbs: Fix integer overflow in cbs_set_port_rate() net: ethernet: fs_enet: Use %pa to format resource_size_t net: fec_mpc52xx_phy: Use %pa to format resource_size_t samples/bpf: Fix a resource leak r8169: don't apply UDP padding quirk on RTL8126A drm/radeon/r600_cs: Fix possible int overflow in r600_packet3_check() drm/mcde: Enable module autoloading drm: panel-orientation-quirks: Add quirk for AYA NEO 2 model drm/vc4: hvs: Set AXI panic modes for the HVS media: cx231xx: Add support for Dexatek USB Video Grabber 1d19:6108 media: uvcvideo: Add a quirk for the Kaiweets KTI-W02 infrared camera kcsan: Turn report_filterlist_lock into a raw_spinlock kselftest/arm64: Don't leak pipe fds in pac.exec_sign_all() btrfs: avoid unnecessary device path update for the same device s390/cpum_sf: Handle CPU hotplug remove during sampling iommu/arm-smmu: Defer probe of clients after smmu device bound ocfs2: update seq_file index in ocfs2_dlm_seq_next mmc: core: Further prevent card detect during shutdown mmc: sdhci-pci: Add DMI quirk for missing CD GPIO on Vexia Edu Atla 10 tablet regmap: detach regmap from dev on regmap_exit dma-buf: fix dma_fence_array_signaled v4 bpf: fix OOB devmap writes when deleting elements bcache: revert replacing IS_ERR_OR_NULL with IS_ERR again nilfs2: fix potential out-of-bounds memory access in nilfs_find_entry() scsi: qla2xxx: Remove check req_sg_cnt should be equal to rsp_sg_cnt scsi: qla2xxx: Fix use after free on unload scsi: qla2xxx: Supported speed displayed incorrectly for VPorts scsi: qla2xxx: Fix NVMe and NPIV connect issue ALSA: hda/realtek: Add support for Samsung Galaxy Book3 360 (NP730QFG) ALSA: hda/realtek: Enable mute and micmute LED on HP ProBook 430 G8 ALSA: usb-audio: add mixer mapping for Corsair HS80 arm64: ptrace: fix partial SETREGSET for NT_ARM_TAGGED_ADDR_CTRL tracing: Fix cmp_entries_dup() to respect sort() comparison rules watchdog: rti: of: honor timeout-sec property HID: wacom: fix when get product name maybe null pointer bpf: Fix exact match conditions in trie_get_next_key() bpf: Handle BPF_EXIST and BPF_NOEXIST for LPM trie ocfs2: free inode when ocfs2_get_init_inode() fails spi: mpc52xx: Add cancel_work_sync before module remove tcp_bpf: Fix the sk_mem_uncharge logic in tcp_bpf_sendmsg drm/sti: Add __iomem for mixer_dbg_mxn's parameter i3c: master: Fix dynamic address leak when 'assigned-address' is present i3c: master: Extend address status bit to 4 and add I3C_ADDR_SLOT_EXT_DESIRED i3c: master: Replace hard code 2 with macro I3C_ADDR_SLOT_STATUS_BITS i3c: fix incorrect address slot lookup on 64-bit dt-bindings: serial: rs485: Fix rs485-rts-delay property dt_bindings: rs485: Correct delay values gpio: grgpio: Add NULL check in grgpio_probe gpio: grgpio: use a helper variable to store the address of ofdev->dev geneve: do not assume mac header is set in geneve_xmit_skb() ethtool: Fix wrong mod state in case of verbose and no_mask bitset netfilter: nft_set_hash: skip duplicated elements pending gc run netfilter: ipset: Hold module reference while requesting a module net: sched: fix erspan_opt settings in cls_flower igb: Fix potential invalid memory access in igb_init_module() net/qed: allow old cards not supporting "num_images" to work tipc: Fix use-after-free of kernel socket in cleanup_bearer(). dccp: Fix memory leak in dccp_feat_change_recv net/ipv6: release expired exception dst cached in socket can: j1939: j1939_session_new(): fix skb reference counting net: hsr: avoid potential out-of-bound access in fill_frame_info() net/sched: tbf: correct backlog statistic for GSO packets ptp: Add error handling for adjfine callback in ptp_clock_adjtime netfilter: x_tables: fix LED ID check in led_tg_check() ipvs: fix UB due to uninitialized stack access in ip_vs_protocol_init() can: sun4i_can: sun4i_can_err(): fix {rx,tx}_errors statistics can: sun4i_can: sun4i_can_err(): call can_change_state() even if cf is NULL watchdog: mediatek: Make sure system reset gets asserted in mtk_wdt_restart() iTCO_wdt: mask NMI_NOW bit for update_no_reboot_bit() call drm/etnaviv: flush shader L1 cache after user commandstream btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc() nfsd: fix nfs4_openowner leak when concurrent nfsd4_open occur nfsd: make sure exp active before svc_export_show dm thin: Add missing destroy_work_on_stack() PCI: keystone: Add link up check to ks_pcie_other_map_bus() i3c: master: Fix miss free init_dyn_addr at i3c_master_put_i3c_addrs() scsi: ufs: exynos: Fix hibern8 notify callbacks util_macros.h: fix/rework find_closest() macros ad7780: fix division by zero in ad7780_write_raw() btrfs: ref-verify: fix use-after-free after invalid ref action quota: flush quota_release_work upon quota writeback octeontx2-pf: Fix out-of-bounds read in otx2_get_fecparam() ASoC: fsl_micfil: fix the naming style for mask definition sh: intc: Fix use-after-free bug in register_intc_controller() sunrpc: clear XPRT_SOCK_UPD_TIMEOUT when reset transport SUNRPC: Replace internal use of SOCKWQ_ASYNC_NOSPACE sunrpc: remove unnecessary test in rpc_task_set_client() SUNRPC: Convert rpc_client refcount to use refcount_t SUNRPC: correct error code comment in xs_tcp_setup_socket() nfs: ignore SB_RDONLY when mounting nfs modpost: remove incorrect code in do_eisa_entry() rtc: ab-eoz9: don't fail temperature reads on undervoltage notification 9p/xen: fix release of IRQ 9p/xen: fix init sequence block: return unsigned int from bdev_io_min jffs2: fix use of uninitialized variable ubifs: authentication: Fix use-after-free in ubifs_tnc_end_commit ubi: fastmap: Fix duplicate slab cache names while attaching ubifs: Correct the total block count by deducting journal reservation rtc: check if __rtc_read_time was successful in rtc_timer_do_work() rtc: abx80x: Fix WDT bit position of the status register rtc: st-lpc: Use IRQF_NO_AUTOEN flag in request_irq() NFSv4.0: Fix a use-after-free problem in the asynchronous open() um: Always dump trace for specified task in show_stack um: Fix the return value of elf_core_copy_task_fpregs um: Fix potential integer overflow during physmem setup rpmsg: glink: Propagate TX failures in intentless mode as well SUNRPC: make sure cache entry active before cache_show NFSD: Prevent a potential integer overflow lib: string_helpers: silence snprintf() output truncation warning usb: dwc3: gadget: Fix looping of queued SG entries usb: dwc3: gadget: Fix checking for number of TRBs left ALSA: hda/realtek: Apply quirk for Medion E15433 ALSA: hda/realtek: Fix Internal Speaker and Mic boost of Infinix Y4 Max ALSA: hda/realtek: Set PCBeep to default value for ALC274 ALSA: hda/realtek: Update ALC225 depop procedure media: v4l2-core: v4l2-dv-timings: check cvt/gtf result media: wl128x: Fix atomicity violation in fmc_send_cmd() HID: wacom: Interpret tilt data from Intuos Pro BT as signed values block: fix ordering between checking BLK_MQ_S_STOPPED request adding arm64: tls: Fix context-switching of tpidrro_el0 when kpti is enabled sh: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK um: vector: Do not use drvdata in release serial: 8250: omap: Move pm_runtime_get_sync um: net: Do not use drvdata in release um: ubd: Do not use drvdata in release ubi: wl: Put source PEB into correct list if trying locking LEB failed platform/chrome: cros_ec_typec: fix missing fwnode reference decrement spi: Fix acpi deferred irq probe netfilter: ipset: add missing range check in bitmap_ip_uadt Revert "serial: sh-sci: Clean sci_ports[0] after at earlycon exit" serial: sh-sci: Clean sci_ports[0] after at earlycon exit Revert "usb: gadget: composite: fix OS descriptors w_value logic" driver core: bus: Fix double free in driver API bus_register() Bluetooth: Fix type of len in rfcomm_sock_getsockopt{,_old}() exfat: fix uninit-value in __exfat_get_dentry_set locking/lockdep: Avoid creating new name string literals in lockdep_set_subclass() tty: ldsic: fix tty_ldisc_autoload sysctl's proc_handler apparmor: test: Fix memory leak for aa_unpack_strdup() comedi: Flush partial mappings in error case fsnotify: fix sending inotify event with unexpected filename PCI: Fix use-after-free of slot->bus on hot remove KVM: arm64: Ignore PMCNTENSET_EL0 while checking for overflow status crypto: x86/aegis128 - access 32-bit arguments as 32-bit perf/x86/intel/pt: Fix buffer full but size is 0 case ASoC: codecs: Fix atomicity violation in snd_soc_component_get_drvdata() jfs: xattr: check invalid xattr size more strictly ext4: fix FS_IOC_GETFSMAP handling ext4: supress data-race warnings in ext4_free_inodes_{count,set}() ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices soc: qcom: socinfo: fix revision check in qcom_socinfo_probe() usb: ehci-spear: fix call balance of sehci clk handling routines xen: Fix the issue of resource not being properly released in xenbus_dev_probe() apparmor: fix 'Do simple duplicate message elimination' ALSA: hda/realtek: Update ALC256 depop procedure ALSA: hda/realtek - Add type for ALC287 staging: greybus: uart: clean up TIOCGSERIAL misc: apds990x: Fix missing pm_runtime_disable() USB: chaoskey: Fix possible deadlock chaoskey_list_lock USB: chaoskey: fail open after removal usb: yurex: make waiting on yurex_write interruptible usb: using mutex lock and supporting O_NONBLOCK flag in iowarrior_read() iio: light: al3010: Fix an error handling path in al3010_probe() ipmr: fix tables suspicious RCU usage ipmr: convert /proc handlers to rcu_read_lock() bnxt_en: Reserve rings after PCIe AER recovery if NIC interface is down net: hsr: fix hsr_init_sk() vs network/transport headers. net: introduce a netdev feature for UDP GRO forwarding spi: atmel-quadspi: Fix register name in verbose logging function net: stmmac: dwmac-socfpga: Set RX watchdog interrupt as broken marvell: pxa168_eth: fix call balance of pep->clk handling routines net: usb: lan78xx: Fix refcounting and autosuspend on invalid WoL configuration tg3: Set coherent DMA mask bits to 31 for BCM57766 chipsets net: usb: lan78xx: Fix memory leak on device unplug by freeing PHY device power: supply: bq27xxx: Fix registers of bq27426 power: supply: bq27xxx: Support CHARGE_NOW for bq27z561/bq28z610/bq34z100 power: supply: core: Remove might_sleep() from power_supply_put() fs_parser: update mount_api doc to match function signature vfio/pci: Properly hide first-in-list PCIe extended capability vdpa/mlx5: Fix suboptimal range on iotlb iteration NFSD: Fix nfsd4_shutdown_copy() NFSD: Cap the number of bytes copied by nfs4_reset_recoverydir() NFSD: Prevent NULL dereference in nfsd4_process_cb_update() remoteproc: qcom_q6v5_mss: Re-order writes to the IMEM region rpmsg: glink: use only lower 16-bits of param2 for CMD_OPEN name length rpmsg: glink: Fix GLINK command prefix rpmsg: glink: Send READ_NOTIFY command in FIFO full case rpmsg: glink: Add TX_DATA_CONT command while sending perf trace: Avoid garbage when not printing a syscall's arguments perf trace: Do not lose last events in a race m68k: coldfire/device.c: only build FEC when HW macros are defined m68k: mcfgpio: Fix incorrect register offset for CONFIG_M5441x perf trace: avoid garbage when not printing a trace event's arguments f2fs: check curseg->inited before write_sum_page in change_curseg f2fs: remove the unused flush argument to change_curseg f2fs: open code allocate_segment_by_default f2fs: remove struct segment_allocation default_salloc_ops f2fs: avoid using native allocate_segment_by_default() f2fs: fix the wrong f2fs_bug_on condition in f2fs_do_replace_block PCI: cpqphp: Fix PCIBIOS_* return value confusion PCI: cpqphp: Use PCI_POSSIBLE_ERROR() to check config reads perf probe: Correct demangled symbols in C++ program perf probe: Fix libdw memory leak perf cs-etm: Don't flush when packet_queue fills up clk: clk-axi-clkgen: make sure to enable the AXI bus clock clk: axi-clkgen: use devm_platform_ioremap_resource() short-hand dt-bindings: clock: axi-clkgen: include AXI clk dt-bindings: clock: adi,axi-clkgen: convert old binding to yaml format fbdev: sh7760fb: Fix a possible memory leak in sh7760fb_alloc_mem() fbdev/sh7760fb: Alloc DMA memory from hardware device powerpc/kexec: Fix return of uninitialized variable powerpc/sstep: make emulate_vsx_load and emulate_vsx_store static ocfs2: fix uninitialized value in ocfs2_file_read_iter() RDMA/hns: Fix NULL pointer derefernce in hns_roce_map_mr_sg() scsi: qedi: Fix a possible memory leak in qedi_alloc_and_init_sb() scsi: qedf: Fix a possible memory leak in qedf_alloc_and_init_sb() scsi: fusion: Remove unused variable 'rc' scsi: bfa: Fix use-after-free in bfad_im_module_exit() mfd: rt5033: Fix missing regmap_del_irq_chip() RDMA/bnxt_re: Check cqe flags to know imm_data vs inv_irkey powerpc/pseries: Fix dtl_access_lock to be a rw_semaphore mtd: rawnand: atmel: Fix possible memory leak cpufreq: loongson2: Unregister platform_driver on failure mfd: intel_soc_pmic_bxtwc: Use IRQ domain for PMIC devices mfd: intel_soc_pmic_bxtwc: Use IRQ domain for TMU device mfd: intel_soc_pmic_bxtwc: Use IRQ domain for USB Type-C device mfd: intel_soc_pmic_bxtwc: Use dev_err_probe() mfd: da9052-spi: Change read-mask to write-mask mfd: tps65010: Use IRQF_NO_AUTOEN flag in request_irq() to fix race powerpc/vdso: Flag VDSO64 entry points as functions trace/trace_event_perf: remove duplicate samples on the first tracepoint event wireguard: selftests: load nf_conntrack if not present netpoll: Use rcu_access_pointer() in netpoll_poll_lock Bluetooth: fix use-after-free in device_for_each_child() driver core: Introduce device_find_any_child() helper ALSA: 6fire: Release resources at card release ALSA: caiaq: Use snd_card_free_when_closed() at disconnection ALSA: us122l: Use snd_card_free_when_closed() at disconnection ALSA: usx2y: Use snd_card_free_when_closed() at disconnection ALSA: usx2y: Cleanup probe and disconnect callbacks ALSA: usx2y: Coding style fixes ALSA: usx2y: Fix spaces net: rfkill: gpio: Add check for clk_enable() drm/amdkfd: Fix wrong usage of INIT_WORK() selftests: net: really check for bg process completion bpf, sockmap: Fix sk_msg_reset_curr bpf, sockmap: Several fixes to bpf_msg_pop_data bpf, sockmap: Several fixes to bpf_msg_push_data selftests/bpf: Add push/pop checking for msg_verify_data in test_sockmap selftests/bpf: Fix total_bytes in msg_loop_rx in test_sockmap selftests, bpf: Add one test for sockmap with strparser selftests/bpf: Fix SENDPAGE data logic in test_sockmap selftests/bpf: Add txmsg_pass to pull/push/pop in test_sockmap netlink: typographical error in nlmsg_type constants definition drm/msm/dpu: cast crtc_clk calculation to u64 in _dpu_core_perf_calc_clk() wifi: wfx: Fix error handling in wfx_core_init() drm/etnaviv: hold GPU lock across perfmon sampling drm/etnaviv: fix power register offset on GC300 drm/etnaviv: dump: fix sparse warnings drm/etnaviv: Request pages from DMA32 zone on addressing_limited drm/etnaviv: rework linear window offset calculation drm/msm/adreno: Use IRQF_NO_AUTOEN flag in request_irq() drm/panfrost: Remove unused id_mask from struct panfrost_model octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_ethtool.c octeontx2-pf: ethtool fec mode support octeontx2-af: Add new CGX_CMD to get PHY FEC statistics octeontx2-af: forward error correction configuration octeontx2-pf: Calculate LBK link instead of hardcoding octeontx2-af: Mbox changes for 98xx drm: fsl-dcu: enable PIXCLK on LS1021A drm/fsl-dcu: Convert to Linux IRQ interfaces wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_config_scan() selftests/bpf: Fix txmsg_redir of test_txmsg_pull in test_sockmap selftests/bpf: Fix msg_verify_data in test_sockmap drm/bridge: tc358767: Fix link properties discovery netdevsim: copy addresses for both in and out paths netdevsim: rely on XFRM state direction instead of flags xfrm: store and rely on direction to construct offload flags xfrm: rename xfrm_state_offload struct to allow reuse bpf: Fix the xdp_adjust_tail sample prog issue ASoC: dt-bindings: mt6359: Update generic node name and dmic-mode ASoC: fsl_micfil: fix regmap_write_bits usage ASoC: fsl_micfil: use GENMASK to define register bit fields ASoC: fsl_micfil: do not define SHIFT/MASK for single bits ASoC: fsl_micfil: Drop unnecessary register read dt-bindings: vendor-prefixes: Add NeoFidelity, Inc wifi: ath10k: fix invalid VHT parameters in supported_vht_mcs_rate_nss2 wifi: ath10k: fix invalid VHT parameters in supported_vht_mcs_rate_nss1 drm/v3d: Address race-condition in MMU flush drm/imx/ipuv3: Use IRQF_NO_AUTOEN flag in request_irq() drm/imx/dcss: Use IRQF_NO_AUTOEN flag in request_irq() wifi: mwifiex: Use IRQF_NO_AUTOEN flag in request_irq() wifi: p54: Use IRQF_NO_AUTOEN flag in request_irq() drm/omap: Fix locking in omap_gem_new_dmabuf() wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service() drm/mm: Mark drm_mm_interval_tree*() functions with __maybe_unused media: atomisp: Add check for rgby_data memory allocation failure media: atomisp: remove #ifdef HAS_NO_HMEM firmware: arm_scpi: Check the DVFS OPP count returned by the firmware selftests/resctrl: Protect against array overrun during iMC config parsing regmap: irq: Set lockdep class for hierarchical IRQ domains pmdomain: ti-sci: Add missing of_node_put() for args.np ARM: dts: cubieboard4: Fix DCDC5 regulator constraints pwm: imx27: Workaround of the pwm output bug when decrease the duty cycle cgroup/bpf: only cgroup v2 can be attached by bpf programs Revert "cgroup: Fix memory leak caused by missing cgroup_bpf_offline" arm64: dts: mediatek: mt8173-elm-hana: Add vdd-supply to second source trackpad arm64: dts: mt8183: krane: Fix the address of eeprom at i2c4 tpm: fix signed/unsigned bug when checking event logs mmc: mmc_spi: drop buggy snprintf() soc: qcom: geni-se: fix array underflow in geni_se_clk_tbl_get() soc: ti: smartreflex: Use IRQF_NO_AUTOEN flag in request_irq() spi: spi-fsl-lpspi: Use IRQF_NO_AUTOEN flag in request_irq() spi: spi-fsl-lpspi: downgrade log level for pio mode clocksource/drivers:sp804: Make user selectable clkdev: remove CONFIG_CLKDEV_LOOKUP kcsan, seqlock: Fix incorrect assumption in read_seqbegin() time: Fix references to _msecs_to_jiffies() handling of values crypto: cavium - Fix an error handling path in cpt_ucode_load_fw() crypto: bcm - add error check in the ahash_hmac_init function crypto: caam - add error check to caam_rsa_set_priv_key_form crypto: cavium - Fix the if condition to exit loop after timeout crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY EDAC/fsl_ddr: Fix bad bit shift operations EDAC/bluefield: Fix potential integer overflow firmware: google: Unregister driver_info on failure crypto: caam - Fix the pointer passed to caam_qi_shutdown() hfsplus: don't query the device logical block size multiple times s390/syscalls: Avoid creation of arch/arch/ directory acpi/arm64: Adjust error handling procedure in gtdt_parse_timer_block() arm64: fix .data.rel.ro size assertion when CONFIG_LTO_CLANG m68k: mvme147: Reinstate early console m68k: mvme16x: Add and use "mvme16x.h" m68k: mvme147: Fix SCSI controller IRQ numbers nvme-pci: fix freeing of the HMB descriptor table initramfs: avoid filename buffer overrun mips: asm: fix warning when disabling MIPS_FP_SUPPORT x86/xen/pvh: Annotate indirect branch as safe kselftest/arm64: mte: fix printf type warnings about longs x86/barrier: Do not serialize MSR accesses on AMD nvme: fix metadata handling in nvme-passthrough cifs: Fix buffer overflow when parsing NFS reparse points rcu-tasks: Idle tasks on offline CPUs are in quiescent states ipmr: Fix access to mfc_cache_list without lock held ALSA: usb-audio: Fix Yamaha P-125 Quirk Entry proc/softirqs: replace seq_printf with seq_put_decimal_ull_width ASoC: stm: Prevent potential division by zero in stm32_sai_get_clk_div() ASoC: stm: Prevent potential division by zero in stm32_sai_mclk_round_rate() can: j1939: fix error in J1939 documentation. regulator: rk808: Add apply_bit for BUCK3 on RK809 soc: qcom: Add check devm_kasprintf() returned value net: usb: qmi_wwan: add Quectel RG650V x86/amd_nb: Fix compile-testing without CONFIG_AMD_NB ALSA: hda/realtek: Add subwoofer quirk for Infinix ZERO BOOK 13 selftests/watchdog-test: Fix system accidentally reset after watchdog-test NFSD: Never decrement pending_async_copies on error mac80211: fix user-power when emulating chanctx ASoC: Intel: bytcr_rt5640: Add DMI quirk for Vexia Edu Atla 10 tablet mm: resolve faulty mmap_region() error path behaviour mm: refactor arch_calc_vm_flag_bits() and arm64 MTE handling mm: unconditionally close VMAs on error mm: avoid unsafe VMA hook invocation when error arises on mmap hook mm: revert "mm: shmem: fix data-race in shmem_getattr()" media: dvbdev: fix the logic when DVB_DYNAMIC_MINORS is not set NFSD: Initialize struct nfsd4_copy earlier mmc: core: fix return value check in devm_mmc_alloc_host() NFSD: Limit the number of concurrent async COPY operations drm/bridge: tc358768: Fix DSI command tx NFSD: Async COPY result needs to return a write verifier Revert "mmc: dw_mmc: Fix IDMAC operation with pages bigger than 4K" NFSD: initialize copy->cp_clp early in nfsd4_copy for use by trace point nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint ocfs2: fix UBSAN warning in ocfs2_verify_volume() nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint KVM: VMX: Bury Intel PT virtualization (guest/host mode) behind CONFIG_BROKEN vdpa/mlx5: Fix PA offset with unaligned starting iotlb map ocfs2: uncache inode which has failed entering the group x86/mm: Fix a kdump kernel failure on SME system when CONFIG_IMA_KEXEC=y net/mlx5e: kTLS, Fix incorrect page refcounting net/mlx5: fs, lock FTE when checking if active netlink: terminate outstanding dump on socket close clk: qcom: gcc-qcs404: fix initial rate of GPLL3 leds: lp55xx: Remove redundant test for invalid channel number ftrace: Fix regression with module command in stack_trace_filter ovl: Filter invalid inodes with missing lookup function media: uvcvideo: Stop stream during unregister media: platform: allegro-dvt: Fix possible memory leak in allocate_buffers_internal() media: gspca: ov534-ov772x: Fix off-by-one error in set_frame_rate() media: venus: Fix pm_runtime_set_suspended() with runtime pm enabled media: ts2020: fix null-ptr-deref in ts2020_probe() media: i2c: tc358743: Fix crash in the probe error path when using polling arm64: dts: allwinner: pinephone: Add mount matrix to accelerometer Conflicts: Documentation/devicetree/bindings/serial/rs485.yaml Documentation/devicetree/bindings/sound/mt6359.yaml Documentation/devicetree/bindings/vendor-prefixes.yaml Documentation/devicetree/bindings~HEAD drivers/iommu/arm/arm-smmu/arm-smmu.c drivers/rpmsg/qcom_glink_native.c drivers/soc/qcom/socinfo.c Change-Id: I99a6a8fc446607a6933c7ba345ce0069025ba2ae |
||
|
Greg Kroah-Hartman
|
3cbae4d66b |
Merge 8f78a2b9ed ("net: usb: rtl8150: enable basic endpoint checking") into android12-5.10-lts
Steps on the way to 5.10.235 Change-Id: Ie1d5ef35bb4cadece7f43c614d3e51c836cbfa2f Signed-off-by: Greg Kroah-Hartman <gregkh@google.com> |
||
|
Illia Ostapyshyn
|
76e69a8e93 |
Input: allocate keycode for phone linking
[ Upstream commit 1bebc7869c99d466f819dd2cffaef0edf7d7a035 ] The F11 key on the new Lenovo Thinkpad T14 Gen 5, T16 Gen 3, and P14s Gen 5 laptops includes a symbol showing a smartphone and a laptop chained together. According to the user manual, it starts the Microsoft Phone Link software used to connect to Android/iOS devices and relay messages/calls or sync data. As there are no suitable keycodes for this action, introduce a new one. Signed-off-by: Illia Ostapyshyn <illia@yshyn.com> Acked-by: Dmitry Torokhov <dmitry.torokhov@gmail.com> Link: https://lore.kernel.org/r/20241114173930.44983-2-illia@yshyn.com Reviewed-by: Ilpo Järvinen <ilpo.jarvinen@linux.intel.com> Signed-off-by: Ilpo Järvinen <ilpo.jarvinen@linux.intel.com> Signed-off-by: Sasha Levin <sashal@kernel.org> |
||
|
Greg Kroah-Hartman
|
1ee5d6b1bf |
Merge 5.10.231 into android12-5.10-lts
Changes in 5.10.231
arm64: dts: allwinner: pinephone: Add mount matrix to accelerometer
media: i2c: tc358743: Fix crash in the probe error path when using polling
media: ts2020: fix null-ptr-deref in ts2020_probe()
media: venus: Fix pm_runtime_set_suspended() with runtime pm enabled
media: gspca: ov534-ov772x: Fix off-by-one error in set_frame_rate()
media: platform: allegro-dvt: Fix possible memory leak in allocate_buffers_internal()
media: uvcvideo: Stop stream during unregister
ovl: Filter invalid inodes with missing lookup function
ftrace: Fix regression with module command in stack_trace_filter
leds: lp55xx: Remove redundant test for invalid channel number
clk: qcom: gcc-qcs404: fix initial rate of GPLL3
netlink: terminate outstanding dump on socket close
net/mlx5: fs, lock FTE when checking if active
net/mlx5e: kTLS, Fix incorrect page refcounting
x86/mm: Fix a kdump kernel failure on SME system when CONFIG_IMA_KEXEC=y
ocfs2: uncache inode which has failed entering the group
vdpa/mlx5: Fix PA offset with unaligned starting iotlb map
KVM: VMX: Bury Intel PT virtualization (guest/host mode) behind CONFIG_BROKEN
nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint
ocfs2: fix UBSAN warning in ocfs2_verify_volume()
nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint
Revert "mmc: dw_mmc: Fix IDMAC operation with pages bigger than 4K"
drm/bridge: tc358768: Fix DSI command tx
mmc: core: fix return value check in devm_mmc_alloc_host()
media: dvbdev: fix the logic when DVB_DYNAMIC_MINORS is not set
NFSD: initialize copy->cp_clp early in nfsd4_copy for use by trace point
NFSD: Async COPY result needs to return a write verifier
NFSD: Limit the number of concurrent async COPY operations
NFSD: Initialize struct nfsd4_copy earlier
NFSD: Never decrement pending_async_copies on error
mm: revert "mm: shmem: fix data-race in shmem_getattr()"
mm: avoid unsafe VMA hook invocation when error arises on mmap hook
mm: unconditionally close VMAs on error
mm: refactor arch_calc_vm_flag_bits() and arm64 MTE handling
mm: resolve faulty mmap_region() error path behaviour
ASoC: Intel: bytcr_rt5640: Add DMI quirk for Vexia Edu Atla 10 tablet
mac80211: fix user-power when emulating chanctx
selftests/watchdog-test: Fix system accidentally reset after watchdog-test
ALSA: hda/realtek: Add subwoofer quirk for Infinix ZERO BOOK 13
x86/amd_nb: Fix compile-testing without CONFIG_AMD_NB
net: usb: qmi_wwan: add Quectel RG650V
soc: qcom: Add check devm_kasprintf() returned value
regulator: rk808: Add apply_bit for BUCK3 on RK809
can: j1939: fix error in J1939 documentation.
ASoC: stm: Prevent potential division by zero in stm32_sai_mclk_round_rate()
ASoC: stm: Prevent potential division by zero in stm32_sai_get_clk_div()
proc/softirqs: replace seq_printf with seq_put_decimal_ull_width
ALSA: usb-audio: Fix Yamaha P-125 Quirk Entry
ipmr: Fix access to mfc_cache_list without lock held
rcu-tasks: Idle tasks on offline CPUs are in quiescent states
cifs: Fix buffer overflow when parsing NFS reparse points
nvme: fix metadata handling in nvme-passthrough
x86/barrier: Do not serialize MSR accesses on AMD
kselftest/arm64: mte: fix printf type warnings about longs
x86/xen/pvh: Annotate indirect branch as safe
mips: asm: fix warning when disabling MIPS_FP_SUPPORT
initramfs: avoid filename buffer overrun
nvme-pci: fix freeing of the HMB descriptor table
m68k: mvme147: Fix SCSI controller IRQ numbers
m68k: mvme16x: Add and use "mvme16x.h"
m68k: mvme147: Reinstate early console
arm64: fix .data.rel.ro size assertion when CONFIG_LTO_CLANG
acpi/arm64: Adjust error handling procedure in gtdt_parse_timer_block()
s390/syscalls: Avoid creation of arch/arch/ directory
hfsplus: don't query the device logical block size multiple times
crypto: caam - Fix the pointer passed to caam_qi_shutdown()
firmware: google: Unregister driver_info on failure
EDAC/bluefield: Fix potential integer overflow
EDAC/fsl_ddr: Fix bad bit shift operations
crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY
crypto: cavium - Fix the if condition to exit loop after timeout
crypto: caam - add error check to caam_rsa_set_priv_key_form
crypto: bcm - add error check in the ahash_hmac_init function
crypto: cavium - Fix an error handling path in cpt_ucode_load_fw()
time: Fix references to _msecs_to_jiffies() handling of values
kcsan, seqlock: Fix incorrect assumption in read_seqbegin()
clkdev: remove CONFIG_CLKDEV_LOOKUP
clocksource/drivers:sp804: Make user selectable
spi: spi-fsl-lpspi: downgrade log level for pio mode
spi: spi-fsl-lpspi: Use IRQF_NO_AUTOEN flag in request_irq()
soc: ti: smartreflex: Use IRQF_NO_AUTOEN flag in request_irq()
soc: qcom: geni-se: fix array underflow in geni_se_clk_tbl_get()
mmc: mmc_spi: drop buggy snprintf()
tpm: fix signed/unsigned bug when checking event logs
arm64: dts: mt8183: krane: Fix the address of eeprom at i2c4
arm64: dts: mediatek: mt8173-elm-hana: Add vdd-supply to second source trackpad
Revert "cgroup: Fix memory leak caused by missing cgroup_bpf_offline"
cgroup/bpf: only cgroup v2 can be attached by bpf programs
pwm: imx27: Workaround of the pwm output bug when decrease the duty cycle
ARM: dts: cubieboard4: Fix DCDC5 regulator constraints
pmdomain: ti-sci: Add missing of_node_put() for args.np
regmap: irq: Set lockdep class for hierarchical IRQ domains
selftests/resctrl: Protect against array overrun during iMC config parsing
firmware: arm_scpi: Check the DVFS OPP count returned by the firmware
media: atomisp: remove #ifdef HAS_NO_HMEM
media: atomisp: Add check for rgby_data memory allocation failure
drm/mm: Mark drm_mm_interval_tree*() functions with __maybe_unused
wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service()
drm/omap: Fix locking in omap_gem_new_dmabuf()
wifi: p54: Use IRQF_NO_AUTOEN flag in request_irq()
wifi: mwifiex: Use IRQF_NO_AUTOEN flag in request_irq()
drm/imx/dcss: Use IRQF_NO_AUTOEN flag in request_irq()
drm/imx/ipuv3: Use IRQF_NO_AUTOEN flag in request_irq()
drm/v3d: Address race-condition in MMU flush
wifi: ath10k: fix invalid VHT parameters in supported_vht_mcs_rate_nss1
wifi: ath10k: fix invalid VHT parameters in supported_vht_mcs_rate_nss2
dt-bindings: vendor-prefixes: Add NeoFidelity, Inc
ASoC: fsl_micfil: Drop unnecessary register read
ASoC: fsl_micfil: do not define SHIFT/MASK for single bits
ASoC: fsl_micfil: use GENMASK to define register bit fields
ASoC: fsl_micfil: fix regmap_write_bits usage
ASoC: dt-bindings: mt6359: Update generic node name and dmic-mode
bpf: Fix the xdp_adjust_tail sample prog issue
xfrm: rename xfrm_state_offload struct to allow reuse
xfrm: store and rely on direction to construct offload flags
netdevsim: rely on XFRM state direction instead of flags
netdevsim: copy addresses for both in and out paths
drm/bridge: tc358767: Fix link properties discovery
selftests/bpf: Fix msg_verify_data in test_sockmap
selftests/bpf: Fix txmsg_redir of test_txmsg_pull in test_sockmap
wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_config_scan()
drm/fsl-dcu: Convert to Linux IRQ interfaces
drm: fsl-dcu: enable PIXCLK on LS1021A
octeontx2-af: Mbox changes for 98xx
octeontx2-pf: Calculate LBK link instead of hardcoding
octeontx2-af: forward error correction configuration
octeontx2-af: Add new CGX_CMD to get PHY FEC statistics
octeontx2-pf: ethtool fec mode support
octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_ethtool.c
drm/panfrost: Remove unused id_mask from struct panfrost_model
drm/msm/adreno: Use IRQF_NO_AUTOEN flag in request_irq()
drm/etnaviv: rework linear window offset calculation
drm/etnaviv: Request pages from DMA32 zone on addressing_limited
drm/etnaviv: dump: fix sparse warnings
drm/etnaviv: fix power register offset on GC300
drm/etnaviv: hold GPU lock across perfmon sampling
wifi: wfx: Fix error handling in wfx_core_init()
drm/msm/dpu: cast crtc_clk calculation to u64 in _dpu_core_perf_calc_clk()
netlink: typographical error in nlmsg_type constants definition
selftests/bpf: Add txmsg_pass to pull/push/pop in test_sockmap
selftests/bpf: Fix SENDPAGE data logic in test_sockmap
selftests, bpf: Add one test for sockmap with strparser
selftests/bpf: Fix total_bytes in msg_loop_rx in test_sockmap
selftests/bpf: Add push/pop checking for msg_verify_data in test_sockmap
bpf, sockmap: Several fixes to bpf_msg_push_data
bpf, sockmap: Several fixes to bpf_msg_pop_data
bpf, sockmap: Fix sk_msg_reset_curr
selftests: net: really check for bg process completion
drm/amdkfd: Fix wrong usage of INIT_WORK()
net: rfkill: gpio: Add check for clk_enable()
ALSA: usx2y: Fix spaces
ALSA: usx2y: Coding style fixes
ALSA: usx2y: Cleanup probe and disconnect callbacks
ALSA: usx2y: Use snd_card_free_when_closed() at disconnection
ALSA: us122l: Use snd_card_free_when_closed() at disconnection
ALSA: caiaq: Use snd_card_free_when_closed() at disconnection
ALSA: 6fire: Release resources at card release
driver core: Introduce device_find_any_child() helper
Bluetooth: fix use-after-free in device_for_each_child()
netpoll: Use rcu_access_pointer() in netpoll_poll_lock
wireguard: selftests: load nf_conntrack if not present
trace/trace_event_perf: remove duplicate samples on the first tracepoint event
powerpc/vdso: Flag VDSO64 entry points as functions
mfd: tps65010: Use IRQF_NO_AUTOEN flag in request_irq() to fix race
mfd: da9052-spi: Change read-mask to write-mask
mfd: intel_soc_pmic_bxtwc: Use dev_err_probe()
mfd: intel_soc_pmic_bxtwc: Use IRQ domain for USB Type-C device
mfd: intel_soc_pmic_bxtwc: Use IRQ domain for TMU device
mfd: intel_soc_pmic_bxtwc: Use IRQ domain for PMIC devices
cpufreq: loongson2: Unregister platform_driver on failure
mtd: rawnand: atmel: Fix possible memory leak
powerpc/pseries: Fix dtl_access_lock to be a rw_semaphore
RDMA/bnxt_re: Check cqe flags to know imm_data vs inv_irkey
mfd: rt5033: Fix missing regmap_del_irq_chip()
scsi: bfa: Fix use-after-free in bfad_im_module_exit()
scsi: fusion: Remove unused variable 'rc'
scsi: qedf: Fix a possible memory leak in qedf_alloc_and_init_sb()
scsi: qedi: Fix a possible memory leak in qedi_alloc_and_init_sb()
RDMA/hns: Fix NULL pointer derefernce in hns_roce_map_mr_sg()
ocfs2: fix uninitialized value in ocfs2_file_read_iter()
powerpc/sstep: make emulate_vsx_load and emulate_vsx_store static
powerpc/kexec: Fix return of uninitialized variable
fbdev/sh7760fb: Alloc DMA memory from hardware device
fbdev: sh7760fb: Fix a possible memory leak in sh7760fb_alloc_mem()
dt-bindings: clock: adi,axi-clkgen: convert old binding to yaml format
dt-bindings: clock: axi-clkgen: include AXI clk
clk: axi-clkgen: use devm_platform_ioremap_resource() short-hand
clk: clk-axi-clkgen: make sure to enable the AXI bus clock
perf cs-etm: Don't flush when packet_queue fills up
perf probe: Fix libdw memory leak
perf probe: Correct demangled symbols in C++ program
PCI: cpqphp: Use PCI_POSSIBLE_ERROR() to check config reads
PCI: cpqphp: Fix PCIBIOS_* return value confusion
f2fs: fix the wrong f2fs_bug_on condition in f2fs_do_replace_block
f2fs: avoid using native allocate_segment_by_default()
f2fs: remove struct segment_allocation default_salloc_ops
f2fs: open code allocate_segment_by_default
f2fs: remove the unused flush argument to change_curseg
f2fs: check curseg->inited before write_sum_page in change_curseg
perf trace: avoid garbage when not printing a trace event's arguments
m68k: mcfgpio: Fix incorrect register offset for CONFIG_M5441x
m68k: coldfire/device.c: only build FEC when HW macros are defined
perf trace: Do not lose last events in a race
perf trace: Avoid garbage when not printing a syscall's arguments
rpmsg: glink: Add TX_DATA_CONT command while sending
rpmsg: glink: Send READ_NOTIFY command in FIFO full case
rpmsg: glink: Fix GLINK command prefix
rpmsg: glink: use only lower 16-bits of param2 for CMD_OPEN name length
remoteproc: qcom_q6v5_mss: Re-order writes to the IMEM region
NFSD: Prevent NULL dereference in nfsd4_process_cb_update()
NFSD: Cap the number of bytes copied by nfs4_reset_recoverydir()
NFSD: Fix nfsd4_shutdown_copy()
vdpa/mlx5: Fix suboptimal range on iotlb iteration
vfio/pci: Properly hide first-in-list PCIe extended capability
fs_parser: update mount_api doc to match function signature
power: supply: core: Remove might_sleep() from power_supply_put()
power: supply: bq27xxx: Support CHARGE_NOW for bq27z561/bq28z610/bq34z100
power: supply: bq27xxx: Fix registers of bq27426
net: usb: lan78xx: Fix memory leak on device unplug by freeing PHY device
tg3: Set coherent DMA mask bits to 31 for BCM57766 chipsets
net: usb: lan78xx: Fix refcounting and autosuspend on invalid WoL configuration
marvell: pxa168_eth: fix call balance of pep->clk handling routines
net: stmmac: dwmac-socfpga: Set RX watchdog interrupt as broken
spi: atmel-quadspi: Fix register name in verbose logging function
net: introduce a netdev feature for UDP GRO forwarding
net: hsr: fix hsr_init_sk() vs network/transport headers.
bnxt_en: Reserve rings after PCIe AER recovery if NIC interface is down
ipmr: convert /proc handlers to rcu_read_lock()
ipmr: fix tables suspicious RCU usage
iio: light: al3010: Fix an error handling path in al3010_probe()
usb: using mutex lock and supporting O_NONBLOCK flag in iowarrior_read()
usb: yurex: make waiting on yurex_write interruptible
USB: chaoskey: fail open after removal
USB: chaoskey: Fix possible deadlock chaoskey_list_lock
misc: apds990x: Fix missing pm_runtime_disable()
staging: greybus: uart: clean up TIOCGSERIAL
ALSA: hda/realtek - Add type for ALC287
ALSA: hda/realtek: Update ALC256 depop procedure
apparmor: fix 'Do simple duplicate message elimination'
xen: Fix the issue of resource not being properly released in xenbus_dev_probe()
usb: ehci-spear: fix call balance of sehci clk handling routines
soc: qcom: socinfo: fix revision check in qcom_socinfo_probe()
ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices
ext4: supress data-race warnings in ext4_free_inodes_{count,set}()
ext4: fix FS_IOC_GETFSMAP handling
jfs: xattr: check invalid xattr size more strictly
ASoC: codecs: Fix atomicity violation in snd_soc_component_get_drvdata()
perf/x86/intel/pt: Fix buffer full but size is 0 case
crypto: x86/aegis128 - access 32-bit arguments as 32-bit
KVM: arm64: Ignore PMCNTENSET_EL0 while checking for overflow status
PCI: Fix use-after-free of slot->bus on hot remove
fsnotify: fix sending inotify event with unexpected filename
comedi: Flush partial mappings in error case
apparmor: test: Fix memory leak for aa_unpack_strdup()
tty: ldsic: fix tty_ldisc_autoload sysctl's proc_handler
locking/lockdep: Avoid creating new name string literals in lockdep_set_subclass()
exfat: fix uninit-value in __exfat_get_dentry_set
Bluetooth: Fix type of len in rfcomm_sock_getsockopt{,_old}()
driver core: bus: Fix double free in driver API bus_register()
Revert "usb: gadget: composite: fix OS descriptors w_value logic"
serial: sh-sci: Clean sci_ports[0] after at earlycon exit
Revert "serial: sh-sci: Clean sci_ports[0] after at earlycon exit"
netfilter: ipset: add missing range check in bitmap_ip_uadt
spi: Fix acpi deferred irq probe
platform/chrome: cros_ec_typec: fix missing fwnode reference decrement
ubi: wl: Put source PEB into correct list if trying locking LEB failed
um: ubd: Do not use drvdata in release
um: net: Do not use drvdata in release
serial: 8250: omap: Move pm_runtime_get_sync
um: vector: Do not use drvdata in release
sh: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
arm64: tls: Fix context-switching of tpidrro_el0 when kpti is enabled
block: fix ordering between checking BLK_MQ_S_STOPPED request adding
HID: wacom: Interpret tilt data from Intuos Pro BT as signed values
media: wl128x: Fix atomicity violation in fmc_send_cmd()
media: v4l2-core: v4l2-dv-timings: check cvt/gtf result
ALSA: hda/realtek: Update ALC225 depop procedure
ALSA: hda/realtek: Set PCBeep to default value for ALC274
ALSA: hda/realtek: Fix Internal Speaker and Mic boost of Infinix Y4 Max
ALSA: hda/realtek: Apply quirk for Medion E15433
usb: dwc3: gadget: Fix checking for number of TRBs left
usb: dwc3: gadget: Fix looping of queued SG entries
lib: string_helpers: silence snprintf() output truncation warning
NFSD: Prevent a potential integer overflow
SUNRPC: make sure cache entry active before cache_show
rpmsg: glink: Propagate TX failures in intentless mode as well
um: Fix potential integer overflow during physmem setup
um: Fix the return value of elf_core_copy_task_fpregs
um: Always dump trace for specified task in show_stack
NFSv4.0: Fix a use-after-free problem in the asynchronous open()
rtc: st-lpc: Use IRQF_NO_AUTOEN flag in request_irq()
rtc: abx80x: Fix WDT bit position of the status register
rtc: check if __rtc_read_time was successful in rtc_timer_do_work()
ubifs: Correct the total block count by deducting journal reservation
ubi: fastmap: Fix duplicate slab cache names while attaching
ubifs: authentication: Fix use-after-free in ubifs_tnc_end_commit
jffs2: fix use of uninitialized variable
block: return unsigned int from bdev_io_min
9p/xen: fix init sequence
9p/xen: fix release of IRQ
rtc: ab-eoz9: don't fail temperature reads on undervoltage notification
modpost: remove incorrect code in do_eisa_entry()
nfs: ignore SB_RDONLY when mounting nfs
SUNRPC: correct error code comment in xs_tcp_setup_socket()
SUNRPC: Convert rpc_client refcount to use refcount_t
sunrpc: remove unnecessary test in rpc_task_set_client()
SUNRPC: Replace internal use of SOCKWQ_ASYNC_NOSPACE
sunrpc: clear XPRT_SOCK_UPD_TIMEOUT when reset transport
sh: intc: Fix use-after-free bug in register_intc_controller()
ASoC: fsl_micfil: fix the naming style for mask definition
octeontx2-pf: Fix out-of-bounds read in otx2_get_fecparam()
quota: flush quota_release_work upon quota writeback
btrfs: ref-verify: fix use-after-free after invalid ref action
ad7780: fix division by zero in ad7780_write_raw()
util_macros.h: fix/rework find_closest() macros
scsi: ufs: exynos: Fix hibern8 notify callbacks
i3c: master: Fix miss free init_dyn_addr at i3c_master_put_i3c_addrs()
PCI: keystone: Add link up check to ks_pcie_other_map_bus()
dm thin: Add missing destroy_work_on_stack()
nfsd: make sure exp active before svc_export_show
nfsd: fix nfs4_openowner leak when concurrent nfsd4_open occur
btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
drm/etnaviv: flush shader L1 cache after user commandstream
iTCO_wdt: mask NMI_NOW bit for update_no_reboot_bit() call
watchdog: mediatek: Make sure system reset gets asserted in mtk_wdt_restart()
can: sun4i_can: sun4i_can_err(): call can_change_state() even if cf is NULL
can: sun4i_can: sun4i_can_err(): fix {rx,tx}_errors statistics
ipvs: fix UB due to uninitialized stack access in ip_vs_protocol_init()
netfilter: x_tables: fix LED ID check in led_tg_check()
ptp: Add error handling for adjfine callback in ptp_clock_adjtime
net/sched: tbf: correct backlog statistic for GSO packets
net: hsr: avoid potential out-of-bound access in fill_frame_info()
can: j1939: j1939_session_new(): fix skb reference counting
net/ipv6: release expired exception dst cached in socket
dccp: Fix memory leak in dccp_feat_change_recv
tipc: Fix use-after-free of kernel socket in cleanup_bearer().
net/qed: allow old cards not supporting "num_images" to work
igb: Fix potential invalid memory access in igb_init_module()
net: sched: fix erspan_opt settings in cls_flower
netfilter: ipset: Hold module reference while requesting a module
netfilter: nft_set_hash: skip duplicated elements pending gc run
ethtool: Fix wrong mod state in case of verbose and no_mask bitset
geneve: do not assume mac header is set in geneve_xmit_skb()
gpio: grgpio: use a helper variable to store the address of ofdev->dev
gpio: grgpio: Add NULL check in grgpio_probe
dt_bindings: rs485: Correct delay values
dt-bindings: serial: rs485: Fix rs485-rts-delay property
i3c: fix incorrect address slot lookup on 64-bit
i3c: master: Replace hard code 2 with macro I3C_ADDR_SLOT_STATUS_BITS
i3c: master: Extend address status bit to 4 and add I3C_ADDR_SLOT_EXT_DESIRED
i3c: master: Fix dynamic address leak when 'assigned-address' is present
drm/sti: Add __iomem for mixer_dbg_mxn's parameter
tcp_bpf: Fix the sk_mem_uncharge logic in tcp_bpf_sendmsg
spi: mpc52xx: Add cancel_work_sync before module remove
ocfs2: free inode when ocfs2_get_init_inode() fails
bpf: Handle BPF_EXIST and BPF_NOEXIST for LPM trie
bpf: Fix exact match conditions in trie_get_next_key()
HID: wacom: fix when get product name maybe null pointer
watchdog: rti: of: honor timeout-sec property
tracing: Fix cmp_entries_dup() to respect sort() comparison rules
arm64: ptrace: fix partial SETREGSET for NT_ARM_TAGGED_ADDR_CTRL
ALSA: usb-audio: add mixer mapping for Corsair HS80
ALSA: hda/realtek: Enable mute and micmute LED on HP ProBook 430 G8
ALSA: hda/realtek: Add support for Samsung Galaxy Book3 360 (NP730QFG)
scsi: qla2xxx: Fix NVMe and NPIV connect issue
scsi: qla2xxx: Supported speed displayed incorrectly for VPorts
scsi: qla2xxx: Fix use after free on unload
scsi: qla2xxx: Remove check req_sg_cnt should be equal to rsp_sg_cnt
nilfs2: fix potential out-of-bounds memory access in nilfs_find_entry()
bcache: revert replacing IS_ERR_OR_NULL with IS_ERR again
bpf: fix OOB devmap writes when deleting elements
dma-buf: fix dma_fence_array_signaled v4
regmap: detach regmap from dev on regmap_exit
mmc: sdhci-pci: Add DMI quirk for missing CD GPIO on Vexia Edu Atla 10 tablet
mmc: core: Further prevent card detect during shutdown
ocfs2: update seq_file index in ocfs2_dlm_seq_next
iommu/arm-smmu: Defer probe of clients after smmu device bound
s390/cpum_sf: Handle CPU hotplug remove during sampling
btrfs: avoid unnecessary device path update for the same device
kselftest/arm64: Don't leak pipe fds in pac.exec_sign_all()
kcsan: Turn report_filterlist_lock into a raw_spinlock
media: uvcvideo: Add a quirk for the Kaiweets KTI-W02 infrared camera
media: cx231xx: Add support for Dexatek USB Video Grabber 1d19:6108
drm/vc4: hvs: Set AXI panic modes for the HVS
drm: panel-orientation-quirks: Add quirk for AYA NEO 2 model
drm/mcde: Enable module autoloading
drm/radeon/r600_cs: Fix possible int overflow in r600_packet3_check()
r8169: don't apply UDP padding quirk on RTL8126A
samples/bpf: Fix a resource leak
net: fec_mpc52xx_phy: Use %pa to format resource_size_t
net: ethernet: fs_enet: Use %pa to format resource_size_t
net/sched: cbs: Fix integer overflow in cbs_set_port_rate()
af_packet: avoid erroring out after sock_init_data() in packet_create()
Bluetooth: L2CAP: do not leave dangling sk pointer on error in l2cap_sock_create()
net: af_can: do not leave a dangling sk pointer in can_create()
net: ieee802154: do not leave a dangling sk pointer in ieee802154_create()
net: inet: do not leave a dangling sk pointer in inet_create()
net: inet6: do not leave a dangling sk pointer in inet6_create()
wifi: ath5k: add PCI ID for SX76X
wifi: ath5k: add PCI ID for Arcadyan devices
drm/amdgpu: refine error handling in amdgpu_ttm_tt_pin_userptr
dma-debug: fix a possible deadlock on radix_lock
jfs: array-index-out-of-bounds fix in dtReadFirst
jfs: fix shift-out-of-bounds in dbSplit
jfs: fix array-index-out-of-bounds in jfs_readdir
jfs: add a check to prevent array-index-out-of-bounds in dbAdjTree
drm/amdgpu: skip amdgpu_device_cache_pci_state under sriov
drm/amdgpu: set the right AMDGPU sg segment limitation
wifi: ipw2x00: libipw_rx_any(): fix bad alignment
wifi: brcmfmac: Fix oops due to NULL pointer dereference in brcmf_sdiod_sglist_rw()
Bluetooth: btusb: Add RTL8852BE device 0489:e123 to device tables
ASoC: hdmi-codec: reorder channel allocation list
rocker: fix link status detection in rocker_carrier_init()
net/neighbor: clear error in case strict check is not set
netpoll: Use rcu_access_pointer() in __netpoll_setup
pinctrl: freescale: fix COMPILE_TEST error with PINCTRL_IMX_SCU
tracing: Use atomic64_inc_return() in trace_clock_counter()
scsi: hisi_sas: Add cond_resched() for no forced preemption model
leds: class: Protect brightness_show() with led_cdev->led_access mutex
scsi: st: Don't modify unknown block number in MTIOCGET
scsi: st: Add MTIOCGET and MTLOAD to ioctls allowed after device reset
pinctrl: qcom-pmic-gpio: add support for PM8937
nvdimm: rectify the illogical code within nd_dax_probe()
f2fs: fix f2fs_bug_on when uninstalling filesystem call f2fs_evict_inode.
PCI: Add 'reset_subordinate' to reset hierarchy below bridge
PCI: Add ACS quirk for Wangxun FF5xxx NICs
i3c: Use i3cdev->desc->info instead of calling i3c_device_get_info() to avoid deadlock
usb: chipidea: udc: handle USB Error Interrupt if IOC not set
MIPS: Loongson64: DTS: Really fix PCIe port nodes for ls7a
powerpc/prom_init: Fixup missing powermac #size-cells
misc: eeprom: eeprom_93cx6: Add quirk for extra read clock cycle
sched/core: Remove the unnecessary need_resched() check in nohz_csd_func()
sched/fair: Remove update of blocked load from newidle_balance
sched/fair: Remove unused parameter of update_nohz_stats
sched/fair: Merge for each idle cpu loop of ILB
sched/fair: Trigger the update of blocked load on newly idle cpu
sched/fair: Add NOHZ balancer flag for nohz.next_balance updates
sched/fair: Check idle_cpu() before need_resched() to detect ilb CPU turning busy
sched/core: Prevent wakeup of ksoftirqd during idle load balance
btrfs: fix missing snapshot drew unlock when root is dead during swap activation
Revert "unicode: Don't special case ignorable code points"
KVM: arm64: vgic-its: Add a data length check in vgic_its_save_*
KVM: arm64: vgic-its: Clear DTE when MAPD unmaps a device
KVM: arm64: vgic-its: Clear ITE when DISCARD frees an ITE
jffs2: Prevent rtime decompress memory corruption
jffs2: Fix rtime decompressor
xhci: dbc: Fix STALL transfer event handling
drm/amd/display: Check BIOS images before it is used
ocfs2: Revert "ocfs2: fix the la space leak when unmounting an ocfs2 volume"
modpost: Add .irqentry.text to OTHER_SECTIONS
Revert "drm/amdgpu: add missing size check in amdgpu_debugfs_gprwave_read()"
PCI: rockchip-ep: Fix address translation unit programming
scsi: sd: Fix sd_do_mode_sense() buffer length handling
scsi: core: Fix scsi_mode_select() buffer length handling
ALSA: usb-audio: Fix out of bounds reads when finding clock sources
media: uvcvideo: Require entities to have a non-zero unique ID
octeontx2: Fix condition.
octeontx2-pf: Fix otx2_get_fecparam()
Linux 5.10.231
Change-Id: I9f898f01cfaab475581c068959ac597789122af0
Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>
|
||
|
Michael Bestas
|
6725684c74 |
Merge tag 'ASB-2024-12-05_12-5.10' of https://android.googlesource.com/kernel/common into android13-5.10-waipio
https://source.android.com/docs/security/bulletin/2024-12-01 * tag 'ASB-2024-12-05_12-5.10' of https://android.googlesource.com/kernel/common: (649 commits) ANDROID: ABI: update symbol list for honor ANDROID: fs: add vendor hook to collect IO statistics ANDROID: tools/objtool: Pass CFLAGS to libsubcmd build via EXTRA_CFLAGS UPSTREAM: HID: core: zero-initialize the report buffer ANDROID: libsubcmd: Hoist iterator variable declarations in parse_options_subcommand() ANDROID: mm: Fix SPF-aware fast-mremap UPSTREAM: net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT UPSTREAM: f2fs: support SEEK_DATA and SEEK_HOLE for compression files Revert "genetlink: hold RCU in genlmsg_mcast()" ANDROID: add file for recording allowed ABI breaks ANDROID: GKI: update symbol list for honor ANDROID: Allow vendor modules perform more operations on memleak detect UPSTREAM: drm/omap: fix misleading indentation in pixinc() UPSTREAM: bitfield: build kunit tests without structleak plugin BACKPORT: FROMGIT: binder: add delivered_freeze to debugfs output BACKPORT: FROMGIT: binder: fix memleak of proc->delivered_freeze FROMGIT: binder: allow freeze notification for dead nodes FROMGIT: binder: fix BINDER_WORK_CLEAR_FREEZE_NOTIFICATION debug logs FROMGIT: binder: fix BINDER_WORK_FROZEN_BINDER debug logs BACKPORT: FROMGIT: binder: fix freeze UAF in binder_release_work() ... Conflicts: android/abi_gki_aarch64.xml net/qrtr/af_qrtr.c Change-Id: I4f416cf6c90e71fbdc0bea2c76a620842a2a2288 |
||
|
Maurice Lambert
|
224b9bc497 |
netlink: typographical error in nlmsg_type constants definition
[ Upstream commit 84bfbfbbd32aee136afea4b6bf82581dce79c305 ]
This commit fix a typographical error in netlink nlmsg_type constants definition in the include/uapi/linux/rtnetlink.h at line 177. The definition is RTM_NEWNVLAN RTM_NEWVLAN instead of RTM_NEWVLAN RTM_NEWVLAN.
Signed-off-by: Maurice Lambert <mauricelambert434@gmail.com>
Fixes:
|
||
|
Greg Kroah-Hartman
|
509ddbb2b8 |
Merge f976d964a6 ("Input: adp5589-keys - fix adp5589_gpio_get_value()") into android12-5.10-lts
Steps on the way to 5.10.227 Resolves merge conflicts in: fs/nfsd/nfs4xdr.c fs/nfsd/vfs.c Change-Id: I8ed4156759977aa5c53d577990f4b72e61530ebf Signed-off-by: Greg Kroah-Hartman <gregkh@google.com> |
||
|
Greg Kroah-Hartman
|
6f91c0260d |
Merge 531754952f ("netfilter: nf_tables: prevent nf_skb_duplicated corruption") into android12-5.10-lts
Steps on the way to 5.10.227 Change-Id: Ib618ae4b21061bc48e1a821a0bdb35811495f7b2 Signed-off-by: Greg Kroah-Hartman <gregkh@google.com> |
||
|
Greg Kroah-Hartman
|
9e57ad4546 |
Merge 0ce9d89343 ("clk: ti: dra7-atl: Fix leak of of_nodes") into android12-5.10-lts
Steps on the way to 5.10.226 Resolves merge conflicts in: drivers/dma-buf/heaps/heap-helpers.c drivers/usb/dwc3/core.h fs/ext4/inline.c Change-Id: Id7ab496884e549fc85b6fff8254fb56d6785d78c Signed-off-by: Greg Kroah-Hartman <gregkh@google.com> |
||
|
Michael Bestas
|
529ffa5672 |
Merge tag 'ASB-2024-11-05_12-5.10' of https://android.googlesource.com/kernel/common into android13-5.10-waipio
https://source.android.com/docs/security/bulletin/2024-11-01
CVE-2024-36978
CVE-2024-46740
* tag 'ASB-2024-11-05_12-5.10' of https://android.googlesource.com/kernel/common: (702 commits)
UPSTREAM: dma-buf: heaps: Fix off-by-one in CMA heap fault handler
BACKPORT: firmware: arm_scmi: Queue in scmi layer for mailbox implementation
BACKPORT: gso: fix udp gso fraglist segmentation after pull from frag_list
ANDROID: usb: Optimization the transfer rate of accessory mode in USB3.2 mode
UPSTREAM: unicode: Don't special case ignorable code points
ANDROID: 16K: Fixup padding vm_flags bits on VMA splits
ANDROID: 16K: Introduce pgsize_migration_inline.h
Revert "udf: Avoid excessive partition lengths"
Revert "bareudp: Fix device stats updates."
ANDROID: fix up change to pti_clone_pgtable()
Revert "perf/aux: Fix AUX buffer serialization"
Revert "clocksource/drivers/timer-of: Remove percpu irq related code"
Revert "Merge
|
||
|
Greg Kroah-Hartman
|
b9d4c135c7 |
Merge tag 'android12-5.10.226_r00' into android12-5.10
This merges up to the 5.10.226 LTS release into android12-5.10. Included in here are the following commits: * |
||
|
Hans Verkuil
|
3f73da56af |
media: uapi/linux/cec.h: cec_msg_set_reply_to: zero flags
commit 599f6899051cb70c4e0aa9fd591b9ee220cb6f14 upstream.
The cec_msg_set_reply_to() helper function never zeroed the
struct cec_msg flags field, this can cause unexpected behavior
if flags was uninitialized to begin with.
Signed-off-by: Hans Verkuil <hverkuil-cisco@xs4all.nl>
Fixes:
|
||
|
Phil Sutter
|
181fbbdd46 |
netfilter: uapi: NFTA_FLOWTABLE_HOOK is NLA_NESTED
[ Upstream commit 76f1ed087b562a469f2153076f179854b749c09a ]
Fix the comment which incorrectly defines it as NLA_U32.
Fixes:
|
||
|
Eyal Birger
|
3b84799ea2 |
net: geneve: support IPv4/IPv6 as inner protocol
[ Upstream commit 435fe1c0c1f74b682dba85641406abf4337aade6 ] This patch adds support for encapsulating IPv4/IPv6 within GENEVE. In order to use this, a new IFLA_GENEVE_INNER_PROTO_INHERIT flag needs to be provided at device creation. This property cannot be changed for the time being. In case IP traffic is received on a non-tun device the drop count is increased. Signed-off-by: Eyal Birger <eyal.birger@gmail.com> Link: https://lore.kernel.org/r/20220316061557.431872-1-eyal.birger@gmail.com Signed-off-by: Paolo Abeni <pabeni@redhat.com> Stable-dep-of: c471236b2359 ("bareudp: Pull inner IP header on xmit.") Signed-off-by: Sasha Levin <sashal@kernel.org> |
||
|
Michael Bestas
|
deec4e9c07 |
Merge tag 'ASB-2024-09-05_12-5.10' of https://android.googlesource.com/kernel/common into android13-5.10-waipio
https://source.android.com/docs/security/bulletin/2024-09-01 CVE-2024-36972 * tag 'ASB-2024-09-05_12-5.10' of https://android.googlesource.com/kernel/common: (1565 commits) ANDROID: delete tool added by mistake ANDROID: GKI: Add initialization for rwsem's oem_data and vendor_data. ANDROID: GKI: Add initialization for mutex oem_data. ANDROID: fix ENOMEM check of binder_proc_ext ANDROID: binder: fix KMI issues due to frozen notification BACKPORT: FROMGIT: binder: frozen notification binder_features flag BACKPORT: FROMGIT: binder: frozen notification UPSTREAM: selftests/binderfs: add test for feature files UPSTREAM: docs: binderfs: add section about feature files UPSTREAM: binderfs: add support for feature files ANDROID: GKI: Add symbol to symbol list for vivo. ANDROID: vendor_hooks: add hooks to modify pageflags ANDROID: GKI: Add pageflags for OEM ANDROID: GKI: Update symbol list for vivo ANDROID: vendor_hooks: add vendor hooks for fuse request UPSTREAM: net: sched: sch_multiq: fix possible OOB write in multiq_tune() ANDROID: Update the GKI symbol list and ABI XML ANDROID: irqchip/irq-gic-v3: Add vendor hook for gic suspend FROMLIST: binder: fix UAF caused by offsets overwrite ANDROID: gki - set CONFIG_USB_NET_AX88179_178A=y (usb gbit ethernet dongle) ... Conflicts: Documentation/devicetree/bindings/i2c/google,cros-ec-i2c-tunnel.yaml Documentation/devicetree/bindings/sound/rt5645.txt Documentation/devicetree/bindings~HEAD drivers/scsi/ufs/ufs-qcom.c net/qrtr/af_qrtr.c net/qrtr/ns.c net/qrtr/qrtr.h Change-Id: I50a93cfc0ff67778b19609e93cb577f63a517baa |
||
|
Greg Kroah-Hartman
|
4951c68022 |
Merge 5.10.225 into android12-5.10-lts
Changes in 5.10.225 fuse: Initialize beyond-EOF page contents before setting uptodate ALSA: usb-audio: Support Yamaha P-125 quirk entry xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration thunderbolt: Mark XDomain as unplugged when router is removed s390/dasd: fix error recovery leading to data corruption on ESE devices arm64: ACPI: NUMA: initialize all values of acpi_early_node_map to NUMA_NO_NODE dm resume: don't return EINVAL when signalled dm persistent data: fix memory allocation failure vfs: Don't evict inode under the inode lru traversing context bitmap: introduce generic optimized bitmap_size() fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE selinux: fix potential counting error in avc_add_xperms_decision() btrfs: tree-checker: add dev extent item checks drm/amdgpu: Actually check flags for all context ops. memcg_write_event_control(): fix a user-triggerable oops drm/amdgpu/jpeg2: properly set atomics vmid field s390/cio: rename bitmap_size() -> idset_bitmap_size() btrfs: rename bitmap_set_bits() -> btrfs_bitmap_set_bits() s390/uv: Panic for set and remove shared access UVC errors net/mlx5e: Correctly report errors for ethtool rx flows atm: idt77252: prevent use after free in dequeue_rx() net: axienet: Fix register defines comment description net: dsa: vsc73xx: pass value in phy_write operation net: dsa: vsc73xx: use read_poll_timeout instead delay loop net: dsa: vsc73xx: check busy flag in MDIO operations mptcp: correct MPTCP_SUBFLOW_ATTR_SSN_OFFSET reserved size netfilter: flowtable: initialise extack before use net: hns3: fix wrong use of semaphore up net: hns3: fix a deadlock problem when config TC during resetting ALSA: hda/realtek: Fix noise from speakers on Lenovo IdeaPad 3 15IAU7 ssb: Fix division by zero issue in ssb_calc_clock_rate wifi: mac80211: fix BA session teardown race wifi: cw1200: Avoid processing an invalid TIM IE i2c: riic: avoid potential division by zero RDMA/rtrs: Fix the problem of variable not initialized fully s390/smp,mcck: fix early IPI handling media: radio-isa: use dev_name to fill in bus_info staging: iio: resolver: ad2s1210: fix use before initialization drm/amd/display: Validate hw_points_num before using it staging: ks7010: disable bh on tx_dev_lock binfmt_misc: cleanup on filesystem umount media: qcom: venus: fix incorrect return value scsi: spi: Fix sshdr use gfs2: setattr_chown: Add missing initialization wifi: iwlwifi: abort scan when rfkill on but device enabled IB/hfi1: Fix potential deadlock on &irq_src_lock and &dd->uctxt_lock powerpc/xics: Check return value of kasprintf in icp_native_map_one_cpu nvmet-trace: avoid dereferencing pointer too early ext4: do not trim the group with corrupted block bitmap quota: Remove BUG_ON from dqget() media: pci: cx23885: check cx23885_vdev_init() return fs: binfmt_elf_efpic: don't use missing interpreter's properties scsi: lpfc: Initialize status local variable in lpfc_sli4_repost_sgl_list() net/sun3_82586: Avoid reading past buffer in debug output drm/lima: set gp bus_stop bit before hard reset virtiofs: forbid newlines in tags netlink: hold nlk->cb_mutex longer in __netlink_dump_start() md: clean up invalid BUG_ON in md_ioctl x86: Increase brk randomness entropy for 64-bit systems memory: stm32-fmc2-ebi: check regmap_read return value parisc: Use irq_enter_rcu() to fix warning at kernel/context_tracking.c:367 powerpc/boot: Handle allocation failure in simple_realloc() powerpc/boot: Only free if realloc() succeeds btrfs: change BUG_ON to assertion when checking for delayed_node root btrfs: handle invalid root reference found in may_destroy_subvol() btrfs: send: handle unexpected data in header buffer in begin_cmd() btrfs: delete pointless BUG_ON check on quota root in btrfs_qgroup_account_extent() f2fs: fix to do sanity check in update_sit_entry usb: gadget: fsl: Increase size of name buffer for endpoints Bluetooth: bnep: Fix out-of-bound access net: hns3: add checking for vf id of mailbox nvmet-tcp: do not continue for invalid icreq NFS: avoid infinite loop in pnfs_update_layout. openrisc: Call setup_memory() earlier in the init sequence s390/iucv: fix receive buffer virtual vs physical address confusion usb: dwc3: core: Skip setting event buffers for host only controllers irqchip/gic-v3-its: Remove BUG_ON in its_vpe_irq_domain_alloc ext4: set the type of max_zeroout to unsigned int to avoid overflow nvmet-rdma: fix possible bad dereference when freeing rsps hrtimer: Prevent queuing of hrtimer without a function callback gtp: pull network headers in gtp_dev_xmit() block: use "unsigned long" for blk_validate_block_size(). media: solo6x10: replace max(a, min(b, c)) by clamp(b, a, c) dm suspend: return -ERESTARTSYS instead of -EINTR Bluetooth: hci_core: Fix LE quote calculation Bluetooth: SMP: Fix assumption of Central always being Initiator tc-testing: don't access non-existent variable on exception kcm: Serialise kcm_sendmsg() for the same socket. netfilter: nft_counter: Synchronize nft_counter_reset() against reader. ip6_tunnel: Fix broken GRO bonding: fix bond_ipsec_offload_ok return type bonding: fix null pointer deref in bond_ipsec_offload_ok bonding: fix xfrm real_dev null pointer dereference bonding: fix xfrm state handling when clearing active slave ice: fix ICE_LAST_OFFSET formula net: dsa: mv88e6xxx: read FID when handling ATU violations net: dsa: mv88e6xxx: replace ATU violation prints with trace points net: dsa: mv88e6xxx: Fix out-of-bound access netem: fix return value if duplicate enqueue fails ipv6: prevent UAF in ip6_send_skb() net: xilinx: axienet: Always disable promiscuous mode net: xilinx: axienet: Fix dangling multicast addresses drm/msm/dpu: don't play tricks with debug macros drm/msm/dp: reset the link phy params before link training mmc: mmc_test: Fix NULL dereference on allocation failure Bluetooth: MGMT: Add error handling to pair_device() binfmt_misc: pass binfmt_misc flags to the interpreter MIPS: Loongson64: Set timer mode in cpu-probe HID: wacom: Defer calculation of resolution until resolution_code is known HID: microsoft: Add rumble support to latest xbox controllers cxgb4: add forgotten u64 ivlan cast before shift KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3 mmc: dw_mmc: allow biu and ciu clocks to defer Revert "drm/amd/display: Validate hw_points_num before using it" ALSA: timer: Relax start tick time check for slave timer elements nfsd: Don't call freezable_schedule_timeout() after each successful page allocation in svc_alloc_arg(). Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO Input: MT - limit max slots tools: move alignment-related macros to new <linux/align.h> drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc KVM: arm64: Don't use cbz/adr with external symbols pinctrl: rockchip: correct RK3328 iomux width flag for GPIO2-B pins pinctrl: single: fix potential NULL dereference in pcs_get_function() wifi: mwifiex: duplicate static structs used in driver instances mptcp: sched: check both backup in retrans ipc: replace costly bailout check in sysvipc_find_ipc() drm/amdkfd: don't allow mapping the MMIO HDP page with large pages media: uvcvideo: Fix integer overflow calculating timestamp Revert "Input: ioc3kbd - convert to platform remove callback returning void" ata: libata-core: Fix null pointer dereference on error cgroup/cpuset: Prevent UAF in proc_cpuset_show() net:rds: Fix possible deadlock in rds_message_put ovl: do not fail because of O_NOATIME soundwire: stream: fix programming slave ports for non-continous port maps dmaengine: dw: Add peripheral bus width verification dmaengine: dw: Add memory bus width verification ethtool: check device is present when getting link settings gtp: fix a potential NULL pointer dereference net: busy-poll: use ktime_get_ns() instead of local_clock() nfc: pn533: Add poll mod list filling check soc: qcom: cmd-db: Map shared memory as WC, not WB cdc-acm: Add DISABLE_ECHO quirk for GE HealthCare UI Controller USB: serial: option: add MeiG Smart SRM825L usb: dwc3: omap: add missing depopulate in probe error path usb: dwc3: core: Prevent USB core invalid event buffer address access usb: dwc3: st: fix probed platform device ref count on probe error path usb: dwc3: st: add missing depopulate in probe error path usb: core: sysfs: Unmerge @usb3_hardware_lpm_attr_group in remove_power_attributes() scsi: aacraid: Fix double-free on probe failure apparmor: fix policy_unpack_test on big endian systems Linux 5.10.225 Change-Id: I5028ef07db680262d45fba4096094fe8b19dd052 Signed-off-by: Greg Kroah-Hartman <gregkh@google.com> |
||
|
Yu-Ting Tseng
|
0e10c6560f |
BACKPORT: FROMGIT: binder: frozen notification
Frozen processes present a significant challenge in binder transactions. When a process is frozen, it cannot, by design, accept and/or respond to binder transactions. As a result, the sender needs to adjust its behavior, such as postponing transactions until the peer process unfreezes. However, there is currently no way to subscribe to these state change events, making it impossible to implement frozen-aware behaviors efficiently. Introduce a binder API for subscribing to frozen state change events. This allows programs to react to changes in peer process state, mitigating issues related to binder transactions sent to frozen processes. Implementation details: For a given binder_ref, the state of frozen notification can be one of the followings: 1. Userspace doesn't want a notification. binder_ref->freeze is null. 2. Userspace wants a notification but none is in flight. list_empty(&binder_ref->freeze->work.entry) = true 3. A notification is in flight and waiting to be read by userspace. binder_ref_freeze.sent is false. 4. A notification was read by userspace and kernel is waiting for an ack. binder_ref_freeze.sent is true. When a notification is in flight, new state change events are coalesced into the existing binder_ref_freeze struct. If userspace hasn't picked up the notification yet, the driver simply rewrites the state. Otherwise, the notification is flagged as requiring a resend, which will be performed once userspace acks the original notification that's inflight. See https://r.android.com/3070045 for how userspace is going to use this feature. Signed-off-by: Yu-Ting Tseng <yutingtseng@google.com> Acked-by: Carlos Llamas <cmllamas@google.com> Link: https://lore.kernel.org/r/20240709070047.4055369-4-yutingtseng@google.com Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org> Bug: 363013421 (cherry picked from commit d579b04a52a183db47dfcb7a44304d7747d551e1 git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/char-misc.git char-misc-next) Change-Id: I5dd32abba932ca7d03ae58660143e075ed778b81 [cmllamas: fix merge conflicts due to missing 0567461a7a6e] Signed-off-by: Carlos Llamas <cmllamas@google.com> |
||
|
Laurent Vivier
|
7fd3a59268 |
binfmt_misc: pass binfmt_misc flags to the interpreter
commit 2347961b11d4079deace3c81dceed460c08a8fc1 upstream. It can be useful to the interpreter to know which flags are in use. For instance, knowing if the preserve-argv[0] is in use would allow to skip the pathname argument. This patch uses an unused auxiliary vector, AT_FLAGS, to add a flag to inform interpreter if the preserve-argv[0] is enabled. Note by Helge Deller: The real-world user of this patch is qemu-user, which needs to know if it has to preserve the argv[0]. See Debian bug #970460. Signed-off-by: Laurent Vivier <laurent@vivier.eu> Reviewed-by: YunQiang Su <ysu@wavecomp.com> URL: http://bugs.debian.org/970460 Signed-off-by: Helge Deller <deller@gmx.de> Cc: Thorsten Glaser <tg@debian.org> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org> |
||
|
Greg Kroah-Hartman
|
b84ad15be5 |
Merge 5.10.224 into android12-5.10-lts
Changes in 5.10.224
EDAC/skx_common: Add new ADXL components for 2-level memory
EDAC, i10nm: make skx_common.o a separate module
platform/chrome: cros_ec_debugfs: fix wrong EC message version
hfsplus: fix to avoid false alarm of circular locking
x86/of: Return consistent error type from x86_of_pci_irq_enable()
x86/pci/intel_mid_pci: Fix PCIBIOS_* return code handling
x86/pci/xen: Fix PCIBIOS_* return code handling
x86/platform/iosf_mbi: Convert PCIBIOS_* return codes to errnos
hwmon: (adt7475) Fix default duty on fan is disabled
pwm: stm32: Always do lazy disabling
hwmon: (max6697) Fix underflow when writing limit attributes
hwmon: (max6697) Fix swapped temp{1,8} critical alarms
arm64: dts: qcom: sdm845: add power-domain to UFS PHY
soc: qcom: rpmh-rsc: Ensure irqs aren't disabled by rpmh_rsc_send_data() callers
arm64: dts: qcom: msm8996: specify UFS core_clk frequencies
soc: qcom: pdr: protect locator_addr with the main mutex
soc: qcom: pdr: fix parsing of domains lists
arm64: dts: rockchip: Increase VOP clk rate on RK3328
ARM: dts: imx6qdl-kontron-samx6i: move phy reset into phy-node
ARM: dts: imx6qdl-kontron-samx6i: fix PHY reset
ARM: dts: imx6qdl-kontron-samx6i: fix board reset
ARM: dts: imx6qdl-kontron-samx6i: fix SPI0 chip selects
ARM: dts: imx6qdl-kontron-samx6i: fix PCIe reset polarity
arm64: dts: mediatek: mt8183-kukui: Drop bogus output-enable property
arm64: dts: mediatek: mt7622: fix "emmc" pinctrl mux
arm64: dts: amlogic: gx: correct hdmi clocks
m68k: atari: Fix TT bootup freeze / unexpected (SCU) interrupt messages
x86/xen: Convert comma to semicolon
m68k: cmpxchg: Fix return value for default case in __arch_xchg()
ARM: pxa: spitz: use gpio descriptors for audio
ARM: spitz: fix GPIO assignment for backlight
firmware: turris-mox-rwtm: Fix checking return value of wait_for_completion_timeout()
firmware: turris-mox-rwtm: Initialize completion before mailbox
wifi: brcmsmac: LCN PHY code is used for BCM4313 2G-only device
selftests/bpf: Fix prog numbers in test_sockmap
net: esp: cleanup esp_output_tail_tcp() in case of unsupported ESPINTCP
net/smc: Allow SMC-D 1MB DMB allocations
net/smc: set rmb's SG_MAX_SINGLE_ALLOC limitation only when CONFIG_ARCH_NO_SG_CHAIN is defined
selftests/bpf: Check length of recv in test_sockmap
lib: objagg: Fix general protection fault
mlxsw: spectrum_acl_erp: Fix object nesting warning
mlxsw: spectrum_acl_bloom_filter: Make mlxsw_sp_acl_bf_key_encode() more flexible
mlxsw: spectrum_acl: Fix ACL scale regression and firmware errors
ath11k: dp: stop rx pktlog before suspend
wifi: ath11k: fix wrong handling of CCMP256 and GCMP ciphers
wifi: cfg80211: fix typo in cfg80211_calculate_bitrate_he()
wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
net: fec: Refactor: #define magic constants
net: fec: Fix FEC_ECR_EN1588 being cleared on link-down
ipvs: Avoid unnecessary calls to skb_is_gso_sctp
netfilter: nf_tables: rise cap on SELinux secmark context
perf/x86/intel/pt: Fix pt_topa_entry_for_page() address calculation
perf: Fix perf_aux_size() for greater-than 32-bit size
perf: Prevent passing zero nr_pages to rb_alloc_aux()
qed: Improve the stack space of filter_config()
wifi: virt_wifi: avoid reporting connection success with wrong SSID
gss_krb5: Fix the error handling path for crypto_sync_skcipher_setkey
wifi: virt_wifi: don't use strlen() in const context
selftests/bpf: Close fd in error path in drop_on_reuseport
bpf: annotate BTF show functions with __printf
bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
bpf: Eliminate remaining "make W=1" warnings in kernel/bpf/btf.o
selftests: forwarding: devlink_lib: Wait for udev events after reloading
xdp: fix invalid wait context of page_pool_destroy()
drm/panel: boe-tv101wum-nl6: If prepare fails, disable GPIO before regulators
drm/panel: boe-tv101wum-nl6: Check for errors on the NOP in prepare()
media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
media: imon: Fix race getting ictx->lock
saa7134: Unchecked i2c_transfer function result fixed
media: uvcvideo: Allow entity-defined get_info and get_cur
media: uvcvideo: Override default flags
media: renesas: vsp1: Fix _irqsave and _irq mix
media: renesas: vsp1: Store RPF partition configuration per RPF instance
leds: trigger: Unregister sysfs attributes before calling deactivate()
perf report: Fix condition in sort__sym_cmp()
drm/etnaviv: fix DMA direction handling for cached RW buffers
drm/qxl: Add check for drm_cvt_mode
Revert "leds: led-core: Fix refcount leak in of_led_get()"
ext4: fix infinite loop when replaying fast_commit
media: venus: flush all buffers in output plane streamoff
mfd: omap-usb-tll: Use struct_size to allocate tll
xprtrdma: Rename frwr_release_mr()
xprtrdma: Fix rpcrdma_reqs_reset()
SUNRPC: avoid soft lockup when transmitting UDP to reachable server.
ext4: avoid writing unitialized memory to disk in EA inodes
sparc64: Fix incorrect function signature and add prototype for prom_cif_init
SUNRPC: Fixup gss_status tracepoint error output
PCI: Fix resource double counting on remove & rescan
coresight: Fix ref leak when of_coresight_parse_endpoint() fails
Input: qt1050 - handle CHIP_ID reading error
RDMA/mlx4: Fix truncated output warning in mad.c
RDMA/mlx4: Fix truncated output warning in alias_GUID.c
RDMA/rxe: Don't set BTH_ACK_MASK for UC or UD QPs
ASoC: max98088: Check for clk_prepare_enable() error
mtd: make mtd_test.c a separate module
RDMA/device: Return error earlier if port in not valid
Input: elan_i2c - do not leave interrupt disabled on suspend failure
MIPS: Octeron: remove source file executable bit
powerpc/xmon: Fix disassembly CPU feature checks
macintosh/therm_windtunnel: fix module unload.
RDMA/hns: Fix missing pagesize and alignment check in FRMR
bnxt_re: Fix imm_data endianness
netfilter: ctnetlink: use helper function to calculate expect ID
net: dsa: mv88e6xxx: Limit chip-wide frame size config to CPU ports
net: dsa: b53: Limit chip-wide jumbo frame config to CPU ports
pinctrl: rockchip: update rk3308 iomux routes
pinctrl: core: fix possible memory leak when pinctrl_enable() fails
pinctrl: single: fix possible memory leak when pinctrl_enable() fails
pinctrl: ti: ti-iodelay: Drop if block with always false condition
pinctrl: ti: ti-iodelay: fix possible memory leak when pinctrl_enable() fails
pinctrl: freescale: mxs: Fix refcount of child
fs/proc/task_mmu: indicate PM_FILE for PMD-mapped file THP
fs/nilfs2: remove some unused macros to tame gcc
nilfs2: avoid undefined behavior in nilfs_cnt32_ge macro
rtc: interface: Add RTC offset to alarm after fix-up
dt-bindings: thermal: correct thermal zone node name limit
tick/broadcast: Make takeover of broadcast hrtimer reliable
net: netconsole: Disable target before netpoll cleanup
af_packet: Handle outgoing VLAN packets without hardware offloading
ipv6: take care of scope when choosing the src addr
sched/fair: set_load_weight() must also call reweight_task() for SCHED_IDLE tasks
char: tpm: Fix possible memory leak in tpm_bios_measurements_open()
media: venus: fix use after free in vdec_close
hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
ext2: Verify bitmap and itable block numbers before using them
drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
scsi: qla2xxx: Fix optrom version displayed in FDMI
drm/amd/display: Check for NULL pointer
sched/fair: Use all little CPUs for CPU-bound workloads
apparmor: use kvfree_sensitive to free data->data
task_work: s/task_work_cancel()/task_work_cancel_func()/
task_work: Introduce task_work_cancel() again
udf: Avoid using corrupted block bitmap buffer
m68k: amiga: Turn off Warp1260 interrupts during boot
ext4: check dot and dotdot of dx_root before making dir indexed
ext4: make sure the first directory block is not a hole
wifi: mwifiex: Fix interface type change
leds: ss4200: Convert PCIBIOS_* return codes to errnos
jbd2: make jbd2_journal_get_max_txn_bufs() internal
KVM: VMX: Split out the non-virtualization part of vmx_interrupt_blocked()
tools/memory-model: Fix bug in lock.cat
hwrng: amd - Convert PCIBIOS_* return codes to errnos
PCI: hv: Return zero, not garbage, when reading PCI_INTERRUPT_PIN
PCI: rockchip: Use GPIOD_OUT_LOW flag while requesting ep_gpio
binder: fix hang of unregistered readers
dev/parport: fix the array out-of-bounds risk
scsi: qla2xxx: Return ENOBUFS if sg_cnt is more than one for ELS cmds
f2fs: fix to don't dirty inode for readonly filesystem
clk: davinci: da8xx-cfgchip: Initialize clk_init_data before use
ubi: eba: properly rollback inside self_check_eba
decompress_bunzip2: fix rare decompression failure
kbuild: Fix '-S -c' in x86 stack protector scripts
kobject_uevent: Fix OOB access within zap_modalias_env()
devres: Fix devm_krealloc() wasting memory
rtc: cmos: Fix return value of nvmem callbacks
scsi: qla2xxx: During vport delete send async logout explicitly
scsi: qla2xxx: Fix for possible memory corruption
scsi: qla2xxx: Fix flash read failure
scsi: qla2xxx: Complete command early within lock
scsi: qla2xxx: validate nvme_local_port correctly
perf/x86/intel/pt: Fix topa_entry base length
perf/x86/intel/pt: Fix a topa_entry base address calculation
rtc: isl1208: Fix return value of nvmem callbacks
watchdog/perf: properly initialize the turbo mode timestamp and rearm counter
platform: mips: cpu_hwmon: Disable driver on unsupported hardware
RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
selftests/sigaltstack: Fix ppc64 GCC build
rbd: don't assume rbd_is_lock_owner() for exclusive mappings
MIPS: ip30: ip30-console: Add missing include
MIPS: Loongson64: env: Hook up Loongsson-2K
drm/panfrost: Mark simple_ondemand governor as softdep
rbd: rename RBD_LOCK_STATE_RELEASING and releasing_wait
rbd: don't assume RBD_LOCK_STATE_LOCKED for exclusive mappings
Bluetooth: btusb: Add RTL8852BE device 0489:e125 to device tables
Bluetooth: btusb: Add Realtek RTL8852BE support ID 0x13d3:0x3591
nilfs2: handle inconsistent state in nilfs_btnode_create_block()
io_uring/io-wq: limit retrying worker initialisation
kernel: rerun task_work while freezing in get_signal()
kdb: address -Wformat-security warnings
kdb: Use the passed prompt in kdb_position_cursor()
jfs: Fix array-index-out-of-bounds in diFree
um: time-travel: fix time-travel-start option
f2fs: fix start segno of large section
libbpf: Fix no-args func prototype BTF dumping syntax
dma: fix call order in dmam_free_coherent
MIPS: SMP-CPS: Fix address for GCR_ACCESS register for CM3 and later
ipv4: Fix incorrect source address in Record Route option
net: bonding: correctly annotate RCU in bond_should_notify_peers()
netfilter: nft_set_pipapo_avx2: disable softinterrupts
tipc: Return non-zero value from tipc_udp_addr2str() on error
net: stmmac: Correct byte order of perfect_match
net: nexthop: Initialize all fields in dumped nexthops
bpf: Fix a segment issue when downgrading gso_size
mISDN: Fix a use after free in hfcmulti_tx()
apparmor: Fix null pointer deref when receiving skb during sock creation
powerpc: fix a file leak in kvm_vcpu_ioctl_enable_cap()
lirc: rc_dev_get_from_fd(): fix file leak
ASoC: Intel: use soc_intel_is_byt_cr() only when IOSF_MBI is reachable
ceph: fix incorrect kmalloc size of pagevec mempool
nvme: split command copy into a helper
nvme-pci: add missing condition check for existence of mapped data
fs: don't allow non-init s_user_ns for filesystems without FS_USERNS_MOUNT
powerpc/configs: Update defconfig with now user-visible CONFIG_FSL_IFC
fuse: name fs_context consistently
fuse: verify {g,u}id mount options correctly
sysctl: always initialize i_uid/i_gid
ext4: factor out a common helper to query extent map
ext4: check the extent status again before inserting delalloc block
soc: xilinx: move PM_INIT_FINALIZE to zynqmp_pm_domains driver
drivers: soc: xilinx: check return status of get_api_version()
driver core: Cast to (void *) with __force for __percpu pointer
devres: Fix memory leakage caused by driver API devm_free_percpu()
genirq: Allow the PM device to originate from irq domain
irqchip/imx-irqsteer: Constify irq_chip struct
irqchip/imx-irqsteer: Add runtime PM support
irqchip/imx-irqsteer: Handle runtime power management correctly
remoteproc: imx_rproc: ignore mapping vdev regions
remoteproc: imx_rproc: Fix ignoring mapping vdev regions
remoteproc: imx_rproc: Skip over memory region when node value is NULL
drm/nouveau: prime: fix refcount underflow
drm/vmwgfx: Fix overlay when using Screen Targets
sched: act_ct: take care of padding in struct zones_ht_key
net/iucv: fix use after free in iucv_sock_close()
net/mlx5e: Add a check for the return value from mlx5_port_set_eth_ptys
ipv6: fix ndisc_is_useropt() handling for PIO
riscv/mm: Add handling for VM_FAULT_SIGSEGV in mm_fault_error()
platform/chrome: cros_ec_proto: Lock device when updating MKBP version
HID: wacom: Modify pen IDs
protect the fetch of ->fd[fd] in do_dup2() from mispredictions
ALSA: usb-audio: Correct surround channels in UAC1 channel map
ALSA: hda/realtek: Add quirk for Acer Aspire E5-574G
net: usb: sr9700: fix uninitialized variable use in sr_mdio_read
r8169: don't increment tx_dropped in case of NETDEV_TX_BUSY
mptcp: fix duplicate data handling
netfilter: ipset: Add list flush to cancel_gc
genirq: Allow irq_chip registration functions to take a const irq_chip
irqchip/mbigen: Fix mbigen node address layout
x86/mm: Fix pti_clone_pgtable() alignment assumption
x86/mm: Fix pti_clone_entry_text() for i386
sctp: move hlist_node and hashent out of sctp_ep_common
sctp: Fix null-ptr-deref in reuseport_add_sock().
net: usb: qmi_wwan: fix memory leak for not ip packets
net: linkwatch: use system_unbound_wq
Bluetooth: l2cap: always unlock channel in l2cap_conless_channel()
net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
l2tp: fix lockdep splat
net: fec: Stop PPS on driver remove
rcutorture: Fix rcu_torture_fwd_cb_cr() data race
md: do not delete safemode_timer in mddev_suspend
md/raid5: avoid BUG_ON() while continue reshape after reassembling
clocksource/drivers/sh_cmt: Address race condition for clock events
ACPI: battery: create alarm sysfs attribute atomically
ACPI: SBS: manage alarm sysfs attribute through psy core
selftests/bpf: Fix send_signal test with nested CONFIG_PARAVIRT
PCI: Add Edimax Vendor ID to pci_ids.h
udf: prevent integer overflow in udf_bitmap_free_blocks()
wifi: nl80211: don't give key data to userspace
btrfs: fix bitmap leak when loading free space cache on duplicate entry
drm/amdgpu: Fix the null pointer dereference to ras_manager
drm/amdgpu/pm: Fix the null pointer dereference in apply_state_adjust_rules
media: uvcvideo: Ignore empty TS packets
media: uvcvideo: Fix the bandwdith quirk on USB 3.x
jbd2: avoid memleak in jbd2_journal_write_metadata_buffer
s390/sclp: Prevent release of buffer in I/O
SUNRPC: Fix a race to wake a sync task
sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
ext4: fix wrong unit use in ext4_mb_find_by_goal
arm64: cpufeature: Force HWCAP to be based on the sysreg visible to user-space
arm64: Add Neoverse-V2 part
arm64: cputype: Add Cortex-X4 definitions
arm64: cputype: Add Neoverse-V3 definitions
arm64: errata: Add workaround for Arm errata 3194386 and 3312417
arm64: cputype: Add Cortex-X3 definitions
arm64: cputype: Add Cortex-A720 definitions
arm64: cputype: Add Cortex-X925 definitions
arm64: errata: Unify speculative SSBS errata logic
arm64: errata: Expand speculative SSBS workaround
arm64: cputype: Add Cortex-X1C definitions
arm64: cputype: Add Cortex-A725 definitions
arm64: errata: Expand speculative SSBS workaround (again)
i2c: smbus: Improve handling of stuck alerts
ASoC: codecs: wsa881x: Correct Soundwire ports mask
i2c: smbus: Send alert notifications to all devices if source not found
bpf: kprobe: remove unused declaring of bpf_kprobe_override
kprobes: Fix to check symbol prefixes correctly
spi: spi-fsl-lpspi: Fix scldiv calculation
ALSA: usb-audio: Re-add ScratchAmp quirk entries
drm/client: fix null pointer dereference in drm_client_modeset_probe
ALSA: line6: Fix racy access to midibuf
ALSA: hda: Add HP MP9 G4 Retail System AMS to force connect list
ALSA: hda/hdmi: Yet more pin fix for HP EliteDesk 800 G4
usb: vhci-hcd: Do not drop references before new references are gained
USB: serial: debug: do not echo input by default
usb: gadget: core: Check for unset descriptor
usb: gadget: u_serial: Set start_delayed during suspend
scsi: ufs: core: Fix hba->last_dme_cmd_tstamp timestamp updating logic
tick/broadcast: Move per CPU pointer access into the atomic section
ntp: Clamp maxerror and esterror to operating range
driver core: Fix uevent_show() vs driver detach race
ntp: Safeguard against time_constant overflow
scsi: mpt3sas: Remove scsi_dma_map() error messages
scsi: mpt3sas: Avoid IOMMU page faults on REPORT ZONES
irqchip/meson-gpio: support more than 8 channels gpio irq
irqchip/meson-gpio: Convert meson_gpio_irq_controller::lock to 'raw_spinlock_t'
serial: core: check uartclk for zero to avoid divide by zero
irqchip/xilinx: Fix shift out of bounds
genirq/irqdesc: Honor caller provided affinity in alloc_desc()
power: supply: axp288_charger: Fix constant_charge_voltage writes
power: supply: axp288_charger: Round constant_charge_voltage writes down
tracing: Fix overflow in get_free_elt()
padata: Fix possible divide-by-0 panic in padata_mt_helper()
x86/mtrr: Check if fixed MTRRs exist before saving them
drm/bridge: analogix_dp: properly handle zero sized AUX transactions
drm/mgag200: Set DDC timeout in milliseconds
mptcp: sched: check both directions for backup
mptcp: distinguish rcv vs sent backup flag in requests
mptcp: fix NL PM announced address accounting
mptcp: mib: count MPJ with backup flag
mptcp: export local_address
mptcp: pm: fix backup support in signal endpoints
samples: Add fs error monitoring example
samples: Make fs-monitor depend on libc and headers
Add gitignore file for samples/fanotify/ subdirectory
Fix gcc 4.9 build issue in 5.10.y
PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal
netfilter: nf_tables: set element extended ACK reporting support
netfilter: nf_tables: use timestamp to check for set element timeout
netfilter: nf_tables: allow clone callbacks to sleep
netfilter: nf_tables: prefer nft_chain_validate
drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
arm64: cpufeature: Fix the visibility of compat hwcaps
media: uvcvideo: Use entity get_cur in uvc_ctrl_set
exec: Fix ToCToU between perm check and set-uid/gid usage
nvme/pci: Add APST quirk for Lenovo N60z laptop
vdpa: Make use of PFN_PHYS/PFN_UP/PFN_DOWN helper macro
vhost-vdpa: switch to use vmf_insert_pfn() in the fault handler
wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
ARM: dts: imx6qdl-kontron-samx6i: fix phy-mode
media: Revert "media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()"
Linux 5.10.224
Change-Id: I7cd19d506c4c86df918a280598946060a494a161
Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>
|