bka
6866 Commits
| Author | SHA1 | Message | Date | |
|---|---|---|---|---|
Michael Bestas
|
3283efc9f2 |
Merge tag 'ASB-2025-10-06_12-5.10' of https://android.googlesource.com/kernel/common into android13-5.10-waipio
https://source.android.com/docs/security/bulletin/2025-10-01 * tag 'ASB-2025-10-06_12-5.10' of https://android.googlesource.com/kernel/common: BACKPORT: mm/userfaultfd: fix uninitialized output field for -EAGAIN race BACKPORT: FROMGIT: selinux: enable per-file labeling for functionfs UPSTREAM: vsock: Do not allow binding to VMADDR_PORT_ANY BACKPORT: FROMGIT: f2fs: add reserved nodes for privileged users FROMGIT: f2fs: fix condition in __allow_reserved_blocks() Revert "e1000e: fix heap overflow in e1000_set_eeprom" Revert "wifi: cw1200: cap SSID length in cw1200_do_join()" Revert "wifi: libertas: cap SSID len in lbs_associate()" Linux 5.10.243 dmaengine: mediatek: Fix a flag reuse error in mtk_cqdma_tx_status() cifs: fix integer overflow in match_server() clk: qcom: gdsc: Set retain_ff before moving to HW CTRL spi: spi-fsl-lpspi: Reset FIFO and disable module on transfer abort spi: spi-fsl-lpspi: Set correct chip-select polarity bit spi: spi-fsl-lpspi: Fix transmissions when using CONT pcmcia: Add error handling for add_interval() in do_validate_mem() ALSA: hda/hdmi: Add pin fix for another HP EliteDesk 800 G4 model net: phy: microchip: force IRQ polling mode for lan88xx net: phy: microchip: remove the use of .ack_interrupt() net: phy: microchip: implement generic .handle_interrupt() callback randstruct: gcc-plugin: Fix attribute addition randstruct: gcc-plugin: Remove bogus void member arm64: dts: marvell: uDPU: define pinctrl state for alarm LEDs vmxnet3: update MTU after device quiesce net: dsa: microchip: linearize skb for tail-tagging switches net: dsa: microchip: update tag_ksz masks for KSZ9477 family dmaengine: mediatek: Fix a possible deadlock error in mtk_cqdma_tx_status() ALSA: hda/realtek - Add new HP ZBook laptop with micmute led fixup gpio: pca953x: fix IRQ storm on system wake up iio: light: opt3001: fix deadlock due to concurrent flag access iio: chemical: pms7003: use aligned_s64 for timestamp KVM: x86: Take irqfds.lock when adding/deleting IRQ bypass producer cpufreq/sched: Explicitly synchronize limits_changed flag handling mm/slub: avoid accessing metadata when pointer is invalid in object_err() mm/khugepaged: fix ->anon_vma race e1000e: fix heap overflow in e1000_set_eeprom batman-adv: fix OOB read/write in network-coding decode scsi: lpfc: Fix buffer free/clear order in deferred receive path drm/amdgpu: drop hw access in non-DC audio fini wifi: mwifiex: Initialize the chan_stats array to zero pcmcia: Fix a NULL pointer dereference in __iodyn_find_io_region() ALSA: usb-audio: Add mute TLV for playback volumes on some devices ppp: fix memory leak in pad_compress_skb net: atm: fix memory leak in atm_register_sysfs when device_register fail ax25: properly unshare skbs in ax25_kiss_rcv() ipv4: Fix NULL vs error pointer check in inet_blackhole_dev_init() net: thunder_bgx: decrement cleanup index before use net: thunder_bgx: add a missing of_node_put wifi: libertas: cap SSID len in lbs_associate() wifi: cw1200: cap SSID length in cw1200_do_join() net: ethernet: mtk_eth_soc: fix tx vlan tag for llc packets i40e: Fix potential invalid access when MAC list is empty icmp: fix icmp_ndo_send address translation for reply direction mISDN: Fix memory leak in dsp_hwec_enable() xirc2ps_cs: fix register access when enabling FullDuplex Bluetooth: Fix use-after-free in l2cap_sock_cleanup_listen() netfilter: conntrack: helper: Replace -EEXIST by -EBUSY wifi: cfg80211: fix use-after-free in cmp_bss() arm64: dts: rockchip: Add vcc-supply to SPI flash on rk3399-pinebook-pro tee: fix NULL pointer dereference in tee_shm_put drm/amd/display: Don't warn when missing DCE encoder caps ANDROID: GKI: fix up crc issue caused by new .h inclusion Linux 5.10.242 xfs: do not propagate ENODATA disk errors into xattr code ASoC: Intel: sof_da7219_mx98360a: fail to initialize soundcard ASoC: Intel: sof_da7219_max98373: shrink platform_id below 20 characters ASoC: Intel: glk_rt5682_max98357a: shrink platform_id below 20 characters ASoC: Intel: sof_rt5682: shrink platform_id names below 20 characters ASoC: Intel: bxt_da7219_max98357a: shrink platform_id below 20 characters Revert "drm/dp: Change AUX DPCD probe address from DPCD_REV to LANE0_1_STATUS" HID: mcp2221: Handle reads greater than 60 bytes HID: mcp2221: Don't set bus speed on every transfer drm/nouveau/disp: Always accept linear modifier net: usb: qmi_wwan: add Telit Cinterion LE910C4-WWX new compositions dma/pool: Ensure DMA_DIRECT_REMAP allocations are decrypted Revert "drm/amdgpu: fix incorrect vm flags to map bo" HID: hid-ntrig: fix unable to handle page fault in ntrig_report_version() HID: wacom: Add a new Art Pen 2 HID: asus: fix UAF via HID_CLAIMED_INPUT validation KVM: x86: use array_index_nospec with indices that come from guest efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare sctp: initialize more fields in sctp_v6_from_sk() net: stmmac: xgmac: Do not enable RX FIFO Overflow interrupts net/mlx5e: Set local Xoff after FW update net/mlx5e: Update and set Xon/Xoff upon port speed set net/mlx5e: Update and set Xon/Xoff upon MTU set net: dlink: fix multicast stats being counted incorrectly atm: atmtcp: Prevent arbitrary write in atmtcp_recv_control(). Bluetooth: hci_event: Detect if HCI_EV_NUM_COMP_PKTS is unbalanced powerpc/kvm: Fix ifdef to remove build warning net: ipv4: fix regression in local-broadcast routes vhost/net: Protect ubufs with rcu read lock in vhost_net_ubuf_put() NFS: Fix a race when updating an existing write nfs: fold nfs_page_group_lock_subrequests into nfs_lock_and_join_requests x86/cpu/hygon: Add missing resctrl_cpu_detect() in bsp_init helper scsi: core: sysfs: Correct sysfs attributes access rights ftrace: Fix potential warning in trace_printk_seq during ftrace_dump pinctrl: STMFX: add missing HAS_IOMEM dependency Revert "i3c: add missing include to internal header" Revert "PCI/ACPI: Fix runtime PM ref imbalance on Hot-Plug Capable ports" Revert "media: venus: vdec: Clamp param smaller than 1fps and bigger than 240." Revert "media: dvb-frontends: w7090p: fix null-ptr-deref in w7090p_tuner_write_serpar and w7090p_tuner_read_serpar" Linux 5.10.241 alloc_fdtable(): change calling conventions. netfilter: nf_reject: don't leak dst refcount for loopback packets netfilter: nft_reject_inet: allow to use reject from inet ingress netfilter: nft_reject: unify reject init and dump into nft_reject s390/hypfs: Enable limited access during lockdown s390/hypfs: Avoid unnecessary ioctl registration in debugfs ALSA: usb-audio: Use correct sub-type for UAC3 feature unit validation net/sched: Remove unnecessary WARNING condition for empty child qdisc in htb_activate net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit ixgbe: xsk: resolve the negative overflow of budget in ixgbe_xmit_zc ipv6: sr: validate HMAC algorithm ID in seg6_hmac_info_add ALSA: usb-audio: Fix size validation in convert_chmap_v3() mlxsw: spectrum: Forward packets with an IPv4 link-local source IP iommu/amd: Avoid stack buffer overflow from kernel cmdline scsi: qla4xxx: Prevent a potential error pointer dereference RDMA/bnxt_re: Fix to initialize the PBL array cgroup/cpuset: Use static_branch_enable_cpuslocked() on cpusets_insane_config_key mm/page_alloc: detect allocation forbidden by cpuset and bail out early iio: light: as73211: Ensure buffer holes are zeroed tracing: Limit access to parser->buffer when trace_get_user failed tracing: Remove unneeded goto out logic iio: imu: inv_icm42600: change invalid data error to -EBUSY usb: xhci: Fix slot_id resource race conflict compiler: remove __ADDRESSABLE_ASM{_STR,}() again net: usbnet: Fix the wrong netif_carrier_on() call selftests: mptcp: pm: check flush doesn't reset limits gpio: rcar: Use raw_spinlock to protect register access usb: dwc3: core: remove lock of otg mode during gadget suspend/resume to avoid deadlock usb: dwc3: Remove DWC3 locking during gadget suspend/resume dm rq: don't queue request to blk-mq during DM suspend dm: rearrange core declarations for extended use from dm-zone.c uio_hv_generic: Fix another memory leak in error handling paths media: venus: vdec: Clamp param smaller than 1fps and bigger than 240. f2fs: fix to avoid out-of-boundary access in dnode page media: qcom: camss: cleanup media device allocated resource on error path drm/dp: Change AUX DPCD probe address from DPCD_REV to LANE0_1_STATUS drm/amd/display: Don't overclock DCE 6 by 15% media: venus: protect against spurious interrupts during probe media: venus: Add support for SSR trigger using fault injection media: venus: hfi: explicitly release IRQ during teardown media: venus: don't de-reference NULL pointers at IRQ time media: v4l2-ctrls: Don't reset handler's error in v4l2_ctrl_handler_free() media: v4l2-ctrls: always copy the controls on completion wifi: ath11k: fix dest ring-buffer corruption when ring is full asm-generic: Add memory barrier dma_mb() locking/barriers, kcsan: Support generic instrumentation pwm: mediatek: Fix duty and period setting pwm: mediatek: Handle hardware enable and clock enable separately pwm: mediatek: Implement .apply() callback platform/chrome: cros_ec: Unregister notifier in cros_ec_unregister() platform/chrome: cros_ec: remove unneeded label and if-condition platform/chrome: cros_ec: Use per-device lockdep key platform/chrome: cros_ec: Make cros_ec_unregister() return void ext4: fix hole length calculation overflow in non-extent inodes minmax: add umin(a, b) and umax(a, b) ACPI: processor: idle: Check acpi_fetch_acpi_dev() return value btrfs: populate otime when logging an inode item usb: musb: omap2430: fix device leak at unbind soc: qcom: mdt_loader: Ensure we don't read past the ELF header iio: adc: ad_sigma_delta: change to buffer predisable scsi: ufs: exynos: Fix programming of HCI_UTRL_NEXUS_TYPE ata: Fix SATA_MOBILE_LPM_POLICY description in Kconfig mm/ptdump: take the memory hotplug lock inside ptdump_walk_pgd() net/sched: ets: use old 'nbands' while purging unused classes net_sched: sch_ets: implement lockless ets_dump() net/sched: sch_ets: properly init all active DRR list handles NFS: Fix the setting of capabilities when automounting a new filesystem NFS: Create an nfs4_server_set_init_caps() function NFSv4: Fix nfs4_bitmap_copy_adjust() NFS: Don't set NFS_INO_REVAL_PAGECACHE in the inode cache validity scsi: pm80xx: Fix memory leak during rmmod scsi: lpfc: Fix link down processing to address NULL pointer dereference RDMA/rxe: Return CQE error if invalid lkey was supplied drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume dma-buf: insert memory barrier before updating num_fences selftests/memfd: add test for mapping write-sealed memfd read-only mm: reinstate ability to map write-sealed memfd mappings read-only mm: update memfd seal write check to include F_SEAL_WRITE mm: drop the assumption that VM_SHARED always implies writable dpaa2-eth: Fix device reference count leak in MAC endpoint handling dpaa2-eth: retry the probe when the MAC is not yet discovered on the bus dpaa2-mac: export MAC counters even when in TYPE_FIXED dpaa2-mac: split up initializing the MAC object from connecting to it ARM: 9448/1: Use an absolute path to unified.h in KBUILD_AFLAGS btrfs: fix deadlock when cloning inline extents and using qgroups block: don't call rq_qos_ops->done_bio if the bio isn't tracked ptp: Fix possible memory leak in ptp_clock_register() comedi: Fail COMEDI_INSNLIST ioctl if n_insns is too large cdc-acm: fix race between initial clearing halt and open USB: cdc-acm: do not log successful probe on later errors hv_netvsc: Fix panic during namespace deletion with VF block: Make REQ_OP_ZONE_FINISH a write operation PCI/ACPI: Fix runtime PM ref imbalance on Hot-Plug Capable ports usb: typec: fusb302: cache PD RX state net: usbnet: Avoid potential RCU stall on LINK_CHANGE event ALSA: scarlett2: Add retry on -EPROTO from scarlett2_usb_tx() x86/fpu: Delay instruction pointer fixup until after warning mm/zsmalloc: do not pass __GFP_MOVABLE if CONFIG_COMPACTION=n mm/zsmalloc.c: convert to use kmem_cache_zalloc in cache_alloc_zspage() drm/sched: Remove optimization that causes hang when killing dependent jobs ice: Fix a null pointer dereference in ice_copy_and_init_pkg() pmdomain: governor: Consider CPU latency tolerance from pm_domain_cpu_gov tracing: Add down_write(trace_event_sem) when adding trace event smb: client: fix use-after-free in crypt_message when using async crypto usb: hub: Don't try to recover devices lost during warm reset. usb: hub: avoid warm port reset during USB3 disconnect x86/mce/amd: Add default names for MCA banks and blocks iio: hid-sensor-prox: Fix incorrect OFFSET calculation f2fs: fix to do sanity check on ino and xnid kbuild: userprogs: use correct linker when mixing clang and GNU ld usb: dwc3: Ignore late xferNotReady event to prevent halt timeout USB: storage: Ignore driver CD mode for Realtek multi-mode Wi-Fi dongles usb: storage: realtek_cr: Use correct byte order for bcs->Residue USB: storage: Add unusual-devs entry for Novatek NTK96550-based camera usb: renesas-xhci: Fix External ROM access timeouts usb: quirks: Add DELAY_INIT quick for another SanDisk 3.2Gen1 Flash Drive most: core: Drop device reference after usage in get_channel() iio: proximity: isl29501: fix buffered read on big-endian systems iio: pressure: bmp280: Use IS_ERR() in bmp280_common_probe() ftrace: Also allocate and copy hash for reading of filter files fpga: zynq_fpga: Fix the wrong usage of dma_map_sgtable() use uniform permission checks for all mount propagation changes move_mount: allow to add a mount into an existing group fs/buffer: fix use-after-free when call bh_read() helper selftests: mptcp: connect: also cover alt modes drm/amd/display: Fill display clock and vblank time in dce110_fill_display_configs drm/amd/display: Find first CRTC and its line time in dce110_fill_display_configs drm/amd/display: Fix DP audio DTO1 clock source on DCE 6. drm/amd/display: Fix fractional fb divider in set_pixel_clock_v3 ALSA: hda/realtek: Add support for HP EliteBook x360 830 G6 and EliteBook 830 G6 squashfs: fix memory leak in squashfs_fill_super mmc: sdhci-pci-gli: GL9763e: Rename the gli_set_gl9763e() for consistency memstick: Fix deadlock by moving removing flag earlier sch_htb: make htb_deactivate() idempotent codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() sch_qfq: make qfq_qlen_notify() idempotent sch_hfsc: make hfsc_qlen_notify() idempotent sch_drr: make drr_qlen_notify() idempotent sch_htb: make htb_qlen_notify() idempotent net, hsr: reject HSR frame if skb can't hold tag drm/amd: Restore cached power limit during resume media: venus: Add a check for packet size after reading from shared memory media: ov2659: Fix memory leaks in ov2659_probe() media: rainshadow-cec: fix TOCTOU race condition in rain_interrupt() media: usbtv: Lock resolution while streaming media: imx: fix a potential memory leak in imx_media_csc_scaler_device_init() media: hi556: correct the test pattern configuration media: gspca: Add bounds checking to firmware parser soc/tegra: pmc: Ensure power-domains are in a known state jbd2: prevent softlockup in jbd2_log_do_checkpoint() PCI: endpoint: Fix configfs group removal on driver teardown PCI: endpoint: Fix configfs group list head handling mtd: rawnand: fsmc: Add missing check after DMA map hwmon: (gsc-hwmon) fix fan pwm setpoint show functions pwm: imx-tpm: Reset counter if CMOD is 0 wifi: ath11k: fix source ring-buffer corruption wifi: brcmsmac: Remove const from tbl_ptr parameter in wlc_lcnphy_common_read_table() zynq_fpga: use sgtable-based scatterlist wrappers ata: libata-scsi: Fix ata_to_sense_error() status handling ext4: fix reserved gdt blocks handling in fsmap ext4: fix fsmap end of range reporting with bigalloc ext4: check fast symlink for ea_inode correctly Revert "vgacon: Add check for vc_origin address range in vgacon_scroll()" lib/crypto: mips/chacha: Fix clang build and remove unneeded byteswap vt: defkeymap: Map keycodes above 127 to K_HOLE vt: keyboard: Don't process Unicode characters in K_OFF mode bus: mhi: host: Fix endianness of BHI vector table usb: dwc3: meson-g12a: fix device leaks at unbind usb: gadget: udc: renesas_usb3: fix device leak at unbind usb: atm: cxacru: Merge cxacru_upload_firmware() into cxacru_heavy_init() m68k: Fix lost column on framebuffer debug console cpufreq: armada-8k: Fix off by one in armada_8k_cpufreq_free_table() serial: 8250: fix panic due to PSLVERR media: uvcvideo: Do not mark valid metadata as invalid media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format() mm/kmemleak: avoid deadlock by moving pr_warn() outside kmemleak_lock mm/kmemleak: avoid soft lockup in __kmemleak_do_cleanup() parisc: Makefile: fix a typo in palo.conf btrfs: fix log tree replay failure due to file with 0 links and extents thunderbolt: Fix copy+paste error in match_service_id() comedi: fix race between polling and detaching usb: typec: ucsi: Update power_supply on power role change misc: rtsx: usb: Ensure mmc child device is active when card is present usb: core: config: Prevent OOB read in SS endpoint companion parsing drm/amdgpu: fix incorrect vm flags to map bo ASoC: fsl_sai: replace regmap_write with regmap_update_bits ASoC: soc-dai.c: add missing flag check at snd_soc_pcm_dai_probe() scsi: lpfc: Remove redundant assignment to avoid memory leak rtc: ds1307: remove clear of oscillator stop flag (OSF) in probe pNFS: Fix uninited ptr deref in block/scsi layout pNFS: Handle RPC size limit for layoutcommits pNFS: Fix disk addr range check in block/scsi layout pNFS: Fix stripe mapping in block/scsi layout block: avoid possible overflow for chunk_sectors check in blk_stack_limits() net: phy: smsc: add proper reset flags for LAN8710A ipmi: Fix strcpy source and destination the same kconfig: lxdialog: fix 'space' to (de)select options kconfig: gconf: fix potential memory leak in renderer_edited() kconfig: gconf: avoid hardcoding model2 in on_treeview2_cursor_changed() ipmi: Use dev_warn_ratelimited() for incorrect message warnings scsi: aacraid: Stop using PCI_IRQ_AFFINITY scsi: Fix sas_user_scan() to handle wildcard and multi-channel scans kconfig: nconf: Ensure null termination where strncpy is used kconfig: lxdialog: replace strcpy() with strncpy() in inputbox.c i2c: Force DLL0945 touchpad i2c freq to 100khz dm-mpath: don't print the "loaded" message if registering fails i3c: don't fail if GETHDRCAP is unsupported rtc: ds1307: handle oscillator stop flag (OSF) for ds1341 i3c: add missing include to internal header md: dm-zoned-target: Initialize return variable r to avoid uninitialized use media: uvcvideo: Fix bandwidth issue for Alcor camera media: dvb-frontends: w7090p: fix null-ptr-deref in w7090p_tuner_write_serpar and w7090p_tuner_read_serpar media: dvb-frontends: dib7090p: fix null-ptr-deref in dib7090p_rw_on_apb() media: usb: hdpvr: disable zero-length read messages media: tc358743: Increase FIFO trigger level to 374 media: tc358743: Return an appropriate colorspace from tc358743_set_fmt media: tc358743: Check I2C succeeded during probe pinctrl: stm32: Manage irq affinity settings scsi: mpt3sas: Correctly handle ATA device errors scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure RDMA/core: reduce stack using in nldev_stat_get_doit() RDMA: hfi1: fix possible divide-by-zero in find_hw_thread_mask() leds: leds-lp50xx: Handle reg to get correct multi_index MIPS: Don't crash in stack_top() for tasks without ABI or vDSO jfs: upper bound check of tree index in dbAllocAG jfs: Regular file corruption check jfs: truncate good inode pages when hard link is 0 scsi: bfa: Double-free fix MIPS: vpe-mt: add missing prototypes for vpe_{alloc,start,stop,free} watchdog: dw_wdt: Fix default timeout fs/orangefs: use snprintf() instead of sprintf() scsi: libiscsi: Initialize iscsi_conn->dd_data only if memory is allocated ext4: do not BUG when INLINE_DATA_FL lacks system.data xattr cifs: Fix calling CIFSFindFirst() for root path without msearch vhost: fail early when __vhost_add_used() fails net: dsa: b53: fix IP_MULTICAST_CTRL on BCM5325 uapi: in6: restore visibility of most IPv6 socket options drm/ttm: Should to return the evict error net: ncsi: Fix buffer overflow in fetching version id wifi: rtlwifi: fix possible skb memory leak in _rtl_pci_init_one_rxdesc() net: dsa: b53: prevent SWITCH_CTRL access on BCM5325 net: dsa: b53: prevent GMII_PORT_OVERRIDE_CTRL access on BCM5325 net: dsa: b53: fix b53_imp_vlan_setup for BCM5325 gve: Return error for unknown admin queue command net: vlan: Replace BUG() with WARN_ON_ONCE() in vlan_dev_* stubs wifi: iwlegacy: Check rate_idx range after addition netmem: fix skb_frag_address_safe with unreadable skbs wifi: rtlwifi: fix possible skb memory leak in `_rtl_pci_rx_interrupt()`. drm/amd/display: Fix 'failed to blank crtc!' wifi: iwlwifi: fw: Fix possible memory leak in iwl_fw_dbg_collect wifi: iwlwifi: dvm: fix potential overflow in rs_fill_link_cmd() drm/amd/display: Separate set_gsl from set_gsl_source_select net: fec: allow disable coalescing (powerpc/512) Fix possible `dma_unmap_single()` on uninitialized pointer s390/stp: Remove udelay from stp_sync_clock() wifi: iwlwifi: mvm: fix scan request validation net: thunderx: Fix format-truncation warning in bgx_acpi_match_id() net: ipv4: fix incorrect MTU in broadcast routes wifi: cfg80211: Fix interface type validation rcu: Protect ->defer_qs_iw_pending from data race net: ag71xx: Add missing check after DMA map et131x: Add missing check after DMA map be2net: Use correct byte order and format string for TCP seq and ack_seq s390/time: Use monotonic clock in get_cycles() wifi: cfg80211: reject HTC bit for management frames ktest.pl: Prevent recursion of default variable options xen/netfront: Fix TX response spurious interrupts ASoC: codecs: rt5640: Retry DEVICE_ID verification iio: adc: ad7768-1: Ensure SYNC_IN pulse minimum timing requirement ALSA: usb-audio: Avoid precedence issues in mixer_quirks macros ALSA: pcm: Rewrite recalculate_boundary() to avoid costly loop ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control platform/chrome: cros_ec_typec: Defer probe on missing EC parent platform/x86: thinkpad_acpi: Handle KCOV __init vs inline mismatches pm: cpupower: Fix the snapshot-order of tsc,mperf, clock in mperf_stop() usb: core: usb_submit_urb: downgrade type check usb: typec: intel_pmc_mux: Defer probe if SCU IPC isn't present ASoC: core: Check for rtd == NULL in snd_soc_remove_pcm_runtime() ALSA: intel8x0: Fix incorrect codec index usage in mixer for ICH4 ASoC: hdac_hdmi: Rate limit logging on connection and disconnection x86/bugs: Avoid warning when overriding return thunk mmc: rtsx_usb_sdmmc: Fix error-path in sd_set_power_mode() reset: brcmstb: Enable reset drivers for ARCH_BCM2835 ACPI: APEI: GHES: add TAINT_MACHINE_CHECK on GHES panic path mmc: sdhci-msm: Ensure SD card power isn't ON when card removed ACPI: processor: fix acpi_object initialization PM: sleep: console: Fix the black screen issue thermal: sysfs: Return ENODATA instead of EAGAIN for reads PM: runtime: Clear power.needs_force_resume in pm_runtime_reinit() selftests: tracing: Use mutex_unlock for testing glob filter ARM: tegra: Use I/O memcpy to write to IRAM gpio: tps65912: check the return value of regmap_update_bits() ASoC: soc-dapm: set bias_level if snd_soc_dapm_set_bias_level() was successed PM / devfreq: governor: Replace sscanf() with kstrtoul() in set_freq_store() ARM: rockchip: fix kernel hang during smp initialization cpufreq: Exit governor when failed to start old governor gpio: wcd934x: check the return value of regmap_update_bits() usb: xhci: Avoid showing errors during surprise removal usb: xhci: Set avg_trb_len = 8 for EP0 during Address Device Command usb: xhci: Avoid showing warnings for dying controller usb: typec: ucsi: psy: Set current max to 100mA for BC 1.2 and Default selftests/futex: Define SYS_futex on 32-bit architectures with 64-bit time_t cpufreq: CPPC: Mark driver with NEED_UPDATE_LIMITS flag usb: xhci: print xhci->xhc_state when queue_command failed securityfs: don't pin dentries twice, once is enough... ata: libata-sata: Disallow changing LPM state if not supported better lockdep annotations for simple_recursive_removal() hfs: fix not erasing deleted b-tree node issue drbd: add missing kref_get in handle_write_conflicts udf: Verify partition map count arm64: Handle KCOV __init vs inline mismatches hfsplus: don't use BUG_ON() in hfsplus_create_attributes_file() hfsplus: fix slab-out-of-bounds read in hfsplus_uni2asc() hfsplus: fix slab-out-of-bounds in hfsplus_bnode_read() hfs: fix slab-out-of-bounds in hfs_bnode_read() cpuidle: governors: menu: Avoid using invalid recent intervals data intel_idle: Allow loading ACPI tables for any family sctp: linearize cloned gso packets in sctp_rcv netfilter: ctnetlink: fix refcount leak on table dump udp: also consider secpath when evaluating ipsec use for checksumming ACPI: processor: perflib: Move problematic pr->performance check ACPI: processor: perflib: Fix initial _PPC limit application Documentation: ACPI: Fix parent device references fs: Prevent file descriptor table allocations exceeding INT_MAX sunvdc: Balance device refcount in vdc_port_mpgroup_check NFSD: detect mismatch of file handle and delegation stateid in OPEN op nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() net: dpaa: fix device leak when querying time stamp info net: gianfar: fix device leak when querying time stamp info netlink: avoid infinite retry looping in netlink_unicast() ALSA: usb-audio: Validate UAC3 cluster segment descriptors ALSA: usb-audio: Validate UAC3 power domain descriptors, too io_uring: don't use int for ABI usb: gadget : fix use-after-free in composite_dev_cleanup() mm/hmm: move pmd_to_hmm_pfn_flags() to the respective #ifdeffery MIPS: mm: tlb-r4k: Uniquify TLB entries on init USB: serial: option: add Foxconn T99W709 vsock: Do not allow binding to VMADDR_PORT_ANY net/packet: fix a race in packet_set_ring() and packet_notifier() perf/core: Prevent VMA split of buffer mappings perf/core: Exit early on perf_mmap() fail perf/core: Don't leak AUX buffer refcount on allocation failure pptp: fix pptp_xmit() error path smb: client: let recv_done() cleanup before notifying the callers. ALSA: hda/ca0132: Fix missing error handling in ca0132_alt_select_out() benet: fix BUG when creating VFs net: drop UFO packets in udp_rcv_segment() ipv6: reject malicious packets in ipv6_gso_segment() pptp: ensure minimal skb length in pptp_xmit() phy: mscc: Fix parsing of unicast frames netpoll: prevent hanging NAPI when netcons gets enabled NFS: Fixup allocation flags for nfsiod's __GFP_NORETRY XArray: Add calls to might_alloc() mm: extract might_alloc() debug check NFSv4.2: another fix for listxattr NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() pNFS/flexfiles: don't attempt pnfs on fatal DS errors pNFS/flexfiles: Avoid spurious layout returns in ff_layout_choose_ds_for_read PCI: pnv_php: Fix surprise plug detection and recovery powerpc/eeh: Make EEH driver device hotplug safe powerpc/eeh: Rely on dev->link_active_reporting powerpc/eeh: Export eeh_unfreeze_pe() PCI: pnv_php: Work around switches with broken presence detection PCI: pnv_php: Clean up allocated IRQs on unplug kconfig: qconf: fix ConfigList::updateListAllforAll() scsi: ufs: core: Use link recovery when h8 exit fails during runtime resume f2fs: fix to avoid out-of-boundary access in devs.path f2fs: fix to avoid panic in f2fs_evict_inode f2fs: fix to avoid UAF in f2fs_sync_inode_meta() f2fs: doc: fix wrong quota mount option description rtc: rv3028: fix incorrect maximum clock rate handling rtc: pcf8563: fix incorrect maximum clock rate handling rtc: pcf85063: fix incorrect maximum clock rate handling rtc: hym8563: fix incorrect maximum clock rate handling rtc: ds1307: fix incorrect maximum clock rate handling module: Restore the moduleparam prefix length check apparmor: ensure WB_HISTORY_SIZE value is a power of 2 bpf: Check flow_dissector ctx accesses are aligned vhost-scsi: Fix log flooding with target does not exist errors mtd: rawnand: atmel: set pmecc data setup time mtd: rawnand: atmel: Fix dma_mapping_error() address jfs: fix metapage reference count leak in dbAllocCtl fbdev: imxfb: Check fb_add_videomode to prevent null-ptr-deref crypto: qat - fix seq_file position update in adf_ring_next() sh: Do not use hyphen in exported variable name dmaengine: nbpfaxi: Add missing check after DMA map dmaengine: mv_xor: Fix missing check after DMA map and missing unmap fs/orangefs: Allow 2 more characters in do_c_string() soundwire: stream: restore params when prepare ports fail crypto: img-hash - Fix dma_unmap_sg() nents value hwrng: mtk - handle devm_pm_runtime_enable errors watchdog: ziirave_wdt: check record length in ziirave_firm_verify() scsi: isci: Fix dma_unmap_sg() nents value scsi: mvsas: Fix dma_unmap_sg() nents value scsi: ibmvscsi_tgt: Fix dma_unmap_sg() nents value clk: sunxi-ng: v3s: Fix de clock definition perf tests bp_account: Fix leaked file descriptor crypto: ccp - Fix crash when rebind ccp device for ccp.ko crypto: inside-secure - Fix `dma_unmap_sg()` nents value pinctrl: sunxi: Fix memory leak on krealloc failure power: supply: max14577: Handle NULL pdata when CONFIG_OF is not set clk: davinci: Add NULL check in davinci_lpsc_clk_register() mtd: fix possible integer overflow in erase_xfer() crypto: marvell/cesa - Fix engine load inaccuracy PCI: rockchip-host: Fix "Unexpected Completion" log message vrf: Drop existing dst reference in vrf_ip6_input_dst selftests: rtnetlink.sh: remove esp4_offload after test netfilter: xt_nfacct: don't assume acct name is null-terminated can: kvaser_usb: Assign netdev.dev_port based on device channel index can: kvaser_pciefd: Store device channel index wifi: brcmfmac: fix P2P discovery failure in P2P peer due to missing P2P IE Reapply "wifi: mac80211: Update skb's control block key in ieee80211_tx_dequeue()" wifi: mac80211: Check 802.11 encaps offloading in ieee80211_tx_h_select_key() mwl8k: Add missing check after DMA map wifi: rtl8xxxu: Fix RX skb size for aggregation disabled xen/gntdev: remove struct gntdev_copy_batch from stack net_sched: act_ctinfo: use atomic64_t for three counters net/sched: Restrict conditions for adding duplicating netems to qdisc tree arch: powerpc: defconfig: Drop obsolete CONFIG_NET_CLS_TCINDEX netfilter: nf_tables: adjust lockdep assertions handling drm/amd/pm/powerplay/hwmgr/smu_helper: fix order of mask and value m68k: Don't unregister boot console needlessly tcp: fix tcp_ofo_queue() to avoid including too much DUP SACK range wifi: ath11k: clear initialized flag for deinit-ed srng lists iwlwifi: Add missing check for alloc_ordered_workqueue wifi: iwlwifi: Fix memory leak in iwl_mvm_init() wifi: rtl818x: Kill URBs before clearing tx status queue caif: reduce stack size, again bpftool: Fix memory leak in dump_xx_nlmsg on realloc failure bpf, ktls: Fix data corruption when using bpf_msg_pop_data() in ktls drm/rockchip: cleanup fb when drm_gem_fb_afbc_init failed selftests/tracing: Fix false failure of subsystem event test staging: nvec: Fix incorrect null termination of battery manufacturer samples: mei: Fix building on musl libc cpufreq: Init policy->rwsem before it may be possibly used cpufreq: Initialize cpufreq-based frequency-invariance later arm64: dts: imx8mm-beacon: Fix HS400 USDHC clock speed ARM: dts: imx6ul-kontron-bl-common: Fix RTS polarity for RS485 interface usb: early: xhci-dbc: Fix early_ioremap leak Revert "vmci: Prevent the dispatching of uninitialized payloads" pps: fix poll support vmci: Prevent the dispatching of uninitialized payloads staging: fbtft: fix potential memory leak in fbtft_framebuffer_alloc() ARM: dts: vfxxx: Correctly use two tuples for timer address ASoC: ops: dynamically allocate struct snd_ctl_elem_value ASoC: soc-dai: tidyup return value of snd_soc_xlate_tdm_slot_mask() hfsplus: remove mutex_lock check in hfsplus_free_extents fs_context: fix parameter name in infofc() macro ASoC: Intel: fix SND_SOC_SOF dependencies ethernet: intel: fix building with large NR_CPUS usb: phy: mxs: disconnect line when USB charger is attached usb: chipidea: add USB PHY event ALSA: hda: Add missing NVIDIA HDA codec IDs comedi: comedi_test: Fix possible deletion of uninitialized timers x86/bugs: Fix use of possibly uninit value in amd_check_tsa_microcode() nilfs2: reject invalid file types when reading inodes gve: Fix stuck TX queue for DQ queue format e1000e: ignore uninitialized checksum word on tgp e1000e: disregard NVM checksum on tgp when valid checksum bit is not set ALSA: hda/realtek - Add mute LED support for HP Pavilion 15-eg0xxx i2c: qup: jump out of the loop in case of timeout net: hns3: fixed vf get max channels bug net: hns3: refine the struct hane3_tc_info net/sched: sch_qfq: Avoid triggering might_sleep in atomic context in qfq_delete_class net: appletalk: Fix use-after-free in AARP proxy probe net: appletalk: fix kerneldoc warnings i40e: report VF tx_dropped with tx_errors instead of tx_discards i40e: Add rx_missed_errors for buffer exhaustion RDMA/core: Rate limit GID cache warning messages regulator: core: fix NULL dereference on unbind due to stale coupling data xhci: Disable stream for xHC controller with XHCI_BROKEN_STREAMS virtio-net: ensure the received length does not exceed allocated size mm/vmalloc: leave lazy MMU mode on PTE mapping error ASoC: fsl_sai: Force a software reset when starting in consumer mode usb: dwc3: qcom: Don't leave BCR asserted usb: musb: fix gadget state on disconnect usb: musb: Add and use inline functions musb_{get,set}_state usb: hub: Fix flushing of delayed work used for post resume purposes usb: hub: Fix flushing and scheduling of delayed work that tunes runtime pm usb: hub: fix detection of high tier USB3 devices behind suspended hubs net/sched: Return NULL when htb_lookup_leaf encounters an empty rbtree net: vlan: fix VLAN 0 refcount imbalance of toggling filtering during runtime Bluetooth: L2CAP: Fix attempting to adjust outgoing MTU Bluetooth: SMP: Fix using HCI_ERROR_REMOTE_USER_TERM on timeout Bluetooth: SMP: If an unallowed command is received consider it a failure Bluetooth: Fix null-ptr-deref in l2cap_sock_resume_cb() usb: net: sierra: check for no status endpoint hwmon: (corsair-cpro) Validate the size of the received input buffer rpl: Fix use-after-free in rpl_do_srh_inline(). net/sched: sch_qfq: Fix race condition on qfq_aggregate net: emaclite: Fix missing pointer increment in aligned_read() comedi: Fix initialization of data for instructions that write to subdevice comedi: Fix use of uninitialized data in insn_rw_emulate_bits() comedi: Fix some signed shift left operations comedi: das6402: Fix bit shift out of bounds comedi: das16m1: Fix bit shift out of bounds comedi: aio_iiro_16: Fix bit shift out of bounds comedi: pcl812: Fix bit shift out of bounds iio: adc: stm32-adc: Fix race in installing chained IRQ handler iio: adc: max1363: Reorder mode_list[] entries iio: adc: max1363: Fix MAX1363_4X_CHANS/MAX1363_8X_CHANS[] soc: aspeed: lpc-snoop: Don't disable channels that aren't enabled soc: aspeed: lpc-snoop: Cleanup resources in stack-order mmc: sdhci_am654: Workaround for Errata i2312 mmc: sdhci-pci: Quirk for broken command queuing on Intel GLK-based Positivo models mmc: bcm2835: Fix dma_unmap_sg() nents value memstick: core: Zero initialize id_reg in h_memstick_read_dev_id() isofs: Verify inode mode when loading from disk dmaengine: nbpfaxi: Fix memory corruption in probe() af_packet: fix soft lockup issue caused by tpacket_snd() af_packet: fix the SO_SNDTIMEO constraint not effective on tpacked_snd() phonet/pep: Move call to pn_skb_get_dst_sockaddr() earlier in pep_sock_accept() HID: core: do not bypass hid_hw_raw_request HID: core: ensure __hid_request reserves the report ID as the first byte HID: core: ensure the allocated report buffer can contain the reserved report ID pch_uart: Fix dma_sync_sg_for_device() nents value Input: xpad - set correct controller type for Acer NGR200 thunderbolt: Fix bit masking in tb_dp_port_set_hops() i2c: stm32: fix the device used for the DMA map usb: gadget: configfs: Fix OOB read on empty string write USB: serial: ftdi_sio: add support for NDI EMGUIDE GEMINI USB: serial: option: add Foxconn T99W640 USB: serial: option: add Telit Cinterion FE910C04 (ECM) composition phy: tegra: xusb: Fix unbalanced regulator disable in UTMI PHY mode Conflicts: drivers/mmc/host/sdhci-msm.c drivers/soc/qcom/mdt_loader.c Change-Id: Ibd0c3241478d126b2744db7a07361717b132d9b3 |
||
|
Greg Kroah-Hartman
|
e918b8b0dd |
Merge 5.10.243 into android12-5.10-lts
Changes in 5.10.243 drm/amd/display: Don't warn when missing DCE encoder caps tee: fix NULL pointer dereference in tee_shm_put arm64: dts: rockchip: Add vcc-supply to SPI flash on rk3399-pinebook-pro wifi: cfg80211: fix use-after-free in cmp_bss() netfilter: conntrack: helper: Replace -EEXIST by -EBUSY Bluetooth: Fix use-after-free in l2cap_sock_cleanup_listen() xirc2ps_cs: fix register access when enabling FullDuplex mISDN: Fix memory leak in dsp_hwec_enable() icmp: fix icmp_ndo_send address translation for reply direction i40e: Fix potential invalid access when MAC list is empty net: ethernet: mtk_eth_soc: fix tx vlan tag for llc packets wifi: cw1200: cap SSID length in cw1200_do_join() wifi: libertas: cap SSID len in lbs_associate() net: thunder_bgx: add a missing of_node_put net: thunder_bgx: decrement cleanup index before use ipv4: Fix NULL vs error pointer check in inet_blackhole_dev_init() ax25: properly unshare skbs in ax25_kiss_rcv() net: atm: fix memory leak in atm_register_sysfs when device_register fail ppp: fix memory leak in pad_compress_skb ALSA: usb-audio: Add mute TLV for playback volumes on some devices pcmcia: Fix a NULL pointer dereference in __iodyn_find_io_region() wifi: mwifiex: Initialize the chan_stats array to zero drm/amdgpu: drop hw access in non-DC audio fini scsi: lpfc: Fix buffer free/clear order in deferred receive path batman-adv: fix OOB read/write in network-coding decode e1000e: fix heap overflow in e1000_set_eeprom mm/khugepaged: fix ->anon_vma race mm/slub: avoid accessing metadata when pointer is invalid in object_err() cpufreq/sched: Explicitly synchronize limits_changed flag handling KVM: x86: Take irqfds.lock when adding/deleting IRQ bypass producer iio: chemical: pms7003: use aligned_s64 for timestamp iio: light: opt3001: fix deadlock due to concurrent flag access gpio: pca953x: fix IRQ storm on system wake up ALSA: hda/realtek - Add new HP ZBook laptop with micmute led fixup dmaengine: mediatek: Fix a possible deadlock error in mtk_cqdma_tx_status() net: dsa: microchip: update tag_ksz masks for KSZ9477 family net: dsa: microchip: linearize skb for tail-tagging switches vmxnet3: update MTU after device quiesce arm64: dts: marvell: uDPU: define pinctrl state for alarm LEDs randstruct: gcc-plugin: Remove bogus void member randstruct: gcc-plugin: Fix attribute addition net: phy: microchip: implement generic .handle_interrupt() callback net: phy: microchip: remove the use of .ack_interrupt() net: phy: microchip: force IRQ polling mode for lan88xx ALSA: hda/hdmi: Add pin fix for another HP EliteDesk 800 G4 model pcmcia: Add error handling for add_interval() in do_validate_mem() spi: spi-fsl-lpspi: Fix transmissions when using CONT spi: spi-fsl-lpspi: Set correct chip-select polarity bit spi: spi-fsl-lpspi: Reset FIFO and disable module on transfer abort clk: qcom: gdsc: Set retain_ff before moving to HW CTRL cifs: fix integer overflow in match_server() dmaengine: mediatek: Fix a flag reuse error in mtk_cqdma_tx_status() Linux 5.10.243 Change-Id: I7d78c77dc924fca2e24c74e48b0511c04d615a0b Signed-off-by: Greg Kroah-Hartman <gregkh@google.com> |
||
|
Kees Cook
|
eabc92d1fb |
randstruct: gcc-plugin: Fix attribute addition
[ Upstream commit f39f18f3c3531aa802b58a20d39d96e82eb96c14 ]
Based on changes in the 2021 public version of the randstruct
out-of-tree GCC plugin[1], more carefully update the attributes on
resulting decls, to avoid tripping checks in GCC 15's
comptypes_check_enum_int() when it has been configured with
"--enable-checking=misc":
arch/arm64/kernel/kexec_image.c:132:14: internal compiler error: in comptypes_check_enum_int, at c/c-typeck.cc:1519
132 | const struct kexec_file_ops kexec_image_ops = {
| ^~~~~~~~~~~~~~
internal_error(char const*, ...), at gcc/gcc/diagnostic-global-context.cc:517
fancy_abort(char const*, int, char const*), at gcc/gcc/diagnostic.cc:1803
comptypes_check_enum_int(tree_node*, tree_node*, bool*), at gcc/gcc/c/c-typeck.cc:1519
...
Link: https://archive.org/download/grsecurity/grsecurity-3.1-5.10.41-202105280954.patch.gz [1]
Reported-by: Thiago Jung Bauermann <thiago.bauermann@linaro.org>
Closes: https://github.com/KSPP/linux/issues/367
Closes: https://lore.kernel.org/lkml/20250530000646.104457-1-thiago.bauermann@linaro.org/
Reported-by: Ingo Saitz <ingo@hannover.ccc.de>
Closes: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1104745
Fixes:
|
||
|
Kees Cook
|
a5c6c3431e |
randstruct: gcc-plugin: Remove bogus void member
[ Upstream commit e136a4062174a9a8d1c1447ca040ea81accfa6a8 ]
When building the randomized replacement tree of struct members, the
randstruct GCC plugin would insert, as the first member, a 0-sized void
member. This appears as though it was done to catch non-designated
("unnamed") static initializers, which wouldn't be stable since they
depend on the original struct layout order.
This was accomplished by having the side-effect of the "void member"
tripping an assert in GCC internals (count_type_elements) if the member
list ever needed to be counted (e.g. for figuring out the order of members
during a non-designated initialization), which would catch impossible type
(void) in the struct:
security/landlock/fs.c: In function ‘hook_file_ioctl_common’:
security/landlock/fs.c:1745:61: internal compiler error: in count_type_elements, at expr.cc:7075
1745 | .u.op = &(struct lsm_ioctlop_audit) {
| ^
static HOST_WIDE_INT
count_type_elements (const_tree type, bool for_ctor_p)
{
switch (TREE_CODE (type))
...
case VOID_TYPE:
default:
gcc_unreachable ();
}
}
However this is a redundant safety measure since randstruct uses the
__designated_initializer attribute both internally and within the
__randomized_layout attribute macro so that this would be enforced
by the compiler directly even when randstruct was not enabled (via
-Wdesignated-init).
A recent change in Landlock ended up tripping the same member counting
routine when using a full-struct copy initializer as part of an anonymous
initializer. This, however, is a false positive as the initializer is
copying between identical structs (and hence identical layouts). The
"path" member is "struct path", a randomized struct, and is being copied
to from another "struct path", the "f_path" member:
landlock_log_denial(landlock_cred(file->f_cred), &(struct landlock_request) {
.type = LANDLOCK_REQUEST_FS_ACCESS,
.audit = {
.type = LSM_AUDIT_DATA_IOCTL_OP,
.u.op = &(struct lsm_ioctlop_audit) {
.path = file->f_path,
.cmd = cmd,
},
},
...
As can be seen with the coming randstruct KUnit test, there appears to
be no behavioral problems with this kind of initialization when the void
member is removed from the randstruct GCC plugin, so remove it.
Reported-by: "Dr. David Alan Gilbert" <linux@treblig.org>
Closes: https://lore.kernel.org/lkml/Z_PRaKx7q70MKgCA@gallifrey/
Reported-by: Mark Brown <broonie@kernel.org>
Closes: https://lore.kernel.org/lkml/20250407-kbuild-disable-gcc-plugins-v1-1-5d46ae583f5e@kernel.org/
Reported-by: WangYuli <wangyuli@uniontech.com>
Closes: https://lore.kernel.org/lkml/337D5D4887277B27+3c677db3-a8b9-47f0-93a4-7809355f1381@uniontech.com/
Fixes:
|
||
|
Greg Kroah-Hartman
|
eabc85af45 |
Merge 5.10.241 into android12-5.10-lts
Changes in 5.10.241
phy: tegra: xusb: Fix unbalanced regulator disable in UTMI PHY mode
USB: serial: option: add Telit Cinterion FE910C04 (ECM) composition
USB: serial: option: add Foxconn T99W640
USB: serial: ftdi_sio: add support for NDI EMGUIDE GEMINI
usb: gadget: configfs: Fix OOB read on empty string write
i2c: stm32: fix the device used for the DMA map
thunderbolt: Fix bit masking in tb_dp_port_set_hops()
Input: xpad - set correct controller type for Acer NGR200
pch_uart: Fix dma_sync_sg_for_device() nents value
HID: core: ensure the allocated report buffer can contain the reserved report ID
HID: core: ensure __hid_request reserves the report ID as the first byte
HID: core: do not bypass hid_hw_raw_request
phonet/pep: Move call to pn_skb_get_dst_sockaddr() earlier in pep_sock_accept()
af_packet: fix the SO_SNDTIMEO constraint not effective on tpacked_snd()
af_packet: fix soft lockup issue caused by tpacket_snd()
dmaengine: nbpfaxi: Fix memory corruption in probe()
isofs: Verify inode mode when loading from disk
memstick: core: Zero initialize id_reg in h_memstick_read_dev_id()
mmc: bcm2835: Fix dma_unmap_sg() nents value
mmc: sdhci-pci: Quirk for broken command queuing on Intel GLK-based Positivo models
mmc: sdhci_am654: Workaround for Errata i2312
soc: aspeed: lpc-snoop: Cleanup resources in stack-order
soc: aspeed: lpc-snoop: Don't disable channels that aren't enabled
iio: adc: max1363: Fix MAX1363_4X_CHANS/MAX1363_8X_CHANS[]
iio: adc: max1363: Reorder mode_list[] entries
iio: adc: stm32-adc: Fix race in installing chained IRQ handler
comedi: pcl812: Fix bit shift out of bounds
comedi: aio_iiro_16: Fix bit shift out of bounds
comedi: das16m1: Fix bit shift out of bounds
comedi: das6402: Fix bit shift out of bounds
comedi: Fix some signed shift left operations
comedi: Fix use of uninitialized data in insn_rw_emulate_bits()
comedi: Fix initialization of data for instructions that write to subdevice
net: emaclite: Fix missing pointer increment in aligned_read()
net/sched: sch_qfq: Fix race condition on qfq_aggregate
rpl: Fix use-after-free in rpl_do_srh_inline().
hwmon: (corsair-cpro) Validate the size of the received input buffer
usb: net: sierra: check for no status endpoint
Bluetooth: Fix null-ptr-deref in l2cap_sock_resume_cb()
Bluetooth: SMP: If an unallowed command is received consider it a failure
Bluetooth: SMP: Fix using HCI_ERROR_REMOTE_USER_TERM on timeout
Bluetooth: L2CAP: Fix attempting to adjust outgoing MTU
net: vlan: fix VLAN 0 refcount imbalance of toggling filtering during runtime
net/sched: Return NULL when htb_lookup_leaf encounters an empty rbtree
usb: hub: fix detection of high tier USB3 devices behind suspended hubs
usb: hub: Fix flushing and scheduling of delayed work that tunes runtime pm
usb: hub: Fix flushing of delayed work used for post resume purposes
usb: musb: Add and use inline functions musb_{get,set}_state
usb: musb: fix gadget state on disconnect
usb: dwc3: qcom: Don't leave BCR asserted
ASoC: fsl_sai: Force a software reset when starting in consumer mode
mm/vmalloc: leave lazy MMU mode on PTE mapping error
virtio-net: ensure the received length does not exceed allocated size
xhci: Disable stream for xHC controller with XHCI_BROKEN_STREAMS
regulator: core: fix NULL dereference on unbind due to stale coupling data
RDMA/core: Rate limit GID cache warning messages
i40e: Add rx_missed_errors for buffer exhaustion
i40e: report VF tx_dropped with tx_errors instead of tx_discards
net: appletalk: fix kerneldoc warnings
net: appletalk: Fix use-after-free in AARP proxy probe
net/sched: sch_qfq: Avoid triggering might_sleep in atomic context in qfq_delete_class
net: hns3: refine the struct hane3_tc_info
net: hns3: fixed vf get max channels bug
i2c: qup: jump out of the loop in case of timeout
ALSA: hda/realtek - Add mute LED support for HP Pavilion 15-eg0xxx
e1000e: disregard NVM checksum on tgp when valid checksum bit is not set
e1000e: ignore uninitialized checksum word on tgp
gve: Fix stuck TX queue for DQ queue format
nilfs2: reject invalid file types when reading inodes
x86/bugs: Fix use of possibly uninit value in amd_check_tsa_microcode()
comedi: comedi_test: Fix possible deletion of uninitialized timers
ALSA: hda: Add missing NVIDIA HDA codec IDs
usb: chipidea: add USB PHY event
usb: phy: mxs: disconnect line when USB charger is attached
ethernet: intel: fix building with large NR_CPUS
ASoC: Intel: fix SND_SOC_SOF dependencies
fs_context: fix parameter name in infofc() macro
hfsplus: remove mutex_lock check in hfsplus_free_extents
ASoC: soc-dai: tidyup return value of snd_soc_xlate_tdm_slot_mask()
ASoC: ops: dynamically allocate struct snd_ctl_elem_value
ARM: dts: vfxxx: Correctly use two tuples for timer address
staging: fbtft: fix potential memory leak in fbtft_framebuffer_alloc()
vmci: Prevent the dispatching of uninitialized payloads
pps: fix poll support
Revert "vmci: Prevent the dispatching of uninitialized payloads"
usb: early: xhci-dbc: Fix early_ioremap leak
ARM: dts: imx6ul-kontron-bl-common: Fix RTS polarity for RS485 interface
arm64: dts: imx8mm-beacon: Fix HS400 USDHC clock speed
cpufreq: Initialize cpufreq-based frequency-invariance later
cpufreq: Init policy->rwsem before it may be possibly used
samples: mei: Fix building on musl libc
staging: nvec: Fix incorrect null termination of battery manufacturer
selftests/tracing: Fix false failure of subsystem event test
drm/rockchip: cleanup fb when drm_gem_fb_afbc_init failed
bpf, ktls: Fix data corruption when using bpf_msg_pop_data() in ktls
bpftool: Fix memory leak in dump_xx_nlmsg on realloc failure
caif: reduce stack size, again
wifi: rtl818x: Kill URBs before clearing tx status queue
wifi: iwlwifi: Fix memory leak in iwl_mvm_init()
iwlwifi: Add missing check for alloc_ordered_workqueue
wifi: ath11k: clear initialized flag for deinit-ed srng lists
tcp: fix tcp_ofo_queue() to avoid including too much DUP SACK range
m68k: Don't unregister boot console needlessly
drm/amd/pm/powerplay/hwmgr/smu_helper: fix order of mask and value
netfilter: nf_tables: adjust lockdep assertions handling
arch: powerpc: defconfig: Drop obsolete CONFIG_NET_CLS_TCINDEX
net/sched: Restrict conditions for adding duplicating netems to qdisc tree
net_sched: act_ctinfo: use atomic64_t for three counters
xen/gntdev: remove struct gntdev_copy_batch from stack
wifi: rtl8xxxu: Fix RX skb size for aggregation disabled
mwl8k: Add missing check after DMA map
wifi: mac80211: Check 802.11 encaps offloading in ieee80211_tx_h_select_key()
Reapply "wifi: mac80211: Update skb's control block key in ieee80211_tx_dequeue()"
wifi: brcmfmac: fix P2P discovery failure in P2P peer due to missing P2P IE
can: kvaser_pciefd: Store device channel index
can: kvaser_usb: Assign netdev.dev_port based on device channel index
netfilter: xt_nfacct: don't assume acct name is null-terminated
selftests: rtnetlink.sh: remove esp4_offload after test
vrf: Drop existing dst reference in vrf_ip6_input_dst
PCI: rockchip-host: Fix "Unexpected Completion" log message
crypto: marvell/cesa - Fix engine load inaccuracy
mtd: fix possible integer overflow in erase_xfer()
clk: davinci: Add NULL check in davinci_lpsc_clk_register()
power: supply: max14577: Handle NULL pdata when CONFIG_OF is not set
pinctrl: sunxi: Fix memory leak on krealloc failure
crypto: inside-secure - Fix `dma_unmap_sg()` nents value
crypto: ccp - Fix crash when rebind ccp device for ccp.ko
perf tests bp_account: Fix leaked file descriptor
clk: sunxi-ng: v3s: Fix de clock definition
scsi: ibmvscsi_tgt: Fix dma_unmap_sg() nents value
scsi: mvsas: Fix dma_unmap_sg() nents value
scsi: isci: Fix dma_unmap_sg() nents value
watchdog: ziirave_wdt: check record length in ziirave_firm_verify()
hwrng: mtk - handle devm_pm_runtime_enable errors
crypto: img-hash - Fix dma_unmap_sg() nents value
soundwire: stream: restore params when prepare ports fail
fs/orangefs: Allow 2 more characters in do_c_string()
dmaengine: mv_xor: Fix missing check after DMA map and missing unmap
dmaengine: nbpfaxi: Add missing check after DMA map
sh: Do not use hyphen in exported variable name
crypto: qat - fix seq_file position update in adf_ring_next()
fbdev: imxfb: Check fb_add_videomode to prevent null-ptr-deref
jfs: fix metapage reference count leak in dbAllocCtl
mtd: rawnand: atmel: Fix dma_mapping_error() address
mtd: rawnand: atmel: set pmecc data setup time
vhost-scsi: Fix log flooding with target does not exist errors
bpf: Check flow_dissector ctx accesses are aligned
apparmor: ensure WB_HISTORY_SIZE value is a power of 2
module: Restore the moduleparam prefix length check
rtc: ds1307: fix incorrect maximum clock rate handling
rtc: hym8563: fix incorrect maximum clock rate handling
rtc: pcf85063: fix incorrect maximum clock rate handling
rtc: pcf8563: fix incorrect maximum clock rate handling
rtc: rv3028: fix incorrect maximum clock rate handling
f2fs: doc: fix wrong quota mount option description
f2fs: fix to avoid UAF in f2fs_sync_inode_meta()
f2fs: fix to avoid panic in f2fs_evict_inode
f2fs: fix to avoid out-of-boundary access in devs.path
scsi: ufs: core: Use link recovery when h8 exit fails during runtime resume
kconfig: qconf: fix ConfigList::updateListAllforAll()
PCI: pnv_php: Clean up allocated IRQs on unplug
PCI: pnv_php: Work around switches with broken presence detection
powerpc/eeh: Export eeh_unfreeze_pe()
powerpc/eeh: Rely on dev->link_active_reporting
powerpc/eeh: Make EEH driver device hotplug safe
PCI: pnv_php: Fix surprise plug detection and recovery
pNFS/flexfiles: Avoid spurious layout returns in ff_layout_choose_ds_for_read
pNFS/flexfiles: don't attempt pnfs on fatal DS errors
NFS: Fix filehandle bounds checking in nfs_fh_to_dentry()
NFSv4.2: another fix for listxattr
mm: extract might_alloc() debug check
XArray: Add calls to might_alloc()
NFS: Fixup allocation flags for nfsiod's __GFP_NORETRY
netpoll: prevent hanging NAPI when netcons gets enabled
phy: mscc: Fix parsing of unicast frames
pptp: ensure minimal skb length in pptp_xmit()
ipv6: reject malicious packets in ipv6_gso_segment()
net: drop UFO packets in udp_rcv_segment()
benet: fix BUG when creating VFs
ALSA: hda/ca0132: Fix missing error handling in ca0132_alt_select_out()
smb: client: let recv_done() cleanup before notifying the callers.
pptp: fix pptp_xmit() error path
perf/core: Don't leak AUX buffer refcount on allocation failure
perf/core: Exit early on perf_mmap() fail
perf/core: Prevent VMA split of buffer mappings
net/packet: fix a race in packet_set_ring() and packet_notifier()
vsock: Do not allow binding to VMADDR_PORT_ANY
USB: serial: option: add Foxconn T99W709
MIPS: mm: tlb-r4k: Uniquify TLB entries on init
mm/hmm: move pmd_to_hmm_pfn_flags() to the respective #ifdeffery
usb: gadget : fix use-after-free in composite_dev_cleanup()
io_uring: don't use int for ABI
ALSA: usb-audio: Validate UAC3 power domain descriptors, too
ALSA: usb-audio: Validate UAC3 cluster segment descriptors
netlink: avoid infinite retry looping in netlink_unicast()
net: gianfar: fix device leak when querying time stamp info
net: dpaa: fix device leak when querying time stamp info
nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm()
NFSD: detect mismatch of file handle and delegation stateid in OPEN op
sunvdc: Balance device refcount in vdc_port_mpgroup_check
fs: Prevent file descriptor table allocations exceeding INT_MAX
Documentation: ACPI: Fix parent device references
ACPI: processor: perflib: Fix initial _PPC limit application
ACPI: processor: perflib: Move problematic pr->performance check
udp: also consider secpath when evaluating ipsec use for checksumming
netfilter: ctnetlink: fix refcount leak on table dump
sctp: linearize cloned gso packets in sctp_rcv
intel_idle: Allow loading ACPI tables for any family
cpuidle: governors: menu: Avoid using invalid recent intervals data
hfs: fix slab-out-of-bounds in hfs_bnode_read()
hfsplus: fix slab-out-of-bounds in hfsplus_bnode_read()
hfsplus: fix slab-out-of-bounds read in hfsplus_uni2asc()
hfsplus: don't use BUG_ON() in hfsplus_create_attributes_file()
arm64: Handle KCOV __init vs inline mismatches
udf: Verify partition map count
drbd: add missing kref_get in handle_write_conflicts
hfs: fix not erasing deleted b-tree node issue
better lockdep annotations for simple_recursive_removal()
ata: libata-sata: Disallow changing LPM state if not supported
securityfs: don't pin dentries twice, once is enough...
usb: xhci: print xhci->xhc_state when queue_command failed
cpufreq: CPPC: Mark driver with NEED_UPDATE_LIMITS flag
selftests/futex: Define SYS_futex on 32-bit architectures with 64-bit time_t
usb: typec: ucsi: psy: Set current max to 100mA for BC 1.2 and Default
usb: xhci: Avoid showing warnings for dying controller
usb: xhci: Set avg_trb_len = 8 for EP0 during Address Device Command
usb: xhci: Avoid showing errors during surprise removal
gpio: wcd934x: check the return value of regmap_update_bits()
cpufreq: Exit governor when failed to start old governor
ARM: rockchip: fix kernel hang during smp initialization
PM / devfreq: governor: Replace sscanf() with kstrtoul() in set_freq_store()
ASoC: soc-dapm: set bias_level if snd_soc_dapm_set_bias_level() was successed
gpio: tps65912: check the return value of regmap_update_bits()
ARM: tegra: Use I/O memcpy to write to IRAM
selftests: tracing: Use mutex_unlock for testing glob filter
PM: runtime: Clear power.needs_force_resume in pm_runtime_reinit()
thermal: sysfs: Return ENODATA instead of EAGAIN for reads
PM: sleep: console: Fix the black screen issue
ACPI: processor: fix acpi_object initialization
mmc: sdhci-msm: Ensure SD card power isn't ON when card removed
ACPI: APEI: GHES: add TAINT_MACHINE_CHECK on GHES panic path
reset: brcmstb: Enable reset drivers for ARCH_BCM2835
mmc: rtsx_usb_sdmmc: Fix error-path in sd_set_power_mode()
x86/bugs: Avoid warning when overriding return thunk
ASoC: hdac_hdmi: Rate limit logging on connection and disconnection
ALSA: intel8x0: Fix incorrect codec index usage in mixer for ICH4
ASoC: core: Check for rtd == NULL in snd_soc_remove_pcm_runtime()
usb: typec: intel_pmc_mux: Defer probe if SCU IPC isn't present
usb: core: usb_submit_urb: downgrade type check
pm: cpupower: Fix the snapshot-order of tsc,mperf, clock in mperf_stop()
platform/x86: thinkpad_acpi: Handle KCOV __init vs inline mismatches
platform/chrome: cros_ec_typec: Defer probe on missing EC parent
ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control
ALSA: pcm: Rewrite recalculate_boundary() to avoid costly loop
ALSA: usb-audio: Avoid precedence issues in mixer_quirks macros
iio: adc: ad7768-1: Ensure SYNC_IN pulse minimum timing requirement
ASoC: codecs: rt5640: Retry DEVICE_ID verification
xen/netfront: Fix TX response spurious interrupts
ktest.pl: Prevent recursion of default variable options
wifi: cfg80211: reject HTC bit for management frames
s390/time: Use monotonic clock in get_cycles()
be2net: Use correct byte order and format string for TCP seq and ack_seq
et131x: Add missing check after DMA map
net: ag71xx: Add missing check after DMA map
rcu: Protect ->defer_qs_iw_pending from data race
wifi: cfg80211: Fix interface type validation
net: ipv4: fix incorrect MTU in broadcast routes
net: thunderx: Fix format-truncation warning in bgx_acpi_match_id()
wifi: iwlwifi: mvm: fix scan request validation
s390/stp: Remove udelay from stp_sync_clock()
(powerpc/512) Fix possible `dma_unmap_single()` on uninitialized pointer
net: fec: allow disable coalescing
drm/amd/display: Separate set_gsl from set_gsl_source_select
wifi: iwlwifi: dvm: fix potential overflow in rs_fill_link_cmd()
wifi: iwlwifi: fw: Fix possible memory leak in iwl_fw_dbg_collect
drm/amd/display: Fix 'failed to blank crtc!'
wifi: rtlwifi: fix possible skb memory leak in `_rtl_pci_rx_interrupt()`.
netmem: fix skb_frag_address_safe with unreadable skbs
wifi: iwlegacy: Check rate_idx range after addition
net: vlan: Replace BUG() with WARN_ON_ONCE() in vlan_dev_* stubs
gve: Return error for unknown admin queue command
net: dsa: b53: fix b53_imp_vlan_setup for BCM5325
net: dsa: b53: prevent GMII_PORT_OVERRIDE_CTRL access on BCM5325
net: dsa: b53: prevent SWITCH_CTRL access on BCM5325
wifi: rtlwifi: fix possible skb memory leak in _rtl_pci_init_one_rxdesc()
net: ncsi: Fix buffer overflow in fetching version id
drm/ttm: Should to return the evict error
uapi: in6: restore visibility of most IPv6 socket options
net: dsa: b53: fix IP_MULTICAST_CTRL on BCM5325
vhost: fail early when __vhost_add_used() fails
cifs: Fix calling CIFSFindFirst() for root path without msearch
ext4: do not BUG when INLINE_DATA_FL lacks system.data xattr
scsi: libiscsi: Initialize iscsi_conn->dd_data only if memory is allocated
fs/orangefs: use snprintf() instead of sprintf()
watchdog: dw_wdt: Fix default timeout
MIPS: vpe-mt: add missing prototypes for vpe_{alloc,start,stop,free}
scsi: bfa: Double-free fix
jfs: truncate good inode pages when hard link is 0
jfs: Regular file corruption check
jfs: upper bound check of tree index in dbAllocAG
MIPS: Don't crash in stack_top() for tasks without ABI or vDSO
leds: leds-lp50xx: Handle reg to get correct multi_index
RDMA: hfi1: fix possible divide-by-zero in find_hw_thread_mask()
RDMA/core: reduce stack using in nldev_stat_get_doit()
scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure
scsi: mpt3sas: Correctly handle ATA device errors
pinctrl: stm32: Manage irq affinity settings
media: tc358743: Check I2C succeeded during probe
media: tc358743: Return an appropriate colorspace from tc358743_set_fmt
media: tc358743: Increase FIFO trigger level to 374
media: usb: hdpvr: disable zero-length read messages
media: dvb-frontends: dib7090p: fix null-ptr-deref in dib7090p_rw_on_apb()
media: dvb-frontends: w7090p: fix null-ptr-deref in w7090p_tuner_write_serpar and w7090p_tuner_read_serpar
media: uvcvideo: Fix bandwidth issue for Alcor camera
md: dm-zoned-target: Initialize return variable r to avoid uninitialized use
i3c: add missing include to internal header
rtc: ds1307: handle oscillator stop flag (OSF) for ds1341
i3c: don't fail if GETHDRCAP is unsupported
dm-mpath: don't print the "loaded" message if registering fails
i2c: Force DLL0945 touchpad i2c freq to 100khz
kconfig: lxdialog: replace strcpy() with strncpy() in inputbox.c
kconfig: nconf: Ensure null termination where strncpy is used
scsi: Fix sas_user_scan() to handle wildcard and multi-channel scans
scsi: aacraid: Stop using PCI_IRQ_AFFINITY
ipmi: Use dev_warn_ratelimited() for incorrect message warnings
kconfig: gconf: avoid hardcoding model2 in on_treeview2_cursor_changed()
kconfig: gconf: fix potential memory leak in renderer_edited()
kconfig: lxdialog: fix 'space' to (de)select options
ipmi: Fix strcpy source and destination the same
net: phy: smsc: add proper reset flags for LAN8710A
block: avoid possible overflow for chunk_sectors check in blk_stack_limits()
pNFS: Fix stripe mapping in block/scsi layout
pNFS: Fix disk addr range check in block/scsi layout
pNFS: Handle RPC size limit for layoutcommits
pNFS: Fix uninited ptr deref in block/scsi layout
rtc: ds1307: remove clear of oscillator stop flag (OSF) in probe
scsi: lpfc: Remove redundant assignment to avoid memory leak
ASoC: soc-dai.c: add missing flag check at snd_soc_pcm_dai_probe()
ASoC: fsl_sai: replace regmap_write with regmap_update_bits
drm/amdgpu: fix incorrect vm flags to map bo
usb: core: config: Prevent OOB read in SS endpoint companion parsing
misc: rtsx: usb: Ensure mmc child device is active when card is present
usb: typec: ucsi: Update power_supply on power role change
comedi: fix race between polling and detaching
thunderbolt: Fix copy+paste error in match_service_id()
btrfs: fix log tree replay failure due to file with 0 links and extents
parisc: Makefile: fix a typo in palo.conf
mm/kmemleak: avoid soft lockup in __kmemleak_do_cleanup()
mm/kmemleak: avoid deadlock by moving pr_warn() outside kmemleak_lock
media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format()
media: uvcvideo: Do not mark valid metadata as invalid
serial: 8250: fix panic due to PSLVERR
cpufreq: armada-8k: Fix off by one in armada_8k_cpufreq_free_table()
m68k: Fix lost column on framebuffer debug console
usb: atm: cxacru: Merge cxacru_upload_firmware() into cxacru_heavy_init()
usb: gadget: udc: renesas_usb3: fix device leak at unbind
usb: dwc3: meson-g12a: fix device leaks at unbind
bus: mhi: host: Fix endianness of BHI vector table
vt: keyboard: Don't process Unicode characters in K_OFF mode
vt: defkeymap: Map keycodes above 127 to K_HOLE
lib/crypto: mips/chacha: Fix clang build and remove unneeded byteswap
Revert "vgacon: Add check for vc_origin address range in vgacon_scroll()"
ext4: check fast symlink for ea_inode correctly
ext4: fix fsmap end of range reporting with bigalloc
ext4: fix reserved gdt blocks handling in fsmap
ata: libata-scsi: Fix ata_to_sense_error() status handling
zynq_fpga: use sgtable-based scatterlist wrappers
wifi: brcmsmac: Remove const from tbl_ptr parameter in wlc_lcnphy_common_read_table()
wifi: ath11k: fix source ring-buffer corruption
pwm: imx-tpm: Reset counter if CMOD is 0
hwmon: (gsc-hwmon) fix fan pwm setpoint show functions
mtd: rawnand: fsmc: Add missing check after DMA map
PCI: endpoint: Fix configfs group list head handling
PCI: endpoint: Fix configfs group removal on driver teardown
jbd2: prevent softlockup in jbd2_log_do_checkpoint()
soc/tegra: pmc: Ensure power-domains are in a known state
media: gspca: Add bounds checking to firmware parser
media: hi556: correct the test pattern configuration
media: imx: fix a potential memory leak in imx_media_csc_scaler_device_init()
media: usbtv: Lock resolution while streaming
media: rainshadow-cec: fix TOCTOU race condition in rain_interrupt()
media: ov2659: Fix memory leaks in ov2659_probe()
media: venus: Add a check for packet size after reading from shared memory
drm/amd: Restore cached power limit during resume
net, hsr: reject HSR frame if skb can't hold tag
sch_htb: make htb_qlen_notify() idempotent
sch_drr: make drr_qlen_notify() idempotent
sch_hfsc: make hfsc_qlen_notify() idempotent
sch_qfq: make qfq_qlen_notify() idempotent
codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog()
sch_htb: make htb_deactivate() idempotent
memstick: Fix deadlock by moving removing flag earlier
mmc: sdhci-pci-gli: GL9763e: Rename the gli_set_gl9763e() for consistency
squashfs: fix memory leak in squashfs_fill_super
ALSA: hda/realtek: Add support for HP EliteBook x360 830 G6 and EliteBook 830 G6
drm/amd/display: Fix fractional fb divider in set_pixel_clock_v3
drm/amd/display: Fix DP audio DTO1 clock source on DCE 6.
drm/amd/display: Find first CRTC and its line time in dce110_fill_display_configs
drm/amd/display: Fill display clock and vblank time in dce110_fill_display_configs
selftests: mptcp: connect: also cover alt modes
fs/buffer: fix use-after-free when call bh_read() helper
move_mount: allow to add a mount into an existing group
use uniform permission checks for all mount propagation changes
fpga: zynq_fpga: Fix the wrong usage of dma_map_sgtable()
ftrace: Also allocate and copy hash for reading of filter files
iio: pressure: bmp280: Use IS_ERR() in bmp280_common_probe()
iio: proximity: isl29501: fix buffered read on big-endian systems
most: core: Drop device reference after usage in get_channel()
usb: quirks: Add DELAY_INIT quick for another SanDisk 3.2Gen1 Flash Drive
usb: renesas-xhci: Fix External ROM access timeouts
USB: storage: Add unusual-devs entry for Novatek NTK96550-based camera
usb: storage: realtek_cr: Use correct byte order for bcs->Residue
USB: storage: Ignore driver CD mode for Realtek multi-mode Wi-Fi dongles
usb: dwc3: Ignore late xferNotReady event to prevent halt timeout
kbuild: userprogs: use correct linker when mixing clang and GNU ld
f2fs: fix to do sanity check on ino and xnid
iio: hid-sensor-prox: Fix incorrect OFFSET calculation
x86/mce/amd: Add default names for MCA banks and blocks
usb: hub: avoid warm port reset during USB3 disconnect
usb: hub: Don't try to recover devices lost during warm reset.
smb: client: fix use-after-free in crypt_message when using async crypto
tracing: Add down_write(trace_event_sem) when adding trace event
pmdomain: governor: Consider CPU latency tolerance from pm_domain_cpu_gov
ice: Fix a null pointer dereference in ice_copy_and_init_pkg()
drm/sched: Remove optimization that causes hang when killing dependent jobs
mm/zsmalloc.c: convert to use kmem_cache_zalloc in cache_alloc_zspage()
mm/zsmalloc: do not pass __GFP_MOVABLE if CONFIG_COMPACTION=n
x86/fpu: Delay instruction pointer fixup until after warning
ALSA: scarlett2: Add retry on -EPROTO from scarlett2_usb_tx()
net: usbnet: Avoid potential RCU stall on LINK_CHANGE event
usb: typec: fusb302: cache PD RX state
PCI/ACPI: Fix runtime PM ref imbalance on Hot-Plug Capable ports
block: Make REQ_OP_ZONE_FINISH a write operation
hv_netvsc: Fix panic during namespace deletion with VF
USB: cdc-acm: do not log successful probe on later errors
cdc-acm: fix race between initial clearing halt and open
comedi: Fail COMEDI_INSNLIST ioctl if n_insns is too large
ptp: Fix possible memory leak in ptp_clock_register()
block: don't call rq_qos_ops->done_bio if the bio isn't tracked
btrfs: fix deadlock when cloning inline extents and using qgroups
ARM: 9448/1: Use an absolute path to unified.h in KBUILD_AFLAGS
dpaa2-mac: split up initializing the MAC object from connecting to it
dpaa2-mac: export MAC counters even when in TYPE_FIXED
dpaa2-eth: retry the probe when the MAC is not yet discovered on the bus
dpaa2-eth: Fix device reference count leak in MAC endpoint handling
mm: drop the assumption that VM_SHARED always implies writable
mm: update memfd seal write check to include F_SEAL_WRITE
mm: reinstate ability to map write-sealed memfd mappings read-only
selftests/memfd: add test for mapping write-sealed memfd read-only
dma-buf: insert memory barrier before updating num_fences
drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume
RDMA/rxe: Return CQE error if invalid lkey was supplied
scsi: lpfc: Fix link down processing to address NULL pointer dereference
scsi: pm80xx: Fix memory leak during rmmod
NFS: Don't set NFS_INO_REVAL_PAGECACHE in the inode cache validity
NFSv4: Fix nfs4_bitmap_copy_adjust()
NFS: Create an nfs4_server_set_init_caps() function
NFS: Fix the setting of capabilities when automounting a new filesystem
net/sched: sch_ets: properly init all active DRR list handles
net_sched: sch_ets: implement lockless ets_dump()
net/sched: ets: use old 'nbands' while purging unused classes
mm/ptdump: take the memory hotplug lock inside ptdump_walk_pgd()
ata: Fix SATA_MOBILE_LPM_POLICY description in Kconfig
scsi: ufs: exynos: Fix programming of HCI_UTRL_NEXUS_TYPE
iio: adc: ad_sigma_delta: change to buffer predisable
soc: qcom: mdt_loader: Ensure we don't read past the ELF header
usb: musb: omap2430: fix device leak at unbind
btrfs: populate otime when logging an inode item
ACPI: processor: idle: Check acpi_fetch_acpi_dev() return value
minmax: add umin(a, b) and umax(a, b)
ext4: fix hole length calculation overflow in non-extent inodes
platform/chrome: cros_ec: Make cros_ec_unregister() return void
platform/chrome: cros_ec: Use per-device lockdep key
platform/chrome: cros_ec: remove unneeded label and if-condition
platform/chrome: cros_ec: Unregister notifier in cros_ec_unregister()
pwm: mediatek: Implement .apply() callback
pwm: mediatek: Handle hardware enable and clock enable separately
pwm: mediatek: Fix duty and period setting
locking/barriers, kcsan: Support generic instrumentation
asm-generic: Add memory barrier dma_mb()
wifi: ath11k: fix dest ring-buffer corruption when ring is full
media: v4l2-ctrls: always copy the controls on completion
media: v4l2-ctrls: Don't reset handler's error in v4l2_ctrl_handler_free()
media: venus: don't de-reference NULL pointers at IRQ time
media: venus: hfi: explicitly release IRQ during teardown
media: venus: Add support for SSR trigger using fault injection
media: venus: protect against spurious interrupts during probe
drm/amd/display: Don't overclock DCE 6 by 15%
drm/dp: Change AUX DPCD probe address from DPCD_REV to LANE0_1_STATUS
media: qcom: camss: cleanup media device allocated resource on error path
f2fs: fix to avoid out-of-boundary access in dnode page
media: venus: vdec: Clamp param smaller than 1fps and bigger than 240.
uio_hv_generic: Fix another memory leak in error handling paths
dm: rearrange core declarations for extended use from dm-zone.c
dm rq: don't queue request to blk-mq during DM suspend
usb: dwc3: Remove DWC3 locking during gadget suspend/resume
usb: dwc3: core: remove lock of otg mode during gadget suspend/resume to avoid deadlock
gpio: rcar: Use raw_spinlock to protect register access
selftests: mptcp: pm: check flush doesn't reset limits
net: usbnet: Fix the wrong netif_carrier_on() call
compiler: remove __ADDRESSABLE_ASM{_STR,}() again
usb: xhci: Fix slot_id resource race conflict
iio: imu: inv_icm42600: change invalid data error to -EBUSY
tracing: Remove unneeded goto out logic
tracing: Limit access to parser->buffer when trace_get_user failed
iio: light: as73211: Ensure buffer holes are zeroed
mm/page_alloc: detect allocation forbidden by cpuset and bail out early
cgroup/cpuset: Use static_branch_enable_cpuslocked() on cpusets_insane_config_key
RDMA/bnxt_re: Fix to initialize the PBL array
scsi: qla4xxx: Prevent a potential error pointer dereference
iommu/amd: Avoid stack buffer overflow from kernel cmdline
mlxsw: spectrum: Forward packets with an IPv4 link-local source IP
ALSA: usb-audio: Fix size validation in convert_chmap_v3()
ipv6: sr: validate HMAC algorithm ID in seg6_hmac_info_add
ixgbe: xsk: resolve the negative overflow of budget in ixgbe_xmit_zc
net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit
net/sched: Remove unnecessary WARNING condition for empty child qdisc in htb_activate
ALSA: usb-audio: Use correct sub-type for UAC3 feature unit validation
s390/hypfs: Avoid unnecessary ioctl registration in debugfs
s390/hypfs: Enable limited access during lockdown
netfilter: nft_reject: unify reject init and dump into nft_reject
netfilter: nft_reject_inet: allow to use reject from inet ingress
netfilter: nf_reject: don't leak dst refcount for loopback packets
alloc_fdtable(): change calling conventions.
Linux 5.10.241
Change-Id: Idccdcccd9b3f5b96e3ea9e5a692fb719ba0658ed
Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>
|
||
|
Michael Bestas
|
314aa5ce56 |
Merge tag 'ASB-2025-08-05_12-5.10' of https://android.googlesource.com/kernel/common into android13-5.10-waipio
https://source.android.com/docs/security/bulletin/2025-08-01 * tag 'ASB-2025-08-05_12-5.10' of https://android.googlesource.com/kernel/common: ANDROID: bpf: do not fail to load if log is full BACKPORT: Add support for PIO p flag UPSTREAM: rtc: lib_test: add MODULE_LICENSE Revert "mm: hugetlb: independent PMD page table shared count" UPSTREAM: f2fs: compress: fix error path of inc_valid_block_count() BACKPORT: f2fs: compress: fix to avoid inconsistence bewteen i_blocks and dnode Revert "net: Rename ->stream_memory_read to ->sock_is_readable" Revert "net: Fix TOCTOU issue in sk_is_readable()" UPSTREAM: posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() Linux 5.10.239 scsi: qedf: Use designated initializer for struct qed_fcoe_cb_ops bpf: fix precision backtracking instruction iteration arm64/ptrace: Fix stack-out-of-bounds read in regs_get_kernel_stack_nth() perf: Fix sample vs do_exit() s390/pci: Fix __pcilg_mio_inuser() inline assembly rtc: test: Fix invalid format specifier. hwmon: (occ) Fix P10 VRM temp sensors mm/huge_memory: fix dereferencing invalid pmd migration entry net_sched: sch_sfq: move the limit validation net_sched: sch_sfq: use a temporary work area for validating configuration net_sched: sch_sfq: don't allow 1 packet limit net_sched: sch_sfq: handle bigger packets net_sched: sch_sfq: annotate data-races around q->perturb_period rtc: Make rtc_time64_to_tm() support dates before 1970 rtc: Improve performance of rtc_time64_to_tm(). Add tests. bpf: Fix L4 csum update on IPv6 in CHECKSUM_COMPLETE net: Fix checksum update for ILA adj-transport net/ipv4: fix type mismatch in inet_ehash_locks_alloc() causing build failure arm64: proton-pack: Add new CPUs 'k' values for branch mitigation arm64: insn: Add support for encoding DSB arm64: bpf: Only mitigate cBPF programs loaded by unprivileged users arm64: insn: add encoders for atomic operations arm64: bpf: Add BHB mitigation to the epilogue for cBPF programs arm64: move AARCH64_BREAK_FAULT into insn-def.h arm64: spectre: increase parameters that can be used to turn off bhb mitigation individually arm64: insn: Add barrier encodings arm64: proton-pack: Expose whether the branchy loop k value arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list arm64: errata: Assume that unknown CPUs _are_ vulnerable to Spectre BHB arm64: proton-pack: Expose whether the platform is mitigated by firmware serial: sh-sci: Increment the runtime usage counter for the earlycon device ARM: dts: am335x-bone-common: Increase MDIO reset deassert delay to 50ms ARM: dts: am335x-bone-common: Increase MDIO reset deassert time ARM: dts: am335x-bone-common: Add GPIO PHY reset on revision C3 board net: atm: fix /proc/net/atm/lec handling net: atm: add lec_mutex calipso: Fix null-ptr-deref in calipso_req_{set,del}attr(). tipc: fix null-ptr-deref when acquiring remote ip of ethernet bearer tcp: fix tcp_packet_delayed() for tcp_is_non_sack_preventing_reopen() behavior atm: atmtcp: Free invalid length skb in atmtcp_c_send(). mpls: Use rcu_dereference_rtnl() in mpls_route_input_rcu(). wifi: carl9170: do not ping device which has failed to load firmware net: ice: Perform accurate aRFS flow match aoe: clean device rq_list in aoedev_downdev() mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race mm: hugetlb: independent PMD page table shared count mm/hugetlb: unshare page tables during VMA split, not before hugetlb: unshare some PMDs when splitting VMAs ALSA: hda/realtek: enable headset mic on Latitude 5420 Rugged pldmfw: Select CRC32 when PLDMFW is selected ALSA: hda/intel: Add Thinkpad E15 to PM deny list hwmon: (occ) fix unaligned accesses hwmon: (occ) Rework attribute registration for stack usage hwmon: (occ) Add soft minimum power cap attribute hwmon: (occ) Add new temperature sensor type drm/nouveau/bl: increase buffer size to avoid truncate warning erofs: remove unused trace event erofs_destroy_inode ALSA: usb-audio: Rename ALSA kcontrol PCM and PCM1 for the KTMicro sound card Input: sparcspkr - avoid unannotated fall-through HID: usbhid: Eliminate recurrent out-of-bounds bug in usbhid_parse() atm: Revert atm_account_tx() if copy_from_iter_full() fails. selinux: fix selinux_xfrm_alloc_user() to set correct ctx_len udmabuf: use sgtable-based scatterlist wrappers scsi: s390: zfcp: Ensure synchronous unit_add scsi: storvsc: Increase the timeouts to storvsc_timeout jffs2: check jffs2_prealloc_raw_node_refs() result in few other places jffs2: check that raw node were preallocated before writing summary drivers/rapidio/rio_cm.c: prevent possible heap overwrite Revert "x86/bugs: Make spectre user default depend on MITIGATION_SPECTRE_V2" on v6.6 and older powerpc/eeh: Fix missing PE bridge reconfiguration during VFIO EEH recovery platform/x86: dell_rbu: Stop overwriting data buffer platform/x86: dell_rbu: Fix list usage platform: Add Surface platform directory Revert "bus: ti-sysc: Probe for l4_wkup and l4_cfg interconnect devices first" tee: Prevent size calculation wraparound on 32-bit kernels ARM: OMAP2+: Fix l4ls clk domain handling in STANDBY bus: fsl-mc: increase MC_CMD_COMPLETION_TIMEOUT_MS value watchdog: da9052_wdt: respect TWDMIN i40e: fix MMIO write access to an invalid page in i40e_clear_hw sock: Correct error checking condition for (assign|release)_proto_idx() scsi: lpfc: Use memcpy() for BIOS version software node: Correct a OOB check in software_node_get_reference_args() vxlan: Do not treat dst cache initialization errors as fatal iommu/amd: Ensure GA log notifier callbacks finish running before module unload scsi: lpfc: Fix lpfc_check_sli_ndlp() handling for GEN_REQUEST64 commands clk: rockchip: rk3036: mark ddrphy as critical wifi: mac80211: do not offer a mesh path if forwarding is disabled net: mlx4: add SOF_TIMESTAMPING_TX_SOFTWARE flag when getting ts info pinctrl: armada-37xx: propagate error from armada_37xx_gpio_get() pinctrl: armada-37xx: propagate error from armada_37xx_pmx_gpio_set_direction() pinctrl: armada-37xx: propagate error from armada_37xx_gpio_get_direction() pinctrl: armada-37xx: propagate error from armada_37xx_pmx_set_by_name() net: atlantic: generate software timestamp just before the doorbell ipv4/route: Use this_cpu_inc() for stats on PREEMPT_RT tcp: fix initial tp->rcvq_space.space value for passive TS enabled flows tcp: always seek for minimal rtt in tcp_rcv_rtt_update() net: dlink: add synchronization for stats update i2c: npcm: Add clock toggle recovery sctp: Do not wake readers in __sctp_write_space() wifi: mt76: mt76x2: Add support for LiteOn WN4516R,WN4519R emulex/benet: correct command version selection in be_cmd_get_stats() i2c: designware: Invoke runtime suspend on quick slave re-registration tipc: use kfree_sensitive() for aead cleanup net: macb: Check return value of dma_set_mask_and_coherent() cpufreq: Force sync policy boost with global boost on sysfs update thermal/drivers/qcom/tsens: Update conditions to strictly evaluate for IP v2+ nios2: force update_mmu_cache on spurious tlb-permission--related pagefaults media: platform: exynos4-is: Add hardware sync wait to fimc_is_hw_change_mode() media: tc358743: ignore video while HPD is low drm/amdkfd: Set SDMA_RLCx_IB_CNTL/SWITCH_INSIDE_IB drm/msm/dpu: don't select single flush for active CTL blocks jfs: Fix null-ptr-deref in jfs_ioc_trim drm/amdgpu/gfx9: fix CSIB handling drm/amdgpu/gfx8: fix CSIB handling drm/amdgpu/gfx7: fix CSIB handling ext4: prevent stale extent cache entries caused by concurrent get es_cache media: uapi: v4l: Change V4L2_TYPE_IS_CAPTURE condition sunrpc: fix race in cache cleanup causing stale nextcheck time drm/amdgpu/gfx10: fix CSIB handling media: rkvdec: Initialize the m2m context before the controls drm/msm/a6xx: Increase HFI response timeout jfs: fix array-index-out-of-bounds read in add_missing_indices drm/amd/display: Add NULL pointer checks in dm_force_atomic_commit() ext4: ext4: unify EXT4_EX_NOCACHE|NOFAIL flags in ext4_ext_remove_space() media: uapi: v4l: Fix V4L2_TYPE_IS_OUTPUT condition drm/msm/hdmi: add runtime PM calls to DDC transfer function exfat: fix double free in delayed_free drm/bridge: analogix_dp: Add irq flag IRQF_NO_AUTOEN instead of calling disable_irq() sunrpc: update nextcheck time when adding new cache entries drm/amdgpu/gfx6: fix CSIB handling ACPI: battery: negate current when discharging PM: runtime: fix denying of auto suspend in pm_suspend_timer_fn() ASoC: tegra210_ahub: Add check to of_device_get_match_data() ACPICA: utilities: Fix overflow check in vsnprintf() power: supply: bq27xxx: Retrieve again when busy ACPICA: fix acpi parse and parseext cache leaks ASoC: tas2770: Power cycle amp on ISENSE/VSENSE change ACPICA: Avoid sequence overread in call to strncmp() clocksource: Fix the CPUs' choice in the watchdog per CPU verification ACPICA: fix acpi operand cache leak in dswstate.c iio: adc: ad7606_spi: fix reg write value mask iio: imu: inv_icm42600: Fix temperature calculation PCI: Fix lock symmetry in pci_slot_unlock() PCI: Add ACS quirk for Loongson PCIe uio_hv_generic: Use correct size for interrupt and monitor pages regulator: max14577: Add error check for max14577_read_reg() mips: Add -std= flag specified in KBUILD_CFLAGS to vdso CFLAGS staging: iio: ad5933: Correct settling cycles encoding per datasheet net: ch9200: fix uninitialised access during mii_nway_restart ftrace: Fix UAF when lookup kallsym after ftrace disabled dm-mirror: fix a tiny race condition mtd: nand: sunxi: Add randomizer configuration before randomizer enable mtd: rawnand: sunxi: Add randomizer configuration in sunxi_nfc_hw_ecc_write_chunk mm: fix ratelimit_pages update error in dirty_ratio_handler() ipc: fix to protect IPCS lookups using RCU clk: meson-g12a: add missing fclk_div2 to spicc parisc: fix building with gcc-15 vgacon: Add check for vc_origin address range in vgacon_scroll() fbdev: Fix fb_set_var to prevent null-ptr-deref in fb_videomode_to_var EDAC/altera: Use correct write width with the INTTEST register NFC: nci: uart: Set tty->disc_data only in success path f2fs: fix to do sanity check on sit_bitmap_size f2fs: prevent kernel warning due to negative i_nlink from corrupted image Input: ims-pcu - check record size in ims_pcu_flash_firmware() ext4: ensure i_size is smaller than maxbytes ext4: factor out ext4_get_maxbytes() ext4: fix calculation of credits for extent tree modification ext4: inline: fix len overflow in ext4_prepare_inline_data bus: fsl-mc: do not add a device-link for the UAPI used DPMCP device ata: pata_via: Force PIO for ATAPI devices on VT6415/VT6330 bus: mhi: host: Fix conflict between power_up and SYSERR ARM: omap: pmic-cpcap: do not mess around without CPCAP or OMAP4 ARM: 9447/1: arm/memremap: fix arch_memremap_can_ram_remap() media: vivid: Change the siize of the composing media: vidtv: Terminating the subsequent process of initialization failure media: videobuf2: use sgtable-based scatterlist wrappers media: venus: Fix probe error handling media: v4l2-dev: fix error handling in __video_register_device() media: gspca: Add error handling for stv06xx_read_sensor() media: cxusb: no longer judge rbuf when the write fails media: ov8856: suppress probe deferral errors wifi: rtlwifi: disable ASPM for RTL8723BE with subsystem ID 11ad:1723 jbd2: fix data-race and null-ptr-deref in jbd2_journal_dirty_metadata() nfsd: Initialize ssc before laundromat_work to prevent NULL dereference nfsd: nfsd4_spo_must_allow() must check this is a v4 compound request wifi: p54: prevent buffer-overflow in p54_rx_eeprom_readback() net/mlx5: Add error handling in mlx5_query_nic_vport_node_guid() net/mlx5_core: Add error handling inmlx5_query_nic_vport_qkey_viol_cntr() ASoC: meson: meson-card-utils: use of_property_present() for DT parsing ASoC: qcom: sdm845: Add error handling in sdm845_slim_snd_hw_params() gfs2: move msleep to sleepable context crypto: marvell/cesa - Do not chain submitted requests configfs: Do not override creating attribute file failure in populate_attrs() tcp: tcp_data_ready() must look at SOCK_DONE kbuild: hdrcheck: fix cross build with clang kbuild: userprogs: fix bitsize and target detection on clang net: usb: aqc111: debug info before sanitation calipso: unlock rcu before returning -EAFNOSUPPORT x86/iopl: Cure TIF_IO_BITMAP inconsistencies xen/arm: call uaccess_ttbr0_enable for dm_op hypercall usb: Flush altsetting 0 endpoints before reinitializating them after reset. drm/amd/display: Do not add '-mhard-float' to dcn2{1,0}_resource.o for clang kbuild: Add KBUILD_CPPFLAGS to as-option invocation kbuild: add $(CLANG_FLAGS) to KBUILD_CPPFLAGS kbuild: Add CLANG_FLAGS to as-instr mips: Include KBUILD_CPPFLAGS in CHECKFLAGS invocation drm/amd/display: Do not add '-mhard-float' to dml_ccflags for clang kbuild: Update assembler calls to use proper flags and language target MIPS: Prefer cc-option for additions to cflags MIPS: Move '-Wa,-msoft-float' check from as-option to cc-option x86/boot/compressed: prefer cc-option for CFLAGS additions posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() fs/filesystems: Fix potential unsigned integer underflow in fs_name() net_sched: ets: fix a race in ets_qdisc_change() sch_ets: make est_qlen_notify() idempotent net_sched: tbf: fix a race in tbf_change() net_sched: red: fix a race in __red_change() net_sched: prio: fix a race in prio_tune() net/mlx5: Fix return value when searching for existing flow group net/mlx5: Ensure fw pages are always allocated on same NUMA net/mdiobus: Fix potential out-of-bounds read/write access net: mdio: C22 is now optional, EOPNOTSUPP if not provided macsec: MACsec SCI assignment for ES = 0 net: Fix TOCTOU issue in sk_is_readable() net: Rename ->stream_memory_read to ->sock_is_readable bpf: Clean up sockmap related Kconfigs tcp: factorize logic into tcp_epollin_ready() i40e: retry VFLR handling if there is ongoing VF reset i40e: return false from i40e_reset_vf if reset is in progress ath10k: snoc: fix unbalanced IRQ enable in crash recovery powerpc/vas: Return -EINVAL if the offset is non-zero in mmap() ath10k: prevent deinitializing NAPI twice powerpc/vas: Move VAS API to book3s common platform ath10k: add atomic protection for device recovery net_sched: sch_sfq: fix a potential crash on gso_skb handling serial: sh-sci: Clean sci_ports[0] after at earlycon exit scsi: iscsi: Fix incorrect error path labels for flashnode operations serial: sh-sci: Move runtime PM enable to sci_probe_single() serial: sh-sci: Check if TX data was written to device in .tx_empty() arm64: dts: ti: k3-am65-main: Add missing taps to sdhci0 arm64: dts: ti: k3-am65-main: Fix sdhci node properties arm64: dts: ti: k3-am65-main: Drop deprecated ti,otap-del-sel property Input: synaptics-rmi - fix crash with unsupported versions of F34 Input: synaptics-rmi4 - convert to use sysfs_emit() APIs pmdomain: core: Fix error checking in genpd_dev_pm_attach_by_id() do_change_type(): refuse to operate on unmounted/not ours mounts PM: sleep: Fix power.is_suspended cleanup for direct-complete devices vmxnet3: correctly report gso type for UDP tunnels ice: create new Tx scheduler nodes for new queues only Bluetooth: L2CAP: Fix not responding with L2CAP_CR_LE_ENCRYPTION spi: bcm63xx-hsspi: fix shared reset spi: bcm63xx-spi: fix shared reset net/mlx4_en: Prevent potential integer overflow calculating Hz driver: net: ethernet: mtk_star_emac: fix suspend/resume issue net: tipc: fix refcount warning in tipc_aead_encrypt gve: Fix RX_BUFFERS_POSTED stat to report per-queue fill_cnt net: stmmac: platform: guarantee uniqueness of bus_id vt: remove VT_RESIZE and VT_RESIZEX from vt_compat_ioctl() MIPS: Loongson64: Add missing '#interrupt-cells' for loongson64c_ls7a iio: adc: ad7124: Fix 3dB filter frequency reading serial: Fix potential null-ptr-deref in mlb_usio_probe() usb: renesas_usbhs: Reorder clock handling and power management in probe rtc: Fix offset calculation for .start_secs < 0 PCI/DPC: Initialize aer_err_info before using it dmaengine: ti: Add NULL check in udma_probe() PCI: cadence: Fix runtime atomic count underflow rtc: sh: assign correct interrupts with DT nfs: ignore SB_RDONLY when remounting nfs nfs: clear SB_RDONLY before getting superblock perf record: Fix incorrect --user-regs comments perf tests switch-tracking: Fix timestamp comparison mfd: stmpe-spi: Correct the name used in MODULE_DEVICE_TABLE mfd: exynos-lpass: Avoid calling exynos_lpass_disable() twice in exynos_lpass_remove() rpmsg: qcom_smd: Fix uninitialized return variable in __qcom_smd_send() perf scripts python: exported-sql-viewer.py: Fix pattern matching with Python 3 backlight: pm8941: Add NULL check in wled_configure() perf ui browser hists: Set actions->thread before calling do_zoom_thread() perf build: Warn when libdebuginfod devel files are not available fbdev: core: fbcvt: avoid division by 0 in fb_cvt_hperiod() soc: aspeed: Add NULL check in aspeed_lpc_enable_snoop() soc: aspeed: lpc: Fix impossible judgment condition arm64: dts: rockchip: disable unrouted USB controllers and PHY on RK3399 Puma with Haikou ARM: dts: qcom: apq8064 merge hw splinlock into corresponding syscon device bus: fsl-mc: fix double-free on mc_dev nilfs2: do not propagate ENOENT error from nilfs_btree_propagate() calipso: Don't call calipso functions for AF_INET sk. nilfs2: add pointer check for nilfs_direct_propagate() net: lan743x: rename lan743x_reset_phy to lan743x_hw_reset_phy Squashfs: check return result of sb_min_blocksize net: usb: aqc111: fix error handling of usbnet read calls arm64: dts: imx8mm-beacon: Fix RTC capacitive load netfilter: nft_tunnel: fix geneve_opt dump ARM: dts: at91: at91sam9263: fix NAND chip selects vfio/type1: Fix error unwind in migration dirty bitmap allocation ARM: dts: at91: usb_a9263: fix GPIO for Dataflash chip select f2fs: fix to correct check conditions in f2fs_cross_rename f2fs: use d_inode(dentry) cleanup dentry->d_inode net: phy: mscc: Stop clearing the the UDPv4 checksum for L2 frames net: openvswitch: Fix the dead loop of MPLS parse netfilter: nf_tables: nft_fib_ipv6: fix VRF ipv4/ipv6 result discrepancy wifi: ath9k_htc: Abort software beacon handling if disabled s390/bpf: Store backchain even for leaf progs clk: qcom: gcc-msm8939: Fix mclk0 & mclk1 for 24 MHz bpf: Fix WARN() in get_bpf_raw_tp_regs pinctrl: at91: Fix possible out-of-boundary access libbpf: Use proper errno value in nlattr ktls, sockmap: Fix missing uncharge operation clk: bcm: rpi: Add NULL check in raspberrypi_clk_register() RDMA/mlx5: Fix error flow upon firmware failure for RQ destruction netfilter: bridge: Move specific fragmented packet to slow_path instead of dropping it f2fs: clean up w/ fscrypt_is_bounce_page() RDMA/hns: Include hnae3.h in hns_roce_hw_v2.h wifi: rtw88: do not ignore hardware read error during DPK net: ncsi: Fix GCPS 64-bit member variables f2fs: fix to do sanity check on sbi->total_valid_block_count wifi: ath11k: fix node corruption in ar->arvifs list firmware: SDEI: Allow sdei initialization without ACPI_APEI_GHES drm/tegra: rgb: Fix the unbound reference count drm/vkms: Adjust vkms_state->active_planes allocation type drm: rcar-du: Fix memory leak in rcar_du_vsps_init() selftests/seccomp: fix syscall_restart test for arm compat firmware: psci: Fix refcount leak in psci_dt_init m68k: mac: Fix macintosh_config for Mac II media: rkvdec: Fix frame size enumeration drm/vmwgfx: Add seqno waiter for sync_files spi: sh-msiof: Fix maximum DMA transfer size ACPI: OSI: Stop advertising support for "3.0 _SCP Extensions" x86/mtrr: Check if fixed-range MTRRs exist in mtrr_save_fixed_ranges() PM: wakeup: Delete space in the end of string shown by pm_show_wakelocks() power: reset: at91-reset: Optimize at91_reset() EDAC/skx_common: Fix general protection fault crypto: sun8i-ce - move fallback ahash_request to the end of the struct crypto: xts - Only add ecb if it is not already there crypto: lrw - Only add ecb if it is not already there crypto: marvell/cesa - Avoid empty transfer descriptor crypto: marvell/cesa - Handle zero-length skcipher requests x86/cpu: Sanitize CPUID(0x80000000) output crypto: sun8i-ss - do not use sg_dma_len before calling DMA functions perf/core: Fix broken throttling when max_samples_per_tick=1 gfs2: gfs2_create_inode error handling fix netfilter: nft_socket: fix sk refcount leaks thunderbolt: Do not double dequeue a configuration request usb: usbtmc: Fix timeout value in get_stb usb: storage: Ignore UAS driver for SanDisk 3.2 Gen2 storage device usb: quirks: Add NO_LPM quirk for SanDisk Extreme 55AE acpi-cpufreq: Fix nominal_freq units to KHz in get_max_boost_ratio() pinctrl: armada-37xx: set GPIO output value before setting direction pinctrl: armada-37xx: use correct OUTPUT_VAL register for GPIOs > 31 tracing: Fix compilation warning on arm32 ANDROID: fix kernelci build breaks for dcn_calcs FROMGIT: f2fs: sysfs: export linear_lookup in features directory FROMGIT: f2fs: sysfs: add encoding_flags entry FROMGIT: f2fs: support to disable linear lookup fallback Revert "ANDROID: usb: Optimization the transfer rate of accessory mode in USB3.2 mode" BACKPORT: binder: Create safe versions of binder log files UPSTREAM: binder: Refactor binder_node print synchronization Revert "ipv6: save dontfrag in cork" UPSTREAM: tracing: Fix compilation warning on arm32 Revert "coredump: hand a pidfd to the usermode coredump helper" Revert "tcp: bring back NUMA dispersion in inet_ehash_locks_alloc()" Linux 5.10.238 perf/arm-cmn: Initialise cmn->cpu earlier xen/swiotlb: relax alignment requirements platform/x86: thinkpad_acpi: Ignore battery threshold change event notification platform/x86: fujitsu-laptop: Support Lifebook S2110 hotkeys tpm: tis: Double the timeout B to 4s spi: spi-sun4i: fix early activation um: let 'make clean' properly clean underlying SUBARCH as well platform/x86: thinkpad_acpi: Support also NEC Lavie X1475JAS nfs: don't share pNFS DS connections between net namespaces HID: quirks: Add ADATA XPG alpha wireless mouse support coredump: hand a pidfd to the usermode coredump helper fork: use pidfd_prepare() pid: add pidfd_prepare() coredump: fix error handling for replace_fd() net_sched: hfsc: Address reentrant enqueue adding class to eltree twice smb: client: Reset all search buffer pointers when releasing buffer smb: client: Fix use-after-free in cifs_fill_dirent drm/i915/gvt: fix unterminated-string-initialization warning kbuild: Disable -Wdefault-const-init-unsafe spi: spi-fsl-dspi: Reset SR flags before sending a new message spi: spi-fsl-dspi: Halt the module after a new message transfer spi: spi-fsl-dspi: restrict register range for regmap access mm/page_alloc.c: avoid infinite retries caused by cpuset race memcg: always call cond_resched() after fn() drm/edid: fixed the bug that hdr metadata was not reset llc: fix data loss when reading from a socket in llc_ui_recvmsg() ALSA: pcm: Fix race of buffer access at PCM OSS layer can: bcm: add missing rcu read protection for procfs content can: bcm: add locking for bcm_op runtime updates padata: do not leak refcount in reorder_work crypto: algif_hash - fix double free in hash_accept net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() net: dwmac-sun8i: Use parsed internal PHY address instead of 1 bridge: netfilter: Fix forwarding of fragmented packets xfrm: Sanitize marks before insert __legitimize_mnt(): check for MNT_SYNC_UMOUNT should be under mount_lock xenbus: Allow PVH dom0 a non-local xenstore btrfs: correct the order of prelim_ref arguments in btrfs__prelim_ref nvmet-tcp: don't restore null sk_state_change ALSA: hda/realtek: Add quirk for HP Spectre x360 15-df1xxx ASoC: Intel: bytcr_rt5640: Add DMI quirk for Acer Aspire SW3-013 pinctrl: meson: define the pull up/down resistor value as 60 kOhm drm: Add valid clones check drm/atomic: clarify the rules around drm_atomic_state->allow_modeset regulator: ad5398: Add device tree support spi: zynqmp-gqspi: Always acknowledge interrupts wifi: rtw88: Don't use static local variable in rtw8822b_set_tx_power_index_by_rate perf/amd/ibs: Fix perf_ibs_op.cnt_mask for CurCnt bpftool: Fix readlink usage in get_fd_type drm/ast: Find VBIOS mode from regular display size HID: usbkbd: Fix the bit shift number for LED_KANA scsi: st: Restore some drive settings after reset scsi: lpfc: Handle duplicate D_IDs in ndlp search-by D_ID routine rcu: fix header guard for rcu_all_qs() rcu: handle quiescent states for PREEMPT_RCU=n, PREEMPT_COUNT=y vxlan: Annotate FDB data races hwmon: (xgene-hwmon) use appropriate type for the latency value wifi: rtw88: Fix download_firmware_validate() for RTL8814AU ip: fib_rules: Fetch net from fib_rule in fib[46]_rule_configure(). net/mlx5e: reduce rep rxq depth to 256 for ECPF net/mlx5e: set the tx_queue_len for pfifo_fast net/mlx5: Extend Ethtool loopback selftest to support non-linear SKB drm/amd/display: Initial psr_version with correct setting phy: core: don't require set_mode() callback for phy_get_mode() to work net/mlx4_core: Avoid impossible mlx4_db_alloc() order value media: v4l: Memset argument to 0 before calling get_mbus_config pad op smack: recognize ipv4 CIPSO w/o categories pinctrl: devicetree: do not goto err when probing hogs in pinctrl_dt_to_map ASoC: soc-dai: check return value at snd_soc_dai_set_tdm_slot() ASoC: tas2764: Power up/down amp on mute ops ASoC: ops: Enforce platform maximum on initial value net/mlx5: Apply rate-limiting to high temperature warning net/mlx5: Modify LSB bitmask in temperature event to include only the first bit ACPI: HED: Always initialize before evged PCI: Fix old_size lower bound in calculate_iosize() too eth: mlx4: don't try to complete XDP frames in netpoll can: c_can: Use of_property_present() to test existence of DT property EDAC/ie31200: work around false positive build warning net: pktgen: fix access outside of user given buffer in pktgen_thread_write() wifi: rtw88: Fix rtw_desc_to_mcsrate() to handle MCS16-31 wifi: rtw88: Fix rtw_init_ht_cap() for RTL8814AU wifi: rtw88: Fix rtw_init_vht_cap() for RTL8814AU scsi: mpt3sas: Send a diag reset if target reset fails clocksource: mips-gic-timer: Enable counter when CPUs start MIPS: pm-cps: Use per-CPU variables as per-CPU, not per-core MIPS: Use arch specific syscall name match function libbpf: Fix out-of-bound read cpuidle: menu: Avoid discarding useful information x86/nmi: Add an emergency handler in nmi_desc & use it in nmi_shootdown_cpus() soc: ti: k3-socinfo: Do not use syscon helper to build regmap bonding: report duplicate MAC address in all situations net: xgene-v2: remove incorrect ACPI_PTR annotation drm/amdkfd: KFD release_work possible circular locking net/mlx5: Avoid report two health errors on same syndrome PCI: brcmstb: Add a softdep to MIP MSI-X driver PCI: brcmstb: Expand inbound window size up to 64GB fpga: altera-cvp: Increase credit timeout drm/mediatek: mtk_dpi: Add checks for reg_h_fre_con existence hwmon: (gpio-fan) Add missing mutex locks x86/bugs: Make spectre user default depend on MITIGATION_SPECTRE_V2 clk: imx8mp: inform CCF of maximum frequency of clocks ipv4: fib: Move fib_valid_key_len() to rtm_to_fib_config(). net: pktgen: fix mpls maximum labels list parsing net: ethernet: ti: cpsw_new: populate netdev of_node pinctrl: bcm281xx: Use "unsigned int" instead of bare "unsigned" media: cx231xx: set device_caps for 417 drm/amdgpu: Do not program AGP BAR regs under SRIOV in gfxhub_v1_0.c orangefs: Do not truncate file size dm cache: prevent BUG_ON by blocking retries on failed device resumes media: c8sectpfe: Call of_node_put(i2c_bus) only once in c8sectpfe_probe() ARM: tegra: Switch DSI-B clock parent to PLLD on Tegra114 ieee802154: ca8210: Use proper setters and getters for bitwise types rtc: ds1307: stop disabling alarms on probe tcp: bring back NUMA dispersion in inet_ehash_locks_alloc() powerpc/prom_init: Fixup missing #size-cells on PowerBook6,7 arm64: tegra: p2597: Fix gpio for vdd-1v8-dis regulator ipv6: save dontfrag in cork mmc: sdhci: Disable SD card clock before changing parameters arm64/mm: Check PUD_TYPE_TABLE in pud_bad() netfilter: conntrack: Bound nf_conntrack sysctl writes posix-timers: Add cond_resched() to posix_timer_add() search loop xen: Add support for XenServer 6.1 platform device dm: restrict dm device size to 2^63-512 bytes kbuild: fix argument parsing in scripts/config rtc: rv3032: fix EERD location tcp: reorganize tcp_in_ack_event() and tcp_count_delivered() scsi: st: ERASE does not change tape location scsi: st: Tighten the page format heuristics with MODE SELECT ext4: reorder capability check last um: Update min_low_pfn to match changes in uml_reserved um: Store full CSGSFS and SS register from mcontext btrfs: send: return -ENAMETOOLONG when attempting a path that is too long btrfs: avoid linker error in btrfs_find_create_tree_block() i2c: pxa: fix call balance of i2c->clk handling routines i2c: qup: Vote for interconnect bandwidth to DRAM mmc: host: Wait for Vdd to settle on card power off libnvdimm/labels: Fix divide error in nd_label_data_init() pNFS/flexfiles: Report ENETDOWN as a connection error tools/build: Don't pass test log files to linker dql: Fix dql->limit value when reset. thermal/drivers/qoriq: Power down TMU on system suspend SUNRPC: rpcbind should never reset the port to the value '0' SUNRPC: rpc_clnt_set_transport() must not change the autobind setting NFSv4: Treat ENETUNREACH errors as fatal for state recovery fbdev: core: tileblit: Implement missing margin clearing for tileblit fbcon: Use correct erase colour for clearing in fbcon fbdev: fsl-diu-fb: add missing device_remove_file() mailbox: use error ret code of of_parse_phandle_with_args() NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() kconfig: merge_config: use an empty file as initfile cgroup: Fix compilation issue due to cgroup_mutex not being exported dma-mapping: avoid potential unused data compilation warning scsi: target: iscsi: Fix timeout on deleted connection ice: arfs: fix use-after-free when freeing @rx_cpu_rmap netfilter: nf_tables: do not defer rule destruction via call_rcu netfilter: nf_tables: wait for rcu grace period on net_device removal netfilter: nf_tables: pass nft_chain to destroy function, not nft_ctx btrfs: don't BUG_ON() when 0 reference count at btrfs_lookup_extent_info() selftests/mm: compaction_test: support platform with huge mount of memory usb: typec: fix pm usage counter imbalance in ucsi_ccg_sync_control() usb: typec: fix potential array underflow in ucsi_ccg_sync_control() usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute group drm/vmwgfx: Fix a deadlock in dma buf fence polling ASoC: q6afe-clocks: fix reprobing of the driver clocksource/i8253: Use raw_spinlock_irqsave() in clockevent_i8253_disable() dmaengine: ti: k3-udma: Use cap_mask directly from dma_device structure instead of a local copy dmaengine: ti: k3-udma: Add missing locking wifi: mt76: disable napi on driver removal phy: renesas: rcar-gen3-usb2: Set timing registers only once phy: Fix error handling in tegra_xusb_port_init tracing: samples: Initialize trace_array_printk() with the correct function ALSA: es1968: Add error handling for snd_pcm_hw_constraint_pow2() ACPI: PPTT: Fix processor subtable walk dmaengine: Revert "dmaengine: dmatest: Fix dmatest waiting less when interrupted" NFSv4/pnfs: Reset the layout state after a layoutreturn qlcnic: fix memory leak in qlcnic_sriov_channel_cfg_cmd() ALSA: sh: SND_AICA should depend on SH_DMA_API net: dsa: sja1105: discard incoming frames in BR_STATE_LISTENING net: cadence: macb: Fix a possible deadlock in macb_halt_tx. net_sched: Flush gso_skb list too during ->change() spi: loopback-test: Do not split 1024-byte hexdumps nfs: handle failure of nfs_get_lock_context in unlock path RDMA/rxe: Fix slab-use-after-free Read in rxe_queue_cleanup bug iio: chemical: sps30: use aligned_s64 for timestamp iio: adc: ad7768-1: Fix insufficient alignment of timestamp. platform/x86: asus-wmi: Fix wlan_ctrl_by_user detection do_umount(): add missing barrier before refcount checks in sync case nvme: unblock ctrl state transition for firmware update drm/panel: simple: Update timings for AUO G101EVN010 MIPS: Fix MAX_REG_OFFSET iio: adc: dln2: Use aligned_s64 for timestamp types: Complement the aligned types with signed 64-bit one usb: usbtmc: Fix erroneous generic_read ioctl return usb: usbtmc: Fix erroneous wait_srq ioctl return usb: usbtmc: Fix erroneous get_stb ioctl error returns USB: usbtmc: use interruptible sleep in usbtmc_read usb: typec: ucsi: displayport: Fix NULL pointer access usb: typec: tcpm: delay SNK_TRY_WAIT_DEBOUNCE to SRC_TRYWAIT transition usb: host: tegra: Prevent host controller crash when OTG port is used usb: gadget: tegra-xudc: ACK ST_RC after clearing CTRL_RUN ocfs2: stop quota recovery before disabling quotas ocfs2: implement handshaking with ocfs2 recovery thread ocfs2: switch osb->disable_recovery to enum module: ensure that kobject_put() is safe for module type kobjects xenbus: Use kref to track req lifetime usb: uhci-platform: Make the clock really optional iio: imu: st_lsm6dsx: fix possible lockup in st_lsm6dsx_read_tagged_fifo iio: imu: st_lsm6dsx: fix possible lockup in st_lsm6dsx_read_fifo iio: adis16201: Correct inclinometer channel resolution iio: adc: ad7606: fix serial register access staging: axis-fifo: Correct handling of tx_fifo_depth for size validation staging: axis-fifo: Remove hardware resets for user errors staging: iio: adc: ad7816: Correct conditional logic for store mode Input: synaptics - enable InterTouch on TUXEDO InfinityBook Pro 14 v5 Input: synaptics - enable SMBus for HP Elitebook 850 G1 Input: synaptics - enable InterTouch on Dell Precision M3800 Input: synaptics - enable InterTouch on Dynabook Portege X30L-G Input: synaptics - enable InterTouch on Dynabook Portege X30-D net: dsa: b53: fix learning on VLAN unaware bridges net: dsa: b53: fix VLAN ID for untagged vlan on bridge leave net: dsa: b53: allow leaky reserved multicast netfilter: ipset: fix region locking in hash types can: gw: fix RCU/BH usage in cgw_create_job() rcu/kvfree: Add kvfree_rcu_mightsleep() and kfree_rcu_mightsleep() can: gw: use call_rcu() instead of costly synchronize_rcu() openvswitch: Fix unsafe attribute parsing in output_userspace() can: mcp251xfd: mcp251xfd_remove(): fix order of unregistration calls scsi: target: Fix WRITE_SAME No Data Buffer crash dm: fix copying after src array boundaries usb: chipidea: ci_hdrc_imx: implement usb_phy_init() error handling usb: chipidea: ci_hdrc_imx: use dev_err_probe() irqchip/gic-v2m: Prevent use after free of gicv2m_get_fwnode() irqchip/gic-v2m: Mark a few functions __init irqchip/gic-v2m: Add const to of_device_id Revert "drm/meson: vclk: fix calculation of 59.94 fractional rates" of: module: add buffer overflow check in of_modalias() PCI: imx6: Skip controller_id generation logic for i.MX7D net: fec: ERR007885 Workaround for conventional TX net: lan743x: Fix memleak issue when GSO enabled nvme-tcp: fix premature queue removal and I/O failover bnxt_en: Fix ethtool -d byte order for 32-bit values net: ipv6: fix UDPv6 GSO segmentation with NAT net: dlink: Correct endianness handling of led_mode net_sched: qfq: Fix double list add in class with netem as child qdisc net_sched: ets: Fix double list add in class with netem as child qdisc net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc net_sched: drr: Fix double list add in class with netem as child qdisc net/mlx5: E-switch, Fix error handling for enabling roce net/mlx5: Remove return statement exist at the end of void function net/mlx5: E-Switch, Initialize MAC Address for Default GID net/sched: act_mirred: don't override retval if we already lost the skb tracing: Fix oob write in trace_seq_to_buffer() iommu/vt-d: Apply quirk_iommu_igfx for 8086:0044 (QM57/QS57) iommu/amd: Fix potential buffer overflow in parse_ivrs_acpihid dm: always update the array size in realloc_argv on success dm-integrity: fix a warning on invalid table line wifi: brcm80211: fmac: Add error handling for brcmf_usb_dl_writeimage() mmc: renesas_sdhi: Fix error handling in renesas_sdhi_probe amd-xgbe: Fix to ensure dependent features are toggled with RX checksum offload parisc: Fix double SIGFPE crash i2c: imx-lpi2c: Fix clock count when probe defers EDAC/altera: Set DDR and SDMMC interrupt mask before registration EDAC/altera: Test the correct error reg offset drm/nouveau: Fix WARN_ON in nouveau_fence_context_kill() ALSA: usb-audio: Add second USB ID for Jabra Evolve 65 headset Conflicts: Makefile drivers/bus/mhi/host/pm.c drivers/platform/Kconfig drivers/platform/Makefile scripts/Kbuild.include Change-Id: I301b8b5a24eeb219f74eeb64929641a8d76d6dd3 |
||
|
Yann E. MORIN
|
37205ad73d |
kconfig: lxdialog: fix 'space' to (de)select options
[ Upstream commit 694174f94ebeeb5ec5cc0e9de9b40c82057e1d95 ] In case a menu has comment without letters/numbers (eg. characters matching the regexp '^[^[:alpha:][:digit:]]+$', for example - or *), hitting space will cycle through those comments, rather than selecting/deselecting the currently-highlighted option. This is the behaviour of hitting any letter/digit: jump to the next option which prompt starts with that letter. The only letters that do not behave as such are 'y' 'm' and 'n'. Prompts that start with one of those three letters are instead matched on the first letter that is not 'y', 'm' or 'n'. Fix that by treating 'space' as we treat y/m/n, ie. as an action key, not as shortcut to jump to prompt. Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr> Signed-off-by: Peter Korsgaard <peter@korsgaard.com> Signed-off-by: Cherniaev Andrei <dungeonlords789@naver.com> [masahiro: took from Buildroot, adjusted the commit subject] Signed-off-by: Masahiro Yamada <masahiroy@kernel.org> Signed-off-by: Sasha Levin <sashal@kernel.org> |
||
|
Masahiro Yamada
|
116a981efd |
kconfig: gconf: fix potential memory leak in renderer_edited()
[ Upstream commit f72ed4c6a375e52a3f4b75615e4a89d29d8acea7 ] If gtk_tree_model_get_iter() fails, gtk_tree_path_free() is not called. Signed-off-by: Masahiro Yamada <masahiroy@kernel.org> Acked-by: Randy Dunlap <rdunlap@infradead.org> Signed-off-by: Sasha Levin <sashal@kernel.org> |
||
|
Masahiro Yamada
|
327877f082 |
kconfig: gconf: avoid hardcoding model2 in on_treeview2_cursor_changed()
[ Upstream commit cae9cdbcd9af044810bcceeb43a87accca47c71d ] The on_treeview2_cursor_changed() handler is connected to both the left and right tree views, but it hardcodes model2 (the GtkTreeModel of the right tree view). This is incorrect. Get the associated model from the view. Signed-off-by: Masahiro Yamada <masahiroy@kernel.org> Signed-off-by: Sasha Levin <sashal@kernel.org> |
||
|
Shankari Anand
|
ee777917b4 |
kconfig: nconf: Ensure null termination where strncpy is used
[ Upstream commit f468992936894c9ce3b1659cf38c230d33b77a16 ] strncpy() does not guarantee null-termination if the source string is longer than the destination buffer. Ensure the buffer is explicitly null-terminated to prevent potential string overflows or undefined behavior. Signed-off-by: Shankari Anand <shankari.ak0208@gmail.com> Signed-off-by: Masahiro Yamada <masahiroy@kernel.org> Acked-by: Randy Dunlap <rdunlap@infradead.org> Tested-by: Randy Dunlap <rdunlap@infradead.org> Tested-by: Nicolas Schier <n.schier@avm.de> Acked-by: Nicolas Schier <n.schier@avm.de> Signed-off-by: Sasha Levin <sashal@kernel.org> |
||
|
Suchit Karunakaran
|
90851a290a |
kconfig: lxdialog: replace strcpy() with strncpy() in inputbox.c
[ Upstream commit 5ac726653a1029a2eccba93bbe59e01fc9725828 ] strcpy() performs no bounds checking and can lead to buffer overflows if the input string exceeds the destination buffer size. This patch replaces it with strncpy(), and null terminates the input string. Signed-off-by: Suchit Karunakaran <suchitkarunakaran@gmail.com> Reviewed-by: Nicolas Schier <nicolas.schier@linux.dev> Signed-off-by: Masahiro Yamada <masahiroy@kernel.org> Signed-off-by: Sasha Levin <sashal@kernel.org> |
||
|
Masahiro Yamada
|
0842b64382 |
kconfig: qconf: fix ConfigList::updateListAllforAll()
[ Upstream commit 721bfe583c52ba1ea74b3736a31a9dcfe6dd6d95 ] ConfigList::updateListForAll() and ConfigList::updateListAllforAll() are identical. Commit |
||
|
Greg Kroah-Hartman
|
3d9d456ab7 |
Merge 9ba18e400d ("bus: mhi: host: Fix conflict between power_up and SYSERR") into android12-5.10-lts
Steps on the way to 5.10.239 Resolves merge conflicts in: fs/nfsd/nfssvc.c Change-Id: I6ec7fe81e413b70f489b1ffc928de97aee99d433 Signed-off-by: Greg Kroah-Hartman <gregkh@google.com> |
||
|
Nathan Chancellor
|
79a4fba715 |
kbuild: Add KBUILD_CPPFLAGS to as-option invocation
commit 43fc0a99906e04792786edf8534d8d58d1e9de0c upstream.
After commit feb843a469fb ("kbuild: add $(CLANG_FLAGS) to
KBUILD_CPPFLAGS"), there is an error while building certain PowerPC
assembly files with clang:
arch/powerpc/lib/copypage_power7.S: Assembler messages:
arch/powerpc/lib/copypage_power7.S:34: Error: junk at end of line: `0b01000'
arch/powerpc/lib/copypage_power7.S:35: Error: junk at end of line: `0b01010'
arch/powerpc/lib/copypage_power7.S:37: Error: junk at end of line: `0b01000'
arch/powerpc/lib/copypage_power7.S:38: Error: junk at end of line: `0b01010'
arch/powerpc/lib/copypage_power7.S:40: Error: junk at end of line: `0b01010'
clang: error: assembler command failed with exit code 1 (use -v to see invocation)
as-option only uses KBUILD_AFLAGS, so after removing CLANG_FLAGS from
KBUILD_AFLAGS, there is no more '--target=' or '--prefix=' flags. As a
result of those missing flags, the host target
will be tested during as-option calls and likely fail, meaning necessary
flags may not get added when building assembly files, resulting in
errors like seen above.
Add KBUILD_CPPFLAGS to as-option invocations to clear up the errors.
This should have been done in commit d5c8d6e0fa61 ("kbuild: Update
assembler calls to use proper flags and language target"), which
switched from using the assembler target to the assembler-with-cpp
target, so flags that affect preprocessing are passed along in all
relevant tests. as-option now mirrors cc-option.
Fixes: feb843a469fb ("kbuild: add $(CLANG_FLAGS) to KBUILD_CPPFLAGS")
Reported-by: Linux Kernel Functional Testing <lkft@linaro.org>
Closes: https://lore.kernel.org/CA+G9fYs=koW9WardsTtora+nMgLR3raHz-LSLr58tgX4T5Mxag@mail.gmail.com/
Signed-off-by: Nathan Chancellor <nathan@kernel.org>
Tested-by: Naresh Kamboju <naresh.kamboju@linaro.org>
Signed-off-by: Masahiro Yamada <masahiroy@kernel.org>
Signed-off-by: Nathan Chancellor <nathan@kernel.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
|
||
|
Nathan Chancellor
|
58c2cac0e7 |
kbuild: Add CLANG_FLAGS to as-instr
commit cff6e7f50bd315e5b39c4e46c704ac587ceb965f upstream.
A future change will move CLANG_FLAGS from KBUILD_{A,C}FLAGS to
KBUILD_CPPFLAGS so that '--target' is available while preprocessing.
When that occurs, the following errors appear multiple times when
building ARCH=powerpc powernv_defconfig:
ld.lld: error: vmlinux.a(arch/powerpc/kernel/head_64.o):(.text+0x12d4): relocation R_PPC64_ADDR16_HI out of range: -4611686018409717520 is not in [-2147483648, 2147483647]; references '__start___soft_mask_table'
ld.lld: error: vmlinux.a(arch/powerpc/kernel/head_64.o):(.text+0x12e8): relocation R_PPC64_ADDR16_HI out of range: -4611686018409717392 is not in [-2147483648, 2147483647]; references '__stop___soft_mask_table'
Diffing the .o.cmd files reveals that -DHAVE_AS_ATHIGH=1 is not present
anymore, because as-instr only uses KBUILD_AFLAGS, which will no longer
contain '--target'.
Mirror Kconfig's as-instr and add CLANG_FLAGS explicitly to the
invocation to ensure the target information is always present.
Signed-off-by: Nathan Chancellor <nathan@kernel.org>
Signed-off-by: Masahiro Yamada <masahiroy@kernel.org>
Signed-off-by: Nathan Chancellor <nathan@kernel.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
|
||
|
Nick Desaulniers
|
7fa1764188 |
kbuild: Update assembler calls to use proper flags and language target
commit d5c8d6e0fa61401a729e9eb6a9c7077b2d3aebb0 upstream.
as-instr uses KBUILD_AFLAGS, but as-option uses KBUILD_CFLAGS. This can
cause as-option to fail unexpectedly when CONFIG_WERROR is set, because
clang will emit -Werror,-Wunused-command-line-argument for various -m
and -f flags in KBUILD_CFLAGS for assembler sources.
Callers of as-option and as-instr should be adding flags to
KBUILD_AFLAGS / aflags-y, not KBUILD_CFLAGS / cflags-y. Use
KBUILD_AFLAGS in all macros to clear up the initial problem.
Unfortunately, -Wunused-command-line-argument can still be triggered
with clang by the presence of warning flags or macro definitions because
'-x assembler' is used, instead of '-x assembler-with-cpp', which will
consume these flags. Switch to '-x assembler-with-cpp' in places where
'-x assembler' is used, as the compiler is always used as the driver for
out of line assembler sources in the kernel.
Finally, add -Werror to these macros so that they behave consistently
whether or not CONFIG_WERROR is set.
[nathan: Reworded and expanded on problems in commit message
Use '-x assembler-with-cpp' in a couple more places]
Link: https://github.com/ClangBuiltLinux/linux/issues/1699
Suggested-by: Masahiro Yamada <masahiroy@kernel.org>
Signed-off-by: Nick Desaulniers <ndesaulniers@google.com>
Signed-off-by: Nathan Chancellor <nathan@kernel.org>
Tested-by: Linux Kernel Functional Testing <lkft@linaro.org>
Tested-by: Anders Roxell <anders.roxell@linaro.org>
Signed-off-by: Masahiro Yamada <masahiroy@kernel.org>
Signed-off-by: Nathan Chancellor <nathan@kernel.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
|
||
|
Greg Kroah-Hartman
|
2ed49dc1be |
Merge 5.10.238 into android12-5.10-lts
Changes in 5.10.238 ALSA: usb-audio: Add second USB ID for Jabra Evolve 65 headset drm/nouveau: Fix WARN_ON in nouveau_fence_context_kill() EDAC/altera: Test the correct error reg offset EDAC/altera: Set DDR and SDMMC interrupt mask before registration i2c: imx-lpi2c: Fix clock count when probe defers parisc: Fix double SIGFPE crash amd-xgbe: Fix to ensure dependent features are toggled with RX checksum offload mmc: renesas_sdhi: Fix error handling in renesas_sdhi_probe wifi: brcm80211: fmac: Add error handling for brcmf_usb_dl_writeimage() dm-integrity: fix a warning on invalid table line dm: always update the array size in realloc_argv on success iommu/amd: Fix potential buffer overflow in parse_ivrs_acpihid iommu/vt-d: Apply quirk_iommu_igfx for 8086:0044 (QM57/QS57) tracing: Fix oob write in trace_seq_to_buffer() net/sched: act_mirred: don't override retval if we already lost the skb net/mlx5: E-Switch, Initialize MAC Address for Default GID net/mlx5: Remove return statement exist at the end of void function net/mlx5: E-switch, Fix error handling for enabling roce net_sched: drr: Fix double list add in class with netem as child qdisc net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc net_sched: ets: Fix double list add in class with netem as child qdisc net_sched: qfq: Fix double list add in class with netem as child qdisc net: dlink: Correct endianness handling of led_mode net: ipv6: fix UDPv6 GSO segmentation with NAT bnxt_en: Fix ethtool -d byte order for 32-bit values nvme-tcp: fix premature queue removal and I/O failover net: lan743x: Fix memleak issue when GSO enabled net: fec: ERR007885 Workaround for conventional TX PCI: imx6: Skip controller_id generation logic for i.MX7D of: module: add buffer overflow check in of_modalias() Revert "drm/meson: vclk: fix calculation of 59.94 fractional rates" irqchip/gic-v2m: Add const to of_device_id irqchip/gic-v2m: Mark a few functions __init irqchip/gic-v2m: Prevent use after free of gicv2m_get_fwnode() usb: chipidea: ci_hdrc_imx: use dev_err_probe() usb: chipidea: ci_hdrc_imx: implement usb_phy_init() error handling dm: fix copying after src array boundaries scsi: target: Fix WRITE_SAME No Data Buffer crash can: mcp251xfd: mcp251xfd_remove(): fix order of unregistration calls openvswitch: Fix unsafe attribute parsing in output_userspace() can: gw: use call_rcu() instead of costly synchronize_rcu() rcu/kvfree: Add kvfree_rcu_mightsleep() and kfree_rcu_mightsleep() can: gw: fix RCU/BH usage in cgw_create_job() netfilter: ipset: fix region locking in hash types net: dsa: b53: allow leaky reserved multicast net: dsa: b53: fix VLAN ID for untagged vlan on bridge leave net: dsa: b53: fix learning on VLAN unaware bridges Input: synaptics - enable InterTouch on Dynabook Portege X30-D Input: synaptics - enable InterTouch on Dynabook Portege X30L-G Input: synaptics - enable InterTouch on Dell Precision M3800 Input: synaptics - enable SMBus for HP Elitebook 850 G1 Input: synaptics - enable InterTouch on TUXEDO InfinityBook Pro 14 v5 staging: iio: adc: ad7816: Correct conditional logic for store mode staging: axis-fifo: Remove hardware resets for user errors staging: axis-fifo: Correct handling of tx_fifo_depth for size validation iio: adc: ad7606: fix serial register access iio: adis16201: Correct inclinometer channel resolution iio: imu: st_lsm6dsx: fix possible lockup in st_lsm6dsx_read_fifo iio: imu: st_lsm6dsx: fix possible lockup in st_lsm6dsx_read_tagged_fifo usb: uhci-platform: Make the clock really optional xenbus: Use kref to track req lifetime module: ensure that kobject_put() is safe for module type kobjects ocfs2: switch osb->disable_recovery to enum ocfs2: implement handshaking with ocfs2 recovery thread ocfs2: stop quota recovery before disabling quotas usb: gadget: tegra-xudc: ACK ST_RC after clearing CTRL_RUN usb: host: tegra: Prevent host controller crash when OTG port is used usb: typec: tcpm: delay SNK_TRY_WAIT_DEBOUNCE to SRC_TRYWAIT transition usb: typec: ucsi: displayport: Fix NULL pointer access USB: usbtmc: use interruptible sleep in usbtmc_read usb: usbtmc: Fix erroneous get_stb ioctl error returns usb: usbtmc: Fix erroneous wait_srq ioctl return usb: usbtmc: Fix erroneous generic_read ioctl return types: Complement the aligned types with signed 64-bit one iio: adc: dln2: Use aligned_s64 for timestamp MIPS: Fix MAX_REG_OFFSET drm/panel: simple: Update timings for AUO G101EVN010 nvme: unblock ctrl state transition for firmware update do_umount(): add missing barrier before refcount checks in sync case platform/x86: asus-wmi: Fix wlan_ctrl_by_user detection iio: adc: ad7768-1: Fix insufficient alignment of timestamp. iio: chemical: sps30: use aligned_s64 for timestamp RDMA/rxe: Fix slab-use-after-free Read in rxe_queue_cleanup bug nfs: handle failure of nfs_get_lock_context in unlock path spi: loopback-test: Do not split 1024-byte hexdumps net_sched: Flush gso_skb list too during ->change() net: cadence: macb: Fix a possible deadlock in macb_halt_tx. net: dsa: sja1105: discard incoming frames in BR_STATE_LISTENING ALSA: sh: SND_AICA should depend on SH_DMA_API qlcnic: fix memory leak in qlcnic_sriov_channel_cfg_cmd() NFSv4/pnfs: Reset the layout state after a layoutreturn dmaengine: Revert "dmaengine: dmatest: Fix dmatest waiting less when interrupted" ACPI: PPTT: Fix processor subtable walk ALSA: es1968: Add error handling for snd_pcm_hw_constraint_pow2() tracing: samples: Initialize trace_array_printk() with the correct function phy: Fix error handling in tegra_xusb_port_init phy: renesas: rcar-gen3-usb2: Set timing registers only once wifi: mt76: disable napi on driver removal dmaengine: ti: k3-udma: Add missing locking dmaengine: ti: k3-udma: Use cap_mask directly from dma_device structure instead of a local copy clocksource/i8253: Use raw_spinlock_irqsave() in clockevent_i8253_disable() ASoC: q6afe-clocks: fix reprobing of the driver drm/vmwgfx: Fix a deadlock in dma buf fence polling usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute group usb: typec: fix potential array underflow in ucsi_ccg_sync_control() usb: typec: fix pm usage counter imbalance in ucsi_ccg_sync_control() selftests/mm: compaction_test: support platform with huge mount of memory btrfs: don't BUG_ON() when 0 reference count at btrfs_lookup_extent_info() netfilter: nf_tables: pass nft_chain to destroy function, not nft_ctx netfilter: nf_tables: wait for rcu grace period on net_device removal netfilter: nf_tables: do not defer rule destruction via call_rcu ice: arfs: fix use-after-free when freeing @rx_cpu_rmap scsi: target: iscsi: Fix timeout on deleted connection dma-mapping: avoid potential unused data compilation warning cgroup: Fix compilation issue due to cgroup_mutex not being exported kconfig: merge_config: use an empty file as initfile NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() mailbox: use error ret code of of_parse_phandle_with_args() fbdev: fsl-diu-fb: add missing device_remove_file() fbcon: Use correct erase colour for clearing in fbcon fbdev: core: tileblit: Implement missing margin clearing for tileblit NFSv4: Treat ENETUNREACH errors as fatal for state recovery SUNRPC: rpc_clnt_set_transport() must not change the autobind setting SUNRPC: rpcbind should never reset the port to the value '0' thermal/drivers/qoriq: Power down TMU on system suspend dql: Fix dql->limit value when reset. tools/build: Don't pass test log files to linker pNFS/flexfiles: Report ENETDOWN as a connection error libnvdimm/labels: Fix divide error in nd_label_data_init() mmc: host: Wait for Vdd to settle on card power off i2c: qup: Vote for interconnect bandwidth to DRAM i2c: pxa: fix call balance of i2c->clk handling routines btrfs: avoid linker error in btrfs_find_create_tree_block() btrfs: send: return -ENAMETOOLONG when attempting a path that is too long um: Store full CSGSFS and SS register from mcontext um: Update min_low_pfn to match changes in uml_reserved ext4: reorder capability check last scsi: st: Tighten the page format heuristics with MODE SELECT scsi: st: ERASE does not change tape location tcp: reorganize tcp_in_ack_event() and tcp_count_delivered() rtc: rv3032: fix EERD location kbuild: fix argument parsing in scripts/config dm: restrict dm device size to 2^63-512 bytes xen: Add support for XenServer 6.1 platform device posix-timers: Add cond_resched() to posix_timer_add() search loop netfilter: conntrack: Bound nf_conntrack sysctl writes arm64/mm: Check PUD_TYPE_TABLE in pud_bad() mmc: sdhci: Disable SD card clock before changing parameters ipv6: save dontfrag in cork arm64: tegra: p2597: Fix gpio for vdd-1v8-dis regulator powerpc/prom_init: Fixup missing #size-cells on PowerBook6,7 tcp: bring back NUMA dispersion in inet_ehash_locks_alloc() rtc: ds1307: stop disabling alarms on probe ieee802154: ca8210: Use proper setters and getters for bitwise types ARM: tegra: Switch DSI-B clock parent to PLLD on Tegra114 media: c8sectpfe: Call of_node_put(i2c_bus) only once in c8sectpfe_probe() dm cache: prevent BUG_ON by blocking retries on failed device resumes orangefs: Do not truncate file size drm/amdgpu: Do not program AGP BAR regs under SRIOV in gfxhub_v1_0.c media: cx231xx: set device_caps for 417 pinctrl: bcm281xx: Use "unsigned int" instead of bare "unsigned" net: ethernet: ti: cpsw_new: populate netdev of_node net: pktgen: fix mpls maximum labels list parsing ipv4: fib: Move fib_valid_key_len() to rtm_to_fib_config(). clk: imx8mp: inform CCF of maximum frequency of clocks x86/bugs: Make spectre user default depend on MITIGATION_SPECTRE_V2 hwmon: (gpio-fan) Add missing mutex locks drm/mediatek: mtk_dpi: Add checks for reg_h_fre_con existence fpga: altera-cvp: Increase credit timeout PCI: brcmstb: Expand inbound window size up to 64GB PCI: brcmstb: Add a softdep to MIP MSI-X driver net/mlx5: Avoid report two health errors on same syndrome drm/amdkfd: KFD release_work possible circular locking net: xgene-v2: remove incorrect ACPI_PTR annotation bonding: report duplicate MAC address in all situations soc: ti: k3-socinfo: Do not use syscon helper to build regmap x86/nmi: Add an emergency handler in nmi_desc & use it in nmi_shootdown_cpus() cpuidle: menu: Avoid discarding useful information libbpf: Fix out-of-bound read MIPS: Use arch specific syscall name match function MIPS: pm-cps: Use per-CPU variables as per-CPU, not per-core clocksource: mips-gic-timer: Enable counter when CPUs start scsi: mpt3sas: Send a diag reset if target reset fails wifi: rtw88: Fix rtw_init_vht_cap() for RTL8814AU wifi: rtw88: Fix rtw_init_ht_cap() for RTL8814AU wifi: rtw88: Fix rtw_desc_to_mcsrate() to handle MCS16-31 net: pktgen: fix access outside of user given buffer in pktgen_thread_write() EDAC/ie31200: work around false positive build warning can: c_can: Use of_property_present() to test existence of DT property eth: mlx4: don't try to complete XDP frames in netpoll PCI: Fix old_size lower bound in calculate_iosize() too ACPI: HED: Always initialize before evged net/mlx5: Modify LSB bitmask in temperature event to include only the first bit net/mlx5: Apply rate-limiting to high temperature warning ASoC: ops: Enforce platform maximum on initial value ASoC: tas2764: Power up/down amp on mute ops ASoC: soc-dai: check return value at snd_soc_dai_set_tdm_slot() pinctrl: devicetree: do not goto err when probing hogs in pinctrl_dt_to_map smack: recognize ipv4 CIPSO w/o categories media: v4l: Memset argument to 0 before calling get_mbus_config pad op net/mlx4_core: Avoid impossible mlx4_db_alloc() order value phy: core: don't require set_mode() callback for phy_get_mode() to work drm/amd/display: Initial psr_version with correct setting net/mlx5: Extend Ethtool loopback selftest to support non-linear SKB net/mlx5e: set the tx_queue_len for pfifo_fast net/mlx5e: reduce rep rxq depth to 256 for ECPF ip: fib_rules: Fetch net from fib_rule in fib[46]_rule_configure(). wifi: rtw88: Fix download_firmware_validate() for RTL8814AU hwmon: (xgene-hwmon) use appropriate type for the latency value vxlan: Annotate FDB data races rcu: handle quiescent states for PREEMPT_RCU=n, PREEMPT_COUNT=y rcu: fix header guard for rcu_all_qs() scsi: lpfc: Handle duplicate D_IDs in ndlp search-by D_ID routine scsi: st: Restore some drive settings after reset HID: usbkbd: Fix the bit shift number for LED_KANA drm/ast: Find VBIOS mode from regular display size bpftool: Fix readlink usage in get_fd_type perf/amd/ibs: Fix perf_ibs_op.cnt_mask for CurCnt wifi: rtw88: Don't use static local variable in rtw8822b_set_tx_power_index_by_rate spi: zynqmp-gqspi: Always acknowledge interrupts regulator: ad5398: Add device tree support drm/atomic: clarify the rules around drm_atomic_state->allow_modeset drm: Add valid clones check pinctrl: meson: define the pull up/down resistor value as 60 kOhm ASoC: Intel: bytcr_rt5640: Add DMI quirk for Acer Aspire SW3-013 ALSA: hda/realtek: Add quirk for HP Spectre x360 15-df1xxx nvmet-tcp: don't restore null sk_state_change btrfs: correct the order of prelim_ref arguments in btrfs__prelim_ref xenbus: Allow PVH dom0 a non-local xenstore __legitimize_mnt(): check for MNT_SYNC_UMOUNT should be under mount_lock xfrm: Sanitize marks before insert bridge: netfilter: Fix forwarding of fragmented packets net: dwmac-sun8i: Use parsed internal PHY address instead of 1 sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done crypto: algif_hash - fix double free in hash_accept padata: do not leak refcount in reorder_work can: bcm: add locking for bcm_op runtime updates can: bcm: add missing rcu read protection for procfs content ALSA: pcm: Fix race of buffer access at PCM OSS layer llc: fix data loss when reading from a socket in llc_ui_recvmsg() drm/edid: fixed the bug that hdr metadata was not reset memcg: always call cond_resched() after fn() mm/page_alloc.c: avoid infinite retries caused by cpuset race spi: spi-fsl-dspi: restrict register range for regmap access spi: spi-fsl-dspi: Halt the module after a new message transfer spi: spi-fsl-dspi: Reset SR flags before sending a new message kbuild: Disable -Wdefault-const-init-unsafe drm/i915/gvt: fix unterminated-string-initialization warning smb: client: Fix use-after-free in cifs_fill_dirent smb: client: Reset all search buffer pointers when releasing buffer net_sched: hfsc: Address reentrant enqueue adding class to eltree twice coredump: fix error handling for replace_fd() pid: add pidfd_prepare() fork: use pidfd_prepare() coredump: hand a pidfd to the usermode coredump helper HID: quirks: Add ADATA XPG alpha wireless mouse support nfs: don't share pNFS DS connections between net namespaces platform/x86: thinkpad_acpi: Support also NEC Lavie X1475JAS um: let 'make clean' properly clean underlying SUBARCH as well spi: spi-sun4i: fix early activation tpm: tis: Double the timeout B to 4s platform/x86: fujitsu-laptop: Support Lifebook S2110 hotkeys platform/x86: thinkpad_acpi: Ignore battery threshold change event notification xen/swiotlb: relax alignment requirements perf/arm-cmn: Initialise cmn->cpu earlier Linux 5.10.238 Change-Id: I35ae49dcc741e7a596a8faadb9fb8c9de436f5c0 Signed-off-by: Greg Kroah-Hartman <gregkh@google.com> |
||
|
Seyediman Seyedarab
|
7aeb611fb1 |
kbuild: fix argument parsing in scripts/config
[ Upstream commit f757f6011c92b5a01db742c39149bed9e526478f ] The script previously assumed --file was always the first argument, which caused issues when it appeared later. This patch updates the parsing logic to scan all arguments to find --file, sets the config file correctly, and resets the argument list with the remaining commands. It also fixes --refresh to respect --file by passing KCONFIG_CONFIG=$FN to make oldconfig. Signed-off-by: Seyediman Seyedarab <imandevel@gmail.com> Signed-off-by: Masahiro Yamada <masahiroy@kernel.org> Signed-off-by: Sasha Levin <sashal@kernel.org> |
||
|
Daniel Gomez
|
e9fc7a2e22 |
kconfig: merge_config: use an empty file as initfile
[ Upstream commit a26fe287eed112b4e21e854f173c8918a6a8596d ] The scripts/kconfig/merge_config.sh script requires an existing $INITFILE (or the $1 argument) as a base file for merging Kconfig fragments. However, an empty $INITFILE can serve as an initial starting point, later referenced by the KCONFIG_ALLCONFIG Makefile variable if -m is not used. This variable can point to any configuration file containing preset config symbols (the merged output) as stated in Documentation/kbuild/kconfig.rst. When -m is used $INITFILE will contain just the merge output requiring the user to run make (i.e. KCONFIG_ALLCONFIG=<$INITFILE> make <allnoconfig/alldefconfig> or make olddefconfig). Instead of failing when `$INITFILE` is missing, create an empty file and use it as the starting point for merges. Signed-off-by: Daniel Gomez <da.gomez@samsung.com> Signed-off-by: Masahiro Yamada <masahiroy@kernel.org> Signed-off-by: Sasha Levin <sashal@kernel.org> |
||
|
Michael Bestas
|
a41b13bfbf |
Merge tag 'ASB-2025-05-05_12-5.10' of https://android.googlesource.com/kernel/common into android13-5.10-waipio
https://source.android.com/docs/security/bulletin/2025-05-01 * tag 'ASB-2025-05-05_12-5.10' of https://android.googlesource.com/kernel/common: ANDROID: GKI: Enable CONFIG_MEMFD_ASHMEM_SHIM ANDROID: mm: shmem: Use memfd-ashmem-shim ioctl handler ANDROID: mm/memfd-ashmem-shim: Introduce shim layer Revert "hrtimers: Handle CPU state correctly on hotplug" ANDROID: Repurpose a reserved slot in ipv6_devconf for backports UPSTREAM: net_sched: Prevent creation of classes with TC_H_ROOT FROMGIT: cgroup/cpuset-v1: Add missing support for cpuset_v2_mode Revert "netfilter: conntrack: convert to refcount_t api" Revert "netfilter: conntrack: fix crash due to confirmed bit load reordering" Revert "netfilter: nft_ct: fix use after free when attaching zone template" Revert "netfilter: nft_ct: Use __refcount_inc() for per-CPU nft_ct_pcpu_template." ANDROID: fix build error in trace_events_synth.c Linux 5.10.236 tracing: Do not use PERF enums when perf is not defined x86/kexec: Fix double-free of elf header buffer netfilter: conntrack: fix crash due to confirmed bit load reordering NFSD: Skip sending CB_RECALL_ANY when the backchannel isn't up nfsd: put dl_stid if fail to queue dl_recall jfs: add index corruption check to DT_GETPAGE() jfs: fix slab-out-of-bounds read in ea_get() ext4: fix OOB read when checking dotdot dir ext4: don't over-report free space or inodes in statvfs tracing: Ensure module defining synth event cannot be unloaded while tracing tracing: Fix use-after-free in print_graph_function_flags during tracer switching mmc: sdhci-pxav3: set NEED_RSP_BUSY capability ACPI: resource: Skip IRQ override on ASUS Vivobook 14 X1404VAP acpi: nfit: fix narrowing conversion in acpi_nfit_ctl x86/mm: Fix flush_tlb_range() when used for zapping normal PMDs x86/tsc: Always save/restore TSC sched_clock() on suspend/resume btrfs: handle errors from btrfs_dec_ref() properly ntb_perf: Delete duplicate dmaengine_unmap_put() call in perf_copy_chunk() drm/amd/display: Skip inactive planes within ModeSupportAndSystemConfiguration drm/amd/pm: Fix negative array index read tty: serial: fsl_lpuart: disable transmitter before changing RS485 related registers tty: serial: fsl_lpuart: use UARTMODIR register bits for lpuart32 platform can: flexcan: only change CAN state when link up in system PM arcnet: Add NULL check in com20020pci_probe() net: fix geneve_opt length integer overflow net: dsa: mv88e6xxx: propperly shutdown PPU re-enable timer on destroy ipv6: fix omitted netlink attributes when using RTEXT_FILTER_SKIP_STATS netfilter: nft_tunnel: fix geneve_opt type confusion addition tunnels: Accept PACKET_HOST in skb_tunnel_check_pmtu(). vsock: avoid timeout during connect() if the socket is closing net_sched: skbprio: Remove overly strict queue assertions netlabel: Fix NULL pointer exception caused by CALIPSO on IPv4 sockets ntb: intel: Fix using link status DB's ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans spufs: fix a leak in spufs_create_context() spufs: fix a leak on spufs_new_file() failure hwmon: (nct6775-core) Fix out of bounds access for NCT679{8,9} can: statistics: use atomic access in hot path ALSA: hda/realtek: Add mute LED quirk for HP Pavilion x360 14-dy1xxx locking/semaphore: Use wake_q to wake up processes outside lock critical section sched/deadline: Use online cpus for validating runtime platform/x86: intel-hid: fix volume buttons on Microsoft Surface Go 4 tablet affs: don't write overlarge OFS data block size fields affs: generate OFS sequence numbers starting at 1 nvme-pci: skip CMB blocks incompatible with PCI P2P DMA nvme-pci: clean up CMBMSC when registering CMB fails nvme-tcp: fix possible UAF in nvme_tcp_poll wifi: iwlwifi: fw: allocate chained SG tables for dump sched/smt: Always inline sched_smt_active() octeontx2-af: Fix mbox INTR handler when num VFs > 64 ACPI: processor: idle: Return an error if both P_LVL{2,3} idle states are invalid ring-buffer: Fix bytes_dropped calculation issue rtnetlink: Allocate vfinfo size for VF GUIDs when supported exfat: fix the infinite loop in exfat_find_last_cluster() objtool, media: dib8000: Prevent divide-by-zero in dib8000_set_dds() fs/procfs: fix the comment above proc_pid_wchan() perf python: Check if there is space to copy all the event perf python: Don't keep a raw_data pointer to consumed ring buffer space perf python: Decrement the refcount of just created event on failure perf python: Fixup description of sample.id event member NFSv4: Don't trigger uneccessary scans for return-on-close delegations ocfs2: validate l_tree_depth to avoid out-of-bounds access kexec: initialize ELF lowest address to ULONG_MAX perf units: Fix insufficient array space iio: accel: mma8452: Ensure error return on failure to matching oversampling ratio coresight: catu: Fix number of pages while using 64k pages isofs: fix KMSAN uninit-value bug in do_isofs_readdir() crypto: hisilicon/sec2 - fix for aead auth key length x86/dumpstack: Fix inaccurate unwinding from exception stacks due to misplaced assignment mfd: sm501: Switch to BIT() to mitigate integer overflows RDMA/mlx5: Fix mlx5_poll_one() cur_qp update flow power: supply: max77693: Fix wrong conversion of charge input threshold value x86/entry: Fix ORC unwinder for PUSH_REGS with save_ret=1 clk: amlogic: g12a: fix mmc A peripheral clock clk: amlogic: gxbb: drop non existing 32k clock parent clk: amlogic: g12b: fix cluster A parent data pinctrl: tegra: Set SFIO mode to Mux Register IB/mad: Check available slots before posting receive WRs clk: rockchip: rk3328: fix wrong clk_ref_usb3otg parent pinctrl: renesas: rza2: Fix missing of_node_put() call lib: 842: Improve error handling in sw842_compress() bpf: Use preempt_count() directly in bpf_send_signal_common() clk: samsung: Fix UBSAN panic in samsung_clk_init() remoteproc: qcom_q6v5_pas: Make single-PD handling more robust clk: amlogic: gxbb: drop incorrect flag on 32k clock fbdev: sm501fb: Add some geometry checks. mdacon: rework dependency list fbdev: au1100fb: Move a variable assignment behind a null pointer check PCI: pciehp: Don't enable HPIE when resuming in poll mode drm/mediatek: dsi: fix error codes in mtk_dsi_host_transfer() PCI: xilinx-cpm: Fix IRQ domain leak in error path of probe PCI: Remove stray put_device() in pci_register_host_bridge() drm/amd/display: fix type mismatch in CalculateDynamicMetadataParameters() PCI/portdrv: Only disable pciehp interrupts early when needed PCI: brcmstb: Use internal register to change link capability PCI: cadence-ep: Fix the driver to send MSG TLP for INTx without data payload PCI/ASPM: Fix link state exit during switch upstream function removal drm/mediatek: mtk_hdmi: Fix typo for aud_sampe_size member drm/mediatek: mtk_hdmi: Unregister audio platform device on failure drm: xlnx: zynqmp: Fix max dma segment size drm/dp_mst: Fix drm RAD print ASoC: ti: j721e-evm: Fix clock configuration for ti,j7200-cpb-audio compatible ALSA: hda/realtek: Always honor no_shutup_pins perf/ring_buffer: Allow the EPOLLRDNORM flag for poll lockdep: Don't disable interrupts on RT in disable_irq_nosync_lockdep.*() PM: sleep: Fix handling devices with direct_complete set on errors thermal: int340x: Add NULL check for adev EDAC/ie31200: Fix the error path order of ie31200_init() EDAC/ie31200: Fix the DIMM size mask for several SoCs EDAC/ie31200: Fix the size of EDAC_MC_LAYER_CHIP_SELECT layer selinux: Chain up tool resolving errors in install_policy.sh PM: sleep: Adjust check before setting power.must_resume x86/platform: Only allow CONFIG_EISA for 32-bit x86/fpu: Avoid copying dynamic FP state from init_task in arch_dup_task_struct() cpufreq: governor: Fix negative 'idle_time' handling in dbs_update() cpufreq: scpi: compare kHz instead of Hz x86/mm/pat: cpa-test: fix length for CPA_ARRAY test watch_queue: fix pipe accounting mismatch i2c: dev: check return value when calling dev_set_name() media: i2c: et8ek8: Don't strip remove function when driver is builtin serial: 8250_dma: terminate correct DMA in tx_dma_flush() memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove net: usb: usbnet: restore usb%d name exception for local mac addresses net: usb: qmi_wwan: add Telit Cinterion FE990B composition net: usb: qmi_wwan: add Telit Cinterion FN990B composition tty: serial: 8250: Add some more device IDs counter: microchip-tcb-capture: Fix undefined counter channel state on probe counter: stm32-lptimer-cnt: fix error handling when enabling ALSA: hda/realtek: Support mute LED on HP Laptop 15s-du3xxx netfilter: socket: Lookup orig tuple for IPv6 SNAT ARM: Remove address checking for MMUless devices ARM: 9351/1: fault: Add "cut here" line for prefetch aborts ARM: 9350/1: fault: Implement copy_from_kernel_nofault_allowed() atm: Fix NULL pointer dereference HID: hid-plantronics: Add mic mute mapping and generalize quirks ALSA: usb-audio: Add quirk for Plantronics headsets to fix control names drm/radeon: fix uninitialized size issue in radeon_vce_cs_parse() soc: qcom: pdr: Fix the potential deadlock batman-adv: Ignore own maximum aggregation size during RX bpf, sockmap: Fix race between element replace and close() Bluetooth: hci_event: Align BR/EDR JUST_WORKS paring with LE drm/amdgpu: Fix even more out of bound writes from debugfs ARM: shmobile: smp: Enforce shmobile_smp_* alignment proc: fix UAF in proc_get_inode() mmc: atmel-mci: Add missing clk_disable_unprepare() regulator: check that dummy regulator has been probed before using it drm/v3d: Don't run jobs that have errors flagged in its fence i2c: omap: fix IRQ storms net/neighbor: add missing policy for NDTPA_QUEUE_LENBYTES net: atm: fix use after free in lec_send() ipv6: Set errno after ip_fib_metrics_init() in ip6_route_info_create(). ipv6: Fix memleak of nhc_pcpu_rth_output in fib_check_nh_v6_gw(). Bluetooth: Fix error code in chan_alloc_skb_cb() RDMA/hns: Fix wrong value of max_sge_rd RDMA/hns: Fix soft lockup during bt pages loop RDMA/hns: Remove redundant 'phy_addr' in hns_roce_hem_list_find_mtt() RDMA/bnxt_re: Avoid clearing VLAN_ID mask in modify qp path ARM: dts: bcm2711: Don't mark timer regs unconfigured RDMA/bnxt_re: Add missing paranthesis in map_qp_id_to_tbl_indx ARM: dts: bcm2711: PL011 UARTs are actually r1p5 xfrm_output: Force software GSO only in tunnel mode firmware: imx-scu: fix OF node leak in .probe() drm/amd/display: Fix null check for pipe_ctx->plane_state in resource_build_scaling_params drm/amd/display: Check for invalid input params when building scaling params drm/amd/display: fix odm scaling drm/amd/display: Reject too small viewport size when validating plane drm/amd/display/dc/core/dc_resource: Staticify local functions drm/amd/display: Check plane scaling against format specific hw plane caps. i2c: sis630: Fix an error handling path in sis630_probe() i2c: ali15x3: Fix an error handling path in ali15x3_probe() i2c: ali1535: Fix an error handling path in ali1535_probe() ASoC: codecs: wm0010: Fix error handling path in wm0010_spi_probe() drm/gma500: Add NULL check for pci_gfx_root in mid_get_vbt_data() qlcnic: fix memory leak issues in qlcnic_sriov_common.c drm/amd/display: Fix slab-use-after-free on hdcp_work drm/amd/display: Assign normalized_pix_clk when color depth = 14 drm/atomic: Filter out redundant DPMS calls x86/microcode/AMD: Fix out-of-bounds on systems with CPU-less NUMA nodes USB: serial: option: match on interface class for Telit FN990B USB: serial: option: fix Telit Cinterion FE990A name USB: serial: option: add Telit Cinterion FE990B compositions USB: serial: ftdi_sio: add support for Altera USB Blaster 3 block: fix 'kmem_cache of name 'bio-108' already exists' drm/nouveau: Do not override forced connector status mptcp: safety check before fallback x86/irq: Define trace events conditionally fuse: don't truncate cached, mutated symlink ASoC: tas2764: Set the SDOUT polarity correctly ASoC: tas2764: Fix power control mask ASoC: tas2770: Fix volume scale nvme: only allow entering LIVE from CONNECTING state sctp: Fix undefined behavior in left shift operation nvmet-rdma: recheck queue state is LIVE in state lock in recv done ASoC: SOF: Intel: hda: add softdep pre to snd-hda-codec-hdmi module ASoC: arizona/madera: use fsleep() in up/down DAPM event delays. ASoC: rsnd: don't indicate warning on rsnd_kctrl_accept_runtime() thermal/cpufreq_cooling: Remove structure member documentation s390/cio: Fix CHPID "configure" attribute caching HID: ignore non-functional sensor in HP 5MP Camera HID: intel-ish-hid: fix the length of MNG_SYNC_FW_CLOCK in doorbell vboxsf: fix building with GCC 15 alpha/elf: Fix misc/setarch test of util-linux by removing 32bit support ACPI: resource: IRQ override for Eluktronics MECH-17 scsi: qla1280: Fix kernel oops when debug level > 2 iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic() powercap: call put_device() on an error path in powercap_register_control_type() hrtimers: Mark is_migration_base() with __always_inline nvme-fc: go straight to connecting state when initializing net/mlx5e: Prevent bridge link show failure for non-eswitch-allowed devices netfilter: nft_exthdr: fix offset with ipv4_find_option() net_sched: Prevent creation of classes with TC_H_ROOT ipvs: prevent integer overflow in do_ip_vs_get_ctl() netfilter: nf_conncount: Fully initialize struct nf_conncount_tuple in insert_tree() net/mlx5: handle errors in mlx5_chains_create_table() Drivers: hv: vmbus: Don't release fb_mmio resource in vmbus_free_mmio() netpoll: hold rcu read lock in __netpoll_send_skb() ice: fix memory leak in aRFS after reset netfilter: nft_ct: Use __refcount_inc() for per-CPU nft_ct_pcpu_template. netfilter: nft_ct: fix use after free when attaching zone template netfilter: conntrack: convert to refcount_t api pinctrl: bcm281xx: Fix incorrect regmap max_registers value fbdev: hyperv_fb: iounmap() the correct memory when removing a device x86/kexec: fix memory leak of elf header buffer KVM: x86: Reject Hyper-V's SEND_IPI hypercalls if local APIC isn't in-kernel ipv6: Fix signed integer overflow in __ip6_append_data sched/isolation: Prevent boot crash when the boot CPU is nohz_full clockevents/drivers/i8253: Fix stop sequence for timer 0 vlan: fix memory leak in vlan_newlink() Revert "NFSD: fix hang in nfsd4_shutdown_callback" ANDROID: GKI: fix build warning in mokvar-table.c Revert "usb: xhci: Add timeout argument in address_device USB HCD callback" Revert "usb: xhci: Fix NULL pointer dereference on certain command aborts" Linux 5.10.235 net: ipv6: fix dst refleaks in rpl, seg6 and ioam6 lwtunnels udf: Fix use of check_add_overflow() with mixed type arguments perf cs-etm: Add missing variable in cs_etm__process_queues() usb: xhci: Enable the TRB overfetch quirk on VIA VL805 btrfs: bring back the incorrectly removed extent buffer lock recursion support crypto: hisilicon/qm - inject error before stopping queue kbuild: userprogs: use correct lld when linking through clang sched: sch_cake: add bounds checks to host bulk flow fairness counts vsock: Orphan socket after transport release vsock: Keep the binding until socket destruction bpf, vsock: Invoke proto::close on close() Revert "media: uvcvideo: Require entities to have a non-zero unique ID" media: uvcvideo: Remove dangling pointers media: uvcvideo: Only save async fh if success nilfs2: handle errors that nilfs_prepare_chunk() may return nilfs2: eliminate staggered calls to kunmap in nilfs_rename nilfs2: move page release outside of nilfs_delete_entry and nilfs_set_link spi-mxs: Fix chipselect glitch mtd: rawnand: cadence: fix unchecked dereference eeprom: digsy_mtc: Make GPIO lookup table match the device slimbus: messaging: Free transaction ID in delayed interrupt scenario intel_th: pci: Add Panther Lake-P/U support intel_th: pci: Add Panther Lake-H support intel_th: pci: Add Arrow Lake support mei: me: add panther lake P DID Squashfs: check the inode number is not the invalid value of zero xhci: pci: Fix indentation in the PCI device ID definitions usb: gadget: Check bmAttributes only if configuration is valid usb: gadget: Fix setting self-powered state on suspend usb: gadget: Set self-powered based on MaxPower and bmAttributes usb: typec: tcpci_rt1711h: Unmask alert interrupts to fix functionality usb: typec: ucsi: increase timeout for PPM reset operations usb: atm: cxacru: fix a flaw in existing endpoint checks usb: renesas_usbhs: Flush the notify_hotplug_work usb: quirks: Add DELAY_INIT and NO_LPM for Prolific Mass Storage Card Reader usb: renesas_usbhs: Use devm_usb_get_phy() usb: renesas_usbhs: Call clk_put() Revert "drivers/card_reader/rtsx_usb: Restore interrupt based detection" gpio: rcar: Fix missing of_node_put() call net: ipv6: fix missing dst ref drop in ila lwtunnel net: ipv6: fix dst ref loop in ila lwtunnel net-timestamp: support TCP GSO case for a few missing flags vlan: enforce underlying device type ppp: Fix KMSAN uninit-value warning with bpf be2net: fix sleeping while atomic bugs in be_ndo_bridge_getlink drm/sched: Fix preprocessor guard hwmon: fix a NULL vs IS_ERR_OR_NULL() check in xgene_hwmon_probe() llc: do not use skb_get() before dev_queue_xmit() ALSA: usx2y: validate nrpacks module parameter on probe hwmon: (ad7314) Validate leading zero bits and return error hwmon: (ntc_thermistor) Fix the ncpXXxh103 sensor table hwmon: (pmbus) Initialise page count in pmbus_identify() caif_virtio: fix wrong pointer check in cfv_probe() net: gso: fix ownership in __udp_gso_segment nvmet-tcp: Fix a possible sporadic response drops in weakly ordered arch HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() HID: google: fix unused variable warning under !CONFIG_ACPI wifi: iwlwifi: limit printed string from FW file mm/page_alloc: fix uninitialized variable block: fix conversion of GPT partition name to 7-bit s390/traps: Fix test_monitor_call() inline assembly rapidio: fix an API misues when rio_add_net() fails rapidio: add check for rio_add_net() in rio_scan_alloc_net() wifi: nl80211: reject cooked mode if it is set along with other flags wifi: cfg80211: regulatory: improve invalid hints checking x86/cpu: Properly parse CPUID leaf 0x2 TLB descriptor 0x63 x86/cpu: Validate CPUID leaf 0x2 EDX output x86/cacheinfo: Validate CPUID leaf 0x2 EDX output platform/x86: thinkpad_acpi: Add battery quirk for ThinkPad X131e drm/radeon: Fix rs400_gpu_init for ATI mobility radeon Xpress 200M ALSA: hda/realtek: update ALC222 depop optimize ALSA: hda: intel: Add Dell ALC3271 to power_save denylist gpio: aggregator: protect driver attr handlers against module unload HID: appleir: Fix potential NULL dereference at raw event handle Revert "of: reserved-memory: Fix using wrong number of cells to get property 'alignment'" efi: Don't map the entire mokvar table to determine its size drm/amdgpu: disable BAR resize on Dell G5 SE drm/amdgpu: Check extended configuration space register when system uses large bar smb: client: Add check for next_buffer in receive_encrypted_standard() acct: perform last write from workqueue kernel/acct.c: use dedicated helper to access rlimit values kernel/acct.c: use #elif instead of #end and #elif drop_monitor: fix incorrect initialization order pfifo_tail_enqueue: Drop new packet when sch->limit == 0 intel_idle: Handle older CPUs, which stop the TSC in deeper C states, correctly sched/core: Prevent rescheduling when interrupts are disabled vmlinux.lds: Ensure that const vars with relocations are mapped R/O mptcp: always handle address removal under msk socket lock phy: exynos5-usbdrd: fix MPLL_MULTIPLIER and SSC_REFCLKSEL masks in refclk phy: tegra: xusb: reset VBUS & ID OVERRIDE usbnet: gl620a: fix endpoint checking in genelink_bind() i2c: npcm: disable interrupt enable bit before devm_request_irq perf/core: Fix low freq setting via IOC_PERIOD ftrace: Avoid potential division by zero in function_stat_show() x86/CPU: Fix warm boot hang regression on AMD SC1100 SoC systems net: ipv6: fix dst ref loop on input in rpl lwt net: ipv6: rpl_iptunnel: mitigate 2-realloc issue include: net: add static inline dst_dev_overhead() to dst.h net: use indirect call helpers for dst_output net: use indirect call helpers for dst_input net: ipv6: rpl_iptunnel: simplify the return expression of rpl_do_srh() net: mvpp2: cls: Fixed Non IP flow, with vlan tag flow defination. tcp: Defer ts_recent changes until req is owned ipvs: Always clear ipvs_property flag in skb_scrub_packet() ASoC: es8328: fix route from DAC to output net: cadence: macb: Synchronize stats calculations net: loopback: Avoid sending IP packets without an Ethernet header Bluetooth: L2CAP: Fix L2CAP_ECRED_CONN_RSP response ALSA: usb-audio: Avoid dropping MIDI events at closing multiple ports sunrpc: suppress warnings for unused procfs functions RDMA/mlx5: Fix bind QP error cleanup flow IB/mlx5: Set and get correct qp_num for a DCT QP x86/cpu/kvm: SRSO: Fix possible missing IBPB on VM-Exit mtd: rawnand: cadence: fix incorrect device in dma_unmap_single mtd: rawnand: cadence: use dma_map_resource for sdma address mtd: rawnand: cadence: fix error code in cadence_nand_init() acct: block access to kernel internal filesystems ALSA: hda/conexant: Add quirk for HP ProBook 450 G4 mute LED nfp: bpf: Add check for nfp_app_ctrl_msg_alloc() tee: optee: Fix supplicant wait loop bpf: skip non exist keys in generic_map_lookup_batch power: supply: da9150-fg: fix potential overflow flow_dissector: Fix port range key handling in BPF conversion flow_dissector: Fix handling of mixed port and port-range keys net: extract port range fields from fl_flow_key geneve: Suppress list corruption splat in geneve_destroy_tunnels(). gtp: Suppress list corruption splat in gtp_net_exit_batch_rtnl(). geneve: Fix use-after-free in geneve_find_dev(). powerpc/code-patching: Fix KASAN hit by not flagging text patching area as VM_ALLOC ALSA: hda/realtek: Fixup ALC225 depop procedure powerpc/64s: Rewrite __real_pte() and __rpte_to_hidx() as static inline powerpc/64s/mm: Move __real_pte stubs into hash-4k.h USB: gadget: f_midi: f_midi_complete to call queue_work usb/gadget: f_midi: Replace tasklet with work usb: dwc3: Fix timeout issue during controller enter/exit from halt state usb: dwc3: Increase DWC3 controller halt timeout batman-adv: Drop unmanaged ELP metric worker batman-adv: Drop initialization of flexible ethtool_link_ksettings batman-adv: Add new include for min/max helpers tpm: Change to kvalloc() in eventlog/acpi.c tpm: Use managed allocation for bios event log drm/rockchip: cdn-dp: Use drm_connector_helper_hpd_irq_event() drm/probe-helper: Create a HPD IRQ event helper for a single connector memcg: fix soft lockup in the OOM process mm: update mark_victim tracepoints fields crypto: testmgr - some more fixes to RSA test vectors crypto: testmgr - populate RSA CRT parameters in RSA test vectors crypto: testmgr - fix version number of RSA tests crypto: testmgr - Fix wrong test case of RSA crypto: testmgr - fix wrong key length for pkcs1pad arm64: mte: Do not allow PROT_MTE on MAP_HUGETLB user mappings nvme-pci: fix multiple races in nvme_setup_io_queues vlan: move dev_put into vlan_dev_uninit vlan: introduce vlan_dev_free_egress_priority ima: Fix use-after-free on a dentry's dname.name pps: Fix a use-after-free btrfs: avoid monopolizing a core when activating a swap file Revert "btrfs: avoid monopolizing a core when activating a swap file" x86/i8253: Disable PIT timer 0 when not in use f2fs: fix to wait dio completion selftests: rtnetlink: update netdevsim ipsec output format netdevsim: print human readable IP address parport_pc: add support for ASIX AX99100 serial: 8250_pci: add support for ASIX AX99100 can: ems_pci: move ASIX AX99100 ids to pci_ids.h nilfs2: protect access to buffers with no active references nilfs2: do not force clear folio if buffer is referenced nilfs2: do not output warnings when clearing dirty buffers alpha: replace hardcoded stack offsets with autogenerated ones x86/static-call: Remove early_boot_irqs_disabled check to fix Xen PVH dom0 kdb: Do not assume write() callback available drm/tidss: Clear the interrupt status for interrupts being disabled drm/tidss: Fix issue in irq handling causing irq-flood issue ndisc: extend RCU protection in ndisc_send_skb() openvswitch: use RCU protection in ovs_vport_cmd_fill_info() arp: use RCU protection in arp_xmit() neighbour: use RCU protection in __neigh_notify() neighbour: delete redundant judgment statements ndisc: use RCU protection in ndisc_alloc_skb() ipv6: use RCU protection in ip6_default_advmss() ipv4: use RCU protection in inet_select_addr() ipv4: use RCU protection in rt_is_expired() net: add dev_net_rcu() helper net: treat possible_net_t net pointer as an RCU one and add read_pnet_rcu() clocksource: Use migrate_disable() to avoid calling get_random_u32() in atomic context clocksource: Use pr_info() for "Checking clocksource synchronization" message clocksource: Replace cpumask_weight() with cpumask_empty() clocksource: Replace deprecated CPU-hotplug functions. clocksource: Limit number of CPUs checked for clock synchronization mlxsw: Add return value check for mlxsw_sp_port_get_stats_raw() arm64: Handle .ARM.attributes section in linker scripts regmap-irq: Add missing kfree() partitions: mac: fix handling of bogus partition table gpio: stmpe: Check return value of stmpe_reg_read in stmpe_gpio_irq_sync_unlock alpha: align stack for page fault and user unaligned trap handlers serial: 8250: Fix fifo underflow on flush efi: Avoid cold plugged memory for placing the kernel alpha: make stack 16-byte aligned (most cases) can: j1939: j1939_sk_send_loop(): fix unable to send messages with data length zero can: c_can: fix unbalanced runtime PM disable in error path USB: serial: option: drop MeiG Smart defines USB: serial: option: fix Telit Cinterion FN990A name USB: serial: option: add Telit Cinterion FN990B compositions USB: serial: option: add MeiG Smart SLM828 usb: cdc-acm: Fix handling of oversized fragments usb: cdc-acm: Check control transfer buffer size before access USB: cdc-acm: Fill in Renesas R-Car D3 USB Download mode quirk USB: hub: Ignore non-compliant devices with too many configs or interfaces usb: gadget: f_midi: fix MIDI Streaming descriptor lengths USB: Add USB_QUIRK_NO_LPM quirk for sony xperia xz1 smartphone USB: quirks: add USB_QUIRK_NO_LPM quirk for Teclast dist usb: core: fix pipe creation for get_bMaxPacketSize0 USB: pci-quirks: Fix HCCPARAMS register error for LS7A EHCI usb: dwc2: gadget: remove of_node reference upon udc_stop usb: gadget: udc: renesas_usb3: Fix compiler warning usb: roles: set switch registered flag early on perf/x86/intel: Ensure LBRs are disabled when a CPU is starting batman-adv: Ignore neighbor throughput metrics in error case batman-adv: fix panic during interface removal ASoC: Intel: bytcr_rt5640: Add DMI quirk for Vexia Edu Atla 10 tablet 5V orangefs: fix a oob in orangefs_debug_write Grab mm lock before grabbing pt lock vfio/pci: Enable iowrite64 and ioread64 for vfio pci PCI/DPC: Quirk PIO log size for Intel Raptor Lake-P media: vidtv: Fix a null-ptr-deref in vidtv_mux_stop_thread media: cxd2841er: fix 64-bit division on gcc-9 x86/xen: allow larger contiguous memory regions in PV guests xen: remove a confusing comment on auto-translated guest I/O gpio: bcm-kona: Add missing newline to dev_err format string gpio: bcm-kona: Make sure GPIO bits are unlocked when requesting IRQ gpio: bcm-kona: Fix GPIO lock/unlock for banks above bank 0 arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array team: better TEAM_OPTION_TYPE_STRING validation vrf: use RCU protection in l3mdev_l3_out() ndisc: ndisc_send_redirect() must use dev_get_by_index_rcu() HID: multitouch: Add NULL check in mt_input_configured NFSD: fix hang in nfsd4_shutdown_callback nfsd: clear acl_access/acl_default after releasing them mptcp: prevent excessive coalescing on receive ocfs2: check dir i_size in ocfs2_find_entry MIPS: ftrace: Declare ftrace_get_parent_ra_addr() as static ptp: Ensure info->enable callback is always set net/ncsi: wait for the last response to Deselect Package before configuring channel misc: fastrpc: Fix registered buffer page address mtd: onenand: Fix uninitialized retlen in do_otp_read() NFC: nci: Add bounds checking in nci_hci_create_pipe() nilfs2: fix possible int overflows in nilfs_fiemap() ocfs2: handle a symlink read error correctly ocfs2: fix incorrect CPU endianness conversion causing mount failure pnfs/flexfiles: retry getting layout segment for reads vfio/platform: check the bounds of read/write syscalls nvmem: core: improve range check for nvmem_cell_write() nvmem: qcom-spmi-sdam: Set size in struct nvmem_config crypto: qce - unregister previously registered algos in error path crypto: qce - fix goto jump in error path media: uvcvideo: Remove redundant NULL assignment media: uvcvideo: Fix event flags in uvc_ctrl_send_events media: ov5640: fix get_light_freq on auto media: mc: fix endpoint iteration soc: qcom: smem_state: fix missing of_node_put in error path iio: light: as73211: fix channel handling in only-color triggered buffer x86/boot: Use '-std=gnu11' to fix build with GCC 15 kbuild: Move -Wenum-enum-conversion to W=2 scsi: storvsc: Set correct data length for sending SCSI command without payload scsi: qla2xxx: Move FCE Trace buffer allocation to user control ALSA: hda/realtek: Enable headset mic on Positivo C6400 dm-crypt: track tag_offset in convert_context dm-crypt: don't update io->sector after kcryptd_crypt_write_io_submit() powerpc/pseries/eeh: Fix get PE state translation serial: sh-sci: Do not probe the serial port if its slot in sci_ports[] is in use serial: sh-sci: Drop __initdata macro for port_cfg soc: qcom: socinfo: Avoid out of bounds read of serial number usb: gadget: f_tcm: Don't prepare BOT write request twice usb: gadget: f_tcm: ep_autoconfig with fullspeed endpoint usb: gadget: f_tcm: Decrement command ref count on cleanup usb: gadget: f_tcm: Translate error to sense wifi: brcmfmac: fix NULL pointer dereference in brcmf_txfinalize() wifi: rtlwifi: rtl8821ae: Fix media status report HID: hid-sensor-hub: don't use stale platform-data on remove of: reserved-memory: Fix using wrong number of cells to get property 'alignment' of: Fix of_find_node_opts_by_path() handling of alias+path+options of: Correct child specifier used as input of the 2nd nexus node perf bench: Fix undefined behavior in cmpworker() efi: libstub: Use '-std=gnu11' to fix build with GCC 15 blk-cgroup: Fix class @block_class's subsystem refcount leakage clk: qcom: clk-rpmh: prevent integer overflow in recalc_rate clk: qcom: clk-alpha-pll: fix alpha mode configuration clk: sunxi-ng: a100: enable MMC clock reparenting Bluetooth: L2CAP: accept zero as a special value for MTU auto-selection Bluetooth: L2CAP: handle NULL sock pointer in l2cap_sock_alloc drm/komeda: Add check for komeda_get_layer_fourcc_list() KVM: s390: vsie: fix some corner-cases when grabbing vsie pages KVM: Explicitly verify target vCPU is online in kvm_get_vcpu() arm64: dts: rockchip: increase gmac rx_delay on rk3399-puma binfmt_flat: Fix integer overflow bug on 32 bit systems m68k: vga: Fix I/O defines s390/futex: Fix FUTEX_OP_ANDN implementation drm/modeset: Handle tiled displays in pan_display_atomic. leds: lp8860: Write full EEPROM, not only half of it cpufreq: s3c64xx: Fix compilation warning tun: revert fix group permission check netem: Update sch->q.qlen before qdisc_tree_reduce_backlog() x86/xen: add FRAME_END to xen_hypercall_hvm() x86/xen: fix xen_hypercall_hvm() to not clobber %rbx net: rose: lock the socket in rose_bind() net: atlantic: fix warning during hot unplug gpio: pca953x: Improve interrupt support udp: gso: do not drop small packets when PMTU reduces tg3: Disable tg3 PCIe AER on system reboot gpu: drm_dp_cec: fix broken CEC adapter properties check firmware: iscsi_ibft: fix ISCSI_IBFT Kconfig entry nvme: handle connectivity loss in nvme_set_queue_count usb: xhci: Fix NULL pointer dereference on certain command aborts net: usb: rtl8150: enable basic endpoint checking usb: xhci: Add timeout argument in address_device USB HCD callback net: usb: rtl8150: use new tasklet API x86/mm: Don't disable PCID when INVLPG has been fixed by microcode Input: allocate keycode for phone linking selftests/net/ipsec: Fix Null pointer dereference in rtattr_pack() tipc: re-order conditions in tipc_crypto_key_rcv() mmc: sdhci-msm: Correctly set the load for the regulator APEI: GHES: Have GHES honor the panic= setting i2c: Force ELAN06FA touchpad I2C bus freq to 100KHz net/mlx5: use do_aux_work for PHC overflow checks HID: Wacom: Add PCI Wacom device support mfd: lpc_ich: Add another Gemini Lake ISA bridge PCI device-id tomoyo: don't emit warning in tomoyo_write_control() wifi: brcmsmac: add gain range check to wlc_phy_iqcal_gainparams_nphy() mmc: core: Respect quirk_max_rate for non-UHS SDIO card tun: fix group permission check safesetid: check size of policy writes printk: Fix signed integer overflow when defining LOG_BUF_LEN_MAX x86/amd_nb: Restrict init function to AMD-based systems lockdep: Fix upper limit for LOCKDEP_*_BITS configs sched: Don't try to catch up excess steal time. btrfs: convert BUG_ON in btrfs_reloc_cow_block() to proper error handling btrfs: fix use-after-free when attempting to join an aborted transaction btrfs: output the reason for open_ctree() failure usb: gadget: f_tcm: Don't free command immediately media: uvcvideo: Fix double free in error path HID: core: Fix assumption that Resolution Multipliers must be in Logical Collections usb: typec: tcpm: set SRC_SEND_CAPABILITIES timeout to PD_T_SENDER_RESPONSE usb: gadget: f_tcm: Fix Get/SetInterface return value drivers/card_reader/rtsx_usb: Restore interrupt based detection ktest.pl: Check kernelrelease return in get_version netfilter: nf_tables: reject mismatching sum of field_len with set key length NFSD: Reset cb_seq_status after NFS4ERR_DELAY hexagon: Fix unbalanced spinlock in die() hexagon: fix using plain integer as NULL pointer warning in cmpxchg genksyms: fix memory leak when the same symbol is read from *.symref file genksyms: fix memory leak when the same symbol is added from source net: hsr: fix fill_frame_info() regression vs VLAN packets net: sh_eth: Fix missing rtnl lock in suspend/resume path bgmac: reduce max frame size to support just MTU 1500 vsock: Allow retrying on connect() failure perf trace: Fix runtime error of index out of bounds net: davicom: fix UAF in dm9000_drv_remove net: netdevsim: try to close UDP port harness races net: rose: fix timer races against user threads PM: hibernate: Add error handling for syscore_suspend() ipmr: do not call mr_mfc_uses_dev() for unres entries net: fec: implement TSO descriptor cleanup net: hns3: fix oops when unload drivers paralleling ubifs: skip dumping tnc tree when zroot is null rtc: pcf85063: fix potential OOB write in PCF85063 NVMEM read dmaengine: ti: edma: fix OF node reference leaks in edma_driver xfrm: replay: Fix the update of replay_esn->oseq_hi for GSO tools/bootconfig: Fix the wrong format specifier NFSv4.2: fix COPY_NOTIFY xdr buf size calculation module: Extend the preempt disabled section in dereference_symbol_descriptor(). ocfs2: mark dquot as inactive if failed to start trans while releasing dquot scsi: ufs: bsg: Delete bsg_dev when setting up bsg fails scsi: mpt3sas: Set ioc->manu_pg11.EEDPTagMode directly to 1 PCI: rcar-ep: Fix incorrect variable used when calling devm_request_mem_region() staging: media: imx: fix OF node leak in imx_media_add_of_subdevs() mtd: hyperbus: hbmc-am654: fix an OF node reference leak media: uvcvideo: Propagate buf->error to userspace media: camif-core: Add check for clk_enable() media: mipi-csis: Add check for clk_enable() media: marvell: Add check for clk_enable() PCI: endpoint: Destroy the EPC device in devm_pci_epc_destroy() media: lmedm04: Handle errors for lme2510_int_read media: lmedm04: Use GFP_KERNEL for URB allocation/submission. media: rc: iguanair: handle timeouts fbdev: omapfb: Fix an OF node leak in dss_of_port_get_parent_device() ARM: dts: mediatek: mt7623: fix IR nodename arm64: dts: qcom: sm8250: correct sleep clock frequency arm64: dts: qcom: msm8994: correct sleep clock frequency arm64: dts: qcom: msm8916: correct sleep clock frequency arm64: dts: mediatek: mt8173-evb: Fix MT6397 PMIC sub-node names arm64: dts: mediatek: mt8173-elm: Fix MT6397 PMIC sub-node names arm64: dts: mediatek: mt8173-elm: Drop regulator-compatible property arm64: dts: mediatek: mt8173-evb: Drop regulator-compatible property rdma/cxgb4: Prevent potential integer overflow on 32bit RDMA/mlx4: Avoid false error about access to uninitialized gids array arm64: dts: mediatek: mt8516: reserve 192 KiB for TF-A arm64: dts: mediatek: mt8516: add i2c clock-div property arm64: dts: mediatek: mt8516: remove 2 invalid i2c clocks arm64: dts: mediatek: mt8516: fix wdt irq type arm64: dts: mediatek: mt8516: fix GICv2 range padata: avoid UAF for reorder_work padata: add pd get/put refcnt helper padata: fix UAF in padata_reorder bpf: Send signals asynchronously if !preemptible perf report: Fix misleading help message about --demangle perf top: Don't complain about lack of vmlinux when not resolving some kernel samples padata: fix sysfs store callback check ktest.pl: Remove unused declarations in run_bisect_test function perf bpf: Fix two memory leakages when calling perf_env__insert_bpf_prog_info() perf env: Conditionally compile BPF support code on having HAVE_LIBBPF_SUPPORT perf header: Fix one memory leakage in process_bpf_prog_info() perf header: Fix one memory leakage in process_bpf_btf() ASoC: sun4i-spdif: Add clock multiplier settings tools/testing/selftests/bpf/test_tc_tunnel.sh: Fix wait for server bind net/rose: prevent integer overflows in rose_setsockopt() net: ethernet: ti: am65-cpsw: fix freeing IRQ in am65_cpsw_nuss_remove_tx_chns() net: sched: Disallow replacing of child qdisc from one parent to another net/mlxfw: Drop hard coded max FW flash image size net: let net.core.dev_weight always be non-zero pwm: stm32: Add check for clk_enable() clk: analogbits: Fix incorrect calculation of vco rate delta wifi: cfg80211: adjust allocation of colocated AP data wifi: cfg80211: Handle specific BSSID in 6GHz scanning selftests: harness: fix printing of mismatch values in __EXPECT() cpufreq: ACPI: Fix max-frequency computation wifi: mt76: mt76u_vendor_request: Do not print error messages when -EPROTO net/smc: fix data error when recvmsg with MSG_PEEK flag wifi: wlcore: fix unbalanced pm_runtime calls regulator: of: Implement the unwind path of of_regulator_match() team: prevent adding a device which is already a team device lower clk: imx8mp: Fix clkout1/2 support cpufreq: schedutil: Fix superfluous updates caused by need_freq_update cpufreq: schedutil: Simplify sugov_update_next_freq() leds: netxbig: Fix an OF node reference leak in netxbig_leds_get_of_pdata() cpupower: fix TSC MHz calculation ACPI: fan: cleanup resources in the error path of .probe() wifi: rtlwifi: pci: wait for firmware loading before releasing memory wifi: rtlwifi: fix memory leaks and invalid access at probe error path wifi: rtlwifi: destroy workqueue at rtl_deinit_core wifi: rtlwifi: remove unused check_buddy_priv wifi: rtlwifi: remove unused dualmac control leftovers wifi: rtlwifi: remove unused timer and related code rtlwifi: replace usage of found with dedicated list iterator variable dt-bindings: mmc: controller: clarify the address-cells description spi: zynq-qspi: Add check for clk_enable() wifi: rtlwifi: usb: fix workqueue leak when probe fails wifi: rtlwifi: fix init_sw_vars leak when probe fails wifi: rtlwifi: wait for firmware loading before releasing memory rtlwifi: remove redundant assignment to variable err wifi: rtlwifi: rtl8192se: rise completion of firmware loading as last step wifi: rtlwifi: do not complete firmware loading needlessly ipmi: ipmb: Add check devm_kasprintf() returned value genirq: Make handle_enforce_irqctx() unconditionally available drm/amdgpu: Fix potential NULL pointer dereference in atomctrl_get_smc_sclk_range_table drm/etnaviv: Fix page property being used for non writecombine buffers afs: Fix the fallback handling for the YFS.RemoveFile2 RPC call select: Fix unbalanced user_access_end() partitions: ldm: remove the initial kernel-doc notation nvme: Add error check for xa_store in nvme_get_effects_log nbd: don't allow reconnect after disconnect afs: Fix directory format encoding struct afs: Fix EEXIST error returned from afs_rmdir() to be ENOTEMPTY Conflicts: Documentation/devicetree/bindings/mmc/mmc-controller.yaml Documentation/devicetree/bindings~HEAD drivers/mmc/host/sdhci-msm.c drivers/soc/qcom/socinfo.c Change-Id: Ie7189758f83611ac505a39a3f6be5682c0dd4043 |
||
|
Michael Bestas
|
b5cc363e04 |
Merge tag 'ASB-2025-03-05_12-5.10' of https://android.googlesource.com/kernel/common into android13-5.10-waipio
https://source.android.com/docs/security/bulletin/2025-03-01 CVE-2024-46852 CVE-2024-50302 CVE-2025-22413 * tag 'ASB-2025-03-05_12-5.10' of https://android.googlesource.com/kernel/common: UPSTREAM: dma-fence: Fix reference leak on fence merge failure path UPSTREAM: dma-buf: fix an error pointer vs NULL bug UPSTREAM: dma-buf: keep the signaling time of merged fences v3 UPSTREAM: dma-buf: actually set signaling bit for private stub fences UPSTREAM: dma-buf: set signaling bit for the stub fence UPSTREAM: dma-buf: Remove the signaled bit status check UPSTREAM: dma-buf: revert "return only unsignaled fences in dma_fence_unwrap_for_each v3" UPSTREAM: dma-buf: generalize dma_fence unwrap & merging v3 UPSTREAM: dma-buf: return only unsignaled fences in dma_fence_unwrap_for_each v3 BACKPORT: dma-buf: cleanup dma_fence_unwrap implementation UPSTREAM: dma-buf: cleanup dma_fence_unwrap selftest v2 UPSTREAM: dma-buf: cleanup dma_fence_chain_walk UPSTREAM: dma-buf/sync_file: cleanup fence merging a bit UPSTREAM: dma-buf: handle empty dma_fence_arrays gracefully UPSTREAM: dma-buf/sync-file: fix logic error in new fence merge code UPSTREAM: dma-buf/sync-file: fix warning about fence containers BACKPORT: dma-buf: add dma_fence_unwrap v2 UPSTREAM: dma-buf: Add dma_fence_array_for_each (v2) UPSTREAM: dma-buf: add dma_fence_chain_contained helper UPSTREAM: dma-buf: clarify dma_fence_add_callback documentation UPSTREAM: dma-buf: add dma_fence_chain_alloc/free v3 UPSTREAM: drm/syncobj: use newly allocated stub fences UPSTREAM: dma-buf: use krealloc_array() UPSTREAM: mm: slab: provide krealloc_array() ANDROID: ABI: update symbol list for honor ANDROID: GKI: export usleep_range_state function to support SAGT ANDROID: vendor_hooks: add vendor hook to support SAGT UPSTREAM: Revert "PCI: Use preserve_config in place of pci_flags" ANDROID: GKI: Update symbol list for honor UPSTREAM: binder: log transaction code on failure UPSTREAM: binder: add failed transaction logging info Revert "net: net_namespace: Optimize the code" Revert "net: add exit_batch_rtnl() method" Revert "gtp: use exit_batch_rtnl() method" Revert "gtp: Use for_each_netdev_rcu() in gtp_genl_dump_pdp()." Revert "gtp: Destroy device along with udp socket's netns dismantle." Revert "fs: fix missing declaration of init_files" Revert "loop: let set_capacity_revalidate_and_notify update the bdev size" Revert "nvme: let set_capacity_revalidate_and_notify update the bdev size" Revert "sd: update the bdev size in sd_revalidate_disk" Revert "block: remove the update_bdev parameter to set_capacity_revalidate_and_notify" Linux 5.10.234 Partial revert of xhci: use pm_ptr() instead #ifdef for CONFIG_PM conditionals xhci: use pm_ptr() instead of #ifdef for CONFIG_PM conditionals drm/v3d: Assign job pointer to NULL before signaling the fence Input: xpad - add support for wooting two he (arm) Input: xpad - add unofficial Xbox 360 wireless receiver clone Input: atkbd - map F23 key to support default copilot shortcut Revert "usb: gadget: u_serial: Disable ep before setting port to null to fix the crash caused by port being null" USB: serial: quatech2: fix null-ptr-deref in qt2_process_read_urb() wifi: iwlwifi: add a few rate index validity checks ipv4: ip_tunnel: Fix suspicious RCU usage warning in ip_tunnel_find() Bluetooth: RFCOMM: Fix not validating setsockopt user input vfio/platform: check the bounds of read/write syscalls signal/m68k: Use force_sigsegv(SIGSEGV) in fpsp040_die m68k: Update ->thread.esp0 before calling syscall_trace() in ret_from_signal net: sched: fix ets qdisc OOB Indexing gfs2: Truncate address space when flipping GFS2_DIF_JDATA flag ASoC: samsung: Add missing depends on I2C irqchip/sunxi-nmi: Add missing SKIP_WAKE flag scsi: iscsi: Fix redundant response for ISCSI_UEVENT_GET_HOST_STATS request seccomp: Stub for !CONFIG_SECCOMP ASoC: samsung: Add missing selects for MFD_WM8994 ASoC: wm8994: Add depends on MFD core net: fix data-races around sk->sk_forward_alloc scsi: sg: Fix slab-use-after-free read in sg_release() x86/xen: fix SLS mitigation in xen_hypercall_iret() vsock: prevent null-ptr-deref in vsock_*[has_data|has_space] vsock/virtio: discard packets if the transport changes fou: remove warn in gue_gro_receive on unsupported protocol nfsd: add list_head nf_gc to struct nfsd_file ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev() blk-cgroup: Fix UAF in blkcg_unpin_online() RDMA/hns: Fix deadlock on SRQ async events. vmalloc: fix accounting with i915 drm/radeon: check bo_va->bo is non-NULL before using it iio: adc: rockchip_saradc: fix information leak in triggered buffer iio: imu: inv_icm42600: fix timestamps after suspend if sensor is on iio: imu: inv_icm42600: fix spi burst write not supported Revert "PCI: Use preserve_config in place of pci_flags" hrtimers: Handle CPU state correctly on hotplug irqchip/gic-v3: Handle CPU_PM_ENTER_FAILED correctly gpiolib: cdev: Fix use after free in lineinfo_changed_notify fs/proc: fix softlockup in __read_vmcore (part 2) vsock: reset socket state when de-assigning the transport vsock/virtio: cancel close work in the destructor net: ethernet: xgbe: re-add aneg to supported features in PHY quirks x86/asm: Make serialize() always_inline nvmet: propagate npwg topology poll_wait: add mb() to fix theoretical race between waitqueue_active() and .poll() kheaders: Ignore silly-rename files fs: fix missing declaration of init_files hfs: Sanity check the root record mac802154: check local interfaces before deleting sdata list i2c: rcar: fix NACK handling when being a target i2c: mux: demux-pinctrl: check initial mux selection, too drm/v3d: Ensure job pointer is set to NULL after job completion net/mlx5: Fix RDMA TX steering prio net/mlx5: Refactor mlx5_get_flow_namespace net/mlx5: Add priorities for counters in RDMA namespaces nfp: bpf: prevent integer overflow in nfp_bpf_event_output() gtp: Destroy device along with udp socket's netns dismantle. gtp: Use for_each_netdev_rcu() in gtp_genl_dump_pdp(). gtp: use exit_batch_rtnl() method net: add exit_batch_rtnl() method net: net_namespace: Optimize the code bpf: Fix bpf_sk_select_reuseport() memory leak net: ethernet: ti: cpsw_ale: Fix cpsw_ale_get_field() phy: usb: Fix clock imbalance for suspend/resume phy: usb: Use slow clock for wake enabled suspend sctp: sysctl: rto_min/max: avoid using current->nsproxy drm: adv7511: Fix use-after-free in adv7533_attach_dsi() drm: bridge: adv7511: use dev_err_probe in probe function drm: bridge: adv7511: unregister cec i2c device after cec adapter drm/bridge: adv7533: Switch to devm MIPI-DSI helpers drm/mipi-dsi: Create devm device attachment drm/mipi-dsi: Create devm device registration drm: bridge: adv7511: Remove redundant null check before clk_disable_unprepare ocfs2: fix slab-use-after-free due to dangling pointer dqi_priv ocfs2: correct return value of ocfs2_local_free_info() phy: usb: Toggle the PHY power during init phy: usb: Add "wake on" functionality for newer Synopsis XHCI controllers block: remove the update_bdev parameter to set_capacity_revalidate_and_notify sd: update the bdev size in sd_revalidate_disk nvme: let set_capacity_revalidate_and_notify update the bdev size loop: let set_capacity_revalidate_and_notify update the bdev size arm64: dts: rockchip: add hevc power domain clock to rk3328 arm64: dts: rockchip: add #power-domain-cells to power domain nodes iio: inkern: call iio_device_put() only on mapped devices iio: adc: at91: call input_free_device() on allocated iio_dev iio: adc: ti-ads124s08: Use gpiod_set_value_cansleep() iio: gyro: fxas21002c: Fix missing data update in trigger handler iio: adc: ti-ads8688: fix information leak in triggered buffer iio: imu: kmx61: fix information leak in triggered buffer iio: light: vcnl4035: fix information leak in triggered buffer iio: dummy: iio_simply_dummy_buffer: fix information leak in triggered buffer iio: pressure: zpa2326: fix information leak in triggered buffer usb: gadget: f_fs: Remove WARN_ON in functionfs_bind usb: fix reference leak in usb_new_device() USB: core: Disable LPM only for non-suspended ports USB: usblp: return error when setting unsupported protocol usb: gadget: u_serial: Disable ep before setting port to null to fix the crash caused by port being null usb: dwc3: gadget: fix writing NYET threshold USB: serial: cp210x: add Phoenix Contact UPS Device usb-storage: Add max sectors quirk for Nokia 208 staging: iio: ad9832: Correct phase range check staging: iio: ad9834: Correct phase range check USB: serial: option: add Neoway N723-EA support USB: serial: option: add MeiG Smart SRM815 md/raid5: fix atomicity violation in raid5_cache_count scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity drm/amd/display: increase MAX_SURFACES to the value supported by hw ACPI: resource: Add Asus Vivobook X1504VAP to irq1_level_low_skip_override[] ACPI: resource: Add TongFang GM5HG0A to irq1_edge_low_force_override[] riscv: Fix sleeping in invalid context in die() drm/amd/display: Add check for granularity in dml ceil/floor helpers sctp: sysctl: auth_enable: avoid using current->nsproxy sctp: sysctl: cookie_hmac_alg: avoid using current->nsproxy dm-ebs: don't set the flag DM_TARGET_PASSES_INTEGRITY dm thin: make get_first_thin use rcu-safe list first function afs: Fix the maximum cell name length netfilter: conntrack: clamp maximum hashtable size to INT_MAX netfilter: nf_tables: imbalance in flowtable binding tls: Fix tls_sw_sendmsg error handling cxgb4: Avoid removal of uninserted tid net_sched: cls_flow: validate TCA_FLOW_RSHIFT attribute tcp/dccp: allow a connection when sk_max_ack_backlog is zero tcp/dccp: complete lockless accesses to sk->sk_max_ack_backlog net: 802: LLC+SNAP OID:PID lookup on start of skb data ieee802154: ca8210: Add missing check for kfifo_alloc() in ca8210_probe() netfilter: nft_dynset: honor stateful expressions in set definition ASoC: mediatek: disable buffer pre-allocation exfat: fix the infinite loop in exfat_readdir() dm array: fix cursor index when skipping across block boundaries dm array: fix unreleased btree blocks on closing a faulty array cursor dm array: fix releasing a faulty array block twice in dm_array_cursor_end jbd2: flush filesystem device before updating tail sequence ceph: give up on paths longer than PATH_MAX Conflicts: android/abi_gki_aarch64.xml Change-Id: I875d8334aaee8da824279af0f3910159f2ddd48b |
||
|
Michael Bestas
|
c48021f43c |
Merge tag 'ASB-2025-02-05_12-5.10' of https://android.googlesource.com/kernel/common into android13-5.10-waipio
https://source.android.com/docs/security/bulletin/2025-02-01 CVE-2024-53104 CVE-2025-0088 * tag 'ASB-2025-02-05_12-5.10' of https://android.googlesource.com/kernel/common: BACKPORT: sched/fair: Move update_nohz_stats() to the CONFIG_NO_HZ_COMMON block to simplify the code & fix an unused function warning ANDROID: KABI macros to release excess KABI fields for use with backports UPSTREAM: usb: gadget: u_audio: Check return codes from usb_ep_enable and config_ep_by_speed. UPSTREAM: usb: dwc3: core: remove lock of otg mode during gadget suspend/resume to avoid deadlock UPSTREAM: xhci: Handle TD clearing for multiple streams case UPSTREAM: KVM: arm64: Fix AArch32 register narrowing on userspace write UPSTREAM: usb: gadget: u_audio: Fix race condition use of controls after free during gadget unbind. UPSTREAM: coresight: etm4x: Do not hardcode IOMEM access for register restore UPSTREAM: coresight: etm4x: Fix unbalanced pm_runtime_enable() UPSTREAM: ubsan: fix unused variable warning in test module BACKPORT: powercap: dtpm_cpu: Fix error check against freq_qos_add_request() UPSTREAM: usb: gadget: ncm: Fix indentations in documentation of NCM section BACKPORT: scs: add CONFIG_MMU dependency for vfree_atomic() UPSTREAM: mm/damon/vaddr: change asm-generic/mman-common.h to linux/mman.h UPSTREAM: ASoC: hdmi-codec: fix missing report for jack initial status UPSTREAM: usb: gadget: uvc: fix dropped frame after missed isoc BACKPORT: exfat: fix overflow for large capacity partition FROMGIT: f2fs: Introduce linear search for dentries ANDROID: GKI: Add additional symbols for honor ANDROID: GKI: Update symbol list for honor ANDROID: ABI: update symbol list for honor ANDROID: arm64: add vendor hooks for bad_stack. UPSTREAM: selinux: ignore unknown extended permissions ANDROID: GKI: Update symbol list for honor ANDROID: Allow vendor modules perform more operationson on sock. ANDROID: GKI: virtual_device: add blk_mq_quiesce_queue_nowait to the symbol list ANDROID: ABI: update symbol list for honor ANDROID: mm: add vendor hook in fault and read file Revert "tracing: Constify string literal data member in struct trace_event_call" Revert "skb_expand_head() adjust skb->truesize incorrectly" BACKPORT: block, bfq: fix UAF problem in bfqg_stats_init() Linux 5.10.233 mm: vmscan: account for free pages to prevent infinite Loop in throttle_direct_reclaim() drm: adv7511: Drop dsi single lane support net/sctp: Prevent autoclose integer overflow in sctp_association_init() sky2: Add device ID 11ab:4373 for Marvell 88E8075 pinctrl: mcp23s08: Fix sleeping in atomic context due to regmap locking RDMA/uverbs: Prevent integer overflow issue modpost: fix the missed iteration for the max bit in do_input() modpost: fix input MODULE_DEVICE_TABLE() built for 64-bit on 32-bit host btrfs: don't set lock_owner when locking extent buffer for reading btrfs: locking: remove the recursion handling code ARC: build: Try to guess GCC variant of cross compiler irqchip/gic: Correct declaration of *percpu_base pointer in union gic_base net: usb: qmi_wwan: add Telit FE910C04 compositions bpf: fix potential error return sound: usb: format: don't warn that raw DSD is unsupported btrfs: flush delalloc workers queue before stopping cleaner kthread during unmount wifi: mac80211: wake the queues in case of failure in resume tracing: Prevent bad count for tracing_cpumask_write kernel: Initialize cpumask before parsing btrfs: fix use-after-free when COWing tree bock and tracing is enabled btrfs: rename and export __btrfs_cow_block() btrfs: locking: remove all the blocking helpers btrfs: switch extent buffer tree lock to rw_semaphore dmaengine: dw: Select only supported masters for ACPI devices ila: serialize calls to nf_register_net_hooks() af_packet: fix vlan_get_protocol_dgram() vs MSG_PEEK af_packet: fix vlan_get_tci() vs MSG_PEEK RDMA/rtrs: Ensure 'ib_sge list' is accessible eth: bcmsysport: fix call balance of priv->clk handling routines ALSA: usb-audio: US16x08: Initialize array before use net: llc: reset skb->transport_header netfilter: nft_set_hash: unaligned atomic read on struct nft_set_ext netrom: check buffer length before accessing it drm/bridge: adv7511_audio: Update Audio InfoFrame properly RDMA/bnxt_re: Fix the locking while accessing the QP table RDMA/bnxt_re: Fix max_qp_wrs reported RDMA/bnxt_re: Fix reporting hw_ver in query_device RDMA/bnxt_re: Add check for path mtu in modify_qp RDMA/mlx5: Enforce same type port association for multiport RoCE net/mlx5: Make API mlx5_core_is_ecpf accept const pointer thunderbolt: Add support for Intel Panther Lake-M/P thunderbolt: Add support for Intel Lunar Lake thunderbolt: Add Intel Barlow Ridge PCI ID thunderbolt: Add support for Intel Meteor Lake thunderbolt: Add support for Intel Raptor Lake thunderbolt: Add support for Intel Alder Lake selinux: ignore unknown extended permissions x86/hyperv: Fix hv tsc page based sched_clock for hibernation ipv6: prevent possible UAF in ip6_xmit() skb_expand_head() adjust skb->truesize incorrectly nfsd: cancel nfsd_shrinker_work using sync mode in nfs4_state_shutdown_net btrfs: avoid monopolizing a core when activating a swap file power: supply: gpio-charger: Fix set charge current limits tracing: Constify string literal data member in struct trace_event_call arm64: Ensure bits ASID[15:8] are masked out when the kernel uses 8-bit ASIDs arm64: mm: Rename asid2idx() to ctxid2asid() drm/dp_mst: Fix MST sideband message body length check bpf: fix recursive lock when verdict program return SK_PASS bpf: Check validity of link->type in bpf_link_show_fdinfo() ipv6: fix possible UAF in ip6_finish_output2() ipv6: use skb_expand_head in ip6_xmit ipv6: use skb_expand_head in ip6_finish_output2 skbuff: introduce skb_expand_head() MIPS: Probe toolchain support of -msym32 virtio-blk: don't keep queue frozen during system suspend scsi: storvsc: Do not flag MAINTENANCE_IN return of SRB_STATUS_DATA_OVERRUN as an error scsi: mpt3sas: Diag-Reset when Doorbell-In-Use bit is set during driver load time platform/x86: asus-nb-wmi: Ignore unknown event 0xCF regmap: Use correct format specifier for logging range errors ALSA: hda/conexant: fix Z60MR100 startup pop issue scsi: megaraid_sas: Fix for a potential deadlock scsi: qla1280: Fix hw revision numbering for ISP1020/1040 watchdog: it87_wdt: add PWRGD enable quirk for Qotom QCML04 tracing/kprobe: Make trace_kprobe's module callback called after jump_label update mtd: rawnand: fix double free in atmel_pmecc_create_user() dmaengine: at_xdmac: avoid null_prt_deref in at_xdmac_prep_dma_memset dmaengine: mv_xor: fix child node refcount handling in early exit phy: core: Fix that API devm_phy_destroy() fails to destroy the phy phy: core: Fix that API devm_of_phy_provider_unregister() fails to unregister the phy provider phy: core: Fix that API devm_phy_put() fails to release the phy phy: core: Fix an OF node refcount leakage in of_phy_provider_lookup() phy: core: Fix an OF node refcount leakage in _of_phy_get() mtd: diskonchip: Cast an operand to prevent potential overflow nfsd: restore callback functionality for NFSv4.0 bpf: Check negative offsets in __bpf_skb_min_len() tcp_bpf: Charge receive socket buffer in bpf_tcp_ingress() mm/vmstat: fix a W=1 clang compiler warning media: dvb-frontends: dib3000mb: fix uninit-value in dib3000_write_reg epoll: Add synchronous wakeup support for ep_poll_callback ceph: validate snapdirname option length when mounting of: Fix refcount leakage for OF node returned by __of_get_dma_parent() of: Fix error path in of_parse_phandle_with_args_map() udmabuf: also check for F_SEAL_FUTURE_WRITE nilfs2: prevent use of deleted inode of/irq: Fix using uninitialized variable @addr_len in API of_irq_parse_one() NFS/pnfs: Fix a live lock between recalled layouts and layoutget Drivers: hv: util: Avoid accessing a ringbuffer not initialized yet btrfs: tree-checker: reject inline extent items with 0 ref count zram: refuse to use zero sized block device as backing device sh: clk: Fix clk_enable() to return 0 on NULL clk hwmon: (tmp513) Fix interpretation of values of Temperature Result and Limit Registers USB: serial: option: add Telit FE910C04 rmnet compositions USB: serial: option: add MediaTek T7XX compositions USB: serial: option: add Netprisma LCUK54 modules for WWAN Ready USB: serial: option: add MeiG Smart SLM770A USB: serial: option: add TCL IK512 MBIM & ECM efivarfs: Fix error on non-existent file i2c: riic: Always round-up when calculating bus period chelsio/chtls: prevent potential integer overflow on 32bit mmc: sdhci-tegra: Remove SDHCI_QUIRK_BROKEN_ADMA_ZEROLEN_DESC quirk netfilter: ipset: Fix for recursive locking warning net: ethernet: bgmac-platform: fix an OF node reference leak net: hinic: Fix cleanup in create_rxqs/txqs() ionic: use ee->offset when returning sprom data netdevsim: prevent bad user input in nsim_dev_health_break_write() netdevsim: switch to memdup_user_nul() net/smc: check return value of sock_recvmsg when draining clc data net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg net/smc: check sndbuf_space again after NOSPACE flag is set in smc_poll erofs: fix incorrect symlink detection in fast symlink erofs: fix order >= MAX_ORDER warning due to crafted negative i_size i2c: pnx: Fix timeout in wait functions usb: dwc2: gadget: Don't write invalid mapped sg entries into dma_desc with iommu enabled usb: cdns3: Add quirk flag to enable suspend residency PCI: Add ACS quirk for Broadcom BCM5760X NIC ALSA: usb: Fix UBSAN warning in parse_audio_unit() MIPS: Loongson64: DTS: Fix msi node for ls7a PCI: Use preserve_config in place of pci_flags PCI/AER: Disable AER service on suspend net: sched: fix ordering of qlen adjustment UPSTREAM: Revert "usb: gadget: composite: fix OS descriptors w_value logic" ANDROID: GKI: Update the ABI symbol list UPSTREAM: bpf: sync_linked_regs() must preserve subreg_def ANDROID: fix up crc problems 5.10.231 Revert "xfrm: rename xfrm_state_offload struct to allow reuse" Revert "xfrm: store and rely on direction to construct offload flags" Revert "netdevsim: rely on XFRM state direction instead of flags" Revert "netdevsim: copy addresses for both in and out paths" Revert "i3c: fix incorrect address slot lookup on 64-bit" Revert "i3c: master: Replace hard code 2 with macro I3C_ADDR_SLOT_STATUS_BITS" Revert "i3c: master: Extend address status bit to 4 and add I3C_ADDR_SLOT_EXT_DESIRED" Revert "i3c: master: Fix dynamic address leak when 'assigned-address' is present" Linux 5.10.232 x86/static-call: fix 32-bit build ALSA: usb-audio: Fix a DMA to stack memory bug x86/xen: remove hypercall page x86/xen: use new hypercall functions instead of hypercall page x86/xen: add central hypercall functions x86/xen: don't do PV iret hypercall through hypercall page x86/static-call: provide a way to do very early static-call updates objtool/x86: allow syscall instruction x86: make get_cpu_vendor() accessible from Xen code xen/netfront: fix crash when removing device Revert "clkdev: remove CONFIG_CLKDEV_LOOKUP" Revert "clocksource/drivers:sp804: Make user selectable" drm/i915: Fix memory leak by correcting cache object name in error handler tracing/kprobes: Skip symbol counting logic for module symbols in create_local_trace_kprobe() bpf: sync_linked_regs() must preserve subreg_def blk-iocost: Avoid using clamp() on inuse in __propagate_weights() ACPICA: events/evxfregn: don't release the ContextMutex that was never acquired team: Fix feature propagation of NETIF_F_GSO_ENCAP_ALL bonding: Fix feature propagation of NETIF_F_GSO_ENCAP_ALL net: bonding, dummy, ifb, team: advertise NETIF_F_GSO_SOFTWARE net/sched: netem: account for backlog updates from child qdisc qca_spi: Make driver probing reliable qca_spi: Fix clock speed for multiple QCA7000 cxgb4: use port number to set mac addr ACPI: resource: Fix memory resource type union access net: lapb: increase LAPB_HEADER_LEN selftests: mlxsw: sharedbuffer: Remove duplicate test cases selftests: mlxsw: sharedbuffer: Remove h1 ingress test case tipc: fix NULL deref in cleanup_bearer() batman-adv: Do not let TT changes list grows indefinitely batman-adv: Remove uninitialized data in full table TT response batman-adv: Do not send uninitialized TT changes acpi: nfit: vmalloc-out-of-bounds Read in acpi_nfit_ctl exfat: fix potential deadlock on __exfat_get_dentry_set virtio/vsock: Fix accept_queue memory leak bpf, sockmap: Fix update element with same xfs: fix scrub tracepoints when inode-rooted btrees are involved xfs: don't drop errno values when we fail to ficlone the entire range usb: gadget: u_serial: Fix the issue that gs_start_io crashed due to accessing null pointer usb: ehci-hcd: fix call balance of clocks handling routines usb: dwc2: hcd: Fix GetPortStatus & SetPortFeature ata: sata_highbank: fix OF node reference leak in highbank_initialize_phys() usb: host: max3421-hcd: Correctly abort a USB request. tcp: check space before adding MPTCP SYN options Linux 5.10.231 octeontx2-pf: Fix otx2_get_fecparam() octeontx2: Fix condition. media: uvcvideo: Require entities to have a non-zero unique ID ALSA: usb-audio: Fix out of bounds reads when finding clock sources scsi: core: Fix scsi_mode_select() buffer length handling scsi: sd: Fix sd_do_mode_sense() buffer length handling PCI: rockchip-ep: Fix address translation unit programming Revert "drm/amdgpu: add missing size check in amdgpu_debugfs_gprwave_read()" modpost: Add .irqentry.text to OTHER_SECTIONS ocfs2: Revert "ocfs2: fix the la space leak when unmounting an ocfs2 volume" drm/amd/display: Check BIOS images before it is used xhci: dbc: Fix STALL transfer event handling jffs2: Fix rtime decompressor jffs2: Prevent rtime decompress memory corruption KVM: arm64: vgic-its: Clear ITE when DISCARD frees an ITE KVM: arm64: vgic-its: Clear DTE when MAPD unmaps a device KVM: arm64: vgic-its: Add a data length check in vgic_its_save_* Revert "unicode: Don't special case ignorable code points" btrfs: fix missing snapshot drew unlock when root is dead during swap activation sched/core: Prevent wakeup of ksoftirqd during idle load balance sched/fair: Check idle_cpu() before need_resched() to detect ilb CPU turning busy sched/fair: Add NOHZ balancer flag for nohz.next_balance updates sched/fair: Trigger the update of blocked load on newly idle cpu sched/fair: Merge for each idle cpu loop of ILB sched/fair: Remove unused parameter of update_nohz_stats sched/fair: Remove update of blocked load from newidle_balance sched/core: Remove the unnecessary need_resched() check in nohz_csd_func() misc: eeprom: eeprom_93cx6: Add quirk for extra read clock cycle powerpc/prom_init: Fixup missing powermac #size-cells MIPS: Loongson64: DTS: Really fix PCIe port nodes for ls7a usb: chipidea: udc: handle USB Error Interrupt if IOC not set i3c: Use i3cdev->desc->info instead of calling i3c_device_get_info() to avoid deadlock PCI: Add ACS quirk for Wangxun FF5xxx NICs PCI: Add 'reset_subordinate' to reset hierarchy below bridge f2fs: fix f2fs_bug_on when uninstalling filesystem call f2fs_evict_inode. nvdimm: rectify the illogical code within nd_dax_probe() pinctrl: qcom-pmic-gpio: add support for PM8937 scsi: st: Add MTIOCGET and MTLOAD to ioctls allowed after device reset scsi: st: Don't modify unknown block number in MTIOCGET leds: class: Protect brightness_show() with led_cdev->led_access mutex scsi: hisi_sas: Add cond_resched() for no forced preemption model tracing: Use atomic64_inc_return() in trace_clock_counter() pinctrl: freescale: fix COMPILE_TEST error with PINCTRL_IMX_SCU netpoll: Use rcu_access_pointer() in __netpoll_setup net/neighbor: clear error in case strict check is not set rocker: fix link status detection in rocker_carrier_init() ASoC: hdmi-codec: reorder channel allocation list Bluetooth: btusb: Add RTL8852BE device 0489:e123 to device tables wifi: brcmfmac: Fix oops due to NULL pointer dereference in brcmf_sdiod_sglist_rw() wifi: ipw2x00: libipw_rx_any(): fix bad alignment drm/amdgpu: set the right AMDGPU sg segment limitation drm/amdgpu: skip amdgpu_device_cache_pci_state under sriov jfs: add a check to prevent array-index-out-of-bounds in dbAdjTree jfs: fix array-index-out-of-bounds in jfs_readdir jfs: fix shift-out-of-bounds in dbSplit jfs: array-index-out-of-bounds fix in dtReadFirst dma-debug: fix a possible deadlock on radix_lock drm/amdgpu: refine error handling in amdgpu_ttm_tt_pin_userptr wifi: ath5k: add PCI ID for Arcadyan devices wifi: ath5k: add PCI ID for SX76X net: inet6: do not leave a dangling sk pointer in inet6_create() net: inet: do not leave a dangling sk pointer in inet_create() net: ieee802154: do not leave a dangling sk pointer in ieee802154_create() net: af_can: do not leave a dangling sk pointer in can_create() Bluetooth: L2CAP: do not leave dangling sk pointer on error in l2cap_sock_create() af_packet: avoid erroring out after sock_init_data() in packet_create() net/sched: cbs: Fix integer overflow in cbs_set_port_rate() net: ethernet: fs_enet: Use %pa to format resource_size_t net: fec_mpc52xx_phy: Use %pa to format resource_size_t samples/bpf: Fix a resource leak r8169: don't apply UDP padding quirk on RTL8126A drm/radeon/r600_cs: Fix possible int overflow in r600_packet3_check() drm/mcde: Enable module autoloading drm: panel-orientation-quirks: Add quirk for AYA NEO 2 model drm/vc4: hvs: Set AXI panic modes for the HVS media: cx231xx: Add support for Dexatek USB Video Grabber 1d19:6108 media: uvcvideo: Add a quirk for the Kaiweets KTI-W02 infrared camera kcsan: Turn report_filterlist_lock into a raw_spinlock kselftest/arm64: Don't leak pipe fds in pac.exec_sign_all() btrfs: avoid unnecessary device path update for the same device s390/cpum_sf: Handle CPU hotplug remove during sampling iommu/arm-smmu: Defer probe of clients after smmu device bound ocfs2: update seq_file index in ocfs2_dlm_seq_next mmc: core: Further prevent card detect during shutdown mmc: sdhci-pci: Add DMI quirk for missing CD GPIO on Vexia Edu Atla 10 tablet regmap: detach regmap from dev on regmap_exit dma-buf: fix dma_fence_array_signaled v4 bpf: fix OOB devmap writes when deleting elements bcache: revert replacing IS_ERR_OR_NULL with IS_ERR again nilfs2: fix potential out-of-bounds memory access in nilfs_find_entry() scsi: qla2xxx: Remove check req_sg_cnt should be equal to rsp_sg_cnt scsi: qla2xxx: Fix use after free on unload scsi: qla2xxx: Supported speed displayed incorrectly for VPorts scsi: qla2xxx: Fix NVMe and NPIV connect issue ALSA: hda/realtek: Add support for Samsung Galaxy Book3 360 (NP730QFG) ALSA: hda/realtek: Enable mute and micmute LED on HP ProBook 430 G8 ALSA: usb-audio: add mixer mapping for Corsair HS80 arm64: ptrace: fix partial SETREGSET for NT_ARM_TAGGED_ADDR_CTRL tracing: Fix cmp_entries_dup() to respect sort() comparison rules watchdog: rti: of: honor timeout-sec property HID: wacom: fix when get product name maybe null pointer bpf: Fix exact match conditions in trie_get_next_key() bpf: Handle BPF_EXIST and BPF_NOEXIST for LPM trie ocfs2: free inode when ocfs2_get_init_inode() fails spi: mpc52xx: Add cancel_work_sync before module remove tcp_bpf: Fix the sk_mem_uncharge logic in tcp_bpf_sendmsg drm/sti: Add __iomem for mixer_dbg_mxn's parameter i3c: master: Fix dynamic address leak when 'assigned-address' is present i3c: master: Extend address status bit to 4 and add I3C_ADDR_SLOT_EXT_DESIRED i3c: master: Replace hard code 2 with macro I3C_ADDR_SLOT_STATUS_BITS i3c: fix incorrect address slot lookup on 64-bit dt-bindings: serial: rs485: Fix rs485-rts-delay property dt_bindings: rs485: Correct delay values gpio: grgpio: Add NULL check in grgpio_probe gpio: grgpio: use a helper variable to store the address of ofdev->dev geneve: do not assume mac header is set in geneve_xmit_skb() ethtool: Fix wrong mod state in case of verbose and no_mask bitset netfilter: nft_set_hash: skip duplicated elements pending gc run netfilter: ipset: Hold module reference while requesting a module net: sched: fix erspan_opt settings in cls_flower igb: Fix potential invalid memory access in igb_init_module() net/qed: allow old cards not supporting "num_images" to work tipc: Fix use-after-free of kernel socket in cleanup_bearer(). dccp: Fix memory leak in dccp_feat_change_recv net/ipv6: release expired exception dst cached in socket can: j1939: j1939_session_new(): fix skb reference counting net: hsr: avoid potential out-of-bound access in fill_frame_info() net/sched: tbf: correct backlog statistic for GSO packets ptp: Add error handling for adjfine callback in ptp_clock_adjtime netfilter: x_tables: fix LED ID check in led_tg_check() ipvs: fix UB due to uninitialized stack access in ip_vs_protocol_init() can: sun4i_can: sun4i_can_err(): fix {rx,tx}_errors statistics can: sun4i_can: sun4i_can_err(): call can_change_state() even if cf is NULL watchdog: mediatek: Make sure system reset gets asserted in mtk_wdt_restart() iTCO_wdt: mask NMI_NOW bit for update_no_reboot_bit() call drm/etnaviv: flush shader L1 cache after user commandstream btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc() nfsd: fix nfs4_openowner leak when concurrent nfsd4_open occur nfsd: make sure exp active before svc_export_show dm thin: Add missing destroy_work_on_stack() PCI: keystone: Add link up check to ks_pcie_other_map_bus() i3c: master: Fix miss free init_dyn_addr at i3c_master_put_i3c_addrs() scsi: ufs: exynos: Fix hibern8 notify callbacks util_macros.h: fix/rework find_closest() macros ad7780: fix division by zero in ad7780_write_raw() btrfs: ref-verify: fix use-after-free after invalid ref action quota: flush quota_release_work upon quota writeback octeontx2-pf: Fix out-of-bounds read in otx2_get_fecparam() ASoC: fsl_micfil: fix the naming style for mask definition sh: intc: Fix use-after-free bug in register_intc_controller() sunrpc: clear XPRT_SOCK_UPD_TIMEOUT when reset transport SUNRPC: Replace internal use of SOCKWQ_ASYNC_NOSPACE sunrpc: remove unnecessary test in rpc_task_set_client() SUNRPC: Convert rpc_client refcount to use refcount_t SUNRPC: correct error code comment in xs_tcp_setup_socket() nfs: ignore SB_RDONLY when mounting nfs modpost: remove incorrect code in do_eisa_entry() rtc: ab-eoz9: don't fail temperature reads on undervoltage notification 9p/xen: fix release of IRQ 9p/xen: fix init sequence block: return unsigned int from bdev_io_min jffs2: fix use of uninitialized variable ubifs: authentication: Fix use-after-free in ubifs_tnc_end_commit ubi: fastmap: Fix duplicate slab cache names while attaching ubifs: Correct the total block count by deducting journal reservation rtc: check if __rtc_read_time was successful in rtc_timer_do_work() rtc: abx80x: Fix WDT bit position of the status register rtc: st-lpc: Use IRQF_NO_AUTOEN flag in request_irq() NFSv4.0: Fix a use-after-free problem in the asynchronous open() um: Always dump trace for specified task in show_stack um: Fix the return value of elf_core_copy_task_fpregs um: Fix potential integer overflow during physmem setup rpmsg: glink: Propagate TX failures in intentless mode as well SUNRPC: make sure cache entry active before cache_show NFSD: Prevent a potential integer overflow lib: string_helpers: silence snprintf() output truncation warning usb: dwc3: gadget: Fix looping of queued SG entries usb: dwc3: gadget: Fix checking for number of TRBs left ALSA: hda/realtek: Apply quirk for Medion E15433 ALSA: hda/realtek: Fix Internal Speaker and Mic boost of Infinix Y4 Max ALSA: hda/realtek: Set PCBeep to default value for ALC274 ALSA: hda/realtek: Update ALC225 depop procedure media: v4l2-core: v4l2-dv-timings: check cvt/gtf result media: wl128x: Fix atomicity violation in fmc_send_cmd() HID: wacom: Interpret tilt data from Intuos Pro BT as signed values block: fix ordering between checking BLK_MQ_S_STOPPED request adding arm64: tls: Fix context-switching of tpidrro_el0 when kpti is enabled sh: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK um: vector: Do not use drvdata in release serial: 8250: omap: Move pm_runtime_get_sync um: net: Do not use drvdata in release um: ubd: Do not use drvdata in release ubi: wl: Put source PEB into correct list if trying locking LEB failed platform/chrome: cros_ec_typec: fix missing fwnode reference decrement spi: Fix acpi deferred irq probe netfilter: ipset: add missing range check in bitmap_ip_uadt Revert "serial: sh-sci: Clean sci_ports[0] after at earlycon exit" serial: sh-sci: Clean sci_ports[0] after at earlycon exit Revert "usb: gadget: composite: fix OS descriptors w_value logic" driver core: bus: Fix double free in driver API bus_register() Bluetooth: Fix type of len in rfcomm_sock_getsockopt{,_old}() exfat: fix uninit-value in __exfat_get_dentry_set locking/lockdep: Avoid creating new name string literals in lockdep_set_subclass() tty: ldsic: fix tty_ldisc_autoload sysctl's proc_handler apparmor: test: Fix memory leak for aa_unpack_strdup() comedi: Flush partial mappings in error case fsnotify: fix sending inotify event with unexpected filename PCI: Fix use-after-free of slot->bus on hot remove KVM: arm64: Ignore PMCNTENSET_EL0 while checking for overflow status crypto: x86/aegis128 - access 32-bit arguments as 32-bit perf/x86/intel/pt: Fix buffer full but size is 0 case ASoC: codecs: Fix atomicity violation in snd_soc_component_get_drvdata() jfs: xattr: check invalid xattr size more strictly ext4: fix FS_IOC_GETFSMAP handling ext4: supress data-race warnings in ext4_free_inodes_{count,set}() ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices soc: qcom: socinfo: fix revision check in qcom_socinfo_probe() usb: ehci-spear: fix call balance of sehci clk handling routines xen: Fix the issue of resource not being properly released in xenbus_dev_probe() apparmor: fix 'Do simple duplicate message elimination' ALSA: hda/realtek: Update ALC256 depop procedure ALSA: hda/realtek - Add type for ALC287 staging: greybus: uart: clean up TIOCGSERIAL misc: apds990x: Fix missing pm_runtime_disable() USB: chaoskey: Fix possible deadlock chaoskey_list_lock USB: chaoskey: fail open after removal usb: yurex: make waiting on yurex_write interruptible usb: using mutex lock and supporting O_NONBLOCK flag in iowarrior_read() iio: light: al3010: Fix an error handling path in al3010_probe() ipmr: fix tables suspicious RCU usage ipmr: convert /proc handlers to rcu_read_lock() bnxt_en: Reserve rings after PCIe AER recovery if NIC interface is down net: hsr: fix hsr_init_sk() vs network/transport headers. net: introduce a netdev feature for UDP GRO forwarding spi: atmel-quadspi: Fix register name in verbose logging function net: stmmac: dwmac-socfpga: Set RX watchdog interrupt as broken marvell: pxa168_eth: fix call balance of pep->clk handling routines net: usb: lan78xx: Fix refcounting and autosuspend on invalid WoL configuration tg3: Set coherent DMA mask bits to 31 for BCM57766 chipsets net: usb: lan78xx: Fix memory leak on device unplug by freeing PHY device power: supply: bq27xxx: Fix registers of bq27426 power: supply: bq27xxx: Support CHARGE_NOW for bq27z561/bq28z610/bq34z100 power: supply: core: Remove might_sleep() from power_supply_put() fs_parser: update mount_api doc to match function signature vfio/pci: Properly hide first-in-list PCIe extended capability vdpa/mlx5: Fix suboptimal range on iotlb iteration NFSD: Fix nfsd4_shutdown_copy() NFSD: Cap the number of bytes copied by nfs4_reset_recoverydir() NFSD: Prevent NULL dereference in nfsd4_process_cb_update() remoteproc: qcom_q6v5_mss: Re-order writes to the IMEM region rpmsg: glink: use only lower 16-bits of param2 for CMD_OPEN name length rpmsg: glink: Fix GLINK command prefix rpmsg: glink: Send READ_NOTIFY command in FIFO full case rpmsg: glink: Add TX_DATA_CONT command while sending perf trace: Avoid garbage when not printing a syscall's arguments perf trace: Do not lose last events in a race m68k: coldfire/device.c: only build FEC when HW macros are defined m68k: mcfgpio: Fix incorrect register offset for CONFIG_M5441x perf trace: avoid garbage when not printing a trace event's arguments f2fs: check curseg->inited before write_sum_page in change_curseg f2fs: remove the unused flush argument to change_curseg f2fs: open code allocate_segment_by_default f2fs: remove struct segment_allocation default_salloc_ops f2fs: avoid using native allocate_segment_by_default() f2fs: fix the wrong f2fs_bug_on condition in f2fs_do_replace_block PCI: cpqphp: Fix PCIBIOS_* return value confusion PCI: cpqphp: Use PCI_POSSIBLE_ERROR() to check config reads perf probe: Correct demangled symbols in C++ program perf probe: Fix libdw memory leak perf cs-etm: Don't flush when packet_queue fills up clk: clk-axi-clkgen: make sure to enable the AXI bus clock clk: axi-clkgen: use devm_platform_ioremap_resource() short-hand dt-bindings: clock: axi-clkgen: include AXI clk dt-bindings: clock: adi,axi-clkgen: convert old binding to yaml format fbdev: sh7760fb: Fix a possible memory leak in sh7760fb_alloc_mem() fbdev/sh7760fb: Alloc DMA memory from hardware device powerpc/kexec: Fix return of uninitialized variable powerpc/sstep: make emulate_vsx_load and emulate_vsx_store static ocfs2: fix uninitialized value in ocfs2_file_read_iter() RDMA/hns: Fix NULL pointer derefernce in hns_roce_map_mr_sg() scsi: qedi: Fix a possible memory leak in qedi_alloc_and_init_sb() scsi: qedf: Fix a possible memory leak in qedf_alloc_and_init_sb() scsi: fusion: Remove unused variable 'rc' scsi: bfa: Fix use-after-free in bfad_im_module_exit() mfd: rt5033: Fix missing regmap_del_irq_chip() RDMA/bnxt_re: Check cqe flags to know imm_data vs inv_irkey powerpc/pseries: Fix dtl_access_lock to be a rw_semaphore mtd: rawnand: atmel: Fix possible memory leak cpufreq: loongson2: Unregister platform_driver on failure mfd: intel_soc_pmic_bxtwc: Use IRQ domain for PMIC devices mfd: intel_soc_pmic_bxtwc: Use IRQ domain for TMU device mfd: intel_soc_pmic_bxtwc: Use IRQ domain for USB Type-C device mfd: intel_soc_pmic_bxtwc: Use dev_err_probe() mfd: da9052-spi: Change read-mask to write-mask mfd: tps65010: Use IRQF_NO_AUTOEN flag in request_irq() to fix race powerpc/vdso: Flag VDSO64 entry points as functions trace/trace_event_perf: remove duplicate samples on the first tracepoint event wireguard: selftests: load nf_conntrack if not present netpoll: Use rcu_access_pointer() in netpoll_poll_lock Bluetooth: fix use-after-free in device_for_each_child() driver core: Introduce device_find_any_child() helper ALSA: 6fire: Release resources at card release ALSA: caiaq: Use snd_card_free_when_closed() at disconnection ALSA: us122l: Use snd_card_free_when_closed() at disconnection ALSA: usx2y: Use snd_card_free_when_closed() at disconnection ALSA: usx2y: Cleanup probe and disconnect callbacks ALSA: usx2y: Coding style fixes ALSA: usx2y: Fix spaces net: rfkill: gpio: Add check for clk_enable() drm/amdkfd: Fix wrong usage of INIT_WORK() selftests: net: really check for bg process completion bpf, sockmap: Fix sk_msg_reset_curr bpf, sockmap: Several fixes to bpf_msg_pop_data bpf, sockmap: Several fixes to bpf_msg_push_data selftests/bpf: Add push/pop checking for msg_verify_data in test_sockmap selftests/bpf: Fix total_bytes in msg_loop_rx in test_sockmap selftests, bpf: Add one test for sockmap with strparser selftests/bpf: Fix SENDPAGE data logic in test_sockmap selftests/bpf: Add txmsg_pass to pull/push/pop in test_sockmap netlink: typographical error in nlmsg_type constants definition drm/msm/dpu: cast crtc_clk calculation to u64 in _dpu_core_perf_calc_clk() wifi: wfx: Fix error handling in wfx_core_init() drm/etnaviv: hold GPU lock across perfmon sampling drm/etnaviv: fix power register offset on GC300 drm/etnaviv: dump: fix sparse warnings drm/etnaviv: Request pages from DMA32 zone on addressing_limited drm/etnaviv: rework linear window offset calculation drm/msm/adreno: Use IRQF_NO_AUTOEN flag in request_irq() drm/panfrost: Remove unused id_mask from struct panfrost_model octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_ethtool.c octeontx2-pf: ethtool fec mode support octeontx2-af: Add new CGX_CMD to get PHY FEC statistics octeontx2-af: forward error correction configuration octeontx2-pf: Calculate LBK link instead of hardcoding octeontx2-af: Mbox changes for 98xx drm: fsl-dcu: enable PIXCLK on LS1021A drm/fsl-dcu: Convert to Linux IRQ interfaces wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_config_scan() selftests/bpf: Fix txmsg_redir of test_txmsg_pull in test_sockmap selftests/bpf: Fix msg_verify_data in test_sockmap drm/bridge: tc358767: Fix link properties discovery netdevsim: copy addresses for both in and out paths netdevsim: rely on XFRM state direction instead of flags xfrm: store and rely on direction to construct offload flags xfrm: rename xfrm_state_offload struct to allow reuse bpf: Fix the xdp_adjust_tail sample prog issue ASoC: dt-bindings: mt6359: Update generic node name and dmic-mode ASoC: fsl_micfil: fix regmap_write_bits usage ASoC: fsl_micfil: use GENMASK to define register bit fields ASoC: fsl_micfil: do not define SHIFT/MASK for single bits ASoC: fsl_micfil: Drop unnecessary register read dt-bindings: vendor-prefixes: Add NeoFidelity, Inc wifi: ath10k: fix invalid VHT parameters in supported_vht_mcs_rate_nss2 wifi: ath10k: fix invalid VHT parameters in supported_vht_mcs_rate_nss1 drm/v3d: Address race-condition in MMU flush drm/imx/ipuv3: Use IRQF_NO_AUTOEN flag in request_irq() drm/imx/dcss: Use IRQF_NO_AUTOEN flag in request_irq() wifi: mwifiex: Use IRQF_NO_AUTOEN flag in request_irq() wifi: p54: Use IRQF_NO_AUTOEN flag in request_irq() drm/omap: Fix locking in omap_gem_new_dmabuf() wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service() drm/mm: Mark drm_mm_interval_tree*() functions with __maybe_unused media: atomisp: Add check for rgby_data memory allocation failure media: atomisp: remove #ifdef HAS_NO_HMEM firmware: arm_scpi: Check the DVFS OPP count returned by the firmware selftests/resctrl: Protect against array overrun during iMC config parsing regmap: irq: Set lockdep class for hierarchical IRQ domains pmdomain: ti-sci: Add missing of_node_put() for args.np ARM: dts: cubieboard4: Fix DCDC5 regulator constraints pwm: imx27: Workaround of the pwm output bug when decrease the duty cycle cgroup/bpf: only cgroup v2 can be attached by bpf programs Revert "cgroup: Fix memory leak caused by missing cgroup_bpf_offline" arm64: dts: mediatek: mt8173-elm-hana: Add vdd-supply to second source trackpad arm64: dts: mt8183: krane: Fix the address of eeprom at i2c4 tpm: fix signed/unsigned bug when checking event logs mmc: mmc_spi: drop buggy snprintf() soc: qcom: geni-se: fix array underflow in geni_se_clk_tbl_get() soc: ti: smartreflex: Use IRQF_NO_AUTOEN flag in request_irq() spi: spi-fsl-lpspi: Use IRQF_NO_AUTOEN flag in request_irq() spi: spi-fsl-lpspi: downgrade log level for pio mode clocksource/drivers:sp804: Make user selectable clkdev: remove CONFIG_CLKDEV_LOOKUP kcsan, seqlock: Fix incorrect assumption in read_seqbegin() time: Fix references to _msecs_to_jiffies() handling of values crypto: cavium - Fix an error handling path in cpt_ucode_load_fw() crypto: bcm - add error check in the ahash_hmac_init function crypto: caam - add error check to caam_rsa_set_priv_key_form crypto: cavium - Fix the if condition to exit loop after timeout crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY EDAC/fsl_ddr: Fix bad bit shift operations EDAC/bluefield: Fix potential integer overflow firmware: google: Unregister driver_info on failure crypto: caam - Fix the pointer passed to caam_qi_shutdown() hfsplus: don't query the device logical block size multiple times s390/syscalls: Avoid creation of arch/arch/ directory acpi/arm64: Adjust error handling procedure in gtdt_parse_timer_block() arm64: fix .data.rel.ro size assertion when CONFIG_LTO_CLANG m68k: mvme147: Reinstate early console m68k: mvme16x: Add and use "mvme16x.h" m68k: mvme147: Fix SCSI controller IRQ numbers nvme-pci: fix freeing of the HMB descriptor table initramfs: avoid filename buffer overrun mips: asm: fix warning when disabling MIPS_FP_SUPPORT x86/xen/pvh: Annotate indirect branch as safe kselftest/arm64: mte: fix printf type warnings about longs x86/barrier: Do not serialize MSR accesses on AMD nvme: fix metadata handling in nvme-passthrough cifs: Fix buffer overflow when parsing NFS reparse points rcu-tasks: Idle tasks on offline CPUs are in quiescent states ipmr: Fix access to mfc_cache_list without lock held ALSA: usb-audio: Fix Yamaha P-125 Quirk Entry proc/softirqs: replace seq_printf with seq_put_decimal_ull_width ASoC: stm: Prevent potential division by zero in stm32_sai_get_clk_div() ASoC: stm: Prevent potential division by zero in stm32_sai_mclk_round_rate() can: j1939: fix error in J1939 documentation. regulator: rk808: Add apply_bit for BUCK3 on RK809 soc: qcom: Add check devm_kasprintf() returned value net: usb: qmi_wwan: add Quectel RG650V x86/amd_nb: Fix compile-testing without CONFIG_AMD_NB ALSA: hda/realtek: Add subwoofer quirk for Infinix ZERO BOOK 13 selftests/watchdog-test: Fix system accidentally reset after watchdog-test NFSD: Never decrement pending_async_copies on error mac80211: fix user-power when emulating chanctx ASoC: Intel: bytcr_rt5640: Add DMI quirk for Vexia Edu Atla 10 tablet mm: resolve faulty mmap_region() error path behaviour mm: refactor arch_calc_vm_flag_bits() and arm64 MTE handling mm: unconditionally close VMAs on error mm: avoid unsafe VMA hook invocation when error arises on mmap hook mm: revert "mm: shmem: fix data-race in shmem_getattr()" media: dvbdev: fix the logic when DVB_DYNAMIC_MINORS is not set NFSD: Initialize struct nfsd4_copy earlier mmc: core: fix return value check in devm_mmc_alloc_host() NFSD: Limit the number of concurrent async COPY operations drm/bridge: tc358768: Fix DSI command tx NFSD: Async COPY result needs to return a write verifier Revert "mmc: dw_mmc: Fix IDMAC operation with pages bigger than 4K" NFSD: initialize copy->cp_clp early in nfsd4_copy for use by trace point nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint ocfs2: fix UBSAN warning in ocfs2_verify_volume() nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint KVM: VMX: Bury Intel PT virtualization (guest/host mode) behind CONFIG_BROKEN vdpa/mlx5: Fix PA offset with unaligned starting iotlb map ocfs2: uncache inode which has failed entering the group x86/mm: Fix a kdump kernel failure on SME system when CONFIG_IMA_KEXEC=y net/mlx5e: kTLS, Fix incorrect page refcounting net/mlx5: fs, lock FTE when checking if active netlink: terminate outstanding dump on socket close clk: qcom: gcc-qcs404: fix initial rate of GPLL3 leds: lp55xx: Remove redundant test for invalid channel number ftrace: Fix regression with module command in stack_trace_filter ovl: Filter invalid inodes with missing lookup function media: uvcvideo: Stop stream during unregister media: platform: allegro-dvt: Fix possible memory leak in allocate_buffers_internal() media: gspca: ov534-ov772x: Fix off-by-one error in set_frame_rate() media: venus: Fix pm_runtime_set_suspended() with runtime pm enabled media: ts2020: fix null-ptr-deref in ts2020_probe() media: i2c: tc358743: Fix crash in the probe error path when using polling arm64: dts: allwinner: pinephone: Add mount matrix to accelerometer Conflicts: Documentation/devicetree/bindings/serial/rs485.yaml Documentation/devicetree/bindings/sound/mt6359.yaml Documentation/devicetree/bindings/vendor-prefixes.yaml Documentation/devicetree/bindings~HEAD drivers/iommu/arm/arm-smmu/arm-smmu.c drivers/rpmsg/qcom_glink_native.c drivers/soc/qcom/socinfo.c Change-Id: I99a6a8fc446607a6933c7ba345ce0069025ba2ae |
||
|
Greg Kroah-Hartman
|
6c39edf618 |
Merge 5.10.236 into android12-5.10-lts
Changes in 5.10.236
vlan: fix memory leak in vlan_newlink()
clockevents/drivers/i8253: Fix stop sequence for timer 0
sched/isolation: Prevent boot crash when the boot CPU is nohz_full
ipv6: Fix signed integer overflow in __ip6_append_data
KVM: x86: Reject Hyper-V's SEND_IPI hypercalls if local APIC isn't in-kernel
x86/kexec: fix memory leak of elf header buffer
fbdev: hyperv_fb: iounmap() the correct memory when removing a device
pinctrl: bcm281xx: Fix incorrect regmap max_registers value
netfilter: conntrack: convert to refcount_t api
netfilter: nft_ct: fix use after free when attaching zone template
netfilter: nft_ct: Use __refcount_inc() for per-CPU nft_ct_pcpu_template.
ice: fix memory leak in aRFS after reset
netpoll: hold rcu read lock in __netpoll_send_skb()
Drivers: hv: vmbus: Don't release fb_mmio resource in vmbus_free_mmio()
net/mlx5: handle errors in mlx5_chains_create_table()
netfilter: nf_conncount: Fully initialize struct nf_conncount_tuple in insert_tree()
ipvs: prevent integer overflow in do_ip_vs_get_ctl()
net_sched: Prevent creation of classes with TC_H_ROOT
netfilter: nft_exthdr: fix offset with ipv4_find_option()
net/mlx5e: Prevent bridge link show failure for non-eswitch-allowed devices
nvme-fc: go straight to connecting state when initializing
hrtimers: Mark is_migration_base() with __always_inline
powercap: call put_device() on an error path in powercap_register_control_type()
iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic()
scsi: qla1280: Fix kernel oops when debug level > 2
ACPI: resource: IRQ override for Eluktronics MECH-17
alpha/elf: Fix misc/setarch test of util-linux by removing 32bit support
vboxsf: fix building with GCC 15
HID: intel-ish-hid: fix the length of MNG_SYNC_FW_CLOCK in doorbell
HID: ignore non-functional sensor in HP 5MP Camera
s390/cio: Fix CHPID "configure" attribute caching
thermal/cpufreq_cooling: Remove structure member documentation
ASoC: rsnd: don't indicate warning on rsnd_kctrl_accept_runtime()
ASoC: arizona/madera: use fsleep() in up/down DAPM event delays.
ASoC: SOF: Intel: hda: add softdep pre to snd-hda-codec-hdmi module
nvmet-rdma: recheck queue state is LIVE in state lock in recv done
sctp: Fix undefined behavior in left shift operation
nvme: only allow entering LIVE from CONNECTING state
ASoC: tas2770: Fix volume scale
ASoC: tas2764: Fix power control mask
ASoC: tas2764: Set the SDOUT polarity correctly
fuse: don't truncate cached, mutated symlink
x86/irq: Define trace events conditionally
mptcp: safety check before fallback
drm/nouveau: Do not override forced connector status
block: fix 'kmem_cache of name 'bio-108' already exists'
USB: serial: ftdi_sio: add support for Altera USB Blaster 3
USB: serial: option: add Telit Cinterion FE990B compositions
USB: serial: option: fix Telit Cinterion FE990A name
USB: serial: option: match on interface class for Telit FN990B
x86/microcode/AMD: Fix out-of-bounds on systems with CPU-less NUMA nodes
drm/atomic: Filter out redundant DPMS calls
drm/amd/display: Assign normalized_pix_clk when color depth = 14
drm/amd/display: Fix slab-use-after-free on hdcp_work
qlcnic: fix memory leak issues in qlcnic_sriov_common.c
drm/gma500: Add NULL check for pci_gfx_root in mid_get_vbt_data()
ASoC: codecs: wm0010: Fix error handling path in wm0010_spi_probe()
i2c: ali1535: Fix an error handling path in ali1535_probe()
i2c: ali15x3: Fix an error handling path in ali15x3_probe()
i2c: sis630: Fix an error handling path in sis630_probe()
drm/amd/display: Check plane scaling against format specific hw plane caps.
drm/amd/display/dc/core/dc_resource: Staticify local functions
drm/amd/display: Reject too small viewport size when validating plane
drm/amd/display: fix odm scaling
drm/amd/display: Check for invalid input params when building scaling params
drm/amd/display: Fix null check for pipe_ctx->plane_state in resource_build_scaling_params
firmware: imx-scu: fix OF node leak in .probe()
xfrm_output: Force software GSO only in tunnel mode
ARM: dts: bcm2711: PL011 UARTs are actually r1p5
RDMA/bnxt_re: Add missing paranthesis in map_qp_id_to_tbl_indx
ARM: dts: bcm2711: Don't mark timer regs unconfigured
RDMA/bnxt_re: Avoid clearing VLAN_ID mask in modify qp path
RDMA/hns: Remove redundant 'phy_addr' in hns_roce_hem_list_find_mtt()
RDMA/hns: Fix soft lockup during bt pages loop
RDMA/hns: Fix wrong value of max_sge_rd
Bluetooth: Fix error code in chan_alloc_skb_cb()
ipv6: Fix memleak of nhc_pcpu_rth_output in fib_check_nh_v6_gw().
ipv6: Set errno after ip_fib_metrics_init() in ip6_route_info_create().
net: atm: fix use after free in lec_send()
net/neighbor: add missing policy for NDTPA_QUEUE_LENBYTES
i2c: omap: fix IRQ storms
drm/v3d: Don't run jobs that have errors flagged in its fence
regulator: check that dummy regulator has been probed before using it
mmc: atmel-mci: Add missing clk_disable_unprepare()
proc: fix UAF in proc_get_inode()
ARM: shmobile: smp: Enforce shmobile_smp_* alignment
drm/amdgpu: Fix even more out of bound writes from debugfs
Bluetooth: hci_event: Align BR/EDR JUST_WORKS paring with LE
bpf, sockmap: Fix race between element replace and close()
batman-adv: Ignore own maximum aggregation size during RX
soc: qcom: pdr: Fix the potential deadlock
drm/radeon: fix uninitialized size issue in radeon_vce_cs_parse()
ALSA: usb-audio: Add quirk for Plantronics headsets to fix control names
HID: hid-plantronics: Add mic mute mapping and generalize quirks
atm: Fix NULL pointer dereference
ARM: 9350/1: fault: Implement copy_from_kernel_nofault_allowed()
ARM: 9351/1: fault: Add "cut here" line for prefetch aborts
ARM: Remove address checking for MMUless devices
netfilter: socket: Lookup orig tuple for IPv6 SNAT
ALSA: hda/realtek: Support mute LED on HP Laptop 15s-du3xxx
counter: stm32-lptimer-cnt: fix error handling when enabling
counter: microchip-tcb-capture: Fix undefined counter channel state on probe
tty: serial: 8250: Add some more device IDs
net: usb: qmi_wwan: add Telit Cinterion FN990B composition
net: usb: qmi_wwan: add Telit Cinterion FE990B composition
net: usb: usbnet: restore usb%d name exception for local mac addresses
memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove
serial: 8250_dma: terminate correct DMA in tx_dma_flush()
media: i2c: et8ek8: Don't strip remove function when driver is builtin
i2c: dev: check return value when calling dev_set_name()
watch_queue: fix pipe accounting mismatch
x86/mm/pat: cpa-test: fix length for CPA_ARRAY test
cpufreq: scpi: compare kHz instead of Hz
cpufreq: governor: Fix negative 'idle_time' handling in dbs_update()
x86/fpu: Avoid copying dynamic FP state from init_task in arch_dup_task_struct()
x86/platform: Only allow CONFIG_EISA for 32-bit
PM: sleep: Adjust check before setting power.must_resume
selinux: Chain up tool resolving errors in install_policy.sh
EDAC/ie31200: Fix the size of EDAC_MC_LAYER_CHIP_SELECT layer
EDAC/ie31200: Fix the DIMM size mask for several SoCs
EDAC/ie31200: Fix the error path order of ie31200_init()
thermal: int340x: Add NULL check for adev
PM: sleep: Fix handling devices with direct_complete set on errors
lockdep: Don't disable interrupts on RT in disable_irq_nosync_lockdep.*()
perf/ring_buffer: Allow the EPOLLRDNORM flag for poll
ALSA: hda/realtek: Always honor no_shutup_pins
ASoC: ti: j721e-evm: Fix clock configuration for ti,j7200-cpb-audio compatible
drm/dp_mst: Fix drm RAD print
drm: xlnx: zynqmp: Fix max dma segment size
drm/mediatek: mtk_hdmi: Unregister audio platform device on failure
drm/mediatek: mtk_hdmi: Fix typo for aud_sampe_size member
PCI/ASPM: Fix link state exit during switch upstream function removal
PCI: cadence-ep: Fix the driver to send MSG TLP for INTx without data payload
PCI: brcmstb: Use internal register to change link capability
PCI/portdrv: Only disable pciehp interrupts early when needed
drm/amd/display: fix type mismatch in CalculateDynamicMetadataParameters()
PCI: Remove stray put_device() in pci_register_host_bridge()
PCI: xilinx-cpm: Fix IRQ domain leak in error path of probe
drm/mediatek: dsi: fix error codes in mtk_dsi_host_transfer()
PCI: pciehp: Don't enable HPIE when resuming in poll mode
fbdev: au1100fb: Move a variable assignment behind a null pointer check
mdacon: rework dependency list
fbdev: sm501fb: Add some geometry checks.
clk: amlogic: gxbb: drop incorrect flag on 32k clock
remoteproc: qcom_q6v5_pas: Make single-PD handling more robust
clk: samsung: Fix UBSAN panic in samsung_clk_init()
bpf: Use preempt_count() directly in bpf_send_signal_common()
lib: 842: Improve error handling in sw842_compress()
pinctrl: renesas: rza2: Fix missing of_node_put() call
clk: rockchip: rk3328: fix wrong clk_ref_usb3otg parent
IB/mad: Check available slots before posting receive WRs
pinctrl: tegra: Set SFIO mode to Mux Register
clk: amlogic: g12b: fix cluster A parent data
clk: amlogic: gxbb: drop non existing 32k clock parent
clk: amlogic: g12a: fix mmc A peripheral clock
x86/entry: Fix ORC unwinder for PUSH_REGS with save_ret=1
power: supply: max77693: Fix wrong conversion of charge input threshold value
RDMA/mlx5: Fix mlx5_poll_one() cur_qp update flow
mfd: sm501: Switch to BIT() to mitigate integer overflows
x86/dumpstack: Fix inaccurate unwinding from exception stacks due to misplaced assignment
crypto: hisilicon/sec2 - fix for aead auth key length
isofs: fix KMSAN uninit-value bug in do_isofs_readdir()
coresight: catu: Fix number of pages while using 64k pages
iio: accel: mma8452: Ensure error return on failure to matching oversampling ratio
perf units: Fix insufficient array space
kexec: initialize ELF lowest address to ULONG_MAX
ocfs2: validate l_tree_depth to avoid out-of-bounds access
NFSv4: Don't trigger uneccessary scans for return-on-close delegations
perf python: Fixup description of sample.id event member
perf python: Decrement the refcount of just created event on failure
perf python: Don't keep a raw_data pointer to consumed ring buffer space
perf python: Check if there is space to copy all the event
fs/procfs: fix the comment above proc_pid_wchan()
objtool, media: dib8000: Prevent divide-by-zero in dib8000_set_dds()
exfat: fix the infinite loop in exfat_find_last_cluster()
rtnetlink: Allocate vfinfo size for VF GUIDs when supported
ring-buffer: Fix bytes_dropped calculation issue
ACPI: processor: idle: Return an error if both P_LVL{2,3} idle states are invalid
octeontx2-af: Fix mbox INTR handler when num VFs > 64
sched/smt: Always inline sched_smt_active()
wifi: iwlwifi: fw: allocate chained SG tables for dump
nvme-tcp: fix possible UAF in nvme_tcp_poll
nvme-pci: clean up CMBMSC when registering CMB fails
nvme-pci: skip CMB blocks incompatible with PCI P2P DMA
affs: generate OFS sequence numbers starting at 1
affs: don't write overlarge OFS data block size fields
platform/x86: intel-hid: fix volume buttons on Microsoft Surface Go 4 tablet
sched/deadline: Use online cpus for validating runtime
locking/semaphore: Use wake_q to wake up processes outside lock critical section
ALSA: hda/realtek: Add mute LED quirk for HP Pavilion x360 14-dy1xxx
can: statistics: use atomic access in hot path
hwmon: (nct6775-core) Fix out of bounds access for NCT679{8,9}
spufs: fix a leak on spufs_new_file() failure
spufs: fix a leak in spufs_create_context()
ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans
ntb: intel: Fix using link status DB's
netlabel: Fix NULL pointer exception caused by CALIPSO on IPv4 sockets
net_sched: skbprio: Remove overly strict queue assertions
vsock: avoid timeout during connect() if the socket is closing
tunnels: Accept PACKET_HOST in skb_tunnel_check_pmtu().
netfilter: nft_tunnel: fix geneve_opt type confusion addition
ipv6: fix omitted netlink attributes when using RTEXT_FILTER_SKIP_STATS
net: dsa: mv88e6xxx: propperly shutdown PPU re-enable timer on destroy
net: fix geneve_opt length integer overflow
arcnet: Add NULL check in com20020pci_probe()
can: flexcan: only change CAN state when link up in system PM
tty: serial: fsl_lpuart: use UARTMODIR register bits for lpuart32 platform
tty: serial: fsl_lpuart: disable transmitter before changing RS485 related registers
drm/amd/pm: Fix negative array index read
drm/amd/display: Skip inactive planes within ModeSupportAndSystemConfiguration
ntb_perf: Delete duplicate dmaengine_unmap_put() call in perf_copy_chunk()
btrfs: handle errors from btrfs_dec_ref() properly
x86/tsc: Always save/restore TSC sched_clock() on suspend/resume
x86/mm: Fix flush_tlb_range() when used for zapping normal PMDs
acpi: nfit: fix narrowing conversion in acpi_nfit_ctl
ACPI: resource: Skip IRQ override on ASUS Vivobook 14 X1404VAP
mmc: sdhci-pxav3: set NEED_RSP_BUSY capability
tracing: Fix use-after-free in print_graph_function_flags during tracer switching
tracing: Ensure module defining synth event cannot be unloaded while tracing
ext4: don't over-report free space or inodes in statvfs
ext4: fix OOB read when checking dotdot dir
jfs: fix slab-out-of-bounds read in ea_get()
jfs: add index corruption check to DT_GETPAGE()
nfsd: put dl_stid if fail to queue dl_recall
NFSD: Skip sending CB_RECALL_ANY when the backchannel isn't up
netfilter: conntrack: fix crash due to confirmed bit load reordering
x86/kexec: Fix double-free of elf header buffer
tracing: Do not use PERF enums when perf is not defined
Linux 5.10.236
Change-Id: Ia4c6414d012f7702086b9d7cafdfa40fd532bdc1
Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>
|
||
|
Tim Schumacher
|
159b1b9493 |
selinux: Chain up tool resolving errors in install_policy.sh
[ Upstream commit 6ae0042f4d3f331e841495eb0a3d51598e593ec2 ]
Subshell evaluations are not exempt from errexit, so if a command is
not available, `which` will fail and exit the script as a whole.
This causes the helpful error messages to not be printed if they are
tacked on using a `$?` comparison.
Resolve the issue by using chains of logical operators, which are not
subject to the effects of errexit.
Fixes:
|
||
|
Greg Kroah-Hartman
|
7a2ab7a94c |
Merge 5.10.235 into android12-5.10-lts
Changes in 5.10.235 afs: Fix EEXIST error returned from afs_rmdir() to be ENOTEMPTY afs: Fix directory format encoding struct nbd: don't allow reconnect after disconnect nvme: Add error check for xa_store in nvme_get_effects_log partitions: ldm: remove the initial kernel-doc notation select: Fix unbalanced user_access_end() afs: Fix the fallback handling for the YFS.RemoveFile2 RPC call drm/etnaviv: Fix page property being used for non writecombine buffers drm/amdgpu: Fix potential NULL pointer dereference in atomctrl_get_smc_sclk_range_table genirq: Make handle_enforce_irqctx() unconditionally available ipmi: ipmb: Add check devm_kasprintf() returned value wifi: rtlwifi: do not complete firmware loading needlessly wifi: rtlwifi: rtl8192se: rise completion of firmware loading as last step rtlwifi: remove redundant assignment to variable err wifi: rtlwifi: wait for firmware loading before releasing memory wifi: rtlwifi: fix init_sw_vars leak when probe fails wifi: rtlwifi: usb: fix workqueue leak when probe fails spi: zynq-qspi: Add check for clk_enable() dt-bindings: mmc: controller: clarify the address-cells description rtlwifi: replace usage of found with dedicated list iterator variable wifi: rtlwifi: remove unused timer and related code wifi: rtlwifi: remove unused dualmac control leftovers wifi: rtlwifi: remove unused check_buddy_priv wifi: rtlwifi: destroy workqueue at rtl_deinit_core wifi: rtlwifi: fix memory leaks and invalid access at probe error path wifi: rtlwifi: pci: wait for firmware loading before releasing memory ACPI: fan: cleanup resources in the error path of .probe() cpupower: fix TSC MHz calculation leds: netxbig: Fix an OF node reference leak in netxbig_leds_get_of_pdata() cpufreq: schedutil: Simplify sugov_update_next_freq() cpufreq: schedutil: Fix superfluous updates caused by need_freq_update clk: imx8mp: Fix clkout1/2 support team: prevent adding a device which is already a team device lower regulator: of: Implement the unwind path of of_regulator_match() wifi: wlcore: fix unbalanced pm_runtime calls net/smc: fix data error when recvmsg with MSG_PEEK flag wifi: mt76: mt76u_vendor_request: Do not print error messages when -EPROTO cpufreq: ACPI: Fix max-frequency computation selftests: harness: fix printing of mismatch values in __EXPECT() wifi: cfg80211: Handle specific BSSID in 6GHz scanning wifi: cfg80211: adjust allocation of colocated AP data clk: analogbits: Fix incorrect calculation of vco rate delta pwm: stm32: Add check for clk_enable() net: let net.core.dev_weight always be non-zero net/mlxfw: Drop hard coded max FW flash image size net: sched: Disallow replacing of child qdisc from one parent to another net: ethernet: ti: am65-cpsw: fix freeing IRQ in am65_cpsw_nuss_remove_tx_chns() net/rose: prevent integer overflows in rose_setsockopt() tools/testing/selftests/bpf/test_tc_tunnel.sh: Fix wait for server bind ASoC: sun4i-spdif: Add clock multiplier settings perf header: Fix one memory leakage in process_bpf_btf() perf header: Fix one memory leakage in process_bpf_prog_info() perf env: Conditionally compile BPF support code on having HAVE_LIBBPF_SUPPORT perf bpf: Fix two memory leakages when calling perf_env__insert_bpf_prog_info() ktest.pl: Remove unused declarations in run_bisect_test function padata: fix sysfs store callback check perf top: Don't complain about lack of vmlinux when not resolving some kernel samples perf report: Fix misleading help message about --demangle bpf: Send signals asynchronously if !preemptible padata: fix UAF in padata_reorder padata: add pd get/put refcnt helper padata: avoid UAF for reorder_work arm64: dts: mediatek: mt8516: fix GICv2 range arm64: dts: mediatek: mt8516: fix wdt irq type arm64: dts: mediatek: mt8516: remove 2 invalid i2c clocks arm64: dts: mediatek: mt8516: add i2c clock-div property arm64: dts: mediatek: mt8516: reserve 192 KiB for TF-A RDMA/mlx4: Avoid false error about access to uninitialized gids array rdma/cxgb4: Prevent potential integer overflow on 32bit arm64: dts: mediatek: mt8173-evb: Drop regulator-compatible property arm64: dts: mediatek: mt8173-elm: Drop regulator-compatible property arm64: dts: mediatek: mt8173-elm: Fix MT6397 PMIC sub-node names arm64: dts: mediatek: mt8173-evb: Fix MT6397 PMIC sub-node names arm64: dts: qcom: msm8916: correct sleep clock frequency arm64: dts: qcom: msm8994: correct sleep clock frequency arm64: dts: qcom: sm8250: correct sleep clock frequency ARM: dts: mediatek: mt7623: fix IR nodename fbdev: omapfb: Fix an OF node leak in dss_of_port_get_parent_device() media: rc: iguanair: handle timeouts media: lmedm04: Use GFP_KERNEL for URB allocation/submission. media: lmedm04: Handle errors for lme2510_int_read PCI: endpoint: Destroy the EPC device in devm_pci_epc_destroy() media: marvell: Add check for clk_enable() media: mipi-csis: Add check for clk_enable() media: camif-core: Add check for clk_enable() media: uvcvideo: Propagate buf->error to userspace mtd: hyperbus: hbmc-am654: fix an OF node reference leak staging: media: imx: fix OF node leak in imx_media_add_of_subdevs() PCI: rcar-ep: Fix incorrect variable used when calling devm_request_mem_region() scsi: mpt3sas: Set ioc->manu_pg11.EEDPTagMode directly to 1 scsi: ufs: bsg: Delete bsg_dev when setting up bsg fails ocfs2: mark dquot as inactive if failed to start trans while releasing dquot module: Extend the preempt disabled section in dereference_symbol_descriptor(). NFSv4.2: fix COPY_NOTIFY xdr buf size calculation tools/bootconfig: Fix the wrong format specifier xfrm: replay: Fix the update of replay_esn->oseq_hi for GSO dmaengine: ti: edma: fix OF node reference leaks in edma_driver rtc: pcf85063: fix potential OOB write in PCF85063 NVMEM read ubifs: skip dumping tnc tree when zroot is null net: hns3: fix oops when unload drivers paralleling net: fec: implement TSO descriptor cleanup ipmr: do not call mr_mfc_uses_dev() for unres entries PM: hibernate: Add error handling for syscore_suspend() net: rose: fix timer races against user threads net: netdevsim: try to close UDP port harness races net: davicom: fix UAF in dm9000_drv_remove perf trace: Fix runtime error of index out of bounds vsock: Allow retrying on connect() failure bgmac: reduce max frame size to support just MTU 1500 net: sh_eth: Fix missing rtnl lock in suspend/resume path net: hsr: fix fill_frame_info() regression vs VLAN packets genksyms: fix memory leak when the same symbol is added from source genksyms: fix memory leak when the same symbol is read from *.symref file hexagon: fix using plain integer as NULL pointer warning in cmpxchg hexagon: Fix unbalanced spinlock in die() NFSD: Reset cb_seq_status after NFS4ERR_DELAY netfilter: nf_tables: reject mismatching sum of field_len with set key length ktest.pl: Check kernelrelease return in get_version drivers/card_reader/rtsx_usb: Restore interrupt based detection usb: gadget: f_tcm: Fix Get/SetInterface return value usb: typec: tcpm: set SRC_SEND_CAPABILITIES timeout to PD_T_SENDER_RESPONSE HID: core: Fix assumption that Resolution Multipliers must be in Logical Collections media: uvcvideo: Fix double free in error path usb: gadget: f_tcm: Don't free command immediately btrfs: output the reason for open_ctree() failure btrfs: fix use-after-free when attempting to join an aborted transaction btrfs: convert BUG_ON in btrfs_reloc_cow_block() to proper error handling sched: Don't try to catch up excess steal time. lockdep: Fix upper limit for LOCKDEP_*_BITS configs x86/amd_nb: Restrict init function to AMD-based systems printk: Fix signed integer overflow when defining LOG_BUF_LEN_MAX safesetid: check size of policy writes tun: fix group permission check mmc: core: Respect quirk_max_rate for non-UHS SDIO card wifi: brcmsmac: add gain range check to wlc_phy_iqcal_gainparams_nphy() tomoyo: don't emit warning in tomoyo_write_control() mfd: lpc_ich: Add another Gemini Lake ISA bridge PCI device-id HID: Wacom: Add PCI Wacom device support net/mlx5: use do_aux_work for PHC overflow checks i2c: Force ELAN06FA touchpad I2C bus freq to 100KHz APEI: GHES: Have GHES honor the panic= setting mmc: sdhci-msm: Correctly set the load for the regulator tipc: re-order conditions in tipc_crypto_key_rcv() selftests/net/ipsec: Fix Null pointer dereference in rtattr_pack() Input: allocate keycode for phone linking x86/mm: Don't disable PCID when INVLPG has been fixed by microcode net: usb: rtl8150: use new tasklet API net: usb: rtl8150: enable basic endpoint checking usb: xhci: Add timeout argument in address_device USB HCD callback usb: xhci: Fix NULL pointer dereference on certain command aborts nvme: handle connectivity loss in nvme_set_queue_count firmware: iscsi_ibft: fix ISCSI_IBFT Kconfig entry gpu: drm_dp_cec: fix broken CEC adapter properties check tg3: Disable tg3 PCIe AER on system reboot udp: gso: do not drop small packets when PMTU reduces gpio: pca953x: Improve interrupt support net: atlantic: fix warning during hot unplug net: rose: lock the socket in rose_bind() x86/xen: fix xen_hypercall_hvm() to not clobber %rbx x86/xen: add FRAME_END to xen_hypercall_hvm() netem: Update sch->q.qlen before qdisc_tree_reduce_backlog() tun: revert fix group permission check cpufreq: s3c64xx: Fix compilation warning leds: lp8860: Write full EEPROM, not only half of it drm/modeset: Handle tiled displays in pan_display_atomic. s390/futex: Fix FUTEX_OP_ANDN implementation m68k: vga: Fix I/O defines binfmt_flat: Fix integer overflow bug on 32 bit systems arm64: dts: rockchip: increase gmac rx_delay on rk3399-puma KVM: Explicitly verify target vCPU is online in kvm_get_vcpu() KVM: s390: vsie: fix some corner-cases when grabbing vsie pages drm/komeda: Add check for komeda_get_layer_fourcc_list() Bluetooth: L2CAP: handle NULL sock pointer in l2cap_sock_alloc Bluetooth: L2CAP: accept zero as a special value for MTU auto-selection clk: sunxi-ng: a100: enable MMC clock reparenting clk: qcom: clk-alpha-pll: fix alpha mode configuration clk: qcom: clk-rpmh: prevent integer overflow in recalc_rate blk-cgroup: Fix class @block_class's subsystem refcount leakage efi: libstub: Use '-std=gnu11' to fix build with GCC 15 perf bench: Fix undefined behavior in cmpworker() of: Correct child specifier used as input of the 2nd nexus node of: Fix of_find_node_opts_by_path() handling of alias+path+options of: reserved-memory: Fix using wrong number of cells to get property 'alignment' HID: hid-sensor-hub: don't use stale platform-data on remove wifi: rtlwifi: rtl8821ae: Fix media status report wifi: brcmfmac: fix NULL pointer dereference in brcmf_txfinalize() usb: gadget: f_tcm: Translate error to sense usb: gadget: f_tcm: Decrement command ref count on cleanup usb: gadget: f_tcm: ep_autoconfig with fullspeed endpoint usb: gadget: f_tcm: Don't prepare BOT write request twice soc: qcom: socinfo: Avoid out of bounds read of serial number serial: sh-sci: Drop __initdata macro for port_cfg serial: sh-sci: Do not probe the serial port if its slot in sci_ports[] is in use powerpc/pseries/eeh: Fix get PE state translation dm-crypt: don't update io->sector after kcryptd_crypt_write_io_submit() dm-crypt: track tag_offset in convert_context ALSA: hda/realtek: Enable headset mic on Positivo C6400 scsi: qla2xxx: Move FCE Trace buffer allocation to user control scsi: storvsc: Set correct data length for sending SCSI command without payload kbuild: Move -Wenum-enum-conversion to W=2 x86/boot: Use '-std=gnu11' to fix build with GCC 15 iio: light: as73211: fix channel handling in only-color triggered buffer soc: qcom: smem_state: fix missing of_node_put in error path media: mc: fix endpoint iteration media: ov5640: fix get_light_freq on auto media: uvcvideo: Fix event flags in uvc_ctrl_send_events media: uvcvideo: Remove redundant NULL assignment crypto: qce - fix goto jump in error path crypto: qce - unregister previously registered algos in error path nvmem: qcom-spmi-sdam: Set size in struct nvmem_config nvmem: core: improve range check for nvmem_cell_write() vfio/platform: check the bounds of read/write syscalls pnfs/flexfiles: retry getting layout segment for reads ocfs2: fix incorrect CPU endianness conversion causing mount failure ocfs2: handle a symlink read error correctly nilfs2: fix possible int overflows in nilfs_fiemap() NFC: nci: Add bounds checking in nci_hci_create_pipe() mtd: onenand: Fix uninitialized retlen in do_otp_read() misc: fastrpc: Fix registered buffer page address net/ncsi: wait for the last response to Deselect Package before configuring channel ptp: Ensure info->enable callback is always set MIPS: ftrace: Declare ftrace_get_parent_ra_addr() as static ocfs2: check dir i_size in ocfs2_find_entry mptcp: prevent excessive coalescing on receive nfsd: clear acl_access/acl_default after releasing them NFSD: fix hang in nfsd4_shutdown_callback HID: multitouch: Add NULL check in mt_input_configured ndisc: ndisc_send_redirect() must use dev_get_by_index_rcu() vrf: use RCU protection in l3mdev_l3_out() team: better TEAM_OPTION_TYPE_STRING validation arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array gpio: bcm-kona: Fix GPIO lock/unlock for banks above bank 0 gpio: bcm-kona: Make sure GPIO bits are unlocked when requesting IRQ gpio: bcm-kona: Add missing newline to dev_err format string xen: remove a confusing comment on auto-translated guest I/O x86/xen: allow larger contiguous memory regions in PV guests media: cxd2841er: fix 64-bit division on gcc-9 media: vidtv: Fix a null-ptr-deref in vidtv_mux_stop_thread PCI/DPC: Quirk PIO log size for Intel Raptor Lake-P vfio/pci: Enable iowrite64 and ioread64 for vfio pci Grab mm lock before grabbing pt lock orangefs: fix a oob in orangefs_debug_write ASoC: Intel: bytcr_rt5640: Add DMI quirk for Vexia Edu Atla 10 tablet 5V batman-adv: fix panic during interface removal batman-adv: Ignore neighbor throughput metrics in error case perf/x86/intel: Ensure LBRs are disabled when a CPU is starting usb: roles: set switch registered flag early on usb: gadget: udc: renesas_usb3: Fix compiler warning usb: dwc2: gadget: remove of_node reference upon udc_stop USB: pci-quirks: Fix HCCPARAMS register error for LS7A EHCI usb: core: fix pipe creation for get_bMaxPacketSize0 USB: quirks: add USB_QUIRK_NO_LPM quirk for Teclast dist USB: Add USB_QUIRK_NO_LPM quirk for sony xperia xz1 smartphone usb: gadget: f_midi: fix MIDI Streaming descriptor lengths USB: hub: Ignore non-compliant devices with too many configs or interfaces USB: cdc-acm: Fill in Renesas R-Car D3 USB Download mode quirk usb: cdc-acm: Check control transfer buffer size before access usb: cdc-acm: Fix handling of oversized fragments USB: serial: option: add MeiG Smart SLM828 USB: serial: option: add Telit Cinterion FN990B compositions USB: serial: option: fix Telit Cinterion FN990A name USB: serial: option: drop MeiG Smart defines can: c_can: fix unbalanced runtime PM disable in error path can: j1939: j1939_sk_send_loop(): fix unable to send messages with data length zero alpha: make stack 16-byte aligned (most cases) efi: Avoid cold plugged memory for placing the kernel serial: 8250: Fix fifo underflow on flush alpha: align stack for page fault and user unaligned trap handlers gpio: stmpe: Check return value of stmpe_reg_read in stmpe_gpio_irq_sync_unlock partitions: mac: fix handling of bogus partition table regmap-irq: Add missing kfree() arm64: Handle .ARM.attributes section in linker scripts mlxsw: Add return value check for mlxsw_sp_port_get_stats_raw() clocksource: Limit number of CPUs checked for clock synchronization clocksource: Replace deprecated CPU-hotplug functions. clocksource: Replace cpumask_weight() with cpumask_empty() clocksource: Use pr_info() for "Checking clocksource synchronization" message clocksource: Use migrate_disable() to avoid calling get_random_u32() in atomic context net: treat possible_net_t net pointer as an RCU one and add read_pnet_rcu() net: add dev_net_rcu() helper ipv4: use RCU protection in rt_is_expired() ipv4: use RCU protection in inet_select_addr() ipv6: use RCU protection in ip6_default_advmss() ndisc: use RCU protection in ndisc_alloc_skb() neighbour: delete redundant judgment statements neighbour: use RCU protection in __neigh_notify() arp: use RCU protection in arp_xmit() openvswitch: use RCU protection in ovs_vport_cmd_fill_info() ndisc: extend RCU protection in ndisc_send_skb() drm/tidss: Fix issue in irq handling causing irq-flood issue drm/tidss: Clear the interrupt status for interrupts being disabled kdb: Do not assume write() callback available x86/static-call: Remove early_boot_irqs_disabled check to fix Xen PVH dom0 alpha: replace hardcoded stack offsets with autogenerated ones nilfs2: do not output warnings when clearing dirty buffers nilfs2: do not force clear folio if buffer is referenced nilfs2: protect access to buffers with no active references can: ems_pci: move ASIX AX99100 ids to pci_ids.h serial: 8250_pci: add support for ASIX AX99100 parport_pc: add support for ASIX AX99100 netdevsim: print human readable IP address selftests: rtnetlink: update netdevsim ipsec output format f2fs: fix to wait dio completion x86/i8253: Disable PIT timer 0 when not in use Revert "btrfs: avoid monopolizing a core when activating a swap file" btrfs: avoid monopolizing a core when activating a swap file pps: Fix a use-after-free ima: Fix use-after-free on a dentry's dname.name vlan: introduce vlan_dev_free_egress_priority vlan: move dev_put into vlan_dev_uninit nvme-pci: fix multiple races in nvme_setup_io_queues arm64: mte: Do not allow PROT_MTE on MAP_HUGETLB user mappings crypto: testmgr - fix wrong key length for pkcs1pad crypto: testmgr - Fix wrong test case of RSA crypto: testmgr - fix version number of RSA tests crypto: testmgr - populate RSA CRT parameters in RSA test vectors crypto: testmgr - some more fixes to RSA test vectors mm: update mark_victim tracepoints fields memcg: fix soft lockup in the OOM process drm/probe-helper: Create a HPD IRQ event helper for a single connector drm/rockchip: cdn-dp: Use drm_connector_helper_hpd_irq_event() tpm: Use managed allocation for bios event log tpm: Change to kvalloc() in eventlog/acpi.c batman-adv: Add new include for min/max helpers batman-adv: Drop initialization of flexible ethtool_link_ksettings batman-adv: Drop unmanaged ELP metric worker usb: dwc3: Increase DWC3 controller halt timeout usb: dwc3: Fix timeout issue during controller enter/exit from halt state usb/gadget: f_midi: Replace tasklet with work USB: gadget: f_midi: f_midi_complete to call queue_work powerpc/64s/mm: Move __real_pte stubs into hash-4k.h powerpc/64s: Rewrite __real_pte() and __rpte_to_hidx() as static inline ALSA: hda/realtek: Fixup ALC225 depop procedure powerpc/code-patching: Fix KASAN hit by not flagging text patching area as VM_ALLOC geneve: Fix use-after-free in geneve_find_dev(). gtp: Suppress list corruption splat in gtp_net_exit_batch_rtnl(). geneve: Suppress list corruption splat in geneve_destroy_tunnels(). net: extract port range fields from fl_flow_key flow_dissector: Fix handling of mixed port and port-range keys flow_dissector: Fix port range key handling in BPF conversion power: supply: da9150-fg: fix potential overflow bpf: skip non exist keys in generic_map_lookup_batch tee: optee: Fix supplicant wait loop nfp: bpf: Add check for nfp_app_ctrl_msg_alloc() ALSA: hda/conexant: Add quirk for HP ProBook 450 G4 mute LED acct: block access to kernel internal filesystems mtd: rawnand: cadence: fix error code in cadence_nand_init() mtd: rawnand: cadence: use dma_map_resource for sdma address mtd: rawnand: cadence: fix incorrect device in dma_unmap_single x86/cpu/kvm: SRSO: Fix possible missing IBPB on VM-Exit IB/mlx5: Set and get correct qp_num for a DCT QP RDMA/mlx5: Fix bind QP error cleanup flow sunrpc: suppress warnings for unused procfs functions ALSA: usb-audio: Avoid dropping MIDI events at closing multiple ports Bluetooth: L2CAP: Fix L2CAP_ECRED_CONN_RSP response net: loopback: Avoid sending IP packets without an Ethernet header net: cadence: macb: Synchronize stats calculations ASoC: es8328: fix route from DAC to output ipvs: Always clear ipvs_property flag in skb_scrub_packet() tcp: Defer ts_recent changes until req is owned net: mvpp2: cls: Fixed Non IP flow, with vlan tag flow defination. net: ipv6: rpl_iptunnel: simplify the return expression of rpl_do_srh() net: use indirect call helpers for dst_input net: use indirect call helpers for dst_output include: net: add static inline dst_dev_overhead() to dst.h net: ipv6: rpl_iptunnel: mitigate 2-realloc issue net: ipv6: fix dst ref loop on input in rpl lwt x86/CPU: Fix warm boot hang regression on AMD SC1100 SoC systems ftrace: Avoid potential division by zero in function_stat_show() perf/core: Fix low freq setting via IOC_PERIOD i2c: npcm: disable interrupt enable bit before devm_request_irq usbnet: gl620a: fix endpoint checking in genelink_bind() phy: tegra: xusb: reset VBUS & ID OVERRIDE phy: exynos5-usbdrd: fix MPLL_MULTIPLIER and SSC_REFCLKSEL masks in refclk mptcp: always handle address removal under msk socket lock vmlinux.lds: Ensure that const vars with relocations are mapped R/O sched/core: Prevent rescheduling when interrupts are disabled intel_idle: Handle older CPUs, which stop the TSC in deeper C states, correctly pfifo_tail_enqueue: Drop new packet when sch->limit == 0 drop_monitor: fix incorrect initialization order kernel/acct.c: use #elif instead of #end and #elif kernel/acct.c: use dedicated helper to access rlimit values acct: perform last write from workqueue smb: client: Add check for next_buffer in receive_encrypted_standard() drm/amdgpu: Check extended configuration space register when system uses large bar drm/amdgpu: disable BAR resize on Dell G5 SE efi: Don't map the entire mokvar table to determine its size Revert "of: reserved-memory: Fix using wrong number of cells to get property 'alignment'" HID: appleir: Fix potential NULL dereference at raw event handle gpio: aggregator: protect driver attr handlers against module unload ALSA: hda: intel: Add Dell ALC3271 to power_save denylist ALSA: hda/realtek: update ALC222 depop optimize drm/radeon: Fix rs400_gpu_init for ATI mobility radeon Xpress 200M platform/x86: thinkpad_acpi: Add battery quirk for ThinkPad X131e x86/cacheinfo: Validate CPUID leaf 0x2 EDX output x86/cpu: Validate CPUID leaf 0x2 EDX output x86/cpu: Properly parse CPUID leaf 0x2 TLB descriptor 0x63 wifi: cfg80211: regulatory: improve invalid hints checking wifi: nl80211: reject cooked mode if it is set along with other flags rapidio: add check for rio_add_net() in rio_scan_alloc_net() rapidio: fix an API misues when rio_add_net() fails s390/traps: Fix test_monitor_call() inline assembly block: fix conversion of GPT partition name to 7-bit mm/page_alloc: fix uninitialized variable wifi: iwlwifi: limit printed string from FW file HID: google: fix unused variable warning under !CONFIG_ACPI HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() nvmet-tcp: Fix a possible sporadic response drops in weakly ordered arch net: gso: fix ownership in __udp_gso_segment caif_virtio: fix wrong pointer check in cfv_probe() hwmon: (pmbus) Initialise page count in pmbus_identify() hwmon: (ntc_thermistor) Fix the ncpXXxh103 sensor table hwmon: (ad7314) Validate leading zero bits and return error ALSA: usx2y: validate nrpacks module parameter on probe llc: do not use skb_get() before dev_queue_xmit() hwmon: fix a NULL vs IS_ERR_OR_NULL() check in xgene_hwmon_probe() drm/sched: Fix preprocessor guard be2net: fix sleeping while atomic bugs in be_ndo_bridge_getlink ppp: Fix KMSAN uninit-value warning with bpf vlan: enforce underlying device type net-timestamp: support TCP GSO case for a few missing flags net: ipv6: fix dst ref loop in ila lwtunnel net: ipv6: fix missing dst ref drop in ila lwtunnel gpio: rcar: Fix missing of_node_put() call Revert "drivers/card_reader/rtsx_usb: Restore interrupt based detection" usb: renesas_usbhs: Call clk_put() usb: renesas_usbhs: Use devm_usb_get_phy() usb: quirks: Add DELAY_INIT and NO_LPM for Prolific Mass Storage Card Reader usb: renesas_usbhs: Flush the notify_hotplug_work usb: atm: cxacru: fix a flaw in existing endpoint checks usb: typec: ucsi: increase timeout for PPM reset operations usb: typec: tcpci_rt1711h: Unmask alert interrupts to fix functionality usb: gadget: Set self-powered based on MaxPower and bmAttributes usb: gadget: Fix setting self-powered state on suspend usb: gadget: Check bmAttributes only if configuration is valid xhci: pci: Fix indentation in the PCI device ID definitions Squashfs: check the inode number is not the invalid value of zero mei: me: add panther lake P DID intel_th: pci: Add Arrow Lake support intel_th: pci: Add Panther Lake-H support intel_th: pci: Add Panther Lake-P/U support slimbus: messaging: Free transaction ID in delayed interrupt scenario eeprom: digsy_mtc: Make GPIO lookup table match the device mtd: rawnand: cadence: fix unchecked dereference spi-mxs: Fix chipselect glitch nilfs2: move page release outside of nilfs_delete_entry and nilfs_set_link nilfs2: eliminate staggered calls to kunmap in nilfs_rename nilfs2: handle errors that nilfs_prepare_chunk() may return media: uvcvideo: Only save async fh if success media: uvcvideo: Remove dangling pointers Revert "media: uvcvideo: Require entities to have a non-zero unique ID" bpf, vsock: Invoke proto::close on close() vsock: Keep the binding until socket destruction vsock: Orphan socket after transport release sched: sch_cake: add bounds checks to host bulk flow fairness counts kbuild: userprogs: use correct lld when linking through clang crypto: hisilicon/qm - inject error before stopping queue btrfs: bring back the incorrectly removed extent buffer lock recursion support usb: xhci: Enable the TRB overfetch quirk on VIA VL805 perf cs-etm: Add missing variable in cs_etm__process_queues() udf: Fix use of check_add_overflow() with mixed type arguments net: ipv6: fix dst refleaks in rpl, seg6 and ioam6 lwtunnels Linux 5.10.235 Change-Id: I349d609b7bc373f12f10db91441b27dfef66d461 Signed-off-by: Greg Kroah-Hartman <gregkh@google.com> |
||
|
Greg Kroah-Hartman
|
3cbae4d66b |
Merge 8f78a2b9ed ("net: usb: rtl8150: enable basic endpoint checking") into android12-5.10-lts
Steps on the way to 5.10.235 Change-Id: Ie1d5ef35bb4cadece7f43c614d3e51c836cbfa2f Signed-off-by: Greg Kroah-Hartman <gregkh@google.com> |
||
|
Nathan Chancellor
|
8fc87604da |
kbuild: Move -Wenum-enum-conversion to W=2
commit 8f6629c004b193d23612641c3607e785819e97ab upstream.
-Wenum-enum-conversion was strengthened in clang-19 to warn for C, which
caused the kernel to move it to W=1 in commit 75b5ab134bb5 ("kbuild:
Move -Wenum-{compare-conditional,enum-conversion} into W=1") because
there were numerous instances that would break builds with -Werror.
Unfortunately, this is not a full solution, as more and more developers,
subsystems, and distributors are building with W=1 as well, so they
continue to see the numerous instances of this warning.
Since the move to W=1, there have not been many new instances that have
appeared through various build reports and the ones that have appeared
seem to be following similar existing patterns, suggesting that most
instances of this warning will not be real issues. The only alternatives
for silencing this warning are adding casts (which is generally seen as
an ugly practice) or refactoring the enums to macro defines or a unified
enum (which may be undesirable because of type safety in other parts of
the code).
Move the warning to W=2, where warnings that occur frequently but may be
relevant should reside.
Cc: stable@vger.kernel.org
Fixes: 75b5ab134bb5 ("kbuild: Move -Wenum-{compare-conditional,enum-conversion} into W=1")
Link: https://lore.kernel.org/ZwRA9SOcOjjLJcpi@google.com/
Signed-off-by: Nathan Chancellor <nathan@kernel.org>
Acked-by: Arnd Bergmann <arnd@arndb.de>
Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
|
||
|
Masahiro Yamada
|
a13772b475 |
genksyms: fix memory leak when the same symbol is read from *.symref file
[ Upstream commit be2fa44b5180a1f021efb40c55fdf63c249c3209 ]
When a symbol that is already registered is read again from *.symref
file, __add_symbol() removes the previous one from the hash table without
freeing it.
[Test Case]
$ cat foo.c
#include <linux/export.h>
void foo(void);
void foo(void) {}
EXPORT_SYMBOL(foo);
$ cat foo.symref
foo void foo ( void )
foo void foo ( void )
When a symbol is removed from the hash table, it must be freed along
with its ->name and ->defn members. However, sym->name cannot be freed
because it is sometimes shared with node->string, but not always. If
sym->name and node->string share the same memory, free(sym->name) could
lead to a double-free bug.
To resolve this issue, always assign a strdup'ed string to sym->name.
Fixes:
|
||
|
Masahiro Yamada
|
f34bbd2025 |
genksyms: fix memory leak when the same symbol is added from source
[ Upstream commit 45c9c4101d3d2fdfa00852274bbebba65fcc3cf2 ]
When a symbol that is already registered is added again, __add_symbol()
returns without freeing the symbol definition, making it unreachable.
The following test cases demonstrate different memory leak points.
[Test Case 1]
Forward declaration with exactly the same definition
$ cat foo.c
#include <linux/export.h>
void foo(void);
void foo(void) {}
EXPORT_SYMBOL(foo);
[Test Case 2]
Forward declaration with a different definition (e.g. attribute)
$ cat foo.c
#include <linux/export.h>
void foo(void);
__attribute__((__section__(".ref.text"))) void foo(void) {}
EXPORT_SYMBOL(foo);
[Test Case 3]
Preserving an overridden symbol (compile with KBUILD_PRESERVE=1)
$ cat foo.c
#include <linux/export.h>
void foo(void);
void foo(void) { }
EXPORT_SYMBOL(foo);
$ cat foo.symref
override foo void foo ( int )
The memory leaks in Test Case 1 and 2 have existed since the introduction
of genksyms into the kernel tree. [1]
The memory leak in Test Case 3 was introduced by commit
|
||
|
Greg Kroah-Hartman
|
fc74821cbc |
Merge 5.10.234 into android12-5.10-lts
Changes in 5.10.234 ceph: give up on paths longer than PATH_MAX jbd2: flush filesystem device before updating tail sequence dm array: fix releasing a faulty array block twice in dm_array_cursor_end dm array: fix unreleased btree blocks on closing a faulty array cursor dm array: fix cursor index when skipping across block boundaries exfat: fix the infinite loop in exfat_readdir() ASoC: mediatek: disable buffer pre-allocation netfilter: nft_dynset: honor stateful expressions in set definition ieee802154: ca8210: Add missing check for kfifo_alloc() in ca8210_probe() net: 802: LLC+SNAP OID:PID lookup on start of skb data tcp/dccp: complete lockless accesses to sk->sk_max_ack_backlog tcp/dccp: allow a connection when sk_max_ack_backlog is zero net_sched: cls_flow: validate TCA_FLOW_RSHIFT attribute cxgb4: Avoid removal of uninserted tid tls: Fix tls_sw_sendmsg error handling netfilter: nf_tables: imbalance in flowtable binding netfilter: conntrack: clamp maximum hashtable size to INT_MAX afs: Fix the maximum cell name length dm thin: make get_first_thin use rcu-safe list first function dm-ebs: don't set the flag DM_TARGET_PASSES_INTEGRITY sctp: sysctl: cookie_hmac_alg: avoid using current->nsproxy sctp: sysctl: auth_enable: avoid using current->nsproxy drm/amd/display: Add check for granularity in dml ceil/floor helpers riscv: Fix sleeping in invalid context in die() ACPI: resource: Add TongFang GM5HG0A to irq1_edge_low_force_override[] ACPI: resource: Add Asus Vivobook X1504VAP to irq1_level_low_skip_override[] drm/amd/display: increase MAX_SURFACES to the value supported by hw scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity md/raid5: fix atomicity violation in raid5_cache_count USB: serial: option: add MeiG Smart SRM815 USB: serial: option: add Neoway N723-EA support staging: iio: ad9834: Correct phase range check staging: iio: ad9832: Correct phase range check usb-storage: Add max sectors quirk for Nokia 208 USB: serial: cp210x: add Phoenix Contact UPS Device usb: dwc3: gadget: fix writing NYET threshold usb: gadget: u_serial: Disable ep before setting port to null to fix the crash caused by port being null USB: usblp: return error when setting unsupported protocol USB: core: Disable LPM only for non-suspended ports usb: fix reference leak in usb_new_device() usb: gadget: f_fs: Remove WARN_ON in functionfs_bind iio: pressure: zpa2326: fix information leak in triggered buffer iio: dummy: iio_simply_dummy_buffer: fix information leak in triggered buffer iio: light: vcnl4035: fix information leak in triggered buffer iio: imu: kmx61: fix information leak in triggered buffer iio: adc: ti-ads8688: fix information leak in triggered buffer iio: gyro: fxas21002c: Fix missing data update in trigger handler iio: adc: ti-ads124s08: Use gpiod_set_value_cansleep() iio: adc: at91: call input_free_device() on allocated iio_dev iio: inkern: call iio_device_put() only on mapped devices arm64: dts: rockchip: add #power-domain-cells to power domain nodes arm64: dts: rockchip: add hevc power domain clock to rk3328 loop: let set_capacity_revalidate_and_notify update the bdev size nvme: let set_capacity_revalidate_and_notify update the bdev size sd: update the bdev size in sd_revalidate_disk block: remove the update_bdev parameter to set_capacity_revalidate_and_notify phy: usb: Add "wake on" functionality for newer Synopsis XHCI controllers phy: usb: Toggle the PHY power during init ocfs2: correct return value of ocfs2_local_free_info() ocfs2: fix slab-use-after-free due to dangling pointer dqi_priv drm: bridge: adv7511: Remove redundant null check before clk_disable_unprepare drm/mipi-dsi: Create devm device registration drm/mipi-dsi: Create devm device attachment drm/bridge: adv7533: Switch to devm MIPI-DSI helpers drm: bridge: adv7511: unregister cec i2c device after cec adapter drm: bridge: adv7511: use dev_err_probe in probe function drm: adv7511: Fix use-after-free in adv7533_attach_dsi() sctp: sysctl: rto_min/max: avoid using current->nsproxy phy: usb: Use slow clock for wake enabled suspend phy: usb: Fix clock imbalance for suspend/resume net: ethernet: ti: cpsw_ale: Fix cpsw_ale_get_field() bpf: Fix bpf_sk_select_reuseport() memory leak net: net_namespace: Optimize the code net: add exit_batch_rtnl() method gtp: use exit_batch_rtnl() method gtp: Use for_each_netdev_rcu() in gtp_genl_dump_pdp(). gtp: Destroy device along with udp socket's netns dismantle. nfp: bpf: prevent integer overflow in nfp_bpf_event_output() net/mlx5: Add priorities for counters in RDMA namespaces net/mlx5: Refactor mlx5_get_flow_namespace net/mlx5: Fix RDMA TX steering prio drm/v3d: Ensure job pointer is set to NULL after job completion i2c: mux: demux-pinctrl: check initial mux selection, too i2c: rcar: fix NACK handling when being a target mac802154: check local interfaces before deleting sdata list hfs: Sanity check the root record fs: fix missing declaration of init_files kheaders: Ignore silly-rename files poll_wait: add mb() to fix theoretical race between waitqueue_active() and .poll() nvmet: propagate npwg topology x86/asm: Make serialize() always_inline net: ethernet: xgbe: re-add aneg to supported features in PHY quirks vsock/virtio: cancel close work in the destructor vsock: reset socket state when de-assigning the transport fs/proc: fix softlockup in __read_vmcore (part 2) gpiolib: cdev: Fix use after free in lineinfo_changed_notify irqchip/gic-v3: Handle CPU_PM_ENTER_FAILED correctly hrtimers: Handle CPU state correctly on hotplug Revert "PCI: Use preserve_config in place of pci_flags" iio: imu: inv_icm42600: fix spi burst write not supported iio: imu: inv_icm42600: fix timestamps after suspend if sensor is on iio: adc: rockchip_saradc: fix information leak in triggered buffer drm/radeon: check bo_va->bo is non-NULL before using it vmalloc: fix accounting with i915 RDMA/hns: Fix deadlock on SRQ async events. blk-cgroup: Fix UAF in blkcg_unpin_online() ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev() nfsd: add list_head nf_gc to struct nfsd_file fou: remove warn in gue_gro_receive on unsupported protocol vsock/virtio: discard packets if the transport changes vsock: prevent null-ptr-deref in vsock_*[has_data|has_space] x86/xen: fix SLS mitigation in xen_hypercall_iret() scsi: sg: Fix slab-use-after-free read in sg_release() net: fix data-races around sk->sk_forward_alloc ASoC: wm8994: Add depends on MFD core ASoC: samsung: Add missing selects for MFD_WM8994 seccomp: Stub for !CONFIG_SECCOMP scsi: iscsi: Fix redundant response for ISCSI_UEVENT_GET_HOST_STATS request irqchip/sunxi-nmi: Add missing SKIP_WAKE flag ASoC: samsung: Add missing depends on I2C gfs2: Truncate address space when flipping GFS2_DIF_JDATA flag net: sched: fix ets qdisc OOB Indexing m68k: Update ->thread.esp0 before calling syscall_trace() in ret_from_signal signal/m68k: Use force_sigsegv(SIGSEGV) in fpsp040_die vfio/platform: check the bounds of read/write syscalls Bluetooth: RFCOMM: Fix not validating setsockopt user input ipv4: ip_tunnel: Fix suspicious RCU usage warning in ip_tunnel_find() wifi: iwlwifi: add a few rate index validity checks USB: serial: quatech2: fix null-ptr-deref in qt2_process_read_urb() Revert "usb: gadget: u_serial: Disable ep before setting port to null to fix the crash caused by port being null" Input: atkbd - map F23 key to support default copilot shortcut Input: xpad - add unofficial Xbox 360 wireless receiver clone Input: xpad - add support for wooting two he (arm) drm/v3d: Assign job pointer to NULL before signaling the fence xhci: use pm_ptr() instead of #ifdef for CONFIG_PM conditionals Partial revert of xhci: use pm_ptr() instead #ifdef for CONFIG_PM conditionals Linux 5.10.234 Change-Id: I9a9b2d6c6fd99416deb58efc6543cc381d7a8e5f Signed-off-by: Greg Kroah-Hartman <gregkh@google.com> |
||
|
Kuan-Wei Chiu
|
08765d4e44 |
scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity
commit 0210d251162f4033350a94a43f95b1c39ec84a90 upstream.
The orc_sort_cmp() function, used with qsort(), previously violated the
symmetry and transitivity rules required by the C standard. Specifically,
when both entries are ORC_TYPE_UNDEFINED, it could result in both a < b
and b < a, which breaks the required symmetry and transitivity. This can
lead to undefined behavior and incorrect sorting results, potentially
causing memory corruption in glibc implementations [1].
Symmetry: If x < y, then y > x.
Transitivity: If x < y and y < z, then x < z.
Fix the comparison logic to return 0 when both entries are
ORC_TYPE_UNDEFINED, ensuring compliance with qsort() requirements.
Link: https://www.qualys.com/2024/01/30/qsort.txt [1]
Link: https://lkml.kernel.org/r/20241226140332.2670689-1-visitorckw@gmail.com
Fixes:
|
||
|
Greg Kroah-Hartman
|
e36dd359bb |
Merge 5.10.233 into android12-5.10-lts
Changes in 5.10.233 net: sched: fix ordering of qlen adjustment PCI/AER: Disable AER service on suspend PCI: Use preserve_config in place of pci_flags MIPS: Loongson64: DTS: Fix msi node for ls7a ALSA: usb: Fix UBSAN warning in parse_audio_unit() PCI: Add ACS quirk for Broadcom BCM5760X NIC usb: cdns3: Add quirk flag to enable suspend residency usb: dwc2: gadget: Don't write invalid mapped sg entries into dma_desc with iommu enabled i2c: pnx: Fix timeout in wait functions erofs: fix order >= MAX_ORDER warning due to crafted negative i_size erofs: fix incorrect symlink detection in fast symlink net/smc: check sndbuf_space again after NOSPACE flag is set in smc_poll net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg net/smc: check return value of sock_recvmsg when draining clc data netdevsim: switch to memdup_user_nul() netdevsim: prevent bad user input in nsim_dev_health_break_write() ionic: use ee->offset when returning sprom data net: hinic: Fix cleanup in create_rxqs/txqs() net: ethernet: bgmac-platform: fix an OF node reference leak netfilter: ipset: Fix for recursive locking warning mmc: sdhci-tegra: Remove SDHCI_QUIRK_BROKEN_ADMA_ZEROLEN_DESC quirk chelsio/chtls: prevent potential integer overflow on 32bit i2c: riic: Always round-up when calculating bus period efivarfs: Fix error on non-existent file USB: serial: option: add TCL IK512 MBIM & ECM USB: serial: option: add MeiG Smart SLM770A USB: serial: option: add Netprisma LCUK54 modules for WWAN Ready USB: serial: option: add MediaTek T7XX compositions USB: serial: option: add Telit FE910C04 rmnet compositions hwmon: (tmp513) Fix interpretation of values of Temperature Result and Limit Registers sh: clk: Fix clk_enable() to return 0 on NULL clk zram: refuse to use zero sized block device as backing device btrfs: tree-checker: reject inline extent items with 0 ref count Drivers: hv: util: Avoid accessing a ringbuffer not initialized yet NFS/pnfs: Fix a live lock between recalled layouts and layoutget of/irq: Fix using uninitialized variable @addr_len in API of_irq_parse_one() nilfs2: prevent use of deleted inode udmabuf: also check for F_SEAL_FUTURE_WRITE of: Fix error path in of_parse_phandle_with_args_map() of: Fix refcount leakage for OF node returned by __of_get_dma_parent() ceph: validate snapdirname option length when mounting epoll: Add synchronous wakeup support for ep_poll_callback media: dvb-frontends: dib3000mb: fix uninit-value in dib3000_write_reg mm/vmstat: fix a W=1 clang compiler warning tcp_bpf: Charge receive socket buffer in bpf_tcp_ingress() bpf: Check negative offsets in __bpf_skb_min_len() nfsd: restore callback functionality for NFSv4.0 mtd: diskonchip: Cast an operand to prevent potential overflow phy: core: Fix an OF node refcount leakage in _of_phy_get() phy: core: Fix an OF node refcount leakage in of_phy_provider_lookup() phy: core: Fix that API devm_phy_put() fails to release the phy phy: core: Fix that API devm_of_phy_provider_unregister() fails to unregister the phy provider phy: core: Fix that API devm_phy_destroy() fails to destroy the phy dmaengine: mv_xor: fix child node refcount handling in early exit dmaengine: at_xdmac: avoid null_prt_deref in at_xdmac_prep_dma_memset mtd: rawnand: fix double free in atmel_pmecc_create_user() tracing/kprobe: Make trace_kprobe's module callback called after jump_label update watchdog: it87_wdt: add PWRGD enable quirk for Qotom QCML04 scsi: qla1280: Fix hw revision numbering for ISP1020/1040 scsi: megaraid_sas: Fix for a potential deadlock ALSA: hda/conexant: fix Z60MR100 startup pop issue regmap: Use correct format specifier for logging range errors platform/x86: asus-nb-wmi: Ignore unknown event 0xCF scsi: mpt3sas: Diag-Reset when Doorbell-In-Use bit is set during driver load time scsi: storvsc: Do not flag MAINTENANCE_IN return of SRB_STATUS_DATA_OVERRUN as an error virtio-blk: don't keep queue frozen during system suspend MIPS: Probe toolchain support of -msym32 skbuff: introduce skb_expand_head() ipv6: use skb_expand_head in ip6_finish_output2 ipv6: use skb_expand_head in ip6_xmit ipv6: fix possible UAF in ip6_finish_output2() bpf: Check validity of link->type in bpf_link_show_fdinfo() bpf: fix recursive lock when verdict program return SK_PASS drm/dp_mst: Fix MST sideband message body length check arm64: mm: Rename asid2idx() to ctxid2asid() arm64: Ensure bits ASID[15:8] are masked out when the kernel uses 8-bit ASIDs tracing: Constify string literal data member in struct trace_event_call power: supply: gpio-charger: Fix set charge current limits btrfs: avoid monopolizing a core when activating a swap file nfsd: cancel nfsd_shrinker_work using sync mode in nfs4_state_shutdown_net skb_expand_head() adjust skb->truesize incorrectly ipv6: prevent possible UAF in ip6_xmit() x86/hyperv: Fix hv tsc page based sched_clock for hibernation selinux: ignore unknown extended permissions thunderbolt: Add support for Intel Alder Lake thunderbolt: Add support for Intel Raptor Lake thunderbolt: Add support for Intel Meteor Lake thunderbolt: Add Intel Barlow Ridge PCI ID thunderbolt: Add support for Intel Lunar Lake thunderbolt: Add support for Intel Panther Lake-M/P net/mlx5: Make API mlx5_core_is_ecpf accept const pointer RDMA/mlx5: Enforce same type port association for multiport RoCE RDMA/bnxt_re: Add check for path mtu in modify_qp RDMA/bnxt_re: Fix reporting hw_ver in query_device RDMA/bnxt_re: Fix max_qp_wrs reported RDMA/bnxt_re: Fix the locking while accessing the QP table drm/bridge: adv7511_audio: Update Audio InfoFrame properly netrom: check buffer length before accessing it netfilter: nft_set_hash: unaligned atomic read on struct nft_set_ext net: llc: reset skb->transport_header ALSA: usb-audio: US16x08: Initialize array before use eth: bcmsysport: fix call balance of priv->clk handling routines RDMA/rtrs: Ensure 'ib_sge list' is accessible af_packet: fix vlan_get_tci() vs MSG_PEEK af_packet: fix vlan_get_protocol_dgram() vs MSG_PEEK ila: serialize calls to nf_register_net_hooks() dmaengine: dw: Select only supported masters for ACPI devices btrfs: switch extent buffer tree lock to rw_semaphore btrfs: locking: remove all the blocking helpers btrfs: rename and export __btrfs_cow_block() btrfs: fix use-after-free when COWing tree bock and tracing is enabled kernel: Initialize cpumask before parsing tracing: Prevent bad count for tracing_cpumask_write wifi: mac80211: wake the queues in case of failure in resume btrfs: flush delalloc workers queue before stopping cleaner kthread during unmount sound: usb: format: don't warn that raw DSD is unsupported bpf: fix potential error return net: usb: qmi_wwan: add Telit FE910C04 compositions irqchip/gic: Correct declaration of *percpu_base pointer in union gic_base ARC: build: Try to guess GCC variant of cross compiler btrfs: locking: remove the recursion handling code btrfs: don't set lock_owner when locking extent buffer for reading modpost: fix input MODULE_DEVICE_TABLE() built for 64-bit on 32-bit host modpost: fix the missed iteration for the max bit in do_input() RDMA/uverbs: Prevent integer overflow issue pinctrl: mcp23s08: Fix sleeping in atomic context due to regmap locking sky2: Add device ID 11ab:4373 for Marvell 88E8075 net/sctp: Prevent autoclose integer overflow in sctp_association_init() drm: adv7511: Drop dsi single lane support mm: vmscan: account for free pages to prevent infinite Loop in throttle_direct_reclaim() Linux 5.10.233 Change-Id: I44b140d83b01d2d88895bca7fb897c6e3ce65027 Signed-off-by: Greg Kroah-Hartman <gregkh@google.com> |
||
|
Masahiro Yamada
|
50804bd95f |
modpost: fix the missed iteration for the max bit in do_input()
[ Upstream commit bf36b4bf1b9a7a0015610e2f038ee84ddb085de2 ]
This loop should iterate over the range from 'min' to 'max' inclusively.
The last interation is missed.
Fixes:
|
||
|
Masahiro Yamada
|
0cd78baf4d |
modpost: fix input MODULE_DEVICE_TABLE() built for 64-bit on 32-bit host
[ Upstream commit 77dc55a978e69625f9718460012e5ef0172dc4de ]
When building a 64-bit kernel on a 32-bit build host, incorrect
input MODULE_ALIAS() entries may be generated.
For example, when compiling a 64-bit kernel with CONFIG_INPUT_MOUSEDEV=m
on a 64-bit build machine, you will get the correct output:
$ grep MODULE_ALIAS drivers/input/mousedev.mod.c
MODULE_ALIAS("input:b*v*p*e*-e*1,*2,*k*110,*r*0,*1,*a*m*l*s*f*w*");
MODULE_ALIAS("input:b*v*p*e*-e*1,*2,*k*r*8,*a*m*l*s*f*w*");
MODULE_ALIAS("input:b*v*p*e*-e*1,*3,*k*14A,*r*a*0,*1,*m*l*s*f*w*");
MODULE_ALIAS("input:b*v*p*e*-e*1,*3,*k*145,*r*a*0,*1,*18,*1C,*m*l*s*f*w*");
MODULE_ALIAS("input:b*v*p*e*-e*1,*3,*k*110,*r*a*0,*1,*m*l*s*f*w*");
However, building the same kernel on a 32-bit machine results in
incorrect output:
$ grep MODULE_ALIAS drivers/input/mousedev.mod.c
MODULE_ALIAS("input:b*v*p*e*-e*1,*2,*k*110,*130,*r*0,*1,*a*m*l*s*f*w*");
MODULE_ALIAS("input:b*v*p*e*-e*1,*2,*k*r*8,*a*m*l*s*f*w*");
MODULE_ALIAS("input:b*v*p*e*-e*1,*3,*k*14A,*16A,*r*a*0,*1,*20,*21,*m*l*s*f*w*");
MODULE_ALIAS("input:b*v*p*e*-e*1,*3,*k*145,*165,*r*a*0,*1,*18,*1C,*20,*21,*38,*3C,*m*l*s*f*w*");
MODULE_ALIAS("input:b*v*p*e*-e*1,*3,*k*110,*130,*r*a*0,*1,*20,*21,*m*l*s*f*w*");
A similar issue occurs with CONFIG_INPUT_JOYDEV=m. On a 64-bit build
machine, the output is:
$ grep MODULE_ALIAS drivers/input/joydev.mod.c
MODULE_ALIAS("input:b*v*p*e*-e*3,*k*r*a*0,*m*l*s*f*w*");
MODULE_ALIAS("input:b*v*p*e*-e*3,*k*r*a*2,*m*l*s*f*w*");
MODULE_ALIAS("input:b*v*p*e*-e*3,*k*r*a*8,*m*l*s*f*w*");
MODULE_ALIAS("input:b*v*p*e*-e*3,*k*r*a*6,*m*l*s*f*w*");
MODULE_ALIAS("input:b*v*p*e*-e*1,*k*120,*r*a*m*l*s*f*w*");
MODULE_ALIAS("input:b*v*p*e*-e*1,*k*130,*r*a*m*l*s*f*w*");
MODULE_ALIAS("input:b*v*p*e*-e*1,*k*2C0,*r*a*m*l*s*f*w*");
However, on a 32-bit machine, the output is incorrect:
$ grep MODULE_ALIAS drivers/input/joydev.mod.c
MODULE_ALIAS("input:b*v*p*e*-e*3,*k*r*a*0,*20,*m*l*s*f*w*");
MODULE_ALIAS("input:b*v*p*e*-e*3,*k*r*a*2,*22,*m*l*s*f*w*");
MODULE_ALIAS("input:b*v*p*e*-e*3,*k*r*a*8,*28,*m*l*s*f*w*");
MODULE_ALIAS("input:b*v*p*e*-e*3,*k*r*a*6,*26,*m*l*s*f*w*");
MODULE_ALIAS("input:b*v*p*e*-e*1,*k*11F,*13F,*r*a*m*l*s*f*w*");
MODULE_ALIAS("input:b*v*p*e*-e*1,*k*11F,*13F,*r*a*m*l*s*f*w*");
MODULE_ALIAS("input:b*v*p*e*-e*1,*k*2C0,*2E0,*r*a*m*l*s*f*w*");
When building a 64-bit kernel, BITS_PER_LONG is defined as 64. However,
on a 32-bit build machine, the constant 1L is a signed 32-bit value.
Left-shifting it beyond 32 bits causes wraparound, and shifting by 31
or 63 bits makes it a negative value.
The fix in commit
|
||
|
Greg Kroah-Hartman
|
1ee5d6b1bf |
Merge 5.10.231 into android12-5.10-lts
Changes in 5.10.231
arm64: dts: allwinner: pinephone: Add mount matrix to accelerometer
media: i2c: tc358743: Fix crash in the probe error path when using polling
media: ts2020: fix null-ptr-deref in ts2020_probe()
media: venus: Fix pm_runtime_set_suspended() with runtime pm enabled
media: gspca: ov534-ov772x: Fix off-by-one error in set_frame_rate()
media: platform: allegro-dvt: Fix possible memory leak in allocate_buffers_internal()
media: uvcvideo: Stop stream during unregister
ovl: Filter invalid inodes with missing lookup function
ftrace: Fix regression with module command in stack_trace_filter
leds: lp55xx: Remove redundant test for invalid channel number
clk: qcom: gcc-qcs404: fix initial rate of GPLL3
netlink: terminate outstanding dump on socket close
net/mlx5: fs, lock FTE when checking if active
net/mlx5e: kTLS, Fix incorrect page refcounting
x86/mm: Fix a kdump kernel failure on SME system when CONFIG_IMA_KEXEC=y
ocfs2: uncache inode which has failed entering the group
vdpa/mlx5: Fix PA offset with unaligned starting iotlb map
KVM: VMX: Bury Intel PT virtualization (guest/host mode) behind CONFIG_BROKEN
nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint
ocfs2: fix UBSAN warning in ocfs2_verify_volume()
nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint
Revert "mmc: dw_mmc: Fix IDMAC operation with pages bigger than 4K"
drm/bridge: tc358768: Fix DSI command tx
mmc: core: fix return value check in devm_mmc_alloc_host()
media: dvbdev: fix the logic when DVB_DYNAMIC_MINORS is not set
NFSD: initialize copy->cp_clp early in nfsd4_copy for use by trace point
NFSD: Async COPY result needs to return a write verifier
NFSD: Limit the number of concurrent async COPY operations
NFSD: Initialize struct nfsd4_copy earlier
NFSD: Never decrement pending_async_copies on error
mm: revert "mm: shmem: fix data-race in shmem_getattr()"
mm: avoid unsafe VMA hook invocation when error arises on mmap hook
mm: unconditionally close VMAs on error
mm: refactor arch_calc_vm_flag_bits() and arm64 MTE handling
mm: resolve faulty mmap_region() error path behaviour
ASoC: Intel: bytcr_rt5640: Add DMI quirk for Vexia Edu Atla 10 tablet
mac80211: fix user-power when emulating chanctx
selftests/watchdog-test: Fix system accidentally reset after watchdog-test
ALSA: hda/realtek: Add subwoofer quirk for Infinix ZERO BOOK 13
x86/amd_nb: Fix compile-testing without CONFIG_AMD_NB
net: usb: qmi_wwan: add Quectel RG650V
soc: qcom: Add check devm_kasprintf() returned value
regulator: rk808: Add apply_bit for BUCK3 on RK809
can: j1939: fix error in J1939 documentation.
ASoC: stm: Prevent potential division by zero in stm32_sai_mclk_round_rate()
ASoC: stm: Prevent potential division by zero in stm32_sai_get_clk_div()
proc/softirqs: replace seq_printf with seq_put_decimal_ull_width
ALSA: usb-audio: Fix Yamaha P-125 Quirk Entry
ipmr: Fix access to mfc_cache_list without lock held
rcu-tasks: Idle tasks on offline CPUs are in quiescent states
cifs: Fix buffer overflow when parsing NFS reparse points
nvme: fix metadata handling in nvme-passthrough
x86/barrier: Do not serialize MSR accesses on AMD
kselftest/arm64: mte: fix printf type warnings about longs
x86/xen/pvh: Annotate indirect branch as safe
mips: asm: fix warning when disabling MIPS_FP_SUPPORT
initramfs: avoid filename buffer overrun
nvme-pci: fix freeing of the HMB descriptor table
m68k: mvme147: Fix SCSI controller IRQ numbers
m68k: mvme16x: Add and use "mvme16x.h"
m68k: mvme147: Reinstate early console
arm64: fix .data.rel.ro size assertion when CONFIG_LTO_CLANG
acpi/arm64: Adjust error handling procedure in gtdt_parse_timer_block()
s390/syscalls: Avoid creation of arch/arch/ directory
hfsplus: don't query the device logical block size multiple times
crypto: caam - Fix the pointer passed to caam_qi_shutdown()
firmware: google: Unregister driver_info on failure
EDAC/bluefield: Fix potential integer overflow
EDAC/fsl_ddr: Fix bad bit shift operations
crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY
crypto: cavium - Fix the if condition to exit loop after timeout
crypto: caam - add error check to caam_rsa_set_priv_key_form
crypto: bcm - add error check in the ahash_hmac_init function
crypto: cavium - Fix an error handling path in cpt_ucode_load_fw()
time: Fix references to _msecs_to_jiffies() handling of values
kcsan, seqlock: Fix incorrect assumption in read_seqbegin()
clkdev: remove CONFIG_CLKDEV_LOOKUP
clocksource/drivers:sp804: Make user selectable
spi: spi-fsl-lpspi: downgrade log level for pio mode
spi: spi-fsl-lpspi: Use IRQF_NO_AUTOEN flag in request_irq()
soc: ti: smartreflex: Use IRQF_NO_AUTOEN flag in request_irq()
soc: qcom: geni-se: fix array underflow in geni_se_clk_tbl_get()
mmc: mmc_spi: drop buggy snprintf()
tpm: fix signed/unsigned bug when checking event logs
arm64: dts: mt8183: krane: Fix the address of eeprom at i2c4
arm64: dts: mediatek: mt8173-elm-hana: Add vdd-supply to second source trackpad
Revert "cgroup: Fix memory leak caused by missing cgroup_bpf_offline"
cgroup/bpf: only cgroup v2 can be attached by bpf programs
pwm: imx27: Workaround of the pwm output bug when decrease the duty cycle
ARM: dts: cubieboard4: Fix DCDC5 regulator constraints
pmdomain: ti-sci: Add missing of_node_put() for args.np
regmap: irq: Set lockdep class for hierarchical IRQ domains
selftests/resctrl: Protect against array overrun during iMC config parsing
firmware: arm_scpi: Check the DVFS OPP count returned by the firmware
media: atomisp: remove #ifdef HAS_NO_HMEM
media: atomisp: Add check for rgby_data memory allocation failure
drm/mm: Mark drm_mm_interval_tree*() functions with __maybe_unused
wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service()
drm/omap: Fix locking in omap_gem_new_dmabuf()
wifi: p54: Use IRQF_NO_AUTOEN flag in request_irq()
wifi: mwifiex: Use IRQF_NO_AUTOEN flag in request_irq()
drm/imx/dcss: Use IRQF_NO_AUTOEN flag in request_irq()
drm/imx/ipuv3: Use IRQF_NO_AUTOEN flag in request_irq()
drm/v3d: Address race-condition in MMU flush
wifi: ath10k: fix invalid VHT parameters in supported_vht_mcs_rate_nss1
wifi: ath10k: fix invalid VHT parameters in supported_vht_mcs_rate_nss2
dt-bindings: vendor-prefixes: Add NeoFidelity, Inc
ASoC: fsl_micfil: Drop unnecessary register read
ASoC: fsl_micfil: do not define SHIFT/MASK for single bits
ASoC: fsl_micfil: use GENMASK to define register bit fields
ASoC: fsl_micfil: fix regmap_write_bits usage
ASoC: dt-bindings: mt6359: Update generic node name and dmic-mode
bpf: Fix the xdp_adjust_tail sample prog issue
xfrm: rename xfrm_state_offload struct to allow reuse
xfrm: store and rely on direction to construct offload flags
netdevsim: rely on XFRM state direction instead of flags
netdevsim: copy addresses for both in and out paths
drm/bridge: tc358767: Fix link properties discovery
selftests/bpf: Fix msg_verify_data in test_sockmap
selftests/bpf: Fix txmsg_redir of test_txmsg_pull in test_sockmap
wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_config_scan()
drm/fsl-dcu: Convert to Linux IRQ interfaces
drm: fsl-dcu: enable PIXCLK on LS1021A
octeontx2-af: Mbox changes for 98xx
octeontx2-pf: Calculate LBK link instead of hardcoding
octeontx2-af: forward error correction configuration
octeontx2-af: Add new CGX_CMD to get PHY FEC statistics
octeontx2-pf: ethtool fec mode support
octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_ethtool.c
drm/panfrost: Remove unused id_mask from struct panfrost_model
drm/msm/adreno: Use IRQF_NO_AUTOEN flag in request_irq()
drm/etnaviv: rework linear window offset calculation
drm/etnaviv: Request pages from DMA32 zone on addressing_limited
drm/etnaviv: dump: fix sparse warnings
drm/etnaviv: fix power register offset on GC300
drm/etnaviv: hold GPU lock across perfmon sampling
wifi: wfx: Fix error handling in wfx_core_init()
drm/msm/dpu: cast crtc_clk calculation to u64 in _dpu_core_perf_calc_clk()
netlink: typographical error in nlmsg_type constants definition
selftests/bpf: Add txmsg_pass to pull/push/pop in test_sockmap
selftests/bpf: Fix SENDPAGE data logic in test_sockmap
selftests, bpf: Add one test for sockmap with strparser
selftests/bpf: Fix total_bytes in msg_loop_rx in test_sockmap
selftests/bpf: Add push/pop checking for msg_verify_data in test_sockmap
bpf, sockmap: Several fixes to bpf_msg_push_data
bpf, sockmap: Several fixes to bpf_msg_pop_data
bpf, sockmap: Fix sk_msg_reset_curr
selftests: net: really check for bg process completion
drm/amdkfd: Fix wrong usage of INIT_WORK()
net: rfkill: gpio: Add check for clk_enable()
ALSA: usx2y: Fix spaces
ALSA: usx2y: Coding style fixes
ALSA: usx2y: Cleanup probe and disconnect callbacks
ALSA: usx2y: Use snd_card_free_when_closed() at disconnection
ALSA: us122l: Use snd_card_free_when_closed() at disconnection
ALSA: caiaq: Use snd_card_free_when_closed() at disconnection
ALSA: 6fire: Release resources at card release
driver core: Introduce device_find_any_child() helper
Bluetooth: fix use-after-free in device_for_each_child()
netpoll: Use rcu_access_pointer() in netpoll_poll_lock
wireguard: selftests: load nf_conntrack if not present
trace/trace_event_perf: remove duplicate samples on the first tracepoint event
powerpc/vdso: Flag VDSO64 entry points as functions
mfd: tps65010: Use IRQF_NO_AUTOEN flag in request_irq() to fix race
mfd: da9052-spi: Change read-mask to write-mask
mfd: intel_soc_pmic_bxtwc: Use dev_err_probe()
mfd: intel_soc_pmic_bxtwc: Use IRQ domain for USB Type-C device
mfd: intel_soc_pmic_bxtwc: Use IRQ domain for TMU device
mfd: intel_soc_pmic_bxtwc: Use IRQ domain for PMIC devices
cpufreq: loongson2: Unregister platform_driver on failure
mtd: rawnand: atmel: Fix possible memory leak
powerpc/pseries: Fix dtl_access_lock to be a rw_semaphore
RDMA/bnxt_re: Check cqe flags to know imm_data vs inv_irkey
mfd: rt5033: Fix missing regmap_del_irq_chip()
scsi: bfa: Fix use-after-free in bfad_im_module_exit()
scsi: fusion: Remove unused variable 'rc'
scsi: qedf: Fix a possible memory leak in qedf_alloc_and_init_sb()
scsi: qedi: Fix a possible memory leak in qedi_alloc_and_init_sb()
RDMA/hns: Fix NULL pointer derefernce in hns_roce_map_mr_sg()
ocfs2: fix uninitialized value in ocfs2_file_read_iter()
powerpc/sstep: make emulate_vsx_load and emulate_vsx_store static
powerpc/kexec: Fix return of uninitialized variable
fbdev/sh7760fb: Alloc DMA memory from hardware device
fbdev: sh7760fb: Fix a possible memory leak in sh7760fb_alloc_mem()
dt-bindings: clock: adi,axi-clkgen: convert old binding to yaml format
dt-bindings: clock: axi-clkgen: include AXI clk
clk: axi-clkgen: use devm_platform_ioremap_resource() short-hand
clk: clk-axi-clkgen: make sure to enable the AXI bus clock
perf cs-etm: Don't flush when packet_queue fills up
perf probe: Fix libdw memory leak
perf probe: Correct demangled symbols in C++ program
PCI: cpqphp: Use PCI_POSSIBLE_ERROR() to check config reads
PCI: cpqphp: Fix PCIBIOS_* return value confusion
f2fs: fix the wrong f2fs_bug_on condition in f2fs_do_replace_block
f2fs: avoid using native allocate_segment_by_default()
f2fs: remove struct segment_allocation default_salloc_ops
f2fs: open code allocate_segment_by_default
f2fs: remove the unused flush argument to change_curseg
f2fs: check curseg->inited before write_sum_page in change_curseg
perf trace: avoid garbage when not printing a trace event's arguments
m68k: mcfgpio: Fix incorrect register offset for CONFIG_M5441x
m68k: coldfire/device.c: only build FEC when HW macros are defined
perf trace: Do not lose last events in a race
perf trace: Avoid garbage when not printing a syscall's arguments
rpmsg: glink: Add TX_DATA_CONT command while sending
rpmsg: glink: Send READ_NOTIFY command in FIFO full case
rpmsg: glink: Fix GLINK command prefix
rpmsg: glink: use only lower 16-bits of param2 for CMD_OPEN name length
remoteproc: qcom_q6v5_mss: Re-order writes to the IMEM region
NFSD: Prevent NULL dereference in nfsd4_process_cb_update()
NFSD: Cap the number of bytes copied by nfs4_reset_recoverydir()
NFSD: Fix nfsd4_shutdown_copy()
vdpa/mlx5: Fix suboptimal range on iotlb iteration
vfio/pci: Properly hide first-in-list PCIe extended capability
fs_parser: update mount_api doc to match function signature
power: supply: core: Remove might_sleep() from power_supply_put()
power: supply: bq27xxx: Support CHARGE_NOW for bq27z561/bq28z610/bq34z100
power: supply: bq27xxx: Fix registers of bq27426
net: usb: lan78xx: Fix memory leak on device unplug by freeing PHY device
tg3: Set coherent DMA mask bits to 31 for BCM57766 chipsets
net: usb: lan78xx: Fix refcounting and autosuspend on invalid WoL configuration
marvell: pxa168_eth: fix call balance of pep->clk handling routines
net: stmmac: dwmac-socfpga: Set RX watchdog interrupt as broken
spi: atmel-quadspi: Fix register name in verbose logging function
net: introduce a netdev feature for UDP GRO forwarding
net: hsr: fix hsr_init_sk() vs network/transport headers.
bnxt_en: Reserve rings after PCIe AER recovery if NIC interface is down
ipmr: convert /proc handlers to rcu_read_lock()
ipmr: fix tables suspicious RCU usage
iio: light: al3010: Fix an error handling path in al3010_probe()
usb: using mutex lock and supporting O_NONBLOCK flag in iowarrior_read()
usb: yurex: make waiting on yurex_write interruptible
USB: chaoskey: fail open after removal
USB: chaoskey: Fix possible deadlock chaoskey_list_lock
misc: apds990x: Fix missing pm_runtime_disable()
staging: greybus: uart: clean up TIOCGSERIAL
ALSA: hda/realtek - Add type for ALC287
ALSA: hda/realtek: Update ALC256 depop procedure
apparmor: fix 'Do simple duplicate message elimination'
xen: Fix the issue of resource not being properly released in xenbus_dev_probe()
usb: ehci-spear: fix call balance of sehci clk handling routines
soc: qcom: socinfo: fix revision check in qcom_socinfo_probe()
ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices
ext4: supress data-race warnings in ext4_free_inodes_{count,set}()
ext4: fix FS_IOC_GETFSMAP handling
jfs: xattr: check invalid xattr size more strictly
ASoC: codecs: Fix atomicity violation in snd_soc_component_get_drvdata()
perf/x86/intel/pt: Fix buffer full but size is 0 case
crypto: x86/aegis128 - access 32-bit arguments as 32-bit
KVM: arm64: Ignore PMCNTENSET_EL0 while checking for overflow status
PCI: Fix use-after-free of slot->bus on hot remove
fsnotify: fix sending inotify event with unexpected filename
comedi: Flush partial mappings in error case
apparmor: test: Fix memory leak for aa_unpack_strdup()
tty: ldsic: fix tty_ldisc_autoload sysctl's proc_handler
locking/lockdep: Avoid creating new name string literals in lockdep_set_subclass()
exfat: fix uninit-value in __exfat_get_dentry_set
Bluetooth: Fix type of len in rfcomm_sock_getsockopt{,_old}()
driver core: bus: Fix double free in driver API bus_register()
Revert "usb: gadget: composite: fix OS descriptors w_value logic"
serial: sh-sci: Clean sci_ports[0] after at earlycon exit
Revert "serial: sh-sci: Clean sci_ports[0] after at earlycon exit"
netfilter: ipset: add missing range check in bitmap_ip_uadt
spi: Fix acpi deferred irq probe
platform/chrome: cros_ec_typec: fix missing fwnode reference decrement
ubi: wl: Put source PEB into correct list if trying locking LEB failed
um: ubd: Do not use drvdata in release
um: net: Do not use drvdata in release
serial: 8250: omap: Move pm_runtime_get_sync
um: vector: Do not use drvdata in release
sh: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
arm64: tls: Fix context-switching of tpidrro_el0 when kpti is enabled
block: fix ordering between checking BLK_MQ_S_STOPPED request adding
HID: wacom: Interpret tilt data from Intuos Pro BT as signed values
media: wl128x: Fix atomicity violation in fmc_send_cmd()
media: v4l2-core: v4l2-dv-timings: check cvt/gtf result
ALSA: hda/realtek: Update ALC225 depop procedure
ALSA: hda/realtek: Set PCBeep to default value for ALC274
ALSA: hda/realtek: Fix Internal Speaker and Mic boost of Infinix Y4 Max
ALSA: hda/realtek: Apply quirk for Medion E15433
usb: dwc3: gadget: Fix checking for number of TRBs left
usb: dwc3: gadget: Fix looping of queued SG entries
lib: string_helpers: silence snprintf() output truncation warning
NFSD: Prevent a potential integer overflow
SUNRPC: make sure cache entry active before cache_show
rpmsg: glink: Propagate TX failures in intentless mode as well
um: Fix potential integer overflow during physmem setup
um: Fix the return value of elf_core_copy_task_fpregs
um: Always dump trace for specified task in show_stack
NFSv4.0: Fix a use-after-free problem in the asynchronous open()
rtc: st-lpc: Use IRQF_NO_AUTOEN flag in request_irq()
rtc: abx80x: Fix WDT bit position of the status register
rtc: check if __rtc_read_time was successful in rtc_timer_do_work()
ubifs: Correct the total block count by deducting journal reservation
ubi: fastmap: Fix duplicate slab cache names while attaching
ubifs: authentication: Fix use-after-free in ubifs_tnc_end_commit
jffs2: fix use of uninitialized variable
block: return unsigned int from bdev_io_min
9p/xen: fix init sequence
9p/xen: fix release of IRQ
rtc: ab-eoz9: don't fail temperature reads on undervoltage notification
modpost: remove incorrect code in do_eisa_entry()
nfs: ignore SB_RDONLY when mounting nfs
SUNRPC: correct error code comment in xs_tcp_setup_socket()
SUNRPC: Convert rpc_client refcount to use refcount_t
sunrpc: remove unnecessary test in rpc_task_set_client()
SUNRPC: Replace internal use of SOCKWQ_ASYNC_NOSPACE
sunrpc: clear XPRT_SOCK_UPD_TIMEOUT when reset transport
sh: intc: Fix use-after-free bug in register_intc_controller()
ASoC: fsl_micfil: fix the naming style for mask definition
octeontx2-pf: Fix out-of-bounds read in otx2_get_fecparam()
quota: flush quota_release_work upon quota writeback
btrfs: ref-verify: fix use-after-free after invalid ref action
ad7780: fix division by zero in ad7780_write_raw()
util_macros.h: fix/rework find_closest() macros
scsi: ufs: exynos: Fix hibern8 notify callbacks
i3c: master: Fix miss free init_dyn_addr at i3c_master_put_i3c_addrs()
PCI: keystone: Add link up check to ks_pcie_other_map_bus()
dm thin: Add missing destroy_work_on_stack()
nfsd: make sure exp active before svc_export_show
nfsd: fix nfs4_openowner leak when concurrent nfsd4_open occur
btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
drm/etnaviv: flush shader L1 cache after user commandstream
iTCO_wdt: mask NMI_NOW bit for update_no_reboot_bit() call
watchdog: mediatek: Make sure system reset gets asserted in mtk_wdt_restart()
can: sun4i_can: sun4i_can_err(): call can_change_state() even if cf is NULL
can: sun4i_can: sun4i_can_err(): fix {rx,tx}_errors statistics
ipvs: fix UB due to uninitialized stack access in ip_vs_protocol_init()
netfilter: x_tables: fix LED ID check in led_tg_check()
ptp: Add error handling for adjfine callback in ptp_clock_adjtime
net/sched: tbf: correct backlog statistic for GSO packets
net: hsr: avoid potential out-of-bound access in fill_frame_info()
can: j1939: j1939_session_new(): fix skb reference counting
net/ipv6: release expired exception dst cached in socket
dccp: Fix memory leak in dccp_feat_change_recv
tipc: Fix use-after-free of kernel socket in cleanup_bearer().
net/qed: allow old cards not supporting "num_images" to work
igb: Fix potential invalid memory access in igb_init_module()
net: sched: fix erspan_opt settings in cls_flower
netfilter: ipset: Hold module reference while requesting a module
netfilter: nft_set_hash: skip duplicated elements pending gc run
ethtool: Fix wrong mod state in case of verbose and no_mask bitset
geneve: do not assume mac header is set in geneve_xmit_skb()
gpio: grgpio: use a helper variable to store the address of ofdev->dev
gpio: grgpio: Add NULL check in grgpio_probe
dt_bindings: rs485: Correct delay values
dt-bindings: serial: rs485: Fix rs485-rts-delay property
i3c: fix incorrect address slot lookup on 64-bit
i3c: master: Replace hard code 2 with macro I3C_ADDR_SLOT_STATUS_BITS
i3c: master: Extend address status bit to 4 and add I3C_ADDR_SLOT_EXT_DESIRED
i3c: master: Fix dynamic address leak when 'assigned-address' is present
drm/sti: Add __iomem for mixer_dbg_mxn's parameter
tcp_bpf: Fix the sk_mem_uncharge logic in tcp_bpf_sendmsg
spi: mpc52xx: Add cancel_work_sync before module remove
ocfs2: free inode when ocfs2_get_init_inode() fails
bpf: Handle BPF_EXIST and BPF_NOEXIST for LPM trie
bpf: Fix exact match conditions in trie_get_next_key()
HID: wacom: fix when get product name maybe null pointer
watchdog: rti: of: honor timeout-sec property
tracing: Fix cmp_entries_dup() to respect sort() comparison rules
arm64: ptrace: fix partial SETREGSET for NT_ARM_TAGGED_ADDR_CTRL
ALSA: usb-audio: add mixer mapping for Corsair HS80
ALSA: hda/realtek: Enable mute and micmute LED on HP ProBook 430 G8
ALSA: hda/realtek: Add support for Samsung Galaxy Book3 360 (NP730QFG)
scsi: qla2xxx: Fix NVMe and NPIV connect issue
scsi: qla2xxx: Supported speed displayed incorrectly for VPorts
scsi: qla2xxx: Fix use after free on unload
scsi: qla2xxx: Remove check req_sg_cnt should be equal to rsp_sg_cnt
nilfs2: fix potential out-of-bounds memory access in nilfs_find_entry()
bcache: revert replacing IS_ERR_OR_NULL with IS_ERR again
bpf: fix OOB devmap writes when deleting elements
dma-buf: fix dma_fence_array_signaled v4
regmap: detach regmap from dev on regmap_exit
mmc: sdhci-pci: Add DMI quirk for missing CD GPIO on Vexia Edu Atla 10 tablet
mmc: core: Further prevent card detect during shutdown
ocfs2: update seq_file index in ocfs2_dlm_seq_next
iommu/arm-smmu: Defer probe of clients after smmu device bound
s390/cpum_sf: Handle CPU hotplug remove during sampling
btrfs: avoid unnecessary device path update for the same device
kselftest/arm64: Don't leak pipe fds in pac.exec_sign_all()
kcsan: Turn report_filterlist_lock into a raw_spinlock
media: uvcvideo: Add a quirk for the Kaiweets KTI-W02 infrared camera
media: cx231xx: Add support for Dexatek USB Video Grabber 1d19:6108
drm/vc4: hvs: Set AXI panic modes for the HVS
drm: panel-orientation-quirks: Add quirk for AYA NEO 2 model
drm/mcde: Enable module autoloading
drm/radeon/r600_cs: Fix possible int overflow in r600_packet3_check()
r8169: don't apply UDP padding quirk on RTL8126A
samples/bpf: Fix a resource leak
net: fec_mpc52xx_phy: Use %pa to format resource_size_t
net: ethernet: fs_enet: Use %pa to format resource_size_t
net/sched: cbs: Fix integer overflow in cbs_set_port_rate()
af_packet: avoid erroring out after sock_init_data() in packet_create()
Bluetooth: L2CAP: do not leave dangling sk pointer on error in l2cap_sock_create()
net: af_can: do not leave a dangling sk pointer in can_create()
net: ieee802154: do not leave a dangling sk pointer in ieee802154_create()
net: inet: do not leave a dangling sk pointer in inet_create()
net: inet6: do not leave a dangling sk pointer in inet6_create()
wifi: ath5k: add PCI ID for SX76X
wifi: ath5k: add PCI ID for Arcadyan devices
drm/amdgpu: refine error handling in amdgpu_ttm_tt_pin_userptr
dma-debug: fix a possible deadlock on radix_lock
jfs: array-index-out-of-bounds fix in dtReadFirst
jfs: fix shift-out-of-bounds in dbSplit
jfs: fix array-index-out-of-bounds in jfs_readdir
jfs: add a check to prevent array-index-out-of-bounds in dbAdjTree
drm/amdgpu: skip amdgpu_device_cache_pci_state under sriov
drm/amdgpu: set the right AMDGPU sg segment limitation
wifi: ipw2x00: libipw_rx_any(): fix bad alignment
wifi: brcmfmac: Fix oops due to NULL pointer dereference in brcmf_sdiod_sglist_rw()
Bluetooth: btusb: Add RTL8852BE device 0489:e123 to device tables
ASoC: hdmi-codec: reorder channel allocation list
rocker: fix link status detection in rocker_carrier_init()
net/neighbor: clear error in case strict check is not set
netpoll: Use rcu_access_pointer() in __netpoll_setup
pinctrl: freescale: fix COMPILE_TEST error with PINCTRL_IMX_SCU
tracing: Use atomic64_inc_return() in trace_clock_counter()
scsi: hisi_sas: Add cond_resched() for no forced preemption model
leds: class: Protect brightness_show() with led_cdev->led_access mutex
scsi: st: Don't modify unknown block number in MTIOCGET
scsi: st: Add MTIOCGET and MTLOAD to ioctls allowed after device reset
pinctrl: qcom-pmic-gpio: add support for PM8937
nvdimm: rectify the illogical code within nd_dax_probe()
f2fs: fix f2fs_bug_on when uninstalling filesystem call f2fs_evict_inode.
PCI: Add 'reset_subordinate' to reset hierarchy below bridge
PCI: Add ACS quirk for Wangxun FF5xxx NICs
i3c: Use i3cdev->desc->info instead of calling i3c_device_get_info() to avoid deadlock
usb: chipidea: udc: handle USB Error Interrupt if IOC not set
MIPS: Loongson64: DTS: Really fix PCIe port nodes for ls7a
powerpc/prom_init: Fixup missing powermac #size-cells
misc: eeprom: eeprom_93cx6: Add quirk for extra read clock cycle
sched/core: Remove the unnecessary need_resched() check in nohz_csd_func()
sched/fair: Remove update of blocked load from newidle_balance
sched/fair: Remove unused parameter of update_nohz_stats
sched/fair: Merge for each idle cpu loop of ILB
sched/fair: Trigger the update of blocked load on newly idle cpu
sched/fair: Add NOHZ balancer flag for nohz.next_balance updates
sched/fair: Check idle_cpu() before need_resched() to detect ilb CPU turning busy
sched/core: Prevent wakeup of ksoftirqd during idle load balance
btrfs: fix missing snapshot drew unlock when root is dead during swap activation
Revert "unicode: Don't special case ignorable code points"
KVM: arm64: vgic-its: Add a data length check in vgic_its_save_*
KVM: arm64: vgic-its: Clear DTE when MAPD unmaps a device
KVM: arm64: vgic-its: Clear ITE when DISCARD frees an ITE
jffs2: Prevent rtime decompress memory corruption
jffs2: Fix rtime decompressor
xhci: dbc: Fix STALL transfer event handling
drm/amd/display: Check BIOS images before it is used
ocfs2: Revert "ocfs2: fix the la space leak when unmounting an ocfs2 volume"
modpost: Add .irqentry.text to OTHER_SECTIONS
Revert "drm/amdgpu: add missing size check in amdgpu_debugfs_gprwave_read()"
PCI: rockchip-ep: Fix address translation unit programming
scsi: sd: Fix sd_do_mode_sense() buffer length handling
scsi: core: Fix scsi_mode_select() buffer length handling
ALSA: usb-audio: Fix out of bounds reads when finding clock sources
media: uvcvideo: Require entities to have a non-zero unique ID
octeontx2: Fix condition.
octeontx2-pf: Fix otx2_get_fecparam()
Linux 5.10.231
Change-Id: I9f898f01cfaab475581c068959ac597789122af0
Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>
|
||
|
Michael Bestas
|
6725684c74 |
Merge tag 'ASB-2024-12-05_12-5.10' of https://android.googlesource.com/kernel/common into android13-5.10-waipio
https://source.android.com/docs/security/bulletin/2024-12-01 * tag 'ASB-2024-12-05_12-5.10' of https://android.googlesource.com/kernel/common: (649 commits) ANDROID: ABI: update symbol list for honor ANDROID: fs: add vendor hook to collect IO statistics ANDROID: tools/objtool: Pass CFLAGS to libsubcmd build via EXTRA_CFLAGS UPSTREAM: HID: core: zero-initialize the report buffer ANDROID: libsubcmd: Hoist iterator variable declarations in parse_options_subcommand() ANDROID: mm: Fix SPF-aware fast-mremap UPSTREAM: net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT UPSTREAM: f2fs: support SEEK_DATA and SEEK_HOLE for compression files Revert "genetlink: hold RCU in genlmsg_mcast()" ANDROID: add file for recording allowed ABI breaks ANDROID: GKI: update symbol list for honor ANDROID: Allow vendor modules perform more operations on memleak detect UPSTREAM: drm/omap: fix misleading indentation in pixinc() UPSTREAM: bitfield: build kunit tests without structleak plugin BACKPORT: FROMGIT: binder: add delivered_freeze to debugfs output BACKPORT: FROMGIT: binder: fix memleak of proc->delivered_freeze FROMGIT: binder: allow freeze notification for dead nodes FROMGIT: binder: fix BINDER_WORK_CLEAR_FREEZE_NOTIFICATION debug logs FROMGIT: binder: fix BINDER_WORK_FROZEN_BINDER debug logs BACKPORT: FROMGIT: binder: fix freeze UAF in binder_release_work() ... Conflicts: android/abi_gki_aarch64.xml net/qrtr/af_qrtr.c Change-Id: I4f416cf6c90e71fbdc0bea2c76a620842a2a2288 |
||
|
Thomas Gleixner
|
f5e45e9464 |
modpost: Add .irqentry.text to OTHER_SECTIONS
commit 7912405643a14b527cd4a4f33c1d4392da900888 upstream. The compiler can fully inline the actual handler function of an interrupt entry into the .irqentry.text entry point. If such a function contains an access which has an exception table entry, modpost complains about a section mismatch: WARNING: vmlinux.o(__ex_table+0x447c): Section mismatch in reference ... The relocation at __ex_table+0x447c references section ".irqentry.text" which is not in the list of authorized sections. Add .irqentry.text to OTHER_SECTIONS to cure the issue. Reported-by: Sergey Senozhatsky <senozhatsky@chromium.org> Signed-off-by: Thomas Gleixner <tglx@linutronix.de> Cc: stable@vger.kernel.org # needed for linux-5.4-y Link: https://lore.kernel.org/all/20241128111844.GE10431@google.com/ Signed-off-by: Masahiro Yamada <masahiroy@kernel.org> Signed-off-by: Sergey Senozhatsky <senozhatsky@chromium.org> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org> |
||
|
Masahiro Yamada
|
bd4624d733 |
modpost: remove incorrect code in do_eisa_entry()
[ Upstream commit 0c3e091319e4748cb36ac9a50848903dc6f54054 ] This function contains multiple bugs after the following commits: - |
||
|
Greg Kroah-Hartman
|
93d28c0f5a |
Merge 8b55076b7b ("kconfig: qconf: fix buffer overflow in debug links") into android12-5.10-lts
Steps on the way to 5.10.227 Change-Id: Ic48fc002c22cc00235a97bff5a5db275e3d640d5 Signed-off-by: Greg Kroah-Hartman <gregkh@google.com> |
||
|
Greg Kroah-Hartman
|
1f05cd743b |
Merge ae96b02b9d ("soundwire: stream: Revert "soundwire: stream: fix programming slave ports for non-continous port maps"") into android12-5.10-lts
Steps on the way to 5.10.226 Change-Id: I92c594018a2ec1c562a580e493117d780fade779 Signed-off-by: Greg Kroah-Hartman <gregkh@google.com> |
||
|
Michael Bestas
|
529ffa5672 |
Merge tag 'ASB-2024-11-05_12-5.10' of https://android.googlesource.com/kernel/common into android13-5.10-waipio
https://source.android.com/docs/security/bulletin/2024-11-01
CVE-2024-36978
CVE-2024-46740
* tag 'ASB-2024-11-05_12-5.10' of https://android.googlesource.com/kernel/common: (702 commits)
UPSTREAM: dma-buf: heaps: Fix off-by-one in CMA heap fault handler
BACKPORT: firmware: arm_scmi: Queue in scmi layer for mailbox implementation
BACKPORT: gso: fix udp gso fraglist segmentation after pull from frag_list
ANDROID: usb: Optimization the transfer rate of accessory mode in USB3.2 mode
UPSTREAM: unicode: Don't special case ignorable code points
ANDROID: 16K: Fixup padding vm_flags bits on VMA splits
ANDROID: 16K: Introduce pgsize_migration_inline.h
Revert "udf: Avoid excessive partition lengths"
Revert "bareudp: Fix device stats updates."
ANDROID: fix up change to pti_clone_pgtable()
Revert "perf/aux: Fix AUX buffer serialization"
Revert "clocksource/drivers/timer-of: Remove percpu irq related code"
Revert "Merge
|
||
|
Masahiro Yamada
|
8b55076b7b |
kconfig: qconf: fix buffer overflow in debug links
[ Upstream commit 984ed20ece1c6c20789ece040cbff3eb1a388fa9 ]
If you enable "Option -> Show Debug Info" and click a link, the program
terminates with the following error:
*** buffer overflow detected ***: terminated
The buffer overflow is caused by the following line:
strcat(data, "$");
The buffer needs one more byte to accommodate the additional character.
Fixes:
|
||
|
Anders Roxell
|
44eb665889 |
scripts: kconfig: merge_config: config files: add a trailing newline
[ Upstream commit 33330bcf031818e60a816db0cfd3add9eecc3b28 ] When merging files without trailing newlines at the end of the file, two config fragments end up at the same row if file1.config doens't have a trailing newline at the end of the file. file1.config "CONFIG_1=y" file2.config "CONFIG_2=y" ./scripts/kconfig/merge_config.sh -m .config file1.config file2.config This will generate a .config looking like this. cat .config ... CONFIG_1=yCONFIG_2=y" Making sure so we add a newline at the end of every config file that is passed into the script. Signed-off-by: Anders Roxell <anders.roxell@linaro.org> Signed-off-by: Masahiro Yamada <masahiroy@kernel.org> Signed-off-by: Sasha Levin <sashal@kernel.org> |
||
|
Michael Bestas
|
deec4e9c07 |
Merge tag 'ASB-2024-09-05_12-5.10' of https://android.googlesource.com/kernel/common into android13-5.10-waipio
https://source.android.com/docs/security/bulletin/2024-09-01 CVE-2024-36972 * tag 'ASB-2024-09-05_12-5.10' of https://android.googlesource.com/kernel/common: (1565 commits) ANDROID: delete tool added by mistake ANDROID: GKI: Add initialization for rwsem's oem_data and vendor_data. ANDROID: GKI: Add initialization for mutex oem_data. ANDROID: fix ENOMEM check of binder_proc_ext ANDROID: binder: fix KMI issues due to frozen notification BACKPORT: FROMGIT: binder: frozen notification binder_features flag BACKPORT: FROMGIT: binder: frozen notification UPSTREAM: selftests/binderfs: add test for feature files UPSTREAM: docs: binderfs: add section about feature files UPSTREAM: binderfs: add support for feature files ANDROID: GKI: Add symbol to symbol list for vivo. ANDROID: vendor_hooks: add hooks to modify pageflags ANDROID: GKI: Add pageflags for OEM ANDROID: GKI: Update symbol list for vivo ANDROID: vendor_hooks: add vendor hooks for fuse request UPSTREAM: net: sched: sch_multiq: fix possible OOB write in multiq_tune() ANDROID: Update the GKI symbol list and ABI XML ANDROID: irqchip/irq-gic-v3: Add vendor hook for gic suspend FROMLIST: binder: fix UAF caused by offsets overwrite ANDROID: gki - set CONFIG_USB_NET_AX88179_178A=y (usb gbit ethernet dongle) ... Conflicts: Documentation/devicetree/bindings/i2c/google,cros-ec-i2c-tunnel.yaml Documentation/devicetree/bindings/sound/rt5645.txt Documentation/devicetree/bindings~HEAD drivers/scsi/ufs/ufs-qcom.c net/qrtr/af_qrtr.c net/qrtr/ns.c net/qrtr/qrtr.h Change-Id: I50a93cfc0ff67778b19609e93cb577f63a517baa |
||
|
Greg Kroah-Hartman
|
b84ad15be5 |
Merge 5.10.224 into android12-5.10-lts
Changes in 5.10.224
EDAC/skx_common: Add new ADXL components for 2-level memory
EDAC, i10nm: make skx_common.o a separate module
platform/chrome: cros_ec_debugfs: fix wrong EC message version
hfsplus: fix to avoid false alarm of circular locking
x86/of: Return consistent error type from x86_of_pci_irq_enable()
x86/pci/intel_mid_pci: Fix PCIBIOS_* return code handling
x86/pci/xen: Fix PCIBIOS_* return code handling
x86/platform/iosf_mbi: Convert PCIBIOS_* return codes to errnos
hwmon: (adt7475) Fix default duty on fan is disabled
pwm: stm32: Always do lazy disabling
hwmon: (max6697) Fix underflow when writing limit attributes
hwmon: (max6697) Fix swapped temp{1,8} critical alarms
arm64: dts: qcom: sdm845: add power-domain to UFS PHY
soc: qcom: rpmh-rsc: Ensure irqs aren't disabled by rpmh_rsc_send_data() callers
arm64: dts: qcom: msm8996: specify UFS core_clk frequencies
soc: qcom: pdr: protect locator_addr with the main mutex
soc: qcom: pdr: fix parsing of domains lists
arm64: dts: rockchip: Increase VOP clk rate on RK3328
ARM: dts: imx6qdl-kontron-samx6i: move phy reset into phy-node
ARM: dts: imx6qdl-kontron-samx6i: fix PHY reset
ARM: dts: imx6qdl-kontron-samx6i: fix board reset
ARM: dts: imx6qdl-kontron-samx6i: fix SPI0 chip selects
ARM: dts: imx6qdl-kontron-samx6i: fix PCIe reset polarity
arm64: dts: mediatek: mt8183-kukui: Drop bogus output-enable property
arm64: dts: mediatek: mt7622: fix "emmc" pinctrl mux
arm64: dts: amlogic: gx: correct hdmi clocks
m68k: atari: Fix TT bootup freeze / unexpected (SCU) interrupt messages
x86/xen: Convert comma to semicolon
m68k: cmpxchg: Fix return value for default case in __arch_xchg()
ARM: pxa: spitz: use gpio descriptors for audio
ARM: spitz: fix GPIO assignment for backlight
firmware: turris-mox-rwtm: Fix checking return value of wait_for_completion_timeout()
firmware: turris-mox-rwtm: Initialize completion before mailbox
wifi: brcmsmac: LCN PHY code is used for BCM4313 2G-only device
selftests/bpf: Fix prog numbers in test_sockmap
net: esp: cleanup esp_output_tail_tcp() in case of unsupported ESPINTCP
net/smc: Allow SMC-D 1MB DMB allocations
net/smc: set rmb's SG_MAX_SINGLE_ALLOC limitation only when CONFIG_ARCH_NO_SG_CHAIN is defined
selftests/bpf: Check length of recv in test_sockmap
lib: objagg: Fix general protection fault
mlxsw: spectrum_acl_erp: Fix object nesting warning
mlxsw: spectrum_acl_bloom_filter: Make mlxsw_sp_acl_bf_key_encode() more flexible
mlxsw: spectrum_acl: Fix ACL scale regression and firmware errors
ath11k: dp: stop rx pktlog before suspend
wifi: ath11k: fix wrong handling of CCMP256 and GCMP ciphers
wifi: cfg80211: fix typo in cfg80211_calculate_bitrate_he()
wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
net: fec: Refactor: #define magic constants
net: fec: Fix FEC_ECR_EN1588 being cleared on link-down
ipvs: Avoid unnecessary calls to skb_is_gso_sctp
netfilter: nf_tables: rise cap on SELinux secmark context
perf/x86/intel/pt: Fix pt_topa_entry_for_page() address calculation
perf: Fix perf_aux_size() for greater-than 32-bit size
perf: Prevent passing zero nr_pages to rb_alloc_aux()
qed: Improve the stack space of filter_config()
wifi: virt_wifi: avoid reporting connection success with wrong SSID
gss_krb5: Fix the error handling path for crypto_sync_skcipher_setkey
wifi: virt_wifi: don't use strlen() in const context
selftests/bpf: Close fd in error path in drop_on_reuseport
bpf: annotate BTF show functions with __printf
bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
bpf: Eliminate remaining "make W=1" warnings in kernel/bpf/btf.o
selftests: forwarding: devlink_lib: Wait for udev events after reloading
xdp: fix invalid wait context of page_pool_destroy()
drm/panel: boe-tv101wum-nl6: If prepare fails, disable GPIO before regulators
drm/panel: boe-tv101wum-nl6: Check for errors on the NOP in prepare()
media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
media: imon: Fix race getting ictx->lock
saa7134: Unchecked i2c_transfer function result fixed
media: uvcvideo: Allow entity-defined get_info and get_cur
media: uvcvideo: Override default flags
media: renesas: vsp1: Fix _irqsave and _irq mix
media: renesas: vsp1: Store RPF partition configuration per RPF instance
leds: trigger: Unregister sysfs attributes before calling deactivate()
perf report: Fix condition in sort__sym_cmp()
drm/etnaviv: fix DMA direction handling for cached RW buffers
drm/qxl: Add check for drm_cvt_mode
Revert "leds: led-core: Fix refcount leak in of_led_get()"
ext4: fix infinite loop when replaying fast_commit
media: venus: flush all buffers in output plane streamoff
mfd: omap-usb-tll: Use struct_size to allocate tll
xprtrdma: Rename frwr_release_mr()
xprtrdma: Fix rpcrdma_reqs_reset()
SUNRPC: avoid soft lockup when transmitting UDP to reachable server.
ext4: avoid writing unitialized memory to disk in EA inodes
sparc64: Fix incorrect function signature and add prototype for prom_cif_init
SUNRPC: Fixup gss_status tracepoint error output
PCI: Fix resource double counting on remove & rescan
coresight: Fix ref leak when of_coresight_parse_endpoint() fails
Input: qt1050 - handle CHIP_ID reading error
RDMA/mlx4: Fix truncated output warning in mad.c
RDMA/mlx4: Fix truncated output warning in alias_GUID.c
RDMA/rxe: Don't set BTH_ACK_MASK for UC or UD QPs
ASoC: max98088: Check for clk_prepare_enable() error
mtd: make mtd_test.c a separate module
RDMA/device: Return error earlier if port in not valid
Input: elan_i2c - do not leave interrupt disabled on suspend failure
MIPS: Octeron: remove source file executable bit
powerpc/xmon: Fix disassembly CPU feature checks
macintosh/therm_windtunnel: fix module unload.
RDMA/hns: Fix missing pagesize and alignment check in FRMR
bnxt_re: Fix imm_data endianness
netfilter: ctnetlink: use helper function to calculate expect ID
net: dsa: mv88e6xxx: Limit chip-wide frame size config to CPU ports
net: dsa: b53: Limit chip-wide jumbo frame config to CPU ports
pinctrl: rockchip: update rk3308 iomux routes
pinctrl: core: fix possible memory leak when pinctrl_enable() fails
pinctrl: single: fix possible memory leak when pinctrl_enable() fails
pinctrl: ti: ti-iodelay: Drop if block with always false condition
pinctrl: ti: ti-iodelay: fix possible memory leak when pinctrl_enable() fails
pinctrl: freescale: mxs: Fix refcount of child
fs/proc/task_mmu: indicate PM_FILE for PMD-mapped file THP
fs/nilfs2: remove some unused macros to tame gcc
nilfs2: avoid undefined behavior in nilfs_cnt32_ge macro
rtc: interface: Add RTC offset to alarm after fix-up
dt-bindings: thermal: correct thermal zone node name limit
tick/broadcast: Make takeover of broadcast hrtimer reliable
net: netconsole: Disable target before netpoll cleanup
af_packet: Handle outgoing VLAN packets without hardware offloading
ipv6: take care of scope when choosing the src addr
sched/fair: set_load_weight() must also call reweight_task() for SCHED_IDLE tasks
char: tpm: Fix possible memory leak in tpm_bios_measurements_open()
media: venus: fix use after free in vdec_close
hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
ext2: Verify bitmap and itable block numbers before using them
drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
scsi: qla2xxx: Fix optrom version displayed in FDMI
drm/amd/display: Check for NULL pointer
sched/fair: Use all little CPUs for CPU-bound workloads
apparmor: use kvfree_sensitive to free data->data
task_work: s/task_work_cancel()/task_work_cancel_func()/
task_work: Introduce task_work_cancel() again
udf: Avoid using corrupted block bitmap buffer
m68k: amiga: Turn off Warp1260 interrupts during boot
ext4: check dot and dotdot of dx_root before making dir indexed
ext4: make sure the first directory block is not a hole
wifi: mwifiex: Fix interface type change
leds: ss4200: Convert PCIBIOS_* return codes to errnos
jbd2: make jbd2_journal_get_max_txn_bufs() internal
KVM: VMX: Split out the non-virtualization part of vmx_interrupt_blocked()
tools/memory-model: Fix bug in lock.cat
hwrng: amd - Convert PCIBIOS_* return codes to errnos
PCI: hv: Return zero, not garbage, when reading PCI_INTERRUPT_PIN
PCI: rockchip: Use GPIOD_OUT_LOW flag while requesting ep_gpio
binder: fix hang of unregistered readers
dev/parport: fix the array out-of-bounds risk
scsi: qla2xxx: Return ENOBUFS if sg_cnt is more than one for ELS cmds
f2fs: fix to don't dirty inode for readonly filesystem
clk: davinci: da8xx-cfgchip: Initialize clk_init_data before use
ubi: eba: properly rollback inside self_check_eba
decompress_bunzip2: fix rare decompression failure
kbuild: Fix '-S -c' in x86 stack protector scripts
kobject_uevent: Fix OOB access within zap_modalias_env()
devres: Fix devm_krealloc() wasting memory
rtc: cmos: Fix return value of nvmem callbacks
scsi: qla2xxx: During vport delete send async logout explicitly
scsi: qla2xxx: Fix for possible memory corruption
scsi: qla2xxx: Fix flash read failure
scsi: qla2xxx: Complete command early within lock
scsi: qla2xxx: validate nvme_local_port correctly
perf/x86/intel/pt: Fix topa_entry base length
perf/x86/intel/pt: Fix a topa_entry base address calculation
rtc: isl1208: Fix return value of nvmem callbacks
watchdog/perf: properly initialize the turbo mode timestamp and rearm counter
platform: mips: cpu_hwmon: Disable driver on unsupported hardware
RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
selftests/sigaltstack: Fix ppc64 GCC build
rbd: don't assume rbd_is_lock_owner() for exclusive mappings
MIPS: ip30: ip30-console: Add missing include
MIPS: Loongson64: env: Hook up Loongsson-2K
drm/panfrost: Mark simple_ondemand governor as softdep
rbd: rename RBD_LOCK_STATE_RELEASING and releasing_wait
rbd: don't assume RBD_LOCK_STATE_LOCKED for exclusive mappings
Bluetooth: btusb: Add RTL8852BE device 0489:e125 to device tables
Bluetooth: btusb: Add Realtek RTL8852BE support ID 0x13d3:0x3591
nilfs2: handle inconsistent state in nilfs_btnode_create_block()
io_uring/io-wq: limit retrying worker initialisation
kernel: rerun task_work while freezing in get_signal()
kdb: address -Wformat-security warnings
kdb: Use the passed prompt in kdb_position_cursor()
jfs: Fix array-index-out-of-bounds in diFree
um: time-travel: fix time-travel-start option
f2fs: fix start segno of large section
libbpf: Fix no-args func prototype BTF dumping syntax
dma: fix call order in dmam_free_coherent
MIPS: SMP-CPS: Fix address for GCR_ACCESS register for CM3 and later
ipv4: Fix incorrect source address in Record Route option
net: bonding: correctly annotate RCU in bond_should_notify_peers()
netfilter: nft_set_pipapo_avx2: disable softinterrupts
tipc: Return non-zero value from tipc_udp_addr2str() on error
net: stmmac: Correct byte order of perfect_match
net: nexthop: Initialize all fields in dumped nexthops
bpf: Fix a segment issue when downgrading gso_size
mISDN: Fix a use after free in hfcmulti_tx()
apparmor: Fix null pointer deref when receiving skb during sock creation
powerpc: fix a file leak in kvm_vcpu_ioctl_enable_cap()
lirc: rc_dev_get_from_fd(): fix file leak
ASoC: Intel: use soc_intel_is_byt_cr() only when IOSF_MBI is reachable
ceph: fix incorrect kmalloc size of pagevec mempool
nvme: split command copy into a helper
nvme-pci: add missing condition check for existence of mapped data
fs: don't allow non-init s_user_ns for filesystems without FS_USERNS_MOUNT
powerpc/configs: Update defconfig with now user-visible CONFIG_FSL_IFC
fuse: name fs_context consistently
fuse: verify {g,u}id mount options correctly
sysctl: always initialize i_uid/i_gid
ext4: factor out a common helper to query extent map
ext4: check the extent status again before inserting delalloc block
soc: xilinx: move PM_INIT_FINALIZE to zynqmp_pm_domains driver
drivers: soc: xilinx: check return status of get_api_version()
driver core: Cast to (void *) with __force for __percpu pointer
devres: Fix memory leakage caused by driver API devm_free_percpu()
genirq: Allow the PM device to originate from irq domain
irqchip/imx-irqsteer: Constify irq_chip struct
irqchip/imx-irqsteer: Add runtime PM support
irqchip/imx-irqsteer: Handle runtime power management correctly
remoteproc: imx_rproc: ignore mapping vdev regions
remoteproc: imx_rproc: Fix ignoring mapping vdev regions
remoteproc: imx_rproc: Skip over memory region when node value is NULL
drm/nouveau: prime: fix refcount underflow
drm/vmwgfx: Fix overlay when using Screen Targets
sched: act_ct: take care of padding in struct zones_ht_key
net/iucv: fix use after free in iucv_sock_close()
net/mlx5e: Add a check for the return value from mlx5_port_set_eth_ptys
ipv6: fix ndisc_is_useropt() handling for PIO
riscv/mm: Add handling for VM_FAULT_SIGSEGV in mm_fault_error()
platform/chrome: cros_ec_proto: Lock device when updating MKBP version
HID: wacom: Modify pen IDs
protect the fetch of ->fd[fd] in do_dup2() from mispredictions
ALSA: usb-audio: Correct surround channels in UAC1 channel map
ALSA: hda/realtek: Add quirk for Acer Aspire E5-574G
net: usb: sr9700: fix uninitialized variable use in sr_mdio_read
r8169: don't increment tx_dropped in case of NETDEV_TX_BUSY
mptcp: fix duplicate data handling
netfilter: ipset: Add list flush to cancel_gc
genirq: Allow irq_chip registration functions to take a const irq_chip
irqchip/mbigen: Fix mbigen node address layout
x86/mm: Fix pti_clone_pgtable() alignment assumption
x86/mm: Fix pti_clone_entry_text() for i386
sctp: move hlist_node and hashent out of sctp_ep_common
sctp: Fix null-ptr-deref in reuseport_add_sock().
net: usb: qmi_wwan: fix memory leak for not ip packets
net: linkwatch: use system_unbound_wq
Bluetooth: l2cap: always unlock channel in l2cap_conless_channel()
net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
l2tp: fix lockdep splat
net: fec: Stop PPS on driver remove
rcutorture: Fix rcu_torture_fwd_cb_cr() data race
md: do not delete safemode_timer in mddev_suspend
md/raid5: avoid BUG_ON() while continue reshape after reassembling
clocksource/drivers/sh_cmt: Address race condition for clock events
ACPI: battery: create alarm sysfs attribute atomically
ACPI: SBS: manage alarm sysfs attribute through psy core
selftests/bpf: Fix send_signal test with nested CONFIG_PARAVIRT
PCI: Add Edimax Vendor ID to pci_ids.h
udf: prevent integer overflow in udf_bitmap_free_blocks()
wifi: nl80211: don't give key data to userspace
btrfs: fix bitmap leak when loading free space cache on duplicate entry
drm/amdgpu: Fix the null pointer dereference to ras_manager
drm/amdgpu/pm: Fix the null pointer dereference in apply_state_adjust_rules
media: uvcvideo: Ignore empty TS packets
media: uvcvideo: Fix the bandwdith quirk on USB 3.x
jbd2: avoid memleak in jbd2_journal_write_metadata_buffer
s390/sclp: Prevent release of buffer in I/O
SUNRPC: Fix a race to wake a sync task
sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
ext4: fix wrong unit use in ext4_mb_find_by_goal
arm64: cpufeature: Force HWCAP to be based on the sysreg visible to user-space
arm64: Add Neoverse-V2 part
arm64: cputype: Add Cortex-X4 definitions
arm64: cputype: Add Neoverse-V3 definitions
arm64: errata: Add workaround for Arm errata 3194386 and 3312417
arm64: cputype: Add Cortex-X3 definitions
arm64: cputype: Add Cortex-A720 definitions
arm64: cputype: Add Cortex-X925 definitions
arm64: errata: Unify speculative SSBS errata logic
arm64: errata: Expand speculative SSBS workaround
arm64: cputype: Add Cortex-X1C definitions
arm64: cputype: Add Cortex-A725 definitions
arm64: errata: Expand speculative SSBS workaround (again)
i2c: smbus: Improve handling of stuck alerts
ASoC: codecs: wsa881x: Correct Soundwire ports mask
i2c: smbus: Send alert notifications to all devices if source not found
bpf: kprobe: remove unused declaring of bpf_kprobe_override
kprobes: Fix to check symbol prefixes correctly
spi: spi-fsl-lpspi: Fix scldiv calculation
ALSA: usb-audio: Re-add ScratchAmp quirk entries
drm/client: fix null pointer dereference in drm_client_modeset_probe
ALSA: line6: Fix racy access to midibuf
ALSA: hda: Add HP MP9 G4 Retail System AMS to force connect list
ALSA: hda/hdmi: Yet more pin fix for HP EliteDesk 800 G4
usb: vhci-hcd: Do not drop references before new references are gained
USB: serial: debug: do not echo input by default
usb: gadget: core: Check for unset descriptor
usb: gadget: u_serial: Set start_delayed during suspend
scsi: ufs: core: Fix hba->last_dme_cmd_tstamp timestamp updating logic
tick/broadcast: Move per CPU pointer access into the atomic section
ntp: Clamp maxerror and esterror to operating range
driver core: Fix uevent_show() vs driver detach race
ntp: Safeguard against time_constant overflow
scsi: mpt3sas: Remove scsi_dma_map() error messages
scsi: mpt3sas: Avoid IOMMU page faults on REPORT ZONES
irqchip/meson-gpio: support more than 8 channels gpio irq
irqchip/meson-gpio: Convert meson_gpio_irq_controller::lock to 'raw_spinlock_t'
serial: core: check uartclk for zero to avoid divide by zero
irqchip/xilinx: Fix shift out of bounds
genirq/irqdesc: Honor caller provided affinity in alloc_desc()
power: supply: axp288_charger: Fix constant_charge_voltage writes
power: supply: axp288_charger: Round constant_charge_voltage writes down
tracing: Fix overflow in get_free_elt()
padata: Fix possible divide-by-0 panic in padata_mt_helper()
x86/mtrr: Check if fixed MTRRs exist before saving them
drm/bridge: analogix_dp: properly handle zero sized AUX transactions
drm/mgag200: Set DDC timeout in milliseconds
mptcp: sched: check both directions for backup
mptcp: distinguish rcv vs sent backup flag in requests
mptcp: fix NL PM announced address accounting
mptcp: mib: count MPJ with backup flag
mptcp: export local_address
mptcp: pm: fix backup support in signal endpoints
samples: Add fs error monitoring example
samples: Make fs-monitor depend on libc and headers
Add gitignore file for samples/fanotify/ subdirectory
Fix gcc 4.9 build issue in 5.10.y
PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal
netfilter: nf_tables: set element extended ACK reporting support
netfilter: nf_tables: use timestamp to check for set element timeout
netfilter: nf_tables: allow clone callbacks to sleep
netfilter: nf_tables: prefer nft_chain_validate
drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
arm64: cpufeature: Fix the visibility of compat hwcaps
media: uvcvideo: Use entity get_cur in uvc_ctrl_set
exec: Fix ToCToU between perm check and set-uid/gid usage
nvme/pci: Add APST quirk for Lenovo N60z laptop
vdpa: Make use of PFN_PHYS/PFN_UP/PFN_DOWN helper macro
vhost-vdpa: switch to use vmf_insert_pfn() in the fault handler
wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
ARM: dts: imx6qdl-kontron-samx6i: fix phy-mode
media: Revert "media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()"
Linux 5.10.224
Change-Id: I7cd19d506c4c86df918a280598946060a494a161
Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>
|
||
|
Nathan Chancellor
|
41dd963641 |
kbuild: Fix '-S -c' in x86 stack protector scripts
commit 3415b10a03945b0da4a635e146750dfe5ce0f448 upstream.
After a recent change in clang to stop consuming all instances of '-S'
and '-c' [1], the stack protector scripts break due to the kernel's use
of -Werror=unused-command-line-argument to catch cases where flags are
not being properly consumed by the compiler driver:
$ echo | clang -o - -x c - -S -c -Werror=unused-command-line-argument
clang: error: argument unused during compilation: '-c' [-Werror,-Wunused-command-line-argument]
This results in CONFIG_STACKPROTECTOR getting disabled because
CONFIG_CC_HAS_SANE_STACKPROTECTOR is no longer set.
'-c' and '-S' both instruct the compiler to stop at different stages of
the pipeline ('-S' after compiling, '-c' after assembling), so having
them present together in the same command makes little sense. In this
case, the test wants to stop before assembling because it is looking at
the textual assembly output of the compiler for either '%fs' or '%gs',
so remove '-c' from the list of arguments to resolve the error.
All versions of GCC continue to work after this change, along with
versions of clang that do or do not contain the change mentioned above.
Cc: stable@vger.kernel.org
Fixes:
|
||
|
Michael Bestas
|
d613c46b79 |
Merge tag 'ASB-2024-08-05_12-5.10' of https://android.googlesource.com/kernel/common into android13-5.10-waipio
https://source.android.com/docs/security/bulletin/2024-08-01 CVE-2024-36971 * tag 'ASB-2024-08-05_12-5.10' of https://android.googlesource.com/kernel/common: ANDROID: GKI: remove export of tracing control functions ANDROID: Incremental fs: Retry page faults on non-fatal errors ANDROID: update ABI XML due to struct clk_core change UPSTREAM: usb: gadget: configfs: Prevent OOB read/write in usb_string_copy() UPSTREAM: f2fs: avoid false alarm of circular locking UPSTREAM: f2fs: fix deadlock in i_xattr_sem and inode page lock ANDROID: userfaultfd: Fix use-after-free in userfaultfd_using_sigbus() ANDROID: 16K: Don't set padding vm_flags on 32-bit archs ANDROID: update .xml file due to struct clk_core abi change ANDROID: mark DRM_VMWGFX as BROKEN Revert "ANDROID: Setting up GS before calling __restore_processor_state." Revert "block: introduce zone_write_granularity limit" Revert "block: Clear zone limits for a non-zoned stacked queue" Revert "scsi: sd: Fix wrong zone_write_granularity value during revalidate" Revert "PCI/ERR: Cache RCEC EA Capability offset in pci_init_capabilities()" Revert "PCI: Cache PCIe Device Capabilities register" Revert "PCI: Work around Intel I210 ROM BAR overlap defect" Revert "PCI/ASPM: Make Intel DG2 L1 acceptable latency unlimited" Revert "PCI/DPC: Quirk PIO log size for certain Intel Root Ports" Revert "PCI/DPC: Quirk PIO log size for Intel Ice Lake Root Ports" Revert "PCI/DPC: Quirk PIO log size for Intel Raptor Lake Root Ports" Revert "timers: Rename del_timer_sync() to timer_delete_sync()" Linux 5.10.218 docs: kernel_include.py: Cope with docutils 0.21 serial: kgdboc: Fix NMI-safety problems from keyboard reset code usb: typec: ucsi: displayport: Fix potential deadlock drm/amdgpu: Fix possible NULL dereference in amdgpu_ras_query_error_status_helper() btrfs: add missing mutex_unlock in btrfs_relocate_sys_chunks() mptcp: ensure snd_nxt is properly initialized on connect firmware: arm_scmi: Harden accesses to the reset domains KVM: x86: Clear "has_error_code", not "error_code", for RM exception injection netlink: annotate lockless accesses to nlk->max_recvmsg_len ima: fix deadlock when traversing "ima_default_rules". net: bcmgenet: synchronize UMAC_CMD access net: bcmgenet: synchronize EXT_RGMII_OOB_CTRL access Revert "selftests: mm: fix map_hugetlb failure on 64K page size systems" x86/xen: Drop USERGS_SYSRET64 paravirt call pinctrl: core: handle radix_tree_insert() errors in pinctrl_register_one_pin() Linux 5.10.217 md: fix kmemleak of rdev->serial keys: Fix overwrite of key expiration on instantiation regulator: core: fix debugfs creation regression hwmon: (pmbus/ucd9000) Increase delay from 250 to 500us net: fix out-of-bounds access in ops_init drm/vmwgfx: Fix invalid reads in fence signaled events mei: me: add lunar lake point M DID dyndbg: fix old BUG_ON in >control parser ASoC: tegra: Fix DSPK 16-bit playback net: bcmgenet: synchronize use of bcmgenet_set_rx_mode() tipc: fix UAF in error path iio: accel: mxc4005: Interrupt handling fixes iio:imu: adis16475: Fix sync mode setting ALSA: hda/realtek: Fix mute led of HP Laptop 15-da3001TU usb: dwc3: core: Prevent phy suspend during init usb: xhci-plat: Don't include xhci.h usb: gadget: f_fs: Fix a race condition when processing setup packets. usb: gadget: composite: fix OS descriptors w_value logic usb: ohci: Prevent missed ohci interrupts usb: Fix regression caused by invalid ep0 maxpacket in virtual SuperSpeed device usb: typec: ucsi: Fix connector check on init usb: typec: ucsi: Check for notifications after init arm64: dts: qcom: Fix 'interrupt-map' parent address cells firewire: nosy: ensure user_length is taken into account when fetching packet contents btrfs: fix kvcalloc() arguments order in btrfs_ioctl_send() net: hns3: use appropriate barrier function after setting a bit value ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action() net: bridge: fix corrupted ethernet header on multicast-to-unicast kcov: Remove kcov include from sched.h and move it to its users. phonet: fix rtm_phonet_notify() skb allocation hwmon: (corsair-cpro) Protect ccp->wait_input_report with a spinlock hwmon: (corsair-cpro) Use complete_all() instead of complete() in ccp_raw_event() hwmon: (corsair-cpro) Use a separate buffer for sending commands rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout tcp: Use refcount_inc_not_zero() in tcp_twsk_unique(). tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets xfrm: Preserve vlan tags for transport mode software GRO net:usb:qmi_wwan: support Rolling modules drm/nouveau/dp: Don't probe eDP ports twice harder fs/9p: drop inodes immediately on non-.L too clk: Don't hold prepare_lock when calling kref_put() gpio: crystalcove: Use -ENOTSUPP consistently gpio: wcove: Use -ENOTSUPP consistently 9p: explicitly deny setlease attempts fs/9p: translate O_TRUNC into OTRUNC fs/9p: only translate RWX permissions for plain 9P2000 selftests: timers: Fix valid-adjtimex signed left-shift undefined behavior MIPS: scall: Save thread_info.syscall unconditionally on entry gpu: host1x: Do not setup DMA for virtual devices blk-iocost: avoid out of bounds shift scsi: target: Fix SELinux error when systemd-modules loads the target module btrfs: always clear PERTRANS metadata during commit btrfs: make btrfs_clear_delalloc_extent() free delalloc reserve tools/power turbostat: Fix Bzy_MHz documentation typo tools/power turbostat: Fix added raw MSR output firewire: ohci: mask bus reset interrupts between ISR and bottom half ata: sata_gemini: Check clk_enable() result net: bcmgenet: Reset RBUF on first open ALSA: line6: Zero-initialize message buffers btrfs: return accurate error code on open failure in open_fs_devices() scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload net: mark racy access on sk->sk_rcvbuf wifi: cfg80211: fix rdev_dump_mpp() arguments order wifi: mac80211: fix ieee80211_bss_*_flags kernel-doc gfs2: Fix invalid metadata access in punch_hole scsi: lpfc: Update lpfc_ramp_down_queue_handler() logic KVM: arm64: vgic-v2: Check for non-NULL vCPU in vgic_v2_parse_attr() KVM: arm64: vgic-v2: Use cpuid from userspace as vcpu_id clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change net: gro: add flush check in udp_gro_receive_segment tipc: fix a possible memleak in tipc_buf_append net: core: reject skb_copy(_expand) for fraglist GSO skbs net: bridge: fix multicast-to-unicast with fraglist GSO net: dsa: mv88e6xxx: Fix number of databases for 88E6141 / 88E6341 cxgb4: Properly lock TX queue for the selftest. ASoC: meson: cards: select SND_DYNAMIC_MINORS ASoC: Fix 7/8 spaces indentation in Kconfig net: qede: use return from qede_parse_actions() net: qede: use return from qede_parse_flow_attr() for flow_spec net: qede: use return from qede_parse_flow_attr() for flower net: qede: sanitize 'rc' in qede_add_tc_flower_fltr() s390/vdso: Add CFI for RA register to asm macro vdso_func net l2tp: drop flow hash on forward nsh: Restore skb->{protocol,data,mac_header} for outer header in nsh_gso_segment(). octeontx2-af: avoid off-by-one read from userspace bna: ensure the copied buf is NUL terminated s390/mm: Fix clearing storage keys for huge pages s390/mm: Fix storage key clearing for guest huge pages regulator: mt6360: De-capitalize devicetree regulator subnodes pinctrl: devicetree: fix refcount leak in pinctrl_dt_to_map() power: rt9455: hide unused rt9455_boost_voltage_values nfs: Handle error of rpc_proc_register() in nfs_net_init(). nfs: make the rpc_stat per net namespace nfs: expose /proc/net/sunrpc/nfs in net namespaces sunrpc: add a struct rpc_stats arg to rpc_create_args pinctrl: mediatek: paris: Rework support for PIN_CONFIG_{INPUT,OUTPUT}_ENABLE pinctrl: mediatek: paris: Fix PIN_CONFIG_INPUT_SCHMITT_ENABLE readback pinctrl: mediatek: paris: Rework mtk_pinconf_{get,set} switch/case logic pinctrl: core: delete incorrect free in pinctrl_enable() pinctrl/meson: fix typo in PDM's pin name pinctrl: pinctrl-aspeed-g6: Fix register offset for pinconf of GPIOR-T eeprom: at24: fix memory corruption race condition eeprom: at24: Probe for DDR3 thermal sensor in the SPD case eeprom: at24: Use dev_err_probe for nvmem register failure wifi: nl80211: don't free NULL coalescing rule dmaengine: Revert "dmaengine: pl330: issue_pending waits until WFP state" dmaengine: pl330: issue_pending waits until WFP state Linux 5.10.216 riscv: Disable STACKPROTECTOR_PER_TASK if GCC_PLUGIN_RANDSTRUCT is enabled serial: core: fix kernel-doc for uart_port_unlock_irqrestore() udp: preserve the connected status if only UDP cmsg bounds: Use the right number of bits for power-of-two CONFIG_NR_CPUS HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up i2c: smbus: fix NULL function pointer dereference riscv: Fix TASK_SIZE on 64-bit NOMMU riscv: fix VMALLOC_START definition dma: xilinx_dpdma: Fix locking idma64: Don't try to serve interrupts when device is powered off dmaengine: owl: fix register access functions tcp: Fix NEW_SYN_RECV handling in inet_twsk_purge() tcp: Clean up kernel listener's reqsk in inet_twsk_purge() mtd: diskonchip: work around ubsan link failure stackdepot: respect __GFP_NOLOCKDEP allocation flag net: b44: set pause params only when interface is up ethernet: Add helper for assigning packet type when dest address does not match device address irqchip/gic-v3-its: Prevent double free on error drm/amdgpu: Fix leak when GPU memory allocation fails drm/amdgpu/sdma5.2: use legacy HDP flush for SDMA2/3 arm64: dts: rockchip: enable internal pull-up for Q7_THRM# on RK3399 Puma cpu: Re-enable CPU mitigations by default for !X86 architectures btrfs: fix information leak in btrfs_ioctl_logical_to_ino() Bluetooth: btusb: Add Realtek RTL8852BE support ID 0x0bda:0x4853 Bluetooth: Fix type of len in {l2cap,sco}_sock_getsockopt_old() PM / devfreq: Fix buffer overflow in trans_stat_show tracing: Increase PERF_MAX_TRACE_SIZE to handle Sentinel1 and docker together tracing: Show size of requested perf buffer net/mlx5e: Fix a race in command alloc flow Revert "crypto: api - Disallow identical driver names" serial: mxs-auart: add spinlock around changing cts state serial: core: Provide port lock wrappers af_unix: Suppress false-positive lockdep splat for spin_lock() in __unix_gc(). net: ethernet: ti: am65-cpts: Fix PTPv1 message type on TX packets iavf: Fix TC config comparison with existing adapter TC config i40e: Report MFS in decimal base instead of hex i40e: Do not use WQ_MEM_RECLAIM flag for workqueue netfilter: nf_tables: honor table dormant flag from netdev release event path mlxsw: spectrum_acl_tcam: Fix memory leak when canceling rehash work mlxsw: spectrum_acl_tcam: Fix incorrect list API usage mlxsw: spectrum_acl_tcam: Fix warning during rehash mlxsw: spectrum_acl_tcam: Fix memory leak during rehash mlxsw: spectrum_acl_tcam: Rate limit error message mlxsw: spectrum_acl_tcam: Fix possible use-after-free during rehash mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update mlxsw: spectrum_acl_tcam: Fix race during rehash delayed work net: openvswitch: Fix Use-After-Free in ovs_ct_exit ipvs: Fix checksumming on GSO of SCTP packets net: gtp: Fix Use-After-Free in gtp_dellink net: usb: ax88179_178a: stop lying about skb->truesize ipv4: check for NULL idev in ip_route_use_hint() NFC: trf7970a: disable all regulators on removal mlxsw: core: Unregister EMAD trap using FORWARD action vxlan: drop packets from invalid src-address wifi: iwlwifi: mvm: remove old PASN station when adding a new one ARC: [plat-hsdk]: Remove misplaced interrupt-cells property arm64: dts: mediatek: mt2712: fix validation errors arm64: dts: mediatek: mt7622: drop "reset-names" from thermal block arm64: dts: mediatek: mt7622: fix ethernet controller "compatible" arm64: dts: mediatek: mt7622: fix IR nodename arm64: dts: mediatek: mt7622: fix clock controllers arm64: dts: mediatek: mt7622: introduce nodes for Wireless Ethernet Dispatch arm64: dts: mediatek: mt7622: add support for coherent DMA arm64: dts: rockchip: Remove unsupported node from the Pinebook Pro dts arm64: dts: rockchip: enable internal pull-up on PCIE_WAKE# for RK3399 Puma arm64: dts: rockchip: fix alphabetical ordering RK3399 puma nilfs2: fix OOB in nilfs_set_de_type nouveau: fix instmem race condition around ptr stores drm/amdgpu: validate the parameters of bo mapping operations more clearly init/main.c: Fix potential static_command_line memory overflow fs: sysfs: Fix reference leak in sysfs_break_active_protection() speakup: Avoid crash on very long word mei: me: disable RPL-S on SPS and IGN firmwares usb: Disable USB3 LPM at shutdown usb: dwc2: host: Fix dereference issue in DDMA completion flow. Revert "usb: cdc-wdm: close race between read and workqueue" USB: serial: option: add Telit FN920C04 rmnet compositions USB: serial: option: add Rolling RW101-GL and RW135-GL support USB: serial: option: support Quectel EM060K sub-models USB: serial: option: add Lonsung U8300/U9300 product USB: serial: option: add support for Fibocom FM650/FG650 USB: serial: option: add Fibocom FM135-GL variants serial/pmac_zilog: Remove flawed mitigation for rx irq flood comedi: vmk80xx: fix incomplete endpoint checking thunderbolt: Fix wake configurations after device unplug thunderbolt: Avoid notify PM core about runtime PM resume binder: check offset alignment in binder_get_object() x86/cpufeatures: Fix dependencies for GFNI, VAES, and VPCLMULQDQ clk: Get runtime PM before walking tree during disable_unused clk: Initialize struct clk_core kref earlier clk: Print an info line before disabling unused clocks clk: remove extra empty line clk: Mark 'all_lists' as const clk: Remove prepare_lock hold assertion in __clk_release() drm/panel: visionox-rm69299: don't unregister DSI device drm: nv04: Fix out of bounds access RDMA/mlx5: Fix port number for counter query in multi-port configuration RDMA/cm: Print the old state when cm_destroy_id gets timeout RDMA/rxe: Fix the problem "mutex_destroy missing" tun: limit printing rate when illegal packet received by tun dev netfilter: nft_set_pipapo: do not free live element netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get() Revert "tracing/trigger: Fix to return error if failed to alloc snapshot" kprobes: Fix possible use-after-free issue on kprobe registration selftests/ftrace: Limit length in subsystem-enable tests riscv: process: Fix kernel gp leakage riscv: Enable per-task stack canaries btrfs: record delayed inode root in transaction irqflags: Explicitly ignore lockdep_hrtimer_exit() argument x86/apic: Force native_apic_mem_read() to use the MOV instruction selftests: timers: Fix abs() warning in posix_timers test x86/cpu: Actually turn off mitigations by default for SPECULATION_MITIGATIONS=n vhost: Add smp_rmb() in vhost_vq_avail_empty() drm/client: Fully protect modes[] with dev->mode_config.mutex btrfs: qgroup: correctly model root qgroup rsv in convert mailbox: imx: fix suspend failue iommu/vt-d: Allocate local memory for page request queue net: ena: Fix incorrect descriptor free behavior net: ena: Wrong missing IO completions check order net: ena: Fix potential sign extension issue af_unix: Fix garbage collector racing against connect() af_unix: Do not use atomic ops for unix_sk(sk)->inflight. net/mlx5: Properly link new fs rules into the tree netfilter: complete validation of user input Bluetooth: SCO: Fix not validating setsockopt user input ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr ipv4/route: avoid unused-but-set-variable warning ipv6: fib: hide unused 'pn' variable octeontx2-af: Fix NIX SQ mode and BP config geneve: fix header validation in geneve[6]_xmit_skb xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING u64_stats: fix u64_stats_init() for lockdep when used repeatedly in one file net: openvswitch: fix unwanted error log on timeout policy probing nouveau: fix function cast warning media: cec: core: remove length check of Timer Status Bluetooth: Fix memory leak in hci_req_sync_complete() batman-adv: Avoid infinite loop trying to resize local TT Linux 5.10.215 x86/head/64: Re-enable stack protection x86/retpoline: Add NOENDBR annotation to the SRSO dummy return thunk scsi: sd: Fix wrong zone_write_granularity value during revalidate kbuild: dummy-tools: adjust to stricter stackprotector check VMCI: Fix possible memcpy() run-time warning in vmci_datagram_invoke_guest_handler() Bluetooth: btintel: Fixe build regression drm/i915/gt: Reset queue_priority_hint on parking x86/mm/pat: fix VM_PAT handling in COW mappings virtio: reenable config if freezing device failed tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc netfilter: nf_tables: discard table flag update with pending basechain deletion netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path netfilter: nf_tables: release batch on table validation from abort path fbmon: prevent division by zero in fb_videomode_from_videomode() drivers/nvme: Add quirks for device 126f:2262 fbdev: viafb: fix typo in hw_bitblt_1 and hw_bitblt_2 usb: sl811-hcd: only defined function checkdone if QUIRK2 is defined usb: typec: tcpci: add generic tcpci fallback compatible tools: iio: replace seekdir() in iio_generic_buffer ring-buffer: use READ_ONCE() to read cpu_buffer->commit_page in concurrent environment ktest: force $buildonly = 1 for 'make_warnings_file' test type platform/x86: touchscreen_dmi: Add an extra entry for a variant of the Chuwi Vi8 tablet Input: allocate keycode for Display refresh rate toggle RDMA/cm: add timeout to cm_destroy_id wait block: prevent division by zero in blk_rq_stat_sum() libperf evlist: Avoid out-of-bounds access Revert "ACPI: PM: Block ASUS B1400CEAE from suspend to idle by default" SUNRPC: increase size of rpc_wait_queue.qlen from unsigned short to unsigned int drm/amd/display: Fix nanosec stat overflow ext4: forbid commit inconsistent quota data when errors=remount-ro ext4: add a hint for block bitmap corrupt state in mb_groups media: sta2x11: fix irq handler cast isofs: handle CDs with bad root inode but good Joliet root directory scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc() sysv: don't call sb_bread() with pointers_lock held pinctrl: renesas: checker: Limit cfg reg enum checks to provided IDs Input: synaptics-rmi4 - fail probing if memory allocation for "phys" fails Bluetooth: btintel: Fix null ptr deref in btintel_read_version net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list() btrfs: send: handle path ref underflow in header iterate_inode_ref() btrfs: export: handle invalid inode or root reference in btrfs_get_parent() btrfs: handle chunk tree lookup error in btrfs_relocate_sys_chunks() tools/power x86_energy_perf_policy: Fix file leak in get_pkg_num() pstore/zone: Add a null pointer check to the psz_kmsg_read ionic: set adminq irq affinity arm64: dts: rockchip: fix rk3399 hdmi ports node arm64: dts: rockchip: fix rk3328 hdmi ports node panic: Flush kernel log buffer at the end VMCI: Fix memcpy() run-time warning in dg_dispatch_as_host() wifi: ath9k: fix LNA selection in ath_ant_try_scan() objtool: Add asm version of STACK_FRAME_NON_STANDARD x86/cpufeatures: Add CPUID_LNX_5 to track recently added Linux-defined word mptcp: don't account accept() of non-MPC client as fallback to TCP x86/retpoline: Do the necessary fixup to the Zen3/4 srso return thunk for !SRSO x86/bugs: Fix the SRSO mitigation on Zen3/4 riscv: Fix spurious errors from __get/put_kernel_nofault s390/entry: align system call table on 8 bytes x86/mce: Make sure to grab mce_sysfs_mutex in set_bank() of: dynamic: Synchronize of_changeset_destroy() with the devlink removals driver core: Introduce device_link_wait_removal() ALSA: hda/realtek: Update Panasonic CF-SZ6 quirk to support headset with microphone ata: sata_mv: Fix PCI device ID table declaration compilation warning scsi: mylex: Fix sysfs buffer lengths ata: sata_sx4: fix pdc20621_get_from_dimm() on 64-bit ASoC: ops: Fix wraparound for mask in snd_soc_get_volsw arm64: dts: qcom: sc7180-trogdor: mark bluetooth address as broken arm64: dts: qcom: sc7180: Remove clock for bluetooth on Trogdor net: ravb: Always process TX descriptor ring udp: do not accept non-tunnel GSO skbs landing in a tunnel Revert "usb: phy: generic: Get the vbus supply" scsi: qla2xxx: Update manufacturer detail scsi: qla2xxx: Update manufacturer details i40e: fix vf may be used uninitialized in this function warning i40e: fix i40e_count_filters() to count only active/new filters octeontx2-pf: check negative error code in otx2_open() udp: do not transition UDP GRO fraglist partial checksums to unnecessary ipv6: Fix infinite recursion in fib6_dump_done(). selftests: reuseaddr_conflict: add missing new line at the end of the output erspan: make sure erspan_base_hdr is present in skb->head net: stmmac: fix rx queue priority assignment net/sched: act_skbmod: prevent kernel-infoleak bpf, sockmap: Prevent lock inversion deadlock in map delete elem vboxsf: Avoid an spurious warning if load_nls_xxx() fails netfilter: validate user input for expected length netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get() netfilter: nf_tables: flush pending destroy work before exit_net release netfilter: nf_tables: reject new basechain after table flag update block: add check that partition length needs to be aligned with block size x86/srso: Add SRSO mitigation for Hygon processors mm, vmscan: prevent infinite loop for costly GFP_NOIO | __GFP_RETRY_MAYFAIL allocations Revert "x86/mm/ident_map: Use gbpages only where full GB page should be mapped." io_uring: ensure '0' is returned on file registration success vfio/fsl-mc: Block calling interrupt handler without trigger vfio/platform: Create persistent IRQ handlers vfio/pci: Create persistent INTx handler vfio: Introduce interface to flush virqfd inject workqueue vfio/pci: Lock external INTx masking ops vfio/pci: Disable auto-enable of exclusive INTx IRQ net/rds: fix possible cp null dereference netfilter: nf_tables: disallow timeout for anonymous sets Bluetooth: Fix TOCTOU in HCI debugfs implementation Bluetooth: hci_event: set the conn encrypted before conn establishes x86/cpufeatures: Add new word for scattered features r8169: fix issue caused by buggy BIOS on certain boards with RTL8168d dm integrity: fix out-of-range warning Octeontx2-af: fix pause frame configuration in GMP mode bpf: Protect against int overflow for stack access size ACPICA: debugger: check status of acpi_evaluate_object() in acpi_db_walk_for_fields() tcp: properly terminate timers for kernel sockets ixgbe: avoid sleeping allocation in ixgbe_ipsec_vf_add_sa() nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet USB: core: Fix deadlock in usb_deauthorize_interface() scsi: lpfc: Correct size for wqe for memset() PCI/DPC: Quirk PIO log size for Intel Ice Lake Root Ports x86/cpu: Enable STIBP on AMD if Automatic IBRS is enabled scsi: qla2xxx: Delay I/O Abort on PCI error scsi: qla2xxx: Fix command flush on cable pull scsi: qla2xxx: Split FCE|EFT trace control usb: typec: ucsi: Clear UCSI_CCI_RESET_COMPLETE before reset usb: typec: ucsi: Ack unsupported commands usb: udc: remove warning when queue disabled ep usb: dwc2: gadget: LPM flow fix usb: dwc2: host: Fix ISOC flow in DDMA mode usb: dwc2: host: Fix hibernation flow usb: dwc2: host: Fix remote wakeup from hibernation USB: core: Add hub_get() and hub_put() routines staging: vc04_services: fix information leak in create_component() staging: vc04_services: changen strncpy() to strscpy_pad() scsi: core: Fix unremoved procfs host directory regression ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs usb: cdc-wdm: close race between read and workqueue net: ll_temac: platform_get_resource replaced by wrong function mmc: core: Avoid negative index with array access mmc: core: Initialize mmc_blk_ioc_data hexagon: vmlinux.lds.S: handle attributes section exec: Fix NOMMU linux_binprm::exec in transfer_args_to_stack() wifi: mac80211: check/clear fast rx for non-4addr sta VLAN changes init: open /initrd.image with O_LARGEFILE mm/migrate: set swap entry values of THP tail pages properly. mm/memory-failure: fix an incorrect use of tail pages serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO powerpc: xor_vmx: Add '-mhard-float' to CFLAGS efivarfs: Request at most 512 bytes for variable names perf/core: Fix reentry problem in perf_output_read_group() KVM/x86: Export RFDS_NO and RFDS_CLEAR to guests x86/rfds: Mitigate Register File Data Sampling (RFDS) Documentation/hw-vuln: Add documentation for RFDS x86/mmio: Disable KVM mitigation when X86_FEATURE_CLEAR_CPU_BUF is set KVM/VMX: Move VERW closer to VMentry for MDS mitigation KVM/VMX: Use BT+JNC, i.e. EFLAGS.CF to select VMRESUME vs. VMLAUNCH x86/bugs: Use ALTERNATIVE() instead of mds_user_clear static key x86/entry_32: Add VERW just before userspace transition x86/entry_64: Add VERW just before userspace transition x86/bugs: Add asm helpers for executing VERW x86/asm: Add _ASM_RIP() macro for x86-64 (%rip) suffix btrfs: allocate btrfs_ioctl_defrag_range_args on stack printk: Update @console_may_schedule in console_trylock_spinning() xen/events: close evtchn after mapping cleanup tee: optee: Fix kernel panic caused by incorrect error handling fs/aio: Check IOCB_AIO_RW before the struct aio_kiocb conversion vt: fix unicode buffer corruption when deleting characters mei: me: add arrow lake point H DID mei: me: add arrow lake point S DID tty: serial: fsl_lpuart: avoid idle preamble pending if CTS is enabled usb: port: Don't try to peer unused USB ports based on location usb: gadget: ncm: Fix handling of zero block length packets USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command ALSA: hda/realtek - Fix headset Mic no show at resume back for Lenovo ALC897 platform KVM: SVM: Flush pages under kvm->lock to fix UAF in svm_register_enc_region() xfrm: Avoid clang fortify warning in copy_to_user_tmpl() Drivers: hv: vmbus: Calculate ring buffer size for more efficient use of memory netfilter: nf_tables: reject constant set with timeout netfilter: nf_tables: disallow anonymous set with timeout flag netfilter: nf_tables: mark set as dead when unbinding anonymous set with timeout cpufreq: brcmstb-avs-cpufreq: fix up "add check for cpufreq_cpu_get's return value" comedi: comedi_test: Prevent timers rescheduling during deletion scripts: kernel-doc: Fix syntax error due to undeclared args variable x86/pm: Work around false positive kmemleak report in msr_build_context() x86/stackprotector/32: Make the canary into a regular percpu variable vxge: remove unnecessary cast in kfree() dm snapshot: fix lockup in dm_exception_table_exit drm/amd/display: Fix noise issue on HDMI AV mute drm/amd/display: Return the correct HDCP error code ahci: asm1064: asm1166: don't limit reported ports ahci: asm1064: correct count of reported ports wireguard: netlink: access device through ctx instead of peer wireguard: netlink: check for dangling peer via is_dead instead of empty list net: hns3: tracing: fix hclgevf trace event strings x86/CPU/AMD: Update the Zenbleed microcode revisions cpufreq: dt: always allocate zeroed cpumask nilfs2: prevent kernel bug at submit_bh_wbc() nilfs2: fix failure to detect DAT corruption in btree and direct mappings memtest: use {READ,WRITE}_ONCE in memory scanning drm/vc4: hdmi: do not return negative values from .get_modes() drm/imx/ipuv3: do not return negative values from .get_modes() drm/exynos: do not return negative values from .get_modes() drm/panel: do not return negative error codes from drm_panel_get_modes() s390/zcrypt: fix reference counting on zcrypt card objects soc: fsl: qbman: Use raw spinlock for cgr_lock soc: fsl: qbman: Add CGR update function soc: fsl: qbman: Add helper for sanity checking cgr ops soc: fsl: qbman: Always disable interrupts when taking cgr_lock ring-buffer: Fix full_waiters_pending in poll ring-buffer: Fix resetting of shortest_full ring-buffer: Do not set shortest_full when full target is hit ring-buffer: Fix waking up ring buffer readers vfio/platform: Disable virqfds on cleanup PCI: dwc: endpoint: Fix advertised resizable BAR size kbuild: Move -Wenum-{compare-conditional,enum-conversion} into W=1 nfs: fix UAF in direct writes PCI/AER: Block runtime suspend when handling errors PCI/ERR: Clear AER status only when we control AER speakup: Fix 8bit characters from direct synth usb: gadget: tegra-xudc: Fix USB3 PHY retrieval logic usb: gadget: tegra-xudc: Use dev_err_probe() phy: tegra: xusb: Add API to retrieve the port number of phy slimbus: core: Remove usage of the deprecated ida_simple_xx() API nvmem: meson-efuse: fix function pointer type mismatch ext4: fix corruption during on-line resize hwmon: (amc6821) add of_match table drm/etnaviv: Restore some id values mmc: core: Fix switch on gp3 partition mm: swap: fix race between free_swap_and_cache() and swapoff() mac802154: fix llsec key resources release in mac802154_llsec_key_del dm-raid: fix lockdep waring in "pers->hot_add_disk" Revert "Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d"" PCI/DPC: Quirk PIO log size for Intel Raptor Lake Root Ports PCI/DPC: Quirk PIO log size for certain Intel Root Ports PCI/ASPM: Make Intel DG2 L1 acceptable latency unlimited PCI: Work around Intel I210 ROM BAR overlap defect PCI: Cache PCIe Device Capabilities register PCI/ERR: Cache RCEC EA Capability offset in pci_init_capabilities() PCI/PM: Drain runtime-idle callbacks before driver removal PCI: Drop pci_device_remove() test of pci_dev->driver btrfs: fix off-by-one chunk length calculation at contains_pending_extent() serial: Lock console when calling into driver before registration printk/console: Split out code that enables default console usb: typec: ucsi: Clean up UCSI_CABLE_PROP macros fuse: don't unhash root fuse: fix root lookup with nonzero generation mmc: tmio: avoid concurrent runs of mmc_request_done() PM: sleep: wakeirq: fix wake irq warning in system suspend USB: serial: cp210x: add pid/vid for TDK NC0110013M and MM0110113M USB: serial: option: add MeiG Smart SLM320 product USB: serial: cp210x: add ID for MGP Instruments PDS100 USB: serial: add device ID for VeriFone adapter USB: serial: ftdi_sio: add support for GMC Z216C Adapter IR-USB powerpc/fsl: Fix mfpmr build errors with newer binutils clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays clk: qcom: mmcc-apq8084: fix terminating of frequency table arrays clk: qcom: gcc-ipq8074: fix terminating of frequency table arrays clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays PM: suspend: Set mem_sleep_current during kernel command line setup parisc: Strip upper 32 bit of sum in csum_ipv6_magic for 64-bit builds parisc: Fix csum_ipv6_magic on 64-bit systems parisc: Fix csum_ipv6_magic on 32-bit systems parisc: Fix ip_fast_csum parisc: Avoid clobbering the C/B bits in the PSW with tophys and tovirt macros mtd: rawnand: meson: fix scrambling mode value in command macro ubi: correct the calculation of fastmap size ubi: Check for too small LEB size in VTBL code ubifs: Set page uptodate in the correct place fat: fix uninitialized field in nostale filehandles bounds: support non-power-of-two CONFIG_NR_CPUS block: Clear zone limits for a non-zoned stacked queue block: introduce zone_write_granularity limit ext4: correct best extent lstart adjustment logic selftests/mqueue: Set timeout to 180 seconds crypto: qat - resolve race condition during AER recovery crypto: qat - fix double free during reset sparc: vDSO: fix return value of __setup handler sparc64: NMI watchdog: fix return value of __setup handler KVM: Always flush async #PF workqueue when vCPU is being destroyed media: xc4000: Fix atomicity violation in xc4000_get_frequency serial: max310x: fix NULL pointer dereference in I2C instantiation drm/vmwgfx: Fix possible null pointer derefence with invalid contexts drm/vmwgfx: Fix some static checker warnings drm/vmwgfx/vmwgfx_cmdbuf_res: Remove unused variable 'ret' drm/vmwgfx: switch over to the new pin interface v2 drm/vmwgfx: stop using ttm_bo_create v2 arm: dts: marvell: Fix maxium->maxim typo in brownstone dts smack: Handle SMACK64TRANSMUTE in smack_inode_setsecurity() smack: Set SMACK64TRANSMUTE only for dirs in smack_inode_setxattr() clk: qcom: gcc-sdm845: Add soft dependency on rpmhpd media: staging: ipu3-imgu: Set fields before media_entity_pads_init() wifi: brcmfmac: Fix use-after-free bug in brcmf_cfg80211_detach timers: Rename del_timer_sync() to timer_delete_sync() timers: Use del_timer_sync() even on UP timers: Update kernel-doc for various functions x86/bugs: Use sysfs_emit() x86/cpu: Support AMD Automatic IBRS Documentation/hw-vuln: Update spectre doc amdkfd: use calloc instead of kzalloc to avoid integer overflow Change-Id: I7279a2f07527db00e298b47f8f8f44c457fa2ef6 |
||
|
Greg Kroah-Hartman
|
8c417688f0 |
Merge 5.10.223 into android12-5.10-lts
Changes in 5.10.223
gcc-plugins: Rename last_stmt() for GCC 14+
filelock: Remove locks reliably when fcntl/close race is detected
scsi: qedf: Set qed_slowpath_params to zero before use
ACPI: EC: Abort address space access upon error
ACPI: EC: Avoid returning AE_OK on errors in address space handler
wifi: mac80211: mesh: init nonpeer_pm to active by default in mesh sdata
wifi: mac80211: fix UBSAN noise in ieee80211_prep_hw_scan()
selftests/openat2: Fix build warnings on ppc64
Input: silead - Always support 10 fingers
net: ipv6: rpl_iptunnel: block BH in rpl_output() and rpl_input()
ila: block BH in ila_output()
arm64: armv8_deprecated: Fix warning in isndep cpuhp starting process
null_blk: fix validation of block size
kconfig: gconf: give a proper initial state to the Save button
kconfig: remove wrong expr_trans_bool()
fs/file: fix the check in find_next_fd()
mei: demote client disconnect warning on suspend to debug
wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
ALSA: hda/realtek: Add more codec ID to no shutup pins list
mips: fix compat_sys_lseek syscall
Input: elantech - fix touchpad state on resume for Lenovo N24
Input: i8042 - add Ayaneo Kun to i8042 quirk table
bytcr_rt5640 : inverse jack detect for Archos 101 cesium
ALSA: dmaengine: Synchronize dma channel after drop()
ASoC: ti: davinci-mcasp: Set min period size using FIFO config
ASoC: ti: omap-hdmi: Fix too long driver name
can: kvaser_usb: fix return value for hif_usb_send_regout
s390/sclp: Fix sclp_init() cleanup on failure
btrfs: qgroup: fix quota root leak after quota disable failure
ALSA: hda/relatek: Enable Mute LED on HP Laptop 15-gw0xxx
ALSA: dmaengine_pcm: terminate dmaengine before synchronize
net: usb: qmi_wwan: add Telit FN912 compositions
net: mac802154: Fix racy device stats updates by DEV_STATS_INC() and DEV_STATS_ADD()
powerpc/pseries: Whitelist dtl slub object for copying to userspace
powerpc/eeh: avoid possible crash when edev->pdev changes
scsi: libsas: Fix exp-attached device scan after probe failure scanned in again after probe failed
Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
fs: better handle deep ancestor chains in is_subdir()
spi: imx: Don't expect DMA for i.MX{25,35,50,51,53} cspi devices
selftests/vDSO: fix clang build errors and warnings
hfsplus: fix uninit-value in copy_name
spi: mux: set ctlr->bits_per_word_mask
ARM: 9324/1: fix get_user() broken with veneer
ACPI: processor_idle: Fix invalid comparison with insertion sort for latency
bpf: Fix overrunning reservations in ringbuf
bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue
scsi: core: Fix a use-after-free
ext4: fix error code saved on super block during file system abort
ext4: Send notifications on error
drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq()
net: relax socket state check at accept time.
ocfs2: add bounds checking to ocfs2_check_dir_entry()
jfs: don't walk off the end of ealist
ALSA: hda/realtek: Enable headset mic on Positivo SU C1400
ALSA: hda/realtek: Fix the speaker output on Samsung Galaxy Book Pro 360
arm64: dts: qcom: msm8996: Disable SS instance in Parkmode for USB
ALSA: pcm_dmaengine: Don't synchronize DMA channel when DMA is paused
filelock: Fix fcntl/close race recovery compat path
tun: add missing verification for short frame
tap: add missing verification for short frame
Linux 5.10.223
Change-Id: I588f4e47f0b1d442e0bf6d14ac923105e2e1909c
Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>
|
||
|
Masahiro Yamada
|
ffe47bf986 |
kconfig: remove wrong expr_trans_bool()
[ Upstream commit 77a92660d8fe8d29503fae768d9f5eb529c88b36 ]
expr_trans_bool() performs an incorrect transformation.
[Test Code]
config MODULES
def_bool y
modules
config A
def_bool y
select C if B != n
config B
def_tristate m
config C
tristate
[Result]
CONFIG_MODULES=y
CONFIG_A=y
CONFIG_B=m
CONFIG_C=m
This output is incorrect because CONFIG_C=y is expected.
Documentation/kbuild/kconfig-language.rst clearly explains the function
of the '!=' operator:
If the values of both symbols are equal, it returns 'n',
otherwise 'y'.
Therefore, the statement:
select C if B != n
should be equivalent to:
select C if y
Or, more simply:
select C
Hence, the symbol C should be selected by the value of A, which is 'y'.
However, expr_trans_bool() wrongly transforms it to:
select C if B
Therefore, the symbol C is selected by (A && B), which is 'm'.
The comment block of expr_trans_bool() correctly explains its intention:
* bool FOO!=n => FOO
^^^^
If FOO is bool, FOO!=n can be simplified into FOO. This is correct.
However, the actual code performs this transformation when FOO is
tristate:
if (e->left.sym->type == S_TRISTATE) {
^^^^^^^^^^
While it can be fixed to S_BOOLEAN, there is no point in doing so
because expr_tranform() already transforms FOO!=n to FOO when FOO is
bool. (see the "case E_UNEQUAL" part)
expr_trans_bool() is wrong and unnecessary.
Signed-off-by: Masahiro Yamada <masahiroy@kernel.org>
Acked-by: Randy Dunlap <rdunlap@infradead.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>
|
||
|
Masahiro Yamada
|
4beba24085 |
kconfig: gconf: give a proper initial state to the Save button
[ Upstream commit 46edf4372e336ef3a61c3126e49518099d2e2e6d ] Currently, the initial state of the "Save" button is always active. If none of the CONFIG options are changed while loading the .config file, the "Save" button should be greyed out. This can be fixed by calling conf_read() after widget initialization. Signed-off-by: Masahiro Yamada <masahiroy@kernel.org> Signed-off-by: Sasha Levin <sashal@kernel.org> |