From: Greg Kroah-Hartman Date: Mon, 20 Jul 2026 11:00:34 +0000 (+0200) Subject: Merge branch 'master' of gitolite.kernel.org:/pub/scm/linux/kernel/git/stable/stable... X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=c055926418eeb8ca306192bcdf78fcfc14bc46fd;p=thirdparty%2Fkernel%2Fstable-queue.git Merge branch 'master' of gitolite.kernel.org:/pub/scm/linux/kernel/git/stable/stable-queue --- c055926418eeb8ca306192bcdf78fcfc14bc46fd diff --cc queue-5.10/series index fa5aef228e,902482248d..a57c2e3270 --- a/queue-5.10/series +++ b/queue-5.10/series @@@ -159,10 -159,263 +159,270 @@@ sched-fair-only-update-stats-for-allowe crypto-algif_skcipher-force-synchronous-processing-o.patch tools-mm-slabinfo-fix-total_objects-attribute-name.patch crypto-af_alg-remove-zero-copy-support-from-skcipher.patch +media-uvcvideo-avoid-partial-metadata-buffers.patch +media-uvcvideo-fix-buffer-sequence-in-frame-gaps.patch +serial-msm-disable-dma-for-kernel-console-uart.patch +serial-8250_omap-clear-rx_running-on-zero-length-dma-completes.patch +afs-fix-netns-teardown-to-cancel-the-preallocation-charger.patch +afs-fix-null-pointer-dereference-in-afs_get_tree.patch +afs-fix-further-netns-teardown-to-cancel-the-preallocation-charger.patch + drm-tidss-drop-extra-drm_mode_config_reset-call.patch + drm-radeon-fix-memory-leak-in-radeon_ring_restore-on.patch + driver-core-use-read_once-for-dev-driver-in-dev_has_.patch + wifi-rtw88-fix-oob-read-from-firmware-rx-descriptor-.patch + kconfig-fix-potential-null-pointer-dereference-in-co.patch + wifi-ath9k-fix-oob-access-from-firmware-tx-status-qu.patch + arm-dts-am335x-sl50-fix-audio-bitclock-and-frame-mas.patch + watchdog-sprd_wdt-remove-redundant-sprd_wdt_disable-.patch + media-cedrus-fix-failure-to-clean-up-hardware-on-pro.patch + pinctrl-sunxi-fix-regulator-leak-in-sunxi_pmx_reques.patch + crypto-atmel-sha204a-fix-blocking-and-non-blocking-r.patch + crypto-ecrdsa-fix-unknown-oid-check-in-ecrdsa_param_.patch + crypto-asymmetric_keys-fix-oob-read-in-pefile_digest.patch + iommu-amd-fix-a-stale-comment-about-which-legacy-mod.patch + clk-scmi-fix-clock-rate-rounding.patch + thermal-hwmon-fix-critical-temperature-attribute-rem.patch + net-sched-sch_hfsc-annotate-data-races-in-hfsc_dump_.patch + crypto-ccp-treat-zero-length-cert-chain-as-query-for.patch + net-sched-sch_htb-annotate-data-races-i.patch + ipv6-addrconf-bail-out-of-dad_failure-when-state-is-.patch + rdma-hns-fix-arithmetic-overflow-in-calc_hem_config.patch + rdma-mlx5-fix-devx-subscribe-event-unwind-null-deref.patch + rdma-srpt-fix-integer-overflow-in-immediate-data-len.patch + media-atomisp-fix-memory-leak-in-atomisp_fixed_patte.patch + sysfs-clamp-show-return-value-in-sysfs_kf_read.patch + net-sched-sch_drr-annotate-data-races-around-cl-defi.patch + media-rockchip-rga-fix-too-small-buffer-size.patch + device-property-fix-fwnode-reference-leak-in-fwnode_.patch + cpufreq-documentation-fix-sampling_down_factor-range.patch + cpufreq-conservative-simplify-frequency-limit-handli.patch + pwm-imx27-fix-variable-truncation-in-.apply.patch + bus-sunxi-rsb-always-check-register-address-validity.patch + ib-mlx4-fix-refcount-leak-in-add_port-error-path.patch + rdma-hns-fix-warning-in-poll-cq-direct-mode.patch + pm-sleep-use-complete-in-device_pm_sleep_init.patch + mips-fix-big-endian-stack-argument-fetching-in-o32-w.patch + mips-dec-remove-do_irq-call-indirection.patch + mtd-spi-nor-drop-duplicate-kconfig-dependency.patch + nvme-multipath-fix-flex-array-size-in-struct-nvme_ns.patch + workqueue-drop-spurious-from-print_worker_info-fn-de.patch + ipv6-guard-against-possible-null-deref-in-__in6_dev_.patch + net-sched-cls_bpf-prevent-unbounded-recursion-in-off.patch + drm-tegra-dc-fix-device-node-reference-leak-in-tegra.patch + rapidio-tsi721-prevent-a-bad-dereference-in-tsi721_d.patch + ocfs2-don-t-bug_on-an-invalid-journal-dinode.patch + ocfs2-kill-osb-system_file_mutex-lock.patch + drm-msm-dp-fix-hpd-state-status-bit-shift-value.patch + drm-msm-dp-fix-the-isr_-enum-values.patch + media-qcom-venus-drop-extra-padding-in-nv12-raw-size.patch + ext4-fix-logflush-shutdown-ordering-to-allow-ordered.patch + arm-imx3-fix-ccm-node-reference-leak.patch + arm-imx31-fix-iim-mapping-leak-in-revision-check.patch + scsi-revert-scsi-fix-sas_user_scan-to-handle-wildcar.patch + scsi-pm8001-fix-error-code-in-non_fatal_log_show.patch + mm-fake-numa-fix-under-allocation-detection-in-unifo.patch + lib-test_meminit-use-for-bools.patch + bpftool-use-libbpf-error-code-for-flow-dissector-que.patch + perf-x86-amd-core-always-use-the-nmi-latency-mitigat.patch + ocfs2-rebase-copied-fsdlm-lvb-pointers-in-locking_st.patch + ocfs2-fix-buffer-head-management-in-ocfs2_read_block.patch + ocfs2-reject-fitrim-ranges-shorter-than-a-cluster.patch + ocfs2-dlm-require-a-ref-for-locking_state-debugfs-op.patch + ocfs2-fix-race-between-ocfs2_control_install_private.patch + netfilter-nfnetlink_osf-fix-mss-parsing-on-big-endia.patch + netfilter-synproxy-protect-nf_ct_seqadj_init-with-co.patch + netfilter-conntrack-call-nf_ct_gre_keymap_destroy-if.patch + bpf-update-transport_header-when-encapsulating-udp-t.patch + wifi-wcn36xx-fix-oob-read-from-firmware-count-in-pri.patch + riscv-stacktrace-remove-bogus-0x4-offset-in-non-fp-w.patch + acpi-ipmi-fix-message-kref-handling-on-dead-device.patch + cpufreq-documentation-fix-conservative-governor-freq.patch + spi-ep93xx-fix-double-free-of-zeropage-on-dma-setup-.patch + firmware_loader-fix-recursive-lock-in-device_cache_f.patch + configfs-fix-lockless-traversals-of-s_children.patch + pinctrl-mediatek-mt8516-fix-schmitt-trigger-register.patch + pinctrl-mediatek-mt8167-fix-schmitt-trigger-register.patch + hwspinlock-qcom-avoid-uninitialized-struct-members.patch + btrfs-fix-invalid-pointer-dereference-in-__btrfs_run.patch + fbdev-sm501fb-fix-buffer-errors-in-of-binding-code.patch + ib-mlx4-fill-in-the-access_flags-if-ib_mr_rereg_acce.patch + vhost-vdpa-validate-virtqueue-index-in-mmap-and-faul.patch + tools-virtio-check-mmap-return-value-in-vringh_test.patch + bonding-3ad-fix-mux-port-state-on-oper-down.patch + fs-efs-remove-unneeded-debug-prints.patch + rdma-mlx5-fix-undefined-shift-of-user-rq-wqe-size.patch + asoc-fsl-fsl_audmix-validate-written-enum-values.patch + asoc-tegra-tegra210_ahub-validate-written-enum-value.patch + net-fib_rules-don-t-dump-dying-fib_rule-in-fib_rules.patch + sctp-validate-embedded-address-parameter-length.patch + net-sched-sch_hfsc-don-t-make-class-passive-twice.patch + tipc-require-net-admin-for-tipcv2-netlink-mutators.patch + tipc-prevent-snt_unacked-underflow-on-conn_ack.patch + crypto-marvell-octeontx-fix-dma-cleanup-using-wrong-.patch + crypto-cavium-cpt-fix-dma-cleanup-using-wrong-loop-i.patch + crypto-rng-free-default-rng-on-module-exit.patch + spi-xilinx-use-fifo-occupancy-register-to-determine-.patch + net-sched-sch_fq_codel-do-not-call-qdisc_tree_reduce.patch + net-sched-sch_codel-do-not-call-qdisc_tree_reduce_ba.patch + kcm-use-write_once-when-changing-lower-socket-callba.patch + netfilter-nf_conncount-callers-must-hold-rcu-read-lo.patch + bpf-sockmap-reject-overflowing-copy-len-in-bpf_msg_p.patch + bpf-sockmap-fix-integer-overflow-in-bpf_msg_pop_data.patch + mips-mm-fix-out-of-bounds-write-in-maar_res_walk.patch + powerpc-perf-fix-preempt-count-underflow-in-fsl_emb_.patch + powerpc-powernv-fix-preempt-count-leak-in-pnv_kexec_.patch + powerpc-kexec-fix-double-get_cpu-imbalance-in-kexec_.patch + keys-use-acquire-when-reading-state-in-keyring-searc.patch + tipc-fix-uaf-in-tipc_l2_send_msg.patch + tcp-ipv6-clamp-default-adverting-mss-to-avoid-gso_by.patch + ocfs2-fix-circular-locking-dependency-in-ocfs2_dio_e.patch + net-9p-fix-race-condition-on-rdma-state-in-trans_rdm.patch + staging-nvec-fix-use-after-free-in-nvec_rx_completed.patch + coresight-cti-fix-dt-filter-signals-silently-ignored.patch + x86-platform-olpc-xo15-drop-wakeup-source-on-driver-.patch + platform-x86-xo15-ebook-fix-wakeup-source-and-gpe-ha.patch + perf-sched-add-missing-mmap2-handler-in-timehist.patch + staging-most-video-avoid-double-free-on-video-regist.patch + usb-host-max3421-fix-shift-out-of-bounds-in-max3421_.patch + usb-host-max3421-reject-hub-port-requests-for-non-ex.patch + char-tlclk-fix-use-after-free-in-tlclk_cleanup.patch + iio-light-si1133-reset-counter-to-prevent-race-condi.patch + iio-light-si1133-prevent-race-condition-on-timeout.patch + iio-magnetometer-ak8975-fix-potential-kernel-stack-m.patch + iio-accel-mma8452-handle-i2c-read-error-s-in-mma8452.patch + hid-logitech-hidpp-remove-excess-kernel-doc-member-i.patch + perf-fix-off-by-one-stack-buffer-overflow-in-kallsym.patch + perf-sched-clean-up-idle_threads-entry-on-init-failu.patch + perf-sched-replace-bug_on-and-add-null-checks-in-rep.patch + perf-mmap-fix-null-deref-in-aio-cleanup-on-alloc-fai.patch + perf-c2c-fix-use-after-free-in-he__get_c2c_hists-err.patch + dmaengine-fix-possible-use-after-free.patch + clk-qcom-a53-corrected-frequency-multiplier-for-1152.patch + pnfs-filelayout-fix-cheking-if-a-layout-is-striped.patch + nfsv4-pnfs-defer-return_range-callbacks-until-after-.patch + nfsv4-flexfiles-honor-ff_flags_no_io_thru_mds-on-fat.patch + nfsv4-flexfiles-honor-ff_flags_no_io_thru_mds-in-pg_.patch + pci-mediatek-fix-operator-precedence-in-pcie_fts_num.patch + perf-tools-fix-get_max_num-size_t-underflow-on-empty.patch + perf-tools-use-perf_env__get_cpu_topology-in-machine.patch + pci-rcar-host-remove-unused-list_head-res.patch + perf-sched-fix-idle-hist-callchain-display-using-wro.patch + perf-bpf-use-scnprintf-in-snprintf_hex-and-synthesiz.patch + perf-hists-fix-snprintf-in-hists__scnprintf_title-ui.patch + perf-pmu-fix-perf_pmu__parse_scale-unit-oob-access-o.patch + tools-lib-api-fix-missing-null-termination-in-filena.patch + perf-symbols-fix-signed-overflow-in-sysfs__read_buil.patch + perf-symbols-bounds-check-.gnu_debuglink-section-dat.patch + perf-tools-fix-thread__set_comm_from_proc-on-empty-c.patch + perf-symbols-bounds-check-descsz-in-sysfs__read_buil.patch + tools-lib-api-fix-filename__write_int-writing-uninit.patch + tools-lib-api-fix-mount_overload-snprintf-truncation.patch + perf-bpf-add-null-check-for-btf__type_by_id-in-synth.patch + perf-symbols-add-bounds-checks-to-elf_read_build_id-.patch + perf-symbols-add-bounds-checks-to-read_build_id-note.patch + pci-mediatek-fix-possible-truncation-in-mtk_pcie_par.patch + pci-mediatek-use-actual-physical-address-instead-of-.patch + apparmor-check-label-build-before-no_new_privs-test.patch + apparmor-aa_label_alloc-use-aa_label_free-on-alloc-f.patch + apparmor-grab-ns-lock-and-refresh-when-looking-up-ch.patch + apparmor-fix-potential-uaf-in-aa_replace_profiles.patch + apparmor-aa_getprocattr-free-procattr-leak-on-format.patch + apparmor-put-secmark-label-after-secid-lookup.patch + i3c-master-prevent-reuse-of-dynamic-address-on-devic.patch + apparmor-fix-label-can-not-be-immediately-before-a-d.patch + sparc-led-avoid-trimming-a-newline-from-empty-writes.patch + perf-symbols-break-infinite-loop-on-zero-filled-note.patch + perf-tools-use-snprintf-for-root_dir-path-constructi.patch + perf-bpf-validate-func_info_rec_size-and-sub_id-in-s.patch + xfrm-validate-selector-family-and-prefixlen-during-m.patch + perf-machine-use-snprintf-for-guestmount-path-constr.patch + octeontx2-pf-fix-leak-of-sq-timestamp-buffer-on-tear.patch + net-psample-fix-info-leak-in-psample_attr_data.patch + sctp-hold-socket-lock-when-dumping-endpoints-in-sctp.patch + arm64-hw_breakpoint-reject-unaligned-watchpoints-tha.patch + thermal-intel-fix-dangling-resources-on-thermal_thro.patch + acpi-resource-amend-kernel-doc-style.patch + ieee802154-remove-warn_on-in-cfg802154_pernet_exit.patch + ieee802154-fix-kernel-infoleak-in-dgram_recvmsg.patch + netfilter-ipset-fix-order-of-kfree_rcu-and-rcu_assig.patch + netfilter-nft_meta_bridge-fix-nft_meta_bri_iifpvid-s.patch + irqchip-crossbar-fix-parent-domain-resource-leak.patch + selftests-mm-clarify-alternate-unmapping-in-compacti.patch + selftests-mm-allow-pud-level-entries-in-compound-tes.patch + rtc-abx80x-fix-the-rtc_vl_clr-clearing-all-status-fl.patch + rtc-ds1307-handle-oscillator-stop-flag-for-ds1337-ds.patch + bpf-fix-stack-slot-index-in-nospec-checks.patch + drm-edid-fix-oob-read-in-drm_parse_tiled_block.patch + ipv6-fix-null-ptr-deref-in-fib6_nh_mtu_change.patch + ipv4-fib-don-t-ignore-error-route-in-local-main-tabl.patch + netfilter-nf_conncount-prevent-connlimit-drops-for-e.patch + netfilter-nft_synproxy-stop-bypassing-the-priv-info-.patch + alpha-pci-add-security_locked_down-check-to-pci_mmap.patch + alpha-pci-fix-__pci_mmap_fits-overflow-for-zero-leng.patch + net-dsa-sja1105-round-up-ptp-perout-pin-duration.patch + ipv6-fix-error-handling-in-disable_ipv6-sysctl.patch + ipv6-fix-error-handling-in-ignore_routes_with_linkdo.patch + ipv6-fix-error-handling-in-forwarding-sysctl.patch + ipv6-fix-error-handling-in-disable_policy-sysctl.patch + smb-client-preserve-errors-from-smb2_set_sparse.patch + rtc-ds1307-fix-off-by-one-issue-with-wday-for-rx8130.patch + rtc-cmos-unregister-hpet-irq-handler-on-probe-failur.patch + net-mvneta-re-enable-percpu-interrupt-on-resume.patch + net-sungem-fix-probe-error-cleanup.patch + tracing-probes-fix-typo-in-a-log-message.patch + spi-sh-msiof-abort-transfers-when-reset-times-out.patch + gpio-mvebu-fail-probe-if-gpiochip-registration-fails.patch + gpio-htc-egpio-use-managed-gpiochip-registration.patch + seg6-validate-srh-length-before-reading-fixed-fields.patch + hwmon-adm1275-prevent-reading-uninitialized-stack.patch + usbnet-gl620a-fix-out-of-bounds-read-in-genelink_rx_.patch + tracing-events-fix-to-check-the-simple_tsk_fn-creati.patch + virtio_net-disable-cb-when-napi-is-busy-polled.patch + cxgb4-fix-decode-strings-dump-for-t6-adapters.patch + gpio-timberdale-return-enomem-on-dynamic-memory-allo.patch + net-sched-hhf-clear-heavy-hitter-state-on-reset.patch + afs-fix-error-code-in-afs_extract_vl_addrs.patch + afs-fix-callback-service-message-parsers-to-pass-thr.patch + afs-fix-vllist-leak.patch + afs-fix-unchecked-length-string-display-in-debug-sta.patch + ata-sata_gemini-unwind-clocks-on-ide-pinctrl-errors.patch + hid-picolcd-prevent-null-pointer-dereference-in-pico.patch + hid-core-fix-oob-read-in-hid_get_report-for-numbered.patch + net-usb-net1080-validate-packet_len-before-pad-byte-.patch + gue-validate-remcsum-private-option-length.patch + netfilter-xt_u32-reject-invalid-shift-counts.patch + netfilter-xt_rateest-fix-u64-truncation-in-xt_ratees.patch + netfilter-ip6tables-mark-malformed-ipv6-extension-he.patch + qede-fix-off-by-one-in-bd-ring-consumption-on-build_.patch + net-qualcomm-rmnet-simplify-some-byte-order-logic.patch + net-qualcomm-rmnet-kill-rmnet_map_get_-accessor-macr.patch + net-qualcomm-rmnet-use-masks-instead-of-c-bit-fields.patch + net-qualcomm-rmnet-don-t-use-c-bit-fields-in-rmnet-c.patch + net-ethernet-rmnet-support-for-ingress-mapv5-checksu.patch + net-qualcomm-rmnet-add-tx-packets-aggregation.patch + net-qualcomm-rmnet-validate-map-frame-length-before-.patch + net-smc-fix-uaf-in-smc_cdc_rx_handler-by-pinning-the.patch + bluetooth-iso-exclude-rfu-bits-from-iso_sdu_length.patch + bluetooth-bpa10x-avoid-oob-read-of-revision-string-i.patch + ring-buffer-fix-event-length-with-forced-8-byte-alig.patch + net-usb-lan78xx-disable-vlan-filter-in-promiscuous-m.patch + net-sched-cake-reject-overhead-values-that-underflow.patch + mld-convert-from-timer-to-delayed-work.patch + mld-get-rid-of-inet6_dev-mc_lock.patch + mld-convert-ipv6_mc_socklist-sflist-to-rcu.patch + mld-convert-ip6_sf_list-to-rcu.patch + mld-convert-ifmcaddr6-to-rcu.patch + mld-add-new-workqueues-for-process-mld-events.patch + mld-add-mc_lock-for-protecting-per-interface-mld-dat.patch + ipv6-fix-skb-drops-in-igmp6_event_query-and-igmp6_ev.patch + ipv6-mcast-replace-locking-comments-with-lockdep-ann.patch + ipv6-mcast-fix-potential-uaf-in-mld-delayed-work.patch + ipvs-pass-parsed-transport-offset-to-state-handlers.patch + ipvs-use-parsed-transport-offset-in-tcp-state-lookup.patch + ipvs-fix-pmtu-for-gue-gre-tunnel-icmp-errors.patch + ipvs-ensure-inner-headers-in-icmp-errors-are-in-head.patch + dm-era-fix-null-pointer-dereference-in-metadata_open.patch + regulator-core-make-regulator_lock_two-logic-easier-.patch + regulator-core-regulator_lock_two-should-test-for-ed.patch + net-mlx5-fix-l3-tunnel-entropy-refcount-leak.patch + smb-client-fix-overflow-in-passthrough-ioctl-bounds-.patch diff --cc queue-5.15/series index aa48cda28b,de08e9a25b..72e981478d --- a/queue-5.15/series +++ b/queue-5.15/series @@@ -205,12 -205,346 +205,355 @@@ crypto-sun4i-ss-remove-insecure-and-unu crypto-crypto4xx-remove-ahash-related-code.patch crypto-crypto4xx-remove-insecure-and-unused-rng_alg.patch crypto-hisi-trng-remove-crypto_rng-interface.patch +media-uvcvideo-avoid-partial-metadata-buffers.patch +media-uvcvideo-fix-buffer-sequence-in-frame-gaps.patch +dt-bindings-media-sun4i-a10-video-engine-add-interconnect-properties.patch +serial-msm-disable-dma-for-kernel-console-uart.patch +serial-8250_omap-clear-rx_running-on-zero-length-dma-completes.patch +afs-fix-netns-teardown-to-cancel-the-preallocation-charger.patch +afs-fix-null-pointer-dereference-in-afs_get_tree.patch +afs-fix-further-netns-teardown-to-cancel-the-preallocation-charger.patch +fbcon-fix-null-pointer-dereference-for-a-console-without-vc_data.patch + drm-tidss-drop-extra-drm_mode_config_reset-call.patch + drm-radeon-fix-memory-leak-in-radeon_ring_restore-on.patch + driver-core-use-read_once-for-dev-driver-in-dev_has_.patch + wifi-rtw88-fix-oob-read-from-firmware-rx-descriptor-.patch + kconfig-fix-potential-null-pointer-dereference-in-co.patch + scsi-buslogic-remove-bus_to_virt.patch + scsi-add-has_ioport-dependencies.patch + scsi-advansys-drop-isa_dma_api-remnants.patch + wifi-ath9k-fix-oob-access-from-firmware-tx-status-qu.patch + arm-dts-am335x-sl50-fix-audio-bitclock-and-frame-mas.patch + watchdog-sp5100_tco-use-efch-mmio-for-newer-hygon-fc.patch + watchdog-sprd_wdt-remove-redundant-sprd_wdt_disable-.patch + media-cedrus-fix-failure-to-clean-up-hardware-on-pro.patch + pinctrl-sunxi-fix-regulator-leak-in-sunxi_pmx_reques.patch + crypto-atmel-sha204a-fix-blocking-and-non-blocking-r.patch + crypto-ecrdsa-fix-unknown-oid-check-in-ecrdsa_param_.patch + crypto-asymmetric_keys-fix-oob-read-in-pefile_digest.patch + iommu-amd-fix-a-stale-comment-about-which-legacy-mod.patch + clk-scmi-fix-clock-rate-rounding.patch + drm-hisilicon-hibmc-move-display-contrl-config-to-hi.patch + drm-hisilicon-hibmc-use-clock-to-look-up-the-pll-val.patch + evm-terminate-and-bound-the-evm_xattrs-read-buffer.patch + thermal-hwmon-fix-critical-temperature-attribute-rem.patch + net-sched-sch_hfsc-annotate-data-races-in-hfsc_dump_.patch + crypto-ccp-treat-zero-length-cert-chain-as-query-for.patch + net-sched-sch_htb-do-not-change-sch-flags-in-htb_dum.patch + net-sched-sch_htb-annotate-data-races-i.patch + ipv6-addrconf-bail-out-of-dad_failure-when-state-is-.patch + rdma-hns-fix-arithmetic-overflow-in-calc_hem_config.patch + rdma-mlx5-fix-devx-subscribe-event-unwind-null-deref.patch + rdma-srpt-fix-integer-overflow-in-immediate-data-len.patch + media-atomisp-fix-memory-leak-in-atomisp_fixed_patte.patch + firmware-arm_scmi-read-sensor-config-as-32-bit-value.patch + sysfs-clamp-show-return-value-in-sysfs_kf_read.patch + net-sched-sch_drr-annotate-data-races-around-cl-defi.patch + media-rockchip-rga-fix-too-small-buffer-size.patch + firmware-arm_scmi-fix-oob-in-scmi_power_name_get.patch + device-property-fix-fwnode-reference-leak-in-fwnode_.patch + cpufreq-documentation-fix-sampling_down_factor-range.patch + cpufreq-conservative-simplify-frequency-limit-handli.patch + pwm-imx27-fix-variable-truncation-in-.apply.patch + bus-sunxi-rsb-always-check-register-address-validity.patch + rdma-irdma-fix-out-of-bounds-write-in-irdma_copy_use.patch + ib-mlx4-fix-refcount-leak-in-add_port-error-path.patch + rdma-hns-fix-warning-in-poll-cq-direct-mode.patch + pm-sleep-use-complete-in-device_pm_sleep_init.patch + mips-fix-big-endian-stack-argument-fetching-in-o32-w.patch + mips-dec-remove-do_irq-call-indirection.patch + mips-ralink-mt7621-add-missing-__iomem.patch + mips-n64-add-__iomem-for-writel-call.patch + mtd-spi-nor-drop-duplicate-kconfig-dependency.patch + nvme-multipath-fix-flex-array-size-in-struct-nvme_ns.patch + workqueue-drop-spurious-from-print_worker_info-fn-de.patch + ipv6-guard-against-possible-null-deref-in-__in6_dev_.patch + net-sched-cls_bpf-prevent-unbounded-recursion-in-off.patch + drm-tegra-dc-fix-device-node-reference-leak-in-tegra.patch + drm-tegra-fix-iommu_map_sgtable-return-value-check.patch + drm-nouveau-bios-specify-correct-display-fuse-regist.patch + libbpf-fix-uaf-in-strset__add_str.patch + dax-kmem-account-for-partial-discontiguous-resource-.patch + rapidio-tsi721-prevent-a-bad-dereference-in-tsi721_d.patch + ocfs2-don-t-bug_on-an-invalid-journal-dinode.patch + ocfs2-kill-osb-system_file_mutex-lock.patch + crypto-hisilicon-qm-disable-error-report-before-flr.patch + drm-msm-dp-fix-hpd-state-status-bit-shift-value.patch + drm-msm-dp-fix-the-isr_-enum-values.patch + edac-skx_common-skx-fix-ubsan-shift-out-of-bounds-in.patch + media-qcom-venus-drop-extra-padding-in-nv12-raw-size.patch + media-qcom-venus-relax-encoder-frame-blur-dimension-.patch + media-qcom-venus-relax-encoder-frame-blur-step-size-.patch + md-raid10-reset-read_slot-when-reusing-r10bio-for-di.patch + ext4-fix-logflush-shutdown-ordering-to-allow-ordered.patch + arm-imx3-fix-ccm-node-reference-leak.patch + arm-imx31-fix-iim-mapping-leak-in-revision-check.patch + scsi-revert-scsi-fix-sas_user_scan-to-handle-wildcar.patch + scsi-pm8001-fix-error-code-in-non_fatal_log_show.patch + bpf-fix-uaf-by-restoring-rcu-delayed-inode-freeing-i.patch + mm-fake-numa-fix-under-allocation-detection-in-unifo.patch + lib-test_meminit-use-for-bools.patch + configfs_lookup-don-t-leave-s_dentry-dangling-on-fai.patch + bpftool-use-libbpf-error-code-for-flow-dissector-que.patch + perf-x86-amd-core-always-use-the-nmi-latency-mitigat.patch + ocfs2-rebase-copied-fsdlm-lvb-pointers-in-locking_st.patch + ocfs2-fix-buffer-head-management-in-ocfs2_read_block.patch + ocfs2-reject-fitrim-ranges-shorter-than-a-cluster.patch + ocfs2-dlm-require-a-ref-for-locking_state-debugfs-op.patch + ocfs2-fix-race-between-ocfs2_control_install_private.patch + netfilter-nfnetlink_osf-fix-mss-parsing-on-big-endia.patch + netfilter-synproxy-protect-nf_ct_seqadj_init-with-co.patch + netfilter-conntrack-call-nf_ct_gre_keymap_destroy-if.patch + ib-cm-fix-av-cm-device-leak-on-an-error-path-in-cm_i.patch + rdma-irdma-fix-oob-read-during-cq-mr-registration.patch + bpf-update-transport_header-when-encapsulating-udp-t.patch + wifi-wcn36xx-fix-oob-read-from-firmware-count-in-pri.patch + riscv-stacktrace-remove-bogus-0x4-offset-in-non-fp-w.patch + alsa-seq-introduce-sndrv_seq_ioctl_user_pversion-ioc.patch + alsa-seq-add-ump-support.patch + alsa-seq-clear-variable-event-pointer-on-read.patch + acpi-ipmi-fix-message-kref-handling-on-dead-device.patch + cpufreq-documentation-fix-conservative-governor-freq.patch + ib-mlx5-don-t-take-the-rereg_mr-fallback-without-a-n.patch + ib-mlx5-properly-support-implicit-odp-rereg_mr.patch + spi-ep93xx-fix-double-free-of-zeropage-on-dma-setup-.patch + firmware_loader-fix-recursive-lock-in-device_cache_f.patch + configfs-fix-lockless-traversals-of-s_children.patch + watchdog-unregister-pm-notifier-on-watchdog-unregist.patch + pinctrl-mediatek-mt8516-fix-schmitt-trigger-register.patch + pinctrl-mediatek-mt8167-fix-schmitt-trigger-register.patch + vmalloc-fix-null-pointer-dereference-in-is_vm_area_h.patch + hwspinlock-qcom-avoid-uninitialized-struct-members.patch + btrfs-fix-invalid-pointer-dereference-in-__btrfs_run.patch + fbdev-sm501fb-fix-buffer-errors-in-of-binding-code.patch + ib-mlx4-fill-in-the-access_flags-if-ib_mr_rereg_acce.patch + vduse-hold-vduse_lock-across-idr-lookup-in-open-path.patch + vhost-vdpa-validate-virtqueue-index-in-mmap-and-faul.patch + vduse-requeue-failed-read-to-send_list-head.patch + tools-virtio-check-mmap-return-value-in-vringh_test.patch + bonding-3ad-fix-mux-port-state-on-oper-down.patch + selftests-bpf-fix-bpf_iter-task_vma-test.patch + bpf-tighten-cgroup-storage-cookie-checks-for-prog-ar.patch + s390-process-fix-kernel-thread-function-pointer-type.patch + fs-efs-remove-unneeded-debug-prints.patch + rdma-mlx5-remove-raw-rss-qp-restrack-tracking.patch + rdma-mlx5-fix-undefined-shift-of-user-rq-wqe-size.patch + asoc-codecs-hdac_hdmi-validate-written-enum-value.patch + asoc-fsl-fsl_audmix-validate-written-enum-values.patch + asoc-tegra-tegra210_ahub-validate-written-enum-value.patch + net-fib_rules-don-t-dump-dying-fib_rule-in-fib_rules.patch + bridge-cfm-reject-invalid-ccm-interval-at-configurat.patch + sctp-validate-embedded-address-parameter-length.patch + net-sched-sch_hfsc-don-t-make-class-passive-twice.patch + tipc-require-net-admin-for-tipcv2-netlink-mutators.patch + tipc-prevent-snt_unacked-underflow-on-conn_ack.patch + tipc-reject-inverted-service-ranges-from-peer-bindin.patch + crypto-marvell-octeontx-fix-dma-cleanup-using-wrong-.patch + crypto-cavium-cpt-fix-dma-cleanup-using-wrong-loop-i.patch + crypto-rng-free-default-rng-on-module-exit.patch + spi-xilinx-use-fifo-occupancy-register-to-determine-.patch + asoc-adau1372-clear-pll_en-on-failed-pll-lock-withou.patch + net-sched-sch_fq_codel-do-not-call-qdisc_tree_reduce.patch + net-sched-sch_codel-do-not-call-qdisc_tree_reduce_ba.patch + net-mana-initialize-gdma-queue-id-to-invalid_queue_i.patch + net-mana-guard-tx-wq-object-destroy-with-invalid_man.patch + bpf-run-generic-devmap-egress-prog-on-private-skb.patch + kcm-use-write_once-when-changing-lower-socket-callba.patch + netfilter-nf_conncount-callers-must-hold-rcu-read-lo.patch + smb-client-always-return-a-value-for-fs_ioc_getflags.patch + bpf-sockmap-reject-overflowing-copy-len-in-bpf_msg_p.patch + bpf-sockmap-fix-integer-overflow-in-bpf_msg_pop_data.patch + mips-mm-fix-out-of-bounds-write-in-maar_res_walk.patch + powerpc-perf-fix-preempt-count-underflow-in-fsl_emb_.patch + powerpc-powernv-fix-preempt-count-leak-in-pnv_kexec_.patch + powerpc-kexec-fix-double-get_cpu-imbalance-in-kexec_.patch + keys-use-acquire-when-reading-state-in-keyring-searc.patch + tipc-fix-uaf-in-tipc_l2_send_msg.patch + tcp-ipv6-clamp-default-adverting-mss-to-avoid-gso_by.patch + ksmbd-fix-use-after-free-in-same_client_has_lease.patch + ocfs2-fix-circular-locking-dependency-in-ocfs2_dio_e.patch + net-9p-fix-race-condition-on-rdma-state-in-trans_rdm.patch + staging-nvec-fix-use-after-free-in-nvec_rx_completed.patch + coresight-cti-fix-dt-filter-signals-silently-ignored.patch + coresight-etm4x-correct-trcvmidcctlr1-save-and-resto.patch + x86-platform-olpc-xo15-drop-wakeup-source-on-driver-.patch + platform-x86-xo15-ebook-fix-wakeup-source-and-gpe-ha.patch + perf-sched-add-missing-mmap2-handler-in-timehist.patch + phy-phy-can-transceiver-check-driver-match-and-drive.patch + staging-most-video-avoid-double-free-on-video-regist.patch + usb-host-max3421-fix-shift-out-of-bounds-in-max3421_.patch + usb-host-max3421-reject-hub-port-requests-for-non-ex.patch + char-tlclk-fix-use-after-free-in-tlclk_cleanup.patch + thunderbolt-test-add-kunit-regression-tests-for-xdom.patch + thunderbolt-add-kunit-test-for-tb_property_merge_dir.patch + thunderbolt-test-add-kunit-tests-for-property-parser.patch + perf-header-sanity-check-header_event_desc-attr.size.patch + iio-light-si1133-reset-counter-to-prevent-race-condi.patch + iio-light-si1133-prevent-race-condition-on-timeout.patch + iio-magnetometer-ak8975-fix-potential-kernel-stack-m.patch + iio-accel-mma8452-handle-i2c-read-error-s-in-mma8452.patch + hid-logitech-hidpp-remove-excess-kernel-doc-member-i.patch + drm-amd-display-add-missing-kdoc-for-allm-parameters.patch + dmaengine-imx-sdma-refine-spba-bus-searching-in-prob.patch + perf-fix-off-by-one-stack-buffer-overflow-in-kallsym.patch + perf-mmap-guard-cpu__get_node-return-in-aio_bind.patch + perf-sched-clean-up-idle_threads-entry-on-init-failu.patch + perf-sched-replace-bug_on-and-add-null-checks-in-rep.patch + perf-mmap-fix-null-deref-in-aio-cleanup-on-alloc-fai.patch + perf-c2c-fix-use-after-free-in-he__get_c2c_hists-err.patch + dmaengine-qcom-gpi-set-dma_private-capability.patch + dmaengine-fix-possible-use-after-free.patch + clk-qcom-a53-corrected-frequency-multiplier-for-1152.patch + pnfs-filelayout-fix-cheking-if-a-layout-is-striped.patch + nfsv4-pnfs-defer-return_range-callbacks-until-after-.patch + nfsv4-flexfiles-honor-ff_flags_no_io_thru_mds-on-fat.patch + nfsv4-flexfiles-honor-ff_flags_no_io_thru_mds-in-pg_.patch + pci-mediatek-fix-operator-precedence-in-pcie_fts_num.patch + perf-tools-fix-get_max_num-size_t-underflow-on-empty.patch + perf-tools-use-perf_env__get_cpu_topology-in-machine.patch + pci-rcar-host-remove-unused-list_head-res.patch + perf-sched-fix-idle-hist-callchain-display-using-wro.patch + perf-bpf-use-scnprintf-in-snprintf_hex-and-synthesiz.patch + perf-hists-fix-snprintf-in-hists__scnprintf_title-ui.patch + xprtrdma-fix-bcall-rep-leak-and-unbounded-peek.patch + perf-pmu-fix-pmu_id-heap-underwrite-on-empty-identif.patch + perf-pmu-fix-perf_pmu__parse_scale-unit-oob-access-o.patch + tools-lib-api-fix-missing-null-termination-in-filena.patch + perf-symbols-fix-signed-overflow-in-sysfs__read_buil.patch + perf-symbols-bounds-check-.gnu_debuglink-section-dat.patch + perf-intel-pt-fix-snprintf-size-tracking-bug-in-insn.patch + perf-tools-fix-thread__set_comm_from_proc-on-empty-c.patch + perf-symbols-bounds-check-descsz-in-sysfs__read_buil.patch + tools-lib-api-fix-filename__write_int-writing-uninit.patch + tools-lib-api-fix-mount_overload-snprintf-truncation.patch + perf-bpf-add-null-check-for-btf__type_by_id-in-synth.patch + perf-symbols-add-bounds-checks-to-elf_read_build_id-.patch + perf-symbols-add-bounds-checks-to-read_build_id-note.patch + pci-mediatek-fix-possible-truncation-in-mtk_pcie_par.patch + pci-mediatek-use-actual-physical-address-instead-of-.patch + apparmor-check-label-build-before-no_new_privs-test.patch + apparmor-aa_label_alloc-use-aa_label_free-on-alloc-f.patch + apparmor-grab-ns-lock-and-refresh-when-looking-up-ch.patch + apparmor-fix-potential-uaf-in-aa_replace_profiles.patch + apparmor-aa_getprocattr-free-procattr-leak-on-format.patch + apparmor-put-secmark-label-after-secid-lookup.patch + i3c-master-prevent-reuse-of-dynamic-address-on-devic.patch + apparmor-fix-label-can-not-be-immediately-before-a-d.patch + sparc-led-avoid-trimming-a-newline-from-empty-writes.patch + perf-symbols-break-infinite-loop-on-zero-filled-note.patch + perf-tools-use-snprintf-for-root_dir-path-constructi.patch + perf-bpf-validate-func_info_rec_size-and-sub_id-in-s.patch + xfrm-validate-selector-family-and-prefixlen-during-m.patch + perf-machine-use-snprintf-for-guestmount-path-constr.patch + octeontx2-pf-fix-leak-of-sq-timestamp-buffer-on-tear.patch + net-psample-fix-info-leak-in-psample_attr_data.patch + sctp-hold-socket-lock-when-dumping-endpoints-in-sctp.patch + dpaa2-switch-fix-vlan-upper-check-not-rejecting-brid.patch + arm64-hw_breakpoint-reject-unaligned-watchpoints-tha.patch + thermal-intel-fix-dangling-resources-on-thermal_thro.patch + acpi-resource-amend-kernel-doc-style.patch + ieee802154-remove-warn_on-in-cfg802154_pernet_exit.patch + ieee802154-fix-kernel-infoleak-in-dgram_recvmsg.patch + netfilter-ipset-fix-order-of-kfree_rcu-and-rcu_assig.patch + netfilter-nf_reject-skip-iphdr-options-when-looking-.patch + netfilter-nft_meta_bridge-fix-nft_meta_bri_iifpvid-s.patch + irqchip-crossbar-fix-parent-domain-resource-leak.patch + selftests-mm-clarify-alternate-unmapping-in-compacti.patch + selftests-mm-allow-pud-level-entries-in-compound-tes.patch + selftests-mm-fix-exclusive_cow-test-fork-handling.patch + rtc-abx80x-fix-the-rtc_vl_clr-clearing-all-status-fl.patch + rtc-ds1307-handle-oscillator-stop-flag-for-ds1337-ds.patch + bpf-fix-stack-slot-index-in-nospec-checks.patch + bpf-zero-initialize-the-fib-lookup-flow-struct.patch + drm-edid-fix-oob-read-in-drm_parse_tiled_block.patch + pci-endpoint-pci-epf-vntb-add-check-to-detect-db_cou.patch + pci-endpoint-pci-epf-ntb-add-check-to-detect-db_coun.patch + ksmbd-fix-use-after-free-of-conn-preauth_info-in-con.patch + ipv6-fix-null-ptr-deref-in-fib6_nh_mtu_change.patch + ipv4-fib-don-t-ignore-error-route-in-local-main-tabl.patch + netfilter-nf_conncount-prevent-connlimit-drops-for-e.patch + netfilter-nft_synproxy-stop-bypassing-the-priv-info-.patch + ntb-epf-make-db_valid_mask-cover-only-real-doorbell-.patch + alpha-pci-add-security_locked_down-check-to-pci_mmap.patch + alpha-pci-fix-__pci_mmap_fits-overflow-for-zero-leng.patch + net-bpf-check-master-for-null-in-xdp_master_redirect.patch + net-dsa-sja1105-round-up-ptp-perout-pin-duration.patch + veth-fix-napi-leak-in-xdp-enable-error-path.patch + net-sched-cls_api-handle-tc_act_consumed-in-tcf_qeve.patch + ipv6-fix-error-handling-in-disable_ipv6-sysctl.patch + ipv6-fix-error-handling-in-ignore_routes_with_linkdo.patch + ipv6-fix-error-handling-in-forwarding-sysctl.patch + ipv6-fix-error-handling-in-disable_policy-sysctl.patch + smb-client-preserve-errors-from-smb2_set_sparse.patch + rtc-ds1307-fix-off-by-one-issue-with-wday-for-rx8130.patch + rtc-cmos-unregister-hpet-irq-handler-on-probe-failur.patch + net-mvneta-re-enable-percpu-interrupt-on-resume.patch + net-sungem-fix-probe-error-cleanup.patch + tracing-probes-fix-typo-in-a-log-message.patch + spi-sh-msiof-abort-transfers-when-reset-times-out.patch + gpio-mvebu-fail-probe-if-gpiochip-registration-fails.patch + gpio-htc-egpio-use-managed-gpiochip-registration.patch + seg6-validate-srh-length-before-reading-fixed-fields.patch + qede-fix-out-of-bounds-check-for-cqe-len_list.patch + hwmon-adm1275-prevent-reading-uninitialized-stack.patch + rtnetlink-change-nlk-cb_mutex-role.patch + rtnetlink-add-rtnl_flag_dump_unlocked-flag.patch + inet-allow-ip_valid_fib_dump_req-to-be-called-with-r.patch + ipv6-remove-rtnl-protection-from-inet6_dump_fib.patch + ipv6-fib6-fix-null-deref-in-fib6_walk_continue-on-mu.patch + usbnet-gl620a-fix-out-of-bounds-read-in-genelink_rx_.patch + net-gianfar-dispose-irq-mappings-on-probe-failure-an.patch + bridge-stp-fix-a-potential-use-after-free-when-delet.patch + tracing-events-fix-to-check-the-simple_tsk_fn-creati.patch + tracing-eprobe-read-the-complete-filter_ptr_string-p.patch + irqchip-gic-v3-its-fix-of-node-reference-leak.patch + virtio_net-disable-cb-when-napi-is-busy-polled.patch + cxgb4-fix-decode-strings-dump-for-t6-adapters.patch + net-sched-act_bpf-use-rcu_dereference_bh-to-read-the.patch + gpio-timberdale-return-enomem-on-dynamic-memory-allo.patch + net-sched-hhf-clear-heavy-hitter-state-on-reset.patch + afs-fix-error-code-in-afs_extract_vl_addrs.patch + afs-fix-callback-service-message-parsers-to-pass-thr.patch + afs-fix-vllist-leak.patch + afs-fix-the-volume-afs_volume_rm_tree-is-set-on.patch + afs-fix-unchecked-length-string-display-in-debug-sta.patch + ata-sata_gemini-unwind-clocks-on-ide-pinctrl-errors.patch + hid-picolcd-prevent-null-pointer-dereference-in-pico.patch + hid-core-fix-oob-read-in-hid_get_report-for-numbered.patch + arm64-mm-optimize-tlb-flush-in-unmap_hotplug_-pmd-pu.patch + net-usb-net1080-validate-packet_len-before-pad-byte-.patch + gue-validate-remcsum-private-option-length.patch + netfilter-xt_u32-reject-invalid-shift-counts.patch + netfilter-xt_rateest-fix-u64-truncation-in-xt_ratees.patch + netfilter-ip6tables-mark-malformed-ipv6-extension-he.patch + netfilter-xt_connmark-reject-invalid-shift-parameter.patch + qede-fix-off-by-one-in-bd-ring-consumption-on-build_.patch + net-qualcomm-rmnet-add-tx-packets-aggregation.patch + net-qualcomm-rmnet-validate-map-frame-length-before-.patch + net-smc-fix-uaf-in-smc_cdc_rx_handler-by-pinning-the.patch + bluetooth-iso-exclude-rfu-bits-from-iso_sdu_length.patch + bluetooth-bpa10x-avoid-oob-read-of-revision-string-i.patch + ring-buffer-fix-event-length-with-forced-8-byte-alig.patch + net-usb-lan78xx-disable-vlan-filter-in-promiscuous-m.patch + net-sched-cake-reject-overhead-values-that-underflow.patch + octeontx2-af-debugfs-add-channel-and-channel-mask.patch + octeontx2-af-use-hashed-field-in-mcam-key.patch + octeontx2-af-exact-match-support.patch + octeontx2-af-exact-match-scan-from-kex-profile.patch + octeontx2-af-devlink-configuration-support.patch + octeontx2-af-flr-handler-for-exact-match-table.patch + octeontx2-af-drop-rules-for-npc-mcam.patch + octeontx2-af-allow-mkex-profile-without-dmac-and-add.patch + octeontx2-pf-add-additional-checks-while-configuring.patch + octeontx2-pf-check-dmac-extraction-support-before-fi.patch + ipv6-mcast-replace-locking-comments-with-lockdep-ann.patch + ipv6-mcast-fix-potential-uaf-in-mld-delayed-work.patch + ipvs-pass-parsed-transport-offset-to-state-handlers.patch + ipvs-use-parsed-transport-offset-in-tcp-state-lookup.patch + ipvs-fix-pmtu-for-gue-gre-tunnel-icmp-errors.patch + ipvs-ensure-inner-headers-in-icmp-errors-are-in-head.patch + dm-era-fix-null-pointer-dereference-in-metadata_open.patch + regulator-core-make-regulator_lock_two-logic-easier-.patch + regulator-core-regulator_lock_two-should-test-for-ed.patch + net-mlx5-fix-l3-tunnel-entropy-refcount-leak.patch + smb-client-fix-overflow-in-passthrough-ioctl-bounds-.patch diff --cc queue-6.1/series index 9b2845b75b,8e77795345..7632a7492c --- a/queue-6.1/series +++ b/queue-6.1/series @@@ -265,13 -265,443 +265,453 @@@ crypto-crypto4xx-remove-ahash-related-c crypto-crypto4xx-remove-insecure-and-unused-rng_alg.patch crypto-af_alg-remove-zero-copy-support-from-skcipher.patch crypto-hisi-trng-remove-crypto_rng-interface.patch +media-uvcvideo-avoid-partial-metadata-buffers.patch +media-uvcvideo-fix-buffer-sequence-in-frame-gaps.patch +dt-bindings-media-sun4i-a10-video-engine-add-interconnect-properties.patch +dt-bindings-power-imx93-add-mipi-phy-power-domain.patch +serial-msm-disable-dma-for-kernel-console-uart.patch +serial-8250_omap-clear-rx_running-on-zero-length-dma-completes.patch +afs-fix-netns-teardown-to-cancel-the-preallocation-charger.patch +afs-fix-null-pointer-dereference-in-afs_get_tree.patch +afs-fix-further-netns-teardown-to-cancel-the-preallocation-charger.patch +fbcon-fix-null-pointer-dereference-for-a-console-without-vc_data.patch + drm-tidss-drop-extra-drm_mode_config_reset-call.patch + drm-amdgpu-fix-integer-overflow-in-amdgpu_gem_align_.patch + drm-radeon-fix-memory-leak-in-radeon_ring_restore-on.patch + libbpf-report-error-when-a-negative-kprobe-offset-is.patch + documentation-proc-fix-section-numbering-in-table-of.patch + wifi-cfg80211-fix-grammar-in-mlo-group-key-error-mes.patch + arm64-tegra-fix-tegra234-mgbe-ptp-clock.patch + drm-amdkfd-validate-criu-restored-ids-before-idr_all.patch + driver-core-use-read_once-for-dev-driver-in-dev_has_.patch + wifi-rtw88-fix-oob-read-from-firmware-rx-descriptor-.patch + kconfig-fix-potential-null-pointer-dereference-in-co.patch + wifi-ath9k-fix-oob-access-from-firmware-tx-status-qu.patch + arm-dts-am335x-sl50-fix-audio-bitclock-and-frame-mas.patch + watchdog-sp5100_tco-use-efch-mmio-for-newer-hygon-fc.patch + watchdog-sprd_wdt-remove-redundant-sprd_wdt_disable-.patch + media-cedrus-fix-failure-to-clean-up-hardware-on-pro.patch + pinctrl-sunxi-fix-regulator-leak-in-sunxi_pmx_reques.patch + arm64-dts-rockchip-fix-rk809-interrupt-pin-on-rk3566.patch + vxlan-fix-potential-null-ptr-deref-in-vxlan_gro_prep.patch + crypto-atmel-sha204a-fix-blocking-and-non-blocking-r.patch + crypto-ecrdsa-fix-unknown-oid-check-in-ecrdsa_param_.patch + crypto-asymmetric_keys-fix-oob-read-in-pefile_digest.patch + iommu-amd-fix-a-stale-comment-about-which-legacy-mod.patch + arm64-dts-mediatek-mt8192-asurada-move-pcie-dma-boun.patch + clk-scmi-fix-clock-rate-rounding.patch + drm-hisilicon-hibmc-move-display-contrl-config-to-hi.patch + drm-hisilicon-hibmc-use-clock-to-look-up-the-pll-val.patch + evm-terminate-and-bound-the-evm_xattrs-read-buffer.patch + thermal-hwmon-fix-critical-temperature-attribute-rem.patch + net-sched-sch_hfsc-annotate-data-races-in-hfsc_dump_.patch + crypto-ccp-treat-zero-length-cert-chain-as-query-for.patch + net-sched-sch_htb-do-not-change-sch-flags-in-htb_dum.patch + net-sched-sch_htb-annotate-data-races-i.patch + ipv6-addrconf-bail-out-of-dad_failure-when-state-is-.patch + rdma-hns-fix-arithmetic-overflow-in-calc_hem_config.patch + rdma-mlx5-fix-devx-subscribe-event-unwind-null-deref.patch + rdma-srpt-fix-integer-overflow-in-immediate-data-len.patch + media-atomisp-fix-memory-leak-in-atomisp_fixed_patte.patch + firmware-arm_scmi-read-sensor-config-as-32-bit-value.patch + sysfs-clamp-show-return-value-in-sysfs_kf_read.patch + net-sched-sch_drr-annotate-data-races-around-cl-defi.patch + media-rockchip-rga-fix-too-small-buffer-size.patch + firmware-arm_scmi-fix-oob-in-scmi_power_name_get.patch + device-property-fix-fwnode-reference-leak-in-fwnode_.patch + driver-core-use-mod_delayed_work-to-prevent-lost-def.patch + cpufreq-documentation-fix-sampling_down_factor-range.patch + cpufreq-conservative-simplify-frequency-limit-handli.patch + pwm-imx27-fix-variable-truncation-in-.apply.patch + bus-sunxi-rsb-always-check-register-address-validity.patch + rdma-irdma-fix-out-of-bounds-write-in-irdma_copy_use.patch + ib-mlx4-fix-refcount-leak-in-add_port-error-path.patch + rdma-hns-fix-warning-in-poll-cq-direct-mode.patch + rdma-counter-fix-incorrect-port-index-in-rdma_counte.patch + pm-sleep-use-complete-in-device_pm_sleep_init.patch + mips-fix-big-endian-stack-argument-fetching-in-o32-w.patch + mips-dec-remove-do_irq-call-indirection.patch + mips-ralink-mt7621-add-missing-__iomem.patch + mips-n64-add-__iomem-for-writel-call.patch + mtd-spi-nor-drop-duplicate-kconfig-dependency.patch + alsa-seq-midi-serialize-output-teardown-with-event_i.patch + nvme-multipath-fix-flex-array-size-in-struct-nvme_ns.patch + workqueue-drop-spurious-from-print_worker_info-fn-de.patch + ipv6-guard-against-possible-null-deref-in-__in6_dev_.patch + net-sched-cls_bpf-prevent-unbounded-recursion-in-off.patch + gpu-host1x-allow-entries-in-bo-caches-to-be-freed.patch + drm-tegra-dc-fix-device-node-reference-leak-in-tegra.patch + gpu-host1x-fix-iommu_map_sgtable-return-value-check.patch + drm-tegra-fix-iommu_map_sgtable-return-value-check.patch + drm-nouveau-bios-specify-correct-display-fuse-regist.patch + libbpf-harden-parse_vma_segs-path-parsing.patch + libbpf-fix-uaf-in-strset__add_str.patch + dax-kmem-account-for-partial-discontiguous-resource-.patch + rapidio-tsi721-prevent-a-bad-dereference-in-tsi721_d.patch + ocfs2-don-t-bug_on-an-invalid-journal-dinode.patch + ocfs2-kill-osb-system_file_mutex-lock.patch + crypto-hisilicon-qm-disable-error-report-before-flr.patch + drm-msm-dp-fix-hpd-state-status-bit-shift-value.patch + drm-msm-dp-fix-the-isr_-enum-values.patch + edac-skx_common-skx-fix-ubsan-shift-out-of-bounds-in.patch + rdma-rxe-fix-toctou-heap-overflow-in-get_srq_wqe.patch + rdma-rxe-copy-wqe-to-local-buffer-in-non-srq-receive.patch + media-qcom-venus-drop-extra-padding-in-nv12-raw-size.patch + media-qcom-venus-relax-encoder-frame-blur-dimension-.patch + media-qcom-venus-relax-encoder-frame-blur-step-size-.patch + md-raid10-reset-read_slot-when-reusing-r10bio-for-di.patch + ext4-fix-logflush-shutdown-ordering-to-allow-ordered.patch + arm-imx3-fix-ccm-node-reference-leak.patch + arm-imx31-fix-iim-mapping-leak-in-revision-check.patch + nvdimm-btt-handle-preemption-in-btt-lane-acquisition.patch + scsi-revert-scsi-fix-sas_user_scan-to-handle-wildcar.patch + scsi-pm8001-fix-error-code-in-non_fatal_log_show.patch + bpf-fix-uaf-by-restoring-rcu-delayed-inode-freeing-i.patch + mm-fake-numa-fix-under-allocation-detection-in-unifo.patch + sched-restore-timer_slack_ns-when-resetting-rt-polic.patch + lib-test_meminit-use-for-bools.patch + configfs_lookup-don-t-leave-s_dentry-dangling-on-fai.patch + bpftool-use-libbpf-error-code-for-flow-dissector-que.patch + perf-x86-amd-core-always-use-the-nmi-latency-mitigat.patch + ocfs2-rebase-copied-fsdlm-lvb-pointers-in-locking_st.patch + ocfs2-fix-buffer-head-management-in-ocfs2_read_block.patch + ocfs2-reject-fitrim-ranges-shorter-than-a-cluster.patch + ocfs2-dlm-require-a-ref-for-locking_state-debugfs-op.patch + ocfs2-fix-race-between-ocfs2_control_install_private.patch + netfilter-nfnetlink_osf-fix-mss-parsing-on-big-endia.patch + netfilter-synproxy-protect-nf_ct_seqadj_init-with-co.patch + netfilter-conntrack-call-nf_ct_gre_keymap_destroy-if.patch + ib-cm-fix-av-cm-device-leak-on-an-error-path-in-cm_i.patch + rdma-irdma-fix-oob-read-during-cq-mr-registration.patch + bpf-check-tail-zero-of-bpf_prog_info.patch + bpf-update-transport_header-when-encapsulating-udp-t.patch + wifi-wcn36xx-fix-heap-overflow-from-oversized-firmwa.patch + wifi-wcn36xx-fix-oob-read-from-firmware-count-in-pri.patch + wifi-wcn36xx-fix-oob-read-from-short-trigger-ba-firm.patch + riscv-stacktrace-remove-bogus-0x4-offset-in-non-fp-w.patch + alsa-seq-introduce-sndrv_seq_ioctl_user_pversion-ioc.patch + alsa-seq-add-ump-support.patch + alsa-seq-clear-variable-event-pointer-on-read.patch + acpi-ipmi-fix-message-kref-handling-on-dead-device.patch + cpufreq-documentation-fix-conservative-governor-freq.patch + ib-mlx5-don-t-take-the-rereg_mr-fallback-without-a-n.patch + ib-mlx5-properly-support-implicit-odp-rereg_mr.patch + spi-ep93xx-fix-double-free-of-zeropage-on-dma-setup-.patch + firmware_loader-fix-recursive-lock-in-device_cache_f.patch + configfs-fix-lockless-traversals-of-s_children.patch + watchdog-unregister-pm-notifier-on-watchdog-unregist.patch + scsi-target-fix-hexadecimal-chap_i-handling.patch + pinctrl-mediatek-mt8516-fix-schmitt-trigger-register.patch + pinctrl-mediatek-mt8167-fix-schmitt-trigger-register.patch + vmalloc-fix-null-pointer-dereference-in-is_vm_area_h.patch + hwspinlock-qcom-avoid-uninitialized-struct-members.patch + wifi-mt76-fix-argument-to-ieee80211_is_first_frag.patch + btrfs-fix-invalid-pointer-dereference-in-__btrfs_run.patch + fbdev-sm501fb-fix-buffer-errors-in-of-binding-code.patch + btrfs-zoned-don-t-account-data-relocation-space-info.patch + ib-mlx4-fill-in-the-access_flags-if-ib_mr_rereg_acce.patch + vduse-hold-vduse_lock-across-idr-lookup-in-open-path.patch + vhost-vdpa-validate-virtqueue-index-in-mmap-and-faul.patch + vduse-requeue-failed-read-to-send_list-head.patch + vhost-net-complete-zerocopy-ubufs-only-once.patch + tools-virtio-check-mmap-return-value-in-vringh_test.patch + bonding-3ad-fix-mux-port-state-on-oper-down.patch + selftests-bpf-fix-bpf_iter-task_vma-test.patch + cxl-test-fix-integer-overflow-in-mock-lsa-bounds-che.patch + bpf-tighten-cgroup-storage-cookie-checks-for-prog-ar.patch + s390-process-fix-kernel-thread-function-pointer-type.patch + bluetooth-eir-fix-stack-oob-write-when-prepending-th.patch + bluetooth-hci-validate-codec-capability-element-leng.patch + fs-efs-remove-unneeded-debug-prints.patch + rdma-mlx5-remove-raw-rss-qp-restrack-tracking.patch + rdma-mlx5-fix-undefined-shift-of-user-rq-wqe-size.patch + rdma-mlx5-release-the-hw-provided-uar-index-rather-t.patch + asoc-codecs-hdac_hdmi-validate-written-enum-value.patch + asoc-fsl-fsl_audmix-validate-written-enum-values.patch + asoc-tegra-tegra210_ahub-validate-written-enum-value.patch + net-sched-cls_flow-dont-expose-folded-kernel-pointer.patch + net-fib_rules-don-t-dump-dying-fib_rule-in-fib_rules.patch + bridge-cfm-reject-invalid-ccm-interval-at-configurat.patch + sctp-validate-embedded-address-parameter-length.patch + net-sched-sch_hfsc-don-t-make-class-passive-twice.patch + tipc-require-net-admin-for-tipcv2-netlink-mutators.patch + tipc-prevent-snt_unacked-underflow-on-conn_ack.patch + tipc-reject-inverted-service-ranges-from-peer-bindin.patch + cxl-test-add-check-after-kzalloc-memory-in-alloc_moc.patch + crypto-marvell-octeontx-fix-dma-cleanup-using-wrong-.patch + crypto-cavium-cpt-fix-dma-cleanup-using-wrong-loop-i.patch + crypto-rng-free-default-rng-on-module-exit.patch + spi-xilinx-use-fifo-occupancy-register-to-determine-.patch + asoc-adau1372-clear-pll_en-on-failed-pll-lock-withou.patch + power-supply-core-fix-supplied_from-allocations.patch + net-sched-sch_fq_codel-do-not-call-qdisc_tree_reduce.patch + net-sched-sch_codel-do-not-call-qdisc_tree_reduce_ba.patch + net-mana-initialize-gdma-queue-id-to-invalid_queue_i.patch + net-mana-guard-tx-wq-object-destroy-with-invalid_man.patch + bpf-run-generic-devmap-egress-prog-on-private-skb.patch + net-mlx5-check-max_macs-devlink-param-value-against-.patch + net-bcmgenet-use-weighted-round-robin-tx-dma-arbitra.patch + kcm-use-write_once-when-changing-lower-socket-callba.patch + netfilter-nf_conncount-callers-must-hold-rcu-read-lo.patch + alsa-core-fix-unintuitive-behavior-of-snd_power_ref_.patch + cifs-remove-all-cifs-files-before-kill-super.patch + smb-client-always-return-a-value-for-fs_ioc_getflags.patch + bpf-fix-bpf_get-setsockopt-to-tos-for-ipv4-mapped-ip.patch + bpf-sockmap-reject-overflowing-copy-len-in-bpf_msg_p.patch + bpf-sockmap-fix-integer-overflow-in-bpf_msg_pop_data.patch + mips-mm-fix-out-of-bounds-write-in-maar_res_walk.patch + powerpc-perf-fix-preempt-count-underflow-in-fsl_emb_.patch + powerpc-powernv-fix-preempt-count-leak-in-pnv_kexec_.patch + powerpc-kexec-fix-double-get_cpu-imbalance-in-kexec_.patch + keys-use-acquire-when-reading-state-in-keyring-searc.patch + tipc-fix-uaf-in-tipc_l2_send_msg.patch + tcp-ipv6-clamp-default-adverting-mss-to-avoid-gso_by.patch + ksmbd-fix-use-after-free-in-same_client_has_lease.patch + ocfs2-fix-circular-locking-dependency-in-ocfs2_dio_e.patch + net-9p-fix-race-condition-on-rdma-state-in-trans_rdm.patch + staging-nvec-fix-use-after-free-in-nvec_rx_completed.patch + coresight-cti-fix-dt-filter-signals-silently-ignored.patch + coresight-etm4x-correct-trcvmidcctlr1-save-and-resto.patch + pci-aspm-don-t-reconfigure-aspm-entering-low-power-s.patch + pci-introduce-named-defines-for-pci-rom.patch + pci-check-rom-header-and-data-structure-addr-before-.patch + x86-platform-olpc-xo15-drop-wakeup-source-on-driver-.patch + platform-x86-xo15-ebook-fix-wakeup-source-and-gpe-ha.patch + perf-sched-add-missing-mmap2-handler-in-timehist.patch + pci-loongson-do-not-ignore-downstream-devices-on-ext.patch + bus-mhi-ep-fix-potential-deadlock-in-mhi_ep_reset_wo.patch + phy-phy-can-transceiver-check-driver-match-and-drive.patch + mailbox-mtk-adsp-fix-uaf-during-device-teardown.patch + staging-most-video-avoid-double-free-on-video-regist.patch + usb-host-max3421-fix-shift-out-of-bounds-in-max3421_.patch + usb-host-max3421-reject-hub-port-requests-for-non-ex.patch + char-tlclk-fix-use-after-free-in-tlclk_cleanup.patch + thunderbolt-test-add-kunit-regression-tests-for-xdom.patch + thunderbolt-add-kunit-test-for-tb_property_merge_dir.patch + thunderbolt-test-add-kunit-tests-for-property-parser.patch + perf-header-sanity-check-header_event_desc-attr.size.patch + iio-light-si1133-reset-counter-to-prevent-race-condi.patch + iio-light-si1133-prevent-race-condition-on-timeout.patch + iio-magnetometer-ak8975-fix-potential-kernel-stack-m.patch + iio-adc-xilinx-ams-fix-out-of-bounds-channel-lookup-.patch + iio-accel-mma8452-handle-i2c-read-error-s-in-mma8452.patch + clk-at91-keep-securam-node-alive-while-mapping-it.patch + hid-logitech-hidpp-remove-excess-kernel-doc-member-i.patch + fs-ntfs3-add-bounds-check-to-run_get_highest_vcn.patch + drm-amd-display-add-missing-kdoc-for-allm-parameters.patch + dmaengine-imx-sdma-refine-spba-bus-searching-in-prob.patch + perf-fix-off-by-one-stack-buffer-overflow-in-kallsym.patch + perf-sched-replace-bug_on-on-invalid-cpu-with-gracef.patch + perf-sched-fix-null-dereference-in-latency_runtime_e.patch + perf-tools-add-bounds-check-to-cpu__get_node.patch + perf-mmap-guard-cpu__get_node-return-in-aio_bind.patch + perf-sched-clean-up-idle_threads-entry-on-init-failu.patch + perf-sched-replace-bug_on-and-add-null-checks-in-rep.patch + perf-mmap-fix-null-deref-in-aio-cleanup-on-alloc-fai.patch + perf-c2c-fix-use-after-free-in-he__get_c2c_hists-err.patch + dmaengine-qcom-gpi-set-dma_private-capability.patch + dmaengine-fix-possible-use-after-free.patch + clk-qcom-a53-corrected-frequency-multiplier-for-1152.patch + pnfs-filelayout-fix-cheking-if-a-layout-is-striped.patch + xprtrdma-remove-temp-allocation-of-rpcrdma_rep-objec.patch + xprtrdma-avoid-250-ms-delay-on-backlog-wakeup.patch + xprtrdma-close-lost-wakeup-race-in-xprt_rdma_alloc_s.patch + xprtrdma-post-receive-buffers-after-rpc-completion.patch + xprtrdma-use-sendctx-dma-state-for-send-signaling.patch + xprtrdma-decouple-req-recycling-from-rpc-completion.patch + nfsv4-pnfs-defer-return_range-callbacks-until-after-.patch + nfsv4-flexfiles-honor-ff_flags_no_io_thru_mds-on-fat.patch + nfsv4-flexfiles-honor-ff_flags_no_io_thru_mds-in-pg_.patch + pci-mediatek-fix-operator-precedence-in-pcie_fts_num.patch + perf-tools-fix-get_max_num-size_t-underflow-on-empty.patch + perf-tools-use-perf_env__get_cpu_topology-in-machine.patch + pci-rcar-host-remove-unused-list_head-res.patch + perf-sched-fix-idle-hist-callchain-display-using-wro.patch + perf-bpf-use-scnprintf-in-snprintf_hex-and-synthesiz.patch + perf-hists-fix-snprintf-in-hists__scnprintf_title-ui.patch + xprtrdma-check-frwr_wp_create-during-connect.patch + xprtrdma-document-and-assert-reply-handler-invariant.patch + xprtrdma-resize-reply-buffers-before-reposting-recei.patch + xprtrdma-fix-bcall-rep-leak-and-unbounded-peek.patch + xprtrdma-sanitize-the-reply-credit-grant-after-parsi.patch + xprtrdma-repost-receive-buffers-for-malformed-replie.patch + xprtrdma-return-sendctx-slot-after-send-preparation-.patch + perf-pmu-fix-pmu_id-heap-underwrite-on-empty-identif.patch + perf-pmu-fix-perf_pmu__parse_scale-unit-oob-access-o.patch + tools-lib-api-fix-missing-null-termination-in-filena.patch + perf-symbols-fix-signed-overflow-in-sysfs__read_buil.patch + perf-symbols-bounds-check-.gnu_debuglink-section-dat.patch + perf-intel-pt-fix-snprintf-size-tracking-bug-in-insn.patch + perf-tools-fix-thread__set_comm_from_proc-on-empty-c.patch + perf-symbols-bounds-check-descsz-in-sysfs__read_buil.patch + tools-lib-api-fix-filename__write_int-writing-uninit.patch + tools-lib-api-fix-mount_overload-snprintf-truncation.patch + perf-bpf-add-null-check-for-btf__type_by_id-in-synth.patch + perf-symbols-add-bounds-checks-to-elf_read_build_id-.patch + perf-symbols-add-bounds-checks-to-read_build_id-note.patch + pci-mediatek-fix-possible-truncation-in-mtk_pcie_par.patch + pci-mediatek-use-actual-physical-address-instead-of-.patch + revert-pci-msi-unmap-msi-x-region-on-error.patch + security-apparmor-apparmorfs.c-conditionally-compile.patch + apparmor-check-label-build-before-no_new_privs-test.patch + apparmor-aa_label_alloc-use-aa_label_free-on-alloc-f.patch + apparmor-grab-ns-lock-and-refresh-when-looking-up-ch.patch + apparmor-fix-potential-uaf-in-aa_replace_profiles.patch + apparmor-aa_getprocattr-free-procattr-leak-on-format.patch + apparmor-put-secmark-label-after-secid-lookup.patch + i3c-master-prevent-reuse-of-dynamic-address-on-devic.patch + apparmor-fix-label-can-not-be-immediately-before-a-d.patch + sparc-led-avoid-trimming-a-newline-from-empty-writes.patch + perf-symbols-break-infinite-loop-on-zero-filled-note.patch + perf-tools-use-snprintf-for-root_dir-path-constructi.patch + perf-bpf-validate-func_info_rec_size-and-sub_id-in-s.patch + perf-bpf-bounds-check-array-offsets-in-bpil_offs_to_.patch + spi-dw-fix-wrong-baudr-setting-after-resume.patch + xfrm-add-new-packet-offload-flag.patch + xfrm-use-the-xfrm_gro-to-indicate-a-gro-call-on-inpu.patch + xfrm-support-crypto-offload-for-inbound-ipv6-esp-pac.patch + xfrm-annotate-data-races-around-xfrm_policy_count-an.patch + xfrm-validate-selector-family-and-prefixlen-during-m.patch + perf-machine-use-snprintf-for-guestmount-path-constr.patch + asoc-tlv320aic3x-restrict-clkdiv-bypass-q-values-in-.patch + drm-amdkfd-avoid-double-unpin-of-doorbell-mmio-bos-o.patch + drm-amdkfd-fix-list_del-corruption-in-kfd_criu_resum.patch + drm-amdgpu-initialize-irq.lock-spinlock-earlier.patch + octeontx2-pf-fix-leak-of-sq-timestamp-buffer-on-tear.patch + net-psample-fix-info-leak-in-psample_attr_data.patch + sctp-hold-socket-lock-when-dumping-endpoints-in-sctp.patch + pci-iproc-restore-.map_irq-for-the-platform-bus-driv.patch + spi-rpc-if-use-correct-device-for-hardware-reinitial.patch + virtio_ring-introduce-virtqueue_set_dma_premapped.patch + virtio_ring-introduce-dma-map-api-for-virtqueue.patch + virtio_ring-introduce-dma-sync-api-for-virtqueue.patch + virtio-net-fix-len-check-in-receive_big.patch + dpaa2-switch-fix-vlan-upper-check-not-rejecting-brid.patch + flow_dissector-check-device-type-before-reading-eth_.patch + arm64-hw_breakpoint-reject-unaligned-watchpoints-tha.patch + thermal-intel-fix-dangling-resources-on-thermal_thro.patch + acpi-resource-amend-kernel-doc-style.patch + acpi-ipmi-fix-inverted-interface-check-in-ipmi_bmc_g.patch + ieee802154-remove-warn_on-in-cfg802154_pernet_exit.patch + ieee802154-fix-kernel-infoleak-in-dgram_recvmsg.patch + md-raid1-free-r1_bio-when-req_nowait-is-set-and-read.patch + netfilter-ipset-fix-data-race-between-add-and-dump-i.patch + netfilter-ipset-annotate-pos-for-concurrent-readers-.patch + netfilter-ipset-don-t-use-test_bit-in-lockless-rcu-r.patch + netfilter-ipset-fix-order-of-kfree_rcu-and-rcu_assig.patch + netfilter-nf_reject-skip-iphdr-options-when-looking-.patch + netfilter-nft_meta_bridge-fix-nft_meta_bri_iifpvid-s.patch + irqchip-crossbar-fix-parent-domain-resource-leak.patch + selftests-mm-clarify-alternate-unmapping-in-compacti.patch + selftests-mm-allow-pud-level-entries-in-compound-tes.patch + selftests-mm-fix-exclusive_cow-test-fork-handling.patch + net-marvell-prestera-initialize-err-in-prestera_port.patch + octeontx2-af-mcs-fix-unsupported-secy-stats-read.patch + octeontx2-pf-clear-stats-of-all-resources-when-freei.patch + octeontx2-pf-mcs-fix-mcs-resources-free-on-pf-shutdo.patch + rtc-abx80x-fix-the-rtc_vl_clr-clearing-all-status-fl.patch + rtc-ds1307-handle-oscillator-stop-flag-for-ds1337-ds.patch + bpf-fix-stack-slot-index-in-nospec-checks.patch + bpf-zero-initialize-the-fib-lookup-flow-struct.patch + drm-edid-fix-oob-read-in-drm_parse_tiled_block.patch + pci-endpoint-pci-epf-vntb-add-check-to-detect-db_cou.patch + pci-endpoint-pci-epf-ntb-add-check-to-detect-db_coun.patch + ice-fix-fdir-ctrl-vsi-resource-leak-in-ice_reset_all.patch + ice-fix-aq-error-code-comparison-in-ice_set_pausepar.patch + rtc-msc313-fix-null-deref-in-shared-irq-handler-at-p.patch + ksmbd-fix-use-after-free-of-conn-preauth_info-in-con.patch + ipv6-fix-null-ptr-deref-in-fib6_nh_mtu_change.patch + ipv4-fib-don-t-ignore-error-route-in-local-main-tabl.patch + bpf-lsm-add-disabled-bpf-lsm-hook-list.patch + bpf-disable-xfrm_decode_session-hook-attachment.patch + netfilter-nf_nat-avoid-invalid-nat_net-pointer-use-o.patch + netfilter-nf_conncount-prevent-connlimit-drops-for-e.patch + netfilter-nft_synproxy-stop-bypassing-the-priv-info-.patch + ntb-epf-make-db_valid_mask-cover-only-real-doorbell-.patch + ntb-epf-report-0-based-doorbell-vector-via-ntb_db_ev.patch + ntb-epf-fix-doorbell-bitmask-and-irq-vector-handling.patch + alpha-pci-add-security_locked_down-check-to-pci_mmap.patch + alpha-pci-fix-__pci_mmap_fits-overflow-for-zero-leng.patch + net-bpf-check-master-for-null-in-xdp_master_redirect.patch + net-dsa-sja1105-round-up-ptp-perout-pin-duration.patch + veth-fix-napi-leak-in-xdp-enable-error-path.patch + net-sched-cls_api-handle-tc_act_consumed-in-tcf_qeve.patch + ipv6-fix-error-handling-in-disable_ipv6-sysctl.patch + ipv6-fix-error-handling-in-ignore_routes_with_linkdo.patch + ipv6-fix-error-handling-in-forwarding-sysctl.patch + ipv6-fix-error-handling-in-disable_policy-sysctl.patch + smb-client-preserve-errors-from-smb2_set_sparse.patch + rtc-ds1307-fix-off-by-one-issue-with-wday-for-rx8130.patch + rtc-cmos-unregister-hpet-irq-handler-on-probe-failur.patch + net-mvneta-re-enable-percpu-interrupt-on-resume.patch + net-sungem-fix-probe-error-cleanup.patch + asoc-fsl_asrc_dma-fix-edma-maxburst-misalignment-wit.patch + dt-bindings-net-renesas-ether-drop-example-ethernet-.patch + tracing-probes-fix-typo-in-a-log-message.patch + spi-sh-msiof-abort-transfers-when-reset-times-out.patch + gpio-mvebu-fail-probe-if-gpiochip-registration-fails.patch + gpio-htc-egpio-use-managed-gpiochip-registration.patch + seg6-validate-srh-length-before-reading-fixed-fields.patch + qede-fix-out-of-bounds-check-for-cqe-len_list.patch + net-enetc-check-the-number-of-bds-needed-for-xdp_fra.patch + hwmon-adm1275-prevent-reading-uninitialized-stack.patch + usbnet-gl620a-fix-out-of-bounds-read-in-genelink_rx_.patch + net-phy-sfp-free-mii_bus-in-sfp_i2c_mdiobus_destroy.patch + net-gianfar-dispose-irq-mappings-on-probe-failure-an.patch + net-sched-sch_teql-introduce-slaves_lock-to-avoid-ra.patch + bridge-stp-fix-a-potential-use-after-free-when-delet.patch + tracing-events-fix-to-check-the-simple_tsk_fn-creati.patch + tracing-eprobe-read-the-complete-filter_ptr_string-p.patch + irqchip-gic-v3-its-fix-of-node-reference-leak.patch + irqchip-ts4800-fix-missing-chained-handler-cleanup-o.patch + virtio_net-disable-cb-when-napi-is-busy-polled.patch + cxgb4-fix-decode-strings-dump-for-t6-adapters.patch + net-sched-act_bpf-use-rcu_dereference_bh-to-read-the.patch + gpio-timberdale-return-enomem-on-dynamic-memory-allo.patch + pinctrl-meson-restore-non-sleeping-gpio-access.patch + net-sched-hhf-clear-heavy-hitter-state-on-reset.patch + afs-fix-error-code-in-afs_extract_vl_addrs.patch + afs-use-kvfree-to-free-memory-allocated-by-kvcalloc.patch + afs-fix-callback-service-message-parsers-to-pass-thr.patch + afs-fix-vllist-leak.patch + afs-fix-the-volume-afs_volume_rm_tree-is-set-on.patch + afs-fix-unchecked-length-string-display-in-debug-sta.patch + ata-sata_gemini-unwind-clocks-on-ide-pinctrl-errors.patch + hid-picolcd-prevent-null-pointer-dereference-in-pico.patch + hid-core-fix-oob-read-in-hid_get_report-for-numbered.patch + arm64-mm-convert-ptep_clear-to-ptep_get_and_clear.patch + arm64-mm-optimize-tlb-flush-in-unmap_hotplug_-pmd-pu.patch + net-usb-net1080-validate-packet_len-before-pad-byte-.patch + gue-validate-remcsum-private-option-length.patch + netfilter-xt_u32-reject-invalid-shift-counts.patch + netfilter-xt_rateest-fix-u64-truncation-in-xt_ratees.patch + netfilter-ip6tables-mark-malformed-ipv6-extension-he.patch + netfilter-xt_connmark-reject-invalid-shift-parameter.patch + net-mlx5e-fix-hv-vhca-stats-zero-sized-buffer-alloca.patch + net-mlx5e-fix-hv-vhca-stats-agent-registration-race.patch + qede-fix-off-by-one-in-bd-ring-consumption-on-build_.patch + net-qualcomm-rmnet-add-tx-packets-aggregation.patch + net-qualcomm-rmnet-validate-map-frame-length-before-.patch + net-smc-fix-uaf-in-smc_cdc_rx_handler-by-pinning-the.patch + amt-fix-size-calculation-in-amt_get_size.patch + bluetooth-mgmt-fix-adv-monitor-add-failure-cleanup.patch + bluetooth-iso-exclude-rfu-bits-from-iso_sdu_length.patch + bluetooth-bpa10x-avoid-oob-read-of-revision-string-i.patch + ring-buffer-fix-event-length-with-forced-8-byte-alig.patch + net-usb-lan78xx-move-functions-to-avoid-forward-defi.patch + net-usb-lan78xx-disable-vlan-filter-in-promiscuous-m.patch + net-sched-cake-reject-overhead-values-that-underflow.patch + octeontx2-pf-check-dmac-extraction-support-before-fi.patch + ipv6-mcast-replace-locking-comments-with-lockdep-ann.patch + ipv6-mcast-fix-potential-uaf-in-mld-delayed-work.patch + ipvs-pass-parsed-transport-offset-to-state-handlers.patch + ipvs-use-parsed-transport-offset-in-tcp-state-lookup.patch + ipvs-fix-pmtu-for-gue-gre-tunnel-icmp-errors.patch + ipvs-ensure-inner-headers-in-icmp-errors-are-in-head.patch + cifs-validate-dfs-referral-string-offsets.patch + dm-era-fix-null-pointer-dereference-in-metadata_open.patch + regulator-core-make-regulator_lock_two-logic-easier-.patch + regulator-core-regulator_lock_two-should-test-for-ed.patch + net-mlx5-fix-l3-tunnel-entropy-refcount-leak.patch + octeontx2-af-fix-vf-bringup-affecting-pf-promiscuous.patch + smb-client-fix-overflow-in-passthrough-ioctl-bounds-.patch diff --cc queue-6.12/series index edd46e7826,e43bf6446f..2c020299eb --- a/queue-6.12/series +++ b/queue-6.12/series @@@ -37,21 -37,757 +37,775 @@@ crypto-crypto4xx-remove-insecure-and-un crypto-hisi-trng-remove-crypto_rng-interface.patch time-jiffies-register-jiffies-clocksource-before-usa.patch time-jiffies-change-register_refined_jiffies-to-void.patch +media-uvcvideo-use-hw-timestaming-if-the-clock-buffer-is-full.patch +media-uvcvideo-avoid-partial-metadata-buffers.patch +media-uvcvideo-fix-buffer-sequence-in-frame-gaps.patch +media-uvcvideo-fix-dev_sof-filtering-in-hw-timestamp.patch +media-uvcvideo-do-not-add-clock-samples-with-small-sof-delta.patch +media-uvcvideo-relax-the-constrains-for-interpolating-the-hw-clock.patch +media-uvcvideo-fix-sequence-number-when-no-eof.patch +dt-bindings-media-sun4i-a10-video-engine-add-interconnect-properties.patch +dt-bindings-power-imx93-add-mipi-phy-power-domain.patch +serial-msm-disable-dma-for-kernel-console-uart.patch +serial-max310x-implement-gpio_chip-get_direction.patch +serial-8250_omap-clear-rx_running-on-zero-length-dma-completes.patch +rxrpc-rxrpc_verify_data-ensure-rx_dec_buffer-alloc.patch +rxrpc-fix-leak-of-released-call-in-recvmsg-msg_peek.patch +afs-fix-netns-teardown-to-cancel-the-preallocation-charger.patch +afs-fix-null-pointer-dereference-in-afs_get_tree.patch +afs-fix-further-netns-teardown-to-cancel-the-preallocation-charger.patch +fbcon-fix-null-pointer-dereference-for-a-console-without-vc_data.patch + clocksource-drivers-sun5i-handle-error-returns-from-.patch + drm-rockchip-test-for-imported-buffers-with-drm_gem_.patch + drm-tidss-drop-extra-drm_mode_config_reset-call.patch + drm-gpuvm-do-not-prepare-null-objects.patch + drm-amdgpu-fix-integer-overflow-in-amdgpu_gem_align_.patch + drm-radeon-fix-integer-overflow-in-radeon_align_pitc.patch + drm-radeon-fix-memory-leak-in-radeon_ring_restore-on.patch + libbpf-report-error-when-a-negative-kprobe-offset-is.patch + drm-amd-pm-remove-trailing-semicolon-from-amdgpu_pm_.patch + selftests-bpf-use-local-type-for-flow_offload_tuple_.patch + selftests-bpf-use-local-type-for-bpf_fou_encap-in-te.patch + documentation-proc-fix-section-numbering-in-table-of.patch + arm64-dts-rockchip-fix-gmac0-reset-pin-for-nanopi-r5.patch + arm64-dts-qcom-sc8180x-fix-phy-simple_bus_reg-warnin.patch + arm64-dts-qcom-sdm845-mezzanine-fix-camss-ports-unit.patch + wifi-cfg80211-fix-grammar-in-mlo-group-key-error-mes.patch + arm64-tegra-fix-tegra234-mgbe-ptp-clock.patch + dt-bindings-pinctrl-nvidia-tegra234-add-missing-requ.patch + drm-amdkfd-validate-criu-restored-ids-before-idr_all.patch + driver-core-use-read_once-for-dev-driver-in-dev_has_.patch + wifi-rtw89-correct-data-type-for-scan-index-to-avoid.patch + wifi-rtw88-fix-oob-read-from-firmware-rx-descriptor-.patch + kconfig-fix-potential-null-pointer-dereference-in-co.patch + soc-xilinx-shutdown-and-free-rx-mailbox-channel.patch + scsi-advansys-drop-isa_dma_api-remnants.patch + wifi-ath9k-fix-oob-access-from-firmware-tx-status-qu.patch + arm-dts-am335x-sl50-fix-audio-bitclock-and-frame-mas.patch + watchdog-sp5100_tco-use-efch-mmio-for-newer-hygon-fc.patch + watchdog-sama5d4_wdt-fix-wddis-detection-on-sam9x60-.patch + watchdog-sprd_wdt-remove-redundant-sprd_wdt_disable-.patch + media-cedrus-fix-failure-to-clean-up-hardware-on-pro.patch + media-v4l2-common-add-yuv24-format-info.patch + memory-tegra-wire-up-system-sleep-pm-ops.patch + crypto-qat-fix-heartbeat-error-injection.patch + pinctrl-sunxi-fix-regulator-leak-in-sunxi_pmx_reques.patch + drm-gpuvm-take-refcount-on-drm-device.patch + arm64-dts-rockchip-fix-rk809-interrupt-pin-on-rk3566.patch + arm64-dts-imx8x-colibri-correct-sodimm-pad-settings.patch + vxlan-fix-potential-null-ptr-deref-in-vxlan_gro_prep.patch + crypto-ccp-fix-snp_filter_reserved_mem_regions-off-b.patch + crypto-atmel-sha204a-fix-blocking-and-non-blocking-r.patch + crypto-ecrdsa-fix-unknown-oid-check-in-ecrdsa_param_.patch + crypto-asymmetric_keys-fix-oob-read-in-pefile_digest.patch + arm-multi_v7_defconfig-correct-qcom_rpmh-and-qcom_rp.patch + dlm-fix-add-msg-handle-in-send_queue-ordered.patch + nilfs2-fix-backing_dev_info-reference-leak.patch + media-qcom-camss-vfe-fix-pix-subdev-naming-on-vfe-li.patch + iommu-amd-fix-a-stale-comment-about-which-legacy-mod.patch + arm64-dts-mediatek-mt8192-asurada-move-pcie-dma-boun.patch + rust-alloc-fix-vec-extend_with-safety-comment.patch + clk-scmi-fix-clock-rate-rounding.patch + arm64-dts-qcom-kodiak-fix-ice-reg-size.patch + arm64-dts-qcom-sm8450-fix-ice-reg-size.patch + drm-hisilicon-hibmc-move-display-contrl-config-to-hi.patch + drm-hisilicon-hibmc-use-clock-to-look-up-the-pll-val.patch + evm-terminate-and-bound-the-evm_xattrs-read-buffer.patch + thermal-hwmon-fix-critical-temperature-attribute-rem.patch + clk-scpi-unregister-child-clock-providers-on-remove.patch + net-sched-sch_hfsc-annotate-data-races-in-hfsc_dump_.patch + crypto-ccp-treat-zero-length-cert-chain-as-query-for.patch + spi-hisi-kunpeng-use-dev_err_probe-for-host-registra.patch + net-sched-sch_htb-do-not-change-sch-flags-in-htb_dum.patch + net-sched-sch_htb-annotate-data-races-i.patch + ipv6-addrconf-bail-out-of-dad_failure-when-state-is-.patch + ib-mlx5-fix-transport-domain-rollback-and-initialize.patch + rdma-hns-fix-arithmetic-overflow-in-calc_hem_config.patch + rdma-mlx5-fix-devx-subscribe-event-unwind-null-deref.patch + rdma-srpt-fix-integer-overflow-in-immediate-data-len.patch + rdma-hns-initialize-seqfile-before-creating-file.patch + drm-syncobj-fix-memory-leak-in-drm_syncobj_find_fenc.patch + selftests-bpf-reject-unsupported-k-option-in-vmtest..patch + selftests-mm-fix-resv_sz-when-parsing-arm64-signal-f.patch + media-atomisp-fix-memory-leak-in-atomisp_fixed_patte.patch + media-atomisp-gc2235-fix-uaf-and-memory-leak.patch + staging-media-atomisp-fix-loop-shadowing-in-ia_css_s.patch + firmware-arm_scmi-read-sensor-config-as-32-bit-value.patch + sysfs-clamp-show-return-value-in-sysfs_kf_read.patch + bitops-use-common-function-parameter-names.patch + regulator-dt-bindings-mt6359-drop-regulator-name-pat.patch + net-sched-sch_drr-annotate-data-races-around-cl-defi.patch + media-rockchip-rga-fix-too-small-buffer-size.patch + firmware-arm_scmi-fix-oob-in-scmi_power_name_get.patch + arm64-dts-qcom-sc7180-add-power-domain-and-iface-clk.patch + arm64-dts-qcom-kodiak-add-power-domain-and-iface-clk.patch + arm64-dts-qcom-sm8450-add-power-domain-and-iface-clk.patch + arm64-dts-qcom-sm8650-add-power-domain-and-iface-clk.patch + tracing-bound-synthetic-field-strings-with-seq_buf.patch + writeback-drop-now-unnecessary-rcu_barrier-in-cgroup.patch + device-property-fix-fwnode-reference-leak-in-fwnode_.patch + driver-core-use-mod_delayed_work-to-prevent-lost-def.patch + revert-treewide-fix-probing-of-devices-in-dt-overlay.patch + cpufreq-documentation-fix-sampling_down_factor-range.patch + cpufreq-conservative-simplify-frequency-limit-handli.patch + pwm-imx27-fix-variable-truncation-in-.apply.patch + rdma-mana_ib-use-ib_get_eth_speed-for-reporting-port.patch + bus-sunxi-rsb-always-check-register-address-validity.patch + rdma-irdma-fix-out-of-bounds-write-in-irdma_copy_use.patch + rdma-rxe-fix-a-use-after-free-problem-in-rxe_mmap.patch + ib-mlx4-fix-refcount-leak-in-add_port-error-path.patch + rdma-hns-fix-warning-in-poll-cq-direct-mode.patch + rdma-hns-fix-log-flood-after-cmd_mbox-failure.patch + rdma-counter-fix-incorrect-port-index-in-rdma_counte.patch + pm-sleep-use-complete-in-device_pm_sleep_init.patch + mips-fix-big-endian-stack-argument-fetching-in-o32-w.patch + mips-dec-remove-do_irq-call-indirection.patch + mips-ralink-mt7621-add-missing-__iomem.patch + mips-n64-add-__iomem-for-writel-call.patch + jiffies-define-secs_to_jiffies.patch + driver-core-fix-missing-jiffies-conversion-in-deferr.patch + driver-core-guard-deferred-probe-timeout-extension-w.patch + mtd-spi-nor-drop-duplicate-kconfig-dependency.patch + alsa-seq-midi-serialize-output-teardown-with-event_i.patch + pinctrl-nuvoton-ma35d1-fix-mfp-register-offset-and-p.patch + pinctrl-cs42l43-fix-polarity-on-debounce.patch + nvmet-tcp-fix-page-fragment-cache-leak-in-error-path.patch + nvme-multipath-fix-flex-array-size-in-struct-nvme_ns.patch + workqueue-drop-spurious-from-print_worker_info-fn-de.patch + ipv6-guard-against-possible-null-deref-in-__in6_dev_.patch + net-sched-cls_bpf-prevent-unbounded-recursion-in-off.patch + drm-tegra-gr2d-gr3d-initialize-address-register-map-.patch + drm-tegra-gr2d-gr3d-contain-pm-in-the-gr-d_probe-gr-.patch + gpu-host1x-allow-entries-in-bo-caches-to-be-freed.patch + drm-tegra-dc-fix-device-node-reference-leak-in-tegra.patch + gpu-host1x-fix-iommu_map_sgtable-return-value-check.patch + drm-tegra-fix-iommu_map_sgtable-return-value-check.patch + drm-nouveau-bios-specify-correct-display-fuse-regist.patch + libbpf-harden-parse_vma_segs-path-parsing.patch + bpftool-fix-typo-in-struct_ops-map-fd-generation-for.patch + libbpf-fix-uaf-in-strset__add_str.patch + dax-kmem-account-for-partial-discontiguous-resource-.patch + rapidio-tsi721-prevent-a-bad-dereference-in-tsi721_d.patch + ocfs2-don-t-bug_on-an-invalid-journal-dinode.patch + ocfs2-kill-osb-system_file_mutex-lock.patch + crypto-hisilicon-qm-disable-error-report-before-flr.patch + crypto-tegra-fix-dma_free_coherent-size-error.patch + crypto-tegra-return-enomem-when-input-buffer-allocat.patch + sched-deadline-always-stop-dl-server-before-changing.patch + sched-deadline-reject-debugfs-dl_server-writes-for-o.patch + drm-msm-dp-fix-hpd-state-status-bit-shift-value.patch + drm-msm-dp-fix-the-isr_-enum-values.patch + edac-skx_common-skx-fix-ubsan-shift-out-of-bounds-in.patch + rdma-rxe-fix-toctou-heap-overflow-in-get_srq_wqe.patch + rdma-rxe-copy-wqe-to-local-buffer-in-non-srq-receive.patch + media-qcom-venus-drop-extra-padding-in-nv12-raw-size.patch + media-qcom-venus-relax-encoder-frame-blur-dimension-.patch + media-qcom-venus-relax-encoder-frame-blur-step-size-.patch + amba-use-generic-driver_override-infrastructure.patch + cdx-use-generic-driver_override-infrastructure.patch + drivers-hv-vmbus-use-generic-driver_override-infrast.patch + rpmsg-use-generic-driver_override-infrastructure.patch + md-raid10-reset-read_slot-when-reusing-r10bio-for-di.patch + ext4-fix-logflush-shutdown-ordering-to-allow-ordered.patch + asoc-rsnd-fix-rsnd_soc_mask-width-to-single-nibble.patch + nfsd-fix-delegation-reference-leak-in-nfsd4_revoke_s.patch + arm-imx3-fix-ccm-node-reference-leak.patch + hid-wiimote-fix-table-layout-and-whitespace-errors.patch + ata-libata-fix-ata_exec_internal.patch + arm-imx31-fix-iim-mapping-leak-in-revision-check.patch + nvdimm-btt-handle-preemption-in-btt-lane-acquisition.patch + scsi-revert-scsi-fix-sas_user_scan-to-handle-wildcar.patch + scsi-pm8001-fix-error-code-in-non_fatal_log_show.patch + scsi-ufs-fix-wrong-value-printed-in-unexpected-upiu-.patch + bpf-fix-uaf-by-restoring-rcu-delayed-inode-freeing-i.patch + mm-fake-numa-fix-under-allocation-detection-in-unifo.patch + ext2-fix-ignored-return-value-of-generic_write_sync.patch + sched-restore-timer_slack_ns-when-resetting-rt-polic.patch + driver-core-use-system_percpu_wq-instead-of-system_w.patch + tick-sched-fix-toctou-in-nohz-idle-time-fetch.patch + lib-test_meminit-use-for-bools.patch + configfs_lookup-don-t-leave-s_dentry-dangling-on-fai.patch + drm-amdgpu-set-sub_block_index-for-mca-ras-sub-block.patch + bpftool-use-libbpf-error-code-for-flow-dissector-que.patch + vhost-fix-vhost_get_avail_idx-for-a-non-empty-ring.patch + perf-x86-amd-core-always-use-the-nmi-latency-mitigat.patch + perf-x86-intel-uncore-fix-discovery-unit-lookup-for-.patch + perf-x86-amd-uncore-use-node-id-to-identify-df-and-u.patch + xfrm-fix-nat-related-field-inheritance-in-sa-migrati.patch + drm-amdkfd-always-resume_all-after-suspend_all.patch + ocfs2-rebase-copied-fsdlm-lvb-pointers-in-locking_st.patch + ocfs2-fix-buffer-head-management-in-ocfs2_read_block.patch + ocfs2-reject-fitrim-ranges-shorter-than-a-cluster.patch + ocfs2-dlm-require-a-ref-for-locking_state-debugfs-op.patch + ocfs2-fix-race-between-ocfs2_control_install_private.patch + netfilter-nfnetlink_osf-fix-mss-parsing-on-big-endia.patch + netfilter-nfnetlink_cthelper-use-read-write-_once-fo.patch + netfilter-synproxy-drop-packets-if-timestamp-adjustm.patch + netfilter-synproxy-adjust-duplicate-timestamp-option.patch + netfilter-synproxy-fix-unaligned-memory-access-in-ti.patch + netfilter-synproxy-protect-nf_ct_seqadj_init-with-co.patch + netfilter-conntrack-revert-ct-extension-genid-infras.patch + netfilter-conntrack-call-nf_ct_gre_keymap_destroy-if.patch + ib-cm-fix-av-cm-device-leak-on-an-error-path-in-cm_i.patch + rdma-irdma-fix-oob-read-during-cq-mr-registration.patch + rdma-irdma-initialize-iwmr-access-during-mr-registra.patch + arm64-dts-imx95-correct-pcie-outbound-address-space-.patch + arm64-dts-tqma8mpql-mba8mpxl-configure-sai-clock-in-.patch + rdma-siw-fix-endpoint-socket-association-handling.patch + bpf-check-tail-zero-of-bpf_prog_info.patch + bpf-update-transport_header-when-encapsulating-udp-t.patch + wifi-wcn36xx-fix-heap-overflow-from-oversized-firmwa.patch + wifi-wcn36xx-fix-oob-read-from-firmware-count-in-pri.patch + wifi-wcn36xx-fix-oob-read-from-short-trigger-ba-firm.patch + alsa-seq-fix-partial-userptr-event-expansion.patch + riscv-cpu_ops-change-return-value-type-of-cpu_is_sto.patch + riscv-stacktrace-remove-bogus-0x4-offset-in-non-fp-w.patch + alsa-seq-clear-variable-event-pointer-on-read.patch + acpi-ipmi-fix-message-kref-handling-on-dead-device.patch + cpufreq-documentation-fix-conservative-governor-freq.patch + thermal-testing-reject-missing-command-arguments.patch + ib-mlx5-don-t-take-the-rereg_mr-fallback-without-a-n.patch + ib-mlx5-properly-support-implicit-odp-rereg_mr.patch + spi-ep93xx-fix-double-free-of-zeropage-on-dma-setup-.patch + asoc-amd-acp-sdw-sof-bound-dai-link-iteration.patch + firmware_loader-fix-recursive-lock-in-device_cache_f.patch + configfs-fix-lockless-traversals-of-s_children.patch + watchdog-unregister-pm-notifier-on-watchdog-unregist.patch + scsi-target-fix-hexadecimal-chap_i-handling.patch + scsi-target-remove-tcm_loop-target-reset-handling.patch + pinctrl-mediatek-mt8516-fix-schmitt-trigger-register.patch + pinctrl-mediatek-mt8167-fix-schmitt-trigger-register.patch + vmalloc-fix-null-pointer-dereference-in-is_vm_area_h.patch + hwspinlock-qcom-avoid-uninitialized-struct-members.patch + sched-fair-fix-cpu_util-runnable_avg-arithmetic.patch + wifi-mt76-mt7925-clean-up-dma-on-probe-failure.patch + wifi-mt76-mt7925-fix-stale-pointer-comparisons-in-ch.patch + wifi-mt76-mt7925-keep-tx-ba-state-in-the-primary-wci.patch + wifi-mt76-mt792x-skip-mld-header-rewrite-for-802.3-e.patch + wifi-mt76-fix-argument-to-ieee80211_is_first_frag.patch + wifi-mt76-mt7915-fix-potential-tx_retries-underflow.patch + wifi-mt76-mt7921-fix-potential-tx_retries-underflow.patch + wifi-mt76-mt7925-fix-potential-tx_retries-underflow.patch + wifi-mt76-mt7996-fix-potential-tx_retries-underflow.patch + btrfs-fix-invalid-pointer-dereference-in-__btrfs_run.patch + fbdev-sm501fb-fix-buffer-errors-in-of-binding-code.patch + hwmon-it87-clamp-negative-values-to-zero-in-set_fan.patch + btrfs-zoned-don-t-account-data-relocation-space-info.patch + btrfs-fix-deadlock-cloning-inline-extent-when-using-.patch + ib-mlx4-fill-in-the-access_flags-if-ib_mr_rereg_acce.patch + nfsd-handle-layout-stid-in-nfsd4_drop_revoked_stid.patch + spi-meson-spifc-fix-runtime-pm-leak-on-remove.patch + asoc-codecs-aw88261-fix-incorrect-masks-for-boost-re.patch + vduse-hold-vduse_lock-across-idr-lookup-in-open-path.patch + vhost-vdpa-validate-virtqueue-index-in-mmap-and-faul.patch + virtio_console-read-size-from-config-space-during-de.patch + vduse-requeue-failed-read-to-send_list-head.patch + vhost-net-complete-zerocopy-ubufs-only-once.patch + tools-virtio-check-mmap-return-value-in-vringh_test.patch + vdpa-octeon_ep-fix-pf-vf-mailbox-data-address-calcul.patch + asoc-cs35l56-fix-missing-calls-to-wm_adsp2_remove.patch + asoc-cs35l56-don-t-leave-parent-irq-disabled-if-syst.patch + bonding-3ad-fix-mux-port-state-on-oper-down.patch + ext4-fix-kernel-bug-in-ext4_write_inline_data_end.patch + ext4-validate-donor-file-superblock-early-in-ext4_io.patch + selftests-bpf-fix-bpf_iter-task_vma-test.patch + cxl-test-fix-integer-overflow-in-mock-lsa-bounds-che.patch + cxl-test-zero-out-lsa-backing-memory-to-avoid-leakin.patch + of-cpu-add-check-in-__of_find_n_match_cpu_property.patch + vfio-qat-fix-f_pos-race-in-qat_vf_resume_write.patch + bpf-tighten-cgroup-storage-cookie-checks-for-prog-ar.patch + asoc-cs35l56-fix-possible-uninitialized-value-in-cs3.patch + s390-process-fix-kernel-thread-function-pointer-type.patch + bluetooth-hci_qca-fix-null-pointer-dereference-in-qc.patch + bluetooth-eir-fix-stack-oob-write-when-prepending-th.patch + bluetooth-hci_core-fix-uaf-in-hci_unregister_dev.patch + bluetooth-btmtk-fix-urb-leak-in-alloc_mtk_intr_urb-e.patch + bluetooth-hci-validate-codec-capability-element-leng.patch + bluetooth-vhci-validate-devcoredump-state-before-sid.patch + fs-efs-remove-unneeded-debug-prints.patch + rdma-mlx5-remove-dct-restrack-tracking.patch + rdma-mlx5-remove-raw-rss-qp-restrack-tracking.patch + rdma-mlx5-fix-undefined-shift-of-user-rq-wqe-size.patch + rdma-mlx5-release-the-hw-provided-uar-index-rather-t.patch + asoc-codecs-hdac_hdmi-validate-written-enum-value.patch + asoc-fsl-fsl_audmix-validate-written-enum-values.patch + asoc-tegra-tegra210_ahub-validate-written-enum-value.patch + net-dsa-qca8k-fix-led-devicename-when-using-external.patch + net-sched-cls_flow-dont-expose-folded-kernel-pointer.patch + net-fib_rules-don-t-dump-dying-fib_rule-in-fib_rules.patch + bridge-cfm-reject-invalid-ccm-interval-at-configurat.patch + sctp-validate-embedded-address-parameter-length.patch + net-pfcp-allocate-per-cpu-tstats-for-pfcp-netdevs.patch + net-sched-sch_hfsc-don-t-make-class-passive-twice.patch + tipc-require-net-admin-for-tipcv2-netlink-mutators.patch + tipc-prevent-snt_unacked-underflow-on-conn_ack.patch + tipc-reject-inverted-service-ranges-from-peer-bindin.patch + cxl-test-unregister-cxl_acpi-in-cxl_test_init-error-.patch + cxl-test-add-check-after-kzalloc-memory-in-alloc_moc.patch + crypto-marvell-octeontx-fix-dma-cleanup-using-wrong-.patch + crypto-cavium-cpt-fix-dma-cleanup-using-wrong-loop-i.patch + crypto-rng-free-default-rng-on-module-exit.patch + alsa-seq-fix-kernel-heap-address-leak-in-bounce_erro.patch + spi-xilinx-use-fifo-occupancy-register-to-determine-.patch + asoc-adau1372-clear-pll_en-on-failed-pll-lock-withou.patch + power-supply-core-fix-supplied_from-allocations.patch + handshake-require-admin-permission-for-done-command.patch + net-sched-sch_fq_codel-do-not-call-qdisc_tree_reduce.patch + net-sched-sch_codel-do-not-call-qdisc_tree_reduce_ba.patch + net-mana-initialize-gdma-queue-id-to-invalid_queue_i.patch + net-mana-guard-tx-wq-object-destroy-with-invalid_man.patch + net-ethernet-mtk_wed-fix-loading-wo-firmware-for-mt7.patch + bpf-run-generic-devmap-egress-prog-on-private-skb.patch + net-mlx5-check-max_macs-devlink-param-value-against-.patch + octeontx2-af-npc-fix-size-of-entry2cntr_map.patch + net-ethernet-mtk_wed-debugfs-correct-index-in-wed_am.patch + net-wwan-t7xx-check-skb_clone-in-control-tx.patch + dpll-add-reference-sync-netlink-attribute.patch + dpll-add-reference-sync-get-set.patch + dpll-allow-associating-dpll-pin-with-a-firmware-node.patch + dpll-add-notifier-chain-for-dpll-events.patch + dpll-support-dynamic-pin-index-allocation.patch + dpll-enhance-and-consolidate-reference-counting-logi.patch + dpll-fix-stale-iteration-in-dpll_pin_on_pin_unregist.patch + dpll-send-delete-notification-before-unregister-in-o.patch + dpll-emit-per-dpll-delete-notifications-in-dpll_pin_.patch + dpll-guard-sync-pair-removal-on-full-pin-unregister.patch + dpll-balance-create-delete-notifications-in-__dpll_p.patch + landlock-fix-unmarked-concurrent-access-to-socket-fa.patch + net-bcmgenet-use-weighted-round-robin-tx-dma-arbitra.patch + kcm-use-write_once-when-changing-lower-socket-callba.patch + netfilter-nf_conncount-callers-must-hold-rcu-read-lo.patch + alsa-core-fix-unintuitive-behavior-of-snd_power_ref_.patch + cifs-remove-all-cifs-files-before-kill-super.patch + smb-client-always-return-a-value-for-fs_ioc_getflags.patch + selftests-bpf-fix-typo-in-verify_umulti_link_info.patch + selftests-bpf-initialize-operation-name-before-use.patch + bpf-fix-bpf_get-setsockopt-to-tos-for-ipv4-mapped-ip.patch + udf-fix-nls-leak-on-udf_fill_super-failure.patch + bpf-sockmap-reject-overflowing-copy-len-in-bpf_msg_p.patch + bpf-sockmap-fix-integer-overflow-in-bpf_msg_pop_data.patch + mips-mm-fix-out-of-bounds-write-in-maar_res_walk.patch + powerpc-perf-fix-preempt-count-underflow-in-fsl_emb_.patch + powerpc-powernv-fix-preempt-count-leak-in-pnv_kexec_.patch + powerpc-kexec-fix-double-get_cpu-imbalance-in-kexec_.patch + keys-use-acquire-when-reading-state-in-keyring-searc.patch + dt-bindings-vendor-prefixes-add-gira.patch + tipc-fix-uaf-in-tipc_l2_send_msg.patch + tcp-ipv6-clamp-default-adverting-mss-to-avoid-gso_by.patch + net-airoha-introduce-ndo_select_queue-callback.patch + net-airoha-add-sched-ets-offload-support.patch + net-airoha-fix-always-true-condition-in-ppe1-queue-r.patch + net-ethernet-oa_tc6-interrupt-is-active-low-level-tr.patch + net-ethernet-oa_tc6-mdiobus-parent-initialized-with-.patch + net-ethernet-oa_tc6-remove-fcs-size-in-rx-frame.patch + dt-bindings-net-updated-interrupt-type-to-be-active-.patch + ionic-fix-check-in-ionic_get_link_ext_stats.patch + ksmbd-fix-use-after-free-in-same_client_has_lease.patch + mfd-rsmu-fix-page-register-setup.patch + mfd-cs42l43-sanity-check-firmware-size.patch + ocfs2-fix-circular-locking-dependency-in-ocfs2_dio_e.patch + net-9p-fix-race-condition-on-rdma-state-in-trans_rdm.patch + eventpoll-expand-top-of-file-overview-locking-doc.patch + eventpoll-rename-attach_epitem-to-ep_attach_file.patch + eventpoll-split-ep_insert-into-alloc-register-stages.patch + eventpoll-extract-ep_deliver_event-from-ep_send_even.patch + eventpoll-wrap-ep_unactive_ptr-in-typed-sentinel-hel.patch + eventpoll-rename-epi-next-and-txlist-for-clarity.patch + eventpoll-fix-epoll_wait-report-false-negative.patch + gpiolib-acpi-only-trigger-activeboth-interrupts-on-b.patch + staging-nvec-fix-use-after-free-in-nvec_rx_completed.patch + perf-debuginfo-fix-libdw-api-contract-violations.patch + coresight-cti-fix-dt-filter-signals-silently-ignored.patch + coresight-etm4x-correct-trcvmidcctlr1-save-and-resto.patch + pci-aspm-don-t-reconfigure-aspm-entering-low-power-s.patch + pci-introduce-named-defines-for-pci-rom.patch + pci-check-rom-header-and-data-structure-addr-before-.patch + x86-platform-olpc-xo15-drop-wakeup-source-on-driver-.patch + platform-x86-xo15-ebook-fix-wakeup-source-and-gpe-ha.patch + perf-sched-add-missing-mmap2-handler-in-timehist.patch + pci-loongson-do-not-ignore-downstream-devices-on-ext.patch + rust-alloc-fix-assert-in-vec-reserve-doc-test.patch + bus-mhi-ep-fix-potential-deadlock-in-mhi_ep_reset_wo.patch + pci-qcom-set-max-opp-before-dbi-access-during-resume.patch + phy-phy-can-transceiver-check-driver-match-and-drive.patch + perf-pmu-skip-test-on-arm64-when-slots-is-zero.patch + clk-at91-sam9x7-fix-gmac_gclk-clock-definition.patch + coresight-fix-source-not-disabled-on-idr_alloc_u32-f.patch + mailbox-mtk-adsp-fix-uaf-during-device-teardown.patch + perf-arm-spe-use-metadata-to-decide-the-data-source-.patch + perf-arm-spe-use-arm_spe_op_branch_eret-when-synthes.patch + perf-arm-spe-correctly-set-sample-flags.patch + perf-arm-spe-add-branch-stack.patch + perf-inject-add-convert-callchain-option.patch + perf-event-fix-size-of-synthesized-sample-with-branc.patch + staging-most-video-avoid-double-free-on-video-regist.patch + usb-host-max3421-fix-shift-out-of-bounds-in-max3421_.patch + usb-host-max3421-reject-hub-port-requests-for-non-ex.patch + char-tlclk-fix-use-after-free-in-tlclk_cleanup.patch + thunderbolt-test-add-kunit-regression-tests-for-xdom.patch + thunderbolt-add-kunit-test-for-tb_property_merge_dir.patch + thunderbolt-test-add-kunit-tests-for-property-parser.patch + pci-qcom-disable-aspm-l0s-for-sa8775p.patch + perf-header-sanity-check-header_event_desc-attr.size.patch + iio-light-si1133-reset-counter-to-prevent-race-condi.patch + iio-light-si1133-prevent-race-condition-on-timeout.patch + iio-magnetometer-ak8975-fix-potential-kernel-stack-m.patch + iio-adc-xilinx-ams-fix-out-of-bounds-channel-lookup-.patch + iio-accel-mma8452-handle-i2c-read-error-s-in-mma8452.patch + iio-tcs3472-power-down-chip-on-probe-failure.patch + clk-at91-keep-securam-node-alive-while-mapping-it.patch + hid-logitech-hidpp-remove-excess-kernel-doc-member-i.patch + fs-ntfs3-add-bounds-check-to-run_get_highest_vcn.patch + fs-ntfs3-fix-mount-failure-on-64k-page-size-kernels.patch + drm-amd-display-add-missing-kdoc-for-allm-parameters.patch + thunderbolt-debugfs-fix-margining-error-counter-buff.patch + dmaengine-imx-sdma-refine-spba-bus-searching-in-prob.patch + perf-fix-off-by-one-stack-buffer-overflow-in-kallsym.patch + perf-tools-guard-test_bit-from-out-of-bounds-sample-.patch + perf-sched-fix-thread-reference-leak-in-latency_swit.patch + perf-sched-replace-bug_on-on-invalid-cpu-with-gracef.patch + perf-sched-fix-null-dereference-in-latency_runtime_e.patch + perf-tools-add-bounds-check-to-cpu__get_node.patch + perf-sched-fix-register_pid-overflow-strcpy-and-bug_.patch + perf-mmap-guard-cpu__get_node-return-in-aio_bind.patch + perf-stat-bounds-check-cpu-index-in-topology-aggrega.patch + perf-c2c-bounds-check-cpu-and-node-ids-before-bitmap.patch + perf-c2c-bounds-check-cpu-ids-in-setup_nodes-topolog.patch + perf-sched-clean-up-idle_threads-entry-on-init-failu.patch + perf-sched-timehist-add-pre-migration-wait-time-opti.patch + perf-sched-fix-thread-leaks-in-perf-sched-timehist.patch + perf-sched-use-thread__put-in-free_idle_threads.patch + perf-sched-replace-bug_on-and-add-null-checks-in-rep.patch + perf-mmap-fix-null-deref-in-aio-cleanup-on-alloc-fai.patch + perf-stat-introduce-perf_env__get_cpu_topology-to-gu.patch + perf-c2c-fix-use-after-free-in-he__get_c2c_hists-err.patch + perf-timechart-fix-cpu2y-oob-read-on-untrusted-cpu-i.patch + dmaengine-qcom-gpi-set-dma_private-capability.patch + dmaengine-fix-possible-use-after-free.patch + dmaengine-dma-axi-dmac-properly-free-struct-axi_dmac.patch + dmaengine-dma-axi-dmac-use-dma-pool-to-manange-dma-d.patch + clk-qcom-a53-corrected-frequency-multiplier-for-1152.patch + pnfs-filelayout-fix-cheking-if-a-layout-is-striped.patch + xprtrdma-avoid-250-ms-delay-on-backlog-wakeup.patch + xprtrdma-close-lost-wakeup-race-in-xprt_rdma_alloc_s.patch + xprtrdma-post-receive-buffers-after-rpc-completion.patch + xprtrdma-use-sendctx-dma-state-for-send-signaling.patch + xprtrdma-decouple-req-recycling-from-rpc-completion.patch + nfsv4-pnfs-defer-return_range-callbacks-until-after-.patch + nfs-keep-pg_uptodate-clear-after-read-errors-in-page.patch + nfsv4-flexfiles-honor-ff_flags_no_io_thru_mds-on-fat.patch + nfsv4-flexfiles-honor-ff_flags_no_io_thru_mds-in-pg_.patch + nfs-use-nfsi-rwsem-to-protect-traversal-of-the-file-.patch + pci-mediatek-fix-operator-precedence-in-pcie_fts_num.patch + pci-meson-propagate-devm_add_action_or_reset-failure.patch + pci-meson-add-missing-remove-callback.patch + fs-ntfs3-resize-log-one_page_buf-when-adopting-on-di.patch + perf-tools-fix-get_max_num-size_t-underflow-on-empty.patch + perf-tools-use-scnprintf-in-cpu_map__snprint-to-prev.patch + perf-tools-use-perf_env__get_cpu_topology-in-machine.patch + pci-rcar-host-remove-unused-list_head-res.patch + perf-sched-bounds-check-prio-before-test_bit-in-time.patch + perf-sched-fix-idle-hist-callchain-display-using-wro.patch + perf-bpf-use-scnprintf-in-snprintf_hex-and-synthesiz.patch + perf-hists-fix-snprintf-in-hists__scnprintf_title-ui.patch + xprtrdma-fix-ep-kref-imbalance-on-addr_change.patch + xprtrdma-initialize-re_id-before-removal-registratio.patch + xprtrdma-check-frwr_wp_create-during-connect.patch + xprtrdma-document-and-assert-reply-handler-invariant.patch + xprtrdma-resize-reply-buffers-before-reposting-recei.patch + xprtrdma-fix-bcall-rep-leak-and-unbounded-peek.patch + xprtrdma-sanitize-the-reply-credit-grant-after-parsi.patch + xprtrdma-repost-receive-buffers-for-malformed-replie.patch + xprtrdma-return-sendctx-slot-after-send-preparation-.patch + perf-cs-etm-queue-context-packets-for-frontend.patch + perf-pmu-fix-pmu_id-heap-underwrite-on-empty-identif.patch + perf-pmu-fix-perf_pmu__parse_scale-unit-oob-access-o.patch + tools-lib-api-fix-missing-null-termination-in-filena.patch + perf-symbols-fix-signed-overflow-in-sysfs__read_buil.patch + perf-symbols-bounds-check-.gnu_debuglink-section-dat.patch + perf-intel-pt-fix-snprintf-size-tracking-bug-in-insn.patch + perf-tools-fix-thread__set_comm_from_proc-on-empty-c.patch + perf-symbols-bounds-check-descsz-in-sysfs__read_buil.patch + perf-dso-use-lock-annotations-to-fix-asan-deadlock.patch + perf-dso-add-support-for-reading-the-e_machine-type-.patch + perf-build-id-change-sprintf-functions-to-snprintf.patch + perf-dso-move-build_id-to-dso_id.patch + perf-tools-use-snprintf-in-dso__read_running_kernel_.patch + tools-lib-api-fix-filename__write_int-writing-uninit.patch + tools-lib-api-fix-mount_overload-snprintf-truncation.patch + perf-bpf-add-null-check-for-btf__type_by_id-in-synth.patch + perf-symbols-add-bounds-checks-to-elf_read_build_id-.patch + perf-symbols-add-bounds-checks-to-read_build_id-note.patch + pci-mediatek-fix-possible-truncation-in-mtk_pcie_par.patch + pci-mediatek-use-actual-physical-address-instead-of-.patch + revert-pci-msi-unmap-msi-x-region-on-error.patch + security-apparmor-apparmorfs.c-conditionally-compile.patch + apparmor-check-label-build-before-no_new_privs-test.patch + apparmor-aa_label_alloc-use-aa_label_free-on-alloc-f.patch + apparmor-fix-rawdata_f_data-implicit-flex-array.patch + apparmor-grab-ns-lock-and-refresh-when-looking-up-ch.patch + apparmor-fix-potential-uaf-in-aa_replace_profiles.patch + apparmor-remove-or-add-symlinks-to-rawdata-according.patch + apparmor-aa_getprocattr-free-procattr-leak-on-format.patch + apparmor-put-secmark-label-after-secid-lookup.patch + workqueue-add-new-wq_percpu-flag.patch + i3c-master-add-wq_percpu-to-alloc_workqueue-users.patch + i3c-master-make-hot-join-workqueue-freezable-to-bloc.patch + i3c-master-prevent-reuse-of-dynamic-address-on-devic.patch + apparmor-fix-label-can-not-be-immediately-before-a-d.patch + sparc-led-avoid-trimming-a-newline-from-empty-writes.patch + perf-maps-add-maps__mutate_mapping.patch + perf-symbols-fix-bswap-copy-paste-error-for-32-bit-e.patch + perf-symbols-validate-p_filesz-before-use-in-filenam.patch + perf-symbols-break-infinite-loop-on-zero-filled-note.patch + perf-tools-use-snprintf-for-root_dir-path-constructi.patch + perf-bpf-validate-func_info_rec_size-and-sub_id-in-s.patch + perf-bpf-bounds-check-array-offsets-in-bpil_offs_to_.patch + perf-remove-redundant-kernel.h-include.patch + perf-cs-etm-reject-cpu-ids-that-would-overflow-signe.patch + gpio-mlxbf3-fail-probe-if-gpiochip-registration-fail.patch + drm-i915-clear-crtc-color-blob-pointers-after-droppi.patch + spi-dw-fix-wrong-baudr-setting-after-resume.patch + xfrm-fix-xfrm-state-cache-insertion-race.patch + xfrm-annotate-data-races-around-xfrm_policy_count-an.patch + xfrm-validate-selector-family-and-prefixlen-during-m.patch + perf-machine-use-snprintf-for-guestmount-path-constr.patch + perf-cs-etm-validate-num_cpu-before-metadata-allocat.patch + perf-cs-etm-require-full-global-header-in-auxtrace_i.patch + perf-cs-etm-bounds-check-cpu-in-cs_etm__get_queue.patch + asoc-tlv320aic3x-restrict-clkdiv-bypass-q-values-in-.patch + drm-amdkfd-avoid-double-unpin-of-doorbell-mmio-bos-o.patch + drm-amdkfd-fix-list_del-corruption-in-kfd_criu_resum.patch + drm-amdgpu-initialize-irq.lock-spinlock-earlier.patch + octeontx2-pf-fix-leak-of-sq-timestamp-buffer-on-tear.patch + net-psample-fix-info-leak-in-psample_attr_data.patch + sctp-hold-socket-lock-when-dumping-endpoints-in-sctp.patch + pci-iproc-restore-.map_irq-for-the-platform-bus-driv.patch + spi-rpc-if-use-correct-device-for-hardware-reinitial.patch + virtio-net-fix-len-check-in-receive_big.patch + dpaa2-switch-fix-vlan-upper-check-not-rejecting-brid.patch + devlink-fix-parent-ref-leak-in-devl_rate_node_create.patch + flow_dissector-check-device-type-before-reading-eth_.patch + alsa-usb-audio-kill-midi-2.0-urbs-before-freeing-end.patch + arm64-hw_breakpoint-reject-unaligned-watchpoints-tha.patch + thermal-intel-fix-dangling-resources-on-thermal_thro.patch + acpi-resource-amend-kernel-doc-style.patch + acpi-ipmi-fix-inverted-interface-check-in-ipmi_bmc_g.patch + ieee802154-remove-warn_on-in-cfg802154_pernet_exit.patch + ieee802154-fix-kernel-infoleak-in-dgram_recvmsg.patch + mac802154-prevent-overwrite-return-code-in-mac802154.patch + md-raid1-free-r1_bio-when-req_nowait-is-set-and-read.patch + netfilter-ipset-fix-data-race-between-add-and-dump-i.patch + netfilter-ipset-annotate-pos-for-concurrent-readers-.patch + netfilter-ipset-don-t-use-test_bit-in-lockless-rcu-r.patch + netfilter-ipset-fix-order-of-kfree_rcu-and-rcu_assig.patch + netfilter-ipset-make-sure-gc-is-properly-stopped.patch + netfilter-nf_reject-skip-iphdr-options-when-looking-.patch + netfilter-nft_meta_bridge-fix-nft_meta_bri_iifpvid-s.patch + mailbox-imx-forward-the-timeout-error-in-imx_mu_gene.patch + irqchip-crossbar-fix-parent-domain-resource-leak.patch + selftests-mm-restore-default-nr_hugepages-value-via-.patch + selftest-mm-register-existing-mapping-with-userfault.patch + selftests-mm-ensure-destination-is-hugetlb-backed-in.patch + selftests-mm-clarify-alternate-unmapping-in-compacti.patch + selftests-mm-allow-pud-level-entries-in-compound-tes.patch + selftests-mm-fix-exclusive_cow-test-fork-handling.patch + net-marvell-prestera-initialize-err-in-prestera_port.patch + tipc-fix-use-after-free-of-the-discoverer-in-tipc_di.patch + net-ethernet-mtk_ppe-fix-rhashtable-leak-in-mtk_ppe_.patch + octeontx2-af-mcs-fix-unsupported-secy-stats-read.patch + octeontx2-pf-clear-stats-of-all-resources-when-freei.patch + octeontx2-pf-mcs-fix-mcs-resources-free-on-pf-shutdo.patch + net-sched-act_ct-fix-nf_connlabels-leak-on-two-error.patch + ipv6-ndisc-fix-null-deref-in-accept_untracked_na.patch + dpaa2-switch-do-not-accept-vlan-uppers-while-bridged.patch + rtc-abx80x-fix-the-rtc_vl_clr-clearing-all-status-fl.patch + rtc-ds1307-handle-oscillator-stop-flag-for-ds1337-ds.patch + bpf-fix-stack-slot-index-in-nospec-checks.patch + bpftool-fix-vmlinux-btf-leak-in-cgroup-commands.patch + bpf-zero-initialize-the-fib-lookup-flow-struct.patch + bpf-fix-effective-prog-array-index-with-bpf_f_preord.patch + power-sequencing-fix-abba-deadlock-in-pwrseq_device_.patch + drm-edid-fix-oob-read-in-drm_parse_tiled_block.patch + pci-endpoint-pci-epf-vntb-add-check-to-detect-db_cou.patch + pci-endpoint-pci-epf-ntb-add-check-to-detect-db_coun.patch + ice-fix-fdir-ctrl-vsi-resource-leak-in-ice_reset_all.patch + ice-fix-aq-error-code-comparison-in-ice_set_pausepar.patch + ice-call-netif_keep_dst-once-when-entering-switchdev.patch + ice-dpll-set-pointers-to-null-after-kfree-in-ice_dpl.patch + ice-dpll-fix-memory-leak-in-ice_dpll_init_info-error.patch + i40e-fix-i40e_debug-to-use-struct-i40e_hw-argument.patch + rtc-msc313-fix-null-deref-in-shared-irq-handler-at-p.patch + ksmbd-fix-use-after-free-of-conn-preauth_info-in-con.patch + ipv6-fix-null-ptr-deref-in-fib6_nh_mtu_change.patch + net-bnxt-use-ethtool-string-helpers.patch + eth-bnxt-gather-and-report-hw-gro-stats.patch + eth-bnxt-rename-ring_err_stats-ring_drv_stats.patch + eth-bnxt-improve-the-timing-of-stats.patch + ipv4-fib-don-t-ignore-error-route-in-local-main-tabl.patch + md-raid5-use-stripe-state-snapshot-in-break_stripe_b.patch + md-raid5-avoid-r5_overlap-races-while-breaking-strip.patch + bpf-disable-xfrm_decode_session-hook-attachment.patch + netfilter-nf_nat-avoid-invalid-nat_net-pointer-use-o.patch + netfilter-nf_conncount-prevent-connlimit-drops-for-e.patch + netfilter-nft_synproxy-stop-bypassing-the-priv-info-.patch + netfilter-nft_compat-ebtables-emulation-must-reject-.patch + gpio-davinci-fix-irq-domain-leak-on-devm_kzalloc-fai.patch + ntb-epf-make-db_valid_mask-cover-only-real-doorbell-.patch + ntb-epf-report-0-based-doorbell-vector-via-ntb_db_ev.patch + ntb-epf-fix-doorbell-bitmask-and-irq-vector-handling.patch + alpha-pci-add-security_locked_down-check-to-pci_mmap.patch + alpha-pci-fix-__pci_mmap_fits-overflow-for-zero-leng.patch + net-bpf-check-master-for-null-in-xdp_master_redirect.patch + net-dsa-sja1105-round-up-ptp-perout-pin-duration.patch + veth-fix-napi-leak-in-xdp-enable-error-path.patch + net-sched-cls_api-handle-tc_act_consumed-in-tcf_qeve.patch + ipv6-fix-error-handling-in-disable_ipv6-sysctl.patch + ipv6-fix-error-handling-in-ignore_routes_with_linkdo.patch + ipv6-fix-error-handling-in-forwarding-sysctl.patch + ipv6-fix-error-handling-in-disable_policy-sysctl.patch + rtnetlink-add-per-netns-rtnl.patch + rtnetlink-add-assertion-helpers-for-per-netns-rtnl.patch + rtnetlink-define-rtnl_net_trylock.patch + ipv6-add-__in6_dev_get_rtnl_net.patch + ipv6-convert-net.ipv6.conf.-dev-.xxx-sysctl-to-per-n.patch + ipv6-fix-missing-notification-for-ignore_routes_with.patch + thermal-testing-zone-flush-work-items-during-cleanup.patch + acpi-processor_idle-mark-lpi-enter-functions-as-__cp.patch + smb-client-preserve-errors-from-smb2_set_sparse.patch + rtc-ds1307-fix-off-by-one-issue-with-wday-for-rx8130.patch + rtc-cmos-unregister-hpet-irq-handler-on-probe-failur.patch + net-dsa-realtek-fix-memory-leak-in-rtl8366rb_setup_l.patch + octeontx2-af-validate-nix-maximum-lfs-correctly.patch + net-mvneta-re-enable-percpu-interrupt-on-resume.patch + net-sungem-fix-probe-error-cleanup.patch + net-ethernet-sunplus-spl2sw-fix-phy_node-refcount-le.patch + asoc-fsl_asrc_dma-fix-edma-maxburst-misalignment-wit.patch + udp_tunnel-remove-rtnl_lock-dependency.patch + net-udp_tunnel-prevent-double-queueing-in-udp_tunnel.patch + dt-bindings-net-renesas-ether-drop-example-ethernet-.patch + net-hisilicon-hns3-use-ethtool-string-helpers.patch + net-hns3-use-string-choices-helper.patch + net-hns3-use-hns3_get_ae_dev-helper-to-reduce-the-un.patch + net-hns3-use-hns3_get_ops-helper-to-reduce-the-unnec.patch + net-hns3-clear-hns-alarm-comparison-of-integer-expre.patch + net-hns3-unify-copper-port-ksettings-configuration-p.patch + net-hns3-refactor-mac-autoneg-and-speed-configuratio.patch + net-hns3-fix-permanent-link-down-deadlock-after-rese.patch + net-hns3-differentiate-autoneg-default-values-betwee.patch + tracing-probes-fix-typo-in-a-log-message.patch + spi-sh-msiof-abort-transfers-when-reset-times-out.patch + gpio-mvebu-fail-probe-if-gpiochip-registration-fails.patch + gpio-htc-egpio-use-managed-gpiochip-registration.patch + seg6-validate-srh-length-before-reading-fixed-fields.patch + qede-fix-out-of-bounds-check-for-cqe-len_list.patch + net-enetc-check-the-number-of-bds-needed-for-xdp_fra.patch + sctp-fix-sctp_reset_streams-stream-list-length-limit.patch + mips-dec-ensure-rtc-platform-device-deregistration-u.patch + asoc-codecs-lpass-va-macro-add-sm6115-compatible.patch + asoc-codecs-lpass-va-macro-fix-lpass-codec-version-f.patch + hwmon-adm1275-prevent-reading-uninitialized-stack.patch + hwmon-pmbus-fix-passing-events-to-regulator-core.patch + hwmon-aspeed-g6-pwm-tach-guard-fan-rpm-calculation-a.patch + ipv6-fib6-fix-null-deref-in-fib6_walk_continue-on-mu.patch + usbnet-gl620a-fix-out-of-bounds-read-in-genelink_rx_.patch + net-phy-sfp-free-mii_bus-in-sfp_i2c_mdiobus_destroy.patch + net-gianfar-dispose-irq-mappings-on-probe-failure-an.patch + net-sched-sch_teql-introduce-slaves_lock-to-avoid-ra.patch + bridge-stp-fix-a-potential-use-after-free-when-delet.patch + drm-panthor-fix-potential-invalid-pointer-deref-in-g.patch + drm-panthor-don-t-overrule-pending-immediate-ticks-i.patch + drm-panthor-fix-a-leak-when-a-group-is-evicted-befor.patch + drm-panthor-interrupt-group-start-resumption-if-grou.patch + tracing-events-fix-to-check-the-simple_tsk_fn-creati.patch + tracing-eprobe-read-the-complete-filter_ptr_string-p.patch + irqchip-gic-v3-its-fix-of-node-reference-leak.patch + irqchip-ts4800-fix-missing-chained-handler-cleanup-o.patch + virtio_net-disable-cb-when-napi-is-busy-polled.patch + cxgb4-fix-decode-strings-dump-for-t6-adapters.patch + net-sched-act_bpf-use-rcu_dereference_bh-to-read-the.patch + ksmbd-reject-undersized-dacls-before-parsing-aces.patch + ksmbd-fix-use-after-free-of-fp-owner.name-in-durable.patch + gpio-timberdale-return-enomem-on-dynamic-memory-allo.patch + pinctrl-meson-restore-non-sleeping-gpio-access.patch + net-sched-hhf-clear-heavy-hitter-state-on-reset.patch + fs-refuse-o_tmpfile-creation-with-an-unmapped-fsuid-.patch + afs-fix-error-code-in-afs_extract_vl_addrs.patch + afs-fix-double-netfs-initialisation-in-afs_root_iget.patch + afs-use-kvfree-to-free-memory-allocated-by-kvcalloc.patch + afs-remove-erroneous-seq-1-in-volume-lookup-loop.patch + afs-make-afs-.-cell-as-well-as-afs-cell-mountpoints.patch + afs-add-rootcell-checks.patch + afs-make-afs-cell-and-afs-.-cell-symlinks.patch + afs-fix-afs_atcell_get_link-to-handle-rcu-pathwalk.patch + afs-remove-the-autocell-mount-option.patch + afs-change-dynroot-to-create-contents-on-demand.patch + afs-fix-misplaced-inc-of-net-cells_outstanding.patch + afs-fix-callback-service-message-parsers-to-pass-thr.patch + afs-fix-missing-null-pointer-check-in-afs_break_some.patch + afs-fix-vllist-leak.patch + afs-fix-the-volume-afs_volume_rm_tree-is-set-on.patch + afs-fix-unchecked-length-string-display-in-debug-sta.patch + minix-avoid-overflow-in-bitmap-block-count-calculati.patch + ovl-fix-comment-about-locking-order.patch + netfs-fix-writeback-error-handling.patch + drm-xe-pt-fix-null-pointer-dereference-in-xe_pt_zap_.patch + drm-xe-hw_engine-fix-double-free-of-managed-bo-in-er.patch + drm-xe-pf-don-t-attempt-to-process-fast_req-or-event.patch + netfs-drop-the-error-arg-from-netfs_read_subreq_term.patch + cifs-fix-missing-credit-release-on-failure-in-cifs_i.patch + ata-sata_gemini-unwind-clocks-on-ide-pinctrl-errors.patch + ata-libata-scsi-limit-simulated-scsi-command-copy-to.patch + hid-picolcd-prevent-null-pointer-dereference-in-pico.patch + hid-core-fix-oob-read-in-hid_get_report-for-numbered.patch + arm64-mm-optimize-tlb-flush-in-unmap_hotplug_-pmd-pu.patch + hid-bpf-fix-hid_bpf_get_data-range-check.patch + selftests-hid-load-only-requested-struct_ops-maps.patch + selftests-hid-cover-hid_bpf_get_data-size-overflow.patch + net-usb-net1080-validate-packet_len-before-pad-byte-.patch + gue-validate-remcsum-private-option-length.patch + netfilter-xt_u32-reject-invalid-shift-counts.patch + netfilter-xt_rateest-fix-u64-truncation-in-xt_ratees.patch + netfilter-ip6tables-mark-malformed-ipv6-extension-he.patch + netfilter-xt_connmark-reject-invalid-shift-parameter.patch + net-mlx5-lag-mpesw-fix-missing-complete-on-devcom-er.patch + net-mlx5e-fix-hv-vhca-stats-zero-sized-buffer-alloca.patch + net-mlx5e-fix-hv-vhca-stats-agent-registration-race.patch + net-microchip-vcap-fix-races-on-the-shared-super-vca.patch + qede-fix-off-by-one-in-bd-ring-consumption-on-build_.patch + net-qualcomm-rmnet-validate-map-frame-length-before-.patch + net-sched-act_pedit-fix-toctou-heap-oob-write-in-tc-.patch + net-smc-fix-uaf-in-smc_cdc_rx_handler-by-pinning-the.patch + amt-fix-size-calculation-in-amt_get_size.patch + bluetooth-6lowpan-hold-l2cap-conn-across-debugfs-con.patch + bluetooth-mgmt-fix-adv-monitor-add-failure-cleanup.patch + bluetooth-iso-exclude-rfu-bits-from-iso_sdu_length.patch + bluetooth-bpa10x-avoid-oob-read-of-revision-string-i.patch + ring-buffer-fix-event-length-with-forced-8-byte-alig.patch + net-tls-consume-empty-data-records-in-tls_sw_read_so.patch + net-usb-lan78xx-move-functions-to-avoid-forward-defi.patch + net-usb-lan78xx-disable-vlan-filter-in-promiscuous-m.patch + drm-v3d-reject-invalid-indirect-bo-handle-in-indirec.patch + net-sched-cake-reject-overhead-values-that-underflow.patch + octeontx2-pf-check-dmac-extraction-support-before-fi.patch + perf-x86-amd-core-avoid-enabling-brs-from-the-svm-re.patch + gpio-mvebu-free-generic-chips-on-unbind.patch + ipv4-igmp-fix-potential-uaf-in-igmp_gq_start_timer.patch + ipv6-mcast-replace-locking-comments-with-lockdep-ann.patch + ipv6-mcast-fix-potential-uaf-in-mld-delayed-work.patch + netfilter-nft_lookup-fix-catchall-element-handling-w.patch + ipvs-pass-parsed-transport-offset-to-state-handlers.patch + ipvs-use-parsed-transport-offset-in-tcp-state-lookup.patch + ipvs-fix-pmtu-for-gue-gre-tunnel-icmp-errors.patch + ipvs-ensure-inner-headers-in-icmp-errors-are-in-head.patch + s390-zcrypt-remove-the-empty-file.patch + cifs-validate-dfs-referral-string-offsets.patch + sunrpc-release-lower-rpc_clnt-if-killed-waiting-for-.patch + sunrpc-pin-upper-rpc_clnt-across-the-tls-connect_wor.patch + dm-era-fix-null-pointer-dereference-in-metadata_open.patch + regulator-core-regulator_lock_two-should-test-for-ed.patch + selftests-net-fix-evp_md_ctx-leak-in-tcp_mmap.patch + net-mlx5-fix-l3-tunnel-entropy-refcount-leak.patch + octeontx2-af-fix-vf-bringup-affecting-pf-promiscuous.patch + drm-xe-remove-duplicate-kunit-test-bug.h-include.patch + smb-client-fix-overflow-in-passthrough-ioctl-bounds-.patch diff --cc queue-6.18/series index 73e9ddfd74,4be6c8a6df..39bf45ea29 --- a/queue-6.18/series +++ b/queue-6.18/series @@@ -18,39 -18,1047 +18,1083 @@@ exfat-preserve-benign-secondary-entries iommu-amd-use-maximum-event-log-buffer-size-when-snp.patch iommu-amd-use-maximum-ppr-log-buffer-size-when-snp-i.patch af_unix-drop-all-scm-attributes-for-sockmap.patch +alsa-hda-realtek-add-quirk-for-tongfang-x6xx45xu.patch +alsa-hda-conexant-remove-mic-bias-threshold-override.patch +alsa-hda-fix-cached-processing-coefficient-verbs.patch +alsa-hda-realtek-fix-speakers-on-legion-pro-7-16arx8h-with-codec-ssid-17aa-38a7.patch +media-uvcvideo-use-hw-timestaming-if-the-clock-buffer-is-full.patch +media-uvcvideo-avoid-partial-metadata-buffers.patch +media-uvcvideo-fix-buffer-sequence-in-frame-gaps.patch +media-uvcvideo-fix-dev_sof-filtering-in-hw-timestamp.patch +media-uvcvideo-do-not-add-clock-samples-with-small-sof-delta.patch +media-uvcvideo-relax-the-constrains-for-interpolating-the-hw-clock.patch +media-uvcvideo-fix-sequence-number-when-no-eof.patch +dt-bindings-media-sun4i-a10-video-engine-add-interconnect-properties.patch +dt-bindings-power-imx93-add-mipi-phy-power-domain.patch +serial-msm-disable-dma-for-kernel-console-uart.patch +serial-max310x-implement-gpio_chip-get_direction.patch +serial-8250_omap-clear-rx_running-on-zero-length-dma-completes.patch +rxrpc-serialize-kernel-accept-preallocation-with-socket-teardown.patch +rxrpc-rxrpc_verify_data-ensure-rx_dec_buffer-alloc.patch +rxrpc-don-t-move-a-peeked-oob-message-onto-the-pending-queue.patch +rxrpc-fix-uaf-in-rxgk_issue_challenge.patch +rxrpc-fix-socket-notification-race.patch +rxrpc-fix-leak-of-released-call-in-recvmsg-msg_peek.patch +rxrpc-fix-potential-infinite-loop-in-rxrpc_recvmsg.patch +rxrpc-fix-rxrpc_rotate_tx_rotate-to-check-there-s-something-to-rotate.patch +rxrpc-fix-oob-challenge-leak-in-cleanup-after-notification-failure.patch +rxrpc-fix-ackall-packet-handling.patch +rxrpc-fix-the-reception-of-a-reply-packet-before-data-transmission.patch +rxrpc-fix-leak-of-connection-from-oob-challenge.patch +rxrpc-fix-double-unlock-in-rxrpc_recvmsg.patch +afs-fix-netns-teardown-to-cancel-the-preallocation-charger.patch +afs-fix-null-pointer-dereference-in-afs_get_tree.patch +afs-handle-cb.initcallbackstate3-requests-without-a-server-record.patch +afs-fix-further-netns-teardown-to-cancel-the-preallocation-charger.patch +afs-fix-uncancelled-rxrpc-oob-message-handler.patch +fbcon-fix-null-pointer-dereference-for-a-console-without-vc_data.patch +fbcon-use-correct-type-for-vc_resize-return-value.patch + openrisc-mm-fix-section-mismatch-between-map_page-an.patch + clocksource-drivers-sun5i-handle-error-returns-from-.patch + accel-amdxdna-fix-leak-when-pinning-ubuf-pages.patch + drm-rockchip-dw_dp-switch-to-drmm_kzalloc.patch + drm-rockchip-dw_dp-fix-null-ptr-deref-in-dw_dp_remov.patch + drm-rockchip-test-for-imported-buffers-with-drm_gem_.patch + drm-tidss-drop-extra-drm_mode_config_reset-call.patch + drm-gpusvm-reject-vmas-with-vm_io-or-vm_pfnmap-when-.patch + drm-gpuvm-do-not-prepare-null-objects.patch + drm-amdgpu-fix-integer-overflow-in-amdgpu_gem_align_.patch + drm-radeon-fix-integer-overflow-in-radeon_align_pitc.patch + drm-radeon-fix-memory-leak-in-radeon_ring_restore-on.patch + libbpf-report-error-when-a-negative-kprobe-offset-is.patch + selftests-bpf-fix-off-by-one-in-bpf_cpumask_populate.patch + dt-bindings-timer-remove-sifive-fine-ctr-bits-proper.patch + drm-amd-pm-remove-trailing-semicolon-from-amdgpu_pm_.patch + selftests-bpf-use-local-type-for-flow_offload_tuple_.patch + selftests-bpf-use-local-type-for-bpf_fou_encap-in-te.patch + documentation-proc-fix-section-numbering-in-table-of.patch + arm64-dts-rockchip-fix-ethernet-phy-not-found-on-px3.patch + arm64-dts-rockchip-fix-gmac0-reset-pin-for-nanopi-r5.patch + arm64-dts-qcom-ipq5424-fix-usb-simple_bus_reg-warnin.patch + arm64-dts-qcom-sc8180x-fix-phy-simple_bus_reg-warnin.patch + arm64-dts-qcom-sdm845-mezzanine-fix-camss-ports-unit.patch + wifi-cfg80211-fix-grammar-in-mlo-group-key-error-mes.patch + arm64-tegra-fix-tegra234-mgbe-ptp-clock.patch + dt-bindings-pinctrl-nvidia-tegra234-add-missing-requ.patch + drm-amdkfd-validate-criu-restored-ids-before-idr_all.patch + driver-core-use-read_once-for-dev-driver-in-dev_has_.patch + wifi-rtw89-fix-wrong-pci_get_drvdata-type-in-aer-han.patch + wifi-rtw88-fix-wrong-pci_get_drvdata-type-in-aer-han.patch + wifi-rtw89-correct-data-type-for-scan-index-to-avoid.patch + wifi-rtw88-fix-oob-read-from-firmware-rx-descriptor-.patch + wifi-rtw89-add-bounds-check-on-firmware-mac_id-in-li.patch + kconfig-fix-potential-null-pointer-dereference-in-co.patch + soc-xilinx-shutdown-and-free-rx-mailbox-channel.patch + pinctrl-mediatek-eint-drop-base-from-mtk_eint_chip_w.patch + scsi-advansys-drop-isa_dma_api-remnants.patch + wifi-ath9k-fix-oob-access-from-firmware-tx-status-qu.patch + arm-dts-am335x-sl50-fix-audio-bitclock-and-frame-mas.patch + documentation-rv-replace-stale-website-link.patch + watchdog-sp5100_tco-use-efch-mmio-for-newer-hygon-fc.patch + watchdog-sama5d4_wdt-fix-wddis-detection-on-sam9x60-.patch + watchdog-sprd_wdt-remove-redundant-sprd_wdt_disable-.patch + media-cedrus-fix-failure-to-clean-up-hardware-on-pro.patch + media-v4l2-common-add-yuv24-format-info.patch + memory-tegra-wire-up-system-sleep-pm-ops.patch + crypto-qat-fix-heartbeat-error-injection.patch + lib-vsprintf-fix-to-check-field_width-and-precision.patch + dts-spacemit-set-console-baud-rate-on-bpif3.patch + pinctrl-sunxi-fix-regulator-leak-in-sunxi_pmx_reques.patch + dt-bindings-vendor-prefixes-add-displaytech-ltd.patch + drm-gpuvm-take-refcount-on-drm-device.patch + drm-panel-clean-up-s6e3ha2-config-dependencies-and-f.patch + arm-dts-rockchip-add-address-size-cells-to-chromium-.patch + arm64-dts-rockchip-add-address-size-cells-to-chromiu.patch + arm64-dts-rockchip-fix-rk809-interrupt-pin-on-rk3566.patch + arm64-dts-imx8x-colibri-correct-sodimm-pad-settings.patch + revert-arm64-dts-imx8mm-kontron-add-support-for-read.patch + revert-arm64-dts-imx8mp-kontron-add-support-for-read.patch + vxlan-fix-potential-null-ptr-deref-in-vxlan_gro_prep.patch + drm-renesas-rz-du-mipi_dsi-fix-return-path-on-error.patch + alarmtimer-remove-stale-return-description-from-alar.patch + opp-fix-race-between-opp-addition-and-lookup.patch + crypto-ccp-reverse-the-cleanup-order-in-psp_dev_dest.patch + crypto-ccp-fix-snp_filter_reserved_mem_regions-off-b.patch + crypto-atmel-sha204a-fix-blocking-and-non-blocking-r.patch + crypto-ecrdsa-fix-unknown-oid-check-in-ecrdsa_param_.patch + crypto-asymmetric_keys-fix-oob-read-in-pefile_digest.patch + arm-multi_v7_defconfig-correct-qcom_rpmh-and-qcom_rp.patch + dlm-fix-add-msg-handle-in-send_queue-ordered.patch + nilfs2-fix-backing_dev_info-reference-leak.patch + media-qcom-camss-vfe-fix-pix-subdev-naming-on-vfe-li.patch + media-iris-scale-mmcx-power-domain-on-sm8250.patch + media-venus-scale-mmcx-power-domain-on-sm8250.patch + iommu-amd-fix-a-stale-comment-about-which-legacy-mod.patch + soc-mediatek-mtk-mmsys-restore-mt8167-routing-masks-.patch + bpf-fix-crash-in-bpf_-set-remove-_dentry_xattr-for-n.patch + uaccess-fix-ignored_trailing-logic-in-copy_struct_to.patch + arm64-dts-mediatek-mt8192-asurada-move-pcie-dma-boun.patch + rust-alloc-fix-vec-extend_with-safety-comment.patch + clk-scmi-fix-clock-rate-rounding.patch + arm64-dts-qcom-kodiak-fix-ice-reg-size.patch + arm64-dts-qcom-sm8450-fix-ice-reg-size.patch + drm-hisilicon-hibmc-add-updating-link-cap-in-dp-dete.patch + drm-hisilicon-hibmc-fix-no-showing-when-no-connector.patch + drm-hisilicon-hibmc-move-display-contrl-config-to-hi.patch + drm-hisilicon-hibmc-use-clock-to-look-up-the-pll-val.patch + evm-terminate-and-bound-the-evm_xattrs-read-buffer.patch + thermal-hwmon-fix-critical-temperature-attribute-rem.patch + clk-scpi-unregister-child-clock-providers-on-remove.patch + net-sched-sch_hfsc-annotate-data-races-in-hfsc_dump_.patch + scsi-hisi_sas-add-slave_destroy-interface-for-v3-hw.patch + crypto-ccp-treat-zero-length-cert-chain-as-query-for.patch + spi-hisi-kunpeng-use-dev_err_probe-for-host-registra.patch + net-sched-sch_htb-do-not-change-sch-flags-in-htb_dum.patch + net-sched-sch_htb-annotate-data-races-i.patch + ipv6-addrconf-bail-out-of-dad_failure-when-state-is-.patch + ib-mlx5-fix-transport-domain-rollback-and-initialize.patch + rdma-hns-fix-arithmetic-overflow-in-calc_hem_config.patch + rdma-mlx5-fix-umr-xlt-cleanup-on-odp-populate-failur.patch + rdma-mlx5-fix-devx-subscribe-event-unwind-null-deref.patch + rdma-srpt-fix-integer-overflow-in-immediate-data-len.patch + rdma-hns-initialize-seqfile-before-creating-file.patch + drm-syncobj-fix-memory-leak-in-drm_syncobj_find_fenc.patch + selftests-bpf-reject-unsupported-k-option-in-vmtest..patch + selftests-bpf-fix-test-for-refinement-of-single-valu.patch + iommu-arm-smmu-qcom-fix-fastrpc-compatible-string-in.patch + selftests-mm-fix-resv_sz-when-parsing-arm64-signal-f.patch + firmware-arm_ffa-honor-partition-info-descriptor-siz.patch + arm64-dts-imx8dxl-evk-remove-unnecessary-pcie-ep-pro.patch + arm64-dts-imx8qxp-mek-remove-unnecessary-pcie-ep-vpc.patch + arm64-dts-imx95-19x19-evk-fix-pcie-ep-vpcie-supply.patch + media-atomisp-fix-memory-leak-in-atomisp_fixed_patte.patch + media-atomisp-gc2235-fix-uaf-and-memory-leak.patch + staging-media-atomisp-fix-loop-shadowing-in-ia_css_s.patch + riscv-dts-spacemit-set-console-baud-rate-on-milk-v-j.patch + firmware-smccc-fix-arm-smccc-soc_id-name-call.patch + firmware-arm_scmi-read-sensor-config-as-32-bit-value.patch + sysfs-clamp-show-return-value-in-sysfs_kf_read.patch + bitops-use-common-function-parameter-names.patch + regulator-dt-bindings-mt6359-drop-regulator-name-pat.patch + tools-nolibc-getopt-fix-potential-out-of-bounds-acce.patch + nilfs2-fix-return-in-nilfs_mkdir.patch + net-sched-sch_drr-annotate-data-races-around-cl-defi.patch + media-rockchip-rga-fix-too-small-buffer-size.patch + firmware-arm_scmi-fix-oob-in-scmi_power_name_get.patch + arm64-dts-qcom-lemans-add-power-domain-and-iface-clk.patch + arm64-dts-qcom-monaco-add-power-domain-and-iface-clk.patch + arm64-dts-qcom-sc7180-add-power-domain-and-iface-clk.patch + arm64-dts-qcom-kodiak-add-power-domain-and-iface-clk.patch + arm64-dts-qcom-sm8450-add-power-domain-and-iface-clk.patch + arm64-dts-qcom-sm8550-add-power-domain-and-iface-clk.patch + arm64-dts-qcom-sm8650-add-power-domain-and-iface-clk.patch + arm64-dts-qcom-sm8750-add-power-domain-and-iface-clk.patch + tracing-bound-synthetic-field-strings-with-seq_buf.patch + arm64-dts-qcom-lemans-add-edp-ref-clock-for-edp-phys.patch + writeback-drop-now-unnecessary-rcu_barrier-in-cgroup.patch + kernfs-fix-suspicious-rcu-usage-in-kernfs_put.patch + device-property-fix-fwnode-reference-leak-in-fwnode_.patch + driver-core-use-mod_delayed_work-to-prevent-lost-def.patch + revert-treewide-fix-probing-of-devices-in-dt-overlay.patch + of-dynamic-fix-overlayed-devices-not-probing-because.patch + crypto-eip93-fix-reset-ring-register-definition.patch + cpufreq-documentation-fix-sampling_down_factor-range.patch + cpufreq-conservative-simplify-frequency-limit-handli.patch + pwm-imx27-fix-variable-truncation-in-.apply.patch + rdma-mana_ib-use-ib_get_eth_speed-for-reporting-port.patch + bus-sunxi-rsb-always-check-register-address-validity.patch + pinctrl-spacemit-fix-null-check-in-spacemit_pin_set_.patch + rdma-irdma-fix-out-of-bounds-write-in-irdma_copy_use.patch + rdma-rxe-fix-a-use-after-free-problem-in-rxe_mmap.patch + ib-mlx4-fix-refcount-leak-in-add_port-error-path.patch + gpu-nova-core-vbios-stop-scanning-at-bios_max_scan_l.patch + gpu-nova-core-vbios-use-checked-arithmetic-for-bios-.patch + gpu-nova-core-vbios-avoid-reading-too-far-in-read_mo.patch + gpu-nova-core-replace-as-with-from-conversions-where.patch + gpu-nova-core-vbios-read-bittoken-using-frombytes.patch + rdma-hns-fix-warning-in-poll-cq-direct-mode.patch + rdma-hns-fix-log-flood-after-cmd_mbox-failure.patch + rdma-counter-fix-incorrect-port-index-in-rdma_counte.patch + pinctrl-meson-amlogic-a4-fix-gpio-output-glitch.patch + pm-sleep-use-complete-in-device_pm_sleep_init.patch + mips-fix-big-endian-stack-argument-fetching-in-o32-w.patch + mips-dec-remove-do_irq-call-indirection.patch + mips-ralink-mt7621-add-missing-__iomem.patch + mips-n64-add-__iomem-for-writel-call.patch + driver-core-fix-missing-jiffies-conversion-in-deferr.patch + driver-core-guard-deferred-probe-timeout-extension-w.patch + mtd-spi-nor-debugfs-fix-the-flags-list.patch + mtd-spi-nor-drop-duplicate-kconfig-dependency.patch + alsa-xen-front-reset-event-channel-state-on-stream-c.patch + alsa-xen-front-connect-event-channel-after-stream-pr.patch + alsa-seq-oss-fix-uaf-at-handling-events-with-embedde.patch + alsa-seq-midi-serialize-output-teardown-with-event_i.patch + selftests-fix-makefile-target-for-nsfs.patch + pinctrl-nuvoton-ma35d1-fix-mfp-register-offset-and-p.patch + pinctrl-cs42l43-fix-leaked-pm-reference-on-error-pat.patch + pinctrl-cs42l43-fix-polarity-on-debounce.patch + init-initramfs_test-wait_for_initramfs-before-runnin.patch + nvmet-tcp-fix-page-fragment-cache-leak-in-error-path.patch + nvmet-tcp-check-return-value-of-nvmet_tcp_set_queue_.patch + nvme-multipath-fix-flex-array-size-in-struct-nvme_ns.patch + nvme-pci-fix-out-of-bounds-access-in-nvme_setup_desc.patch + workqueue-drop-spurious-from-print_worker_info-fn-de.patch + ipv6-guard-against-possible-null-deref-in-__in6_dev_.patch + net-sched-cls_bpf-prevent-unbounded-recursion-in-off.patch + iommu-amd-fix-premature-break-in-init_iommu_one.patch + rtla-introduce-for_each_action-helper.patch + rtla-actions-restore-continue-flag-in-actions_perfor.patch + drm-tegra-gr2d-gr3d-initialize-address-register-map-.patch + drm-tegra-gr2d-gr3d-contain-pm-in-the-gr-d_probe-gr-.patch + gpu-host1x-allow-entries-in-bo-caches-to-be-freed.patch + drm-tegra-dc-fix-device-node-reference-leak-in-tegra.patch + gpu-host1x-fix-iommu_map_sgtable-return-value-check.patch + drm-tegra-fix-iommu_map_sgtable-return-value-check.patch + drm-nouveau-bios-specify-correct-display-fuse-regist.patch + libbpf-harden-parse_vma_segs-path-parsing.patch + bpftool-fix-typo-in-struct_ops-map-fd-generation-for.patch + libbpf-fix-uaf-in-strset__add_str.patch + arm-tegra-add-address-size-cells-to-chromium-based-f.patch + arm64-tegra-add-address-size-cells-to-chromium-based.patch + dax-kmem-account-for-partial-discontiguous-resource-.patch + rapidio-tsi721-prevent-a-bad-dereference-in-tsi721_d.patch + ocfs2-don-t-bug_on-an-invalid-journal-dinode.patch + ocfs2-kill-osb-system_file_mutex-lock.patch + crypto-hisilicon-qm-disable-error-report-before-flr.patch + crypto-inside-secure-eip93-add-check-for-devm_reques.patch + crypto-tegra-fix-dma_free_coherent-size-error.patch + crypto-tegra-return-enomem-when-input-buffer-allocat.patch + sched-deadline-reject-debugfs-dl_server-writes-for-o.patch + drm-msm-dp-fix-hpd-state-status-bit-shift-value.patch + drm-msm-dp-fix-the-isr_-enum-values.patch + edac-igen6-fix-call-trace-due-to-missing-release.patch + edac-skx_common-skx-fix-ubsan-shift-out-of-bounds-in.patch + arm64-dts-st-fix-sai-addresses-on-stm32mp251.patch + rdma-umem-add-ib_umem_is_contiguous-stub-for-config_.patch + rdma-rxe-fix-toctou-heap-overflow-in-get_srq_wqe.patch + rdma-rxe-copy-wqe-to-local-buffer-in-non-srq-receive.patch + revert-media-venus-hfi_platform-correct-supported-co.patch + media-qcom-venus-drop-extra-padding-in-nv12-raw-size.patch + media-qcom-venus-relax-encoder-frame-blur-dimension-.patch + media-qcom-venus-relax-encoder-frame-blur-step-size-.patch + amba-use-generic-driver_override-infrastructure.patch + cdx-use-generic-driver_override-infrastructure.patch + drivers-hv-vmbus-use-generic-driver_override-infrast.patch + rpmsg-use-generic-driver_override-infrastructure.patch + md-raid10-reset-read_slot-when-reusing-r10bio-for-di.patch + raid1-fix-nr_pending-leak-in-req_atomic-bad-block-er.patch + bpf-fix-bpf_prog_query-oob-write-and-cgroup-backward.patch + selftests-bpf-add-verification-for-bpf_prog_query-at.patch + libbpf-skip-hash-computation-when-loader-generation-.patch + libbpf-skip-endianness-swap-when-loader-generation-f.patch + ext4-fix-logflush-shutdown-ordering-to-allow-ordered.patch + spi-atmel-fix-dma-channel-and-bounce-buffer-leaks.patch + asoc-rsnd-fix-rsnd_soc_mask-width-to-single-nibble.patch + nfsd-fix-delegation-reference-leak-in-nfsd4_revoke_s.patch + arm-imx3-fix-ccm-node-reference-leak.patch + hid-wiimote-fix-table-layout-and-whitespace-errors.patch + wifi-ath12k-fix-incorrect-ht-vht-he-eht-mcs-reportin.patch + wifi-ath12k-fix-null-deref-in-change_sta_links-for-u.patch + ata-libata-fix-ata_exec_internal.patch + arm-imx31-fix-iim-mapping-leak-in-revision-check.patch + x86-cpu-keep-the-processor_select-menu-together.patch + nvdimm-btt-handle-preemption-in-btt-lane-acquisition.patch + scsi-revert-scsi-fix-sas_user_scan-to-handle-wildcar.patch + bpf-reject-exclusive-maps-as-inner-maps-in-map-in-ma.patch + libbpf-reject-non-exclusive-metadata-maps-in-the-sig.patch + libbpf-skip-initial_value-override-on-signed-loaders.patch + libbpf-skip-max_entries-override-on-signed-loaders.patch + scsi-pm8001-fix-error-code-in-non_fatal_log_show.patch + scsi-ufs-fix-wrong-value-printed-in-unexpected-upiu-.patch + bpf-fix-uaf-by-restoring-rcu-delayed-inode-freeing-i.patch + mm-fake-numa-fix-under-allocation-detection-in-unifo.patch + ext2-fix-ignored-return-value-of-generic_write_sync.patch + sched-restore-timer_slack_ns-when-resetting-rt-polic.patch + nvme-fix-fdp-fdpcidx-bounds-check.patch + driver-core-use-system_percpu_wq-instead-of-system_w.patch + bpf-reject-exclusive-maps-for-bpf_map_elem-iterators.patch + tick-sched-fix-toctou-in-nohz-idle-time-fetch.patch + lib-test_meminit-use-for-bools.patch + riscv-dts-sophgo-sg2044-use-hex-for-cpu-unit-address.patch + riscv-dts-sophgo-sg2042-use-hex-for-cpu-unit-address.patch + configfs_lookup-don-t-leave-s_dentry-dangling-on-fai.patch + lockdep-selftests-restore-migrate_disable-state-on-p.patch + lockdep-selftests-restore-sched_rt_mutex-state-on-pr.patch + ext4-fix-fast-commit-wait-wake-bit-mapping-on-64-bit.patch + drm-amdgpu-set-sub_block_index-for-mca-ras-sub-block.patch + bpftool-use-libbpf-error-code-for-flow-dissector-que.patch + vhost-fix-vhost_get_avail_idx-for-a-non-empty-ring.patch + iommu-vt-d-fix-rb-tree-corruption-in-probe-error-pat.patch + perf-x86-amd-core-always-use-the-nmi-latency-mitigat.patch + perf-x86-intel-uncore-fix-discovery-unit-lookup-for-.patch + perf-x86-amd-uncore-use-node-id-to-identify-df-and-u.patch + xfrm-fix-nat-related-field-inheritance-in-sa-migrati.patch + cxl-fwctl-fix-__fortify_panic.patch + drm-amdkfd-always-resume_all-after-suspend_all.patch + of-reserved_mem-avoid-post-init-uaf-when-alloc_reser.patch + ocfs2-rebase-copied-fsdlm-lvb-pointers-in-locking_st.patch + lib-kunit_iov_iter-repeatedly-call-alloc_pages_bulk.patch + ocfs2-fix-buffer-head-management-in-ocfs2_read_block.patch + ocfs2-reject-fitrim-ranges-shorter-than-a-cluster.patch + ocfs2-dlm-require-a-ref-for-locking_state-debugfs-op.patch + ocfs2-fix-race-between-ocfs2_control_install_private.patch + netfilter-nfnetlink_osf-fix-mss-parsing-on-big-endia.patch + netfilter-nfnetlink_cthelper-use-read-write-_once-fo.patch + netfilter-synproxy-drop-packets-if-timestamp-adjustm.patch + netfilter-synproxy-adjust-duplicate-timestamp-option.patch + netfilter-synproxy-fix-unaligned-memory-access-in-ti.patch + netfilter-synproxy-protect-nf_ct_seqadj_init-with-co.patch + alsa-usb-audio-qcom-initialize-offload-control-retur.patch + x86-cpu-remove-obsolete-aperfmperf_get_khz-declarati.patch + netfilter-conntrack-revert-ct-extension-genid-infras.patch + netfilter-conntrack-call-nf_ct_gre_keymap_destroy-if.patch + rdma-hfi1-open-code-rvt_set_ibdev_name.patch + ib-cm-fix-av-cm-device-leak-on-an-error-path-in-cm_i.patch + alsa-hda-fix-kconfig-dependency-of-hd-audio-pci.patch + rdma-irdma-fix-oob-read-during-cq-mr-registration.patch + rdma-irdma-initialize-iwmr-access-during-mr-registra.patch + arm64-dts-imx8mp-kontron-reduce-eeram-spi-clock-freq.patch + arm64-dts-imx95-correct-pcie-outbound-address-space-.patch + arm64-dts-lx2162a-clearfog-use-rev2-soc-dtsi.patch + arm64-dts-tqma8mpql-mba8mpxl-configure-sai-clock-in-.patch + arm64-dts-imx8mp-kontron-fix-gpio-for-display-power-.patch + rdma-siw-fix-endpoint-socket-association-handling.patch + bpf-clear-rb-node-linkage-when-freeing-bpf_rb_root.patch + bpf-check-tail-zero-of-bpf_map_info.patch + bpf-check-tail-zero-of-bpf_prog_info.patch + bpf-update-transport_header-when-encapsulating-udp-t.patch + wifi-wcn36xx-fix-heap-overflow-from-oversized-firmwa.patch + wifi-wcn36xx-fix-oob-read-from-firmware-count-in-pri.patch + wifi-wcn36xx-fix-oob-read-from-short-trigger-ba-firm.patch + alsa-seq-fix-partial-userptr-event-expansion.patch + riscv-cpu_ops-change-return-value-type-of-cpu_is_sto.patch + riscv-stacktrace-remove-bogus-0x4-offset-in-non-fp-w.patch + alsa-seq-clear-variable-event-pointer-on-read.patch + bpf-fix-nmi-tracepoint-re-entry-deadlock-on-lru-lock.patch + kunit-tool-don-t-write-to-stdout-when-it-should-be-d.patch + powerpc-8xx-implement-get_direction-in-cpm1.patch + bpf-fix-null-pointer-dereference-in-bpf_task_from_vp.patch + acpi-ipmi-fix-message-kref-handling-on-dead-device.patch + cpufreq-documentation-fix-conservative-governor-freq.patch + thermal-testing-reject-missing-command-arguments.patch + btrfs-don-t-force-dio-writes-to-be-serialized.patch + ib-mlx5-don-t-take-the-rereg_mr-fallback-without-a-n.patch + ib-mlx5-properly-support-implicit-odp-rereg_mr.patch + ib-mlx5-remove-unused-mkc-bits-in-mlx5r_umr_update_m.patch + ib-mlx5-pull-the-pdn-out-of-the-depths-of-the-umr-ma.patch + ib-mlx5-don-t-mangle-the-mr-pd-inside-the-rereg-call.patch + spi-ep93xx-fix-double-free-of-zeropage-on-dma-setup-.patch + asoc-amd-acp-sdw-legacy-bound-dai-link-iteration.patch + asoc-amd-acp-sdw-sof-bound-dai-link-iteration.patch + firmware_loader-fix-recursive-lock-in-device_cache_f.patch + configfs-fix-lockless-traversals-of-s_children.patch + watchdog-unregister-pm-notifier-on-watchdog-unregist.patch + pinctrl-qcom-fix-resolving-register-base-address-fro.patch + scsi-target-fix-hexadecimal-chap_i-handling.patch + scsi-target-remove-tcm_loop-target-reset-handling.patch + pinctrl-mediatek-mt8516-fix-schmitt-trigger-register.patch + pinctrl-mediatek-mt8167-fix-schmitt-trigger-register.patch + vmalloc-fix-null-pointer-dereference-in-is_vm_area_h.patch + hwspinlock-qcom-avoid-uninitialized-struct-members.patch + sched-fair-fix-cpu_util-runnable_avg-arithmetic.patch + arm-configs-drop-duplicated-config_ext4_fs.patch + wifi-mt76-mt7925-clean-up-dma-on-probe-failure.patch + wifi-mt76-use-kfree_rcu-for-offchannel-link-in-mt76_.patch + wifi-mt76-mt7996-add-missing-max_remain_on_channel_d.patch + wifi-mt76-mt7925-fix-stale-pointer-comparisons-in-ch.patch + wifi-mt76-mt7925-keep-tx-ba-state-in-the-primary-wci.patch + wifi-mt76-mt792x-skip-mld-header-rewrite-for-802.3-e.patch + wifi-mt76-mt7925-validate-skb-length-in-testmode-que.patch + wifi-mt76-mt7996-fix-possible-token-leak-in-mt7996_t.patch + wifi-mt76-mt7996-fix-possible-null-pointer-dereferen.patch + wifi-mt76-mt7996-fix-reading-zeroed-info-control.fla.patch + wifi-mt76-mt7996-limit-work-in-set_bitrate_mask.patch + wifi-mt76-fix-argument-to-ieee80211_is_first_frag.patch + wifi-mt76-mt7915-fix-potential-tx_retries-underflow.patch + wifi-mt76-mt7921-fix-potential-tx_retries-underflow.patch + wifi-mt76-mt7925-fix-potential-tx_retries-underflow.patch + wifi-mt76-mt7996-fix-potential-tx_retries-underflow.patch + btrfs-fix-invalid-pointer-dereference-in-__btrfs_run.patch + alsa-aloop-drop-superfluous-break.patch + gpio-mt7621-fix-interrupt-banks-mapping-on-gpio-chip.patch + wifi-ath12k-enable-ieee80211_vht_ext_nss_bw_capable-.patch + fbdev-sm501fb-fix-buffer-errors-in-of-binding-code.patch + vfs-add-fs_userns_delegatable-flag-and-set-it-for-nf.patch + hwmon-it87-clamp-negative-values-to-zero-in-set_fan.patch + btrfs-zoned-don-t-account-data-relocation-space-info.patch + revert-btrfs-fix-the-file-offset-calculation-inside-.patch + btrfs-zoned-always-set-max_active_zones-for-zoned-de.patch + btrfs-annotate-lockless-read-of-defrag_bytes-in-shou.patch + btrfs-fix-deadlock-cloning-inline-extent-when-using-.patch + igc-skip-rx-timestamp-header-for-frame-preemption-ve.patch + asoc-sma1307-fix-uevent-string-leaks-in-fault-worker.patch + ib-mlx4-fill-in-the-access_flags-if-ib_mr_rereg_acce.patch + nfsd-handle-layout-stid-in-nfsd4_drop_revoked_stid.patch + spi-meson-spifc-fix-runtime-pm-leak-on-remove.patch + asoc-codecs-aw88261-fix-incorrect-masks-for-boost-re.patch + vduse-hold-vduse_lock-across-idr-lookup-in-open-path.patch + vhost-vdpa-validate-virtqueue-index-in-mmap-and-faul.patch + virtio-rtc-tear-down-old-virtqueues-before-restore.patch + virtio_console-read-size-from-config-space-during-de.patch + vduse-requeue-failed-read-to-send_list-head.patch + vhost-net-complete-zerocopy-ubufs-only-once.patch + tools-virtio-check-mmap-return-value-in-vringh_test.patch + vdpa-octeon_ep-fix-pf-vf-mailbox-data-address-calcul.patch + vdpa-octeon_ep-fix-irq-to-ring-mapping-in-interrupt-.patch + asoc-cs35l56-fix-missing-calls-to-wm_adsp2_remove.patch + asoc-cs35l56-don-t-leave-parent-irq-disabled-if-syst.patch + ext4-fix-err_ptr-0-in-ext4_mkdir.patch + tools-missed-broadcast_neigh-if_link-uapi-header.patch + netlink-specs-rt-link-missed-broadcast-neigh.patch + bonding-3ad-add-lacp_strict-configuration-knob.patch + bonding-3ad-fix-carrier-when-no-usable-slaves.patch + bonding-3ad-fix-mux-port-state-on-oper-down.patch + ext4-fix-kernel-bug-in-ext4_write_inline_data_end.patch + selftests-bpf-fix-bpf_iter-task_vma-test.patch + cxl-test-fix-integer-overflow-in-mock-lsa-bounds-che.patch + cxl-test-zero-out-lsa-backing-memory-to-avoid-leakin.patch + of-cpu-add-check-in-__of_find_n_match_cpu_property.patch + vfio-qat-fix-f_pos-race-in-qat_vf_resume_write.patch + bpf-tighten-cgroup-storage-cookie-checks-for-prog-ar.patch + pinctrl-sunxi-a523-remove-unneeded-irq-remuxing-flag.patch + pinctrl-airoha-generalize-pins-group-function-confs-.patch + pinctrl-airoha-an7581-add-missed-gpio32-pin-group.patch + pinctrl-airoha-an7581-fix-misprint-in-gpio19-pinconf.patch + arm64-dts-allwinner-a523-add-missing-gpio-interrupt.patch + asoc-cs35l56-fix-possible-uninitialized-value-in-cs3.patch + s390-process-fix-kernel-thread-function-pointer-type.patch + bluetooth-hci_qca-fix-null-pointer-dereference-in-qc.patch + bluetooth-eir-fix-stack-oob-write-when-prepending-th.patch + bluetooth-hci_event-fix-simultaneous-discovery-stuck.patch + bluetooth-hci_core-fix-uaf-in-hci_unregister_dev.patch + bluetooth-btmtk-fix-urb-leak-in-alloc_mtk_intr_urb-e.patch + bluetooth-hci-validate-codec-capability-element-leng.patch + bluetooth-vhci-validate-devcoredump-state-before-sid.patch + fs-efs-remove-unneeded-debug-prints.patch + rdma-mlx5-remove-dct-restrack-tracking.patch + rdma-mlx5-remove-raw-rss-qp-restrack-tracking.patch + rdma-mlx5-fix-undefined-shift-of-user-rq-wqe-size.patch + rdma-mlx5-release-the-hw-provided-uar-index-rather-t.patch + asoc-sof-intel-hda-sdw-bpt-select-snd_sof_sof_hda_sd.patch + asoc-codecs-hdac_hdmi-validate-written-enum-value.patch + asoc-fsl-fsl_audmix-validate-written-enum-values.patch + asoc-tegra-tegra210_ahub-validate-written-enum-value.patch + net-dsa-qca8k-fix-led-devicename-when-using-external.patch + net-sched-cls_flow-dont-expose-folded-kernel-pointer.patch + net-fib_rules-don-t-dump-dying-fib_rule-in-fib_rules.patch + bridge-cfm-reject-invalid-ccm-interval-at-configurat.patch + sctp-validate-embedded-address-parameter-length.patch + net-pfcp-allocate-per-cpu-tstats-for-pfcp-netdevs.patch + net-sched-sch_hfsc-don-t-make-class-passive-twice.patch + tipc-require-net-admin-for-tipcv2-netlink-mutators.patch + tipc-prevent-snt_unacked-underflow-on-conn_ack.patch + tipc-reject-inverted-service-ranges-from-peer-bindin.patch + cxl-test-unregister-cxl_acpi-in-cxl_test_init-error-.patch + cxl-test-add-check-after-kzalloc-memory-in-alloc_moc.patch + crypto-marvell-octeontx-fix-dma-cleanup-using-wrong-.patch + crypto-cavium-cpt-fix-dma-cleanup-using-wrong-loop-i.patch + crypto-rng-free-default-rng-on-module-exit.patch + alsa-usb-audio-qcom-guard-sideband-endpoint-removal.patch + alsa-seq-fix-kernel-heap-address-leak-in-bounce_erro.patch + spi-xilinx-use-fifo-occupancy-register-to-determine-.patch + iommu-avoid-copying-the-user-array-twice-in-the-full.patch + asoc-adau1372-clear-pll_en-on-failed-pll-lock-withou.patch + power-supply-core-fix-supplied_from-allocations.patch + handshake-require-admin-permission-for-done-command.patch + tcp-clear-sock_ops-cb-flags-before-force-closing-a-c.patch + virtio_net-do-not-allow-tunnel-csum-offload-for-non-.patch + net-sched-sch_fq_codel-do-not-call-qdisc_tree_reduce.patch + net-sched-sch_codel-do-not-call-qdisc_tree_reduce_ba.patch + net-sched-sch_dualpi2-do-not-call-qdisc_tree_reduce_.patch + net-mana-initialize-gdma-queue-id-to-invalid_queue_i.patch + net-mana-guard-tx-wq-object-destroy-with-invalid_man.patch + net-watchdog-fix-refcount-tracking-races.patch + net-ethernet-mtk_wed-fix-loading-wo-firmware-for-mt7.patch + net-sched-sch_dualpi2-add-missing-module-alias.patch + bpf-run-generic-devmap-egress-prog-on-private-skb.patch + net-mlx5-check-max_macs-devlink-param-value-against-.patch + bpf-fix-setting-retval-to-eperm-for-cgroup-hooks-not.patch + octeontx2-af-npc-fix-size-of-entry2cntr_map.patch + net-ethernet-mtk_wed-debugfs-correct-index-in-wed_am.patch + net-wwan-t7xx-check-skb_clone-in-control-tx.patch + dpll-support-dynamic-pin-index-allocation.patch + dpll-enhance-and-consolidate-reference-counting-logi.patch + dpll-fix-stale-iteration-in-dpll_pin_on_pin_unregist.patch + dpll-send-delete-notification-before-unregister-in-o.patch + dpll-emit-per-dpll-delete-notifications-in-dpll_pin_.patch + dpll-guard-sync-pair-removal-on-full-pin-unregister.patch + dpll-balance-create-delete-notifications-in-__dpll_p.patch + landlock-fix-unmarked-concurrent-access-to-socket-fa.patch + net-bcmgenet-use-weighted-round-robin-tx-dma-arbitra.patch + net-airoha-fix-register-index-for-tx-fwd-counter-con.patch + net-airoha-fix-debugfs-new-tuple-display-for-ipv4-ro.patch + kcm-use-write_once-when-changing-lower-socket-callba.patch + alsa-seq-oss-serialize-readq-reset-state-with-q-lock.patch + alsa-seq-avoid-stale-fifo-cells-during-resize.patch + netfilter-nf_conncount-callers-must-hold-rcu-read-lo.patch + alsa-core-fix-unintuitive-behavior-of-snd_power_ref_.patch + cifs-remove-all-cifs-files-before-kill-super.patch + smb-client-always-return-a-value-for-fs_ioc_getflags.patch + selftests-bpf-fix-typo-in-verify_umulti_link_info.patch + selftests-bpf-initialize-operation-name-before-use.patch + bpf-fix-bpf_get-setsockopt-to-tos-for-ipv4-mapped-ip.patch + udf-fix-nls-leak-on-udf_fill_super-failure.patch + bpf-sockmap-reject-overflowing-copy-len-in-bpf_msg_p.patch + net-remove-addr_len-argument-of-recvmsg-handlers.patch + sockmap-fix-use-after-free-in-udp_bpf_recvmsg.patch + bpf-sockmap-fix-integer-overflow-in-bpf_msg_pop_data.patch + mips-mm-fix-out-of-bounds-write-in-maar_res_walk.patch + powerpc-perf-fix-preempt-count-underflow-in-fsl_emb_.patch + powerpc-powernv-fix-preempt-count-leak-in-pnv_kexec_.patch + powerpc-kexec-fix-double-get_cpu-imbalance-in-kexec_.patch + keys-use-acquire-when-reading-state-in-keyring-searc.patch + dt-bindings-vendor-prefixes-add-gira.patch + tipc-fix-uaf-in-tipc_l2_send_msg.patch + tcp-ipv6-clamp-default-adverting-mss-to-avoid-gso_by.patch + net-airoha-fix-always-true-condition-in-ppe1-queue-r.patch + net-ethernet-oa_tc6-interrupt-is-active-low-level-tr.patch + net-ethernet-oa_tc6-mdiobus-parent-initialized-with-.patch + net-ethernet-oa_tc6-remove-fcs-size-in-rx-frame.patch + dt-bindings-net-updated-interrupt-type-to-be-active-.patch + ionic-fix-check-in-ionic_get_link_ext_stats.patch + rdma-bnxt_re-free-srq-toggle-page-after-firmware-tea.patch + rdma-bnxt_re-avoid-displaying-the-kernel-pointer.patch + rdma-bnxt_re-move-the-uapi-methods-to-a-dedicated-fi.patch + rdma-bnxt_re-fail-dbr-related-page-allocation-uapis-.patch + ksmbd-fix-use-after-free-in-same_client_has_lease.patch + mfd-rsmu-fix-page-register-setup.patch + mfd-cs42l43-sanity-check-firmware-size.patch + ocfs2-fix-circular-locking-dependency-in-ocfs2_dio_e.patch + 9p-avoid-returning-err_ptr-0-from-mkdir-operations.patch + net-9p-fix-race-condition-on-rdma-state-in-trans_rdm.patch + eventpoll-rename-ep_remove_safe-back-to-ep_remove.patch + eventpoll-expand-top-of-file-overview-locking-doc.patch + eventpoll-rename-attach_epitem-to-ep_attach_file.patch + eventpoll-split-ep_insert-into-alloc-register-stages.patch + eventpoll-extract-ep_deliver_event-from-ep_send_even.patch + eventpoll-wrap-ep_unactive_ptr-in-typed-sentinel-hel.patch + eventpoll-rename-epi-next-and-txlist-for-clarity.patch + eventpoll-fix-epoll_wait-report-false-negative.patch + gpiolib-acpi-only-trigger-activeboth-interrupts-on-b.patch + i3c-master-svc-fix-missed-ibi-after-false-slvstart-o.patch + staging-nvec-fix-use-after-free-in-nvec_rx_completed.patch + perf-debuginfo-fix-libdw-api-contract-violations.patch + coresight-cti-fix-dt-filter-signals-silently-ignored.patch + soundwire-don-t-program-sdw_scp_busclock_scale-on-a-.patch + soundwire-fix-bug-in-sdw_add_element_group_count-fou.patch + coresight-etm4x-remove-the-state_needs_restore-flag.patch + coresight-ete-always-save-state-on-power-down.patch + coresight-etm4x-correct-trcvmidcctlr1-save-and-resto.patch + pci-aspm-don-t-reconfigure-aspm-entering-low-power-s.patch + pci-introduce-named-defines-for-pci-rom.patch + pci-check-rom-header-and-data-structure-addr-before-.patch + x86-platform-olpc-xo15-drop-wakeup-source-on-driver-.patch + platform-x86-xo15-ebook-fix-wakeup-source-and-gpe-ha.patch + perf-sched-add-missing-mmap2-handler-in-timehist.patch + pci-loongson-do-not-ignore-downstream-devices-on-ext.patch + rust-alloc-fix-assert-in-vec-reserve-doc-test.patch + bus-mhi-ep-fix-potential-deadlock-in-mhi_ep_reset_wo.patch + coresight-fix-missing-error-code-when-trace-id-is-in.patch + clk-qcom-cmnpll-account-for-reference-clock-divider.patch + phy-phy-can-transceiver-check-driver-match-and-drive.patch + perf-pmu-skip-test-on-arm64-when-slots-is-zero.patch + clk-at91-sam9x7-fix-gmac_gclk-clock-definition.patch + soundwire-intel_ace2x-release-bpt_stream-when-close-.patch + coresight-fix-source-not-disabled-on-idr_alloc_u32-f.patch + mailbox-mpfs-fix-check-for-syscon-presence-in-mpfs_m.patch + mailbox-mtk-adsp-fix-uaf-during-device-teardown.patch + pci-dwc-fix-signedness-bug-in-fault-injection-test-c.patch + perf-build-id-fix-off-by-one-bug-when-printing-kerne.patch + perf-inject-add-convert-callchain-option.patch + perf-event-fix-size-of-synthesized-sample-with-branc.patch + perf-inject-fix-itrace-branch-stack-synthesis.patch + staging-most-video-avoid-double-free-on-video-regist.patch + usb-host-max3421-fix-shift-out-of-bounds-in-max3421_.patch + usb-host-max3421-reject-hub-port-requests-for-non-ex.patch + perf-test-amd-ibs-fix-incorrect-kernel-version-check.patch + gpib-fix-inappropriate-ioctl-error-return.patch + char-tlclk-fix-use-after-free-in-tlclk_cleanup.patch + gpib-fix-double-decrement-of-descriptor_busy-in-comm.patch + gpib-cb7210-fix-region-leak-when-request_irq-fails.patch + clk-renesas-rzg2l-rename-iterator-in-for_each_mod_cl.patch + thunderbolt-test-add-kunit-regression-tests-for-xdom.patch + thunderbolt-add-kunit-test-for-tb_property_merge_dir.patch + thunderbolt-test-add-kunit-tests-for-property-parser.patch + powerpc-tools-perf-initialize-error-code-in-auxtrace.patch + pci-qcom-disable-aspm-l0s-for-sa8775p.patch + perf-header-sanity-check-header_event_desc-attr.size.patch + iio-light-si1133-reset-counter-to-prevent-race-condi.patch + iio-light-si1133-prevent-race-condition-on-timeout.patch + iio-magnetometer-ak8975-fix-potential-kernel-stack-m.patch + iio-adc-xilinx-ams-fix-out-of-bounds-channel-lookup-.patch + iio-accel-mma8452-handle-i2c-read-error-s-in-mma8452.patch + iio-tcs3472-power-down-chip-on-probe-failure.patch + clk-at91-keep-securam-node-alive-while-mapping-it.patch + hid-logitech-hidpp-remove-excess-kernel-doc-member-i.patch + fs-ntfs3-add-bounds-check-to-run_get_highest_vcn.patch + fs-ntfs3-fix-mount-failure-on-64k-page-size-kernels.patch + drm-amd-display-add-missing-kdoc-for-allm-parameters.patch + thunderbolt-debugfs-fix-margining-error-counter-buff.patch + dmaengine-imx-sdma-refine-spba-bus-searching-in-prob.patch + dt-bindings-dma-nvidia-tegra186-gpc-dma-make-reset-o.patch + perf-fix-off-by-one-stack-buffer-overflow-in-kallsym.patch + perf-annotate-fix-crashes-on-empty-annotate-windows.patch + perf-tools-guard-test_bit-from-out-of-bounds-sample-.patch + perf-sched-fix-thread-reference-leak-in-latency_swit.patch + perf-sched-replace-bug_on-on-invalid-cpu-with-gracef.patch + perf-sched-fix-null-dereference-in-latency_runtime_e.patch + perf-tools-add-bounds-check-to-cpu__get_node.patch + perf-sched-cap-max_cpu-at-max_cpus-in-timehist-sampl.patch + perf-sched-fix-register_pid-overflow-strcpy-and-bug_.patch + perf-mmap-guard-cpu__get_node-return-in-aio_bind.patch + perf-stat-bounds-check-cpu-index-in-topology-aggrega.patch + perf-c2c-bounds-check-cpu-and-node-ids-before-bitmap.patch + perf-c2c-bounds-check-cpu-ids-in-setup_nodes-topolog.patch + perf-sched-clean-up-idle_threads-entry-on-init-failu.patch + perf-sched-use-thread__put-in-free_idle_threads.patch + perf-sched-replace-bug_on-and-add-null-checks-in-rep.patch + perf-mmap-fix-null-deref-in-aio-cleanup-on-alloc-fai.patch + perf-stat-introduce-perf_env__get_cpu_topology-to-gu.patch + perf-c2c-fix-use-after-free-in-he__get_c2c_hists-err.patch + perf-timechart-fix-cpu2y-oob-read-on-untrusted-cpu-i.patch + perf-tools-fix-int16_t-truncation-of-max_cpu_num-in-.patch + dt-bindings-clock-qcom-add-x1p42100-camera-clock-con.patch + clk-qcom-camcc-x1e80100-add-support-for-camera-qdss-.patch + mshv-add-bounds-check-on-vp_index-in-mshv_intercept_.patch + dmaengine-qcom-gpi-set-dma_private-capability.patch + dmaengine-fix-possible-use-after-free.patch + dmaengine-dma-axi-dmac-properly-free-struct-axi_dmac.patch + dmaengine-dma-axi-dmac-use-dma-pool-to-manange-dma-d.patch + clk-qcom-a53-corrected-frequency-multiplier-for-1152.patch + sunrpc-fix-error-handling-in-rpc_sysfs_xprt_switch_a.patch + pnfs-filelayout-fix-cheking-if-a-layout-is-striped.patch + xprtrdma-avoid-250-ms-delay-on-backlog-wakeup.patch + xprtrdma-close-lost-wakeup-race-in-xprt_rdma_alloc_s.patch + xprtrdma-post-receive-buffers-after-rpc-completion.patch + xprtrdma-use-sendctx-dma-state-for-send-signaling.patch + xprtrdma-decouple-req-recycling-from-rpc-completion.patch + nfsv4-pnfs-defer-return_range-callbacks-until-after-.patch + nfs-keep-pg_uptodate-clear-after-read-errors-in-page.patch + nfsv4-flexfiles-honor-ff_flags_no_io_thru_mds-on-fat.patch + nfsv4-flexfiles-honor-ff_flags_no_io_thru_mds-in-pg_.patch + nfs-use-nfsi-rwsem-to-protect-traversal-of-the-file-.patch + pci-mediatek-fix-operator-precedence-in-pcie_fts_num.patch + pwm-rzg2l-gpt-add-missing-newlines-to-dev_err_probe-.patch + pci-meson-propagate-devm_add_action_or_reset-failure.patch + pci-meson-add-missing-remove-callback.patch + fs-ntfs3-resize-log-one_page_buf-when-adopting-on-di.patch + platform-x86-intel-pmc-add-support-for-multiple-dmu-.patch + platform-x86-intel-pmc-rename-pmc-index-variable-to-.patch + platform-x86-intel-pmc-relocate-lpm_req_guid-to-pmc_.patch + platform-x86-intel-vsec-correct-kernel-doc-comments.patch + platform-x86-intel-vsec-decouple-add-link-helpers-fr.patch + platform-x86-intel-vsec-switch-exported-helpers-from.patch + platform-x86-intel-vsec-return-real-error-codes-from.patch + platform-x86-intel-vsec-restore-bar-fallback-for-hea.patch + perf-tools-fix-get_max_num-size_t-underflow-on-empty.patch + perf-tools-use-scnprintf-in-cpu_map__snprint-to-prev.patch + perf-tools-use-perf_env__get_cpu_topology-in-machine.patch + pci-rcar-host-remove-unused-list_head-res.patch + perf-sched-bounds-check-prio-before-test_bit-in-time.patch + perf-sched-fix-idle-hist-callchain-display-using-wro.patch + perf-bpf-use-scnprintf-in-snprintf_hex-and-synthesiz.patch + perf-hists-fix-snprintf-in-hists__scnprintf_title-ui.patch + xprtrdma-fix-ep-kref-imbalance-on-addr_change.patch + xprtrdma-initialize-re_id-before-removal-registratio.patch + xprtrdma-check-frwr_wp_create-during-connect.patch + xprtrdma-document-and-assert-reply-handler-invariant.patch + xprtrdma-resize-reply-buffers-before-reposting-recei.patch + xprtrdma-fix-bcall-rep-leak-and-unbounded-peek.patch + xprtrdma-sanitize-the-reply-credit-grant-after-parsi.patch + xprtrdma-repost-receive-buffers-for-malformed-replie.patch + xprtrdma-return-sendctx-slot-after-send-preparation-.patch + perf-s390-fix-textrel-in-python-extension-by-compili.patch + perf-cs-etm-queue-context-packets-for-frontend.patch + perf-pmu-fix-pmu_id-heap-underwrite-on-empty-identif.patch + perf-pmu-fix-perf_pmu__parse_scale-unit-oob-access-o.patch + tools-lib-api-fix-missing-null-termination-in-filena.patch + perf-symbols-fix-signed-overflow-in-sysfs__read_buil.patch + perf-symbols-bounds-check-.gnu_debuglink-section-dat.patch + perf-intel-pt-fix-snprintf-size-tracking-bug-in-insn.patch + perf-tools-fix-thread__set_comm_from_proc-on-empty-c.patch + perf-hwmon-fix-off-by-one-null-termination-on-sysfs-.patch + perf-hwmon-use-scnprintf-in-hwmon_pmu__for_each_even.patch + perf-hwmon-fix-parse_hwmon_filename-strlcpy-buffer-o.patch + perf-symbols-bounds-check-descsz-in-sysfs__read_buil.patch + perf-hwmon-guard-label-read-against-empty-or-failed-.patch + perf-tools-use-snprintf-in-dso__read_running_kernel_.patch + tools-lib-api-fix-filename__write_int-writing-uninit.patch + tools-lib-api-fix-mount_overload-snprintf-truncation.patch + perf-bpf-add-null-check-for-btf__type_by_id-in-synth.patch + perf-bpf-fix-map-data-leak-in-bpf_metadata_create-on.patch + perf-bpf-fix-metadata-leak-in-perf_env__add_bpf_info.patch + perf-symbols-add-bounds-checks-to-elf_read_build_id-.patch + perf-symbols-add-bounds-checks-to-read_build_id-note.patch + dt-bindings-phy-sc8280xp-qmp-pcie-disallow-bifurcati.patch + pci-mediatek-fix-possible-truncation-in-mtk_pcie_par.patch + pci-mediatek-use-actual-physical-address-instead-of-.patch + phy-freescale-phy-fsl-imx8qm-lvds-phy-fix-missing-pm.patch + pci-dwc-avoid-dwc_pcie_rasdes_debugfs_deinit-null-de.patch + revert-pci-msi-unmap-msi-x-region-on-error.patch + apparmor-fix-shadowing-of-plabel-that-prevents-cache.patch + apparmor-fix-race-in-unix-socket-mediation-when-peer.patch + apparmor-fix-refcount-leak-when-updating-the-sk_ctx.patch + security-apparmor-apparmorfs.c-conditionally-compile.patch + apparmor-check-label-build-before-no_new_privs-test.patch + apparmor-aa_label_alloc-use-aa_label_free-on-alloc-f.patch + apparmor-fix-rawdata_f_data-implicit-flex-array.patch + apparmor-grab-ns-lock-and-refresh-when-looking-up-ch.patch + apparmor-fix-potential-uaf-in-aa_replace_profiles.patch + apparmor-fix-null-pointer-dereference-in-unpack_pdb.patch + apparmor-remove-or-add-symlinks-to-rawdata-according.patch + apparmor-fix-return-in-ns_mkdir_op.patch + apparmor-fail-policy-unpack-on-accept2-allocation-fa.patch + apparmor-aa_getprocattr-free-procattr-leak-on-format.patch + apparmor-put-secmark-label-after-secid-lookup.patch + apparmor-don-t-audit-files-pointing-to-aa_null.dentr.patch + apparmor-fix-uninitialised-pointer-passed-to-audit_l.patch + i3c-mipi-i3c-hci-quieten-initialization-messages.patch + i3c-mipi-i3c-hci-allow-for-multi-bus-instances.patch + i3c-mipi-i3c-hci-switch-pio-data-allocation-to-devm_.patch + i3c-mipi-i3c-hci-preserve-run-bit-when-aborting-dma-.patch + i3c-master-add-wq_percpu-to-alloc_workqueue-users.patch + i3c-master-make-hot-join-workqueue-freezable-to-bloc.patch + i3c-add-sysfs-entry-and-attribute-for-device-nack-re.patch + i3c-master-replace-warn_on-with-dev_err-in-i3c_dev_f.patch + i3c-master-introduce-optional-runtime-pm-support.patch + i3c-master-add-i3c_master_do_daa_ext-for-post-hibern.patch + i3c-master-move-rstdaa-error-suppression.patch + i3c-master-consolidate-hot-join-daa-work-in-the-core.patch + i3c-master-ensure-hot-join-operations-are-stopped-on.patch + i3c-master-defer-new-device-registration-out-of-daa-.patch + i3c-master-prevent-reuse-of-dynamic-address-on-devic.patch + apparmor-fix-label-can-not-be-immediately-before-a-d.patch + accel-ivpu-fix-hws-command-queue-leak-on-registratio.patch + sparc-led-avoid-trimming-a-newline-from-empty-writes.patch + perf-maps-add-maps__mutate_mapping.patch + perf-symbols-fix-bswap-copy-paste-error-for-32-bit-e.patch + perf-symbols-validate-p_filesz-before-use-in-filenam.patch + perf-symbols-break-infinite-loop-on-zero-filled-note.patch + perf-tools-don-t-read-build-ids-from-non-regular-fil.patch + perf-tools-add-o_cloexec-to-open-calls-in-dso-and-el.patch + perf-tools-fix-uninitialized-pathname-on-uncompresse.patch + perf-dso-fix-heap-overflow-in-dso__get_filename-on-d.patch + perf-dso-set-error-code-when-open-fails-on-uncompres.patch + perf-tools-use-snprintf-for-root_dir-path-constructi.patch + perf-hwmon-fix-fd-check-to-accept-fd-0-in-hwmon_pmu_.patch + perf-sched-replace-void-1-sentinel-with-proper-runti.patch + perf-bpf-validate-func_info_rec_size-and-sub_id-in-s.patch + perf-bpf-reject-oversized-bpf-metadata-events-that-t.patch + perf-bpf-bounds-check-array-offsets-in-bpil_offs_to_.patch + perf-remove-redundant-kernel.h-include.patch + perf-cs-etm-reject-cpu-ids-that-would-overflow-signe.patch + gpio-mlxbf3-fail-probe-if-gpiochip-registration-fail.patch + drm-i915-clear-crtc-color-blob-pointers-after-droppi.patch + drm-xe-fix-wa_oob-codegen-recipe-for-external-module.patch + spi-dw-fix-wrong-baudr-setting-after-resume.patch + i3c-master-update-dev_nack_retry_count-under-mainten.patch + i3c-master-add-missing-runtime-pm-get-in-dev_nack_re.patch + alsa-usb-audio-qcom-free-sideband-sg_table-objects.patch + xfrm-fix-xfrm-state-cache-insertion-race.patch + xfrm-annotate-data-races-around-xfrm_policy_count-an.patch + xfrm-validate-selector-family-and-prefixlen-during-m.patch + perf-machine-use-snprintf-for-guestmount-path-constr.patch + perf-cs-etm-validate-num_cpu-before-metadata-allocat.patch + perf-cs-etm-require-full-global-header-in-auxtrace_i.patch + perf-cs-etm-bounds-check-cpu-in-cs_etm__get_queue.patch + perf-bpf-validate-array-presence-before-casting-bpf-.patch + perf-dso-set-standard-errno-on-decompression-failure.patch + asoc-tlv320aic3x-restrict-clkdiv-bypass-q-values-in-.patch + drm-amdkfd-avoid-double-unpin-of-doorbell-mmio-bos-o.patch + drm-amd-display-fix-mem_type-change-detection-for-as.patch + drm-amdkfd-fix-list_del-corruption-in-kfd_criu_resum.patch + drm-amdgpu-initialize-irq.lock-spinlock-earlier.patch + octeontx2-pf-fix-leak-of-sq-timestamp-buffer-on-tear.patch + net-psample-fix-info-leak-in-psample_attr_data.patch + sctp-hold-socket-lock-when-dumping-endpoints-in-sctp.patch + alsa-usb-audio-qcom-reject-stream-disable-with-no-ac.patch + alsa-usb-audio-qcom-clear-opened-when-stream-enable-.patch + pci-iproc-restore-.map_irq-for-the-platform-bus-driv.patch + spi-rpc-if-use-correct-device-for-hardware-reinitial.patch + virtio-net-fix-len-check-in-receive_big.patch + dpaa2-switch-fix-vlan-upper-check-not-rejecting-brid.patch + devlink-fix-parent-ref-leak-in-devl_rate_node_create.patch + devlink-fix-parent-ref-leak-on-tc-bw-failure.patch + net-airoha-fix-foe_check_time-allocation-size.patch + net-macb-add-tx-stall-timeout-callback-to-recover-fr.patch + flow_dissector-check-device-type-before-reading-eth_.patch + selftests-vlan_bridge_binding-fix-flaky-operational-.patch + alsa-usb-audio-kill-midi-2.0-urbs-before-freeing-end.patch + arm64-hw_breakpoint-reject-unaligned-watchpoints-tha.patch + thermal-intel-fix-dangling-resources-on-thermal_thro.patch + acpi-resource-amend-kernel-doc-style.patch + acpi-ipmi-fix-inverted-interface-check-in-ipmi_bmc_g.patch + ieee802154-restore-initial-state-on-failed-device_re.patch + ieee802154-avoid-calling-warn_on-on-enomem-in-cfg802.patch + ieee802154-remove-warn_on-in-cfg802154_pernet_exit.patch + ieee802154-fix-kernel-infoleak-in-dgram_recvmsg.patch + mac802154-prevent-overwrite-return-code-in-mac802154.patch + md-merge-mddev-has_superblock-into-mddev_flags.patch + md-merge-mddev-faillast_dev-into-mddev_flags.patch + md-merge-mddev-serialize_policy-into-mddev_flags.patch + md-raid1-honor-req_nowait-when-waiting-for-behind-wr.patch + md-raid1-free-r1_bio-when-req_nowait-is-set-and-read.patch + netfilter-ipset-fix-data-race-between-add-and-dump-i.patch + netfilter-ipset-annotate-pos-for-concurrent-readers-.patch + netfilter-ipset-don-t-use-test_bit-in-lockless-rcu-r.patch + netfilter-ipset-fix-order-of-kfree_rcu-and-rcu_assig.patch + netfilter-ipset-make-sure-gc-is-properly-stopped.patch + netfilter-nft_payload-reject-offsets-exceeding-65535.patch + netfilter-nft_meta_bridge-add-validate-callback-for-.patch + netfilter-flowtable-move-path-discovery-infrastructu.patch + netfilter-nft_flow_offload-zero-device-address-for-n.patch + netfilter-nf_reject-skip-iphdr-options-when-looking-.patch + netfilter-nft_meta_bridge-fix-nft_meta_bri_iifpvid-s.patch + mailbox-imx-forward-the-timeout-error-in-imx_mu_gene.patch + irqchip-crossbar-fix-parent-domain-resource-leak.patch + alloc_tag-fix-use-after-free-in-proc-allocinfo-after.patch + selftests-mm-restore-default-nr_hugepages-value-via-.patch + selftests-mm-restore-default-nr_hugepages-value-via-.patch-11147 + selftests-mm-fix-hugetlb-pathname-construction-in-hu.patch + selftests-mm-fix-cgroup-task-placement-and-drop-memo.patch + selftests-mm-size-tmpfs-according-to-pmd-page-size-i.patch + selftests-mm-free-dynamically-allocated-pmd-sized-bu.patch + selftest-mm-register-existing-mapping-with-userfault.patch + selftests-mm-ensure-destination-is-hugetlb-backed-in.patch + selftests-mm-skip-uffd-stress-test-when-nr_pages_per.patch + selftests-mm-clarify-alternate-unmapping-in-compacti.patch + selftests-mm-allow-pud-level-entries-in-compound-tes.patch + selftests-mm-fix-exclusive_cow-test-fork-handling.patch + net-marvell-prestera-initialize-err-in-prestera_port.patch + tipc-fix-use-after-free-of-the-discoverer-in-tipc_di.patch + net-ethernet-mtk_ppe-fix-rhashtable-leak-in-mtk_ppe_.patch + octeontx2-af-mcs-fix-unsupported-secy-stats-read.patch + octeontx2-pf-clear-stats-of-all-resources-when-freei.patch + octeontx2-pf-mcs-fix-mcs-resources-free-on-pf-shutdo.patch + net-emac-fix-null-pointer-dereference-in-emac_probe.patch + net-sched-act_ct-fix-nf_connlabels-leak-on-two-error.patch + net-airoha-fix-skb-priority-underflow-in-airoha_dev_.patch + ipv6-ndisc-fix-null-deref-in-accept_untracked_na.patch + ipv6-ioam-fix-type-confusion-of-dst_entry.patch + dpaa2-switch-do-not-accept-vlan-uppers-while-bridged.patch + rtc-abx80x-fix-the-rtc_vl_clr-clearing-all-status-fl.patch + rtc-ds1307-handle-oscillator-stop-flag-for-ds1337-ds.patch + bpf-fix-stack-slot-index-in-nospec-checks.patch + bpftool-fix-vmlinux-btf-leak-in-cgroup-commands.patch + bpf-zero-initialize-the-fib-lookup-flow-struct.patch + bpf-fix-effective-prog-array-index-with-bpf_f_preord.patch + power-sequencing-fix-abba-deadlock-in-pwrseq_device_.patch + gpiolib-initialize-return-value-in-gpiochip_set_mult.patch + drm-edid-fix-oob-read-in-drm_parse_tiled_block.patch + pci-endpoint-pci-epf-vntb-add-check-to-detect-db_cou.patch + pci-endpoint-pci-epf-ntb-add-check-to-detect-db_coun.patch + ice-fix-fdir-ctrl-vsi-resource-leak-in-ice_reset_all.patch + ice-fix-aq-error-code-comparison-in-ice_set_pausepar.patch + ice-call-netif_keep_dst-once-when-entering-switchdev.patch + rtc-isl1208-balance-enable_irq_wake-with-disable_irq.patch + ice-dpll-set-pointers-to-null-after-kfree-in-ice_dpl.patch + ice-dpll-fix-memory-leak-in-ice_dpll_init_info-error.patch + i40e-fix-i40e_debug-to-use-struct-i40e_hw-argument.patch + rtc-msc313-fix-null-deref-in-shared-irq-handler-at-p.patch + ksmbd-fix-use-after-free-of-conn-preauth_info-in-con.patch + ipv6-fix-null-ptr-deref-in-fib6_nh_mtu_change.patch + eth-bnxt-gather-and-report-hw-gro-stats.patch + eth-bnxt-rename-ring_err_stats-ring_drv_stats.patch + eth-bnxt-improve-the-timing-of-stats.patch + ipv4-fib-don-t-ignore-error-route-in-local-main-tabl.patch + md-raid5-use-stripe-state-snapshot-in-break_stripe_b.patch + md-raid5-avoid-r5_overlap-races-while-breaking-strip.patch + bpf-disable-xfrm_decode_session-hook-attachment.patch + netfilter-nf_nat-avoid-invalid-nat_net-pointer-use-o.patch + netfilter-nf_conncount-prevent-connlimit-drops-for-e.patch + netfilter-nft_synproxy-stop-bypassing-the-priv-info-.patch + netfilter-nft_compat-ebtables-emulation-must-reject-.patch + gpio-davinci-fix-irq-domain-leak-on-devm_kzalloc-fai.patch + ntb-epf-make-db_valid_mask-cover-only-real-doorbell-.patch + ntb-epf-report-0-based-doorbell-vector-via-ntb_db_ev.patch + ntb-epf-fix-doorbell-bitmask-and-irq-vector-handling.patch + alpha-pci-add-security_locked_down-check-to-pci_mmap.patch + alpha-pci-fix-__pci_mmap_fits-overflow-for-zero-leng.patch + net-bpf-check-master-for-null-in-xdp_master_redirect.patch + net-do-not-acquire-dev-tx_global_lock-in-netdev_watc.patch + net-dsa-sja1105-round-up-ptp-perout-pin-duration.patch + veth-fix-napi-leak-in-xdp-enable-error-path.patch + net-usb-lan78xx-restore-vlan-and-hash-filters-after-.patch + net-sched-cls_api-handle-tc_act_consumed-in-tcf_qeve.patch + ipv6-fix-error-handling-in-disable_ipv6-sysctl.patch + ipv6-fix-error-handling-in-ignore_routes_with_linkdo.patch + ipv6-fix-error-handling-in-forwarding-sysctl.patch + ipv6-fix-error-handling-in-disable_policy-sysctl.patch + ipv6-fix-state-corruption-during-proxy_ndp-sysctl-re.patch + ipv6-fix-missing-notification-for-ignore_routes_with.patch + eth-fbnic-fix-ordering-of-heartbeat-vs-ownership.patch + thermal-testing-zone-flush-work-items-during-cleanup.patch + acpi-processor_idle-mark-lpi-enter-functions-as-__cp.patch + smb-client-preserve-errors-from-smb2_set_sparse.patch + rtc-ds1307-fix-off-by-one-issue-with-wday-for-rx8130.patch + rtc-cmos-unregister-hpet-irq-handler-on-probe-failur.patch + net-dsa-realtek-fix-memory-leak-in-rtl8366rb_setup_l.patch + net-phy-realtek-clear-mdio_an_10gbt_ctrl_adv10g-bit.patch + octeontx2-af-validate-nix-maximum-lfs-correctly.patch + net-mvneta-re-enable-percpu-interrupt-on-resume.patch + net-sungem-fix-probe-error-cleanup.patch + net-ethernet-sunplus-spl2sw-fix-phy_node-refcount-le.patch + loongarch-move-struct-kimage-forward-declaration-bef.patch + loongarch-bpf-fix-outdated-tail-call-comments.patch + loongarch-bpf-fix-off-by-one-error-in-tail-call.patch + asoc-fsl_asrc_dma-fix-edma-maxburst-misalignment-wit.patch + net-udp_tunnel-prevent-double-queueing-in-udp_tunnel.patch + dt-bindings-net-renesas-ether-drop-example-ethernet-.patch + selftests-tls-size-splice_short-pipe-by-page-size.patch + net-hns3-unify-copper-port-ksettings-configuration-p.patch + net-hns3-refactor-mac-autoneg-and-speed-configuratio.patch + net-hns3-fix-permanent-link-down-deadlock-after-rese.patch + net-hns3-differentiate-autoneg-default-values-betwee.patch + alsa-fcp-fix-null-pointer-dereference-in-interface-l.patch + tracing-probes-fix-typo-in-a-log-message.patch + spi-sh-msiof-abort-transfers-when-reset-times-out.patch + acpi-rimt-only-defer-the-iommu-configuration-in-init.patch + riscv-fix-32-bit-call_on_irq_stack-frame-pointer-abi.patch + gpio-mvebu-fail-probe-if-gpiochip-registration-fails.patch + gpio-htc-egpio-use-managed-gpiochip-registration.patch + net-pse-pd-scope-pse_control-regulator-handle-to-kre.patch + seg6-validate-srh-length-before-reading-fixed-fields.patch + qede-fix-out-of-bounds-check-for-cqe-len_list.patch + net-enetc-check-the-number-of-bds-needed-for-xdp_fra.patch + sctp-fix-sctp_reset_streams-stream-list-length-limit.patch + sctp-add-init-verification-after-cookie-unpacking.patch + mips-dec-ensure-rtc-platform-device-deregistration-u.patch + mips-mm-add-check-for-highmem-before-removing-memory.patch + asoc-codecs-lpass-va-macro-add-sm6115-compatible.patch + asoc-codecs-lpass-va-macro-fix-lpass-codec-version-f.patch + hwmon-adm1275-prevent-reading-uninitialized-stack.patch + hwmon-pmbus-fix-passing-events-to-regulator-core.patch + hwmon-aspeed-g6-pwm-tach-guard-fan-rpm-calculation-a.patch + eth-fbnic-don-t-cache-shinfo-across-skb-realloc.patch + ipv6-fib6-fix-null-deref-in-fib6_walk_continue-on-mu.patch + usbnet-gl620a-fix-out-of-bounds-read-in-genelink_rx_.patch + net-phy-sfp-free-mii_bus-in-sfp_i2c_mdiobus_destroy.patch + net-libwx-fix-vmdq-mask-for-1-queue-mode.patch + net-gianfar-dispose-irq-mappings-on-probe-failure-an.patch + net-sched-sch_teql-introduce-slaves_lock-to-avoid-ra.patch + bridge-stp-fix-a-potential-use-after-free-when-delet.patch + drm-panthor-fix-potential-invalid-pointer-deref-in-g.patch + drm-panthor-don-t-overrule-pending-immediate-ticks-i.patch + drm-panthor-fix-a-leak-when-a-group-is-evicted-befor.patch + drm-panthor-interrupt-group-start-resumption-if-grou.patch + tracing-eprobes-allow-use-of-btf-names-to-dereferenc.patch + tracing-probes-remove-warn_on_once-from-parse_btf_ar.patch + tracing-events-fix-to-check-the-simple_tsk_fn-creati.patch + tracing-eprobe-read-the-complete-filter_ptr_string-p.patch + tracing-fprobe-fix-null-pointer-dereference-in-fprob.patch + tracing-probes-make-the-prefix-mandatory-for-comm-ac.patch + irqchip-gic-v3-its-fix-of-node-reference-leak.patch + irqchip-ts4800-fix-missing-chained-handler-cleanup-o.patch + sctp-fix-addr_wq_timer-race-in-sctp_free_addr_wq.patch + virtio_net-disable-cb-when-napi-is-busy-polled.patch + cxgb4-fix-decode-strings-dump-for-t6-adapters.patch + selftests-drv-net-tso-don-t-touch-dangerous-feature-.patch + net-sched-act_bpf-use-rcu_dereference_bh-to-read-the.patch + ksmbd-reject-undersized-dacls-before-parsing-aces.patch + ksmbd-fix-use-after-free-of-fp-owner.name-in-durable.patch + gpio-timberdale-return-enomem-on-dynamic-memory-allo.patch + pinctrl-meson-restore-non-sleeping-gpio-access.patch + net-sched-dualpi2-clear-stale-classification-on-filt.patch + net-sched-hhf-clear-heavy-hitter-state-on-reset.patch + fs-refuse-o_tmpfile-creation-with-an-unmapped-fsuid-.patch + afs-fix-error-code-in-afs_extract_vl_addrs.patch + afs-fix-double-netfs-initialisation-in-afs_root_iget.patch + afs-use-kvfree-to-free-memory-allocated-by-kvcalloc.patch + afs-remove-erroneous-seq-1-in-volume-lookup-loop.patch + afs-fix-bulk-lookup-malfunction-due-to-change-in-dir.patch + afs-fix-misplaced-inc-of-net-cells_outstanding.patch + afs-fix-reinitialisation-of-the-inode-in-particular-.patch + afs-fix-callback-service-message-parsers-to-pass-thr.patch + afs-fix-missing-null-pointer-check-in-afs_break_some.patch + afs-fix-vllist-leak.patch + afs-fix-lack-of-locking-around-modifications-of-net-.patch + afs-fix-premature-cell-exposure-through-afs.patch + afs-fix-the-volume-afs_volume_rm_tree-is-set-on.patch + afs-fix-unchecked-length-string-display-in-debug-sta.patch + minix-avoid-overflow-in-bitmap-block-count-calculati.patch + ovl-fix-comment-about-locking-order.patch + iomap-guard-io_size-eof-trim-against-concurrent-trun.patch + netfs-fix-netfs_create_write_req-to-handle-async-cac.patch + netfs-fix-writethrough-to-use-collection-offload.patch + netfs-fix-writeback-error-handling.patch + netfs-fix-folio-state-after-enomem-whilst-under-writ.patch + drm-xe-pt-fix-null-pointer-dereference-in-xe_pt_zap_.patch + drm-xe-userptr-hold-notifier_lock-for-write-on-injec.patch + drm-xe-hw_engine-fix-double-free-of-managed-bo-in-er.patch + drm-xe-pf-don-t-attempt-to-process-fast_req-or-event.patch + x86-uprobes-keep-shadow-stack-in-sync-for-emulated-c.patch + uprobes-x86-use-proper-mm_struct-in-__in_uprobe_tram.patch + cifs-fix-missing-credit-release-on-failure-in-cifs_i.patch + ata-sata_gemini-unwind-clocks-on-ide-pinctrl-errors.patch + ata-libata-scsi-limit-simulated-scsi-command-copy-to.patch + hid-picolcd-prevent-null-pointer-dereference-in-pico.patch + hid-core-fix-oob-read-in-hid_get_report-for-numbered.patch + arm64-mm-optimize-tlb-flush-in-unmap_hotplug_-pmd-pu.patch + hid-bpf-fix-hid_bpf_get_data-range-check.patch + selftests-hid-load-only-requested-struct_ops-maps.patch + selftests-hid-cover-hid_bpf_get_data-size-overflow.patch + arm64-sysreg-fix-bwe-field-encoding-in-id_aa64dfr2_e.patch + net-usb-net1080-validate-packet_len-before-pad-byte-.patch + gue-validate-remcsum-private-option-length.patch + netfilter-xt_u32-reject-invalid-shift-counts.patch + netfilter-xt_rateest-fix-u64-truncation-in-xt_ratees.patch + netfilter-ip6tables-mark-malformed-ipv6-extension-he.patch + netfilter-nft_set_rbtree-get-command-skips-end-eleme.patch + netfilter-xt_connmark-reject-invalid-shift-parameter.patch + net-mlx5-lag-mpesw-fix-missing-complete-on-devcom-er.patch + net-mlx5e-fix-hv-vhca-stats-zero-sized-buffer-alloca.patch + net-mlx5e-fix-hv-vhca-stats-agent-registration-race.patch + net-mlx5e-fix-publication-race-for-priv-channel_stat.patch + net-microchip-vcap-fix-races-on-the-shared-super-vca.patch + qede-fix-off-by-one-in-bd-ring-consumption-on-build_.patch + net-qualcomm-rmnet-validate-map-frame-length-before-.patch + net-sched-act_pedit-fix-toctou-heap-oob-write-in-tc-.patch + net-smc-fix-uaf-in-smc_cdc_rx_handler-by-pinning-the.patch + amt-fix-size-calculation-in-amt_get_size.patch + bluetooth-6lowpan-hold-l2cap-conn-across-debugfs-con.patch + bluetooth-mgmt-fix-adv-monitor-add-failure-cleanup.patch + bluetooth-sco-fix-a-race-condition-in-sco_sock_timeo.patch + bluetooth-iso-exclude-rfu-bits-from-iso_sdu_length.patch + bluetooth-bpa10x-avoid-oob-read-of-revision-string-i.patch + bluetooth-l2cap-fix-tx-ident-leak-for-commands-witho.patch + ring-buffer-fix-event-length-with-forced-8-byte-alig.patch + accel-amdxdna-use-unsigned-long-for-nr_pages-in-amdx.patch + net-tls-consume-empty-data-records-in-tls_sw_read_so.patch + net-usb-lan78xx-disable-vlan-filter-in-promiscuous-m.patch + gpio-dwapb-use-modern-pm-macros.patch + gpio-dwapb-reduce-allocation-to-single-kzalloc.patch + gpio-dwapb-defer-clock-gating-until-noirq.patch + tracing-make-tracepoint_printk-static-as-not-exporte.patch + accel-amdxdna-fix-potential-amdxdna_umap-lifetime-ra.patch + drm-v3d-reject-invalid-indirect-bo-handle-in-indirec.patch + net-mdio-select-regmap_mmio-instead-of-depending-on-.patch + net-sched-cake-reject-overhead-values-that-underflow.patch + octeontx2-pf-check-dmac-extraction-support-before-fi.patch + perf-x86-amd-core-avoid-enabling-brs-from-the-svm-re.patch + gpio-mvebu-free-generic-chips-on-unbind.patch + ipv4-igmp-fix-potential-uaf-in-igmp_gq_start_timer.patch + ipv6-mcast-fix-potential-uaf-in-mld-delayed-work.patch + ipv4-igmp-annotate-data-races-around-im-users.patch + ipv4-igmp-annotate-data-races-around-timer-related-f.patch + ipv4-igmp-fix-potential-memory-leaks-in-igmp_mod_tim.patch + netfilter-nft_lookup-fix-catchall-element-handling-w.patch + ipvs-pass-parsed-transport-offset-to-state-handlers.patch + ipvs-use-parsed-transport-offset-in-tcp-state-lookup.patch + ipvs-fix-pmtu-for-gue-gre-tunnel-icmp-errors.patch + ipvs-ensure-inner-headers-in-icmp-errors-are-in-head.patch + s390-zcrypt-remove-the-empty-file.patch + cifs-validate-dfs-referral-string-offsets.patch + sunrpc-release-lower-rpc_clnt-if-killed-waiting-for-.patch + sunrpc-pin-upper-rpc_clnt-across-the-tls-connect_wor.patch + dm-era-fix-null-pointer-dereference-in-metadata_open.patch + regulator-core-regulator_lock_two-should-test-for-ed.patch + selftests-net-fix-evp_md_ctx-leak-in-tcp_mmap.patch + net-mlx5-fix-l3-tunnel-entropy-refcount-leak.patch + octeontx2-af-fix-vf-bringup-affecting-pf-promiscuous.patch + drm-xe-remove-duplicate-kunit-test-bug.h-include.patch + smb-client-fix-overflow-in-passthrough-ioctl-bounds-.patch diff --cc queue-6.6/series index 4c778141ca,02713b028d..ca6432f6cc --- a/queue-6.6/series +++ b/queue-6.6/series @@@ -342,16 -342,538 +342,551 @@@ bpf-restrict-jit-predictor-flush-to-cbp bpf-skip-redundant-ibpb-in-pack-allocator.patch bpf-prefer-packs-that-won-t-trigger-an-ibpb-flush-on.patch bpf-prefer-dirty-packs-for-ebpf-allocations.patch +media-uvcvideo-avoid-partial-metadata-buffers.patch +media-uvcvideo-fix-buffer-sequence-in-frame-gaps.patch +media-uvcvideo-fix-sequence-number-when-no-eof.patch +dt-bindings-media-sun4i-a10-video-engine-add-interconnect-properties.patch +dt-bindings-power-imx93-add-mipi-phy-power-domain.patch +serial-msm-disable-dma-for-kernel-console-uart.patch +serial-8250_omap-clear-rx_running-on-zero-length-dma-completes.patch +rxrpc-rxrpc_verify_data-ensure-rx_dec_buffer-alloc.patch +rxrpc-fix-leak-of-released-call-in-recvmsg-msg_peek.patch +afs-fix-netns-teardown-to-cancel-the-preallocation-charger.patch +afs-fix-null-pointer-dereference-in-afs_get_tree.patch +afs-fix-further-netns-teardown-to-cancel-the-preallocation-charger.patch +fbcon-fix-null-pointer-dereference-for-a-console-without-vc_data.patch + clocksource-drivers-sun5i-handle-error-returns-from-.patch + drm-rockchip-test-for-imported-buffers-with-drm_gem_.patch + drm-tidss-drop-extra-drm_mode_config_reset-call.patch + drm-amdgpu-fix-integer-overflow-in-amdgpu_gem_align_.patch + drm-radeon-fix-integer-overflow-in-radeon_align_pitc.patch + drm-radeon-fix-memory-leak-in-radeon_ring_restore-on.patch + libbpf-report-error-when-a-negative-kprobe-offset-is.patch + documentation-proc-fix-section-numbering-in-table-of.patch + arm64-dts-rockchip-fix-gmac0-reset-pin-for-nanopi-r5.patch + arm64-dts-qcom-sdm845-mezzanine-fix-camss-ports-unit.patch + wifi-cfg80211-fix-grammar-in-mlo-group-key-error-mes.patch + arm64-tegra-fix-tegra234-mgbe-ptp-clock.patch + dt-bindings-pinctrl-nvidia-tegra234-add-missing-requ.patch + drm-amdkfd-validate-criu-restored-ids-before-idr_all.patch + driver-core-use-read_once-for-dev-driver-in-dev_has_.patch + wifi-rtw89-correct-data-type-for-scan-index-to-avoid.patch + wifi-rtw88-fix-oob-read-from-firmware-rx-descriptor-.patch + kconfig-fix-potential-null-pointer-dereference-in-co.patch + scsi-advansys-drop-isa_dma_api-remnants.patch + wifi-ath9k-fix-oob-access-from-firmware-tx-status-qu.patch + arm-dts-am335x-sl50-fix-audio-bitclock-and-frame-mas.patch + watchdog-sp5100_tco-use-efch-mmio-for-newer-hygon-fc.patch + watchdog-sama5d4_wdt-fix-wddis-detection-on-sam9x60-.patch + watchdog-sprd_wdt-remove-redundant-sprd_wdt_disable-.patch + media-cedrus-fix-failure-to-clean-up-hardware-on-pro.patch + media-v4l2-common-add-yuv24-format-info.patch + pinctrl-sunxi-fix-regulator-leak-in-sunxi_pmx_reques.patch + arm64-dts-rockchip-fix-rk809-interrupt-pin-on-rk3566.patch + arm64-dts-imx8x-colibri-correct-sodimm-pad-settings.patch + vxlan-fix-potential-null-ptr-deref-in-vxlan_gro_prep.patch + crypto-atmel-sha204a-fix-blocking-and-non-blocking-r.patch + crypto-ecrdsa-fix-unknown-oid-check-in-ecrdsa_param_.patch + crypto-asymmetric_keys-fix-oob-read-in-pefile_digest.patch + dlm-fix-add-msg-handle-in-send_queue-ordered.patch + nilfs2-fix-backing_dev_info-reference-leak.patch + iommu-amd-fix-a-stale-comment-about-which-legacy-mod.patch + arm64-dts-mediatek-mt8192-asurada-move-pcie-dma-boun.patch + clk-scmi-fix-clock-rate-rounding.patch + arm64-dts-qcom-sm8450-fix-ice-reg-size.patch + drm-hisilicon-hibmc-move-display-contrl-config-to-hi.patch + drm-hisilicon-hibmc-use-clock-to-look-up-the-pll-val.patch + evm-terminate-and-bound-the-evm_xattrs-read-buffer.patch + thermal-hwmon-fix-critical-temperature-attribute-rem.patch + clk-scpi-unregister-child-clock-providers-on-remove.patch + net-sched-sch_hfsc-annotate-data-races-in-hfsc_dump_.patch + crypto-ccp-treat-zero-length-cert-chain-as-query-for.patch + spi-hisi-kunpeng-use-dev_err_probe-for-host-registra.patch + net-sched-sch_htb-do-not-change-sch-flags-in-htb_dum.patch + net-sched-sch_htb-annotate-data-races-i.patch + ipv6-addrconf-bail-out-of-dad_failure-when-state-is-.patch + ib-mlx5-fix-transport-domain-rollback-and-initialize.patch + rdma-hns-fix-arithmetic-overflow-in-calc_hem_config.patch + rdma-mlx5-fix-devx-subscribe-event-unwind-null-deref.patch + rdma-srpt-fix-integer-overflow-in-immediate-data-len.patch + media-atomisp-fix-memory-leak-in-atomisp_fixed_patte.patch + firmware-arm_scmi-read-sensor-config-as-32-bit-value.patch + sysfs-clamp-show-return-value-in-sysfs_kf_read.patch + bitops-use-common-function-parameter-names.patch + regulator-dt-bindings-mt6359-drop-regulator-name-pat.patch + net-sched-sch_drr-annotate-data-races-around-cl-defi.patch + media-rockchip-rga-fix-too-small-buffer-size.patch + firmware-arm_scmi-fix-oob-in-scmi_power_name_get.patch + arm64-dts-qcom-sm8450-add-power-domain-and-iface-clk.patch + tracing-bound-synthetic-field-strings-with-seq_buf.patch + device-property-fix-fwnode-reference-leak-in-fwnode_.patch + driver-core-use-mod_delayed_work-to-prevent-lost-def.patch + revert-treewide-fix-probing-of-devices-in-dt-overlay.patch + cpufreq-documentation-fix-sampling_down_factor-range.patch + cpufreq-conservative-simplify-frequency-limit-handli.patch + pwm-imx27-fix-variable-truncation-in-.apply.patch + bus-sunxi-rsb-always-check-register-address-validity.patch + rdma-irdma-fix-out-of-bounds-write-in-irdma_copy_use.patch + rdma-rxe-fix-a-use-after-free-problem-in-rxe_mmap.patch + ib-mlx4-fix-refcount-leak-in-add_port-error-path.patch + rdma-hns-fix-warning-in-poll-cq-direct-mode.patch + rdma-counter-fix-incorrect-port-index-in-rdma_counte.patch + pm-sleep-use-complete-in-device_pm_sleep_init.patch + mips-fix-big-endian-stack-argument-fetching-in-o32-w.patch + mips-dec-remove-do_irq-call-indirection.patch + mips-ralink-mt7621-add-missing-__iomem.patch + mips-n64-add-__iomem-for-writel-call.patch + mtd-spi-nor-drop-duplicate-kconfig-dependency.patch + alsa-seq-midi-serialize-output-teardown-with-event_i.patch + pinctrl-cs42l43-fix-polarity-on-debounce.patch + nvme-multipath-fix-flex-array-size-in-struct-nvme_ns.patch + workqueue-drop-spurious-from-print_worker_info-fn-de.patch + ipv6-guard-against-possible-null-deref-in-__in6_dev_.patch + net-sched-cls_bpf-prevent-unbounded-recursion-in-off.patch + drm-tegra-gr2d-gr3d-initialize-address-register-map-.patch + drm-tegra-gr2d-gr3d-contain-pm-in-the-gr-d_probe-gr-.patch + gpu-host1x-allow-entries-in-bo-caches-to-be-freed.patch + drm-tegra-dc-fix-device-node-reference-leak-in-tegra.patch + gpu-host1x-fix-iommu_map_sgtable-return-value-check.patch + drm-tegra-fix-iommu_map_sgtable-return-value-check.patch + drm-nouveau-bios-specify-correct-display-fuse-regist.patch + libbpf-harden-parse_vma_segs-path-parsing.patch + libbpf-fix-uaf-in-strset__add_str.patch + dax-kmem-account-for-partial-discontiguous-resource-.patch + rapidio-tsi721-prevent-a-bad-dereference-in-tsi721_d.patch + ocfs2-don-t-bug_on-an-invalid-journal-dinode.patch + ocfs2-kill-osb-system_file_mutex-lock.patch + crypto-hisilicon-qm-disable-error-report-before-flr.patch + drm-msm-dp-fix-hpd-state-status-bit-shift-value.patch + drm-msm-dp-fix-the-isr_-enum-values.patch + edac-skx_common-skx-fix-ubsan-shift-out-of-bounds-in.patch + rdma-rxe-fix-toctou-heap-overflow-in-get_srq_wqe.patch + rdma-rxe-copy-wqe-to-local-buffer-in-non-srq-receive.patch + media-qcom-venus-drop-extra-padding-in-nv12-raw-size.patch + media-qcom-venus-relax-encoder-frame-blur-dimension-.patch + media-qcom-venus-relax-encoder-frame-blur-step-size-.patch + rpmsg-use-generic-driver_override-infrastructure.patch + md-raid10-reset-read_slot-when-reusing-r10bio-for-di.patch + ext4-fix-logflush-shutdown-ordering-to-allow-ordered.patch + asoc-rsnd-fix-rsnd_soc_mask-width-to-single-nibble.patch + arm-imx3-fix-ccm-node-reference-leak.patch + hid-wiimote-fix-table-layout-and-whitespace-errors.patch + ata-libata-fix-ata_exec_internal.patch + arm-imx31-fix-iim-mapping-leak-in-revision-check.patch + nvdimm-btt-handle-preemption-in-btt-lane-acquisition.patch + scsi-revert-scsi-fix-sas_user_scan-to-handle-wildcar.patch + scsi-pm8001-fix-error-code-in-non_fatal_log_show.patch + scsi-ufs-fix-wrong-value-printed-in-unexpected-upiu-.patch + bpf-fix-uaf-by-restoring-rcu-delayed-inode-freeing-i.patch + mm-fake-numa-fix-under-allocation-detection-in-unifo.patch + ext2-fix-ignored-return-value-of-generic_write_sync.patch + sched-restore-timer_slack_ns-when-resetting-rt-polic.patch + lib-test_meminit-use-for-bools.patch + configfs_lookup-don-t-leave-s_dentry-dangling-on-fai.patch + drm-amdgpu-set-sub_block_index-for-mca-ras-sub-block.patch + bpftool-use-libbpf-error-code-for-flow-dissector-que.patch + perf-x86-amd-core-always-use-the-nmi-latency-mitigat.patch + ocfs2-rebase-copied-fsdlm-lvb-pointers-in-locking_st.patch + ocfs2-fix-buffer-head-management-in-ocfs2_read_block.patch + ocfs2-reject-fitrim-ranges-shorter-than-a-cluster.patch + ocfs2-dlm-require-a-ref-for-locking_state-debugfs-op.patch + ocfs2-fix-race-between-ocfs2_control_install_private.patch + netfilter-nfnetlink_osf-fix-mss-parsing-on-big-endia.patch + netfilter-synproxy-protect-nf_ct_seqadj_init-with-co.patch + netfilter-conntrack-revert-ct-extension-genid-infras.patch + netfilter-conntrack-call-nf_ct_gre_keymap_destroy-if.patch + ib-cm-fix-av-cm-device-leak-on-an-error-path-in-cm_i.patch + rdma-irdma-fix-oob-read-during-cq-mr-registration.patch + rdma-irdma-initialize-iwmr-access-during-mr-registra.patch + arm64-dts-tqma8mpql-mba8mpxl-configure-sai-clock-in-.patch + bpf-check-tail-zero-of-bpf_prog_info.patch + bpf-update-transport_header-when-encapsulating-udp-t.patch + wifi-wcn36xx-fix-heap-overflow-from-oversized-firmwa.patch + wifi-wcn36xx-fix-oob-read-from-firmware-count-in-pri.patch + wifi-wcn36xx-fix-oob-read-from-short-trigger-ba-firm.patch + alsa-seq-fix-partial-userptr-event-expansion.patch + riscv-stacktrace-remove-bogus-0x4-offset-in-non-fp-w.patch + alsa-seq-clear-variable-event-pointer-on-read.patch + acpi-ipmi-fix-message-kref-handling-on-dead-device.patch + cpufreq-documentation-fix-conservative-governor-freq.patch + ib-mlx5-don-t-take-the-rereg_mr-fallback-without-a-n.patch + ib-mlx5-properly-support-implicit-odp-rereg_mr.patch + spi-ep93xx-fix-double-free-of-zeropage-on-dma-setup-.patch + firmware_loader-fix-recursive-lock-in-device_cache_f.patch + configfs-fix-lockless-traversals-of-s_children.patch + watchdog-unregister-pm-notifier-on-watchdog-unregist.patch + scsi-target-fix-hexadecimal-chap_i-handling.patch + scsi-target-remove-tcm_loop-target-reset-handling.patch + pinctrl-mediatek-mt8516-fix-schmitt-trigger-register.patch + pinctrl-mediatek-mt8167-fix-schmitt-trigger-register.patch + vmalloc-fix-null-pointer-dereference-in-is_vm_area_h.patch + hwspinlock-qcom-avoid-uninitialized-struct-members.patch + sched-fair-fix-cpu_util-runnable_avg-arithmetic.patch + wifi-mt76-fix-argument-to-ieee80211_is_first_frag.patch + wifi-mt76-mt7915-fix-potential-tx_retries-underflow.patch + wifi-mt76-mt7921-fix-potential-tx_retries-underflow.patch + btrfs-fix-invalid-pointer-dereference-in-__btrfs_run.patch + fbdev-sm501fb-fix-buffer-errors-in-of-binding-code.patch + hwmon-it87-clamp-negative-values-to-zero-in-set_fan.patch + btrfs-zoned-don-t-account-data-relocation-space-info.patch + ib-mlx4-fill-in-the-access_flags-if-ib_mr_rereg_acce.patch + spi-meson-spifc-fix-runtime-pm-leak-on-remove.patch + asoc-codecs-aw88261-fix-incorrect-masks-for-boost-re.patch + vduse-hold-vduse_lock-across-idr-lookup-in-open-path.patch + vhost-vdpa-validate-virtqueue-index-in-mmap-and-faul.patch + vduse-requeue-failed-read-to-send_list-head.patch + vhost-net-complete-zerocopy-ubufs-only-once.patch + tools-virtio-check-mmap-return-value-in-vringh_test.patch + asoc-cs35l56-fix-missing-calls-to-wm_adsp2_remove.patch + asoc-cs35l56-don-t-leave-parent-irq-disabled-if-syst.patch + bonding-3ad-fix-mux-port-state-on-oper-down.patch + ext4-fix-kernel-bug-in-ext4_write_inline_data_end.patch + selftests-bpf-fix-bpf_iter-task_vma-test.patch + cxl-test-fix-integer-overflow-in-mock-lsa-bounds-che.patch + cxl-test-zero-out-lsa-backing-memory-to-avoid-leakin.patch + of-cpu-add-check-in-__of_find_n_match_cpu_property.patch + bpf-tighten-cgroup-storage-cookie-checks-for-prog-ar.patch + s390-process-fix-kernel-thread-function-pointer-type.patch + bluetooth-hci_qca-fix-null-pointer-dereference-in-qc.patch + bluetooth-hci-validate-codec-capability-element-leng.patch + bluetooth-vhci-validate-devcoredump-state-before-sid.patch + fs-efs-remove-unneeded-debug-prints.patch + rdma-mlx5-remove-raw-rss-qp-restrack-tracking.patch + rdma-mlx5-fix-undefined-shift-of-user-rq-wqe-size.patch + rdma-mlx5-release-the-hw-provided-uar-index-rather-t.patch + asoc-codecs-hdac_hdmi-validate-written-enum-value.patch + asoc-fsl-fsl_audmix-validate-written-enum-values.patch + asoc-tegra-tegra210_ahub-validate-written-enum-value.patch + net-sched-cls_flow-dont-expose-folded-kernel-pointer.patch + net-fib_rules-don-t-dump-dying-fib_rule-in-fib_rules.patch + bridge-cfm-reject-invalid-ccm-interval-at-configurat.patch + sctp-validate-embedded-address-parameter-length.patch + net-sched-sch_hfsc-don-t-make-class-passive-twice.patch + tipc-require-net-admin-for-tipcv2-netlink-mutators.patch + tipc-prevent-snt_unacked-underflow-on-conn_ack.patch + tipc-reject-inverted-service-ranges-from-peer-bindin.patch + cxl-test-add-check-after-kzalloc-memory-in-alloc_moc.patch + crypto-marvell-octeontx-fix-dma-cleanup-using-wrong-.patch + crypto-cavium-cpt-fix-dma-cleanup-using-wrong-loop-i.patch + crypto-rng-free-default-rng-on-module-exit.patch + spi-xilinx-use-fifo-occupancy-register-to-determine-.patch + asoc-adau1372-clear-pll_en-on-failed-pll-lock-withou.patch + power-supply-core-fix-supplied_from-allocations.patch + handshake-require-admin-permission-for-done-command.patch + net-sched-sch_fq_codel-do-not-call-qdisc_tree_reduce.patch + net-sched-sch_codel-do-not-call-qdisc_tree_reduce_ba.patch + net-mana-initialize-gdma-queue-id-to-invalid_queue_i.patch + net-mana-guard-tx-wq-object-destroy-with-invalid_man.patch + bpf-run-generic-devmap-egress-prog-on-private-skb.patch + net-mlx5-check-max_macs-devlink-param-value-against-.patch + net-wwan-t7xx-check-skb_clone-in-control-tx.patch + net-bcmgenet-use-weighted-round-robin-tx-dma-arbitra.patch + kcm-use-write_once-when-changing-lower-socket-callba.patch + netfilter-nf_conncount-callers-must-hold-rcu-read-lo.patch + alsa-core-fix-unintuitive-behavior-of-snd_power_ref_.patch + cifs-remove-all-cifs-files-before-kill-super.patch + smb-client-always-return-a-value-for-fs_ioc_getflags.patch + selftests-bpf-initialize-operation-name-before-use.patch + bpf-fix-bpf_get-setsockopt-to-tos-for-ipv4-mapped-ip.patch + bpf-sockmap-reject-overflowing-copy-len-in-bpf_msg_p.patch + bpf-sockmap-fix-integer-overflow-in-bpf_msg_pop_data.patch + mips-mm-fix-out-of-bounds-write-in-maar_res_walk.patch + powerpc-perf-fix-preempt-count-underflow-in-fsl_emb_.patch + powerpc-powernv-fix-preempt-count-leak-in-pnv_kexec_.patch + powerpc-kexec-fix-double-get_cpu-imbalance-in-kexec_.patch + keys-use-acquire-when-reading-state-in-keyring-searc.patch + tipc-fix-uaf-in-tipc_l2_send_msg.patch + tcp-ipv6-clamp-default-adverting-mss-to-avoid-gso_by.patch + ionic-fix-check-in-ionic_get_link_ext_stats.patch + ksmbd-fix-use-after-free-in-same_client_has_lease.patch + mfd-cs42l43-sanity-check-firmware-size.patch + ocfs2-fix-circular-locking-dependency-in-ocfs2_dio_e.patch + net-9p-fix-race-condition-on-rdma-state-in-trans_rdm.patch + staging-nvec-fix-use-after-free-in-nvec_rx_completed.patch + coresight-cti-fix-dt-filter-signals-silently-ignored.patch + coresight-etm4x-correct-trcvmidcctlr1-save-and-resto.patch + pci-aspm-don-t-reconfigure-aspm-entering-low-power-s.patch + pci-introduce-named-defines-for-pci-rom.patch + pci-check-rom-header-and-data-structure-addr-before-.patch + x86-platform-olpc-xo15-drop-wakeup-source-on-driver-.patch + platform-x86-xo15-ebook-fix-wakeup-source-and-gpe-ha.patch + perf-sched-add-missing-mmap2-handler-in-timehist.patch + pci-loongson-do-not-ignore-downstream-devices-on-ext.patch + bus-mhi-ep-fix-potential-deadlock-in-mhi_ep_reset_wo.patch + phy-phy-can-transceiver-check-driver-match-and-drive.patch + perf-pmu-skip-test-on-arm64-when-slots-is-zero.patch + mailbox-mtk-adsp-fix-uaf-during-device-teardown.patch + staging-most-video-avoid-double-free-on-video-regist.patch + usb-host-max3421-fix-shift-out-of-bounds-in-max3421_.patch + usb-host-max3421-reject-hub-port-requests-for-non-ex.patch + char-tlclk-fix-use-after-free-in-tlclk_cleanup.patch + thunderbolt-test-add-kunit-regression-tests-for-xdom.patch + thunderbolt-add-kunit-test-for-tb_property_merge_dir.patch + thunderbolt-test-add-kunit-tests-for-property-parser.patch + perf-header-sanity-check-header_event_desc-attr.size.patch + iio-light-si1133-reset-counter-to-prevent-race-condi.patch + iio-light-si1133-prevent-race-condition-on-timeout.patch + iio-magnetometer-ak8975-fix-potential-kernel-stack-m.patch + iio-adc-xilinx-ams-fix-out-of-bounds-channel-lookup-.patch + iio-accel-mma8452-handle-i2c-read-error-s-in-mma8452.patch + iio-tcs3472-power-down-chip-on-probe-failure.patch + clk-at91-keep-securam-node-alive-while-mapping-it.patch + hid-logitech-hidpp-remove-excess-kernel-doc-member-i.patch + fs-ntfs3-add-bounds-check-to-run_get_highest_vcn.patch + fs-ntfs3-fix-mount-failure-on-64k-page-size-kernels.patch + drm-amd-display-add-missing-kdoc-for-allm-parameters.patch + dmaengine-imx-sdma-refine-spba-bus-searching-in-prob.patch + perf-fix-off-by-one-stack-buffer-overflow-in-kallsym.patch + perf-tools-guard-test_bit-from-out-of-bounds-sample-.patch + perf-sched-replace-bug_on-on-invalid-cpu-with-gracef.patch + perf-sched-fix-null-dereference-in-latency_runtime_e.patch + perf-tools-add-bounds-check-to-cpu__get_node.patch + perf-mmap-guard-cpu__get_node-return-in-aio_bind.patch + perf-c2c-bounds-check-cpu-and-node-ids-before-bitmap.patch + perf-sched-clean-up-idle_threads-entry-on-init-failu.patch + perf-sched-replace-bug_on-and-add-null-checks-in-rep.patch + perf-mmap-fix-null-deref-in-aio-cleanup-on-alloc-fai.patch + perf-c2c-fix-use-after-free-in-he__get_c2c_hists-err.patch + dmaengine-qcom-gpi-set-dma_private-capability.patch + dmaengine-fix-possible-use-after-free.patch + clk-qcom-a53-corrected-frequency-multiplier-for-1152.patch + pnfs-filelayout-fix-cheking-if-a-layout-is-striped.patch + xprtrdma-remove-temp-allocation-of-rpcrdma_rep-objec.patch + xprtrdma-avoid-250-ms-delay-on-backlog-wakeup.patch + xprtrdma-close-lost-wakeup-race-in-xprt_rdma_alloc_s.patch + xprtrdma-post-receive-buffers-after-rpc-completion.patch + xprtrdma-use-sendctx-dma-state-for-send-signaling.patch + xprtrdma-decouple-req-recycling-from-rpc-completion.patch + nfsv4-pnfs-defer-return_range-callbacks-until-after-.patch + nfs-keep-pg_uptodate-clear-after-read-errors-in-page.patch + nfsv4-flexfiles-honor-ff_flags_no_io_thru_mds-on-fat.patch + nfsv4-flexfiles-honor-ff_flags_no_io_thru_mds-in-pg_.patch + pci-mediatek-fix-operator-precedence-in-pcie_fts_num.patch + pci-meson-propagate-devm_add_action_or_reset-failure.patch + fs-ntfs3-resize-log-one_page_buf-when-adopting-on-di.patch + perf-tools-fix-get_max_num-size_t-underflow-on-empty.patch + perf-tools-use-scnprintf-in-cpu_map__snprint-to-prev.patch + perf-tools-use-perf_env__get_cpu_topology-in-machine.patch + pci-rcar-host-remove-unused-list_head-res.patch + perf-sched-fix-idle-hist-callchain-display-using-wro.patch + perf-bpf-use-scnprintf-in-snprintf_hex-and-synthesiz.patch + perf-hists-fix-snprintf-in-hists__scnprintf_title-ui.patch + xprtrdma-check-frwr_wp_create-during-connect.patch + xprtrdma-document-and-assert-reply-handler-invariant.patch + xprtrdma-resize-reply-buffers-before-reposting-recei.patch + xprtrdma-fix-bcall-rep-leak-and-unbounded-peek.patch + xprtrdma-sanitize-the-reply-credit-grant-after-parsi.patch + xprtrdma-repost-receive-buffers-for-malformed-replie.patch + xprtrdma-return-sendctx-slot-after-send-preparation-.patch + perf-cs-etm-fix-incorrect-or-missing-decoder-for-raw.patch + perf-cs-etm-create-decoders-after-both-aux-and-hw_id.patch + perf-cs-etm-queue-context-packets-for-frontend.patch + perf-pmu-fix-pmu_id-heap-underwrite-on-empty-identif.patch + perf-pmu-fix-perf_pmu__parse_scale-unit-oob-access-o.patch + tools-lib-api-fix-missing-null-termination-in-filena.patch + perf-symbols-fix-signed-overflow-in-sysfs__read_buil.patch + perf-symbols-bounds-check-.gnu_debuglink-section-dat.patch + perf-intel-pt-fix-snprintf-size-tracking-bug-in-insn.patch + perf-tools-fix-thread__set_comm_from_proc-on-empty-c.patch + perf-symbols-bounds-check-descsz-in-sysfs__read_buil.patch + tools-lib-api-fix-filename__write_int-writing-uninit.patch + tools-lib-api-fix-mount_overload-snprintf-truncation.patch + perf-bpf-add-null-check-for-btf__type_by_id-in-synth.patch + perf-symbols-add-bounds-checks-to-elf_read_build_id-.patch + perf-symbols-add-bounds-checks-to-read_build_id-note.patch + pci-mediatek-fix-possible-truncation-in-mtk_pcie_par.patch + pci-mediatek-use-actual-physical-address-instead-of-.patch + revert-pci-msi-unmap-msi-x-region-on-error.patch + security-apparmor-apparmorfs.c-conditionally-compile.patch + apparmor-check-label-build-before-no_new_privs-test.patch + apparmor-aa_label_alloc-use-aa_label_free-on-alloc-f.patch + apparmor-fix-rawdata_f_data-implicit-flex-array.patch + apparmor-grab-ns-lock-and-refresh-when-looking-up-ch.patch + apparmor-fix-potential-uaf-in-aa_replace_profiles.patch + apparmor-aa_getprocattr-free-procattr-leak-on-format.patch + apparmor-put-secmark-label-after-secid-lookup.patch + i3c-master-prevent-reuse-of-dynamic-address-on-devic.patch + apparmor-fix-label-can-not-be-immediately-before-a-d.patch + sparc-led-avoid-trimming-a-newline-from-empty-writes.patch + perf-symbols-break-infinite-loop-on-zero-filled-note.patch + perf-tools-use-snprintf-for-root_dir-path-constructi.patch + perf-bpf-validate-func_info_rec_size-and-sub_id-in-s.patch + perf-bpf-bounds-check-array-offsets-in-bpil_offs_to_.patch + gpio-mlxbf3-fail-probe-if-gpiochip-registration-fail.patch + spi-dw-fix-wrong-baudr-setting-after-resume.patch + xfrm-use-the-xfrm_gro-to-indicate-a-gro-call-on-inpu.patch + xfrm-support-crypto-offload-for-inbound-ipv6-esp-pac.patch + xfrm-annotate-data-races-around-xfrm_policy_count-an.patch + xfrm-validate-selector-family-and-prefixlen-during-m.patch + perf-machine-use-snprintf-for-guestmount-path-constr.patch + perf-cs-etm-validate-num_cpu-before-metadata-allocat.patch + perf-cs-etm-require-full-global-header-in-auxtrace_i.patch + asoc-tlv320aic3x-restrict-clkdiv-bypass-q-values-in-.patch + drm-amdkfd-avoid-double-unpin-of-doorbell-mmio-bos-o.patch + drm-amdkfd-fix-list_del-corruption-in-kfd_criu_resum.patch + drm-amdgpu-initialize-irq.lock-spinlock-earlier.patch + octeontx2-pf-fix-leak-of-sq-timestamp-buffer-on-tear.patch + net-psample-fix-info-leak-in-psample_attr_data.patch + sctp-hold-socket-lock-when-dumping-endpoints-in-sctp.patch + pci-iproc-restore-.map_irq-for-the-platform-bus-driv.patch + spi-rpc-if-use-correct-device-for-hardware-reinitial.patch + virtio-net-fix-len-check-in-receive_big.patch + dpaa2-switch-fix-vlan-upper-check-not-rejecting-brid.patch + devlink-fix-parent-ref-leak-in-devl_rate_node_create.patch + flow_dissector-check-device-type-before-reading-eth_.patch + alsa-usb-audio-kill-midi-2.0-urbs-before-freeing-end.patch + arm64-hw_breakpoint-reject-unaligned-watchpoints-tha.patch + thermal-intel-fix-dangling-resources-on-thermal_thro.patch + acpi-resource-amend-kernel-doc-style.patch + acpi-ipmi-fix-inverted-interface-check-in-ipmi_bmc_g.patch + ieee802154-remove-warn_on-in-cfg802154_pernet_exit.patch + ieee802154-fix-kernel-infoleak-in-dgram_recvmsg.patch + md-raid1-free-r1_bio-when-req_nowait-is-set-and-read.patch + netfilter-ipset-fix-data-race-between-add-and-dump-i.patch + netfilter-ipset-annotate-pos-for-concurrent-readers-.patch + netfilter-ipset-don-t-use-test_bit-in-lockless-rcu-r.patch + netfilter-ipset-fix-order-of-kfree_rcu-and-rcu_assig.patch + netfilter-nf_reject-skip-iphdr-options-when-looking-.patch + netfilter-nft_meta_bridge-fix-nft_meta_bri_iifpvid-s.patch + irqchip-crossbar-fix-parent-domain-resource-leak.patch + selftests-mm-clarify-alternate-unmapping-in-compacti.patch + selftests-mm-allow-pud-level-entries-in-compound-tes.patch + selftests-mm-fix-exclusive_cow-test-fork-handling.patch + net-marvell-prestera-initialize-err-in-prestera_port.patch + tipc-fix-use-after-free-of-the-discoverer-in-tipc_di.patch + net-ethernet-mtk_ppe-fix-rhashtable-leak-in-mtk_ppe_.patch + octeontx2-af-mcs-fix-unsupported-secy-stats-read.patch + octeontx2-pf-clear-stats-of-all-resources-when-freei.patch + octeontx2-pf-mcs-fix-mcs-resources-free-on-pf-shutdo.patch + rtc-abx80x-fix-the-rtc_vl_clr-clearing-all-status-fl.patch + rtc-ds1307-handle-oscillator-stop-flag-for-ds1337-ds.patch + bpf-fix-stack-slot-index-in-nospec-checks.patch + bpf-zero-initialize-the-fib-lookup-flow-struct.patch + bpf-fix-effective-prog-array-index-with-bpf_f_preord.patch + drm-edid-fix-oob-read-in-drm_parse_tiled_block.patch + pci-endpoint-pci-epf-vntb-add-check-to-detect-db_cou.patch + pci-endpoint-pci-epf-ntb-add-check-to-detect-db_coun.patch + ice-fix-fdir-ctrl-vsi-resource-leak-in-ice_reset_all.patch + ice-fix-aq-error-code-comparison-in-ice_set_pausepar.patch + i40e-fix-i40e_debug-to-use-struct-i40e_hw-argument.patch + rtc-msc313-fix-null-deref-in-shared-irq-handler-at-p.patch + ksmbd-fix-use-after-free-of-conn-preauth_info-in-con.patch + ipv6-fix-null-ptr-deref-in-fib6_nh_mtu_change.patch + ipv4-fib-don-t-ignore-error-route-in-local-main-tabl.patch + bpf-lsm-add-disabled-bpf-lsm-hook-list.patch + bpf-disable-xfrm_decode_session-hook-attachment.patch + netfilter-nf_nat-avoid-invalid-nat_net-pointer-use-o.patch + netfilter-nf_conncount-prevent-connlimit-drops-for-e.patch + netfilter-nft_synproxy-stop-bypassing-the-priv-info-.patch + netfilter-nft_compat-ebtables-emulation-must-reject-.patch + ntb-epf-make-db_valid_mask-cover-only-real-doorbell-.patch + ntb-epf-report-0-based-doorbell-vector-via-ntb_db_ev.patch + ntb-epf-fix-doorbell-bitmask-and-irq-vector-handling.patch + alpha-pci-add-security_locked_down-check-to-pci_mmap.patch + alpha-pci-fix-__pci_mmap_fits-overflow-for-zero-leng.patch + net-bpf-check-master-for-null-in-xdp_master_redirect.patch + net-dsa-sja1105-round-up-ptp-perout-pin-duration.patch + veth-fix-napi-leak-in-xdp-enable-error-path.patch + net-sched-cls_api-handle-tc_act_consumed-in-tcf_qeve.patch + ipv6-fix-error-handling-in-disable_ipv6-sysctl.patch + ipv6-fix-error-handling-in-ignore_routes_with_linkdo.patch + ipv6-fix-error-handling-in-forwarding-sysctl.patch + ipv6-fix-error-handling-in-disable_policy-sysctl.patch + smb-client-preserve-errors-from-smb2_set_sparse.patch + rtc-ds1307-fix-off-by-one-issue-with-wday-for-rx8130.patch + rtc-cmos-unregister-hpet-irq-handler-on-probe-failur.patch + net-mvneta-re-enable-percpu-interrupt-on-resume.patch + net-sungem-fix-probe-error-cleanup.patch + net-ethernet-sunplus-spl2sw-fix-phy_node-refcount-le.patch + asoc-fsl_asrc_dma-fix-edma-maxburst-misalignment-wit.patch + dt-bindings-net-renesas-ether-drop-example-ethernet-.patch + tracing-probes-fix-typo-in-a-log-message.patch + spi-sh-msiof-abort-transfers-when-reset-times-out.patch + gpio-mvebu-fail-probe-if-gpiochip-registration-fails.patch + gpio-htc-egpio-use-managed-gpiochip-registration.patch + seg6-validate-srh-length-before-reading-fixed-fields.patch + qede-fix-out-of-bounds-check-for-cqe-len_list.patch + net-enetc-check-the-number-of-bds-needed-for-xdp_fra.patch + sctp-fix-sctp_reset_streams-stream-list-length-limit.patch + mips-dec-ensure-rtc-platform-device-deregistration-u.patch + hwmon-adm1275-prevent-reading-uninitialized-stack.patch + hwmon-pmbus-fix-passing-events-to-regulator-core.patch + usbnet-gl620a-fix-out-of-bounds-read-in-genelink_rx_.patch + net-phy-sfp-free-mii_bus-in-sfp_i2c_mdiobus_destroy.patch + net-gianfar-dispose-irq-mappings-on-probe-failure-an.patch + net-sched-sch_teql-introduce-slaves_lock-to-avoid-ra.patch + bridge-stp-fix-a-potential-use-after-free-when-delet.patch + tracing-events-fix-to-check-the-simple_tsk_fn-creati.patch + tracing-eprobe-read-the-complete-filter_ptr_string-p.patch + irqchip-gic-v3-its-fix-of-node-reference-leak.patch + irqchip-ts4800-fix-missing-chained-handler-cleanup-o.patch + virtio_net-disable-cb-when-napi-is-busy-polled.patch + cxgb4-fix-decode-strings-dump-for-t6-adapters.patch + net-sched-act_bpf-use-rcu_dereference_bh-to-read-the.patch + ksmbd-reject-undersized-dacls-before-parsing-aces.patch + smb-move-some-duplicate-definitions-to-common-cifsgl.patch + ksmbd-fix-use-after-free-of-fp-owner.name-in-durable.patch + gpio-timberdale-return-enomem-on-dynamic-memory-allo.patch + pinctrl-meson-restore-non-sleeping-gpio-access.patch + net-sched-hhf-clear-heavy-hitter-state-on-reset.patch + fs-refuse-o_tmpfile-creation-with-an-unmapped-fsuid-.patch + afs-fix-error-code-in-afs_extract_vl_addrs.patch + afs-use-kvfree-to-free-memory-allocated-by-kvcalloc.patch + afs-fix-callback-service-message-parsers-to-pass-thr.patch + afs-fix-vllist-leak.patch + afs-fix-the-volume-afs_volume_rm_tree-is-set-on.patch + afs-fix-unchecked-length-string-display-in-debug-sta.patch + minix-avoid-overflow-in-bitmap-block-count-calculati.patch + ata-sata_gemini-unwind-clocks-on-ide-pinctrl-errors.patch + hid-picolcd-prevent-null-pointer-dereference-in-pico.patch + hid-core-fix-oob-read-in-hid_get_report-for-numbered.patch + arm64-mm-convert-read_once-ptep-to-ptep_get-ptep.patch + arm64-mm-convert-set_pte_at-to-set_ptes-.-1.patch + arm64-mm-convert-ptep_clear-to-ptep_get_and_clear.patch + arm64-mm-optimize-tlb-flush-in-unmap_hotplug_-pmd-pu.patch + selftests-hid-ensure-we-can-compile-the-tests-on-ker.patch + selftests-hid-do-not-manually-call-headers_install.patch + selftests-hid-force-using-our-compiled-libbpf-header.patch + selftests-hid-convert-the-hid_bpf-selftests-with-str.patch + selftests-hid-cover-hid_bpf_get_data-size-overflow.patch + net-usb-net1080-validate-packet_len-before-pad-byte-.patch + gue-validate-remcsum-private-option-length.patch + netfilter-xt_u32-reject-invalid-shift-counts.patch + netfilter-xt_rateest-fix-u64-truncation-in-xt_ratees.patch + netfilter-ip6tables-mark-malformed-ipv6-extension-he.patch + netfilter-xt_connmark-reject-invalid-shift-parameter.patch + net-mlx5e-fix-hv-vhca-stats-zero-sized-buffer-alloca.patch + net-mlx5e-fix-hv-vhca-stats-agent-registration-race.patch + net-microchip-vcap-fix-races-on-the-shared-super-vca.patch + qede-fix-off-by-one-in-bd-ring-consumption-on-build_.patch + net-qualcomm-rmnet-validate-map-frame-length-before-.patch + net-sched-act_pedit-fix-toctou-heap-oob-write-in-tc-.patch + net-smc-fix-uaf-in-smc_cdc_rx_handler-by-pinning-the.patch + amt-fix-size-calculation-in-amt_get_size.patch + bluetooth-6lowpan-hold-l2cap-conn-across-debugfs-con.patch + bluetooth-mgmt-fix-adv-monitor-add-failure-cleanup.patch + bluetooth-iso-exclude-rfu-bits-from-iso_sdu_length.patch + bluetooth-bpa10x-avoid-oob-read-of-revision-string-i.patch + ring-buffer-fix-event-length-with-forced-8-byte-alig.patch + net-tls-consume-empty-data-records-in-tls_sw_read_so.patch + net-usb-lan78xx-move-functions-to-avoid-forward-defi.patch + net-usb-lan78xx-disable-vlan-filter-in-promiscuous-m.patch + net-sched-cake-reject-overhead-values-that-underflow.patch + octeontx2-pf-check-dmac-extraction-support-before-fi.patch + ipv4-igmp-fix-potential-uaf-in-igmp_gq_start_timer.patch + ipv6-mcast-replace-locking-comments-with-lockdep-ann.patch + ipv6-mcast-fix-potential-uaf-in-mld-delayed-work.patch + ipvs-pass-parsed-transport-offset-to-state-handlers.patch + ipvs-use-parsed-transport-offset-in-tcp-state-lookup.patch + ipvs-fix-pmtu-for-gue-gre-tunnel-icmp-errors.patch + ipvs-ensure-inner-headers-in-icmp-errors-are-in-head.patch + s390-zcrypt-remove-the-empty-file.patch + cifs-validate-dfs-referral-string-offsets.patch + sunrpc-release-lower-rpc_clnt-if-killed-waiting-for-.patch + sunrpc-pin-upper-rpc_clnt-across-the-tls-connect_wor.patch + dm-era-fix-null-pointer-dereference-in-metadata_open.patch + regulator-core-regulator_lock_two-should-test-for-ed.patch + selftests-net-fix-evp_md_ctx-leak-in-tcp_mmap.patch + net-mlx5-fix-l3-tunnel-entropy-refcount-leak.patch + octeontx2-af-fix-vf-bringup-affecting-pf-promiscuous.patch + smb-client-fix-overflow-in-passthrough-ioctl-bounds-.patch diff --cc queue-7.1/series index e8cd169b35,12f8c19d7e..a2a63f07f2 --- a/queue-7.1/series +++ b/queue-7.1/series @@@ -2,40 -2,1492 +2,1529 @@@ crypto-algif_skcipher-force-synchronous iommu-vt-d-clear-present-bit-before-tearing-down-sca.patch crypto-sun4i-ss-remove-insecure-and-unused-rng_alg.patch media-uvcvideo-fix-deadlock-if-uvc_status_stop-is-ca.patch +alsa-hda-realtek-add-quirk-for-tongfang-x6xx45xu.patch +alsa-hda-conexant-remove-mic-bias-threshold-override.patch +alsa-hda-fix-cached-processing-coefficient-verbs.patch +alsa-hda-realtek-fix-speakers-on-legion-pro-7-16arx8h-with-codec-ssid-17aa-38a7.patch +media-uvcvideo-use-hw-timestaming-if-the-clock-buffer-is-full.patch +media-uvcvideo-avoid-partial-metadata-buffers.patch +media-uvcvideo-fix-buffer-sequence-in-frame-gaps.patch +media-uvcvideo-fix-dev_sof-filtering-in-hw-timestamp.patch +media-uvcvideo-do-not-add-clock-samples-with-small-sof-delta.patch +media-uvcvideo-relax-the-constrains-for-interpolating-the-hw-clock.patch +media-uvcvideo-fix-sequence-number-when-no-eof.patch +dt-bindings-media-sun4i-a10-video-engine-add-interconnect-properties.patch +dt-bindings-power-imx93-add-mipi-phy-power-domain.patch +serial-msm-disable-dma-for-kernel-console-uart.patch +serial-max310x-implement-gpio_chip-get_direction.patch +serial-8250_omap-clear-rx_running-on-zero-length-dma-completes.patch +rxrpc-serialize-kernel-accept-preallocation-with-socket-teardown.patch +rxrpc-rxrpc_verify_data-ensure-rx_dec_buffer-alloc.patch +rxrpc-don-t-move-a-peeked-oob-message-onto-the-pending-queue.patch +rxrpc-fix-uaf-in-rxgk_issue_challenge.patch +rxrpc-fix-socket-notification-race.patch +rxrpc-fix-leak-of-released-call-in-recvmsg-msg_peek.patch +rxrpc-fix-potential-infinite-loop-in-rxrpc_recvmsg.patch +rxrpc-fix-rxrpc_rotate_tx_rotate-to-check-there-s-something-to-rotate.patch +rxrpc-fix-oob-challenge-leak-in-cleanup-after-notification-failure.patch +rxrpc-fix-ackall-packet-handling.patch +rxrpc-fix-the-reception-of-a-reply-packet-before-data-transmission.patch +rxrpc-fix-leak-of-connection-from-oob-challenge.patch +rxrpc-fix-double-unlock-in-rxrpc_recvmsg.patch +afs-fix-netns-teardown-to-cancel-the-preallocation-charger.patch +afs-fix-null-pointer-dereference-in-afs_get_tree.patch +afs-handle-cb.initcallbackstate3-requests-without-a-server-record.patch +afs-fix-further-netns-teardown-to-cancel-the-preallocation-charger.patch +afs-fix-uncancelled-rxrpc-oob-message-handler.patch +fbcon-fix-null-pointer-dereference-for-a-console-without-vc_data.patch +fbcon-use-correct-type-for-vc_resize-return-value.patch +media-uvcvideo-fix-deadlock-if-uvc_status_stop-is-called-from-async_ctrl.work.patch + soc-fsl-qe_ports_ic-add-missing-cleanup-on-device-re.patch + openrisc-mm-fix-section-mismatch-between-map_page-an.patch + clocksource-drivers-sun5i-handle-error-returns-from-.patch + accel-amdxdna-fix-leak-when-pinning-ubuf-pages.patch + drm-rockchip-inno-hdmi-switch-to-drmm_kzalloc.patch + drm-rockchip-dw_dp-switch-to-drmm_kzalloc.patch + drm-rockchip-dw_dp-fix-null-ptr-deref-in-dw_dp_remov.patch + drm-rockchip-test-for-imported-buffers-with-drm_gem_.patch + drm-tidss-drop-extra-drm_mode_config_reset-call.patch + drm-gpusvm-reject-vmas-with-vm_io-or-vm_pfnmap-when-.patch + accel-amdxdna-create-shared-functions-for-aie2-and-a.patch + accel-amdxdna-adjust-size-for-copy_to_user.patch + accel-amdxdna-handle-detach_debug_bo-through-config_.patch + accel-amdxdna-fix-iommu_map_sgtable-return-value-han.patch + accel-amdxdna-fix-order-of-canceled-mailbox-messages.patch + dma-fence-fix-potential-tracepoint-null-pointer-dere.patch + accel-amdxdna-fix-fatal_error_info-layout-in-firmwar.patch + accel-amdxdna-fix-memory-leak-in-amdxdna_iommu_alloc.patch + drm-gpuvm-do-not-prepare-null-objects.patch + accel-amdxdna-guard-management-mailbox-channel-clean.patch + drm-amdgpu-fix-integer-overflow-in-amdgpu_gem_align_.patch + drm-amdkfd-fix-redundant-mqd-iterations-in-gfx-v12.1.patch + drm-radeon-fix-integer-overflow-in-radeon_align_pitc.patch + drm-radeon-fix-memory-leak-in-radeon_ring_restore-on.patch + libbpf-report-error-when-a-negative-kprobe-offset-is.patch + selftests-bpf-fix-off-by-one-in-bpf_cpumask_populate.patch + dt-bindings-timer-remove-sifive-fine-ctr-bits-proper.patch + wifi-ath12k-fix-invalid-irq-requests-during-ahb-prob.patch + libbpf-fix-deduplication-of-typedef-with-base-defini.patch + drm-amd-pm-remove-trailing-semicolon-from-amdgpu_pm_.patch + spi-atcspi200-fix-use-after-free-when-driver-unbind.patch + selftests-bpf-use-local-type-for-flow_offload_tuple_.patch + selftests-bpf-use-local-type-for-bpf_fou_encap-in-te.patch + documentation-proc-fix-section-numbering-in-table-of.patch + arm64-dts-rockchip-fix-vdec-register-blocks-order-on.patch + arm64-dts-rockchip-update-vdec-register-blocks-order.patch + arm64-dts-rockchip-fix-ethernet-phy-not-found-on-px3.patch + arm64-dts-rockchip-fix-gmac0-reset-pin-for-nanopi-r5.patch + ima-fix-sigv3-signature-handling-for-evm_ima_xattr_d.patch + dt-bindings-net-bluetooth-qualcomm-fix-wcn6855-regul.patch + x86-bug-add-printf-validation-to-have_arch_bug_forma.patch + arm64-dts-qcom-milos-reduce-rmtfs_mem-size-to-2.5mib.patch + arm64-dts-qcom-sdm845-oneplus-drop-address-from-fram.patch + arm64-dts-qcom-glymur-fix-usb-simple_bus_reg-warning.patch + arm64-dts-qcom-glymur-fix-cache-and-sram-simple_bus_.patch + arm64-dts-qcom-ipq5424-fix-usb-simple_bus_reg-warnin.patch + arm64-dts-qcom-sc8180x-fix-phy-simple_bus_reg-warnin.patch + arm64-dts-qcom-sdm845-mezzanine-fix-camss-ports-unit.patch + arm64-dts-qcom-fix-temp-alarm-probe-failure-for-pmh0.patch + arm64-dts-qcom-sdm845-shift-axolotl-correct-touchscr.patch + hfsplus-remove-the-duplicate-attr-inode-dirty-markin.patch + hfsplus-add-a-sanity-check-for-btree-node-size.patch + wifi-cfg80211-fix-grammar-in-mlo-group-key-error-mes.patch + arm64-tegra-fix-tegra234-mgbe-ptp-clock.patch + dt-bindings-pinctrl-nvidia-tegra234-add-missing-requ.patch + pinctrl-pinconf-generic-fix-properties-bitmap-leak-i.patch + drm-amdkfd-validate-criu-restored-ids-before-idr_all.patch + driver-core-use-read_once-for-dev-driver-in-dev_has_.patch + gpu-nova-core-use-correct-fwsignature-for-ga100.patch + wifi-rtw89-fix-wrong-pci_get_drvdata-type-in-aer-han.patch + wifi-rtw88-fix-wrong-pci_get_drvdata-type-in-aer-han.patch + wifi-rtw89-correct-data-type-for-scan-index-to-avoid.patch + wifi-rtw88-fix-oob-read-from-firmware-rx-descriptor-.patch + wifi-rtw89-add-bounds-check-on-firmware-mac_id-in-li.patch + kconfig-fix-potential-null-pointer-dereference-in-co.patch + soc-xilinx-fix-race-condition-in-event-registration.patch + soc-xilinx-shutdown-and-free-rx-mailbox-channel.patch + pinctrl-mediatek-eint-drop-base-from-mtk_eint_chip_w.patch + scsi-advansys-drop-isa_dma_api-remnants.patch + wifi-ath9k-fix-oob-access-from-firmware-tx-status-qu.patch + wifi-ath11k-cancel-ssr-work-items-during-pci-shutdow.patch + arm-dts-am335x-sl50-fix-audio-bitclock-and-frame-mas.patch + ixgbe-fix-unaligned-u32-access-in-ixgbe_update_flash.patch + documentation-rv-replace-stale-website-link.patch + watchdog-sp5100_tco-use-efch-mmio-for-newer-hygon-fc.patch + watchdog-sama5d4_wdt-fix-wddis-detection-on-sam9x60-.patch + watchdog-sprd_wdt-remove-redundant-sprd_wdt_disable-.patch + media-cedrus-fix-failure-to-clean-up-hardware-on-pro.patch + media-v4l2-common-add-yuv24-format-info.patch + drm-verisilicon-call-atomic-helper-s-plane-state-che.patch + memory-tegra-wire-up-system-sleep-pm-ops.patch + objtool-klp-fix-is_uncorrelated_static_local-for-cla.patch + objtool-klp-fix-.data.once-static-local-non-correlat.patch + objtool-klp-fix-create_fake_symbols-skipping-entsize.patch + objtool-klp-fix-handling-of-zero-length-.altinstr_re.patch + objtool-klp-fix-cloning-of-zero-length-section-symbo.patch + objtool-klp-fix-extraction-of-text-annotations-for-a.patch + objtool-klp-fix-relocation-conversion-failures-for-r.patch + objtool-replace-iterator-callback-with-for_each_sym_.patch + objtool-fix-reloc-hash-collision-in-find_reloc_by_de.patch + klp-build-fix-hang-on-out-of-date-.config.patch + klp-build-fix-checksum-comparison-for-changed-offset.patch + klp-build-fix-patch-cleanup-on-interrupt.patch + crypto-qat-fix-heartbeat-error-injection.patch + lib-vsprintf-fix-to-check-field_width-and-precision.patch + dts-spacemit-set-console-baud-rate-on-bpif3.patch + pinctrl-sunxi-fix-regulator-leak-in-sunxi_pmx_reques.patch + riscv-dts-microchip-gpio-controllers-on-mpfs-need-2-.patch + riscv-dts-microchip-remove-gpio-hogs-from-beaglev-fi.patch + dt-bindings-vendor-prefixes-add-displaytech-ltd.patch + drm-gpuvm-take-refcount-on-drm-device.patch + wifi-cfg80211-restrict-lmr-feedback-check-to-tb-and-.patch + drm-panel-clean-up-sofef00-config-dependencies.patch + drm-panel-clean-up-s6e3fc2x01-config-dependencies.patch + drm-panel-clean-up-s6e3ha2-config-dependencies-and-f.patch + riscv-dts-microchip-update-pic64gx-gpio-interrupts-t.patch + riscv-dts-microchip-fix-pic64gx-gpio-interrupt-cells.patch + arm64-dts-marvell-samsung-coreprimevelte-increase-to.patch + arm-dts-rockchip-add-address-size-cells-to-chromium-.patch + arm64-dts-rockchip-add-address-size-cells-to-chromiu.patch + arm64-dts-rockchip-fix-rk809-interrupt-pin-on-rk3566.patch + arm64-dts-imx8x-colibri-correct-sodimm-pad-settings.patch + arm64-dts-imx8mn-vhip4-evalboard-v1-correct-interrup.patch + arm64-dts-imx8mn-vhip4-evalboard-v2-correct-interrup.patch + arm64-dts-imx8mp-ab2-correct-interrupt-flags.patch + revert-arm64-dts-imx8mm-kontron-add-support-for-read.patch + revert-arm64-dts-imx8mp-kontron-add-support-for-read.patch + vxlan-fix-potential-null-ptr-deref-in-vxlan_gro_prep.patch + drm-renesas-rz-du-mipi_dsi-fix-return-path-on-error.patch + alarmtimer-remove-stale-return-description-from-alar.patch + opp-fix-race-between-opp-addition-and-lookup.patch + crypto-ccp-reverse-the-cleanup-order-in-psp_dev_dest.patch + crypto-ccp-fix-snp_filter_reserved_mem_regions-off-b.patch + crypto-ccp-check-for-page-allocation-failure-correct.patch + crypto-ccp-initialize-data-during-__sev_snp_init_loc.patch + crypto-atmel-sha204a-fix-blocking-and-non-blocking-r.patch + crypto-ecrdsa-fix-unknown-oid-check-in-ecrdsa_param_.patch + crypto-asymmetric_keys-fix-oob-read-in-pefile_digest.patch + arm-multi_v7_defconfig-correct-qcom_rpmh-and-qcom_rp.patch + accel-amdxdna-fix-clflush-buffer-size.patch + dlm-fix-add-msg-handle-in-send_queue-ordered.patch + nilfs2-fix-backing_dev_info-reference-leak.patch + ntb-store-original-dma-address-for-future-release.patch + ntb-use-consistent-dma-attributes-when-freeing-dma-m.patch + media-qcom-camss-vfe-fix-pix-subdev-naming-on-vfe-li.patch + dts-riscv-spacemit-correct-32k-clock-frequency.patch + arm64-dts-qcom-sdm660-set-cdsp-compute-cbs-regs-prop.patch + arm64-dts-qcom-sdm630-set-adsp-compute-cbs-regs-prop.patch + arm64-dts-qcom-lemans-move-pcie-devices-into-soc-nod.patch + media-iris-scale-mmcx-power-domain-on-sm8250.patch + media-venus-scale-mmcx-power-domain-on-sm8250.patch + iommu-amd-fix-a-stale-comment-about-which-legacy-mod.patch + soc-mediatek-mtk-mmsys-restore-mt8167-routing-masks-.patch + bpf-fix-crash-in-bpf_-set-remove-_dentry_xattr-for-n.patch + uaccess-fix-ignored_trailing-logic-in-copy_struct_to.patch + sockptr-fix-usize-check-in-copy_struct_from_sockptr-.patch + arm64-dts-mediatek-mt7988a-bpi-r4pro-rework-pcie-gpi.patch + arm64-dts-mediatek-mt8192-asurada-move-pcie-dma-boun.patch + workqueue-forbid-test_workqueue-from-being-built-in.patch + drm-amdgpu-fix-error-return-code-in-mes_v12_1_map_te.patch + arm64-dts-qcom-glymur-crd-drop-forced-host-mode-for-.patch + arm64-dts-qcom-glymur-mark-usb-ss1-and-ss2-as-role-s.patch + rhashtable-give-each-instance-its-own-lockdep-class.patch + rust-alloc-fix-vec-extend_with-safety-comment.patch + clk-scmi-fix-clock-rate-rounding.patch + arm64-dts-qcom-sm8750-fix-dsi1-phy-reference-clock-r.patch + arm64-dts-qcom-kodiak-fix-ice-reg-size.patch + arm64-dts-qcom-sm8450-fix-ice-reg-size.patch + platform-chrome-chromeos_privacy_screen-check-acpi_c.patch + platform-chrome-chromeos_tbmc-check-acpi_companion.patch + platform-chrome-wilco_ec-event-check-acpi_companion.patch + drm-hisilicon-hibmc-add-updating-link-cap-in-dp-dete.patch + drm-hisilicon-hibmc-fix-no-showing-when-no-connector.patch + drm-hisilicon-hibmc-move-display-contrl-config-to-hi.patch + drm-hisilicon-hibmc-use-clock-to-look-up-the-pll-val.patch + evm-terminate-and-bound-the-evm_xattrs-read-buffer.patch + thermal-hwmon-fix-critical-temperature-attribute-rem.patch + thermal-hwmon-register-a-hwmon-device-for-each-therm.patch + clk-scpi-unregister-child-clock-providers-on-remove.patch + net-sched-sch_hfsc-annotate-data-races-in-hfsc_dump_.patch + scsi-hisi_sas-add-slave_destroy-interface-for-v3-hw.patch + crypto-ccp-treat-zero-length-cert-chain-as-query-for.patch + crypto-af_alg-cap-aead-ad-length-to-0x80000000.patch + crypto-ccp-sev-dev-tsm-bail-out-early-when-pdev-bus-.patch + crypto-safexcel-fix-potential-memory-leak-in-safexce.patch + spi-hisi-kunpeng-use-dev_err_probe-for-host-registra.patch + net-sched-add-qdisc_qlen_inc-and-qdisc_qlen_dec.patch + net-sched-sch_dualpi2-annotate-data-races-in-dualpi2.patch + net-sched-sch_htb-do-not-change-sch-flags-in-htb_dum.patch + net-sched-sch_htb-annotate-data-races-i.patch + ipv6-addrconf-bail-out-of-dad_failure-when-state-is-.patch + ib-mlx5-fix-transport-domain-rollback-and-initialize.patch + rdma-hns-fix-arithmetic-overflow-in-calc_hem_config.patch + rdma-mlx5-fix-umr-xlt-cleanup-on-odp-populate-failur.patch + rdma-mlx5-fix-devx-subscribe-event-unwind-null-deref.patch + rdma-srpt-fix-integer-overflow-in-immediate-data-len.patch + rdma-hns-initialize-seqfile-before-creating-file.patch + tools-rtla-fix-dump-tasks-usage-in-timerlat.patch + rtla-stop-the-record-trace-on-interrupt.patch + drm-syncobj-fix-memory-leak-in-drm_syncobj_find_fenc.patch + dm-limit-target-bio-polling-to-one-shot.patch + selftests-bpf-override-extra_ldflags-for-static-buil.patch + selftests-bpf-reject-unsupported-k-option-in-vmtest..patch + selftests-bpf-fix-test-for-refinement-of-single-valu.patch + iommu-arm-smmu-qcom-fix-fastrpc-compatible-string-in.patch + sched-fair-update-util_est-after-updating-util_avg-d.patch + selftests-mm-fix-resv_sz-when-parsing-arm64-signal-f.patch + firmware-arm_ffa-honor-partition-info-descriptor-siz.patch + arm64-dts-freescale-imx95-verdin-ivy-fix-rs485-rts-p.patch + arm64-dts-imx8dxl-evk-remove-unnecessary-pcie-ep-pro.patch + arm64-dts-imx8qxp-mek-remove-unnecessary-pcie-ep-vpc.patch + arm64-dts-imx95-19x19-evk-fix-pcie-ep-vpcie-supply.patch + hfs-fix-incorrect-inode-id-assignment-in-hfs_new_ino.patch + media-atomisp-fix-memory-leak-in-atomisp_fixed_patte.patch + media-atomisp-gc2235-fix-uaf-and-memory-leak.patch + staging-media-atomisp-fix-loop-shadowing-in-ia_css_s.patch + riscv-dts-spacemit-set-console-baud-rate-on-milk-v-j.patch + riscv-dts-spacemit-fix-uboot-partition-offset-on-mil.patch + firmware-smccc-fix-arm-smccc-soc_id-name-call.patch + firmware-arm_scmi-read-sensor-config-as-32-bit-value.patch + media-synopsys-fix-ipi-using-hardcoded-datatype.patch + sysfs-clamp-show-return-value-in-sysfs_kf_read.patch + bitops-use-common-function-parameter-names.patch + regulator-dt-bindings-mt6359-drop-regulator-name-pat.patch + tools-nolibc-getopt-fix-potential-out-of-bounds-acce.patch + vfio-selftests-fix-out-of-tree-build-with-make-o.patch + vfio-selftests-allow-builds-when-arch-x86.patch + nilfs2-fix-return-in-nilfs_mkdir.patch + vfio-xe-avoid-duplicate-reset-in-xe_vfio_pci_reset_d.patch + net-sched-sch_drr-annotate-data-races-around-cl-defi.patch + regmap-i2c-fix-sparse-warning-in-regmap_smbus_word_w.patch + media-rockchip-rga-fix-too-small-buffer-size.patch + firmware-arm_scmi-fix-oob-in-scmi_power_name_get.patch + arm64-dts-qcom-eliza-mtp-fix-the-debug-uart-index.patch + arm64-dts-qcom-kaanapali-add-power-domain-and-iface-.patch + arm64-dts-qcom-lemans-add-power-domain-and-iface-clk.patch + arm64-dts-qcom-monaco-add-power-domain-and-iface-clk.patch + arm64-dts-qcom-sc7180-add-power-domain-and-iface-clk.patch + arm64-dts-qcom-kodiak-add-power-domain-and-iface-clk.patch + arm64-dts-qcom-sm8450-add-power-domain-and-iface-clk.patch + arm64-dts-qcom-sm8550-add-power-domain-and-iface-clk.patch + arm64-dts-qcom-sm8650-add-power-domain-and-iface-clk.patch + arm64-dts-qcom-sm8750-add-power-domain-and-iface-clk.patch + tracing-bound-synthetic-field-strings-with-seq_buf.patch + arm64-dts-qcom-lemans-add-edp-ref-clock-for-edp-phys.patch + arm64-dts-qcom-glymur-fix-wrong-interrupt-number-for.patch + arm64-dts-qcom-sdm845-xiaomi-beryllium-correct-ipa-f.patch + writeback-drop-now-unnecessary-rcu_barrier-in-cgroup.patch + kernfs-fix-suspicious-rcu-usage-in-kernfs_put.patch + device-property-fix-fwnode-reference-leak-in-fwnode_.patch + driver-core-use-mod_delayed_work-to-prevent-lost-def.patch + revert-treewide-fix-probing-of-devices-in-dt-overlay.patch + of-dynamic-fix-overlayed-devices-not-probing-because.patch + crypto-eip93-fix-reset-ring-register-definition.patch + asoc-mediatek-mt8189-fix-probe-resource-cleanup.patch + drm-msm-mdss-correct-ubwc-programming-sequences.patch + cpufreq-documentation-fix-sampling_down_factor-range.patch + cpufreq-conservative-simplify-frequency-limit-handli.patch + pwm-imx27-fix-variable-truncation-in-.apply.patch + rdma-mana_ib-use-ib_get_eth_speed-for-reporting-port.patch + tools-nolibc-stackprotector-avoid-stalling-program-s.patch + bus-sunxi-rsb-always-check-register-address-validity.patch + pinctrl-spacemit-fix-null-check-in-spacemit_pin_set_.patch + asoc-dapm-fix-widget-lookup-with-prefixed-names-acro.patch + rdma-irdma-fix-out-of-bounds-write-in-irdma_copy_use.patch + rdma-rxe-fix-a-use-after-free-problem-in-rxe_mmap.patch + ib-mlx4-fix-refcount-leak-in-add_port-error-path.patch + gpu-nova-core-vbios-stop-scanning-at-bios_max_scan_l.patch + gpu-nova-core-vbios-use-checked-arithmetic-for-bios-.patch + gpu-nova-core-vbios-avoid-reading-too-far-in-read_mo.patch + gpu-nova-core-vbios-read-bittoken-using-frombytes.patch + gpu-nova-core-vbios-use-checked-ops-and-accesses-in-.patch + gpu-nova-core-vbios-use-checked-access-in-fwsecbiosi.patch + gpu-nova-core-vbios-use-checked-accesses-in-setup_fa.patch + rdma-hns-fix-warning-in-poll-cq-direct-mode.patch + rdma-hns-fix-log-flood-after-cmd_mbox-failure.patch + acpi-pad-fix-teardown-ordering-in-acpi_pad_remove.patch + rdma-counter-fix-incorrect-port-index-in-rdma_counte.patch + pinctrl-meson-amlogic-a4-fix-gpio-output-glitch.patch + pm-sleep-use-complete-in-device_pm_sleep_init.patch + mips-fix-big-endian-stack-argument-fetching-in-o32-w.patch + mips-dec-remove-do_irq-call-indirection.patch + mips-ralink-mt7621-add-missing-__iomem.patch + mips-n64-add-__iomem-for-writel-call.patch + driver-core-fix-missing-jiffies-conversion-in-deferr.patch + driver-core-guard-deferred-probe-timeout-extension-w.patch + arm64-tegra-fix-address-of-tegra264-main-gpio-contro.patch + mtd-spi-nor-debugfs-fix-the-flags-list.patch + mtd-spi-nor-drop-duplicate-kconfig-dependency.patch + wifi-ath12k-fix-error-unwind-on-arch_init-failure-in.patch + cpufreq-governor-fix-data-races-on-per-cpu-idle-nice.patch + cpufreq-governor-fix-stale-prev_cpu_nice-spike-when-.patch + alsa-xen-front-reset-event-channel-state-on-stream-c.patch + alsa-xen-front-connect-event-channel-after-stream-pr.patch + alsa-seq-oss-fix-uaf-at-handling-events-with-embedde.patch + alsa-seq-midi-serialize-output-teardown-with-event_i.patch + selftests-fix-makefile-target-for-nsfs.patch + pinctrl-nuvoton-ma35d1-fix-mfp-register-offset-and-p.patch + pinctrl-cs42l43-fix-leaked-pm-reference-on-error-pat.patch + pinctrl-cs42l43-fix-polarity-on-debounce.patch + init-initramfs_test-wait_for_initramfs-before-runnin.patch + nvmet-tcp-fix-page-fragment-cache-leak-in-error-path.patch + nvmet-tcp-check-return-value-of-nvmet_tcp_set_queue_.patch + nvme-multipath-fix-flex-array-size-in-struct-nvme_ns.patch + nvme-pci-fix-out-of-bounds-access-in-nvme_setup_desc.patch + workqueue-drop-spurious-from-print_worker_info-fn-de.patch + ipv6-guard-against-possible-null-deref-in-__in6_dev_.patch + net-sched-cls_bpf-prevent-unbounded-recursion-in-off.patch + iommu-amd-fix-premature-break-in-init_iommu_one.patch + alsa-hda-realtek-alc269-fixup-for-yoga-pro-7-15ash11.patch + dt-bindings-vendor-prefixes-add-verbatim-corporation.patch + rtla-actions-restore-continue-flag-in-actions_perfor.patch + drm-tegra-gr2d-gr3d-initialize-address-register-map-.patch + drm-tegra-gr2d-gr3d-contain-pm-in-the-gr-d_probe-gr-.patch + gpu-host1x-allow-entries-in-bo-caches-to-be-freed.patch + drm-tegra-fbdev-do-not-assign-to-struct-drm_fb_helpe.patch + gpu-host1x-mipi-fix-device_node-reference-leak-in-te.patch + drm-tegra-dc-fix-device-node-reference-leak-in-tegra.patch + gpu-host1x-fix-iommu_map_sgtable-return-value-check.patch + drm-tegra-fix-iommu_map_sgtable-return-value-check.patch + drm-nouveau-bios-specify-correct-display-fuse-regist.patch + libbpf-harden-parse_vma_segs-path-parsing.patch + bpftool-fix-typo-in-struct_ops-map-fd-generation-for.patch + libbpf-fix-uaf-in-strset__add_str.patch + arm-tegra-add-address-size-cells-to-chromium-based-f.patch + arm64-tegra-add-address-size-cells-to-chromium-based.patch + rust-devres-add-static-bound-to-devres-t.patch + dax-kmem-account-for-partial-discontiguous-resource-.patch + lib-base64-validate-before-writing-in-decode-tail-pa.patch + rust-uaccess-use-inline_copy_to_user-to-guard-copy_t.patch + uaccess-unify-inline-vs-outline-copy_-from-to-_user-.patch + uaccess-minimize-inline_copy_user-related-ifdefery.patch + rapidio-tsi721-prevent-a-bad-dereference-in-tsi721_d.patch + ocfs2-don-t-bug_on-an-invalid-journal-dinode.patch + ocfs2-kill-osb-system_file_mutex-lock.patch + crypto-hisilicon-qm-disable-error-report-before-flr.patch + crypto-inside-secure-eip93-add-check-for-devm_reques.patch + crypto-tegra-fix-dma_free_coherent-size-error.patch + crypto-tegra-return-enomem-when-input-buffer-allocat.patch + crypto-ccp-tsm-enable-the-root-port-after-the-endpoi.patch + sched-deadline-reject-debugfs-dl_server-writes-for-o.patch + drm-msm-dp-fix-hpd-state-status-bit-shift-value.patch + drm-msm-dp-fix-the-isr_-enum-values.patch + firmware-samsung-acpm-add-devm_acpm_get_by_phandle-h.patch + firmware-samsung-acpm-remove-compile-testing-stubs.patch + drm-msm-a8xx-make-a8xx_recover-ifpc-safe.patch + drm-msm-a8xx-fix-rscc-offset.patch + edac-igen6-fix-call-trace-due-to-missing-release.patch + edac-igen6-fix-memory-topology-parsing-for-panther-l.patch + edac-skx_common-skx-fix-ubsan-shift-out-of-bounds-in.patch + arm64-dts-st-fix-sai-addresses-on-stm32mp251.patch + arm-dts-bcm2711-fix-typo-in-gpio-line-names.patch + rust-pin-init-internal-remove-redundant-pin-filterin.patch + rust-pin-init-internal-turn-phantompinned-error-into.patch + rust-pin-init-internal-remove-collect_tuple-polyfill.patch + rust-pin-init-internal-pin_data-use-closure-for-hand.patch + rust-pin-init-internal-pin_data-add-struct-to-record.patch + rust-pin-init-internal-init-handle-code-blocks-early.patch + rust-pin-init-internal-use-marker-on-drop-guard-type.patch + rust-pin-init-internal-project-slots-instead-of-refe.patch + rust-pin-init-internal-suppress-non_snake_case-lint-.patch + rdma-umem-add-ib_umem_is_contiguous-stub-for-config_.patch + rdma-rxe-fix-toctou-heap-overflow-in-get_srq_wqe.patch + rdma-rxe-copy-wqe-to-local-buffer-in-non-srq-receive.patch + dts-riscv-spacemit-k3-fix-i-o-power-settings.patch + revert-media-venus-hfi_platform-correct-supported-co.patch + media-qcom-venus-drop-extra-padding-in-nv12-raw-size.patch + media-qcom-venus-relax-encoder-frame-blur-dimension-.patch + media-qcom-venus-relax-encoder-frame-blur-step-size-.patch + amba-use-generic-driver_override-infrastructure.patch + cdx-use-generic-driver_override-infrastructure.patch + drivers-hv-vmbus-use-generic-driver_override-infrast.patch + rpmsg-use-generic-driver_override-infrastructure.patch + arm64-dts-renesas-r8a78000-fix-gic-720ae-view-1-redi.patch + arm64-dts-renesas-ironhide-describe-all-reserved-mem.patch + md-raid10-reset-read_slot-when-reusing-r10bio-for-di.patch + md-raid1-raid10-fix-deadlock-in-read-error-recovery-.patch + md-raid1-raid10-fix-error-path-detection-with-md_clo.patch + md-raid1-raid10-fix-bio-accounting-for-split-md-clon.patch + raid1-fix-nr_pending-leak-in-req_atomic-bad-block-er.patch + bpf-fix-bpf_prog_query-oob-write-and-cgroup-backward.patch + selftests-bpf-add-verification-for-bpf_prog_query-at.patch + liveupdate-use-refcount_t-for-flb-reference-counts.patch + liveupdate-reference-count-incoming-flb-data.patch + libbpf-skip-hash-computation-when-loader-generation-.patch + libbpf-skip-endianness-swap-when-loader-generation-f.patch + liveupdate-skip-serialization-for-context-preserving.patch + liveupdate-fix-toctou-race-in-luo_session_retrieve.patch + liveupdate-block-session-mutations-during-reboot.patch + liveupdate-fix-u-a-f-in-luo_file_unpreserve_files-an.patch + ext4-fix-logflush-shutdown-ordering-to-allow-ordered.patch + spi-atmel-fix-dma-channel-and-bounce-buffer-leaks.patch + spi-imx-replace-dmaengine_terminate_all-with-dmaengi.patch + asoc-rsnd-fix-rsnd_soc_mask-width-to-single-nibble.patch + nfsd-fix-delegation-reference-leak-in-nfsd4_revoke_s.patch + arm-imx3-fix-ccm-node-reference-leak.patch + hid-wiimote-fix-table-layout-and-whitespace-errors.patch + wifi-ath12k-fix-incorrect-ht-vht-he-eht-mcs-reportin.patch + wifi-ath12k-fix-memory-leak-in-ath12k_wifi7_dp_rx_h_.patch + wifi-ath12k-fix-inconsistent-arvif-state-in-vdev_cre.patch + wifi-ath12k-fix-null-deref-in-change_sta_links-for-u.patch + ata-libata-fix-ata_exec_internal.patch + acpi-button-fix-lid_device-value-leak-past-driver-re.patch + arm-imx31-fix-iim-mapping-leak-in-revision-check.patch + x86-cpu-keep-the-processor_select-menu-together.patch + nvdimm-btt-handle-preemption-in-btt-lane-acquisition.patch + tcp_bbr-fix-spdx-license-identifier-to-be-gpl-2.0-or.patch + scsi-revert-scsi-fix-sas_user_scan-to-handle-wildcar.patch + bpf-reject-exclusive-maps-as-inner-maps-in-map-in-ma.patch + libbpf-reject-non-exclusive-metadata-maps-in-the-sig.patch + libbpf-skip-initial_value-override-on-signed-loaders.patch + libbpf-skip-max_entries-override-on-signed-loaders.patch + scsi-pm8001-fix-error-code-in-non_fatal_log_show.patch + scsi-ufs-fix-wrong-value-printed-in-unexpected-upiu-.patch + bpf-fix-uaf-by-restoring-rcu-delayed-inode-freeing-i.patch + mm-fake-numa-fix-under-allocation-detection-in-unifo.patch + ext2-fix-ignored-return-value-of-generic_write_sync.patch + sched-restore-timer_slack_ns-when-resetting-rt-polic.patch + nvme-fix-fdp-fdpcidx-bounds-check.patch + driver-core-use-system_percpu_wq-instead-of-system_w.patch + bpf-reject-exclusive-maps-for-bpf_map_elem-iterators.patch + tick-sched-fix-toctou-in-nohz-idle-time-fetch.patch + lib-test_meminit-use-for-bools.patch + riscv-dts-sophgo-sg2044-use-hex-for-cpu-unit-address.patch + riscv-dts-sophgo-sg2042-use-hex-for-cpu-unit-address.patch + configfs_lookup-don-t-leave-s_dentry-dangling-on-fai.patch + lockdep-selftests-restore-migrate_disable-state-on-p.patch + lockdep-selftests-restore-sched_rt_mutex-state-on-pr.patch + ext4-fix-fast-commit-wait-wake-bit-mapping-on-64-bit.patch + irqchip-exynos-combiner-remove-useless-spinlock.patch + drm-amdgpu-fix-kasan-slab-out-of-bounds-in-amdgpu_co.patch + drm-amd-pm-add-empty-string-validation-to-sysfs-stor.patch + drm-amdgpu-set-sub_block_index-for-mca-ras-sub-block.patch + accel-amdxdna-return-errors-for-failed-debug-bo-comm.patch + bpftool-use-libbpf-error-code-for-flow-dissector-que.patch + vhost-fix-vhost_get_avail_idx-for-a-non-empty-ring.patch + iommu-vt-d-fix-rb-tree-corruption-in-probe-error-pat.patch + mm-preserve-pg_dropbehind-flag-during-folio-split.patch + eventpoll-rename-attach_epitem-to-ep_attach_file.patch + eventpoll-split-ep_insert-into-alloc-register-stages.patch + eventpoll-extract-ep_deliver_event-from-ep_send_even.patch + eventpoll-wrap-ep_unactive_ptr-in-typed-sentinel-hel.patch + perf-x86-amd-core-always-use-the-nmi-latency-mitigat.patch + perf-x86-intel-uncore-fix-discovery-unit-lookup-for-.patch + perf-x86-intel-uncore-fix-pci-device-refcount-leak-i.patch + perf-x86-amd-uncore-use-node-id-to-identify-df-and-u.patch + xfrm-fix-nat-related-field-inheritance-in-sa-migrati.patch + wifi-wlcore-enable-the-right-set-of-ciphers.patch + cxl-fwctl-fix-__fortify_panic.patch + cxl-test-fix-__fortify_panic.patch + bpf-take-mmap_lock-in-zap_pages.patch + drm-amdkfd-always-resume_all-after-suspend_all.patch + of-reserved_mem-avoid-post-init-uaf-when-alloc_reser.patch + ocfs2-rebase-copied-fsdlm-lvb-pointers-in-locking_st.patch + lib-kunit_iov_iter-repeatedly-call-alloc_pages_bulk.patch + ocfs2-fix-buffer-head-management-in-ocfs2_read_block.patch + ocfs2-validate-fast-symlink-target-during-inode-read.patch + ocfs2-reject-fitrim-ranges-shorter-than-a-cluster.patch + ocfs2-dlm-require-a-ref-for-locking_state-debugfs-op.patch + ocfs2-fix-race-between-ocfs2_control_install_private.patch + ocfs2-fix-out-of-bounds-write-in-ocfs2_remove_refcou.patch + cxl-pci-fix-the-incorrect-check-of-pci_read_config_w.patch + cxl-pci-convert-pcibios-errors-to-errno-on-dvsec-con.patch + netfilter-nfnetlink_osf-fix-mss-parsing-on-big-endia.patch + netfilter-nfnetlink_cthelper-use-read-write-_once-fo.patch + netfilter-synproxy-drop-packets-if-timestamp-adjustm.patch + netfilter-synproxy-adjust-duplicate-timestamp-option.patch + netfilter-synproxy-fix-unaligned-memory-access-in-ti.patch + netfilter-synproxy-protect-nf_ct_seqadj_init-with-co.patch + netfilter-cttimeout-detach-dataplane-timeout-policy-.patch + alsa-usb-audio-qcom-initialize-offload-control-retur.patch + mm-slub-preserve-original-size-in-_kmalloc_nolock_no.patch + x86-cpu-remove-obsolete-aperfmperf_get_khz-declarati.patch + netfilter-conntrack-revert-ct-extension-genid-infras.patch + netfilter-conntrack-call-nf_ct_gre_keymap_destroy-if.patch + ntfs-free-link-name-from-ntfs_name_cache.patch + rdma-hfi1-open-code-rvt_set_ibdev_name.patch + ib-cm-fix-av-cm-device-leak-on-an-error-path-in-cm_i.patch + alsa-hda-fix-kconfig-dependency-of-hd-audio-pci.patch + rdma-irdma-fix-oob-read-during-cq-mr-registration.patch + rdma-irdma-initialize-iwmr-access-during-mr-registra.patch + arm64-dts-imx8mp-kontron-reduce-eeram-spi-clock-freq.patch + arm64-dts-imx94-fix-ddr-pmu-interrupt-number.patch + arm64-dts-imx95-correct-pcie-outbound-address-space-.patch + arm64-dts-lx2162a-clearfog-use-rev2-soc-dtsi.patch + arm64-dts-tqma8mpql-mba8mpxl-configure-sai-clock-in-.patch + arm64-dts-imx8mp-kontron-fix-gpio-for-display-power-.patch + arm64-dts-freescale-fsl-ls1028a-tqmls1028a-mbls1028a.patch + rdma-siw-fix-endpoint-socket-association-handling.patch + selftests-bpf-fix-flaky-file_reader-test.patch + bpf-clear-rb-node-linkage-when-freeing-bpf_rb_root.patch + bpf-check-tail-zero-of-bpf_map_info.patch + bpf-check-tail-zero-of-bpf_prog_info.patch + bpf-update-transport_header-when-encapsulating-udp-t.patch + kernfs-fix-xattr-race-condition-with-multiple-superb.patch + tmpfs-simplify-constructing-security.foo-xattr-names.patch + simple_xattr-change-interface-to-pass-struct-simple_.patch + simpe_xattr-use-per-sb-cache.patch + kernfs-link-kn-to-its-parent-before-the-lsm-init-hoo.patch + wifi-wcn36xx-fix-heap-overflow-from-oversized-firmwa.patch + wifi-wcn36xx-fix-oob-read-from-firmware-count-in-pri.patch + wifi-wcn36xx-fix-oob-read-from-short-trigger-ba-firm.patch + alsa-seq-fix-partial-userptr-event-expansion.patch + alsa-pcm-fix-unlocked-runtime-state-reads-in-xfer-io.patch + riscv-cpu_ops-change-return-value-type-of-cpu_is_sto.patch + riscv-stacktrace-remove-bogus-0x4-offset-in-non-fp-w.patch + alsa-seq-clear-variable-event-pointer-on-read.patch + riscv-alternative-use-is_enabled-over-ifdeffery-for-.patch + riscv-alternative-pass-vdso-start-as-parameter-to-ap.patch + riscv-alternative-also-patch-the-cfi-vdso.patch + bpf-verifier-support-for-sleepable-tracepoint-progra.patch + bpf-reject-sleepable-bpf_lsm_cgroup-programs-at-load.patch + netfilter-flowtable-avoid-num_encaps-underflow-on-br.patch + filelock-fix-break_lease-stub-signature-for-config_f.patch + bpf-fix-nmi-tracepoint-re-entry-deadlock-on-lru-lock.patch + kunit-tool-don-t-write-to-stdout-when-it-should-be-d.patch + wifi-mac80211-bound-s1g-tim-pvb-walk-to-the-tim-elem.patch + powerpc-8xx-implement-get_direction-in-cpm1.patch + bpf-fix-null-pointer-dereference-in-bpf_task_from_vp.patch + acpi-ipmi-fix-message-kref-handling-on-dead-device.patch + acpi-processor-add-cpuidle-driver-check-in-acpi_proc.patch + cpufreq-documentation-fix-conservative-governor-freq.patch + thermal-testing-reject-missing-command-arguments.patch + btrfs-don-t-force-dio-writes-to-be-serialized.patch + ntfs-validate-resident-attribute-lists-and-harden-th.patch + ntfs-bound-the-look-ahead-attribute-list-entry-in-nt.patch + ntfs-bound-the-attribute-list-entry-in-ntfs_read_ino.patch + ntfs-fix-u16-truncation-of-restart-area-length-check.patch + ib-mlx5-don-t-take-the-rereg_mr-fallback-without-a-n.patch + ib-mlx5-properly-support-implicit-odp-rereg_mr.patch + rdma-nldev-fix-locking-when-accessing-mr-pd.patch + ib-mlx5-remove-unused-mkc-bits-in-mlx5r_umr_update_m.patch + ib-mlx5-pull-the-pdn-out-of-the-depths-of-the-umr-ma.patch + ib-mlx5-don-t-mangle-the-mr-pd-inside-the-rereg-call.patch + spi-ep93xx-fix-double-free-of-zeropage-on-dma-setup-.patch + asoc-amd-acp-sdw-legacy-bound-dai-link-iteration.patch + asoc-amd-acp-sdw-sof-bound-dai-link-iteration.patch + firmware_loader-fix-recursive-lock-in-device_cache_f.patch + configfs-fix-lockless-traversals-of-s_children.patch + watchdog-unregister-pm-notifier-on-watchdog-unregist.patch + pinctrl-qcom-fix-resolving-register-base-address-fro.patch + scsi-target-fix-hexadecimal-chap_i-handling.patch + scsi-ufs-core-handle-pm-commands-timeout-before-scsi.patch + scsi-target-remove-tcm_loop-target-reset-handling.patch + pinctrl-mediatek-mt8516-fix-schmitt-trigger-register.patch + pinctrl-mediatek-mt8167-fix-schmitt-trigger-register.patch + dt-bindings-pinctrl-realtek-rtd1625-fix-input-voltag.patch + pinctrl-pinctrl_stmfx-should-depend-on-config_of.patch + iommufd-take-dma_resv-lock-before-dma_buf_unpin-in-r.patch + iommufd-destroy-the-pages-content-after-detaching-fr.patch + lib-test_hmm-fix-memory-leak-in-dmirror_migrate_to_s.patch + vmalloc-fix-null-pointer-dereference-in-is_vm_area_h.patch + rust-kbuild-show-the-right-quiet_cmd_rustc_procmacro.patch + remoteproc-qcom_q6v5_wcss-drop-redundant-wcss_q6_bcr.patch + hwspinlock-qcom-avoid-uninitialized-struct-members.patch + sched-fair-fix-cpu_util-runnable_avg-arithmetic.patch + arm-configs-drop-duplicated-config_ext4_fs.patch + wifi-mt76-mt7925-clean-up-dma-on-probe-failure.patch + wifi-mt76-mt7921-fix-resource-leak-in-probe-error-pa.patch + wifi-mt76-use-kfree_rcu-for-offchannel-link-in-mt76_.patch + wifi-mt76-mt7996-add-missing-max_remain_on_channel_d.patch + wifi-mt76-mt7996-fix-null-pointer-dereference-in-mt7.patch + wifi-mt76-mt7925-fix-stale-pointer-comparisons-in-ch.patch + wifi-mt76-mt7925-keep-tx-ba-state-in-the-primary-wci.patch + wifi-mt76-mt792x-skip-mld-header-rewrite-for-802.3-e.patch + wifi-mt76-mt7925-validate-skb-length-in-testmode-que.patch + wifi-mt76-mt7996-fix-possible-token-leak-in-mt7996_t.patch + wifi-mt76-mt7996-fix-possible-null-pointer-dereferen.patch + wifi-mt76-mt7996-fix-reading-zeroed-info-control.fla.patch + wifi-mt76-mt7996-remove-redundant-pdev-bus-check-in-.patch + wifi-mt76-mt7996-limit-work-in-set_bitrate_mask.patch + wifi-mt76-fix-argument-to-ieee80211_is_first_frag.patch + wifi-mt76-mt7915-fix-potential-tx_retries-underflow.patch + wifi-mt76-mt7921-fix-potential-tx_retries-underflow.patch + wifi-mt76-mt7925-fix-potential-tx_retries-underflow.patch + wifi-mt76-mt7996-fix-potential-tx_retries-underflow.patch + btrfs-fix-invalid-pointer-dereference-in-__btrfs_run.patch + alsa-aloop-drop-superfluous-break.patch + gpio-mt7621-fix-interrupt-banks-mapping-on-gpio-chip.patch + wifi-ath12k-fix-eapol-tx-failure-caused-by-stale-tcl.patch + wifi-ath12k-enable-ieee80211_vht_ext_nss_bw_capable-.patch + fbdev-arm-export-acorndata_8x8-font-symbol-for-bootl.patch + fbdev-sm501fb-fix-buffer-errors-in-of-binding-code.patch + memory-tegra186-emc-stop-borrowing-mc-aggregate-hook.patch + vfs-add-fs_userns_delegatable-flag-and-set-it-for-nf.patch + hwmon-it87-clamp-negative-values-to-zero-in-set_fan.patch + pm-qos-fix-misc-device-registration-unwind.patch + btrfs-zoned-don-t-account-data-relocation-space-info.patch + btrfs-zoned-fix-deadlock-waiting-for-ticket-during-d.patch + revert-btrfs-fix-the-file-offset-calculation-inside-.patch + btrfs-zoned-always-set-max_active_zones-for-zoned-de.patch + btrfs-annotate-lockless-read-of-defrag_bytes-in-shou.patch + btrfs-fix-deadlock-cloning-inline-extent-when-using-.patch + btrfs-lzo-reject-compressed-segment-that-overflows-t.patch + ixgbe-do-not-configure-xps-for-xdp-queues.patch + igc-skip-rx-timestamp-header-for-frame-preemption-ve.patch + asoc-sma1307-fix-uevent-string-leaks-in-fault-worker.patch + ib-mlx4-fill-in-the-access_flags-if-ib_mr_rereg_acce.patch + nfsd-handle-layout-stid-in-nfsd4_drop_revoked_stid.patch + lockd-stop-warning-on-nlm__int__drop_reply-in-v4-cas.patch + lockd-translate-nlm__int__deadlock-in-__nlm4svc_proc.patch + lockd-do-not-monitor-when-looking-up-the-lock_msg-ca.patch + lockd-avoid-hashing-uninitialized-bytes-in-nlm4svc_l.patch + spi-meson-spifc-fix-runtime-pm-leak-on-remove.patch + asoc-codecs-aw88261-fix-incorrect-masks-for-boost-re.patch + bpf-cancel-special-fields-on-map-value-recycle.patch + clocksource-move-nxp-timer-selection-to-drivers-cloc.patch + vduse-hold-vduse_lock-across-idr-lookup-in-open-path.patch + vhost-vdpa-validate-virtqueue-index-in-mmap-and-faul.patch + virtio-rtc-tear-down-old-virtqueues-before-restore.patch + virtio_console-read-size-from-config-space-during-de.patch + vduse-requeue-failed-read-to-send_list-head.patch + vhost-net-complete-zerocopy-ubufs-only-once.patch + tools-virtio-check-mmap-return-value-in-vringh_test.patch + vduse-fix-compat-handling-for-vduse_iotlb_get_fd-vdu.patch + vdpa-octeon_ep-fix-pf-vf-mailbox-data-address-calcul.patch + vdpa-octeon_ep-fix-irq-to-ring-mapping-in-interrupt-.patch + iomap-pass-the-correct-len-to-fserror_report_io-in-_.patch + asoc-cs35l56-fix-missing-calls-to-wm_adsp2_remove.patch + asoc-cs35l56-prevent-double-free-of-debugfs.patch + asoc-cs35l56-cleanup-if-component_probe-fails.patch + asoc-cs35l56-don-t-leave-parent-irq-disabled-if-syst.patch + hwmon-gpd-fan-drop-global-driver-data-and-use-per-de.patch + hwmon-gpd-fan-initialize-ec-before-registering-hwmon.patch + hwmon-gpd-fan-fix-race-condition-between-device-remo.patch + ext4-fix-err_ptr-0-in-ext4_mkdir.patch + tools-missed-broadcast_neigh-if_link-uapi-header.patch + netlink-specs-rt-link-missed-broadcast-neigh.patch + bonding-3ad-add-lacp_strict-configuration-knob.patch + bonding-3ad-fix-carrier-when-no-usable-slaves.patch + bonding-3ad-fix-mux-port-state-on-oper-down.patch + ext4-fix-kernel-bug-in-ext4_write_inline_data_end.patch + ext4-validate-donor-file-superblock-early-in-ext4_io.patch + selftests-bpf-fix-bpf_iter-task_vma-test.patch + cxl-test-verify-cmd-size_in-before-accessing-payload.patch + cxl-test-fix-integer-overflow-in-mock-lsa-bounds-che.patch + cxl-test-zero-out-lsa-backing-memory-to-avoid-leakin.patch + of-cpu-add-check-in-__of_find_n_match_cpu_property.patch + vfio-qat-fix-f_pos-race-in-qat_vf_resume_write.patch + bpf-tighten-cgroup-storage-cookie-checks-for-prog-ar.patch + m68k-mcf5441x-fix-clocks-numbering.patch + pinctrl-sunxi-a523-remove-unneeded-irq-remuxing-flag.patch + pinctrl-airoha-an7581-add-missed-gpio32-pin-group.patch + pinctrl-airoha-an7583-add-missed-gpio32-pin-group.patch + pinctrl-airoha-an7581-fix-misprint-in-gpio19-pinconf.patch + pinctrl-airoha-an7583-fix-misprint-in-gpio19-pinconf.patch + pinctrl-airoha-an7581-fix-incorrect-led-mapping-in-p.patch + pinctrl-airoha-an7583-fix-incorrect-led-mapping-in-p.patch + pinctrl-airoha-fix-pwm-pin-function-for-an7581-and-a.patch + pinctrl-airoha-an7583-fix-gpio21-pin-group.patch + pinctrl-airoha-an7583-add-missed-gpio22-pin-group.patch + pinctrl-airoha-an7583-fix-phy1_led1-pin-function.patch + pinctrl-airoha-an7583-remove-undefined-groups-from-p.patch + arm64-dts-allwinner-a523-add-missing-gpio-interrupt.patch + asoc-cs35l56-fix-possible-uninitialized-value-in-cs3.patch + s390-process-fix-kernel-thread-function-pointer-type.patch + bluetooth-hci_qca-fix-null-pointer-dereference-in-qc.patch + bluetooth-hci_qca-fix-null-pointer-dereference-in-qc.patch-1996 + bluetooth-eir-fix-stack-oob-write-when-prepending-th.patch + bluetooth-hci_event-fix-simultaneous-discovery-stuck.patch + bluetooth-hci_core-fix-uaf-in-hci_unregister_dev.patch + bluetooth-btmtk-fix-urb-leak-in-alloc_mtk_intr_urb-e.patch + bluetooth-btintel_pcie-load-iosf-debug-regs-by-contr.patch + bluetooth-hci-validate-codec-capability-element-leng.patch + bluetooth-vhci-validate-devcoredump-state-before-sid.patch + rdma-mlx5-fix-mkey-creation-error-flow-rollback.patch + rdma-mlx5-fix-tph-extraction-in-frmr-pool-key.patch + rdma-core-fix-skipped-usage-for-driver-built-frmr-ke.patch + rdma-core-fix-frmr-aging-push-to-queue-error-flow.patch + rdma-core-fix-frmr-set-pinned-push-error-path.patch + rdma-core-avoid-null-dereference-on-frmr-bad-usage.patch + rdma-core-fix-frmr-handle-leak-on-push-failure.patch + rdma-core-add-ib_frmr_pool_drop-for-unrecoverable-ha.patch + rdma-mlx5-drop-frmr-pool-handle-on-umr-revoke-failur.patch + fs-efs-remove-unneeded-debug-prints.patch + rdma-mlx5-remove-dct-restrack-tracking.patch + rdma-mlx5-remove-raw-rss-qp-restrack-tracking.patch + rdma-mlx5-fix-undefined-shift-of-user-rq-wqe-size.patch + rdma-mlx5-release-the-hw-provided-uar-index-rather-t.patch + asoc-cs35l56-fix-wrong-error-test-on-simple_write_to.patch + asoc-sof-intel-select-snd_soc_sdw_utils-y-from-snd_s.patch + asoc-sof-intel-hda-sdw-bpt-select-snd_sof_sof_hda_sd.patch + asoc-codecs-hdac_hdmi-validate-written-enum-value.patch + asoc-meson-aiu-validate-written-enum-values.patch + asoc-fsl-fsl_audmix-validate-written-enum-values.patch + asoc-tegra-tegra210_ahub-validate-written-enum-value.patch + asoc-topology-check-pcm-and-dai-name-strings-before-.patch + net-dsa-qca8k-fix-led-devicename-when-using-external.patch + net-sched-cls_flow-dont-expose-folded-kernel-pointer.patch + ipv4-fib-don-t-dump-dying-fib_info-in-fib_leaf_notif.patch + net-fib_rules-don-t-dump-dying-fib_rule-in-fib_rules.patch + bridge-cfm-reject-invalid-ccm-interval-at-configurat.patch + sctp-validate-embedded-address-parameter-length.patch + net-pfcp-allocate-per-cpu-tstats-for-pfcp-netdevs.patch + net-stop-leased-rxq-before-uninstalling-its-memory-p.patch + net-sched-sch_hfsc-don-t-make-class-passive-twice.patch + tipc-require-net-admin-for-tipcv2-netlink-mutators.patch + tipc-prevent-snt_unacked-underflow-on-conn_ack.patch + tipc-reject-inverted-service-ranges-from-peer-bindin.patch + cxl-test-unregister-cxl_acpi-in-cxl_test_init-error-.patch + cxl-test-add-check-after-kzalloc-memory-in-alloc_moc.patch + crypto-marvell-octeontx-fix-dma-cleanup-using-wrong-.patch + crypto-cavium-cpt-fix-dma-cleanup-using-wrong-loop-i.patch + crypto-rng-free-default-rng-on-module-exit.patch + alsa-usb-audio-qcom-guard-sideband-endpoint-removal.patch + alsa-seq-fix-kernel-heap-address-leak-in-bounce_erro.patch + iommu-dma-iommu-fix-wrong-scatterlist-length-assignm.patch + iommufd-clarify-ioas_map_file-dma-buf-support.patch + spi-xilinx-use-fifo-occupancy-register-to-determine-.patch + iommu-avoid-copying-the-user-array-twice-in-the-full.patch + asoc-sdw_utils-fix-missing-component_name-for-cs42l4.patch + cxl-region-fix-out-of-bounds-access-in-cxl_cancel_au.patch + cxl-region-fill-first-free-targets-slot-during-auto-.patch + vfio-selftests-ensure-libvfio-output-dirs-are-always.patch + asoc-adau1372-clear-pll_en-on-failed-pll-lock-withou.patch + cxl-region-block-region-delete-during-region-creatio.patch + cxl-region-resolve-region-deletion-races.patch + cxl-memdev-pin-parents-for-entire-memdev-lifetime.patch + power-supply-core-fix-supplied_from-allocations.patch + handshake-require-admin-permission-for-done-command.patch + bnxt-fix-head-underflow-on-xdp-head-grow.patch + tcp-clear-sock_ops-cb-flags-before-force-closing-a-c.patch + virtio_net-do-not-allow-tunnel-csum-offload-for-non-.patch + net-sched-sch_fq_codel-do-not-call-qdisc_tree_reduce.patch + net-sched-sch_codel-do-not-call-qdisc_tree_reduce_ba.patch + net-sched-sch_dualpi2-do-not-call-qdisc_tree_reduce_.patch + net-mana-initialize-gdma-queue-id-to-invalid_queue_i.patch + net-mana-guard-tx-wq-object-destroy-with-invalid_man.patch + net-watchdog-fix-refcount-tracking-races.patch + net-ethernet-mtk_wed-fix-loading-wo-firmware-for-mt7.patch + net-sched-sch_dualpi2-add-missing-module-alias.patch + bpf-run-generic-devmap-egress-prog-on-private-skb.patch + net-mlx5-check-max_macs-devlink-param-value-against-.patch + bpf-fix-setting-retval-to-eperm-for-cgroup-hooks-not.patch + octeontx2-af-npc-fix-size-of-entry2cntr_map.patch + net-airoha-fix-error-handling-in-airoha_ppe_flush_sr.patch + net-ethernet-mtk_wed-debugfs-correct-index-in-wed_am.patch + net-wwan-t7xx-check-skb_clone-in-control-tx.patch + dpll-fix-stale-iteration-in-dpll_pin_on_pin_unregist.patch + dpll-send-delete-notification-before-unregister-in-o.patch + dpll-emit-per-dpll-delete-notifications-in-dpll_pin_.patch + dpll-guard-sync-pair-removal-on-full-pin-unregister.patch + dpll-balance-create-delete-notifications-in-__dpll_p.patch + landlock-fix-unmarked-concurrent-access-to-socket-fa.patch + net-bcmgenet-use-weighted-round-robin-tx-dma-arbitra.patch + octeontx2-af-fix-npc-mailbox-codes-in-mbox.h.patch + net-airoha-fix-register-index-for-tx-fwd-counter-con.patch + net-airoha-fix-debugfs-new-tuple-display-for-ipv4-ro.patch + kcm-use-write_once-when-changing-lower-socket-callba.patch + alsa-seq-oss-serialize-readq-reset-state-with-q-lock.patch + alsa-seq-avoid-stale-fifo-cells-during-resize.patch + netfilter-nf_conncount-callers-must-hold-rcu-read-lo.patch + netfilter-nf_dup_netdev-add-nf_dev_xmit_recursion-he.patch + geneve-fix-off-by-one-comparing-with-gro_legacy_max_.patch + alsa-core-fix-unintuitive-behavior-of-snd_power_ref_.patch + smb-client-fix-conflicting-option-validation-for-new.patch + cifs-remove-all-cifs-files-before-kill-super.patch + smb-client-always-return-a-value-for-fs_ioc_getflags.patch + btrfs-drop-wq_percpu-from-ordered_flags-in-btrfs_ini.patch + bpf-guard-__get_user-acesss-with-access_ok-for-uprob.patch + selftests-bpf-fix-typo-in-verify_umulti_link_info.patch + selftests-bpf-initialize-operation-name-before-use.patch + bpf-fix-bpf_get-setsockopt-to-tos-for-ipv4-mapped-ip.patch + udf-fix-nls-leak-on-udf_fill_super-failure.patch + bpf-sockmap-reject-overflowing-copy-len-in-bpf_msg_p.patch + sockmap-fix-use-after-free-in-udp_bpf_recvmsg.patch + bpf-sockmap-fix-integer-overflow-in-bpf_msg_pop_data.patch + mips-mm-fix-out-of-bounds-write-in-maar_res_walk.patch + powerpc-perf-fix-preempt-count-underflow-in-fsl_emb_.patch + powerpc-powernv-fix-preempt-count-leak-in-pnv_kexec_.patch + powerpc-kexec-fix-double-get_cpu-imbalance-in-kexec_.patch + keys-use-acquire-when-reading-state-in-keyring-searc.patch + dt-bindings-vendor-prefixes-add-gira.patch + tipc-fix-uaf-in-tipc_l2_send_msg.patch + tcp-ipv6-clamp-default-adverting-mss-to-avoid-gso_by.patch + net-airoha-fix-always-true-condition-in-ppe1-queue-r.patch + net-ti-icssg-prueth-fix-af_xdp-fill-ring-alloc-and-w.patch + net-ti-icssg-use-undirected-tx-tag-for-native-xdp-in.patch + net-ti-icssg-use-undirected-tx-tag-for-xdp-zero-copy.patch + net-ethernet-oa_tc6-interrupt-is-active-low-level-tr.patch + net-ethernet-oa_tc6-mdiobus-parent-initialized-with-.patch + net-ethernet-oa_tc6-remove-fcs-size-in-rx-frame.patch + dt-bindings-net-updated-interrupt-type-to-be-active-.patch + ionic-fix-check-in-ionic_get_link_ext_stats.patch + rdma-bnxt_re-initialize-dpi-variable-to-zero.patch + rdma-bnxt_re-free-srq-toggle-page-after-firmware-tea.patch + rdma-bnxt_re-free-cq-toggle-page-after-firmware-tear.patch + rdma-bnxt_re-avoid-displaying-the-kernel-pointer.patch + rdma-bnxt_re-refactor-bnxt_re_init_user_qp.patch + rdma-bnxt_re-update-msn-table-size-for-app-allocated.patch + rdma-bnxt_re-enhance-dbr-usecnt-logic-in-doorbell-ua.patch + rdma-bnxt_re-support-doorbells-for-app-allocated-qps.patch + rdma-bnxt_re-enable-app-allocated-qps.patch + rdma-bnxt_re-add-a-max-slot-check-for-sq.patch + rdma-bnxt_re-proper-rollback-if-the-ioremap-fails.patch + rdma-bnxt_re-avoid-repeated-requests-to-allocate-wc-.patch + rdma-bnxt_re-fail-dbr-related-page-allocation-uapis-.patch + rdma-bnxt_re-reject-get_toggle_mem-when-toggle-page-.patch + rdma-hns-fix-memory-leak-of-bonding-resources.patch + rdma-irdma-replace-waitqueue-and-flag-with-completio.patch + net-serialize-netif_running-check-in-enqueue_to_back.patch + ksmbd-fix-use-after-free-in-same_client_has_lease.patch + mfd-bd72720-drop-buck11-id.patch + mfd-rsmu-fix-page-register-setup.patch + mfd-cs42l43-sanity-check-firmware-size.patch + ocfs2-fix-circular-locking-dependency-in-ocfs2_dio_e.patch + 9p-avoid-returning-err_ptr-0-from-mkdir-operations.patch + net-9p-fix-race-condition-on-rdma-state-in-trans_rdm.patch + 9p-add-missing-read-barrier-in-virtio-zero-copy-path.patch + eventpoll-expand-top-of-file-overview-locking-doc.patch + eventpoll-rename-epi-next-and-txlist-for-clarity.patch + eventpoll-fix-epoll_wait-report-false-negative.patch + gpiolib-acpi-only-trigger-activeboth-interrupts-on-b.patch + i3c-master-svc-fix-missed-ibi-after-false-slvstart-o.patch + staging-rtl8723bs-fix-stainfo-check-in-rtw_aes_decry.patch + staging-nvec-fix-use-after-free-in-nvec_rx_completed.patch + perf-dwarf-aux-fix-libdw-segmentation-fault-in-cu_wa.patch + perf-dwarf-aux-fix-libdw-api-contract-violations.patch + perf-libdw-fix-libdw-api-contract-violations-and-mem.patch + perf-probe-finder-fix-libdw-api-contract-violations.patch + perf-annotate-data-fix-libdw-api-contract-violations.patch + perf-debuginfo-fix-libdw-api-contract-violations.patch + perf-callchain-handle-multiple-address-spaces.patch + coresight-cti-fix-dt-filter-signals-silently-ignored.patch + soundwire-don-t-program-sdw_scp_busclock_scale-on-a-.patch + soundwire-fix-bug-in-sdw_add_element_group_count-fou.patch + coresight-tmc-fix-overflow-when-calculating-is-bigge.patch + coresight-ete-always-save-state-on-power-down.patch + coresight-etm4x-correct-trcvmidcctlr1-save-and-resto.patch + pci-aspm-don-t-reconfigure-aspm-entering-low-power-s.patch + pci-introduce-named-defines-for-pci-rom.patch + pci-check-rom-header-and-data-structure-addr-before-.patch + x86-platform-olpc-xo15-drop-wakeup-source-on-driver-.patch + platform-x86-xo15-ebook-fix-wakeup-source-and-gpe-ha.patch + perf-sched-add-missing-mmap2-handler-in-timehist.patch + perf-tool-fix-missing-schedstat-delegates-and-dont_s.patch + pci-intel-gw-move-interrupt-enable-to-own-function.patch + pci-intel-gw-enable-clock-before-phy-init.patch + pci-intel-gw-add-.start_link-callback.patch + pci-loongson-do-not-ignore-downstream-devices-on-ext.patch + rust-alloc-fix-assert-in-vec-reserve-doc-test.patch + bus-mhi-ep-fix-potential-deadlock-in-mhi_ep_reset_wo.patch + bus-mhi-ep-add-missing-state_lock-protection-for-mhi.patch + coresight-fix-missing-error-code-when-trace-id-is-in.patch + clk-qcom-cmnpll-account-for-reference-clock-divider.patch + dt-bindings-clock-qcom-sm6125-dispcc-reference-qcom-.patch + pci-dwc-apply-ecrc-workaround-for-designware-cores-p.patch + pci-qcom-set-max-opp-before-dbi-access-during-resume.patch + phy-phy-can-transceiver-check-driver-match-and-drive.patch + perf-pmu-events-amd-switch-l2_itlb_misses-to-bp_l1_t.patch + perf-unwind-refactor-get_entries-to-allow-dynamic-li.patch + perf-pmu-skip-test-on-arm64-when-slots-is-zero.patch + clk-at91-sam9x7-fix-gmac_gclk-clock-definition.patch + iio-light-acpi-als-check-acpi_companion-against-null.patch + soundwire-intel_ace2x-release-bpt_stream-when-close-.patch + coresight-fix-source-not-disabled-on-idr_alloc_u32-f.patch + coresight-handle-helper-enable-failure-properly.patch + pci-mediatek-gen3-do-full-device-power-down-on-remov.patch + mailbox-mpfs-fix-check-for-syscon-presence-in-mpfs_m.patch + mailbox-mtk-adsp-fix-uaf-during-device-teardown.patch + mailbox-don-t-free-the-channel-if-the-startup-callba.patch + pci-pwrctrl-lock-device-when-calling-device_is_bound.patch + coresight-platform-defer-connection-counter-incremen.patch + pci-dwc-fix-signedness-bug-in-fault-injection-test-c.patch + pci-mediatek-gen3-fix-incorrectly-skipped-pwrctrl-er.patch + platform-x86-classmate-laptop-address-memory-leaks-o.patch + clk-microchip-mpfs-ccc-fix-peripheral-driver-registr.patch + perf-build-id-fix-off-by-one-bug-when-printing-kerne.patch + perf-event-fix-size-of-synthesized-sample-with-branc.patch + perf-inject-fix-itrace-branch-stack-synthesis.patch + staging-most-video-avoid-double-free-on-video-regist.patch + usb-host-max3421-fix-shift-out-of-bounds-in-max3421_.patch + usb-host-max3421-reject-hub-port-requests-for-non-ex.patch + perf-test-amd-ibs-fix-incorrect-kernel-version-check.patch + gpib-fix-inappropriate-ioctl-error-return.patch + char-tlclk-fix-use-after-free-in-tlclk_cleanup.patch + hpet-check-acpi_companion-against-null-at-probe-time.patch + sonypi-check-acpi_companion-against-null-at-probe-ti.patch + gpib-fix-double-decrement-of-descriptor_busy-in-comm.patch + gpib-cb7210-fix-region-leak-when-request_irq-fails.patch + clk-renesas-rzg2l-rename-iterator-in-for_each_mod_cl.patch + docs-threat-model-add-missing-closing-parenthesis.patch + thunderbolt-test-add-kunit-regression-tests-for-xdom.patch + thunderbolt-add-kunit-test-for-tb_property_merge_dir.patch + thunderbolt-test-add-kunit-tests-for-property-parser.patch + powerpc-tools-perf-initialize-error-code-in-auxtrace.patch + pci-qcom-disable-aspm-l0s-for-sa8775p.patch + timers-migration-update-stale-online-doc-to-availabl.patch + perf-header-sanity-check-header_event_desc-attr.size.patch + perf-header-validate-bitmap-size-before-allocating-i.patch + iio-light-si1133-reset-counter-to-prevent-race-condi.patch + iio-light-si1133-prevent-race-condition-on-timeout.patch + iio-magnetometer-ak8975-fix-potential-kernel-stack-m.patch + iio-adc-xilinx-ams-fix-out-of-bounds-channel-lookup-.patch + iio-accel-mma8452-handle-i2c-read-error-s-in-mma8452.patch + iio-tcs3472-power-down-chip-on-probe-failure.patch + clk-at91-keep-securam-node-alive-while-mapping-it.patch + hid-logitech-hidpp-remove-excess-kernel-doc-member-i.patch + docs-changes.rst-restore-pahole-1.26-minimum-regress.patch + clk-spacemit-k3-switch-to-pll2_d6-as-parent-for-pcie.patch + clk-spacemit-k3-fix-pcie-clock-register-offset.patch + fs-ntfs3-add-bounds-check-to-run_get_highest_vcn.patch + fs-ntfs3-fix-wrong-lcn-in-run_remove_range-when-spli.patch + fs-ntfs3-call-_ntfs_bad_inode-when-failing-to-rename.patch + ntfs3-allocate-iomap-inline_data-using-alloc_page.patch + ntfs3-avoid-another-wmaybe-uninitialized-warning.patch + fs-ntfs3-fix-mount-failure-on-64k-page-size-kernels.patch + drm-amd-display-add-missing-kdoc-for-allm-parameters.patch + thunderbolt-debugfs-fix-margining-error-counter-buff.patch + dmaengine-imx-sdma-refine-spba-bus-searching-in-prob.patch + dt-bindings-dma-nvidia-tegra186-gpc-dma-make-reset-o.patch + perf-fix-off-by-one-stack-buffer-overflow-in-kallsym.patch + perf-annotate-fix-crashes-on-empty-annotate-windows.patch + perf-tools-guard-test_bit-from-out-of-bounds-sample-.patch + perf-sched-fix-thread-reference-leak-in-latency_swit.patch + perf-sched-replace-bug_on-on-invalid-cpu-with-gracef.patch + perf-sched-fix-null-dereference-in-latency_runtime_e.patch + perf-sched-fix-comp_cpus-heap-overflow-with-cross-ma.patch + perf-tools-guard-remaining-test_bit-calls-from-oob-s.patch + perf-tools-add-bounds-check-to-cpu__get_node.patch + perf-sched-fix-thread-reference-leaks-in-timehist_ge.patch + perf-sched-cap-max_cpu-at-max_cpus-in-timehist-sampl.patch + perf-sched-fix-register_pid-overflow-strcpy-and-bug_.patch + perf-mmap-guard-cpu__get_node-return-in-aio_bind.patch + perf-stat-bounds-check-cpu-index-in-topology-aggrega.patch + perf-c2c-bounds-check-cpu-and-node-ids-before-bitmap.patch + perf-c2c-bounds-check-cpu-ids-in-setup_nodes-topolog.patch + perf-sched-clean-up-idle_threads-entry-on-init-failu.patch + perf-sched-use-is_idle_sample-for-idle-thread-runtim.patch + perf-sched-fix-thread-reference-leak-in-idle-hist-pr.patch + perf-sched-use-thread__put-in-free_idle_threads.patch + perf-sched-replace-bug_on-and-add-null-checks-in-rep.patch + perf-mmap-fix-null-deref-in-aio-cleanup-on-alloc-fai.patch + perf-stat-introduce-perf_env__get_cpu_topology-to-gu.patch + perf-c2c-fix-use-after-free-in-he__get_c2c_hists-err.patch + perf-timechart-fix-cpu2y-oob-read-on-untrusted-cpu-i.patch + perf-tools-fix-int16_t-truncation-of-max_cpu_num-in-.patch + perf-sched-free-callchain-nodes-in-idle-thread-clean.patch + dt-bindings-clock-qcom-add-x1p42100-camera-clock-con.patch + clk-qcom-camcc-x1e80100-add-support-for-camera-qdss-.patch + docs-memfd_preservation-fix-rendering-of-abi-documen.patch + mshv-add-bounds-check-on-vp_index-in-mshv_intercept_.patch + dmaengine-qcom-gpi-set-dma_private-capability.patch + dmaengine-fix-possible-use-after-free.patch + dmaengine-dma-axi-dmac-properly-free-struct-axi_dmac.patch + dmaengine-dma-axi-dmac-use-dma-pool-to-manange-dma-d.patch + clk-qcom-a53-corrected-frequency-multiplier-for-1152.patch + sunrpc-fix-error-handling-in-rpc_sysfs_xprt_switch_a.patch + pnfs-filelayout-fix-cheking-if-a-layout-is-striped.patch + xprtrdma-use-sendctx-dma-state-for-send-signaling.patch + xprtrdma-decouple-req-recycling-from-rpc-completion.patch + nfsv4-pnfs-defer-return_range-callbacks-until-after-.patch + nfs-keep-pg_uptodate-clear-after-read-errors-in-page.patch + nfsv4-flexfiles-honor-ff_flags_no_io_thru_mds-on-fat.patch + nfsv4-flexfiles-honor-ff_flags_no_io_thru_mds-in-pg_.patch + nfs-use-nfsi-rwsem-to-protect-traversal-of-the-file-.patch + pci-mediatek-fix-operator-precedence-in-pcie_fts_num.patch + pwm-rzg2l-gpt-add-missing-newlines-to-dev_err_probe-.patch + pci-meson-propagate-devm_add_action_or_reset-failure.patch + pci-meson-add-missing-remove-callback.patch + lockd-correct-kernel-doc-status-descriptions-for-nlm.patch + virtio-add-missing-kernel-doc-for-map-and-vmap-membe.patch + fs-ntfs3-prevent-potential-lcn-remains-uninitialized.patch + fs-ntfs3-resize-log-one_page_buf-when-adopting-on-di.patch + platform-x86-intel-vsec-restore-bar-fallback-for-hea.patch + perf-tools-fix-get_max_num-size_t-underflow-on-empty.patch + perf-tools-use-scnprintf-in-cpu_map__snprint-to-prev.patch + perf-tools-use-perf_env__get_cpu_topology-in-machine.patch + perf-tools-null-bitmap-pointers-after-bitmap_free.patch + pci-rcar-host-remove-unused-list_head-res.patch + perf-sched-bounds-check-prio-before-test_bit-in-time.patch + perf-sched-fix-idle-hist-callchain-display-using-wro.patch + perf-tools-add-o_cloexec-to-open-calls-in-dso-and-el.patch + perf-bpf-use-scnprintf-in-snprintf_hex-and-synthesiz.patch + perf-hists-fix-snprintf-in-hists__scnprintf_title-ui.patch + perf-tools-use-scnprintf-in-build_id__snprintf-and-h.patch + xprtrdma-fix-ep-kref-imbalance-on-addr_change.patch + xprtrdma-initialize-re_id-before-removal-registratio.patch + xprtrdma-check-frwr_wp_create-during-connect.patch + xprtrdma-document-and-assert-reply-handler-invariant.patch + xprtrdma-resize-reply-buffers-before-reposting-recei.patch + xprtrdma-fix-bcall-rep-leak-and-unbounded-peek.patch + xprtrdma-sanitize-the-reply-credit-grant-after-parsi.patch + xprtrdma-repost-receive-buffers-for-malformed-replie.patch + xprtrdma-return-sendctx-slot-after-send-preparation-.patch + perf-s390-fix-textrel-in-python-extension-by-compili.patch + perf-data-convert-json-fix-addr_location-leak-on-tim.patch + perf-cs-etm-queue-context-packets-for-frontend.patch + perf-pmu-fix-pmu_id-heap-underwrite-on-empty-identif.patch + perf-pmu-fix-perf_pmu__parse_scale-unit-oob-access-o.patch + tools-lib-api-fix-missing-null-termination-in-filena.patch + perf-symbols-fix-signed-overflow-in-sysfs__read_buil.patch + perf-symbols-bounds-check-.gnu_debuglink-section-dat.patch + perf-tools-use-mkostemp-for-o_cloexec-on-temporary-f.patch + perf-intel-pt-fix-snprintf-size-tracking-bug-in-insn.patch + perf-tools-fix-thread__set_comm_from_proc-on-empty-c.patch + perf-hwmon-fix-off-by-one-null-termination-on-sysfs-.patch + perf-hwmon-use-scnprintf-in-hwmon_pmu__for_each_even.patch + perf-hwmon-fix-parse_hwmon_filename-strlcpy-buffer-o.patch + perf-symbols-bounds-check-descsz-in-sysfs__read_buil.patch + perf-tools-fix-uninitialized-pathname-on-uncompresse.patch + perf-hwmon-guard-label-read-against-empty-or-failed-.patch + perf-tools-use-snprintf-in-dso__read_running_kernel_.patch + tools-lib-api-fix-filename__write_int-writing-uninit.patch + tools-lib-api-fix-mount_overload-snprintf-truncation.patch + perf-bpf-add-null-check-for-btf__type_by_id-in-synth.patch + perf-bpf-fix-map-data-leak-in-bpf_metadata_create-on.patch + perf-bpf-fix-metadata-leak-in-perf_env__add_bpf_info.patch + perf-symbols-add-bounds-checks-to-elf_read_build_id-.patch + perf-symbols-add-bounds-checks-to-read_build_id-note.patch + dt-bindings-dma-snps-dw-axi-dmac-add-fallback-compat.patch + dt-bindings-phy-sc8280xp-qmp-pcie-disallow-bifurcati.patch + pci-mediatek-use-actual-physical-address-instead-of-.patch + phy-freescale-phy-fsl-imx8qm-lvds-phy-use-synchronou.patch + phy-freescale-phy-fsl-imx8qm-lvds-phy-fix-missing-pm.patch + pci-dwc-avoid-dwc_pcie_rasdes_debugfs_deinit-null-de.patch + xfrm-fix-dev-use-after-free-in-xfrm-async-resumption.patch + sparc-avoid-wunused-but-set-parameter-in-clear_user_.patch + documentation-abi-sysfs-class-reboot-mode-reboot_mod.patch + revert-pci-msi-unmap-msi-x-region-on-error.patch + apparmor-fix-shadowing-of-plabel-that-prevents-cache.patch + apparmor-fix-race-in-unix-socket-mediation-when-peer.patch + apparmor-fix-refcount-leak-when-updating-the-sk_ctx.patch + security-apparmor-apparmorfs.c-conditionally-compile.patch + apparmor-check-label-build-before-no_new_privs-test.patch + apparmor-aa_label_alloc-use-aa_label_free-on-alloc-f.patch + apparmor-fix-rawdata_f_data-implicit-flex-array.patch + apparmor-grab-ns-lock-and-refresh-when-looking-up-ch.patch + apparmor-fix-potential-uaf-in-aa_replace_profiles.patch + apparmor-fix-null-pointer-dereference-in-unpack_pdb.patch + apparmor-remove-or-add-symlinks-to-rawdata-according.patch + apparmor-fix-return-in-ns_mkdir_op.patch + apparmor-fail-policy-unpack-on-accept2-allocation-fa.patch + apparmor-release-exe-file-resources-on-path-failure.patch + apparmor-remove-unnecessary-goto-and-associated-labe.patch + apparmor-aa_getprocattr-free-procattr-leak-on-format.patch + apparmor-put-secmark-label-after-secid-lookup.patch + apparmor-don-t-audit-files-pointing-to-aa_null.dentr.patch + apparmor-fix-uninitialised-pointer-passed-to-audit_l.patch + apparmor-fix-inverted-comparison-in-cache_hold_inc.patch + i3c-mipi-i3c-hci-fix-suspend-behavior-when-bus-disab.patch + i3c-mipi-i3c-hci-preserve-run-bit-when-aborting-dma-.patch + i3c-master-make-hot-join-workqueue-freezable-to-bloc.patch + i3c-master-serialize-i3c_set_hotjoin-with-the-mainte.patch + i3c-master-consolidate-hot-join-daa-work-in-the-core.patch + i3c-master-ensure-hot-join-operations-are-stopped-on.patch + i3c-master-defer-new-device-registration-out-of-daa-.patch + i3c-mipi-i3c-hci-fix-race-in-i3c_hci_addr_to_dev.patch + i3c-master-prevent-reuse-of-dynamic-address-on-devic.patch + apparmor-fix-label-can-not-be-immediately-before-a-d.patch + accel-ivpu-fix-hws-command-queue-leak-on-registratio.patch + sparc-led-avoid-trimming-a-newline-from-empty-writes.patch + perf-maps-add-maps__mutate_mapping.patch + perf-symbols-fix-bswap-copy-paste-error-for-32-bit-e.patch + perf-symbols-validate-p_filesz-before-use-in-filenam.patch + perf-symbols-break-infinite-loop-on-zero-filled-note.patch + perf-dso-fix-heap-overflow-in-dso__get_filename-on-d.patch + perf-dso-set-error-code-when-open-fails-on-uncompres.patch + perf-tools-use-snprintf-for-root_dir-path-constructi.patch + perf-hwmon-fix-fd-check-to-accept-fd-0-in-hwmon_pmu_.patch + perf-sched-replace-void-1-sentinel-with-proper-runti.patch + perf-bpf-validate-func_info_rec_size-and-sub_id-in-s.patch + perf-bpf-reject-oversized-bpf-metadata-events-that-t.patch + perf-bpf-bounds-check-array-offsets-in-bpil_offs_to_.patch + perf-c2c-free-format-list-entries-when-releasing-c2c.patch + perf-cs-etm-reject-cpu-ids-that-would-overflow-signe.patch + gpio-mlxbf3-fail-probe-if-gpiochip-registration-fail.patch + regcache-do-not-overwrite-error-code-when-finalizing.patch + drm-i915-clear-crtc-color-blob-pointers-after-droppi.patch + drm-xe-fix-wa_oob-codegen-recipe-for-external-module.patch + spi-dw-fix-wrong-baudr-setting-after-resume.patch + i3c-master-update-dev_nack_retry_count-under-mainten.patch + i3c-master-add-missing-runtime-pm-get-in-dev_nack_re.patch + erofs-call-erofs_exit_ishare-before-rcu_barrier.patch + alsa-usb-audio-qcom-free-sideband-sg_table-objects.patch + xfrm-fix-xfrm-state-cache-insertion-race.patch + xfrm-annotate-data-races-around-xfrm_policy_count-an.patch + xfrm-validate-selector-family-and-prefixlen-during-m.patch + perf-machine-use-snprintf-for-guestmount-path-constr.patch + perf-cs-etm-validate-num_cpu-before-metadata-allocat.patch + perf-cs-etm-require-full-global-header-in-auxtrace_i.patch + perf-cs-etm-bounds-check-cpu-in-cs_etm__get_queue.patch + perf-c2c-free-format-list-entries-when-c2c_hists__in.patch + perf-c2c-fix-hist-entry-and-format-list-leaks-in-c2c.patch + perf-bpf-validate-array-presence-before-casting-bpf-.patch + perf-dso-set-standard-errno-on-decompression-failure.patch + asoc-tlv320aic3x-restrict-clkdiv-bypass-q-values-in-.patch + drm-amdkfd-avoid-double-unpin-of-doorbell-mmio-bos-o.patch + drm-amdgpu-initialize-iter.start-in-amdgpu_devcoredu.patch + drm-amd-display-skip-phy-ssc-reduction-on-some-8k-pa.patch + drm-amd-display-fix-mem_type-change-detection-for-as.patch + drm-amdkfd-fix-list_del-corruption-in-kfd_criu_resum.patch + drm-amdgpu-initialize-irq.lock-spinlock-earlier.patch + net-ethernet-mtk_eth_soc-fix-supported_interface-set.patch + selftests-ftrace-fix-trace_marker_raw-test-on-64k-pa.patch + octeontx2-pf-fix-leak-of-sq-timestamp-buffer-on-tear.patch + octeontx2-af-npc-log-successful-mcam-drop-on-non-hit.patch + net-psample-fix-info-leak-in-psample_attr_data.patch + sctp-hold-socket-lock-when-dumping-endpoints-in-sctp.patch + alsa-usb-audio-qcom-reject-stream-disable-with-no-ac.patch + alsa-usb-audio-qcom-clear-opened-when-stream-enable-.patch + pci-iproc-restore-.map_irq-for-the-platform-bus-driv.patch + spi-rpc-if-use-correct-device-for-hardware-reinitial.patch + virtio-net-fix-len-check-in-receive_big.patch + dpaa2-switch-fix-vlan-upper-check-not-rejecting-brid.patch + devlink-fix-parent-ref-leak-in-devl_rate_node_create.patch + devlink-fix-parent-ref-leak-on-tc-bw-failure.patch + net-airoha-fix-foe_check_time-allocation-size.patch + net-macb-add-tx-stall-timeout-callback-to-recover-fr.patch + flow_dissector-check-device-type-before-reading-eth_.patch + netconsole-don-t-drop-the-last-byte-of-a-full-sized-.patch + selftests-vlan_bridge_binding-fix-flaky-operational-.patch + eth-fbnic-take-netif_addr_lock_bh-around-rx-mode-add.patch + alsa-usb-audio-kill-midi-2.0-urbs-before-freeing-end.patch + netfilter-flowtable-fix-and-simplify-ip6ip6-tunnel-h.patch + arm64-static_call-include-asm-insns.h.patch + arm64-hw_breakpoint-reject-unaligned-watchpoints-tha.patch + thermal-intel-fix-dangling-resources-on-thermal_thro.patch + acpi-resource-amend-kernel-doc-style.patch + acpi-ipmi-fix-inverted-interface-check-in-ipmi_bmc_g.patch + ieee802154-restore-initial-state-on-failed-device_re.patch + ieee802154-avoid-calling-warn_on-on-enomem-in-cfg802.patch + ieee802154-remove-warn_on-in-cfg802154_pernet_exit.patch + ieee802154-fix-kernel-infoleak-in-dgram_recvmsg.patch + mac802154-prevent-overwrite-return-code-in-mac802154.patch + md-raid1-fix-writes_pending-and-barrier-reference-le.patch + md-raid10-fix-writes_pending-leak-on-write-request-f.patch + md-raid10-fix-writes_pending-and-barrier-reference-l.patch + md-raid1-honor-req_nowait-when-waiting-for-behind-wr.patch + md-raid1-free-r1_bio-when-req_nowait-is-set-and-read.patch + netfilter-ipset-don-t-use-test_bit-in-lockless-rcu-r.patch + netfilter-ipset-don-t-use-test_bit-in-lockless-rcu-r.patch-4078 + netfilter-ipset-fix-order-of-kfree_rcu-and-rcu_assig.patch + netfilter-ipset-make-sure-gc-is-properly-stopped.patch + netfilter-nft_payload-reject-offsets-exceeding-65535.patch + netfilter-nft_meta_bridge-add-validate-callback-for-.patch + netfilter-nft_flow_offload-zero-device-address-for-n.patch + netfilter-nf_reject-skip-iphdr-options-when-looking-.patch + netfilter-nft_meta_bridge-fix-nft_meta_bri_iifpvid-s.patch + tpm_crb-check-acpi_companion-against-null-during-pro.patch + mailbox-imx-forward-the-timeout-error-in-imx_mu_gene.patch + irqchip-crossbar-fix-parent-domain-resource-leak.patch + alloc_tag-fix-use-after-free-in-proc-allocinfo-after.patch + selftests-mm-restore-default-nr_hugepages-value-via-.patch + selftests-mm-fix-hugetlb-pathname-construction-in-ch.patch + selftests-mm-restore-default-nr_hugepages-value-via-.patch-15597 + selftests-mm-fix-hugetlb-pathname-construction-in-hu.patch + selftests-mm-fix-cgroup-task-placement-and-drop-memo.patch + selftests-mm-size-tmpfs-according-to-pmd-page-size-i.patch + selftests-mm-free-dynamically-allocated-pmd-sized-bu.patch + selftest-mm-register-existing-mapping-with-userfault.patch + selftests-mm-ensure-destination-is-hugetlb-backed-in.patch + selftests-mm-skip-uffd-stress-test-when-nr_pages_per.patch + selftests-mm-run_vmtests.sh-free-memory-if-available.patch + selftests-mm-move-hwpoison-setup-into-run_test-and-s.patch + selftests-mm-clarify-alternate-unmapping-in-compacti.patch + selftests-mm-allow-pud-level-entries-in-compound-tes.patch + selftests-mm-remove-hardcoded-thp-sizing-assumptions.patch + selftests-mm-fix-exclusive_cow-test-fork-handling.patch + net-marvell-prestera-initialize-err-in-prestera_port.patch + tipc-fix-use-after-free-of-the-discoverer-in-tipc_di.patch + net-dst_metadata-fix-false-positive-memcpy-overflow-.patch + net-ethernet-mtk_ppe-fix-rhashtable-leak-in-mtk_ppe_.patch + octeontx2-af-npc-cn20k-fix-npc-defrag.patch + octeontx2-af-mcs-fix-unsupported-secy-stats-read.patch + octeontx2-pf-clear-stats-of-all-resources-when-freei.patch + octeontx2-pf-mcs-fix-mcs-resources-free-on-pf-shutdo.patch + net-emac-fix-null-pointer-dereference-in-emac_probe.patch + net-sched-act_ct-fix-nf_connlabels-leak-on-two-error.patch + net-airoha-fix-skb-priority-underflow-in-airoha_dev_.patch + ipv6-ndisc-fix-null-deref-in-accept_untracked_na.patch + ipv6-ioam-fix-type-confusion-of-dst_entry.patch + dpaa2-switch-do-not-accept-vlan-uppers-while-bridged.patch + rtc-abx80x-fix-the-rtc_vl_clr-clearing-all-status-fl.patch + rtc-ds1307-handle-oscillator-stop-flag-for-ds1337-ds.patch + bpf-fix-stack-slot-index-in-nospec-checks.patch + bpf-fix-partial-copy-of-non-linear-test_run-output.patch + bpftool-fix-vmlinux-btf-leak-in-cgroup-commands.patch + bpf-zero-initialize-the-fib-lookup-flow-struct.patch + bpf-fix-bpf_prog_assoc_struct_ops-last-field-check.patch + bpf-fix-effective-prog-array-index-with-bpf_f_preord.patch + power-sequencing-fix-abba-deadlock-in-pwrseq_device_.patch + gpiolib-initialize-return-value-in-gpiochip_set_mult.patch + drm-edid-fix-oob-read-in-drm_parse_tiled_block.patch + erofs-handle-48-bit-blocks_hi-for-compressed-inodes.patch + asoc-cs530x-fix-expected-mclk-rates-for-cs5302-4-8.patch + pci-endpoint-pci-epf-vntb-add-check-to-detect-db_cou.patch + pci-endpoint-pci-epf-ntb-add-check-to-detect-db_coun.patch + pci-endpoint-pci-epf-vntb-document-legacy-msi-doorbe.patch + pci-endpoint-pci-epf-vntb-defer-pci_epc_raise_irq-ou.patch + pci-endpoint-pci-epf-vntb-report-0-based-doorbell-ve.patch + bpf-preserve-pointer-spill-metadata-during-half-slot.patch + ice-fix-fdir-ctrl-vsi-resource-leak-in-ice_reset_all.patch + ice-fix-aq-error-code-comparison-in-ice_set_pausepar.patch + ice-call-netif_keep_dst-once-when-entering-switchdev.patch + rtc-isl1208-balance-enable_irq_wake-with-disable_irq.patch + ice-dpll-set-pointers-to-null-after-kfree-in-ice_dpl.patch + ice-dpll-fix-memory-leak-in-ice_dpll_init_info-error.patch + i40e-fix-i40e_debug-to-use-struct-i40e_hw-argument.patch + e1000e-reconfigure-pll-clock-gate-timeout-and-re-ena.patch + rtc-msc313-fix-null-deref-in-shared-irq-handler-at-p.patch + bpf-guard-conntrack-opts-error-writes.patch + selftests-bpf-cover-small-conntrack-opts-error-write.patch + ksmbd-fix-use-after-free-of-conn-preauth_info-in-con.patch + ipv6-fix-null-ptr-deref-in-fib6_nh_mtu_change.patch + eth-bnxt-improve-the-timing-of-stats.patch + ipv4-fib-don-t-ignore-error-route-in-local-main-tabl.patch + md-raid5-use-stripe-state-snapshot-in-break_stripe_b.patch + md-raid5-avoid-r5_overlap-races-while-breaking-strip.patch + bpf-disable-xfrm_decode_session-hook-attachment.patch + netfilter-nf_nat-avoid-invalid-nat_net-pointer-use-o.patch + netfilter-nf_conncount-prevent-connlimit-drops-for-e.patch + netfilter-flowtable-validate-iph-ihl-in-nf_flow_ip4_.patch + netfilter-nft_synproxy-stop-bypassing-the-priv-info-.patch + netfilter-nft_compat-ebtables-emulation-must-reject-.patch + gpio-davinci-fix-irq-domain-leak-on-devm_kzalloc-fai.patch + netfilter-nf_conntrack_helper-dynamically-allocate-s.patch + netfilter-nf_conntrack_pptp-move-gre-specific-cleanu.patch + netfilter-conntrack-check-null-when-retrieving-ct-ex.patch + netfilter-nf_conntrack_expect-use-conntrack-gc-to-re.patch + netfilter-nf_conntrack_expect-store-master_tuple-in-.patch + netfilter-nf_conntrack_expect-run-expectation-evicti.patch + netfilter-nft_ct-expectation-timeouts-are-passed-in-.patch + netfilter-nf_conntrack_helper-cap-maximum-number-of-.patch + cpuidle-allow-exit-latency-to-exceed-target-residenc.patch + asoc-sdca-validate-written-enum-value-in-ge_put_enum.patch + asoc-rt5575-use-__le32-for-spi-burst-write-address.patch + pci-endpoint-pci-epf-vntb-exclude-reserved-slots-fro.patch + ntb-epf-make-db_valid_mask-cover-only-real-doorbell-.patch + ntb-epf-report-0-based-doorbell-vector-via-ntb_db_ev.patch + ntb-epf-fix-doorbell-bitmask-and-irq-vector-handling.patch + alpha-pci-add-security_locked_down-check-to-pci_mmap.patch + alpha-pci-fix-__pci_mmap_fits-overflow-for-zero-leng.patch + docs-driver-api-uio-howto-document-mmap_prepare-call.patch + net-bpf-check-master-for-null-in-xdp_master_redirect.patch + net-do-not-acquire-dev-tx_global_lock-in-netdev_watc.patch + net-dsa-sja1105-round-up-ptp-perout-pin-duration.patch + net-ti-icssg-fix-xsk-zero-copy-tx-during-application.patch + veth-fix-napi-leak-in-xdp-enable-error-path.patch + net-usb-lan78xx-restore-vlan-and-hash-filters-after-.patch + net-lwtunnel-drop-skb-metadata-before-lwt-encapsulat.patch + net-sched-cls_api-handle-tc_act_consumed-in-tcf_qeve.patch + sctp-fix-err_chunk-memory-leaks-in-init-handling.patch + ipv6-fix-error-handling-in-disable_ipv6-sysctl.patch + ipv6-fix-error-handling-in-ignore_routes_with_linkdo.patch + ipv6-fix-error-handling-in-forwarding-sysctl.patch + ipv6-fix-error-handling-in-disable_policy-sysctl.patch + ipv6-fix-state-corruption-during-proxy_ndp-sysctl-re.patch + ipv6-fix-missing-notification-for-ignore_routes_with.patch + eth-fbnic-fix-ordering-of-heartbeat-vs-ownership.patch + s390-mm-fix-handling-of-_page_unused-pte-bit.patch + thermal-testing-zone-flush-work-items-during-cleanup.patch + acpica-unbreak-tools-build-after-switching-over-to-s.patch + acpi-processor_idle-mark-lpi-enter-functions-as-__cp.patch + smb-client-preserve-errors-from-smb2_set_sparse.patch + rtc-ds1307-fix-off-by-one-issue-with-wday-for-rx8130.patch + rtc-cmos-unregister-hpet-irq-handler-on-probe-failur.patch + net-dsa-realtek-fix-memory-leak-in-rtl8366rb_setup_l.patch + net-dsa-mxl862xx-avoid-unaligned-16-bit-access-in-ap.patch + net-dsa-mxl862xx-fix-use-after-free-of-dsa-ports-in-.patch + net-mana-fall-back-to-standard-mtu-when-pf-reports-a.patch + net-phy-realtek-clear-mdio_an_10gbt_ctrl_adv10g-bit.patch + octeontx2-af-validate-nix-maximum-lfs-correctly.patch + octeontx2-af-fix-cgx-debugfs-rvu-af-pci-reference-le.patch + net-mvneta-re-enable-percpu-interrupt-on-resume.patch + geneve-gate-gro-hint-in-geneve_gro_complete-on-gs-gr.patch + geneve-validate-inner-network-offset-in-geneve_gro_c.patch + tools-ynl-build-archives-with-ar.patch + net-sungem-fix-probe-error-cleanup.patch + net-ethernet-sunplus-spl2sw-fix-phy_node-refcount-le.patch + net-stmmac-dwmac-spacemit-fix-wrong-phy-interface-de.patch + net-stmmac-dwmac-spacemit-fix-wrong-irq-definition.patch + loongarch-move-struct-kimage-forward-declaration-bef.patch + loongarch-bpf-fix-outdated-tail-call-comments.patch + loongarch-bpf-fix-off-by-one-error-in-tail-call.patch + asoc-fsl_asrc_dma-fix-edma-maxburst-misalignment-wit.patch + net-udp_tunnel-prevent-double-queueing-in-udp_tunnel.patch + dt-bindings-net-renesas-ether-drop-example-ethernet-.patch + net-enetc-fix-potential-divide-by-zero-when-num_vsi-.patch + udp_tunnel-pass-struct-sock-to-udp_tunnel_sock_relea.patch + udp_tunnel-pass-struct-sock-to-setup_udp_tunnel_sock.patch + tipc-store-struct-sock-in-struct-udp_bearer.patch + tipc-fix-uaf-in-cleanup_bearer-due-to-premature-dst_.patch + tipc-avoid-busy-looping-in-tipc_exit_net.patch + selftests-tls-size-splice_short-pipe-by-page-size.patch + net-hns3-unify-copper-port-ksettings-configuration-p.patch + net-hns3-refactor-mac-autoneg-and-speed-configuratio.patch + net-hns3-fix-permanent-link-down-deadlock-after-rese.patch + net-hns3-differentiate-autoneg-default-values-betwee.patch + alsa-fcp-fix-null-pointer-dereference-in-interface-l.patch + tracing-probes-fix-typo-in-a-log-message.patch + spi-sh-msiof-abort-transfers-when-reset-times-out.patch + acpi-rimt-only-defer-the-iommu-configuration-in-init.patch + riscv-fix-32-bit-call_on_irq_stack-frame-pointer-abi.patch + bpf-mask-pseudo-pointer-values-in-verifier-logs.patch + bpf-fix-insn_aux_data-leak-on-verifier-err_free_env-.patch + gpio-mvebu-fail-probe-if-gpiochip-registration-fails.patch + gpio-htc-egpio-use-managed-gpiochip-registration.patch + net-pse-pd-scope-pse_control-regulator-handle-to-kre.patch + seg6-validate-srh-length-before-reading-fixed-fields.patch + qede-fix-out-of-bounds-check-for-cqe-len_list.patch + net-enetc-check-the-number-of-bds-needed-for-xdp_fra.patch + sctp-fix-sctp_reset_streams-stream-list-length-limit.patch + sctp-add-init-verification-after-cookie-unpacking.patch + mips-dec-ensure-rtc-platform-device-deregistration-u.patch + mips-mm-add-check-for-highmem-before-removing-memory.patch + asoc-codecs-lpass-va-macro-fix-lpass-codec-version-f.patch + hwmon-pmbus-core-honor-vrm_version-in-pmbus_data2reg.patch + accel-amdxdna-fix-iommu-domain-lifetime-race-during-.patch + hwmon-adm1275-prevent-reading-uninitialized-stack.patch + hwmon-pmbus-fix-passing-events-to-regulator-core.patch + hwmon-aspeed-g6-pwm-tach-guard-fan-rpm-calculation-a.patch + eth-fbnic-don-t-cache-shinfo-across-skb-realloc.patch + ipv6-fib6-fix-null-deref-in-fib6_walk_continue-on-mu.patch + usbnet-gl620a-fix-out-of-bounds-read-in-genelink_rx_.patch + net-phy-sfp-free-mii_bus-in-sfp_i2c_mdiobus_destroy.patch + net-libwx-fix-vmdq-mask-for-1-queue-mode.patch + net-gianfar-dispose-irq-mappings-on-probe-failure-an.patch + net-sched-sch_teql-introduce-slaves_lock-to-avoid-ra.patch + bridge-stp-fix-a-potential-use-after-free-when-delet.patch + gpio-shared-proxy-always-serialize-with-a-sleeping-m.patch + drm-panthor-always-use-the-irq-safe-variant-when-acq.patch + drm-panthor-keep-the-reset-work-disabled-until-every.patch + drm-panthor-fix-potential-invalid-pointer-deref-in-g.patch + drm-panthor-pass-an-iomem-pointer-to-gpu-register-ac.patch + drm-panthor-split-register-definitions-by-components.patch + drm-panthor-store-irq-register-base-iomem-pointer-in.patch + drm-panthor-fix-theoretical-iomem-access-in-suspende.patch + drm-panthor-don-t-overrule-pending-immediate-ticks-i.patch + drm-panthor-fix-panthor_pwr_unplug.patch + drm-panthor-fix-a-leak-when-a-group-is-evicted-befor.patch + drm-panthor-interrupt-group-start-resumption-if-grou.patch + tracing-eprobes-allow-use-of-btf-names-to-dereferenc.patch + tracing-probes-remove-warn_on_once-from-parse_btf_ar.patch + tracing-events-fix-to-check-the-simple_tsk_fn-creati.patch + tracing-eprobe-read-the-complete-filter_ptr_string-p.patch + tracing-fprobe-fix-null-pointer-dereference-in-fprob.patch + tracing-probes-make-the-prefix-mandatory-for-comm-ac.patch + irqchip-gic-v3-its-fix-of-node-reference-leak.patch + irqchip-ts4800-fix-missing-chained-handler-cleanup-o.patch + spi-rzv2h-rspi-fix-dma-transfer-error-handling-for-s.patch + sctp-fix-addr_wq_timer-race-in-sctp_free_addr_wq.patch + virtio_net-disable-cb-when-napi-is-busy-polled.patch + cxgb4-fix-decode-strings-dump-for-t6-adapters.patch + selftests-drv-net-tso-don-t-touch-dangerous-feature-.patch + net-sched-act_bpf-use-rcu_dereference_bh-to-read-the.patch + ksmbd-reject-undersized-dacls-before-parsing-aces.patch + ksmbd-fix-use-after-free-of-fp-owner.name-in-durable.patch + gpio-timberdale-return-enomem-on-dynamic-memory-allo.patch + pinctrl-meson-restore-non-sleeping-gpio-access.patch + xen-pvcalls-bound-backend-response-req_id-before-ind.patch + net-sched-dualpi2-clear-stale-classification-on-filt.patch + net-sched-hhf-clear-heavy-hitter-state-on-reset.patch + fs-refuse-o_tmpfile-creation-with-an-unmapped-fsuid-.patch + afs-fix-error-code-in-afs_extract_vl_addrs.patch + afs-fix-double-netfs-initialisation-in-afs_root_iget.patch + afs-remove-setting-of-as_release_always-for-symlinks.patch + afs-fix-directory-inode-initialisation-order.patch + afs-use-kvfree-to-free-memory-allocated-by-kvcalloc.patch + afs-remove-erroneous-seq-1-in-volume-lookup-loop.patch + afs-fix-bulk-lookup-malfunction-due-to-change-in-dir.patch + afs-fix-misplaced-inc-of-net-cells_outstanding.patch + afs-fix-reinitialisation-of-the-inode-in-particular-.patch + afs-fix-callback-service-message-parsers-to-pass-thr.patch + afs-fix-missing-null-pointer-check-in-afs_break_some.patch + afs-use-scoped_seqlock_read-rather-than-manually-doi.patch + afs-fix-leak-of-ungot-volume.patch + afs-fix-vllist-leak.patch + afs-fix-lack-of-locking-around-modifications-of-net-.patch + afs-fix-premature-cell-exposure-through-afs.patch + afs-fix-the-volume-afs_volume_rm_tree-is-set-on.patch + afs-fix-unchecked-length-string-display-in-debug-sta.patch + iomap-release-pages-on-atomic-dio-size-mismatch.patch + minix-avoid-overflow-in-bitmap-block-count-calculati.patch + cachefiles-fix-double-unlock-in-nomem_d_alloc-error-.patch + ovl-fix-comment-about-locking-order.patch + iomap-guard-io_size-eof-trim-against-concurrent-trun.patch + netfs-fix-netfs_create_write_req-to-handle-async-cac.patch + cachefiles-fix-file-burial-to-take-lock-when-unsetti.patch + netfs-fix-writethrough-to-use-collection-offload.patch + netfs-fix-writeback-error-handling.patch + netfs-fix-folio-state-after-enomem-whilst-under-writ.patch + drm-xe-pt-fix-null-pointer-dereference-in-xe_pt_zap_.patch + drm-imagination-fix-returned-size-for-drm_ioctl_pvr_.patch + drm-xe-userptr-hold-notifier_lock-for-write-on-injec.patch + drm-xe-userptr-drop-bogus-static-from-finish-in-forc.patch + drm-xe-hw_engine-fix-double-free-of-managed-bo-in-er.patch + drm-xe-pf-don-t-attempt-to-process-fast_req-or-event.patch + drm-xe-fix-npd-in-bo_meminfo.patch + drm-xe-pt-prevent-invalid-cursor-access-for-purged-b.patch + x86-uprobes-keep-shadow-stack-in-sync-for-emulated-c.patch + uprobes-x86-use-proper-mm_struct-in-__in_uprobe_tram.patch + cifs-fix-missing-credit-release-on-failure-in-cifs_i.patch + ata-sata_gemini-unwind-clocks-on-ide-pinctrl-errors.patch + ata-libata-scsi-limit-simulated-scsi-command-copy-to.patch + netfs-fix-barriering-when-walking-subrequest-list.patch + ntfs-avoid-stale-runlist-element-dereference-in-mft-.patch + hid-picolcd-prevent-null-pointer-dereference-in-pico.patch + hid-core-fix-oob-read-in-hid_get_report-for-numbered.patch + arm64-avoid-eager-dvmsync-reclaim-batches-with-c1-pr.patch + arm64-mm-optimize-tlb-flush-in-unmap_hotplug_-pmd-pu.patch + iio-dac-mcp47feb02-fix-passing-uninitialized-vref1_u.patch + ntfs-avoid-stale-runlist-element-dereference-in-fall.patch + hid-bpf-fix-hid_bpf_get_data-range-check.patch + selftests-hid-load-only-requested-struct_ops-maps.patch + selftests-hid-cover-hid_bpf_get_data-size-overflow.patch + arm64-sysreg-fix-bwe-field-encoding-in-id_aa64dfr2_e.patch + net-usb-net1080-validate-packet_len-before-pad-byte-.patch + gue-validate-remcsum-private-option-length.patch + netfilter-xt_u32-reject-invalid-shift-counts.patch + netfilter-xt_rateest-fix-u64-truncation-in-xt_ratees.patch + netfilter-ip6tables-mark-malformed-ipv6-extension-he.patch + netfilter-nft_set_rbtree-get-command-skips-end-eleme.patch + netfilter-xt_connmark-reject-invalid-shift-parameter.patch + platform-x86-bitland-mifs-wmi-fix-null-pointer-deref.patch + net-mlx5-lag-refactor-representor-reload-handling.patch + net-mlx5-e-switch-add-representor-lifecycle-lock.patch + net-mlx5-lag-avoid-lag-and-representor-lock-cycles.patch + net-mlx5-lag-factor-out-shared-fdb-code-into-dedicat.patch + net-mlx5-lag-replace-peer-count-check-with-direct-pe.patch + net-mlx5-lag-prepare-for-sd-device-integration.patch + net-mlx5-lag-extend-shared-fdb-api-with-group_id-fil.patch + net-mlx5-lag-fix-off-by-one-in-single-fdb-error-roll.patch + net-mlx5-lag-mpesw-fix-missing-complete-on-devcom-er.patch + net-mlx5e-tc-skip-peer-flow-cleanup-when-lag-seq-is-.patch + drm-bridge-analogix_dp-fix-pe-vs-value-shift-mismatc.patch + net-mlx5e-fix-hv-vhca-stats-zero-sized-buffer-alloca.patch + net-mlx5e-fix-hv-vhca-stats-agent-registration-race.patch + net-mlx5e-fix-publication-race-for-priv-channel_stat.patch + net-microchip-vcap-fix-races-on-the-shared-super-vca.patch + qede-fix-off-by-one-in-bd-ring-consumption-on-build_.patch + net-qualcomm-rmnet-validate-map-frame-length-before-.patch + net-sched-act_pedit-fix-toctou-heap-oob-write-in-tc-.patch + net-smc-fix-uaf-in-smc_cdc_rx_handler-by-pinning-the.patch + amt-fix-size-calculation-in-amt_get_size.patch + ksmbd-fix-multichannel-binding-and-enforce-channel-l.patch + smb-client-preserve-leading-slash-for-posix-absolute.patch + gpio-shared-make-the-voting-mechanism-adaptable.patch + drm-i915-ltphy-fix-ssc-enablement-bit-in-port_clock_.patch + bluetooth-6lowpan-avoid-untracked-enable-work.patch + bluetooth-6lowpan-hold-l2cap-conn-across-debugfs-con.patch + bluetooth-mgmt-fix-adv-monitor-add-failure-cleanup.patch + bluetooth-sco-fix-a-race-condition-in-sco_sock_timeo.patch + bluetooth-btintel_pcie-support-product-level-reset.patch + bluetooth-btintel_pcie-add-support-for-smart-trigger.patch + bluetooth-btintel_pcie-separate-coredump-work-from-r.patch + bluetooth-btintel_pcie-refactor-flr-to-use-device_re.patch + bluetooth-iso-fix-malformed-iso_end-cont-handling.patch + bluetooth-iso-exclude-rfu-bits-from-iso_sdu_length.patch + bluetooth-bpa10x-avoid-oob-read-of-revision-string-i.patch + bluetooth-l2cap-fix-tx-ident-leak-for-commands-witho.patch + ring-buffer-fix-event-length-with-forced-8-byte-alig.patch + accel-amdxdna-prevent-pm-resume-deadlock-in-hwctx_sy.patch + accel-amdxdna-use-unsigned-long-for-nr_pages-in-amdx.patch + accel-amdxdna-fix-vma-access-race.patch + net-tls-consume-empty-data-records-in-tls_sw_read_so.patch + net-rnpgbe-fix-mailbox-endianness-and-remove-pointer.patch + net-liquidio-drop-cached-vf-pci_dev-lut.patch + net-usb-lan78xx-disable-vlan-filter-in-promiscuous-m.patch + gpio-dwapb-defer-clock-gating-until-noirq.patch + drm-guard-drm_client_cap_plane_color_pipeline.patch + tracing-make-tracepoint_printk-static-as-not-exporte.patch + accel-amdxdna-fix-potential-amdxdna_umap-lifetime-ra.patch + drm-v3d-reject-invalid-indirect-bo-handle-in-indirec.patch + selftests-gpio-add-gpio-cdev-uaf-to-.gitignore.patch + net-mdio-select-regmap_mmio-instead-of-depending-on-.patch + net-sched-cake-reject-overhead-values-that-underflow.patch + octeontx2-pf-check-dmac-extraction-support-before-fi.patch + perf-x86-amd-core-avoid-enabling-brs-from-the-svm-re.patch + gpio-mvebu-free-generic-chips-on-unbind.patch + ipv4-igmp-fix-potential-uaf-in-igmp_gq_start_timer.patch + ipv6-mcast-fix-potential-uaf-in-mld-delayed-work.patch + ipv4-igmp-annotate-data-races-around-im-users.patch + ipv4-igmp-annotate-data-races-around-timer-related-f.patch + ipv4-igmp-fix-potential-memory-leaks-in-igmp_mod_tim.patch + netfilter-nft_lookup-fix-catchall-element-handling-w.patch + ipvs-pass-parsed-transport-offset-to-state-handlers.patch + ipvs-use-parsed-transport-offset-in-tcp-state-lookup.patch + ipvs-fix-pmtu-for-gue-gre-tunnel-icmp-errors.patch + ipvs-ensure-inner-headers-in-icmp-errors-are-in-head.patch + s390-zcrypt-remove-the-empty-file.patch + cifs-validate-dfs-referral-string-offsets.patch + sunrpc-release-lower-rpc_clnt-if-killed-waiting-for-.patch + sunrpc-pin-upper-rpc_clnt-across-the-tls-connect_wor.patch + dm-era-fix-null-pointer-dereference-in-metadata_open.patch + smb-client-fix-busy-dentry-warning-on-unmount-after-.patch + regulator-core-regulator_lock_two-should-test-for-ed.patch + drm-fb-helper-only-consider-active-crtcs-for-vblank-.patch + selftests-net-fix-evp_md_ctx-leak-in-tcp_mmap.patch + net-mlx5-fix-l3-tunnel-entropy-refcount-leak.patch + ethtool-rss-fix-hfunc-and-input_xfrm-parsing-on-big-.patch + octeontx2-af-fix-vf-bringup-affecting-pf-promiscuous.patch + drm-xe-remove-duplicate-kunit-test-bug.h-include.patch + drm-xe-free-madvise-vma-array-on-l2-flush-failure.patch + smb-client-fix-overflow-in-passthrough-ioctl-bounds-.patch + drm-imagination-make-pvr_fw_trace_init_mask_ops-stat.patch + tracing-remotes-fix-leak-in-trace_remote_alloc_buffe.patch + tracing-remotes-fix-struct_len-in-trace_remote_alloc.patch + ring-buffer-allow-sparse-cpu-masks-in-ring_buffer_de.patch