Fixes for all trees

Signed-off-by: Sasha Levin <sashal@kernel.org>

7.1-stable patches

added patches:
ima-fix-out-of-bounds-read-in-xattr_verify.patch

6.18-stable patches

added patches:
ima-fix-out-of-bounds-read-in-xattr_verify.patch

6.12-stable patches

added patches:
ima-fix-out-of-bounds-read-in-xattr_verify.patch

6.6-stable patches

added patches:
ima-fix-out-of-bounds-read-in-xattr_verify.patch

6.1-stable patches

added patches:
ima-fix-out-of-bounds-read-in-xattr_verify.patch

5.15-stable patches

added patches:
ima-fix-out-of-bounds-read-in-xattr_verify.patch

7.1-stable patches

added patches:
input-evdev-fix-information-leak-in-evdev_pass_values.patch
mm-fix-incorrect-flush-address-in-direct-page-table-reclaim.patch
mm-vmalloc-acquire-init_mm-lock-on-huge-vmap-to-avoid-ptdump-uaf.patch

6.18-stable patches

added patches:
input-evdev-fix-information-leak-in-evdev_pass_values.patch
mm-vmalloc-acquire-init_mm-lock-on-huge-vmap-to-avoid-ptdump-uaf.patch

6.12-stable patches

added patches:
input-evdev-fix-information-leak-in-evdev_pass_values.patch

6.6-stable patches

added patches:
input-evdev-fix-information-leak-in-evdev_pass_values.patch

6.1-stable patches

added patches:
input-evdev-fix-information-leak-in-evdev_pass_values.patch

5.15-stable patches

added patches:
input-evdev-fix-information-leak-in-evdev_pass_values.patch

5.10-stable patches

added patches:
input-evdev-fix-information-leak-in-evdev_pass_values.patch

7.1-stable patches

added patches:
alsa-usb-audio-fix-oob-write-on-type-ii-inbound-urbs.patch
input-evdev-sanitize-event-type-index-when-fetching-event-masks.patch
net-tap-set-skb-dev-before-parsing-virtio-net-header-in-tap_get_user_xdp.patch
net-usb-ax88179_178a-fix-skb-leak-in-ax88179_tx_fixup.patch
net-usb-ipheth-fix-carrier_work-uaf-on-disconnect.patch
thunderbolt-icm-preserve-usb4-proxy-data-valid-bit.patch
usb-atm-cxacru-properly-kill-rcv_urb-on-error-in-cxacru_cm.patch
usb-cdnsp-fix-incorrect-endian-conversions-for-apb-timeout-register.patch
usb-core-add-quirk-for-255-bytes-initial-config-read.patch
usb-gadget-f_ncm-use-unsigned-int-for-ndp_index.patch
usb-misc-usbio-check-ibuf_len-against-rxbuf_len-in-bulk-msg.patch
usb-quirks-add-shanwan-gamepad-to-quirk-list.patch
usb-xhci-use-bit_ull-for-crcr-bits-to-fix-incorrect-64bit-mask.patch
usbnet-cap-max_mtu-for-drivers-without-bind-callback.patch
vt-add-permission-check-for-kdskbmeta-ioctl.patch
vt-stabilize-tty-reference-in-kbd_keycode-with-tty_port_tty_get.patch

6.18-stable patches

added patches:
alsa-usb-audio-fix-oob-write-on-type-ii-inbound-urbs.patch
input-evdev-sanitize-event-type-index-when-fetching-event-masks.patch
net-tap-set-skb-dev-before-parsing-virtio-net-header-in-tap_get_user_xdp.patch
net-usb-ax88179_178a-fix-skb-leak-in-ax88179_tx_fixup.patch
net-usb-ipheth-fix-carrier_work-uaf-on-disconnect.patch
thunderbolt-icm-preserve-usb4-proxy-data-valid-bit.patch
usb-atm-cxacru-properly-kill-rcv_urb-on-error-in-cxacru_cm.patch
usb-cdnsp-fix-incorrect-endian-conversions-for-apb-timeout-register.patch
usb-core-add-quirk-for-255-bytes-initial-config-read.patch
usb-gadget-f_ncm-use-unsigned-int-for-ndp_index.patch
usb-misc-usbio-check-ibuf_len-against-rxbuf_len-in-bulk-msg.patch
usb-quirks-add-shanwan-gamepad-to-quirk-list.patch
vt-add-permission-check-for-kdskbmeta-ioctl.patch
vt-stabilize-tty-reference-in-kbd_keycode-with-tty_port_tty_get.patch

6.12-stable patches

added patches:
alsa-usb-audio-fix-oob-write-on-type-ii-inbound-urbs.patch
input-evdev-sanitize-event-type-index-when-fetching-event-masks.patch
net-usb-ax88179_178a-fix-skb-leak-in-ax88179_tx_fixup.patch
net-usb-ipheth-fix-carrier_work-uaf-on-disconnect.patch
thunderbolt-icm-preserve-usb4-proxy-data-valid-bit.patch
usb-atm-cxacru-properly-kill-rcv_urb-on-error-in-cxacru_cm.patch
usb-cdnsp-fix-incorrect-endian-conversions-for-apb-timeout-register.patch
usb-gadget-f_ncm-use-unsigned-int-for-ndp_index.patch
vt-add-permission-check-for-kdskbmeta-ioctl.patch
vt-stabilize-tty-reference-in-kbd_keycode-with-tty_port_tty_get.patch

6.6-stable patches

added patches:
alsa-usb-audio-fix-oob-write-on-type-ii-inbound-urbs.patch
input-evdev-sanitize-event-type-index-when-fetching-event-masks.patch
net-usb-ax88179_178a-fix-skb-leak-in-ax88179_tx_fixup.patch
net-usb-ipheth-fix-carrier_work-uaf-on-disconnect.patch
thunderbolt-icm-preserve-usb4-proxy-data-valid-bit.patch
usb-atm-cxacru-properly-kill-rcv_urb-on-error-in-cxacru_cm.patch
usb-cdnsp-fix-incorrect-endian-conversions-for-apb-timeout-register.patch
usb-gadget-f_ncm-use-unsigned-int-for-ndp_index.patch
vt-add-permission-check-for-kdskbmeta-ioctl.patch
vt-stabilize-tty-reference-in-kbd_keycode-with-tty_port_tty_get.patch

6.1-stable patches

added patches:
alsa-usb-audio-fix-oob-write-on-type-ii-inbound-urbs.patch
input-evdev-sanitize-event-type-index-when-fetching-event-masks.patch
net-usb-ax88179_178a-fix-skb-leak-in-ax88179_tx_fixup.patch
net-usb-ipheth-fix-carrier_work-uaf-on-disconnect.patch
thunderbolt-icm-preserve-usb4-proxy-data-valid-bit.patch
usb-atm-cxacru-properly-kill-rcv_urb-on-error-in-cxacru_cm.patch
usb-cdnsp-fix-incorrect-endian-conversions-for-apb-timeout-register.patch
usb-gadget-f_ncm-use-unsigned-int-for-ndp_index.patch
vt-add-permission-check-for-kdskbmeta-ioctl.patch
vt-stabilize-tty-reference-in-kbd_keycode-with-tty_port_tty_get.patch

5.15-stable patches

added patches:
alsa-usb-audio-fix-oob-write-on-type-ii-inbound-urbs.patch
input-evdev-sanitize-event-type-index-when-fetching-event-masks.patch
net-usb-ipheth-fix-carrier_work-uaf-on-disconnect.patch
thunderbolt-icm-preserve-usb4-proxy-data-valid-bit.patch
usb-atm-cxacru-properly-kill-rcv_urb-on-error-in-cxacru_cm.patch
usb-cdnsp-fix-incorrect-endian-conversions-for-apb-timeout-register.patch
usb-gadget-f_ncm-use-unsigned-int-for-ndp_index.patch
vt-add-permission-check-for-kdskbmeta-ioctl.patch
vt-stabilize-tty-reference-in-kbd_keycode-with-tty_port_tty_get.patch

5.10-stable patches

added patches:
alsa-usb-audio-fix-oob-write-on-type-ii-inbound-urbs.patch
input-evdev-sanitize-event-type-index-when-fetching-event-masks.patch
net-usb-ipheth-fix-carrier_work-uaf-on-disconnect.patch
usb-atm-cxacru-properly-kill-rcv_urb-on-error-in-cxacru_cm.patch
usb-gadget-f_ncm-use-unsigned-int-for-ndp_index.patch
vt-add-permission-check-for-kdskbmeta-ioctl.patch
vt-stabilize-tty-reference-in-kbd_keycode-with-tty_port_tty_get.patch

Fixes for all trees

Signed-off-by: Sasha Levin <sashal@kernel.org>

Drop queue-6.6/arm64-dts-qcom-sdm850-lenovo-yoga-c630-lower-psci-cl.patch

Signed-off-by: Sasha Levin <sashal@kernel.org>

drop 3 patches based on RC review feedback

Dropped patches:

- "btrfs: move large data folios out of experimental features"
  Queues: 7.1, 6.18
  Reason: author NAK - feature enablement rather than a fix, and not
    compatible with the COW fixup mechanism still present on these
    branches (b2a9f217ad3f is not an ancestor of either)
  Report: https://lore.kernel.org/stable/b4749071-b0f9-475f-83e6-13153ab20b13@suse.com/

- "btrfs: disable bs > ps support if no transparent hugepage support"  [dependency]
  Queues: 7.1, 6.18
  Reason: its fs/btrfs/Kconfig hunk needs the help-text context produced
    by the dropped patch above

- "btrfs: update the Kconfig string for CONFIG_BTRFS_EXPERIMENTAL"  [dependency]
  Queues: 6.18
  Reason: Stable-dep-of the dropped patch above, orphaned once it goes

Series reorder (no patch content changed):

- queue-6.18/series now applies "sched/fair: Separate se->vlag from
  se->vprot" before "sched/fair: Revert 6d71a9c61604 (...)", matching
  upstream order. With the split applied after the revert, se->vlag and
  se->vprot still aliased through the union at the intermediate commit,
  so reweight_entity() scaled the same storage twice - a bisect hazard
  across three commits in linux-6.18.y. The final tree is unchanged.
  Report: https://lore.kernel.org/stable/CANDhNCq7sFij0uCT75B5aT3voABaK8-=KMbKMNdO1Yi6QWRhng@mail.gmail.com/

Signed-off-by: Sasha Levin <sashal@kernel.org>

Fixes for all trees

Signed-off-by: Sasha Levin <sashal@kernel.org>

Fixes for all trees

Signed-off-by: Sasha Levin <sashal@kernel.org>

Fixes for all trees

Signed-off-by: Sasha Levin <sashal@kernel.org>

merge staging into queue: 7.1 6.18 6.12 6.6 6.1 5.15 5.10

Linux 7.1.8

Linux 6.18.44

Linux 6.12.103

Linux 6.6.151

Fixes for all trees based on RC review feedback

Dropped patches:

- "Bluetooth: hci_sync: remove unnecessary hci_conn_get in create_conn_sync"
  Queues: 6.18, 6.12, 6.6
  Reason: prerequisite 2f5d635ad5906 ("Bluetooth: hci_sync: hold conn in
    hci_connect_acl/le_sync() callbacks") is not present in these trees, so
    removing the worker-side hci_conn_get()/hci_conn_put() leaves the queued
    hci_sync work without a reference. Kept in 7.1, where that series is
    queued ahead of it.
  Report: https://lore.kernel.org/stable/5fcf1911-1284-4791-a678-c54c544aba27@oracle.com/

Fixed in place:

- "pinctrl: microchip-sgpio: add missing select REGMAP_MMIO"
  Queues: 6.18, 6.12, 6.6, 6.1
  Reason: the backported hunk fuzzed onto config PINCTRL_EQUILIBRIUM instead
    of config PINCTRL_MICROCHIP_SGPIO, so the build fix upstream 25cb6e9a1312
    intends had no effect. Re-anchored the hunk at PINCTRL_MICROCHIP_SGPIO
    (@@ -414 / -366 / -326 / -315). 7.1 was already correct and is unchanged.
  Report: https://lore.kernel.org/stable/3dfbd05b-7af9-4fdc-850a-91f93eb397aa@oracle.com/

- "tracing/mmiotrace: Add NULL check for mmio_trace_array in logging functions"
  Queues: 6.12
  Reason: the 6.12 backport was context-adjusted to keep the unused
    struct trace_array_cpu *data argument, so mmio_trace_rw() still
    dereferenced a NULL mmio_trace_array before reaching the new check.
    Per Steven Rostedt, take the upstream prerequisite instead: added
    6936298393d8 ("tracing/mmiotrace: Remove reference to unused per CPU
    data pointer") and replaced the 12b80cdbc54c backport with its pristine
    upstream diff. The resulting kernel/trace/trace_mmiotrace.c is now
    byte-identical to the 6.18 and 7.1 result. 6.18 and 7.1 already contain
    6936298393d8 and need no change.
  Report: https://lore.kernel.org/stable/20260808182247.39dc80fc@robin/

Signed-off-by: Sasha Levin <sashal@kernel.org>

Fixes for all trees

Signed-off-by: Sasha Levin <sashal@kernel.org>

drop ../queue-7.1/i2c-designware-defer-probe-if-child-gpioint-controllers-are-not-bound.patch

queue-6.12: fix duplicate inline in mm/slab backport

The 6.12 backport of d9e6a7623938 ("mm/slab: prevent unbounded recursion
in free path with new kmalloc type") adds a stable-only adjustment that
marks need_kmalloc_no_objext() __always_inline, because
mem_alloc_profiling_permanently_disabled() is __init in 6.12.  The
adjustment was written as:

  static __always_inline inline bool need_kmalloc_no_objext(void)

__always_inline already expands to "inline __attribute__((__always_inline__))"
and inline is itself a macro, so the declaration ends up with two inline
specifiers.  clang rejects that with -Wduplicate-decl-specifier, which is
an error with CONFIG_WERROR:

  In file included from mm/mempool.c:21:
  mm/slab.h:572:24: error: duplicate 'inline' declaration specifier [-Werror,-Wduplicate-decl-specifier]
    572 | static __always_inline inline bool need_kmalloc_no_objext(void)
        |                        ^

Reported by KernelCI as a build regression on stable-rc/linux-6.12.y, and
confirmed by Nathan Chancellor, who pointed out the correct fix: drop the
redundant inline and keep __always_inline.

The 6.18 and 7.1 backports of the same commit use plain "static inline"
and are not affected.

Reported-by: KernelCI bot <bot@kernelci.org>
Reported-by: Nathan Chancellor <nathan@kernel.org>
Link: https://lore.kernel.org/stable/20260807180245.GA4067747@ax162/
Signed-off-by: Sasha Levin <sashal@kernel.org>

Fixes for all trees

Signed-off-by: Sasha Levin <sashal@kernel.org>

Fix up my SOB

Signed-off-by: Sasha Levin <sashal@kernel.org>

6.6-stable patches

added patches:
drm-tegra-fbdev-do-not-assign-to-struct-drm_fb_helper.info.patch
usb-typec-ucsi-correct-teardown-ordering-in-ucsi_init-error-path.patch

6.6-stable patches

added patches:
alsa-hda-codecs-hdmi-disable-keep-alive-before-audio-format-change.patch

6.6-stable patches

added patches:
drm-i915-hdcp-check-streams-bounds-before-overflow.patch

6.6-stable patches

added patches:
drm-i915-fbc-extract-intel_fbc_has_fences.patch
drm-i915-hdcp-migrate-away-from-kdev_to_i915-in-bind-unbind.patch
drm-i915-hdcp-move-to-using-intel_display-in-intel_hdcp.patch
drm-i915-hdcp-require-monotonically-increasing-seq_num_v.patch

6.6-stable patches

added patches:
can-isotp-fix-timer-drain-order-wakeup-handling-and-tx_gen-ordering.patch
can-use-skb-hash-instead-of-private-variable-in-headroom.patch
ceph-fix-refcount-leak-in-ceph_readdir.patch
ceph-print-cluster-fsid-and-client-global_id-in-all-debug-logs.patch
drm-amdgpu-respect-placement-requirements-in-amdgpu_gtt_mgr-functions.patch
drm-fb-helper-allocate-and-release-fb_info-in-single-place.patch
drm-i915-vrr-check-has_vrr-first-in-intel_vrr_is_capable.patch
drm-i915-vrr-require-valid-min-max-vfreq-for-vrr.patch
drm-renesas-move-rz-g2l-mipi-dsi-driver-to-rz-du.patch
drm-renesas-rzg2l_mipi_dsi-increase-reset-deassertion-delay.patch
drm-tegra-fbdev-remove-offset-into-framebuffer-memory.patch
libceph-add-doutc-and-_client-debug-macros-support.patch
media-i2c-imx219-access-height-from-active-format-in-imx219_set_ctrl.patch
media-i2c-imx219-calculate-crop-rectangle-dynamically.patch
media-i2c-imx219-don-t-store-the-current-mode-in-the-imx219-structure.patch
media-i2c-imx219-drop-imx219_vts_-macros.patch
media-i2c-imx219-group-functions-by-purpose.patch
media-i2c-imx219-rename-vts-to-frm_length.patch
media-imx219-fix-maximum-frame-length-in-lines.patch
media-v4l-async-set-owner-for-async-sub-devices.patch
media-v4l2-fwnode-fix-subdev-owner-overwritten-in-v4l2_async_register_subdev_sensor.patch
mptcp-add-mptcp_userspace_pm_lookup_addr-helper.patch
mptcp-pm-avoid-code-duplication-to-lookup-endp.patch
mptcp-pm-use-addr-entry-for-get_local_id.patch
mptcp-pm-userspace-fix-use-after-free-in-get_local_id.patch
netfilter-nf_tables-clone-set-on-flush-only.patch
rxrpc-fix-irq-disabled-in-local_bh_enable.patch
sctp-avoid-auth_enable-sysctl-uaf-during-netns-teardown.patch
sctp-close-udp-tunnel-sockets-during-netns-teardown.patch
sysctl-treewide-constify-ctl_table_header-ctl_table_arg.patch
usb-gadget-f_tcm-synchronize-delayed-set_alt-with-teardown.patch
usb-musb-omap2430-clean-up-probe-error-handling.patch
usb-musb-omap2430-do-not-put-borrowed-of_node-in-probe.patch
usb-typec-ucsi-fix-race-condition-and-ordering-in-port-unregistration.patch
usb-typec-ucsi-only-enable-supported-notifications.patch
usb-typec-ucsi-split-connector-lock-classes.patch
wifi-ath6kl-fix-use-after-free-in-aggr_reset_state.patch
wifi-brcmfmac-drain-bus_reset-work-on-device-removal.patch
wifi-brcmfmac-fix-43752-sdio-fwvid-incorrectly-labelled-as-cypress-cyw.patch
wifi-brcmfmac-set-f2-blocksize-to-256-for-bcm43752.patch

6.18-stable patches

added patches:
drm-fb-helper-fix-a-locking-bug-in-an-error-path.patch
drm-tegra-fbdev-do-not-assign-to-struct-drm_fb_helper.info.patch

6.12-stable patches

added patches:
drm-fb-helper-fix-a-locking-bug-in-an-error-path.patch
drm-tegra-fbdev-do-not-assign-to-struct-drm_fb_helper.info.patch

7.1-stable patches

added patches:
usb-typec-ucsi-correct-teardown-ordering-in-ucsi_init-error-path.patch

6.18-stable patches

added patches:
usb-typec-ucsi-correct-teardown-ordering-in-ucsi_init-error-path.patch

6.12-stable patches

added patches:
usb-typec-ucsi-correct-teardown-ordering-in-ucsi_init-error-path.patch

drop drm patch

6.12-stable patches

added patches:
can-isotp-fix-timer-drain-order-wakeup-handling-and-tx_gen-ordering.patch
can-use-skb-hash-instead-of-private-variable-in-headroom.patch
rxrpc-adjust-the-rxrpc_rtt_rx-tracepoint.patch
rxrpc-fix-irq-disabled-in-local_bh_enable.patch
rxrpc-fix-the-calculation-and-use-of-rto.patch
rxrpc-generate-rtt_min.patch
rxrpc-manage-rtt-per-call-rather-than-per-peer.patch

6.12-stable patches

added patches:
drm-i915-hdcp-check-streams-bounds-before-overflow.patch
drm-i915-hdcp-skip-inactive-mst-connectors-when-building-stream-list.patch
drm-xe-pt-reset-current_op-in-xe_pt_update_ops_init.patch
drm-xe-stub-out-new-pagefault-layer.patch

6.12-stable patches

added patches:
drm-amdgpu-fix-context-pstate-override-handling.patch
drm-amdgpu-gfx-fix-cleaner-shader-ib-buffer-overflow.patch
drm-amdgpu-give-each-kernel-job-a-unique-id.patch
drm-amdgpu-respect-placement-requirements-in-amdgpu_gtt_mgr-functions.patch
drm-exec-remove-the-index-parameter-from-drm_exec_for_each_locked_obj.patch
drm-fb-helper-allocate-and-release-fb_info-in-single-place.patch
drm-i915-hdcp-move-to-using-intel_display-in-intel_hdcp.patch
drm-i915-hdcp-require-monotonically-increasing-seq_num_v.patch
drm-i915-vrr-check-has_vrr-first-in-intel_vrr_is_capable.patch
drm-i915-vrr-require-valid-min-max-vfreq-for-vrr.patch
drm-sched-store-the-drm-client_id-in-drm_sched_fence.patch
drm-tegra-fbdev-remove-offset-into-framebuffer-memory.patch
drm-xe-hold-a-dma-buf-reference-for-imported-bos.patch
drm-xe-rename-___xe_bo_create_locked.patch
drm-xe-wait-on-external-bo-kernel-fences-in-exec-ioctl.patch

6.12-stable patches

added patches:
alsa-hda-codecs-hdmi-disable-keep-alive-before-audio-format-change.patch
kmemleak-iommu-iova-fix-transient-kmemleak-false-positive.patch
media-chips-media-wave5-support-cbp-profile.patch
media-i2c-imx219-rename-vts-to-frm_length.patch
media-imx219-fix-maximum-frame-length-in-lines.patch
media-uapi-rkisp-correct-name-version-enum.patch
mm-kmemleak-fix-checksum-computation-for-per-cpu-objects.patch
mptcp-add-mptcp_userspace_pm_lookup_addr-helper.patch
mptcp-pm-avoid-code-duplication-to-lookup-endp.patch
mptcp-pm-use-addr-entry-for-get_local_id.patch
mptcp-pm-userspace-fix-use-after-free-in-get_local_id.patch
usb-gadget-f_tcm-synchronize-delayed-set_alt-with-teardown.patch
usb-typec-ucsi-fix-race-condition-and-ordering-in-port-unregistration.patch
usb-typec-ucsi-split-connector-lock-classes.patch
wifi-ath6kl-fix-use-after-free-in-aggr_reset_state.patch
wifi-brcmfmac-drain-bus_reset-work-on-device-removal.patch
wifi-brcmfmac-fix-43752-sdio-fwvid-incorrectly-labelled-as-cypress-cyw.patch
wifi-brcmfmac-set-f2-blocksize-to-256-for-bcm43752.patch

6.18-stable patches

added patches:
can-isotp-fix-timer-drain-order-wakeup-handling-and-tx_gen-ordering.patch
can-use-skb-hash-instead-of-private-variable-in-headroom.patch

6.18-stable patches

added patches:
drm-i915-vrr-check-has_vrr-first-in-intel_vrr_is_capable.patch
drm-i915-vrr-require-valid-min-max-vfreq-for-vrr.patch
drm-xe-add-page-reclamation-info-to-device-info.patch
drm-xe-pt-reset-current_op-in-xe_pt_update_ops_init.patch
drm-xe-stub-out-new-pagefault-layer.patch
drm-xe-use-svm-range-helpers-in-pt-layer.patch

6.18-stable patches

added patches:
drm-exec-remove-the-index-parameter-from-drm_exec_for_each_locked_obj.patch
drm-xe-wait-on-external-bo-kernel-fences-in-exec-ioctl.patch

6.18-stable patches

added patches:
drm-xe-add-xe_migrate_resolve-wrapper-and-is_vram_resolve-support.patch
drm-xe-bo-add-purgeable-bo-state-tracking-and-field-madv-to-xe_bo.patch
drm-xe-pat-add-helper-to-query-compression-enable-status.patch
drm-xe-vm-fix-bo-prefetch-with-consult_mem_advise_pref_loc.patch
drm-xe-vm-prevent-binding-of-purged-buffer-objects.patch

Merge branch 'master' of gitolite.kernel.org:/pub/scm/linux/kernel/git/stable/stable-queue

6.18-stable patches

added patches:
drm-amdgpu-fix-context-pstate-override-handling.patch
drm-amdgpu-respect-placement-requirements-in-amdgpu_gtt_mgr-functions.patch
drm-fb-helper-allocate-and-release-fb_info-in-single-place.patch
drm-tegra-fbdev-remove-offset-into-framebuffer-memory.patch
drm-xe-guc-fix-buffer-overflow-in-steered-register-list-allocation.patch

6.18-stable patches

added patches:
media-chips-media-wave5-support-cbp-profile.patch
media-qcom-camss-csid-340-fix-unused-variables.patch
media-qcom-camss-fix-rdi-streaming-for-csid-340.patch
media-uapi-rkisp-correct-name-version-enum.patch
usb-typec-ucsi-fix-race-condition-and-ordering-in-port-unregistration.patch
usb-typec-ucsi-split-connector-lock-classes.patch
userfaultfd-prevent-registration-of-special-vmas.patch
wifi-brcmfmac-drain-bus_reset-work-on-device-removal.patch

Fixes for all trees

Signed-off-by: Sasha Levin <sashal@kernel.org>

7.1-stable patches

added patches:
drm-exec-remove-the-index-parameter-from-drm_exec_for_each_locked_obj.patch
drm-xe-drop-unused-param-from-xe_device_create.patch
drm-xe-move-xe-info.devid-revid-initialization.patch
drm-xe-move-xe-info.force_execlist-initialization.patch
drm-xe-separate-early-xe_device-initialization.patch
drm-xe-set-ttm-device-beneficial_order-to-9-2m.patch
drm-xe-wait-on-external-bo-kernel-fences-in-exec-ioctl.patch
media-chips-media-wave5-support-cbp-profile.patch
usb-typec-ucsi-fix-race-condition-and-ordering-in-port-unregistration.patch
usb-typec-ucsi-split-connector-lock-classes.patch

6.6-stable patches

added patches:
revert-ia64-make-acpi_cpufreq_cpu_exit-return-void.patch

fuzz cleanups

moved the queues back in place

Linux 6.6.150

Linux 6.1.182

Linux 5.15.215

Linux 5.10.264

6.1-stable patches

added patches:
0001-Revert-x86-bugs-Make-Safe-RET-robust-against-interru.patch
series
x86-bugs-make-safe-ret-robust-against-interrupt-injection.patch

5.15-stable patches

added patches:
0001-Revert-x86-bugs-Make-Safe-RET-robust-against-interru.patch
series
x86-bugs-make-safe-ret-robust-against-interrupt-injection.patch

5.10-stable patches

added patches:
0001-Revert-x86-bugs-Make-Safe-RET-robust-against-interru.patch
series
x86-bugs-make-safe-ret-robust-against-interrupt-injection.patch

6.6-stable patches

added patches:
0001-Revert-x86-bugs-Make-Safe-RET-robust-against-interru.patch
series
x86-bugs-make-safe-ret-robust-against-interrupt-injection.patch

Linux 6.12.102

6.12-stable patches

added patches:
series
x86-bugs-make-safe-ret-robust-against-interrupt-injection.patch

move queues out of the way again...

Fixes for all trees

Signed-off-by: Sasha Levin <sashal@kernel.org>

put all queues back

delete 6.12 queue

it was broken

Linux 7.1.7

Linux 6.18.43

Linux 6.6.149

Linux 6.1.181

Linux 5.15.214

Linux 5.10.263

7.1-stable patches

added patches:
series
x86-bugs-make-safe-ret-robust-against-interrupt-injection.patch

6.18-stable patches

added patches:
series
x86-bugs-make-safe-ret-robust-against-interrupt-injection.patch

6.12-stable patches

added patches:
series
x86-bugs-make-safe-ret-robust-against-interrupt-injection.patch

6.6-stable patches

added patches:
series
x86-bugs-make-safe-ret-robust-against-interrupt-injection.patch

6.1-stable patches

added patches:
series
x86-bugs-make-safe-ret-robust-against-interrupt-injection.patch

5.15-stable patches

added patches:
series
x86-bugs-make-safe-ret-robust-against-interrupt-injection.patch

5.10-stable patches

added patches:
saferet-5.10.262-x86-bugs-Make-Safe-RET-robust-against-interrupt-inje.patch
series

move all queues off to the side for a bit...

Fixes for all trees

Signed-off-by: Sasha Levin <sashal@kernel.org>

Fixes for all trees

Signed-off-by: Sasha Levin <sashal@kernel.org>

6.12-stable patches

added patches:
ata-ahci-make-ahci_ignore_port-handle-empty-mask_port_map.patch
bluetooth-iso-fix-connected-closed-transition-on-shutdown-release.patch
of-reserved_mem-avoid-post-init-uaf-when-alloc_reserved_mem_array-fails.patch

6.6-stable patches

added patches:
ata-ahci-make-ahci_ignore_port-handle-empty-mask_port_map.patch
ata-libahci_platform-do-not-set-mask_port_map-when-not-needed.patch

6.1-stable patches

added patches:
ata-ahci-make-ahci_ignore_port-handle-empty-mask_port_map.patch
ata-libahci_platform-do-not-set-mask_port_map-when-not-needed.patch

6.18-stable patches

added patches:
hid-logitech-dj-fix-maxfield-check-in-dj-short-report-validation.patch
spi-spi-cadence-enable-spi_controller_must_tx.patch

6.12-stable patches

added patches:
ata-libahci_platform-do-not-set-mask_port_map-when-not-needed.patch
hid-logitech-dj-fix-maxfield-check-in-dj-short-report-validation.patch
spi-spi-cadence-enable-spi_controller_must_tx.patch