]>
git.ipfire.org Git - thirdparty/kernel/stable-queue.git/log
Greg Kroah-Hartman [Fri, 5 Jun 2026 16:09:32 +0000 (18:09 +0200)]
6.18-stable patches
added patches:
hwmon-pmbus-add-support-for-guarded-pmbus-lock.patch
hwmon-pmbus-adm1266-serialize-gpio-pmbus-accesses-with-pmbus_lock.patch
hwmon-pmbus-adm1266-serialize-sequencer_state-debugfs-read-with-pmbus_lock.patch
mm-slub-hold-cpus_read_lock-around-flush_rcu_sheaves_on_cache.patch
usb-serial-cypress_m8-fix-memory-corruption-with-small-endpoint.patch
usb-serial-digi_acceleport-fix-memory-corruption-with-small-endpoints.patch
usb-serial-mct_u232-fix-memory-corruption-with-small-endpoint.patch
Greg Kroah-Hartman [Fri, 5 Jun 2026 16:05:55 +0000 (18:05 +0200)]
6.18-stable patches
added patches:
arm64-tlb-flush-walk-cache-when-unsharing-pmd-tables.patch
bluetooth-hci_qca-convert-timeout-from-jiffies-to-ms.patch
bluetooth-hci_qca-migrate-to-serdev-specific-shutdown-function.patch
cpufreq-intel_pstate-add-and-use-hybrid_get_cpu_type.patch
cpufreq-intel_pstate-use-correct-scaling-factor-on-raptor-lake-e.patch
mptcp-borrow-forward-memory-from-subflow.patch
mptcp-cleanup-fallback-dummy-mapping-generation.patch
mptcp-do-not-drop-partial-packets.patch
mptcp-handle-first-subflow-closing-consistently.patch
mptcp-reset-rcv-wnd-on-disconnect.patch
net-devmem-reject-dma-buf-bind-with-non-page-aligned-size-or-sg-length.patch
octeontx2-pf-avoid-double-free-of-pool-stack-on-aq-init-failure.patch
platform-x86-intel-vsec-fix-enable_cnt-imbalance-on-pcie-error-recovery.patch
platform-x86-intel-vsec-make-driver_data-info-const.patch
platform-x86-intel-vsec-refactor-base_addr-handling.patch
rxrpc-fix-data-decrypt-vs-splice-by-copying-data-to-buffer-in-recvmsg.patch
rxrpc-fix-response-packet-verification-to-extract-skb-to-a-linear-buffer.patch
selftests-mptcp-drop-nanoseconds-width-specifier.patch
serdev-provide-a-bustype-shutdown-function.patch
usb-dwc3-xilinx-fix-error-handling-in-zynqmp-init-error-paths.patch
x86-mm-disable-broadcast-tlb-flush-when-pcid-is-disabled.patch
xfrm-iptfs-reset-runtime-state-when-cloning-sas.patch
Greg Kroah-Hartman [Fri, 5 Jun 2026 15:53:25 +0000 (17:53 +0200)]
7.0-stable patches
added patches:
alsa-hda-realtek-fix-mute-and-mic-mute-leds-for-hp-16-piston-omnibook-x.patch
alsa-hda-realtek-fix-mute-and-mic-mute-leds-for-hp-envy-x360-15-fh0xxx.patch
arm64-tlb-flush-walk-cache-when-unsharing-pmd-tables.patch
hwmon-pmbus-add-support-for-guarded-pmbus-lock.patch
hwmon-pmbus-adm1266-serialize-gpio-pmbus-accesses-with-pmbus_lock.patch
hwmon-pmbus-adm1266-serialize-sequencer_state-debugfs-read-with-pmbus_lock.patch
i2c-tegra-make-tegra_i2c_mutex_unlock-return-void.patch
platform-x86-intel-vsec-fix-enable_cnt-imbalance-on-pcie-error-recovery.patch
platform-x86-intel-vsec-make-driver_data-info-const.patch
platform-x86-intel-vsec-refactor-base_addr-handling.patch
revert-mm-hugetlbfs-update-hugetlbfs-to-use-mmap_prepare.patch
rxrpc-fix-response-packet-verification-to-extract-skb-to-a-linear-buffer.patch
Greg Kroah-Hartman [Fri, 5 Jun 2026 06:44:52 +0000 (08:44 +0200)]
drop a 6.12 patch
Greg Kroah-Hartman [Fri, 5 Jun 2026 06:18:17 +0000 (08:18 +0200)]
drop usb-typec-ucsi-don-t-update-power_supply-on-power-role-change-if-not-connected.patch from 6.12
Greg Kroah-Hartman [Fri, 5 Jun 2026 06:03:44 +0000 (08:03 +0200)]
drop typec patch
Greg Kroah-Hartman [Thu, 4 Jun 2026 11:03:53 +0000 (13:03 +0200)]
drop queue-6.12/x86-ftrace-relocate-rip-relative-percpu-refs-in-dynamic-trampolines.patch
Greg Kroah-Hartman [Thu, 4 Jun 2026 11:02:13 +0000 (13:02 +0200)]
7.0-stable patches
added patches:
comedi-comedi_test-fix-check-for-valid-scan_begin_src-in-waveform_ai_cmdtest.patch
comedi-comedi_test-fix-limiting-of-convert_arg-in-waveform_ai_cmdtest.patch
counter-fix-refcount-leak-in-counter_alloc-error-path.patch
drm-amd-pm-si-disregard-vblank-time-when-no-displays-are-connected.patch
drm-amdgpu-check-num_entries-in-gem_op-get_mapping_info.patch
drm-amdgpu-fix-amdgpu_hmm_range_get_pages.patch
drm-amdgpu-fix-calling-vm-invalidation-in-amdgpu_hmm_invalidate_gfx.patch
drm-amdgpu-fix-lock-leak-on-enomem-in-amdgpu_gem_op_get_mapping_info.patch
drm-amdkfd-check-for-pdd-drm-file-first-in-criu-restore-path.patch
drm-amdkfd-fix-a-vulnerability-of-integer-overflow-in-kfd-debugger.patch
drm-amdkfd-fix-null-pointer-bug-in-svm_range_set_attr.patch
drm-gem-fix-race-between-change_handle-and-handle_delete.patch
drm-hyperv-validate-resolution_count-and-fix-win8-fallback.patch
drm-hyperv-validate-vmbus-packet-size-in-receive-callback.patch
drm-i915-color-fix-hdr-pre-csc-lut-programming-loop.patch
drm-i915-fix-potential-uaf-in-ttm-object-purge.patch
drm-i915-psr-block-dc-states-on-vblank-enable-when-panel-replay-supported.patch
drm-i915-psr-use-dc_off-wake-reference-to-block-dc6-on-vblank-enable.patch
dt-bindings-usb-fix-eic7700-usb-reset-s-issue.patch
gpib-cb7210-fix-region-leak-when-request_irq-fails.patch
input-atmel_mxt_ts-fix-boundary-check-in-mxt_prepare_cfg_mem.patch
input-synaptics-add-len2058-to-smbus-passlist-for-thinkpad-e490.patch
input-xpad-add-nova-2-lite-from-gamesir.patch
input-xpad-add-support-for-asus-rog-raikiri-ii.patch
ksmbd-oob-read-regression-in-smb_check_perm_dacl-ace-walk-loops.patch
misc-rp1-send-iack-on-irq-activate-to-fix-kdump-kexec.patch
scsi-fcoe-reject-fip-descriptors-with-zero-fip_dlen-in-cvl-walker.patch
scsi-scsi_transport_fc-widen-fpin-pname-walker-counter-to-u32.patch
scsi-target-iscsi-bound-iscsi_encode_text_output-appends-to-rsp_buf.patch
scsi-target-iscsi-fix-crc-overread-and-double-free-in-iscsit_handle_text_cmd.patch
scsi-target-iscsi-validate-chap_r-length-before-base64-decode.patch
serial-8250-dispatch-sysrq-character-in-serial8250_handle_irq.patch
serial-8250_dw-dispatch-sysrq-character-in-dw8250_handle_irq.patch
serial-altera_jtaguart-handle-uart_add_one_port-failures.patch
serial-core-introduce-guard-uart_port_lock_check_sysrq_irqsave.patch
serial-dz-convert-to-use-a-platform-device.patch
serial-dz-fix-bootconsole-handover-lockup.patch
serial-dz-fix-bootconsole-message-clobbering-at-chip-reset.patch
serial-fsl_lpuart-fix-rx-buffer-and-dma-map-leaks-in-start_rx_dma.patch
serial-qcom-geni-fix-uart_rx_par_en-bit-position.patch
serial-qcom_geni-fix-kfifo-underflow-when-flush-precedes-dma-completion-irq.patch
serial-sh-sci-fix-memory-region-release-in-error-path.patch
serial-zs-convert-to-use-a-platform-device.patch
serial-zs-fix-bootconsole-handover-lockup.patch
serial-zs-fix-swapped-ri-dsr-modem-line-transition-counting.patch
serial-zs-switch-to-using-channel-reset.patch
thunderbolt-property-cap-recursion-depth-in-__tb_property_parse_dir.patch
thunderbolt-property-reject-dir_len-4-to-prevent-size_t-underflow.patch
thunderbolt-property-reject-u32-wrap-in-tb_property_entry_valid.patch
tty-serial-pch_uart-add-check-for-dma_alloc_coherent.patch
tty-serial-samsung-remove-redundant-port-lock-acquisition-in-rx-helpers.patch
uio-uio_pci_generic_sva-fix-double-free-of-devm_kzalloc-memory.patch
usb-chipidea-core-convert-ci_role_switch-to-local-variable.patch
usb-core-fix-up-interrupt-in-endpoints-with-bogus-wbytesperinterval.patch
usb-dwc3-xilinx-fix-error-handling-in-zynqmp-init-error-paths.patch
usb-gadget-composite-fix-integer-underflow-in-webusb-get_url-handling.patch
usb-gadget-dummy_hcd-reject-hub-port-requests-for-non-existent-ports.patch
usb-gadget-f_fs-copy-only-received-bytes-on-short-ep0-read.patch
usb-gadget-f_fs-serialize-dmabuf-cancel-against-request-completion.patch
usb-gadget-f_hid-fix-device-reference-leak-in-hidg_alloc.patch
usb-gadget-net2280-fix-double-free-in-probe-error-path.patch
usb-gadget-uvc-hold-opts-lock-across-xu-walks-in-uvc_function_bind.patch
usb-musb-omap2430-fix-use-after-free-in-omap2430_probe.patch
usb-quirks-add-no_lpm-for-lenovo-thinkpad-usb-c-dock-gen2-hub-controllers.patch
usb-serial-belkin_sa-validate-interrupt-status-length.patch
usb-serial-cypress_m8-validate-interrupt-packet-headers.patch
usb-serial-digi_acceleport-fix-memory-corruption-with-small-endpoints.patch
usb-serial-keyspan-fix-missing-indat-transfer-sanity-check.patch
usb-serial-mct_u232-fix-memory-corruption-with-small-endpoint.patch
usb-serial-mct_u232-fix-missing-interrupt-in-transfer-sanity-check.patch
usb-serial-mxuport-fix-memory-corruption-with-small-endpoint.patch
usb-serial-option-add-meig-srm813q.patch
usb-serial-option-add-missing-rsvd-5-flag-for-rolling-rw135r-gl.patch
usb-storage-add-quirks-for-pny-elite-portable-ssd.patch
usb-typec-tcpm-improve-handling-of-discover_modes-failures.patch
usb-typec-tipd-fix-error-code-in-tps6598x_probe.patch
usb-typec-ucsi-check-if-power-role-change-actually-happened-before-handling.patch
usb-typec-ucsi-don-t-update-power_supply-on-power-role-change-if-not-connected.patch
usb-usbtmc-check-urb-actual_length-for-interrupt-in-notifications.patch
usb-usbtmc-reject-interrupt-endpoints-with-small-wmaxpacketsize.patch
usbip-vudc-fix-use-after-free-bug-in-vudc_remove-due-to-race-condition.patch
Greg Kroah-Hartman [Thu, 4 Jun 2026 11:02:05 +0000 (13:02 +0200)]
6.18-stable patches
added patches:
comedi-comedi_test-fix-check-for-valid-scan_begin_src-in-waveform_ai_cmdtest.patch
comedi-comedi_test-fix-limiting-of-convert_arg-in-waveform_ai_cmdtest.patch
counter-fix-refcount-leak-in-counter_alloc-error-path.patch
drm-amd-pm-si-disregard-vblank-time-when-no-displays-are-connected.patch
drm-amdgpu-check-num_entries-in-gem_op-get_mapping_info.patch
drm-amdgpu-fix-calling-vm-invalidation-in-amdgpu_hmm_invalidate_gfx.patch
drm-amdgpu-fix-lock-leak-on-enomem-in-amdgpu_gem_op_get_mapping_info.patch
drm-amdkfd-check-for-pdd-drm-file-first-in-criu-restore-path.patch
drm-amdkfd-fix-a-vulnerability-of-integer-overflow-in-kfd-debugger.patch
drm-amdkfd-fix-null-pointer-bug-in-svm_range_set_attr.patch
drm-gem-fix-race-between-change_handle-and-handle_delete.patch
drm-hyperv-validate-resolution_count-and-fix-win8-fallback.patch
drm-hyperv-validate-vmbus-packet-size-in-receive-callback.patch
drm-i915-fix-potential-uaf-in-ttm-object-purge.patch
drm-i915-psr-block-dc-states-on-vblank-enable-when-panel-replay-supported.patch
gpib-cb7210-fix-region-leak-when-request_irq-fails.patch
input-atmel_mxt_ts-fix-boundary-check-in-mxt_prepare_cfg_mem.patch
input-synaptics-add-len2058-to-smbus-passlist-for-thinkpad-e490.patch
input-xpad-add-nova-2-lite-from-gamesir.patch
input-xpad-add-support-for-asus-rog-raikiri-ii.patch
ksmbd-oob-read-regression-in-smb_check_perm_dacl-ace-walk-loops.patch
misc-rp1-send-iack-on-irq-activate-to-fix-kdump-kexec.patch
scsi-fcoe-reject-fip-descriptors-with-zero-fip_dlen-in-cvl-walker.patch
scsi-scsi_transport_fc-widen-fpin-pname-walker-counter-to-u32.patch
scsi-target-iscsi-bound-iscsi_encode_text_output-appends-to-rsp_buf.patch
scsi-target-iscsi-fix-crc-overread-and-double-free-in-iscsit_handle_text_cmd.patch
scsi-target-iscsi-validate-chap_r-length-before-base64-decode.patch
serial-8250-dispatch-sysrq-character-in-serial8250_handle_irq.patch
serial-8250_dw-dispatch-sysrq-character-in-dw8250_handle_irq.patch
serial-altera_jtaguart-handle-uart_add_one_port-failures.patch
serial-core-introduce-guard-uart_port_lock_check_sysrq_irqsave.patch
serial-dz-convert-to-use-a-platform-device.patch
serial-dz-fix-bootconsole-handover-lockup.patch
serial-dz-fix-bootconsole-message-clobbering-at-chip-reset.patch
serial-fsl_lpuart-fix-rx-buffer-and-dma-map-leaks-in-start_rx_dma.patch
serial-qcom-geni-fix-uart_rx_par_en-bit-position.patch
serial-qcom_geni-fix-kfifo-underflow-when-flush-precedes-dma-completion-irq.patch
serial-sh-sci-fix-memory-region-release-in-error-path.patch
serial-zs-convert-to-use-a-platform-device.patch
serial-zs-fix-bootconsole-handover-lockup.patch
serial-zs-fix-swapped-ri-dsr-modem-line-transition-counting.patch
serial-zs-switch-to-using-channel-reset.patch
thunderbolt-property-reject-dir_len-4-to-prevent-size_t-underflow.patch
thunderbolt-property-reject-u32-wrap-in-tb_property_entry_valid.patch
tty-serial-pch_uart-add-check-for-dma_alloc_coherent.patch
tty-serial-samsung-remove-redundant-port-lock-acquisition-in-rx-helpers.patch
usb-chipidea-core-convert-ci_role_switch-to-local-variable.patch
usb-core-fix-up-interrupt-in-endpoints-with-bogus-wbytesperinterval.patch
usb-gadget-composite-fix-integer-underflow-in-webusb-get_url-handling.patch
usb-gadget-dummy_hcd-reject-hub-port-requests-for-non-existent-ports.patch
usb-gadget-f_fs-copy-only-received-bytes-on-short-ep0-read.patch
usb-gadget-f_fs-serialize-dmabuf-cancel-against-request-completion.patch
usb-gadget-f_hid-fix-device-reference-leak-in-hidg_alloc.patch
usb-gadget-net2280-fix-double-free-in-probe-error-path.patch
usb-gadget-uvc-hold-opts-lock-across-xu-walks-in-uvc_function_bind.patch
usb-musb-omap2430-fix-use-after-free-in-omap2430_probe.patch
usb-quirks-add-no_lpm-for-lenovo-thinkpad-usb-c-dock-gen2-hub-controllers.patch
usb-serial-belkin_sa-validate-interrupt-status-length.patch
usb-serial-cypress_m8-validate-interrupt-packet-headers.patch
usb-serial-keyspan-fix-missing-indat-transfer-sanity-check.patch
usb-serial-mct_u232-fix-missing-interrupt-in-transfer-sanity-check.patch
usb-serial-mxuport-fix-memory-corruption-with-small-endpoint.patch
usb-serial-option-add-meig-srm813q.patch
usb-serial-option-add-missing-rsvd-5-flag-for-rolling-rw135r-gl.patch
usb-storage-add-quirks-for-pny-elite-portable-ssd.patch
usb-typec-tcpm-improve-handling-of-discover_modes-failures.patch
usb-typec-tipd-fix-error-code-in-tps6598x_probe.patch
usb-typec-ucsi-check-if-power-role-change-actually-happened-before-handling.patch
usb-typec-ucsi-don-t-update-power_supply-on-power-role-change-if-not-connected.patch
usb-usbtmc-check-urb-actual_length-for-interrupt-in-notifications.patch
usb-usbtmc-reject-interrupt-endpoints-with-small-wmaxpacketsize.patch
usbip-vudc-fix-use-after-free-bug-in-vudc_remove-due-to-race-condition.patch
Greg Kroah-Hartman [Thu, 4 Jun 2026 11:01:57 +0000 (13:01 +0200)]
6.12-stable patches
added patches:
comedi-comedi_test-fix-check-for-valid-scan_begin_src-in-waveform_ai_cmdtest.patch
comedi-comedi_test-fix-limiting-of-convert_arg-in-waveform_ai_cmdtest.patch
counter-fix-refcount-leak-in-counter_alloc-error-path.patch
drm-amd-pm-si-disregard-vblank-time-when-no-displays-are-connected.patch
drm-amdgpu-fix-calling-vm-invalidation-in-amdgpu_hmm_invalidate_gfx.patch
drm-amdkfd-check-for-pdd-drm-file-first-in-criu-restore-path.patch
drm-amdkfd-fix-a-vulnerability-of-integer-overflow-in-kfd-debugger.patch
drm-amdkfd-fix-null-pointer-bug-in-svm_range_set_attr.patch
drm-hyperv-validate-resolution_count-and-fix-win8-fallback.patch
drm-hyperv-validate-vmbus-packet-size-in-receive-callback.patch
drm-i915-fix-potential-uaf-in-ttm-object-purge.patch
input-atmel_mxt_ts-fix-boundary-check-in-mxt_prepare_cfg_mem.patch
input-synaptics-add-len2058-to-smbus-passlist-for-thinkpad-e490.patch
input-xpad-add-nova-2-lite-from-gamesir.patch
input-xpad-add-support-for-asus-rog-raikiri-ii.patch
ksmbd-oob-read-regression-in-smb_check_perm_dacl-ace-walk-loops.patch
scsi-fcoe-reject-fip-descriptors-with-zero-fip_dlen-in-cvl-walker.patch
scsi-scsi_transport_fc-widen-fpin-pname-walker-counter-to-u32.patch
scsi-target-iscsi-bound-iscsi_encode_text_output-appends-to-rsp_buf.patch
scsi-target-iscsi-validate-chap_r-length-before-base64-decode.patch
serial-altera_jtaguart-handle-uart_add_one_port-failures.patch
serial-dz-convert-to-use-a-platform-device.patch
serial-dz-fix-bootconsole-handover-lockup.patch
serial-dz-fix-bootconsole-message-clobbering-at-chip-reset.patch
serial-fsl_lpuart-fix-rx-buffer-and-dma-map-leaks-in-start_rx_dma.patch
serial-qcom-geni-fix-uart_rx_par_en-bit-position.patch
serial-qcom_geni-fix-kfifo-underflow-when-flush-precedes-dma-completion-irq.patch
serial-sh-sci-fix-memory-region-release-in-error-path.patch
serial-zs-convert-to-use-a-platform-device.patch
serial-zs-fix-bootconsole-handover-lockup.patch
serial-zs-fix-swapped-ri-dsr-modem-line-transition-counting.patch
serial-zs-switch-to-using-channel-reset.patch
thunderbolt-property-reject-dir_len-4-to-prevent-size_t-underflow.patch
thunderbolt-property-reject-u32-wrap-in-tb_property_entry_valid.patch
tty-serial-pch_uart-add-check-for-dma_alloc_coherent.patch
tty-serial-samsung-remove-redundant-port-lock-acquisition-in-rx-helpers.patch
usb-chipidea-core-convert-ci_role_switch-to-local-variable.patch
usb-core-fix-up-interrupt-in-endpoints-with-bogus-wbytesperinterval.patch
usb-gadget-composite-fix-integer-underflow-in-webusb-get_url-handling.patch
usb-gadget-dummy_hcd-reject-hub-port-requests-for-non-existent-ports.patch
usb-gadget-f_fs-copy-only-received-bytes-on-short-ep0-read.patch
usb-gadget-f_fs-serialize-dmabuf-cancel-against-request-completion.patch
usb-gadget-f_hid-fix-device-reference-leak-in-hidg_alloc.patch
usb-gadget-net2280-fix-double-free-in-probe-error-path.patch
usb-gadget-uvc-hold-opts-lock-across-xu-walks-in-uvc_function_bind.patch
usb-quirks-add-no_lpm-for-lenovo-thinkpad-usb-c-dock-gen2-hub-controllers.patch
usb-serial-belkin_sa-validate-interrupt-status-length.patch
usb-serial-cypress_m8-validate-interrupt-packet-headers.patch
usb-serial-keyspan-fix-missing-indat-transfer-sanity-check.patch
usb-serial-mct_u232-fix-missing-interrupt-in-transfer-sanity-check.patch
usb-serial-mxuport-fix-memory-corruption-with-small-endpoint.patch
usb-serial-option-add-meig-srm813q.patch
usb-serial-option-add-missing-rsvd-5-flag-for-rolling-rw135r-gl.patch
usb-storage-add-quirks-for-pny-elite-portable-ssd.patch
usb-typec-tcpm-improve-handling-of-discover_modes-failures.patch
usb-typec-ucsi-don-t-update-power_supply-on-power-role-change-if-not-connected.patch
usb-usbtmc-check-urb-actual_length-for-interrupt-in-notifications.patch
usb-usbtmc-reject-interrupt-endpoints-with-small-wmaxpacketsize.patch
usbip-vudc-fix-use-after-free-bug-in-vudc_remove-due-to-race-condition.patch
Greg Kroah-Hartman [Thu, 4 Jun 2026 11:01:26 +0000 (13:01 +0200)]
6.6-stable patches
added patches:
comedi-comedi_test-fix-check-for-valid-scan_begin_src-in-waveform_ai_cmdtest.patch
comedi-comedi_test-fix-limiting-of-convert_arg-in-waveform_ai_cmdtest.patch
counter-fix-refcount-leak-in-counter_alloc-error-path.patch
drm-amd-pm-si-disregard-vblank-time-when-no-displays-are-connected.patch
drm-amdkfd-check-for-pdd-drm-file-first-in-criu-restore-path.patch
drm-amdkfd-fix-a-vulnerability-of-integer-overflow-in-kfd-debugger.patch
drm-amdkfd-fix-null-pointer-bug-in-svm_range_set_attr.patch
drm-hyperv-validate-resolution_count-and-fix-win8-fallback.patch
drm-hyperv-validate-vmbus-packet-size-in-receive-callback.patch
drm-i915-fix-potential-uaf-in-ttm-object-purge.patch
input-atmel_mxt_ts-fix-boundary-check-in-mxt_prepare_cfg_mem.patch
input-synaptics-add-len2058-to-smbus-passlist-for-thinkpad-e490.patch
input-xpad-add-nova-2-lite-from-gamesir.patch
input-xpad-add-support-for-asus-rog-raikiri-ii.patch
ksmbd-oob-read-regression-in-smb_check_perm_dacl-ace-walk-loops.patch
scsi-fcoe-reject-fip-descriptors-with-zero-fip_dlen-in-cvl-walker.patch
scsi-scsi_transport_fc-widen-fpin-pname-walker-counter-to-u32.patch
scsi-target-iscsi-bound-iscsi_encode_text_output-appends-to-rsp_buf.patch
scsi-target-iscsi-validate-chap_r-length-before-base64-decode.patch
serial-altera_jtaguart-handle-uart_add_one_port-failures.patch
serial-dz-fix-bootconsole-message-clobbering-at-chip-reset.patch
serial-fsl_lpuart-fix-rx-buffer-and-dma-map-leaks-in-start_rx_dma.patch
serial-qcom-geni-fix-uart_rx_par_en-bit-position.patch
serial-sh-sci-fix-memory-region-release-in-error-path.patch
serial-zs-fix-bootconsole-handover-lockup.patch
serial-zs-fix-swapped-ri-dsr-modem-line-transition-counting.patch
serial-zs-switch-to-using-channel-reset.patch
thunderbolt-property-reject-dir_len-4-to-prevent-size_t-underflow.patch
thunderbolt-property-reject-u32-wrap-in-tb_property_entry_valid.patch
tty-serial-pch_uart-add-check-for-dma_alloc_coherent.patch
usb-chipidea-core-convert-ci_role_switch-to-local-variable.patch
usb-core-fix-up-interrupt-in-endpoints-with-bogus-wbytesperinterval.patch
usb-gadget-composite-fix-integer-underflow-in-webusb-get_url-handling.patch
usb-gadget-dummy_hcd-reject-hub-port-requests-for-non-existent-ports.patch
usb-gadget-f_fs-copy-only-received-bytes-on-short-ep0-read.patch
usb-gadget-f_hid-fix-device-reference-leak-in-hidg_alloc.patch
usb-gadget-net2280-fix-double-free-in-probe-error-path.patch
usb-quirks-add-no_lpm-for-lenovo-thinkpad-usb-c-dock-gen2-hub-controllers.patch
usb-serial-belkin_sa-validate-interrupt-status-length.patch
usb-serial-cypress_m8-validate-interrupt-packet-headers.patch
usb-serial-keyspan-fix-missing-indat-transfer-sanity-check.patch
usb-serial-mct_u232-fix-missing-interrupt-in-transfer-sanity-check.patch
usb-serial-mxuport-fix-memory-corruption-with-small-endpoint.patch
usb-serial-option-add-meig-srm813q.patch
usb-serial-option-add-missing-rsvd-5-flag-for-rolling-rw135r-gl.patch
usb-storage-add-quirks-for-pny-elite-portable-ssd.patch
usb-typec-ucsi-don-t-update-power_supply-on-power-role-change-if-not-connected.patch
usb-usbtmc-check-urb-actual_length-for-interrupt-in-notifications.patch
usb-usbtmc-reject-interrupt-endpoints-with-small-wmaxpacketsize.patch
usbip-vudc-fix-use-after-free-bug-in-vudc_remove-due-to-race-condition.patch
Greg Kroah-Hartman [Thu, 4 Jun 2026 11:00:56 +0000 (13:00 +0200)]
6.1-stable patches
added patches:
comedi-comedi_test-fix-check-for-valid-scan_begin_src-in-waveform_ai_cmdtest.patch
comedi-comedi_test-fix-limiting-of-convert_arg-in-waveform_ai_cmdtest.patch
counter-fix-refcount-leak-in-counter_alloc-error-path.patch
drm-amd-pm-si-disregard-vblank-time-when-no-displays-are-connected.patch
drm-amdkfd-check-for-pdd-drm-file-first-in-criu-restore-path.patch
drm-amdkfd-fix-null-pointer-bug-in-svm_range_set_attr.patch
drm-hyperv-validate-resolution_count-and-fix-win8-fallback.patch
drm-hyperv-validate-vmbus-packet-size-in-receive-callback.patch
drm-i915-fix-potential-uaf-in-ttm-object-purge.patch
input-atmel_mxt_ts-fix-boundary-check-in-mxt_prepare_cfg_mem.patch
input-synaptics-add-len2058-to-smbus-passlist-for-thinkpad-e490.patch
scsi-fcoe-reject-fip-descriptors-with-zero-fip_dlen-in-cvl-walker.patch
scsi-scsi_transport_fc-widen-fpin-pname-walker-counter-to-u32.patch
scsi-target-iscsi-bound-iscsi_encode_text_output-appends-to-rsp_buf.patch
scsi-target-iscsi-validate-chap_r-length-before-base64-decode.patch
serial-altera_jtaguart-handle-uart_add_one_port-failures.patch
serial-dz-fix-bootconsole-message-clobbering-at-chip-reset.patch
serial-fsl_lpuart-fix-rx-buffer-and-dma-map-leaks-in-start_rx_dma.patch
serial-sh-sci-fix-memory-region-release-in-error-path.patch
serial-zs-fix-bootconsole-handover-lockup.patch
serial-zs-fix-swapped-ri-dsr-modem-line-transition-counting.patch
serial-zs-switch-to-using-channel-reset.patch
thunderbolt-property-reject-dir_len-4-to-prevent-size_t-underflow.patch
thunderbolt-property-reject-u32-wrap-in-tb_property_entry_valid.patch
tty-serial-pch_uart-add-check-for-dma_alloc_coherent.patch
usb-chipidea-core-convert-ci_role_switch-to-local-variable.patch
usb-core-fix-up-interrupt-in-endpoints-with-bogus-wbytesperinterval.patch
usb-gadget-dummy_hcd-reject-hub-port-requests-for-non-existent-ports.patch
usb-gadget-f_fs-copy-only-received-bytes-on-short-ep0-read.patch
usb-gadget-net2280-fix-double-free-in-probe-error-path.patch
usb-quirks-add-no_lpm-for-lenovo-thinkpad-usb-c-dock-gen2-hub-controllers.patch
usb-serial-belkin_sa-validate-interrupt-status-length.patch
usb-serial-cypress_m8-validate-interrupt-packet-headers.patch
usb-serial-keyspan-fix-missing-indat-transfer-sanity-check.patch
usb-serial-mct_u232-fix-missing-interrupt-in-transfer-sanity-check.patch
usb-serial-mxuport-fix-memory-corruption-with-small-endpoint.patch
usb-serial-option-add-meig-srm813q.patch
usb-serial-option-add-missing-rsvd-5-flag-for-rolling-rw135r-gl.patch
usb-storage-add-quirks-for-pny-elite-portable-ssd.patch
usb-typec-ucsi-don-t-update-power_supply-on-power-role-change-if-not-connected.patch
usb-usbtmc-check-urb-actual_length-for-interrupt-in-notifications.patch
usb-usbtmc-reject-interrupt-endpoints-with-small-wmaxpacketsize.patch
usbip-vudc-fix-use-after-free-bug-in-vudc_remove-due-to-race-condition.patch
Greg Kroah-Hartman [Thu, 4 Jun 2026 11:00:25 +0000 (13:00 +0200)]
5.15-stable patches
added patches:
comedi-comedi_test-fix-check-for-valid-scan_begin_src-in-waveform_ai_cmdtest.patch
comedi-comedi_test-fix-limiting-of-convert_arg-in-waveform_ai_cmdtest.patch
drm-hyperv-validate-vmbus-packet-size-in-receive-callback.patch
input-atmel_mxt_ts-fix-boundary-check-in-mxt_prepare_cfg_mem.patch
input-synaptics-add-len2058-to-smbus-passlist-for-thinkpad-e490.patch
scsi-fcoe-reject-fip-descriptors-with-zero-fip_dlen-in-cvl-walker.patch
scsi-scsi_transport_fc-widen-fpin-pname-walker-counter-to-u32.patch
serial-dz-fix-bootconsole-message-clobbering-at-chip-reset.patch
serial-fsl_lpuart-fix-rx-buffer-and-dma-map-leaks-in-start_rx_dma.patch
serial-sh-sci-fix-memory-region-release-in-error-path.patch
serial-zs-fix-bootconsole-handover-lockup.patch
serial-zs-fix-swapped-ri-dsr-modem-line-transition-counting.patch
serial-zs-switch-to-using-channel-reset.patch
thunderbolt-property-reject-dir_len-4-to-prevent-size_t-underflow.patch
thunderbolt-property-reject-u32-wrap-in-tb_property_entry_valid.patch
tty-serial-pch_uart-add-check-for-dma_alloc_coherent.patch
usb-chipidea-core-convert-ci_role_switch-to-local-variable.patch
usb-core-fix-up-interrupt-in-endpoints-with-bogus-wbytesperinterval.patch
usb-gadget-dummy_hcd-reject-hub-port-requests-for-non-existent-ports.patch
usb-gadget-f_fs-copy-only-received-bytes-on-short-ep0-read.patch
usb-gadget-net2280-fix-double-free-in-probe-error-path.patch
usb-quirks-add-no_lpm-for-lenovo-thinkpad-usb-c-dock-gen2-hub-controllers.patch
usb-serial-belkin_sa-validate-interrupt-status-length.patch
usb-serial-cypress_m8-validate-interrupt-packet-headers.patch
usb-serial-keyspan-fix-missing-indat-transfer-sanity-check.patch
usb-serial-mct_u232-fix-missing-interrupt-in-transfer-sanity-check.patch
usb-serial-mxuport-fix-memory-corruption-with-small-endpoint.patch
usb-serial-option-add-meig-srm813q.patch
usb-serial-option-add-missing-rsvd-5-flag-for-rolling-rw135r-gl.patch
usb-storage-add-quirks-for-pny-elite-portable-ssd.patch
usb-typec-ucsi-don-t-update-power_supply-on-power-role-change-if-not-connected.patch
usb-usbtmc-check-urb-actual_length-for-interrupt-in-notifications.patch
usb-usbtmc-reject-interrupt-endpoints-with-small-wmaxpacketsize.patch
usbip-vudc-fix-use-after-free-bug-in-vudc_remove-due-to-race-condition.patch
Greg Kroah-Hartman [Thu, 4 Jun 2026 10:59:52 +0000 (12:59 +0200)]
5.10-stable patches
added patches:
comedi-comedi_test-fix-check-for-valid-scan_begin_src-in-waveform_ai_cmdtest.patch
comedi-comedi_test-fix-limiting-of-convert_arg-in-waveform_ai_cmdtest.patch
input-atmel_mxt_ts-fix-boundary-check-in-mxt_prepare_cfg_mem.patch
input-synaptics-add-len2058-to-smbus-passlist-for-thinkpad-e490.patch
scsi-fcoe-reject-fip-descriptors-with-zero-fip_dlen-in-cvl-walker.patch
serial-dz-fix-bootconsole-message-clobbering-at-chip-reset.patch
serial-fsl_lpuart-fix-rx-buffer-and-dma-map-leaks-in-start_rx_dma.patch
serial-sh-sci-fix-memory-region-release-in-error-path.patch
serial-zs-fix-bootconsole-handover-lockup.patch
serial-zs-fix-swapped-ri-dsr-modem-line-transition-counting.patch
serial-zs-switch-to-using-channel-reset.patch
thunderbolt-property-reject-dir_len-4-to-prevent-size_t-underflow.patch
thunderbolt-property-reject-u32-wrap-in-tb_property_entry_valid.patch
tty-serial-pch_uart-add-check-for-dma_alloc_coherent.patch
usb-chipidea-core-convert-ci_role_switch-to-local-variable.patch
usb-core-fix-up-interrupt-in-endpoints-with-bogus-wbytesperinterval.patch
usb-gadget-dummy_hcd-reject-hub-port-requests-for-non-existent-ports.patch
usb-gadget-net2280-fix-double-free-in-probe-error-path.patch
usb-quirks-add-no_lpm-for-lenovo-thinkpad-usb-c-dock-gen2-hub-controllers.patch
usb-serial-belkin_sa-validate-interrupt-status-length.patch
usb-serial-cypress_m8-validate-interrupt-packet-headers.patch
usb-serial-keyspan-fix-missing-indat-transfer-sanity-check.patch
usb-serial-mct_u232-fix-missing-interrupt-in-transfer-sanity-check.patch
usb-serial-mxuport-fix-memory-corruption-with-small-endpoint.patch
usb-serial-option-add-meig-srm813q.patch
usb-serial-option-add-missing-rsvd-5-flag-for-rolling-rw135r-gl.patch
usb-storage-add-quirks-for-pny-elite-portable-ssd.patch
usb-typec-ucsi-don-t-update-power_supply-on-power-role-change-if-not-connected.patch
usb-usbtmc-check-urb-actual_length-for-interrupt-in-notifications.patch
usb-usbtmc-reject-interrupt-endpoints-with-small-wmaxpacketsize.patch
usbip-vudc-fix-use-after-free-bug-in-vudc_remove-due-to-race-condition.patch
Greg Kroah-Hartman [Thu, 4 Jun 2026 10:37:26 +0000 (12:37 +0200)]
7.0-stable patches
added patches:
alsa-firewire-motu-protect-register-dsp-event-queue-positions.patch
alsa-hda-realtek-fix-speaker-output-on-asus-rog-strix-g615lp.patch
alsa-scarlett2-fix-2i2-gen-4-direct-monitor-gain-on-firmware-2417.patch
asoc-qcom-q6asm-dai-close-stream-only-when-running.patch
asoc-qcom-q6asm-dai-do-not-set-stream-state-in-event-and-trigger-callbacks.patch
asoc-qcom-q6asm-dai-fix-error-handling-in-prepare-and-set_params.patch
bpf-sockmap-fix-tail-fragment-offset-in-bpf_msg_push_data.patch
dma-buf-fix-uaf-in-dma_buf_fd-tracepoint.patch
hid-wacom-fix-oob-write-in-wacom_hid_set_device_mode.patch
iommu-debugobjects-avoid-gcc-16.1-section-mismatch-warnings.patch
ip6-vti-use-ip6_tnl.net-in-vti6_changelink.patch
ip6-vti-use-ip6_tnl.net-in-vti6_siocdevprivate.patch
ipv6-exthdrs-refresh-nh-after-handling-hao-option.patch
ipv6-exthdrs-refresh-nh-pointer-after-ipv6_hop_jumbo.patch
ipv6-validate-extension-header-length-before-copying-to-cmsg.patch
l2tp-use-refcount_inc_not_zero-in-l2tp_session_get_by_ifname.patch
macsec-fix-replay-protection-at-xpn-lower-pn-wrap.patch
net-skbuff-fix-missing-zerocopy-reference-in-pskb_carve-helpers.patch
netfilter-conntrack-tcp-do-not-force-close-on-invalid-seq-rst-without-direction-check.patch
nfc-hci-fix-out-of-bounds-read-in-hcp-header-parsing.patch
octeontx2-af-validate-body-pcifunc-in-rvu_mbox_handler_rep_event_notify.patch
spi-spi-mem-avoid-mutating-op-template-in-spi_mem_supports_op.patch
wireguard-send-append-trailer-after-expanding-head.patch
xfrm-ah-use-skb_to_full_sk-in-async-output-callbacks.patch
xfrm-esp-restore-combined-single-frag-length-gate.patch
xfrm-input-hold-netns-during-deferred-transport-reinjection.patch
xfrm-ipcomp-free-destination-pages-on-acomp-errors.patch
xfrm-iptfs-reset-runtime-state-when-cloning-sas.patch
xfrm-route-migrate-notifications-to-caller-s-netns.patch
Greg Kroah-Hartman [Thu, 4 Jun 2026 10:36:50 +0000 (12:36 +0200)]
6.18-stable patches
added patches:
alsa-firewire-motu-protect-register-dsp-event-queue-positions.patch
alsa-hda-realtek-fix-speaker-output-on-asus-rog-strix-g615lp.patch
alsa-scarlett2-fix-2i2-gen-4-direct-monitor-gain-on-firmware-2417.patch
asoc-qcom-q6asm-dai-close-stream-only-when-running.patch
asoc-qcom-q6asm-dai-do-not-set-stream-state-in-event-and-trigger-callbacks.patch
asoc-qcom-q6asm-dai-fix-error-handling-in-prepare-and-set_params.patch
bpf-sockmap-fix-tail-fragment-offset-in-bpf_msg_push_data.patch
hid-wacom-fix-oob-write-in-wacom_hid_set_device_mode.patch
iommu-debugobjects-avoid-gcc-16.1-section-mismatch-warnings.patch
ip6-vti-use-ip6_tnl.net-in-vti6_changelink.patch
ip6-vti-use-ip6_tnl.net-in-vti6_siocdevprivate.patch
ipv6-exthdrs-refresh-nh-after-handling-hao-option.patch
ipv6-exthdrs-refresh-nh-pointer-after-ipv6_hop_jumbo.patch
ipv6-validate-extension-header-length-before-copying-to-cmsg.patch
l2tp-use-refcount_inc_not_zero-in-l2tp_session_get_by_ifname.patch
macsec-fix-replay-protection-at-xpn-lower-pn-wrap.patch
net-skbuff-fix-missing-zerocopy-reference-in-pskb_carve-helpers.patch
netfilter-conntrack-tcp-do-not-force-close-on-invalid-seq-rst-without-direction-check.patch
nfc-hci-fix-out-of-bounds-read-in-hcp-header-parsing.patch
spi-spi-mem-avoid-mutating-op-template-in-spi_mem_supports_op.patch
wireguard-send-append-trailer-after-expanding-head.patch
xfrm-ah-use-skb_to_full_sk-in-async-output-callbacks.patch
xfrm-esp-restore-combined-single-frag-length-gate.patch
xfrm-input-hold-netns-during-deferred-transport-reinjection.patch
xfrm-ipcomp-free-destination-pages-on-acomp-errors.patch
xfrm-route-migrate-notifications-to-caller-s-netns.patch
Greg Kroah-Hartman [Thu, 4 Jun 2026 10:36:12 +0000 (12:36 +0200)]
6.12-stable patches
added patches:
alsa-scarlett2-fix-2i2-gen-4-direct-monitor-gain-on-firmware-2417.patch
asoc-qcom-q6asm-dai-close-stream-only-when-running.patch
asoc-qcom-q6asm-dai-do-not-set-stream-state-in-event-and-trigger-callbacks.patch
asoc-qcom-q6asm-dai-fix-error-handling-in-prepare-and-set_params.patch
bpf-sockmap-fix-tail-fragment-offset-in-bpf_msg_push_data.patch
hid-wacom-fix-oob-write-in-wacom_hid_set_device_mode.patch
iommu-debugobjects-avoid-gcc-16.1-section-mismatch-warnings.patch
ip6-vti-use-ip6_tnl.net-in-vti6_changelink.patch
ip6-vti-use-ip6_tnl.net-in-vti6_siocdevprivate.patch
ipv6-exthdrs-refresh-nh-after-handling-hao-option.patch
ipv6-exthdrs-refresh-nh-pointer-after-ipv6_hop_jumbo.patch
ipv6-validate-extension-header-length-before-copying-to-cmsg.patch
l2tp-use-refcount_inc_not_zero-in-l2tp_session_get_by_ifname.patch
macsec-fix-replay-protection-at-xpn-lower-pn-wrap.patch
net-skbuff-fix-missing-zerocopy-reference-in-pskb_carve-helpers.patch
netfilter-conntrack-tcp-do-not-force-close-on-invalid-seq-rst-without-direction-check.patch
nfc-hci-fix-out-of-bounds-read-in-hcp-header-parsing.patch
wireguard-send-append-trailer-after-expanding-head.patch
xfrm-ah-use-skb_to_full_sk-in-async-output-callbacks.patch
xfrm-esp-restore-combined-single-frag-length-gate.patch
xfrm-input-hold-netns-during-deferred-transport-reinjection.patch
xfrm-route-migrate-notifications-to-caller-s-netns.patch
Greg Kroah-Hartman [Thu, 4 Jun 2026 10:35:33 +0000 (12:35 +0200)]
6.6-stable patches
added patches:
asoc-qcom-q6asm-dai-close-stream-only-when-running.patch
asoc-qcom-q6asm-dai-do-not-set-stream-state-in-event-and-trigger-callbacks.patch
asoc-qcom-q6asm-dai-fix-error-handling-in-prepare-and-set_params.patch
bpf-sockmap-fix-tail-fragment-offset-in-bpf_msg_push_data.patch
hid-wacom-fix-oob-write-in-wacom_hid_set_device_mode.patch
iommu-debugobjects-avoid-gcc-16.1-section-mismatch-warnings.patch
ip6-vti-use-ip6_tnl.net-in-vti6_changelink.patch
ip6-vti-use-ip6_tnl.net-in-vti6_siocdevprivate.patch
ipv6-exthdrs-refresh-nh-after-handling-hao-option.patch
ipv6-exthdrs-refresh-nh-pointer-after-ipv6_hop_jumbo.patch
ipv6-validate-extension-header-length-before-copying-to-cmsg.patch
macsec-fix-replay-protection-at-xpn-lower-pn-wrap.patch
netfilter-conntrack-tcp-do-not-force-close-on-invalid-seq-rst-without-direction-check.patch
nfc-hci-fix-out-of-bounds-read-in-hcp-header-parsing.patch
wireguard-send-append-trailer-after-expanding-head.patch
xfrm-ah-use-skb_to_full_sk-in-async-output-callbacks.patch
xfrm-esp-restore-combined-single-frag-length-gate.patch
xfrm-input-hold-netns-during-deferred-transport-reinjection.patch
xfrm-route-migrate-notifications-to-caller-s-netns.patch
Greg Kroah-Hartman [Thu, 4 Jun 2026 10:34:48 +0000 (12:34 +0200)]
6.1-stable patches
added patches:
asoc-qcom-q6asm-dai-close-stream-only-when-running.patch
asoc-qcom-q6asm-dai-do-not-set-stream-state-in-event-and-trigger-callbacks.patch
asoc-qcom-q6asm-dai-fix-error-handling-in-prepare-and-set_params.patch
bpf-sockmap-fix-tail-fragment-offset-in-bpf_msg_push_data.patch
hid-wacom-fix-oob-write-in-wacom_hid_set_device_mode.patch
iommu-debugobjects-avoid-gcc-16.1-section-mismatch-warnings.patch
ip6-vti-use-ip6_tnl.net-in-vti6_changelink.patch
ip6-vti-use-ip6_tnl.net-in-vti6_siocdevprivate.patch
ipv6-exthdrs-refresh-nh-after-handling-hao-option.patch
ipv6-exthdrs-refresh-nh-pointer-after-ipv6_hop_jumbo.patch
ipv6-validate-extension-header-length-before-copying-to-cmsg.patch
macsec-fix-replay-protection-at-xpn-lower-pn-wrap.patch
netfilter-conntrack-tcp-do-not-force-close-on-invalid-seq-rst-without-direction-check.patch
nfc-hci-fix-out-of-bounds-read-in-hcp-header-parsing.patch
wireguard-send-append-trailer-after-expanding-head.patch
xfrm-ah-use-skb_to_full_sk-in-async-output-callbacks.patch
xfrm-esp-restore-combined-single-frag-length-gate.patch
xfrm-input-hold-netns-during-deferred-transport-reinjection.patch
xfrm-route-migrate-notifications-to-caller-s-netns.patch
Greg Kroah-Hartman [Thu, 4 Jun 2026 10:34:14 +0000 (12:34 +0200)]
5.15-stable patches
added patches:
asoc-qcom-q6asm-dai-close-stream-only-when-running.patch
asoc-qcom-q6asm-dai-do-not-set-stream-state-in-event-and-trigger-callbacks.patch
asoc-qcom-q6asm-dai-fix-error-handling-in-prepare-and-set_params.patch
bpf-sockmap-fix-tail-fragment-offset-in-bpf_msg_push_data.patch
hid-wacom-fix-oob-write-in-wacom_hid_set_device_mode.patch
iommu-debugobjects-avoid-gcc-16.1-section-mismatch-warnings.patch
ip6-vti-use-ip6_tnl.net-in-vti6_changelink.patch
ip6-vti-use-ip6_tnl.net-in-vti6_siocdevprivate.patch
ipv6-exthdrs-refresh-nh-after-handling-hao-option.patch
ipv6-exthdrs-refresh-nh-pointer-after-ipv6_hop_jumbo.patch
ipv6-validate-extension-header-length-before-copying-to-cmsg.patch
macsec-fix-replay-protection-at-xpn-lower-pn-wrap.patch
netfilter-conntrack-tcp-do-not-force-close-on-invalid-seq-rst-without-direction-check.patch
nfc-hci-fix-out-of-bounds-read-in-hcp-header-parsing.patch
wireguard-send-append-trailer-after-expanding-head.patch
xfrm-ah-use-skb_to_full_sk-in-async-output-callbacks.patch
xfrm-esp-restore-combined-single-frag-length-gate.patch
xfrm-input-hold-netns-during-deferred-transport-reinjection.patch
xfrm-route-migrate-notifications-to-caller-s-netns.patch
Greg Kroah-Hartman [Thu, 4 Jun 2026 10:33:49 +0000 (12:33 +0200)]
5.10-stable patches
added patches:
asoc-qcom-q6asm-dai-close-stream-only-when-running.patch
asoc-qcom-q6asm-dai-do-not-set-stream-state-in-event-and-trigger-callbacks.patch
asoc-qcom-q6asm-dai-fix-error-handling-in-prepare-and-set_params.patch
bpf-sockmap-fix-tail-fragment-offset-in-bpf_msg_push_data.patch
hid-wacom-fix-oob-write-in-wacom_hid_set_device_mode.patch
iommu-debugobjects-avoid-gcc-16.1-section-mismatch-warnings.patch
ip6-vti-use-ip6_tnl.net-in-vti6_changelink.patch
ip6-vti-use-ip6_tnl.net-in-vti6_siocdevprivate.patch
ipv6-exthdrs-refresh-nh-pointer-after-ipv6_hop_jumbo.patch
ipv6-validate-extension-header-length-before-copying-to-cmsg.patch
macsec-fix-replay-protection-at-xpn-lower-pn-wrap.patch
netfilter-conntrack-tcp-do-not-force-close-on-invalid-seq-rst-without-direction-check.patch
nfc-hci-fix-out-of-bounds-read-in-hcp-header-parsing.patch
wireguard-send-append-trailer-after-expanding-head.patch
xfrm-ah-use-skb_to_full_sk-in-async-output-callbacks.patch
xfrm-esp-restore-combined-single-frag-length-gate.patch
xfrm-route-migrate-notifications-to-caller-s-netns.patch
Greg Kroah-Hartman [Thu, 4 Jun 2026 10:17:52 +0000 (12:17 +0200)]
drop some patches that broke the builds
Greg Kroah-Hartman [Thu, 4 Jun 2026 08:54:47 +0000 (10:54 +0200)]
7.0-stable patches
added patches:
auxdisplay-line-display-fix-oob-read-on-zero-length-message_store.patch
bluetooth-hci_conn-fix-memory-leak-in-hci_le_big_terminate.patch
bluetooth-hci_qca-use-100-ms-ssr-delay-for-rampatch-and-nvm-loading.patch
bluetooth-hci_sync-fix-uaf-in-hci_le_create_cis_sync.patch
bluetooth-hidp-fix-missing-length-checks-in-hidp_input_report.patch
bluetooth-iso-fix-uaf-in-iso_recv_frame.patch
bluetooth-iso-serialize-iso_sock_clear_timer-with-socket-lock.patch
bluetooth-l2cap-fix-chan-ref-leak-in-l2cap_chan_timeout-on-conn.patch
bluetooth-l2cap-use-chan-timer-to-close-channels-in-cleanup_listen.patch
disable-wattribute-alias-for-clang-23-and-newer.patch
gpio-shared-fix-deadlock-on-shared-proxy-s-parent-removal.patch
gpio-shared-fix-lockdep-false-positive-by-removing-unneeded-lock.patch
gpio-shared-undo-the-vote-of-the-proxy-on-gpio-free.patch
hpfs-fix-a-crash-if-hpfs_map_dnode_bitmap-fails.patch
i2c-davinci-fix-division-by-zero-on-missing-clock-frequency.patch
iio-adc-ad4695-fix-call-ordering-in-offload-buffer-postenable.patch
iio-adc-mt6359-fix-unchecked-return-value-in-mt6358_read_imp.patch
iio-adc-npcm-fix-unbalanced-clk_disable_unprepare.patch
iio-adc-nxp-sar-adc-avoid-division-by-zero.patch
iio-adc-nxp-sar-adc-fix-division-by-zero-in-write_raw.patch
iio-adc-nxp-sar-adc-zero-initialize-dma_slave_config.patch
iio-adc-viperboard-fix-error-handling-in-vprbrd_iio_read_raw.patch
iio-adc-xilinx-xadc-fix-sequencer-mode-in-postdisable-for-dual-mux.patch
iio-buffer-fix-dma-fence-leak-in-iio_buffer_enqueue_dmabuf.patch
iio-buffer-hw-consumer-fix-use-after-free-in-error-path.patch
iio-chemical-mhz19b-reject-oversized-serial-replies.patch
iio-chemical-scd30-fix-division-by-zero-in-write_raw.patch
iio-dac-ad3530r-fix-ad3531-ad3531r-powerdown-mode-strings.patch
iio-dac-ad5686-acquire-lock-when-doing-powerdown-control.patch
iio-dac-ad5686-fix-input-raw-value-check.patch
iio-dac-ad5686-fix-powerdown-control-on-dual-channel-devices.patch
iio-dac-ad5686-fix-ref-bit-initialization-for-single-channel-parts.patch
iio-dac-max5821-fix-return-value-check-in-powerdown-sync.patch
iio-fix-iio_multiply_value-use-in-iio_read_channel_processed_scale.patch
iio-gyro-adis16260-fix-division-by-zero-in-write_raw.patch
iio-gyro-itg3200-fix-i2c-read-into-the-wrong-stack-location.patch
iio-light-cm3323-fix-reg_conf-not-being-initialized-correctly.patch
iio-light-veml6070-fix-resource-leak-in-probe-error-path.patch
iio-magnetometer-st_magn-fix-default-drdy-pin-selection-for-lis2mdl.patch
iio-ssp_sensors-cancel-delayed-work_refresh-on-remove.patch
iio-temperature-tsys01-fix-broken-prom-checksum-validation.patch
input-elan_i2c-validate-firmware-size-before-use.patch
input-xpad-fix-out-of-bounds-access-for-share-button.patch
ipc-limit-next_id-allocation-to-the-valid-id-range.patch
kvm-arm64-correctly-cap-zcr_el2-provided-by-a-guest-hypervisor.patch
kvm-arm64-pmu-preserve-aarch32-counter-low-bits.patch
kvm-sev-check-psc-request-indices-against-the-actual-size-of-the-buffer.patch
kvm-sev-compute-the-correct-max-length-of-the-in-ghcb-scratch-area.patch
kvm-sev-don-t-explicitly-pass-psc-buffer-to-snp_begin_psc.patch
kvm-sev-ignore-port-i-o-requests-of-length-0.patch
kvm-sev-require-in-ghcb-scratch-area-if-ghcb-v2-is-in-use.patch
kvm-sev-use-read_once-when-reading-entries-indices-from-psc-buffer.patch
kvm-sev-use-the-size-of-the-psc-header-as-the-minimum-size-for-psc-requests.patch
kvm-sev-warn-if-kvm-attempts-to-setup-scratch-area-with-min_len-0.patch
kvm-svm-flush-the-current-tlb-when-transitioning-from-xavic-x2avic.patch
memfd-deny-writeable-mappings-when-implying-seal_write.patch
mm-damon-sysfs-schemes-delete-tried-region-in-regions_rmdirs.patch
mm-memcontrol-propagate-nmi-slab-stats-to-memcg-vmstats.patch
mm-migrate_device-fix-pgtable-leak-in-migrate_vma_insert_huge_pmd_page.patch
mm-rmap-initialize-nr_pages-to-1-at-loop-start-in-try_to_unmap_one.patch
mm-vmalloc-do-not-trigger-bug-on-bh-disabled-context.patch
parport-fix-race-between-port-and-client-registration.patch
rust_binder-avoid-calling-pending_oneway_finished-on-tf_update_txn.patch
rust_binder-avoid-holding-lock-when-dropping-delivered_death.patch
smb-client-fix-uninitialized-variable-in-smb2_writev_callback.patch
usb-cdc-acm-fix-bit-overlap-and-move-quirk-definitions-to-header.patch
usb-cdns3-gadget-fix-request-skipping-after-clearing-halt.patch
usb-cdns3-plat-fix-leaked-usb2_phy-initialization-on-usb3_phy-acquisition-failure.patch
usb-cdns3-plat-fix-unbalanced-pm_runtime_forbid-call-permanently-leaks-the-runtime-pm-usage-counter-across-bind-unbind-cycles.patch
usb-dwc2-fix-use-after-free-in-debug-code.patch
usb-serial-omninet-fix-memory-corruption-with-small-endpoint.patch
x86-ftrace-relocate-rip-relative-percpu-refs-in-dynamic-trampolines.patch
zram-fix-use-after-free-in-zram_writeback_endio.patch
Greg Kroah-Hartman [Thu, 4 Jun 2026 08:54:04 +0000 (10:54 +0200)]
6.18-stable patches
added patches:
auxdisplay-line-display-fix-oob-read-on-zero-length-message_store.patch
bluetooth-hci_conn-fix-memory-leak-in-hci_le_big_terminate.patch
bluetooth-hci_qca-use-100-ms-ssr-delay-for-rampatch-and-nvm-loading.patch
bluetooth-hci_sync-fix-uaf-in-hci_le_create_cis_sync.patch
bluetooth-hidp-fix-missing-length-checks-in-hidp_input_report.patch
bluetooth-iso-fix-uaf-in-iso_recv_frame.patch
bluetooth-iso-serialize-iso_sock_clear_timer-with-socket-lock.patch
bluetooth-l2cap-fix-chan-ref-leak-in-l2cap_chan_timeout-on-conn.patch
bluetooth-l2cap-use-chan-timer-to-close-channels-in-cleanup_listen.patch
disable-wattribute-alias-for-clang-23-and-newer.patch
hpfs-fix-a-crash-if-hpfs_map_dnode_bitmap-fails.patch
i2c-davinci-fix-division-by-zero-on-missing-clock-frequency.patch
iio-adc-ad4695-fix-call-ordering-in-offload-buffer-postenable.patch
iio-adc-mt6359-fix-unchecked-return-value-in-mt6358_read_imp.patch
iio-adc-npcm-fix-unbalanced-clk_disable_unprepare.patch
iio-adc-viperboard-fix-error-handling-in-vprbrd_iio_read_raw.patch
iio-adc-xilinx-xadc-fix-sequencer-mode-in-postdisable-for-dual-mux.patch
iio-buffer-fix-dma-fence-leak-in-iio_buffer_enqueue_dmabuf.patch
iio-buffer-hw-consumer-fix-use-after-free-in-error-path.patch
iio-chemical-mhz19b-reject-oversized-serial-replies.patch
iio-chemical-scd30-fix-division-by-zero-in-write_raw.patch
iio-dac-ad3530r-fix-ad3531-ad3531r-powerdown-mode-strings.patch
iio-dac-ad5686-acquire-lock-when-doing-powerdown-control.patch
iio-dac-ad5686-fix-input-raw-value-check.patch
iio-dac-ad5686-fix-powerdown-control-on-dual-channel-devices.patch
iio-dac-ad5686-fix-ref-bit-initialization-for-single-channel-parts.patch
iio-dac-max5821-fix-return-value-check-in-powerdown-sync.patch
iio-fix-iio_multiply_value-use-in-iio_read_channel_processed_scale.patch
iio-gyro-adis16260-fix-division-by-zero-in-write_raw.patch
iio-gyro-itg3200-fix-i2c-read-into-the-wrong-stack-location.patch
iio-light-cm3323-fix-reg_conf-not-being-initialized-correctly.patch
iio-light-veml6070-fix-resource-leak-in-probe-error-path.patch
iio-magnetometer-st_magn-fix-default-drdy-pin-selection-for-lis2mdl.patch
iio-ssp_sensors-cancel-delayed-work_refresh-on-remove.patch
iio-temperature-tsys01-fix-broken-prom-checksum-validation.patch
input-elan_i2c-validate-firmware-size-before-use.patch
input-xpad-fix-out-of-bounds-access-for-share-button.patch
ipc-limit-next_id-allocation-to-the-valid-id-range.patch
kvm-arm64-correctly-cap-zcr_el2-provided-by-a-guest-hypervisor.patch
kvm-arm64-pmu-preserve-aarch32-counter-low-bits.patch
kvm-sev-check-psc-request-indices-against-the-actual-size-of-the-buffer.patch
kvm-sev-compute-the-correct-max-length-of-the-in-ghcb-scratch-area.patch
kvm-sev-don-t-explicitly-pass-psc-buffer-to-snp_begin_psc.patch
kvm-sev-ignore-port-i-o-requests-of-length-0.patch
kvm-sev-require-in-ghcb-scratch-area-if-ghcb-v2-is-in-use.patch
kvm-sev-use-read_once-when-reading-entries-indices-from-psc-buffer.patch
kvm-sev-use-the-size-of-the-psc-header-as-the-minimum-size-for-psc-requests.patch
kvm-sev-warn-if-kvm-attempts-to-setup-scratch-area-with-min_len-0.patch
kvm-svm-flush-the-current-tlb-when-transitioning-from-xavic-x2avic.patch
memfd-deny-writeable-mappings-when-implying-seal_write.patch
mm-damon-sysfs-schemes-delete-tried-region-in-regions_rmdirs.patch
mm-memcontrol-propagate-nmi-slab-stats-to-memcg-vmstats.patch
mm-rmap-initialize-nr_pages-to-1-at-loop-start-in-try_to_unmap_one.patch
parport-fix-race-between-port-and-client-registration.patch
rust_binder-avoid-calling-pending_oneway_finished-on-tf_update_txn.patch
rust_binder-avoid-holding-lock-when-dropping-delivered_death.patch
smb-client-fix-uninitialized-variable-in-smb2_writev_callback.patch
usb-cdc-acm-fix-bit-overlap-and-move-quirk-definitions-to-header.patch
usb-cdns3-gadget-fix-request-skipping-after-clearing-halt.patch
usb-cdns3-plat-fix-leaked-usb2_phy-initialization-on-usb3_phy-acquisition-failure.patch
usb-cdns3-plat-fix-unbalanced-pm_runtime_forbid-call-permanently-leaks-the-runtime-pm-usage-counter-across-bind-unbind-cycles.patch
usb-dwc2-fix-use-after-free-in-debug-code.patch
usb-serial-omninet-fix-memory-corruption-with-small-endpoint.patch
x86-ftrace-relocate-rip-relative-percpu-refs-in-dynamic-trampolines.patch
Greg Kroah-Hartman [Thu, 4 Jun 2026 08:53:31 +0000 (10:53 +0200)]
6.12-stable patches
added patches:
auxdisplay-line-display-fix-oob-read-on-zero-length-message_store.patch
bluetooth-hci_sync-fix-uaf-in-hci_le_create_cis_sync.patch
bluetooth-hidp-fix-missing-length-checks-in-hidp_input_report.patch
bluetooth-iso-fix-uaf-in-iso_recv_frame.patch
bluetooth-iso-serialize-iso_sock_clear_timer-with-socket-lock.patch
bluetooth-l2cap-fix-chan-ref-leak-in-l2cap_chan_timeout-on-conn.patch
bluetooth-l2cap-use-chan-timer-to-close-channels-in-cleanup_listen.patch
disable-wattribute-alias-for-clang-23-and-newer.patch
hpfs-fix-a-crash-if-hpfs_map_dnode_bitmap-fails.patch
iio-adc-mt6359-fix-unchecked-return-value-in-mt6358_read_imp.patch
iio-adc-npcm-fix-unbalanced-clk_disable_unprepare.patch
iio-adc-viperboard-fix-error-handling-in-vprbrd_iio_read_raw.patch
iio-adc-xilinx-xadc-fix-sequencer-mode-in-postdisable-for-dual-mux.patch
iio-buffer-fix-dma-fence-leak-in-iio_buffer_enqueue_dmabuf.patch
iio-buffer-hw-consumer-fix-use-after-free-in-error-path.patch
iio-dac-ad5686-acquire-lock-when-doing-powerdown-control.patch
iio-dac-ad5686-fix-input-raw-value-check.patch
iio-dac-max5821-fix-return-value-check-in-powerdown-sync.patch
iio-gyro-adis16260-fix-division-by-zero-in-write_raw.patch
iio-gyro-itg3200-fix-i2c-read-into-the-wrong-stack-location.patch
iio-light-cm3323-fix-reg_conf-not-being-initialized-correctly.patch
iio-magnetometer-st_magn-fix-default-drdy-pin-selection-for-lis2mdl.patch
iio-ssp_sensors-cancel-delayed-work_refresh-on-remove.patch
iio-temperature-tsys01-fix-broken-prom-checksum-validation.patch
input-elan_i2c-validate-firmware-size-before-use.patch
input-xpad-fix-out-of-bounds-access-for-share-button.patch
ipc-limit-next_id-allocation-to-the-valid-id-range.patch
kvm-arm64-pmu-preserve-aarch32-counter-low-bits.patch
kvm-sev-check-psc-request-indices-against-the-actual-size-of-the-buffer.patch
kvm-sev-compute-the-correct-max-length-of-the-in-ghcb-scratch-area.patch
kvm-sev-don-t-explicitly-pass-psc-buffer-to-snp_begin_psc.patch
kvm-sev-require-in-ghcb-scratch-area-if-ghcb-v2-is-in-use.patch
kvm-sev-use-read_once-when-reading-entries-indices-from-psc-buffer.patch
kvm-sev-use-the-size-of-the-psc-header-as-the-minimum-size-for-psc-requests.patch
kvm-sev-warn-if-kvm-attempts-to-setup-scratch-area-with-min_len-0.patch
kvm-svm-flush-the-current-tlb-when-transitioning-from-xavic-x2avic.patch
parport-fix-race-between-port-and-client-registration.patch
usb-cdc-acm-fix-bit-overlap-and-move-quirk-definitions-to-header.patch
usb-cdns3-gadget-fix-request-skipping-after-clearing-halt.patch
usb-cdns3-plat-fix-leaked-usb2_phy-initialization-on-usb3_phy-acquisition-failure.patch
usb-cdns3-plat-fix-unbalanced-pm_runtime_forbid-call-permanently-leaks-the-runtime-pm-usage-counter-across-bind-unbind-cycles.patch
usb-dwc2-fix-use-after-free-in-debug-code.patch
usb-serial-omninet-fix-memory-corruption-with-small-endpoint.patch
x86-ftrace-relocate-rip-relative-percpu-refs-in-dynamic-trampolines.patch
Greg Kroah-Hartman [Thu, 4 Jun 2026 08:52:57 +0000 (10:52 +0200)]
6.6-stable patches
added patches:
auxdisplay-line-display-fix-oob-read-on-zero-length-message_store.patch
bluetooth-hidp-fix-missing-length-checks-in-hidp_input_report.patch
bluetooth-iso-fix-uaf-in-iso_recv_frame.patch
bluetooth-iso-serialize-iso_sock_clear_timer-with-socket-lock.patch
bluetooth-l2cap-fix-chan-ref-leak-in-l2cap_chan_timeout-on-conn.patch
bluetooth-l2cap-use-chan-timer-to-close-channels-in-cleanup_listen.patch
hpfs-fix-a-crash-if-hpfs_map_dnode_bitmap-fails.patch
iio-adc-viperboard-fix-error-handling-in-vprbrd_iio_read_raw.patch
iio-adc-xilinx-xadc-fix-sequencer-mode-in-postdisable-for-dual-mux.patch
iio-buffer-hw-consumer-fix-use-after-free-in-error-path.patch
iio-dac-ad5686-acquire-lock-when-doing-powerdown-control.patch
iio-dac-ad5686-fix-input-raw-value-check.patch
iio-dac-max5821-fix-return-value-check-in-powerdown-sync.patch
iio-gyro-itg3200-fix-i2c-read-into-the-wrong-stack-location.patch
iio-light-cm3323-fix-reg_conf-not-being-initialized-correctly.patch
iio-magnetometer-st_magn-fix-default-drdy-pin-selection-for-lis2mdl.patch
iio-ssp_sensors-cancel-delayed-work_refresh-on-remove.patch
iio-temperature-tsys01-fix-broken-prom-checksum-validation.patch
input-elan_i2c-validate-firmware-size-before-use.patch
input-xpad-fix-out-of-bounds-access-for-share-button.patch
ipc-limit-next_id-allocation-to-the-valid-id-range.patch
kvm-arm64-pmu-preserve-aarch32-counter-low-bits.patch
kvm-sev-warn-if-kvm-attempts-to-setup-scratch-area-with-min_len-0.patch
kvm-svm-flush-the-current-tlb-when-transitioning-from-xavic-x2avic.patch
parport-fix-race-between-port-and-client-registration.patch
usb-cdc-acm-fix-bit-overlap-and-move-quirk-definitions-to-header.patch
usb-cdns3-gadget-fix-request-skipping-after-clearing-halt.patch
usb-cdns3-plat-fix-unbalanced-pm_runtime_forbid-call-permanently-leaks-the-runtime-pm-usage-counter-across-bind-unbind-cycles.patch
usb-dwc2-fix-use-after-free-in-debug-code.patch
usb-serial-omninet-fix-memory-corruption-with-small-endpoint.patch
Greg Kroah-Hartman [Thu, 4 Jun 2026 08:52:30 +0000 (10:52 +0200)]
6.1-stable patches
added patches:
auxdisplay-line-display-fix-oob-read-on-zero-length-message_store.patch
bluetooth-hidp-fix-missing-length-checks-in-hidp_input_report.patch
bluetooth-iso-fix-uaf-in-iso_recv_frame.patch
bluetooth-iso-serialize-iso_sock_clear_timer-with-socket-lock.patch
bluetooth-l2cap-fix-chan-ref-leak-in-l2cap_chan_timeout-on-conn.patch
bluetooth-l2cap-use-chan-timer-to-close-channels-in-cleanup_listen.patch
hpfs-fix-a-crash-if-hpfs_map_dnode_bitmap-fails.patch
iio-adc-viperboard-fix-error-handling-in-vprbrd_iio_read_raw.patch
iio-adc-xilinx-xadc-fix-sequencer-mode-in-postdisable-for-dual-mux.patch
iio-buffer-hw-consumer-fix-use-after-free-in-error-path.patch
iio-dac-ad5686-acquire-lock-when-doing-powerdown-control.patch
iio-dac-ad5686-fix-input-raw-value-check.patch
iio-dac-max5821-fix-return-value-check-in-powerdown-sync.patch
iio-gyro-itg3200-fix-i2c-read-into-the-wrong-stack-location.patch
iio-light-cm3323-fix-reg_conf-not-being-initialized-correctly.patch
iio-magnetometer-st_magn-fix-default-drdy-pin-selection-for-lis2mdl.patch
iio-ssp_sensors-cancel-delayed-work_refresh-on-remove.patch
iio-temperature-tsys01-fix-broken-prom-checksum-validation.patch
input-elan_i2c-validate-firmware-size-before-use.patch
ipc-limit-next_id-allocation-to-the-valid-id-range.patch
kvm-sev-warn-if-kvm-attempts-to-setup-scratch-area-with-min_len-0.patch
parport-fix-race-between-port-and-client-registration.patch
usb-cdc-acm-fix-bit-overlap-and-move-quirk-definitions-to-header.patch
usb-cdns3-gadget-fix-request-skipping-after-clearing-halt.patch
usb-cdns3-plat-fix-unbalanced-pm_runtime_forbid-call-permanently-leaks-the-runtime-pm-usage-counter-across-bind-unbind-cycles.patch
usb-dwc2-fix-use-after-free-in-debug-code.patch
usb-serial-omninet-fix-memory-corruption-with-small-endpoint.patch
Greg Kroah-Hartman [Thu, 4 Jun 2026 08:51:50 +0000 (10:51 +0200)]
5.15-stable patches
added patches:
bluetooth-hidp-fix-missing-length-checks-in-hidp_input_report.patch
bluetooth-l2cap-fix-chan-ref-leak-in-l2cap_chan_timeout-on-conn.patch
hpfs-fix-a-crash-if-hpfs_map_dnode_bitmap-fails.patch
iio-adc-viperboard-fix-error-handling-in-vprbrd_iio_read_raw.patch
iio-adc-xilinx-xadc-fix-sequencer-mode-in-postdisable-for-dual-mux.patch
iio-buffer-hw-consumer-fix-use-after-free-in-error-path.patch
iio-dac-ad5686-acquire-lock-when-doing-powerdown-control.patch
iio-dac-ad5686-fix-input-raw-value-check.patch
iio-dac-max5821-fix-return-value-check-in-powerdown-sync.patch
iio-gyro-itg3200-fix-i2c-read-into-the-wrong-stack-location.patch
iio-light-cm3323-fix-reg_conf-not-being-initialized-correctly.patch
iio-magnetometer-st_magn-fix-default-drdy-pin-selection-for-lis2mdl.patch
iio-ssp_sensors-cancel-delayed-work_refresh-on-remove.patch
iio-temperature-tsys01-fix-broken-prom-checksum-validation.patch
input-elan_i2c-validate-firmware-size-before-use.patch
ipc-limit-next_id-allocation-to-the-valid-id-range.patch
parport-fix-race-between-port-and-client-registration.patch
usb-cdns3-gadget-fix-request-skipping-after-clearing-halt.patch
usb-cdns3-plat-fix-unbalanced-pm_runtime_forbid-call-permanently-leaks-the-runtime-pm-usage-counter-across-bind-unbind-cycles.patch
usb-dwc2-fix-use-after-free-in-debug-code.patch
usb-serial-omninet-fix-memory-corruption-with-small-endpoint.patch
Greg Kroah-Hartman [Thu, 4 Jun 2026 08:51:06 +0000 (10:51 +0200)]
5.10-stable patches
added patches:
bluetooth-hidp-fix-missing-length-checks-in-hidp_input_report.patch
bluetooth-l2cap-fix-chan-ref-leak-in-l2cap_chan_timeout-on-conn.patch
hpfs-fix-a-crash-if-hpfs_map_dnode_bitmap-fails.patch
iio-adc-viperboard-fix-error-handling-in-vprbrd_iio_read_raw.patch
iio-adc-xilinx-xadc-fix-sequencer-mode-in-postdisable-for-dual-mux.patch
iio-buffer-hw-consumer-fix-use-after-free-in-error-path.patch
iio-dac-ad5686-fix-input-raw-value-check.patch
iio-dac-max5821-fix-return-value-check-in-powerdown-sync.patch
iio-gyro-itg3200-fix-i2c-read-into-the-wrong-stack-location.patch
iio-light-cm3323-fix-reg_conf-not-being-initialized-correctly.patch
iio-ssp_sensors-cancel-delayed-work_refresh-on-remove.patch
iio-temperature-tsys01-fix-broken-prom-checksum-validation.patch
input-elan_i2c-validate-firmware-size-before-use.patch
ipc-limit-next_id-allocation-to-the-valid-id-range.patch
parport-fix-race-between-port-and-client-registration.patch
usb-dwc2-fix-use-after-free-in-debug-code.patch
usb-serial-omninet-fix-memory-corruption-with-small-endpoint.patch
Greg Kroah-Hartman [Thu, 4 Jun 2026 08:17:40 +0000 (10:17 +0200)]
7.0-stable patches
added patches:
bluetooth-btusb-allow-firmware-re-download-when-version-matches.patch
hid-quirks-add-always_poll-quirk-for-sigmachip-usb-mouse.patch
iio-imu-adis16550-fix-stack-leak-in-trigger-handler.patch
iio-imu-st_lsm6dsx-fix-stack-leak-in-tagged-fifo-buffer.patch
iio-pressure-bmp280-fix-stack-leak-in-bmp580-trigger-handler.patch
input-ims-pcu-fix-usb_free_coherent-size-in-ims_pcu_buffers_free.patch
input-usbtouchscreen-clamp-nexio-data_len-x_len-to-urb-buffer-size.patch
media-rc-igorplugusb-fix-control-request-setup-packet.patch
usb-serial-cypress_m8-fix-memory-corruption-with-small-endpoint.patch
usb-serial-safe_serial-fix-memory-corruption-with-small-endpoint.patch
usb-typec-altmodes-displayport-validate-count-before-reading-status-update-vdo.patch
usb-typec-tcpm-bound-altmode_desc-per-iteration-in-svdm_consume_modes.patch
usb-typec-tcpm-tcpci_maxim-validate-header-ndo-against-rx_byte_cnt.patch
usb-typec-tcpm-validate-vdo-count-in-discover-identity-ack-handlers.patch
usb-typec-ucsi-ccg-reject-firmware-images-without-a-record-header.patch
usb-typec-ucsi-displayport-nak-dp_cmd_configure-without-a-payload-vdo.patch
usb-typec-ucsi-validate-connector-number-in-ucsi_connector_change.patch
usb-typec-wcove-don-t-write-past-struct-pd_message-in-wcove_read_rx_buffer.patch
Greg Kroah-Hartman [Thu, 4 Jun 2026 08:17:11 +0000 (10:17 +0200)]
6.18-stable patches
added patches:
bluetooth-btusb-allow-firmware-re-download-when-version-matches.patch
hid-quirks-add-always_poll-quirk-for-sigmachip-usb-mouse.patch
iio-imu-adis16550-fix-stack-leak-in-trigger-handler.patch
iio-imu-st_lsm6dsx-fix-stack-leak-in-tagged-fifo-buffer.patch
iio-pressure-bmp280-fix-stack-leak-in-bmp580-trigger-handler.patch
input-ims-pcu-fix-usb_free_coherent-size-in-ims_pcu_buffers_free.patch
input-usbtouchscreen-clamp-nexio-data_len-x_len-to-urb-buffer-size.patch
media-rc-igorplugusb-fix-control-request-setup-packet.patch
usb-serial-safe_serial-fix-memory-corruption-with-small-endpoint.patch
usb-typec-altmodes-displayport-validate-count-before-reading-status-update-vdo.patch
usb-typec-tcpm-bound-altmode_desc-per-iteration-in-svdm_consume_modes.patch
usb-typec-tcpm-tcpci_maxim-validate-header-ndo-against-rx_byte_cnt.patch
usb-typec-tcpm-validate-vdo-count-in-discover-identity-ack-handlers.patch
usb-typec-ucsi-ccg-reject-firmware-images-without-a-record-header.patch
usb-typec-ucsi-displayport-nak-dp_cmd_configure-without-a-payload-vdo.patch
usb-typec-ucsi-validate-connector-number-in-ucsi_connector_change.patch
usb-typec-wcove-don-t-write-past-struct-pd_message-in-wcove_read_rx_buffer.patch
Greg Kroah-Hartman [Thu, 4 Jun 2026 08:16:45 +0000 (10:16 +0200)]
6.12-stable patches
added patches:
bluetooth-btusb-allow-firmware-re-download-when-version-matches.patch
hid-quirks-add-always_poll-quirk-for-sigmachip-usb-mouse.patch
iio-imu-st_lsm6dsx-fix-stack-leak-in-tagged-fifo-buffer.patch
input-ims-pcu-fix-usb_free_coherent-size-in-ims_pcu_buffers_free.patch
input-usbtouchscreen-clamp-nexio-data_len-x_len-to-urb-buffer-size.patch
media-rc-igorplugusb-fix-control-request-setup-packet.patch
usb-serial-safe_serial-fix-memory-corruption-with-small-endpoint.patch
usb-typec-altmodes-displayport-validate-count-before-reading-status-update-vdo.patch
usb-typec-tcpm-bound-altmode_desc-per-iteration-in-svdm_consume_modes.patch
usb-typec-tcpm-tcpci_maxim-validate-header-ndo-against-rx_byte_cnt.patch
usb-typec-tcpm-validate-vdo-count-in-discover-identity-ack-handlers.patch
usb-typec-ucsi-ccg-reject-firmware-images-without-a-record-header.patch
usb-typec-ucsi-displayport-nak-dp_cmd_configure-without-a-payload-vdo.patch
usb-typec-ucsi-validate-connector-number-in-ucsi_connector_change.patch
usb-typec-wcove-don-t-write-past-struct-pd_message-in-wcove_read_rx_buffer.patch
Greg Kroah-Hartman [Thu, 4 Jun 2026 08:16:21 +0000 (10:16 +0200)]
6.6-stable patches
added patches:
bluetooth-btusb-allow-firmware-re-download-when-version-matches.patch
hid-quirks-add-always_poll-quirk-for-sigmachip-usb-mouse.patch
iio-imu-st_lsm6dsx-fix-stack-leak-in-tagged-fifo-buffer.patch
input-ims-pcu-fix-usb_free_coherent-size-in-ims_pcu_buffers_free.patch
input-usbtouchscreen-clamp-nexio-data_len-x_len-to-urb-buffer-size.patch
media-rc-igorplugusb-fix-control-request-setup-packet.patch
usb-serial-safe_serial-fix-memory-corruption-with-small-endpoint.patch
usb-typec-altmodes-displayport-validate-count-before-reading-status-update-vdo.patch
usb-typec-tcpm-tcpci_maxim-validate-header-ndo-against-rx_byte_cnt.patch
usb-typec-ucsi-ccg-reject-firmware-images-without-a-record-header.patch
usb-typec-ucsi-displayport-nak-dp_cmd_configure-without-a-payload-vdo.patch
usb-typec-ucsi-validate-connector-number-in-ucsi_connector_change.patch
usb-typec-wcove-don-t-write-past-struct-pd_message-in-wcove_read_rx_buffer.patch
Greg Kroah-Hartman [Thu, 4 Jun 2026 08:15:56 +0000 (10:15 +0200)]
6.1-stable patches
added patches:
bluetooth-btusb-allow-firmware-re-download-when-version-matches.patch
hid-quirks-add-always_poll-quirk-for-sigmachip-usb-mouse.patch
iio-imu-st_lsm6dsx-fix-stack-leak-in-tagged-fifo-buffer.patch
input-ims-pcu-fix-usb_free_coherent-size-in-ims_pcu_buffers_free.patch
input-usbtouchscreen-clamp-nexio-data_len-x_len-to-urb-buffer-size.patch
usb-serial-safe_serial-fix-memory-corruption-with-small-endpoint.patch
usb-typec-altmodes-displayport-validate-count-before-reading-status-update-vdo.patch
usb-typec-ucsi-ccg-reject-firmware-images-without-a-record-header.patch
usb-typec-ucsi-displayport-nak-dp_cmd_configure-without-a-payload-vdo.patch
usb-typec-ucsi-validate-connector-number-in-ucsi_connector_change.patch
usb-typec-wcove-don-t-write-past-struct-pd_message-in-wcove_read_rx_buffer.patch
Greg Kroah-Hartman [Thu, 4 Jun 2026 08:15:29 +0000 (10:15 +0200)]
5.15-stable patches
added patches:
bluetooth-btusb-allow-firmware-re-download-when-version-matches.patch
iio-imu-st_lsm6dsx-fix-stack-leak-in-tagged-fifo-buffer.patch
input-ims-pcu-fix-usb_free_coherent-size-in-ims_pcu_buffers_free.patch
input-usbtouchscreen-clamp-nexio-data_len-x_len-to-urb-buffer-size.patch
usb-serial-safe_serial-fix-memory-corruption-with-small-endpoint.patch
usb-typec-altmodes-displayport-validate-count-before-reading-status-update-vdo.patch
usb-typec-ucsi-ccg-reject-firmware-images-without-a-record-header.patch
usb-typec-ucsi-displayport-nak-dp_cmd_configure-without-a-payload-vdo.patch
usb-typec-wcove-don-t-write-past-struct-pd_message-in-wcove_read_rx_buffer.patch
Greg Kroah-Hartman [Thu, 4 Jun 2026 08:14:56 +0000 (10:14 +0200)]
5.10-stable patches
added patches:
bluetooth-btusb-allow-firmware-re-download-when-version-matches.patch
iio-imu-st_lsm6dsx-fix-stack-leak-in-tagged-fifo-buffer.patch
input-ims-pcu-fix-usb_free_coherent-size-in-ims_pcu_buffers_free.patch
input-usbtouchscreen-clamp-nexio-data_len-x_len-to-urb-buffer-size.patch
usb-serial-safe_serial-fix-memory-corruption-with-small-endpoint.patch
usb-typec-altmodes-displayport-validate-count-before-reading-status-update-vdo.patch
usb-typec-ucsi-ccg-reject-firmware-images-without-a-record-header.patch
usb-typec-ucsi-displayport-nak-dp_cmd_configure-without-a-payload-vdo.patch
usb-typec-wcove-don-t-write-past-struct-pd_message-in-wcove_read_rx_buffer.patch
Sasha Levin [Thu, 4 Jun 2026 00:05:58 +0000 (20:05 -0400)]
Fixes for all trees
Signed-off-by: Sasha Levin <sashal@kernel.org>
Sasha Levin [Wed, 3 Jun 2026 15:14:13 +0000 (11:14 -0400)]
Fixes for all trees
Signed-off-by: Sasha Levin <sashal@kernel.org>
Sasha Levin [Wed, 3 Jun 2026 01:32:16 +0000 (21:32 -0400)]
Fixes for all trees
Signed-off-by: Sasha Levin <sashal@kernel.org>
Sasha Levin [Tue, 2 Jun 2026 18:20:52 +0000 (14:20 -0400)]
Fixes for all trees
Signed-off-by: Sasha Levin <sashal@kernel.org>
Greg Kroah-Hartman [Mon, 1 Jun 2026 15:56:04 +0000 (17:56 +0200)]
Linux 7.0.11
Greg Kroah-Hartman [Mon, 1 Jun 2026 15:51:35 +0000 (17:51 +0200)]
Linux 6.18.34
Greg Kroah-Hartman [Mon, 1 Jun 2026 15:48:42 +0000 (17:48 +0200)]
Linux 6.12.92
Greg Kroah-Hartman [Mon, 1 Jun 2026 15:44:33 +0000 (17:44 +0200)]
Linux 6.6.142
Greg Kroah-Hartman [Mon, 1 Jun 2026 15:40:40 +0000 (17:40 +0200)]
Linux 6.1.175
Greg Kroah-Hartman [Mon, 1 Jun 2026 15:36:27 +0000 (17:36 +0200)]
Linux 5.15.209
Greg Kroah-Hartman [Mon, 1 Jun 2026 15:32:06 +0000 (17:32 +0200)]
Linux 5.10.258
Greg Kroah-Hartman [Mon, 1 Jun 2026 15:22:42 +0000 (17:22 +0200)]
drop i3c patch from all branches
Greg Kroah-Hartman [Mon, 1 Jun 2026 15:15:57 +0000 (17:15 +0200)]
drop queue-6.12/sched-deadline-always-stop-dl-server-before-changing.patch
Greg Kroah-Hartman [Mon, 1 Jun 2026 15:14:36 +0000 (17:14 +0200)]
drop a 5.10 patch
Sasha Levin [Mon, 1 Jun 2026 01:50:02 +0000 (21:50 -0400)]
drop 9 items based on RC review feedback
Dropped patches:
- "xfrm: Wait for RCU readers during policy netns exit"
Queues: 6.1, 5.15, 5.10
Reason: partial fix; the required follow-up
3e5241731847 ("xfrm: move
policy_bydst RCU sync from per-netns .exit to .pre_exit") is not
backportable before 6.12 (needs disable_work_sync()/.pre_exit). Shipping
alone introduces an O(N) grace-period netns-teardown OOM regression.
Report: https://lore.kernel.org/stable/
56652caf63e8db874a3ebd761ec134c003d4986c .camel@decadent.org.uk/
- "ASoC: SOF: topology: reject invalid vendor array size in token parser"
Queues: 5.10, 5.15, 6.1
Reason: signed/unsigned regression (asize is int; "asize < sizeof(*array)"
promotes negative asize to a large unsigned that passes the check),
yielding an attacker-controllable OOB read. Defect still present upstream;
patch author agrees. Wait for the corrected upstream fix.
Report: https://lore.kernel.org/stable/
daa0df3788560bd8759418d9c333e09c45368aa4 .camel@decadent.org.uk/
- "ALSA: usb-audio: Improve Focusrite sample rate filtering"
Queues: 6.1, 5.15
Reason: patch author requested the drop. 1 of a 3-patch series whose
benefit-delivering commit
38c322068a26 (QUIRK_FLAG_SKIP_IFACE_SETUP) was
not selected; removing VALIDATE_RATES gives no benefit and carries 1st Gen
Scarlett regression risk on these old branches.
Report: https://lore.kernel.org/stable/ahxQECPrGoTY10B3@m.b4.vu/
- "ALSA: usb-audio: Remove VALIDATE_RATES quirk for Focusrite devices" [dependency]
Queues: 5.15
Reason: functionally built on the dropped filtering patch above; dropping
it alone would remove rate validation atop the old filtering logic
(the regression the author warns about). 5.15 only (not queued in 6.1).
- "media: uvcvideo: Use heuristic to find stream entity"
Queues: 5.10
Reason: dropped as a pair with its regression-source commit below, mirroring
what upstream
3d9f32e02c2e ("media: uvcvideo: Create an ID namespace for
streaming output terminals") does (it reverts the heuristic).
Report: https://lore.kernel.org/stable/
136f03aa6f51bdfecc786e5278f5fd03b4a6966e .camel@decadent.org.uk/
- "media: uvcvideo: Mark invalid entities with id UVC_INVALID_ENTITY_ID" [dependency]
Queues: 5.10
Reason: this is the commit the heuristic above fixes; dropped together so
the regression is not re-exposed in 5.10.
- "ALSA: usb-audio: fix null pointer dereference on pointer cs_desc"
Queues: 5.10
Reason: the 5.10 backport returns 0 (silent success) instead of -ENXIO,
bypassing the validation: label in the monolithic set_sample_rate_v2v3();
diverges from upstream behavior. Backporter agreed and sent a corrected v2.
Report: https://lore.kernel.org/stable/
ca469f4a22fe4688bbf88c355d074ae5be16a621 .camel@decadent.org.uk/
- "KVM: nSVM: Sync NextRIP to cached vmcb12 after VMRUN of L2"
Queues: 5.10, 5.15
Reason: dead code in the 5.10/5.15 backports -- the inserted assignment sits
after "if (is_guest_mode(vcpu)) return EXIT_FASTPATH_NONE;", so it is
unreachable and the fix is a no-op. (6.1 backport is correct and is kept.)
Report: https://lore.kernel.org/stable/
5903b777c7688dd17f8e4eb173361c80ea0fff46 .camel@decadent.org.uk/
- "rxrpc: Fix key quota calculation for multitoken keys"
Queues: 5.10
Reason: incomplete backport -- rxrpc_preparse_xdr_rxk5() still uses a plain
"= datalen + toklen" (not "+="), so multitoken keys with an rxk5 token still
lose accumulated quota. rxk5 was removed upstream (
8a5dc321158fb ) before this
fix, so no 1:1 upstream hunk exists; re-queue once a complete backport is ready.
Report: https://lore.kernel.org/stable/
866e188244055e8b90d632cb82e2badb40946706 .camel@decadent.org.uk/
- "KVM: nSVM: Mark all of vmcb02 dirty when restoring nested state"
Queues: 5.10
Reason: harmless no-op on 5.10 -- the prerequisite
4995a3685f1b ("KVM: SVM:
Use a separate vmcb for the nested L2 guest") is absent, and the existing
nested_prepare_vmcb_control() already marks the single vmcb fully dirty right
after the inserted line. 5.10 only (5.15/6.1 have the prereq and are kept).
Report: https://lore.kernel.org/stable/
203134947f42d331eeb0f19c0849802c044103c7 .camel@decadent.org.uk/
- "netfilter: Exclude LEGACY TABLES on PREEMPT_RT." (+ x_tables table-removal-race cascade)
Queues: 6.12, 6.6, 6.1, 5.15
Reason: ships incomplete -- the Fixes: commit
25a8b88f000c ("netfilter: add
back NETFILTER_XTABLES dependencies", undefined-reference link errors) and
the promised selftest follow-up
3c3ab65f00eb were not backported. Because
9fce66583f06 carries Stable-dep-of:
b4597d5fd7d2 , the whole contiguous
netfilter x_tables table-removal-race series that depends on it is dropped as
a cascade. The independent block head
netfilter-x_tables-unregister-the-templates-first (
d338693d77857 ) is KEPT in
all four versions. Per-version cascade size: 6.12=8, 6.6=13, 6.1=13, 5.15=13.
Cascade commits (per version, contiguous block after and including
netfilter-exclude-legacy-tables-on-preempt_rt plus the Stable-dep-of:
b4597d5fd7d2 Kconfig-prep patches before it):
6c959fd5e173 ,
9fce66583f06 ,
527d6931473b ,
b4597d5fd7d2 ,
b7f0544d86d4 ,
92c603fa07bc ,
16bc4b6686b2 ,
27414ff1b287 (6.12);
plus
4654467dc7e1 ,
a9525c7f6219 ,
7ad269787b66 ,
749d4ef0868c ,
15fba562f7a9
(6.6/6.1/5.15); plus
e8d225b60026 (5.15 only); 5.15 lacks
16bc4b6686b2 .
Report: https://lore.kernel.org/stable/
b59b3ff3 -1279-4cee-a5d2-
aa4c5a7016b8 @kernel.org/
Report: https://lore.kernel.org/stable/
a8cd18fa -18da-4286-a704-
e7045d8d9531 @oracle.com/
Signed-off-by: Sasha Levin <sashal@kernel.org>
Sasha Levin [Sat, 30 May 2026 15:01:34 +0000 (11:01 -0400)]
drop 2 patches based on RC review feedback
Dropped patches:
- "drm/sun4i: backend: Fix error pointer dereference"
Queues: 5.15, 5.10
Reason: KernelCI clang-21 build break -- the backport inserts the
IS_ERR() check between two declarations in sun4i_backend_atomic_check(),
triggering -Werror,-Wdeclaration-after-statement on trees built with
-std=gnu89. 6.1 (gnu11, no such flag) is unaffected and retained.
Report: https://lore.kernel.org/stable/
178014594367 .7862.
7999857847041901052 @
330cfa3079ca /
- "bpf, arm32: Reject BPF-to-BPF calls and callbacks in the JIT"
Queues: 5.10
Reason: KernelCI build break -- references BPF_PSEUDO_FUNC at
arch/arm/net/bpf_jit_32.c:1612, but that symbol does not exist before
v5.13 (introduced by
69c087ba6225 ). 6.1 defines the symbol and is retained.
Report: https://lore.kernel.org/stable/
178014234420 .7843.
1328062815700584977 @
330cfa3079ca /
Signed-off-by: Sasha Levin <sashal@kernel.org>
Greg Kroah-Hartman [Sat, 30 May 2026 10:39:47 +0000 (12:39 +0200)]
7.0-stable patches
added patches:
security-keys-fix-missed-rcu-read-section-on-lookup.patch
Greg Kroah-Hartman [Sat, 30 May 2026 10:39:31 +0000 (12:39 +0200)]
6.18-stable patches
added patches:
security-keys-fix-missed-rcu-read-section-on-lookup.patch
Greg Kroah-Hartman [Sat, 30 May 2026 10:39:14 +0000 (12:39 +0200)]
6.12-stable patches
added patches:
security-keys-fix-missed-rcu-read-section-on-lookup.patch
Greg Kroah-Hartman [Sat, 30 May 2026 10:38:58 +0000 (12:38 +0200)]
6.6-stable patches
added patches:
security-keys-fix-missed-rcu-read-section-on-lookup.patch
Greg Kroah-Hartman [Sat, 30 May 2026 10:38:28 +0000 (12:38 +0200)]
6.1-stable patches
added patches:
security-keys-fix-missed-rcu-read-section-on-lookup.patch
Greg Kroah-Hartman [Sat, 30 May 2026 10:35:45 +0000 (12:35 +0200)]
fuzz cleanup
Greg Kroah-Hartman [Sat, 30 May 2026 10:31:19 +0000 (12:31 +0200)]
fix up some io_uring backports
Sasha Levin [Fri, 29 May 2026 19:15:05 +0000 (15:15 -0400)]
Fixes for all trees
Signed-off-by: Sasha Levin <sashal@kernel.org>
Sasha Levin [Fri, 29 May 2026 12:19:11 +0000 (08:19 -0400)]
Fixes for all trees
Signed-off-by: Sasha Levin <sashal@kernel.org>
Sasha Levin [Fri, 29 May 2026 11:59:49 +0000 (07:59 -0400)]
drop 4 patches based on RC review feedback
Dropped patches:
- "firmware: arm_ffa: bound partition_info_get_regs copies"
Queues: 6.12
Reason: -Werror,-Wincompatible-pointer-types build break on
stable-rc/linux-6.12.y (arm64 allmodconfig, clang-21); struct
ffa_partition_info.uuid is still u32[4] in 6.12, the uuid_t
conversion prerequisite
b7c9f32614f17 was not backported.
Report: https://lore.kernel.org/stable/
178001274428 .7152.
372661732178917650 @
330cfa3079ca /
- "firmware: arm_ffa: fix big-endian support in __ffa_partition_info_get_regs" [dependency]
Queues: 6.12
Reason: Stable-dep-of
3974ea193840 ; introduces the failing
uuid_copy(&buf->uuid, ...) line, so it must be dropped together
with the patch above.
- "net: shaper: reject handle IDs exceeding internal bit-width"
Queues: 7.0, 6.18
Reason: ynl tooling build break - adds 'scope: kernel' to
net_shaper.yaml but genetlink.yaml schema (additionalProperties:
False) has no 'scope' support; prerequisite
fbf5df34a4dbcd
("tools: ynl: add scope qualifier for definitions") is not queued.
Report: https://lore.kernel.org/stable/
d66f5c95 -ebc0-4c53-9852-
f73c790363f7 @leemhuis.info/
- "af_unix: Reject SIOCATMARK on non-stream sockets"
Queues: 6.1, 5.15, 5.10
Reason: defective backport of upstream
d119775f2bad - the
sk_type check was placed in unix_stream_read_generic() instead of
unix_ioctl()'s SIOCATMARK case, regressing blocking SOCK_SEQPACKET
recvmsg while not fixing the intended ioctl behavior (5.10 has no
SIOCATMARK/OOB support at all). Mirrors the revert already queued
for 6.6.
Report: https://lore.kernel.org/stable/
20260527094544 .
2344825 -1-guanwentao@uniontech.com/
Signed-off-by: Sasha Levin <sashal@kernel.org>
Sasha Levin [Thu, 28 May 2026 19:42:21 +0000 (15:42 -0400)]
Drop ipv6-route-unregister-netdevice-notifier-on-bpf-init.patch
Signed-off-by: Sasha Levin <sashal@kernel.org>
Sasha Levin [Thu, 28 May 2026 15:20:29 +0000 (11:20 -0400)]
Fixes for all trees
Signed-off-by: Sasha Levin <sashal@kernel.org>
Greg Kroah-Hartman [Thu, 28 May 2026 14:03:47 +0000 (16:03 +0200)]
drop drm patch
Greg Kroah-Hartman [Thu, 28 May 2026 14:00:20 +0000 (16:00 +0200)]
drop some patches
Greg Kroah-Hartman [Thu, 28 May 2026 13:51:48 +0000 (15:51 +0200)]
drop hwmon patches
Greg Kroah-Hartman [Thu, 28 May 2026 13:41:24 +0000 (15:41 +0200)]
drop some hwmon patches
Greg Kroah-Hartman [Thu, 28 May 2026 13:35:47 +0000 (15:35 +0200)]
drop queue-6.12/drm-v3d-release-indirect-csd-gem-reference-on-cpu-job-free.patch
Greg Kroah-Hartman [Thu, 28 May 2026 13:31:23 +0000 (15:31 +0200)]
drop some broken hwmon 5.10 patches
Greg Kroah-Hartman [Thu, 28 May 2026 12:14:08 +0000 (14:14 +0200)]
7.0-stable patches
added patches:
arm64-probes-handle-probes-on-hinted-conditional-branch-instructions.patch
asoc-codecs-pcm512x-fix-null-ptr-dereference-in-pcm512x_overclock_xxx_put.patch
batman-adv-bla-avoid-double-decrement-of-bla.num_requests.patch
batman-adv-bla-avoid-null-ptr-deref-for-claim-via-dropped-interface.patch
batman-adv-bla-fix-report_work-leak-on-backbone_gw-purge.patch
batman-adv-clear-current-gateway-during-teardown.patch
batman-adv-dat-handle-forward-allocation-error.patch
batman-adv-fix-fragment-reassembly-length-accounting.patch
batman-adv-fix-tp_meter-counter-underflow-during-shutdown.patch
batman-adv-frag-disallow-unicast-fragment-in-fragment.patch
batman-adv-iv-recover-ogm-scheduling-after-forward-packet-error.patch
batman-adv-mcast-fix-use-after-free-in-orig_node-rcu-release.patch
batman-adv-tp_meter-avoid-role-confusion-in-tp_list.patch
batman-adv-tp_meter-avoid-use-of-uninit-sender-vars.patch
batman-adv-tp_meter-directly-shut-down-timer-on-cleanup.patch
batman-adv-tp_meter-fix-race-condition-in-send-error-reporting.patch
batman-adv-tp_meter-fix-tp_vars-reference-leak-in-receiver-shutdown.patch
batman-adv-tt-avoid-empty-vlan-responses.patch
batman-adv-tt-fix-negative-last_changeset_len.patch
batman-adv-tt-fix-negative-tt_buff_len.patch
batman-adv-tt-fix-toctou-race-for-reported-vlans.patch
batman-adv-tt-prevent-tvlv-entry-number-overflow.patch
batman-adv-tt-reject-oversized-local-tvlv-buffers.patch
batman-adv-tvlv-abort-ogm-send-on-tvlv-append-failure.patch
batman-adv-tvlv-reject-oversized-tvlv-packets.patch
batman-adv-v-stop-ogmv2-on-disabled-interface.patch
cifs-fix-busy-dentry-used-after-unmounting.patch
cpufreq-intel_pstate-use-correct-scaling-factor-on-raptor-lake-e.patch
device-property-set-fwnode-secondary-to-null-in-fwnode_init.patch
drm-amd-display-fix-integer-overflow-in-bios_get_image.patch
drm-amd-display-validate-gpio-pin-lut-table-size-before-iterating.patch
drm-amd-display-validate-payload-length-and-link_index-in-dc_process_dmub_aux_transfer_async.patch
drm-amdgpu-vpe-force-collaborate-sync-after-trap.patch
drm-bridge-chipone-icn6211-use-devm_drm_bridge_add-in-i2c-probe.patch
drm-bridge-it66121-acquire-reset-gpio-in-probe.patch
drm-bridge-megachips-remove-bridge-when-irq-request-fails.patch
drm-i915-display-copy-color-pipeline-from-plane-in-the-primary-joiner-pipe.patch
drm-i915-psr-apply-intel-dpcd-workaround-when-sdp-on-prior-line-used.patch
drm-msm-fix-shrinker-deadlock.patch
drm-v3d-fix-use-after-free-of-cpu-job-query-arrays-on-error-path.patch
drm-v3d-release-indirect-csd-gem-reference-on-cpu-job-free.patch
drm-virtio-use-uninterruptible-resv-lock-for-plane-updates.patch
drm-xe-multi_queue-fix-secondary-queue-error-case.patch
fwctl-pds-validate-rpc-input-size-before-parsing.patch
hwmon-pmbus-adm1266-bounce-blackbox-records-through-a-protocol-sized-buffer.patch
hwmon-pmbus-adm1266-cap-pdio-scan-in-get_multiple-at-adm1266_pdio_nr.patch
hwmon-pmbus-adm1266-don-t-clobber-gpio-bits-before-pdio-read-in-get_multiple.patch
hwmon-pmbus-adm1266-include-pec-byte-in-pmbus_block_xfer-read-buffer.patch
hwmon-pmbus-adm1266-register-the-gpio_chip-after-pmbus_do_probe.patch
hwmon-pmbus-adm1266-register-the-nvmem-device-after-pmbus_do_probe.patch
hwmon-pmbus-adm1266-reject-implausible-blackbox-record_count.patch
hwmon-pmbus-adm1266-reject-short-block-read-responses-in-the-gpio-accessors.patch
hwmon-pmbus-adm1266-seed-timestamp-from-the-real-time-clock.patch
hwmon-pmbus-adm1266-serialize-gpio-pmbus-accesses-with-pmbus_lock.patch
hwmon-pmbus-adm1266-serialize-nvmem-blackbox-read-with-pmbus_lock.patch
hwmon-pmbus-adm1266-serialize-sequencer_state-debugfs-read-with-pmbus_lock.patch
i2c-tegra-fix-pm_runtime-leak-on-mutex_lock-failure.patch
kvm-arm64-vgic-free-private_irqs-when-init-fails-after-allocation.patch
kvm-arm64-vgic-its-reject-restored-dte-with-out-of-range-num_eventid_bits.patch
kvm-svm-disable-avic-ipi-virtualization-on-hygon-family-18h-erratum-1235.patch
loongarch-kprobes-use-larch_insn_text_copy-to-patch-instructions.patch
loongarch-remove-unused-code-to-avoid-build-warning.patch
mm-slub-hold-cpus_read_lock-around-flush_rcu_sheaves_on_cache.patch
phy-exynos5-usbdrd-fix-usb-2.0-hs-phy-tuning-values-for-exynos7870.patch
phy-qcom-edp-add-edp-dp-mode-switch-support.patch
phy-qcom-edp-fix-aux_cfg8-programming-for-dp-mode.patch
phy-qcom-edp-unify-generic-dp-edp-swing-and-pre-emphasis-tables.patch
phy-qcom-qmp-ufs-fix-kaanapali-phy-pll-lock-failure-after-sm8650-g4-fix.patch
phy-tegra-xusb-fix-per-pad-high-speed-termination-calibration.patch
rdma-siw-reject-mpa-fpdu-length-underflow-before-signed-receive-math.patch
riscv-kvm-return-sbi_err_failure-for-pmu_event_info-when-oom.patch
riscv-kvm-return-sbi_err_failure-for-pmu_snapshot_set_shmem-when-oom.patch
s390-cio-restore-gfp_dma-for-chsc-allocation.patch
s390-pai-disable-duplicate-read-of-kernel-pai-counter-value.patch
s390-pai-fix-missing-pai-counter-increments-under-heavy-load.patch
scsi-isci-fix-use-after-free-in-device-removal-path.patch
spi-ep93xx-fix-error-pointer-deref-after-dma-setup-failure.patch
spi-qup-fix-error-pointer-deref-after-dma-setup-failure.patch
spi-sprd-fix-error-pointer-deref-after-dma-setup-failure.patch
spi-ti-qspi-fix-use-after-free-after-dma-setup-failure.patch
tracing-do-not-call-map-ops-elt_free-if-elt_alloc-fails.patch
virt-sev-guest-explicitly-leak-pages-in-unknown-state.patch
Greg Kroah-Hartman [Thu, 28 May 2026 12:14:00 +0000 (14:14 +0200)]
6.18-stable patches
added patches:
arm64-probes-handle-probes-on-hinted-conditional-branch-instructions.patch
batman-adv-bla-avoid-double-decrement-of-bla.num_requests.patch
batman-adv-bla-avoid-null-ptr-deref-for-claim-via-dropped-interface.patch
batman-adv-bla-fix-report_work-leak-on-backbone_gw-purge.patch
batman-adv-clear-current-gateway-during-teardown.patch
batman-adv-dat-handle-forward-allocation-error.patch
batman-adv-fix-fragment-reassembly-length-accounting.patch
batman-adv-fix-tp_meter-counter-underflow-during-shutdown.patch
batman-adv-frag-disallow-unicast-fragment-in-fragment.patch
batman-adv-iv-recover-ogm-scheduling-after-forward-packet-error.patch
batman-adv-mcast-fix-use-after-free-in-orig_node-rcu-release.patch
batman-adv-tp_meter-avoid-role-confusion-in-tp_list.patch
batman-adv-tp_meter-avoid-use-of-uninit-sender-vars.patch
batman-adv-tp_meter-directly-shut-down-timer-on-cleanup.patch
batman-adv-tp_meter-fix-race-condition-in-send-error-reporting.patch
batman-adv-tp_meter-fix-tp_vars-reference-leak-in-receiver-shutdown.patch
batman-adv-tt-avoid-empty-vlan-responses.patch
batman-adv-tt-fix-negative-last_changeset_len.patch
batman-adv-tt-fix-negative-tt_buff_len.patch
batman-adv-tt-fix-toctou-race-for-reported-vlans.patch
batman-adv-tt-prevent-tvlv-entry-number-overflow.patch
batman-adv-tt-reject-oversized-local-tvlv-buffers.patch
batman-adv-tvlv-abort-ogm-send-on-tvlv-append-failure.patch
batman-adv-tvlv-reject-oversized-tvlv-packets.patch
batman-adv-v-stop-ogmv2-on-disabled-interface.patch
cifs-fix-busy-dentry-used-after-unmounting.patch
device-property-set-fwnode-secondary-to-null-in-fwnode_init.patch
drm-amd-display-fix-integer-overflow-in-bios_get_image.patch
drm-amd-display-validate-gpio-pin-lut-table-size-before-iterating.patch
drm-amd-display-validate-payload-length-and-link_index-in-dc_process_dmub_aux_transfer_async.patch
drm-amdgpu-vpe-force-collaborate-sync-after-trap.patch
drm-bridge-chipone-icn6211-use-devm_drm_bridge_add-in-i2c-probe.patch
drm-bridge-it66121-acquire-reset-gpio-in-probe.patch
drm-bridge-megachips-remove-bridge-when-irq-request-fails.patch
drm-i915-psr-apply-intel-dpcd-workaround-when-sdp-on-prior-line-used.patch
drm-msm-fix-shrinker-deadlock.patch
drm-v3d-fix-use-after-free-of-cpu-job-query-arrays-on-error-path.patch
drm-v3d-release-indirect-csd-gem-reference-on-cpu-job-free.patch
drm-virtio-use-uninterruptible-resv-lock-for-plane-updates.patch
fwctl-pds-validate-rpc-input-size-before-parsing.patch
hwmon-pmbus-adm1266-bounce-blackbox-records-through-a-protocol-sized-buffer.patch
hwmon-pmbus-adm1266-cap-pdio-scan-in-get_multiple-at-adm1266_pdio_nr.patch
hwmon-pmbus-adm1266-don-t-clobber-gpio-bits-before-pdio-read-in-get_multiple.patch
hwmon-pmbus-adm1266-include-pec-byte-in-pmbus_block_xfer-read-buffer.patch
hwmon-pmbus-adm1266-register-the-gpio_chip-after-pmbus_do_probe.patch
hwmon-pmbus-adm1266-register-the-nvmem-device-after-pmbus_do_probe.patch
hwmon-pmbus-adm1266-reject-implausible-blackbox-record_count.patch
hwmon-pmbus-adm1266-reject-short-block-read-responses-in-the-gpio-accessors.patch
hwmon-pmbus-adm1266-seed-timestamp-from-the-real-time-clock.patch
hwmon-pmbus-adm1266-serialize-gpio-pmbus-accesses-with-pmbus_lock.patch
hwmon-pmbus-adm1266-serialize-nvmem-blackbox-read-with-pmbus_lock.patch
hwmon-pmbus-adm1266-serialize-sequencer_state-debugfs-read-with-pmbus_lock.patch
kvm-arm64-vgic-free-private_irqs-when-init-fails-after-allocation.patch
kvm-arm64-vgic-its-reject-restored-dte-with-out-of-range-num_eventid_bits.patch
kvm-svm-disable-avic-ipi-virtualization-on-hygon-family-18h-erratum-1235.patch
loongarch-kprobes-use-larch_insn_text_copy-to-patch-instructions.patch
loongarch-remove-unused-code-to-avoid-build-warning.patch
phy-exynos5-usbdrd-fix-usb-2.0-hs-phy-tuning-values-for-exynos7870.patch
phy-qcom-qmp-ufs-fix-kaanapali-phy-pll-lock-failure-after-sm8650-g4-fix.patch
phy-tegra-xusb-fix-per-pad-high-speed-termination-calibration.patch
rdma-siw-reject-mpa-fpdu-length-underflow-before-signed-receive-math.patch
riscv-kvm-return-sbi_err_failure-for-pmu_event_info-when-oom.patch
riscv-kvm-return-sbi_err_failure-for-pmu_snapshot_set_shmem-when-oom.patch
scsi-isci-fix-use-after-free-in-device-removal-path.patch
spi-ep93xx-fix-error-pointer-deref-after-dma-setup-failure.patch
spi-qup-fix-error-pointer-deref-after-dma-setup-failure.patch
spi-sprd-fix-error-pointer-deref-after-dma-setup-failure.patch
spi-ti-qspi-fix-use-after-free-after-dma-setup-failure.patch
tracing-do-not-call-map-ops-elt_free-if-elt_alloc-fails.patch
virt-sev-guest-explicitly-leak-pages-in-unknown-state.patch
Greg Kroah-Hartman [Thu, 28 May 2026 12:13:53 +0000 (14:13 +0200)]
6.12-stable patches
added patches:
arm64-probes-handle-probes-on-hinted-conditional-branch-instructions.patch
batman-adv-bla-fix-report_work-leak-on-backbone_gw-purge.patch
batman-adv-clear-current-gateway-during-teardown.patch
batman-adv-dat-handle-forward-allocation-error.patch
batman-adv-fix-fragment-reassembly-length-accounting.patch
batman-adv-fix-tp_meter-counter-underflow-during-shutdown.patch
batman-adv-frag-disallow-unicast-fragment-in-fragment.patch
batman-adv-mcast-fix-use-after-free-in-orig_node-rcu-release.patch
batman-adv-tp_meter-avoid-use-of-uninit-sender-vars.patch
batman-adv-tp_meter-fix-race-condition-in-send-error-reporting.patch
batman-adv-tp_meter-fix-tp_vars-reference-leak-in-receiver-shutdown.patch
batman-adv-tt-fix-negative-last_changeset_len.patch
batman-adv-tt-fix-negative-tt_buff_len.patch
cifs-fix-busy-dentry-used-after-unmounting.patch
device-property-set-fwnode-secondary-to-null-in-fwnode_init.patch
drm-amd-display-fix-integer-overflow-in-bios_get_image.patch
drm-amd-display-validate-gpio-pin-lut-table-size-before-iterating.patch
drm-amd-display-validate-payload-length-and-link_index-in-dc_process_dmub_aux_transfer_async.patch
drm-amdgpu-vpe-force-collaborate-sync-after-trap.patch
drm-bridge-chipone-icn6211-use-devm_drm_bridge_add-in-i2c-probe.patch
drm-bridge-it66121-acquire-reset-gpio-in-probe.patch
drm-bridge-megachips-remove-bridge-when-irq-request-fails.patch
drm-i915-psr-apply-intel-dpcd-workaround-when-sdp-on-prior-line-used.patch
drm-v3d-release-indirect-csd-gem-reference-on-cpu-job-free.patch
drm-virtio-use-uninterruptible-resv-lock-for-plane-updates.patch
hwmon-pmbus-adm1266-bounce-blackbox-records-through-a-protocol-sized-buffer.patch
hwmon-pmbus-adm1266-cap-pdio-scan-in-get_multiple-at-adm1266_pdio_nr.patch
hwmon-pmbus-adm1266-don-t-clobber-gpio-bits-before-pdio-read-in-get_multiple.patch
hwmon-pmbus-adm1266-include-pec-byte-in-pmbus_block_xfer-read-buffer.patch
hwmon-pmbus-adm1266-register-the-gpio_chip-after-pmbus_do_probe.patch
hwmon-pmbus-adm1266-register-the-nvmem-device-after-pmbus_do_probe.patch
hwmon-pmbus-adm1266-reject-implausible-blackbox-record_count.patch
hwmon-pmbus-adm1266-reject-short-block-read-responses-in-the-gpio-accessors.patch
hwmon-pmbus-adm1266-seed-timestamp-from-the-real-time-clock.patch
hwmon-pmbus-adm1266-serialize-gpio-pmbus-accesses-with-pmbus_lock.patch
hwmon-pmbus-adm1266-serialize-nvmem-blackbox-read-with-pmbus_lock.patch
hwmon-pmbus-adm1266-serialize-sequencer_state-debugfs-read-with-pmbus_lock.patch
kvm-arm64-vgic-free-private_irqs-when-init-fails-after-allocation.patch
kvm-arm64-vgic-its-reject-restored-dte-with-out-of-range-num_eventid_bits.patch
loongarch-kprobes-use-larch_insn_text_copy-to-patch-instructions.patch
loongarch-remove-unused-code-to-avoid-build-warning.patch
phy-tegra-xusb-fix-per-pad-high-speed-termination-calibration.patch
rdma-siw-reject-mpa-fpdu-length-underflow-before-signed-receive-math.patch
riscv-kvm-return-sbi_err_failure-for-pmu_snapshot_set_shmem-when-oom.patch
scsi-isci-fix-use-after-free-in-device-removal-path.patch
spi-ep93xx-fix-error-pointer-deref-after-dma-setup-failure.patch
spi-qup-fix-error-pointer-deref-after-dma-setup-failure.patch
spi-sprd-fix-error-pointer-deref-after-dma-setup-failure.patch
spi-ti-qspi-fix-use-after-free-after-dma-setup-failure.patch
tracing-do-not-call-map-ops-elt_free-if-elt_alloc-fails.patch
Greg Kroah-Hartman [Thu, 28 May 2026 12:13:48 +0000 (14:13 +0200)]
6.6-stable patches
added patches:
arm64-probes-handle-probes-on-hinted-conditional-branch-instructions.patch
batman-adv-bla-fix-report_work-leak-on-backbone_gw-purge.patch
batman-adv-clear-current-gateway-during-teardown.patch
batman-adv-dat-handle-forward-allocation-error.patch
batman-adv-fix-fragment-reassembly-length-accounting.patch
batman-adv-fix-tp_meter-counter-underflow-during-shutdown.patch
batman-adv-frag-disallow-unicast-fragment-in-fragment.patch
batman-adv-mcast-fix-use-after-free-in-orig_node-rcu-release.patch
batman-adv-tp_meter-avoid-use-of-uninit-sender-vars.patch
batman-adv-tp_meter-fix-race-condition-in-send-error-reporting.patch
batman-adv-tp_meter-fix-tp_vars-reference-leak-in-receiver-shutdown.patch
batman-adv-tt-fix-negative-last_changeset_len.patch
batman-adv-tt-fix-negative-tt_buff_len.patch
cifs-fix-busy-dentry-used-after-unmounting.patch
device-property-set-fwnode-secondary-to-null-in-fwnode_init.patch
drm-amd-display-fix-integer-overflow-in-bios_get_image.patch
drm-amd-display-validate-gpio-pin-lut-table-size-before-iterating.patch
drm-amd-display-validate-payload-length-and-link_index-in-dc_process_dmub_aux_transfer_async.patch
drm-bridge-chipone-icn6211-use-devm_drm_bridge_add-in-i2c-probe.patch
drm-bridge-it66121-acquire-reset-gpio-in-probe.patch
drm-bridge-megachips-remove-bridge-when-irq-request-fails.patch
drm-virtio-use-uninterruptible-resv-lock-for-plane-updates.patch
hwmon-pmbus-adm1266-bounce-blackbox-records-through-a-protocol-sized-buffer.patch
hwmon-pmbus-adm1266-cap-pdio-scan-in-get_multiple-at-adm1266_pdio_nr.patch
hwmon-pmbus-adm1266-don-t-clobber-gpio-bits-before-pdio-read-in-get_multiple.patch
hwmon-pmbus-adm1266-include-pec-byte-in-pmbus_block_xfer-read-buffer.patch
hwmon-pmbus-adm1266-register-the-gpio_chip-after-pmbus_do_probe.patch
hwmon-pmbus-adm1266-register-the-nvmem-device-after-pmbus_do_probe.patch
hwmon-pmbus-adm1266-reject-implausible-blackbox-record_count.patch
hwmon-pmbus-adm1266-reject-short-block-read-responses-in-the-gpio-accessors.patch
hwmon-pmbus-adm1266-seed-timestamp-from-the-real-time-clock.patch
hwmon-pmbus-adm1266-serialize-gpio-pmbus-accesses-with-pmbus_lock.patch
hwmon-pmbus-adm1266-serialize-nvmem-blackbox-read-with-pmbus_lock.patch
hwmon-pmbus-adm1266-serialize-sequencer_state-debugfs-read-with-pmbus_lock.patch
kvm-arm64-vgic-its-reject-restored-dte-with-out-of-range-num_eventid_bits.patch
loongarch-kprobes-use-larch_insn_text_copy-to-patch-instructions.patch
loongarch-remove-unused-code-to-avoid-build-warning.patch
phy-tegra-xusb-fix-per-pad-high-speed-termination-calibration.patch
rdma-siw-reject-mpa-fpdu-length-underflow-before-signed-receive-math.patch
scsi-isci-fix-use-after-free-in-device-removal-path.patch
spi-qup-fix-error-pointer-deref-after-dma-setup-failure.patch
spi-sprd-fix-error-pointer-deref-after-dma-setup-failure.patch
spi-ti-qspi-fix-use-after-free-after-dma-setup-failure.patch
tracing-do-not-call-map-ops-elt_free-if-elt_alloc-fails.patch
Greg Kroah-Hartman [Thu, 28 May 2026 12:13:43 +0000 (14:13 +0200)]
6.1-stable patches
added patches:
batman-adv-bla-fix-report_work-leak-on-backbone_gw-purge.patch
batman-adv-clear-current-gateway-during-teardown.patch
batman-adv-dat-handle-forward-allocation-error.patch
batman-adv-fix-fragment-reassembly-length-accounting.patch
batman-adv-fix-tp_meter-counter-underflow-during-shutdown.patch
batman-adv-frag-disallow-unicast-fragment-in-fragment.patch
batman-adv-mcast-fix-use-after-free-in-orig_node-rcu-release.patch
batman-adv-tp_meter-avoid-use-of-uninit-sender-vars.patch
batman-adv-tt-fix-negative-last_changeset_len.patch
batman-adv-tt-fix-negative-tt_buff_len.patch
cifs-fix-busy-dentry-used-after-unmounting.patch
device-property-set-fwnode-secondary-to-null-in-fwnode_init.patch
drm-amd-display-fix-integer-overflow-in-bios_get_image.patch
drm-amd-display-validate-gpio-pin-lut-table-size-before-iterating.patch
drm-amd-display-validate-payload-length-and-link_index-in-dc_process_dmub_aux_transfer_async.patch
drm-bridge-chipone-icn6211-use-devm_drm_bridge_add-in-i2c-probe.patch
drm-bridge-it66121-acquire-reset-gpio-in-probe.patch
drm-bridge-megachips-remove-bridge-when-irq-request-fails.patch
drm-virtio-use-uninterruptible-resv-lock-for-plane-updates.patch
hwmon-pmbus-adm1266-bounce-blackbox-records-through-a-protocol-sized-buffer.patch
hwmon-pmbus-adm1266-cap-pdio-scan-in-get_multiple-at-adm1266_pdio_nr.patch
hwmon-pmbus-adm1266-don-t-clobber-gpio-bits-before-pdio-read-in-get_multiple.patch
hwmon-pmbus-adm1266-include-pec-byte-in-pmbus_block_xfer-read-buffer.patch
hwmon-pmbus-adm1266-register-the-gpio_chip-after-pmbus_do_probe.patch
hwmon-pmbus-adm1266-register-the-nvmem-device-after-pmbus_do_probe.patch
hwmon-pmbus-adm1266-reject-implausible-blackbox-record_count.patch
hwmon-pmbus-adm1266-reject-short-block-read-responses-in-the-gpio-accessors.patch
hwmon-pmbus-adm1266-seed-timestamp-from-the-real-time-clock.patch
hwmon-pmbus-adm1266-serialize-gpio-pmbus-accesses-with-pmbus_lock.patch
hwmon-pmbus-adm1266-serialize-nvmem-blackbox-read-with-pmbus_lock.patch
hwmon-pmbus-adm1266-serialize-sequencer_state-debugfs-read-with-pmbus_lock.patch
kvm-arm64-vgic-its-reject-restored-dte-with-out-of-range-num_eventid_bits.patch
loongarch-remove-unused-code-to-avoid-build-warning.patch
rdma-siw-reject-mpa-fpdu-length-underflow-before-signed-receive-math.patch
scsi-isci-fix-use-after-free-in-device-removal-path.patch
spi-sprd-fix-error-pointer-deref-after-dma-setup-failure.patch
spi-ti-qspi-fix-use-after-free-after-dma-setup-failure.patch
tracing-do-not-call-map-ops-elt_free-if-elt_alloc-fails.patch
Greg Kroah-Hartman [Thu, 28 May 2026 12:13:38 +0000 (14:13 +0200)]
5.15-stable patches
added patches:
batman-adv-bla-fix-report_work-leak-on-backbone_gw-purge.patch
batman-adv-clear-current-gateway-during-teardown.patch
batman-adv-dat-handle-forward-allocation-error.patch
batman-adv-fix-fragment-reassembly-length-accounting.patch
batman-adv-fix-tp_meter-counter-underflow-during-shutdown.patch
batman-adv-frag-disallow-unicast-fragment-in-fragment.patch
batman-adv-mcast-fix-use-after-free-in-orig_node-rcu-release.patch
batman-adv-tp_meter-avoid-use-of-uninit-sender-vars.patch
batman-adv-tt-fix-negative-last_changeset_len.patch
batman-adv-tt-fix-negative-tt_buff_len.patch
device-property-set-fwnode-secondary-to-null-in-fwnode_init.patch
drm-amd-display-fix-integer-overflow-in-bios_get_image.patch
drm-amd-display-validate-payload-length-and-link_index-in-dc_process_dmub_aux_transfer_async.patch
drm-bridge-it66121-acquire-reset-gpio-in-probe.patch
drm-bridge-megachips-remove-bridge-when-irq-request-fails.patch
drm-virtio-use-uninterruptible-resv-lock-for-plane-updates.patch
hwmon-pmbus-adm1266-bounce-blackbox-records-through-a-protocol-sized-buffer.patch
hwmon-pmbus-adm1266-cap-pdio-scan-in-get_multiple-at-adm1266_pdio_nr.patch
hwmon-pmbus-adm1266-don-t-clobber-gpio-bits-before-pdio-read-in-get_multiple.patch
hwmon-pmbus-adm1266-include-pec-byte-in-pmbus_block_xfer-read-buffer.patch
hwmon-pmbus-adm1266-register-the-gpio_chip-after-pmbus_do_probe.patch
hwmon-pmbus-adm1266-register-the-nvmem-device-after-pmbus_do_probe.patch
hwmon-pmbus-adm1266-reject-implausible-blackbox-record_count.patch
hwmon-pmbus-adm1266-reject-short-block-read-responses-in-the-gpio-accessors.patch
hwmon-pmbus-adm1266-seed-timestamp-from-the-real-time-clock.patch
hwmon-pmbus-adm1266-serialize-gpio-pmbus-accesses-with-pmbus_lock.patch
hwmon-pmbus-adm1266-serialize-nvmem-blackbox-read-with-pmbus_lock.patch
hwmon-pmbus-adm1266-serialize-sequencer_state-debugfs-read-with-pmbus_lock.patch
rdma-siw-reject-mpa-fpdu-length-underflow-before-signed-receive-math.patch
scsi-isci-fix-use-after-free-in-device-removal-path.patch
spi-sprd-fix-error-pointer-deref-after-dma-setup-failure.patch
spi-ti-qspi-fix-use-after-free-after-dma-setup-failure.patch
tracing-do-not-call-map-ops-elt_free-if-elt_alloc-fails.patch
Greg Kroah-Hartman [Thu, 28 May 2026 12:13:34 +0000 (14:13 +0200)]
5.10-stable patches
added patches:
batman-adv-bla-fix-report_work-leak-on-backbone_gw-purge.patch
batman-adv-clear-current-gateway-during-teardown.patch
batman-adv-dat-handle-forward-allocation-error.patch
batman-adv-fix-fragment-reassembly-length-accounting.patch
batman-adv-fix-tp_meter-counter-underflow-during-shutdown.patch
batman-adv-frag-disallow-unicast-fragment-in-fragment.patch
batman-adv-mcast-fix-use-after-free-in-orig_node-rcu-release.patch
batman-adv-tp_meter-avoid-use-of-uninit-sender-vars.patch
batman-adv-tt-fix-negative-last_changeset_len.patch
batman-adv-tt-fix-negative-tt_buff_len.patch
drm-amd-display-fix-integer-overflow-in-bios_get_image.patch
drm-bridge-megachips-remove-bridge-when-irq-request-fails.patch
hwmon-pmbus-adm1266-bounce-blackbox-records-through-a-protocol-sized-buffer.patch
hwmon-pmbus-adm1266-cap-pdio-scan-in-get_multiple-at-adm1266_pdio_nr.patch
hwmon-pmbus-adm1266-don-t-clobber-gpio-bits-before-pdio-read-in-get_multiple.patch
hwmon-pmbus-adm1266-include-pec-byte-in-pmbus_block_xfer-read-buffer.patch
hwmon-pmbus-adm1266-register-the-gpio_chip-after-pmbus_do_probe.patch
hwmon-pmbus-adm1266-register-the-nvmem-device-after-pmbus_do_probe.patch
hwmon-pmbus-adm1266-reject-implausible-blackbox-record_count.patch
hwmon-pmbus-adm1266-reject-short-block-read-responses-in-the-gpio-accessors.patch
hwmon-pmbus-adm1266-seed-timestamp-from-the-real-time-clock.patch
hwmon-pmbus-adm1266-serialize-gpio-pmbus-accesses-with-pmbus_lock.patch
hwmon-pmbus-adm1266-serialize-nvmem-blackbox-read-with-pmbus_lock.patch
hwmon-pmbus-adm1266-serialize-sequencer_state-debugfs-read-with-pmbus_lock.patch
rdma-siw-reject-mpa-fpdu-length-underflow-before-signed-receive-math.patch
scsi-isci-fix-use-after-free-in-device-removal-path.patch
spi-sprd-fix-error-pointer-deref-after-dma-setup-failure.patch
spi-ti-qspi-fix-use-after-free-after-dma-setup-failure.patch
tracing-do-not-call-map-ops-elt_free-if-elt_alloc-fails.patch
Greg Kroah-Hartman [Thu, 28 May 2026 11:38:00 +0000 (13:38 +0200)]
6.12-stable patches
added patches:
af_unix-fix-uaf-read-of-tail-len-in-unix_stream_data_wait.patch
ice-fix-setting-promisc-mode-while-adding-vid-filter.patch
ice-restore-ptp-rx-timestamp-config-after-ethtool-set-channels.patch
ipv4-raw-reject-ip_hdrincl-packets-with-ihl-5.patch
ipv6-ioam-add-null-check-for-idev-in-ipv6_hop_ioam.patch
ixgbevf-fix-use-after-free-in-vepa-multicast-source-pruning.patch
l2tp-use-list_del_rcu-in-l2tp_session_unhash.patch
lsm-hold-cred_guard_mutex-for-lsm_set_self_attr.patch
octeontx2-af-cgx-add-bounds-check-to-cgx_speed_mbps-index.patch
qed-fix-double-free-in-qed_cxt_tables_alloc.patch
rbd-eliminate-a-race-in-lock_dwork-draining-on-unmap.patch
ring-buffer-fix-reporting-of-missed-events-in-iterator.patch
vsock-virtio-reset-connection-on-receiving-queue-overflow.patch
vsock-vmci-fix-uaf-when-peer-resets-connection-during-handshake.patch
wifi-ath11k-clear-shared-srng-pointer-state-on-restart.patch
wifi-cfg80211-advance-loop-vars-in-cfg80211_merge_profile.patch
wifi-mac80211-consume-only-present-negotiated-ttlm-maps.patch
Greg Kroah-Hartman [Thu, 28 May 2026 11:37:36 +0000 (13:37 +0200)]
6.6-stable patches
added patches:
ice-fix-setting-promisc-mode-while-adding-vid-filter.patch
ipv4-raw-reject-ip_hdrincl-packets-with-ihl-5.patch
ixgbevf-fix-use-after-free-in-vepa-multicast-source-pruning.patch
qed-fix-double-free-in-qed_cxt_tables_alloc.patch
ring-buffer-fix-reporting-of-missed-events-in-iterator.patch
vsock-virtio-reset-connection-on-receiving-queue-overflow.patch
vsock-vmci-fix-uaf-when-peer-resets-connection-during-handshake.patch
wifi-ath11k-clear-shared-srng-pointer-state-on-restart.patch
wifi-cfg80211-advance-loop-vars-in-cfg80211_merge_profile.patch
Greg Kroah-Hartman [Thu, 28 May 2026 11:37:23 +0000 (13:37 +0200)]
6.1-stable patches
added patches:
ice-fix-setting-promisc-mode-while-adding-vid-filter.patch
ipv4-raw-reject-ip_hdrincl-packets-with-ihl-5.patch
ixgbevf-fix-use-after-free-in-vepa-multicast-source-pruning.patch
qed-fix-double-free-in-qed_cxt_tables_alloc.patch
ring-buffer-fix-reporting-of-missed-events-in-iterator.patch
vsock-virtio-reset-connection-on-receiving-queue-overflow.patch
vsock-vmci-fix-uaf-when-peer-resets-connection-during-handshake.patch
wifi-ath11k-clear-shared-srng-pointer-state-on-restart.patch
wifi-cfg80211-advance-loop-vars-in-cfg80211_merge_profile.patch
Greg Kroah-Hartman [Thu, 28 May 2026 11:37:11 +0000 (13:37 +0200)]
5.15-stable patches
added patches:
ipv4-raw-reject-ip_hdrincl-packets-with-ihl-5.patch
ixgbevf-fix-use-after-free-in-vepa-multicast-source-pruning.patch
ring-buffer-fix-reporting-of-missed-events-in-iterator.patch
vsock-vmci-fix-uaf-when-peer-resets-connection-during-handshake.patch
wifi-ath11k-clear-shared-srng-pointer-state-on-restart.patch
wifi-cfg80211-advance-loop-vars-in-cfg80211_merge_profile.patch
Greg Kroah-Hartman [Thu, 28 May 2026 11:36:58 +0000 (13:36 +0200)]
5.10-stable patches
added patches:
ipv4-raw-reject-ip_hdrincl-packets-with-ihl-5.patch
ixgbevf-fix-use-after-free-in-vepa-multicast-source-pruning.patch
ring-buffer-fix-reporting-of-missed-events-in-iterator.patch
vsock-vmci-fix-uaf-when-peer-resets-connection-during-handshake.patch
wifi-ath11k-clear-shared-srng-pointer-state-on-restart.patch
wifi-cfg80211-advance-loop-vars-in-cfg80211_merge_profile.patch
Greg Kroah-Hartman [Thu, 28 May 2026 11:31:15 +0000 (13:31 +0200)]
6.18-stable patches
added patches:
af_unix-fix-uaf-read-of-tail-len-in-unix_stream_data_wait.patch
ice-fix-locking-around-wait_event_interruptible_locked_irq.patch
ice-fix-setting-promisc-mode-while-adding-vid-filter.patch
ice-fix-vf-queue-configuration-with-low-mtu-values.patch
ice-restore-ptp-rx-timestamp-config-after-ethtool-set-channels.patch
igc-fix-potential-skb-leak-in-igc_fpe_xmit_smd_frame.patch
ipv4-raw-reject-ip_hdrincl-packets-with-ihl-5.patch
ipv6-ioam-add-null-check-for-idev-in-ipv6_hop_ioam.patch
ixgbevf-fix-use-after-free-in-vepa-multicast-source-pruning.patch
l2tp-use-list_del_rcu-in-l2tp_session_unhash.patch
lsm-hold-cred_guard_mutex-for-lsm_set_self_attr.patch
mptcp-pm-fix-add_addr-timer-infinite-retry-on-option-space-insufficient.patch
octeontx2-af-cgx-add-bounds-check-to-cgx_speed_mbps-index.patch
octeontx2-pf-fix-double-free-in-rvu_rep_rsrc_init.patch
qed-fix-double-free-in-qed_cxt_tables_alloc.patch
rbd-eliminate-a-race-in-lock_dwork-draining-on-unmap.patch
ring-buffer-fix-reporting-of-missed-events-in-iterator.patch
ring-buffer-flush-and-stop-persistent-ring-buffer-on-panic.patch
vsock-virtio-reset-connection-on-receiving-queue-overflow.patch
vsock-vmci-fix-uaf-when-peer-resets-connection-during-handshake.patch
wifi-ath11k-clear-shared-srng-pointer-state-on-restart.patch
wifi-cfg80211-advance-loop-vars-in-cfg80211_merge_profile.patch
wifi-iwlwifi-mld-stop-tx-during-firmware-restart.patch
wifi-iwlwifi-mvm-fix-driver-set-tx-rates-on-old-devices.patch
wifi-mac80211-consume-only-present-negotiated-ttlm-maps.patch
Greg Kroah-Hartman [Thu, 28 May 2026 11:30:57 +0000 (13:30 +0200)]
7.0-stable patches
added patches:
af_unix-fix-uaf-read-of-tail-len-in-unix_stream_data_wait.patch
ice-fix-locking-around-wait_event_interruptible_locked_irq.patch
ice-fix-setting-promisc-mode-while-adding-vid-filter.patch
ice-fix-vf-queue-configuration-with-low-mtu-values.patch
ice-restore-ptp-rx-timestamp-config-after-ethtool-set-channels.patch
igc-fix-potential-skb-leak-in-igc_fpe_xmit_smd_frame.patch
ipv4-raw-reject-ip_hdrincl-packets-with-ihl-5.patch
ipv6-ioam-add-null-check-for-idev-in-ipv6_hop_ioam.patch
ixgbevf-fix-use-after-free-in-vepa-multicast-source-pruning.patch
l2tp-use-list_del_rcu-in-l2tp_session_unhash.patch
lsm-hold-cred_guard_mutex-for-lsm_set_self_attr.patch
mptcp-do-not-drop-partial-packets.patch
mptcp-pm-fix-add_addr-timer-infinite-retry-on-option-space-insufficient.patch
mptcp-reset-rcv-wnd-on-disconnect.patch
octeontx2-af-cgx-add-bounds-check-to-cgx_speed_mbps-index.patch
octeontx2-pf-avoid-double-free-of-pool-stack-on-aq-init-failure.patch
octeontx2-pf-fix-double-free-in-rvu_rep_rsrc_init.patch
qed-fix-double-free-in-qed_cxt_tables_alloc.patch
rbd-eliminate-a-race-in-lock_dwork-draining-on-unmap.patch
ring-buffer-fix-reporting-of-missed-events-in-iterator.patch
ring-buffer-flush-and-stop-persistent-ring-buffer-on-panic.patch
selftests-mptcp-drop-nanoseconds-width-specifier.patch
vsock-virtio-reset-connection-on-receiving-queue-overflow.patch
vsock-vmci-fix-uaf-when-peer-resets-connection-during-handshake.patch
wifi-ath11k-clear-shared-srng-pointer-state-on-restart.patch
wifi-cfg80211-advance-loop-vars-in-cfg80211_merge_profile.patch
wifi-iwlwifi-mld-stop-tx-during-firmware-restart.patch
wifi-iwlwifi-mvm-fix-driver-set-tx-rates-on-old-devices.patch
wifi-mac80211-capture-fast-rx-rate-before-mesh-reuses-skb-cb.patch
wifi-mac80211-consume-only-present-negotiated-ttlm-maps.patch
Greg Kroah-Hartman [Thu, 28 May 2026 09:51:29 +0000 (11:51 +0200)]
6.12-stable patches
added patches:
cgroup-cpuset-reset-dl-migration-state-on-can_attach-failure.patch
fs-ntfs3-handle-attr_set_size-errors-when-truncating-files.patch
sched_ext-avoid-uaf-in-scx_root_enable_workfn-init-failure-path.patch
sched_ext-fix-missing-warning-in-scx_set_task_state-default-case.patch
Greg Kroah-Hartman [Thu, 28 May 2026 09:49:03 +0000 (11:49 +0200)]
6.18-stable patches
added patches:
cgroup-cpuset-reset-dl-migration-state-on-can_attach-failure.patch
fs-ntfs3-handle-attr_set_size-errors-when-truncating-files.patch
net-ethtool-fix-null-pointer-dereference-in-phy_reply_size.patch
net-ethtool-phy-avoid-null-deref-when-phy-driver-is-unbound.patch
sched_ext-avoid-uaf-in-scx_root_enable_workfn-init-failure-path.patch
sched_ext-fix-missing-warning-in-scx_set_task_state-default-case.patch
tracing-fprobe-avoid-kcalloc-in-rcu_read_lock-section.patch
tracing-fprobe-check-the-same-type-fprobe-on-table-as-the-unregistered-one.patch
tracing-fprobe-remove-unused-local-variable.patch
tracing-fprobe-use-ftrace-if-config_dynamic_ftrace_with_args.patch
Greg Kroah-Hartman [Thu, 28 May 2026 09:30:11 +0000 (11:30 +0200)]
7.0-stable patches
added patches:
acpi-driver-check-acpi_companion-against-null-during-probe.patch
net-ethtool-fix-null-pointer-dereference-in-phy_reply_size.patch
net-ethtool-phy-avoid-null-deref-when-phy-driver-is-unbound.patch
sched_ext-avoid-uaf-in-scx_root_enable_workfn-init-failure-path.patch
sched_ext-fix-missing-warning-in-scx_set_task_state-default-case.patch
Greg Kroah-Hartman [Thu, 28 May 2026 09:00:43 +0000 (11:00 +0200)]
7.0-stable patches
added patches:
acpi-battery-fix-system-wakeup-on-critical-battery-status.patch
alsa-asihpi-fix-potential-oob-array-access-at-reading-cache.patch
alsa-pcm-don-t-setup-bogus-iov_iter-for-silencing.patch
alsa-scarlett2-allow-flash-writes-ending-at-segment-boundary.patch
alsa-ua101-reject-too-short-usb-descriptors.patch
bluetooth-bnep-fix-uaf-read-of-dev-name.patch
bluetooth-fix-uaf-in-l2cap_sock_cleanup_listen-vs-l2cap_conn_del.patch
bluetooth-hci_qca-convert-timeout-from-jiffies-to-ms.patch
bluetooth-hci_uart-fix-uafs-and-race-conditions-in-close-and-init-paths.patch
bluetooth-iso-drop-iso_end-frames-received-without-prior-iso_start.patch
bluetooth-l2cap-ecred_reconfigure-send-packed-pdu-not-stack-pointer.patch
bluetooth-mgmt-validate-add-extended-advertising-data-length.patch
bluetooth-serialize-accept_q-access.patch
drivers-base-memory-fix-memory-block-reference-leak-in-poison-accounting.patch
efi-allocate-runtime-workqueue-before-acpi-init.patch
hwmon-pmbus-adm1266-widen-blackbox-info-buffer-to-i2c_smbus_block_max.patch
io_uring-waitid-clear-waitid-info-before-copying-it-to-userspace.patch
ipv6-ioam-refresh-hdr-pointer-before-ioam6_event.patch
ksmbd-fix-null-pointer-dereference-in-compare_guid_key.patch
ksmbd-fix-null-pointer-dereference-in-proc_show_files.patch
ksmbd-fix-sid-memory-leak-in-set_posix_acl_entries_dacl-on-overflow.patch
ksmbd-validate-sid-in-parent-security-descriptor-during-acl-inheritance.patch
mm-damon-fix-damos_stat-tracepoint-format-for-sz_applied.patch
mm-damon-sysfs-schemes-call-missing-mem_cgroup_iter_break.patch
mm-fix-__vm_normal_page-to-handle-missing-support-for-pmd_special-pud_special.patch
mm-memory-fix-spurious-warning-when-unmapping-device-private-exclusive-pages.patch
mm-memory_hotplug-fix-memory-block-reference-leak-on-remove.patch
mm-migrate_device-fix-spinlock-leak-in-migrate_vma_insert_huge_pmd_page.patch
mm-page_alloc-fix-initialization-of-tags-of-the-huge-zero-folio-with-init_on_free.patch
net-bcmgenet-keep-rbuf-eee-pm-disabled.patch
net-devmem-reject-dma-buf-bind-with-non-page-aligned-size-or-sg-length.patch
net-hsr-defer-node-table-free-until-after-rcu-readers.patch
net-ifb-report-ethtool-stats-over-num_tx_queues.patch
net-mlx5e-fix-use-after-free-in-mlx5e_tx_reporter_timeout_recover.patch
net-phy-skip-eee-advertisement-write-when-autoneg-is-disabled.patch
net-pse-pd-fix-sign-on-enoent-check-in-of_load_pse_pis.patch
net-wwan-iosm-fix-potential-memory-leaks-in-ipc_imem_init.patch
netfilter-ip6t_hbh-reject-oversized-option-lists.patch
netfilter-ipset-stop-hash-range-iteration-at-end.patch
netfilter-nf_queue-hold-bridge-skb-dev-while-queued.patch
netfilter-nft_inner-fix-ipv6-inner_thoff-desync.patch
phonet-pep-disable-bh-around-forwarded-sk_receive_skb.patch
regulator-tps65219-fix-irq_data.rdev-not-being-assigned.patch
scripts-gdb-mm-cast-untyped-symbols-in-x86_page_ops.patch
selftests-mm-run_vmtests.sh-fix-destructive-tests-invocation.patch
smb-client-protect-tc_count-increment-in-smb2_find_smb_sess_tcon_unlocked.patch
smb-client-require-net-admin-for-cifs-swn-netlink.patch
smb-client-use-data_len-for-smb2-read-encrypted-folioq-copy.patch
smb-server-promote-s_del_on_cls-to-s_del_pending-when-close.patch
spi-amd-set-correct-bus-number-in-acpi-probe-path.patch
sysfs-don-t-remove-existing-directory-on-update-failure.patch
x86-mm-disable-broadcast-tlb-flush-when-pcid-is-disabled.patch
Greg Kroah-Hartman [Thu, 28 May 2026 08:47:03 +0000 (10:47 +0200)]
6.18-stable patches
added patches:
alsa-asihpi-fix-potential-oob-array-access-at-reading-cache.patch
alsa-pcm-don-t-setup-bogus-iov_iter-for-silencing.patch
alsa-scarlett2-allow-flash-writes-ending-at-segment-boundary.patch
alsa-ua101-reject-too-short-usb-descriptors.patch
bluetooth-bnep-fix-uaf-read-of-dev-name.patch
bluetooth-fix-uaf-in-l2cap_sock_cleanup_listen-vs-l2cap_conn_del.patch
bluetooth-hci_uart-fix-uafs-and-race-conditions-in-close-and-init-paths.patch
bluetooth-iso-drop-iso_end-frames-received-without-prior-iso_start.patch
bluetooth-l2cap-ecred_reconfigure-send-packed-pdu-not-stack-pointer.patch
bluetooth-mgmt-validate-add-extended-advertising-data-length.patch
bluetooth-serialize-accept_q-access.patch
drivers-base-memory-fix-memory-block-reference-leak-in-poison-accounting.patch
efi-allocate-runtime-workqueue-before-acpi-init.patch
hwmon-pmbus-adm1266-widen-blackbox-info-buffer-to-i2c_smbus_block_max.patch
io_uring-waitid-clear-waitid-info-before-copying-it-to-userspace.patch
ipv6-ioam-refresh-hdr-pointer-before-ioam6_event.patch
ksmbd-fix-null-pointer-dereference-in-compare_guid_key.patch
ksmbd-fix-sid-memory-leak-in-set_posix_acl_entries_dacl-on-overflow.patch
ksmbd-validate-sid-in-parent-security-descriptor-during-acl-inheritance.patch
mm-damon-sysfs-schemes-call-missing-mem_cgroup_iter_break.patch
mm-fix-__vm_normal_page-to-handle-missing-support-for-pmd_special-pud_special.patch
mm-memory-fix-spurious-warning-when-unmapping-device-private-exclusive-pages.patch
mm-memory_hotplug-fix-memory-block-reference-leak-on-remove.patch
mm-page_alloc-fix-initialization-of-tags-of-the-huge-zero-folio-with-init_on_free.patch
net-bcmgenet-keep-rbuf-eee-pm-disabled.patch
net-ifb-report-ethtool-stats-over-num_tx_queues.patch
net-mlx5e-fix-use-after-free-in-mlx5e_tx_reporter_timeout_recover.patch
net-phy-skip-eee-advertisement-write-when-autoneg-is-disabled.patch
net-pse-pd-fix-sign-on-enoent-check-in-of_load_pse_pis.patch
net-wwan-iosm-fix-potential-memory-leaks-in-ipc_imem_init.patch
netfilter-ip6t_hbh-reject-oversized-option-lists.patch
netfilter-ipset-stop-hash-range-iteration-at-end.patch
netfilter-nf_queue-hold-bridge-skb-dev-while-queued.patch
netfilter-nft_inner-fix-ipv6-inner_thoff-desync.patch
phonet-pep-disable-bh-around-forwarded-sk_receive_skb.patch
regulator-tps65219-fix-irq_data.rdev-not-being-assigned.patch
selftests-mm-run_vmtests.sh-fix-destructive-tests-invocation.patch
smb-client-protect-tc_count-increment-in-smb2_find_smb_sess_tcon_unlocked.patch
smb-client-require-net-admin-for-cifs-swn-netlink.patch
smb-client-use-data_len-for-smb2-read-encrypted-folioq-copy.patch
smb-server-promote-s_del_on_cls-to-s_del_pending-when-close.patch
spi-amd-set-correct-bus-number-in-acpi-probe-path.patch
sysfs-don-t-remove-existing-directory-on-update-failure.patch
Greg Kroah-Hartman [Thu, 28 May 2026 08:46:20 +0000 (10:46 +0200)]
6.6-stable patches
added patches:
alsa-asihpi-fix-potential-oob-array-access-at-reading-cache.patch
alsa-pcm-don-t-setup-bogus-iov_iter-for-silencing.patch
alsa-ua101-reject-too-short-usb-descriptors.patch
bluetooth-bnep-fix-uaf-read-of-dev-name.patch
bluetooth-fix-uaf-in-l2cap_sock_cleanup_listen-vs-l2cap_conn_del.patch
bluetooth-hci_uart-fix-uafs-and-race-conditions-in-close-and-init-paths.patch
bluetooth-iso-drop-iso_end-frames-received-without-prior-iso_start.patch
bluetooth-mgmt-validate-add-extended-advertising-data-length.patch
bluetooth-serialize-accept_q-access.patch
drivers-base-memory-fix-memory-block-reference-leak-in-poison-accounting.patch
efi-allocate-runtime-workqueue-before-acpi-init.patch
hwmon-pmbus-adm1266-widen-blackbox-info-buffer-to-i2c_smbus_block_max.patch
ksmbd-fix-null-pointer-dereference-in-compare_guid_key.patch
ksmbd-fix-sid-memory-leak-in-set_posix_acl_entries_dacl-on-overflow.patch
mm-damon-sysfs-schemes-call-missing-mem_cgroup_iter_break.patch
net-bcmgenet-keep-rbuf-eee-pm-disabled.patch
net-ifb-report-ethtool-stats-over-num_tx_queues.patch
net-wwan-iosm-fix-potential-memory-leaks-in-ipc_imem_init.patch
netfilter-ip6t_hbh-reject-oversized-option-lists.patch
netfilter-ipset-stop-hash-range-iteration-at-end.patch
netfilter-nf_queue-hold-bridge-skb-dev-while-queued.patch
netfilter-nft_inner-fix-ipv6-inner_thoff-desync.patch
phonet-pep-disable-bh-around-forwarded-sk_receive_skb.patch
smb-client-protect-tc_count-increment-in-smb2_find_smb_sess_tcon_unlocked.patch
smb-server-promote-s_del_on_cls-to-s_del_pending-when-close.patch
sysfs-don-t-remove-existing-directory-on-update-failure.patch
Greg Kroah-Hartman [Thu, 28 May 2026 08:46:03 +0000 (10:46 +0200)]
6.1-stable patches
added patches:
alsa-asihpi-fix-potential-oob-array-access-at-reading-cache.patch
alsa-ua101-reject-too-short-usb-descriptors.patch
bluetooth-bnep-fix-uaf-read-of-dev-name.patch
bluetooth-fix-uaf-in-l2cap_sock_cleanup_listen-vs-l2cap_conn_del.patch
bluetooth-hci_uart-fix-uafs-and-race-conditions-in-close-and-init-paths.patch
bluetooth-iso-drop-iso_end-frames-received-without-prior-iso_start.patch
bluetooth-mgmt-validate-add-extended-advertising-data-length.patch
hwmon-pmbus-adm1266-widen-blackbox-info-buffer-to-i2c_smbus_block_max.patch
net-bcmgenet-keep-rbuf-eee-pm-disabled.patch
net-ifb-report-ethtool-stats-over-num_tx_queues.patch
net-wwan-iosm-fix-potential-memory-leaks-in-ipc_imem_init.patch
netfilter-ip6t_hbh-reject-oversized-option-lists.patch
netfilter-ipset-stop-hash-range-iteration-at-end.patch
netfilter-nf_queue-hold-bridge-skb-dev-while-queued.patch
phonet-pep-disable-bh-around-forwarded-sk_receive_skb.patch
sysfs-don-t-remove-existing-directory-on-update-failure.patch
Greg Kroah-Hartman [Thu, 28 May 2026 08:40:57 +0000 (10:40 +0200)]
5.15-stable patches
added patches:
alsa-asihpi-fix-potential-oob-array-access-at-reading-cache.patch
alsa-ua101-reject-too-short-usb-descriptors.patch
bluetooth-bnep-fix-uaf-read-of-dev-name.patch
bluetooth-hci_uart-fix-uafs-and-race-conditions-in-close-and-init-paths.patch
hwmon-pmbus-adm1266-widen-blackbox-info-buffer-to-i2c_smbus_block_max.patch
net-bcmgenet-keep-rbuf-eee-pm-disabled.patch
net-wwan-iosm-fix-potential-memory-leaks-in-ipc_imem_init.patch
netfilter-ip6t_hbh-reject-oversized-option-lists.patch
netfilter-ipset-stop-hash-range-iteration-at-end.patch
netfilter-nf_queue-hold-bridge-skb-dev-while-queued.patch
phonet-pep-disable-bh-around-forwarded-sk_receive_skb.patch
sysfs-don-t-remove-existing-directory-on-update-failure.patch
Greg Kroah-Hartman [Thu, 28 May 2026 08:40:42 +0000 (10:40 +0200)]
5.10-stable patches
added patches:
alsa-asihpi-fix-potential-oob-array-access-at-reading-cache.patch
alsa-ua101-reject-too-short-usb-descriptors.patch
bluetooth-bnep-fix-uaf-read-of-dev-name.patch
bluetooth-hci_uart-fix-uafs-and-race-conditions-in-close-and-init-paths.patch
hwmon-pmbus-adm1266-widen-blackbox-info-buffer-to-i2c_smbus_block_max.patch
net-bcmgenet-keep-rbuf-eee-pm-disabled.patch
netfilter-ip6t_hbh-reject-oversized-option-lists.patch
netfilter-ipset-stop-hash-range-iteration-at-end.patch
phonet-pep-disable-bh-around-forwarded-sk_receive_skb.patch
sysfs-don-t-remove-existing-directory-on-update-failure.patch
Greg Kroah-Hartman [Thu, 28 May 2026 08:17:06 +0000 (10:17 +0200)]
6.12-stable patches
added patches:
alsa-asihpi-fix-potential-oob-array-access-at-reading-cache.patch
alsa-pcm-don-t-setup-bogus-iov_iter-for-silencing.patch
alsa-ua101-reject-too-short-usb-descriptors.patch
bluetooth-bnep-fix-uaf-read-of-dev-name.patch
bluetooth-fix-uaf-in-l2cap_sock_cleanup_listen-vs-l2cap_conn_del.patch
bluetooth-hci_uart-fix-uafs-and-race-conditions-in-close-and-init-paths.patch
bluetooth-iso-drop-iso_end-frames-received-without-prior-iso_start.patch
bluetooth-l2cap-ecred_reconfigure-send-packed-pdu-not-stack-pointer.patch
bluetooth-mgmt-validate-add-extended-advertising-data-length.patch
bluetooth-serialize-accept_q-access.patch
drivers-base-memory-fix-memory-block-reference-leak-in-poison-accounting.patch
efi-allocate-runtime-workqueue-before-acpi-init.patch
hwmon-pmbus-adm1266-widen-blackbox-info-buffer-to-i2c_smbus_block_max.patch
io_uring-waitid-clear-waitid-info-before-copying-it-to-userspace.patch
ipv6-ioam-refresh-hdr-pointer-before-ioam6_event.patch
ksmbd-fix-null-pointer-dereference-in-compare_guid_key.patch
ksmbd-fix-sid-memory-leak-in-set_posix_acl_entries_dacl-on-overflow.patch
ksmbd-validate-sid-in-parent-security-descriptor-during-acl-inheritance.patch
mm-damon-sysfs-schemes-call-missing-mem_cgroup_iter_break.patch
mm-memory_hotplug-fix-memory-block-reference-leak-on-remove.patch
net-bcmgenet-keep-rbuf-eee-pm-disabled.patch
net-ifb-report-ethtool-stats-over-num_tx_queues.patch
net-pse-pd-fix-sign-on-enoent-check-in-of_load_pse_pis.patch
net-wwan-iosm-fix-potential-memory-leaks-in-ipc_imem_init.patch
netfilter-ip6t_hbh-reject-oversized-option-lists.patch
netfilter-ipset-stop-hash-range-iteration-at-end.patch
netfilter-nf_queue-hold-bridge-skb-dev-while-queued.patch
netfilter-nft_inner-fix-ipv6-inner_thoff-desync.patch
phonet-pep-disable-bh-around-forwarded-sk_receive_skb.patch
selftests-mm-run_vmtests.sh-fix-destructive-tests-invocation.patch
smb-client-protect-tc_count-increment-in-smb2_find_smb_sess_tcon_unlocked.patch
smb-client-require-net-admin-for-cifs-swn-netlink.patch
smb-client-use-data_len-for-smb2-read-encrypted-folioq-copy.patch
smb-server-promote-s_del_on_cls-to-s_del_pending-when-close.patch
sysfs-don-t-remove-existing-directory-on-update-failure.patch
Sasha Levin [Wed, 27 May 2026 19:48:47 +0000 (15:48 -0400)]
Fixes for all trees
Signed-off-by: Sasha Levin <sashal@kernel.org>
Greg Kroah-Hartman [Wed, 27 May 2026 12:16:05 +0000 (14:16 +0200)]
5.15-stable patches
added patches:
smb-client-reject-userspace-cifs.spnego-descriptions.patch
Greg Kroah-Hartman [Wed, 27 May 2026 12:16:04 +0000 (14:16 +0200)]
5.10-stable patches
added patches:
smb-client-reject-userspace-cifs.spnego-descriptions.patch
Greg Kroah-Hartman [Wed, 27 May 2026 08:32:43 +0000 (10:32 +0200)]
7.0-stable patches
added patches:
ata-libata-scsi-do-not-needlessly-defer-commands-when-using-pmp-with-fbs.patch
ata-libata-scsi-do-not-use-the-deferred-qc-feature-for-ata_defer_port.patch
ata-libata-scsi-do-not-use-the-deferred-qc-feature-on-pmps-with-cbs.patch
ata-libata-scsi-improve-readability-of-ata_scsi_qc_issue.patch
Greg Kroah-Hartman [Wed, 27 May 2026 08:32:15 +0000 (10:32 +0200)]
6.18-stable patches
added patches:
ata-libata-scsi-do-not-needlessly-defer-commands-when-using-pmp-with-fbs.patch
ata-libata-scsi-do-not-use-the-deferred-qc-feature-for-ata_defer_port.patch
ata-libata-scsi-do-not-use-the-deferred-qc-feature-on-pmps-with-cbs.patch
ata-libata-scsi-improve-readability-of-ata_scsi_qc_issue.patch
Greg Kroah-Hartman [Wed, 27 May 2026 08:31:58 +0000 (10:31 +0200)]
6.12-stable patches
added patches:
ata-libata-scsi-do-not-needlessly-defer-commands-when-using-pmp-with-fbs.patch
ata-libata-scsi-do-not-use-the-deferred-qc-feature-for-ata_defer_port.patch
ata-libata-scsi-do-not-use-the-deferred-qc-feature-on-pmps-with-cbs.patch
ata-libata-scsi-improve-readability-of-ata_scsi_qc_issue.patch