From: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Date: Mon, 15 Jun 2026 15:35:17 +0000 (+0200)
Subject: Merge branch 'master' of gitolite.kernel.org:/pub/scm/linux/kernel/git/stable/stable... 
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=fb00fcd6ed4a8a19a9fbda4661ead005f20134a9;p=thirdparty%2Fkernel%2Fstable-queue.git

Merge branch 'master' of gitolite.kernel.org:/pub/scm/linux/kernel/git/stable/stable-queue
---

fb00fcd6ed4a8a19a9fbda4661ead005f20134a9
diff --cc queue-6.6/series
index 71971e2a81,0ab9a061ff..5667aaad11
--- a/queue-6.6/series
+++ b/queue-6.6/series
@@@ -295,48 -295,7 +295,52 @@@ tracing-probes-point-the-error-offset-c
  mmc-litex_mmc-use-div_round_up-for-more-accurate-clock-calculation.patch
  kvm-don-t-warn-if-memory-is-dirtied-without-a-vcpu-when-the-vm-is-dying.patch
  drm-i915-gem-fix-phys-bo-pread-pwrite-with-offset.patch
 +ksmbd-fix-use-after-free-of-a-deferred-file_lock-on-double-smb2_cancel.patch
 +xfrm-espintcp-do-not-reuse-an-in-progress-partial-send.patch
 +usb-serial-io_ti-fix-heap-overflow-in-get_manuf_info.patch
 +usb-serial-io_ti-fix-heap-overflow-in-build_i2c_fw_hdr.patch
 +usb-serial-option-add-usb-id-for-dell-wireless-dw5826e-m.patch
 +usb-serial-kl5kusb105-fix-bulk-out-buffer-overflow.patch
 +alsa-timer-fix-uaf-at-snd_timer_user_params.patch
 +drm-virtio-fix-dma_fence-refcount-leak-on-error-in-virtio_gpu_dma_fence_wait.patch
 +drm-amd-display-reject-gpio_bitshift-32-in-bios_parser_get_gpio_pin_info.patch
 +mm-damon-ops-common-call-folio_test_lru-after-folio_get.patch
 +rdma-srp-bound-srp_rsp-sense-copy-by-the-received-length.patch
 +zram-fix-use-after-free-in-zram_bvec_write_partial.patch
 +udp-clear-skb-dev-before-running-a-sockmap-verdict.patch
 +arm-socfpga-fix-of-node-refcount-leak-in-smp-setup.patch
 +arm-9474-1-io-avoid-kasan-instrumentation-of-raw-halfword-i-o.patch
 +arm-9475-1-entry-use-byte-load-for-kasan-vmap-stack-shadow.patch
 +mptcp-fix-retransmission-loop-when-csum-is-enabled.patch
 +mptcp-close-toctou-race-while-computing-rcv_wnd.patch
 +mptcp-allow-subflow-rcv-wnd-to-shrink.patch
 +mptcp-sockopt-check-timestamping-ret-value.patch
 +selftests-mptcp-add-test-for-extra_subflows-underflow-on-userspace-pm.patch
 +wifi-nl80211-reject-oversized-ema-rnr-lists.patch
 +vsock-vmci-fix-sk_ack_backlog-leak-on-failed-handshake.patch
 +asoc-fsl_sai-fix-32-slots-tdm-broken-by-integer-shift-ub-in-xmr-write.patch
 +bnxt_en-fix-null-pointer-dereference.patch
 +ib-isert-reject-login-pdus-shorter-than-iser_headers_len.patch
 +inet-frags-fix-use-after-free-caused-by-the-fqdir_pre_exit-flush.patch
 +pidfd-refuse-access-to-tasks-that-have-started-exiting-harder.patch
 +fuse-reject-fuse_notify-pagecache-ops-on-directories.patch
 +i2c-qcom-cci-fix-null-pointer-dereference-in-cci_remove.patch
 +i2c-stm32f7-fix-timing-computation-ignoring-i2c-analog-filter.patch
 +i2c-tegra-fix-noirq-suspend-resume.patch
 +input-atkbd-add-dmi-quirk-for-lenovo-yoga-air-14-83qk.patch
 +input-atkbd-skip-deactivate-for-honor-bcc-n-s-internal-keyboard.patch
 +ipc-shm-serialize-orphan-cleanup-with-shm_nattch-updates.patch
 +misc-fastrpc-fix-use-after-free-of-fastrpc_user-in-workqueue-context.patch
 +misc-fastrpc-fix-use-after-free-race-in-fastrpc_map_create.patch
 +misc-fastrpc-fix-dma-address-corruption-due-to-find_vma-misuse.patch
 +misc-fastrpc-fix-null-pointer-dereference-in-rpmsg-callback.patch
 +net-mlx5-reorder-completion-before-putting-command-entry-in-cmd_work_handler.patch
 +net-bonding-fix-null-pointer-dereference-in-bond_do_ioctl.patch
 +net-mv643xx-fix-of-node-refcount.patch
 +net-rds-clear-i_sends-on-setup-unwind.patch
 +nvmem-layouts-onie-tlv-fix-hang-on-unknown-types.patch
 +octeontx2-af-fix-memory-leak-in-rvu_setup_hw_resources.patch
+ bpf-track-equal-scalars-history-on-per-instruction-l.patch
+ bpf-remove-mark_precise_scalar_ids.patch
+ selftests-bpf-tests-for-per-insn-sync_linked_regs-pr.patch
+ selftests-bpf-update-comments-find_equal_scalars-syn.patch