git.ipfire.org Git - thirdparty/kernel/stable-queue.git/log

6.12-stable patches

added patches:
drm-amd-display-add-missing-csc-entries-for-bt.2020-for-dce-ips.patch
drm-amd-display-bound-vbios-record-chain-walk-loops.patch
drm-amd-display-clamp-hdmi-hdcp2-rx_id_list-read-to-buffer-size.patch
drm-amd-display-clamp-vbios-hdmi-retimer-register-count-to-array-size.patch
drm-amd-display-fix-null-deref-and-buffer-over-read-in-sdp-debugfs.patch
drm-amd-display-use-krealloc_array-in-dal_vector_reserve.patch
drm-amd-pm-fix-smu13-power-limit-default-cap-calculation.patch
drm-amd-pm-mark-metrics.energy_accumulator-is-invalid-for-smu-14.0.2.patch
drm-amd-pm-smu_v14_0_0-use-softmin-for-gfxclk-in-set_soft_freq_limited_range.patch
drm-amdgpu-restart-the-cs-if-some-parts-of-the-vm-are-still-invalidated.patch
drm-amdkfd-fix-buffer-overflow-in-sdma-queue-checkpoint-restore-on-gfx11.patch
drm-amdkfd-fix-null-dereference-in-get_queue_ids.patch
drm-v3d-fix-vaddr-leak-when-indirect-csd-has-zeroed-workgroups.patch
drm-xe-clear-pending_disable-before-signaling-suspend-fence.patch

7.0-stable patches

added patches:
drm-amd-display-add-missing-csc-entries-for-bt.2020-for-dce-ips.patch
drm-amd-display-bound-vbios-record-chain-walk-loops.patch
drm-amd-display-clamp-hdmi-hdcp2-rx_id_list-read-to-buffer-size.patch
drm-amd-display-clamp-vbios-hdmi-retimer-register-count-to-array-size.patch
drm-amd-display-fix-null-deref-and-buffer-over-read-in-sdp-debugfs.patch
drm-amd-display-fix-out-of-bounds-read-in-dp_get_eq_aux_rd_interval.patch
drm-amd-display-use-krealloc_array-in-dal_vector_reserve.patch
drm-amd-pm-apply-smu-13.0.10-workaround-during-mp1-unload.patch
drm-amd-pm-fix-smu13-power-limit-default-cap-calculation.patch
drm-amd-pm-mark-metrics.energy_accumulator-is-invalid-for-smu-14.0.2.patch
drm-amd-pm-smu_v14_0_0-use-softmin-for-gfxclk-in-set_soft_freq_limited_range.patch
drm-amdgpu-fix-incorrect-vram-gart-mappings-on-non-4k-page-size-systems.patch
drm-amdgpu-fix-waiting-for-all-submissions-for-userptrs.patch
drm-amdgpu-restart-the-cs-if-some-parts-of-the-vm-are-still-invalidated.patch
drm-amdgpu-set-noretry-1-as-default-for-gfx-10.1.x-navi10-12-14.patch
drm-amdkfd-fix-buffer-overflow-in-sdma-queue-checkpoint-restore-on-gfx11.patch
drm-amdkfd-fix-null-dereference-in-get_queue_ids.patch
drm-v3d-fix-global-performance-monitor-reference-counting.patch
drm-v3d-fix-vaddr-leak-when-indirect-csd-has-zeroed-workgroups.patch
drm-v3d-skip-csd-when-it-has-zeroed-workgroups.patch
drm-v3d-wait-for-pending-l2t-flush-before-cleaning-caches.patch
drm-xe-clear-pending_disable-before-signaling-suspend-fence.patch
drm-xe-display-fix-oops-in-suspend-shutdown-without-display.patch
drm-xe-multi_queue-skip-submit-when-primary-queue-is-suspended.patch

6.18-stable patches

added patches:
drm-amd-display-add-missing-csc-entries-for-bt.2020-for-dce-ips.patch
drm-amd-display-bound-vbios-record-chain-walk-loops.patch
drm-amd-display-clamp-hdmi-hdcp2-rx_id_list-read-to-buffer-size.patch
drm-amd-display-clamp-vbios-hdmi-retimer-register-count-to-array-size.patch
drm-amd-display-fix-null-deref-and-buffer-over-read-in-sdp-debugfs.patch
drm-amd-display-fix-out-of-bounds-read-in-dp_get_eq_aux_rd_interval.patch
drm-amd-display-use-krealloc_array-in-dal_vector_reserve.patch
drm-amd-pm-fix-smu13-power-limit-default-cap-calculation.patch
drm-amd-pm-mark-metrics.energy_accumulator-is-invalid-for-smu-14.0.2.patch
drm-amd-pm-smu_v14_0_0-use-softmin-for-gfxclk-in-set_soft_freq_limited_range.patch
drm-amdgpu-fix-waiting-for-all-submissions-for-userptrs.patch
drm-amdgpu-restart-the-cs-if-some-parts-of-the-vm-are-still-invalidated.patch
drm-amdgpu-set-noretry-1-as-default-for-gfx-10.1.x-navi10-12-14.patch
drm-amdkfd-fix-buffer-overflow-in-sdma-queue-checkpoint-restore-on-gfx11.patch
drm-amdkfd-fix-null-dereference-in-get_queue_ids.patch
drm-v3d-fix-global-performance-monitor-reference-counting.patch
drm-v3d-fix-vaddr-leak-when-indirect-csd-has-zeroed-workgroups.patch
drm-v3d-skip-csd-when-it-has-zeroed-workgroups.patch
drm-v3d-wait-for-pending-l2t-flush-before-cleaning-caches.patch
drm-xe-clear-pending_disable-before-signaling-suspend-fence.patch
drm-xe-display-fix-oops-in-suspend-shutdown-without-display.patch

6.12-stable patches

added patches:
mm-hugetlb-restore-reservation-on-error-in-hugetlb-folio-copy-paths.patch
mmc-core-fix-host-controller-programming-for-fixed-driver-type.patch
mmc-dw_mmc-rockchip-add-missing-private-data-for-very-old-controllers.patch
mmc-litex_mmc-set-mandatory-idle-clocks-before-cmd0.patch
mmc-renesas_sdhi-add-of-entry-for-rz-g2h-soc.patch
mmc-sdhci-add-signal-voltage-switch-in-sdhci_resume_host.patch
pmdomain-imx-fix-of-node-refcount.patch
rtase-avoid-sleeping-in-get_stats64.patch
rtase-reset-tx-subqueue-when-clearing-tx-ring.patch
sctp-diag-reject-stale-associations-in-dump_one-path.patch
sctp-stream-fully-roll-back-denied-add-stream-state.patch
slimbus-qcom-ngd-ctrl-avoid-abba-on-tx_lock-ctrl-lock.patch
slimbus-qcom-ngd-ctrl-balance-pm_runtime-enablement-for-ngd.patch
slimbus-qcom-ngd-ctrl-correct-pdr-and-ssr-cleanup-ownership.patch
slimbus-qcom-ngd-ctrl-fix-of-node-refcount.patch
slimbus-qcom-ngd-ctrl-fix-probe-error-path-ordering.patch
slimbus-qcom-ngd-ctrl-fix-up-platform_driver-registration.patch
slimbus-qcom-ngd-ctrl-initialize-controller-resources-in-controller.patch
slimbus-qcom-ngd-ctrl-register-callbacks-after-creating-the-ngd.patch
thunderbolt-bound-root-directory-content-to-block-size.patch
thunderbolt-clamp-xdomain-response-data-copy-to-allocation-size.patch
thunderbolt-limit-xdomain-response-copy-to-actual-frame-size.patch
thunderbolt-reject-zero-length-property-entries-in-validator.patch
thunderbolt-validate-xdomain-request-packet-size-before-type-cast.patch

6.6-stable patches

added patches:
mm-hugetlb-restore-reservation-on-error-in-hugetlb-folio-copy-paths.patch
mmc-core-fix-host-controller-programming-for-fixed-driver-type.patch
mmc-litex_mmc-set-mandatory-idle-clocks-before-cmd0.patch
mmc-renesas_sdhi-add-of-entry-for-rz-g2h-soc.patch
mmc-sdhci-add-signal-voltage-switch-in-sdhci_resume_host.patch
sctp-diag-reject-stale-associations-in-dump_one-path.patch
sctp-stream-fully-roll-back-denied-add-stream-state.patch
slimbus-qcom-ngd-ctrl-avoid-abba-on-tx_lock-ctrl-lock.patch
slimbus-qcom-ngd-ctrl-fix-of-node-refcount.patch
thunderbolt-bound-root-directory-content-to-block-size.patch
thunderbolt-clamp-xdomain-response-data-copy-to-allocation-size.patch
thunderbolt-limit-xdomain-response-copy-to-actual-frame-size.patch
thunderbolt-reject-zero-length-property-entries-in-validator.patch
thunderbolt-validate-xdomain-request-packet-size-before-type-cast.patch

6.1-stable patches

added patches:
mmc-core-fix-host-controller-programming-for-fixed-driver-type.patch
mmc-litex_mmc-set-mandatory-idle-clocks-before-cmd0.patch
mmc-renesas_sdhi-add-of-entry-for-rz-g2h-soc.patch
mmc-sdhci-add-signal-voltage-switch-in-sdhci_resume_host.patch
sctp-diag-reject-stale-associations-in-dump_one-path.patch
sctp-stream-fully-roll-back-denied-add-stream-state.patch
slimbus-qcom-ngd-ctrl-avoid-abba-on-tx_lock-ctrl-lock.patch
slimbus-qcom-ngd-ctrl-fix-of-node-refcount.patch
thunderbolt-bound-root-directory-content-to-block-size.patch
thunderbolt-clamp-xdomain-response-data-copy-to-allocation-size.patch
thunderbolt-limit-xdomain-response-copy-to-actual-frame-size.patch
thunderbolt-reject-zero-length-property-entries-in-validator.patch
thunderbolt-validate-xdomain-request-packet-size-before-type-cast.patch

5.15-stable patches

added patches:
mmc-core-fix-host-controller-programming-for-fixed-driver-type.patch
mmc-renesas_sdhi-add-of-entry-for-rz-g2h-soc.patch
mmc-sdhci-add-signal-voltage-switch-in-sdhci_resume_host.patch
sctp-diag-reject-stale-associations-in-dump_one-path.patch
sctp-stream-fully-roll-back-denied-add-stream-state.patch
slimbus-qcom-ngd-ctrl-avoid-abba-on-tx_lock-ctrl-lock.patch
thunderbolt-bound-root-directory-content-to-block-size.patch
thunderbolt-clamp-xdomain-response-data-copy-to-allocation-size.patch
thunderbolt-limit-xdomain-response-copy-to-actual-frame-size.patch
thunderbolt-reject-zero-length-property-entries-in-validator.patch

5.10-stable patches

added patches:
mmc-core-fix-host-controller-programming-for-fixed-driver-type.patch
mmc-sdhci-add-signal-voltage-switch-in-sdhci_resume_host.patch
sctp-diag-reject-stale-associations-in-dump_one-path.patch
sctp-stream-fully-roll-back-denied-add-stream-state.patch
thunderbolt-bound-root-directory-content-to-block-size.patch
thunderbolt-clamp-xdomain-response-data-copy-to-allocation-size.patch
thunderbolt-limit-xdomain-response-copy-to-actual-frame-size.patch
thunderbolt-reject-zero-length-property-entries-in-validator.patch

6.18-stable patches

added patches:
drm-gem-try-to-fix-change_handle-ioctl-attempt-4.patch
mm-cma-fix-reserved-page-leak-on-activation-failure.patch
mm-cma_debug-fix-invalid-accesses-for-inactive-cma-areas.patch
mm-damon-lru_sort-handle-ctx-allocation-failure.patch
mm-damon-reclaim-handle-ctx-allocation-failure.patch
mm-hugetlb-avoid-false-positive-lockdep-assertion.patch
mm-hugetlb-restore-reservation-on-error-in-hugetlb-folio-copy-paths.patch
mm-list_lru-drain-before-clearing-xarray-entry-on-reparent.patch
mm-mincore-handle-non-swap-entries-before-config_swap-guard.patch
mmc-core-fix-host-controller-programming-for-fixed-driver-type.patch
mmc-dw_mmc-rockchip-add-missing-private-data-for-very-old-controllers.patch
mmc-litex_mmc-set-mandatory-idle-clocks-before-cmd0.patch
mmc-renesas_sdhi-add-of-entry-for-rz-g2h-soc.patch
mmc-sdhci-add-signal-voltage-switch-in-sdhci_resume_host.patch
pmdomain-imx-fix-of-node-refcount.patch
pmdomain-ti_sci-add-wakeup-constraint-to-parent-devices-of-wakeup-source.patch
rtase-avoid-sleeping-in-get_stats64.patch
rtase-reset-tx-subqueue-when-clearing-tx-ring.patch
rxrpc-fix-the-ack-parser-to-extract-the-sack-table-for-parsing.patch
sctp-diag-reject-stale-associations-in-dump_one-path.patch
sctp-stream-fully-roll-back-denied-add-stream-state.patch
slimbus-qcom-ngd-ctrl-avoid-abba-on-tx_lock-ctrl-lock.patch
slimbus-qcom-ngd-ctrl-balance-pm_runtime-enablement-for-ngd.patch
slimbus-qcom-ngd-ctrl-correct-pdr-and-ssr-cleanup-ownership.patch
slimbus-qcom-ngd-ctrl-fix-of-node-refcount.patch
slimbus-qcom-ngd-ctrl-fix-probe-error-path-ordering.patch
slimbus-qcom-ngd-ctrl-fix-up-platform_driver-registration.patch
slimbus-qcom-ngd-ctrl-initialize-controller-resources-in-controller.patch
slimbus-qcom-ngd-ctrl-register-callbacks-after-creating-the-ngd.patch
thunderbolt-bound-root-directory-content-to-block-size.patch
thunderbolt-clamp-xdomain-response-data-copy-to-allocation-size.patch
thunderbolt-limit-xdomain-response-copy-to-actual-frame-size.patch
thunderbolt-reject-zero-length-property-entries-in-validator.patch
thunderbolt-validate-xdomain-request-packet-size-before-type-cast.patch

7.0-stable patches

added patches:
drm-gem-try-to-fix-change_handle-ioctl-attempt-4.patch
drm-i915-fix-color-blob-reference-handling-in-intel_plane_state.patch
mm-cma-fix-reserved-page-leak-on-activation-failure.patch
mm-cma_debug-fix-invalid-accesses-for-inactive-cma-areas.patch
mm-damon-lru_sort-handle-ctx-allocation-failure.patch
mm-damon-reclaim-handle-ctx-allocation-failure.patch
mm-huge_memory-use-correct-flags-for-device-private-pmd-entry.patch
mm-hugetlb-avoid-false-positive-lockdep-assertion.patch
mm-hugetlb-restore-reservation-on-error-in-hugetlb-folio-copy-paths.patch
mm-list_lru-drain-before-clearing-xarray-entry-on-reparent.patch
mm-mincore-handle-non-swap-entries-before-config_swap-guard.patch
mmc-core-fix-host-controller-programming-for-fixed-driver-type.patch
mmc-dw_mmc-rockchip-add-missing-private-data-for-very-old-controllers.patch
mmc-litex_mmc-set-mandatory-idle-clocks-before-cmd0.patch
mmc-renesas_sdhi-add-of-entry-for-rz-g2h-soc.patch
mmc-sdhci-add-signal-voltage-switch-in-sdhci_resume_host.patch
mmc-sdhci-of-dwcmshc-fix-reset-clk-and-sdio-support-for-eswin-eic7700.patch
pmdomain-imx-fix-of-node-refcount.patch
pmdomain-ti_sci-add-wakeup-constraint-to-parent-devices-of-wakeup-source.patch
rtase-avoid-sleeping-in-get_stats64.patch
rtase-reset-tx-subqueue-when-clearing-tx-ring.patch
rxrpc-fix-the-ack-parser-to-extract-the-sack-table-for-parsing.patch
sctp-diag-reject-stale-associations-in-dump_one-path.patch
sctp-stream-fully-roll-back-denied-add-stream-state.patch
slimbus-qcom-ngd-ctrl-avoid-abba-on-tx_lock-ctrl-lock.patch
slimbus-qcom-ngd-ctrl-balance-pm_runtime-enablement-for-ngd.patch
slimbus-qcom-ngd-ctrl-correct-pdr-and-ssr-cleanup-ownership.patch
slimbus-qcom-ngd-ctrl-fix-of-node-refcount.patch
slimbus-qcom-ngd-ctrl-fix-probe-error-path-ordering.patch
slimbus-qcom-ngd-ctrl-fix-up-platform_driver-registration.patch
slimbus-qcom-ngd-ctrl-initialize-controller-resources-in-controller.patch
slimbus-qcom-ngd-ctrl-register-callbacks-after-creating-the-ngd.patch
thunderbolt-bound-root-directory-content-to-block-size.patch
thunderbolt-clamp-xdomain-response-data-copy-to-allocation-size.patch
thunderbolt-limit-xdomain-response-copy-to-actual-frame-size.patch
thunderbolt-reject-zero-length-property-entries-in-validator.patch
thunderbolt-validate-xdomain-request-packet-size-before-type-cast.patch

Merge branch 'master' of gitolite.kernel.org:/pub/scm/linux/kernel/git/stable/stable-queue

6.18-stable patches

added patches:
io_uring-kbuf-don-t-truncate-end-buffer-for-bundles.patch
io_uring-wait-fix-min_timeout-behavior.patch

6.12-stable patches

added patches:
io_uring-kbuf-don-t-truncate-end-buffer-for-bundles.patch
io_uring-wait-fix-min_timeout-behavior.patch

6.12-stable patches

added patches:
fs-qnx6-fix-pointer-arithmetic-in-directory-iteration.patch
fuse-reject-fuse_notify-pagecache-ops-on-directories.patch
i2c-qcom-cci-fix-null-pointer-dereference-in-cci_remove.patch
i2c-stm32f7-fix-timing-computation-ignoring-i2c-analog-filter.patch
i2c-tegra-fix-noirq-suspend-resume.patch
input-atkbd-add-dmi-quirk-for-lenovo-yoga-air-14-83qk.patch
input-atkbd-skip-deactivate-for-honor-bcc-n-s-internal-keyboard.patch
ipc-shm-serialize-orphan-cleanup-with-shm_nattch-updates.patch
misc-fastrpc-fix-dma-address-corruption-due-to-find_vma-misuse.patch
misc-fastrpc-fix-null-pointer-dereference-in-rpmsg-callback.patch
misc-fastrpc-fix-use-after-free-of-fastrpc_user-in-workqueue-context.patch
misc-fastrpc-fix-use-after-free-race-in-fastrpc_map_create.patch
net-bonding-fix-null-pointer-dereference-in-bond_do_ioctl.patch
net-mlx5-reorder-completion-before-putting-command-entry-in-cmd_work_handler.patch
net-mv643xx-fix-of-node-refcount.patch
net-rds-clear-i_sends-on-setup-unwind.patch
nvmem-core-fix-use-after-free-bugs-in-error-paths.patch
nvmem-layouts-onie-tlv-fix-hang-on-unknown-types.patch
octeontx2-af-fix-memory-leak-in-rvu_setup_hw_resources.patch

6.6-stable patches

added patches:
fuse-reject-fuse_notify-pagecache-ops-on-directories.patch
i2c-qcom-cci-fix-null-pointer-dereference-in-cci_remove.patch
i2c-stm32f7-fix-timing-computation-ignoring-i2c-analog-filter.patch
i2c-tegra-fix-noirq-suspend-resume.patch
input-atkbd-add-dmi-quirk-for-lenovo-yoga-air-14-83qk.patch
input-atkbd-skip-deactivate-for-honor-bcc-n-s-internal-keyboard.patch
ipc-shm-serialize-orphan-cleanup-with-shm_nattch-updates.patch
misc-fastrpc-fix-dma-address-corruption-due-to-find_vma-misuse.patch
misc-fastrpc-fix-null-pointer-dereference-in-rpmsg-callback.patch
misc-fastrpc-fix-use-after-free-of-fastrpc_user-in-workqueue-context.patch
misc-fastrpc-fix-use-after-free-race-in-fastrpc_map_create.patch
net-bonding-fix-null-pointer-dereference-in-bond_do_ioctl.patch
net-mlx5-reorder-completion-before-putting-command-entry-in-cmd_work_handler.patch
net-mv643xx-fix-of-node-refcount.patch
net-rds-clear-i_sends-on-setup-unwind.patch
nvmem-layouts-onie-tlv-fix-hang-on-unknown-types.patch
octeontx2-af-fix-memory-leak-in-rvu_setup_hw_resources.patch

6.1-stable patches

added patches:
fuse-reject-fuse_notify-pagecache-ops-on-directories.patch
i2c-qcom-cci-fix-null-pointer-dereference-in-cci_remove.patch
i2c-stm32f7-fix-timing-computation-ignoring-i2c-analog-filter.patch
i2c-tegra-fix-noirq-suspend-resume.patch
input-atkbd-add-dmi-quirk-for-lenovo-yoga-air-14-83qk.patch
input-atkbd-skip-deactivate-for-honor-bcc-n-s-internal-keyboard.patch
ipc-shm-serialize-orphan-cleanup-with-shm_nattch-updates.patch
misc-fastrpc-fix-dma-address-corruption-due-to-find_vma-misuse.patch
misc-fastrpc-fix-use-after-free-of-fastrpc_user-in-workqueue-context.patch
misc-fastrpc-fix-use-after-free-race-in-fastrpc_map_create.patch
net-bonding-fix-null-pointer-dereference-in-bond_do_ioctl.patch
net-mlx5-reorder-completion-before-putting-command-entry-in-cmd_work_handler.patch
net-mv643xx-fix-of-node-refcount.patch
net-rds-clear-i_sends-on-setup-unwind.patch
octeontx2-af-fix-memory-leak-in-rvu_setup_hw_resources.patch

5.15-stable patches

added patches:
fuse-reject-fuse_notify-pagecache-ops-on-directories.patch
i2c-qcom-cci-fix-null-pointer-dereference-in-cci_remove.patch
i2c-stm32f7-fix-timing-computation-ignoring-i2c-analog-filter.patch
i2c-tegra-fix-noirq-suspend-resume.patch
input-atkbd-add-dmi-quirk-for-lenovo-yoga-air-14-83qk.patch
input-atkbd-skip-deactivate-for-honor-bcc-n-s-internal-keyboard.patch
ipc-shm-serialize-orphan-cleanup-with-shm_nattch-updates.patch
misc-fastrpc-fix-dma-address-corruption-due-to-find_vma-misuse.patch
misc-fastrpc-fix-use-after-free-of-fastrpc_user-in-workqueue-context.patch
net-bonding-fix-null-pointer-dereference-in-bond_do_ioctl.patch
net-mv643xx-fix-of-node-refcount.patch
net-rds-clear-i_sends-on-setup-unwind.patch

5.10-stable patches

added patches:
fuse-reject-fuse_notify-pagecache-ops-on-directories.patch
i2c-qcom-cci-fix-null-pointer-dereference-in-cci_remove.patch
i2c-tegra-fix-noirq-suspend-resume.patch
input-atkbd-add-dmi-quirk-for-lenovo-yoga-air-14-83qk.patch
input-atkbd-skip-deactivate-for-honor-bcc-n-s-internal-keyboard.patch
ipc-shm-serialize-orphan-cleanup-with-shm_nattch-updates.patch
misc-fastrpc-fix-use-after-free-of-fastrpc_user-in-workqueue-context.patch
net-bonding-fix-null-pointer-dereference-in-bond_do_ioctl.patch
net-mv643xx-fix-of-node-refcount.patch
net-rds-clear-i_sends-on-setup-unwind.patch

6.18-stable patches

added patches:
firmware-samsung-acpm-fix-mailbox-channel-leak-on-probe-error.patch
fs-qnx6-fix-pointer-arithmetic-in-directory-iteration.patch
fuse-limit-fuse_notify_retrieve-to-uptodate-folios.patch
fuse-reject-fuse_notify-pagecache-ops-on-directories.patch
futex-requeue-prevent-null-pointer-dereference-in-remove_waiter-on-self-deadlock.patch
i2c-imx-fix-clock-and-pinctrl-state-inconsistency-in-runtime-pm.patch
i2c-imx-lpi2c-fix-resource-leaks-switching-to-devm_dma_request_chan.patch
i2c-qcom-cci-fix-null-pointer-dereference-in-cci_remove.patch
i2c-stm32f7-fix-timing-computation-ignoring-i2c-analog-filter.patch
i2c-tegra-fix-noirq-suspend-resume.patch
input-atkbd-add-dmi-quirk-for-lenovo-yoga-air-14-83qk.patch
input-atkbd-skip-deactivate-for-honor-bcc-n-s-internal-keyboard.patch
iommu-dma-do-not-try-to-iommu_map-a-0-length-region-in-swiotlb.patch
ipc-shm-serialize-orphan-cleanup-with-shm_nattch-updates.patch
locking-rtmutex-skip-remove_waiter-when-waiter-is-not-enqueued.patch
memcg-use-round-robin-victim-selection-in-refill_stock.patch
misc-fastrpc-fix-dma-address-corruption-due-to-find_vma-misuse.patch
misc-fastrpc-fix-null-pointer-dereference-in-rpmsg-callback.patch
misc-fastrpc-fix-use-after-free-of-fastrpc_user-in-workqueue-context.patch
misc-fastrpc-fix-use-after-free-race-in-fastrpc_map_create.patch
net-airoha-add-null-check-for-of_reserved_mem_lookup-in-airoha_qdma_init_hfwd_queues.patch
net-bonding-fix-null-pointer-dereference-in-bond_do_ioctl.patch
net-mlx5-reorder-completion-before-putting-command-entry-in-cmd_work_handler.patch
net-mv643xx-fix-of-node-refcount.patch
net-phonet-free-phonet_device-after-rcu-grace-period.patch
net-rds-clear-i_sends-on-setup-unwind.patch
net-sfp-initialize-i2c_block_size-at-adapter-configure-time.patch
nvmem-core-fix-use-after-free-bugs-in-error-paths.patch
nvmem-layouts-onie-tlv-fix-hang-on-unknown-types.patch
octeontx2-af-fix-memory-leak-in-rvu_setup_hw_resources.patch
pinctrl-mcp23s08-read-spi-present-mask-as-u8-not-u32.patch

7.0-stable patches

added patches:
accel-ethosu-fix-arithmetic-issues-in-dma_length.patch
accel-ethosu-fix-ifm-region-index-out-of-bounds-in-command-stream-parser.patch
accel-ethosu-fix-oob-write-in-ethosu_gem_cmdstream_copy_and_validate.patch
accel-ethosu-fix-wrong-weight-index-in-npu_set_scale1_length-on-u85.patch
accel-ethosu-reject-dma-commands-with-uninitialized-length.patch
accel-ethosu-reject-npu_op_resize-commands-from-userspace.patch
firmware-samsung-acpm-fix-mailbox-channel-leak-on-probe-error.patch
fs-qnx6-fix-pointer-arithmetic-in-directory-iteration.patch
fuse-limit-fuse_notify_retrieve-to-uptodate-folios.patch
fuse-reject-fuse_notify-pagecache-ops-on-directories.patch
futex-requeue-prevent-null-pointer-dereference-in-remove_waiter-on-self-deadlock.patch
i2c-imx-fix-clock-and-pinctrl-state-inconsistency-in-runtime-pm.patch
i2c-imx-lpi2c-fix-resource-leaks-switching-to-devm_dma_request_chan.patch
i2c-qcom-cci-fix-null-pointer-dereference-in-cci_remove.patch
i2c-stm32f7-fix-timing-computation-ignoring-i2c-analog-filter.patch
i2c-tegra-fix-noirq-suspend-resume.patch
input-atkbd-add-dmi-quirk-for-lenovo-yoga-air-14-83qk.patch
input-atkbd-skip-deactivate-for-honor-bcc-n-s-internal-keyboard.patch
iomap-avoid-potential-null-folio-mapping-deref-during-error-reporting.patch
iommu-dma-do-not-try-to-iommu_map-a-0-length-region-in-swiotlb.patch
ipc-shm-serialize-orphan-cleanup-with-shm_nattch-updates.patch
locking-rtmutex-skip-remove_waiter-when-waiter-is-not-enqueued.patch
memcg-use-round-robin-victim-selection-in-refill_stock.patch
memory-atmel-ebi-allow-deferred-probing.patch
misc-fastrpc-fix-dma-address-corruption-due-to-find_vma-misuse.patch
misc-fastrpc-fix-null-pointer-dereference-in-rpmsg-callback.patch
misc-fastrpc-fix-use-after-free-of-fastrpc_user-in-workqueue-context.patch
misc-fastrpc-fix-use-after-free-race-in-fastrpc_map_create.patch
net-airoha-add-null-check-for-of_reserved_mem_lookup-in-airoha_qdma_init_hfwd_queues.patch
net-bonding-fix-null-pointer-dereference-in-bond_do_ioctl.patch
net-mlx5-reorder-completion-before-putting-command-entry-in-cmd_work_handler.patch
net-mv643xx-fix-of-node-refcount.patch
net-phonet-free-phonet_device-after-rcu-grace-period.patch
net-rds-clear-i_sends-on-setup-unwind.patch
net-sfp-initialize-i2c_block_size-at-adapter-configure-time.patch
nvmem-core-fix-use-after-free-bugs-in-error-paths.patch
nvmem-layouts-onie-tlv-fix-hang-on-unknown-types.patch
octeontx2-af-fix-memory-leak-in-rvu_setup_hw_resources.patch
pinctrl-mcp23s08-read-spi-present-mask-as-u8-not-u32.patch

7.0-stable patches

added patches:
alsa-timer-fix-uaf-at-snd_timer_user_params.patch
alsa-timer-forcibly-close-timer-instances-at-closing.patch
arm-9474-1-io-avoid-kasan-instrumentation-of-raw-halfword-i-o.patch
arm-9475-1-entry-use-byte-load-for-kasan-vmap-stack-shadow.patch
arm-socfpga-fix-of-node-refcount-leak-in-smp-setup.patch
arm64-mm-call-pagetable-dtor-when-freeing-hot-removed-page-tables.patch
asoc-fsl_sai-fix-32-slots-tdm-broken-by-integer-shift-ub-in-xmr-write.patch
bnxt_en-fix-null-pointer-dereference.patch
drivers-hv-vmbus-improve-the-logic-of-reserving-fb_mmio-on-gen2-vms.patch
drm-amd-display-reject-gpio_bitshift-32-in-bios_parser_get_gpio_pin_info.patch
drm-virtio-fix-dma_fence-refcount-leak-on-error-in-virtio_gpu_dma_fence_wait.patch
fhandle-fix-uaf-due-to-unlocked-mnt_ns-read-in-may_decode_fh.patch
hv-utils-handle-and-propagate-errors-in-kvp_register.patch
ib-isert-reject-login-pdus-shorter-than-iser_headers_len.patch
inet-frags-fix-use-after-free-caused-by-the-fqdir_pre_exit-flush.patch
io_uring-kbuf-don-t-truncate-end-buffer-for-bundles.patch
io_uring-net-inherit-ioring_cqe_f_buf_more-across-bundle-recv-retries.patch
io_uring-wait-fix-min_timeout-behavior.patch
ksmbd-fix-use-after-free-of-a-deferred-file_lock-on-double-smb2_cancel.patch
mm-damon-ops-common-call-folio_test_lru-after-folio_get.patch
mm-huge_memory-update-file-pmd-counter-before-folio_put.patch
mm-huge_memory-update-file-pud-counter-before-folio_put.patch
mptcp-add-addr-always-drop-other-suboptions.patch
mptcp-allow-subflow-rcv-wnd-to-shrink.patch
mptcp-check-desc-count-in-read_sock.patch
mptcp-close-toctou-race-while-computing-rcv_wnd.patch
mptcp-fix-missing-wakeups-in-edge-scenarios.patch
mptcp-fix-retransmission-loop-when-csum-is-enabled.patch
mptcp-pm-fix-extra_subflows-underflow-on-userspace-pm-subflow-creation.patch
mptcp-sockopt-check-timestamping-ret-value.patch
mptcp-sockopt-set-sockopt-on-all-subflows.patch
ovl-keep-err-zero-after-successful-ovl_cache_get.patch
pidfd-refuse-access-to-tasks-that-have-started-exiting-harder.patch
rdma-core-validate-cpu_id-against-nr_cpu_ids-in-dmah-alloc.patch
rdma-core-validate-the-passed-in-fops-for-ib_get_ucaps.patch
rdma-srp-bound-srp_rsp-sense-copy-by-the-received-length.patch
s390-remove-generic_lockbreak-kconfig-option.patch
selftests-mptcp-add-test-for-extra_subflows-underflow-on-userspace-pm.patch
spi-qcom-geni-fix-cs_change-handling-on-the-last-transfer.patch
staging-rtl8723bs-fix-buffer-over-read-in-rtw_update_protection.patch
staging-rtl8723bs-rtw_mlme-add-bounds-checks-before-ie_length-subtraction.patch
timers-migration-fix-livelock-in-tmigr_handle_remote_up.patch
udp-clear-skb-dev-before-running-a-sockmap-verdict.patch
usb-serial-io_ti-fix-heap-overflow-in-build_i2c_fw_hdr.patch
usb-serial-io_ti-fix-heap-overflow-in-get_manuf_info.patch
usb-serial-kl5kusb105-fix-bulk-out-buffer-overflow.patch
usb-serial-option-add-usb-id-for-dell-wireless-dw5826e-m.patch
vsock-vmci-fix-sk_ack_backlog-leak-on-failed-handshake.patch
wifi-iwlwifi-pcie-simplify-the-resume-flow-if-fast-resume-is-not-used.patch
wifi-nl80211-reject-oversized-ema-rnr-lists.patch
xfrm-espintcp-do-not-reuse-an-in-progress-partial-send.patch
xfrm-iptfs-fix-abba-deadlock-in-iptfs_destroy_state.patch
xfrm-iptfs-preserve-shared-frag-marker-in-iptfs_consume_frags.patch
xfs-fix-error-returns-in-cow-fork-repair.patch
xfs-fix-rtgroup-cleanup-in-cow-fork-repair.patch
zram-fix-use-after-free-in-zram_bvec_write_partial.patch

6.18-stable patches

added patches:
alsa-timer-fix-uaf-at-snd_timer_user_params.patch
alsa-timer-forcibly-close-timer-instances-at-closing.patch
arm-9474-1-io-avoid-kasan-instrumentation-of-raw-halfword-i-o.patch
arm-9475-1-entry-use-byte-load-for-kasan-vmap-stack-shadow.patch
arm-socfpga-fix-of-node-refcount-leak-in-smp-setup.patch
arm64-mm-call-pagetable-dtor-when-freeing-hot-removed-page-tables.patch
asoc-fsl_sai-fix-32-slots-tdm-broken-by-integer-shift-ub-in-xmr-write.patch
bnxt_en-fix-null-pointer-dereference.patch
drm-amd-display-reject-gpio_bitshift-32-in-bios_parser_get_gpio_pin_info.patch
drm-virtio-fix-dma_fence-refcount-leak-on-error-in-virtio_gpu_dma_fence_wait.patch
fhandle-fix-uaf-due-to-unlocked-mnt_ns-read-in-may_decode_fh.patch
ib-isert-reject-login-pdus-shorter-than-iser_headers_len.patch
inet-frags-fix-use-after-free-caused-by-the-fqdir_pre_exit-flush.patch
io_uring-net-inherit-ioring_cqe_f_buf_more-across-bundle-recv-retries.patch
ksmbd-fix-use-after-free-of-a-deferred-file_lock-on-double-smb2_cancel.patch
mm-damon-ops-common-call-folio_test_lru-after-folio_get.patch
mm-huge_memory-update-file-pmd-counter-before-folio_put.patch
mm-huge_memory-update-file-pud-counter-before-folio_put.patch
mptcp-add-addr-always-drop-other-suboptions.patch
mptcp-allow-subflow-rcv-wnd-to-shrink.patch
mptcp-close-toctou-race-while-computing-rcv_wnd.patch
mptcp-fix-retransmission-loop-when-csum-is-enabled.patch
mptcp-pm-fix-extra_subflows-underflow-on-userspace-pm-subflow-creation.patch
mptcp-sockopt-check-timestamping-ret-value.patch
mptcp-sockopt-set-sockopt-on-all-subflows.patch
pidfd-refuse-access-to-tasks-that-have-started-exiting-harder.patch
rdma-core-validate-cpu_id-against-nr_cpu_ids-in-dmah-alloc.patch
rdma-core-validate-the-passed-in-fops-for-ib_get_ucaps.patch
rdma-srp-bound-srp_rsp-sense-copy-by-the-received-length.patch
selftests-mptcp-add-test-for-extra_subflows-underflow-on-userspace-pm.patch
staging-rtl8723bs-fix-buffer-over-read-in-rtw_update_protection.patch
timers-migration-fix-livelock-in-tmigr_handle_remote_up.patch
udp-clear-skb-dev-before-running-a-sockmap-verdict.patch
usb-serial-io_ti-fix-heap-overflow-in-build_i2c_fw_hdr.patch
usb-serial-io_ti-fix-heap-overflow-in-get_manuf_info.patch
usb-serial-kl5kusb105-fix-bulk-out-buffer-overflow.patch
usb-serial-option-add-usb-id-for-dell-wireless-dw5826e-m.patch
vsock-vmci-fix-sk_ack_backlog-leak-on-failed-handshake.patch
wifi-iwlwifi-pcie-simplify-the-resume-flow-if-fast-resume-is-not-used.patch
wifi-nl80211-reject-oversized-ema-rnr-lists.patch
xfrm-espintcp-do-not-reuse-an-in-progress-partial-send.patch
xfrm-iptfs-fix-abba-deadlock-in-iptfs_destroy_state.patch
xfrm-iptfs-preserve-shared-frag-marker-in-iptfs_consume_frags.patch
xfs-fix-error-returns-in-cow-fork-repair.patch
xfs-fix-rtgroup-cleanup-in-cow-fork-repair.patch
zram-fix-use-after-free-in-zram_bvec_write_partial.patch

6.12-stable patches

added patches:
alsa-timer-fix-uaf-at-snd_timer_user_params.patch
alsa-timer-forcibly-close-timer-instances-at-closing.patch
arm-9474-1-io-avoid-kasan-instrumentation-of-raw-halfword-i-o.patch
arm-9475-1-entry-use-byte-load-for-kasan-vmap-stack-shadow.patch
arm-socfpga-fix-of-node-refcount-leak-in-smp-setup.patch
asoc-fsl_sai-fix-32-slots-tdm-broken-by-integer-shift-ub-in-xmr-write.patch
bnxt_en-fix-null-pointer-dereference.patch
drm-amd-display-reject-gpio_bitshift-32-in-bios_parser_get_gpio_pin_info.patch
drm-virtio-fix-dma_fence-refcount-leak-on-error-in-virtio_gpu_dma_fence_wait.patch
ib-isert-reject-login-pdus-shorter-than-iser_headers_len.patch
inet-frags-fix-use-after-free-caused-by-the-fqdir_pre_exit-flush.patch
io_uring-net-inherit-ioring_cqe_f_buf_more-across-bundle-recv-retries.patch
ksmbd-fix-use-after-free-of-a-deferred-file_lock-on-double-smb2_cancel.patch
mm-damon-ops-common-call-folio_test_lru-after-folio_get.patch
mm-huge_memory-update-file-pmd-counter-before-folio_put.patch
mptcp-add-addr-always-drop-other-suboptions.patch
mptcp-allow-subflow-rcv-wnd-to-shrink.patch
mptcp-close-toctou-race-while-computing-rcv_wnd.patch
mptcp-fix-retransmission-loop-when-csum-is-enabled.patch
mptcp-sockopt-check-timestamping-ret-value.patch
pidfd-refuse-access-to-tasks-that-have-started-exiting-harder.patch
rdma-srp-bound-srp_rsp-sense-copy-by-the-received-length.patch
selftests-mptcp-add-test-for-extra_subflows-underflow-on-userspace-pm.patch
timers-migration-fix-livelock-in-tmigr_handle_remote_up.patch
udp-clear-skb-dev-before-running-a-sockmap-verdict.patch
usb-serial-io_ti-fix-heap-overflow-in-build_i2c_fw_hdr.patch
usb-serial-io_ti-fix-heap-overflow-in-get_manuf_info.patch
usb-serial-kl5kusb105-fix-bulk-out-buffer-overflow.patch
usb-serial-option-add-usb-id-for-dell-wireless-dw5826e-m.patch
vsock-vmci-fix-sk_ack_backlog-leak-on-failed-handshake.patch
wifi-nl80211-reject-oversized-ema-rnr-lists.patch
xfrm-espintcp-do-not-reuse-an-in-progress-partial-send.patch
zram-fix-use-after-free-in-zram_bvec_write_partial.patch

6.6-stable patches

added patches:
alsa-timer-fix-uaf-at-snd_timer_user_params.patch
arm-9474-1-io-avoid-kasan-instrumentation-of-raw-halfword-i-o.patch
arm-9475-1-entry-use-byte-load-for-kasan-vmap-stack-shadow.patch
arm-socfpga-fix-of-node-refcount-leak-in-smp-setup.patch
asoc-fsl_sai-fix-32-slots-tdm-broken-by-integer-shift-ub-in-xmr-write.patch
bnxt_en-fix-null-pointer-dereference.patch
drm-amd-display-reject-gpio_bitshift-32-in-bios_parser_get_gpio_pin_info.patch
drm-virtio-fix-dma_fence-refcount-leak-on-error-in-virtio_gpu_dma_fence_wait.patch
ib-isert-reject-login-pdus-shorter-than-iser_headers_len.patch
inet-frags-fix-use-after-free-caused-by-the-fqdir_pre_exit-flush.patch
ksmbd-fix-use-after-free-of-a-deferred-file_lock-on-double-smb2_cancel.patch
mm-damon-ops-common-call-folio_test_lru-after-folio_get.patch
mptcp-allow-subflow-rcv-wnd-to-shrink.patch
mptcp-close-toctou-race-while-computing-rcv_wnd.patch
mptcp-fix-retransmission-loop-when-csum-is-enabled.patch
mptcp-sockopt-check-timestamping-ret-value.patch
pidfd-refuse-access-to-tasks-that-have-started-exiting-harder.patch
rdma-srp-bound-srp_rsp-sense-copy-by-the-received-length.patch
selftests-mptcp-add-test-for-extra_subflows-underflow-on-userspace-pm.patch
udp-clear-skb-dev-before-running-a-sockmap-verdict.patch
usb-serial-io_ti-fix-heap-overflow-in-build_i2c_fw_hdr.patch
usb-serial-io_ti-fix-heap-overflow-in-get_manuf_info.patch
usb-serial-kl5kusb105-fix-bulk-out-buffer-overflow.patch
usb-serial-option-add-usb-id-for-dell-wireless-dw5826e-m.patch
vsock-vmci-fix-sk_ack_backlog-leak-on-failed-handshake.patch
wifi-nl80211-reject-oversized-ema-rnr-lists.patch
xfrm-espintcp-do-not-reuse-an-in-progress-partial-send.patch
zram-fix-use-after-free-in-zram_bvec_write_partial.patch

6.1-stable patches

added patches:
alsa-timer-fix-uaf-at-snd_timer_user_params.patch
arm-9474-1-io-avoid-kasan-instrumentation-of-raw-halfword-i-o.patch
arm-9475-1-entry-use-byte-load-for-kasan-vmap-stack-shadow.patch
arm-socfpga-fix-of-node-refcount-leak-in-smp-setup.patch
bnxt_en-fix-null-pointer-dereference.patch
drm-amd-display-reject-gpio_bitshift-32-in-bios_parser_get_gpio_pin_info.patch
ib-isert-reject-login-pdus-shorter-than-iser_headers_len.patch
ksmbd-fix-use-after-free-of-a-deferred-file_lock-on-double-smb2_cancel.patch
mptcp-allow-subflow-rcv-wnd-to-shrink.patch
mptcp-close-toctou-race-while-computing-rcv_wnd.patch
mptcp-fix-retransmission-loop-when-csum-is-enabled.patch
mptcp-sockopt-check-timestamping-ret-value.patch
pidfd-refuse-access-to-tasks-that-have-started-exiting-harder.patch
rdma-srp-bound-srp_rsp-sense-copy-by-the-received-length.patch
udp-clear-skb-dev-before-running-a-sockmap-verdict.patch
usb-serial-io_ti-fix-heap-overflow-in-build_i2c_fw_hdr.patch
usb-serial-io_ti-fix-heap-overflow-in-get_manuf_info.patch
usb-serial-kl5kusb105-fix-bulk-out-buffer-overflow.patch
usb-serial-option-add-usb-id-for-dell-wireless-dw5826e-m.patch
vsock-vmci-fix-sk_ack_backlog-leak-on-failed-handshake.patch
wifi-nl80211-reject-oversized-ema-rnr-lists.patch
xfrm-espintcp-do-not-reuse-an-in-progress-partial-send.patch

5.15-stable patches

added patches:
alsa-timer-fix-uaf-at-snd_timer_user_params.patch
arm-9474-1-io-avoid-kasan-instrumentation-of-raw-halfword-i-o.patch
arm-socfpga-fix-of-node-refcount-leak-in-smp-setup.patch
bnxt_en-fix-null-pointer-dereference.patch
drm-amd-display-reject-gpio_bitshift-32-in-bios_parser_get_gpio_pin_info.patch
ib-isert-reject-login-pdus-shorter-than-iser_headers_len.patch
mptcp-fix-retransmission-loop-when-csum-is-enabled.patch
mptcp-sockopt-check-timestamping-ret-value.patch
pidfd-refuse-access-to-tasks-that-have-started-exiting-harder.patch
rdma-srp-bound-srp_rsp-sense-copy-by-the-received-length.patch
usb-serial-io_ti-fix-heap-overflow-in-build_i2c_fw_hdr.patch
usb-serial-io_ti-fix-heap-overflow-in-get_manuf_info.patch
usb-serial-kl5kusb105-fix-bulk-out-buffer-overflow.patch
usb-serial-option-add-usb-id-for-dell-wireless-dw5826e-m.patch
vsock-vmci-fix-sk_ack_backlog-leak-on-failed-handshake.patch
xfrm-espintcp-do-not-reuse-an-in-progress-partial-send.patch

5.10-stable patches

added patches:
alsa-timer-fix-uaf-at-snd_timer_user_params.patch
arm-socfpga-fix-of-node-refcount-leak-in-smp-setup.patch
drm-amd-display-reject-gpio_bitshift-32-in-bios_parser_get_gpio_pin_info.patch
ib-isert-reject-login-pdus-shorter-than-iser_headers_len.patch
pidfd-refuse-access-to-tasks-that-have-started-exiting-harder.patch
rdma-srp-bound-srp_rsp-sense-copy-by-the-received-length.patch
usb-serial-io_ti-fix-heap-overflow-in-build_i2c_fw_hdr.patch
usb-serial-io_ti-fix-heap-overflow-in-get_manuf_info.patch
usb-serial-kl5kusb105-fix-bulk-out-buffer-overflow.patch
usb-serial-option-add-usb-id-for-dell-wireless-dw5826e-m.patch
vsock-vmci-fix-sk_ack_backlog-leak-on-failed-handshake.patch
xfrm-espintcp-do-not-reuse-an-in-progress-partial-send.patch

Fixes for all trees

Signed-off-by: Sasha Levin <sashal@kernel.org>

7.0-stable patches

added patches:
accel-ivpu-add-bounds-check-for-firmware-runtime-memory.patch
accel-ivpu-add-bounds-checks-for-firmware-log-indices.patch
accel-ivpu-add-buffer-overflow-check-in-ms-get_info_ioctl.patch
accel-ivpu-fix-signed-integer-truncation-in-ipc-receive.patch
arm-do-not-select-have_rust-when-kasan-is-enabled.patch
bluetooth-hci_sync-reject-oversized-broadcast-announcement-prepend.patch
bluetooth-l2cap-reject-br-edr-signaling-packets-over-mtusig.patch
cfi-include-uaccess.h-for-get_kernel_nofault.patch
cgroup-cpuset-use-effective_xcpus-in-partcmd_update-add-del-mask-calculation.patch
drm-i915-gem-fix-phys-bo-pread-pwrite-with-offset.patch
firmware-stratix10-rsu-fix-null-deref-on-rsu_send_msg-timeout-in-probe.patch
firmware-stratix10-svc-don-t-fail-probe-when-async-ops-unsupported.patch
firmware-stratix10-svc-return-eopnotsupp-when-atf-async-unsupported.patch
hv_netvsc-use-kmap_local_page-in-netvsc_copy_to_send_buf.patch
kvm-arm64-correctly-identify-executable-ptes-at-stage-2.patch
kvm-arm64-nv-fix-handling-of-xn-when-feat_xnx.patch
kvm-arm64-restore-por_el0-access-to-host-el0.patch
kvm-don-t-warn-if-memory-is-dirtied-without-a-vcpu-when-the-vm-is-dying.patch
kvm-sev-decouple-the-need-to-sync-the-ghcb-sa-from-the-need-to-free-the-sa.patch
mm-memory-failure-fix-hugetlb_lock-aa-deadlock-in-get_huge_page_for_hwpoison.patch
mmc-litex_mmc-use-div_round_up-for-more-accurate-clock-calculation.patch
mshv-add-a-missing-padding-field.patch
namespace-restrict-open_tree_namespace-fsmount_namespace-to-directories.patch
netfilter-nft_meta_bridge-fix-stale-stack-leak-via-iifhwaddr-register.patch
netfilter-nft_tunnel-fix-use-after-free-on-object-destroy.patch
pinctrl-mcp23s08-initialize-mcp-dev-and-mcp-addr-before-regmap-init.patch
revert-drm-xe-nvls-define-guc-firmware-for-nvl-s.patch
revert-drm-xe-skip-exec-queue-schedule-toggle-if-queue-is-idle-during-suspend.patch
rust-arm64-set-uwtable-llvm-module-flag-for-config_unwind_tables.patch
rust-kasan-kbuild-fix-rustc-option-when-cross-compiling.patch
rust-x86-support-rust-1.98.0-target-spec.patch
soc-qcom-ice-fix-race-between-qcom_ice_probe-and-of_qcom_ice_get.patch
tee-shm-fix-shm-leak-in-register_shm_helper.patch
tracing-fix-cfi-violation-in-probestub-being-called-by-tprobes.patch
tracing-probes-point-the-error-offset-correctly-for-eprobe-argument-error.patch

6.18-stable patches

added patches:
accel-ivpu-add-bounds-checks-for-firmware-log-indices.patch
accel-ivpu-add-buffer-overflow-check-in-ms-get_info_ioctl.patch
accel-ivpu-fix-signed-integer-truncation-in-ipc-receive.patch
arm-do-not-select-have_rust-when-kasan-is-enabled.patch
bluetooth-hci_sync-reject-oversized-broadcast-announcement-prepend.patch
bluetooth-l2cap-reject-br-edr-signaling-packets-over-mtusig.patch
drm-i915-gem-fix-phys-bo-pread-pwrite-with-offset.patch
hv_netvsc-use-kmap_local_page-in-netvsc_copy_to_send_buf.patch
kvm-arm64-restore-por_el0-access-to-host-el0.patch
kvm-don-t-warn-if-memory-is-dirtied-without-a-vcpu-when-the-vm-is-dying.patch
kvm-sev-decouple-the-need-to-sync-the-ghcb-sa-from-the-need-to-free-the-sa.patch
mm-memory-failure-fix-hugetlb_lock-aa-deadlock-in-get_huge_page_for_hwpoison.patch
mmc-litex_mmc-use-div_round_up-for-more-accurate-clock-calculation.patch
mshv-add-a-missing-padding-field.patch
netfilter-nft_meta_bridge-fix-stale-stack-leak-via-iifhwaddr-register.patch
netfilter-nft_tunnel-fix-use-after-free-on-object-destroy.patch
rust-arm64-set-uwtable-llvm-module-flag-for-config_unwind_tables.patch
rust-kasan-kbuild-fix-rustc-option-when-cross-compiling.patch
rust-x86-support-rust-1.98.0-target-spec.patch
soc-qcom-ice-fix-race-between-qcom_ice_probe-and-of_qcom_ice_get.patch
tee-shm-fix-shm-leak-in-register_shm_helper.patch
tracing-fix-cfi-violation-in-probestub-being-called-by-tprobes.patch
tracing-probes-point-the-error-offset-correctly-for-eprobe-argument-error.patch

6.12-stable patches

added patches:
accel-ivpu-add-bounds-checks-for-firmware-log-indices.patch
accel-ivpu-add-buffer-overflow-check-in-ms-get_info_ioctl.patch
accel-ivpu-fix-signed-integer-truncation-in-ipc-receive.patch
bluetooth-hci_sync-reject-oversized-broadcast-announcement-prepend.patch
bluetooth-l2cap-reject-br-edr-signaling-packets-over-mtusig.patch
drm-i915-gem-fix-phys-bo-pread-pwrite-with-offset.patch
kvm-don-t-warn-if-memory-is-dirtied-without-a-vcpu-when-the-vm-is-dying.patch
kvm-sev-decouple-the-need-to-sync-the-ghcb-sa-from-the-need-to-free-the-sa.patch
mmc-litex_mmc-use-div_round_up-for-more-accurate-clock-calculation.patch
netfilter-nft_tunnel-fix-use-after-free-on-object-destroy.patch
pinctrl-mcp23s08-initialize-mcp-dev-and-mcp-addr-before-regmap-init.patch
rust-arm64-set-uwtable-llvm-module-flag-for-config_unwind_tables.patch
rust-kasan-kbuild-fix-rustc-option-when-cross-compiling.patch
rust-x86-support-rust-1.98.0-target-spec.patch
soc-qcom-ice-fix-race-between-qcom_ice_probe-and-of_qcom_ice_get.patch
tee-shm-fix-shm-leak-in-register_shm_helper.patch
tracing-probes-point-the-error-offset-correctly-for-eprobe-argument-error.patch

6.6-stable patches

added patches:
bluetooth-hci_sync-reject-oversized-broadcast-announcement-prepend.patch
bluetooth-l2cap-reject-br-edr-signaling-packets-over-mtusig.patch
drm-i915-gem-fix-phys-bo-pread-pwrite-with-offset.patch
kvm-don-t-warn-if-memory-is-dirtied-without-a-vcpu-when-the-vm-is-dying.patch
mmc-litex_mmc-use-div_round_up-for-more-accurate-clock-calculation.patch
netfilter-nft_tunnel-fix-use-after-free-on-object-destroy.patch
tracing-probes-point-the-error-offset-correctly-for-eprobe-argument-error.patch

6.1-stable patches

added patches:
bluetooth-hci_sync-reject-oversized-broadcast-announcement-prepend.patch
bluetooth-l2cap-reject-br-edr-signaling-packets-over-mtusig.patch
drm-i915-gem-fix-phys-bo-pread-pwrite-with-offset.patch
mmc-litex_mmc-use-div_round_up-for-more-accurate-clock-calculation.patch
netfilter-nft_tunnel-fix-use-after-free-on-object-destroy.patch

5.15-stable patches

added patches:
bluetooth-l2cap-reject-br-edr-signaling-packets-over-mtusig.patch
drm-i915-gem-fix-phys-bo-pread-pwrite-with-offset.patch
netfilter-nft_tunnel-fix-use-after-free-on-object-destroy.patch

5.10-stable patches

added patches:
bluetooth-l2cap-reject-br-edr-signaling-packets-over-mtusig.patch
drm-i915-gem-fix-phys-bo-pread-pwrite-with-offset.patch
netfilter-nft_tunnel-fix-use-after-free-on-object-destroy.patch

Merge branch 'master' of gitolite.kernel.org:/pub/scm/linux/kernel/git/stable/stable-queue

7.0-stable patches

added patches:
bluetooth-iso-fix-a-use-after-free-of-the-hci_conn-pointer.patch
i2c-dev-prevent-integer-overflow-in-i2c_timeout-ioctl.patch
ipv6-mcast-fix-use-after-free-when-processing-mld-queries.patch
kvm-arm64-take-the-srcu-lock-for-page-table-walks-in-fault-injection-and-at-emulation.patch
net-smc-fix-sleep-inside-lock-in-__smc_setsockopt-causing-local-dos.patch

6.18-stable patches

added patches:
i2c-dev-prevent-integer-overflow-in-i2c_timeout-ioctl.patch
ipv6-mcast-fix-use-after-free-when-processing-mld-queries.patch
kvm-arm64-take-the-srcu-lock-for-page-table-walks-in-fault-injection-and-at-emulation.patch
net-smc-fix-sleep-inside-lock-in-__smc_setsockopt-causing-local-dos.patch

6.12-stable patches

added patches:
i2c-dev-prevent-integer-overflow-in-i2c_timeout-ioctl.patch
ipv6-mcast-fix-use-after-free-when-processing-mld-queries.patch
net-smc-fix-sleep-inside-lock-in-__smc_setsockopt-causing-local-dos.patch

6.6-stable patches

added patches:
i2c-dev-prevent-integer-overflow-in-i2c_timeout-ioctl.patch
ipv6-mcast-fix-use-after-free-when-processing-mld-queries.patch
net-smc-fix-sleep-inside-lock-in-__smc_setsockopt-causing-local-dos.patch

6.1-stable patches

added patches:
i2c-dev-prevent-integer-overflow-in-i2c_timeout-ioctl.patch
ipv6-mcast-fix-use-after-free-when-processing-mld-queries.patch
net-smc-fix-sleep-inside-lock-in-__smc_setsockopt-causing-local-dos.patch

5.15-stable patches

added patches:
i2c-dev-prevent-integer-overflow-in-i2c_timeout-ioctl.patch
ipv6-mcast-fix-use-after-free-when-processing-mld-queries.patch

5.10-stable patches

added patches:
i2c-dev-prevent-integer-overflow-in-i2c_timeout-ioctl.patch

Fixes for all trees

Signed-off-by: Sasha Levin <sashal@kernel.org>

Drop xfrm-hold-dev-ref-until-after-transport_finish-nf_ho.patch

Signed-off-by: Sasha Levin <sashal@kernel.org>

Fixes for all trees

Signed-off-by: Sasha Levin <sashal@kernel.org>

6.6 patches are now real

6.6-stable patches

added patches:
bluetooth-hci_conn-fix-potential-uaf-in-set_cig_para.patch
bpf-free-reuseport-cbpf-prog-after-rcu-grace-period.patch
disable-wattribute-alias-for-clang-23-and-newer.patch
hwmon-pmbus-core-protect-regulator-operations-with-m.patch
rdma-rxe-fix-trying-to-register-non-static-key-in-rx.patch
usb-serial-mct_u232-fix-memory-corruption-with-small.patch

staging 6.1 patches are now real

6.1-stable patches

added patches:
bpf-free-reuseport-cbpf-prog-after-rcu-grace-period.patch
disable-wattribute-alias-for-clang-23-and-newer.patch
dmaengine-idxd-fix-not-releasing-workqueue-on-.relea.patch
usb-serial-mct_u232-fix-memory-corruption-with-small.patch

5.15 staging patches are now real

5.15-stable patches

added patches:
bpf-free-reuseport-cbpf-prog-after-rcu-grace-period.patch
compiler-clang.h-add-__diag-infrastructure-for-clang.patch
disable-wattribute-alias-for-clang-23-and-newer.patch
usb-serial-mct_u232-fix-memory-corruption-with-small.patch

5.10 staging is now real

5.10-stable patches

added patches:
bpf-free-reuseport-cbpf-prog-after-rcu-grace-period.patch
compiler-clang.h-add-__diag-infrastructure-for-clang.patch
disable-wattribute-alias-for-clang-23-and-newer.patch
hid-core-add-printk_ratelimited-variants-to-hid_warn.patch
hid-core-fix-size_t-specifier-in-hid_report_raw_even.patch
hid-pass-the-buffer-size-to-hid_report_raw_event.patch
usb-serial-mct_u232-fix-memory-corruption-with-small.patch

6.12 staging is real

6.12-stable patches

added patches:
arm-allow-__do_kernel_fault-to-report-execution-of-m.patch
arm-fix-branch-predictor-hardening.patch
arm-fix-hash_name-fault.patch
arm-group-is_permission_fault-with-is_translation_fa.patch
bpf-free-reuseport-cbpf-prog-after-rcu-grace-period.patch
net-phy-micrel-fix-lan8814-qsgmii-soft-reset.patch
series
usb-serial-mct_u232-fix-memory-corruption-with-small.patch
wifi-remove-zero-length-arrays.patch

6.18 staging is now real

6.18-stable patches

added patches:
arm-allow-__do_kernel_fault-to-report-execution-of-m.patch
arm-fix-branch-predictor-hardening.patch
arm-fix-hash_name-fault.patch
arm-group-is_permission_fault-with-is_translation_fa.patch
bpf-free-reuseport-cbpf-prog-after-rcu-grace-period.patch
series

7.0 staging is now real

7.0-stable patches

added patches:
bpf-free-reuseport-cbpf-prog-after-rcu-grace-period.patch
series

7.0-stable patches

added patches:
kvm-arm64-reassign-nested_mmus-array-behind-mmu_lock.patch

6.18-stable patches

added patches:
kvm-arm64-reassign-nested_mmus-array-behind-mmu_lock.patch

7.0-stable patches

added patches:
kvm-arm64-vgic-its-drop-the-translation-cache-reference-only-for-the-erased-entry.patch

6.18-stable patches

added patches:
kvm-arm64-vgic-its-drop-the-translation-cache-reference-only-for-the-erased-entry.patch

6.12-stable patches

added patches:
kvm-arm64-vgic-its-drop-the-translation-cache-reference-only-for-the-erased-entry.patch

Fixes for all trees

Signed-off-by: Sasha Levin <sashal@kernel.org>

7.0-stable patches

added patches:
tools-ynl-add-scope-qualifier-for-definitions.patch

6.18-stable patches

added patches:
tools-ynl-add-scope-qualifier-for-definitions.patch

drop 4 patches based on RC review feedback

Dropped patches:

- "KVM: arm64: Correctly cap ZCR_EL2 provided by a guest hypervisor"
  Queues: 6.18
  Reason: maintainer (Marc Zyngier) drop request - does not backport
  cleanly before 7.0; 6.18 build break ('resx' undeclared, too few args
  to set_sysreg_masks). Kept in 7.0 where the struct-resx API matches.
  Report: https://lore.kernel.org/stable/87y0gq8cov.wl-maz@kernel.org/

- "kernel/fork: validate exit_signal in kernel_clone()"
  Queues: 7.0, 6.18, 6.12, 6.6, 6.1, 5.15, 5.10
  Reason: co-author/Acked-by Oleg Nesterov says not -stable material;
  it is prep for un-backported commit 0f8e38eeb995b and is a
  user-visible behavior change.
  Report: https://lore.kernel.org/stable/aiVOEKt9QL5cvkwz@redhat.com/

- "esp: fix page frag reference leak on skb_to_sgvec failure"
  Queues: 7.0
  Reason: upstream commit reverted by 6851161feb01 (Steffen Klassert) -
  does not fully fix the issue.
  Report: https://lore.kernel.org/stable/dd36757c-62b3-476e-bc9f-09231c495ebc@kernel.org/

- "gpib: cb7210: Fix region leak when request_irq fails"
  Queues: 7.0, 6.18
  Reason: upstream commit reverted by 05d5d79440c2 (Greg KH) - "turns
  out not to be correct"; release_region() on never-acquired region.
  Report: https://lore.kernel.org/stable/148e4311-5d45-4c89-b93d-898282282f7b@kernel.org/

Signed-off-by: Sasha Levin <sashal@kernel.org>

6.12-stable patches

added patches:
ethtool-cmis_cdb-fix-incorrect-read-write-length-extension.patch
net-sched-act_mirred-fix-blockcast-recursion-bypass-leading-to-stack-overflow.patch

7.0-stable patches

added patches:
usb-core-fix-superspeed-root-hub-wmaxpacketsize.patch

6.18-stable patches

added patches:
usb-core-fix-superspeed-root-hub-wmaxpacketsize.patch

6.12-stable patches

added patches:
usb-core-fix-superspeed-root-hub-wmaxpacketsize.patch

6.6-stable patches

added patches:
usb-core-fix-superspeed-root-hub-wmaxpacketsize.patch

6.1-stable patches

added patches:
usb-core-fix-superspeed-root-hub-wmaxpacketsize.patch

5.15-stable patches

added patches:
usb-core-fix-superspeed-root-hub-wmaxpacketsize.patch

5.10-stable patches

added patches:
usb-core-fix-superspeed-root-hub-wmaxpacketsize.patch

6.12-stable patches

added patches:
hwmon-pmbus-adm1266-serialize-gpio-pmbus-accesses-with-pmbus_lock.patch
hwmon-pmbus-adm1266-serialize-nvmem-blackbox-read-with-pmbus_lock.patch
hwmon-pmbus-adm1266-serialize-sequencer_state-debugfs-read-with-pmbus_lock.patch
memfd-deny-writeable-mappings-when-implying-seal_write.patch
mm-memfd-fix-spelling-and-grammatical-issues.patch
mm-perform-all-memfd-seal-checks-in-a-single-place.patch

6.12-stable patches

added patches:
alsa-firewire-motu-protect-register-dsp-event-queue-positions.patch
alsa-scarlett2-allow-flash-writes-ending-at-segment-boundary.patch
alsa-scarlett2-return-enospc-for-out-of-bounds-flash-writes.patch
arm64-tlb-flush-walk-cache-when-unsharing-pmd-tables.patch
bluetooth-hci_qca-convert-timeout-from-jiffies-to-ms.patch
bluetooth-hci_qca-migrate-to-serdev-specific-shutdown-function.patch
ice-fix-vf-queue-configuration-with-low-mtu-values.patch
iio-chemical-scd30-fix-division-by-zero-in-write_raw.patch
iio-chemical-scd30-use-guard-mutex-to-allow-early-returns.patch
iio-dac-ad5686-fix-ref-bit-initialization-for-single-channel-parts.patch
mm-damon-sysfs-schemes-delete-tried-region-in-regions_rmdirs.patch
mm-memory-fix-spurious-warning-when-unmapping-device-private-exclusive-pages.patch
mptcp-cleanup-fallback-dummy-mapping-generation.patch
mptcp-do-not-drop-partial-packets.patch
mptcp-handle-first-subflow-closing-consistently.patch
mptcp-introduce-the-mptcp_init_skb-helper.patch
mptcp-pm-fix-add_addr-timer-infinite-retry-on-option-space-insufficient.patch
mptcp-reset-rcv-wnd-on-disconnect.patch
net-hsr-defer-node-table-free-until-after-rcu-readers.patch
octeontx2-pf-avoid-double-free-of-pool-stack-on-aq-init-failure.patch
platform-x86-intel-vsec-fix-enable_cnt-imbalance-on-pcie-error-recovery.patch
ring-buffer-flush-and-stop-persistent-ring-buffer-on-panic.patch
rxrpc-fix-data-decrypt-vs-splice-by-copying-data-to-buffer-in-recvmsg.patch
rxrpc-fix-response-packet-verification-to-extract-skb-to-a-linear-buffer.patch
scsi-target-iscsi-fix-crc-overread-and-double-free-in-iscsit_handle_text_cmd.patch
selftests-mptcp-drop-nanoseconds-width-specifier.patch
serdev-provide-a-bustype-shutdown-function.patch
thunderbolt-property-cap-recursion-depth-in-__tb_property_parse_dir.patch
usb-dwc3-xilinx-fix-error-handling-in-zynqmp-init-error-paths.patch
usb-musb-omap2430-fix-use-after-free-in-omap2430_probe.patch
usb-typec-ucsi-check-if-power-role-change-actually-happened-before-handling.patch
usb-typec-ucsi-don-t-update-power_supply-on-power-role-change-if-not-connected.patch
x86-alternatives-rename-apply_relocation-to-text_poke_apply_relocation.patch
x86-ftrace-relocate-rip-relative-percpu-refs-in-dynamic-trampolines.patch