]>
git.ipfire.org Git - thirdparty/kernel/stable-queue.git/log
Sasha Levin [Wed, 5 Aug 2026 16:36:05 +0000 (12:36 -0400)]
Fixes for all trees
Signed-off-by: Sasha Levin <sashal@kernel.org>
Greg Kroah-Hartman [Wed, 5 Aug 2026 12:23:41 +0000 (14:23 +0200)]
6.12-stable patches
added patches:
ata-ahci-make-ahci_ignore_port-handle-empty-mask_port_map.patch
bluetooth-iso-fix-connected-closed-transition-on-shutdown-release.patch
of-reserved_mem-avoid-post-init-uaf-when-alloc_reserved_mem_array-fails.patch
Greg Kroah-Hartman [Wed, 5 Aug 2026 12:23:31 +0000 (14:23 +0200)]
6.6-stable patches
added patches:
ata-ahci-make-ahci_ignore_port-handle-empty-mask_port_map.patch
ata-libahci_platform-do-not-set-mask_port_map-when-not-needed.patch
Greg Kroah-Hartman [Wed, 5 Aug 2026 12:23:22 +0000 (14:23 +0200)]
6.1-stable patches
added patches:
ata-ahci-make-ahci_ignore_port-handle-empty-mask_port_map.patch
ata-libahci_platform-do-not-set-mask_port_map-when-not-needed.patch
Greg Kroah-Hartman [Wed, 5 Aug 2026 12:22:10 +0000 (14:22 +0200)]
6.18-stable patches
added patches:
hid-logitech-dj-fix-maxfield-check-in-dj-short-report-validation.patch
spi-spi-cadence-enable-spi_controller_must_tx.patch
Greg Kroah-Hartman [Wed, 5 Aug 2026 12:22:00 +0000 (14:22 +0200)]
6.12-stable patches
added patches:
ata-libahci_platform-do-not-set-mask_port_map-when-not-needed.patch
hid-logitech-dj-fix-maxfield-check-in-dj-short-report-validation.patch
spi-spi-cadence-enable-spi_controller_must_tx.patch
Greg Kroah-Hartman [Wed, 5 Aug 2026 12:21:51 +0000 (14:21 +0200)]
6.6-stable patches
added patches:
hid-logitech-dj-fix-maxfield-check-in-dj-short-report-validation.patch
spi-spi-cadence-enable-spi_controller_must_tx.patch
Greg Kroah-Hartman [Wed, 5 Aug 2026 12:21:41 +0000 (14:21 +0200)]
6.1-stable patches
added patches:
hid-logitech-dj-fix-maxfield-check-in-dj-short-report-validation.patch
Greg Kroah-Hartman [Wed, 5 Aug 2026 12:21:32 +0000 (14:21 +0200)]
5.15-stable patches
added patches:
hid-logitech-dj-fix-maxfield-check-in-dj-short-report-validation.patch
Greg Kroah-Hartman [Wed, 5 Aug 2026 12:21:22 +0000 (14:21 +0200)]
5.10-stable patches
added patches:
hid-logitech-dj-fix-maxfield-check-in-dj-short-report-validation.patch
Greg Kroah-Hartman [Wed, 5 Aug 2026 12:19:59 +0000 (14:19 +0200)]
6.18-stable patches
added patches:
drm-vmwgfx-avoid-destroy_workqueue-null-on-vkms-init-failure.patch
drm-vmwgfx-bound-dma-command-body-size-against-suffix-pointer.patch
drm-vmwgfx-clamp-dirty-page-range-with-min-not-max.patch
drm-vmwgfx-drop-dma_buf-reference-on-foreign-fd-prime-import.patch
drm-vmwgfx-enforce-cursor-size-limits-for-mob-cursors.patch
drm-vmwgfx-fix-guest_memory_dirty-bitfield-clobbered-as-size.patch
drm-vmwgfx-reject-dx_bind_query-without-a-dx-context.patch
drm-vmwgfx-take-fman-lock-around-fence-list-mutation-in-fifo_down.patch
drm-vmwgfx-use-check_add_overflow-for-shader-size-offset-bound.patch
drm-vmwgfx-validate-draw_primitives-header-size-before-division.patch
drm-vmwgfx-validate-external-bo-copy-bounds-for-both-stride-paths.patch
Greg Kroah-Hartman [Wed, 5 Aug 2026 12:19:48 +0000 (14:19 +0200)]
6.12-stable patches
added patches:
drm-vmwgfx-avoid-destroy_workqueue-null-on-vkms-init-failure.patch
drm-vmwgfx-bound-dma-command-body-size-against-suffix-pointer.patch
drm-vmwgfx-drop-dma_buf-reference-on-foreign-fd-prime-import.patch
drm-vmwgfx-fix-guest_memory_dirty-bitfield-clobbered-as-size.patch
drm-vmwgfx-reject-dx_bind_query-without-a-dx-context.patch
drm-vmwgfx-use-check_add_overflow-for-shader-size-offset-bound.patch
drm-vmwgfx-validate-draw_primitives-header-size-before-division.patch
drm-vmwgfx-validate-external-bo-copy-bounds-for-both-stride-paths.patch
Greg Kroah-Hartman [Wed, 5 Aug 2026 12:19:38 +0000 (14:19 +0200)]
6.6-stable patches
added patches:
drm-vmwgfx-bound-dma-command-body-size-against-suffix-pointer.patch
drm-vmwgfx-drop-dma_buf-reference-on-foreign-fd-prime-import.patch
drm-vmwgfx-fix-guest_memory_dirty-bitfield-clobbered-as-size.patch
drm-vmwgfx-reject-dx_bind_query-without-a-dx-context.patch
drm-vmwgfx-use-check_add_overflow-for-shader-size-offset-bound.patch
drm-vmwgfx-validate-draw_primitives-header-size-before-division.patch
drm-vmwgfx-validate-external-bo-copy-bounds-for-both-stride-paths.patch
Greg Kroah-Hartman [Wed, 5 Aug 2026 12:19:28 +0000 (14:19 +0200)]
6.1-stable patches
added patches:
drm-vmwgfx-bound-dma-command-body-size-against-suffix-pointer.patch
drm-vmwgfx-drop-dma_buf-reference-on-foreign-fd-prime-import.patch
drm-vmwgfx-validate-draw_primitives-header-size-before-division.patch
Greg Kroah-Hartman [Wed, 5 Aug 2026 12:19:18 +0000 (14:19 +0200)]
5.15-stable patches
added patches:
drm-vmwgfx-bound-dma-command-body-size-against-suffix-pointer.patch
drm-vmwgfx-validate-draw_primitives-header-size-before-division.patch
Greg Kroah-Hartman [Wed, 5 Aug 2026 12:19:08 +0000 (14:19 +0200)]
5.10-stable patches
added patches:
drm-vmwgfx-bound-dma-command-body-size-against-suffix-pointer.patch
drm-vmwgfx-validate-draw_primitives-header-size-before-division.patch
Greg Kroah-Hartman [Wed, 5 Aug 2026 12:16:54 +0000 (14:16 +0200)]
7.1-stable patches
added patches:
drm-vmwgfx-avoid-destroy_workqueue-null-on-vkms-init-failure.patch
drm-vmwgfx-bound-dma-command-body-size-against-suffix-pointer.patch
drm-vmwgfx-clamp-dirty-page-range-with-min-not-max.patch
drm-vmwgfx-drop-dma_buf-reference-on-foreign-fd-prime-import.patch
drm-vmwgfx-enforce-cursor-size-limits-for-mob-cursors.patch
drm-vmwgfx-fix-guest_memory_dirty-bitfield-clobbered-as-size.patch
drm-vmwgfx-reject-dx_bind_query-without-a-dx-context.patch
drm-vmwgfx-take-fman-lock-around-fence-list-mutation-in-fifo_down.patch
drm-vmwgfx-use-check_add_overflow-for-shader-size-offset-bound.patch
drm-vmwgfx-validate-draw_primitives-header-size-before-division.patch
drm-vmwgfx-validate-external-bo-copy-bounds-for-both-stride-paths.patch
Greg Kroah-Hartman [Wed, 5 Aug 2026 12:14:21 +0000 (14:14 +0200)]
7.1-stable patches
added patches:
drm-amd-display-check-if-dml21_add_phantom_plane-is-successful.patch
drm-amd-display-fix-divide-by-zero-in-calculate_mcache_setting-on-zero-viewport.patch
drm-amd-display-increase-hdmi-av-mute-wait-from-2-to-3-frames.patch
drm-amd-display-silence-link_dpms-i2c-retimer-failures.patch
drm-amd-display-use-proper-context-for-logging.patch
drm-amdkfd-fix-missing-authorization-check-in-kfd_ioc_dbg_trap_disable.patch
drm-amdkfd-fix-qid-bit-leak-in-pqm_create_queue.patch
drm-amdkfd-fix-uint32_t-overflow-in-eop-ring-buffer-size-alignment.patch
drm-amdkfd-handle-invalid-event-type-in-criu-event-restore.patch
drm-amdkfd-hold-event_mutex-while-checkpointing-criu-events.patch
Greg Kroah-Hartman [Wed, 5 Aug 2026 12:14:11 +0000 (14:14 +0200)]
6.18-stable patches
added patches:
drm-amd-display-increase-hdmi-av-mute-wait-from-2-to-3-frames.patch
drm-amd-display-use-proper-context-for-logging.patch
drm-amdkfd-fix-missing-authorization-check-in-kfd_ioc_dbg_trap_disable.patch
drm-amdkfd-fix-qid-bit-leak-in-pqm_create_queue.patch
drm-amdkfd-fix-uint32_t-overflow-in-eop-ring-buffer-size-alignment.patch
drm-amdkfd-handle-invalid-event-type-in-criu-event-restore.patch
drm-amdkfd-hold-event_mutex-while-checkpointing-criu-events.patch
Greg Kroah-Hartman [Wed, 5 Aug 2026 12:14:01 +0000 (14:14 +0200)]
6.12-stable patches
added patches:
drm-amd-display-increase-hdmi-av-mute-wait-from-2-to-3-frames.patch
drm-amd-display-use-proper-context-for-logging.patch
drm-amdkfd-fix-missing-authorization-check-in-kfd_ioc_dbg_trap_disable.patch
drm-amdkfd-fix-qid-bit-leak-in-pqm_create_queue.patch
drm-amdkfd-fix-uint32_t-overflow-in-eop-ring-buffer-size-alignment.patch
drm-amdkfd-handle-invalid-event-type-in-criu-event-restore.patch
drm-amdkfd-hold-event_mutex-while-checkpointing-criu-events.patch
Greg Kroah-Hartman [Wed, 5 Aug 2026 12:13:51 +0000 (14:13 +0200)]
6.6-stable patches
added patches:
drm-amdkfd-fix-missing-authorization-check-in-kfd_ioc_dbg_trap_disable.patch
drm-amdkfd-fix-qid-bit-leak-in-pqm_create_queue.patch
drm-amdkfd-handle-invalid-event-type-in-criu-event-restore.patch
drm-amdkfd-hold-event_mutex-while-checkpointing-criu-events.patch
Greg Kroah-Hartman [Wed, 5 Aug 2026 12:13:41 +0000 (14:13 +0200)]
6.1-stable patches
added patches:
drm-amdkfd-handle-invalid-event-type-in-criu-event-restore.patch
drm-amdkfd-hold-event_mutex-while-checkpointing-criu-events.patch
Greg Kroah-Hartman [Wed, 5 Aug 2026 12:07:33 +0000 (14:07 +0200)]
5.10-stable patches
added patches:
can-j1939-transport-j1939_session_fresh_new-initialize-receive-buffer.patch
can-kvaser_usb-kvaser_usb_hydra_get_busparams-fix-memory-leak-in-kvaser_usb_hydra_get_busparams.patch
can-kvaser_usb_leaf-kvaser_usb_leaf_wait_cmd-validate-received-command-extents.patch
can-peak_usb-add-bounds-check-for-usb-channel-index.patch
can-peak_usb-peak_usb_start-fix-double-free-of-transfer-buffer-on-urb-submit-error.patch
can-peak_usb-validate-ucan-receive-record-lengths.patch
can-softing-fw_parse-validate-firmware-record-spans.patch
drm-amdgpu-cap-gtt-size-to-physical-ram-on-apus.patch
drm-vc4-zero-the-tile-state-data-array-before-each-bin-job.patch
Greg Kroah-Hartman [Wed, 5 Aug 2026 12:06:59 +0000 (14:06 +0200)]
5.15-stable patches
added patches:
can-c_can-c_can_chip_config-keep-controller-in-init-mode-until-bittiming-is-configured.patch
can-ems_usb-validate-cpc-message-lengths.patch
can-etas_es58x-es58x_read_bulk_callback-fix-rx-buffer-leak-on-urb-resubmit-failure.patch
can-j1939-transport-j1939_session_fresh_new-initialize-receive-buffer.patch
can-kvaser_usb-kvaser_usb_hydra_get_busparams-fix-memory-leak-in-kvaser_usb_hydra_get_busparams.patch
can-kvaser_usb_leaf-kvaser_usb_leaf_wait_cmd-validate-received-command-extents.patch
can-peak_usb-add-bounds-check-for-usb-channel-index.patch
can-peak_usb-peak_usb_start-fix-double-free-of-transfer-buffer-on-urb-submit-error.patch
can-peak_usb-validate-ucan-receive-record-lengths.patch
can-softing-fw_parse-validate-firmware-record-spans.patch
drm-amdgpu-cap-gtt-size-to-physical-ram-on-apus.patch
drm-amdgpu-restore-umd-profile-pstate-after-runtime-resume.patch
drm-vc4-zero-the-tile-state-data-array-before-each-bin-job.patch
Greg Kroah-Hartman [Wed, 5 Aug 2026 12:05:14 +0000 (14:05 +0200)]
6.1-stable patches
added patches:
can-c_can-c_can_chip_config-keep-controller-in-init-mode-until-bittiming-is-configured.patch
can-ctucanfd-add-missing-module_device_table.patch
can-ctucanfd-handle-bus-error-interrupts.patch
can-ctucanfd-mark-error-active-controller-status-valid.patch
can-ctucanfd-unmap-bar0-using-base-address.patch
can-ctucanfd-use-self-test-mode-for-presume_ack.patch
can-ems_usb-validate-cpc-message-lengths.patch
can-etas_es58x-es58x_read_bulk_callback-fix-rx-buffer-leak-on-urb-resubmit-failure.patch
can-j1939-transport-j1939_session_fresh_new-initialize-receive-buffer.patch
can-j1939-use-netdevice_tracker-for-j1939_-priv-session-ecu-tracking.patch
can-kvaser_usb-kvaser_usb_hydra_get_busparams-fix-memory-leak-in-kvaser_usb_hydra_get_busparams.patch
can-kvaser_usb_leaf-kvaser_usb_leaf_wait_cmd-validate-received-command-extents.patch
can-peak_usb-add-bounds-check-for-usb-channel-index.patch
can-peak_usb-peak_usb_start-fix-double-free-of-transfer-buffer-on-urb-submit-error.patch
can-peak_usb-validate-ucan-receive-record-lengths.patch
can-softing-fw_parse-validate-firmware-record-spans.patch
drm-amdgpu-cap-gtt-size-to-physical-ram-on-apus.patch
drm-amdgpu-restore-umd-profile-pstate-after-runtime-resume.patch
drm-dp-read-the-pcon-max-frl-bandwidth-only-for-hdmi-dfps.patch
drm-vc4-supply-the-overflow-slot-size-in-bpos-not-the-whole-bin-bo-size.patch
drm-vc4-zero-the-tile-state-data-array-before-each-bin-job.patch
Greg Kroah-Hartman [Wed, 5 Aug 2026 12:05:02 +0000 (14:05 +0200)]
6.6-stable patches
added patches:
can-c_can-c_can_chip_config-keep-controller-in-init-mode-until-bittiming-is-configured.patch
can-ctucanfd-add-missing-module_device_table.patch
can-ctucanfd-handle-bus-error-interrupts.patch
can-ctucanfd-mark-error-active-controller-status-valid.patch
can-ctucanfd-unmap-bar0-using-base-address.patch
can-ctucanfd-use-self-test-mode-for-presume_ack.patch
can-ems_usb-validate-cpc-message-lengths.patch
can-etas_es58x-es58x_read_bulk_callback-fix-rx-buffer-leak-on-urb-resubmit-failure.patch
can-gs_usb-gs_usb_receive_bulk_callback-resubmit-urb-on-skb-allocation-failure.patch
can-j1939-transport-j1939_session_fresh_new-initialize-receive-buffer.patch
can-j1939-use-netdevice_tracker-for-j1939_-priv-session-ecu-tracking.patch
can-kvaser_usb-kvaser_usb_hydra_get_busparams-fix-memory-leak-in-kvaser_usb_hydra_get_busparams.patch
can-kvaser_usb_leaf-kvaser_usb_leaf_wait_cmd-validate-received-command-extents.patch
can-peak_usb-add-bounds-check-for-usb-channel-index.patch
can-peak_usb-peak_usb_start-fix-double-free-of-transfer-buffer-on-urb-submit-error.patch
can-peak_usb-validate-ucan-receive-record-lengths.patch
can-softing-fw_parse-validate-firmware-record-spans.patch
drm-amdgpu-cap-gtt-size-to-physical-ram-on-apus.patch
drm-amdgpu-restore-umd-profile-pstate-after-runtime-resume.patch
drm-dp-read-the-pcon-max-frl-bandwidth-only-for-hdmi-dfps.patch
drm-mediatek-ovl_adaptor-balance-component-registrations.patch
drm-vc4-supply-the-overflow-slot-size-in-bpos-not-the-whole-bin-bo-size.patch
drm-vc4-zero-the-tile-state-data-array-before-each-bin-job.patch
Greg Kroah-Hartman [Wed, 5 Aug 2026 12:04:49 +0000 (14:04 +0200)]
6.12-stable patches
added patches:
can-c_can-c_can_chip_config-keep-controller-in-init-mode-until-bittiming-is-configured.patch
can-ctucanfd-add-missing-module_device_table.patch
can-ctucanfd-handle-bus-error-interrupts.patch
can-ctucanfd-mark-error-active-controller-status-valid.patch
can-ctucanfd-unmap-bar0-using-base-address.patch
can-ctucanfd-use-self-test-mode-for-presume_ack.patch
can-ems_usb-validate-cpc-message-lengths.patch
can-etas_es58x-es58x_read_bulk_callback-fix-rx-buffer-leak-on-urb-resubmit-failure.patch
can-gs_usb-gs_usb_receive_bulk_callback-resubmit-urb-on-skb-allocation-failure.patch
can-j1939-transport-j1939_session_fresh_new-initialize-receive-buffer.patch
can-j1939-use-netdevice_tracker-for-j1939_-priv-session-ecu-tracking.patch
can-kvaser_usb-kvaser_usb_hydra_get_busparams-fix-memory-leak-in-kvaser_usb_hydra_get_busparams.patch
can-kvaser_usb_leaf-kvaser_usb_leaf_wait_cmd-validate-received-command-extents.patch
can-peak_usb-add-bounds-check-for-usb-channel-index.patch
can-peak_usb-peak_usb_start-fix-double-free-of-transfer-buffer-on-urb-submit-error.patch
can-peak_usb-validate-ucan-receive-record-lengths.patch
can-softing-fw_parse-validate-firmware-record-spans.patch
drm-amd-display-add-av-mute-wait-frames-to-dce110_set_avmute.patch
drm-amdgpu-cap-gtt-size-to-physical-ram-on-apus.patch
drm-amdgpu-restore-umd-profile-pstate-after-runtime-resume.patch
drm-dp-read-the-pcon-max-frl-bandwidth-only-for-hdmi-dfps.patch
drm-mediatek-ovl_adaptor-balance-component-registrations.patch
drm-panthor-reject-firmware-sections-with-oversized-data.patch
drm-panthor-validate-firmware-interface-structure-sizes.patch
drm-vc4-supply-the-overflow-slot-size-in-bpos-not-the-whole-bin-bo-size.patch
drm-vc4-zero-the-tile-state-data-array-before-each-bin-job.patch
Greg Kroah-Hartman [Wed, 5 Aug 2026 12:04:37 +0000 (14:04 +0200)]
6.18-stable patches
added patches:
can-c_can-c_can_chip_config-keep-controller-in-init-mode-until-bittiming-is-configured.patch
can-ctucanfd-add-missing-module_device_table.patch
can-ctucanfd-handle-bus-error-interrupts.patch
can-ctucanfd-mark-error-active-controller-status-valid.patch
can-ctucanfd-unmap-bar0-using-base-address.patch
can-ctucanfd-use-self-test-mode-for-presume_ack.patch
can-ems_usb-validate-cpc-message-lengths.patch
can-etas_es58x-es58x_read_bulk_callback-fix-rx-buffer-leak-on-urb-resubmit-failure.patch
can-gs_usb-gs_usb_receive_bulk_callback-resubmit-urb-on-skb-allocation-failure.patch
can-j1939-transport-j1939_session_fresh_new-initialize-receive-buffer.patch
can-j1939-use-netdevice_tracker-for-j1939_-priv-session-ecu-tracking.patch
can-kvaser_usb-kvaser_usb_hydra_get_busparams-fix-memory-leak-in-kvaser_usb_hydra_get_busparams.patch
can-kvaser_usb_leaf-kvaser_usb_leaf_wait_cmd-validate-received-command-extents.patch
can-peak_usb-add-bounds-check-for-usb-channel-index.patch
can-peak_usb-peak_usb_start-fix-double-free-of-transfer-buffer-on-urb-submit-error.patch
can-peak_usb-validate-ucan-receive-record-lengths.patch
can-softing-fw_parse-validate-firmware-record-spans.patch
drm-amd-display-add-av-mute-wait-frames-to-dce110_set_avmute.patch
drm-amd-pm-fix-torn-gpu-metrics-reads.patch
drm-amdgpu-cap-gtt-size-to-physical-ram-on-apus.patch
drm-amdgpu-move-debug_vm-handling-to-amdgpu_cs_parser_fini.patch
drm-amdgpu-restore-umd-profile-pstate-after-runtime-resume.patch
drm-bridge-display-connector-fix-i2c-adapter-resource-leak.patch
drm-dp-read-the-pcon-max-frl-bandwidth-only-for-hdmi-dfps.patch
drm-mediatek-ovl_adaptor-balance-component-registrations.patch
drm-panthor-reject-firmware-sections-with-oversized-data.patch
drm-panthor-validate-firmware-interface-structure-sizes.patch
drm-vc4-supply-the-overflow-slot-size-in-bpos-not-the-whole-bin-bo-size.patch
drm-vc4-zero-the-tile-state-data-array-before-each-bin-job.patch
Greg Kroah-Hartman [Wed, 5 Aug 2026 12:02:12 +0000 (14:02 +0200)]
7.1-stable patches
added patches:
can-c_can-c_can_chip_config-keep-controller-in-init-mode-until-bittiming-is-configured.patch
can-ctucanfd-add-missing-module_device_table.patch
can-ctucanfd-handle-bus-error-interrupts.patch
can-ctucanfd-mark-error-active-controller-status-valid.patch
can-ctucanfd-unmap-bar0-using-base-address.patch
can-ctucanfd-use-self-test-mode-for-presume_ack.patch
can-ems_usb-validate-cpc-message-lengths.patch
can-etas_es58x-es58x_read_bulk_callback-fix-rx-buffer-leak-on-urb-resubmit-failure.patch
can-gs_usb-gs_usb_receive_bulk_callback-resubmit-urb-on-skb-allocation-failure.patch
can-isotp-fix-timer-drain-order-wakeup-handling-and-tx_gen-ordering.patch
can-j1939-transport-j1939_session_fresh_new-initialize-receive-buffer.patch
can-j1939-use-netdevice_tracker-for-j1939_-priv-session-ecu-tracking.patch
can-kvaser_usb-kvaser_usb_hydra_get_busparams-fix-memory-leak-in-kvaser_usb_hydra_get_busparams.patch
can-kvaser_usb_leaf-kvaser_usb_leaf_wait_cmd-validate-received-command-extents.patch
can-peak_usb-add-bounds-check-for-usb-channel-index.patch
can-peak_usb-peak_usb_start-fix-double-free-of-transfer-buffer-on-urb-submit-error.patch
can-peak_usb-validate-ucan-receive-record-lengths.patch
can-rcar_canfd-change-the-initializing-flow-for-clocks-and-resets.patch
can-softing-fw_parse-validate-firmware-record-spans.patch
drm-amd-display-add-av-mute-wait-frames-to-dce110_set_avmute.patch
drm-amd-pm-fix-pptable-use-after-free.patch
drm-amd-pm-fix-torn-gpu-metrics-reads.patch
drm-amd-pm-hide-pp_table-sysfs-on-apus.patch
drm-amd-pm-use-milliwatts-for-gpu-power-sensors.patch
drm-amdgpu-cap-gtt-size-to-physical-ram-on-apus.patch
drm-amdgpu-move-debug_vm-handling-to-amdgpu_cs_parser_fini.patch
drm-amdgpu-restore-umd-profile-pstate-after-runtime-resume.patch
drm-bridge-display-connector-fix-i2c-adapter-resource-leak.patch
drm-dp-read-the-pcon-max-frl-bandwidth-only-for-hdmi-dfps.patch
drm-mediatek-mtk_hdmi-fix-ddc-adapter-double-put-in-v2.patch
drm-mediatek-ovl_adaptor-balance-component-registrations.patch
drm-panthor-reject-firmware-sections-with-oversized-data.patch
drm-panthor-validate-firmware-interface-structure-sizes.patch
drm-vc4-supply-the-overflow-slot-size-in-bpos-not-the-whole-bin-bo-size.patch
drm-vc4-zero-the-tile-state-data-array-before-each-bin-job.patch
Greg Kroah-Hartman [Wed, 5 Aug 2026 11:52:32 +0000 (13:52 +0200)]
5.15-stable patches
added patches:
cpufreq-powernow-k8-fix-possible-memory-leak-in-powernowk8_cpu_init.patch
hwmon-npcm750-pwm-fan-stop-fan-timer-on-device-detach.patch
i2c-amd-mp2-unregister-callback-on-adapter-add-failure.patch
i2c-imx-cancel-hrtimer-before-clearing-slave-pointer.patch
i2c-jz4780-cache-host-clock-rate-at-probe-to-prevent-ccf-prepare_lock-deadlock.patch
mm-page_reporting-use-system_freezable_wq-to-fix-uaf-during-suspend.patch
net-bridge-stop-fast-leave-after-deleting-a-port-group.patch
net-ipv6-clear-suppressed-fib6-rule-result.patch
net-openvswitch-fix-potential-uaf-on-meter-attach-failure.patch
net-openvswitch-fix-skb-leak-on-flow-key-update-failure-during-ct.patch
phy-zynqmp-fix-l0_tm_disable_scramble_encoder-mask.patch
phy-zynqmp-keep-serdes-scrambler-and-8b-10b-enabled-for-usb.patch
phy-zynqmp-use-read-modify-write-for-serdes-scrambler-bypass.patch
powerpc-ps3-fix-map-failure-path-in-dma_ioc0_map_pages.patch
s390-dasd-fix-potential-null-pointer-dereference.patch
s390-qeth-check-cap_net_admin-for-private-ioctls.patch
s390-zcrypt-validate-length-for-cca-aes-cipher-key-requests.patch
s390-zcrypt-validate-length-for-cca-ecc-private-key-requests.patch
sctp-prevent-peer-transport-count-overflow.patch
sctp-reject-stale-cookies-with-mismatched-verification-tags.patch
selftests-clone3-fix-wild-pointer-access-of-getline-due-to-missing-init.patch
tracing-check-return-value-of-__register_event-in-trace_module_add_events.patch
tracing-filters-fix-false-positive-match-in-regex_match_full.patch
um-vector-fix-use-after-free-in-vector_mmsg_rx.patch
vxlan-re-fetch-eth-header-after-route_shortcircuit.patch
vxlan-unclone-skb-head-before-modifying-eth-header-in-route_shortcircuit.patch
vxlan-use-neigh_ha_snapshot-in-route_shortcircuit.patch
vxlan-use-pskb_network_may_pull-in-route_shortcircuit.patch
Greg Kroah-Hartman [Wed, 5 Aug 2026 11:51:36 +0000 (13:51 +0200)]
5.10-stable patches
added patches:
cpufreq-powernow-k8-fix-possible-memory-leak-in-powernowk8_cpu_init.patch
i2c-amd-mp2-unregister-callback-on-adapter-add-failure.patch
i2c-jz4780-cache-host-clock-rate-at-probe-to-prevent-ccf-prepare_lock-deadlock.patch
mm-page_reporting-use-system_freezable_wq-to-fix-uaf-during-suspend.patch
net-bridge-stop-fast-leave-after-deleting-a-port-group.patch
net-ipv6-clear-suppressed-fib6-rule-result.patch
net-openvswitch-fix-potential-uaf-on-meter-attach-failure.patch
net-openvswitch-fix-skb-leak-on-flow-key-update-failure-during-ct.patch
phy-zynqmp-fix-l0_tm_disable_scramble_encoder-mask.patch
phy-zynqmp-keep-serdes-scrambler-and-8b-10b-enabled-for-usb.patch
phy-zynqmp-use-read-modify-write-for-serdes-scrambler-bypass.patch
powerpc-ps3-fix-map-failure-path-in-dma_ioc0_map_pages.patch
s390-dasd-fix-potential-null-pointer-dereference.patch
s390-zcrypt-validate-length-for-cca-aes-cipher-key-requests.patch
s390-zcrypt-validate-length-for-cca-ecc-private-key-requests.patch
sctp-prevent-peer-transport-count-overflow.patch
sctp-reject-stale-cookies-with-mismatched-verification-tags.patch
selftests-clone3-fix-wild-pointer-access-of-getline-due-to-missing-init.patch
tracing-check-return-value-of-__register_event-in-trace_module_add_events.patch
tracing-filters-fix-false-positive-match-in-regex_match_full.patch
um-vector-fix-use-after-free-in-vector_mmsg_rx.patch
vxlan-re-fetch-eth-header-after-route_shortcircuit.patch
vxlan-unclone-skb-head-before-modifying-eth-header-in-route_shortcircuit.patch
vxlan-use-neigh_ha_snapshot-in-route_shortcircuit.patch
vxlan-use-pskb_network_may_pull-in-route_shortcircuit.patch
Greg Kroah-Hartman [Wed, 5 Aug 2026 11:49:17 +0000 (13:49 +0200)]
6.1-stable patches
added patches:
cpufreq-powernow-k8-fix-possible-memory-leak-in-powernowk8_cpu_init.patch
gpio-pca953x-fix-cache_only-and-irq-state-on-restore_context-failure.patch
hwmon-npcm750-pwm-fan-stop-fan-timer-on-device-detach.patch
i2c-amd-mp2-unregister-callback-on-adapter-add-failure.patch
i2c-imx-cancel-hrtimer-before-clearing-slave-pointer.patch
i2c-imx-fix-slave-registration-race-and-error-handling.patch
i2c-jz4780-cache-host-clock-rate-at-probe-to-prevent-ccf-prepare_lock-deadlock.patch
ice-wait-for-reset-completion-in-ice_resume.patch
mm-page_reporting-use-system_freezable_wq-to-fix-uaf-during-suspend.patch
net-bridge-stop-fast-leave-after-deleting-a-port-group.patch
net-ipv6-clear-suppressed-fib6-rule-result.patch
net-openvswitch-fix-potential-uaf-on-meter-attach-failure.patch
net-openvswitch-fix-skb-leak-on-flow-key-update-failure-during-ct.patch
phy-zynqmp-fix-l0_tm_disable_scramble_encoder-mask.patch
phy-zynqmp-keep-serdes-scrambler-and-8b-10b-enabled-for-usb.patch
phy-zynqmp-use-read-modify-write-for-serdes-scrambler-bypass.patch
power-supply-bq25890-fix-the-10-c-ntc-lookup-entry.patch
powerpc-ps3-fix-map-failure-path-in-dma_ioc0_map_pages.patch
s390-dasd-fix-potential-null-pointer-dereference.patch
s390-qeth-check-cap_net_admin-for-private-ioctls.patch
s390-zcrypt-fix-wrong-domain-value-verification-with-ep11-cprbs.patch
s390-zcrypt-validate-length-for-cca-aes-cipher-key-requests.patch
s390-zcrypt-validate-length-for-cca-ecc-private-key-requests.patch
scsi-scsi_debug-fix-report-zones-alloc_len-underflow-oob-write.patch
sctp-prevent-peer-transport-count-overflow.patch
sctp-reject-stale-cookies-with-mismatched-verification-tags.patch
selftests-clone3-fix-wild-pointer-access-of-getline-due-to-missing-init.patch
tracing-check-return-value-of-__register_event-in-trace_module_add_events.patch
tracing-filters-fix-false-positive-match-in-regex_match_full.patch
ublk-reset-kernel-owned-dev_info-fields-in-ublk_ctrl_add_dev.patch
um-vector-fix-use-after-free-in-vector_mmsg_rx.patch
vxlan-re-fetch-eth-header-after-route_shortcircuit.patch
vxlan-unclone-skb-head-before-modifying-eth-header-in-route_shortcircuit.patch
vxlan-use-neigh_ha_snapshot-in-route_shortcircuit.patch
vxlan-use-pskb_network_may_pull-in-route_shortcircuit.patch
Greg Kroah-Hartman [Wed, 5 Aug 2026 11:48:37 +0000 (13:48 +0200)]
6.6-stable patches
added patches:
cpufreq-powernow-k8-fix-possible-memory-leak-in-powernowk8_cpu_init.patch
gpio-pca953x-fix-cache_only-and-irq-state-on-restore_context-failure.patch
hwmon-npcm750-pwm-fan-stop-fan-timer-on-device-detach.patch
hwmon-pmbus-core-notify-on-the-hwmon-device-not-the-i2c-client.patch
i2c-amd-mp2-unregister-callback-on-adapter-add-failure.patch
i2c-imx-cancel-hrtimer-before-clearing-slave-pointer.patch
i2c-imx-fix-slave-registration-race-and-error-handling.patch
i2c-jz4780-cache-host-clock-rate-at-probe-to-prevent-ccf-prepare_lock-deadlock.patch
ice-fix-memory-leak-in-ice_lbtest_prepare_rings.patch
ice-wait-for-reset-completion-in-ice_resume.patch
mm-page_reporting-use-system_freezable_wq-to-fix-uaf-during-suspend.patch
net-bridge-stop-fast-leave-after-deleting-a-port-group.patch
net-ipv6-clear-suppressed-fib6-rule-result.patch
net-openvswitch-fix-potential-uaf-on-meter-attach-failure.patch
net-openvswitch-fix-skb-leak-on-flow-key-update-failure-during-ct.patch
net-openvswitch-fix-skb-leak-on-flow-key-update-failure-during-recirculation.patch
phy-zynqmp-fix-l0_tm_disable_scramble_encoder-mask.patch
phy-zynqmp-keep-serdes-scrambler-and-8b-10b-enabled-for-usb.patch
phy-zynqmp-use-read-modify-write-for-serdes-scrambler-bypass.patch
power-supply-bq25890-fix-the-10-c-ntc-lookup-entry.patch
powerpc-ps3-fix-map-failure-path-in-dma_ioc0_map_pages.patch
s390-dasd-fix-potential-null-pointer-dereference.patch
s390-dasd-fix-undersized-format-check-buffer.patch
s390-qeth-check-cap_net_admin-for-private-ioctls.patch
s390-zcrypt-fix-wrong-domain-value-verification-with-ep11-cprbs.patch
s390-zcrypt-validate-length-for-cca-aes-cipher-key-requests.patch
s390-zcrypt-validate-length-for-cca-ecc-private-key-requests.patch
scsi-scsi_debug-fix-report-zones-alloc_len-underflow-oob-write.patch
sctp-prevent-peer-transport-count-overflow.patch
sctp-reject-stale-cookies-with-mismatched-verification-tags.patch
selftests-clone3-fix-wild-pointer-access-of-getline-due-to-missing-init.patch
selftests-mm-fix-potential-wild-pointer-access-of-getline-due-to-missing-init.patch
spi-qcom-qspi-correct-max-dma-length-to-avoid-64k-boundary-failure.patch
tracing-check-return-value-of-__register_event-in-trace_module_add_events.patch
tracing-filters-fix-false-positive-match-in-regex_match_full.patch
ublk-reset-kernel-owned-dev_info-fields-in-ublk_ctrl_add_dev.patch
um-vector-fix-use-after-free-in-vector_mmsg_rx.patch
vxlan-re-fetch-eth-header-after-route_shortcircuit.patch
vxlan-unclone-skb-head-before-modifying-eth-header-in-route_shortcircuit.patch
vxlan-use-neigh_ha_snapshot-in-route_shortcircuit.patch
vxlan-use-pskb_network_may_pull-in-route_shortcircuit.patch
Greg Kroah-Hartman [Wed, 5 Aug 2026 11:48:23 +0000 (13:48 +0200)]
6.12-stable patches
added patches:
cpufreq-powernow-k8-fix-possible-memory-leak-in-powernowk8_cpu_init.patch
cpufreq-schedutil-publish-util-hooks-only-after-all-sg_cpu-are-initialized.patch
gpio-pca953x-fix-cache_only-and-irq-state-on-restore_context-failure.patch
hwmon-npcm750-pwm-fan-stop-fan-timer-on-device-detach.patch
hwmon-pmbus-core-notify-on-the-hwmon-device-not-the-i2c-client.patch
i2c-amd-mp2-unregister-callback-on-adapter-add-failure.patch
i2c-imx-cancel-hrtimer-before-clearing-slave-pointer.patch
i2c-imx-fix-slave-registration-race-and-error-handling.patch
i2c-iproc-reset-bus-after-timeout-if-start_busy-is-stuck.patch
i2c-jz4780-cache-host-clock-rate-at-probe-to-prevent-ccf-prepare_lock-deadlock.patch
ice-fix-memory-leak-in-ice_lbtest_prepare_rings.patch
ice-wait-for-reset-completion-in-ice_resume.patch
mm-memcg-initialize-locked-in-memcg1_oom_prepare-stub.patch
mm-page_reporting-use-system_freezable_wq-to-fix-uaf-during-suspend.patch
net-bridge-stop-fast-leave-after-deleting-a-port-group.patch
net-ipv6-clear-suppressed-fib6-rule-result.patch
net-openvswitch-fix-potential-uaf-on-meter-attach-failure.patch
net-openvswitch-fix-skb-leak-on-flow-key-update-failure-during-ct.patch
net-openvswitch-fix-skb-leak-on-flow-key-update-failure-during-recirculation.patch
phy-zynqmp-fix-l0_tm_disable_scramble_encoder-mask.patch
phy-zynqmp-keep-serdes-scrambler-and-8b-10b-enabled-for-usb.patch
phy-zynqmp-use-read-modify-write-for-serdes-scrambler-bypass.patch
power-supply-bq25890-fix-the-10-c-ntc-lookup-entry.patch
power-supply-max17040-handle-missing-status-supplier.patch
powerpc-ps3-fix-map-failure-path-in-dma_ioc0_map_pages.patch
s390-dasd-fix-potential-null-pointer-dereference.patch
s390-dasd-fix-undersized-format-check-buffer.patch
s390-pci-fix-s390_pci_mmio_write-syscall-error-return-without-mio.patch
s390-qeth-check-cap_net_admin-for-private-ioctls.patch
s390-zcrypt-fix-wrong-domain-value-verification-with-ep11-cprbs.patch
s390-zcrypt-validate-length-for-cca-aes-cipher-key-requests.patch
s390-zcrypt-validate-length-for-cca-ecc-private-key-requests.patch
scsi-scsi_debug-fix-report-zones-alloc_len-underflow-oob-write.patch
sctp-prevent-peer-transport-count-overflow.patch
sctp-reject-stale-cookies-with-mismatched-verification-tags.patch
selftests-clone3-fix-wild-pointer-access-of-getline-due-to-missing-init.patch
selftests-mm-fix-potential-wild-pointer-access-of-getline-due-to-missing-init.patch
spi-qcom-qspi-correct-max-dma-length-to-avoid-64k-boundary-failure.patch
tracing-check-return-value-of-__register_event-in-trace_module_add_events.patch
tracing-filters-fix-false-positive-match-in-regex_match_full.patch
ublk-reset-kernel-owned-dev_info-fields-in-ublk_ctrl_add_dev.patch
um-vector-fix-use-after-free-in-vector_mmsg_rx.patch
veth-convert-frag_list-skbs-before-running-xdp.patch
vxlan-re-fetch-eth-header-after-route_shortcircuit.patch
vxlan-unclone-skb-head-before-modifying-eth-header-in-route_shortcircuit.patch
vxlan-use-neigh_ha_snapshot-in-route_shortcircuit.patch
vxlan-use-pskb_network_may_pull-in-route_shortcircuit.patch
Greg Kroah-Hartman [Wed, 5 Aug 2026 11:48:08 +0000 (13:48 +0200)]
6.18-stable patches
added patches:
cifs-add-fscache_resize_cookie-to-cifs_setsize.patch
cpufreq-powernow-k8-fix-possible-memory-leak-in-powernowk8_cpu_init.patch
cpufreq-schedutil-publish-util-hooks-only-after-all-sg_cpu-are-initialized.patch
gpio-pca953x-fix-cache_only-and-irq-state-on-restore_context-failure.patch
gpio-pch-use-raw_spinlock_t-for-the-register-lock.patch
hwmon-npcm750-pwm-fan-stop-fan-timer-on-device-detach.patch
hwmon-pmbus-core-notify-on-the-hwmon-device-not-the-i2c-client.patch
i2c-amd-mp2-unregister-callback-on-adapter-add-failure.patch
i2c-imx-cancel-hrtimer-before-clearing-slave-pointer.patch
i2c-imx-fix-slave-registration-race-and-error-handling.patch
i2c-imx-mark-i2c-adapter-when-hardware-is-powered-down.patch
i2c-iproc-reset-bus-after-timeout-if-start_busy-is-stuck.patch
i2c-jz4780-cache-host-clock-rate-at-probe-to-prevent-ccf-prepare_lock-deadlock.patch
i2c-qcom-cci-drop-custom-suspend-resume-and-rely-on-runtime-pm-helpers.patch
i2c-spacemit-request-irq-after-controller-initialization.patch
ice-fix-memory-leak-in-ice_lbtest_prepare_rings.patch
ice-fix-vf-interrupts-cleanup.patch
ice-wait-for-reset-completion-in-ice_resume.patch
io_uring-net-initialize-mshot_len-for-send.patch
mm-memcg-initialize-locked-in-memcg1_oom_prepare-stub.patch
mm-page_reporting-use-system_freezable_wq-to-fix-uaf-during-suspend.patch
net-bridge-stop-fast-leave-after-deleting-a-port-group.patch
net-ipv6-clear-suppressed-fib6-rule-result.patch
net-openvswitch-fix-potential-uaf-on-meter-attach-failure.patch
net-openvswitch-fix-skb-leak-on-flow-key-update-failure-during-ct.patch
net-openvswitch-fix-skb-leak-on-flow-key-update-failure-during-recirculation.patch
net-pktgen-fix-proc-entry-use-after-free.patch
phy-zynqmp-fix-l0_tm_disable_scramble_encoder-mask.patch
phy-zynqmp-keep-serdes-scrambler-and-8b-10b-enabled-for-usb.patch
phy-zynqmp-use-read-modify-write-for-serdes-scrambler-bypass.patch
power-supply-bq25890-fix-the-10-c-ntc-lookup-entry.patch
power-supply-max17040-handle-missing-status-supplier.patch
powerpc-ps3-fix-map-failure-path-in-dma_ioc0_map_pages.patch
s390-dasd-fix-potential-null-pointer-dereference.patch
s390-dasd-fix-undersized-format-check-buffer.patch
s390-pci-fix-s390_pci_mmio_write-syscall-error-return-without-mio.patch
s390-qeth-check-cap_net_admin-for-private-ioctls.patch
s390-zcrypt-fix-buffer-over-read-in-cca_cipher2protkey.patch
s390-zcrypt-fix-missing-mem-scrub-at-clear-key-import-in-cca_clr2cipherkey.patch
s390-zcrypt-fix-wrong-domain-value-verification-with-ep11-cprbs.patch
s390-zcrypt-validate-length-for-cca-aes-cipher-key-requests.patch
s390-zcrypt-validate-length-for-cca-ecc-private-key-requests.patch
scsi-scsi_debug-fix-report-zones-alloc_len-underflow-oob-write.patch
sctp-prevent-peer-transport-count-overflow.patch
sctp-reject-stale-cookies-with-mismatched-verification-tags.patch
selftests-clone3-fix-wild-pointer-access-of-getline-due-to-missing-init.patch
selftests-mm-fix-potential-wild-pointer-access-of-getline-due-to-missing-init.patch
spi-qcom-qspi-correct-max-dma-length-to-avoid-64k-boundary-failure.patch
spi-spi-qpic-snand-write-the-feature-value-before-executing-set_feature.patch
tracing-check-return-value-of-__register_event-in-trace_module_add_events.patch
tracing-filters-fix-false-positive-match-in-regex_match_full.patch
ublk-reset-kernel-owned-dev_info-fields-in-ublk_ctrl_add_dev.patch
um-vector-fix-use-after-free-in-vector_mmsg_rx.patch
uprobes-fix-null-pointer-dereference-in-hprobe_expire.patch
veth-convert-frag_list-skbs-before-running-xdp.patch
vxlan-re-fetch-eth-header-after-route_shortcircuit.patch
vxlan-unclone-skb-head-before-modifying-eth-header-in-route_shortcircuit.patch
vxlan-use-neigh_ha_snapshot-in-route_shortcircuit.patch
vxlan-use-pskb_network_may_pull-for-transmit-path-header-pulls.patch
vxlan-use-pskb_network_may_pull-in-route_shortcircuit.patch
Greg Kroah-Hartman [Wed, 5 Aug 2026 11:45:08 +0000 (13:45 +0200)]
7.1-stable patches
added patches:
cifs-add-fscache_resize_cookie-to-cifs_setsize.patch
cpufreq-cppc-sanitize-lockless-policy-limit-snapshots.patch
cpufreq-powernow-k8-fix-possible-memory-leak-in-powernowk8_cpu_init.patch
cpufreq-schedutil-publish-util-hooks-only-after-all-sg_cpu-are-initialized.patch
gpio-pca953x-fix-cache_only-and-irq-state-on-restore_context-failure.patch
gpio-pch-use-raw_spinlock_t-for-the-register-lock.patch
gpiolib-tolerate-gpio-hogs-lacking-a-hogging-state.patch
hwmon-npcm750-pwm-fan-stop-fan-timer-on-device-detach.patch
hwmon-pmbus-core-notify-on-the-hwmon-device-not-the-i2c-client.patch
i2c-amd-mp2-unregister-callback-on-adapter-add-failure.patch
i2c-designware-defer-probe-if-child-gpioint-controllers-are-not-bound.patch
i2c-imx-cancel-hrtimer-before-clearing-slave-pointer.patch
i2c-imx-fix-slave-registration-race-and-error-handling.patch
i2c-imx-mark-i2c-adapter-when-hardware-is-powered-down.patch
i2c-iproc-reset-bus-after-timeout-if-start_busy-is-stuck.patch
i2c-jz4780-cache-host-clock-rate-at-probe-to-prevent-ccf-prepare_lock-deadlock.patch
i2c-qcom-cci-drop-custom-suspend-resume-and-rely-on-runtime-pm-helpers.patch
i2c-spacemit-request-irq-after-controller-initialization.patch
ice-fix-memory-leak-in-ice_lbtest_prepare_rings.patch
ice-fix-vf-interrupts-cleanup.patch
ice-wait-for-reset-completion-in-ice_resume.patch
io_uring-net-initialize-mshot_len-for-send.patch
io_uring-preserve-task-restrictions-across-exec.patch
mm-huge_memory-unlock-i_mmap_rwsem-before-releasing-after-split-folios.patch
mm-memcg-initialize-locked-in-memcg1_oom_prepare-stub.patch
mm-page_reporting-use-system_freezable_wq-to-fix-uaf-during-suspend.patch
net-bridge-stop-fast-leave-after-deleting-a-port-group.patch
net-ipv6-clear-suppressed-fib6-rule-result.patch
net-openvswitch-fix-potential-uaf-on-meter-attach-failure.patch
net-openvswitch-fix-skb-leak-on-flow-key-update-failure-during-ct.patch
net-openvswitch-fix-skb-leak-on-flow-key-update-failure-during-recirculation.patch
net-pktgen-fix-proc-entry-use-after-free.patch
phy-zynqmp-fix-l0_tm_disable_scramble_encoder-mask.patch
phy-zynqmp-keep-serdes-scrambler-and-8b-10b-enabled-for-usb.patch
phy-zynqmp-use-read-modify-write-for-serdes-scrambler-bypass.patch
power-supply-bq25890-fix-the-10-c-ntc-lookup-entry.patch
power-supply-macsmc-support-macos-27-smc-firmware.patch
power-supply-max17040-handle-missing-status-supplier.patch
powerpc-ps3-fix-map-failure-path-in-dma_ioc0_map_pages.patch
riscv-mm-use-physical-alignment-for-vmemmap_start_pfn.patch
s390-dasd-fix-potential-null-pointer-dereference.patch
s390-dasd-fix-undersized-format-check-buffer.patch
s390-pci-fix-s390_pci_mmio_write-syscall-error-return-without-mio.patch
s390-qeth-check-cap_net_admin-for-private-ioctls.patch
s390-zcrypt-close-speculative-mem-read-possibility.patch
s390-zcrypt-fix-buffer-over-read-in-cca_cipher2protkey.patch
s390-zcrypt-fix-missing-mem-scrub-at-clear-key-import-in-cca_clr2cipherkey.patch
s390-zcrypt-fix-wrong-domain-value-verification-with-ep11-cprbs.patch
s390-zcrypt-validate-length-for-cca-aes-cipher-key-requests.patch
s390-zcrypt-validate-length-for-cca-ecc-private-key-requests.patch
scsi-libsas-terminate-deferred-commands-on-time-out.patch
scsi-scsi_debug-fix-report-zones-alloc_len-underflow-oob-write.patch
scsi-ufs-dt-bindings-add-missing-mcq-reg-for-qcom-sa8255p-ufshc.patch
sctp-prevent-peer-transport-count-overflow.patch
sctp-reject-stale-cookies-with-mismatched-verification-tags.patch
selftests-clone3-fix-wild-pointer-access-of-getline-due-to-missing-init.patch
selftests-mm-fix-potential-wild-pointer-access-of-getline-due-to-missing-init.patch
spi-qcom-qspi-correct-max-dma-length-to-avoid-64k-boundary-failure.patch
spi-spi-qpic-snand-write-the-feature-value-before-executing-set_feature.patch
tracing-check-return-value-of-__register_event-in-trace_module_add_events.patch
tracing-filters-fix-false-positive-match-in-regex_match_full.patch
ublk-reset-kernel-owned-dev_info-fields-in-ublk_ctrl_add_dev.patch
um-vector-fix-use-after-free-in-vector_mmsg_rx.patch
uprobes-fix-null-pointer-dereference-in-hprobe_expire.patch
veth-convert-frag_list-skbs-before-running-xdp.patch
vxlan-re-fetch-eth-header-after-route_shortcircuit.patch
vxlan-unclone-skb-head-before-modifying-eth-header-in-route_shortcircuit.patch
vxlan-use-neigh_ha_snapshot-in-route_shortcircuit.patch
vxlan-use-pskb_network_may_pull-for-transmit-path-header-pulls.patch
vxlan-use-pskb_network_may_pull-in-route_shortcircuit.patch
Greg Kroah-Hartman [Wed, 5 Aug 2026 09:58:58 +0000 (11:58 +0200)]
7.1-stable patches
added patches:
binfmt_misc-don-t-leak-the-user-namespace-when-the-mount-fails.patch
binfmt_misc-don-t-let-an-f-entry-pin-its-own-instance.patch
binfmt_misc-reject-a-flag-character-as-the-field-delimiter.patch
binfmt_misc-restore-write-access-when-removing-an-entry.patch
binfmt_misc-use-exe_file_deny_write_access-for-the-interpreter-clone.patch
Greg Kroah-Hartman [Wed, 5 Aug 2026 09:58:49 +0000 (11:58 +0200)]
6.18-stable patches
added patches:
binfmt_misc-don-t-let-an-f-entry-pin-its-own-instance.patch
binfmt_misc-reject-a-flag-character-as-the-field-delimiter.patch
binfmt_misc-restore-write-access-when-removing-an-entry.patch
binfmt_misc-use-exe_file_deny_write_access-for-the-interpreter-clone.patch
Greg Kroah-Hartman [Wed, 5 Aug 2026 09:58:39 +0000 (11:58 +0200)]
6.12-stable patches
added patches:
binfmt_misc-don-t-let-an-f-entry-pin-its-own-instance.patch
binfmt_misc-reject-a-flag-character-as-the-field-delimiter.patch
Greg Kroah-Hartman [Wed, 5 Aug 2026 09:58:29 +0000 (11:58 +0200)]
6.6-stable patches
added patches:
binfmt_misc-reject-a-flag-character-as-the-field-delimiter.patch
Greg Kroah-Hartman [Wed, 5 Aug 2026 09:58:20 +0000 (11:58 +0200)]
6.1-stable patches
added patches:
binfmt_misc-reject-a-flag-character-as-the-field-delimiter.patch
Greg Kroah-Hartman [Wed, 5 Aug 2026 09:58:10 +0000 (11:58 +0200)]
5.15-stable patches
added patches:
binfmt_misc-reject-a-flag-character-as-the-field-delimiter.patch
Greg Kroah-Hartman [Wed, 5 Aug 2026 09:58:01 +0000 (11:58 +0200)]
5.10-stable patches
added patches:
binfmt_misc-reject-a-flag-character-as-the-field-delimiter.patch
Greg Kroah-Hartman [Wed, 5 Aug 2026 09:50:58 +0000 (11:50 +0200)]
7.1-stable patches
added patches:
afs-fix-afs_fs_fetch_data-to-set-call-async.patch
afs-fix-afs_fs_fetch_data-to-subtract-transferred-from-len.patch
afs-fix-uaf-when-sending-a-message.patch
alsa-6fire-fix-uaf-at-error-handling-during-probe.patch
alsa-hda-realtek-add-quirk-for-tongfang-x6sp45xu.patch
alsa-lx6464es-fix-period-byte-count-for-16-bit-streams.patch
alsa-pcm-wake-linked-drain-waiters-on-unlink.patch
alsa-seq-fix-division-by-zero-in-initialize_timer.patch
alsa-timer-clear-sndrv_timer_iflg_dead-once-the-close-completes.patch
alsa-ump-fix-double-free-of-out_cvts-on-rawmidi-error.patch
alsa-usb-audio-clamp-frame-size-in-implicit-feedback-mode.patch
alsa-usb-audio-fix-dma-buffer-out-of-bounds-write-when-fill_max-is-set.patch
alsa-usb-audio-fix-oob-write-in-snd_usbmidi_akai_output.patch
alsa-usb-audio-fix-stack-info-leak-in-rme-digiface-status.patch
alsa-usb-audio-fix-use-after-free-in-ump_to_endpoint.patch
asoc-fsl_asrc-fix-m2m_init-error-path-to-use-goto-instead-of-bare-return.patch
asoc-fsl_easrc-fix-m2m_init-error-path-to-use-goto-instead-of-bare-return.patch
asoc-tas2562-fix-broken-entries-in-the-volume-lookup-table.patch
asoc-tas2562-fix-dvc-coefficient-write-order.patch
ata-libata-eh-increase-standby-immediate-timeout.patch
ata-libata-sata-fix-ata_scsi_lpm_supported-iteration.patch
ata-libata-scsi-schedule-deferred-atapi-command.patch
ata-libata-scsi-terminate-deferred-commands-on-time-out.patch
bpf-lwt-fix-dst-reference-leak-on-reroute-failure.patch
dmaengine-qcom-bam_dma-fix-command-element-mask-field-for-bam-v1.6.0.patch
e1000-fix-memory-leak-in-e1000_probe.patch
fou-fix-use-after-free-in-fou_create.patch
igbvf-fix-leak-in-tx-dma-error-cleanup.patch
igc-remove-napi_synchronize-in-igc_down.patch
ipvs-do-not-propagate-one-packet-flag-to-synced-conns.patch
ksmbd-reject-repeated-smb2-negotiate-requests.patch
mshv-fix-hv_input_get_system_property-struct.patch
net-smc-fix-socket-use-after-free-during-link-group-termination.patch
netfilter-ipset-do-not-update-comments-from-kernel-side-hash-adds.patch
of-address-fix-null-bus-dereference-in-of_pci_range_parser_one.patch
pci-imx6-keep-i.mx6-root-port-msi-msi-x-capabilities-with-imsi-rx-to-work-around-hardware-bug.patch
tipc-avoid-use-after-free-in-poll-trace-queue-dumps.patch
wifi-mac80211-fix-tid_tx-use-after-free-on-ba-session-stop.patch
wifi-mwifiex-use-the-subframe-length-when-parsing-a-msdu-tdls-frames.patch
x86-cpu-amd-carve-out-a-zen5-models-range.patch
Greg Kroah-Hartman [Wed, 5 Aug 2026 09:50:45 +0000 (11:50 +0200)]
6.18-stable patches
added patches:
afs-fix-afs_fs_fetch_data-to-set-call-async.patch
afs-fix-afs_fs_fetch_data-to-subtract-transferred-from-len.patch
afs-fix-uaf-when-sending-a-message.patch
alsa-6fire-fix-uaf-at-error-handling-during-probe.patch
alsa-hda-realtek-add-quirk-for-tongfang-x6sp45xu.patch
alsa-lx6464es-fix-period-byte-count-for-16-bit-streams.patch
alsa-pcm-wake-linked-drain-waiters-on-unlink.patch
alsa-seq-fix-division-by-zero-in-initialize_timer.patch
alsa-timer-clear-sndrv_timer_iflg_dead-once-the-close-completes.patch
alsa-ump-fix-double-free-of-out_cvts-on-rawmidi-error.patch
alsa-usb-audio-clamp-frame-size-in-implicit-feedback-mode.patch
alsa-usb-audio-fix-dma-buffer-out-of-bounds-write-when-fill_max-is-set.patch
alsa-usb-audio-fix-oob-write-in-snd_usbmidi_akai_output.patch
alsa-usb-audio-fix-stack-info-leak-in-rme-digiface-status.patch
alsa-usb-audio-fix-use-after-free-in-ump_to_endpoint.patch
asoc-fsl_asrc-fix-m2m_init-error-path-to-use-goto-instead-of-bare-return.patch
asoc-fsl_easrc-fix-m2m_init-error-path-to-use-goto-instead-of-bare-return.patch
asoc-tas2562-fix-broken-entries-in-the-volume-lookup-table.patch
asoc-tas2562-fix-dvc-coefficient-write-order.patch
ata-libata-eh-increase-standby-immediate-timeout.patch
ata-libata-sata-fix-ata_scsi_lpm_supported-iteration.patch
bpf-lwt-fix-dst-reference-leak-on-reroute-failure.patch
dmaengine-qcom-bam_dma-fix-command-element-mask-field-for-bam-v1.6.0.patch
e1000-fix-memory-leak-in-e1000_probe.patch
igbvf-fix-leak-in-tx-dma-error-cleanup.patch
igc-remove-napi_synchronize-in-igc_down.patch
ipvs-do-not-propagate-one-packet-flag-to-synced-conns.patch
ksmbd-reject-repeated-smb2-negotiate-requests.patch
mshv-fix-hv_input_get_system_property-struct.patch
net-smc-fix-socket-use-after-free-during-link-group-termination.patch
netfilter-ipset-do-not-update-comments-from-kernel-side-hash-adds.patch
of-address-fix-null-bus-dereference-in-of_pci_range_parser_one.patch
tipc-avoid-use-after-free-in-poll-trace-queue-dumps.patch
wifi-mwifiex-use-the-subframe-length-when-parsing-a-msdu-tdls-frames.patch
Greg Kroah-Hartman [Wed, 5 Aug 2026 09:50:33 +0000 (11:50 +0200)]
6.12-stable patches
added patches:
alsa-6fire-fix-uaf-at-error-handling-during-probe.patch
alsa-lx6464es-fix-period-byte-count-for-16-bit-streams.patch
alsa-pcm-wake-linked-drain-waiters-on-unlink.patch
alsa-seq-fix-division-by-zero-in-initialize_timer.patch
alsa-timer-clear-sndrv_timer_iflg_dead-once-the-close-completes.patch
alsa-ump-fix-double-free-of-out_cvts-on-rawmidi-error.patch
alsa-usb-audio-clamp-frame-size-in-implicit-feedback-mode.patch
alsa-usb-audio-fix-dma-buffer-out-of-bounds-write-when-fill_max-is-set.patch
alsa-usb-audio-fix-oob-write-in-snd_usbmidi_akai_output.patch
alsa-usb-audio-fix-stack-info-leak-in-rme-digiface-status.patch
alsa-usb-audio-fix-use-after-free-in-ump_to_endpoint.patch
asoc-tas2562-fix-broken-entries-in-the-volume-lookup-table.patch
asoc-tas2562-fix-dvc-coefficient-write-order.patch
ata-libata-eh-increase-standby-immediate-timeout.patch
ata-libata-sata-fix-ata_scsi_lpm_supported-iteration.patch
bpf-lwt-fix-dst-reference-leak-on-reroute-failure.patch
dmaengine-qcom-bam_dma-fix-command-element-mask-field-for-bam-v1.6.0.patch
e1000-fix-memory-leak-in-e1000_probe.patch
igbvf-fix-leak-in-tx-dma-error-cleanup.patch
ipvs-do-not-propagate-one-packet-flag-to-synced-conns.patch
net-smc-fix-socket-use-after-free-during-link-group-termination.patch
netfilter-ipset-do-not-update-comments-from-kernel-side-hash-adds.patch
tipc-avoid-use-after-free-in-poll-trace-queue-dumps.patch
wifi-mwifiex-use-the-subframe-length-when-parsing-a-msdu-tdls-frames.patch
Greg Kroah-Hartman [Wed, 5 Aug 2026 09:50:21 +0000 (11:50 +0200)]
6.6-stable patches
added patches:
alsa-6fire-fix-uaf-at-error-handling-during-probe.patch
alsa-lx6464es-fix-period-byte-count-for-16-bit-streams.patch
alsa-pcm-wake-linked-drain-waiters-on-unlink.patch
alsa-ump-fix-double-free-of-out_cvts-on-rawmidi-error.patch
alsa-usb-audio-clamp-frame-size-in-implicit-feedback-mode.patch
alsa-usb-audio-fix-dma-buffer-out-of-bounds-write-when-fill_max-is-set.patch
alsa-usb-audio-fix-oob-write-in-snd_usbmidi_akai_output.patch
alsa-usb-audio-fix-use-after-free-in-ump_to_endpoint.patch
asoc-tas2562-fix-broken-entries-in-the-volume-lookup-table.patch
asoc-tas2562-fix-dvc-coefficient-write-order.patch
ata-libata-eh-increase-standby-immediate-timeout.patch
bpf-lwt-fix-dst-reference-leak-on-reroute-failure.patch
dmaengine-qcom-bam_dma-fix-command-element-mask-field-for-bam-v1.6.0.patch
e1000-fix-memory-leak-in-e1000_probe.patch
igbvf-fix-leak-in-tx-dma-error-cleanup.patch
ipvs-do-not-propagate-one-packet-flag-to-synced-conns.patch
net-smc-fix-socket-use-after-free-during-link-group-termination.patch
netfilter-ipset-do-not-update-comments-from-kernel-side-hash-adds.patch
tipc-avoid-use-after-free-in-poll-trace-queue-dumps.patch
wifi-mwifiex-use-the-subframe-length-when-parsing-a-msdu-tdls-frames.patch
Greg Kroah-Hartman [Wed, 5 Aug 2026 09:50:10 +0000 (11:50 +0200)]
6.1-stable patches
added patches:
alsa-6fire-fix-uaf-at-error-handling-during-probe.patch
alsa-lx6464es-fix-period-byte-count-for-16-bit-streams.patch
alsa-pcm-wake-linked-drain-waiters-on-unlink.patch
alsa-usb-audio-clamp-frame-size-in-implicit-feedback-mode.patch
alsa-usb-audio-fix-dma-buffer-out-of-bounds-write-when-fill_max-is-set.patch
alsa-usb-audio-fix-oob-write-in-snd_usbmidi_akai_output.patch
asoc-tas2562-fix-broken-entries-in-the-volume-lookup-table.patch
asoc-tas2562-fix-dvc-coefficient-write-order.patch
bpf-lwt-fix-dst-reference-leak-on-reroute-failure.patch
dmaengine-qcom-bam_dma-fix-command-element-mask-field-for-bam-v1.6.0.patch
e1000-fix-memory-leak-in-e1000_probe.patch
igbvf-fix-leak-in-tx-dma-error-cleanup.patch
ipvs-do-not-propagate-one-packet-flag-to-synced-conns.patch
net-smc-fix-socket-use-after-free-during-link-group-termination.patch
netfilter-ipset-do-not-update-comments-from-kernel-side-hash-adds.patch
tipc-avoid-use-after-free-in-poll-trace-queue-dumps.patch
wifi-mwifiex-use-the-subframe-length-when-parsing-a-msdu-tdls-frames.patch
Greg Kroah-Hartman [Wed, 5 Aug 2026 09:49:59 +0000 (11:49 +0200)]
5.15-stable patches
added patches:
alsa-6fire-fix-uaf-at-error-handling-during-probe.patch
alsa-lx6464es-fix-period-byte-count-for-16-bit-streams.patch
alsa-pcm-wake-linked-drain-waiters-on-unlink.patch
alsa-usb-audio-clamp-frame-size-in-implicit-feedback-mode.patch
alsa-usb-audio-fix-dma-buffer-out-of-bounds-write-when-fill_max-is-set.patch
alsa-usb-audio-fix-oob-write-in-snd_usbmidi_akai_output.patch
asoc-tas2562-fix-broken-entries-in-the-volume-lookup-table.patch
asoc-tas2562-fix-dvc-coefficient-write-order.patch
bpf-lwt-fix-dst-reference-leak-on-reroute-failure.patch
dmaengine-qcom-bam_dma-fix-command-element-mask-field-for-bam-v1.6.0.patch
e1000-fix-memory-leak-in-e1000_probe.patch
igbvf-fix-leak-in-tx-dma-error-cleanup.patch
ipvs-do-not-propagate-one-packet-flag-to-synced-conns.patch
net-smc-fix-socket-use-after-free-during-link-group-termination.patch
netfilter-ipset-do-not-update-comments-from-kernel-side-hash-adds.patch
tipc-avoid-use-after-free-in-poll-trace-queue-dumps.patch
wifi-mwifiex-use-the-subframe-length-when-parsing-a-msdu-tdls-frames.patch
Greg Kroah-Hartman [Wed, 5 Aug 2026 09:49:48 +0000 (11:49 +0200)]
5.10-stable patches
added patches:
alsa-6fire-fix-uaf-at-error-handling-during-probe.patch
alsa-lx6464es-fix-period-byte-count-for-16-bit-streams.patch
alsa-pcm-wake-linked-drain-waiters-on-unlink.patch
alsa-usb-audio-clamp-frame-size-in-implicit-feedback-mode.patch
alsa-usb-audio-fix-dma-buffer-out-of-bounds-write-when-fill_max-is-set.patch
alsa-usb-audio-fix-oob-write-in-snd_usbmidi_akai_output.patch
asoc-tas2562-fix-broken-entries-in-the-volume-lookup-table.patch
asoc-tas2562-fix-dvc-coefficient-write-order.patch
bpf-lwt-fix-dst-reference-leak-on-reroute-failure.patch
dmaengine-qcom-bam_dma-fix-command-element-mask-field-for-bam-v1.6.0.patch
e1000-fix-memory-leak-in-e1000_probe.patch
igbvf-fix-leak-in-tx-dma-error-cleanup.patch
ipvs-do-not-propagate-one-packet-flag-to-synced-conns.patch
net-smc-fix-socket-use-after-free-during-link-group-termination.patch
netfilter-ipset-do-not-update-comments-from-kernel-side-hash-adds.patch
tipc-avoid-use-after-free-in-poll-trace-queue-dumps.patch
wifi-mwifiex-use-the-subframe-length-when-parsing-a-msdu-tdls-frames.patch
Greg Kroah-Hartman [Wed, 5 Aug 2026 09:40:41 +0000 (11:40 +0200)]
6.1-stable patches
added patches:
audit-fix-potential-integer-overflow-in-audit_log_n_string.patch
audit-fix-potential-use-after-free-in-audit_del_rule.patch
bluetooth-hidp-reject-frames-without-a-transaction-header.patch
bluetooth-hidp-validate-numbered-report-payloads.patch
kvm-s390-pci-fix-null-dereference-on-aibv-allocation-failure.patch
kvm-s390-pci-reject-adapter-interrupt-forwarding-if-already-enabled.patch
kvm-s390-pci-validate-aibv-and-aisb-before-pinning-guest-pages.patch
kvm-svm-update-x2apic-msr-intercepts-if-avic-is-inhibited-while-l2-is-active.patch
mm-hugetlb-fix-list-corruption-in-allocate_file_region_entries.patch
mm-percpu-km-fix-bitmap-overflow-and-accounting-in-pcpu_create_chunk.patch
sctp-validate-adaptation-indication-parameter-length.patch
Greg Kroah-Hartman [Wed, 5 Aug 2026 09:40:31 +0000 (11:40 +0200)]
5.15-stable patches
added patches:
audit-fix-potential-integer-overflow-in-audit_log_n_string.patch
audit-fix-potential-use-after-free-in-audit_del_rule.patch
bluetooth-hidp-reject-frames-without-a-transaction-header.patch
bluetooth-hidp-validate-numbered-report-payloads.patch
mm-hugetlb-fix-list-corruption-in-allocate_file_region_entries.patch
mm-percpu-km-fix-bitmap-overflow-and-accounting-in-pcpu_create_chunk.patch
sctp-validate-adaptation-indication-parameter-length.patch
Greg Kroah-Hartman [Wed, 5 Aug 2026 09:40:21 +0000 (11:40 +0200)]
5.10-stable patches
added patches:
audit-fix-potential-integer-overflow-in-audit_log_n_string.patch
audit-fix-potential-use-after-free-in-audit_del_rule.patch
bluetooth-hidp-validate-numbered-report-payloads.patch
mm-hugetlb-fix-list-corruption-in-allocate_file_region_entries.patch
mm-percpu-km-fix-bitmap-overflow-and-accounting-in-pcpu_create_chunk.patch
sctp-validate-adaptation-indication-parameter-length.patch
Greg Kroah-Hartman [Wed, 5 Aug 2026 09:39:53 +0000 (11:39 +0200)]
7.1-stable patches
added patches:
audit-fix-potential-integer-overflow-in-audit_log_n_string.patch
audit-fix-potential-use-after-free-in-audit_del_rule.patch
bluetooth-btmtk-fix-short-read-errors-in-btmtk_usb_reg_read.patch
bluetooth-btmtk-fix-short-read-errors-in-btmtk_usb_uhw_reg_read.patch
bluetooth-btusb-fix-short-read-errors-in-btusb_qca_send_vendor_req.patch
bluetooth-hci_sync-fix-advertising-data-uafs.patch
bluetooth-hidp-reject-frames-without-a-transaction-header.patch
bluetooth-hidp-validate-numbered-report-payloads.patch
bluetooth-mgmt-fix-pending-command-uaf-in-eir-updates.patch
bluetooth-mgmt-fix-uaf-in-pair-command-cancellation.patch
bluetooth-sco-give-the-socket-its-own-sco_conn-reference.patch
btrfs-zoned-fix-missing-chunk-metadata-reservation.patch
dibs-fix-use-after-free-of-dmb_node-in-loopback-attach-detach-unregister.patch
fortify-disable-wstringop-overread-in-tests.patch
fs-proc-task_mmu-fix-pagemap_scan-written-state-for-pmd-holes.patch
fs-proc-task_mmu-fix-pagemap_scan-written-state-for-unpopulated-ptes.patch
kvm-s390-pci-fix-memory-accounting-for-pinned-unpinned-pages.patch
kvm-s390-pci-fix-missing-error-codes-and-memory-unaccounting.patch
kvm-s390-pci-fix-null-dereference-on-aibv-allocation-failure.patch
kvm-s390-pci-fix-resource-leak-on-irq-registration-failure.patch
kvm-s390-pci-reject-adapter-interrupt-forwarding-if-already-enabled.patch
kvm-s390-pci-validate-aibv-and-aisb-before-pinning-guest-pages.patch
kvm-svm-update-x2apic-msr-intercepts-if-avic-is-inhibited-while-l2-is-active.patch
kvm-vmx-add-memory-clobber-to-asm-for-vmx-instructions.patch
kvm-x86-cancel-delayed-i-o-apic-eoi-handling-before-destroying-vcpus.patch
lib-test_hmm-use-device-devt-for-coherent-device-range-selection.patch
mm-hugetlb-fix-list-corruption-in-allocate_file_region_entries.patch
mm-migrate_device-fix-pte_pfn-pte_dirty-called-on-non-present-pte.patch
mm-percpu-km-fix-bitmap-overflow-and-accounting-in-pcpu_create_chunk.patch
mm-util-don-t-read-__page_2-for-order-1-folios-in-snapshot_page.patch
mm-vmstat-fold-stranded-per-cpu-node-stats-when-a-node-comes-online.patch
ocfs2-fix-boundary-check-in-ocfs2_check_dir_entry-to-use-buffer-offset.patch
sctp-validate-adaptation-indication-parameter-length.patch
selftest-fix-headers-in-fclog.c.patch
tracing-fprobe-roll-back-on-enable_trace_fprobe-failure.patch
tracing-probes-reject-arg0-in-meta-argument-expansion.patch
userfaultfd-wait-on-source-pmd-during-uffdio_move.patch
Greg Kroah-Hartman [Wed, 5 Aug 2026 09:39:40 +0000 (11:39 +0200)]
6.18-stable patches
added patches:
audit-fix-potential-integer-overflow-in-audit_log_n_string.patch
audit-fix-potential-use-after-free-in-audit_del_rule.patch
bluetooth-btmtk-fix-short-read-errors-in-btmtk_usb_uhw_reg_read.patch
bluetooth-btusb-fix-short-read-errors-in-btusb_qca_send_vendor_req.patch
bluetooth-hci_sync-fix-advertising-data-uafs.patch
bluetooth-hidp-reject-frames-without-a-transaction-header.patch
bluetooth-hidp-validate-numbered-report-payloads.patch
bluetooth-mgmt-fix-pending-command-uaf-in-eir-updates.patch
bluetooth-mgmt-fix-uaf-in-pair-command-cancellation.patch
bluetooth-sco-give-the-socket-its-own-sco_conn-reference.patch
dibs-fix-use-after-free-of-dmb_node-in-loopback-attach-detach-unregister.patch
fortify-disable-wstringop-overread-in-tests.patch
fs-proc-task_mmu-fix-pagemap_scan-written-state-for-pmd-holes.patch
kvm-s390-pci-fix-memory-accounting-for-pinned-unpinned-pages.patch
kvm-s390-pci-fix-missing-error-codes-and-memory-unaccounting.patch
kvm-s390-pci-fix-null-dereference-on-aibv-allocation-failure.patch
kvm-s390-pci-reject-adapter-interrupt-forwarding-if-already-enabled.patch
kvm-s390-pci-validate-aibv-and-aisb-before-pinning-guest-pages.patch
kvm-svm-update-x2apic-msr-intercepts-if-avic-is-inhibited-while-l2-is-active.patch
kvm-vmx-add-memory-clobber-to-asm-for-vmx-instructions.patch
mm-hugetlb-fix-list-corruption-in-allocate_file_region_entries.patch
mm-migrate_device-fix-pte_pfn-pte_dirty-called-on-non-present-pte.patch
mm-percpu-km-fix-bitmap-overflow-and-accounting-in-pcpu_create_chunk.patch
mm-util-don-t-read-__page_2-for-order-1-folios-in-snapshot_page.patch
mm-vmstat-fold-stranded-per-cpu-node-stats-when-a-node-comes-online.patch
sctp-validate-adaptation-indication-parameter-length.patch
selftest-fix-headers-in-fclog.c.patch
tracing-fprobe-roll-back-on-enable_trace_fprobe-failure.patch
tracing-probes-reject-arg0-in-meta-argument-expansion.patch
Greg Kroah-Hartman [Wed, 5 Aug 2026 09:39:28 +0000 (11:39 +0200)]
6.12-stable patches
added patches:
audit-fix-potential-integer-overflow-in-audit_log_n_string.patch
audit-fix-potential-use-after-free-in-audit_del_rule.patch
bluetooth-btmtk-fix-short-read-errors-in-btmtk_usb_uhw_reg_read.patch
bluetooth-btusb-fix-short-read-errors-in-btusb_qca_send_vendor_req.patch
bluetooth-hci_sync-fix-advertising-data-uafs.patch
bluetooth-hidp-reject-frames-without-a-transaction-header.patch
bluetooth-hidp-validate-numbered-report-payloads.patch
bluetooth-mgmt-fix-pending-command-uaf-in-eir-updates.patch
bluetooth-mgmt-fix-uaf-in-pair-command-cancellation.patch
fortify-disable-wstringop-overread-in-tests.patch
fs-proc-task_mmu-fix-pagemap_scan-written-state-for-pmd-holes.patch
kvm-s390-pci-fix-null-dereference-on-aibv-allocation-failure.patch
kvm-s390-pci-reject-adapter-interrupt-forwarding-if-already-enabled.patch
kvm-s390-pci-validate-aibv-and-aisb-before-pinning-guest-pages.patch
kvm-svm-update-x2apic-msr-intercepts-if-avic-is-inhibited-while-l2-is-active.patch
mm-hugetlb-fix-list-corruption-in-allocate_file_region_entries.patch
mm-migrate_device-fix-pte_pfn-pte_dirty-called-on-non-present-pte.patch
mm-percpu-km-fix-bitmap-overflow-and-accounting-in-pcpu_create_chunk.patch
mm-vmstat-fold-stranded-per-cpu-node-stats-when-a-node-comes-online.patch
sctp-validate-adaptation-indication-parameter-length.patch
tracing-probes-reject-arg0-in-meta-argument-expansion.patch
Greg Kroah-Hartman [Wed, 5 Aug 2026 09:39:17 +0000 (11:39 +0200)]
6.6-stable patches
added patches:
audit-fix-potential-integer-overflow-in-audit_log_n_string.patch
audit-fix-potential-use-after-free-in-audit_del_rule.patch
bluetooth-btmtk-fix-short-read-errors-in-btmtk_usb_uhw_reg_read.patch
bluetooth-hidp-reject-frames-without-a-transaction-header.patch
bluetooth-hidp-validate-numbered-report-payloads.patch
bluetooth-mgmt-fix-pending-command-uaf-in-eir-updates.patch
bluetooth-mgmt-fix-uaf-in-pair-command-cancellation.patch
kvm-s390-pci-fix-null-dereference-on-aibv-allocation-failure.patch
kvm-s390-pci-reject-adapter-interrupt-forwarding-if-already-enabled.patch
kvm-s390-pci-validate-aibv-and-aisb-before-pinning-guest-pages.patch
kvm-svm-update-x2apic-msr-intercepts-if-avic-is-inhibited-while-l2-is-active.patch
mm-hugetlb-fix-list-corruption-in-allocate_file_region_entries.patch
mm-percpu-km-fix-bitmap-overflow-and-accounting-in-pcpu_create_chunk.patch
mm-vmstat-fold-stranded-per-cpu-node-stats-when-a-node-comes-online.patch
sctp-validate-adaptation-indication-parameter-length.patch
tracing-probes-reject-arg0-in-meta-argument-expansion.patch
Greg Kroah-Hartman [Wed, 5 Aug 2026 09:31:49 +0000 (11:31 +0200)]
7.1-stable patches
added patches:
acpi-cppc-check-all-controls-for-fast-switching.patch
btrfs-raid56-fix-scrub-read-assembly-submitting-no-reads.patch
erofs-cap-lzma-stream-pool-size.patch
iommu-iommufd-fix-iopf-group-ownership-uaf.patch
iommufd-fix-wrong-hwpt-passed-to-iommufd_auto_response_faults-on-replace.patch
iommufd-reject-dmabuf-pages-from-the-access-pin-path.patch
iommufd-viommu-publish-a-vdevice-only-after-vdevice_init-succeeds.patch
iommufd-viommu-release-the-igroup-lock-on-the-vdevice_size-error-path.patch
kbuild-stop-modifying-objtree-makefile-when-building-oot-kmods-oos.patch
mm-hugetlb-fix-swap-entry-corruption-when-clearing-uffd-wp-at-fork.patch
mm-mglru-fix-stale-batch-updates-after-memcg-reparenting.patch
pinctrl-bm1880-add-missing-select-generic_pinconf.patch
pinctrl-devicetree-don-t-free-uninitialized-dev_name-on-error-path.patch
pinctrl-microchip-sgpio-add-missing-select-regmap_mmio.patch
Greg Kroah-Hartman [Wed, 5 Aug 2026 09:31:35 +0000 (11:31 +0200)]
6.18-stable patches
added patches:
erofs-cap-lzma-stream-pool-size.patch
iommu-iommufd-fix-iopf-group-ownership-uaf.patch
iommufd-fix-wrong-hwpt-passed-to-iommufd_auto_response_faults-on-replace.patch
iommufd-viommu-publish-a-vdevice-only-after-vdevice_init-succeeds.patch
iommufd-viommu-release-the-igroup-lock-on-the-vdevice_size-error-path.patch
pinctrl-bm1880-add-missing-select-generic_pinconf.patch
pinctrl-devicetree-don-t-free-uninitialized-dev_name-on-error-path.patch
pinctrl-microchip-sgpio-add-missing-select-regmap_mmio.patch
Greg Kroah-Hartman [Wed, 5 Aug 2026 09:31:25 +0000 (11:31 +0200)]
6.12-stable patches
added patches:
erofs-cap-lzma-stream-pool-size.patch
pinctrl-bm1880-add-missing-select-generic_pinconf.patch
pinctrl-devicetree-don-t-free-uninitialized-dev_name-on-error-path.patch
pinctrl-microchip-sgpio-add-missing-select-regmap_mmio.patch
Greg Kroah-Hartman [Wed, 5 Aug 2026 09:31:15 +0000 (11:31 +0200)]
6.6-stable patches
added patches:
erofs-cap-lzma-stream-pool-size.patch
pinctrl-bm1880-add-missing-select-generic_pinconf.patch
pinctrl-devicetree-don-t-free-uninitialized-dev_name-on-error-path.patch
pinctrl-microchip-sgpio-add-missing-select-regmap_mmio.patch
Greg Kroah-Hartman [Wed, 5 Aug 2026 09:31:06 +0000 (11:31 +0200)]
6.1-stable patches
added patches:
pinctrl-bm1880-add-missing-select-generic_pinconf.patch
pinctrl-devicetree-don-t-free-uninitialized-dev_name-on-error-path.patch
pinctrl-microchip-sgpio-add-missing-select-regmap_mmio.patch
Greg Kroah-Hartman [Wed, 5 Aug 2026 09:30:56 +0000 (11:30 +0200)]
5.15-stable patches
added patches:
pinctrl-bm1880-add-missing-select-generic_pinconf.patch
pinctrl-devicetree-don-t-free-uninitialized-dev_name-on-error-path.patch
Greg Kroah-Hartman [Wed, 5 Aug 2026 09:30:40 +0000 (11:30 +0200)]
5.10-stable patches
added patches:
pinctrl-bm1880-add-missing-select-generic_pinconf.patch
pinctrl-devicetree-don-t-free-uninitialized-dev_name-on-error-path.patch
Greg Kroah-Hartman [Wed, 5 Aug 2026 09:16:33 +0000 (11:16 +0200)]
7.1-stable patches
added patches:
kvm-arm64-vgic-avoid-double-deactivate-of-irqs-in-the-nested-context.patch
Sasha Levin [Wed, 5 Aug 2026 01:12:48 +0000 (21:12 -0400)]
Fixes for all trees
Signed-off-by: Sasha Levin <sashal@kernel.org>
Sasha Levin [Tue, 4 Aug 2026 23:47:10 +0000 (19:47 -0400)]
Fixes for all trees
Signed-off-by: Sasha Levin <sashal@kernel.org>
Sasha Levin [Tue, 4 Aug 2026 01:05:42 +0000 (21:05 -0400)]
Fixes for all trees
Signed-off-by: Sasha Levin <sashal@kernel.org>
Sasha Levin [Mon, 3 Aug 2026 20:46:32 +0000 (16:46 -0400)]
Fixes for all trees
Signed-off-by: Sasha Levin <sashal@kernel.org>
Greg Kroah-Hartman [Mon, 3 Aug 2026 09:36:57 +0000 (11:36 +0200)]
drop empty patch
Greg Kroah-Hartman [Mon, 3 Aug 2026 09:36:29 +0000 (11:36 +0200)]
merge staging into queue: 7.1 6.18 6.12 6.6 6.1 5.15 5.10
Greg Kroah-Hartman [Mon, 3 Aug 2026 09:26:34 +0000 (11:26 +0200)]
Linux 7.1.6
Greg Kroah-Hartman [Mon, 3 Aug 2026 09:24:32 +0000 (11:24 +0200)]
Linux 6.18.42
Greg Kroah-Hartman [Mon, 3 Aug 2026 09:18:09 +0000 (11:18 +0200)]
Linux 6.12.101
Greg Kroah-Hartman [Mon, 3 Aug 2026 09:16:25 +0000 (11:16 +0200)]
Linux 6.6.148
Sasha Levin [Sun, 2 Aug 2026 03:01:41 +0000 (23:01 -0400)]
drop 22 patches based on RC review feedback
Dropped patches:
- "thunderbolt: Prevent XDomain delayed work use-after-free on disconnect"
Upstream:
2c5d2d3c3f70cde2565d7b279b544893a2035842
Queues: 7.1, 6.18, 6.12, 6.6
Reason: the queued backport contains none of the upstream fix -- it is a
semantically inert relocation of the unmodified update_xdomain() with no
upstream provenance. Upstream is 5 in-place guard hunks in xdomain.c plus
2 in include/linux/thunderbolt.h (xd->removing set under xd->lock in
tb_xdomain_remove(), checked at each queue_delayed_work() site); none of
that is present, so the use-after-free is not fixed. Requeue candidate:
the real upstream commit applies cleanly to all four branches.
Report: https://lore.kernel.org/stable/
2eae07c3 -848e-4bc8-a444-
f8274692f653 @oracle.com/
- "thunderbolt: Keep XDomain reference during the lifetime of a service" [dependency]
Upstream:
8b4060998637f06975fceee9b73845d8672d411e
Queues: 7.1, 6.18, 6.12, 6.6
Reason: depends on dropped patch above (Stable-dep-of:
2c5d2d3c3f70 )
- "thunderbolt: Remove service debugfs entries during unregister" [dependency]
Upstream:
4d5fc3f4068568dfcb8cbe2852b4adc56394aa26
Queues: 7.1, 6.18, 6.12, 6.6
Reason: depends on dropped patch above (Stable-dep-of:
2c5d2d3c3f70 )
- "thunderbolt: Remove XDomain from the bus without holding tb->lock" [dependency]
Upstream:
a8937f35cf39c39c64325aa84d0463d866850857
Queues: 7.1, 6.18, 6.12, 6.6
Reason: depends on dropped patch above (Stable-dep-of:
2c5d2d3c3f70 )
- "thunderbolt: Handle lane bonding of Gen 4 XDomain links properly" [dependency]
Upstream:
36b6ad6ad0350554e611a8cb754ccd40857416a8
Queues: 6.6
Reason: depends on dropped patch above (Stable-dep-of:
2c5d2d3c3f70 )
- "thunderbolt: Remove usage of the deprecated ida_simple_xx() API" [dependency]
Upstream:
dec6a613574cd3dea799170b7aaa8fd76e22f176
Queues: 6.6
Reason: depends on dropped patch above (Stable-dep-of:
2c5d2d3c3f70 )
- "thunderbolt: Update property.c function documentation" [dependency]
Upstream:
d015642ad36d78e6eba12d8ab96cea6fd4602b49
Queues: 6.6
Reason: depends on dropped patch above (Stable-dep-of:
2c5d2d3c3f70 )
- "bpf: Refactor {acquire,release}_reference_state"
Upstream:
769b0f1c821455ab29baf42491e1ea1d726451fa
Queues: 6.12
Reason: spurious dependency -- the queued patch carries none of
769b0f1c8214 's semantics (no acquire_reference(), no
release_reference_nomark()) and has zero references to the fix it is
supposed to enable. Its diff is actually the first half of
201b62ccc831 , which was adapted for 6.12 and split across two output
slots while the SHA metadata stayed aligned to the original commit list.
Report: https://lore.kernel.org/stable/
129ad991 -e9fa-4f6b-bc1a-
a1d78eff6145 @oracle.com/
- "bpf: Refactor check_ctx_access()" [dependency]
Upstream:
201b62ccc83153d2925d310a2afe762905e0c455
Queues: 6.12
Reason: carries the second half of the mis-split adaptation above and will
not apply without it
- "bpf: Reset register bounds before narrowing retval range in check_mem_access()" [dependency]
Upstream:
5e0b273e0a62cc04ec338c7b502797c66c2ed42a
Queues: 6.12
Reason: the target fix -- has a hard textual dependency on the mis-split
refactor above. Will be requeued next cycle with a corrected dependency
set.
Signed-off-by: Sasha Levin <sashal@kernel.org>
Sasha Levin [Sat, 1 Aug 2026 22:13:03 +0000 (18:13 -0400)]
Fixes for all trees
Signed-off-by: Sasha Levin <sashal@kernel.org>
Sasha Levin [Sat, 1 Aug 2026 01:39:44 +0000 (21:39 -0400)]
Fixes for all trees
Signed-off-by: Sasha Levin <sashal@kernel.org>
Sasha Levin [Fri, 31 Jul 2026 16:52:50 +0000 (12:52 -0400)]
Drop selftests-ftrace-reset-triggers-at-top-level-before-instance-loop.patch
Signed-off-by: Sasha Levin <sashal@kernel.org>
Sasha Levin [Fri, 31 Jul 2026 14:52:14 +0000 (10:52 -0400)]
reorder s390 ptff export ahead of its consumer in 7.1 and 6.18
Reordered patches:
- "s390/ptff: Export ptff_function_mask[]"
Upstream:
9de445d8296a7f2b011ebb5834fdc94dcda5c778
Queues: 7.1, 6.18
Reason: this export is the prerequisite for "ptp: ptp_s390: Add missing
facility check" (
e78f1ac37afcb16cb6fef8a2c92591eab6558956 ), whose
ptff_query() use needs ptff_function_mask[]. Both were queued, but the
export landed after its consumer in the series (7.1: 744 vs 666,
6.18: 676 vs 544), so applying the series in order leaves an
intermediate commit that fails to build on s390x. Moved the export to
immediately before the consumer in both series files. No patch files
were added or removed; both patches stay queued.
Report: https://lore.kernel.org/stable/
669b8e16 -19a6-49bf-a1ef-
a7bce5075a9a @kernel.org/
Signed-off-by: Sasha Levin <sashal@kernel.org>
Sasha Levin [Fri, 31 Jul 2026 14:51:05 +0000 (10:51 -0400)]
drop 1 patch based on RC review feedback
Dropped patches:
- "mtd: maps: vmu-flash: fix fault in unaligned fixup"
Upstream:
79d1661502c6e4b6f626185cef72cf2fa78116e1
Queues: 6.6
Reason: malformed backport -- the removal side of every hunk was
context-adjusted down to the 6.6 kmalloc()/kmalloc_array() code, but
the addition side was left verbatim from upstream and still calls
kzalloc_obj()/kzalloc_objs(). Those helpers came from
2932ba8d9c99
("slab: Introduce kmalloc_obj() and family"), which is not in 6.6, so
any config that builds drivers/mtd/maps/vmu-flash.c (CONFIG_MTD_VMU,
sh/Dreamcast) fails to compile. Same root cause as the stratix10-svc
build regression already dropped from 6.1/6.6. The 6.12 and 6.18
copies are unaffected -- those bases define the helpers -- and stay
queued. The upstream fix is valid and can be requeued for 6.6 as a
properly adapted backport using kzalloc()/kcalloc().
Report: https://lore.kernel.org/stable/
178542714373 .4058.
4312420996135460246 @kernelci.org/
Signed-off-by: Sasha Levin <sashal@kernel.org>
Greg Kroah-Hartman [Fri, 31 Jul 2026 07:07:31 +0000 (09:07 +0200)]
drop ceph patch from 6.6
Greg Kroah-Hartman [Fri, 31 Jul 2026 06:57:04 +0000 (08:57 +0200)]
6.18-stable patches
added patches:
drm-drop-lib-from-header-search-path.patch
Greg Kroah-Hartman [Fri, 31 Jul 2026 06:51:55 +0000 (08:51 +0200)]
drop some vub300 patches that were incorrect
Greg Kroah-Hartman [Fri, 31 Jul 2026 06:48:18 +0000 (08:48 +0200)]
7.1-stable patches
added patches:
cifs-consolidate-time_last_write-stamp-into-_cifsfileinfo_put.patch
cifs-fix-time_last_write-stamp-placement-in-setattr-truncate-paths.patch
s390-ptff-export-ptff_function_mask.patch
Greg Kroah-Hartman [Fri, 31 Jul 2026 06:47:57 +0000 (08:47 +0200)]
6.18-stable patches
added patches:
s390-ptff-export-ptff_function_mask.patch
Greg Kroah-Hartman [Fri, 31 Jul 2026 06:45:47 +0000 (08:45 +0200)]
Merge branch 'master' of gitolite.kernel.org:/pub/scm/linux/kernel/git/stable/stable-queue
Greg Kroah-Hartman [Fri, 31 Jul 2026 06:45:33 +0000 (08:45 +0200)]
remove ceph patch on request
Sasha Levin [Fri, 31 Jul 2026 02:39:37 +0000 (22:39 -0400)]
Fixes for all trees
Signed-off-by: Sasha Levin <sashal@kernel.org>
Greg Kroah-Hartman [Thu, 30 Jul 2026 14:13:20 +0000 (16:13 +0200)]
7.1-stable patches
added patches:
kvm-svm-bump-asid_generation-on-cpu-online-to-avoid-asid-collision-after-hotplug.patch
Greg Kroah-Hartman [Thu, 30 Jul 2026 14:13:13 +0000 (16:13 +0200)]
6.18-stable patches
added patches:
kvm-svm-bump-asid_generation-on-cpu-online-to-avoid-asid-collision-after-hotplug.patch
Greg Kroah-Hartman [Thu, 30 Jul 2026 14:13:05 +0000 (16:13 +0200)]
6.12-stable patches
added patches:
kvm-svm-bump-asid_generation-on-cpu-online-to-avoid-asid-collision-after-hotplug.patch
Greg Kroah-Hartman [Thu, 30 Jul 2026 14:12:58 +0000 (16:12 +0200)]
6.6-stable patches
added patches:
kvm-svm-bump-asid_generation-on-cpu-online-to-avoid-asid-collision-after-hotplug.patch
Greg Kroah-Hartman [Thu, 30 Jul 2026 14:12:50 +0000 (16:12 +0200)]
6.1-stable patches
added patches:
kvm-svm-bump-asid_generation-on-cpu-online-to-avoid-asid-collision-after-hotplug.patch
Greg Kroah-Hartman [Thu, 30 Jul 2026 13:57:33 +0000 (15:57 +0200)]
5.10-stable patches
added patches:
net-bridge-vlan-fix-global-vlan-option-range-dumping.patch
raw-fix-a-typo-in-raw_icmp_error.patch
raw-remove-unused-variables-from-raw6_icmp_error.patch
Greg Kroah-Hartman [Thu, 30 Jul 2026 13:57:00 +0000 (15:57 +0200)]
5.15-stable patches
added patches:
raw-fix-a-typo-in-raw_icmp_error.patch
raw-remove-unused-variables-from-raw6_icmp_error.patch
Greg Kroah-Hartman [Thu, 30 Jul 2026 13:54:31 +0000 (15:54 +0200)]
6.6-stable patches
added patches:
asoc-mediatek-mt8195-add-platform-entry-for-etdm1_out_be-dai-link.patch
asoc-mediatek-mt8195-set-etdm1-2-in-out-to-comp_dummy.patch
rxrpc-disable-irq-not-bh-to-take-the-lock-for-attend_link.patch
udmabuf-ensure-to-perform-cache-synchronisation-in-begin_cpu_udmabuf.patch
Greg Kroah-Hartman [Thu, 30 Jul 2026 13:49:47 +0000 (15:49 +0200)]
6.12-stable patches
added patches:
afs-fix-uninit-var-in-afs_alloc_anon_key.patch
bluetooth-hci_conn-fix-memory-leak-in-hci_le_big_terminate.patch
bluetooth-hci_conn-fix-not-cleaning-up-broadcaster-broadcast-source.patch
bluetooth-hci_conn-fix-not-cleaning-up-pa_link-connections.patch
bluetooth-hci_conn-fix-running-bis_cleanup-for-hci_conn-type-pa_link.patch
Greg Kroah-Hartman [Thu, 30 Jul 2026 13:35:56 +0000 (15:35 +0200)]
6.12-stable patches
added patches:
afs-fix-delayed-allocation-of-a-cell-s-anonymous-key.patch
afs-handle-cb.initcallbackstate3-requests-without-a-server-record.patch
afs-set-vllist-to-null-if-addr-parsing-fails.patch
dpll-fix-clock-quality-level-reporting.patch
net-ethernet-remove-accidental-duplication-in-kconfig-file.patch
rxrpc-disable-irq-not-bh-to-take-the-lock-for-attend_link.patch
rxrpc-fix-locking-issues-with-the-peer-record-hash.patch
wifi-nl80211-fix-nl80211_start_radar_detection-return-value.patch
Greg Kroah-Hartman [Thu, 30 Jul 2026 13:31:56 +0000 (15:31 +0200)]
6.6-stable patches
added patches:
coredump-fix-pidfs-file-refcount-leak-in-umh_coredump_setup.patch
mm-damon-core-disallow-overlapping-input-ranges-for-damon_set_regions.patch
mm-damon-core-validate-ranges-in-damon_set_regions.patch