git.ipfire.org Git - thirdparty/kernel/stable-queue.git/log

5.15-stable patches

added patches:
batman-adv-bla-fix-report_work-leak-on-backbone_gw-purge.patch
batman-adv-clear-current-gateway-during-teardown.patch
batman-adv-dat-handle-forward-allocation-error.patch
batman-adv-fix-fragment-reassembly-length-accounting.patch
batman-adv-fix-tp_meter-counter-underflow-during-shutdown.patch
batman-adv-frag-disallow-unicast-fragment-in-fragment.patch
batman-adv-mcast-fix-use-after-free-in-orig_node-rcu-release.patch
batman-adv-tp_meter-avoid-use-of-uninit-sender-vars.patch
batman-adv-tt-fix-negative-last_changeset_len.patch
batman-adv-tt-fix-negative-tt_buff_len.patch
device-property-set-fwnode-secondary-to-null-in-fwnode_init.patch
drm-amd-display-fix-integer-overflow-in-bios_get_image.patch
drm-amd-display-validate-payload-length-and-link_index-in-dc_process_dmub_aux_transfer_async.patch
drm-bridge-it66121-acquire-reset-gpio-in-probe.patch
drm-bridge-megachips-remove-bridge-when-irq-request-fails.patch
drm-virtio-use-uninterruptible-resv-lock-for-plane-updates.patch
hwmon-pmbus-adm1266-bounce-blackbox-records-through-a-protocol-sized-buffer.patch
hwmon-pmbus-adm1266-cap-pdio-scan-in-get_multiple-at-adm1266_pdio_nr.patch
hwmon-pmbus-adm1266-don-t-clobber-gpio-bits-before-pdio-read-in-get_multiple.patch
hwmon-pmbus-adm1266-include-pec-byte-in-pmbus_block_xfer-read-buffer.patch
hwmon-pmbus-adm1266-register-the-gpio_chip-after-pmbus_do_probe.patch
hwmon-pmbus-adm1266-register-the-nvmem-device-after-pmbus_do_probe.patch
hwmon-pmbus-adm1266-reject-implausible-blackbox-record_count.patch
hwmon-pmbus-adm1266-reject-short-block-read-responses-in-the-gpio-accessors.patch
hwmon-pmbus-adm1266-seed-timestamp-from-the-real-time-clock.patch
hwmon-pmbus-adm1266-serialize-gpio-pmbus-accesses-with-pmbus_lock.patch
hwmon-pmbus-adm1266-serialize-nvmem-blackbox-read-with-pmbus_lock.patch
hwmon-pmbus-adm1266-serialize-sequencer_state-debugfs-read-with-pmbus_lock.patch
rdma-siw-reject-mpa-fpdu-length-underflow-before-signed-receive-math.patch
scsi-isci-fix-use-after-free-in-device-removal-path.patch
spi-sprd-fix-error-pointer-deref-after-dma-setup-failure.patch
spi-ti-qspi-fix-use-after-free-after-dma-setup-failure.patch
tracing-do-not-call-map-ops-elt_free-if-elt_alloc-fails.patch

5.10-stable patches

added patches:
batman-adv-bla-fix-report_work-leak-on-backbone_gw-purge.patch
batman-adv-clear-current-gateway-during-teardown.patch
batman-adv-dat-handle-forward-allocation-error.patch
batman-adv-fix-fragment-reassembly-length-accounting.patch
batman-adv-fix-tp_meter-counter-underflow-during-shutdown.patch
batman-adv-frag-disallow-unicast-fragment-in-fragment.patch
batman-adv-mcast-fix-use-after-free-in-orig_node-rcu-release.patch
batman-adv-tp_meter-avoid-use-of-uninit-sender-vars.patch
batman-adv-tt-fix-negative-last_changeset_len.patch
batman-adv-tt-fix-negative-tt_buff_len.patch
drm-amd-display-fix-integer-overflow-in-bios_get_image.patch
drm-bridge-megachips-remove-bridge-when-irq-request-fails.patch
hwmon-pmbus-adm1266-bounce-blackbox-records-through-a-protocol-sized-buffer.patch
hwmon-pmbus-adm1266-cap-pdio-scan-in-get_multiple-at-adm1266_pdio_nr.patch
hwmon-pmbus-adm1266-don-t-clobber-gpio-bits-before-pdio-read-in-get_multiple.patch
hwmon-pmbus-adm1266-include-pec-byte-in-pmbus_block_xfer-read-buffer.patch
hwmon-pmbus-adm1266-register-the-gpio_chip-after-pmbus_do_probe.patch
hwmon-pmbus-adm1266-register-the-nvmem-device-after-pmbus_do_probe.patch
hwmon-pmbus-adm1266-reject-implausible-blackbox-record_count.patch
hwmon-pmbus-adm1266-reject-short-block-read-responses-in-the-gpio-accessors.patch
hwmon-pmbus-adm1266-seed-timestamp-from-the-real-time-clock.patch
hwmon-pmbus-adm1266-serialize-gpio-pmbus-accesses-with-pmbus_lock.patch
hwmon-pmbus-adm1266-serialize-nvmem-blackbox-read-with-pmbus_lock.patch
hwmon-pmbus-adm1266-serialize-sequencer_state-debugfs-read-with-pmbus_lock.patch
rdma-siw-reject-mpa-fpdu-length-underflow-before-signed-receive-math.patch
scsi-isci-fix-use-after-free-in-device-removal-path.patch
spi-sprd-fix-error-pointer-deref-after-dma-setup-failure.patch
spi-ti-qspi-fix-use-after-free-after-dma-setup-failure.patch
tracing-do-not-call-map-ops-elt_free-if-elt_alloc-fails.patch

6.12-stable patches

added patches:
af_unix-fix-uaf-read-of-tail-len-in-unix_stream_data_wait.patch
ice-fix-setting-promisc-mode-while-adding-vid-filter.patch
ice-restore-ptp-rx-timestamp-config-after-ethtool-set-channels.patch
ipv4-raw-reject-ip_hdrincl-packets-with-ihl-5.patch
ipv6-ioam-add-null-check-for-idev-in-ipv6_hop_ioam.patch
ixgbevf-fix-use-after-free-in-vepa-multicast-source-pruning.patch
l2tp-use-list_del_rcu-in-l2tp_session_unhash.patch
lsm-hold-cred_guard_mutex-for-lsm_set_self_attr.patch
octeontx2-af-cgx-add-bounds-check-to-cgx_speed_mbps-index.patch
qed-fix-double-free-in-qed_cxt_tables_alloc.patch
rbd-eliminate-a-race-in-lock_dwork-draining-on-unmap.patch
ring-buffer-fix-reporting-of-missed-events-in-iterator.patch
vsock-virtio-reset-connection-on-receiving-queue-overflow.patch
vsock-vmci-fix-uaf-when-peer-resets-connection-during-handshake.patch
wifi-ath11k-clear-shared-srng-pointer-state-on-restart.patch
wifi-cfg80211-advance-loop-vars-in-cfg80211_merge_profile.patch
wifi-mac80211-consume-only-present-negotiated-ttlm-maps.patch

6.6-stable patches

added patches:
ice-fix-setting-promisc-mode-while-adding-vid-filter.patch
ipv4-raw-reject-ip_hdrincl-packets-with-ihl-5.patch
ixgbevf-fix-use-after-free-in-vepa-multicast-source-pruning.patch
qed-fix-double-free-in-qed_cxt_tables_alloc.patch
ring-buffer-fix-reporting-of-missed-events-in-iterator.patch
vsock-virtio-reset-connection-on-receiving-queue-overflow.patch
vsock-vmci-fix-uaf-when-peer-resets-connection-during-handshake.patch
wifi-ath11k-clear-shared-srng-pointer-state-on-restart.patch
wifi-cfg80211-advance-loop-vars-in-cfg80211_merge_profile.patch

6.1-stable patches

added patches:
ice-fix-setting-promisc-mode-while-adding-vid-filter.patch
ipv4-raw-reject-ip_hdrincl-packets-with-ihl-5.patch
ixgbevf-fix-use-after-free-in-vepa-multicast-source-pruning.patch
qed-fix-double-free-in-qed_cxt_tables_alloc.patch
ring-buffer-fix-reporting-of-missed-events-in-iterator.patch
vsock-virtio-reset-connection-on-receiving-queue-overflow.patch
vsock-vmci-fix-uaf-when-peer-resets-connection-during-handshake.patch
wifi-ath11k-clear-shared-srng-pointer-state-on-restart.patch
wifi-cfg80211-advance-loop-vars-in-cfg80211_merge_profile.patch

5.15-stable patches

added patches:
ipv4-raw-reject-ip_hdrincl-packets-with-ihl-5.patch
ixgbevf-fix-use-after-free-in-vepa-multicast-source-pruning.patch
ring-buffer-fix-reporting-of-missed-events-in-iterator.patch
vsock-vmci-fix-uaf-when-peer-resets-connection-during-handshake.patch
wifi-ath11k-clear-shared-srng-pointer-state-on-restart.patch
wifi-cfg80211-advance-loop-vars-in-cfg80211_merge_profile.patch

5.10-stable patches

added patches:
ipv4-raw-reject-ip_hdrincl-packets-with-ihl-5.patch
ixgbevf-fix-use-after-free-in-vepa-multicast-source-pruning.patch
ring-buffer-fix-reporting-of-missed-events-in-iterator.patch
vsock-vmci-fix-uaf-when-peer-resets-connection-during-handshake.patch
wifi-ath11k-clear-shared-srng-pointer-state-on-restart.patch
wifi-cfg80211-advance-loop-vars-in-cfg80211_merge_profile.patch

6.18-stable patches

added patches:
af_unix-fix-uaf-read-of-tail-len-in-unix_stream_data_wait.patch
ice-fix-locking-around-wait_event_interruptible_locked_irq.patch
ice-fix-setting-promisc-mode-while-adding-vid-filter.patch
ice-fix-vf-queue-configuration-with-low-mtu-values.patch
ice-restore-ptp-rx-timestamp-config-after-ethtool-set-channels.patch
igc-fix-potential-skb-leak-in-igc_fpe_xmit_smd_frame.patch
ipv4-raw-reject-ip_hdrincl-packets-with-ihl-5.patch
ipv6-ioam-add-null-check-for-idev-in-ipv6_hop_ioam.patch
ixgbevf-fix-use-after-free-in-vepa-multicast-source-pruning.patch
l2tp-use-list_del_rcu-in-l2tp_session_unhash.patch
lsm-hold-cred_guard_mutex-for-lsm_set_self_attr.patch
mptcp-pm-fix-add_addr-timer-infinite-retry-on-option-space-insufficient.patch
octeontx2-af-cgx-add-bounds-check-to-cgx_speed_mbps-index.patch
octeontx2-pf-fix-double-free-in-rvu_rep_rsrc_init.patch
qed-fix-double-free-in-qed_cxt_tables_alloc.patch
rbd-eliminate-a-race-in-lock_dwork-draining-on-unmap.patch
ring-buffer-fix-reporting-of-missed-events-in-iterator.patch
ring-buffer-flush-and-stop-persistent-ring-buffer-on-panic.patch
vsock-virtio-reset-connection-on-receiving-queue-overflow.patch
vsock-vmci-fix-uaf-when-peer-resets-connection-during-handshake.patch
wifi-ath11k-clear-shared-srng-pointer-state-on-restart.patch
wifi-cfg80211-advance-loop-vars-in-cfg80211_merge_profile.patch
wifi-iwlwifi-mld-stop-tx-during-firmware-restart.patch
wifi-iwlwifi-mvm-fix-driver-set-tx-rates-on-old-devices.patch
wifi-mac80211-consume-only-present-negotiated-ttlm-maps.patch

7.0-stable patches

added patches:
af_unix-fix-uaf-read-of-tail-len-in-unix_stream_data_wait.patch
ice-fix-locking-around-wait_event_interruptible_locked_irq.patch
ice-fix-setting-promisc-mode-while-adding-vid-filter.patch
ice-fix-vf-queue-configuration-with-low-mtu-values.patch
ice-restore-ptp-rx-timestamp-config-after-ethtool-set-channels.patch
igc-fix-potential-skb-leak-in-igc_fpe_xmit_smd_frame.patch
ipv4-raw-reject-ip_hdrincl-packets-with-ihl-5.patch
ipv6-ioam-add-null-check-for-idev-in-ipv6_hop_ioam.patch
ixgbevf-fix-use-after-free-in-vepa-multicast-source-pruning.patch
l2tp-use-list_del_rcu-in-l2tp_session_unhash.patch
lsm-hold-cred_guard_mutex-for-lsm_set_self_attr.patch
mptcp-do-not-drop-partial-packets.patch
mptcp-pm-fix-add_addr-timer-infinite-retry-on-option-space-insufficient.patch
mptcp-reset-rcv-wnd-on-disconnect.patch
octeontx2-af-cgx-add-bounds-check-to-cgx_speed_mbps-index.patch
octeontx2-pf-avoid-double-free-of-pool-stack-on-aq-init-failure.patch
octeontx2-pf-fix-double-free-in-rvu_rep_rsrc_init.patch
qed-fix-double-free-in-qed_cxt_tables_alloc.patch
rbd-eliminate-a-race-in-lock_dwork-draining-on-unmap.patch
ring-buffer-fix-reporting-of-missed-events-in-iterator.patch
ring-buffer-flush-and-stop-persistent-ring-buffer-on-panic.patch
selftests-mptcp-drop-nanoseconds-width-specifier.patch
vsock-virtio-reset-connection-on-receiving-queue-overflow.patch
vsock-vmci-fix-uaf-when-peer-resets-connection-during-handshake.patch
wifi-ath11k-clear-shared-srng-pointer-state-on-restart.patch
wifi-cfg80211-advance-loop-vars-in-cfg80211_merge_profile.patch
wifi-iwlwifi-mld-stop-tx-during-firmware-restart.patch
wifi-iwlwifi-mvm-fix-driver-set-tx-rates-on-old-devices.patch
wifi-mac80211-capture-fast-rx-rate-before-mesh-reuses-skb-cb.patch
wifi-mac80211-consume-only-present-negotiated-ttlm-maps.patch

6.12-stable patches

added patches:
cgroup-cpuset-reset-dl-migration-state-on-can_attach-failure.patch
fs-ntfs3-handle-attr_set_size-errors-when-truncating-files.patch
sched_ext-avoid-uaf-in-scx_root_enable_workfn-init-failure-path.patch
sched_ext-fix-missing-warning-in-scx_set_task_state-default-case.patch

6.18-stable patches

added patches:
cgroup-cpuset-reset-dl-migration-state-on-can_attach-failure.patch
fs-ntfs3-handle-attr_set_size-errors-when-truncating-files.patch
net-ethtool-fix-null-pointer-dereference-in-phy_reply_size.patch
net-ethtool-phy-avoid-null-deref-when-phy-driver-is-unbound.patch
sched_ext-avoid-uaf-in-scx_root_enable_workfn-init-failure-path.patch
sched_ext-fix-missing-warning-in-scx_set_task_state-default-case.patch
tracing-fprobe-avoid-kcalloc-in-rcu_read_lock-section.patch
tracing-fprobe-check-the-same-type-fprobe-on-table-as-the-unregistered-one.patch
tracing-fprobe-remove-unused-local-variable.patch
tracing-fprobe-use-ftrace-if-config_dynamic_ftrace_with_args.patch

7.0-stable patches

added patches:
acpi-driver-check-acpi_companion-against-null-during-probe.patch
net-ethtool-fix-null-pointer-dereference-in-phy_reply_size.patch
net-ethtool-phy-avoid-null-deref-when-phy-driver-is-unbound.patch
sched_ext-avoid-uaf-in-scx_root_enable_workfn-init-failure-path.patch
sched_ext-fix-missing-warning-in-scx_set_task_state-default-case.patch

7.0-stable patches

added patches:
acpi-battery-fix-system-wakeup-on-critical-battery-status.patch
alsa-asihpi-fix-potential-oob-array-access-at-reading-cache.patch
alsa-pcm-don-t-setup-bogus-iov_iter-for-silencing.patch
alsa-scarlett2-allow-flash-writes-ending-at-segment-boundary.patch
alsa-ua101-reject-too-short-usb-descriptors.patch
bluetooth-bnep-fix-uaf-read-of-dev-name.patch
bluetooth-fix-uaf-in-l2cap_sock_cleanup_listen-vs-l2cap_conn_del.patch
bluetooth-hci_qca-convert-timeout-from-jiffies-to-ms.patch
bluetooth-hci_uart-fix-uafs-and-race-conditions-in-close-and-init-paths.patch
bluetooth-iso-drop-iso_end-frames-received-without-prior-iso_start.patch
bluetooth-l2cap-ecred_reconfigure-send-packed-pdu-not-stack-pointer.patch
bluetooth-mgmt-validate-add-extended-advertising-data-length.patch
bluetooth-serialize-accept_q-access.patch
drivers-base-memory-fix-memory-block-reference-leak-in-poison-accounting.patch
efi-allocate-runtime-workqueue-before-acpi-init.patch
hwmon-pmbus-adm1266-widen-blackbox-info-buffer-to-i2c_smbus_block_max.patch
io_uring-waitid-clear-waitid-info-before-copying-it-to-userspace.patch
ipv6-ioam-refresh-hdr-pointer-before-ioam6_event.patch
ksmbd-fix-null-pointer-dereference-in-compare_guid_key.patch
ksmbd-fix-null-pointer-dereference-in-proc_show_files.patch
ksmbd-fix-sid-memory-leak-in-set_posix_acl_entries_dacl-on-overflow.patch
ksmbd-validate-sid-in-parent-security-descriptor-during-acl-inheritance.patch
mm-damon-fix-damos_stat-tracepoint-format-for-sz_applied.patch
mm-damon-sysfs-schemes-call-missing-mem_cgroup_iter_break.patch
mm-fix-__vm_normal_page-to-handle-missing-support-for-pmd_special-pud_special.patch
mm-memory-fix-spurious-warning-when-unmapping-device-private-exclusive-pages.patch
mm-memory_hotplug-fix-memory-block-reference-leak-on-remove.patch
mm-migrate_device-fix-spinlock-leak-in-migrate_vma_insert_huge_pmd_page.patch
mm-page_alloc-fix-initialization-of-tags-of-the-huge-zero-folio-with-init_on_free.patch
net-bcmgenet-keep-rbuf-eee-pm-disabled.patch
net-devmem-reject-dma-buf-bind-with-non-page-aligned-size-or-sg-length.patch
net-hsr-defer-node-table-free-until-after-rcu-readers.patch
net-ifb-report-ethtool-stats-over-num_tx_queues.patch
net-mlx5e-fix-use-after-free-in-mlx5e_tx_reporter_timeout_recover.patch
net-phy-skip-eee-advertisement-write-when-autoneg-is-disabled.patch
net-pse-pd-fix-sign-on-enoent-check-in-of_load_pse_pis.patch
net-wwan-iosm-fix-potential-memory-leaks-in-ipc_imem_init.patch
netfilter-ip6t_hbh-reject-oversized-option-lists.patch
netfilter-ipset-stop-hash-range-iteration-at-end.patch
netfilter-nf_queue-hold-bridge-skb-dev-while-queued.patch
netfilter-nft_inner-fix-ipv6-inner_thoff-desync.patch
phonet-pep-disable-bh-around-forwarded-sk_receive_skb.patch
regulator-tps65219-fix-irq_data.rdev-not-being-assigned.patch
scripts-gdb-mm-cast-untyped-symbols-in-x86_page_ops.patch
selftests-mm-run_vmtests.sh-fix-destructive-tests-invocation.patch
smb-client-protect-tc_count-increment-in-smb2_find_smb_sess_tcon_unlocked.patch
smb-client-require-net-admin-for-cifs-swn-netlink.patch
smb-client-use-data_len-for-smb2-read-encrypted-folioq-copy.patch
smb-server-promote-s_del_on_cls-to-s_del_pending-when-close.patch
spi-amd-set-correct-bus-number-in-acpi-probe-path.patch
sysfs-don-t-remove-existing-directory-on-update-failure.patch
x86-mm-disable-broadcast-tlb-flush-when-pcid-is-disabled.patch

6.18-stable patches

added patches:
alsa-asihpi-fix-potential-oob-array-access-at-reading-cache.patch
alsa-pcm-don-t-setup-bogus-iov_iter-for-silencing.patch
alsa-scarlett2-allow-flash-writes-ending-at-segment-boundary.patch
alsa-ua101-reject-too-short-usb-descriptors.patch
bluetooth-bnep-fix-uaf-read-of-dev-name.patch
bluetooth-fix-uaf-in-l2cap_sock_cleanup_listen-vs-l2cap_conn_del.patch
bluetooth-hci_uart-fix-uafs-and-race-conditions-in-close-and-init-paths.patch
bluetooth-iso-drop-iso_end-frames-received-without-prior-iso_start.patch
bluetooth-l2cap-ecred_reconfigure-send-packed-pdu-not-stack-pointer.patch
bluetooth-mgmt-validate-add-extended-advertising-data-length.patch
bluetooth-serialize-accept_q-access.patch
drivers-base-memory-fix-memory-block-reference-leak-in-poison-accounting.patch
efi-allocate-runtime-workqueue-before-acpi-init.patch
hwmon-pmbus-adm1266-widen-blackbox-info-buffer-to-i2c_smbus_block_max.patch
io_uring-waitid-clear-waitid-info-before-copying-it-to-userspace.patch
ipv6-ioam-refresh-hdr-pointer-before-ioam6_event.patch
ksmbd-fix-null-pointer-dereference-in-compare_guid_key.patch
ksmbd-fix-sid-memory-leak-in-set_posix_acl_entries_dacl-on-overflow.patch
ksmbd-validate-sid-in-parent-security-descriptor-during-acl-inheritance.patch
mm-damon-sysfs-schemes-call-missing-mem_cgroup_iter_break.patch
mm-fix-__vm_normal_page-to-handle-missing-support-for-pmd_special-pud_special.patch
mm-memory-fix-spurious-warning-when-unmapping-device-private-exclusive-pages.patch
mm-memory_hotplug-fix-memory-block-reference-leak-on-remove.patch
mm-page_alloc-fix-initialization-of-tags-of-the-huge-zero-folio-with-init_on_free.patch
net-bcmgenet-keep-rbuf-eee-pm-disabled.patch
net-ifb-report-ethtool-stats-over-num_tx_queues.patch
net-mlx5e-fix-use-after-free-in-mlx5e_tx_reporter_timeout_recover.patch
net-phy-skip-eee-advertisement-write-when-autoneg-is-disabled.patch
net-pse-pd-fix-sign-on-enoent-check-in-of_load_pse_pis.patch
net-wwan-iosm-fix-potential-memory-leaks-in-ipc_imem_init.patch
netfilter-ip6t_hbh-reject-oversized-option-lists.patch
netfilter-ipset-stop-hash-range-iteration-at-end.patch
netfilter-nf_queue-hold-bridge-skb-dev-while-queued.patch
netfilter-nft_inner-fix-ipv6-inner_thoff-desync.patch
phonet-pep-disable-bh-around-forwarded-sk_receive_skb.patch
regulator-tps65219-fix-irq_data.rdev-not-being-assigned.patch
selftests-mm-run_vmtests.sh-fix-destructive-tests-invocation.patch
smb-client-protect-tc_count-increment-in-smb2_find_smb_sess_tcon_unlocked.patch
smb-client-require-net-admin-for-cifs-swn-netlink.patch
smb-client-use-data_len-for-smb2-read-encrypted-folioq-copy.patch
smb-server-promote-s_del_on_cls-to-s_del_pending-when-close.patch
spi-amd-set-correct-bus-number-in-acpi-probe-path.patch
sysfs-don-t-remove-existing-directory-on-update-failure.patch

6.6-stable patches

added patches:
alsa-asihpi-fix-potential-oob-array-access-at-reading-cache.patch
alsa-pcm-don-t-setup-bogus-iov_iter-for-silencing.patch
alsa-ua101-reject-too-short-usb-descriptors.patch
bluetooth-bnep-fix-uaf-read-of-dev-name.patch
bluetooth-fix-uaf-in-l2cap_sock_cleanup_listen-vs-l2cap_conn_del.patch
bluetooth-hci_uart-fix-uafs-and-race-conditions-in-close-and-init-paths.patch
bluetooth-iso-drop-iso_end-frames-received-without-prior-iso_start.patch
bluetooth-mgmt-validate-add-extended-advertising-data-length.patch
bluetooth-serialize-accept_q-access.patch
drivers-base-memory-fix-memory-block-reference-leak-in-poison-accounting.patch
efi-allocate-runtime-workqueue-before-acpi-init.patch
hwmon-pmbus-adm1266-widen-blackbox-info-buffer-to-i2c_smbus_block_max.patch
ksmbd-fix-null-pointer-dereference-in-compare_guid_key.patch
ksmbd-fix-sid-memory-leak-in-set_posix_acl_entries_dacl-on-overflow.patch
mm-damon-sysfs-schemes-call-missing-mem_cgroup_iter_break.patch
net-bcmgenet-keep-rbuf-eee-pm-disabled.patch
net-ifb-report-ethtool-stats-over-num_tx_queues.patch
net-wwan-iosm-fix-potential-memory-leaks-in-ipc_imem_init.patch
netfilter-ip6t_hbh-reject-oversized-option-lists.patch
netfilter-ipset-stop-hash-range-iteration-at-end.patch
netfilter-nf_queue-hold-bridge-skb-dev-while-queued.patch
netfilter-nft_inner-fix-ipv6-inner_thoff-desync.patch
phonet-pep-disable-bh-around-forwarded-sk_receive_skb.patch
smb-client-protect-tc_count-increment-in-smb2_find_smb_sess_tcon_unlocked.patch
smb-server-promote-s_del_on_cls-to-s_del_pending-when-close.patch
sysfs-don-t-remove-existing-directory-on-update-failure.patch

6.1-stable patches

added patches:
alsa-asihpi-fix-potential-oob-array-access-at-reading-cache.patch
alsa-ua101-reject-too-short-usb-descriptors.patch
bluetooth-bnep-fix-uaf-read-of-dev-name.patch
bluetooth-fix-uaf-in-l2cap_sock_cleanup_listen-vs-l2cap_conn_del.patch
bluetooth-hci_uart-fix-uafs-and-race-conditions-in-close-and-init-paths.patch
bluetooth-iso-drop-iso_end-frames-received-without-prior-iso_start.patch
bluetooth-mgmt-validate-add-extended-advertising-data-length.patch
hwmon-pmbus-adm1266-widen-blackbox-info-buffer-to-i2c_smbus_block_max.patch
net-bcmgenet-keep-rbuf-eee-pm-disabled.patch
net-ifb-report-ethtool-stats-over-num_tx_queues.patch
net-wwan-iosm-fix-potential-memory-leaks-in-ipc_imem_init.patch
netfilter-ip6t_hbh-reject-oversized-option-lists.patch
netfilter-ipset-stop-hash-range-iteration-at-end.patch
netfilter-nf_queue-hold-bridge-skb-dev-while-queued.patch
phonet-pep-disable-bh-around-forwarded-sk_receive_skb.patch
sysfs-don-t-remove-existing-directory-on-update-failure.patch

5.15-stable patches

added patches:
alsa-asihpi-fix-potential-oob-array-access-at-reading-cache.patch
alsa-ua101-reject-too-short-usb-descriptors.patch
bluetooth-bnep-fix-uaf-read-of-dev-name.patch
bluetooth-hci_uart-fix-uafs-and-race-conditions-in-close-and-init-paths.patch
hwmon-pmbus-adm1266-widen-blackbox-info-buffer-to-i2c_smbus_block_max.patch
net-bcmgenet-keep-rbuf-eee-pm-disabled.patch
net-wwan-iosm-fix-potential-memory-leaks-in-ipc_imem_init.patch
netfilter-ip6t_hbh-reject-oversized-option-lists.patch
netfilter-ipset-stop-hash-range-iteration-at-end.patch
netfilter-nf_queue-hold-bridge-skb-dev-while-queued.patch
phonet-pep-disable-bh-around-forwarded-sk_receive_skb.patch
sysfs-don-t-remove-existing-directory-on-update-failure.patch

5.10-stable patches

added patches:
alsa-asihpi-fix-potential-oob-array-access-at-reading-cache.patch
alsa-ua101-reject-too-short-usb-descriptors.patch
bluetooth-bnep-fix-uaf-read-of-dev-name.patch
bluetooth-hci_uart-fix-uafs-and-race-conditions-in-close-and-init-paths.patch
hwmon-pmbus-adm1266-widen-blackbox-info-buffer-to-i2c_smbus_block_max.patch
net-bcmgenet-keep-rbuf-eee-pm-disabled.patch
netfilter-ip6t_hbh-reject-oversized-option-lists.patch
netfilter-ipset-stop-hash-range-iteration-at-end.patch
phonet-pep-disable-bh-around-forwarded-sk_receive_skb.patch
sysfs-don-t-remove-existing-directory-on-update-failure.patch

6.12-stable patches

added patches:
alsa-asihpi-fix-potential-oob-array-access-at-reading-cache.patch
alsa-pcm-don-t-setup-bogus-iov_iter-for-silencing.patch
alsa-ua101-reject-too-short-usb-descriptors.patch
bluetooth-bnep-fix-uaf-read-of-dev-name.patch
bluetooth-fix-uaf-in-l2cap_sock_cleanup_listen-vs-l2cap_conn_del.patch
bluetooth-hci_uart-fix-uafs-and-race-conditions-in-close-and-init-paths.patch
bluetooth-iso-drop-iso_end-frames-received-without-prior-iso_start.patch
bluetooth-l2cap-ecred_reconfigure-send-packed-pdu-not-stack-pointer.patch
bluetooth-mgmt-validate-add-extended-advertising-data-length.patch
bluetooth-serialize-accept_q-access.patch
drivers-base-memory-fix-memory-block-reference-leak-in-poison-accounting.patch
efi-allocate-runtime-workqueue-before-acpi-init.patch
hwmon-pmbus-adm1266-widen-blackbox-info-buffer-to-i2c_smbus_block_max.patch
io_uring-waitid-clear-waitid-info-before-copying-it-to-userspace.patch
ipv6-ioam-refresh-hdr-pointer-before-ioam6_event.patch
ksmbd-fix-null-pointer-dereference-in-compare_guid_key.patch
ksmbd-fix-sid-memory-leak-in-set_posix_acl_entries_dacl-on-overflow.patch
ksmbd-validate-sid-in-parent-security-descriptor-during-acl-inheritance.patch
mm-damon-sysfs-schemes-call-missing-mem_cgroup_iter_break.patch
mm-memory_hotplug-fix-memory-block-reference-leak-on-remove.patch
net-bcmgenet-keep-rbuf-eee-pm-disabled.patch
net-ifb-report-ethtool-stats-over-num_tx_queues.patch
net-pse-pd-fix-sign-on-enoent-check-in-of_load_pse_pis.patch
net-wwan-iosm-fix-potential-memory-leaks-in-ipc_imem_init.patch
netfilter-ip6t_hbh-reject-oversized-option-lists.patch
netfilter-ipset-stop-hash-range-iteration-at-end.patch
netfilter-nf_queue-hold-bridge-skb-dev-while-queued.patch
netfilter-nft_inner-fix-ipv6-inner_thoff-desync.patch
phonet-pep-disable-bh-around-forwarded-sk_receive_skb.patch
selftests-mm-run_vmtests.sh-fix-destructive-tests-invocation.patch
smb-client-protect-tc_count-increment-in-smb2_find_smb_sess_tcon_unlocked.patch
smb-client-require-net-admin-for-cifs-swn-netlink.patch
smb-client-use-data_len-for-smb2-read-encrypted-folioq-copy.patch
smb-server-promote-s_del_on_cls-to-s_del_pending-when-close.patch
sysfs-don-t-remove-existing-directory-on-update-failure.patch

Fixes for all trees

Signed-off-by: Sasha Levin <sashal@kernel.org>

5.15-stable patches

added patches:
smb-client-reject-userspace-cifs.spnego-descriptions.patch

5.10-stable patches

added patches:
smb-client-reject-userspace-cifs.spnego-descriptions.patch

7.0-stable patches

added patches:
ata-libata-scsi-do-not-needlessly-defer-commands-when-using-pmp-with-fbs.patch
ata-libata-scsi-do-not-use-the-deferred-qc-feature-for-ata_defer_port.patch
ata-libata-scsi-do-not-use-the-deferred-qc-feature-on-pmps-with-cbs.patch
ata-libata-scsi-improve-readability-of-ata_scsi_qc_issue.patch

6.18-stable patches

added patches:
ata-libata-scsi-do-not-needlessly-defer-commands-when-using-pmp-with-fbs.patch
ata-libata-scsi-do-not-use-the-deferred-qc-feature-for-ata_defer_port.patch
ata-libata-scsi-do-not-use-the-deferred-qc-feature-on-pmps-with-cbs.patch
ata-libata-scsi-improve-readability-of-ata_scsi_qc_issue.patch

6.12-stable patches

added patches:
ata-libata-scsi-do-not-needlessly-defer-commands-when-using-pmp-with-fbs.patch
ata-libata-scsi-do-not-use-the-deferred-qc-feature-for-ata_defer_port.patch
ata-libata-scsi-do-not-use-the-deferred-qc-feature-on-pmps-with-cbs.patch
ata-libata-scsi-improve-readability-of-ata_scsi_qc_issue.patch

7.0-stable patches

added patches:
smb-client-reject-userspace-cifs.spnego-descriptions.patch

6.18-stable patches

added patches:
arm64-dts-broadcom-bcm2712-add-watchdog-dt-node.patch
dt-bindings-soc-bcm-add-bcm2712-compatible.patch
mfd-bcm2835-pm-add-support-for-bcm2712.patch
smb-client-reject-userspace-cifs.spnego-descriptions.patch

6.12-stable patches

added patches:
smb-client-reject-userspace-cifs.spnego-descriptions.patch

6.6-stable patches

added patches:
smb-client-reject-userspace-cifs.spnego-descriptions.patch

6.1-stable patches

added patches:
smb-client-reject-userspace-cifs.spnego-descriptions.patch

Fixes for all trees

Signed-off-by: Sasha Levin <sashal@kernel.org>

Revert "Fixes for all trees"

Revert this batch of AUTOSEL commits for now.

Signed-off-by: Sasha Levin <sashal@kernel.org>

Fixes for all trees

Signed-off-by: Sasha Levin <sashal@kernel.org>

drop duplicate patches

6.1-stable patches

added patches:
net-skbuff-preserve-shared-frag-marker-during-coalescing.patch
net-skbuff-propagate-shared-frag-marker-through-frag-transfer-helpers.patch
series

5.15-stable patches

added patches:
net-skbuff-preserve-shared-frag-marker-during-coalescing.patch
net-skbuff-propagate-shared-frag-marker-through-frag-transfer-helpers.patch
series

5.10-stable patches

added patches:
net-skbuff-preserve-shared-frag-marker-during-coalescing.patch
net-skbuff-propagate-shared-frag-marker-through-frag-transfer-helpers.patch
series

move queues off to the side for a bit...

7.0-stable patches

added patches:
netfs-fix-potential-uninitialised-var-in-netfs_extract_user_iter.patch

6.18-stable patches

added patches:
netfs-fix-potential-uninitialised-var-in-netfs_extract_user_iter.patch

6.12-stable patches

added patches:
netfs-fix-potential-uninitialised-var-in-netfs_extract_user_iter.patch

6.6-stable patches

added patches:
netfs-fix-potential-uninitialised-var-in-netfs_extract_user_iter.patch

7.0-stable patches

added patches:
selftests-bpf-remove-test_access_variable_array.patch

6.18-stable patches

added patches:
selftests-bpf-remove-test_access_variable_array.patch

6.6-stable patches

added patches:
net-skbuff-propagate-shared-frag-marker-through-frag-transfer-helpers.patch

Merge branch 'master' of gitolite.kernel.org:/pub/scm/linux/kernel/git/stable/stable-queue

drop queue-6.6/net-skbuff-propagate-shared-frag-marker-through-frag-transfer-helpers.patch

drop 4 patches based on RC review feedback

Dropped patches:

- "bpf, riscv: Remove redundant bpf_flush_icache() after pack allocator finalize"
  Queues: 6.12, 6.6
  Reason: build break on riscv — removes the inline bpf_flush_icache()
  definition but the prerequisite (6798668ab195, "riscv, bpf: Remove
  duplicated bpf_flush_icache()") is missing in 6.12/6.6, leaving an
  undefined caller in arch/riscv/net/bpf_jit_comp64.c.
  Report: https://lore.kernel.org/stable/b8ef921f-e2ab-4cfb-b75c-89e4277214cf@oracle.com/

- "fuse: new work queue to periodically invalidate expired dentries"
  Queues: 6.18
  Reason: FUSE maintainer Miklos Szeredi NAK — "This is not stable
  material, and I don't think the dependency is real."
  Report: https://lore.kernel.org/stable/CAOssrKcqmVW3kJ131tRF3LCJVQUtdRB31B5HENDfpgrq6r=jEA@mail.gmail.com/

- "dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused()"  [dependency]
  Queues: 6.18
  Reason: only present to support the dropped workqueue patch (Stable-dep-of: 5a6baf204610).

- "fuse: fix uninit-value in fuse_dentry_revalidate()"  [dependency]
  Queues: 6.18
  Reason: Stable-dep-of relationship to dropped workqueue patch; per
  maintainer the dependency isn't real and a trivial conflict resolution
  is the correct path — fix will be reposted directly to stable.

- "fuse: fix race when disposing stale dentries"  [dependency]
  Queues: 6.18
  Reason: Fixes: ab84ad597386 — cannot apply without the dropped
  workqueue patch (fuse_dentry_tree_work doesn't exist).

- "fuse: make sure dentry is evicted if stale"  [dependency]
  Queues: 6.18
  Reason: Fixes: ab84ad597386 — modifies fuse_dentry_tree_work()
  introduced by the dropped workqueue patch.

- "i3c: master: Fix error codes at send_ccc_cmd"
  Queues: 7.0, 6.18, 6.12, 6.6, 6.1, 5.15, 5.10
  Reason: prerequisite patches called out in the commit message
  ("Move rstdaa/entdaa/bus_init error suppression") are not all
  backported, so the semantics of the change differ from upstream.
  Report: https://lore.kernel.org/stable/a6d725bd-9ed4-4328-b2ba-078f658fd8b2@oracle.com/

- "fuse: fix premature writetrhough request for large folio"
  Queues: 7.0, 6.18
  Reason: Reviewed-by Joanne Koong (author of the parent commit that
  introduced large-folio writethrough support) reports the bug is not
  triggerable as fuse hasn't enabled large folios yet.
  Report: https://lore.kernel.org/stable/CAJnrk1bWJfT5hswsJ3X5HMZ=XLz5MO3pYXg6WkuYYvZ6ccS0Nw@mail.gmail.com/

Signed-off-by: Sasha Levin <sashal@kernel.org>

7.0-stable patches

added patches:
net-skbuff-preserve-shared-frag-marker-during-coalescing.patch
net-skbuff-propagate-shared-frag-marker-through-frag-transfer-helpers.patch

6.18-stable patches

added patches:
net-skbuff-preserve-shared-frag-marker-during-coalescing.patch
net-skbuff-propagate-shared-frag-marker-through-frag-transfer-helpers.patch

6.12-stable patches

added patches:
net-skbuff-preserve-shared-frag-marker-during-coalescing.patch
net-skbuff-propagate-shared-frag-marker-through-frag-transfer-helpers.patch

6.6-stable patches

added patches:
net-skbuff-preserve-shared-frag-marker-during-coalescing.patch
net-skbuff-propagate-shared-frag-marker-through-frag-transfer-helpers.patch

6.1-stable patches

added patches:
net-skbuff-preserve-shared-frag-marker-during-coalescing.patch

5.15-stable patches

added patches:
net-skbuff-preserve-shared-frag-marker-during-coalescing.patch

5.10-stable patches

added patches:
net-skbuff-preserve-shared-frag-marker-during-coalescing.patch

drop broken virtio patch from 6.12

Merge branch 'master' of gitolite.kernel.org:/pub/scm/linux/kernel/git/stable/stable-queue

6.12-stable patches

added patches:
virtio_net-fix-misalignment-bug-in-struct-virtnet_info.patch

drop dependent erofs follow-up after dropping 307210c262a2

In d3dd531213 we dropped "erofs: verify metadata accesses for file-backed
mounts" (upstream 307210c262a2) per Gao Xiang's request (Android SELinux
regression). The follow-up:

  "erofs: fix offset truncation when shifting pgoff on 32-bit platforms"
  (upstream c99493ce409c)

is queued in 7.0/6.18/6.12 and carries

Fixes: 307210c262a2 ("erofs: verify metadata accesses for file-backed mounts")
Its data.c hunk converts

  fpos = index << PAGE_SHIFT;
  err  = rw_verify_area(READ, buf->file, &fpos, PAGE_SIZE);

to use a (loff_t) cast on the shift. That entire rw_verify_area() block
was introduced by 307210c262a2, which is no longer in the queue or in
the corresponding stable bases (stable/linux-{7.0,6.18,6.12}.y do not
contain rw_verify_area in fs/erofs/data.c). The hunk cannot apply.

Drop the follow-up from queue-7.0, queue-6.18, and queue-6.12.

Signed-off-by: Sasha Levin <sashal@kernel.org>

drop 7 patches based on RC review feedback

Dropped patches:

- "rtla: Use str_has_prefix() for prefix checks"
  Queues: 7.0
  Reason: build break -- str_has_prefix() helper (upstream 0f4bc9d67a64)
    not backported to 7.0; reported by RTLA co-maintainer Tomas Glozar.
  Report: https://lore.kernel.org/stable/CAP4=nvTUdVQN8j_qJnfytGOJMa4LaX2h3Z9-cmDopBhKE87_nA@mail.gmail.com/

- "rtla/trace: Fix write loop in trace_event_save_hist()"  [dependency]
  Queues: 7.0
  Reason: queued atop the dropped str_has_prefix conversion; Tomas
    offered to send a rebased version.

- "rtla: Simplify code by caching string lengths"  [dependency]
  Queues: 7.0
  Reason: sibling Stable-dep-of 4bf4ef5292b9; dropped together with the
    other two rtla patches per Sasha's expanded DROP_WITH_DEPS.

- "libbpf: Stringify errno in log messages in libbpf.c"
  Queues: 6.12
  Reason: build break -- errstr() helper not declared in 6.12 (would
    require c68b6fdc3600 plus a chain of refactors that don't apply
    cleanly). Reported by Salvatore Bonaccorso and Florian Fainelli.
  Reports:
    https://lore.kernel.org/stable/ag4vSWzIUCsRlpKv@eldamar.lan/
    https://lore.kernel.org/stable/54f12da1-32e2-48dc-bf84-3bdaf8ef0f6a@gmail.com/

- "libbpf: Prevent double close and leak of btf objects"  [dependency]
  Queues: 6.12
  Reason: adds additional errstr() call sites; cannot stay without
    the stringify patch.

- "libbpf: Change log level of btf loading error message"  [dependency]
  Queues: 6.12
  Reason: only queued as Stable-dep-of 380044c40b16; loses purpose once
    that target is dropped.

- "erofs: verify metadata accesses for file-backed mounts"
  Queues: 7.0, 6.18, 6.12
  Reason: EROFS maintainer / patch author Gao Xiang requested drop
    across all three trees -- introduces an Android SELinux/permission
    regression and the upstream follow-up fix is still under discussion.
  Reports:
    https://lore.kernel.org/stable/75e6d1c8-e989-4eb7-aca3-37a40318e888@linux.alibaba.com/
    https://lore.kernel.org/stable/5a4afec4-fe39-419e-8b2b-4e9901eb93be@linux.alibaba.com/
    https://lore.kernel.org/stable/ag3qlMOcTYM2FBUQ@debian/
    https://lore.kernel.org/stable/ag3txj1lJNTGZQjp@debian/
    https://lore.kernel.org/stable/ag37lbajmtyv9xBd@debian/

- "sched: Make class_schedulers avoid pushing current, and get rid of
  proxy_tag_curr()"
  Queues: 6.18
  Reason: patch author John Stultz asked to drop from 6.18-stable -- it
    only matters for the EXPERT-gated, still-in-development proxy-exec
    feature, and the downside of not taking it is non-ideal balancing.
    Keeping it queued in 7.0 per Stultz's literal request scope.
  Report: https://lore.kernel.org/stable/CANDhNCpZWMk6GWubK8+E0rxKUqtuhOtrjqxunS=Kmho-UbR0UA@mail.gmail.com/

- "riscv: misaligned: Make enabling delegation depend on NONPORTABLE"
  Queues: 7.0, 6.18
  Reason: patch author Vivian Wang retracts her Cc: stable request --
    boot-time crashes seen on 7.1-rc / linux-next on some hardware /
    firmware combinations; asks for time to investigate before
    re-submitting.
  Report: https://lore.kernel.org/stable/99c8c715-b37f-4f2a-8100-5ea4970ff34d@iscas.ac.cn/

- "perf tools: Fix module symbol resolution for non-zero .text sh_addr"
  Queues: 6.6, 6.1, 5.15, 5.10
  Reason: build break -- patch calls dso__rel() inline which doesn't
    exist on these versions (the underlying dso refcount refactor was
    never backported). 7.0/6.18/6.12 have the inline and remain queued.
    Reported by Florian Fainelli.
  Report: https://lore.kernel.org/stable/fbe52f15-5b34-4e03-88e0-005ae6200a60@gmail.com/

Signed-off-by: Sasha Levin <sashal@kernel.org>

7.0-stable patches

added patches:
tracefs-removed-unused-ret-variable-in-eventfs_iterate.patch
workqueue-annotate-alloc_workqueue_va-with-__printf-1-0.patch

7.0-stable patches

added patches:
net-rds-reset-op_nents-when-zerocopy-page-pin-fails.patch

6.18-stable patches

added patches:
net-rds-reset-op_nents-when-zerocopy-page-pin-fails.patch

6.12-stable patches

added patches:
net-rds-reset-op_nents-when-zerocopy-page-pin-fails.patch

6.6-stable patches

added patches:
net-rds-reset-op_nents-when-zerocopy-page-pin-fails.patch

6.1-stable patches

added patches:
net-rds-reset-op_nents-when-zerocopy-page-pin-fails.patch

5.15-stable patches

added patches:
net-rds-reset-op_nents-when-zerocopy-page-pin-fails.patch

5.10-stable patches

added patches:
net-rds-reset-op_nents-when-zerocopy-page-pin-fails.patch

6.12-stable patches

added patches:
mptcp-pm-add_addr-rtx-fix-potential-data-race.patch
mptcp-pm-add_addr-rtx-resched-blocked-add_addr-quicker.patch
mptcp-pm-kernel-correctly-retransmit-add_addr-id-0.patch

6.6-stable patches

added patches:
btrfs-fix-double-free-in-create_space_info_sub_group-error-path.patch
btrfs-fix-missing-last_unlink_trans-update-when-removing-a-directory.patch
btrfs-remove-fs_info-argument-from-btrfs_sysfs_add_space_info_type.patch
btrfs-use-btrfs-inodes-in-btrfs_rmdir-to-avoid-so-much-usage-of-btrfs_i.patch
btrfs-use-inode-already-stored-in-local-variable-at-btrfs_rmdir.patch
drm-v3d-reject-empty-multisync-extension-to-prevent-infinite-loop.patch
eventfs-use-list_add_tail_rcu-for-srcu-protected-children-list.patch
f2fs-fix-false-alarm-of-lockdep-on-cp_global_sem-lock.patch
f2fs-fix-incorrect-file-address-mapping-when-inline-inode-is-unwritten.patch
ksmbd-validate-inherited-ace-sid-length.patch
media-nxp-imx8-isi-reduce-minimum-queued-buffers-from-2-to-0.patch
mptcp-drop-__mptcp_fastopen_gen_msk_ackseq.patch
mptcp-fix-rx-timestamp-corruption-on-fastopen.patch
mptcp-pm-add_addr-rtx-fix-potential-data-race.patch
mptcp-pm-add_addr-rtx-resched-blocked-add_addr-quicker.patch
mptcp-pm-kernel-correctly-retransmit-add_addr-id-0.patch
mptcp-pm-prio-skip-closed-subflows.patch
pmdomain-core-fix-detach-procedure-for-virtual-devices-in-genpd.patch
rdma-mana-fix-error-unwind-in-mana_ib_create_qp_rss.patch
rdma-mana-validate-rx_hash_key_len.patch
smb-client-use-fullsessionkey-for-aes-256-encryption-key-derivation.patch
spi-sifive-fix-controller-deregistration.patch
spi-sifive-simplify-clock-handling-with-devm_clk_get_enabled.patch
spi-st-ssc4-fix-controller-deregistration.patch
spi-st-ssc4-switch-to-use-modern-name.patch

6.12-stable patches

added patches:
btrfs-do-not-mark-inode-incompressible-after-inline-attempt-fails.patch
btrfs-fix-missing-last_unlink_trans-update-when-removing-a-directory.patch
btrfs-use-btrfs-inodes-in-btrfs_rmdir-to-avoid-so-much-usage-of-btrfs_i.patch
btrfs-use-inode-already-stored-in-local-variable-at-btrfs_rmdir.patch
drm-v3d-reject-empty-multisync-extension-to-prevent-infinite-loop.patch
eventfs-use-list_add_tail_rcu-for-srcu-protected-children-list.patch
f2fs-fix-false-alarm-of-lockdep-on-cp_global_sem-lock.patch
f2fs-fix-incorrect-file-address-mapping-when-inline-inode-is-unwritten.patch
iommufd-fix-return-value-of-iommufd_fault_fops_write.patch
mptcp-drop-__mptcp_fastopen_gen_msk_ackseq.patch
mptcp-fix-rx-timestamp-corruption-on-fastopen.patch
mptcp-pm-prio-skip-closed-subflows.patch
rdma-mana-remove-user-triggerable-warn_on-in-mana_ib_create_qp_rss.patch
sched_ext-guard-scx_dsq_move-against-null-kit-dsq-after-failed-iter_new.patch
smb-client-use-fullsessionkey-for-aes-256-encryption-key-derivation.patch
spi-sifive-fix-controller-deregistration.patch
spi-sifive-simplify-clock-handling-with-devm_clk_get_enabled.patch

7.0-stable patches

added patches:
eventfs-simplify-code-using-guard-s.patch
eventfs-use-list_add_tail_rcu-for-srcu-protected-children-list.patch
smb-client-use-fullsessionkey-for-aes-256-encryption-key-derivation.patch
spi-sifive-fix-controller-deregistration.patch
spi-sifive-simplify-clock-handling-with-devm_clk_get_enabled.patch

6.18-stable patches

added patches:
btrfs-do-not-mark-inode-incompressible-after-inline-attempt-fails.patch
drm-v3d-reject-empty-multisync-extension-to-prevent-infinite-loop.patch
eventfs-use-list_add_tail_rcu-for-srcu-protected-children-list.patch
f2fs-fix-false-alarm-of-lockdep-on-cp_global_sem-lock.patch
perf-x86-intel-disable-pmi-for-self-reloaded-acr-events.patch
sched_ext-guard-scx_dsq_move-against-null-kit-dsq-after-failed-iter_new.patch
sched_ext-pass-held-rq-to-scx_call_op-for-core_sched_before.patch
smb-client-use-fullsessionkey-for-aes-256-encryption-key-derivation.patch
spi-sifive-fix-controller-deregistration.patch
spi-sifive-simplify-clock-handling-with-devm_clk_get_enabled.patch

7.0-stable patches

added patches:
arm_mpam-check-whether-the-config-array-is-allocated-before-destroying-it.patch
arm_mpam-fix-false-positive-assert-failure-during-mpam_disable.patch
arm_mpam-fix-monitor-instance-selection-when-checking-for-hardware-nrdy.patch
arm_mpam-improve-check-for-whether-or-not-nrdy-is-hardware-managed.patch
arm_mpam-pretend-that-nrdy-is-always-hardware-managed.patch
drm-gma500-oaktrail_hdmi-fix-i2c-adapter-leak-on-setup.patch
drm-gma500-oaktrail_lvds-fix-hang-on-init-failure.patch
drm-gma500-oaktrail_lvds-fix-i2c-adapter-leaks-on-init.patch

6.18-stable patches

added patches:
drm-gma500-oaktrail_hdmi-fix-i2c-adapter-leak-on-setup.patch
drm-gma500-oaktrail_lvds-fix-hang-on-init-failure.patch
drm-gma500-oaktrail_lvds-fix-i2c-adapter-leaks-on-init.patch

6.12-stable patches

added patches:
drm-gma500-oaktrail_hdmi-fix-i2c-adapter-leak-on-setup.patch
drm-gma500-oaktrail_lvds-fix-hang-on-init-failure.patch
drm-gma500-oaktrail_lvds-fix-i2c-adapter-leaks-on-init.patch

6.6-stable patches

added patches:
drm-gma500-oaktrail_hdmi-fix-i2c-adapter-leak-on-setup.patch
drm-gma500-oaktrail_lvds-fix-hang-on-init-failure.patch
drm-gma500-oaktrail_lvds-fix-i2c-adapter-leaks-on-init.patch

6.1-stable patches

added patches:
drm-gma500-oaktrail_hdmi-fix-i2c-adapter-leak-on-setup.patch
drm-gma500-oaktrail_lvds-fix-hang-on-init-failure.patch
drm-gma500-oaktrail_lvds-fix-i2c-adapter-leaks-on-init.patch
io-wq-check-that-the-predecessor-is-hashed-in-io_wq_remove_pending.patch

5.15-stable patches

added patches:
drm-gma500-oaktrail_hdmi-fix-i2c-adapter-leak-on-setup.patch
io-wq-check-that-the-predecessor-is-hashed-in-io_wq_remove_pending.patch

5.10-stable patches

added patches:
drm-gma500-oaktrail_hdmi-fix-i2c-adapter-leak-on-setup.patch
io-wq-check-that-the-predecessor-is-hashed-in-io_wq_remove_pending.patch

Merge branch 'master' of gitolite.kernel.org:/pub/scm/linux/kernel/git/stable/stable-queue

6.18-stable patches

added patches:
accel-rocket-fix-prep_bo-ioctl-leaking-positive-return-from-dma_resv_wait_timeout.patch
alsa-hda-realtek-add-mute-led-quirk-for-hp-pavilion-laptop-16-ag0xxx.patch
alsa-hda-realtek-add-quirk-for-samsung-galaxy-book5-360-headphone.patch
alsa-usb-audio-bound-midi-2.0-endpoint-descriptor-scans.patch
alsa-usb-audio-bound-midi-endpoint-descriptor-scans.patch
alsa-usb-audio-qcom-check-offload-mapping-failures.patch
btrfs-only-release-the-dirty-pages-io-tree-after-successful-writes.patch
ceph-fix-a-buffer-leak-in-__ceph_setxattr.patch
ceph-fix-bug_on-in-__ceph_build_xattrs_blob-due-to-stale-blob-size.patch
drm-i915-dp-fix-vsc-dynamic-range-signaling-for-rgb-formats.patch
drm-i915-skip-__i915_request_skip-for-already-signaled-requests.patch
drm-loongson-use-managed-kms-polling.patch
drm-panfrost-fix-wait_bo-ioctl-leaking-positive-return-from-dma_resv_wait_timeout.patch
drm-replace-old-pointer-to-new-idr.patch
drm-ttm-convert-eagain-from-dmem_cgroup_try_charge-to-enospc.patch
drm-xe-dma-buf-fix-uaf-with-retry-loop.patch
drm-xe-dma-buf-handle-empty-bo-and-uaf-races.patch
io-wq-check-that-the-predecessor-is-hashed-in-io_wq_remove_pending.patch
iommu-amd-bounds-check-devid-in-__rlookup_amd_iommu.patch
iommu-vt-d-avoid-null-pointer-dereference-or-refcount-corruption.patch
iommu-vt-d-disable-dmar-for-intel-q35-igfx.patch
iommu-vt-d-fix-oops-due-to-out-of-scope-access.patch
irqchip-gic-v5-allocate-its-parent-lpis-as-a-range.patch
irqchip-gic-v5-move-lpi-allocation-into-the-lpi-domain.patch
irqchip-gic-v5-support-range-allocation-for-lpis.patch
irqchip-meson-gpio-use-the-correct-register-in-meson_s4_gpio_irq_set_type.patch
irqchip-riscv-imsic-clear-interrupt-move-state-during-cpu-offlining.patch
libceph-fix-potential-null-ptr-deref-in-decode_choose_args.patch
libceph-fix-potential-out-of-bounds-access-in-crush_decode.patch
libceph-fix-potential-out-of-bounds-access-in-osdmap_decode.patch
libceph-handle-rbtree-insertion-error-in-decode_choose_args.patch
netfs-fix-error-handling-in-netfs_extract_user_iter.patch
nfsd-fix-file-change-detection-in-cb_getattr.patch
nvme-apple-reset-q-sq_tail-during-queue-init.patch
platform-x86-intel-move-debugfs-register-before-creating-devices.patch
platform-x86-lenovo-wmi-helpers-move-gamezone-enums-to-wmi-helpers.patch
platform-x86-lenovo-wmi-other-fix-tunable_attr_01-struct-members.patch
powerpc-warp-fix-error-handling-in-pika_dtm_thread.patch
riscv-misaligned-make-enabling-delegation-depend-on-nonportable.patch
smb-client-fix-possible-infinite-loop-and-oob-read-in-symlink_data.patch
virt-sev-guest-do-not-use-host-controlled-page-order-in-cleanup-path.patch
x86-kexec-push-kjump-return-address-even-for-non-kjump-kexec.patch
xfs-fix-memory-leak-on-error-in-xfs_alloc_zone_info.patch

6.6-stable patches

added patches:
alsa-usb-audio-bound-midi-2.0-endpoint-descriptor-scans.patch
alsa-usb-audio-bound-midi-endpoint-descriptor-scans.patch
ceph-fix-a-buffer-leak-in-__ceph_setxattr.patch
drm-i915-dp-fix-vsc-dynamic-range-signaling-for-rgb-formats.patch
drm-i915-skip-__i915_request_skip-for-already-signaled-requests.patch
drm-panfrost-fix-wait_bo-ioctl-leaking-positive-return-from-dma_resv_wait_timeout.patch
io-wq-check-that-the-predecessor-is-hashed-in-io_wq_remove_pending.patch
iommu-vt-d-disable-dmar-for-intel-q35-igfx.patch
libceph-fix-potential-null-ptr-deref-in-decode_choose_args.patch
libceph-fix-potential-out-of-bounds-access-in-crush_decode.patch
libceph-fix-potential-out-of-bounds-access-in-osdmap_decode.patch
libceph-handle-rbtree-insertion-error-in-decode_choose_args.patch
netfs-fix-error-handling-in-netfs_extract_user_iter.patch
powerpc-warp-fix-error-handling-in-pika_dtm_thread.patch
smb-client-fix-possible-infinite-loop-and-oob-read-in-symlink_data.patch

6.1-stable patches

added patches:
alsa-usb-audio-bound-midi-endpoint-descriptor-scans.patch
ceph-fix-a-buffer-leak-in-__ceph_setxattr.patch
drm-i915-dp-fix-vsc-dynamic-range-signaling-for-rgb-formats.patch
drm-i915-skip-__i915_request_skip-for-already-signaled-requests.patch
drm-panfrost-fix-wait_bo-ioctl-leaking-positive-return-from-dma_resv_wait_timeout.patch
iommu-vt-d-disable-dmar-for-intel-q35-igfx.patch
libceph-fix-potential-null-ptr-deref-in-decode_choose_args.patch
libceph-fix-potential-out-of-bounds-access-in-crush_decode.patch
libceph-fix-potential-out-of-bounds-access-in-osdmap_decode.patch
libceph-handle-rbtree-insertion-error-in-decode_choose_args.patch
powerpc-warp-fix-error-handling-in-pika_dtm_thread.patch
smb-client-fix-possible-infinite-loop-and-oob-read-in-symlink_data.patch