[GIT PULL] Char/Misc/IIO driver fixes for 7.0-rc7

From: Greg KH

Date: Sun Apr 05 2026 - 04:31:54 EST


The following changes since commit f338e77383789c0cae23ca3d48adcc5e9e137e3c:

Linux 7.0-rc4 (2026-03-15 13:52:05 -0700)

are available in the Git repository at:

git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/char-misc.git tags/char-misc-7.0-rc7

for you to fetch changes up to f387e2e2b9d302688dbdceebe9aade221c90f09e:

Documentation: fix two typos in latest update to the security report howto (2026-04-04 10:38:43 +0200)

----------------------------------------------------------------
Char/misc/iio driver fixes for 7.0-rc7

Here are a relativly large number of small char/misc/iio and other
driver fixes for 7.0-rc7. There's a bunch, but overall they are all
small fixes for issues that people have been having that I finally
caught up with getting merged due to delays on my end.

The "largest" change overall is just some documentation updates to the
security-bugs.rst file to hopefully tell the AI tools (and any users
that actually read the documentation), how to send us better security
bug reports as the quantity of reports these past few weeks has
increased dramatically due to tools getting better at "finding" things.

Included in here are:
- lots of small IIO driver fixes for issues reported in 7.0-rc
- gpib driver fixes
- comedi driver fixes
- interconnect driver fix
- nvmem driver fixes
- mei driver fix
- counter driver fix
- binder rust driver fixes
- some other small misc driver fixes

All of these have been in linux-next this week with no reported issues.

Signed-off-by: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>

----------------------------------------------------------------
Adam Crosser (1):
gpib: fix use-after-free in IO ioctl handlers

Aldo Conte (1):
iio: light: veml6070: fix veml6070_read() return value

Alexander Usyskin (1):
mei: me: reduce the scope on unexpected reset

Alice Ryhl (1):
rust_binder: use AssertSync for BINDER_VM_OPS

Antoniu Miclaus (5):
iio: adc: ade9000: move mutex init before IRQ registration
iio: accel: adxl380: fix FIFO watermark bit 8 always written as 0
iio: imu: adis16550: fix swapped gyro/accel filter functions
iio: dac: ad5770r: fix error return in ad5770r_read_raw()
iio: accel: adxl313: add missing error check in predisable

Ard Biesheuvel (1):
lis3lv02d: Omit IRQF_ONESHOT if no threaded handler is provided

Ariana Lazar (1):
iio: dac: mcp47feb02: Fix Vref validation [1-999] case

Askar Safin (1):
.get_maintainer.ignore: add myself

Billy Tsai (1):
iio: adc: aspeed: clear reference voltage bits before configuring vref

Christian Eggers (1):
nvmem: imx: assign nvmem_cell_info::raw_len

Chunyang Chen (1):
iio: adc: ti-ads1018: fix type overflow for data rate

Cosmin Tanislav (2):
counter: rz-mtu3-cnt: prevent counter from being toggled multiple times
counter: rz-mtu3-cnt: do not use struct rz_mtu3_channel's dev member

Dave Penkler (1):
gpib: Fix fluke driver s390 compile issue

David Lechner (7):
iio: imu: bno055: fix BNO055_SCAN_CH_COUNT off by one
iio: add IIO_DECLARE_QUATERNION() macro
iio: orientation: hid-sensor-rotation: fix quaternion alignment
iio: orientation: hid-sensor-rotation: add timestamp hack to not break userspace
iio: adc: ti-adc161s626: fix buffer read on big-endian
iio: adc: ti-adc161s626: use DMA-safe memory for spi_read()
iio: light: vcnl4035: fix scan buffer on big-endian

Deepanshu Kartikey (1):
comedi: dt2815: add hardware detection to prevent crash

Dmitry Torokhov (2):
iio: adc: ti-ads7950: normalize return value of gpio_get
iio: adc: ti-ads7950: do not clobber gpio state in ti_ads7950_get()

Edward Adam Davis (1):
comedi: runflags cannot determine whether to reclaim chanlist

Ethan Tidmore (4):
iio: gyro: mpu3050: Fix incorrect free_irq() variable
iio: gyro: mpu3050: Fix irq resource leak
iio: gyro: mpu3050: Move iio_device_register() to correct location
iio: gyro: mpu3050: Fix out-of-sequence free_irq()

Felix Gu (8):
iio: adc: ti-ads1119: Fix unbalanced pm reference count in ds1119_single_conversion()
iio: pressure: abp2030pa: Remove IRQF_ONESHOT from devm_request_irq()
iio: dac: mcp47feb02: Fix mutex used before initialization
iio: adc: ad4062: Replace IRQF_ONESHOT with IRQF_NO_THREAD
iio: adc: ti-ads1119: Replace IRQF_ONESHOT with IRQF_NO_THREAD
iio: adc: ti-ads1119: Reinit completion before wait_for_completion_timeout()
iio: proximity: rfd77402: Fix completion race condition in IRQ mode
iio: adc: nxp-sar-adc: Fix DMA channel leak in trigger mode

Francesco Lavra (2):
iio: imu: st_lsm6dsx: Set FIFO ODR for accelerometer and gyroscope only
iio: imu: st_lsm6dsx: Set buffer sampling frequency for accelerometer only

Geert Uytterhoeven (1):
misc/mei: INTEL_MEI should depend on X86 or DRM_XE

Giorgi Tchankvetadze (2):
iio: adc: ade9000: fix wrong register in CALIBBIAS case for active power
iio: adc: ade9000: fix wrong return type in streaming push

Greg Kroah-Hartman (4):
Merge tag 'icc-7.0-rc6' of ssh://gitolite.kernel.org/pub/scm/linux/kernel/git/djakov/icc into char-misc-linus
Merge tag 'iio-fixes-for-7.0b' of ssh://gitolite.kernel.org/pub/scm/linux/kernel/git/jic23/iio into char-misc-linux
Merge tag 'iio-fixes-for-7.0c' of ssh://gitolite.kernel.org/pub/scm/linux/kernel/git/jic23/iio into char-misc-linus
Merge tag 'counter-fixes-for-7.0' of ssh://gitolite.kernel.org/pub/scm/linux/kernel/git/wbg/counter into char-misc-linus

Ian Abbott (4):
comedi: ni_atmio16d: Fix invalid clean-up after failed attach
comedi: me4000: Fix potential overrun of firmware buffer
comedi: me_daq: Fix potential overrun of firmware buffer
comedi: Reinit dev->spinlock between attachments to low-level drivers

Ivan Vera (1):
nvmem: zynqmp_nvmem: Fix buffer size in DMA and memcpy

Johan Hovold (1):
gpib: lpvo_usb: fix memory leak on disconnect

Josh Poimboeuf (1):
iio: imu: bmi160: Remove potential undefined behavior in bmi160_config_pin()

Randy Dunlap (1):
lis3lv02d: fix kernel-doc warnings

Srinivas Pandruvada (1):
iio: hid-sensors: Use software trigger

Valek Andrej (1):
iio: accel: fix ADXL355 temperature signature value

Vladimir Zapolskiy (1):
interconnect: qcom: sm8450: Fix NULL pointer dereference in icc_link_nodes()

Willy Tarreau (4):
Documentation: minor updates to the security contacts
Documentation: explain how to find maintainers addresses for security reports
Documentation: clarify the mandatory and desirable info for security reports
Documentation: fix two typos in latest update to the security report howto

Xingjing Deng (2):
misc: fastrpc: possible double-free of cctx->remote_heap
misc: fastrpc: check qcom_scm_assign_mem() return in rpmsg_probe

.get_maintainer.ignore | 1 +
Documentation/process/security-bugs.rst | 154 +++++++++++++++++++--
drivers/android/binder/page_range.rs | 8 +-
drivers/android/binder/rust_binder_main.rs | 2 +-
drivers/comedi/comedi_fops.c | 8 +-
drivers/comedi/drivers.c | 8 ++
drivers/comedi/drivers/dt2815.c | 12 ++
drivers/comedi/drivers/me4000.c | 16 ++-
drivers/comedi/drivers/me_daq.c | 35 ++---
drivers/comedi/drivers/ni_atmio16d.c | 3 +-
drivers/counter/rz-mtu3-cnt.c | 67 ++++-----
drivers/gpib/Kconfig | 1 +
drivers/gpib/common/gpib_os.c | 96 ++++++++++---
drivers/gpib/include/gpib_types.h | 8 ++
drivers/gpib/lpvo_usb_gpib/lpvo_usb_gpib.c | 4 +-
drivers/iio/accel/adxl313_core.c | 2 +
drivers/iio/accel/adxl355_core.c | 2 +-
drivers/iio/accel/adxl380.c | 2 +-
drivers/iio/adc/ad4062.c | 8 +-
drivers/iio/adc/ade9000.c | 12 +-
drivers/iio/adc/aspeed_adc.c | 1 +
drivers/iio/adc/nxp-sar-adc.c | 9 +-
drivers/iio/adc/ti-adc161s626.c | 41 +++---
drivers/iio/adc/ti-ads1018.c | 2 +-
drivers/iio/adc/ti-ads1119.c | 11 +-
drivers/iio/adc/ti-ads7950.c | 8 +-
.../iio/common/hid-sensors/hid-sensor-trigger.c | 48 ++++---
drivers/iio/dac/ad5770r.c | 2 +-
drivers/iio/dac/mcp47feb02.c | 51 +++----
drivers/iio/gyro/mpu3050-core.c | 32 +++--
drivers/iio/imu/adis16550.c | 8 +-
drivers/iio/imu/bmi160/bmi160_core.c | 15 +-
drivers/iio/imu/bno055/bno055.c | 2 +-
drivers/iio/imu/st_lsm6dsx/st_lsm6dsx_buffer.c | 15 +-
drivers/iio/light/vcnl4035.c | 18 ++-
drivers/iio/light/veml6070.c | 4 +-
drivers/iio/orientation/hid-sensor-rotation.c | 24 +++-
drivers/iio/pressure/abp2030pa.c | 2 +-
drivers/iio/proximity/rfd77402.c | 7 +-
drivers/interconnect/qcom/sm8450.c | 4 +-
drivers/misc/fastrpc.c | 5 +-
drivers/misc/lis3lv02d/lis3lv02d.c | 6 +-
drivers/misc/mei/Kconfig | 1 +
drivers/misc/mei/hw-me.c | 14 +-
drivers/nvmem/imx-ocotp-ele.c | 1 +
drivers/nvmem/imx-ocotp.c | 1 +
drivers/nvmem/zynqmp_nvmem.c | 8 +-
include/linux/iio/iio.h | 12 ++
include/linux/lis3lv02d.h | 4 +-
49 files changed, 545 insertions(+), 260 deletions(-)