[PATCH 7.2 00/88] 7.2.14-rc1 review
From: Greg Kroah-Hartman
Date: Wed Oct 28 2026 - 13:08:57 EST
This is the start of the stable review cycle for the 7.2.14 release.
There are 88 patches in this series, all will be posted as a response
to this one. If anyone has any issues with these being applied, please
let me know.
Responses should be made by Fri, 30 Oct 2026 16:59:22 +0000.
Anything received after that time might be too late.
The whole patch series can be found in one patch at:
https://www.kernel.org/pub/linux/kernel/v7.x/stable-review/patch-7.2.14-rc1.gz
or in the git tree and branch at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-7.2.y
and the diffstat can be found below.
thanks,
greg k-h
-------------
Pseudo-Shortlog of commits:
Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>
Linux 7.2.14-rc1
Christian Brauner <brauner@xxxxxxxxxx>
signal: allow taks to temporarily block TIF_NOTIFY_SIGNAL
Christian Brauner <brauner@xxxxxxxxxx>
pid_namespace: prevent TIF_NOTIFY_SIGNAL from interrupting the reaper
Christian Brauner <brauner@xxxxxxxxxx>
coredump: prevent TIF_NOTIFY_SIGNAL from interrupting coredumps
Christian Brauner <brauner@xxxxxxxxxx>
exit: hang up the tty before closing the files
Christian Brauner <brauner@xxxxxxxxxx>
fork: release the files of a failed fork after sched_cancel_fork()
Christian Brauner <brauner@xxxxxxxxxx>
ptrace: refuse to change the signal mask of a user worker
Christian Brauner <brauner@xxxxxxxxxx>
signal: don't retarget shared signals in a dying thread group
Christian Brauner <brauner@xxxxxxxxxx>
signal: only SIGKILL and the freezers interrupt a coredumping task
Christian Brauner <brauner@xxxxxxxxxx>
coredump: hold RCU while releasing parked threads
Aaron Ahmed <aarnahmd@xxxxxxxxxx>
ftrace: Initialize modname and offset in print_rec()
Weiming Shi <bestswngs@xxxxxxxxx>
asymmetric_keys: reject trust keys without IDs
Srish Srinivasan <ssrish@xxxxxxxxxxxxx>
keys/trusted_keys: return immediately after TPM unseal failure
Stefano Garzarella <sgarzare@xxxxxxxxxx>
KEYS: trusted: Fix blob allocation size in tpm2_key_decode()
Adrian Martinez <adrimg3196@xxxxxxxxx>
KEYS: Fix key_reject_and_link() race with keyring restriction
Cen Zhang <zzzccc427@xxxxxxxxx>
keys: Protect the read method check against type removal
Kyle Zeng <kylebot@xxxxxxxxxx>
keys: make keyring indexes independent of kernel addresses
Cen Zhang <zzzccc427@xxxxxxxxx>
keys: Protect the type name while describing a key
Cen Zhang <zzzccc427@xxxxxxxxx>
keys: Check the authorization payload in process keyring searches
Cen Zhang <zzzccc427@xxxxxxxxx>
keys: Avoid the owner account dereference in named keyring lookup
Jens Axboe <axboe@xxxxxxxxx>
io_uring: keep the drain active when a deferred drain request is started
Jens Axboe <axboe@xxxxxxxxx>
io_uring: end the drain when the drain request completes
Junyeong Lee <jylee5498@xxxxxxxxx>
io_uring/waitid: prevent cancel reference wrap
Austin Schuh <austin.linux@xxxxxxxxx>
io_uring/wait: wake real-time waiters from hard interrupt context
Tamaki Yanagawa <ty@xxxxxxxxx>
io_uring/net: keep recv buffer select length within MAX_RW_COUNT
Jens Axboe <axboe@xxxxxxxxx>
io_uring/poll: don't loop on HUP with multiple references
Jens Axboe <axboe@xxxxxxxxx>
io_uring/timeout: don't lose a cancel as io-wq arms a timeout
Jens Axboe <axboe@xxxxxxxxx>
io_uring/timeout: don't flush with the sequence behind the last flush
Jens Axboe <axboe@xxxxxxxxx>
io_uring/timeout: don't put a sequence target behind the last flush
Juanlu Herrero <juanlu@xxxxxxxxxxxx>
io_uring/poll: avoid retry wakeup loss when dropping ownership
Josef Bacik <josef@xxxxxxxxxxxxxx>
io_uring: look up the file before queueing to io-wq
Josef Bacik <josef@xxxxxxxxxxxxxx>
io_uring/timeout: don't end a linked timeout with 1
Josef Bacik <josef@xxxxxxxxxxxxxx>
io_uring/timeout: no ABS update of multishot timeouts
Josef Bacik <josef@xxxxxxxxxxxxxx>
io_uring/net: don't retry recv on uncommitted buffers
Josef Bacik <josef@xxxxxxxxxxxxxx>
io_uring: don't pass restart error codes to userspace
Josef Bacik <josef@xxxxxxxxxxxxxx>
io_uring/openclose: keep the lock in io_pipe_fixed()
Josef Bacik <josef@xxxxxxxxxxxxxx>
io_uring/sqpoll: let the thread sleep on disabled rings
Josef Bacik <josef@xxxxxxxxxxxxxx>
io_uring/kbuf: handle index wrap in last buffer check
Josef Bacik <josef@xxxxxxxxxxxxxx>
io_uring/zcrx: fix buffer offsets in areas above 4GB
Josef Bacik <josef@xxxxxxxxxxxxxx>
io_uring/napi: don't busy poll past an expired timeout
Josef Bacik <josef@xxxxxxxxxxxxxx>
io_uring/napi: make stale entries time out after 60s
Josef Bacik <josef@xxxxxxxxxxxxxx>
io_uring/wait: no early -ETIME if min_wait finds work
Josef Bacik <josef@xxxxxxxxxxxxxx>
io_uring/timeout: use the right clock for ABS updates
Josef Bacik <josef@xxxxxxxxxxxxxx>
io_uring/timeout: keep repeat count on multishot update
Josef Bacik <josef@xxxxxxxxxxxxxx>
io_uring/timeout: don't skip over reached sequences
Josef Bacik <josef@xxxxxxxxxxxxxx>
io_uring/fdinfo: fix CQE dump of CQE32 rings
Josef Bacik <josef@xxxxxxxxxxxxxx>
io_uring/register: keep 128b SQEs intact on resize
Josef Bacik <josef@xxxxxxxxxxxxxx>
io_uring/register: handle index wrap when resizing
Josef Bacik <josef@xxxxxxxxxxxxxx>
io_uring/register: don't wrap 32b CQEs when resizing
Josef Bacik <josef@xxxxxxxxxxxxxx>
io_uring: don't split 128b SQEs at the SQPOLL cap
Josef Bacik <josef@xxxxxxxxxxxxxx>
io_uring: drop the CQE cache if a refill fails
Josef Bacik <josef@xxxxxxxxxxxxxx>
io_uring/futex: allocate private hash before waiting
Josef Bacik <josef@xxxxxxxxxxxxxx>
io_uring/poll: drop stale double poll entry on rearm
Josef Bacik <josef@xxxxxxxxxxxxxx>
io_uring/wait: look at all CQ waiters on wake up
Josef Bacik <josef@xxxxxxxxxxxxxx>
io_uring: wake ring pollers for local task_work
Josef Bacik <josef@xxxxxxxxxxxxxx>
io_uring/cancel: let CANCEL_ALL find parked requests
Josef Bacik <josef@xxxxxxxxxxxxxx>
io_uring/cancel: recognize "no timeout" on 32-bit
Josef Bacik <josef@xxxxxxxxxxxxxx>
io_uring/cancel: don't forget that the work was running
Josef Bacik <josef@xxxxxxxxxxxxxx>
io_uring: don't lose a cancel as io-wq parks a request
Josef Bacik <josef@xxxxxxxxxxxxxx>
io_uring/poll: don't lose a cancel as io-wq arms poll
Josef Bacik <josef@xxxxxxxxxxxxxx>
io_uring/io-wq: let cancel find picked up hashed work
Josef Bacik <josef@xxxxxxxxxxxxxx>
io_uring/io-wq: don't exit with a creation pending
Josef Bacik <josef@xxxxxxxxxxxxxx>
io_uring/io-wq: don't strand work when a worker exits
Josef Bacik <josef@xxxxxxxxxxxxxx>
io_uring/io-wq: don't go to sleep on pending work
Josef Bacik <josef@xxxxxxxxxxxxxx>
io_uring/mpscq: disable preemption while pushing
Josef Bacik <josef@xxxxxxxxxxxxxx>
io_uring/cancel: rearm local work wake up before sleep
Josef Bacik <josef@xxxxxxxxxxxxxx>
io_uring: don't lose the DEFER_TASKRUN wake up
Josef Bacik <josef@xxxxxxxxxxxxxx>
io_uring: don't flood a cancelling task with task_work
Josef Bacik <josef@xxxxxxxxxxxxxx>
io_uring/io-wq: don't hide a link from cancellations
Josef Bacik <josef@xxxxxxxxxxxxxx>
io_uring/io-wq: don't lose the signal that ends work
Josef Bacik <josef@xxxxxxxxxxxxxx>
io_uring/wait: don't spin on a stuck overflow list
Josef Bacik <josef@xxxxxxxxxxxxxx>
io_uring/cmd: don't leave list poison in ->hash_node
Josef Bacik <josef@xxxxxxxxxxxxxx>
io_uring/waitid: own the request before clearing ->head
Christian Brauner <brauner@xxxxxxxxxx>
io-wq: order the exit bit against worker creation task work
Haoran Wang <haoranwangsec@xxxxxxxxx>
tracing/syscalls: Use copy_from_user for the faultable syscall buffer
Lee Jones <lee@xxxxxxxxxx>
tracing/histograms: Verify event_call identity when updating synth_event refcount
Donggeun Yoo <donggeunyoo.kernel@xxxxxxxxx>
tracing: Fix 64-bit and signed histogram fields on 32-bit kernels
Donggeun Yoo <donggeunyoo.kernel@xxxxxxxxx>
tracing: Unregister field variable histograms when the command fails
Donggeun Yoo <donggeunyoo.kernel@xxxxxxxxx>
tracing: Save the event file instead of the compatible histogram
Kyle Zeng <kylebot@xxxxxxxxxx>
tracing: Reject incomplete event filter expressions
David Carlier <devnexen@xxxxxxxxx>
tracing: Hold trace_types_lock when resetting last boot data from readers
David Carlier <devnexen@xxxxxxxxx>
tracing: Hold trace_types_lock when updating modules in persistent instances
Sasha Levin <sashal@xxxxxxxxxx>
tools/dma: fix building with O=
Pauli Virtanen <pav@xxxxxx>
Bluetooth: L2CAP: refuse __l2cap_chan_add if chan already has conn
Hui Su <sh_def@xxxxxxx>
sched/fair: Avoid overflow in place_entity()
SJ Park <sj@xxxxxxxxxx>
mm/damon/core: error damos_commit_quota_goal() for zero target_value
Hongling Zeng <zenghongling@xxxxxxxxxx>
ntfs: take invalidate_lock in ntfs_filemap_page_mkwrite()
Hongling Zeng <zenghongling@xxxxxxxxxx>
ntfs: fix race between fallocate and mmap reads
Kuba Piecuch <jpiecuch@xxxxxxxxxx>
sched_ext: Wait for SCX_OPSS_DISPATCHING before moving tasks off DSQs
-------------
Diffstat:
Makefile | 4 +-
crypto/asymmetric_keys/restrict.c | 8 +-
fs/coredump.c | 18 ++-
fs/ntfs/file.c | 32 ++--
include/linux/io_uring_types.h | 5 +
include/linux/key-type.h | 1 +
include/linux/key.h | 5 +
include/linux/sched.h | 2 +-
include/linux/sched/signal.h | 27 +++-
io_uring/cancel.c | 43 ++++-
io_uring/cancel.h | 2 +
io_uring/fdinfo.c | 14 +-
io_uring/futex.c | 32 +++-
io_uring/io-wq.c | 126 +++++++++++++--
io_uring/io_uring.c | 180 ++++++++++++++++-----
io_uring/io_uring.h | 44 ++++-
io_uring/kbuf.c | 2 +-
io_uring/loop.c | 8 +-
io_uring/mpscq.h | 14 +-
io_uring/napi.c | 4 +-
io_uring/net.c | 26 ++-
io_uring/openclose.c | 11 +-
io_uring/poll.c | 38 ++++-
io_uring/register.c | 54 ++++++-
io_uring/rw.c | 18 ---
io_uring/sqpoll.c | 7 +
io_uring/timeout.c | 102 +++++++++---
io_uring/tw.c | 36 ++++-
io_uring/uring_cmd.c | 2 +-
io_uring/wait.c | 48 ++++--
io_uring/wait.h | 15 ++
io_uring/waitid.c | 19 ++-
io_uring/zcrx.c | 2 +-
kernel/exit.c | 5 +-
kernel/fork.c | 9 +-
kernel/pid_namespace.c | 3 +-
kernel/ptrace.c | 6 +
kernel/sched/ext/ext.c | 14 +-
kernel/sched/fair.c | 16 +-
kernel/signal.c | 4 +
kernel/trace/ftrace.c | 4 +-
kernel/trace/trace.c | 21 ++-
kernel/trace/trace_events_filter.c | 6 +
kernel/trace/trace_events_hist.c | 33 ++--
kernel/trace/trace_events_synth.c | 10 ++
kernel/trace/trace_synth.h | 1 +
kernel/trace/trace_syscalls.c | 2 +-
mm/damon/core.c | 22 ++-
mm/damon/sysfs.c | 19 +++
net/bluetooth/l2cap_core.c | 7 +-
net/bluetooth/l2cap_sock.c | 2 +
security/keys/key.c | 13 +-
security/keys/keyctl.c | 15 +-
security/keys/keyring.c | 150 +++++++++--------
security/keys/process_keys.c | 5 +-
security/keys/trusted-keys/trusted_tpm1.c | 4 +-
security/keys/trusted-keys/trusted_tpm2.c | 2 +-
tools/dma/Makefile | 4 +-
.../test.d/filter/event-filter-incomplete.tc | 24 +++
59 files changed, 1036 insertions(+), 314 deletions(-)