Linux 5.15.203
From: Greg Kroah-Hartman
Date: Sat Apr 18 2026 - 04:51:55 EST
I'm announcing the release of the 5.15.203 kernel.
All users of the 5.15 kernel series must upgrade.
The updated 5.15.y git tree can be found at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable.git linux-5.15.y
and can be browsed at the normal kernel.org git web browser:
https://git.kernel.org/?p=linux/kernel/git/stable/linux-stable.git;a=summary
thanks,
greg k-h
------------
Documentation/devicetree/bindings/auxdisplay/holtek,ht16k33.yaml | 2
Documentation/hwmon/adm1177.rst | 8
Documentation/networking/device_drivers/ethernet/freescale/dpaa2/mac-phy-support.rst | 9
Makefile | 2
arch/arm/include/asm/string.h | 14
arch/arm/mach-omap2/cm_common.c | 8
arch/arm/mach-omap2/control.c | 29 -
arch/arm/mach-omap2/prm_common.c | 8
arch/arm64/boot/dts/hisilicon/hi3798cv200-poplar.dts | 2
arch/arm64/boot/dts/hisilicon/hi3798cv200.dtsi | 1
arch/arm64/boot/dts/qcom/sdm845-oneplus-common.dtsi | 1
arch/mips/lib/multi3.c | 6
arch/parisc/include/asm/pgtable.h | 2
arch/parisc/kernel/head.S | 7
arch/powerpc/include/asm/uaccess.h | 2
arch/powerpc/platforms/83xx/km83xx.c | 4
arch/riscv/kernel/kgdb.c | 7
arch/s390/include/asm/barrier.h | 4
arch/s390/kernel/syscall.c | 2
arch/sh/drivers/platform_early.c | 4
arch/x86/include/asm/efi.h | 2
arch/x86/include/asm/msr-index.h | 3
arch/x86/kernel/apic/apic.c | 6
arch/x86/kernel/cpu/amd.c | 3
arch/x86/kernel/cpu/common.c | 18
arch/x86/kvm/mmu/mmu.c | 13
arch/x86/platform/efi/efi.c | 2
arch/x86/platform/efi/quirks.c | 55 ++
crypto/af_alg.c | 4
drivers/acpi/acpi_processor.c | 15
drivers/acpi/acpica/evxfregn.c | 92 +++
drivers/acpi/ec.c | 32 -
drivers/acpi/internal.h | 1
drivers/acpi/osi.c | 13
drivers/acpi/osl.c | 2
drivers/acpi/sleep.c | 8
drivers/ata/libata-core.c | 3
drivers/ata/libata-sata.c | 4
drivers/ata/libata-scsi.c | 153 ++----
drivers/ata/libata-sff.c | 4
drivers/ata/libata.h | 1
drivers/base/power/runtime.c | 1
drivers/base/property.c | 27 -
drivers/base/regmap/regmap.c | 30 +
drivers/block/drbd/drbd_actlog.c | 53 --
drivers/block/drbd/drbd_interval.h | 5
drivers/bluetooth/btqca.c | 2
drivers/bluetooth/btusb.c | 5
drivers/bluetooth/hci_ll.c | 2
drivers/clk/tegra/clk-tegra124-emc.c | 2
drivers/comedi/drivers.c | 8
drivers/comedi/drivers/dt2815.c | 12
drivers/comedi/drivers/me4000.c | 16
drivers/comedi/drivers/me_daq.c | 35 -
drivers/comedi/drivers/ni_atmio16d.c | 3
drivers/cpufreq/cpufreq_conservative.c | 12
drivers/cpufreq/cpufreq_governor.c | 3
drivers/cpufreq/cpufreq_governor.h | 1
drivers/cpuidle/cpuidle.c | 10
drivers/dma/idxd/cdev.c | 10
drivers/dma/sh/rz-dmac.c | 33 +
drivers/dma/xilinx/xilinx_dma.c | 66 +-
drivers/firmware/arm_scpi.c | 5
drivers/firmware/efi/mokvar-table.c | 2
drivers/gpio/gpiolib-cdev.c | 13
drivers/gpu/drm/amd/amdgpu/amdgpu_amdkfd_gpuvm.c | 6
drivers/gpu/drm/amd/display/dc/core/dc_stream.c | 2
drivers/gpu/drm/ast/ast_dp501.c | 2
drivers/gpu/drm/drm_ioc32.c | 2
drivers/gpu/drm/exynos/exynos_drm_drv.h | 1
drivers/gpu/drm/exynos/exynos_drm_vidi.c | 72 ++
drivers/gpu/drm/i915/display/intel_gmbus.c | 4
drivers/gpu/drm/i915/gt/intel_engine_cs.c | 3
drivers/gpu/drm/i915/gt/intel_engine_heartbeat.c | 26 -
drivers/gpu/drm/nouveau/nouveau_connector.c | 3
drivers/gpu/drm/radeon/si_dpm.c | 4
drivers/gpu/drm/tegra/dsi.c | 6
drivers/hid/hid-asus.c | 15
drivers/hid/hid-cmedia.c | 2
drivers/hid/hid-creative-sb0540.c | 2
drivers/hid/hid-magicmouse.c | 6
drivers/hid/hid-mcp2221.c | 2
drivers/hid/hid-multitouch.c | 7
drivers/hid/hid-zydacron.c | 2
drivers/hid/wacom_wac.c | 10
drivers/hwmon/adm1177.c | 54 +-
drivers/hwmon/max16065.c | 26 -
drivers/hwmon/occ/common.c | 19
drivers/hwmon/pmbus/isl68137.c | 7
drivers/hwmon/pmbus/pxe1610.c | 5
drivers/hwmon/pmbus/q54sj108a2.c | 19
drivers/hwmon/pmbus/tps53679.c | 4
drivers/i2c/busses/i2c-cp2615.c | 5
drivers/i2c/busses/i2c-fsi.c | 1
drivers/i3c/master/mipi-i3c-hci/cmd.h | 1
drivers/i3c/master/mipi-i3c-hci/cmd_v1.c | 2
drivers/i3c/master/mipi-i3c-hci/cmd_v2.c | 2
drivers/i3c/master/mipi-i3c-hci/core.c | 6
drivers/i3c/master/mipi-i3c-hci/dma.c | 4
drivers/iio/adc/ad7923.c | 4
drivers/iio/chemical/bme680_core.c | 2
drivers/iio/chemical/sps30_i2c.c | 2
drivers/iio/chemical/sps30_serial.c | 2
drivers/iio/dac/ad5770r.c | 2
drivers/iio/dac/ds4424.c | 2
drivers/iio/gyro/mpu3050-core.c | 50 +-
drivers/iio/gyro/mpu3050-i2c.c | 3
drivers/iio/imu/inv_icm42600/inv_icm42600_accel.c | 2
drivers/iio/imu/inv_icm42600/inv_icm42600_gyro.c | 2
drivers/iio/imu/st_lsm6dsx/st_lsm6dsx_buffer.c | 4
drivers/iio/industrialio-core.c | 7
drivers/iio/industrialio-event.c | 9
drivers/iio/inkern.c | 35 -
drivers/iio/light/vcnl4035.c | 18
drivers/iio/potentiometer/mcp4131.c | 2
drivers/infiniband/core/rw.c | 21
drivers/infiniband/hw/irdma/cm.c | 29 -
drivers/infiniband/hw/irdma/utils.c | 2
drivers/infiniband/hw/irdma/verbs.c | 9
drivers/infiniband/hw/mthca/mthca_provider.c | 5
drivers/input/joystick/xpad.c | 2
drivers/input/misc/uinput.c | 35 +
drivers/input/rmi4/rmi_f54.c | 4
drivers/input/serio/i8042-acpipnpio.h | 7
drivers/iommu/intel/dmar.c | 3
drivers/irqchip/irq-gic-v3-its.c | 4
drivers/media/dvb-core/dmxdev.c | 4
drivers/media/dvb-core/dvb_net.c | 3
drivers/media/mc/mc-request.c | 5
drivers/media/usb/uvc/uvc_driver.c | 88 ++-
drivers/media/usb/uvc/uvcvideo.h | 2
drivers/media/v4l2-core/v4l2-ioctl.c | 5
drivers/memory/mtk-smi.c | 11
drivers/mfd/omap-usb-host.c | 11
drivers/mfd/qcom-pm8xxx.c | 53 --
drivers/mmc/host/mmci_qcom_dml.c | 1
drivers/mmc/host/sdhci-pci-gli.c | 9
drivers/mmc/host/sdhci.c | 9
drivers/mmc/host/vub300.c | 2
drivers/mtd/nand/raw/brcmnand/brcmnand.c | 6
drivers/mtd/nand/raw/cadence-nand-controller.c | 2
drivers/mtd/nand/raw/nand_base.c | 14
drivers/mtd/nand/raw/pl35x-nand-controller.c | 3
drivers/mtd/parsers/redboot.c | 6
drivers/net/arcnet/com20020-pci.c | 16
drivers/net/bonding/bond_debugfs.c | 16
drivers/net/bonding/bond_main.c | 8
drivers/net/caif/caif_serial.c | 3
drivers/net/can/spi/hi311x.c | 5
drivers/net/can/spi/mcp251x.c | 15
drivers/net/can/usb/ems_usb.c | 7
drivers/net/can/usb/etas_es58x/es58x_core.c | 7
drivers/net/can/usb/gs_usb.c | 11
drivers/net/can/usb/ucan.c | 2
drivers/net/dsa/bcm_sf2.c | 8
drivers/net/ethernet/altera/altera_tse_main.c | 1
drivers/net/ethernet/amd/xgbe/xgbe-drv.c | 10
drivers/net/ethernet/amd/xgbe/xgbe-main.c | 1
drivers/net/ethernet/amd/xgbe/xgbe.h | 3
drivers/net/ethernet/arc/emac_main.c | 11
drivers/net/ethernet/broadcom/genet/bcmgenet_wol.c | 2
drivers/net/ethernet/broadcom/tg3.c | 2
drivers/net/ethernet/cadence/macb_main.c | 18
drivers/net/ethernet/cadence/macb_pci.c | 10
drivers/net/ethernet/cadence/macb_ptp.c | 4
drivers/net/ethernet/faraday/ftgmac100.c | 28 -
drivers/net/ethernet/freescale/dpaa2/dpaa2-eth.h | 7
drivers/net/ethernet/freescale/dpaa2/dpaa2-mac.h | 10
drivers/net/ethernet/freescale/dpaa2/dpaa2-switch-ethtool.c | 34 +
drivers/net/ethernet/freescale/dpaa2/dpaa2-switch.c | 57 +-
drivers/net/ethernet/freescale/dpaa2/dpaa2-switch.h | 9
drivers/net/ethernet/freescale/enetc/enetc_ethtool.c | 2
drivers/net/ethernet/intel/e1000/e1000_main.c | 2
drivers/net/ethernet/intel/e1000e/netdev.c | 2
drivers/net/ethernet/intel/i40e/i40e_virtchnl_pf.c | 14
drivers/net/ethernet/intel/ice/ice_common.c | 1
drivers/net/ethernet/intel/ice/ice_ethtool.c | 35 -
drivers/net/ethernet/intel/igc/igc_main.c | 7
drivers/net/ethernet/marvell/mvpp2/mvpp2_main.c | 4
drivers/net/ethernet/marvell/octeontx2/af/rvu_devlink.c | 2
drivers/net/ethernet/mellanox/mlx5/core/devlink.c | 4
drivers/net/ethernet/mellanox/mlx5/core/en/reporter_tx.c | 1
drivers/net/ethernet/mellanox/mlx5/core/fw.c | 53 +-
drivers/net/ethernet/mellanox/mlx5/core/mlx5_core.h | 4
drivers/net/ethernet/microsoft/mana/gdma_main.c | 4
drivers/net/ethernet/microsoft/mana/hw_channel.c | 73 +-
drivers/net/ethernet/microsoft/mana/mana_en.c | 23
drivers/net/ethernet/pensando/ionic/ionic_lif.c | 17
drivers/net/ethernet/qualcomm/qca_uart.c | 2
drivers/net/ethernet/stmicro/stmmac/chain_mode.c | 11
drivers/net/ethernet/stmicro/stmmac/dwmac-loongson.c | 2
drivers/net/ethernet/stmicro/stmmac/stmmac_main.c | 18
drivers/net/ethernet/ti/am65-cpsw-nuss.c | 2
drivers/net/ethernet/ti/cpsw_ale.c | 9
drivers/net/ethernet/xilinx/xilinx_axienet.h | 4
drivers/net/phy/phy_device.c | 13
drivers/net/usb/aqc111.c | 12
drivers/net/usb/kalmia.c | 7
drivers/net/usb/kaweth.c | 13
drivers/net/usb/lan78xx.c | 8
drivers/net/usb/lan78xx.h | 3
drivers/net/usb/pegasus.c | 13
drivers/net/usb/r8152.c | 1
drivers/net/virtio_net.c | 1
drivers/net/vxlan/vxlan_core.c | 11
drivers/net/wireless/broadcom/brcm80211/brcmsmac/dma.c | 2
drivers/net/wireless/marvell/libertas/main.c | 4
drivers/net/wireless/microchip/wilc1000/hif.c | 2
drivers/net/wireless/ralink/rt2x00/rt2x00usb.c | 2
drivers/net/wireless/ti/wlcore/main.c | 4
drivers/net/wireless/ti/wlcore/tx.c | 2
drivers/net/wireless/virt_wifi.c | 1
drivers/nfc/nxp-nci/i2c.c | 4
drivers/nfc/pn533/uart.c | 14
drivers/nfc/pn533/usb.c | 1
drivers/nvdimm/bus.c | 5
drivers/nvme/host/pci.c | 13
drivers/nvme/target/tcp.c | 6
drivers/pci/pci-driver.c | 8
drivers/pci/pci.c | 10
drivers/pci/pci.h | 1
drivers/phy/renesas/phy-rcar-gen3-usb2.c | 123 ++--
drivers/phy/ti/phy-j721e-wiz.c | 2
drivers/pinctrl/mediatek/pinctrl-mtk-common.c | 9
drivers/platform/olpc/olpc-xo175-ec.c | 2
drivers/platform/x86/dell/dell-wmi-base.c | 6
drivers/platform/x86/dell/dell-wmi-sysman/passwordattr-interface.c | 1
drivers/platform/x86/intel/hid.c | 13
drivers/platform/x86/thinkpad_acpi.c | 6
drivers/platform/x86/touchscreen_dmi.c | 18
drivers/regulator/pca9450-regulator.c | 41 -
drivers/remoteproc/mtk_scp.c | 39 +
drivers/remoteproc/qcom_sysmon.c | 2
drivers/scsi/ibmvscsi/ibmvfc.c | 3
drivers/scsi/lpfc/lpfc_init.c | 2
drivers/scsi/lpfc/lpfc_sli.c | 36 +
drivers/scsi/lpfc/lpfc_sli4.h | 3
drivers/scsi/mpi3mr/mpi3mr_fw.c | 34 -
drivers/scsi/scsi_scan.c | 1
drivers/scsi/scsi_transport_sas.c | 2
drivers/scsi/ses.c | 7
drivers/scsi/storvsc_drv.c | 5
drivers/scsi/ufs/ufshcd.c | 29 -
drivers/soc/bcm/bcm2835-power.c | 27 -
drivers/soc/fsl/qbman/qman.c | 24
drivers/spi/spi-fsl-lpspi.c | 3
drivers/staging/rtl8723bs/core/rtw_ieee80211.c | 29 -
drivers/staging/rtl8723bs/core/rtw_mlme.c | 5
drivers/target/loopback/tcm_loop.c | 52 +-
drivers/thunderbolt/nhi.c | 2
drivers/tty/serial/8250/8250_dma.c | 15
drivers/tty/serial/8250/8250_pci.c | 17
drivers/tty/serial/8250/8250_port.c | 6
drivers/tty/serial/uartlite.c | 1
drivers/usb/cdns3/cdns3-gadget.c | 4
drivers/usb/cdns3/core.c | 11
drivers/usb/class/cdc-acm.c | 14
drivers/usb/class/cdc-acm.h | 2
drivers/usb/class/cdc-wdm.c | 4
drivers/usb/class/usbtmc.c | 9
drivers/usb/common/ulpi.c | 5
drivers/usb/core/message.c | 100 +++-
drivers/usb/core/phy.c | 8
drivers/usb/core/quirks.c | 7
drivers/usb/dwc2/gadget.c | 2
drivers/usb/gadget/function/f_hid.c | 11
drivers/usb/gadget/function/f_rndis.c | 3
drivers/usb/gadget/function/f_subset.c | 7
drivers/usb/gadget/function/f_uac1_legacy.c | 47 +
drivers/usb/gadget/function/f_uvc.c | 46 +
drivers/usb/gadget/function/u_ether.c | 8
drivers/usb/gadget/function/uvc.h | 3
drivers/usb/gadget/function/uvc_v4l2.c | 13
drivers/usb/gadget/udc/dummy_hcd.c | 42 +
drivers/usb/host/ehci-brcm.c | 4
drivers/usb/host/xhci.c | 4
drivers/usb/image/mdc800.c | 6
drivers/usb/misc/uss720.c | 2
drivers/usb/misc/yurex.c | 2
drivers/usb/renesas_usbhs/common.c | 9
drivers/usb/serial/io_edgeport.c | 3
drivers/usb/serial/io_usbvend.h | 1
drivers/usb/serial/option.c | 4
drivers/video/fbdev/core/fbcon.c | 248 ++++------
drivers/video/fbdev/core/fbcon.h | 4
drivers/video/fbdev/core/fbmem.c | 2
drivers/xen/privcmd.c | 76 ++-
drivers/xen/xen-acpi-processor.c | 7
fs/btrfs/disk-io.c | 4
fs/btrfs/ioctl.c | 3
fs/btrfs/tree-checker.c | 21
fs/btrfs/volumes.c | 5
fs/btrfs/zoned.c | 6
fs/ceph/dir.c | 15
fs/cifs/connect.c | 1
fs/cifs/inode.c | 6
fs/cifs/smb2ops.c | 8
fs/erofs/zdata.c | 3
fs/eventpoll.c | 5
fs/ext4/ext4.h | 1
fs/ext4/extents.c | 22
fs/ext4/fast_commit.c | 17
fs/ext4/ialloc.c | 6
fs/ext4/inode.c | 27 -
fs/ext4/mballoc.c | 69 +-
fs/ext4/super.c | 22
fs/ext4/sysfs.c | 10
fs/jbd2/checkpoint.c | 15
fs/ksmbd/mgmt/user_session.c | 4
fs/ksmbd/server.c | 6
fs/ksmbd/smb2pdu.c | 63 +-
fs/squashfs/cache.c | 3
fs/xfs/xfs_dquot_item.c | 9
fs/xfs/xfs_inode_item.c | 9
fs/xfs/xfs_log.c | 2
fs/xfs/xfs_mount.c | 7
include/acpi/acpixf.h | 130 ++---
include/asm-generic/tlb.h | 77 +++
include/linux/dma-mapping.h | 4
include/linux/fbcon.h | 2
include/linux/hugetlb.h | 17
include/linux/indirect_call_wrapper.h | 18
include/linux/irqchip/arm-gic-v3.h | 1
include/linux/mm_types.h | 1
include/linux/mmc/host.h | 9
include/linux/netfilter/ipset/ip_set.h | 2
include/linux/of.h | 2
include/linux/security.h | 1
include/linux/swapops.h | 20
include/linux/usb.h | 8
include/linux/usb/r8152.h | 1
include/net/act_api.h | 1
include/net/netfilter/nf_conntrack_timeout.h | 1
include/net/netfilter/nf_tables.h | 7
include/net/netlink.h | 39 +
include/net/sch_generic.h | 10
include/net/udp_tunnel.h | 2
include/sound/soc.h | 2
include/trace/events/kmem.h | 8
include/uapi/linux/dma-buf.h | 1
include/uapi/linux/netfilter/nf_conntrack_common.h | 4
io_uring/io-wq.c | 2
io_uring/io_uring.c | 39 +
kernel/bpf/btf.c | 24
kernel/bpf/devmap.c | 22
kernel/bpf/verifier.c | 14
kernel/cgroup/cgroup.c | 1
kernel/fork.c | 2
kernel/futex/core.c | 3
kernel/module.c | 7
kernel/sched/idle.c | 39 +
kernel/sysctl.c | 2
kernel/time/alarmtimer.c | 2
kernel/time/time.c | 171 ++++++
kernel/trace/trace.c | 6
kernel/trace/trace_osnoise.c | 8
lib/bootconfig.c | 9
lib/crypto/chacha.c | 4
lib/nlattr.c | 22
mm/hugetlb.c | 141 ++---
mm/mmu_gather.c | 33 +
mm/rmap.c | 38 -
net/atm/lec.c | 98 ++-
net/atm/lec.h | 2
net/batman-adv/bat_iv_ogm.c | 3
net/batman-adv/bat_v_elp.c | 10
net/batman-adv/hard-interface.c | 8
net/batman-adv/hard-interface.h | 1
net/batman-adv/translation-table.c | 9
net/bluetooth/hidp/core.c | 16
net/bluetooth/l2cap_core.c | 55 +-
net/bluetooth/l2cap_sock.c | 3
net/bluetooth/mgmt.c | 3
net/bluetooth/sco.c | 10
net/bluetooth/smp.c | 13
net/bridge/br_arp_nd_proxy.c | 18
net/bridge/br_device.c | 2
net/bridge/br_input.c | 2
net/can/af_can.c | 4
net/can/af_can.h | 2
net/can/bcm.c | 1
net/can/gw.c | 6
net/can/proc.c | 3
net/ceph/auth.c | 6
net/ceph/messenger_v2.c | 31 -
net/ceph/mon_client.c | 6
net/core/dev.c | 2
net/core/rtnetlink.c | 9
net/hsr/hsr_device.c | 32 -
net/ipv4/esp4.c | 11
net/ipv4/icmp.c | 4
net/ipv6/addrconf.c | 6
net/ipv6/datagram.c | 10
net/ipv6/esp6.c | 11
net/ipv6/icmp.c | 3
net/ipv6/ip6_flowlabel.c | 5
net/ipv6/ip6_tunnel.c | 7
net/ipv6/ndisc.c | 3
net/ipv6/netfilter/ip6t_rt.c | 4
net/ipv6/route.c | 11
net/ipv6/seg6_iptunnel.c | 41 +
net/ipv6/xfrm6_output.c | 4
net/key/af_key.c | 19
net/l2tp/l2tp_ppp.c | 25 -
net/mac80211/debugfs.c | 14
net/mac80211/mesh.c | 6
net/mctp/device.c | 19
net/mptcp/pm.c | 2
net/mptcp/pm_netlink.c | 81 ++-
net/mptcp/protocol.c | 2
net/mptcp/protocol.h | 3
net/mptcp/subflow.c | 15
net/ncsi/ncsi-aen.c | 3
net/ncsi/ncsi-rsp.c | 16
net/netfilter/ipset/ip_set_core.c | 4
net/netfilter/ipset/ip_set_hash_gen.h | 2
net/netfilter/ipset/ip_set_list_set.c | 4
net/netfilter/nf_conntrack_h323_asn1.c | 4
net/netfilter/nf_conntrack_helper.c | 2
net/netfilter/nf_conntrack_netlink.c | 89 ++-
net/netfilter/nf_conntrack_proto_tcp.c | 10
net/netfilter/nf_conntrack_sip.c | 20
net/netfilter/nf_flow_table_offload.c | 196 +++++--
net/netfilter/nf_tables_api.c | 12
net/netfilter/nfnetlink_cthelper.c | 8
net/netfilter/nfnetlink_log.c | 10
net/netfilter/nfnetlink_osf.c | 13
net/netfilter/nfnetlink_queue.c | 4
net/netfilter/nft_ct.c | 11
net/netfilter/nft_payload.c | 6
net/netfilter/nft_set_pipapo.c | 59 +-
net/netfilter/nft_set_pipapo.h | 2
net/netfilter/x_tables.c | 23
net/netfilter/xt_CT.c | 4
net/netfilter/xt_IDLETIMER.c | 6
net/netfilter/xt_cgroup.c | 6
net/netfilter/xt_dccp.c | 4
net/netfilter/xt_rateest.c | 5
net/netfilter/xt_tcpudp.c | 6
net/netfilter/xt_time.c | 4
net/nfc/nci/core.c | 31 -
net/nfc/nci/data.c | 12
net/nfc/rawsock.c | 11
net/openvswitch/flow_netlink.c | 2
net/openvswitch/vport-netdev.c | 9
net/packet/af_packet.c | 1
net/qrtr/af_qrtr.c | 31 -
net/rds/ib_rdma.c | 7
net/rfkill/core.c | 37 +
net/rose/af_rose.c | 5
net/rxrpc/af_rxrpc.c | 6
net/rxrpc/key.c | 2
net/rxrpc/server_key.c | 3
net/sched/act_ct.c | 6
net/sched/cls_api.c | 8
net/sched/cls_flow.c | 10
net/sched/cls_fw.c | 14
net/sched/sch_ets.c | 12
net/sched/sch_hfsc.c | 4
net/sched/sch_teql.c | 1
net/smc/af_smc.c | 152 ++++--
net/smc/smc.h | 34 +
net/smc/smc_close.c | 7
net/smc/smc_rx.c | 9
net/sunrpc/cache.c | 26 -
net/sunrpc/xprtrdma/verbs.c | 7
net/tipc/group.c | 6
net/tipc/socket.c | 2
net/tls/tls_sw.c | 10
net/wireless/core.c | 4
net/wireless/core.h | 4
net/wireless/radiotap.c | 4
net/wireless/scan.c | 14
net/x25/x25_in.c | 9
net/x25/x25_subr.c | 1
net/xfrm/xfrm_interface_core.c | 2
net/xfrm/xfrm_output.c | 7
net/xfrm/xfrm_policy.c | 2
net/xfrm/xfrm_state.c | 1
net/xfrm/xfrm_user.c | 1
security/apparmor/apparmorfs.c | 228 +++++----
security/apparmor/include/label.h | 16
security/apparmor/include/lib.h | 12
security/apparmor/include/match.h | 1
security/apparmor/include/policy.h | 13
security/apparmor/include/policy_ns.h | 2
security/apparmor/include/policy_unpack.h | 75 +--
security/apparmor/label.c | 12
security/apparmor/match.c | 58 +-
security/apparmor/policy.c | 82 ++-
security/apparmor/policy_ns.c | 2
security/apparmor/policy_unpack.c | 58 +-
security/security.c | 1
sound/pci/ctxfi/ctdaio.c | 1
sound/pci/hda/patch_conexant.c | 11
sound/pci/hda/patch_realtek.c | 1
sound/soc/amd/acp3x-rt5682-max9836.c | 9
sound/soc/codecs/adau1372.c | 34 -
sound/soc/fsl/fsl_easrc.c | 14
sound/soc/intel/catpt/device.c | 10
sound/soc/intel/catpt/dsp.c | 3
sound/soc/meson/meson-codec-glue.c | 3
sound/soc/soc-core.c | 44 +
sound/usb/caiaq/device.c | 2
sound/usb/endpoint.c | 10
sound/usb/quirks.c | 2
sound/usb/validate.c | 2
tools/bootconfig/main.c | 7
tools/objtool/check.c | 5
tools/testing/selftests/net/mptcp/simult_flows.sh | 11
510 files changed, 5162 insertions(+), 2391 deletions(-)
Adrian Hunter (3):
i3c: mipi-i3c-hci: Use ETIMEDOUT instead of ETIME for timeout errors
i3c: mipi-i3c-hci: Restart DMA ring correctly after dequeue abort
i3c: mipi-i3c-hci: Add missing TID field to no-op command descriptor
Al Viro (1):
unshare: fix unshare_fs() handling
Alan Stern (5):
USB: usbcore: Introduce usb_bulk_msg_killable()
USB: usbtmc: Use usb_bulk_msg_killable() with user-specified timeouts
USB: core: Limit the length of unkillable synchronous timeouts
USB: dummy-hcd: Fix locking/synchronization error
USB: dummy-hcd: Fix interrupt synchronization error
Alban Bedel (1):
can: mcp251x: fix deadlock in error path of mcp251x_open
Alex Deucher (1):
drm/radeon: apply state adjust rules to some additional HAINAN vairants
Alexander Popov (1):
wifi: virt_wifi: remove SET_NETDEV_DEV to avoid use-after-free
Alexei Starovoitov (1):
bpf: Fix regsafe() for pointers to packet
Ali Norouzi (1):
can: gw: fix OOB heap access in cgw_csum_crc8_rel()
Alok Tiwari (3):
i40e: fix src IP mask checks and memcpy argument names in cloud filter
octeontx2-af: devlink: fix NIX RAS reporter recovery condition
platform/olpc: olpc-xo175-ec: Fix overflow error message to print inlen
Alysa Liu (1):
drm/amdgpu: Fix use-after-free race in VM acquire
Amadeusz Sławiński (1):
ASoC: core: Do not call link_exit() on uninitialized rtd objects
Anas Iqbal (2):
net: dsa: bcm_sf2: fix missing clk_disable_unprepare() in error paths
Bluetooth: hci_ll: Fix firmware leak on error path
Andrea Mayer (1):
seg6: separate dst_cache for input and output paths in seg6 lwtunnel
Andrew Lunn (1):
net: phy: register phy led_triggers during probe to avoid AB-BA deadlock
Andrey Vatoropin (1):
fbcon: check return value of con2fb_acquire_newinfo()
Andrii Melnychenko (1):
netfilter: nft_ct: add seqadj extension for natted connections
Andy Shevchenko (2):
device property: Allow secondary lookup in fwnode_get_next_child_node()
regmap: Synchronize cache for the page selector
Anil Samal (1):
RDMA/irdma: Fix deadlock during netdev reset with active connections
Antoniu Miclaus (5):
iio: chemical: sps30_serial: fix buffer size in sps30_serial_read_meas()
iio: chemical: sps30_i2c: fix buffer size in sps30_i2c_read_meas()
iio: gyro: mpu3050-core: fix pm_runtime error handling
iio: gyro: mpu3050-i2c: fix pm_runtime error handling
iio: dac: ad5770r: fix error return in ad5770r_read_raw()
Ariel Silver (1):
media: dvb-net: fix OOB access in ULE extension header tables
Baokun Li (1):
ext4: fix iloc.bh leak in ext4_fc_replay_inode() error paths
Bart Van Assche (5):
scsi: ufs: core: Always initialize the UIC done completion
scsi: ata: Call scsi_done() directly
wifi: wlcore: Fix a locking bug
PM: runtime: Fix a race condition related to device removal
Input: synaptics-rmi4 - fix a locking bug in an error path
Ben Dooks (1):
ACPI: OSL: fix __iomem type on return from acpi_os_map_generic_address()
Ben Hutchings (1):
ip6_tunnel: Fix usage of skb_vlan_inet_prepare()
Benoît Sevens (1):
HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq
Berk Cem Goksel (1):
ALSA: caiaq: fix stack out-of-bounds read in init_card
Bjorn Andersson (1):
remoteproc: sysmon: Correct subsys_name_len type in QMI request
Borislav Petkov (AMD) (1):
x86/CPU: Fix FPDSS on Zen1
Brian Foster (1):
ext4: fix dirtyclusters double decrement on fs shutdown
Calvin Owens (1):
tracing: Fix trace_buf_size= cmdline parameter with sizes >= 2G
Casey Connolly (1):
ASoC: detect empty DMI strings
Cengiz Can (1):
nvmet-tcp: fix use-before-check of sg in bounds validation
Cezary Rojewski (2):
ASoC: core: Exit all links before removing their components
ASoC: Intel: catpt: Fix the device initialization
Chen Ni (2):
ASoC: amd: acp3x-rt5682-max9836: Add missing error check for clock acquisition
mtd: rawnand: cadence: Fix error check for dma_alloc_coherent() in cadence_nand_init()
Chintan Vankar (1):
net: ethernet: ti: am65-cpsw-nuss/cpsw-ale: Fix multicast entry handling in ALE table
Chris Spencer (1):
iio: chemical: bme680: Fix measurement wait duration calculation
Christian Eggers (3):
Bluetooth: LE L2CAP: Disconnect if received packet's SDU exceeds IMTU
Bluetooth: LE L2CAP: Disconnect if sum of payload sizes exceed SDU
Bluetooth: SMP: make SM/PER/KDU/BI-04-C happy
Christoffer Sandberg (2):
usb/core/quirks: Add Huawei ME906S-device to wakeup quirk
Input: i8042 - add TUXEDO InfinityBook Max 16 Gen10 AMD to i8042 quirk table
Christophe JAILLET (2):
i2c: fsi: Fix a potential leak in fsi_i2c_probe()
dmaengine: idxd: Remove usage of the deprecated ida_simple_xx() API
Christophe Leroy (CS GROUP) (1):
powerpc/uaccess: Fix inline assembly for clang build on PPC32
Chuck Lever (1):
RDMA/rw: Fall back to direct SGE on MR pool exhaustion
Claudiu Beznea (6):
phy: renesas: rcar-gen3-usb2: Fix role detection on unbind/bind
phy: renesas: rcar-gen3-usb2: Move IRQ request in probe
phy: renesas: rcar-gen3-usb2: Lock around hardware registers and driver data
phy: renesas: rcar-gen3-usb2: Assert PLL reset on PHY power off
dmaengine: sh: rz-dmac: Move CHCTRL updates under spinlock
dmaengine: sh: rz-dmac: Protect the driver specific lists
Damien Le Moal (1):
ata: libata-scsi: refactor ata_scsi_translate()
Daniel Hodges (1):
wifi: libertas: fix use-after-free in lbs_free_adapter()
Daniel Vetter (3):
fbcon: Use delayed work for cursor
fbcon: Extract fbcon_open/release helpers
fbcon: move more common code into fb_open()
Daniil Dulov (1):
wifi: cfg80211: cancel rfkill_block work in wiphy_unregister()
Danilo Krummrich (1):
sh: platform_early: remove pdev->driver_override check
Darrick J. Wong (1):
xfs: fix undersized l_iclog_roundoff values
Dave Airlie (1):
nouveau/dpcd: return EBUSY for aux xfer if the device is asleep
David Carlier (2):
netfilter: ctnetlink: use netlink policy range checks
net: altera-tse: fix skb leak on DMA mapping error in tse_start_xmit()
David Dull (1):
netfilter: x_tables: guard option walkers against 1-byte tail reads
David Hildenbrand (Red Hat) (4):
mm/hugetlb: fix hugetlb_pmd_shared()
mm/hugetlb: fix two comments related to huge_pmd_unshare()
mm/rmap: fix two comments related to huge_pmd_unshare()
mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather
David Howells (1):
rxrpc: Fix key/keyring checks in setsockopt(RXRPC_SECURITY_KEY/KEYRING)
David Lechner (1):
iio: light: vcnl4035: fix scan buffer on big-endian
David Thomson (1):
xen/acpi-processor: fix _CST detection using undersized evaluation buffer
Davide Caratti (1):
net/sched: ets: fix divide by zero in the offload path
Davidlohr Bueso (1):
futex: Clear stale exiting pointer in futex_lock_pi() retry path
Deepanshu Kartikey (3):
ext4: convert inline data to extents when truncate exceeds inline size
atm: lec: fix use-after-free in sock_def_readable()
comedi: dt2815: add hardware detection to prevent crash
Dexuan Cui (1):
net: mana: Improve the HWC error handling
Dipayaan Roy (1):
net: mana: fix use-after-free in mana_hwc_destroy_channel() by reordering teardown
Dmitry Baryshkov (2):
mfd: qcom-pm8xxx: switch away from using chained IRQ handlers
Bluetooth: qca: fix ROM version reading on WCN3998 chips
Dmitry Torokhov (1):
Input: uinput - take event lock when submitting FF request "event"
Eric Badger (1):
xprtrdma: Decrement re_receiving on the early exit paths
Eric Biggers (1):
lib/crypto: chacha: Zeroize permuted_state before it leaves scope
Eric Dumazet (6):
indirect_call_wrapper: do not reevaluate function pointer
l2tp: do not use sock_hold() in pppol2tp_session_get_sock()
af_key: validate families in pfkey_send_migrate()
ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach()
ip6_tunnel: clear skb2->cb[] in ip4ip6_err()
ipv6: avoid overflows in ip6_datagram_send_ctl()
Ernestas Kulik (1):
USB: serial: option: add MeiG Smart SRM825WN
Ethan Nelson-Moore (1):
net: arcnet: com20020-pci: fix support for 2.5Mbit cards
Ethan Tidmore (4):
iio: gyro: mpu3050: Fix incorrect free_irq() variable
iio: gyro: mpu3050: Fix irq resource leak
iio: gyro: mpu3050: Move iio_device_register() to correct location
iio: gyro: mpu3050: Fix out-of-sequence free_irq()
Fan Wu (2):
usb: renesas_usbhs: fix use-after-free in ISR during device removal
net: ethernet: arc: emac: quiesce interrupts before requesting IRQ
Fedor Pchelkin (5):
net: macb: fix use-after-free access to PTP clock
ksmbd: call ksmbd_vfs_kern_path_end_removing() on some error paths
net: macb: fix uninitialized rx_fs_lock
net: macb: fix clk handling on PCI glue driver removal
net: macb: properly unregister fixed rate clocks
Felix Gu (3):
mmc: mmci: Fix device_node reference leak in of_get_dml_pipe_index()
firmware: arm_scpi: Fix device_node reference leak in probe path
phy: ti: j721e-wiz: Fix device node reference leak in wiz_get_lane_phy_types()
Fernando Fernandez Mancera (2):
net: bridge: fix nd_tbl NULL dereference when IPv6 is disabled
net: vxlan: fix nd_tbl NULL dereference when IPv6 is disabled
Filipe Manana (2):
btrfs: abort transaction on failure to update root in the received subvol ioctl
btrfs: fix lost error when running device stats on multiple devices fs
Finn Thain (1):
mtd: Avoid boot crash in RedBoot partition table parser
Florian Westphal (11):
netfilter: ctnetlink: remove refcounting in expectation dumpers
netfilter: nf_tables: de-constify set commit ops function argument
netfilter: nft_set_pipapo: split gc into unlink and reclaim phase
netlink: introduce NLA_POLICY_MAX_BE
netfilter: nft_payload: reject out-of-range attributes via policy
netlink: introduce bigendian integer types
netlink: allow be16 and be32 types in all uint policy checks
netfilter: nfnetlink_log: account for netlink header size
netfilter: x_tables: ensure names are nul-terminated
netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr
netlink: add nla be16/32 types to minlen array
Francesco Lavra (1):
iio: imu: st_lsm6dsx: Set FIFO ODR for accelerometer and gyroscope only
Frank Li (1):
dt-bindings: auxdisplay: ht16k33: Use unevaluatedProperties to fix common property warning
Frederic Weisbecker (1):
net: Handle napi_schedule() calls from non-interrupt
Frej Drejhammar (1):
USB: serial: io_edgeport: add support for Blackbox IC135A
Frieder Schrempf (1):
regulator: pca9450: Make IRQ optional
Gabor Juhos (1):
usb: core: don't power off roothub PHYs if phy_set_mode() fails
Gal Pressman (1):
net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery
Greg Kroah-Hartman (16):
nfc: pn533: properly drop the usb interface reference on disconnect
net: usb: kaweth: validate USB endpoints
net: usb: kalmia: validate USB endpoints
net: usb: pegasus: validate USB endpoints
can: ems_usb: ems_usb_read_bulk_callback(): check the proper length of a message
can: ucan: Fix infinite loop from zero-length messages
can: usb: etas_es58x: correctly anchor the urb in the read bulk callback
HID: Add HID_CLAIMED_INPUT guards in raw_event callbacks missing them
usb: misc: uss720: properly clean up reference in uss720_probe()
staging: rtl8723bs: properly validate the data in rtw_get_ie_ex()
s390/syscalls: Add spectre boundary for syscall dispatch table
scsi: ses: Handle positive SCSI error from ses_recv_diag()
drm/ioc32: stop speculation on the drm_compat_ioctl path
xfrm_user: fix info leak in build_report()
net: rfkill: prevent unlimited numbers of rfkill events from being created
Linux 5.15.203
Guanghui Feng (1):
iommu/vt-d: Fix intel iommu iotlb sync hardlockup and retry
Guangshuo Li (1):
usb: ulpi: fix double free in ulpi_register_interface() error path
Guenter Roeck (2):
dpaa2-switch: Fix interrupt storm after receiving bad if_id in IRQ handler
wifi: wlcore: Return -ENOMEM instead of -EAGAIN if there is not enough headroom
Gui-Dong Han (1):
hwmon: (max16065) Use READ/WRITE_ONCE to avoid compiler optimization induced race
GuoHan Zhao (1):
xen/privcmd: unregister xenstore notifier on module exit
Günther Noack (2):
HID: asus: avoid memory leak in asus_report_fixup()
HID: magicmouse: avoid memory leak in magicmouse_report_fixup()
Hangbin Liu (1):
bonding: handle BOND_LINK_FAIL, BOND_LINK_BACK as valid link states
Hannes Reinecke (2):
ata: libata-scsi: drop DPRINTK calls for cdb translation
ata: libata: remove pointless VPRINTK() calls
Hans de Goede (5):
platform/x86: touchscreen_dmi: Add quirk for y-inverted Goodix touchscreen on SUPI S10
ACPICA: include/acpi/acpixf.h: Fix indentation
ACPICA: Allow address_space_handler Install and _REG execution as 2 separate steps
ACPI: EC: Fix EC address space handler unregistration
ACPI: EC: Fix ECDT probe ordering issues
Heitor Alves de Siqueira (1):
usb: usbtmc: Flush anchored URBs in usbtmc_release
Helen Koike (2):
Bluetooth: L2CAP: Fix null-ptr-deref on l2cap_sock_ready_cb
ext4: reject mount if bigalloc with s_first_data_block != 0
Helge Deller (2):
parisc: Increase initial mapping to 64 MB with KALLSYMS
parisc: Fix initial page table creation for boot
Hongyu Xie (1):
usb: cdns3: remove redundant if branch
Huacai Chen (1):
net: stmmac: dwmac-loongson: Set clk_csr_i to 100-150MHz
Hyunwoo Kim (7):
netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path
netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table()
netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct()
ksmbd: fix use-after-free of share_conf in compound request
Bluetooth: L2CAP: Validate PDU length before reading SDU length in l2cap_ecred_data_rcv()
Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold
Bluetooth: L2CAP: Fix ERTM re-init and zero pdu_len infinite loop
Ian Abbott (4):
comedi: Reinit dev->spinlock between attachments to low-level drivers
comedi: ni_atmio16d: Fix invalid clean-up after failed attach
comedi: me_daq: Fix potential overrun of firmware buffer
comedi: me4000: Fix potential overrun of firmware buffer
Ian Ray (2):
net: nfc: nci: Fix zero-length proprietary notifications
NFC: nxp-nci: allow GPIOs to sleep
Ihor Solodrai (1):
module: Fix kernel panic when a symbol st_shndx is out of bounds
Ilpo Järvinen (1):
serial: 8250: Add late synchronize_irq() to shutdown to handle DW UART BUSY
Ilya Dryomov (3):
libceph: reject preamble if control segment is empty
libceph: prevent potential out-of-bounds reads in process_message_header()
libceph: admit message frames only in CEPH_CON_S_OPEN state
Ioana Ciornei (1):
dpaa2-switch: do not clear any interrupts automatically
Ira Weiny (1):
nvdimm/bus: Fix potential use after free in asynchronous initialization
Isaac J. Manjarres (1):
dma-buf: Include ioctl.h in UAPI header
Ivan Barrera (1):
RDMA/irdma: Clean up unnecessary dereference of event->cm_node
J. Neuschäfer (1):
powerpc: 83xx: km83xx: Fix keymile vendor prefix
JP Hein (1):
USB: core: add NO_LPM quirk for Razer Kiyo Pro webcam
Jakub Kicinski (6):
ipv6: fix NULL pointer deref in ip6_rt_get_dev_rcu()
nfc: nci: free skb on nci_transceive early error paths
nfc: nci: clear NCI_DATA_EXCHANGE before calling completion callback
nfc: rawsock: cancel tx_work before socket teardown
nfc: nci: fix circular locking dependency in nci_close_device
netlink: hide validation union fields from kdoc
Jakub Staniszewski (1):
ice: fix retry for AQ command 0x06EE
Jan Kara (2):
ext4: always allocate blocks only from groups inode can use
ext4: make recently_deleted() properly work with lazy itable initialization
Jan Kiszka (1):
scsi: storvsc: Fix scheduling while atomic on PREEMPT_RT
Jane Chu (1):
mm/hugetlb: fix copy_hugetlb_page_range() to use ->pt_share_count
Jann Horn (1):
eventpoll: Fix integer overflow in ep_loop_check_proc()
Jason Gunthorpe (2):
IB/mthca: Add missed mthca_unmap_user_db() for mthca_create_srq()
RDMA/irdma: Fix kernel stack leak in irdma_create_user_ah()
Jean-Baptiste Maneyrol (1):
iio: imu: inv_icm42600: fix odr switch to the same value
Jeff Layton (1):
sunrpc: fix cache_request leak in cache_release
Jenny Guanni Qu (4):
netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop()
netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case
netfilter: xt_time: use unsigned int for monthday bit shift
netfilter: nf_conntrack_h323: check for zero length in DecodeQ931()
Jens Axboe (4):
media: dvb-core: fix wrong reinitialization of ringbuffer on reopen
io_uring/io-wq: check IO_WQ_BIT_EXIT inside work run loop
io_uring/tctx: work around xa_store() allocation error issue
io_uring/poll: correctly handle io_poll_add() return value on update
Jeongjun Park (3):
drm/exynos: vidi: use priv->vidi_dev for ctx lookup in vidi_connection_ioctl()
drm/exynos: vidi: fix to avoid directly dereferencing user pointer
drm/exynos: vidi: use ctx->lock to protect struct vidi_context member variables related to memory alloc/free
Jian Zhang (1):
net: ncsi: fix skb leak in error paths
Jiayuan Chen (7):
atm: lec: fix null-ptr-deref in lec_arp_clear_vccs
net: ipv6: fix panic when IPv4 route references loopback IPv6 nexthop
net/rose: fix NULL pointer dereference in rose_transmit_link on reconnect
net/smc: fix NULL dereference and UAF in smc_tcp_syn_recv_sock()
net: qrtr: replace qrtr_tx_flow radix_tree with xarray to fix memory leak
mptcp: fix slab-use-after-free in __inet_lookup_established
ext4: fix use-after-free in update_super_work when racing with umount
Jihed Chaibi (2):
ASoC: adau1372: Fix unchecked clk_prepare_enable() return value
ASoC: adau1372: Fix clock leak on PLL lock failure
Jimmy Hu (1):
usb: gadget: uvc: fix NULL pointer dereference during unbind race
Jinjiang Tu (1):
mm/huge_memory: fix folio isn't locked in softleaf_to_folio()
Jiucheng Xu (1):
erofs: add GFP_NOIO in the bio completion if needed
Johan Hovold (8):
memory: mtk-smi: fix device leak on larb probe
drm/tegra: dsi: fix device leak on probe
mfd: qcom-pm8xxx: Fix OF populate on driver rebind
mfd: omap-usb-host: Fix OF populate on driver rebind
clk: tegra: tegra124-emc: fix device leak on set_rate()
wifi: rt2x00usb: fix devres lifetime
mmc: vub300: fix NULL-deref on disconnect
i2c: cp2615: fix serial string NULL-deref at probe
Johannes Berg (2):
wifi: radiotap: reject radiotap with unknown bits
wifi: cfg80211: move scan done work to wiphy work
Johannes Thumshirn (1):
btrfs: don't take device_list_mutex when querying zone info
John Johansen (6):
apparmor: fix: limit the number of levels of policy namespaces
apparmor: Fix double free of ns_name in aa_replace_profiles()
apparmor: fix unprivileged local user can do privileged policy management
apparmor: fix differential encoding verification
apparmor: fix race on rawdata dereference
apparmor: fix race between freeing data and fs accessing it
Jonathan Cameron (1):
of: Add cleanup.h based auto release via __free(device_node) markings
Jonathan Teh (1):
platform/x86: thinkpad_acpi: Fix errors reading battery thresholds
Josef Bacik (1):
scsi: target: tcm_loop: Drain commands in target_reset handler
Josh Law (5):
lib/bootconfig: fix off-by-one in xbc_verify_tree() unclosed brace error
lib/bootconfig: fix snprintf truncation check in xbc_node_compose_key_after()
lib/bootconfig: check bounds before writing in __xbc_open_brace()
lib/bootconfig: check xbc_init_node() return in override path
tools/bootconfig: fix fd leak in load_xbc_file() on fstat failure
Josh Poimboeuf (1):
objtool: Fix Clang jump table detection
Juergen Gross (2):
xen/privcmd: restrict usage in unprivileged domU
xen/privcmd: add boot control for restricted usage in domU
Julien Stephan (1):
driver: iio: add missing checks on iio_info's callback access
Julius Lehmann (1):
HID: magicmouse: fix battery reporting for Apple Magic Trackpad 2
Jun Seo (1):
ALSA: usb-audio: Use correct version for UAC3 header validation
Juno Choi (1):
usb: dwc2: gadget: Fix spin_lock/unlock mismatch in dwc2_hsotg_udc_stop()
Junxiao Bi (1):
scsi: core: Fix refcount leak for tagset_refcnt
Justin Chen (2):
net: bcmgenet: increase WoL poll timeout
usb: ehci-brcm: fix sleep during atomic
Justin Stitt (1):
i2c: cp2615: replace deprecated strncpy with strscpy
Kalesh Singh (1):
mm/tracing: rss_stat: ensure curr is false from kthread context
Kamal Dasu (2):
mtd: rawnand: serialize lock/unlock against other NAND operations
mtd: rawnand: brcmnand: skip DMA during panic write
Keenan Dong (1):
Bluetooth: MGMT: validate LTK enc_size on load
Keith Busch (2):
nvme-pci: cap queue creation to used queues
nvme-pci: ensure we're polling a polled queue
Kent Gibson (1):
gpiolib: cdev: fix uninitialised kfifo
Kevin Hao (1):
net: macb: Move devm_{free,request}_irq() out of spin lock area
Kohei Enju (2):
bpf: Fix stack-out-of-bounds write in devmap
igc: fix missing update of skb->tail in igc_xmit_frame()
Koichiro Den (1):
net: sched: avoid qdisc_reset_all_tx_gt() vs dequeue race for lockless qdiscs
Konrad Dybcio (1):
thunderbolt: Fix property read in nhi_wake_supported()
Kuen-Han Tsai (3):
usb: gadget: f_subset: Fix unbalanced refcnt in geth_free
usb: gadget: f_rndis: Protect RNDIS options with mutex
usb: gadget: u_ether: Fix race between gether_disconnect and eth_stop
Kumar Kartikeya Dwivedi (1):
bpf: Release module BTF IDR before module unload
Kuninori Morimoto (1):
ASoC: soc-core: accept zero format at snd_soc_runtime_set_dai_fmt()
Kuniyuki Iwashima (1):
wifi: mac80211: Fix static_branch_dec() underflow for aql_disable.
Kurt Borja (1):
platform/x86: dell-wmi: Add audio/mic mute key codes
Lars Ellenberg (1):
drbd: fix "LOGIC BUG" in drbd_al_begin_io_nonblock()
Lee Jones (1):
HID: multitouch: Check to ensure report responses match the request
Leif Skunberg (1):
platform/x86: intel-hid: Enable 5-button array on ThinkPad X1 Fold 16 Gen 1
Li Chen (1):
ext4: publish jinode after initialization
Long Li (1):
net: mana: Ring doorbell at 4 CQ wraparounds
Luca Leonardo Scorcia (1):
pinctrl: mediatek: common: Fix probe failure for devices without EINT
Luiz Augusto von Dentz (2):
Bluetooth: HIDP: Fix possible UAF
Bluetooth: L2CAP: Fix accepting multiple L2CAP_ECRED_CONN_REQ
Luka Gejak (2):
staging: rtl8723bs: fix potential out-of-bounds read in rtw_restruct_wmm_ie
net: hsr: fix VLAN add unwind on slave errors
Lukas Johannes Möller (3):
Bluetooth: L2CAP: Fix type confusion in l2cap_ecred_reconf_rsp()
Bluetooth: L2CAP: Validate L2CAP_INFO_RSP payload length before access
netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp()
Lukas Schmid (1):
iio: potentiometer: mcp4131: fix double application of wiper shift
Luke Wang (1):
mmc: sdhci: fix timing selection for 1-bit bus width
Luo Haiyang (1):
tracing: Fix potential deadlock in cpu hotplug with osnoise
Luxiao Xu (1):
rxrpc: fix reference count leak in rxrpc_server_keyring()
Maciej Andrzejewski ICEYE (1):
serial: uartlite: fix PM runtime usage count underflow on probe
Maciej W. Rozycki (1):
MIPS: Fix the GCC version check for `__multi3' workaround
Manivannan Sadhasivam (1):
Revert "PCI: Enable ACS after configuring IOMMU for OF platforms"
Marc Buerg (1):
sysctl: fix uninitialized variable in proc_do_large_bitmap
Marc Kleine-Budde (4):
spi: spi-fsl-lpspi: fix teardown order issue (UAF)
can: gs_usb: gs_usb_receive_bulk_callback(): fix URB memory leak
can: gs_usb: gs_usb_receive_bulk_callback(): unanchor URL on usb_submit_urb() error
can: gs_usb: gs_usb_receive_bulk_callback(): fix error message
Marc Zyngier (2):
usb: cdc-acm: Restore CAP_BRK functionnality to CH343
irqchip/gic-v3-its: Limit number of per-device MSIs to the range the ITS supports
Marek Vasut (3):
dmaengine: xilinx: xilinx_dma: Fix dma_device directions
dmaengine: xilinx: xilinx_dma: Fix residue calculation for cyclic DMA
dmaengine: xilinx: xilinx_dma: Fix unmasked residue subtraction
Mark Brown (2):
ASoC: fsl_easrc: Fix event generation in fsl_easrc_iec958_set_reg()
ASoC: fsl_easrc: Fix event generation in fsl_easrc_iec958_put_bits()
Mark Harmstone (2):
btrfs: fix incorrect key offset in error message in check_dev_extent_item()
btrfs: fix super block offset in error message in btrfs_validate_super()
Martin Roukala (né Peres) (1):
serial: 8250_pci: add support for the AX99100
Martin Schiller (2):
net/x25: Fix potential double free of skb
net/x25: Fix overflow when accumulating packets
Massimiliano Pellizzer (5):
apparmor: validate DFA start states are in bounds in unpack_pdb
apparmor: fix memory leak in verify_header
apparmor: replace recursive profile removal with iterative approach
apparmor: fix side-effect bug in match_char() macro usage
apparmor: fix missing bounds check on DEFAULT table in verify_dfa()
Mathias Krause (1):
scsi: lpfc: Properly set WC for DPP mapping
Matt Johnston (1):
net: mctp: Don't access ifa_index when missing
Matt Vollrath (1):
e1000/e1000e: Fix leak in DMA error cleanup
Matthew Schwartz (1):
mmc: sdhci-pci-gli: fix GL9750 DMA write corruption
Matthieu Baerts (NGI0) (2):
mptcp: pm: avoid sending RM_ADDR over same subflow
Revert "mptcp: add needs_id for netlink appending addr"
Max Kellermann (1):
ceph: fix i_nlink underrun during async unlink
Maíra Canal (1):
pmdomain: bcm: bcm2835-power: Increase ASB control timeout
Mehul Rao (1):
tipc: fix divide-by-zero in tipc_sk_filter_connect()
Miao Li (1):
usb: quirks: add DELAY_INIT quirk for another Silicon Motion flash drive
Miaohe Lin (1):
mm/hugetlb: make detecting shared pte more reliable
Michael Zimmermann (1):
usb: gadget: f_hid: move list and spinlock inits from bind to alloc
Miguel Ojeda (1):
dma-mapping: add missing `inline` for `dma_free_attrs`
Mike Rapoport (Microsoft) (2):
x86/efi: defer freeing of boot services memory
x86/efi: efi_unmap_boot_services: fix calculation of ranges_to_free size
Mikhail Gavrilov (1):
Input: uinput - fix circular locking dependency with ff-core
Milos Nikic (1):
jbd2: gracefully abort on checkpointing state corruptions
Mohammad Heib (1):
ionic: fix persistent MAC address override on PF
Muhammad Alifa Ramdhan (1):
net/tls: fix use-after-free in -EBUSY error path of tls_do_encryption
Muhammad Hammad Ijaz (1):
net: mvpp2: guard flow control update with global_tx_fc in buffer switching
Namjae Jeon (5):
ksmbd: fix infinite loop caused by next_smb2_rcv_hdr_off reset in error paths
ksmbd: fix null pointer dereference error in generate_encryptionkey
ksmbd: fix potencial OOB in get_file_all_info() for compound requests
ksmbd: replace hardcoded hdr2_len with offsetof() in smb2_calc_max_out_buf_len()
ksmbd: Fix refcount leak when invalid session is found on session lookup
Natalie Vock (1):
drm/amd/display: Use GFP_ATOMIC in dc_create_stream_for_sink
Navaneeth K (1):
staging: rtl8723bs: fix out-of-bounds read in rtw_get_ie() parser
Nikola Z. Ivanov (1):
net: usb: aqc111: Do not perform PM inside suspend callback
Nikunj A Dadhania (1):
x86/cpu: Enable FSGSBASE early in cpu_init_exception_handling()
Norbert Szetei (1):
crypto: af-alg - fix NULL pointer dereference in scatterwalk
Nuno Sa (1):
iio: adc: ad7923: Fix buffer overflow for tx_buf and ring_xfer
Oleh Konko (3):
Bluetooth: SMP: derive legacy responder STK authentication from MITM state
Bluetooth: SMP: force responder MITM requirements before building the pairing response
tipc: fix bc_ackers underflow on duplicate GRP_ACK_MSG
Oleksij Rempel (3):
net: usb: lan78xx: fix silent drop of packets with checksum errors
net: usb: lan78xx: skip LTM configuration for LAN7850
iio: dac: ds4424: reject -128 RAW value
Oliver Hartkopp (2):
can: bcm: fix locking for bcm_op runtime updates
can: statistics: add missing atomic access in hot path
Oliver Neukum (4):
usb: yurex: fix race in probe
usb: class: cdc-wdm: fix reordering issue in read code path
usb: mdc800: handle signal and read racing
cdc-acm: new quirk for EPSON HMD
Olivier Sobrie (1):
mtd: rawnand: pl353: make sure optimal timings are applied
Ovidiu Panait (1):
net: stmmac: Fix error handling in VLAN add and delete paths
Pablo Neira Ayuso (5):
netfilter: nft_ct: drop pending enqueued packets on removal
netfilter: xt_CT: drop pending enqueued packets on template removal
netfilter: flowtable: strictly check for maximum number of actions
netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP
netfilter: nf_tables: reject immediate NF_QUEUE verdict
Paolo Abeni (2):
selftests: mptcp: more stable simult_flows tests
ipv6: prevent possible UaF in addrconf_permanent_addr()
Paolo Valerio (1):
net: macb: use the current queue number for stats
Paul Chaignon (1):
bpf: Forget ranges when refining tnum after JSET
Paul Walmsley (1):
riscv: kgdb: fix several debug register assignment bugs
Peng Fan (1):
regulator: pca9450: Correct interrupt type
Penghe Geng (1):
mmc: core: Avoid bitfield RMW for claim/retune flags
Pengpeng Hou (4):
Bluetooth: btusb: clamp SCO altsetting table indices
NFC: pn533: bound the UART receive buffer
nfc: pn533: allocate rx skb before consuming bytes
net: qualcomm: qca_uart: report the consumed byte on RX skb allocation failure
Peter Metz (1):
platform/x86: intel-hid: Add Dell 14 Plus 2-in-1 to dmi_vgbs_allow_list
Peter Wang (1):
scsi: ufs: core: Move link recovery for hibern8 exit failure to wl_resume
Phillip Lougher (1):
Squashfs: check metadata block offset is within range
Piotr Mazek (1):
ACPI: PM: Save NVS memory on Lenovo G70-35
Qi Tang (4):
net/smc: fix double-free of smc_spd_priv when tee() duplicates splice pipe buffer
netfilter: nf_conntrack_helper: pass helper to expect cleanup
netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent
bpf: reject direct access to nullable PTR_TO_BUF pointers
Qingye Zhao (1):
cgroup: fix race between task migration and iteration
Quanmin Yan (1):
fbcon: Set fb_display[i]->mode to NULL when the mode is released
Radhey Shyam Pandey (1):
dmaengine: xilinx_dma: Program interrupt delay timeout
Rafael J. Wysocki (3):
sched: idle: Make skipping governor callbacks more consistent
sched: idle: Consolidate the handling of two special cases
ACPI: processor: Fix previous acpi_processor_errata_piix4() fix
Rahul Bukte (1):
drm/i915/gt: Check set_default_submission() before deferencing
Raju Rangoju (1):
amd-xgbe: fix sleep while atomic on suspend/resume
Randy Dunlap (1):
time: add kernel-doc in time.c
Ranjan Kumar (1):
scsi: mpi3mr: Add NULL checks when resetting request and reply queues
Raphael Zimmer (2):
libceph: Fix potential out-of-bounds access in ceph_handle_auth_reply()
libceph: Use u32 for non-negative values in ceph_monmap_decode()
Raul E Rangel (1):
serial: 8250: Fix TX deadlock when using DMA
Ren Wei (1):
netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check()
Ricardo Ribalda (1):
media: uvcvideo: Use heuristic to find stream entity
Richard Genoud (1):
soc: fsl: qbman: fix race condition in qman_destroy_fq
Romain Sioen (1):
HID: mcp2221: cancel last I2C command on read error
Ruide Cao (1):
batman-adv: reject oversized global TT response buffers
Sabrina Dubroca (3):
xfrm: call xdo_dev_state_delete during state update
esp: fix skb leak with espintcp and async crypto
rtnetlink: count IFLA_INFO_SLAVE_KIND in if_nlmsg_size
Saeed Mahameed (1):
net/mlx5: Avoid "No data available" when FW version queries fail
Samasth Norway Ananda (1):
drm/i915/gmbus: fix spurious timeout on 512-byte burst reads
Sanman Pradhan (7):
hwmon: (pmbus/q54sj108a2) fix stack overflow in debugfs read
hwmon: (pmbus/isl68137) Fix unchecked return value and use sysfs_emit()
hwmon: (adm1177) fix sysfs ABI violation and current unit conversion
hwmon: (pxe1610) Check return value of page-select write in probe
hwmon: (tps53679) Fix device ID comparison and printing in tps53676_identify()
hwmon: (occ) Fix missing newline in occ_show_extended()
hwmon: (occ) Fix division by zero in occ_show_power_1()
Sasha Levin (1):
Revert "arm64: dts: qcom: sdm845-oneplus: Mark l14a regulator as boot-on"
Sean Christopherson (1):
KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE
Sean Heelan (1):
ksmbd: Fix dangling pointer in krb_authenticate
Sebastian Brzezinka (1):
drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat
Sebastian Urban (1):
usb: gadget: dummy_hcd: fix premature URB completion when ZLP follows partial transfer
Shashank Balaji (1):
x86/apic: Disable x2apic on resume if the kernel expects so
Shawn Guo (2):
arm64: dts: hisilicon: poplar: Correct PCIe reset GPIO polarity
arm64: dts: hisilicon: hi3798cv200: Add missing dma-ranges
Shuangpeng Bai (1):
serial: caif: hold tty->link reference in ldisc_open and ser_release
Shuhao Fu (1):
smb: client: Fix refcount leak for cifs_sb_tlink
Sofia Schneider (1):
ACPI: OSI: Add DMI quirk for Acer Aspire One D255
Steffen Klassert (1):
xfrm: Fix the usage of skb->sk
Steven Rostedt (1):
time/jiffies: Mark jiffies_64_to_clock_t() notrace
Sungwoo Kim (1):
nvme-pci: Fix slab-out-of-bounds in nvme_dbbuf_set
Suraj Gupta (1):
net: xilinx: axienet: Correct BD length masks to match AXIDMA IP spec
Sven Eckelmann (1):
batman-adv: Avoid double-rtnl_lock ELP metric worker
Taegu Ha (1):
usb: gadget: f_uac1_legacy: validate control request size
Takashi Iwai (7):
ALSA: usb-audio: Cap the packet size pre-calculations
ALSA: usb-audio: Use inclusive terms
ALSA: hda/conexant: Add quirk for HP ZBook Studio G4
ALSA: hda/conexant: Fix headphone jack handling on Acer Swift SF314
ALSA: usb-audio: Avoid implicit feedback mode on DIYINHK USB Audio 2.0
ALSA: usb-audio: Check max frame size for implicit feedback mode, too
ALSA: ctxfi: Fix missing SPDIFI1 index handling
Tatyana Nikolova (4):
RDMA/irdma: Update ibqp state to error if QP is already in error state
RDMA/irdma: Remove a NOP wait_event() in irdma_modify_qp_roce()
RDMA/irdma: Remove reset check from irdma_modify_qp_to_err()
RDMA/irdma: Return EINVAL for invalid arp index error
Thadeu Lima de Souza Cascardo (1):
media: uvcvideo: Mark invalid entities with id UVC_INVALID_ENTITY_ID
Theodore Ts'o (1):
ext4: always drain queued discard work in ext4_mb_release()
Thomas Bogendoerfer (1):
tg3: Fix race for querying speed/duplex
Thomas Fourier (1):
wifi: brcmsmac: Fix dma_free_coherent() size
Thomas Richard (TI) (1):
usb: cdns3: fix role switching during resume
Thomas Weißschuh (1):
ARM: clean up the memset64() C wrapper
Thomas Zimmermann (1):
drm/ast: dp501: Fix initialization of SCU2C
Thorsten Blum (2):
platform/x86: dell-wmi-sysman: Don't hex dump plaintext password data
smb: client: Don't log plaintext credentials in cifs_set_cifscreds
Théo Lebrun (1):
usb: cdns3: call cdns_power_is_lost() only once in cdns_resume()
Toke Høiland-Jørgensen (1):
net: openvswitch: Avoid releasing netdev before teardown completes
Tomas Henzl (1):
scsi: ses: Fix devices attaching to different hosts
Tomi Valkeinen (1):
dmaengine: xilinx_dma: Fix reset related timeout with two-channel AXIDMA
Tuan Do (1):
netfilter: nft_ct: fix use-after-free in timeout object destroy
Tyllis Xu (2):
scsi: ibmvfc: Fix OOB access in ibmvfc_discover_targets_done()
net: stmmac: fix integer underflow in chain mode
Tzung-Bi Shih (1):
remoteproc: mediatek: Unprepare SCP clock during system suspend
Uwe Kleine-König (3):
memory: mtk-smi: Convert to platform remove callback returning void
mfd: qcom-pm8xxx: Convert to platform remove callback returning void
mfd: omap-usb-host: Convert to platform remove callback returning void
Uzair Mughal (1):
ALSA: hda/realtek: Add headset jack quirk for Thinkpad X390
Vahagn Vardanian (1):
wifi: mac80211: fix NULL pointer dereference in mesh_rx_csa_frame()
Valentin Spreckels (1):
net: usb: r8152: add TRENDnet TUC-ET2G
Vasily Gorbik (1):
s390/barrier: Make array_index_mask_nospec() __always_inline
Victor Nogueira (1):
net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks
Vinicius Costa Gomes (1):
dmaengine: idxd: Fix freeing the allocated ida too late
Viresh Kumar (1):
cpufreq: conservative: Reset requested_freq on limits change
Vladimir Oltean (4):
net: dpaa2: replace dpaa2_mac_is_type_fixed() with dpaa2_mac_is_type_phy()
net: dpaa2-switch: assign port_priv->mac after dpaa2_mac_connect() call
net: dpaa2-switch replace direct MAC access with dpaa2_switch_port_has_mac()
net: dpaa2-switch: serialize changes to priv->mac with a mutex
Wang Qing (1):
ARM: OMAP2+: add missing of_node_put before break and return
Wanquan Zhong (1):
USB: serial: option: add support for Rolling Wireless RW135R-GL
Wei Fang (1):
net: enetc: fix the output issue of 'ethtool --show-ring'
Weiming Shi (6):
net/sched: teql: fix NULL pointer dereference in iptunnel_xmit on TEQL slave xmit
nfnetlink_osf: validate individual option lengths in fingerprints
icmp: fix NULL pointer dereference in icmp_tag_validation()
netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD
netfilter: nf_conntrack_sip: fix use of uninitialized rtp_addr in process_sdp
rds: ib: reject FRMR registration before IB connection is established
Wen Gu (2):
net/smc: Only save the original clcsock callback functions
net/smc: Fix slab-out-of-bounds issue in fallback
Wentao Liang (1):
ARM: omap2: Fix reference count leaks in omap_control_init()
Wenyuan Li (1):
can: hi311x: hi3110_open(): add check for hi3110_power_enable() return value
Xiang Mei (6):
wifi: mac80211: fix NULL deref in mesh_matches_local()
udp_tunnel: fix NULL deref caused by udp_sock_create6 when CONFIG_IPV6=n
net: bonding: fix NULL deref in bond_debug_rlb_hash_show
net/sched: sch_hfsc: fix divide-by-zero in rtsc_min()
net/sched: cls_fw: fix NULL pointer dereference on shared blocks
net/sched: cls_flow: fix NULL pointer dereference on shared blocks
Yang Yang (5):
batman-adv: avoid OGM aggregation when skb tailroom is insufficient
openvswitch: validate MPLS set/set_masked payload length
bridge: br_nd_send: linearize skb before parsing ND options
bridge: br_nd_send: validate ND option lengths
vxlan: validate ND option lengths in vxlan_na_create
Yasuaki Torimaru (1):
wifi: wilc1000: fix u8 overflow in SSID scan buffer size calculation
Ye Bin (1):
ext4: avoid allocate block from corrupted group in ext4_mb_find_by_goal()
Yifan Wu (1):
netfilter: ipset: drop logically empty buckets in mtype_del
Yihang Li (1):
scsi: scsi_transport_sas: Fix the maximum channel scanning issue
Yochai Eisenrich (3):
net: fix fanout UAF in packet_release() via NETDEV_UP race
net: ipv6: ndisc: fix ndisc_ra_useropt to initialize nduseropt_padX fields to zero to prevent an info-leak
net: sched: cls_api: fix tc_chain_fill_node to initialize tcm_info to zero to prevent an info-leak
Yongchao Wu (2):
usb: cdns3: gadget: fix NULL pointer dereference in ep_queue
usb: cdns3: gadget: fix state inconsistency on gadget init failure
Yuan Tan (1):
netfilter: xt_IDLETIMER: reject rev0 reuse of ALARM timer labels
Yuchan Nam (1):
media: mc, v4l2: serialize REINIT and REQBUFS with req_queue_mutex
Yufan Chen (1):
net: ftgmac100: fix ring allocation unwind on open failure
Yuto Ohnuki (2):
xfs: stop reclaim before pushing AIL during unmount
xfs: save ailp before dropping the AIL lock in push callbacks
Zhan Xusheng (1):
alarmtimer: Fix argument order in alarm_timer_forward()
Zhang Yi (2):
ext4: don't set EXT4_GET_BLOCKS_CONVERT when splitting before submitting I/O
ext4: drop extent cache when splitting extent fails
ZhengYuan Huang (2):
btrfs: tree-checker: fix misleading root drop_level error message
btrfs: reject root items with drop_progress and zero drop_level
Zhengchuan Liang (1):
net: ipv6: flowlabel: defer exclusive option free until RCU teardown
Zilin Guan (1):
usb: xhci: Fix memory leak in xhci_disable_slot()
Ziyi Guo (1):
usb: image: mdc800: kill download URB on timeout
Zoltan Illes (1):
Input: xpad - add support for Razer Wolverine V3 Pro
Zqiang (1):
ext4: fix the might_sleep() warnings in kvfree()
matteo.cotifava (2):
ASoC: soc-core: drop delayed_work_pending() check before flush
ASoC: soc-core: flush delayed work before removing DAIs and widgets
xietangxin (1):
virtio_net: Fix UAF on dst_ops when IFF_XMIT_DST_RELEASE is cleared and napi_tx is false