[GIT PULL] IPMI bug fixes for 7.3

[Corey Minyard]

The following changes since commit 4edcdefd4083ae04b1a5656f4be6cd83ae919ef4:

  Merge tag 'bpf-fixes' of git://git.kernel.org/pub/scm/linux/kernel/git/bpf/bpf (2026-06-25 14:09:26 -0700)

are available in the Git repository at:

  https://github.com/cminyard/linux-ipmi.git tags/for-linus-7.3-1

for you to fetch changes up to 05ec76cfbce653e07cec19b9b8b20e33449d5d87:

  ipmi: Fix use-after-free of cmd_rcvr in _ipmi_destroy_user() (2026-08-25 18:55:02 -0500)

----------------------------------------------------------------
ipmi: Fix some minor issues, add async init

Several cleanup on error fixes and a missing RCU wait and proper
validation on a received message in one place.

The biggest change is the initialization of the driver can be done
asynchronously on a work queue.  That saves significant boot time.

----------------------------------------------------------------
Corey Minyard (1):
      ipmi:msghandler: Cancel work cleanly on an error

Michail Tatas (1):
      ipmi: Fix leak in __ipmi_bmc_register

Michal Clapinski (1):
      ipmi:si: Add async init to ipmi_si

Pawel Zalewski (The Capable Hub) (1):
      char: ipmi: use named initializers for acpi_device_id

Seiji Nishikawa (1):
      ipmi: si: Fix NULL pointer dereference after failed registration

Yifei Gao (1):
      ipmi: Fix use-after-free of cmd_rcvr in _ipmi_destroy_user()

Yousef Alhouseen (1):
      ipmi: ipmb: validate write message length

Yuho Choi (1):
      ipmi: Remove all sysfs files on registration failure

 drivers/char/ipmi/Kconfig            |  9 ++++
 drivers/char/ipmi/ipmb_dev_int.c     |  9 ++--
 drivers/char/ipmi/ipmi_msghandler.c  |  5 +++
 drivers/char/ipmi/ipmi_si_intf.c     | 79 ++++++++++++++++++++++++++++--------
 drivers/char/ipmi/ipmi_si_platform.c |  4 +-
 drivers/char/ipmi/ipmi_ssif.c        |  4 +-
 6 files changed, 86 insertions(+), 24 deletions(-)