Re: [PATCH v2 00/27] mfd: Assorted resource lifetime, teardown, and error-handling fixes

[Lee Jones]

On Tue, 27 Oct 2026 09:30:29 +0000, Lee Jones wrote:
> These issues were reported by Sashiko.
> 
> This series addresses a collection of resource lifetime, teardown
> ordering, error-handling, and bounds-checking bugs across several MFD
> drivers.
> 
> v1 => v2:
>  - Collected Acked-by, Reviewed-by, and Tested-by tags from the list
>  - Dropped "mfd: cgbc: Zero-initialise version buffer in
>    cgbc_get_version()" in favour of Thomas Richard's upcoming central
>    cgbc_command() validation series
>  - Restored Fixes: tags (without Cc: stable@xxxxxxxxxxxxxxx) on the four
>    non-Stable MFD cell stack-pointer clean-ups (ls2kbmc, bd96801,
>    ti_am335x_tscadc, and db8500-prcmu)
> 
> [...]

Applied, thanks!

[01/27] mfd: nct6694: Allocate USB DMA buffers with kzalloc_obj()
        commit: 962b44ae8126d8781ec26fc955a1fea5e2e1b78d
[02/27] mfd: ls2kbmc: Unregister GPIO GSI via devm_add_action_or_reset()
        commit: 6f1219f4275efd1e93bf5e7c96fa672c2be7b1c5
[03/27] mfd: ls2kbmc: Cancel reset work on teardown via devm_work_autocancel()
        commit: 4ed5d8d1418f1d787687d18b1adaecde323494cb
[04/27] mfd: ls2kbmc: Allocate simplefb platform_data on the heap
        commit: 7e6d7bd25e0c0f47cdcaac7b3546be3879acbb74
[05/27] mfd: bd96801: Allocate watchdog IRQ resource on the heap
        commit: c345011f0780b5924c9a2c7fc6a17ac00f6f2e8c
[06/27] mfd: ti_am335x_tscadc: Retrieve parent driver data via dev_get_drvdata()
        commit: 3d459ad2804581237bc23ad7c4d6b2accab63a1f
[07/27] mfd: db8500-prcmu: Make AB8500 cell and IRQ resource static
        commit: 512e96d26fef42f68d8aa7265b38ccb87f970a59
[08/27] mfd: nct6694: Do not resubmit interrupt URB on endpoint stall (-EPIPE)
        commit: 0b80f3fc196088829b020f23a324d4a7ba09a513
[09/27] mfd: ioc3: Request parent IRQ via request_irq() and free before domain removal
        commit: 7437e0842f5ade793e35e907b061407bf9167c08
[10/27] mfd: intel-lpss: Remove registered MFD child devices on probe failure
        commit: 55746e2587c6b69b322c0faa16d994397d35a639
[11/27] mfd: max8907: Manage power-off handler via devm_register_sys_off_handler()
        commit: c80daea8faed7d60467b5d2fdcb51b565768035f
[12/27] mfd: twl-core: Clear pm_power_off callback in twl_remove()
        commit: e1ef39e0adf2c344f05e0848ae22d2626300c6c9
[13/27] mfd: twl-core: Clear twl_priv pointer on teardown and probe failure
        (no commit info)
[14/27] mfd: loongson-se: Check return value of dma_set_mask_and_coherent()
        commit: ba2a6579f3c86db76dbd1bed3017267c140ba149
[15/27] mfd: loongson-se: Zero-initialise controller command structures
        commit: 781e5a3f2b0505163d97231e0be94349a0fb5b43
[16/27] mfd: loongson-se: Reinitialise completions and wait uninterruptibly for commands
        commit: 4ff8867e3fe3d70cf491625b431b6e6031f3dea7
[17/27] mfd: loongson-se: Zero-allocate driver data and initialise engine completions in probe
        commit: 5310684a8d3aa2837dcbae87b0297fe1ac7db598
[18/27] mfd: loongson-se: Prevent out-of-bounds engine access in se_irq_handler()
        commit: 28c94eeef56571ac1532a4df90a962654959802a
[19/27] mfd: loongson-se: Stop controller and mask interrupts on teardown and shutdown
        commit: c49c190dd05861286457b70357037ffd22896662
[20/27] mfd: loongson-se: Validate engine ID, DMA buffer size, and IRQ registration
        commit: ffedf030b26988c036341f2f3ed5153f8fdd7c87
[21/27] mfd: abx500-core: Unregister device ops on devm release
        commit: c4f3a69260795c48b759ac5341130edaaeeccf89
[22/27] mfd: ab8500-core: Register sysfs attribute groups via devm_device_add_group()
        commit: 42b533eb84f75015a60f5e135ae34cb621ac8f14
[23/27] mfd: tps65217: Manage IRQ domain teardown via devres
        (no commit info)
[24/27] mfd: mt6397: Manage IRQ domain lifecycle with devres
        commit: af087513b4455617454945783b24143af217e78a
[25/27] mfd: mt6397: Unregister PM notifier on probe failure and unbind
        commit: c0b211ae3636084d9fb45603c2adb328ef969dc7
[26/27] i2c: cgbc: Propagate hardware errors when polling read status
        (no commit info)
[27/27] mfd: ti_am335x_tscadc: Remove redundant ti_tscadc_dev_get() helper
        commit: c92739a23a80f5f0a7c6f3c10aa792102d252ac4

--
Lee Jones [李琼斯]