UPDATE: 6.18.40#1329
Conversation
|
openQArun |
OpenQA test summaryComplete test suite and dependencies: https://openqa.qubes-os.org/tests/overview?distri=qubesos&version=4.3&build=202607242336-devel&flavor=kernel Test run included the following: Upload failures
New failures, excluding unstableCompared to: https://openqa.qubes-os.org/tests/overview?distri=qubesos&version=4.3&build=202605011353-devel&flavor=kernel
Failed tests19 failures
Fixed failuresCompared to: https://openqa.qubes-os.org/tests/175932#dependencies 26 fixed
Unstable testsDetails
Performance TestsPerformance degradation:No issues Remaining performance tests:32 tests
|
3 participants
Update to 6.18.40
Details
Changes since previous version:
gregkh/linux@501543207378 bpf, arm64: Reject out-of-range B.cond targets
gregkh/linux@7c702bb4f8d8 nfsd: update mtime/ctime on CLONE in presense of delegated attributes
gregkh/linux@6f88ca186a98 nfsd: update mtime/ctime on COPY in presence of delegated attributes
gregkh/linux@8dee7c278f1c nfsd: release layout stid on setlease failure
gregkh/linux@3603500c868a rust: str: use the "kernel vertical" imports style
gregkh/linux@3436a7dd067c rust: str: clean unused import for Rust >= 1.98
gregkh/linux@60d696a037ee userfaultfd: gate must_wait writability check on pte_present()
gregkh/linux@9c86a1f930bb device property: initialize the remaining fields of fwnode_handle in fwnode_init()
gregkh/linux@5a4d3968cf82 f2fs: remove non-uptodate folio from the page cache in move_data_block
gregkh/linux@a499f77c0605 f2fs: atomic: fix UAF issue on f2fs_inode_info.atomic_inode
gregkh/linux@4ce2d52f680c f2fs: bound i_inline_xattr_size for non-inline-xattr inodes
gregkh/linux@998536c96b6a f2fs: fix potential deadlock in f2fs_balance_fs()
gregkh/linux@89479a27fa4e f2fs: fix potential deadlock in gc_merge path of f2fs_balance_fs()
gregkh/linux@ec9f79c8d5b2 f2fs: fix listxattr handling of corrupted xattr entries
gregkh/linux@599d7d82eeec f2fs: use memalloc_retry_wait() as much as possible
gregkh/linux@8dbc4c568682 f2fs: introduce f2fs_schedule_timeout()
gregkh/linux@ed87e57558dc f2fs: optimize trace_f2fs_write_checkpoint with enums
gregkh/linux@3f42fbd3c891 f2fs: detect more inconsistent cases in sanity_check_node_footer()
gregkh/linux@406c28af7512 f2fs: fix to do sanity check on f2fs_get_node_folio_ra()
gregkh/linux@076b1aa65f77 fbdev: fbcon: fix out-of-bounds read in err_out of fbcon_do_set_font()
gregkh/linux@c4b70c1512b8 net/sched: dualpi2: fix GSO backlog accounting
gregkh/linux@05e48af3bf58 nfsd: move name lookup out of nfsd4_list_rec_dir()
gregkh/linux@2539f67b7546 nfsd: change nfs4_client_to_reclaim() to allocate data
gregkh/linux@1c2672781b1b mm/khugepaged: write all dirty file folios when collapsing
gregkh/linux@2dca62902eb3 slab: Introduce kmalloc_flex() and family
gregkh/linux@50c26b461b8e add default_gfp() helper macro and use it in the new alloc_obj() helpers
gregkh/linux@1776f29327a1 default_gfp(): avoid using the "newfangled" VA_OPT trick
gregkh/linux@47e4c6e06e78 slab: recognize @gfp parameter as optional in kernel-doc
gregkh/linux@9baa2833e6bc perf trace beauty fcntl: Fix build with older kernel headers
gregkh/linux@0d0187a46b16 KVM: x86: Move update_cr8_intercept() to lapic.c
gregkh/linux@3dcfb04dd43b KVM: VMX: Grab vmcs12 on CR8 interception update iff vCPU is in guest mode
gregkh/linux@ff9c4c642888 KVM: x86: Unconditionally recompute CR8 intercept on PPR update
gregkh/linux@f29dc6132d49 ACPI: CPPC: Suppress UBSAN warning caused by field misuse
gregkh/linux@452945662fd8 ACPI: NFIT: core: Fix possible NULL pointer dereference
gregkh/linux@86df6499dfd2 platform/x86: intel-hid: Protect ACPI notify handler against recursion
gregkh/linux@30d5d4eef35a LoongArch: Add PIO for early access before ACPI PCI root register
gregkh/linux@c1dd0b107100 rust: cpufreq: clean new
clippy::map_or_identitylint for Rust 1.98.0gregkh/linux@e7636f26f770 rust: block: fix GenDisk cleanup paths
gregkh/linux@70fe1ac8647b rust: doctest: fix incorrect pattern in replacement
gregkh/linux@1cc8f512cd90 rust: Kbuild: set frame-pointer llvm module flag for CONFIG_FRAME_POINTER
gregkh/linux@94396fd93226 futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock""
gregkh/linux@a2d5d3ee7b6e perf/core: Detach event groups during remove_on_exec
gregkh/linux@20133754d46f rust: kasan: KASAN+RUST requires clang
gregkh/linux@85f8b440a09b fscrypt: Fix key setup in edge case with multiple data unit sizes
gregkh/linux@9d1dc507b99c fscrypt: Replace mk_users keyring with simple list
gregkh/linux@e01e7814b422 usb: gadget: function: rndis: add length check to response query
gregkh/linux@7515a6d4a9e9 usb: gadget: function: rndis: add length check for header
gregkh/linux@3e766526827a iio: accel: bmc150: clamp the device-reported FIFO frame count
gregkh/linux@6293211d1426 iio: accel: kxsd9: fix runtime PM imbalance on write_raw() error
gregkh/linux@e6ade81631d7 iio: adc: ad7380: select REGMAP
gregkh/linux@24a9514b606e iio: adc: ad7768-1: Select GPIOLIB
gregkh/linux@46e93fcbe7c2 iio: adc: ad7779: add missing 'select IIO_TRIGGERED_BUFFER' to Kconfig
gregkh/linux@3394e0b33284 iio: adc: ad_sigma_delta: fix clear_pending_event for registerless devices
gregkh/linux@c313bb7c3885 iio: adc: ad_sigma_delta: fix CS held asserted and state leaks
gregkh/linux@9e2e8b8cdfd3 iio: adc: lpc32xx: Initialize completion before requesting IRQ
gregkh/linux@bbfebae473ac iio: adc: spear: Initialize completion before requesting IRQ
gregkh/linux@ffb2195921c3 iio: adc: ti-ads1119: fix PM reference leak in buffer preenable
gregkh/linux@0f30e68dd6c1 iio: adc: ti-ads124s08: Return reset GPIO lookup errors
gregkh/linux@c28835b8618e iio: backend: fix uninitialized data in debugfs
gregkh/linux@82accdd57404 iio: chemical: scd30: Cleanup initializations and fix sign-extension bug
gregkh/linux@b947bde73461 iio: common: st_sensors: honour channel endianness in read_axis_data
gregkh/linux@e166a8cfb28a iio: core: fix uninitialized data in debugfs
gregkh/linux@2358da87315d iio: dac: ad3552r-hs: fix uninitialized data ni ad3552r_hs_write_data_source()
gregkh/linux@9edefd4c56be iio: event: Fix event FIFO reset race
gregkh/linux@7bbf02b63961 iio: gyro: bmg160: bail out when bandwidth/filter is not in table
gregkh/linux@001527e2382e iio: gyro: bmg160: wait full startup time after mode change at probe
gregkh/linux@bdafd53ae671 iio: imu: adis: add IRQF_NO_THREAD to non-FIFO trigger IRQ
gregkh/linux@052281922828 iio: imu: bmi160: add IRQF_NO_THREAD to data-ready trigger IRQ
gregkh/linux@34656a59322e iio: imu: inv_icm42600: fix timestamp clock period by using lower value
gregkh/linux@76e12a71ac05 iio: imu: inv_icm42600: fix timestamping by limiting FIFO reading
gregkh/linux@482b24660ec3 iio: imu: st_lsm6dsx: deselect shub page before reading whoami
gregkh/linux@6afb69bb969e iio: light: al3000a: add missing REGMAP_I2C to Kconfig
gregkh/linux@9fb4ff07d97e iio: light: al3010: add missing REGMAP_I2C to Kconfig
gregkh/linux@cd278561640c iio: light: al3010: fix incorrect scale for the highest gain range
gregkh/linux@a00d471cf358 iio: light: al3010: read both ALS ADC registers again
gregkh/linux@a1dafc918d79 iio: light: al3320a: add missing REGMAP_I2C to Kconfig
gregkh/linux@a60bf629a760 iio: light: al3320a: read both ALS ADC registers again
gregkh/linux@0c655d067ac6 iio: light: gp2ap002: fix runtime PM leak on read error
gregkh/linux@9d421c2827ea iio: light: opt3001: fix missing state reset on timeout
gregkh/linux@ef6c2a521454 iio: light: tsl2591: return actual error from probe IRQ failure
gregkh/linux@0975e013179d iio: light: veml6030: fix channel type when pushing events
gregkh/linux@f829d6c32f31 iio: magnetometer: ak8975: Add missed pm_runtime_put_autosuspend() call
gregkh/linux@e2d5b9673bf7 iio: pressure: bmp280: zero-init bmp580 trigger handler buffer
gregkh/linux@b3f1af4ba8e9 iio: pressure: mpl115: fix runtime PM leak on read error
gregkh/linux@c6ca87c7bbb3 iio: proximity: vl53l0x: notify trigger and clear IRQ on error paths
gregkh/linux@7d4d60f7c054 iio: resolver: ad2s1210: notify trigger and clear state on fault read error
gregkh/linux@b50344ab202f iio: temperature: Build mlx90635 with CONFIG_MLX90635
gregkh/linux@e16258913be6 iio: temperature: ltc2983: Fix n_wires default bypassing rotation check
gregkh/linux@62a0d75bedd4 iio: temperature: ltc2983: Fix reinit_completion() called after conversion start
gregkh/linux@a4f8491da956 iio: temperature: tmp006: use devm_iio_trigger_register
gregkh/linux@c071df05bcda ALSA: usx2y: us144mkii: fix work UAF on disconnect
gregkh/linux@df0fe53a7104 ALSA: virtio: Add missing 384 kHz PCM rate mapping
gregkh/linux@5da9742de22d ALSA: virtio: Validate control metadata from the device
gregkh/linux@f6538a318947 ALSA: ymfpci: check snd_ctl_new1() return value
gregkh/linux@fd786466889e ALSA: aoa: check snd_ctl_new1() return value
gregkh/linux@a5fd3122283b ALSA: caiaq: fix out-of-bounds read in the Traktor Kontrol S4 input parser
gregkh/linux@af2b009b773b ALSA: cmipci: check snd_ctl_new1() return value
gregkh/linux@b27a75d42044 ALSA: compress: Fix task creation error unwind
gregkh/linux@9e53e99b6fa3 ALSA: es1938: check snd_ctl_new1() return value
gregkh/linux@db25755e7629 ALSA: FCP: Add Focusrite ISA C8X support
gregkh/linux@8e48a29813df ALSA: firewire: isight: bound the sample count to the packet payload
gregkh/linux@5e74e5e8cb7c ALSA: gus: check snd_ctl_new1() return value
gregkh/linux@ce0a903d0591 ALSA: hda/cs35l41: Fix firmware load work teardown
gregkh/linux@4dd2552e559b ALSA: hda/hdmi: Add force-connect quirk for HP EliteDesk 800 G5 Mini
gregkh/linux@1933e6ee136b ALSA: hda/hdmi: Use 'AC_PINSENSE_ELDV' to detect pinsense for Loongson
gregkh/linux@04dd21018057 ALSA: hda/realtek: Fix noisy mic for Clevo V6xxAW
gregkh/linux@71b87108ad93 ALSA: ice1712: check snd_ctl_new1() return value
gregkh/linux@651ba82fe2a1 ALSA: seq: Fix uninitialised heap leak in snd_seq_event_dup()
gregkh/linux@16f14f55141d ALSA: us144mkii: capture_urb_complete: redundant usb_anchor_urb corrupts anchor list on each resubmission
gregkh/linux@a263eb12cbe2 ALSA: usb-audio: avoid kobject path lookup in DualSense match
gregkh/linux@bfd28b07541e ALSA: usb-audio: Propagate errors in scarlett_ctl_enum_put()
gregkh/linux@3061b6c11445 ALSA: usb-audio: Propagate US-16x08 write errors in route/mix EQ-switch put callbacks
gregkh/linux@f3e8a6cca15b ALSA: usb-audio: Roll back quirk control caches on write errors
gregkh/linux@54c448e4f26a ALSA: usb-audio: Update Babyface Pro control caches only after successful writes
gregkh/linux@afc90150551d ALSA: usb-audio: Update US-16x08 EQ/comp shadow state after successful writes
gregkh/linux@a385d3435a7a vfio/pci: Use a private flag to prevent power state change with VFs
gregkh/linux@f6c67cf0051f vfio/pci: Latch disable_idle_d3 per device
gregkh/linux@52adb2dff7ce vfio/pci: Release the VGA arbiter client on register_device() failure
gregkh/linux@ba96666d991e vfio/pci: Fix racy bitfields and tighten struct layout
gregkh/linux@7f2d6b31089e vfio: prevent infinite loop in vfio_mig_get_next_state() on blocked arc
gregkh/linux@a53109ffb6b5 vfio: Remove device debugfs before releasing devres
gregkh/linux@79f9e221ddde Bluetooth: btusb: Add USB ID 2c4e:0128 for Mercusys MA60XNB
gregkh/linux@8db0ce3de783 Bluetooth: btusb: fix use-after-free on registration failure
gregkh/linux@a7e941a39571 Bluetooth: btusb: fix use-after-free on marvell probe failure
gregkh/linux@17a2d3f90345 Bluetooth: btusb: fix wakeup source leak on probe failure
gregkh/linux@ea02df466df6 binder: fix UAF in binder_thread_release()
gregkh/linux@328ccf32acb8 binder: fix UAF in binder_free_transaction()
gregkh/linux@89b8cc948dce rust_binder: use a u64 stride when cleaning up the offsets array
gregkh/linux@08e21d86d272 rust_binder: reject context manager self-transaction
gregkh/linux@281335996ab2 rust_binder: synchronize Rust Binder stats with freeze commands
gregkh/linux@91b27f8172cd rust_binder: clear freeze listener on node removal
gregkh/linux@f90586129cf9 usb: xhci: Fix sleep in atomic context in xhci_free_streams()
gregkh/linux@99d00a9e35e3 xhci: sideband: fix ring sg table pages leak
gregkh/linux@e5406c8fb71c usb: typec: tcpci_rt1711h: unregister TCPCI port with devres
gregkh/linux@d666c5aec822 PCI: loongson: Override PCIe bridge supported speeds for Loongson-3C6000 series
gregkh/linux@5e42a981887d PCI: altera: Do not dispose parent IRQ mapping
gregkh/linux@09c43b7b7d29 PCI: altera: Fix resource leaks on probe failure
gregkh/linux@9c698af5c2a1 PCI: Always lift 2.5GT/s restriction in PCIe failed link retraining
gregkh/linux@1d2e66a4bc0d PCI: host-common: Request bus reassignment when not probe-only
gregkh/linux@69416a530867 PCI: imx6: Fix IMX6SX_GPR12_PCIE_TEST_POWERDOWN handling
gregkh/linux@6e6a529d6f77 PCI: mediatek: Fix IRQ domain leak when port fails to enable
gregkh/linux@1115680bca1d PCI: qcom: Initialize DWC MSI lock for firmware-managed ECAM hosts
gregkh/linux@b77524621250 PCI/IOV: Skip VF Resizable BAR restore on read error
gregkh/linux@657646c08c94 tcp: restore RCU grace period in tcp_ao_destroy_sock
gregkh/linux@9c8f31eaae61 mm/damon/ops-common: handle extreme intervals in damon_hot_score()
gregkh/linux@81d54c766337 netfilter: ipset: fix race between dump and ip_set_list resize
gregkh/linux@075bc3c779e1 virtio_pci: fix vq info pointer lookup via wrong index
gregkh/linux@65e93ec592f5 virtio-mmio: fix device release warning on module unload
gregkh/linux@285e17c44e38 hwrng: virtio: clamp device-reported used.len at copy_data()
gregkh/linux@2a52d55c86a4 USB: chaoskey: Fix slab-use-after-free in chaoskey_release()
gregkh/linux@c4e232bd07fe usb: dwc3: run gadget disconnect from sleepable suspend context
gregkh/linux@c40090f8d19b usb: misc: usbio: fix disconnect UAF in client teardown
gregkh/linux@0beccbcf50de 6lowpan: fix NHC entry use-after-free on error path
gregkh/linux@2de42e268174 tipc: fix out-of-bounds read in broadcast Gap ACK blocks
gregkh/linux@e99f2df433c6 staging: vme_user: bound slave read/write to the kern_buf size
gregkh/linux@ceb875a375de smb: client: restrict implied bcc[0] exemption to responses without data area
gregkh/linux@a92148631397 staging: vme_user: fix location monitor leak in fake bridge
gregkh/linux@e3ceafa6d8ee staging: vme_user: fix location monitor leak in tsi148 bridge
gregkh/linux@b4ba13dafa13 media: staging: ipu3-imgu: Add range check for imgu_css_cfg_acc_stripe
gregkh/linux@1ca4f310c6b1 staging: media: atomisp: reduce load_primary_binaries() stack usage
gregkh/linux@b5ddc7257bee staging: media: ipu7: fix double-free and use-after-free in error paths
gregkh/linux@b9c4bf133c3c staging: rtl8723bs: fix heap buffer overflow in rtw_cfg80211_set_wpa_ie()
gregkh/linux@64ec4192d9c1 staging: rtl8723bs: fix WEP length underflow and OOB read in OnAuth()
gregkh/linux@04f612dc0342 staging: rtl8723bs: fix OOB read in OnAssocRsp() IE loop
gregkh/linux@69f174a0673b staging: rtl8723bs: fix OOB read in update_beacon_info() IE loop
gregkh/linux@c38d16b1ffac staging: rtl8723bs: fix OOB reads in IE loops in issue_assocreq() and join_cmd_hdl()
gregkh/linux@a6105ea8ca6e staging: rtl8723bs: fix OOB reads in is_ap_in_tkip() IE loop
gregkh/linux@6f91621fc450 staging: rtl8723bs: fix OOB write in HT_caps_handler()
gregkh/linux@84a00be9b736 crypto: amlogic - avoid double cleanup in meson_crypto_probe()
gregkh/linux@ef6feb77e2d9 crypto: krb5 - filter out async aead implementations at alloc
gregkh/linux@94083db75193 ksmbd: fix use-after-free of a deferred file_lock on SMB2_CLOSE then SMB2_CANCEL
gregkh/linux@e8417353cbd0 net: af_key: initialize alg_key_len for IPComp states
gregkh/linux@fe997a84a385 audit: Fix data races of skb_queue_len() readers on audit_queue
gregkh/linux@d3b739db5dc6 Bluetooth: L2CAP: Fix UAF in channel timeout by holding conn ref
gregkh/linux@b346efa825b5 Bluetooth: MGMT: Fix UAF of hci_conn_params in add_device_complete
gregkh/linux@cbb684ef39e9 coresight: etb10: restore atomic_t for shared reading state
gregkh/linux@c00164c9e7fa debugobjects: Plug race against a concurrent OOM disable
gregkh/linux@cf28fc165846 fs/ntfs3: validate Dirty Page Table capacity in log_replay copy_lcns
gregkh/linux@f71e8d987506 NTB: epf: Avoid calling pci_irq_vector() from hardirq context
gregkh/linux@4750909a40da gpio: eic-sprd: use raw_spinlock_t in the irq startup path
gregkh/linux@4508366ab7dd gpio: sch: use raw_spinlock_t in the irq startup path
gregkh/linux@722869fcff59 io_uring/nop: fix file reference leak with IOSQE_FIXED_FILE
gregkh/linux@1636d85dc139 io_uring/io-wq: re-check IO_WQ_BIT_EXIT for each linked work item
gregkh/linux@f090acf881a2 io_uring/rw: preserve partial result for iopoll
gregkh/linux@a33f37f8d079 netpoll: fix a use-after-free on shutdown path
gregkh/linux@2ca18df1c261 ipv4: igmp: remove multicast group from hash table on device destruction
gregkh/linux@bbae351c0f32 net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes
gregkh/linux@b5f41d5bf08e mfd: cros_ec: Delay dev_set_drvdata() until probe success
gregkh/linux@560e21e8ccff mm/shrinker: do not hold RCU lock in shrinker_debugfs_count_show()
gregkh/linux@6465ff3ce651 mm: shrinker: fix shrinker_info teardown race with expansion
gregkh/linux@006467ab9326 mm: shrinker: fix NULL pointer dereference in debugfs
gregkh/linux@b415c00bf23d mm: swap_cgroup: fix NULL deref in lookup_swap_cgroup_id on swapless host
gregkh/linux@69c0e6246575 mm/swap: add cond_resched() in swap_reclaim_full_clusters to prevent softlockup
gregkh/linux@a8f03a379328 netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump
gregkh/linux@fc5bfe63bacf netfilter: handle unreadable frags
gregkh/linux@9f74d28e903f netfilter: ebtables: zero chainstack array
gregkh/linux@13a5f532e3a4 netfilter: ebtables: module names must be null-terminated
gregkh/linux@6fe8d3cecd20 netfilter: ebtables: terminate table name before find_table_lock()
gregkh/linux@81a5971cbe18 netfilter: flowtable: fix offloaded ct timeout never being extended
gregkh/linux@0039bdde36b2 Bluetooth: btmtksdio: fix infinite loop in btmtksdio_txrx_work()
gregkh/linux@a6b22dbd8092 Bluetooth: bnep: pin L2CAP connection during netdev registration
gregkh/linux@2a68a7730892 Bluetooth: btnxpuart: Fix out-of-bounds firmware read in nxp_recv_fw_req_v3()
gregkh/linux@26168db1ce5a Bluetooth: fix UAF in bt_accept_dequeue()
gregkh/linux@61701912c58a Bluetooth: hci_conn: Fix null ptr deref in hci_abort_conn()
gregkh/linux@b9dd39cf1667 Bluetooth: hci_uart: clear HCI_UART_SENDING when write_work is canceled
gregkh/linux@b84eeb7636d6 Bluetooth: ISO: avoid NULL deref of conn in iso_conn_big_sync()
gregkh/linux@d5616beb3355 Bluetooth: L2CAP: cancel pending_rx_work before taking conn->lock
gregkh/linux@73abbaf91aa3 Bluetooth: L2CAP: validate option length before reading conf opt value
gregkh/linux@471800787054 iommu/vt-d: Fix race condition during PASID entry replacement
gregkh/linux@38cbb1feebcf fs/ntfs3: rename ni_readpage_cmpr into ni_read_folio_cmpr
gregkh/linux@764e6f76fdbd fs/ntfs3: fsync files by syncing parent inodes
gregkh/linux@6dd58c56ab86 fs/ntfs3: zero-fill folios beyond i_valid in ntfs_read_folio()
gregkh/linux@08fad5d5a26c fs/ntfs3: fix missing run load for vcn0 in attr_data_get_block_locked()
gregkh/linux@661a019ac041 coresight: ultrasoc-smb: Fix OOB write in smb_sync_perf_buffer()
gregkh/linux@91b8a58c6ac1 smb: client: resolve SWN tcon from live registrations
gregkh/linux@a187883cc1dc smb/client: Fix error code in smb2_aead_req_alloc()
gregkh/linux@baae7b39673e ksmbd: add permission checks for FSCTL_DUPLICATE_EXTENTS_TO_FILE
gregkh/linux@57f2042fd87d ksmbd: add a permission check for FSCTL_SET_ZERO_DATA
gregkh/linux@a1d5d31cad59 ksmbd: serialize QUERY_DIRECTORY requests per file
gregkh/linux@5aa1cb01155f ksmbd: fix UAF of struct file_lock in SMB2_LOCK deferred-lock cancellation
gregkh/linux@db231af84286 ksmbd: require source read access for duplicate extents
gregkh/linux@f56535db508e ksmbd: add a WRITE_DAC/WRITE_OWNER check to SMB2 SET_INFO SECURITY
gregkh/linux@20ee516a6298 ksmbd: run set info with opener credentials
gregkh/linux@2ca82bfff49c ksmbd: enforce FILE_READ_ATTRIBUTES on SMB_FIND_FILE_POSIX_INFORMATION
gregkh/linux@df501c0f320b ksmbd: add per-handle permission check to FILE_LINK_INFORMATION
gregkh/linux@e72c15085b6d ksmbd: use opener credentials for delete-on-close
gregkh/linux@2b4592cea214 ksmbd: use opener credentials for ADS I/O
gregkh/linux@00b0fa425941 smb: client: fix query directory replay double-free
gregkh/linux@f1add4acb656 smb: client: fix query_info() replay double-free
gregkh/linux@276c8efbc49f smb: client: fix double-free in SMB2_ioctl() replay
gregkh/linux@52af1975f0df smb: client: fix change notify replay double-free
gregkh/linux@3407240cde13 smb: client: fix double-free in SMB2_flush() replay
gregkh/linux@14498ff5ce0f smb: client: fix double-free in SMB2_open() replay
gregkh/linux@d15d83125007 smb: client: fix double-free in SMB2_close() replay
gregkh/linux@297243e365fc smb: client: Fix next buffer leak in receive_encrypted_standard()
gregkh/linux@3d89ae65ef78 smb: client: use unaligned reads in parse_posix_ctxt()
gregkh/linux@86c5d470f5d4 smb: client: harden POSIX SID length parsing
gregkh/linux@157c67a657a7 smb: client: fix atime clamp check in read completion
gregkh/linux@c6c484a7d5bf smb: client: mask server-provided mode to 07777 in modefromsid
gregkh/linux@685fc15a4108 writeback: fix race between cgroup_writeback_umount() and inode_switch_wbs()
gregkh/linux@a277489337c7 OPP: of: Fix potential memory leak in opp_parse_supplies()
gregkh/linux@e90496133280 cpufreq: qcom-cpufreq-hw: Fix possible double free
gregkh/linux@92f41769e5fd firmware_loader: fix device reference leak in firmware_upload_register()
gregkh/linux@b9d45d328fcd libfs: set SB_I_NOEXEC and SB_I_NODEV by default in init_pseudo()
gregkh/linux@59626d0d2921 perf/x86/intel/uncore: Defer ADL global PMON enable to enable_box()
gregkh/linux@f77e55baeeb8 cpufreq: intel_pstate: Sync policy->cur during CPU offline
gregkh/linux@4bd0da48fbc1 sched/rt: Have RT_PUSH_IPI be default off for non PREEMPT_RT
gregkh/linux@6e175c00c62d cpufreq: Fix hotplug-suspend race during reboot
gregkh/linux@6ba6f6783be2 cpufreq: pcc: fix use-after-free and double free in OSC evaluation
gregkh/linux@7776f9226e99 posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path
gregkh/linux@cd25e9819620 time/jiffies: Register jiffies clocksource before usage
gregkh/linux@2421a7b24f9c clocksource/drivers/timer-tegra186: Fix support for multiple watchdog instances
gregkh/linux@be79d285bea7 s390: Revert support for DCACHE_WORD_ACCESS
gregkh/linux@28390912740a perf/arm-cmn: Fix DVM node events
gregkh/linux@18d90dc05d98 X.509: Fix validation of ASN.1 certificate header
gregkh/linux@2382971aaaef mm/slab: do not limit zeroing to orig_size when only red zoning is enabled
gregkh/linux@e0eec7497bcc tools/mm/slabinfo: Fix trace disable logic inversion
gregkh/linux@abf07f5c3584 tools/mm/slabinfo: fix total_objects attribute name
gregkh/linux@dae1d000ddfd HID: hid-goodix-spi: validate report size to prevent stack buffer overflow
gregkh/linux@7ce2c7dd28ab HID: uhid: convert to hid_safe_input_report()
gregkh/linux@416095e9a603 HID: wacom: stop hardware after post-start probe failures
gregkh/linux@cb90a01e478c HID: pidff: Use correct effect type in effect update
gregkh/linux@ca899a926c11 HID: wacom: fix slab-out-of-bounds write in wacom_wac_queue_insert
gregkh/linux@bbe1e55629bf HID: wacom: use GFP_ATOMIC in wacom_wac_queue_flush()
gregkh/linux@3eca1a8165b5 HID: letsketch: fix UAF on inrange_timer at driver unbind
gregkh/linux@37daa8c96bd5 HID: multitouch: fix out-of-bounds bit access on mt_io_flags
gregkh/linux@b363d964ca82 HID: appleir: fix UAF on pending key_up_timer in remove()
gregkh/linux@4d0d51bc12d2 HID: lg-g15: cancel pending work on remove to fix a use-after-free
gregkh/linux@c63bc6308da7 HID: sensor-hub: Add sensor_hub_input_attr_read_values() for multi-byte reads
gregkh/linux@f3461b84a486 hfs/hfsplus: zero-initialize buffer in hfs_bnode_read
gregkh/linux@223463c488b0 nilfs2: reject CLEAN_SEGMENTS ioctl with out-of-range segment numbers
gregkh/linux@973408ceab14 media: mtk-jpeg: cancel workqueue on release for supported platforms only
gregkh/linux@1cd54e217c6e serial: 8250_mid: Disable DMA for selected platforms
gregkh/linux@200794d0354c xfs: use null daddr for unset first bad log block
gregkh/linux@936618643591 xfs: release dquot buffer after dqflush failure
gregkh/linux@dd8d0665cdab xfs: fix unreachable BIGTIME check in dquot flush validation
gregkh/linux@55e4d8413fb5 xfs: fix pointer arithmetic error on 32-bit systems
gregkh/linux@a62ef2d13d6e xfs: fix exchmaps reservation limit check
gregkh/linux@c3d3d2212c29 xfs: fix memory leak in xfs_dqinode_metadir_create()
gregkh/linux@a9bb2d9c798c bpf: Reject fragmented frames in devmap
gregkh/linux@d94ab0e91d3f bpf: Restore sysctl new-value from 1 to 0
gregkh/linux@cd407de2ef5d bpf: Validate BTF repeated field counts before expansion
gregkh/linux@e24eb271061d net: usb: kalmia: bound RX frame length in kalmia_rx_fixup()
gregkh/linux@e22f044b0b20 usb: cdc_acm: Add quirk for Uniden BC125AT scanner
gregkh/linux@c00826e87bb7 usb: cdnsp: fix stream context array leak in cdnsp_alloc_stream_info()
gregkh/linux@4b0779207e36 USB: core: add USB_QUIRK_NO_LPM for VIA Labs USB 2.0 hub
gregkh/linux@0bbab8882a31 usb: dwc3: meson-g12a: fix refcount leak in dwc3_meson_g12a_resume()
gregkh/linux@6bc17a78a056 usb: free iso schedules on failed submit
gregkh/linux@01feaf024f29 usb: gadget: composite: fix dead empty check in the USB_DT_OTG handler
gregkh/linux@b52476a83d9e usb: gadget: udc: Fix use-after-free in gadget_match_driver
gregkh/linux@8a5eba992c86 usb: gadget: f_printer: take kref only for successful open
gregkh/linux@54c2b7356b4a USB: idmouse: fix use-after-free on disconnect race
gregkh/linux@2107a4fc8ff1 USB: ldusb: fix use-after-free on disconnect race
gregkh/linux@b748f97aff33 USB: iowarrior: fix use-after-free on disconnect
gregkh/linux@6af28345cbf8 USB: quirks: add NO_LPM for the Samsung T5 EVO Portable SSD
gregkh/linux@766738ecf2b8 USB: legousbtower: fix use-after-free on disconnect race
gregkh/linux@e0886775952e usb: sl811-hcd: disable controller wakeup on remove
gregkh/linux@964d572b6c00 USB: storage: include US_FL_NO_SAME in quirks mask
gregkh/linux@48394f94211c usb: misc: usbio: bound bulk IN response length to the received transfer
gregkh/linux@729b68a5bad7 USB: misc: uss720: unregister parport on probe failure
gregkh/linux@8c29d9cfab1c usb: mtu3: unmap request DMA on queue failure
gregkh/linux@cf6ca0aefae0 USB: serial: keyspan_pda: fix information leak
gregkh/linux@4b147eb6ae6e USB: serial: option: add Telit Cinterion FE990D50 compositions
gregkh/linux@eab394781e93 USB: serial: digi_acceleport: fix broken rx after throttle
gregkh/linux@2b7dc482f859 USB: serial: digi_acceleport: fix hard lockup on disconnect
gregkh/linux@1243f1207900 USB: serial: digi_acceleport: fix write buffer corruption
gregkh/linux@1967a7f0cd5c USB: ulpi: fix memory leak on registration failure
gregkh/linux@2d84c8376f7a USB: usb-storage: ene_ub6250: restore media-ready check
gregkh/linux@6c7e8e251437 usbip: tools: support SuperSpeedPlus devices
gregkh/linux@347b59e9f967 usbip: vudc: fix NULL deref in vep_dequeue()
gregkh/linux@1126f1110b86 usb: typec: anx7411: use devm_pm_runtime_enable()
gregkh/linux@bf6aa6c0ce0d usb: typec: class: drop PD lookup reference
gregkh/linux@0bc177820bd3 usb: typec: tcpm: Fix VDM type for Enter Mode commands
gregkh/linux@3e1b1ac47e81 usb: typec: tcpm: Validate SVID index in svdm_consume_modes()
gregkh/linux@8c00aec752ce usb: typec: ucsi: Invert DisplayPort role assignment
gregkh/linux@b1dfdff51a86 usb: typec: ucsi: Pass full DP config payload in SET_NEW_CAM for DP alt mode
gregkh/linux@f5c772b76bbd usb: typec: ucsi: ccg: Fix use-after-free of ucsi on remove
gregkh/linux@b45be66ed47d usb: typec: ucsi: cancel pending work on system suspend
gregkh/linux@e086c16962a1 usb: gadget: f_fs: Fix DMA fence leak
gregkh/linux@9818bcae3c0c block: skip sync_blockdev() on surprise removal in bdev_mark_dead()
gregkh/linux@b7b2d2ccdbc4 mm: shmem: fix potential livelock issue for shmem direct swapin
gregkh/linux@be1567992417 x86,fs/resctrl: Prevent out-of-bounds access while offlining CPU when SNC enabled
gregkh/linux@e5049526a7aa rust_binder: introduce TransactionInfo
gregkh/linux@bd818dcf4783 rust_binder: fix BINDER_GET_EXTENDED_ERROR
gregkh/linux@8ff183ee4d8c bpf: Support for hardening against JIT spraying
gregkh/linux@8a4c8af9ae67 x86/bugs: Enable IBPB flush on BPF JIT allocation
gregkh/linux@666fc2e6e4d0 bpf: Restrict JIT predictor flush to cBPF
gregkh/linux@f1f36bf9bb11 bpf: Skip redundant IBPB in pack allocator
gregkh/linux@0229944ba792 bpf: Prefer packs that won't trigger an IBPB flush on allocation
gregkh/linux@d944b8add331 bpf: Prefer dirty packs for eBPF allocations
gregkh/linux@335202ab25b0 udf: validate free block extents against the partition length
gregkh/linux@e610fb113cdf udf: validate VAT header length against the VAT inode size
gregkh/linux@04f4599a9efb udf: validate sparing table length as an entry count, not a byte count
gregkh/linux@c60932d6f837 hwrng: jh7110 - fix refcount leak in starfive_trng_read()
gregkh/linux@d161d47aba31 crypto: atmel-sha204a - drop hwrng quality reduction for ATSHA204A
gregkh/linux@a8803c4f0ac3 nvme: target: rdma: fix ndev refcount leak on queue connect
gregkh/linux@427c82497e26 block: partitions: fix of_node refcount leak in of_partition()
gregkh/linux@13f2f5defb4d dm-ioctl: report an error if a device has no table
gregkh/linux@7a69463e9ad2 nvme-multipath: set BIO_REMAPPED on bios remapped to per-path namespace disks
gregkh/linux@56c021a08692 nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page
gregkh/linux@6d7649c1231d nvmet-auth: validate reply message payload bounds against transfer length
gregkh/linux@0912b98151ee btrfs: check and set EXTENT_DELALLOC_NEW before clearing EXTENT_DELALLOC
gregkh/linux@7a6452180299 btrfs: do not trim a device which is not writeable
gregkh/linux@ce93228e2193 partitions: aix: bound the pp_count scan to the ppe array
gregkh/linux@b5699642640d isofs: bound Rock Ridge symlink components to the SL record
gregkh/linux@7465ed1524ac crypto: af_alg - Remove zero-copy support from skcipher and aead
gregkh/linux@6f7b8e0321f3 crypto: caam - use print_hex_dump_devel to guard key hex dumps
gregkh/linux@d0b8cafd529b crypto: caam - use print_hex_dump_devel to guard key hex dumps again
gregkh/linux@0016d3c21c6a crypto: chacha20poly1305 - validate poly1305 template argument
gregkh/linux@ac667f9f18c6 crypto: crypto4xx - Remove insecure and unused rng_alg
gregkh/linux@774ddddf5eb2 crypto: ecc - Fix carry overflow in vli multiplication
gregkh/linux@ee6a2a25665c crypto: hisi-trng - Remove crypto_rng interface
gregkh/linux@c4bd2f4c35b0 crypto: pcrypt - restore callback for non-parallel fallback
gregkh/linux@cc4e42b3ee9f crypto: tegra - fix refcount leak in tegra_se_host1x_submit()
gregkh/linux@53b8fb85f332 crypto: loongson - Select CRYPTO_RNG
gregkh/linux@9e983d0a74a6 crypto: ccp - Do not initialize SNP for SEV ioctls
gregkh/linux@7a361c74bb12 crypto: ccp - Do not initialize SNP for ioctl(SNP_COMMIT)
gregkh/linux@92567ed9306d crypto: ccp - Do not initialize SNP for ioctl(SNP_VLEK_LOAD)
gregkh/linux@441ea32cf275 crypto: ccp - Do not initialize SNP for ioctl(SNP_CONFIG)
gregkh/linux@23b8b188cb32 crypto: drbg - Fix returning success on failure in CTR_DRBG
gregkh/linux@53d38b93cadc crypto: drbg - Fix drbg_max_addtl() on 64-bit kernels
gregkh/linux@5337b5cd3608 crypto: drbg - Fix the fips_enabled priority boost
gregkh/linux@050bded706ee crypto: qat - centralize bus master enable
gregkh/linux@33cfc0ce28ac crypto: qat - handle sysfs-triggered reset callbacks
gregkh/linux@45b65a21edbe crypto: qat - keep VFs enabled during reset
gregkh/linux@e310e8dc8ce7 crypto: qat - notify fatal error before AER reset preparation
gregkh/linux@c3c5925791cf crypto: qat - protect service table iterations with service_lock
gregkh/linux@fabf364ef9db crypto: qat - skip restart for down devices
gregkh/linux@6fb62b767f3e crypto: qat - validate RSA CRT component lengths
gregkh/linux@7584c92f7244 crypto: qat - factor out AER reset helpers
gregkh/linux@f52aa95e3cae crypto: talitos - use dma_sync_single_for_cpu() before reading descriptor header
gregkh/linux@664e7f16e74f crypto: talitos - add chaining of arbitrary number of descriptor for the SEC1
gregkh/linux@3fa1846f75ed crypto: talitos - move dma unmapping code in flush_channel() into a standalone dma_unmap_request() function
gregkh/linux@aea8cfbd60da crypto: talitos - move dma mapping code in talitos_submit() into a standalone dma_map_request() function
gregkh/linux@a8decb89920a crypto: talitos - move code in current_desc_hdr() into a standalone function
gregkh/linux@40a2e90acdb1 crypto: talitos/hash - prepare SEC1 descriptor chaining, remove additional descriptor
gregkh/linux@042730207a99 crypto: talitos/hash - use descriptor chaining for SEC1 instead of workqueue
gregkh/linux@b960edc92c81 crypto: talitos/hash - drop workqueue mechanism for SEC1
gregkh/linux@99cc3f5511d8 crypto: talitos/hash - rename first_desc/last_desc to first_request/last_request
gregkh/linux@fda9cb9b7191 crypto: talitos/hash - remove useless wrapper
gregkh/linux@93f000e89976 crypto: talitos/hash - fix SEC2 64k - 1 ahash request limitation
gregkh/linux@75422f5e5022 arm64: fpsimd: Fix type mismatch in sme{save,load}state()
gregkh/linux@18d6048b1b1b spi: fsl-lpspi: replace dmaengine_terminate_all() with dmaengine_terminate_sync()
gregkh/linux@808033d80d5c spi: fsl-lpspi: terminate the RX channel on TX prepare failure path
gregkh/linux@add1e4112e00 x86/mm: Fix freeing of PMD-sized vmemmap pages
gregkh/linux@f4dd5621a6ee EDAC/i10nm: Don't fail probing if ADXL is missing
gregkh/linux@6b01ed165d29 watchdog: apple: Add "apple,t8103-wdt" compatible
gregkh/linux@22cb337370e6 regulator: scmi: fix of_node refcount leak in scmi_regulator_probe()
gregkh/linux@af6048e91305 i2c: core: fix hang on adapter registration failure
gregkh/linux@c8b7e113f7b6 perf/aux: Fix page UAF in map_range()
gregkh/linux@2dad64a97e1d tracing: Prevent out-of-bounds read in glob matching
gregkh/linux@75ca99875aa4 audit: fix potential integer overflow in audit_log_n_hex()
gregkh/linux@a937e92c1d00 NFSv4: include MAY_WRITE in open permission mask for O_TRUNC
gregkh/linux@b88373330250 rqspinlock: Fix order in raw_res_spin(un)lock_irq to allow schedule
gregkh/linux@a82e170637e0 module: decompress: check return value of module_extend_max_pages()
gregkh/linux@33c0b96d7e16 exfat: bound uniname advance in exfat_find_dir_entry()
gregkh/linux@1c8889e0db01 NTB: epf: Fix request_irq() unwind in ntb_epf_init_isr()
gregkh/linux@90405c8822c5 riscv: mm: Define DIRECT_MAP_PHYSMEM_END
gregkh/linux@4d730cab96e6 riscv: mm: Unconditionally sfence.vma for spurious fault
gregkh/linux@279c2fa73112 mm: fix mmap errno value when MAP_DROPPABLE is not supported
gregkh/linux@785ebd42b8b5 selftests: mm: fix and speedup "droppable" test
gregkh/linux@8dcaa0f87a88 mm: page_ext: add count limit to page_ext_iter_next to prevent invalid PFN access
gregkh/linux@5c942ad7df75 mm: do file ownership checks with the proper mount idmap
gregkh/linux@6bbe2000d9f9 selftests/mm: pagemap_ioctl: use the correct page size for transact_test()
gregkh/linux@037ec8353711 crypto: loongson - Remove broken and unused loongson-rng
gregkh/linux@bb354384f40b iommu/vt-d: Avoid WARNING in sva unbind path
gregkh/linux@50612ce318b1 iommu/amd: Don't split flush for amd_iommu_domain_flush_all()
gregkh/linux@04a177f91160 iommufd: Use sizeof(hdr) instead of sizeof(hdr) in veventq read
gregkh/linux@5c5f1b5184f7 iommufd: Fix data_len byte-count vs element-count mismatch
gregkh/linux@f565297edf31 iommufd: Set veventq_depth upper bound
gregkh/linux@64011399d881 iommufd: Rewind header length in done if iommufd_veventq_fops_read() fails
gregkh/linux@f549a749b625 iommufd: Reject invalid read count in iommufd_veventq_fops_read()
gregkh/linux@f2dbe1dba01e iommufd: Reject invalid read count in iommufd_fault_fops_read()
gregkh/linux@5539da127d03 iommufd: Break the loop on failure in iommufd_fault_fops_read()
gregkh/linux@67daea4c0935 iommufd: Avoid partial fault group delivery in iommufd_fault_fops_read()
gregkh/linux@32ca4aed2a66 iommufd: Set upper bounds on cache invalidation entry_num and entry_len
gregkh/linux@e4427c19554b audit: fix removal of dangling executable rules
gregkh/linux@859fef2c3d40 landlock: Set audit_net.sk for socket access checks
gregkh/linux@b51a7439c166 selftests/landlock: Filter dealloc records in audit_count_records()
gregkh/linux@7c73a269a880 KVM: arm64: nv: Avoid dereferencing NULL VNCR pseudo-TLB
gregkh/linux@2d710d4fcd2c LoongArch: KVM: Add missing slots_lock for device register/unregister
gregkh/linux@6bea2f8becdb KVM: arm64: Clear _hyp_running_vcpu when flushing the pKVM hyp vCPU
gregkh/linux@4b200e0c9c33 KVM: x86: Add dedicated API for getting mask of accelerated x2APIC MSRs
gregkh/linux@7949aa38e109 KVM: SVM: Disable x2AVIC RDMSR interception for MSRs KVM actually supports
gregkh/linux@35f3ea7e49a3 KVM: SVM: Only disable x2AVIC WRMSR interception for MSRs that are accelerated
gregkh/linux@eeb456eb3556 KVM: VMX: Refresh GUEST_PENDING_DBG_EXCEPTIONS.BS on all injected #DBs
gregkh/linux@ab253cf6e111 KVM: VMX: Handle bad values on proxied writes to LBR MSRs
gregkh/linux@4ad73ef0e796 KVM: x86: Ensure vendor's exit handler runs before fastpath userspace exits
gregkh/linux@0c93681aea0a KVM: arm64: Don't leak PFN when kvm_translate_vncr() races MMU notifier
gregkh/linux@f8e1dc70efe4 udmabuf: fix DMA direction mismatch in release_udmabuf()
gregkh/linux@34696563461c dma-buf/udmabuf: skip redundant cpu sync to fix cacheline EEXIST warning
gregkh/linux@59070040fd12 fpga: dfl-afu: validate DMA mapping length in afu_dma_map_region()
gregkh/linux@9ec02cc9a04e i2c: core: fix irq domain leak on adapter registration failure
gregkh/linux@3351c5e77749 i2c: core: fix NULL-deref on adapter registration failure
gregkh/linux@0345994d6476 i2c: core: fix adapter probe deferral loop
gregkh/linux@71b7da959031 i2c: core: fix adapter debugfs creation
gregkh/linux@b6d2af6fe9c1 i2c: core: fix adapter deregistration race
gregkh/linux@56945871123e i2c: mpc: Fix timeout calculations
gregkh/linux@b65667ec5e9a i2c: davinci: Unregister cpufreq notifier on probe failure
gregkh/linux@369635fbcf7f i2c: stm32f7: truncate clock period instead of rounding it
gregkh/linux@b2523f26979e i2c: imx-lpi2c: mark I2C adapter when hardware is powered down
gregkh/linux@bb5133a7d5f3 i2c: i801: fix hardware state machine corruption in error path
gregkh/linux@11f275f01c46 Input: synaptics-rmi4 - unregister function handlers on physical driver registration failure
gregkh/linux@8db211aed837 Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count
gregkh/linux@e849c6f51e68 Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count
gregkh/linux@01e0317c256c Input: elan_i2c - prevent division by zero and arithmetic underflow
gregkh/linux@3b3230346015 Input: goodix - clamp the device-reported contact count
gregkh/linux@70019779325f Input: iforce - bound the device-reported force-feedback effect index
gregkh/linux@75b12874b417 Input: mms114 - fix touch indexing for MMS134S and MMS136
gregkh/linux@05dee4007cf3 Input: ads7846 - don't use scratch for tx_buf when clearing register
gregkh/linux@3e6f007b43e2 Input: touchwin - reset the packet index on every complete packet
gregkh/linux@8301c3353053 Input: mms114 - reject an oversized device packet size
gregkh/linux@37fbe63bccf2 Input: gscps2 - advance receive buffer write index
gregkh/linux@1b4cb75f254f Input: maplemouse - fix NULL pointer dereference in open()
gregkh/linux@d7f66fbab5d2 Input: mms114 - fix multi-touch slot corruption
gregkh/linux@699e3abac02d Input: maple_keyb - set driver data before registering input device
gregkh/linux@9376c744bea2 Input: maplemouse - set driver data before registering input device
gregkh/linux@95de76f6ad47 Input: maplecontrol - set driver data before registering input device
gregkh/linux@5a45d0aa1fa5 RDMA/rtrs-srv: Bound RDMA-Write length to chunk size in rdma_write_sg
gregkh/linux@ab45808c141a RDMA/core: Fix broadcast address falsely detected as local
gregkh/linux@423a78ff7928 RDMA/siw: bound Read Response placement to the RREAD length
gregkh/linux@69cfae58b9a3 fuse: back uncached readdir buffers with pages
gregkh/linux@6e2d84fdeac0 fuse: avoid 32-bit prune notification count wrap
gregkh/linux@e6620208bdd3 fuse: fix device node leak in cuse_process_init_reply()
gregkh/linux@be353caffa86 fuse: re-lock request before returning from fuse_ref_folio()
gregkh/linux@096cb2e58a6d fuse: fix io-uring background queue dispatch on request completion
gregkh/linux@7366e6f4d2b4 fuse: clear intr_entry in fuse_resend and fuse_remove_pending_req
gregkh/linux@0483fffdeeb3 fuse-uring: fix EFAULT clobber in fuse_uring_commit
gregkh/linux@b156bb996697 fuse-uring: fix data races on ring->ready
gregkh/linux@50f3e03db823 fuse-uring: fix moving cancelled entry to ent_in_userspace list
gregkh/linux@bb476ef8e102 fuse-uring: end fuse_req on io-uring cancel task work
gregkh/linux@23a356e0bd96 fuse-uring: Avoid use-after-free in fuse_uring_async_stop_queues
gregkh/linux@39c8e925b207 fuse-uring: Avoid queue->stopped races and set/read that value under lock
gregkh/linux@e1711479e906 fuse-uring: make a fuse_req on SQE commit only findable after memcpy
gregkh/linux@0b466cf1b96e fuse-uring: remove request-less entries from ent_w_req_queue to fix NULL deref
gregkh/linux@75e1d2787005 sched/fair: Only update stats for allowed CPUs when looking for dst group
gregkh/linux@9e04055ab5fc usb: gadget: f_fs: Initialize epfile->in early to fix endpoint direction checks
gregkh/linux@e697df336662 timekeeping: Register default clocksource before taking tk_core.lock
gregkh/linux@1c56c4651935 Bluetooth: 6lowpan: Fix using chan->conn as indication to no remote netdev
gregkh/linux@1991d49433e9 Revert "f2fs: remove non-uptodate folio from the page cache in move_data_block"
gregkh/linux@fdafa1e68dc7 smb: client: reject overlapping data areas in SMB2 responses
gregkh/linux@dca861f2cc9e xfs: fix null pointer dereference in tracepoint
gregkh/linux@d98f22d2e11e xfs: fail recovery on a committed log item with no regions
gregkh/linux@206c09b04dc5 xfs: resample the data fork mapping after cycling ILOCK
gregkh/linux@d1c4c40599c3 xfs: don't wrap around quota ids in dqiterate
gregkh/linux@104584477883 xfs: grab rtrmap btree when checking rgsuper
gregkh/linux@08b191ae6465 xfs: use the rt version of the cow staging checker
gregkh/linux@d399b026a6b3 xfs: set xfarray killable sort correctly
gregkh/linux@424be21ed8cd xfs: handle non-inode owners for rtrmap record checking
gregkh/linux@c9662ffd62c4 xfs: clamp timestamp nanoseconds correctly
gregkh/linux@1ea0868a477b xfs: fully check the parent handle when it points to the rootdir
gregkh/linux@6403ef9a81e6 xfs: don't zap bmbt forks if they are MAXLEVELS tall
gregkh/linux@e696ef088f55 xfs: fix off-by-one error when calling xchk_xref_has_rt_owner
gregkh/linux@457a93a233bd xfs: write the rg superblock when fixing it
gregkh/linux@06b1729436ef xfs: use rtrefcount btree cursor in xchk_xref_is_rt_cow_staging
gregkh/linux@f89c296854b7 Linux 6.18.39
gregkh/linux@110ce8fed0f8 perf strlist: Don't write to const memory
gregkh/linux@9ae21594ee51 perf strlist: Remove dont_dupstr logic, used only once
gregkh/linux@972c65697792 perf time-utils: Constify variables storing the result of strchr() on const tables
gregkh/linux@33250aa5cfad perf jitdump: Constify variables storing the result of strchr() on const tables
gregkh/linux@659a56ba86a9 perf list: Remove unused 'sep' variable
gregkh/linux@3b540ba9606b perf tools: Switch printf("...%s", strerror(errno)) to printf("...%m")
gregkh/linux@5f6d997641de perf bpf-event: Constify variables storing the result of strchr() on const tables
gregkh/linux@f8cb25b1d5ed perf session: Don't write to memory pointed to a const pointer
gregkh/linux@a816153dd857 perf demangle-java: Constify variables storing the result of strchr() on const tables
gregkh/linux@8bac35a8fd98 perf trace-event: Constify variables storing the result of strchr() on const tables
gregkh/linux@ee8ab4e8e702 perf metricgroup: Constify variables storing the result of strchr() on const tables
gregkh/linux@5bcff7ce5c3b perf tools: Use const for variables receiving str{str,r?chr}() returns
gregkh/linux@e7d3f92238a3 perf hwmon_pmu: Constify the variables returning bsearch() on const tables
gregkh/linux@018533cfe83c perf units: Constify variables storing the result of strchr() on const tables
gregkh/linux@4283a813d708 perf tp_pmu: Address const-correctness errors in recent glibcs
gregkh/linux@d03adc7039c3 perf list: Signal changing const memory is ok
gregkh/linux@292f32503eda perf list: Don't write to const memory
gregkh/linux@bc29e0699b35 perf diff: Constify strchr() return variables
gregkh/linux@30bbd7e8999d perf trace: Don't change const char strings
gregkh/linux@40e44eff5116 perf trace: Deal with compiler const checks
gregkh/linux@bbf04810b2a0 nvme-pci: DMA unmap the correct regions in nvme_free_sgls
gregkh/linux@e0caf7c3d49c smb/server: do not require delete access for non-replacing links
gregkh/linux@de5a46f3b2c8 tcp: Add preempt{disable,enable}_nested() in reqsk_queue_hash_req().
gregkh/linux@d7860b682da5 crypto: algif_skcipher - force synchronous processing
gregkh/linux@c646431865f4 KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU
gregkh/linux@588718101e84 iommu/vt-d: Clear Present bit before tearing down scalable-mode context entry
gregkh/linux@2ed3c9d955e8 nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path
gregkh/linux@088ee46c18d9 nvmet-tcp: Fix potential UAF when ddgst mismatch
gregkh/linux@c401492e01c7 crypto: sun4i-ss - Remove insecure and unused rng_alg
gregkh/linux@3659deaf7bf6 media: uvcvideo: Fix deadlock if uvc_status_stop is called from async_ctrl.work
gregkh/linux@564e4ce9fb40 selftests: bpf: Add test for multiple syncs from linked register
gregkh/linux@07259d661c9d selftests/bpf: Add tests for improved linked register tracking
gregkh/linux@19836e8145de selftests/bpf: Add a test cases for sync_linked_regs regarding zext propagation
gregkh/linux@d75376fbc856 bpf: Clear delta when clearing reg id for non-{add,sub} ops
gregkh/linux@985b8a0e52c5 selftests/bpf: Add tests for delta tracking when src_reg == dst_reg
gregkh/linux@f3a0dd2d88e8 selftests/bpf: Add tests for stale delta leaking through id reassignment
gregkh/linux@62dde71ca2c8 exfat: preserve benign secondary entries during rename and move
gregkh/linux@a4fb0954f3dc iommu/amd: Use maximum Event log buffer size when SNP is enabled on Family 0x19
gregkh/linux@9b6c12e1a6be iommu/amd: Use maximum PPR log buffer size when SNP is enabled on Family 0x19
gregkh/linux@e0a71cbf0c19 af_unix: Drop all SCM attributes for SOCKMAP.
gregkh/linux@12e43f99242b ALSA: hda/realtek: Add quirk for TongFang X6xx45xU
gregkh/linux@ae7f5b05d225 ALSA: hda: conexant: Remove mic bias threshold override
gregkh/linux@2f33044aedd7 ALSA: hda: Fix cached processing coefficient verbs
gregkh/linux@6b2c0cd5f968 ALSA: hda/realtek: Fix speakers on Legion Pro 7 16ARX8H with codec SSID 17aa:38a7
gregkh/linux@caf800e0cab9 media: uvcvideo: Use hw timestaming if the clock buffer is full
gregkh/linux@1a9baac64576 media: uvcvideo: Avoid partial metadata buffers
gregkh/linux@0f64f808fb4e media: uvcvideo: Fix buffer sequence in frame gaps
gregkh/linux@aed8111f2392 media: uvcvideo: Fix dev_sof filtering in hw timestamp
gregkh/linux@bf58be93c51b media: uvcvideo: Do not add clock samples with small sof delta
gregkh/linux@19cb644d0ca5 media: uvcvideo: Relax the constrains for interpolating the hw clock
gregkh/linux@79982331c173 media: uvcvideo: Fix sequence number when no EOF
gregkh/linux@d97a6b4a5a4f dt-bindings: media: sun4i-a10-video-engine: Add interconnect properties
gregkh/linux@03fd857c3345 dt-bindings: power: imx93: Add MIPI PHY power domain
gregkh/linux@d35471624519 serial: msm: Disable DMA for kernel console UART
gregkh/linux@c37095c431c3 serial: max310x: implement gpio_chip::get_direction()
gregkh/linux@2ecd118fb691 serial: 8250_omap: clear rx_running on zero-length DMA completes
gregkh/linux@35a967ff8b24 rxrpc: serialize kernel accept preallocation with socket teardown
gregkh/linux@d3b642cf95d4 rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc
gregkh/linux@9ada3931beb3 rxrpc: Don't move a peeked OOB message onto the pending queue
gregkh/linux@844b8525ce50 rxrpc: Fix UAF in rxgk_issue_challenge()
gregkh/linux@0d643a46fdea rxrpc: Fix socket notification race
gregkh/linux@2b69b61057eb rxrpc: Fix leak of released call in recvmsg(MSG_PEEK)
gregkh/linux@0fc5b37faec2 rxrpc: Fix potential infinite loop in rxrpc_recvmsg()
gregkh/linux@7940e5c53548 rxrpc: Fix rxrpc_rotate_tx_rotate() to check there's something to rotate
gregkh/linux@647e8e69c6ea rxrpc: Fix oob challenge leak in cleanup after notification failure
gregkh/linux@8db6a2c95e36 rxrpc: Fix ACKALL packet handling
gregkh/linux@f9be51498447 rxrpc: Fix the reception of a reply packet before data transmission
gregkh/linux@a89a13aea38a rxrpc: Fix leak of connection from OOB challenge
gregkh/linux@8cd8cf3052ff rxrpc: Fix double unlock in rxrpc_recvmsg()
gregkh/linux@b83ecf80e28a afs: Fix netns teardown to cancel the preallocation charger
gregkh/linux@23b3d457d838 afs: fix NULL pointer dereference in afs_get_tree()
gregkh/linux@cc848a080f7a afs: handle CB.InitCallBackState3 requests without a server record
gregkh/linux@8b4d1854295b afs: Fix further netns teardown to cancel the preallocation charger
gregkh/linux@231414253b64 afs: Fix uncancelled rxrpc OOB message handler
gregkh/linux@6617df8c2463 fbcon: fix NULL pointer dereference for a console without vc_data
gregkh/linux@24186d6f9b07 fbcon: Use correct type for vc_resize() return value
gregkh/linux@d50d320e88b4 openrisc: mm: Fix section mismatch between map_page and _set_fixmap
gregkh/linux@8e644d9a8c8d clocksource/drivers/sun5i: Handle error returns from devm_reset_control_get_optional_exclusive()
gregkh/linux@68dc52f308a1 accel/amdxdna: Fix leak when pinning ubuf pages
gregkh/linux@0d60b835bca4 drm/rockchip: dw_dp: Switch to drmm_kzalloc()
gregkh/linux@b3ec263a719e drm/rockchip: dw_dp: Fix null-ptr-deref in dw_dp_remove()
gregkh/linux@ab487bb0402a drm/rockchip: Test for imported buffers with drm_gem_is_imported()
gregkh/linux@626fa93d194d drm/tidss: Drop extra drm_mode_config_reset() call
gregkh/linux@353f26c74660 drm/gpusvm: Reject VMAs with VM_IO or VM_PFNMAP when creating SVM ranges
gregkh/linux@41a60487b5b0 drm/gpuvm: Do not prepare NULL objects
gregkh/linux@daf5d03ddb8c drm/amdgpu: fix integer overflow in amdgpu_gem_align_pitch()
gregkh/linux@d9dfa176899d drm/radeon: fix integer overflow in radeon_align_pitch()
gregkh/linux@06dc892561f5 drm/radeon: fix memory leak in radeon_ring_restore() on lock failure
gregkh/linux@392c03362c27 libbpf: Report error when a negative kprobe offset is specified
gregkh/linux@bc4737e55ec4 selftests/bpf: Fix off-by-one in bpf_cpumask_populate related selftest
gregkh/linux@afea00ffcf41 dt-bindings: timer: Remove sifive,fine-ctr-bits property
gregkh/linux@2dfe817167af drm/amd/pm: remove trailing semicolon from AMDGPU_PM_POLICY_ATTR macro
gregkh/linux@595710e6838c selftests/bpf: Use local type for flow_offload_tuple_rhash in xdp_flowtable
gregkh/linux@d10227f899c9 selftests/bpf: Use local type for bpf_fou_encap in test_tunnel_kern
gregkh/linux@6005cdd9f48f Documentation: proc: fix section numbering in table of contents
gregkh/linux@58d0b4c55cdf arm64: dts: rockchip: fix Ethernet PHY not found on PX30 Cobra
gregkh/linux@8f8233d544ac arm64: dts: rockchip: Fix gmac0 reset pin for NanoPi R5S
gregkh/linux@d72ae2c63b68 arm64: dts: qcom: ipq5424: Fix USB simple_bus_reg warnings
gregkh/linux@d8367ee271ab arm64: dts: qcom: sc8180x: Fix phy simple_bus_reg warning
gregkh/linux@123e1cd95ba5 arm64: dts: qcom: sdm845-mezzanine: Fix camss ports unit_address_vs_reg warning
gregkh/linux@228db770fb08 wifi: cfg80211: fix grammar in MLO group key error message
gregkh/linux@cc6ef5ee7d88 arm64: tegra: Fix Tegra234 MGBE PTP clock
gregkh/linux@1638e178e491 dt-bindings: pinctrl: nvidia,tegra234: Add missing required block
gregkh/linux@543ed0f61d56 drm/amdkfd: Validate CRIU-restored IDs before idr_alloc
gregkh/linux@cc77f0d91e32 driver core: use READ_ONCE() for dev->driver in dev_has_sync_state()
gregkh/linux@aefc30e4a829 wifi: rtw89: fix wrong pci_get_drvdata type in AER handlers
gregkh/linux@1ef3d1338d94 wifi: rtw88: fix wrong pci_get_drvdata type in AER handlers
gregkh/linux@7a1ab5fdcae8 wifi: rtw89: Correct data type for scan index to avoid infinite loop
gregkh/linux@01155ded5d4d wifi: rtw88: fix OOB read from firmware RX descriptor exceeding DMA buffer
gregkh/linux@ad445de67359 wifi: rtw89: add bounds check on firmware mac_id in link lookup
gregkh/linux@fbeea02c3564 kconfig: fix potential NULL pointer dereference in conf_askvalue
gregkh/linux@a83e77d1e52c soc: xilinx: Shutdown and free rx mailbox channel
gregkh/linux@7c79be7e6344 pinctrl: mediatek: eint: Drop base from mtk_eint_chip_write_mask()
gregkh/linux@5435fd3edcb1 wifi: ath9k: fix OOB access from firmware tx status queue ID
gregkh/linux@19eb0ab0bdff ARM: dts: am335x-sl50: Fix audio bitclock and frame master endpoint
gregkh/linux@29fd4f4c73e2 Documentation/rv: Replace stale website link
gregkh/linux@d6e8d6b2f8f0 watchdog: sp5100_tco: Use EFCH MMIO for newer Hygon FCH
gregkh/linux@1917015aa0a1 watchdog: sama5d4_wdt: Fix WDDIS detection on SAM9X60 and SAMA7G5
gregkh/linux@facbb592e22d watchdog: sprd_wdt: Remove redundant sprd_wdt_disable() on register failure
gregkh/linux@4534f70aa704 media: cedrus: Fix failure to clean up hardware on probe failure
gregkh/linux@2b2a17af8d8c media: v4l2-common: Add YUV24 format info
gregkh/linux@928f758f8f21 memory: tegra: Wire up system sleep PM ops
gregkh/linux@53baa6b90f49 crypto: qat - fix heartbeat error injection
gregkh/linux@796ff973077c lib/vsprintf: Fix to check field_width and precision
gregkh/linux@c599af2eacd6 dts: spacemit: set console baud rate on bpif3
gregkh/linux@a402b3d09381 pinctrl: sunxi: fix regulator leak in sunxi_pmx_request() error path
gregkh/linux@02b001d89157 dt-bindings: vendor-prefixes: Add Displaytech Ltd.
gregkh/linux@76a4c3af3253 drm/gpuvm: take refcount on DRM device
gregkh/linux@d003d9bb44da drm/panel: Clean up S6E3HA2 config dependencies and fill help text
gregkh/linux@2b553fcec1cd ARM: dts: rockchip: Add #{address,size}-cells to Chromium-based /firmware
gregkh/linux@6173c83d4d79 arm64: dts: rockchip: Add #{address,size}-cells to Chromium-based /firmware
gregkh/linux@a5e026d5b948 arm64: dts: rockchip: fix rk809 interrupt pin on rk3566-roc-pc
gregkh/linux@b9c6ad49a942 arm64: dts: imx8x-colibri: Correct SODIMM PAD settings
gregkh/linux@5f7777f0da03 Revert "arm64: dts: imx8mm-kontron: Add support for reading SD_VSEL signal"
gregkh/linux@470984f1c2ed Revert "arm64: dts: imx8mp-kontron: Add support for reading SD_VSEL signal"
gregkh/linux@4a8cde6f7281 vxlan: Fix potential null-ptr-deref in vxlan_gro_prepare_receive().
gregkh/linux@224d7300b569 drm: renesas: rz-du: mipi_dsi: Fix return path on error
gregkh/linux@8fe473653263 alarmtimer: Remove stale return description from alarm_handle_timer()
gregkh/linux@46696b0b2123 OPP: Fix race between OPP addition and lookup
gregkh/linux@25b0061adc1c crypto: ccp - Reverse the cleanup order in psp_dev_destroy()
gregkh/linux@c5c79d92da0f crypto: ccp - Fix snp_filter_reserved_mem_regions() off-by-one
gregkh/linux@aac63bbea8fd crypto: atmel-sha204a - fix blocking and non-blocking rng logic
gregkh/linux@9b21d5bd33a7 crypto: ecrdsa - fix unknown OID check in ecrdsa_param_curve
gregkh/linux@6acd2fbd00f9 crypto: asymmetric_keys - fix OOB read in pefile_digest_pe_contents
gregkh/linux@4695cfab48f9 ARM: multi_v7_defconfig: Correct QCOM_RPMH and QCOM_RPMHPD
gregkh/linux@712714f818d8 dlm: fix add msg handle in send_queue ordered
gregkh/linux@f9f1a2cd912d nilfs2: fix backing_dev_info reference leak
gregkh/linux@e725aedd26e9 media: qcom: camss: vfe: fix PIX subdev naming on VFE lite
gregkh/linux@9e642727b97d media: iris: scale MMCX power domain on SM8250
gregkh/linux@feb10ab7abc2 media: venus: scale MMCX power domain on SM8250
gregkh/linux@0dd1cf48a421 iommu/amd: Fix a stale comment about which legacy mode is user visible
gregkh/linux@8960088511ca soc: mediatek: mtk-mmsys: Restore MT8167 routing masks lost during merge
gregkh/linux@e003f3a4be73 bpf: fix crash in bpf[set|remove]_dentry_xattr for negative dentries
gregkh/linux@02367b12b303 uaccess: fix ignored_trailing logic in copy_struct_to_user()
gregkh/linux@9fe7605c1c14 arm64: dts: mediatek: mt8192-asurada: Move PCIe DMA bounce buffer to host
gregkh/linux@8200ffd8259f rust: alloc: fix
Vec::extend_withSAFETY commentgregkh/linux@2e2e5888764b clk: scmi: Fix clock rate rounding
gregkh/linux@886fb63981a9 arm64: dts: qcom: kodiak: Fix ICE reg size
gregkh/linux@27af16a44f59 arm64: dts: qcom: sm8450: Fix ICE reg size
gregkh/linux@689bb48c828c drm/hisilicon/hibmc: add updating link cap in DP detect()
gregkh/linux@94ab8a6e02ba drm/hisilicon/hibmc: fix no showing when no connectors connected
gregkh/linux@28b91fd2adc4 drm/hisilicon/hibmc: move display contrl config to hibmc_probe()
gregkh/linux@4c57df82af83 drm/hisilicon/hibmc: use clock to look up the PLL value
gregkh/linux@a0f64cf8bfcb evm: terminate and bound the evm_xattrs read buffer
gregkh/linux@69bc4a399874 thermal: hwmon: Fix critical temperature attribute removal
gregkh/linux@d29b9c38f6eb clk: scpi: Unregister child clock providers on remove
gregkh/linux@8b42290df176 net/sched: sch_hfsc: annotate data-races in hfsc_dump_class_stats()
gregkh/linux@cb414aff28e1 scsi: hisi_sas: Add slave_destroy interface for v3 hw
gregkh/linux@21650fe221ea crypto: ccp - Treat zero-length cert chain as query for blob lengths
gregkh/linux@68eae3592438 spi: hisi-kunpeng: Use dev_err_probe() for host registration failure
gregkh/linux@d8cae30582f0 net/sched: sch_htb: do not change sch->flags in htb_dump()
gregkh/linux@5c1196b5a3bf net/sched: sch_htb: annotate data-races (I)
gregkh/linux@b61af0268e3d ipv6: addrconf: bail out of dad_failure when state is no longer POSTDAD
gregkh/linux@65e344925fa3 IB/mlx5: Fix transport-domain rollback and initialize lb mutex earlier
gregkh/linux@2cd221fca036 RDMA/hns: Fix arithmetic overflow in calc_hem_config()
gregkh/linux@ffa85a2c1979 RDMA/mlx5: Fix UMR XLT cleanup on ODP populate failure
gregkh/linux@5100febf8e9d RDMA/mlx5: Fix devx subscribe-event unwind NULL dereference
gregkh/linux@65572fbd8603 RDMA/srpt: fix integer overflow in immediate data length check
gregkh/linux@be2c137f23d1 RDMA/hns: Initialize seqfile before creating file
gregkh/linux@7471006cd854 drm/syncobj: Fix memory leak in drm_syncobj_find_fence()
gregkh/linux@e4d599a286b5 selftests/bpf: Reject unsupported -k option in vmtest.sh
gregkh/linux@bcfc49f1bcf1 selftests/bpf: Fix test for refinement of single-value tnum
gregkh/linux@6a357ceb2110 iommu/arm-smmu-qcom: Fix fastrpc compatible string in ACTLR client match table
gregkh/linux@5e353d9497f9 selftests/mm: Fix resv_sz when parsing arm64 signal frame
gregkh/linux@0da72a88dbba firmware: arm_ffa: Honor partition info descriptor size
gregkh/linux@6a576739ce4c arm64: dts: imx8dxl-evk: Remove unnecessary PCIe EP properties
gregkh/linux@084d7d5668f3 arm64: dts: imx8qxp-mek: Remove unnecessary PCIe EP vpcie-supply
gregkh/linux@5d6f34dc4f05 arm64: dts: imx95-19x19-evk: Fix PCIe EP vpcie-supply
gregkh/linux@2e3e4cc0dd34 media: atomisp: Fix memory leak in atomisp_fixed_pattern_table()
gregkh/linux@d57e67ea48e4 media: atomisp: gc2235: fix UAF and memory leak
gregkh/linux@63aa7dda9a1e staging: media: atomisp: fix loop shadowing in ia_css_stream_destroy()
gregkh/linux@3024229e4a5a riscv: dts: spacemit: set console baud rate on Milk-V Jupiter
gregkh/linux@1f60c3cc302d firmware: smccc: Fix Arm SMCCC SOC_ID name call
gregkh/linux@bac3e70c2fb1 firmware: arm_scmi: Read sensor config as 32-bit value
gregkh/linux@407aeb8c1aee sysfs: clamp show() return value in sysfs_kf_read()
gregkh/linux@75c0bc011abd bitops: use common function parameter names
gregkh/linux@c67c67204766 regulator: dt-bindings: mt6359: Drop regulator-name pattern restrictions
gregkh/linux@16bf3154f8a8 tools/nolibc: getopt: Fix potential out of bounds access
gregkh/linux@276e731b1b57 nilfs2: Fix return in nilfs_mkdir
gregkh/linux@a88f6da618e8 net/sched: sch_drr: annotate data-races around cl->deficit
gregkh/linux@15e7368de584 media: rockchip: rga: fix too small buffer size
gregkh/linux@11daac2817dc firmware: arm_scmi: Fix OOB in scmi_power_name_get()
gregkh/linux@b3e05859cb51 arm64: dts: qcom: lemans: Add power-domain and iface clk for ice node
gregkh/linux@a2303478e730 arm64: dts: qcom: monaco: Add power-domain and iface clk for ice node
gregkh/linux@dc36463b283d arm64: dts: qcom: sc7180: Add power-domain and iface clk for ice node
gregkh/linux@a8be1bc8d124 arm64: dts: qcom: kodiak: Add power-domain and iface clk for ice node
gregkh/linux@0d0ce8c7025a arm64: dts: qcom: sm8450: Add power-domain and iface clk for ice node
gregkh/linux@3c808cac676c arm64: dts: qcom: sm8550: Add power-domain and iface clk for ice node
gregkh/linux@4ba44339fd3a arm64: dts: qcom: sm8650: Add power-domain and iface clk for ice node
gregkh/linux@09a2a7d041a7 arm64: dts: qcom: sm8750: Add power-domain and iface clk for ice node
gregkh/linux@baa333b2700a tracing: Bound synthetic-field strings with seq_buf
gregkh/linux@2469039f0fd6 arm64: dts: qcom: lemans: Add eDP ref clock for eDP PHYs
gregkh/linux@29de8448174c writeback: drop now-unnecessary rcu_barrier() in cgroup_writeback_umount()
gregkh/linux@b0444205ba39 kernfs: fix suspicious RCU usage in kernfs_put()
gregkh/linux@62c8cc825f49 device property: fix fwnode reference leak in fwnode_graph_get_endpoint_by_id()
gregkh/linux@2df37ead6d84 driver core: Use mod_delayed_work to prevent lost deferred probe work
gregkh/linux@ae62edb00c0e Revert "treewide: Fix probing of devices in DT overlays"
gregkh/linux@4a6f5cc42c7b of: dynamic: Fix overlayed devices not probing because of fw_devlink
gregkh/linux@376951c51cdd crypto: eip93 - fix reset ring register definition
gregkh/linux@3fcbfc50dd52 cpufreq: Documentation: fix sampling_down_factor range
gregkh/linux@13db458099f2 cpufreq: conservative: Simplify frequency limit handling
gregkh/linux@c11039512df4 pwm: imx27: Fix variable truncation in .apply()
gregkh/linux@090f5fb1e3e2 RDMA/mana_ib: Use ib_get_eth_speed for reporting port speed
gregkh/linux@394ed8ad0588 bus: sunxi-rsb: Always check register address validity
gregkh/linux@7a551951ebeb pinctrl: spacemit: fix NULL check in spacemit_pin_set_config
gregkh/linux@424d51d33c75 RDMA/irdma: Fix out-of-bounds write in irdma_copy_user_pgaddrs
gregkh/linux@e59a6aa89e0f RDMA/rxe: Fix a use-after-free problem in rxe_mmap
gregkh/linux@f67fbbfc3beb IB/mlx4: Fix refcount leak in add_port() error path
gregkh/linux@16138ea9833d RDMA/hns: Fix warning in poll cq direct mode
gregkh/linux@66f44ec974ab RDMA/hns: Fix log flood after cmd_mbox failure
gregkh/linux@9420871183ea RDMA/counter: Fix incorrect port index in rdma_counter_init() error cleanup
gregkh/linux@80f8e2302e63 pinctrl: meson: amlogic-a4: fix gpio output glitch
gregkh/linux@c9670fd84df1 PM: sleep: Use complete() in device_pm_sleep_init()
gregkh/linux@c9a3ceeddc6a MIPS: Fix big-endian stack argument fetching in o32 wrapper
gregkh/linux@0c83d13f9b3f MIPS: DEC: Remove do_IRQ() call indirection
gregkh/linux@8db227dd895a mips: ralink: mt7621: add missing __iomem
gregkh/linux@2c12b0dfceda mips: n64: add __iomem for writel call
gregkh/linux@0a294feec21b driver core: Fix missing jiffies conversion in deferred_probe_extend_timeout()
gregkh/linux@3880ee7c88d7 driver core: Guard deferred probe timeout extension with delayed_work_pending()
gregkh/linux@c4bb92b3ef54 mtd: spi-nor: debugfs: Fix the flags list
gregkh/linux@02f156309de0 mtd: spi-nor: Drop duplicate Kconfig dependency
gregkh/linux@56694f00fbe1 ALSA: xen-front: Reset event channel state on stream clear
gregkh/linux@de236b813d8b ALSA: xen-front: Connect event channel after stream prepare
gregkh/linux@6dc781778b59 ALSA: seq: oss: Fix UAF at handling events with embedded SysEx data
gregkh/linux@11165fe2c5ea ALSA: seq: midi: Serialize output teardown with event_input
gregkh/linux@c418c956c21c selftests: Fix Makefile target for nsfs
gregkh/linux@95e0b4bc29ab pinctrl: nuvoton: ma35d1: fix MFP register offset and pin table
gregkh/linux@2739d234d895 pinctrl: cs42l43: Fix leaked pm reference on error path
gregkh/linux@eb9280ea8dbd pinctrl: cs42l43: Fix polarity on debounce
gregkh/linux@24639c4dc466 init/initramfs_test: wait_for_initramfs() before running
gregkh/linux@ba3209704b3c nvmet-tcp: fix page fragment cache leak in error path
gregkh/linux@cba2ee57fd30 nvmet-tcp: check return value of nvmet_tcp_set_queue_sock
gregkh/linux@140d6fff4ed2 nvme-multipath: fix flex array size in struct nvme_ns_head
gregkh/linux@3e8aed5edaee nvme-pci: fix out-of-bounds access in nvme_setup_descriptor_pools
gregkh/linux@dc1470299d11 workqueue: drop spurious '' from print_worker_info() fn declaration
gregkh/linux@0db1949084e8 ipv6: guard against possible NULL deref in __in6_dev_stats_get()
gregkh/linux@10753da2d659 net/sched: cls_bpf: prevent unbounded recursion in offload rollback
gregkh/linux@dc266f6c4e26 iommu/amd: Fix premature break in init_iommu_one()
gregkh/linux@b7ac7ba19a0b rtla: Introduce for_each_action() helper
gregkh/linux@05d85fd32e4f rtla/actions: Restore continue flag in actions_perform()
gregkh/linux@40a2a91da02c drm/tegra: gr2d/gr3d: Initialize address register map before HOST1X client is registered
gregkh/linux@6b617b6ccb6e drm/tegra: gr2d/gr3d: Contain PM in the grd_probe/gr*d_remove
gregkh/linux@8c0d3cf0d510 gpu: host1x: Allow entries in BO caches to be freed
gregkh/linux@142b34f7e329 drm/tegra: dc: Fix device node reference leak in tegra_dc_has_output()
gregkh/linux@79240eee5a40 gpu: host1x: Fix iommu_map_sgtable() return value check
gregkh/linux@2ab7c96d8c3f drm/tegra: Fix iommu_map_sgtable()...