| alsa-asihpi-avoid-write-overflow-check-warning.patch |
| asoc-sof-topology-reject-invalid-vendor-array-size-i.patch |
| can-mcp251x-add-error-handling-for-power-enable-in-o.patch |
| btrfs-tracepoints-get-correct-superblock-from-dentry.patch |
| alsa-hda-realtek-add-mute-led-quirk-for-hp-pavilion-.patch |
| netfilter-nft_set_pipapo_avx2-don-t-return-non-match.patch |
| wifi-wl1251-validate-packet-ids-before-indexing-tx_f.patch |
| asoc-soc-core-call-missing-init_list_head-for-card_a.patch |
| alsa-usb-audio-fix-quirk-flags-for-neuraldsp-quad-co.patch |
| fs-smb-client-fix-out-of-bounds-read-in-cifs_sanitiz.patch |
| pinctrl-intel-fix-the-revision-for-new-features-1koh.patch |
| hid-quirks-add-hid_quirk_always_poll-for-8bitdo-pro-.patch |
| hid-roccat-fix-use-after-free-in-roccat_report_event.patch |
| ata-ahci-force-32-bit-dma-for-jmicron-jmb582-jmb585.patch |
| wifi-brcmfmac-validate-bsscfg-indices-in-if-events.patch |
| asoc-stm32_sai-fix-incorrect-bclk-polarity-for-dsp_a.patch |
| soc-aspeed-socinfo-mask-table-entries-for-accurate-s.patch |
| arm64-dts-imx8mq-set-the-correct-gpu_ahb-clock-frequ.patch |
| pci-hv-set-default-numa-node-to-0-for-devices-withou.patch |
| drm-vc4-fix-memory-leak-of-bo-array-in-hang-state.patch |
| drm-vc4-fix-a-memory-leak-in-hang-state-error-path.patch |
| drm-vc4-protect-madv-read-in-vc4_gem_object_mmap-wit.patch |
| epoll-use-refcount-to-reduce-ep_mutex-contention.patch |
| eventpoll-defer-struct-eventpoll-free-to-rcu-grace-p.patch |
| net-sched-act_csum-validate-nested-vlan-headers.patch |
| net-lapbether-handle-netdev_pre_type_change.patch |
| ipv4-icmp-fix-null-ptr-deref-in-icmp_build_probe.patch |
| nfc-s3fwrn5-allocate-rx-skb-before-consuming-bytes.patch |
| tracing-probe-reject-non-closed-empty-immediate-stri.patch |
| e1000-check-return-value-of-e1000_read_eeprom.patch |
| xsk-tighten-umem-headroom-validation-to-account-for-.patch |
| xfrm-wait-for-rcu-readers-during-policy-netns-exit.patch |
| xfrm_user-fix-info-leak-in-build_mapping.patch |
| netfilter-nfnetlink_log-initialize-nfgenmsg-in-nlmsg.patch |
| netfilter-xt_multiport-validate-range-encoding-in-ch.patch |
| netfilter-ip6t_eui64-reject-invalid-mac-header-for-a.patch |
| af_unix-read-unix_diag_vfs-data-under-unix_state_loc.patch |
| l2tp-drop-large-packets-with-udp-encap.patch |
| gpio-tegra-fix-irq_release_resources-calling-enable-.patch |
| perf-x86-intel-uncore-skip-discovery-table-for-offli.patch |
| i3c-fix-uninitialized-variable-use-in-i2c-setup.patch |
| netfilter-conntrack-add-missing-netlink-policy-valid.patch |
| mips-mm-kmalloc-tlb_vpn-array-to-avoid-stack-overflo.patch |
| mips-mm-allocate-tlb_vpn-array-atomically.patch |
| mips-always-record-segbits-in-cpu_data.vmbits.patch |
| mips-mm-suppress-tlb-uniquification-on-ehinv-hardwar.patch |
| mips-mm-rewrite-tlb-uniquification-for-the-hidden-bi.patch |
| alsa-usb-audio-improve-focusrite-sample-rate-filteri.patch |
| alsa-usb-audio-update-for-native-dsd-support-quirks.patch |
| alsa-usb-audio-remove-validate_rates-quirk-for-focus.patch |
| batman-adv-hold-claim-backbone-gateways-by-reference.patch |
| nfc-llcp-add-missing-return-after-llcp_closed-checks.patch |
| can-raw-fix-ro-uniq-use-after-free-in-raw_rcv.patch |
| i2c-s3c24xx-check-the-size-of-the-smbus-message-before-using-it.patch |
| staging-rtl8723bs-initialize-le_tmp64-in-rtw_bip_verify.patch |
| hid-alps-fix-null-pointer-dereference-in-alps_raw_event.patch |
| hid-core-clamp-report_size-in-s32ton-to-avoid-undefined-shift.patch |
| net-usb-cdc-phonet-fix-skb-frags-overflow-in-rx_complete.patch |
| nfc-digital-bounds-check-nfc-a-cascade-depth-in-sdd-response-handler.patch |
| alsa-fireworks-bound-device-supplied-status-before-string-array-lookup.patch |
| fbdev-tdfxfb-avoid-divide-by-zero-on-fbioput_vscreeninfo.patch |
| usb-gadget-f_ncm-validate-minimum-block_len-in-ncm_unwrap_ntb.patch |
| usb-gadget-f_phonet-fix-skb-frags-overflow-in-pn_rx_complete.patch |
| usb-gadget-renesas_usb3-validate-endpoint-index-in-standard-request-handlers.patch |
| usbip-validate-number_of_packets-in-usbip_pack_ret_submit.patch |
| usb-storage-expand-range-of-matched-versions-for-vl817-quirks-entry.patch |
| fbdev-udlfb-avoid-divide-by-zero-on-fbioput_vscreeninfo.patch |
| staging-sm750fb-fix-division-by-zero-in-ps_to_hz.patch |
| usb-serial-option-add-telit-cinterion-fn990a-mbim-composition.patch |
| alsa-ctxfi-limit-ptp-to-a-single-page.patch |
| media-vidtv-fix-null-pointer-dereference-in-vidtv_channel_pmt_match_sections.patch |
| ocfs2-fix-use-after-free-in-ocfs2_fault-when-vm_fault_retry.patch |
| ocfs2-handle-invalid-dinode-in-ocfs2_group_extend.patch |
| kvm-sev-drop-warn-on-large-size-for-kvm_memory_encrypt_reg_region.patch |
| fsl-mc-use-driver_set_override-instead-of-open-codin.patch |
| smb-client-fix-potential-uaf-in-smb2_is_valid_oplock.patch |
| nf_tables-nft_dynset-fix-possible-stateful-expressio.patch |
| rxrpc-proc-size-address-buffers-for-pispc-output.patch |
| checkpatch-add-support-for-assisted-by-tag.patch |
| kvm-x86-use-scratch-field-in-mmio-fragment-to-hold-small-write-values.patch |
| mm-kasan-fix-double-free-for-kasan-pxds.patch |
| media-vidtv-fix-nfeeds-state-corruption-on-start_streaming-failure.patch |
| media-em28xx-fix-use-after-free-in-em28xx_v4l2_open.patch |
| alsa-6fire-fix-use-after-free-on-disconnect.patch |
| bcache-fix-cached_dev.sb_bio-use-after-free-and-crash.patch |
| media-as102-fix-to-not-free-memory-after-the-device-is-registered-in-as102_usb_probe.patch |
| nilfs2-fix-null-i_assoc_inode-dereference-in-nilfs_mdt_save_to_shadow_map.patch |
| media-vidtv-fix-pass-by-value-structs-causing-msan-warnings.patch |
| media-hackrf-fix-to-not-free-memory-after-the-device-is-registered-in-hackrf_probe.patch |
| net-tap-null-pointer-derefence-in-dev_parse_header_p.patch |
| pci-endpoint-pci-epf-vntb-remove-duplicate-resource-.patch |
| revert-net-ethernet-xscale-check-for-ptp-support-pro.patch |
| revert-net-ixp4xx_eth-convert-to-ndo_hwtstamp_get-an.patch |
| ipv6-add-null-checks-for-idev-in-srv6-paths.patch |
| gfs2-improve-gfs2_consist_inode-usage.patch |
| gfs2-validate-i_depth-for-exhash-directories.patch |
| wifi-mac80211-always-free-skb-on-ieee80211_tx_prepar.patch |
| pci-acpi-restrict-program_hpx_type2-to-aer-bits.patch |
| netfilter-nft_set_pipapo-do-not-rely-on-zero_size_ptr.patch |
| powerpc64-bpf-do-not-increment-tailcall-count-when-prog-is-null.patch |
| arm64-dts-imx8mq-librem5-set-the-dvs-voltages-lower.patch |
| arm64-dts-imx8mq-librem5-bump-buck1-suspend-voltage-to-0.81v.patch |
| revert-arm64-dts-imx8mq-librem5-set-the-dvs-voltages-lower.patch |
| arm64-dts-imx8mq-librem5-bump-buck1-suspend-voltage-up-to-0.85v.patch |
| ocfs2-add-inline-inode-consistency-check-to-ocfs2_validate_inode_block.patch |
| ocfs2-validate-inline-data-i_size-during-inode-read.patch |
| ocfs2-fix-out-of-bounds-write-in-ocfs2_write_end_inline.patch |
| xfrm-clear-trailing-padding-in-build_polexpire.patch |
| rxrpc-fix-key-quota-calculation-for-multitoken-keys.patch |
| rxrpc-fix-call-removal-to-use-rcu-safe-deletion.patch |
| rxrpc-reject-undecryptable-rxkad-response-tickets.patch |
| fs-ocfs2-fix-comments-mentioning-i_mutex.patch |
| ocfs2-fix-possible-deadlock-between-unlink-and-dio_end_io_write.patch |
| mm-blk-cgroup-fix-use-after-free-in-cgwb_release_workfn.patch |
| mptcp-fix-lock-class-name-family-in-pm_nl_create_listen_socket.patch |
| tty-n_gsm-fix-deadlock-and-link-starvation-in-outgoing-data-path.patch |
| netdevsim-fix-memory-leak-of-nsim_dev-fa_cookie.patch |
| revert-nvme-nvme-fc-ensure-ioerr_work-is-cancelled-in-nvme_fc_delete_ctrl.patch |
| nvme-nvme-fc-ensure-ioerr_work-is-cancelled-in-nvme_fc_delete_ctrl.patch |
| alsa-control-avoid-warn-for-symlink-errors.patch |
| s390-xor-fix-xor_xc_2-inline-assembly-constraints.patch |
| f2fs-fix-null-ptr-deref-in-f2fs_submit_page_bio.patch |
| wifi-iwlwifi-read-txq-read_ptr-under-lock.patch |
| blk-mq-use-quiesced-elevator-switch-when-reinitializing-queues.patch |
| dm-verity-disable-recursive-forward-error-correction.patch |
| net-add-skb_header_pointer_careful-helper.patch |
| net-sched-cls_u32-use-skb_header_pointer_careful.patch |
| dmaengine-mmp_pdma-fix-race-condition-in-mmp_pdma_residue.patch |
| fs-dlm-fix-use-after-free-in-midcomms-commit.patch |
| spi-cadence-quadspi-implement-refcount-to-handle-unbind-during-busy.patch |
| x86-uprobes-fix-xol-allocation-failure-for-32-bit-tasks.patch |
| btrfs-send-check-for-inline-extents-in-range_is_hole_in_parent.patch |
| btrfs-do-not-strictly-require-dirty-metadata-threshold-for-metadata-writepages.patch |
| mailbox-prevent-out-of-bounds-access-in-of_mbox_index_xlate.patch |
| bluetooth-hci_core-fix-use-after-free-in-vhci_flush.patch |
| dlm-fix-possible-lkb_resource-null-dereference.patch |
| bpf-do-mark_chain_precision-for-arg_const_alloc_size_or_zero.patch |
| gfs2-no-more-self-recovery.patch |
| binfmt_misc-restore-write-access-before-closing-files-opened-by-open_exec.patch |
| drm-amdgpu-unmap-and-remove-csa_va-properly.patch |
| nvmet-always-initialize-cqe.result.patch |
| net-stmmac-fix-tso-dma-api-usage-causing-oops.patch |
| f2fs-fix-to-wait-on-block-writeback-for-post_read-case.patch |
| pstore-inode-only-d_invalidate-is-needed.patch |
| alsa-usb-audio-kill-timer-properly-at-removal.patch |
| ice-add-netif_device_attach-detach-into-pf-reset-flow.patch |
| iio-imu-inv_icm42600-fix-odr-switch-when-turning-buffer-off.patch |
| bluetooth-af_bluetooth-fix-deadlock.patch |
| can-gs_usb-gs_usb_xmit_callback-fix-handling-of-failed-transmitted-urbs.patch |
| vdpa-add-max-vqp-attr-to-vdpa_nl_policy-for-nlattr-length-check.patch |
| f2fs-fix-to-trigger-foreground-gc-during-f2fs_map_blocks-in-lfs-mode.patch |
| sunrpc-lock-against-sock-changing-during-sysfs-read.patch |
| net-usb-lan78xx-fix-double-free-issue-with-interrupt-buffer-allocation.patch |
| btrfs-lock-the-inode-in-shared-mode-before-starting-fiemap.patch |
| fs-ntfs3-add-more-attributes-checks-in-mi_enum_attr.patch |
| rxrpc-fix-recvmsg-unconditional-requeue.patch |
| cpufreq-governor-free-dbs_data-directly-when-gov-init-fails.patch |
| cpufreq-governor-fix-double-free-in-cpufreq_dbs_governor_init-error-path.patch |
| md-md-bitmap-synchronize-bitmap_get_stats-with-bitmap-lifetime.patch |
| fbdev-efifb-register-sysfs-groups-through-driver-core.patch |
| net-clear-the-dst-when-changing-skb-protocol.patch |
| cpufreq-avoid-a-bad-reference-count-on-cpu-node.patch |
| drivers-base-free-devm-resources-when-unregistering-a-device.patch |
| revert-wifi-cfg80211-stop-nan-and-p2p-in-cfg80211_leave.patch |
| scripts-dtc-remove-unused-dts_version-in-dtc-lexer.l.patch |
| io_uring-poll-fix-epoll_uring_wake-sometimes-not-being-masked-in.patch |
| io_uring-poll-fix-backport-of-io_poll_add-changes.patch |
| ksmbd-unset-conn-binding-on-failed-binding-request.patch |
| rxrpc-only-handle-response-during-service-challenge.patch |
| rxrpc-fix-anonymous-key-handling.patch |
| iommu-fix-a-reference-count-leak-in-iommu_sva_bind_device.patch |
| fs-ntfs3-validate-rec-used-in-journal-replay-file-record-check.patch |
| fuse-reject-oversized-dirents-in-page-cache.patch |
| fuse-quiet-down-complaints-in-fuse_conn_limit_write.patch |
| alsa-usb-audio-apply-quirk-for-moondrop-ju-jiu.patch |
| alsa-caiaq-take-a-reference-on-the-usb-device-in-create_card.patch |
| crypto-ccp-don-t-attempt-to-copy-csr-to-userspace-if-psp-command-failed.patch |
| crypto-ccp-don-t-attempt-to-copy-pdh-cert-to-userspace-if-psp-command-failed.patch |
| crypto-ccp-don-t-attempt-to-copy-id-to-userspace-if-psp-command-failed.patch |
| rxrpc-fix-missing-validation-of-ticket-length-in-non-xdr-key-preparsing.patch |
| tty-n_gsm-fix-flow-control-handling-in-tx-path.patch |
| alsa-usb-audio-fix-race-condition-to-uaf-in-snd_usbmidi_free.patch |
| alsa-usb-audio-stop-parsing-uac2-rates-at-max_nr_rates.patch |
| alsa-usb-audio-avoid-false-e-mu-sample-rate-notifications.patch |
| alsa-usb-audio-fix-audio-advantage-micro-ii-spdif-switch.patch |
| usb-xhci-make-usb_host_endpoint.hcpriv-survive-endpoint_disable.patch |
| alsa-usb-audio-evaluate-packsize-caps-at-the-right-place.patch |
| drm-nouveau-fix-u32-overflow-in-pushbuf-reloc-bounds-check.patch |
| misc-ibmasm-fix-oob-mmio-read-in-ibmasm_handle_mouse_interrupt.patch |
| ibmasm-fix-oob-reads-in-command_file_write-due-to-missing-size-checks.patch |
| ibmasm-fix-heap-over-read-in-ibmasm_send_i2o_message.patch |
| firmware-google-framebuffer-do-not-mark-framebuffer-as-busy.patch |
| scsi-ufs-core-fix-use-after-free-in-init-error-and-r.patch |
| device-property-make-modifications-of-fwnode-flags-thread-safe.patch |
| ocfs2-split-transactions-in-dio-completion-to-avoid-credit-exhaustion.patch |
| padata-fix-pd-uaf-once-and-for-all.patch |
| padata-remove-comment-for-reorder_work.patch |
| driver-core-don-t-let-a-device-probe-until-it-s-read.patch |
| um-drivers-call-kernel_strrchr-explicitly-in-cow_user.c.patch |
| crypto-pcrypt-fix-handling-of-may_backlog-requests.patch |
| alsa-control-validate-buf_len-before-strnlen-in-snd_ctl_elem_init_enum_names.patch |
| net-caif-clear-client-service-pointer-on-teardown.patch |
| net-strparser-fix-skb_head-leak-in-strp_abort_strp.patch |
| pci-endpoint-pci-epf-ntb-remove-duplicate-resource-teardown.patch |
| revert-alsa-usb-increase-volume-range-that-triggers-a-warning.patch |
| lib-ts_kmp-fix-integer-overflow-in-pattern-length-calculation.patch |
| media-i2c-imx219-check-return-value-of-devm_gpiod_get_optional-in-imx219_probe.patch |
| net-qrtr-ns-fix-use-after-free-in-driver-remove.patch |
| ext2-reject-inodes-with-zero-i_nlink-and-valid-mode-in-ext2_iget.patch |
| alsa-aoa-i2sbus-fix-of-node-lifetime-handling.patch |
| alsa-ctxfi-add-fallback-to-default-rsr-for-s-pdif.patch |
| alsa-seq_oss-return-full-count-for-successful-seq_fullsize-writes.patch |
| md-raid10-fix-deadlock-with-check-operation-and-nowait-requests.patch |
| nvme-pci-add-nvme_quirk_disable_write_zeroes-for-kingston-om3sgp4.patch |
| parisc-_llseek-syscall-is-only-available-for-32-bit-userspace.patch |
| selftests-mqueue-fix-incorrectly-named-file.patch |
