queue-6.18/series

bnxt_en-fix-dma-mapping-length-for-padded-small-pack.patch
fs-free-any-excess-xarray-nodes-in-clear_inode.patch
net-mlx5e-prevent-stale-xsk-buffer-release-on-refill.patch
net-mlx5e-prevent-stale-xsk-buffer-release-on-mpwqe-.patch
net-mana-check-xdp_rxq-registration-before-unreg-in-.patch
net-mana-skip-wq-object-destruction-for-uninitialize.patch
netfs-zero-the-tail-of-a-short-dio-unbuffered-read.patch
doc-netlink-netlink-raw-add-max-check.patch
ynl-fix-schema-check-errors.patch
accel-amdxdna-bound-the-sync_bo-flush-range-to-the-b.patch
f2fs-fix-to-shrink-gc_lock-coverage-in-f2fs_gc_range.patch
f2fs-fix-to-reset-all-pinned-status-during-fggc.patch
net-dsa-mt7530-fix-.get_stats64-sleeping-in-atomic-c.patch
crypto-drbg-fix-ineffective-sanity-check.patch
ipv6-fix-redirect-exception-creation-for-udp-raw-soc.patch
ipv4-validate-checksum_start-before-completing-checksum.patch
rust_binder-reschedule-node-refcount-update-on-thread-exit.patch
ipv4-stop-pmtu-walk-when-nexthop-group-shrinks.patch
ipv4-stop-exception-dump-when-nexthop-group-shrinks.patch
ipv4-stop-route-notification-sizing-when-nexthop-group-shrinks.patch
ipv4-do-not-warn-on-route-notification-size-race.patch
ipv6-do-not-warn-on-route-notification-size-race.patch
input-ati_remote2-fix-type-confusion-in-device-attribute-handlers.patch
input-xpad-add-support-for-8bitdo-pro-2-wired-controller-for-xbox.patch
input-xpad-add-support-for-corsair-novablade-pro.patch
alsa-ctxfi-fix-memory-leakage-when-clearing-dao-input-mappers.patch
alsa-hda-tas2781-accept-v1-calibration-data-without-crc.patch
arm64-irq-exclude-the-softirq-stack-switch-from-kcov.patch
asoc-amd-yc-add-dmi-quirk-for-acer-aspire-go-15-ag15-21p.patch
btrfs-scrub-fix-local_root-reference-leak-in-scrub_print_warning_inode.patch
cgroup-cpuset-handle-cpu-hotplug-race-in-guarantee_active_cpus.patch
cipso-adjust-cached-option-offsets-when-removing-cipso.patch
dm-ioctl-don-t-let-data_start-run-past-the-buffer.patch
usb-f81604-fix-struct-f81604_int_data-size-mismatch.patch
vsock-virtio-account-only-unread-bytes-in-read_skb.patch
wifi-brcmfmac-fix-p2p-device-removal-race-in-brcmf_detach.patch
wifi-mt76-mt7603-initialize-global-station-wcid.patch
wifi-mt76-mt7996-fix-uninitialized-buf-read-in-mt7996_variant_fem_init.patch
wireguard-queueing-preserve-tstamp_type-when-encapsulating-packet.patch
wireguard-noise-reject-response-consumption-after-intermediate-initiation.patch
workqueue-fix-null-current_pwq-deref-in-chained-work-check.patch
xen-netfront-don-t-leak-the-skb-when-xennet_fill_frags-fails.patch
tee-shm-reject-zero-sized-allocations-in-tee_dyn_shm_alloc_helper.patch
strparser-make-sure-__strp_recv-isn-t-running-before-tearing-down-the-parser.patch
swiotlb-fix-default_swiotlb_limit-for-non-growable-default-pool.patch
tcp-reject-net_iov-in-zerocopy-receive-mapping-hints.patch
tipc-destroy-topsrv-workqueues-before-closing-connections.patch
tipc-hold-a-reference-to-nodes-found-by-link-name.patch
revert-wifi-libertas-reject-short-monitor-tx-frames.patch
risc-v-clear-hstatus.hu-on-cpu-initialization.patch
selinux-fix-data-race-on-avc-latest_notif.patch
selinux-preserve-native_labels-on-already-initialized-sb-in-set_mnt_opts.patch
sctp-copy-zeroed-stats-to-user-in-sctp_getsockopt_pr_streamstatus-when-streamoute.patch
edac-amd64-mask-umc-chip-select-to-the-four-implemented-selects.patch
gpio-mpsse-fix-race-when-arming-the-irq-poll-worker.patch
gpio-xilinx-fix-runtime-pm-leak-on-request-error-path.patch
gve-fix-napi_disable-deadlock-when-attempting-to-disable-xsk-pools.patch
gve-fix-xsk-buffer-leak-when-rings-are-stopped.patch
gve-fix-xsk-buffer-leak-on-error-descriptor.patch
ibmveth-h_free-logical-lan-on-open-fail-after-register.patch
ibmveth-fix-tx-ltb-and-filter-unwind-on-open-fail.patch
ice-fix-use-after-free-in-dynamic-port-cleanup.patch
ice-fix-metadata_dst-refcount-handling-on-representor-teardown.patch
keys-finalize-persistent-keyring-timeout-after-link-attempt.patch
keys-fix-add_key-race-with-keyring-restriction.patch
memstick-core-wait-for-request-completion-before-freeing-card.patch
memstick-rtsx_usb_ms-complete-requests-after-eject-instead-of-dropping-them.patch
mm-don-t-schedule-deferred-kernel-page-table-freeing-while-booting.patch
dm-crypt-reject-the-lmk-iv-mode-with-aead-ciphers.patch
dm-integrity-fix-buffer-overflow-in-inline-mode-with-large-tag-size.patch
dm-snap-reject-the-transient-exception-store-for-snapshot-merge.patch
dm-fix-reading-free-memory-in-do_resume.patch
mmc-cavium-octeon-destroy-slot-platform-devices-on-remove.patch
mmc-cavium-thunderx-destroy-slot-platform-devices-on-remove.patch
mmc-mtk-sd-cancel-request-timeout-work-on-remove.patch
mmc-sdhci-sprd-disable-runtime-pm-on-remove.patch
net-packet-guard-the-ll-header-push-in-packet_rcv_spkt.patch
net-smc-protect-clcsock-lifetime-in-smc_getname.patch
net-bridge-avoid-recursive-multicast-port-cleanup.patch
net-dsa-microchip-fix-ksz8765-fiber-detection.patch
net-skbuff-don-t-leave-stale-bytes-in-skb_copy_and_csum_bits.patch
net-sparx5-free-the-matchall-entry-on-destroy.patch
net-usb-ax88179_178a-fix-rx-frame-length-for-non-last-packets.patch
net-team-stop-reusing-skb-after-queue-override.patch
net-team-free-skb-when-broadcast-has-no-txable-port.patch
nvme-fix-swapped-zrasf-zone-state-values-for-full-and-read-only.patch
openvswitch-fix-soft-lockup-in-the-netlink-flow-dump.patch
optee-register-tee-devices-only-once-fully-initialized.patch
regulator-ltc3676-don-t-read-the-write-only-hrst-and-clirq-registers.patch
regulator-tps6594-regulator-fix-n_linear_ranges-for-tps65224-buck2-4.patch
pmdomain-imx8m-blk-ctrl-serialize-power-on-off-across-sibling-domains.patch
pmdomain-rockchip-don-t-ignore-clock-lookup-errors-on-attach.patch
pmdomain-rockchip-fix-clock-leak-on-domain-probe-failure.patch
pmdomain-rockchip-propagate-subdomain-add-errors.patch
scsi-qedi-initialize-callback-state-before-registration.patch
riscv-entry-gate-shadow-call-stack-reload-on-sstatus.spp-not-tp.patch
riscv-errata-select-riscv_alternative_early-for-thead-ghostwrite.patch
riscv-fix-load_unaligned_zeropad-fixup-for-rv32.patch
riscv-futex-untag-the-user-pointer-before-the-atomic-access.patch
riscv-hwprobe-use-_bitull-rather-than-bit-in-mips-vendor-uapi-header.patch
bluetooth-btintel_pcie-use-managed-irq-teardown.patch
bluetooth-hci_sock-serialize-dead-device-detachment.patch
bluetooth-hci_sync-fix-command-skb-lifetime-during-scan-setup.patch
bluetooth-iso-reject-concurrent-bis-listener-setup.patch
bluetooth-iso-serialize-concurrent-connect-calls.patch
bluetooth-mgmt-fix-status-of-pending-commands-flushed-on-power-off.patch
bluetooth-sco-serialise-sco_conn-lifetime-against-sco_recv_scodata.patch
bluetooth-rfcomm-free-the-skb-when-the-dlc-has-no-owner.patch
bluetooth-rfcomm-fix-null-tty_dev-dereference-in-rfcomm_dev_shutdown.patch
drm-fb-helper-defer-setup-when-fbdev_probe-fails-not-just-on-eagain.patch
drm-gud-don-t-keep-a-connector-without-a-crtc-as-connector_state.patch
drm-i915-gem-prevent-overstepping-exec-array-boundary.patch
drm-i915-gt-unmask-interrupts-only-when-active-is-true.patch
drm-imagination-size-page-table-preallocation-by-device-address.patch
drm-vc4-drain-the-hangcheck-timer-and-works-on-v3d-unbind.patch
drm-vc4-fix-firmware-reference-leak-in-vc4_drm_bind.patch
drm-vmwgfx-validate-pitch-coming-from-userspace.patch
drm-xe-fix-shrinker-accounting-double-subtraction-on-nested-external-pins.patch
drm-xe-fix-stale-pinned_link-entry-when-fb-pin-performs-the-final-unpin.patch
drm-amdkfd-align-sdma-doorbell-base-for-shader-doorbell-writes.patch
drm-amdkfd-fix-dma_buf-reference-leak-in-get_dmabuf_info.patch
drm-amdgpu-serialize-vblank-counter-reads-against-gpu-reset.patch
drm-amdgpu-make-mac-fb-workaround-generic.patch
drm-amdgpu-copy-debugfs-register-data-outside-the-grbm-srbm-locks.patch
drm-amdgpu-userq-only-accept-doorbell-bos-as-queue-doorbell.patch
drm-amdgpu-userq-return-the-memdup_user-error-for-the-user-mqd.patch
drm-amd-display-fix-direct-scanout-alpha-on-some-drm_formats.patch
mount-keep-a-copied-mount-unbindable.patch
fs-don-t-silently-unmount-busy-mounts.patch
namespace-reset-the-old-parent-s-overmount-in-mnt_change_mountpoint.patch
namespace-don-t-inherit-mnt_umount-in-clone_mnt.patch
namespace-don-t-copy-an-unmounted-mount-tree.patch
fs-refuse-fspick-on-internal-superblocks.patch
namespace-check-the-target-before-walking-it-in-do_mount_setattr.patch
namespace-queue-a-mount-only-once-for-mount-notifications.patch
namespace-check-a-submount-for-references-right-before-unmounting-it.patch
namespace-check-a-recursive-bind-mount-for-mount-namespace-loops.patch
namespace-look-at-the-topmost-mount-for-a-mount-namespace-file.patch
namespace-remove-the-fsnotify-marks-of-a-mount-namespace-in-process-context.patch
namespace-check-the-mounts-before-reading-their-parents-in-pivot_root.patch
dcache-don-t-put-a-mountpoint-on-a-dentry-that-s-being-removed.patch
namespace-don-t-let-a-pseudo-dentry-become-the-root-of-a-mount.patch
namespace-unhash-a-dentry-before-detaching-the-mounts-on-it.patch
namei-don-t-reveal-overmounted-entries-in-refwalk.patch
fcntl-refuse-f_set_rw_hint-on-an-immutable-inode.patch
namespace-refuse-an-automount-below-a-mount-that-is-in-no-namespace.patch
namespace-never-expire-a-locked-mount.patch
namespace-handle-mount-locking-for-automounts-correctly.patch
ata-libata-scsi-do-not-lose-check-condition-for-failed-atapi-commands.patch
accel-amdxdna-enhance-runtime-power-management.patch
accel-amdxdna-add-hardware-specific-attributes.patch
accel-amdxdna-fix-potential-null-pointer-dereference.patch
pci-add-wq_percpu-to-alloc_workqueue-users.patch
pci-endpoint-add-missing-null-check-for-alloc_workqu.patch
accel-amdxdna-fix-null-pointer-dereference-of-mgmt_c.patch
blktrace-fix-__this_cpu_read-write-in-preemptible-co.patch
ice-remove-legacy-rx-and-construct-skb.patch
ice-drop-page-splitting-and-recycling.patch
ice-fix-crash-in-ethtool-offline-loopback-test.patch
ice-fix-rxq-info-registering-in-mbuf-packets.patch
ice-change-xdp-rxq-frag_size-from-dma-write-length-t.patch
ti-icssg-convert-to-ndo_hwtstamp-api.patch
net-ti-icssg-prueth-add-functions-to-create-and-dest.patch
net-ti-icssg-prueth-make-emac_run_xdp-function-indep.patch
net-ti-icssg-prueth-fix-use-after-free-of-cppi-descr.patch
bluetooth-hci_event-move-wake-reason-storage-into-va.patch
alsa-ctxfi-add-hw-parameter-to-daio_mgr_dao_init.patch
alsa-ctxfi-use-explicit-output-flag-for-daio-resourc.patch
alsa-ctxfi-refactor-resource-alloc-for-sparse-mappin.patch
alsa-ctxfi-check-the-error-for-index-mapping.patch
bluetooth-hci_sync-hci_cmd_sync_queue_once-return-ee.patch
static_call-allow-using-static_call_tramp_str-from-a.patch
mshv-refactor-and-rename-memory-region-handling-func.patch
mshv-centralize-guest-memory-region-destruction.patch
mshv-move-region-management-to-mshv_regions.c.patch
mshv-fix-error-handling-in-mshv_region_pin.patch
srcu-use-irq_work-to-start-gp-in-tiny-srcu.patch
drm-amd-display-rename-fams2-global-control-lock-to-.patch
drm-amd-display-adjust-phy-fsm-transition-to-tx_en-t.patch
asoc-qcom-q6asm-handle-the-responses-after-closing.patch
asoc-qcom-q6asm-drop-dsp-responses-for-closed-data-s.patch
hfs-replace-bug_on-with-error-handling-for-cnid-coun.patch
btrfs-do-not-assert-when-the-fs-flips-ro-inside-btrf.patch
btrfs-remove-reserved-argument-from-btrfs_pin_extent.patch
btrfs-don-t-bug-on-unexpected-delayed-ref-type-in-ru.patch
media-v4l2-mem2mem-add-a-kref-to-the-v4l2_m2m_dev-st.patch
media-verisilicon-avoid-g2-bus-error-while-decoding-.patch
soc-tegra-pmc-fix-unsafe-generic_handle_irq-call.patch
scsi-qla2xxx-completely-fix-fcport-double-free.patch
asoc-amd-acp-mach-common-add-missing-error-check-for.patch
gfs2-sysfs-replace-sprintf-snprintf-with-sysfs_emit.patch
gfs2-clean-up-quotad-timeout-handling.patch
gfs2-add-clean-argument-to-lm_unmount-hook.patch
gfs2-asynchronous-withdraw.patch
gfs2-get-rid-of-delayed-withdraws.patch
gfs2-rename-gfs2_-withdrawing_or_-withdrawn.patch
gfs2-fix-memory-leaks-in-gfs2_fill_super-error-path.patch
udf-fix-partition-descriptor-append-bookkeeping.patch
kvm-nsvm-triple-fault-if-restore-host-cr3-fails-on-n.patch
media-iris-turn-platform-caps-into-constants.patch
media-iris-fix-use-after-free-of-fmt_src-during-mbpf.patch
drm-amd-display-fix-dc_link-null-handling-in-hpd-ini.patch
papr-hvpipe-convert-papr_hvpipe_dev_create_handle-to.patch
pseries-papr-hvpipe-fix-race-with-interrupt-handler.patch
drm-amdgpu-userq-fix-access-to-stale-wptr-mapping.patch
revert-net-smc-introduce-tcp-ulp-support.patch
drm-ttm-fix-ttm_bo_swapout-infinite-lru-walk-on-swap.patch
drm-ttm-fix-ttm_bo_shrink-infinite-lru-walk-on-backu.patch
libceph-fix-potential-out-of-bounds-access-in-__ceph.patch
ceph-put-folios-not-suitable-for-writeback.patch
ice-reshuffle-and-group-rx-and-tx-queue-fields-by-ca.patch
ice-fix-race-condition-in-tx-timestamp-ring-cleanup.patch
ice-fix-potential-null-pointer-deref-in-error-path-o.patch
ice-fix-double-free-of-tx_buf-skb.patch
f2fs-fix-data-loss-caused-by-incorrect-use-of-nat_en.patch
greybus-raw-fix-use-after-free-on-cdev-close.patch
powerpc-64s-fix-unmap-race-with-pmd-migration-entrie.patch
ublk-reset-per-io-canceled-flag-on-each-fetch.patch
ptp-ocp-make-ptp_ocp_unregister_ext-null-aware.patch
ptp-ocp-fix-resource-freeing-order.patch
wifi-cfg80211-enforce-he-eht-cap-oper-consistency.patch
drm-amd-display-wrap-dcn32-phantom-plane-allocation-.patch
net-phonet-do-not-bug_on-in-pn_socket_autobind-on-fa.patch
workqueue-devres-add-device-managed-allocate-workque.patch
power-supply-max77705-drop-duplicated-irq-error-mess.patch
power-supply-max77705-free-allocated-workqueue-and-f.patch
fbdev-omap2-fix-inconsistent-lock-returns-in-omapfb_.patch
fbdev-omap2-fix-use-after-free-in-omapfb_mmap.patch
f2fs-read-cow-data-with-the-original-inode-during-at.patch
netfilter-nf_tables-add-hook-transactions-for-device.patch
drm-amdgpu-fix-amdgpu_hmm_range_get_pages.patch
kvm-arm64-correctly-cap-zcr_el2-provided-by-a-guest-.patch
net-introduce-skb-tc-depth-field-to-track-packet-loo.patch
net-sched-fix-packet-loop-on-netem-when-duplicate-is.patch
acpi-button-adjust-event-notification-routines.patch
acpi-button-convert-the-driver-to-a-platform-one.patch
acpi-button-tweak-acpi_button_remove.patch
acpi-button-fix-acpi-gpe-handler-leak-during-removal.patch
nvme-pci-fix-dma-mapping-leak-on-data-setup-error.patch
nvme-pci-fix-dma_vecs-leak-on-p2p-memory.patch
cachefiles-fix-error-return-when-vfs_mkdir-fails.patch
afs-fix-the-locking-used-by-afs_get_link.patch
netfs-fix-missing-barriers-when-accessing-stream-sub.patch
netfilter-x_tables-allow-initial-table-replace-witho.patch
netfilter-x_tables-allocate-hook-ops-while-under-mut.patch
wifi-mac80211-fix-missing-rx-bitrate-update-for-mesh.patch
wifi-mac80211-capture-fast-rx-rate-before-mesh-reuse.patch
net-hsr-defer-node-table-free-until-after-rcu-reader.patch
erofs-fix-metabuf-leak-in-inode-xattr-initialization.patch
drm-msm-adreno-fix-a-reference-leak-in-a6xx_gpu_init.patch
netfs-fix-zeropoint-update-where-i_size-remote_i_siz.patch
kvm-guest_memfd-treat-memslot-binding-offset-size-as.patch
wifi-mt76-mt7921-mt7925-fix-null-dereference-in-csa-.patch
smb-client-fix-chown-chgrp-with-smb3-posix-extension.patch
ksmbd-prevent-path-traversal-bypass-by-restricting-c.patch
drm-amdgpu-fix-kernel-panic-during-driver-load-failu.patch
drm-i915-gt-fix-null-deref-on-sched_engine-alloc-fai.patch
idpf-fix-max_vport-related-crash-on-allocation-error.patch
loongarch-bpf-zero-extend-signed-alu32-div-mod-resul.patch
drm-xe-vf-add-drm_dev-guards-when-detaching-ccs-read.patch
cifs-prevent-readdir-from-changing-file-size-due-to-.patch
cifs-fix-cifsfileinfo-leak-on-kmalloc-failure-in-def.patch
tipc-serialize-udp-bearer-replicast-list-updates.patch
fwctl-bnxt_en-refactor-aux-bus-functions-to-be-more-.patch
bnxt_en-handle-partially-initialized-auxiliary-devic.patch
drm-xe-guc-hold-device-ref-until-queue-teardown-comp.patch
drm-xe-guc-keep-scheduler-timeline-name-alive.patch
bpf-use-rcu_read_lock_dont_migrate-in-bpf_sk_storage.patch
bpf-fix-uaf-in-sock-clone-early-bailouts.patch
wifi-cfg80211-use-wiphy-work-for-socket-owner-autodi.patch
drm-amd-display-use-kvzalloc-to-allocate-struct-dc.patch
net-sched-handle-tc_act_redirect-from-qdisc-filter-c.patch
wifi-mac80211-validate-extension-frame-layout-before.patch
ata-libata-core-disable-lpm-on-silicon-motion-md619-.patch
ata-libata-core-add-nolpm-quirk-for-pny-cs900-1tb-ss.patch
accel-amdxdna-reject-user-command-submission-without.patch
net-liquidio-drop-cached-vf-pci_dev-lut.patch
accel-amdxdna-fill-invalid-payload-for-failed-comman.patch
accel-amdxdna-refactor-gem-bo-handling-and-add-helpe.patch
accel-amdxdna-fix-vma-access-race.patch
bluetooth-6lowpan-avoid-untracked-enable-work.patch
net-mlx5-lag-fix-off-by-one-in-single-fdb-error-roll.patch
iomap-release-pages-on-atomic-dio-size-mismatch.patch
xen-pvcalls-bound-backend-response-req_id-before-ind.patch
drm-panthor-always-use-the-irq-safe-variant-when-acq.patch
tipc-fix-uaf-in-cleanup_bearer-due-to-premature-dst_.patch
bpf-net-netfilter-drop-dead-null-checks.patch
bpf-guard-conntrack-opts-error-writes.patch
md-raid10-fix-writes_pending-leak-on-write-request-f.patch
md-raid1-fix-writes_pending-and-barrier-reference-le.patch
i3c-mipi-i3c-hci-fix-race-in-i3c_hci_addr_to_dev.patch
fs-ntfs3-reformat-code-and-update-terminology.patch
fs-ntfs3-call-_ntfs_bad_inode-when-failing-to-rename.patch
net-optimize-enqueue_to_backlog-for-the-fast-path.patch
net-fully-inline-backlog_unlock_irq_restore.patch
net-serialize-netif_running-check-in-enqueue_to_back.patch
rdma-bnxt_re-add-a-max-slot-check-for-sq.patch
rdma-bnxt_re-free-cq-toggle-page-after-firmware-tear.patch
netfilter-nft_fwd_netdev-add-device-and-headroom-val.patch
netfilter-nft_fwd_netdev-use-recursion-counter-in-ne.patch
netfilter-nf_dup_netdev-add-nf_dev_xmit_recursion-he.patch
cxl-region-block-region-delete-during-region-creatio.patch
iommu-dma-iommu-fix-wrong-scatterlist-length-assignm.patch
ext4-add-mext_check_validity-to-do-basic-check.patch
ext4-validate-donor-file-superblock-early-in-ext4_io.patch
ixgbe-do-not-configure-xps-for-xdp-queues.patch
wifi-ieee80211-split-s1g-definitions-out.patch
wifi-mac80211-bound-s1g-tim-pvb-walk-to-the-tim-elem.patch
bpf-reject-sleepable-bpf_lsm_cgroup-programs-at-load.patch
ocfs2-validate-fast-symlink-target-during-inode-read.patch
wifi-ath12k-fix-inconsistent-arvif-state-in-vdev_cre.patch
wifi-ath12k-fix-memory-leak-in-ath12k_wifi7_dp_rx_h_.patch
md-replace-wait-loop-with-wait_event-in-md_handle_re.patch
md-raid1-raid10-fix-deadlock-in-read-error-recovery-.patch
md-raid1-raid10-fix-bio-accounting-for-split-md-clon.patch
md-raid1-raid10-fix-error-path-detection-with-md_clo.patch
drm-amd-display-fix-divide-by-zero-in-calculate_mcac.patch
s390-zcrypt-move-inline-function-rng_type6cprb_msgx-.patch
s390-zcrypt-rework-domain-processing-within-zcrypt-d.patch
s390-zcrypt-close-speculative-mem-read-possibility.patch
octeontx2-af-block-vfs-from-clobbering-special-cgx-p.patch
bluetooth-hci_sync-hold-conn-in-hci_connect_pa_sync-.patch
hdlc_ppp-fix-potential-null-pointer-in-ppp_cp_event-.patch
net-convert-proto_ops-bind-callbacks-to-use-sockaddr.patch
bluetooth-hci_conn-fix-using-conn-le_-tx-rx-_phy-as-.patch
bluetooth-hci_sync-hold-conn-in-hci_connect_big_sync.patch
netfs-fix-folio_queue-enomem-in-writeback-by-adding-.patch
net-sched-cls_u32-validate-offshift-to-prevent-shift.patch
xsk-provide-sufficient-space-in-pool-tx_descs.patch
xsk-reclaim-invalid-tx-descriptors-in-zc-batch-path.patch
nexthop-avoid-unlocked-f6i_list-walk-in-nh_rt_cache_.patch
nexthop-take-nh-lock-for-f6i_list-walks-in-replace-c.patch
kvm-arm64-vgic-fix-race-between-lpi-release-and-re-r.patch
btrfs-split-btrfs_fs_closing-and-change-return-type-.patch
btrfs-only-invalidate-btree-inode-pages-after-all-eb.patch
btrfs-warn-about-extent-buffer-that-can-not-be-relea.patch
btrfs-skip-global-block-reserve-accounting-for-rescu.patch
eventfs-use-children-field-for-rcu-head-and-add-memo.patch
vhost_iotlb-bound-map-allocation-in-add_range.patch
bpf-fix-netns-reference-imbalance-in-conntrack-kfunc.patch
accel-amxdna-fix-page-insertion-errors-in-amdxdna_in.patch
accel-amdxdna-fix-locally-exploitable-bug_on-in-amdx.patch
btrfs-lzo-reject-inline-extents-without-valid-header.patch
soc-aspeed-lpc-snoop-fix-usercopy-overflow-in-snoop_.patch
gpio-pca953x-fix-pca953x_irq_bus_sync_unlock-regmap-.patch
eth-bnxt-decrease-indent-in-bnxt_request_irq.patch
eth-bnxt-avoid-deadlock-when-canceling-irq-affinity-.patch
ipvs-revalidate-ihl-to-prevent-out-of-bounds-access.patch
ovpn-defer-key-slot-crypto-freeing-to-workqueue.patch
scsi-core-pair-eh-runtime-pm-get-and-put.patch
optee-ffa-add-null-check-in-optee_ffa_lend_protmem.patch
btrfs-lzo-reject-compressed-segment-that-overflows-t.patch
netfilter-flowtable-avoid-num_encaps-underflow-on-br.patch
drivers-firmware-xilinx-add-unique-family-code-for-a.patch
drivers-firmware-xilinx-switch-to-new-family-code-in.patch
soc-xilinx-fix-race-condition-in-event-registration.patch
bluetooth-hci_sync-hold-conn-in-hci_connect_acl-le_s.patch
idpf-bound-interrupt-vector-register-fill-to-the-all.patch
dmaengine-idxd-fix-double-free-of-wq-engine-and-grou.patch
drm-amd-display-check-if-dml21_add_phantom_plane-is-.patch
bpf-check-sk_state-before-sk_protocol-in-bpf_tcp_-_s.patch
drm-amdkfd-fix-infinite-loop-parsing-crat-with-zero-.patch
drm-amdkfd-add-bounds-check-for-crat-subtype-length.patch
fbdev-wrap-user-invoked-calls-to-fb_set_var-in-helpe.patch
tipc-avoid-busy-looping-in-tipc_exit_net.patch
ntb-core-add-.get_dma_dev-callback-to-ntb_dev_ops.patch
ntb-ntb_transport-use-ntb_get_dma_dev-for-dma-buffer.patch
ntb-store-original-dma-address-for-future-release.patch
erofs-remove-fscache-backend-entirely.patch
kvm-riscv-fix-spectre-v1-in-pmu-counter-access.patch
risc-v-kvm-fix-pmu-event-info-array-size-overflow.patch
svcrdma-add-write-chunk-wrs-to-the-rpc-s-send-wr-cha.patch
svcrdma-wake-sq-waiters-when-the-transport-closes.patch
svcrdma-clear-sc_cm_id-when-addr_change-replacement-.patch
sunrpc-add-crypto-krb5-enctype-lookup-to-krb5_ctx.patch
sunrpc-add-errno-to-gss-status-conversion-helper.patch
sunrpc-prepare-crypto-krb5-encryption-and-checksum-h.patch
sunrpc-switch-wrap-token-encryption-to-crypto-krb5.patch
sunrpc-switch-wrap-token-decryption-to-crypto-krb5.patch
sunrpc-switch-mic-token-generation-to-crypto-krb5.patch
sunrpc-switch-mic-token-verification-to-crypto-krb5.patch
sunrpc-reject-short-rfc-4121-mic-tokens-in-gss_krb5_.patch
kho-fix-size-calculation-in-kho_preserved_memory_res.patch
ext2-fix-lost-inode-updates-for-is_sync-inodes.patch
cifs-call-pagecache_isize_extended-in-cifs_setsize-w.patch
ceph-fix-uaf-in-check_new_map-on-session-freed-durin.patch
nfsd-restore-rq_status_counter-to-even-on-all-nfsd_d.patch
lockd-nfsd-rcu-protect-nlmsvc_ops-dispatch.patch
zram-fix-out-of-bounds-access-in-writeback_store.patch
drm-amdgpu-force-complete-the-mes-ring-fences-on-res.patch
drm-amdgpu-force-complete-the-kiq-ring-fences-on-res.patch
media-chips-media-wave5-resume-device-before-setting.patch
loongarch-kvm-get-vm-pmu-capability-from-hw-gcfg-reg.patch
loongarch-kvm-validate-msi-data-before-routing-it-to.patch
kvm-sev-forcefully-invalidate-snp-vmsa-if-its-backin.patch
netfilter-nf_tables-skip-double-clone-set-expression.patch
octeontx2-af-fix-cn20k-mailbox-lifetime-on-repeated-.patch
net-mana-cap-msi-x-vectors-to-the-device-msi-x-table.patch
bluetooth-do-not-leak-an-hci_conn-when-a-second-le-c.patch
bluetooth-l2cap-access-chan-conn-safely-in-get-setso.patch
fuse-fix-the-condition-to-enable-over-io-uring.patch
net-sched-account-classifier-filter-allocations-to-m.patch
nfsv4.1-zero-referring-call-lists-before-decoding.patch
vxlan-fix-reading-neigh-ha.patch
net-bridge-arp-nd-proxy-fix-reading-neigh-ha.patch
ip6mr-do-not-clone-dst-in-ip6mr_cache_report.patch
irqchip-gic-v5-clear-per-cpu-irs-data-on-teardown.patch
virtio_net-fix-resize-of-the-rx-ring.patch
dpll-fix-null-deref-in-dpll_device_ops-during-teardo.patch
ksmbd-scope-session-state-changes-to-bound-connectio.patch
ksmbd-detach-blocked-lock-requests-before-freeing.patch
ksmbd-safely-discard-unregistered-deferred-locks.patch
ksmbd-defer-publishing-granted-locks-to-prevent-uaf-.patch
ksmbd-serialize-oplock-close-with-pending-break-owne.patch
ksmbd-fix-slab-out-of-bounds-read-in-ksmbd_alloc_use.patch
bpf-check-pointer-type-for-all-atomic-rmw-paths.patch
blk-cgroup-delay-freeing-policy-data-after-rcu-grace.patch
blk-iocost-clear-delay-state-when-freeing-policy-dat.patch
blk-iolatency-clear-delay-state-when-freeing-policy-.patch
nvmet-fix-max_qid-race-between-configfs-and-controll.patch
clocksource-drivers-samsung_pwm-switch-to-raw_spinlo.patch
bpf-s390-clear-fetch-destination-on-faulting-arena-a.patch
bpf-compare-iterator-types-during-state-pruning.patch
nfs-return-a-delegation-the-client-fails-to-record.patch
iommu-pass-in-old-domain-to-attach_dev-callback-func.patch
iommu-vt-d-fix-iopf_refcount-leak-on-rid-domain-repl.patch
btrfs-zoned-flush-active-metadata-block-group-at-btr.patch
btrfs-apply-the-auto_k-v-free-macros-throughout-the-.patch
btrfs-check-if-root-is-readonly-when-setting-posix-a.patch
scsi-core-pass-a-struct-scsi_driver-to-scsi_-un-regi.patch
scsi-core-sysfs-make-use-of-bus-callbacks.patch
scsi-sd-convert-to-scsi-bus-methods.patch
scsi-sd-move-the-sd_remove-function-definition.patch
scsi-sd-move-the-sd_config_discard-function-definiti.patch
scsi-sd-fix-special_vec-mempool-leak-when-scsi_alloc.patch
coresight-etm4x-missing-cscfg_csdev_disable_active_c.patch
drm-amd-display-disable-replay-when-crc-source-is-en.patch
drm-amd-display-resize-mst-hdcp-per-connector-arrays.patch
bpf-factor-callchain_store-function-from-__bpf_get_s.patch
bpf-factor-callchain_finalize-function-from-__bpf_ge.patch
bpf-remove-trace_in-argument-from-__bpf_get_stack.patch
bpf-clear-buf-on-error-in-__bpf_get_task_stack.patch
ocfs2-heartbeat-fix-slot-mapping-rollback-leaks-on-e.patch
ocfs2-o2hb-quiesce-negotiate-handlers-and-timeout-wo.patch
thermal-hwmon-remove-hwmon-class-device-along-with-i.patch
pci-sysfs-add-lockdown-checks-to-legacy-i-o-and-memo.patch
bpf-invalidate-rcu-pointers-after-final-spin-unlock.patch
ublk-validate-auto-buf-reg-before-taking-uring_cmd.patch
hid-logitech-hidpp-fix-ff-device-cleanup-on-init-fai.patch
tty-skip-cdev_del-when-no-cdev-is-registered.patch
serial-core-clear-freed-pointers-on-uart_register_dr.patch
serial-core-do-fallible-allocations-before-the-conso.patch
wifi-brcmfmac-fix-p2p-action-frame-handling-without-.patch
wifi-nl80211-clean-up-color-change-beacon-data-on-er.patch
arm64-ptrace-keep-orig_x0-in-sync-with-x0-on-syscall.patch
wifi-mt76-mt7996-clear-stale-link-state-on-full-rese.patch
bpf-reject-8-byte-return-values-on-return-reading-tr.patch
wifi-mt76-cancel-reset-and-rc-work-on-device-unregis.patch
wifi-mt76-mt792x-fix-use-after-free-in-mt76_rx_poll_.patch
wifi-mt76-fix-handling-channel-context-with-differen.patch
md-remove-req_nowait-support-from-raid1-10-456.patch
wifi-ath12k-fix-overreads-in-ath12k_wmi_process_csa_.patch
drm-panthor-add-vm_bind-region-with-kbo-range-overla.patch
nvmet-fix-return-status-of-rmi-log-page-on-allocatio.patch
rdma-cxgb4-fix-dereg_skb-leak-and-double-free-in-wri.patch
pci-make-pci_match_one_device-match-on-id-instead-of.patch
pci-fix-dyn_id-add-toctou.patch
pci-fix-uaf-when-probe-runs-concurrent-to-dyn-id-rem.patch
iommu-tegra241-cmdqv-don-t-fall-back-to-a-freed-smmu.patch
scsi-ufs-core-convert-string-descriptor-format-macro.patch
scsi-ufs-core-validate-string-descriptors.patch
pinctrl-mediatek-use-devm_gpiochip_add_data-for-gpio.patch
bpf-fix-warning-in-bpf_tracing_link_release.patch
ext4-fix-abba-deadlock-in-ext4_xattr_inode_cache_fin.patch
firmware-arm_scmi-clear-systempower-flag-on-create-f.patch
firmware-arm_scmi-fix-of-node-reference-handling.patch
firmware-arm_scmi-fix-scmi-device-destroy-lifetimes.patch
cxl-features-serialize-multi-part-get-set-feature-tr.patch
fs-resctrl-fix-uaf-from-worker-threads-when-domains-.patch
rdma-rvt-return-null-after-port-allocation-failure.patch
esp-do-not-unref-managed-frag-pages-in-esp_ssg_unref.patch
platform-x86-asus-wmi-fix-resource-leaks-on-probe-fa.patch
usb-gadget-uac-validate-rate-list-length-before-stor.patch
bpf-reject-rdonly-rdwr_buf_size-kfunc-arguments-that.patch
platform-x86-dell-wmi-base-fix-handling-of-ultra-per.patch
bpf-reject-writes-through-untrusted-btf-pointers.patch
bpf-reject-mem_alloc-btf-accesses-past-object-bounds.patch
uprobes-x86-move-optimized-uprobe-from-nop5-to-nop10.patch
dmaengine-xilinx_dma-fix-cpu-stall-in-xilinx_dma_pol.patch
drm-amd-display-fix-dangling-pointer-in-crtc-reset-f.patch
drm-amd-display-fix-dangling-pointer-in-plane-reset-.patch
dm-pcache-validate-seg_id-fields-from-persistent-mem.patch
nfsd-use-workqueue-enable-disable-apis-for-v4_end_gr.patch
nfsd-convert-nfsd_net-boolean-flags-to-unsigned-long.patch
drm-xe-don-t-warn-on-kernel-job-timeout-when-device-.patch
acpi-bus-introduce-acpi_bus_get_primary_device.patch
powerpc-xive-add-error-return-value-to-xive_smp_prob.patch
powerpc-xive-propagate-ipi-init-errors-to-prevent-us.patch
remoteproc-qcom_wcnss-fix-handling-the-lack-of-pd-re.patch
ksmbd-remove-redundant-dacl-check-in-smb_check_perm_.patch
ksmbd-fix-maximum-allowed-access-checks.patch
smb-client-avoid-using-uninitialized-sids-in-cifs_po.patch
smb-client-honor-forceuid-forcegid-when-mapping-sids.patch
drm-amdgpu-skip-the-vmid-0-flush-for-vram.patch
tracing-take-trace_array-reference-when-opening-a-tr.patch
vhost-invalidate-vring-access-on-iotlb-transitions.patch
vduse-validate-virtqueue-alignment.patch
virtio_ring-fix-stale-descriptor-flags-after-a-faile.patch
iommu-riscv-serialize-command-queue-publishing.patch
bpf-mark-a-null-call-argument-precise.patch
tracing-fix-subbuf-resize-races-with-trace_pipe_raw-.patch
bpf-preserve-inner-map-identity-in-callback-frames.patch
bpf-mark-null-kptr-stores-precise.patch
bpf-keep-refcount_acquire-nullable-for-borrowed-rcu-.patch
bpf-don-t-infer-non-null-from-a-pointer-with-an-unbo.patch
bpf-don-t-rewrite-bpf_fastcall-patterns-entered-by-a.patch
bpf-zero-extend-the-result-of-an-arena-32-bit-cmpxch.patch
ring-buffer-skip-invalid-sub-buffers-when-validating.patch
ring-buffer-add-checking-nr_subbufs-to-persistent-ri.patch
bpf-mark-syscall-helpers-as-sleepable.patch
bpf-backtracking-shouldn-t-clear-outer-frame-r1-r5-f.patch
bpf-backtrack_insn-handle-ld_-abs-ind-subprog-exit-e.patch
ipv6-mcast-annotate-data-races-around-mca_users.patch
ipv6-mcast-use-rcu_assign_pointer-for-__rcu-list-upd.patch
net-stmmac-fix-dma-mapping-leak-in-stmmac_tso_xmit.patch
bpf-check_cond_jmp_op-properly-infer-if-register-is-.patch
printk-don-t-warn-on-kthread_run-failure.patch
ksmbd-convert-tree_conns_lock-to-rw_semaphore.patch
smb-server-fix-tree-connection-leak-in-smb2_tree_con.patch
arm64-dts-lx2160a-fix-incorrect-pinmux.patch
arm64-dts-lx2160a-fix-iic1-pinmux-submask-rejected-b.patch
arm64-dts-lx2160a-fix-the-iic5-spi3-pinmux-offset-an.patch
mount-refuse-move_mount_set_group-on-an-unbindable-m.patch
fs-move-mntput_no_expire-slowpath-into-a-dedicated-r.patch
fs-don-t-let-a-migrating-task-hide-its-reference-fro.patch
bluetooth-btintel_pcie-fix-tx-descriptor-bounds-chec.patch
bluetooth-btintel_pcie-add-shared-hw-reset-for-clean.patch
drm-dp-don-t-mark-the-aux-backlight-enabled-when-ena.patch
gpio-exar-initialize-the-id-before-registering-its-c.patch
drm-aspeed-balance-the-display-clock-enable-on-teard.patch
drm-vc4-free-the-bo-cache-size-list-on-teardown.patch
net-sched-em_text-reject-unterminated-algo-before-au.patch
amt-send-the-relay-s-general-query-directly-from-the.patch
cxgb4-ch_ktls-disable-softirqs-around-tid_list-erase.patch
tee-optee-fix-kernel-doc-warnings.patch
tee-optee-ffa-support-shared-memory-offsets-on-large.patch
ice-restore-ordered-mmio-writes-for-tx-doorbells.patch
nvmet-return-invalid-field-for-invalid-nsids-feature.patch
nvmet-use-the-local-p2p-device-on-metadata-allocatio.patch
arm64-boot-don-t-set-pmuv3p9-fgt2-bits-without-pmuv3.patch
zloop-zero-out-only-the-unread-tail-of-short-reads.patch
btrfs-always-return-eiocbqueued-after-btrfs_uring_re.patch
btrfs-free-iov-when-btrfs_uring_read_extent-fails.patch
btrfs-unlock-inode-and-extent-in-caller-when-io_urin.patch
btrfs-fix-xattr-replace-when-multiple-xattrs-are-pac.patch
btrfs-fix-lost-error-return-value-in-btrfs_listxattr.patch
drm-xe-mmio-fix-xe_mmio_wait32-to-honor-delay-sleep-.patch
net-make-dev_xdp_sb_prog_count-see-programs-attached.patch
riscv-vector-fix-data-pointer-constraints-in-context.patch
riscv-vector-fix-output-operands-in-context-save.patch
wifi-mt76-don-t-return-txq-when-exceeding-max-non-aq.patch
wifi-mac80211-add-aql-support-for-multicast-packets.patch
wifi-mac80211-add-ieee80211_txq_aql_pending.patch
wifi-mt76-add-ps-buffering-support-for-hw-managed-ti.patch
wifi-mt76-account-non-aql-frames-per-peer-rather-tha.patch
wifi-mt76-route-nullfunc-frames-to-psd-altx-queue.patch
wifi-mt76-use-altx-queue-for-packets-to-disassociate.patch
wifi-mt76-mt7925-restore-the-legacy-bss-after-mlo-te.patch
wifi-mt76-mt7996-fix-struct-mt7996_mcu_wed_rro_ba_de.patch
wifi-mt76-mt7915-disable-rx-napi-when-removing-devic.patch
wifi-mt76-mt7925-don-t-put-the-band-auto-marker-in-t.patch
wifi-mt76-mt792x-treat-0xff-acpi-sar-entries-as-no-l.patch
wifi-mt76-mt792x-pick-the-sar-table-layout-from-the-.patch
revert-wifi-ath12k-add-panic-handler.patch
asoc-adau1372-allow-sleepy-powerdown-gpios.patch
asoc-adau1372-fix-invalid-default-state-of-output-as.patch
asoc-samsung-i2s-enable-op_clk-in-probe-to-balance-r.patch
spi-sg2044-nor-return-transfer-errors.patch
spi-sg2044-nor-honor-spi-clock-limits.patch
cgroup-cpuset-call-is_in_v2_mode-after-acquiring-cpu.patch
flow_dissector-avoid-u16-truncation-of-skb-len-when-.patch
net-sparx5-start-the-tod-counters-on-non-ptp-lan969x.patch
devlink-fix-devlink_rel-reference-leak-when-notify-w.patch
net-sched-cls_route-reject-change-with-no-routing-at.patch
revert-net-mlx5-e-switch-preserve-max-tx-speed-on-vp.patch
net-bcmgenet-if-umac-was-suspended-in-sw_reset-resto.patch
pfcp-make-sure-the-seid-is-linear-before-reading-it.patch
bnxt_en-add-bnxt_clear_bars-helper.patch
bnxt_en-fix-driver-init-in-kdump-kernel.patch
bnxt_en-delay-for-5-seconds-after-aer-dpc-for-all-ch.patch
bnxt_en-drop-pci_save_state-after-pci_restore_state.patch
bnxt_en-re-write-the-bars-following-any-type-of-pcie.patch
flow_dissector-avoid-u16-truncation-of-hlen-in-bpf_f.patch
drm-imagination-fix-reference-and-vm_bo-handling-in-.patch
veth-fix-peer-netdev_xdp_act_ndo_xmit-after-gro-is-t.patch
net-mlx5e-order-icosq-cc-update-after-cq-doorbell.patch
mlxsw-spectrum_flower-fix-port-range-register-leak-i.patch
net-packet-call-packet_parse_headers-after-virtio_ne.patch
ptp-ocp-fix-pcie-delay-estimation-calculation.patch
net-openvswitch-validate-transport-header-presence-i.patch
vsock-fix-memory-leak-in-vmci_transport_recv_dgram_c.patch
drm-vc4-fix-binner-slot-allocation-failing-on-an-idl.patch
x86-cpu-amd-fix-amd-tlbi-erratum-1718.patch
drm-panthor-validate-userspace-queue-count-against-initialized-firmware-slot-count.patch
btrfs-make-sure-extent_buffer_reading-is-cleared-under-refs_lock.patch
cifs-consolidate-time_last_write-stamp-into-_cifsfileinfo_put.patch
netfs-afs-fix-symlink-reading.patch
media-verisilicon-fix-kernel-panic-due-to-__initconst-misuse.patch
net-fix-backlog_unlock_irq_restore-vs-config_preempt_rt.patch
netfs-fix-missing-alloc-tagging-of-direct-mempool-allocations.patch
workqueue-fix-devm_alloc_workqueue-va_list-misuse.patch
ice-fix-broken-rx-on-vfs.patch