Google Git
Sign in
kernel/pub/scm/linux/kernel/git/stable/stable-queue/be077b75f7833591e799fa94de9c9c81ca745a28/./queue-6.6
tree: 982db21634453c8e8700f6e952bb42ff25f78146
  1. acpi-pfr_update-fix-stack-buffer-overflow-in-query_capability.patch
  2. alpha-don-t-leak-hardware-fabricated-fp-exception-bits-to-user-space.patch
  3. alpha-fix-ieee_swcr_to_fpcr-setting-fpcr_dnod-unconditionally.patch
  4. alpha-marvel-fix-irq_set_status_flags-to-use-correct-irq-number.patch
  5. alpha-marvel-fix-lock-ordering-in-init_io7_irqs.patch
  6. alpha-pci-fix-i-o-port-accessor-argument-order-in-pci_legacy_write.patch
  7. alsa-6fire-bound-the-midi-event-length-from-the-device.patch
  8. alsa-aloop-check-card-index-validity-at-probe.patch
  9. alsa-aloop-fix-peer-runtime-uaf-during-format-change.patch
  10. alsa-aloop-fix-racy-access-at-pcm-trigger.patch
  11. alsa-bcd2000-clear-the-urb-pointers-on-disconnect.patch
  12. alsa-harmony-initialize-locks-before-requesting-irq.patch
  13. alsa-mpu401-check-card-index-validity-at-probe.patch
  14. alsa-mts64-check-card-index-validity-at-probe.patch
  15. alsa-pcm-fix-race-between-non-atomic-ops-and-trigger-start.patch
  16. alsa-pcxhr-initialize-mutexes-before-requesting-threaded-irq.patch
  17. alsa-portman2x4-check-card-index-validity-at-probe.patch
  18. alsa-serial-u16550-check-card-index-validity-at-probe.patch
  19. alsa-ump-fix-corrupted-data-bytes-at-midi-1.0-sysex-to-ump-conversion.patch
  20. alsa-usb-audio-fix-oob-write-in-snd_usbmidi_us122l_output.patch
  21. alsa-virmidi-check-card-index-validity-at-probe.patch
  22. arch_numa-avoid-false-positive-fortify-warning-in-setup_node_to_cpumask_map.patch
  23. arm-9477-1-disable-broken-ebpf-jit-on-the-risc-pc.patch
  24. arm64-compat-fix-decrementing-ldm-stm-alignment-emulation.patch
  25. arm64-dts-rockchip-fix-emmc-reset-polarity-on-px30-ringneck.patch
  26. arm64-dts-rockchip-fix-rk3399-roc-pc-plus-analog-audio.patch
  27. arm64-mm-fix-the-lockless-page-table-walk-in-show_pte.patch
  28. asoc-adau1761-sort-the-register-default-table.patch
  29. asoc-amd-yc-add-dmi-entry-for-msi-thin-a15-b7uc.patch
  30. asoc-cs35l33-drain-threaded-irq-before-runtime-suspend.patch
  31. asoc-cs35l34-drain-threaded-irq-before-runtime-suspend.patch
  32. asoc-cx2072x-sort-the-register-default-table.patch
  33. asoc-fsl-mpc5200-i2s-free-dma-resources-on-probe-failure.patch
  34. asoc-fsl_easrc-sort-the-register-default-table.patch
  35. asoc-intel-sst-fix-pci-device-reference-leak-on-probe-failure.patch
  36. asoc-max9860-sort-the-register-default-table.patch
  37. asoc-ml26124-sort-the-register-default-table.patch
  38. asoc-pcm512x-sort-the-register-default-table.patch
  39. asoc-rt1017-sdca-sdw-sort-the-register-default-table.patch
  40. asoc-rt1316-sdw-sort-the-register-default-table.patch
  41. asoc-rt1318-sdw-sort-the-register-default-table.patch
  42. asoc-rt274-sort-the-register-default-table.patch
  43. asoc-rt286-sort-the-register-default-table.patch
  44. asoc-rt298-sort-the-register-default-table.patch
  45. asoc-rt700-drop-duplicate-reg_default-entry.patch
  46. asoc-rt700-sort-the-register-default-table.patch
  47. asoc-rt711-sdca-sort-the-register-default-tables.patch
  48. asoc-rt711-sort-the-register-default-table.patch
  49. asoc-rt712-sdca-dmic-sort-the-register-default-table.patch
  50. asoc-rt715-sdca-drop-duplicate-reg_default-entries.patch
  51. asoc-rt715-sdca-sort-the-register-default-tables.patch
  52. asoc-rt715-sort-the-register-default-table.patch
  53. asoc-samsung-aries_audio_probe-double-of_node_put-due-to-direct-assignment-without-of_node_get.patch
  54. asoc-sgtl5000-sort-the-register-default-table.patch
  55. asoc-sti-sas-sort-the-register-default-table.patch
  56. asoc-tas2552-sort-the-register-default-table.patch
  57. asoc-tas2764-sort-the-register-default-table.patch
  58. asoc-tas2780-sort-the-register-default-table.patch
  59. asoc-tegra-fix-the-mixer-enable-default-value.patch
  60. asoc-tegra-sort-mbdrc-register-defaults.patch
  61. asoc-tegra210_i2s-sort-the-register-default-table.patch
  62. asoc-tegra210_mixer-sort-the-register-default-table.patch
  63. ata-ahci-work-around-lost-interrupts-on-marvell-88se61xx.patch
  64. ata-libata-scsi-fix-dsm-trim-for-sector-sizes-larger-than-2048-bytes.patch
  65. audit-avoid-dropping-live-tree-ref-on-fsnotify-rule-autoremove.patch
  66. auxdisplay-charlcd-cancel-backlight-work-on-registration-failure.patch
  67. batman-adv-bla-fix-freeing-of-claims-on-meshif-deletion.patch
  68. batman-adv-bla-prevent-crc-corruptions-after-claim-flush.patch
  69. batman-adv-dat-avoid-unaligned-fault-in-ip-extraction.patch
  70. batman-adv-fix-stale-receive-device-on-merged-fragments.patch
  71. block-flag-zoned-disks-with-genhd_fl_no_part.patch
  72. block-set-queue_flag_dying-unconditionally-in-blk_mark_disk_dead.patch
  73. bluetooth-btusb-add-asus-usb-bt540-for-realtek-8761cu.patch
  74. bluetooth-btusb-add-asus-usb-bt600-for-realtek-8761cu.patch
  75. bluetooth-eir-fix-oob-read-in-eir_get_service_data.patch
  76. bluetooth-hci_bcm-fix-usage_count-leak-when-autosuspend_delay-is-negative.patch
  77. bluetooth-hci_conn-re-enable-advertising-only-for-peripheral-role.patch
  78. bluetooth-hci_core-use-skb_get-instead-of-skb_clone-for-req_skb.patch
  79. bluetooth-hci_event-clear-hci_le_adv-only-on-a-created-connection.patch
  80. bluetooth-hci_h5-fix-usage_count-leak-when-autosuspend_delay-is-negative.patch
  81. bluetooth-hci_intel-fix-usage_count-leak-when-autosuspend_delay-is-negative.patch
  82. bluetooth-hci_sync-clear-hci_cmd_pending-when-dropping-the-last-request.patch
  83. bluetooth-hci_uart-fix-false-success-return-in-hci_uart_setup.patch
  84. bluetooth-iso-fix-use-after-free-of-listener-socket-in-iso_conn_ready.patch
  85. bluetooth-rfcomm-serialize-security-confirmation-handling.patch
  86. bnx2x-fix-double-free-in-bnx2x_init_firmware-error-path.patch
  87. bpf-harden-bloom-filter-sizing-and-indexing-on-32-bit-kernels.patch
  88. ceph-bound-copied-dentry-name-length-in-nfs-export-get_name.patch
  89. ceph-bound-num_export_targets-array-for-mds-info-v2-v3.patch
  90. ceph-bound-xattr-value-length-in-__build_xattrs.patch
  91. ceph-fix-uaf-in-__kick_flushing_caps-on-cf-entry-freed-during-unlock.patch
  92. ceph-reject-export_targets-ranks-ceph_max_mds-in-mdsmap-decode.patch
  93. cgroup-cpuset-fix-misplaced-dl-migration-reset.patch
  94. cifs-fix-loff_t-underflow-in-cifs_remap_file_range-when-len-0.patch
  95. clk-qcom-gcc-mdm9607-drop-incorrect-apss_tcu_clk_src.patch
  96. clk-qcom-gcc-mdm9607-drop-incorrect-bimc-pll-and-related-clocks.patch
  97. clk-qcom-gcc-mdm9607-drop-incorrect-system_noc_bfdcd_clk_src.patch
  98. clk-qcom-gcc-mdm9607-fix-enable_reg-for-gcc_blsp1_sleep_clk.patch
  99. clk-qcom-gcc-mdm9607-fix-halt_reg-for-gcc_apss_axi_clk.patch
  100. clk-qcom-gcc-mdm9607-increase-delay-for-usb-phy-reset.patch
  101. clk-qcom-gcc-msm8916-fix-enable_reg-for-gcc_blsp1_sleep_clk.patch
  102. clk-qcom-gcc-msm8939-fix-enable_reg-for-gcc_blsp1_sleep_clk.patch
  103. clk-rockchip-rk3588-don-t-change-pll-rates-when-setting-dclk_vop2_src.patch
  104. clocksource-drivers-timer-sun4i-advertise-a-real-minimum-delta.patch
  105. cpufreq-schedutil-fix-rate-limit-overflow.patch
  106. cpuidle-dt_idle_genpd-kfree-the-original-name-allocation.patch
  107. cxl-pmem-format-the-nvdimm-serial-number-as-unsigned-decimal.patch
  108. device-property-fix-infinite-loop-in-fwnode_for_each_child_node.patch
  109. dm-array-reject-an-array-block-whose-value-size-is-not-the-caller-s.patch
  110. dm-era-fix-shadowed-superblock-leak-on-take-snap-failure.patch
  111. dm-fix-race-when-loading-and-unloading-a-table.patch
  112. dm-fix-resume-vs-remove-race.patch
  113. dm-raid1-reserve-space-for-nul-terminator-in-build_constructor_string.patch
  114. dm-stats-fix-a-crash-if-allocation-of-per-cpu-data-fails.patch
  115. dm-switch-use-write_once-in-switch_region_table_write.patch
  116. dmaengine-dw-edma-complete-descriptors-before-pausing.patch
  117. dmaengine-dw-edma-fix-hdma-channel-status-register-access.patch
  118. dmaengine-dw-edma-initialize-irq-data-before-requesting-irqs.patch
  119. drm-amd-display-fix-division-by-zero-in-get_estimated_bw.patch
  120. drm-bridge-dw-hdmi-fix-i2c-adapter-leak-on-probe-failure.patch
  121. drm-fix-race-between-partial-drm_dev_register-failure-and-ioctl.patch
  122. drm-i915-guard-against-null-driver_data-in-i915_pci_probe.patch
  123. drm-panel-edp-fix-i2c-adapter-leak-on-probe-failure.patch
  124. ecryptfs-bound-the-packet-length-peek-to-the-user-buffer.patch
  125. ecryptfs-fix-tag-11-packet-exact-fit-size-check.patch
  126. ecryptfs-hold-msg-ctx-list-lock-when-cleaning-daemon-queue.patch
  127. ecryptfs-pass-packet-set-buffer-size-to-parser.patch
  128. ecryptfs-reject-oversized-encrypted_key_size-in-parse_tag_3_packet.patch
  129. ecryptfs-reject-too-small-tag-70-packets.patch
  130. ecryptfs-release-message-context-on-send-failure.patch
  131. ecryptfs-show-filename-encryption-options.patch
  132. efivarfs-rate-limit-statfs-handler.patch
  133. entry-fix-seccomp-bypass-after-ptrace-with-tsync.patch
  134. eventfs-initialize-ei-children-and-ei-list-in-init_ei.patch
  135. f2fs-fix-i_size-when-pinned-fallocate-partially-fails.patch
  136. f2fs-fix-to-off-by-one-issue-in-f2fs_zero_post_eof_page.patch
  137. f2fs-fix-to-zero-post-eof-data-when-extending-file-size.patch
  138. f2fs-reject-overlapping-move-range-after-len-expansion.patch
  139. f2fs-return-symlink-writeback-errors.patch
  140. f2fs-return-writeback-error-from-collapse-range.patch
  141. f2fs-use-the-mount-idmap-for-the-owner-check-in-f2fs_xattr_advise_set.patch
  142. fat-restore-original-value-when-fat_ent_write-failed.patch
  143. fbdev-omapfb-panel-dsi-cm-initialize-lock-before-registering-display.patch
  144. fbdev-pvr2fb-correct-user-pointer-annotation-and-sentinel-initializer.patch
  145. fbdev-ssd1307fb-defer-i2c-transfers-from-damage-callbacks.patch
  146. fbdev-uvesafb-unregister-connector-callback-on-init-failure.patch
  147. forcedeth-fix-off-by-one-when-saving-restoring-non-pci-config-space.patch
  148. fpga-altera-cvp-avoid-out-of-bounds-read-in-trailing-byte-write.patch
  149. fpga-stratix10-soc-fix-svc-mailbox-handling-during-reconfiguration.patch
  150. fs-ntfs3-bound-page_lcns-index-by-the-log-record.patch
  151. fs-ntfs3-fix-info-leak-on-partial-lznt-decompress-in-ni_read_frame.patch
  152. fs-ntfs3-validate-dirty-page-table-on-log-replay.patch
  153. fsnotify-fix-stale-object-mask-after-concurrent-mark.patch
  154. futex-prevent-rcuwait-use-after-free-during-requeue-pi.patch
  155. hid-mcp2221-stop-device-io-before-hid_hw_stop.patch
  156. hid-mcp2221-validate-report-size-in-mcp2221_raw_event.patch
  157. hid-picolcd-clamp-eeprom-debugfs-read-to-bytes-actually-received.patch
  158. hid-rmi-fix-oob-access-with-undersized-rmi-reports.patch
  159. hid-roccat-free-buffered-reports-when-destroying-device.patch
  160. hid-sensor-custom-fix-field-sysfs-group-cleanup-on-failure.patch
  161. hid-sensor-hub-fix-out-of-bounds-write-in-sensor_hub_get_feature.patch
  162. hid-wacom-validate-report-length-in-wacom_intuos_pro2_bt_irq.patch
  163. hsi-omap_ssi_core-fix-missing-dma-mask-setup-for-ssi-controller-device.patch
  164. hwmon-max6621-fix-negative-temperature-offset-and-crit-readings.patch
  165. hwmon-max6621-fix-temperature-clamp-range.patch
  166. hwtracing-hisi_ptt-propagate-dma-reset-timeout-in-trace_start.patch
  167. i2c-core-fix-debugfs-uaf-on-adapter-removal.patch
  168. i2c-mux-demux-pinctrl-fix-of-node-leak-on-kstrdup-failure.patch
  169. i2c-mux-fix-channel-node-leak-on-adapter-add-failure.patch
  170. i3c-master-fix-info-leak-and-uaf-in-device-unregister-path.patch
  171. i3c-master-svc-bound-ibi-payload-to-the-requested-max_payload_len.patch
  172. iio-chemical-atlas-sensor-fix-pm-reference-leak-in-buffer-postenable.patch
  173. iio-chemical-atlas-sensor-use-iio_trigger_poll_nested-to-fix-remove-uaf.patch
  174. iio-chemical-sgp30-handle-iaq-thread-creation-failure.patch
  175. iio-dac-m62332-fix-regulator-reference-count-imbalance.patch
  176. iio-gyro-mpu3050-fix-sign-of-raw-angular-velocity-readings.patch
  177. iio-light-cm32181-return-zero-after-writing-calibscale.patch
  178. iio-light-gp2ap002-disable-regulators-on-resume-failure.patch
  179. iio-light-opt4001-fix-incompatible-pointer-type-passed-to-div_u64_rem.patch
  180. iio-light-opt4001-fix-power-down-clearing-bits-of-the-wrong-register.patch
  181. iio-light-opt4001-fix-reversed-genmask-arguments-in-fault-count-mask.patch
  182. iio-light-opt4001-reject-integration-times-with-a-non-zero-seconds-part.patch
  183. iio-pressure-dps310-fix-null-pointer-dereference-on-acpi-probe.patch
  184. iio-pressure-mpl115-fix-runtime-pm-cleanup.patch
  185. iio-srf04-fix-pm_runtime-handling-on-probe-error-path.patch
  186. iio-temperature-hid-sensor-temperature-switch-to-non-devm-iio_device_register.patch
  187. ima-check-for-err_ptr-from-dentry_path-in-validate_hash_algo.patch
  188. include-linux-list.h-mark-list_add-and-__list_add-as-__always_inline.patch
  189. input-aiptek-validate-raw-macro-indices-before-updat.patch
  190. interconnect-fix-use-after-free-in-icc_get-and-of_icc_get_by_index.patch
  191. iommu-vt-d-fix-no_iommu-to-disable-platform-opt-in.patch
  192. iommu-vt-d-force-requesting-acs-when-tboot-is-enabled.patch
  193. ip6_gre-fix-hardware-header-length-for-nbma-tunnels.patch
  194. ip6_tunnel-use-skb_cow_head-in-ip6_tnl_xmit.patch
  195. ipip-fix-skb-leak-in-collect_md-mode-when-metadata_dst-allocation-fails.patch
  196. ipmi-ipmb-validate-write-message-length.patch
  197. ipmi-si-fix-null-pointer-dereference-after-failed-registration.patch
  198. ipv4-adopt-dst_dev-skb_dst_dev-and-skb_dst_dev_net-_.patch
  199. ipv4-start-using-dst_dev_rcu.patch
  200. ipv6-use-rcu-iterator-to-dump-route-exceptions.patch
  201. kasan-fix-cache-shrink-race-with-cpu-hotplug.patch
  202. kprobes-protect-kprobe_blacklist-with-rcu.patch
  203. kvm-arm64-vgic-its-don-t-dereference-a-null-collection-on-itt-save.patch
  204. kvm-arm64-vgic-v3-take-an-lpi-reference-in-vgic_v3_save_pending_tables.patch
  205. kvm-nvmx-always-flush-vpid02-on-first-use.patch
  206. kvm-nvmx-service-local-tlb-flushes-on-failed-nested-vm-enter.patch
  207. kvm-s390-fix-length-check-__import_wp_info.patch
  208. kvm-s390-fix-memory-leak-in-guest-debug-handling.patch
  209. kvm-s390-fix-old_data-leak-in-guest-debug-error-path.patch
  210. kvm-s390-free-guest-debug-data-on-vcpu-destroy.patch
  211. kvm-s390-pv-fix-rc-rrc-offset-for-pvm_dump.patch
  212. kvm-s390-restore-sigset-on-error-path.patch
  213. kvm-s390-take-srcu-when-importing-watchpoint-data.patch
  214. kvm-s390-zero-initialize-irq-in-reinject_machine_check.patch
  215. kvm-x86-hyper-v-clamp-stimer-deadline-to-avoid-livelock.patch
  216. landlock-require-landlock_access_fs_make_reg-for-whi.patch
  217. lib-ucs2_string.c-fix-out-of-bounds-read-in-ucs2_strnlen.patch
  218. libceph-reject-buckets-with-mismatched-crush-ids.patch
  219. libceph-validate-osd-extent-maps-before-cursor-advance.patch
  220. libnvdimm-labels-prevent-integer-overflow-in-__nd_label_validate.patch
  221. lockd-pin-next-file-across-nlm_inspect_file-lock-drop.patch
  222. loongarch-avoid-preempt-count-underflow-without-probe.patch
  223. loongarch-do-not-save-restore-percpu-base-register-in-rethook-trampoline.patch
  224. mailbox-qcom-ipcc-fix-duplicate-channel-allocation-across-holes.patch
  225. md-do-overflow-check-for-sb-bblog_shift-in-super_1_load.patch
  226. media-airspy-use-vb2_video_unregister_device-on-disconnect-to-fix-null-deref.patch
  227. media-cec-core-fix-kmemleak-due-to-missed-rc_free_device-call.patch
  228. media-cec-meson-ao-cec-g12a-name-the-cec-core-regmap-to-avoid-debugfs-clash.patch
  229. media-cec-serialize-exclusive-follower-delivery.patch
  230. media-cec-stm32-prevent-out-of-bounds-write-on-rx-overflow.patch
  231. media-cedrus-fix-memory-leak-in-cedrus_init_ctrls.patch
  232. media-cobalt-avoid-freeing-alsa-private-data-twice.patch
  233. media-cx231xx-reject-geometry-changes-while-the-vbi-queue-is-busy.patch
  234. media-cx23885-cancel-netup-ci-work-before-teardown.patch
  235. media-em28xx-defer-audio-only-extension-registration.patch
  236. media-em28xx-fix-use-after-free-of-dev_next-devlist-on-disconnect.patch
  237. media-go7007-defer-the-alsa-v4l2-put-until-card-release.patch
  238. media-i2c-ov02a10-fix-endpoint-parsing-use-after-free.patch
  239. media-i2c-ov7740-fix-use-after-destroy-in-remove.patch
  240. media-meson-vdec-fix-null-pointer-deref-in-vdec_try_fmt_common.patch
  241. media-nxp-imx8-isi-correct-color-map-between-v4l2-and-isi.patch
  242. media-nxp-imx8-isi-fix-stream-id-validation-bypass-in-crossbar-routing.patch
  243. media-nxp-imx8-isi-use-bit_ull-for-64-bit-stream-masks.patch
  244. media-rc-sunxi-cir-unregister-rc-device-on-probe-failure.patch
  245. media-rtl2832_sdr-release-urbs-and-stream-buffers-on-start_streaming-failure.patch
  246. media-rtl2832_sdr-use-vb2_video_unregister_device-on-remove-to-fix-dma-leak.patch
  247. media-s2255-bound-jpeg-frame-size-before-copying-into-the-buffer.patch
  248. media-s2255-check-firmware-size-before-reading-trailing-marker.patch
  249. media-saa7164-fix-cleanup-on-resource-allocation-failure.patch
  250. media-tda18250-fix-possible-integer-overflow.patch
  251. media-usbtv-keep-device-alive-while-alsa-card-exists.patch
  252. media-v4l2-async-avoid-deleting-unlinked-asc-entry-on-link-error.patch
  253. media-v4l2-ctrls-allow-unknown-hdr10-white-point-and-luminance.patch
  254. media-v4l2-fwnode-fix-fwnode-leak-in-v4l2_fwnode_parse_link.patch
  255. media-venus-fix-payload-size-calculation-in-parse_raw_formats.patch
  256. media-venus-fix-payload-size-returned-by-parse_caps-and-parse_alloc_mode.patch
  257. media-vicodec-fix-out-of-bounds-write-in-fwht-encoder.patch
  258. media-video-i2c-fix-kthread-error-pointer-left-in-kthread_vid_cap-on-failure.patch
  259. media-vimc-fix-pixel-format-lookup-in-enum_framesizes.patch
  260. media-zoran-avoid-freeing-a-registered-video_device-twice.patch
  261. mm-damon-sysfs-kobject_del-region-and-target-error-dirs.patch
  262. mm-damon-sysfs-kobject_del-target-normal-context-and-kdamond-dirs.patch
  263. mm-damon-sysfs-schemes-kobject_del-scheme-dirs.patch
  264. mm-damon-sysfs-schemes-kobject_del-scheme-filter-dirs.patch
  265. mm-damon-sysfs-schemes-kobject_del-scheme-region-dirs.patch
  266. mm-hugetlb-fix-missing-migratable-flag-on-same-node-hugetlb-migration.patch
  267. mm-memcg-stop-reclaim-when-a-limit-update-is-superseded.patch
  268. mm-migrate-report-rcu-tasks-quiescent-states-in-migrate_pages_batch.patch
  269. mm-vmscan-report-rcu-tasks-quiescent-states-in-shrink_lruvec.patch
  270. mmc-via-sdmmc-stop-card-detect-handling-on-probe-failure.patch
  271. mpls-reload-header-after-pskb_may_pull.patch
  272. mptcp-fix-uninitialized-local_id-in-syncookie-mp_join-reconstruction.patch
  273. mtd-afs-validate-v2-image-info-bounds.patch
  274. mtd-mtdoops-free-page-bitmap-when-the-backing-mtd-is-removed.patch
  275. mtd-rawnand-validate-onfi-extended-parameter-page-sections.patch
  276. net-cap-advertised-ip-tunnel-headroom.patch
  277. net-dst-add-four-helpers-to-annotate-data-races-arou.patch
  278. net-dst-introduce-dst-dev_rcu.patch
  279. net-fix-spurious-tx-timeout-after-dev_activate.patch
  280. net-iucv-filter-frames-in-afiucv_hs_rcv-by-ingress-device.patch
  281. net-ntb_netdev-avoid-double-accounting-netif_rx-drops.patch
  282. net-ntb_netdev-count-packets-dropped-on-rx-refill-failure.patch
  283. net-ntb_netdev-fix-tx-busy-and-drop-handling.patch
  284. net-openvswitch-fix-flow-mask-use-after-free-on-flow-deletion.patch
  285. net-openvswitch-fix-kernel-doc-warnings-in-internal-.patch
  286. net-openvswitch-fix-nf_connlabels-leak-in-ovs_ct_init.patch
  287. net-ravb-avoid-dereferencing-an-invalid-ptp-clock.patch
  288. net-skbuff-don-t-skb_tx_error-the-source-skb-in-skb_.patch
  289. net-skbuff-don-t-touch-shared-zerocopy-state-in-skb_tx_error.patch
  290. net-smc-do-not-dereference-an-unset-send-buffer-on-the-smc-d-teardown-path.patch
  291. net-smc-fix-socket-refcount-leak-in-smc_switch_conns.patch
  292. net-smc-fix-use-after-free-in-smc_rx_pipe_buf_release.patch
  293. net-smc-unregister-the-connection-before-draining-the-rx-tasklet.patch
  294. net-thunderbolt-mark-the-connection-down-when-bringing-it-up-fails.patch
  295. net-thunderbolt-release-the-rx-hopid-that-was-handed-out-on-mismatch.patch
  296. net-tun-bound-receive-headroom.patch
  297. net-usb-qmi_wwan-add-telit-cinterion-fe990d50-composition.patch
  298. nfsd-add-fh_want_write-for-early-verified-setattr-in-nfsd_proc_setattr.patch
  299. nfsd-add-filehandle-match-check-to-nfsd4_delegreturn.patch
  300. nfsd-block-non-savefh-ops-after-foreign-putfh-to-prevent-null-deref.patch
  301. nfsd-check-client-ownership-when-cancelling-a-copy-notify-stateid.patch
  302. nfsd-encode-only-the-status-in-nfs-acl-v2-getacl-error-replies.patch
  303. nfsd-fix-cpntf-publish-race-in-nfs4_init_cp_state.patch
  304. nfsd-fix-off-by-one-in-drc-bucket-pruning-limit.patch
  305. nfsd-fix-version-mismatch-loops-in-nfsd_acl_init_request.patch
  306. nfsd-fix-xdr-length-calculation-in-nfsd4_ff_encode_layoutget.patch
  307. nfsd-fix-xdr-padding-calculation-in-ff_encode_getdeviceinfo.patch
  308. nfsd-gate-nfs2-setacl-by-argp-mask.patch
  309. nfsd-gate-nfs3-setacl-by-argp-mask.patch
  310. nfsd-initialize-copy-notify-stateid-before-publishing-it.patch
  311. nfsd-prevent-lock-owner-use-after-free-during-client-teardown.patch
  312. nfsd-reject-out-of-range-useconds-in-nfsv2-setattr-create.patch
  313. nfsd-reject-reclaim-lock-after-reclaim_complete.patch
  314. nfsd-release-path-refs-on-follow_down-error.patch
  315. nfsd-remove-flawed-warn_on_once-from-nfsd_mode_check.patch
  316. nfsd-reset-write-verifier-when-async-copy-writeback-fails.patch
  317. nfsd-restart-ssc_expire_umount-walk-after-dropping-nfsd_ssc_lock.patch
  318. nfsd-return-nfs4err_notsupp-for-unsupported-netloc4-types.patch
  319. nfsd-revoke-copy-notify-stateids-before-dropping-their-reference.patch
  320. nfsd-sample-writeback-error-cursor-before-async-copy-loop.patch
  321. nfsd-validate-symlink-target-length-in-nfsv4-create.patch
  322. nfsv4.1-fix-layout-segment-leak-on-the-pnfs_layout_process-forget-path.patch
  323. nilfs2-fix-slab-out-of-bounds-in-nilfs_direct_propagate-after-truncation.patch
  324. nouveau-gem-reserve-the-bo-in-the-info-ioctl-around-the-vma-lookup.patch
  325. ntb-ntb_transport-fail-tx-enqueue-when-the-qp-link-is-down.patch
  326. ntb-ntb_transport-recycle-tx-entries-before-client-callbacks.patch
  327. ntb-ntb_transport-reject-oversized-tx-buffers.patch
  328. nvdimm-btt-reject-an-arena-whose-nfree-is-below-the-lane-count.patch
  329. nvme-nvme-fc-fix-nvme_fc_create_hw_io_queues-queue-deletion-in-error-path.patch
  330. nvme-pci-disable-controller-on-admin-queue-irq-setup-failure.patch
  331. nvme-tcp-check-the-data-direction-of-a-c2hdata-pdu.patch
  332. nvme-tcp-do-not-accept-c2hdata-based-on-blk_rq_payload_bytes-alone.patch
  333. nvme-tcp-fix-host-memory-disclosure-on-r2t-for-a-read-command.patch
  334. nvme-tcp-reject-a-read-that-transferred-too-few-bytes.patch
  335. nvme-zero-the-discard-fallback-page.patch
  336. nvmet-tcp-fix-out-of-bounds-write-when-receiving-an-over-long-pdu.patch
  337. nvmet-tcp-reject-unsolicited-h2cdata-pdus.patch
  338. ocfs2-always-run-deallocs-on-copy-on-write-completion.patch
  339. ocfs2-bound-namelen-in-dlm_migrate_request_handler.patch
  340. ocfs2-cluster-avoid-lock-order-inversion-in-o2hb_region_pin-from-drop_item.patch
  341. ocfs2-cluster-don-t-sleep-while-holding-o2hb_live_lock-in-o2hb_region_pin.patch
  342. ocfs2-cluster-fix-o2hb_dependent_users-leak-on-pin-failure.patch
  343. ocfs2-fix-readdir-position-truncation-on-32-bit-kernels.patch
  344. ocfs2-validate-lengths-in-dlm_mig_lockres_handler.patch
  345. ocfs2-validate-rl_used-against-rl_count-in-refcount-block-validator.patch
  346. of-fix-out-of-bounds-read-in-of_alias_scan-stem-parser.patch
  347. openrisc-fix-arbitrary-kernel-memory-access-via-or1k_atomic-syscall.patch
  348. openvswitch-fix-ct-limit-teardown-use-after-free.patch
  349. openvswitch-only-skb_tx_error-a-packet-we-are-about-to-drop.patch
  350. orangefs-fix-double-free-of-trailer_buf-on-readdir-copy-failure.patch
  351. orangefs-skip-leading-spaces-before-parsing-client-debug-masks.patch
  352. parisc-eisa-fix-infinite-loop-when-parsing-invalid-irq-value.patch
  353. parisc-fix-alignment-of-asm-statements-in-head.s.patch
  354. pci-add-acs-quirk-for-pericom-pi7c9x2g608-switches.patch
  355. pci-fix-32-bit-config-write-in-intel-pch-root-port-mpc-acs-quirk.patch
  356. pci-hv-set-irq_retrigger-callback-for-the-hyper-v-pc.patch
  357. pci-meson-fix-gpio-state-while-requesting-perst.patch
  358. pci-msi-enable-memory-decoding-before-restoring-msi-x-messages.patch
  359. pci-proc-avoid-spurious-runtime-pm-wakeup-on-config-space-accesses.patch
  360. pci-proc-use-file_ns_capable-when-checking-config-space-read-access.patch
  361. pci-proc-warn-on-writes-to-kernel-exclusive-config-space-regions.patch
  362. pci-sysfs-avoid-spurious-runtime-pm-wakeup-on-config-space-accesses.patch
  363. perf-hisi-ptt-fix-ptt-trace-tlp-header-parsing.patch
  364. perf-x86-intel-fix-kernel-address-leakages-in-lbr-stack.patch
  365. perf-x86-intel-uncore-fix-die-id-init-and-look-up-bu.patch
  366. platform-chrome-sensorhub-bound-the-ec-reported-sensor-number.patch
  367. platform-chrome-sensorhub-fix-dropped-timestamp-events-and-log-spam.patch
  368. platform-x86-dell-wmi-sysman-don-t-hex-dump-attribute-security-buffer.patch
  369. platform-x86-hp-bioscfg-accept-reduced-acpi-packages-from-older-hp-bios.patch
  370. platform-x86-hp-bioscfg-advance-elem-past-consumed-array-elements.patch
  371. platform-x86-hp-bioscfg-bound-ordered-list-parsing-by-the-package-count.patch
  372. platform-x86-hp-bioscfg-fix-heap-oob-read-in-sk_store-and-kek_store.patch
  373. platform-x86-hp-bioscfg-fix-heap-oob-read-on-empty-password-write.patch
  374. platform-x86-hp-bioscfg-fix-new_password_store-overwriting-current_password.patch
  375. platform-x86-hp-bioscfg-fix-off-by-one-write-in-hp_get_string_from_buffer.patch
  376. platform-x86-hp-bioscfg-fix-ord_list_elements-never-being-parsed.patch
  377. platform-x86-hp-bioscfg-pass-validated-element-count-to-package-parsers.patch
  378. platform-x86-hp-bioscfg-warn-on-element-type-mismatch-instead-of-failing.patch
  379. platform-x86-ishtp_eclite-fix-acpi-device-reference-leak-in-probe-error-path.patch
  380. platform-x86-isst-just-allow-2-bits-for-sst-feature-enable.patch
  381. platform-x86-isst-validate-level-in-perf-mask-ioctls.patch
  382. platform-x86-isst-validate-logical-cpu-id-and-clos-id.patch
  383. platform-x86-isst-validate-socket-id-in-clos_assoc-ioctl.patch
  384. power-supply-bq24257-fix-use-after-free-on-remove.patch
  385. power-supply-bq256xx-drain-usb_work-before-freeing-the-charger.patch
  386. power-supply-bq25890-fix-power_supply-reference-leak.patch
  387. power-supply-cros_usbpd-charger-bound-the-ec-reported-port-count.patch
  388. power-supply-cros_usbpd-limit-port-counts-to-ec_usb_pd_max_ports.patch
  389. power-supply-lp8727-fix-use-after-free-in-lp8727_release_irq.patch
  390. power-supply-max17040-drop-incorrect-i2c-functionality-check.patch
  391. power-supply-max17040-synchronize-work-cancellation-on-suspend.patch
  392. power-supply-qcom_battmgr-terminate-the-strings-from-firmware.patch
  393. power-supply-rt9455-quiesce-delayed-work-before-teardown.patch
  394. power-supply-twl4030_charger-cancel-workers-via-devm.patch
  395. power-supply-ucs1002-fix-use-after-free-on-remove.patch
  396. powerpc-crash-stop-watchdogs-before-booting-kdump-kernel.patch
  397. powerpc-mm-fix-wrong-addr_pfn-tracking-in-compound-vmemmap-population.patch
  398. powerpc-powermac-fix-of-node-refcount.patch
  399. powerpc-pseries-handle-and-log-pseries-wdt-registration-failures.patch
  400. powerpc-pseries-iommu-switch-to-default-dma-window-during-kdump.patch
  401. powerpc-pseries-move-h_watchdog-definitions-to-a-common-header.patch
  402. qede-fix-null-pointer-dereference-in-tpa-fragment-processing.patch
  403. rapidio-mport_cdev-fix-use-after-free-in-dma_req_free.patch
  404. rdma-cxgb4-cancel-reg_work-before-freeing-device-on-remove.patch
  405. rdma-ucma-lock-the-handler-in-ucma_set_ib_path.patch
  406. regulator-as3722_get_regulator_dt_data-fix-premature-of_node_put-leaving-dangling-of_node-pointer.patch
  407. regulator-max8998_pmic_dt_parse_pdata-of_node_put-on-reg_np-after-ownership-transferred-to-rdata.patch
  408. regulator-qcom-refgen-correct-the-regulator-type-to-current.patch
  409. remoteproc-scp-fix-device-reference-leak-on-failed-lookup.patch
  410. revert-arm64-mm-don-t-remap-pgtables-for-allocate-vs.patch
  411. revert-irqchip-mbigen-fix-mbigen-node-address-layout.patch
  412. revert-media-v4l2-dev-fix-error-handling-in-__video_register_device.patch
  413. rpmsg-glink-smem-order-fifo-read-after-availability-check.patch
  414. rtc-rzn1-disable-alarm-interrupt-before-reprogramming-alarm-registers.patch
  415. rtc-rzn1-fix-weekday-underflow-when-alarm-crosses-month-boundary.patch
  416. s390-cpum_cf-handle-cpu-hotplug-via-prepare-dead-callbacks.patch
  417. s390-dasd-do-not-complete-a-failed-ese-read-as-successful.patch
  418. s390-dasd-guard-sysfs-discipline-callbacks-against-unallocated-private-data.patch
  419. s390-dasd-propagate-partial-completion-length-across-erp-recovery.patch
  420. s390-vfio-ap-fix-control-domain-removal-in-vfio_ap_mdev_cfg_remove.patch
  421. s390-vfio-ap-fix-dereference-matrix_mdev-kvm-without-checking-for-null.patch
  422. s390-vfio-ap-fix-hot-unplug-skipped-when-last-ap-adapter-or-domain-removed.patch
  423. s390-vfio-ap-fix-null-deref-in-status_show-during-queue-probe.patch
  424. s390-vfio-ap-fix-potential-use-of-uninitialized-apm_filtered-bitmap.patch
  425. s390-vfio-ap-fix-required-lock-not-held-during-update-of-ap_matrix_mdev-object.patch
  426. s390-vfio-ap-fix-stale-do_remove-flag-across-iterations-in-vfio_ap_mdev_cfg_remove.patch
  427. s390-vfio-ap-fix-stale-pqap_hook-pointer-on-error-in-vfio_ap_mdev_set_kvm.patch
  428. scsi-core-fill-in-dma-padding-bytes-in-scsi_alloc_sg.patch
  429. scsi-pm8001-use-rollback-index-when-freeing-msi-x-vectors.patch
  430. scsi-qla2xxx-avoid-double-completion-in-async-iocb-timeout.patch
  431. scsi-qla2xxx-avoid-req_q_map-double-read-in-qla2x00_error_entry.patch
  432. scsi-qla2xxx-bound-i2c-length-in-i2c-bsg-handlers.patch
  433. scsi-qla2xxx-bound-image-count-in-qla2x00_update_fru_versions.patch
  434. scsi-qla2xxx-bound-rsp_info_len-to-avoid-oob-sense-data-read.patch
  435. scsi-qla2xxx-check-entry_status-in-qla24xx_modify_vp_config.patch
  436. scsi-qla2xxx-clamp-msi-x-derived-queue-counts-to-avoid-truncation.patch
  437. scsi-qla2xxx-don-t-query-firmware-state-while-chip-is-down.patch
  438. scsi-qla2xxx-drop-vport-reference-under-lock-in-report-id-acquisition.patch
  439. scsi-qla2xxx-edif-fix-null-pointer-deref-in-rx-sa-delete-check.patch
  440. scsi-qla2xxx-fix-cs84xx-use-after-free-on-host-teardown.patch
  441. scsi-qla2xxx-fix-fce-trace-enable-parsing-in-debugfs.patch
  442. scsi-qla2xxx-fix-fce-trace-use-after-free-during-firmware-dump.patch
  443. scsi-qla2xxx-fix-name-server-logout-detection-on-fwi2-adapters.patch
  444. scsi-qla2xxx-fix-nvme-abort-reference-leak-on-repeated-abort.patch
  445. scsi-qla2xxx-fix-response-queue-over-consumption-in-__qla_consume_iocb.patch
  446. scsi-qla2xxx-hold-qpair-lock-when-sending-nvme-ls-reject.patch
  447. scsi-qla2xxx-hold-vport-reference-in-qla24xx_report_id_acquisition.patch
  448. scsi-qla2xxx-hold-vport_slock-for-host-map-update-in-report-id-acquisition.patch
  449. scsi-qla2xxx-initialize-nvme-abort_work-once-at-submission.patch
  450. scsi-qla2xxx-quiesce-response-irq-before-freeing-request-queue.patch
  451. scsi-qla2xxx-reject-non-scsi-srb-on-status-iocb-fast-path.patch
  452. scsi-qla2xxx-serialize-flash-version-read-in-reset-handler.patch
  453. scsi-qla2xxx-skip-nvme-ls-reject-iocb-when-fw-not-started.patch
  454. scsi-qla2xxx-use-coherent-dma-buffer-for-d_port-diagnostics.patch
  455. scsi-qla2xxx-zero-init-bsg-stack-buffers-to-avoid-info-leak.patch
  456. scsi-qla2xxx-zero-mailbox-struct-in-qla2x00_get_firmware_state.patch
  457. scsi-qla2xxx-zero-sfp-dma-buffer-in-fru-i2c-bsg-handlers.patch
  458. scsi-target-iscsi-reserve-a-terminator-byte-for-the-login-payload.patch
  459. sctp-distinguish-sequence-zero-from-wildcard-in-reconf-lookup.patch
  460. sctp-drop-a-chunk-if-its-transport-was-removed.patch
  461. sctp-fix-null-deref-on-untransmitted-reconf-completion.patch
  462. sctp-fix-stream-outcnt-underflow-on-duplicate-reconf-responses.patch
  463. sctp-stop-processing-a-packet-once-its-association-is-deleted.patch
  464. seg6-reset-ip6cb-after-ipv6-decapsulation.patch
  465. series
  466. signal-avoid-shared-siginfo-namespace-rewrites.patch
  467. slip-fix-use-after-free-in-sl_sync.patch
  468. smack-fix-cred-uaf-in-smack_file_send_sigiotask.patch
  469. smb-client-clear-ce-tgthint-in-free_tgts.patch
  470. smb-client-fix-align-overflow-in-symlink_data-error-context-loop.patch
  471. smb-client-fix-copy-paste-error-in-wsl-ea-length-accounting-for-lxdev.patch
  472. smb-client-harden-dfs-cache-against-invalid-target-hints.patch
  473. spi-bcm63xx-disable-clock-on-resume-failure.patch
  474. spi-bcm63xx-hsspi-disable-clocks-on-resume-failure.patch
  475. spi-bcmbca-hsspi-disable-clocks-on-resume-failure.patch
  476. staging-greybus-hid-fix-set_report-return-value.patch
  477. staging-media-tegra-video-fix-of_node_put-on-vip-parse-errors.patch
  478. staging-media-tegra-video-vi-fix-probe-failure-on-skipped-last-port.patch
  479. staging-rtl8723bs-fix-oob-read-in-rtw_action_frame_parse.patch
  480. staging-rtl8723bs-fix-oob-read-stack-overflow-in-rtw_get_wps_attr.patch
  481. sticon-parisc-detect-default-sti-graphics-card-for-console-output.patch
  482. sunrpc-always-drain-cache_cleaner-before-destroying-a-cache_detail.patch
  483. sunrpc-check-svc-pool-percpu-counter-allocation.patch
  484. sunrpc-guard-svcauth_gss_release-dispatch-on-rq_auth_stat.patch
  485. sunrpc-harden-gss_krb5_unwrap_v2-against-short-tokens.patch
  486. sunrpc-harden-gss_unwrap_resp_priv-length-checks.patch
  487. sunrpc-init-gssp_lock-before-publishing-proc-entry.patch
  488. sunrpc-reject-duplicate-creds_value-options.patch
  489. sunrpc-reject-krb5-v2-wrap-tokens-with-oversized-ec-field.patch
  490. sunrpc-route-to-a-populated-pool-in-svc_pool_for_cpu.patch
  491. sunrpc-svcauth_gss-enforce-krb5-token-minimum-length.patch
  492. sunrpc-wait-for-in-flight-client-tls-handshake-callback.patch
  493. sunrpc-xdr_buf_trim-clamp-buf-len-to-avoid-underflow.patch
  494. sunrpc-zero-rpc_gss_wire_cred-at-svcauth_gss_decode_credbody-entry.patch
  495. svcrdma-fix-offset-arithmetic-in-read_chunk_range.patch
  496. svcrdma-fix-pcl_for_each_segment-for-empty-chunks.patch
  497. taskstats-fix-cpumask-parsing-cutting-off-the-last-character.patch
  498. tcp-fix-potential-race-in-tcp_v6_syn_recv_sock.patch
  499. thermal-drivers-imx-disable-clock-on-runtime-resume-failure.patch
  500. thermal-drivers-qoriq-disable-clock-on-resume-failure.patch
  501. timer-keep-debugobjects-state-consistent-in-migrate_timer_list.patch
  502. timers-itimer-zero-init-old-itimerval-before-copy-to-userspace.patch
  503. tools-compiler-match-glibc-2.42-definition-of-__attribute_const__.patch
  504. tpm-tpm_i2c_nuvoton-disable-irq-on-wait-timeout.patch
  505. tracing-fix-crash-passing-err_ptr-to-kthread_stop.patch
  506. tracing-fix-use-after-free-with-same-name-named-triggers.patch
  507. tracing-mmiotrace-add-null-check-for-mmio_trace_arra.patch
  508. tracing-mmiotrace-remove-reference-to-unused-per-cpu.patch
  509. tracing-user_events-clear-copied-tracing-state-before-fork-duplication.patch
  510. ubifs-fix-out-of-bounds-read-in-signature-length-check.patch
  511. ublk-clear-vm_maywrite-on-read-only-ublk-char-device-mmap.patch
  512. udf-fix-i_lenextents-truncation-on-32-bit-kernels.patch
  513. udf-reject-vat-indexes-equal-to-the-entry-count.patch
  514. usb-dwc2-gadget-exit-partial-power-down-state-when-changing-usb-pull-up.patch
  515. usb-f_mass_storage-bump-local-buffer-size-in-fsg_common_create_luns.patch
  516. usb-gadget-f_fs-prevent-deadlock-during-ep0-read-loop.patch
  517. usb-gadget-f_midi2-fix-use-after-free-in-string-attribute-show-path.patch
  518. usb-gadget-f_tcm-fix-deadlock-in-usbg_make_tpg.patch
  519. usb-gadget-fix-null-pointer-dereference-in-gadget_dev_ioctl.patch
  520. usb-gadget-fix-null-pointer-dereference-in-usb_put_function_instance.patch
  521. usb-gadget-midi2-fix-null-pointer-dereference-in-f_midi2_free_ep_reqs.patch
  522. usb-gadget-midi2-remove-default-configfs-groups-on-teardown.patch
  523. usb-gadget-snps_udc_plat-clean-up-phy-on-probe-deferral.patch
  524. usb-gadget-u_audio-fix-use-after-free-on-sound-card-disconnect.patch
  525. usb-gadget-uvc-fix-dangling-pointers-in-uvc_function_bind-and-uvc_function_unbind.patch
  526. usb-image-mdc800-change-kmalloc-to-kzalloc.patch
  527. usb-phy-fsl-usb-fix-missing-static-keywords.patch
  528. usb-storage-ene_ub6250-fix-race-between-scan-work-and-probe.patch
  529. usb-typec-qcom-pmic-cancel-reset_work-on-stop.patch
  530. usb-typec-ucsi-displayport-fix-oob-altmode-array-index.patch
  531. vsock-virtio-flush-works-in-dependency-order.patch
  532. w1-ds28e17-reject-an-oversize-length-on-an-i2c-block-read.patch
  533. wifi-ath6kl-clamp-assoc-request-response-lengths-before-subtracting-ie-offsets.patch
  534. wifi-brcmfmac-fix-memory-leak-in-brcmf_sdio_read_control.patch
  535. wifi-mt76-mt7615-avoid-waiting-for-mac-work-under-the-mt76-mutex.patch
  536. wifi-mt76-mt7996-validate-default-eeprom-firmware-si.patch
  537. wifi-mwifiex-detach-sync-cmd-buffer-on-interrupted-wait.patch
  538. wifi-rtl818x-initialize-eeprom_93cx6-struct-to-zero.patch
  539. wifi-rtw88-fix-potential-memory-leak-in-rtw_txq_push_skb.patch
  540. x86-insn-eval-move-assign_register-out-of-kvm-as-insn_assign_reg.patch
  541. x86-tdx-fix-off-by-one-in-port-i-o-handling.patch
  542. x86-tdx-fix-zero-extension-for-32-bit-port-i-o.patch
  543. xarray-honor-xa_flags_account-in-xas_split_alloc.patch
  544. xdp-fix-zero-copy-frame-layout.patch