This is the start of the stable review cycle for the 6.4.12 release. There are 234 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Wed, 23 Aug 2023 19:40:45 +0000. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v6.x/stable-review/patch-6.4.12-rc1.gz or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-6.4.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx> Linux 6.4.12-rc1 Jason Xing <kernelxing@xxxxxxxxxxx> net: fix the RTO timer retransmitting skb every 1ms if linear option is enabled Kuniyuki Iwashima <kuniyu@xxxxxxxxxx> af_unix: Fix null-ptr-deref in unix_stream_sendpage(). Ranjani Sridharan <ranjani.sridharan@xxxxxxxxxxxxxxx> ASoC: SOF: intel: hda: Clean up link DMA for IPC3 during stop Arnaldo Carvalho de Melo <acme@xxxxxxxxxx> Revert "perf report: Append inlines to non-DWARF callchains" Guchun Chen <guchun.chen@xxxxxxx> drm/amdgpu: keep irq count in amdgpu_irq_disable_all Tim Huang <Tim.Huang@xxxxxxx> drm/amd/pm: skip the RLC stop when S0i3 suspend for SMU v13.0.4/11 Daniel Miess <daniel.miess@xxxxxxx> drm/amd/display: disable RCO for DCN314 Arnd Bergmann <arnd@xxxxxxxx> ASoC: amd: vangogh: select CONFIG_SND_AMD_ACP_CONFIG Umio Yasuno <coelacanth_dream@xxxxxxxxxxxxxx> drm/amdgpu/pm: fix throttle_status for other than MP1 11.0.7 Tim Huang <Tim.Huang@xxxxxxx> drm/amdgpu: skip fence GFX interrupts disable/enable for S0ix Mario Limonciello <mario.limonciello@xxxxxxx> drm/amd: flush any delayed gfxoff on suspend entry Jani Nikula <jani.nikula@xxxxxxxxx> drm/i915/sdvo: fix panel_type initialization Alex Deucher <alexander.deucher@xxxxxxx> Revert "Revert "drm/amdgpu/display: change pipe policy for DCN 2.0"" Jani Nikula <jani.nikula@xxxxxxxxx> Revert "drm/edid: Fix csync detailed mode parsing" Wander Lairson Costa <wander@xxxxxxxxxx> drm/qxl: fix UAF on handle creation Harshit Mogalapalli <harshit.m.mogalapalli@xxxxxxxxxx> mmc: sunplus: Fix error handling in spmmc_drv_probe() Wei Chen <harperchen1110@xxxxxxxxx> mmc: sunplus: fix return value check of mmc_add_host() Yibin Ding <yibin.ding@xxxxxxxxxx> mmc: block: Fix in_flight[issue_type] value error Yang Yingliang <yangyingliang@xxxxxxxxxx> mmc: wbsd: fix double mmc_free_host() in wbsd_init() Yangtao Li <frank.li@xxxxxxxx> mmc: f-sdh30: fix order of function calls in sdhci_f_sdh30_remove Shazad Hussain <quic_shazhuss@xxxxxxxxxxx> dt-bindings: pinctrl: qcom,sa8775p-tlmm: add gpio function constant Laurent Pinchart <laurent.pinchart@xxxxxxxxxxxxxxxx> media: uvcvideo: Fix menu count handling for userspace XU mappings Sweet Tea Dorminy <sweettea-kernel@xxxxxxxxxx> blk-crypto: dynamically allocate fallback profile Mark Brown <broonie@xxxxxxxxxx> arm64/ptrace: Ensure that the task sees ZT writes on first use Mark Brown <broonie@xxxxxxxxxx> arm64/ptrace: Ensure that SME is set up for target when writing SSVE state Yogesh Hegde <yogi.kernel@xxxxxxxxx> arm64: dts: rockchip: Fix Wifi/Bluetooth on ROCK Pi 4 boards Hawkins Jiawei <yin31149@xxxxxxxxx> virtio-net: Zero max_tx_vq field for VIRTIO_NET_CTRL_MQ_HASH_CONFIG case Martin Fuzzey <martin.fuzzey@flowbird.group> regulator: da9063: better fix null deref with partial DT Scott Mayhew <smayhew@xxxxxxxxxx> smb: client: fix null auth Mingzheng Xing <xingmingzheng@xxxxxxxxxxx> riscv: Handle zicsr/zifencei issue between gcc and binutils Helge Deller <deller@xxxxxx> parisc: Fix CONFIG_TLB_PTLOCK to work with lightweight spinlock checks Russell Harmon via samba-technical <samba-technical@xxxxxxxxxxxxxxx> cifs: Release folio lock on fscache read hit. dengxiang <dengxiang@xxxxxxxxxxxx> ALSA: usb-audio: Add support for Mythware XA001AU capture and playback interfaces. Tony Lindgren <tony@xxxxxxxxxxx> serial: 8250: Fix oops for port->pm on uart_change_pm() Alexandre Ghiti <alexghiti@xxxxxxxxxxxx> riscv: uaccess: Return the number of bytes effectively not copied Nam Cao <namcaov@xxxxxxxxx> riscv: correct riscv_insn_is_c_jr() and riscv_insn_is_c_jalr() Celeste Liu <coelacanthushex@xxxxxxxxx> riscv: entry: set a0 = -ENOSYS only when syscall != -1 Kailang Yang <kailang@xxxxxxxxxxx> ALSA: hda/realtek - Remodified 3k pull low procedure Jiasheng Jiang <jiasheng@xxxxxxxxxxx> soc: aspeed: socinfo: Add kfree for kstrdup Zev Weiss <zev@xxxxxxxxxxxxxxxxx> soc: aspeed: uart-routing: Use __sysfs_match_string Ninad Naik <quic_ninanaik@xxxxxxxxxxx> pinctrl: qcom: Add intr_target_width field to support increased number of interrupt targets Stefan Binding <sbinding@xxxxxxxxxxxxxxxxxxxxx> ALSA: hda/realtek: Add quirks for HP G11 Laptops Jerome Brunet <jbrunet@xxxxxxxxxxxx> ASoC: meson: axg-tdm-formatter: fix channel slot allocation Zhang Shurong <zhang_shurong@xxxxxxxxxxx> ASoC: rt5665: add missed regulator_bulk_disable Alexander Stein <alexander.stein@xxxxxxxxxxxxxxx> arm64: dts: imx93: Fix anatop node size Bard Liao <yung-chuan.liao@xxxxxxxxxxxxxxx> ASoC: max98363: don't return on success reading revision ID Xiaolei Wang <xiaolei.wang@xxxxxxxxxxxxx> ARM: dts: imx: Set default tuning step for imx6sx usdhc Fabio Estevam <festevam@xxxxxxx> arm64: dts: imx8mm: Drop CSI1 PHY reference clock configuration Xiaolei Wang <xiaolei.wang@xxxxxxxxxxxxx> ARM: dts: imx: Set default tuning step for imx7d usdhc Stefan Wahren <stefan.wahren@xxxxxxxx> ARM: dts: imx: Adjust dma-apbh node name Andrej Picej <andrej.picej@xxxxxxxxx> ARM: dts: imx6: phytec: fix RTC interrupt level Christopher Obbard <chris.obbard@xxxxxxxxxxxxx> arm64: dts: rockchip: Disable HS400 for eMMC on ROCK 4C+ Christopher Obbard <chris.obbard@xxxxxxxxxxxxx> arm64: dts: rockchip: Disable HS400 for eMMC on ROCK Pi 4 Dmitry Baryshkov <dmitry.baryshkov@xxxxxxxxxx> arm64: dts: qcom: qrb5165-rb5: fix thermal zone conflict Tony Lindgren <tony@xxxxxxxxxxx> bus: ti-sysc: Flush posted write on enable before reset Marcin Szycik <marcin.szycik@xxxxxxxxxxxxxxx> ice: Block switchdev mode when ADQ is active and vice versa Manish Chopra <manishc@xxxxxxxxxxx> qede: fix firmware halt over suspend and resume Eric Dumazet <edumazet@xxxxxxxxxx> net: do not allow gso_size to be set to GSO_BY_FRAGS Abel Wu <wuyun.abel@xxxxxxxxxxxxx> sock: Fix misuse of sk_under_memory_pressure() Edward Cree <ecree.xilinx@xxxxxxxxx> sfc: don't fail probe if MAE/TC setup fails Edward Cree <ecree.xilinx@xxxxxxxxx> sfc: don't unregister flow_indr if it was never registered Edward Cree <ecree.xilinx@xxxxxxxxx> sfc: add fallback action-set-lists for TC offload Alfred Lee <l00g33k@xxxxxxxxx> net: dsa: mv88e6xxx: Wait for EEPROM done before HW reset Karol Herbst <kherbst@xxxxxxxxxx> drm/nouveau/disp: fix use-after-free in error handling of nouveau_connector_create Dragos Tatulea <dtatulea@xxxxxxxxxx> net/mlx5e: XDP, Fix fifo overrun on XDP_REDIRECT Andrii Staikov <andrii.staikov@xxxxxxxxx> i40e: fix misleading debug logs Piotr Gardocki <piotrx.gardocki@xxxxxxxxx> iavf: fix FDIR rule fields masks validation Jakub Kicinski <kuba@xxxxxxxxxx> net: openvswitch: reject negative ifindex Ziyang Xuan <william.xuanziyang@xxxxxxxxxx> team: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves Justin Chen <justin.chen@xxxxxxxxxxxx> net: phy: broadcom: stub c45 read/write for 54810 Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx> netfilter: nft_dynset: disallow object maps Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx> netfilter: nf_tables: GC transaction race with netns dismantle Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx> netfilter: nf_tables: fix GC transaction races with netns and netlink event exit path Sishuai Gong <sishuai.system@xxxxxxxxx> ipvs: fix racy memcpy in proc_do_sync_threshold Xin Long <lucien.xin@xxxxxxxxx> netfilter: set default timeout to 3 secs for sctp shutdown send and recv state Florian Westphal <fw@xxxxxxxxx> netfilter: nf_tables: don't fail inserts if duplicate has expired Florian Westphal <fw@xxxxxxxxx> netfilter: nf_tables: deactivate catchall elements in next generation Florian Westphal <fw@xxxxxxxxx> netfilter: nf_tables: fix false-positive lockdep splat Dan Carpenter <dan.carpenter@xxxxxxxxxx> accel/qaic: Clean up integer overflow checking in map_user_pages() Pranjal Ramajor Asha Kanojiya <quic_pkanojiy@xxxxxxxxxxx> accel/qaic: Fix slicing memory leak Liang Chen <liangchen.linux@xxxxxxxxx> net: veth: Page pool creation error handling for existing pools only Michal Schmidt <mschmidt@xxxxxxxxxx> octeon_ep: cancel queued works in probe error path Michal Schmidt <mschmidt@xxxxxxxxxx> octeon_ep: cancel ctrl_mbox_task after intr_poll_task Michal Schmidt <mschmidt@xxxxxxxxxx> octeon_ep: cancel tx_timeout_task later in remove sequence Michal Schmidt <mschmidt@xxxxxxxxxx> octeon_ep: fix timeout value for waiting on mbox response Radhey Shyam Pandey <radhey.shyam.pandey@xxxxxxx> net: macb: In ZynqMP resume always configure PS GTR for non-wakeup source Vinay Belgaumkar <vinay.belgaumkar@xxxxxxxxx> drm/i915/guc/slpc: Restore efficient freq earlier Luca Ceresoli <luca.ceresoli@xxxxxxxxxxx> drm/panel: simple: Fix AUO G121EAN01 panel timings according to the docs Petr Machata <petrm@xxxxxxxxxx> selftests: mirror_gre_changes: Tighten up the TTL test match Russell King (Oracle) <rmk+kernel@xxxxxxxxxxxxxxx> net: phy: fix IRQ-based wake-on-lan over hibernate / power off Xiang Yang <xiangyang3@xxxxxxxxxx> net: pcs: Add missing put_device call in miic_create Jason Wang <jasowang@xxxxxxxxxx> virtio-net: set queues after driver_ok Leon Romanovsky <leon@xxxxxxxxxx> xfrm: don't skip free of empty state in acquire policy Leon Romanovsky <leon@xxxxxxxxxx> xfrm: delete offloaded policy Lin Ma <linma@xxxxxxxxxx> xfrm: add forgotten nla_policy for XFRMA_MTIMER_THRESH Lin Ma <linma@xxxxxxxxxx> xfrm: add NULL check in xfrm_update_ae_params Zhengchao Shao <shaozhengchao@xxxxxxxxxx> ip_vti: fix potential slab-use-after-free in decode_session6 Zhengchao Shao <shaozhengchao@xxxxxxxxxx> ip6_vti: fix slab-use-after-free in decode_session6 Zhengchao Shao <shaozhengchao@xxxxxxxxxx> xfrm: fix slab-use-after-free in decode_session6 Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx> xfrm: Silence warnings triggerable by bad packets Lin Ma <linma@xxxxxxxxxx> net: xfrm: Amend XFRMA_SEC_CTX nla_policy structure Lin Ma <linma@xxxxxxxxxx> net: af_key: fix sadb_x_filter validation Lin Ma <linma@xxxxxxxxxx> net: xfrm: Fix xfrm_address_filter OOB read Borislav Petkov (AMD) <bp@xxxxxxxxx> x86/srso: Correct the mitigation status when SMT is disabled Petr Pavlu <petr.pavlu@xxxxxxxx> x86/retpoline,kprobes: Skip optprobe check for indirect jumps with retpolines and IBT Petr Pavlu <petr.pavlu@xxxxxxxx> x86/retpoline,kprobes: Fix position of thunk sections with CONFIG_LTO_CLANG Borislav Petkov (AMD) <bp@xxxxxxxxx> x86/srso: Disable the mitigation on unaffected configurations Borislav Petkov (AMD) <bp@xxxxxxxxx> x86/CPU/AMD: Fix the DIV(0) initial fix attempt Sean Christopherson <seanjc@xxxxxxxxxx> x86/retpoline: Don't clobber RFLAGS during srso_safe_ret() Peter Zijlstra <peterz@xxxxxxxxxxxxx> x86/static_call: Fix __static_call_fixup() Peter Zijlstra <peterz@xxxxxxxxxxxxx> objtool/x86: Fixup frame-pointer vs rethunk Borislav Petkov (AMD) <bp@xxxxxxxxx> x86/srso: Explain the untraining sequences a bit more Peter Zijlstra <peterz@xxxxxxxxxxxxx> x86/cpu/kvm: Provide UNTRAIN_RET_VM Peter Zijlstra <peterz@xxxxxxxxxxxxx> x86/cpu: Cleanup the untrain mess Peter Zijlstra <peterz@xxxxxxxxxxxxx> x86/cpu: Rename srso_(.*)_alias to srso_alias_\1 Peter Zijlstra <peterz@xxxxxxxxxxxxx> x86/cpu: Rename original retbleed methods Peter Zijlstra <peterz@xxxxxxxxxxxxx> x86/cpu: Clean up SRSO return thunk mess Peter Zijlstra <peterz@xxxxxxxxxxxxx> x86/alternative: Make custom return thunk unconditional Peter Zijlstra <peterz@xxxxxxxxxxxxx> objtool/x86: Fix SRSO mess Peter Zijlstra <peterz@xxxxxxxxxxxxx> x86/cpu: Fix up srso_safe_ret() and __x86_return_thunk() Peter Zijlstra <peterz@xxxxxxxxxxxxx> x86/cpu: Fix __x86_return_thunk symbol type Tam Nguyen <tamnguyenchi@xxxxxxxxxxxxxxxxxxxxxx> i2c: designware: Handle invalid SMBus block data response length value Quan Nguyen <quan@xxxxxxxxxxxxxxxxxxxxxx> i2c: designware: Correct length byte validation logic Chris Mason <clm@xxxxxx> btrfs: only subtract from len_to_oe_boundary when it is tracking an extent Anand Jain <anand.jain@xxxxxxxxxx> btrfs: fix replace/scrub failure with metadata_uuid xiaoshoukui <xiaoshoukui@xxxxxxxxx> btrfs: fix BUG_ON condition in btrfs_cancel_balance Josef Bacik <josef@xxxxxxxxxxxxxx> btrfs: fix incorrect splitting in btrfs_drop_extent_map_range Filipe Manana <fdmanana@xxxxxxxx> btrfs: fix infinite directory reads Sherry Sun <sherry.sun@xxxxxxx> tty: serial: fsl_lpuart: Clear the error flags by writing 1 for lpuart32 platforms Yi Yang <yiyang13@xxxxxxxxxx> tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux Steve French <stfrench@xxxxxxxxxxxxx> smb3: display network namespace in debug information Dragos Tatulea <dtatulea@xxxxxxxxxx> vdpa: Enable strict validation for netlinks ops Lin Ma <linma@xxxxxxxxxx> vdpa: Add max vqp attr to vdpa_nl_policy for nlattr length check Lin Ma <linma@xxxxxxxxxx> vdpa: Add queue index attr to vdpa_nl_policy for nlattr length check Lin Ma <linma@xxxxxxxxxx> vdpa: Add features attr to vdpa_nl_policy for nlattr length check Nathan Lynch <nathanl@xxxxxxxxxxxxx> powerpc/rtas_flash: allow user copy to flash block cache objects Chen-Yu Tsai <wenst@xxxxxxxxxxxx> media: mtk-jpeg: Set platform driver data earlier Yuanjun Gong <ruc_gongyuanjun@xxxxxxx> fbdev: mmp: fix value check in mmphw_probe() Ming Lei <ming.lei@xxxxxxxxxx> blk-cgroup: hold queue_lock when removing blkg->q_node Parker Newman <pnewman@xxxxxxxxxxxxxxx> i2c: tegra: Fix i2c-tegra DMA config option processing Yicong Yang <yangyicong@xxxxxxxxxxxxx> i2c: hisi: Only handle the interrupt of the driver's transfer Chengfeng Ye <dg573847474@xxxxxxxxx> i2c: bcm-iproc: Fix bcm_iproc_i2c_isr deadlock issue Qingsong Chen <changxian.cqs@xxxxxxxxxxxx> rust: macros: vtable: fix `HAS_*` redefinition (`gen_const_name`) Steve French <stfrench@xxxxxxxxxxxxx> cifs: fix potential oops in cifs_oplock_break Eugenio Pérez <eperezma@xxxxxxxxxx> vdpa/mlx5: Delete control vq iotlb in destroy_mr only when necessary Dragos Tatulea <dtatulea@xxxxxxxxxx> vdpa/mlx5: Fix mr->initialized semantics Gal Pressman <gal@xxxxxxxxxx> virtio-vdpa: Fix cpumask memory leak in virtio_vdpa_find_vqs() Maxime Coquelin <maxime.coquelin@xxxxxxxxxx> vduse: Use proper spinlock for IRQ injection Wolfram Sang <wsa+renesas@xxxxxxxxxxxxxxxxxxxx> virtio-mmio: don't break lifecycle of vm_dev Abel Vesa <abel.vesa@xxxxxxxxxx> regulator: qcom-rpmh: Fix LDO 12 regulator for PM8550 Filipe Manana <fdmanana@xxxxxxxx> btrfs: fix use-after-free of new block group that became unused Naohiro Aota <naota@xxxxxxxxx> btrfs: move out now unused BG from the reclaim list Chen Lin <chen.lin5@xxxxxxxxxx> ring-buffer: Do not swap cpu_buffer during resize process Andy Shevchenko <andriy.shevchenko@xxxxxxxxxxxxxxx> Bluetooth: MGMT: Use correct address for memcpy() Benjamin Gray <bgray@xxxxxxxxxxxxx> powerpc/kasan: Disable KCOV in KASAN code Luke D. Jones <luke@xxxxxxxxxx> ALSA: hda/realtek: Add quirk for ASUS ROG GZ301V Luke D. Jones <luke@xxxxxxxxxx> ALSA: hda/realtek: Add quirk for ASUS ROG G614Jx Luke D. Jones <luke@xxxxxxxxxx> ALSA: hda/realtek: Amend G634 quirk to enable rear speakers Luke D. Jones <luke@xxxxxxxxxx> ALSA: hda/realtek: Add quirk for ASUS ROG GA402X Luke D. Jones <luke@xxxxxxxxxx> ALSA: hda/realtek: Add quirk for ASUS ROG GX650P Tuo Li <islituo@xxxxxxxxx> ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync() dengxiang <dengxiang@xxxxxxxxxxxx> ALSA: hda/realtek: Add quirks for Unis H3C Desktop B760 & Q760 Konstantin Komarov <almaz.alexandrovich@xxxxxxxxxxxxxxxxxxxx> fs/ntfs3: Alternative boot if primary boot is corrupted Konstantin Komarov <almaz.alexandrovich@xxxxxxxxxxxxxxxxxxxx> fs/ntfs3: Mark ntfs dirty when on-disk struct is corrupted Jia-Ju Bai <baijiaju@xxxxxxxxxxx> fs: ntfs3: Fix possible null-pointer dereferences in mi_read() Edward Lo <loyuantsung@xxxxxxxxx> fs/ntfs3: Return error for inconsistent extended attributes Edward Lo <loyuantsung@xxxxxxxxx> fs/ntfs3: Enhance sanity check while generating attr_list shanzhulig <shanzhulig@xxxxxxxxx> drm/amdgpu: Fix potential fence use-after-free v2 Xiubo Li <xiubli@xxxxxxxxxx> ceph: try to dump the msgs when decoding fails Matthew Anderson <ruinairas1992@xxxxxxxxx> Bluetooth: btusb: Add MT7922 bluetooth ID for the Asus Ally Zhengping Jiang <jiangzp@xxxxxxxxxx> Bluetooth: L2CAP: Fix use-after-free Yuechao Zhao <yuechao.zhao@xxxxxxxxxxxxxxxx> watchdog: sp5100_tco: support Hygon FCH/SCH (Server Controller Hub) Zhang Shurong <zhang_shurong@xxxxxxxxxxx> firewire: net: fix use after free in fwnet_finish_incoming_packet() Mika Westerberg <mika.westerberg@xxxxxxxxxxxxxxx> thunderbolt: Limit Intel Barlow Ridge USB3 bandwidth Mika Westerberg <mika.westerberg@xxxxxxxxxxxxxxx> thunderbolt: Add Intel Barlow Ridge PCI ID Armin Wolf <W_Armin@xxxxxx> pcmcia: rsrc_nonstatic: Fix memory leak in nonstatic_release_resource_db() Tuo Li <islituo@xxxxxxxxx> gfs2: Fix possible data races in gfs2_show_options() Xu Yang <xu.yang_2@xxxxxxx> usb: chipidea: imx: add missing USB PHY DPDM wakeup setting Xu Yang <xu.yang_2@xxxxxxx> usb: chipidea: imx: turn off vbus comparator when suspend Xu Yang <xu.yang_2@xxxxxxx> usb: chipidea: imx: don't request QoS for imx8ulp Mathias Nyman <mathias.nyman@xxxxxxxxxxxxxxx> xhci: get rid of XHCI_PLAT quirk that used to prevent MSI setup Mika Westerberg <mika.westerberg@xxxxxxxxxxxxxxx> thunderbolt: Read retimer NVM authentication status prior tb_retimer_set_inbound_sbtx() Hans Verkuil <hverkuil-cisco@xxxxxxxxx> media: platform: mediatek: vpu: fix NULL ptr dereference Avichal Rakesh <arakesh@xxxxxxxxxx> usb: gadget: uvc: queue empty isoc requests if no video buffer is available Prashanth K <quic_prashk@xxxxxxxxxxx> usb: gadget: u_serial: Avoid spinlock recursion in __gs_console_push Andrey Konovalov <andrey.konovalov@xxxxxxxxxx> media: camss: set VFE bpl_alignment to 16 for sdm845 and sm8250 Yunfei Dong <yunfei.dong@xxxxxxxxxxxx> media: v4l2-mem2mem: add lock to protect parameter num_rdy Lu Hongfei <luhongfei@xxxxxxxx> led: qcom-lpg: Fix resource leaks in for_each_available_child_of_node() loops Uwe Kleine-König <u.kleine-koenig@xxxxxxxxxxxxxx> serial: stm32: Ignore return value of uart_remove_one_port() in .remove() Winston Wen <wentao@xxxxxxxxxxxxx> cifs: fix session state check in reconnect to avoid use-after-free issue Paulo Alcantara <pc@xxxxxxxxxxxxx> smb: client: fix warning in cifs_smb3_do_mount() Masahiro Yamada <masahiroy@xxxxxxxxxx> Revert "[PATCH] uml: export symbols added by GCC hardened" Even Xu <even.xu@xxxxxxxxx> HID: intel-ish-hid: ipc: Add Arrow Lake PCI device ID Peter Ujfalusi <peter.ujfalusi@xxxxxxxxxxxxxxx> ASoC: SOF: core: Free the firmware trace before calling snd_sof_shutdown() Daniel Miess <daniel.miess@xxxxxxx> drm/amd/display: Enable dcn314 DPP RCO Nicholas Kazlauskas <nicholas.kazlauskas@xxxxxxx> drm/amd/display: Skip DPP DTO update if root clock is gated Kashyap Desai <kashyap.desai@xxxxxxxxxxxx> RDMA/bnxt_re: consider timeout of destroy ah as success. Patrisious Haddad <phaddad@xxxxxxxxxx> RDMA/mlx5: Return the firmware result upon destroying QP/RQ Lang Yu <Lang.Yu@xxxxxxx> drm/amdgpu: unmap and remove csa_va properly Alvin Lee <alvin.lee2@xxxxxxx> drm/amd/display: Apply 60us prefetch for DCFCLK <= 300Mhz Daniel Miess <daniel.miess@xxxxxxx> drm/amd/display: Remove v_startup workaround for dcn3+ Lang Yu <Lang.Yu@xxxxxxx> drm/amdgpu: install stub fence into potential unused fence pointers Suravee Suthikulpanit <suravee.suthikulpanit@xxxxxxx> iommu/amd: Introduce Disable IRTE Caching Support stuarthayhurst <stuart.a.hayhurst@xxxxxxxxx> HID: logitech-hidpp: Add USB and Bluetooth IDs for the Logitech G915 TKL Keyboard Fei Shao <fshao@xxxxxxxxxxxx> HID: i2c-hid: goodix: Add support for "goodix,no-reset-during-suspend" property Fei Shao <fshao@xxxxxxxxxxxx> dt-bindings: input: goodix: Add "goodix,no-reset-during-suspend" property Moti Haimovski <mhaimovski@xxxxxxxxx> accel/habanalabs: fix mem leak in capture user mappings Ofir Bitton <obitton@xxxxxxxxx> accel/habanalabs: add pci health check during heartbeat gaoxu <gaoxu2@xxxxxxxxxxx> dma-remap: use kvmalloc_array/kvfree for larger dma memory remap Pierre-Louis Bossart <pierre-louis.bossart@xxxxxxxxxxxxxxx> ASoC: SOF: Intel: fix SoundWire/HDaudio mutual exclusion Geert Uytterhoeven <geert+renesas@xxxxxxxxx> iopoll: Call cpu_relax() in busy loops Uday M Bhat <uday.m.bhat@xxxxxxxxx> ASoC: Intel: sof_sdw: Add support for Rex soundwire Pierre-Louis Bossart <pierre-louis.bossart@xxxxxxxxxxxxxxx> ASoC: Intel: sof_sdw: add quick for Dell SKU 0BDA Bard Liao <yung-chuan.liao@xxxxxxxxxxxxxxx> ASoC: Intel: sof_sdw_rt_sdca_jack_common: test SOF_JACK_JDSRC in _exit Oleksij Rempel <linux@xxxxxxxxxxxxxxxx> ARM: dts: imx6dl: prtrvt, prtvt7, prti6q, prtwd2: fix USB related warnings Long Li <longli@xxxxxxxxxxxxx> RDMA/mana_ib: Use v2 version of cfg_rx_steer_req to enable RX coalescing Venkata Prasad Potturu <venkataprasad.potturu@xxxxxxx> ASoC: amd: vangogh: Add check for acp config flags in vangogh platform Wolfram Sang <wsa+renesas@xxxxxxxxxxxxxxxxxxxx> drm: rcar-du: remove R-Car H3 ES1.* workarounds Kathiravan T <quic_kathirav@xxxxxxxxxxx> arm64: dts: qcom: ipq5332: add QFPROM node Raphael Gallais-Pou <raphael.gallais-pou@xxxxxxxxxxx> drm/stm: ltdc: fix late dereference check Venkata Prasad Potturu <venkataprasad.potturu@xxxxxxx> ASoC: SOF: amd: Add pci revision id check Simon Trimmer <simont@xxxxxxxxxxxxxxxxxxxxx> ASoC: cs35l56: Move DSP part string generation so that it is done only once Sumit Gupta <sumitg@xxxxxxxxxx> PCI: tegra194: Fix possible array out of bounds access Peter Ujfalusi <peter.ujfalusi@xxxxxxxxxxxxxxx> ASoC: Intel: sof_sdw: add quirk for LNL RVP Bard Liao <yung-chuan.liao@xxxxxxxxxxxxxxx> ASoC: Intel: sof_sdw: add quirk for MTL RVP Aurabindo Pillai <aurabindo.pillai@xxxxxxx> Revert "drm/amd/display: disable SubVP + DRR to prevent underflow" Jack Xiao <Jack.Xiao@xxxxxxx> drm/amdgpu: fix memory leak in mes self test hackyzh002 <hackyzh002@xxxxxxxxx> drm/amdgpu: Fix integer overflow in amdgpu_cs_pass1 Longlong Yao <Longlong.Yao@xxxxxxx> drm/amdgpu: fix calltrace warning in amddrm_buddy_fini Danilo Krummrich <dakr@xxxxxxxxxx> drm/scheduler: set entity to NULL in drm_sched_entity_pop_job() Alvin Lee <Alvin.Lee2@xxxxxxx> drm/amd/display: Update DTBCLK for DCN32 Li Yang <leoyang.li@xxxxxxx> net: phy: at803x: fix the wol setting functions Christophe JAILLET <christophe.jaillet@xxxxxxxxxx> net: phy: at803x: Use devm_regulator_get_enable_optional() David Howells <dhowells@xxxxxxxxxx> crypto, cifs: fix error handling in extract_iter_to_sg() ------------- Diffstat: Documentation/admin-guide/hw-vuln/srso.rst | 4 +- Documentation/admin-guide/kernel-parameters.txt | 1 + .../devicetree/bindings/input/goodix,gt7375p.yaml | 9 ++ .../bindings/pinctrl/qcom,sa8775p-tlmm.yaml | 2 +- Documentation/networking/nf_conntrack-sysctl.rst | 4 +- Makefile | 4 +- arch/arm/boot/dts/imx23.dtsi | 2 +- arch/arm/boot/dts/imx28.dtsi | 2 +- arch/arm/boot/dts/imx6dl-prtrvt.dts | 4 + arch/arm/boot/dts/imx6qdl-phytec-mira.dtsi | 2 +- arch/arm/boot/dts/imx6qdl-prti6q.dtsi | 11 +- arch/arm/boot/dts/imx6qdl.dtsi | 2 +- arch/arm/boot/dts/imx6sx.dtsi | 8 +- arch/arm/boot/dts/imx6ul.dtsi | 2 +- arch/arm/boot/dts/imx7s.dtsi | 8 +- arch/arm64/boot/dts/freescale/imx8mm.dtsi | 7 +- arch/arm64/boot/dts/freescale/imx93.dtsi | 2 +- arch/arm64/boot/dts/qcom/ipq5332.dtsi | 7 + arch/arm64/boot/dts/qcom/qrb5165-rb5.dts | 2 +- .../boot/dts/rockchip/rk3399-rock-4c-plus.dts | 3 +- arch/arm64/boot/dts/rockchip/rk3399-rock-pi-4.dtsi | 6 +- arch/arm64/include/asm/fpsimd.h | 4 +- arch/arm64/kernel/fpsimd.c | 6 +- arch/arm64/kernel/ptrace.c | 20 ++- arch/arm64/kernel/signal.c | 2 +- arch/parisc/kernel/entry.S | 47 ++++--- arch/powerpc/kernel/rtas_flash.c | 6 +- arch/powerpc/mm/kasan/Makefile | 1 + arch/riscv/Kconfig | 28 ++-- arch/riscv/include/asm/insn.h | 15 ++- arch/riscv/kernel/compat_vdso/Makefile | 8 +- arch/riscv/kernel/traps.c | 6 +- arch/riscv/lib/uaccess.S | 11 +- arch/um/os-Linux/user_syms.c | 7 - arch/x86/include/asm/entry-common.h | 1 + arch/x86/include/asm/nospec-branch.h | 49 +++---- arch/x86/kernel/alternative.c | 4 - arch/x86/kernel/cpu/amd.c | 1 + arch/x86/kernel/cpu/bugs.c | 29 ++++- arch/x86/kernel/kprobes/opt.c | 40 +++--- arch/x86/kernel/static_call.c | 13 ++ arch/x86/kernel/traps.c | 2 - arch/x86/kernel/vmlinux.lds.S | 22 ++-- arch/x86/kvm/svm/svm.c | 2 + arch/x86/kvm/svm/vmenter.S | 7 +- arch/x86/lib/retpoline.S | 141 ++++++++++++++------- block/blk-cgroup.c | 2 + block/blk-crypto-fallback.c | 36 ++++-- drivers/accel/habanalabs/common/device.c | 15 ++- drivers/accel/habanalabs/common/habanalabs.h | 2 + drivers/accel/habanalabs/common/habanalabs_drv.c | 4 +- drivers/accel/qaic/qaic_control.c | 26 ++-- drivers/accel/qaic/qaic_data.c | 1 + drivers/bluetooth/btusb.c | 3 + drivers/bus/ti-sysc.c | 2 + drivers/firewire/net.c | 6 +- drivers/gpu/drm/amd/amdgpu/amdgpu_cs.c | 8 +- drivers/gpu/drm/amd/amdgpu/amdgpu_csa.c | 38 ++++++ drivers/gpu/drm/amd/amdgpu/amdgpu_csa.h | 3 + drivers/gpu/drm/amd/amdgpu/amdgpu_device.c | 1 + drivers/gpu/drm/amd/amdgpu/amdgpu_fence.c | 41 +++++- drivers/gpu/drm/amd/amdgpu/amdgpu_gfx.c | 9 +- drivers/gpu/drm/amd/amdgpu/amdgpu_irq.c | 1 - drivers/gpu/drm/amd/amdgpu/amdgpu_kms.c | 10 +- drivers/gpu/drm/amd/amdgpu/amdgpu_psp.c | 4 +- drivers/gpu/drm/amd/amdgpu/amdgpu_ring.c | 2 + drivers/gpu/drm/amd/amdgpu/amdgpu_vm.c | 6 +- drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.c | 5 - .../amd/display/dc/clk_mgr/dcn32/dcn32_clk_mgr.c | 27 ++++ .../gpu/drm/amd/display/dc/dcn20/dcn20_resource.c | 2 +- drivers/gpu/drm/amd/display/dc/dcn31/dcn31_dccg.c | 8 ++ .../gpu/drm/amd/display/dc/dcn314/dcn314_dccg.c | 5 + .../drm/amd/display/dc/dcn314/dcn314_resource.c | 20 +++ .../gpu/drm/amd/display/dc/dml/dcn20/dcn20_fpu.c | 24 +++- .../gpu/drm/amd/display/dc/dml/dcn32/dcn32_fpu.c | 4 - .../amd/display/dc/dml/dcn32/display_mode_vba_32.c | 4 +- .../amd/display/dc/dml/dcn32/display_mode_vba_32.h | 2 +- drivers/gpu/drm/amd/display/dc/inc/hw/dccg.h | 1 + drivers/gpu/drm/amd/include/amd_shared.h | 1 - drivers/gpu/drm/amd/pm/swsmu/amdgpu_smu.c | 4 +- .../drm/amd/pm/swsmu/smu11/sienna_cichlid_ppt.c | 14 +- drivers/gpu/drm/drm_edid.c | 29 ++--- drivers/gpu/drm/i915/display/intel_sdvo.c | 2 +- drivers/gpu/drm/i915/gt/uc/intel_guc_slpc.c | 22 ++-- drivers/gpu/drm/nouveau/nouveau_connector.c | 11 +- drivers/gpu/drm/panel/panel-simple.c | 24 ++-- drivers/gpu/drm/qxl/qxl_drv.h | 2 +- drivers/gpu/drm/qxl/qxl_dumb.c | 5 +- drivers/gpu/drm/qxl/qxl_gem.c | 25 ++-- drivers/gpu/drm/qxl/qxl_ioctl.c | 6 +- drivers/gpu/drm/rcar-du/rcar_du_crtc.c | 37 +----- drivers/gpu/drm/rcar-du/rcar_du_drv.c | 48 ------- drivers/gpu/drm/rcar-du/rcar_du_drv.h | 2 - drivers/gpu/drm/rcar-du/rcar_du_regs.h | 3 +- drivers/gpu/drm/scheduler/sched_entity.c | 6 + drivers/gpu/drm/scheduler/sched_main.c | 4 + drivers/gpu/drm/stm/ltdc.c | 4 +- drivers/hid/hid-logitech-hidpp.c | 4 + drivers/hid/i2c-hid/i2c-hid-of-goodix.c | 16 ++- drivers/hid/intel-ish-hid/ipc/hw-ish.h | 1 + drivers/hid/intel-ish-hid/ipc/pci-ish.c | 1 + drivers/i2c/busses/i2c-bcm-iproc.c | 11 +- drivers/i2c/busses/i2c-designware-master.c | 16 ++- drivers/i2c/busses/i2c-hisi.c | 8 ++ drivers/i2c/busses/i2c-tegra.c | 2 +- drivers/infiniband/hw/bnxt_re/bnxt_re.h | 2 + drivers/infiniband/hw/bnxt_re/ib_verbs.c | 16 ++- drivers/infiniband/hw/bnxt_re/qplib_sp.c | 8 +- drivers/infiniband/hw/bnxt_re/qplib_sp.h | 4 +- drivers/infiniband/hw/mana/qp.c | 5 +- drivers/infiniband/hw/mlx5/qpc.c | 10 +- drivers/iommu/amd/amd_iommu_types.h | 4 + drivers/iommu/amd/init.c | 36 ++++++ drivers/leds/rgb/leds-qcom-lpg.c | 8 +- .../media/platform/mediatek/jpeg/mtk_jpeg_core.c | 4 +- drivers/media/platform/mediatek/vpu/mtk_vpu.c | 6 +- drivers/media/platform/qcom/camss/camss-vfe.c | 6 +- drivers/media/usb/uvc/uvc_v4l2.c | 2 +- drivers/mmc/core/block.c | 7 +- drivers/mmc/host/sdhci_f_sdh30.c | 11 +- drivers/mmc/host/sunplus-mmc.c | 26 ++-- drivers/mmc/host/wbsd.c | 2 - drivers/net/dsa/mv88e6xxx/chip.c | 8 ++ drivers/net/ethernet/cadence/macb_main.c | 9 +- drivers/net/ethernet/intel/i40e/i40e_nvm.c | 16 +-- drivers/net/ethernet/intel/iavf/iavf_ethtool.c | 10 ++ drivers/net/ethernet/intel/iavf/iavf_fdir.c | 77 ++++++++++- drivers/net/ethernet/intel/iavf/iavf_fdir.h | 2 + drivers/net/ethernet/intel/ice/ice_eswitch.c | 6 + drivers/net/ethernet/intel/ice/ice_main.c | 5 + .../ethernet/marvell/octeon_ep/octep_ctrl_net.c | 2 +- .../net/ethernet/marvell/octeon_ep/octep_main.c | 9 +- drivers/net/ethernet/mellanox/mlx5/core/en/xdp.h | 2 + drivers/net/ethernet/mellanox/mlx5/core/en_main.c | 8 +- drivers/net/ethernet/microsoft/mana/mana_en.c | 5 +- drivers/net/ethernet/qlogic/qede/qede_main.c | 10 ++ drivers/net/ethernet/sfc/ef100_nic.c | 2 +- drivers/net/ethernet/sfc/tc.c | 70 +++++++++- drivers/net/ethernet/sfc/tc.h | 9 ++ drivers/net/pcs/pcs-rzn1-miic.c | 10 +- drivers/net/phy/at803x.c | 89 +++++-------- drivers/net/phy/broadcom.c | 13 ++ drivers/net/phy/phy_device.c | 13 +- drivers/net/team/team.c | 4 +- drivers/net/veth.c | 3 +- drivers/net/virtio_net.c | 6 +- drivers/pci/controller/dwc/pcie-tegra194.c | 13 +- drivers/pcmcia/rsrc_nonstatic.c | 2 + drivers/pinctrl/qcom/pinctrl-msm.c | 9 +- drivers/pinctrl/qcom/pinctrl-msm.h | 2 + drivers/pinctrl/qcom/pinctrl-sa8775p.c | 1 + drivers/regulator/da9063-regulator.c | 12 +- drivers/regulator/qcom-rpmh-regulator.c | 2 +- drivers/soc/aspeed/aspeed-socinfo.c | 1 + drivers/soc/aspeed/aspeed-uart-routing.c | 2 +- drivers/thunderbolt/nhi.c | 2 + drivers/thunderbolt/nhi.h | 4 + drivers/thunderbolt/quirks.c | 8 ++ drivers/thunderbolt/retimer.c | 29 +++-- drivers/tty/n_gsm.c | 3 +- drivers/tty/serial/8250/8250_port.c | 1 + drivers/tty/serial/fsl_lpuart.c | 4 +- drivers/tty/serial/stm32-usart.c | 5 +- drivers/usb/chipidea/ci_hdrc_imx.c | 5 + drivers/usb/chipidea/usbmisc_imx.c | 37 +++++- drivers/usb/gadget/function/u_serial.c | 3 + drivers/usb/gadget/function/uvc_video.c | 32 +++-- drivers/usb/host/xhci-histb.c | 12 +- drivers/usb/host/xhci-mtk.c | 6 - drivers/usb/host/xhci-pci.c | 7 - drivers/usb/host/xhci-plat.c | 7 +- drivers/usb/host/xhci-tegra.c | 1 - drivers/usb/host/xhci.h | 2 +- drivers/vdpa/mlx5/core/mlx5_vdpa.h | 2 + drivers/vdpa/mlx5/core/mr.c | 105 ++++++++++----- drivers/vdpa/mlx5/net/mlx5_vnet.c | 4 +- drivers/vdpa/vdpa.c | 9 +- drivers/vdpa/vdpa_user/vduse_dev.c | 8 +- drivers/video/fbdev/mmp/hw/mmp_ctrl.c | 4 +- drivers/virtio/virtio_mmio.c | 5 +- drivers/virtio/virtio_vdpa.c | 2 + drivers/watchdog/sp5100_tco.c | 4 +- fs/btrfs/block-group.c | 12 ++ fs/btrfs/block-group.h | 5 + fs/btrfs/ctree.h | 1 + fs/btrfs/delayed-inode.c | 5 +- fs/btrfs/delayed-inode.h | 1 + fs/btrfs/extent_io.c | 25 +++- fs/btrfs/extent_map.c | 6 +- fs/btrfs/inode.c | 131 +++++++++++-------- fs/btrfs/scrub.c | 3 +- fs/btrfs/volumes.c | 3 +- fs/ceph/mds_client.c | 4 + fs/gfs2/super.c | 26 ++-- fs/netfs/iterator.c | 2 +- fs/ntfs3/frecord.c | 16 ++- fs/ntfs3/fsntfs.c | 2 +- fs/ntfs3/index.c | 6 + fs/ntfs3/ntfs_fs.h | 2 + fs/ntfs3/record.c | 10 +- fs/ntfs3/super.c | 98 ++++++++++---- fs/ntfs3/xattr.c | 1 + fs/smb/client/cifs_debug.c | 10 ++ fs/smb/client/cifsfs.c | 28 ++-- fs/smb/client/file.c | 25 ++-- fs/smb/client/fs_context.c | 4 + fs/smb/client/smb2pdu.c | 6 + include/drm/drm_edid.h | 12 +- include/linux/iopoll.h | 2 + include/linux/virtio_net.h | 4 + include/media/v4l2-mem2mem.h | 18 ++- include/net/mana/mana.h | 4 +- include/net/sock.h | 6 + include/net/xfrm.h | 1 + kernel/dma/remap.c | 4 +- kernel/trace/ring_buffer.c | 14 +- kernel/trace/trace.c | 3 +- net/bluetooth/l2cap_core.c | 5 + net/bluetooth/mgmt.c | 2 +- net/core/sock.c | 2 +- net/ipv4/ip_vti.c | 4 +- net/ipv4/tcp_timer.c | 4 +- net/ipv6/ip6_vti.c | 4 +- net/key/af_key.c | 4 +- net/netfilter/ipvs/ip_vs_ctl.c | 4 + net/netfilter/nf_conntrack_proto_sctp.c | 6 +- net/netfilter/nf_tables_api.c | 44 ++++++- net/netfilter/nft_dynset.c | 3 + net/netfilter/nft_set_pipapo.c | 36 +++--- net/openvswitch/datapath.c | 8 +- net/unix/af_unix.c | 9 +- net/xfrm/xfrm_compat.c | 2 +- net/xfrm/xfrm_input.c | 22 ++-- net/xfrm/xfrm_interface_core.c | 4 +- net/xfrm/xfrm_state.c | 8 +- net/xfrm/xfrm_user.c | 15 ++- rust/macros/vtable.rs | 1 + sound/hda/hdac_regmap.c | 7 +- sound/pci/hda/patch_realtek.c | 58 ++++++++- sound/soc/amd/Kconfig | 1 + sound/soc/amd/vangogh/acp5x.h | 2 + sound/soc/amd/vangogh/pci-acp5x.c | 7 +- sound/soc/codecs/cs35l56.c | 12 +- sound/soc/codecs/max98363.c | 9 +- sound/soc/codecs/rt5665.c | 2 + sound/soc/intel/boards/sof_sdw.c | 35 +++++ sound/soc/intel/boards/sof_sdw_rt711_sdca.c | 3 + sound/soc/meson/axg-tdm-formatter.c | 42 +++--- sound/soc/sof/amd/acp.h | 3 + sound/soc/sof/amd/pci-rmb.c | 3 + sound/soc/sof/amd/pci-rn.c | 3 + sound/soc/sof/core.c | 4 +- sound/soc/sof/intel/hda-dai-ops.c | 13 +- sound/soc/sof/intel/hda-dai.c | 8 +- sound/soc/sof/intel/hda.c | 12 +- sound/soc/sof/intel/hda.h | 2 + sound/usb/quirks-table.h | 29 +++++ tools/objtool/arch/x86/decode.c | 11 +- tools/objtool/check.c | 45 +++++-- tools/objtool/include/objtool/arch.h | 1 + tools/objtool/include/objtool/elf.h | 1 + tools/perf/util/machine.c | 5 - tools/perf/util/thread-stack.c | 4 +- .../selftests/net/forwarding/mirror_gre_changes.sh | 3 +- 264 files changed, 2116 insertions(+), 990 deletions(-)
