This is the start of the stable review cycle for the 6.1.125 release. There are 92 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Fri, 17 Jan 2025 10:34:58 +0000. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v6.x/stable-review/patch-6.1.125-rc1.gz or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-6.1.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx> Linux 6.1.125-rc1 Biju Das <biju.das.jz@xxxxxxxxxxxxxx> drm: adv7511: Fix use-after-free in adv7533_attach_dsi() Ahmad Fatoum <a.fatoum@xxxxxxxxxxxxxx> drm: bridge: adv7511: use dev_err_probe in probe function Dennis Lam <dennis.lamerice@xxxxxxxxx> ocfs2: fix slab-use-after-free due to dangling pointer dqi_priv Joseph Qi <joseph.qi@xxxxxxxxxxxxxxxxx> ocfs2: correct return value of ocfs2_local_free_info() Andrea della Porta <andrea.porta@xxxxxxxx> of: address: Preserve the flags portion on 1:1 dma-ranges mapping Rob Herring <robh@xxxxxxxxxx> of: address: Store number of bus flag cells rather than bool Herve Codina <herve.codina@xxxxxxxxxxx> of: address: Remove duplicated functions Herve Codina <herve.codina@xxxxxxxxxxx> of: address: Fix address translation when address-size is greater than 2 Rob Herring <robh@xxxxxxxxxx> of/address: Add support for 3 address cell bus Rob Herring <robh@xxxxxxxxxx> of: unittest: Add bus address range parsing tests Peter Geis <pgwipeout@xxxxxxxxx> arm64: dts: rockchip: add hevc power domain clock to rk3328 Yu Kuai <yukuai3@xxxxxxxxxx> block, bfq: fix waker_bfqq UAF after bfq_split_bfqq() Jesse Taube <Mr.Bossman075@xxxxxxxxx> ARM: dts: imxrt1050: Fix clocks for mmc Jens Axboe <axboe@xxxxxxxxx> io_uring/eventfd: ensure io_eventfd_signal() defers another RCU period Uwe Kleine-König <u.kleine-koenig@xxxxxxxxxxxx> iio: adc: ad7124: Disable all channels at probe time Joe Hattori <joe@xxxxxxxxxxxxxxxxxxxxx> iio: inkern: call iio_device_put() only on mapped devices Joe Hattori <joe@xxxxxxxxxxxxxxxxxxxxx> iio: adc: at91: call input_free_device() on allocated iio_dev Fabio Estevam <festevam@xxxxxxxxx> iio: adc: ti-ads124s08: Use gpiod_set_value_cansleep() Carlos Song <carlos.song@xxxxxxx> iio: gyro: fxas21002c: Fix missing data update in trigger handler Javier Carrasco <javier.carrasco.cruz@xxxxxxxxx> iio: adc: ti-ads8688: fix information leak in triggered buffer Javier Carrasco <javier.carrasco.cruz@xxxxxxxxx> iio: imu: kmx61: fix information leak in triggered buffer Javier Carrasco <javier.carrasco.cruz@xxxxxxxxx> iio: light: vcnl4035: fix information leak in triggered buffer Javier Carrasco <javier.carrasco.cruz@xxxxxxxxx> iio: dummy: iio_simply_dummy_buffer: fix information leak in triggered buffer Javier Carrasco <javier.carrasco.cruz@xxxxxxxxx> iio: pressure: zpa2326: fix information leak in triggered buffer Akash M <akash.m5@xxxxxxxxxxx> usb: gadget: f_fs: Remove WARN_ON in functionfs_bind Prashanth K <quic_prashk@xxxxxxxxxxx> usb: gadget: f_uac2: Fix incorrect setting of bNumEndpoints Ma Ke <make_ruc2021@xxxxxxx> usb: fix reference leak in usb_new_device() Kai-Heng Feng <kaihengf@xxxxxxxxxx> USB: core: Disable LPM only for non-suspended ports Jun Yan <jerrysteve1101@xxxxxxxxx> USB: usblp: return error when setting unsupported protocol Prashanth K <quic_prashk@xxxxxxxxxxx> usb: dwc3-am62: Disable autosuspend during remove Lianqin Hu <hulianqin@xxxxxxxx> usb: gadget: u_serial: Disable ep before setting port to null to fix the crash caused by port being null Rengarajan S <rengarajan.s@xxxxxxxxxxxxx> misc: microchip: pci1xxxx: Resolve return code mismatch during GPIO set config Rengarajan S <rengarajan.s@xxxxxxxxxxxxx> misc: microchip: pci1xxxx: Resolve kernel panic during GPIO IRQ handling Li Huafei <lihuafei1@xxxxxxxxxx> topology: Keep the cpumask unchanged when printing cpumap André Draszik <andre.draszik@xxxxxxxxxx> usb: dwc3: gadget: fix writing NYET threshold Johan Hovold <johan@xxxxxxxxxx> USB: serial: cp210x: add Phoenix Contact UPS Device Lubomir Rintel <lrintel@xxxxxxxxxx> usb-storage: Add max sectors quirk for Nokia 208 Zicheng Qu <quzicheng@xxxxxxxxxx> staging: iio: ad9832: Correct phase range check Zicheng Qu <quzicheng@xxxxxxxxxx> staging: iio: ad9834: Correct phase range check Michal Hrusecky <michal.hrusecky@xxxxxxxxxx> USB: serial: option: add Neoway N723-EA support Chukun Pan <amadeus@xxxxxxxxxx> USB: serial: option: add MeiG Smart SRM815 Daniel Borkmann <daniel@xxxxxxxxxxxxx> bpf: Fix overloading of MEM_UNINIT's meaning Daniel Borkmann <daniel@xxxxxxxxxxxxx> bpf: Add MEM_WRITE attribute Milan Broz <gmazyland@xxxxxxxxx> dm-verity FEC: Fix RS FEC repair for roots unaligned to block size (take 2) Melissa Wen <mwen@xxxxxxxxxx> drm/amd/display: increase MAX_SURFACES to the value supported by hw Hans de Goede <hdegoede@xxxxxxxxxx> ACPI: resource: Add Asus Vivobook X1504VAP to irq1_level_low_skip_override[] Hans de Goede <hdegoede@xxxxxxxxxx> ACPI: resource: Add TongFang GM5HG0A to irq1_edge_low_force_override[] Nam Cao <namcao@xxxxxxxxxxxxx> riscv: Fix sleeping in invalid context in die() Joe Hattori <joe@xxxxxxxxxxxxxxxxxxxxx> thermal: of: fix OF node leak in of_thermal_zone_find() Roman Li <Roman.Li@xxxxxxx> drm/amd/display: Add check for granularity in dml ceil/floor helpers Matthieu Baerts (NGI0) <matttbe@xxxxxxxxxx> sctp: sysctl: plpmtud_probe_interval: avoid using current->nsproxy Matthieu Baerts (NGI0) <matttbe@xxxxxxxxxx> sctp: sysctl: udp_port: avoid using current->nsproxy Matthieu Baerts (NGI0) <matttbe@xxxxxxxxxx> sctp: sysctl: auth_enable: avoid using current->nsproxy Matthieu Baerts (NGI0) <matttbe@xxxxxxxxxx> sctp: sysctl: rto_min/max: avoid using current->nsproxy Matthieu Baerts (NGI0) <matttbe@xxxxxxxxxx> sctp: sysctl: cookie_hmac_alg: avoid using current->nsproxy Mikulas Patocka <mpatocka@xxxxxxxxxx> dm-ebs: don't set the flag DM_TARGET_PASSES_INTEGRITY Krister Johansen <kjlx@xxxxxxxxxxxxxxxxxx> dm thin: make get_first_thin use rcu-safe list first function Javier Carrasco <javier.carrasco.cruz@xxxxxxxxx> cpuidle: riscv-sbi: fix device node release in early exit of for_each_possible_cpu He Wang <xw897002528@xxxxxxxxx> ksmbd: fix unexpectedly changed path in ksmbd_vfs_kern_path_locked David Howells <dhowells@xxxxxxxxxx> afs: Fix the maximum cell name length Wentao Liang <liangwentao@xxxxxxxxxxx> ksmbd: fix a missing return value check bug Liankun Yang <liankun.yang@xxxxxxxxxxxx> drm/mediatek: Add return value check when reading DPCD Liankun Yang <liankun.yang@xxxxxxxxxxxx> drm/mediatek: Fix mode valid issue for dp Liankun Yang <liankun.yang@xxxxxxxxxxxx> drm/mediatek: Fix YCbCr422 color format issue for DP Arnd Bergmann <arnd@xxxxxxxx> drm/mediatek: stop selecting foreign drivers Chenguang Zhao <zhaochenguang@xxxxxxxxxx> net/mlx5: Fix variable not being completed when function returns Toke Høiland-Jørgensen <toke@xxxxxxxxxx> sched: sch_cake: add bounds checks to host bulk flow fairness counts Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx> netfilter: conntrack: clamp maximum hashtable size to INT_MAX Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx> netfilter: nf_tables: imbalance in flowtable binding Daniel Borkmann <daniel@xxxxxxxxxxxxx> tcp: Annotate data-race around sk->sk_mark in tcp_v4_send_reset Luiz Augusto von Dentz <luiz.von.dentz@xxxxxxxxx> Bluetooth: hci_sync: Fix not setting Random Address when required Benjamin Coddington <bcodding@xxxxxxxxxx> tls: Fix tls_sw_sendmsg error handling Przemyslaw Korba <przemyslaw.korba@xxxxxxxxx> ice: fix incorrect PHY settings for 100 GB/s Anumula Murali Mohan Reddy <anumula@xxxxxxxxxxx> cxgb4: Avoid removal of uninserted tid Kalesh AP <kalesh-anakkur.purayil@xxxxxxxxxxxx> bnxt_en: Fix possible memory leak when hwrm_req_replace fails Eric Dumazet <edumazet@xxxxxxxxxx> net_sched: cls_flow: validate TCA_FLOW_RSHIFT attribute Zhongqiu Duan <dzq.aishenghu0@xxxxxxxxx> tcp/dccp: allow a connection when sk_max_ack_backlog is zero Jason Xing <kernelxing@xxxxxxxxxxx> tcp/dccp: complete lockless accesses to sk->sk_max_ack_backlog Antonio Pastor <antonio.pastor@xxxxxxxxx> net: 802: LLC+SNAP OID:PID lookup on start of skb data Keisuke Nishimura <keisuke.nishimura@xxxxxxxx> ieee802154: ca8210: Add missing check for kfifo_alloc() in ca8210_probe() Chen-Yu Tsai <wenst@xxxxxxxxxxxx> ASoC: mediatek: disable buffer pre-allocation Kuan-Wei Chiu <visitorckw@xxxxxxxxx> scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity Yuezhang Mo <Yuezhang.Mo@xxxxxxxx> exfat: fix the infinite loop in __exfat_free_cluster() Yuezhang Mo <Yuezhang.Mo@xxxxxxxx> exfat: fix the infinite loop in exfat_readdir() Ming-Hung Tsai <mtsai@xxxxxxxxxx> dm array: fix cursor index when skipping across block boundaries Ming-Hung Tsai <mtsai@xxxxxxxxxx> dm array: fix unreleased btree blocks on closing a faulty array cursor Ming-Hung Tsai <mtsai@xxxxxxxxxx> dm array: fix releasing a faulty array block twice in dm_array_cursor_end Zhang Yi <yi.zhang@xxxxxxxxxx> jbd2: flush filesystem device before updating tail sequence Zhang Yi <yi.zhang@xxxxxxxxxx> jbd2: increase IO priority for writing revoke records Qun-Wei Lin <qun-wei.lin@xxxxxxxxxxxx> sched/task_stack: fix object_is_on_stack() for KASAN tagged pointers Michal Luczaj <mhal@xxxxxxx> bpf, sockmap: Fix race between element replace and close() Max Kellermann <max.kellermann@xxxxxxxxx> ceph: give up on paths longer than PATH_MAX ------------- Diffstat: Makefile | 4 +- arch/arm/boot/dts/imxrt1050.dtsi | 2 +- arch/arm64/boot/dts/rockchip/rk3328.dtsi | 1 + arch/riscv/kernel/traps.c | 6 +- block/bfq-iosched.c | 12 +- drivers/acpi/resource.c | 18 +++ drivers/base/topology.c | 24 +++- drivers/cpuidle/cpuidle-riscv-sbi.c | 4 +- drivers/gpu/drm/amd/display/dc/dc.h | 2 +- .../gpu/drm/amd/display/dc/dml/dml_inline_defs.h | 8 ++ drivers/gpu/drm/bridge/adv7511/adv7511_drv.c | 8 +- drivers/gpu/drm/bridge/adv7511/adv7533.c | 22 ++-- drivers/gpu/drm/mediatek/Kconfig | 5 - drivers/gpu/drm/mediatek/mtk_dp.c | 46 ++++--- drivers/iio/adc/ad7124.c | 3 + drivers/iio/adc/at91_adc.c | 2 +- drivers/iio/adc/ti-ads124s08.c | 4 +- drivers/iio/adc/ti-ads8688.c | 2 +- drivers/iio/dummy/iio_simple_dummy_buffer.c | 2 +- drivers/iio/gyro/fxas21002c_core.c | 11 +- drivers/iio/imu/kmx61.c | 2 +- drivers/iio/inkern.c | 2 +- drivers/iio/light/vcnl4035.c | 2 +- drivers/iio/pressure/zpa2326.c | 2 + drivers/md/dm-ebs-target.c | 2 +- drivers/md/dm-thin.c | 5 +- drivers/md/dm-verity-fec.c | 39 ++++-- drivers/md/persistent-data/dm-array.c | 19 +-- drivers/misc/mchp_pci1xxxx/mchp_pci1xxxx_gpio.c | 4 +- drivers/net/ethernet/broadcom/bnxt/bnxt_ulp.c | 3 +- drivers/net/ethernet/chelsio/cxgb4/cxgb4_main.c | 5 +- drivers/net/ethernet/intel/ice/ice_ptp_consts.h | 4 +- drivers/net/ethernet/mellanox/mlx5/core/cmd.c | 1 + drivers/net/ieee802154/ca8210.c | 6 +- drivers/of/address.c | 76 ++++++++--- drivers/of/unittest-data/tests-address.dtsi | 9 +- drivers/of/unittest.c | 109 ++++++++++++++++ drivers/staging/iio/frequency/ad9832.c | 2 +- drivers/staging/iio/frequency/ad9834.c | 2 +- drivers/thermal/thermal_of.c | 1 + drivers/usb/class/usblp.c | 7 +- drivers/usb/core/hub.c | 6 +- drivers/usb/core/port.c | 7 +- drivers/usb/dwc3/core.h | 1 + drivers/usb/dwc3/dwc3-am62.c | 1 + drivers/usb/dwc3/gadget.c | 4 +- drivers/usb/gadget/function/f_fs.c | 2 +- drivers/usb/gadget/function/f_uac2.c | 1 + drivers/usb/gadget/function/u_serial.c | 8 +- drivers/usb/serial/cp210x.c | 1 + drivers/usb/serial/option.c | 4 +- drivers/usb/storage/unusual_devs.h | 7 ++ fs/afs/afs.h | 2 +- fs/afs/afs_vl.h | 1 + fs/afs/vl_alias.c | 8 +- fs/afs/vlclient.c | 2 +- fs/ceph/mds_client.c | 9 +- fs/exfat/dir.c | 3 +- fs/exfat/fatent.c | 10 ++ fs/jbd2/commit.c | 4 +- fs/jbd2/revoke.c | 2 +- fs/ocfs2/quota_global.c | 2 +- fs/ocfs2/quota_local.c | 10 +- fs/smb/server/smb2pdu.c | 3 + fs/smb/server/vfs.c | 3 +- include/linux/bpf.h | 14 ++- include/linux/sched/task_stack.h | 2 + include/net/inet_connection_sock.h | 2 +- io_uring/io_uring.c | 13 +- kernel/bpf/helpers.c | 10 +- kernel/bpf/ringbuf.c | 2 +- kernel/bpf/syscall.c | 2 +- kernel/bpf/verifier.c | 76 ++++++----- kernel/trace/bpf_trace.c | 4 +- net/802/psnap.c | 4 +- net/bluetooth/hci_sync.c | 11 +- net/core/filter.c | 4 +- net/core/sock_map.c | 6 +- net/ipv4/tcp_ipv4.c | 2 +- net/netfilter/nf_conntrack_core.c | 5 +- net/netfilter/nf_tables_api.c | 15 ++- net/sched/cls_flow.c | 3 +- net/sched/sch_cake.c | 140 +++++++++++---------- net/sctp/sysctl.c | 14 ++- net/tls/tls_sw.c | 2 +- scripts/sorttable.h | 6 +- .../soc/mediatek/common/mtk-afe-platform-driver.c | 4 +- 87 files changed, 624 insertions(+), 306 deletions(-)
