This is the start of the stable review cycle for the 6.1.127 release. There are 64 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Thu, 23 Jan 2025 17:45:02 +0000. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v6.x/stable-review/patch-6.1.127-rc1.gz or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-6.1.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx> Linux 6.1.127-rc1 Wang Liang <wangliang74@xxxxxxxxxx> net: fix data-races around sk->sk_forward_alloc Juergen Gross <jgross@xxxxxxxx> x86/xen: fix SLS mitigation in xen_hypercall_iret() Youzhong Yang <youzhong@xxxxxxxxx> nfsd: add list_head nf_gc to struct nfsd_file Gao Xiang <xiang@xxxxxxxxxx> erofs: handle NONHEAD !delta[1] lclusters gracefully Gao Xiang <xiang@xxxxxxxxxx> erofs: tidy up EROFS on-disk naming Kang Yang <quic_kangyang@xxxxxxxxxxx> wifi: ath10k: avoid NULL pointer error during sdio remove Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx> Revert "regmap: detach regmap from dev on regmap_exit" Suraj Sonawane <surajsonawane0215@xxxxxxxxx> scsi: sg: Fix slab-use-after-free read in sg_release() Zhu Yanjun <yanjun.zhu@xxxxxxxxx> RDMA/rxe: Fix the qp flush warnings in req Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx> Revert "drm/amdgpu: rework resume handling for display (v2)" Yu Kuai <yukuai3@xxxxxxxxxx> block: fix uaf for flush rq while iterating tags Vitaly Prosyak <vitaly.prosyak@xxxxxxx> drm/amdgpu: fix usage slab after free Srinivasan Shanmugam <srinivasan.shanmugam@xxxxxxx> drm/amd/display: Fix out-of-bounds access in 'dcn21_link_encoder_create' Javier Carrasco <javier.carrasco.cruz@xxxxxxxxx> iio: adc: rockchip_saradc: fix information leak in triggered buffer Jean-Baptiste Maneyrol <jean-baptiste.maneyrol@xxxxxxx> iio: imu: inv_icm42600: fix timestamps after suspend if sensor is on Jean-Baptiste Maneyrol <jean-baptiste.maneyrol@xxxxxxx> iio: imu: inv_icm42600: fix spi burst write not supported Terry Tritton <terry.tritton@xxxxxxxxxx> Revert "PCI: Use preserve_config in place of pci_flags" Ville Syrjälä <ville.syrjala@xxxxxxxxxxxxxxx> drm/i915/fb: Relax clear color alignment to 64 bytes Koichiro Den <koichiro.den@xxxxxxxxxxxxx> hrtimers: Handle CPU state correctly on hotplug Tomas Krcka <krckatom@xxxxxxxxx> irqchip/gic-v3-its: Don't enable interrupts in its_irq_set_vcpu_affinity() Yogesh Lal <quic_ylal@xxxxxxxxxxx> irqchip/gic-v3: Handle CPU_PM_ENTER_FAILED correctly Joe Hattori <joe@xxxxxxxxxxxxxxxxxxxxx> irqchip: Plug a OF node reference leak in platform_irqchip_probe() Xiaolei Wang <xiaolei.wang@xxxxxxxxxxxxx> pmdomain: imx8mp-blk-ctrl: add missing loop break condition Zhongqiu Han <quic_zhonhan@xxxxxxxxxxx> gpiolib: cdev: Fix use after free in lineinfo_changed_notify Rik van Riel <riel@xxxxxxxxxxx> fs/proc: fix softlockup in __read_vmcore (part 2) Marco Nelissen <marco.nelissen@xxxxxxxxx> filemap: avoid truncating 64-bit offset to 32 bits Stefano Garzarella <sgarzare@xxxxxxxxxx> vsock: prevent null-ptr-deref in vsock_*[has_data|has_space] Stefano Garzarella <sgarzare@xxxxxxxxxx> vsock: reset socket state when de-assigning the transport Stefano Garzarella <sgarzare@xxxxxxxxxx> vsock/virtio: cancel close work in the destructor Stefano Garzarella <sgarzare@xxxxxxxxxx> vsock/virtio: discard packets if the transport changes Heiner Kallweit <hkallweit1@xxxxxxxxx> net: ethernet: xgbe: re-add aneg to supported features in PHY quirks Paolo Abeni <pabeni@xxxxxxxxxx> selftests: mptcp: avoid spurious errors on disconnect Paolo Abeni <pabeni@xxxxxxxxxx> mptcp: be sure to send ack when mptcp-level window re-opens Kairui Song <kasong@xxxxxxxxxxx> zram: fix potential UAF of zram table Stefan Binding <sbinding@xxxxxxxxxxxxxxxxxxxxx> ALSA: hda/realtek: Add support for Ayaneo System using CS35L41 HDA Juergen Gross <jgross@xxxxxxxx> x86/asm: Make serialize() always_inline Oleg Nesterov <oleg@xxxxxxxxxx> poll_wait: add mb() to fix theoretical race between waitqueue_active() and .poll() Marco Nelissen <marco.nelissen@xxxxxxxxx> iomap: avoid avoid truncating 64-bit offset to 32 bits Hans de Goede <hdegoede@xxxxxxxxxx> ACPI: resource: acpi_dev_irq_override(): Check DMI match last Jakub Kicinski <kuba@xxxxxxxxxx> selftests: tc-testing: reduce rshift value Manivannan Sadhasivam <mani@xxxxxxxxxx> scsi: ufs: core: Honor runtime/system PM levels if set by host controller drivers Max Kellermann <max.kellermann@xxxxxxxxx> cachefiles: Parse the "secctx" immediately David Howells <dhowells@xxxxxxxxxx> kheaders: Ignore silly-rename files Zhang Kunbo <zhangkunbo@xxxxxxxxxx> fs: fix missing declaration of init_files Leo Stone <leocstone@xxxxxxxxx> hfs: Sanity check the root record Lizhi Xu <lizhi.xu@xxxxxxxxxxxxx> mac802154: check local interfaces before deleting sdata list Luis Chamberlain <mcgrof@xxxxxxxxxx> nvmet: propagate npwg topology Wolfram Sang <wsa+renesas@xxxxxxxxxxxxxxxxxxxx> i2c: rcar: fix NACK handling when being a target Wolfram Sang <wsa+renesas@xxxxxxxxxxxxxxxxxxxx> i2c: mux: demux-pinctrl: check initial mux selection, too Pratyush Yadav <pratyush@xxxxxxxxxx> Revert "mtd: spi-nor: core: replace dummy buswidth from addr to data" David Lechner <dlechner@xxxxxxxxxxxx> hwmon: (tmp513) Fix division of negative numbers Maíra Canal <mcanal@xxxxxxxxxx> drm/v3d: Ensure job pointer is set to NULL after job completion Mark Zhang <markzhang@xxxxxxxxxx> net/mlx5: Clear port select structure when fail to create Patrisious Haddad <phaddad@xxxxxxxxxx> net/mlx5: Fix RDMA TX steering prio Sean Anderson <sean.anderson@xxxxxxxxx> net: xilinx: axienet: Fix IRQ coalescing packet count overflow Dan Carpenter <dan.carpenter@xxxxxxxxxx> nfp: bpf: prevent integer overflow in nfp_bpf_event_output() Kuniyuki Iwashima <kuniyu@xxxxxxxxxx> gtp: Destroy device along with udp socket's netns dismantle. Kuniyuki Iwashima <kuniyu@xxxxxxxxxx> gtp: Use for_each_netdev_rcu() in gtp_genl_dump_pdp(). Eric Dumazet <edumazet@xxxxxxxxxx> gtp: use exit_batch_rtnl() method Eric Dumazet <edumazet@xxxxxxxxxx> net: add exit_batch_rtnl() method Artem Chernyshev <artem.chernyshev@xxxxxxxxxxx> pktgen: Avoid out-of-bounds access in get_imix_entries Ilya Maximets <i.maximets@xxxxxxx> openvswitch: fix lockup on tx to unregistering netdev with carrier Michal Luczaj <mhal@xxxxxxx> bpf: Fix bpf_sk_select_reuseport() memory leak Sudheer Kumar Doredla <s-doredla@xxxxxx> net: ethernet: ti: cpsw_ale: Fix cpsw_ale_get_field() ------------- Diffstat: Makefile | 4 +- arch/x86/include/asm/special_insns.h | 2 +- arch/x86/xen/xen-asm.S | 2 +- block/blk-sysfs.c | 6 +- block/genhd.c | 9 +- drivers/acpi/resource.c | 6 +- drivers/base/regmap/regmap.c | 12 -- drivers/block/zram/zram_drv.c | 1 + drivers/gpio/gpiolib-cdev.c | 2 +- drivers/gpu/drm/amd/amdgpu/amdgpu_device.c | 47 +------ drivers/gpu/drm/amd/amdgpu/amdgpu_vce.c | 6 +- .../gpu/drm/amd/display/dc/dcn21/dcn21_resource.c | 2 +- drivers/gpu/drm/i915/display/intel_fb.c | 2 +- drivers/gpu/drm/v3d/v3d_irq.c | 4 + drivers/hwmon/tmp513.c | 7 +- drivers/i2c/busses/i2c-rcar.c | 20 ++- drivers/i2c/muxes/i2c-demux-pinctrl.c | 4 +- drivers/iio/adc/rockchip_saradc.c | 2 + drivers/iio/imu/inv_icm42600/inv_icm42600.h | 1 + drivers/iio/imu/inv_icm42600/inv_icm42600_core.c | 18 ++- drivers/iio/imu/inv_icm42600/inv_icm42600_spi.c | 3 +- drivers/infiniband/sw/rxe/rxe_req.c | 6 +- drivers/irqchip/irq-gic-v3-its.c | 2 +- drivers/irqchip/irq-gic-v3.c | 2 +- drivers/irqchip/irqchip.c | 4 +- drivers/mtd/spi-nor/core.c | 2 +- drivers/net/ethernet/amd/xgbe/xgbe-phy-v2.c | 19 +-- drivers/net/ethernet/mellanox/mlx5/core/fs_core.c | 1 + .../net/ethernet/mellanox/mlx5/core/lag/port_sel.c | 4 +- drivers/net/ethernet/netronome/nfp/bpf/offload.c | 3 +- drivers/net/ethernet/ti/cpsw_ale.c | 14 +- drivers/net/ethernet/xilinx/xilinx_axienet_main.c | 6 + drivers/net/gtp.c | 42 +++--- drivers/net/wireless/ath/ath10k/sdio.c | 4 +- drivers/nvme/target/io-cmd-bdev.c | 2 +- drivers/pci/controller/pci-host-common.c | 4 + drivers/pci/probe.c | 20 +-- drivers/scsi/sg.c | 2 +- drivers/soc/imx/imx8mp-blk-ctrl.c | 2 +- drivers/ufs/core/ufshcd.c | 9 +- fs/cachefiles/daemon.c | 14 +- fs/cachefiles/internal.h | 3 +- fs/cachefiles/security.c | 6 +- fs/erofs/erofs_fs.h | 143 +++++++++------------ fs/erofs/zmap.c | 133 ++++++++++--------- fs/file.c | 1 + fs/hfs/super.c | 4 +- fs/iomap/buffered-io.c | 2 +- fs/nfsd/filecache.c | 18 +-- fs/nfsd/filecache.h | 1 + fs/proc/vmcore.c | 2 + include/linux/hrtimer.h | 1 + include/linux/poll.h | 10 +- include/net/net_namespace.h | 3 + kernel/cpu.c | 2 +- kernel/gen_kheaders.sh | 1 + kernel/time/hrtimer.c | 11 +- mm/filemap.c | 2 +- net/core/filter.c | 30 +++-- net/core/net_namespace.c | 31 ++++- net/core/pktgen.c | 6 +- net/dccp/ipv6.c | 2 +- net/ipv6/tcp_ipv6.c | 4 +- net/mac802154/iface.c | 4 + net/mptcp/options.c | 6 +- net/openvswitch/actions.c | 4 +- net/vmw_vsock/af_vsock.c | 18 +++ net/vmw_vsock/virtio_transport_common.c | 38 ++++-- sound/pci/hda/patch_realtek.c | 1 + tools/testing/selftests/net/mptcp/mptcp_connect.c | 43 +++++-- .../tc-testing/tc-tests/filters/flow.json | 4 +- 71 files changed, 477 insertions(+), 379 deletions(-)
