UPDATE: 5.15.209

[fepitre-bot]

Update to 5.15.209

Details

Changes since previous version:
gregkh/linux@2f2b16022a2e net: skbuff: preserve shared-frag marker during coalescing
gregkh/linux@179f1852bded net: skbuff: propagate shared-frag marker through frag-transfer helpers
gregkh/linux@241d66fa280c Linux 5.15.208
gregkh/linux@ad03687c44c3 ALSA: asihpi: avoid write overflow check warning
gregkh/linux@690a2da340b3 can: mcp251x: add error handling for power enable in open and resume
gregkh/linux@520e8b4bcf87 btrfs: tracepoints: get correct superblock from dentry in event btrfs_sync_file()
gregkh/linux@ad50eaba88cc ALSA: hda/realtek: Add mute LED quirk for HP Pavilion 15-eg0xxx
gregkh/linux@c7babe2f28b5 netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry
gregkh/linux@a8a11a876f0a wifi: wl1251: validate packet IDs before indexing tx_frames
gregkh/linux@983c087dc444 ASoC: soc-core: call missing INIT_LIST_HEAD() for card_aux_list
gregkh/linux@6dd3599f335a ALSA: usb-audio: Fix quirk flags for NeuralDSP Quad Cortex
gregkh/linux@a2ba20c17de8 fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath
gregkh/linux@db1790f1e24d pinctrl: intel: Fix the revision for new features (1kOhm PD, HW debouncer)
gregkh/linux@f9ad98cff302 HID: quirks: add HID_QUIRK_ALWAYS_POLL for 8BitDo Pro 3
gregkh/linux@441689e31036 HID: roccat: fix use-after-free in roccat_report_event
gregkh/linux@4fc637dcad14 ata: ahci: force 32-bit DMA for JMicron JMB582/JMB585
gregkh/linux@2ae3ccb78c0a wifi: brcmfmac: validate bsscfg indices in IF events
gregkh/linux@1c21ebd85f28 ASoC: stm32_sai: fix incorrect BCLK polarity for DSP_A/B, LEFT_J
gregkh/linux@537e79b726a4 soc: aspeed: socinfo: Mask table entries for accurate SoC ID matching
gregkh/linux@c77f856ac817 arm64: dts: imx8mq: Set the correct gpu_ahb clock frequency
gregkh/linux@d5a7872c9b1e PCI: hv: Set default NUMA node to 0 for devices without affinity info
gregkh/linux@686bb2fce082 drm/vc4: Fix memory leak of BO array in hang state
gregkh/linux@9487daa18e62 drm/vc4: Fix a memory leak in hang state error path
gregkh/linux@46f7a5f914dd drm/vc4: Protect madv read in vc4_gem_object_mmap() with madv_lock
gregkh/linux@f2451def095c epoll: use refcount to reduce ep_mutex contention
gregkh/linux@902120be4f44 eventpoll: defer struct eventpoll free to RCU grace period
gregkh/linux@886469b64556 net: sched: act_csum: validate nested VLAN headers
gregkh/linux@ffc5ed59f6dc net: lapbether: handle NETDEV_PRE_TYPE_CHANGE
gregkh/linux@0f21bc261e60 ipv4: icmp: fix null-ptr-deref in icmp_build_probe()
gregkh/linux@20a57de2e79b nfc: s3fwrn5: allocate rx skb before consuming bytes
gregkh/linux@3fa363a40de8 tracing/probe: reject non-closed empty immediate strings
gregkh/linux@e0b6ef0fdbff e1000: check return value of e1000_read_eeprom
gregkh/linux@1a6051cd7e3e xsk: tighten UMEM headroom validation to account for tailroom and min frame
gregkh/linux@c2779ae9a3e5 xfrm_user: fix info leak in build_mapping()
gregkh/linux@9e2182865de7 netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator
gregkh/linux@c9749f6232c8 netfilter: xt_multiport: validate range encoding in checkentry
gregkh/linux@7d6a57411caf netfilter: ip6t_eui64: reject invalid MAC header for all packets
gregkh/linux@4f6a8f10182c af_unix: read UNIX_DIAG_VFS data under unix_state_lock
gregkh/linux@c2994fd24997 l2tp: Drop large packets with UDP encap
gregkh/linux@f4a477281b48 gpio: tegra: fix irq_release_resources calling enable instead of disable
gregkh/linux@d18da11a5e21 perf/x86/intel/uncore: Skip discovery table for offline dies
gregkh/linux@1e3ed666731a i3c: fix uninitialized variable use in i2c setup
gregkh/linux@78bba9f73942 netfilter: conntrack: add missing netlink policy validations
gregkh/linux@da0f6cd551dc MIPS: mm: kmalloc tlb_vpn array to avoid stack overflow
gregkh/linux@2eadfb3b649e mips: mm: Allocate tlb_vpn array atomically
gregkh/linux@0e39d8dd8762 MIPS: Always record SEGBITS in cpu_data.vmbits
gregkh/linux@88af0913282f MIPS: mm: Suppress TLB uniquification on EHINV hardware
gregkh/linux@79ad8f65712f MIPS: mm: Rewrite TLB uniquification for the hidden bit feature
gregkh/linux@d7f3d48e081a ALSA: usb-audio: Update for native DSD support quirks
gregkh/linux@69d1ce9c72ec batman-adv: hold claim backbone gateways by reference
gregkh/linux@665315df9c34 nfc: llcp: add missing return after LLCP_CLOSED checks
gregkh/linux@64c8553decf5 can: raw: fix ro->uniq use-after-free in raw_rcv()
gregkh/linux@8f756a596439 i2c: s3c24xx: check the size of the SMBUS message before using it
gregkh/linux@51532c7c1d35 staging: rtl8723bs: initialize le_tmp64 in rtw_BIP_verify()
gregkh/linux@72516a8d7fe2 HID: alps: fix NULL pointer dereference in alps_raw_event()
gregkh/linux@eb415ddaf25e HID: core: clamp report_size in s32ton() to avoid undefined shift
gregkh/linux@0c5c65a17db7 net: usb: cdc-phonet: fix skb frags[] overflow in rx_complete()
gregkh/linux@f83b399aa05a NFC: digital: Bounds check NFC-A cascade depth in SDD response handler
gregkh/linux@62fcb273fbee ALSA: fireworks: bound device-supplied status before string array lookup
gregkh/linux@6c05191598ec fbdev: tdfxfb: avoid divide-by-zero on FBIOPUT_VSCREENINFO
gregkh/linux@1425655c2870 usb: gadget: f_ncm: validate minimum block_len in ncm_unwrap_ntb()
gregkh/linux@b5ec49fa198b usb: gadget: f_phonet: fix skb frags[] overflow in pn_rx_complete()
gregkh/linux@c4e5ae6db232 usb: gadget: renesas_usb3: validate endpoint index in standard request handlers
gregkh/linux@973f2c250289 usbip: validate number_of_packets in usbip_pack_ret_submit()
gregkh/linux@3d1ad6d85332 usb: storage: Expand range of matched versions for VL817 quirks entry
gregkh/linux@fd50ab7dd4ee fbdev: udlfb: avoid divide-by-zero on FBIOPUT_VSCREENINFO
gregkh/linux@b285a8f3bbb8 staging: sm750fb: fix division by zero in ps_to_hz()
gregkh/linux@e387f2d46e69 USB: serial: option: add Telit Cinterion FN990A MBIM composition
gregkh/linux@de8016fb0904 ALSA: ctxfi: Limit PTP to a single page
gregkh/linux@5c986b77200b media: vidtv: fix NULL pointer dereference in vidtv_channel_pmt_match_sections
gregkh/linux@35c2c05261d6 ocfs2: fix use-after-free in ocfs2_fault() when VM_FAULT_RETRY
gregkh/linux@fabfa6b81bd3 ocfs2: handle invalid dinode in ocfs2_group_extend
gregkh/linux@a703933bcfa5 KVM: SEV: Drop WARN on large size for KVM_MEMORY_ENCRYPT_REG_REGION
gregkh/linux@533396c76615 fsl-mc: Use driver_set_override() instead of open-coding
gregkh/linux@a710ef9e974f smb: client: fix potential UAF in smb2_is_valid_oplock_break()
gregkh/linux@eb7bf413e599 nf_tables: nft_dynset: fix possible stateful expression memleak in error path
gregkh/linux@235b2115de89 rxrpc: proc: size address buffers for %pISpc output
gregkh/linux@15fd3a2d31bf checkpatch: add support for Assisted-by tag
gregkh/linux@4569c66dd9e9 KVM: x86: Use scratch field in MMIO fragment to hold small write values
gregkh/linux@3298bdf5a878 mm/kasan: fix double free for kasan pXds
gregkh/linux@60f768d46df5 media: vidtv: fix nfeeds state corruption on start_streaming failure
gregkh/linux@2cbf81f76842 media: em28xx: fix use-after-free in em28xx_v4l2_open()
gregkh/linux@e247a0e01d15 ALSA: 6fire: fix use-after-free on disconnect
gregkh/linux@f50e7c325ab1 bcache: fix cached_dev.sb_bio use-after-free and crash
gregkh/linux@25d500cf391e media: as102: fix to not free memory after the device is registered in as102_usb_probe()
gregkh/linux@837c7a59fb58 nilfs2: fix NULL i_assoc_inode dereference in nilfs_mdt_save_to_shadow_map
gregkh/linux@a73f84a30975 media: vidtv: fix pass-by-value structs causing MSAN warnings
gregkh/linux@131ec9046e1c media: hackrf: fix to not free memory after the device is registered in hackrf_probe()
gregkh/linux@447ba770cfe7 net: tap: NULL pointer derefence in dev_parse_header_protocol when skb->dev is null
gregkh/linux@305a0674bc55 PCI: endpoint: pci-epf-vntb: Remove duplicate resource teardown
gregkh/linux@6dec6f8b39f5 Revert "net: ethernet: xscale: Check for PTP support properly"
gregkh/linux@031207f89c6a Revert "net: ixp4xx_eth: convert to ndo_hwtstamp_get() and ndo_hwtstamp_set()"
gregkh/linux@83d705d35e58 ipv6: add NULL checks for idev in SRv6 paths
gregkh/linux@5def0ae10aee gfs2: Improve gfs2_consist_inode() usage
gregkh/linux@366183911b15 gfs2: Validate i_depth for exhash directories
gregkh/linux@5ef8ca1c1647 wifi: mac80211: always free skb on ieee80211_tx_prepare_skb() failure
gregkh/linux@c8c40319d385 PCI/ACPI: Restrict program_hpx_type2() to AER bits
gregkh/linux@1110d3c22534 netfilter: nft_set_pipapo: do not rely on ZERO_SIZE_PTR
gregkh/linux@47e207b6b7ac powerpc64/bpf: do not increment tailcall count when prog is NULL
gregkh/linux@20565b841397 arm64: dts: imx8mq-librem5: Set the DVS voltages lower
gregkh/linux@578bdbf9689d arm64: dts: imx8mq-librem5: Bump BUCK1 suspend voltage to 0.81V
gregkh/linux@c80fbfe43172 Revert "arm64: dts: imx8mq-librem5: Set the DVS voltages lower"
gregkh/linux@53cef81034a4 arm64: dts: imx8mq-librem5: Bump BUCK1 suspend voltage up to 0.85V
gregkh/linux@92242c7bef6c ocfs2: add inline inode consistency check to ocfs2_validate_inode_block()
gregkh/linux@bcd46bc261b2 ocfs2: validate inline data i_size during inode read
gregkh/linux@2e6a254f9ced ocfs2: fix out-of-bounds write in ocfs2_write_end_inline
gregkh/linux@e6f4ffe85969 xfrm: clear trailing padding in build_polexpire()
gregkh/linux@944a2fe824b1 rxrpc: Fix key quota calculation for multitoken keys
gregkh/linux@b15b1ce96777 rxrpc: Fix call removal to use RCU safe deletion
gregkh/linux@a75b3b361dd4 rxrpc: reject undecryptable rxkad response tickets
gregkh/linux@669abfc01716 fs/ocfs2: fix comments mentioning i_mutex
gregkh/linux@32630dee18c6 ocfs2: fix possible deadlock between unlink and dio_end_io_write
gregkh/linux@1bd36e93b542 mm: blk-cgroup: fix use-after-free in cgwb_release_workfn()
gregkh/linux@71158bf61945 MPTCP: fix lock class name family in pm_nl_create_listen_socket
gregkh/linux@5020173e7e77 tty: n_gsm: fix deadlock and link starvation in outgoing data path
gregkh/linux@6d463ddd0107 netdevsim: Fix memory leak of nsim_dev->fa_cookie
gregkh/linux@6e27992a75c0 Revert "nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl()"
gregkh/linux@a9b1315ed428 nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl()
gregkh/linux@4e5a92a7223c ALSA: control: Avoid WARN() for symlink errors
gregkh/linux@64ee49df839f s390/xor: Fix xor_xc_2() inline assembly constraints
gregkh/linux@4289be846592 f2fs: fix null-ptr-deref in f2fs_submit_page_bio()
gregkh/linux@f30e8af10981 wifi: iwlwifi: read txq->read_ptr under lock
gregkh/linux@9646443f28f3 blk-mq: use quiesced elevator switch when reinitializing queues
gregkh/linux@8b821ca892cf dm-verity: disable recursive forward error correction
gregkh/linux@3905d3140cef net: add skb_header_pointer_careful() helper
gregkh/linux@29681ed51e73 net/sched: cls_u32: use skb_header_pointer_careful()
gregkh/linux@3f0e0e2d9e75 dmaengine: mmp_pdma: Fix race condition in mmp_pdma_residue()
gregkh/linux@84d6ce2aef1d fs: dlm: fix use after free in midcomms commit
gregkh/linux@8ce3ebbe5c71 spi: cadence-quadspi: Implement refcount to handle unbind during busy
gregkh/linux@d9a60636feb1 x86/uprobes: Fix XOL allocation failure for 32-bit tasks
gregkh/linux@901e581bfc44 btrfs: send: check for inline extents in range_is_hole_in_parent()
gregkh/linux@6a8b6242eaa1 btrfs: do not strictly require dirty metadata threshold for metadata writepages
gregkh/linux@ec0874447895 mailbox: Prevent out-of-bounds access in of_mbox_index_xlate()
gregkh/linux@90dee0a0ff84 Bluetooth: hci_core: Fix use-after-free in vhci_flush()
gregkh/linux@e1ffea6bec96 dlm: fix possible lkb_resource null dereference
gregkh/linux@987b4c465ba2 bpf: Do mark_chain_precision for ARG_CONST_ALLOC_SIZE_OR_ZERO
gregkh/linux@69cf5699a402 gfs2: No more self recovery
gregkh/linux@54274ff90488 binfmt_misc: restore write access before closing files opened by open_exec()
gregkh/linux@1bc35e637a81 drm/amdgpu: unmap and remove csa_va properly
gregkh/linux@c6a2cf8b0764 nvmet: always initialize cqe.result
gregkh/linux@05968b6dd0ff net: stmmac: fix TSO DMA API usage causing oops
gregkh/linux@2bfe8fdb674f f2fs: fix to wait on block writeback for post_read case
gregkh/linux@d0ee2a8adb66 pstore: inode: Only d_invalidate() is needed
gregkh/linux@06513dd6d32c ALSA: usb-audio: Kill timer properly at removal
gregkh/linux@721f27f489a4 ice: Add netif_device_attach/detach into PF reset flow
gregkh/linux@b9be86ef1c92 iio: imu: inv_icm42600: fix odr switch when turning buffer off
gregkh/linux@60673f442984 Bluetooth: af_bluetooth: Fix deadlock
gregkh/linux@87974ebd6552 can: gs_usb: gs_usb_xmit_callback(): fix handling of failed transmitted URBs
gregkh/linux@baed19c108ac vdpa: Add max vqp attr to vdpa_nl_policy for nlattr length check
gregkh/linux@c737047f4665 f2fs: fix to trigger foreground gc during f2fs_map_blocks() in lfs mode
gregkh/linux@fdc42287ae3f SUNRPC: lock against ->sock changing during sysfs read
gregkh/linux@2970ef2fce90 net: usb: lan78xx: Fix double free issue with interrupt buffer allocation
gregkh/linux@e425191073a8 btrfs: lock the inode in shared mode before starting fiemap
gregkh/linux@a7accf181a47 fs/ntfs3: Add more attributes checks in mi_enum_attr()
gregkh/linux@c198628f3fca rxrpc: Fix recvmsg() unconditional requeue
gregkh/linux@5bf456086d74 cpufreq: governor: Free dbs_data directly when gov->init() fails
gregkh/linux@4b9118e93d24 cpufreq: governor: fix double free in cpufreq_dbs_governor_init() error path
gregkh/linux@eb2f9d98cd3e md/md-bitmap: Synchronize bitmap_get_stats() with bitmap lifetime
gregkh/linux@2d97b85eb5a8 fbdev: efifb: Register sysfs groups through driver core
gregkh/linux@a046f183d21a net: clear the dst when changing skb protocol
gregkh/linux@2b846344b15f cpufreq: Avoid a bad reference count on CPU node
gregkh/linux@b9ef4b0aa91d drivers: base: Free devm resources when unregistering a device
gregkh/linux@be0bbb201fc0 Revert "wifi: cfg80211: stop NAN and P2P in cfg80211_leave"
gregkh/linux@0efd1fe5106b scripts/dtc: Remove unused dts_version in dtc-lexer.l
gregkh/linux@7e8b27081307 ksmbd: unset conn->binding on failed binding request
gregkh/linux@6c3a0fbdafef rxrpc: only handle RESPONSE during service challenge
gregkh/linux@e8a177ed9dd3 rxrpc: Fix anonymous key handling
gregkh/linux@e5478cc86463 iommu: fix a reference count leak in iommu_sva_bind_device()
gregkh/linux@8e64d33198b5 fs/ntfs3: validate rec->used in journal-replay file record check
gregkh/linux@1d4a517fa904 fuse: reject oversized dirents in page cache
gregkh/linux@4c9c479cece5 fuse: quiet down complaints in fuse_conn_limit_write
gregkh/linux@84fc8a0472bc ALSA: usb-audio: apply quirk for MOONDROP JU Jiu
gregkh/linux@dbcf7588e8de ALSA: caiaq: take a reference on the USB device in create_card()
gregkh/linux@0fb87e44b813 crypto: ccp: Don't attempt to copy CSR to userspace if PSP command failed
gregkh/linux@854d7846e1d2 crypto: ccp: Don't attempt to copy PDH cert to userspace if PSP command failed
gregkh/linux@a21ae9f8769e crypto: ccp: Don't attempt to copy ID to userspace if PSP command failed
gregkh/linux@41a117dd8037 rxrpc: Fix missing validation of ticket length in non-XDR key preparsing
gregkh/linux@60458ecb0779 tty: n_gsm: fix flow control handling in tx path
gregkh/linux@e63f049c7764 ALSA: usb-audio: fix race condition to UAF in snd_usbmidi_free
gregkh/linux@0da05fedf5e1 ALSA: usb-audio: stop parsing UAC2 rates at MAX_NR_RATES
gregkh/linux@0c2d550ec8d6 ALSA: usb-audio: Avoid false E-MU sample-rate notifications
gregkh/linux@899e99f052f1 ALSA: usb-audio: Fix Audio Advantage Micro II SPDIF switch
gregkh/linux@1d93dae6cfde usb: xhci: Make usb_host_endpoint.hcpriv survive endpoint_disable()
gregkh/linux@8001e0760fd0 ALSA: usb-audio: Evaluate packsize caps at the right place
gregkh/linux@573a1104bd36 drm/nouveau: fix u32 overflow in pushbuf reloc bounds check
gregkh/linux@bac8643486f8 misc: ibmasm: fix OOB MMIO read in ibmasm_handle_mouse_interrupt()
gregkh/linux@7b8a574da5d7 ibmasm: fix OOB reads in command_file_write due to missing size checks
gregkh/linux@b870f652877b ibmasm: fix heap over-read in ibmasm_send_i2o_message()
gregkh/linux@bb610b6fc1c4 firmware: google: framebuffer: Do not mark framebuffer as busy
gregkh/linux@0a6895c03b1f scsi: ufs: core: Fix use-after free in init error and remove paths
gregkh/linux@17f1675a47a0 device property: Make modifications of fwnode "flags" thread safe
gregkh/linux@1e99bb199942 ocfs2: split transactions in dio completion to avoid credit exhaustion
gregkh/linux@73f132e60857 padata: Fix pd UAF once and for all
gregkh/linux@be66b85d181f padata: Remove comment for reorder_work
gregkh/linux@34fdc6c62123 driver core: Don't let a device probe until it's ready
gregkh/linux@6ba7a4c3ca21 um: drivers: call kernel_strrchr() explicitly in cow_user.c
gregkh/linux@1d7f07df450b crypto: pcrypt - Fix handling of MAY_BACKLOG requests
gregkh/linux@bfcbb4994da9 ALSA: control: Validate buf_len before strnlen() in snd_ctl_elem_init_enum_names()
gregkh/linux@7ef97d4675b0 net: caif: clear client service pointer on teardown
gregkh/linux@a470ed71c906 net: strparser: fix skb_head leak in strp_abort_strp()
gregkh/linux@c3029721b84f PCI: endpoint: pci-epf-ntb: Remove duplicate resource teardown
gregkh/linux@ec45f9f6e739 Revert "ALSA: usb: Increase volume range that triggers a warning"
gregkh/linux@93f5671a8177 lib/ts_kmp: fix integer overflow in pattern length calculation
gregkh/linux@9e996f76b133 media: i2c: imx219: Check return value of devm_gpiod_get_optional() in imx219_probe()
gregkh/linux@dff081c3602f net: qrtr: ns: Fix use-after-free in driver remove()
gregkh/linux@9e2d67fb2b73 ext2: reject inodes with zero i_nlink and valid mode in ext2_iget()
gregkh/linux@4c7f8c2e2ffe ALSA: aoa: i2sbus: fix OF node lifetime handling
gregkh/linux@615b7a5e5d8b ALSA: ctxfi: Add fallback to default RSR for S/PDIF
gregkh/linux@5dafcf58b518 ALSA: seq_oss: return full count for successful SEQ_FULLSIZE writes
gregkh/linux@2249983d971e md/raid10: fix deadlock with check operation and nowait requests
gregkh/linux@0dc67e957fce nvme-pci: add NVME_QUIRK_DISABLE_WRITE_ZEROES for Kingston OM3SGP4
gregkh/linux@76b3dea30c27 parisc: _llseek syscall is only available for 32-bit userspace
gregkh/linux@6d1e65d31e8c selftests/mqueue: Fix incorrectly named file
gregkh/linux@f03854e04e9d ALSA: caiaq: Fix control_put() result and cache rollback
gregkh/linux@09616e25f502 ALSA: caiaq: Handle probe errors properly
gregkh/linux@ef5a8ab3bfae ALSA: 6fire: Fix input volume change detection
gregkh/linux@5fe56fcb7486 iio: adc: ad7768-1: fix one-shot mode data acquisition
gregkh/linux@106dc6892066 net: rds: fix MR cleanup on copy error
gregkh/linux@22546729b96f net/smc: avoid early lgr access in smc_clc_wait_msg
gregkh/linux@c6ae0d9926f6 drm/arcpgu: fix device node leak
gregkh/linux@5fedefec7571 RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv
gregkh/linux@b3a88fc5ae02 ipv4: icmp: validate reply type before using icmp_pointers
gregkh/linux@9ded62c302c0 libceph: Prevent potential null-ptr-deref in ceph_handle_auth_reply()
gregkh/linux@5db32746ffe6 tpm: avoid -Wunused-but-set-variable
gregkh/linux@fdbb70a024ab power: supply: axp288_charger: Do not cancel work before initializing it
gregkh/linux@bb6978b426d0 mmc: block: use single block write in retry
gregkh/linux@31e5e500eba3 tpm: tpm_tis: add error logging for data transfer
gregkh/linux@19a7ef19eca4 rtc: ntxec: fix OF node reference imbalance
gregkh/linux@d8b84e0bc9cf userfaultfd: allow registration of ranges below mmap_min_addr
gregkh/linux@a8b637dc69bc KVM: nSVM: Mark all of vmcb02 dirty when restoring nested state
gregkh/linux@4b44aa1a134e KVM: nSVM: Sync interrupt shadow to cached vmcb12 after VMRUN of L2
gregkh/linux@ebb63390142c KVM: SVM: Inject #UD for INVLPGA if EFER.SVME=0
gregkh/linux@e4cb0dea5317 KVM: SVM: Explicitly mark vmcb01 dirty after modifying VMCB intercepts
gregkh/linux@04a930642014 KVM: nSVM: Ensure AVIC is inhibited when restoring a vCPU to guest mode
gregkh/linux@7767d0e0dca8 KVM: nSVM: Always inject a #GP if mapping VMCB12 fails on nested VMRUN
gregkh/linux@3d8da1ccda37 KVM: nSVM: Clear GIF on nested #VMEXIT(INVALID)
gregkh/linux@5acde350889b KVM: nSVM: Add missing consistency check for nCR3 validity
gregkh/linux@f3aa7c1f07d7 io_uring/poll: fix EPOLL_URING_WAKE sometimes not being honored
gregkh/linux@2188cb94a9a2 io_uring/poll: fix backport of io_poll_add() changes
gregkh/linux@6ea3a191b7dd mtd: docg3: Convert to platform remove callback returning void
gregkh/linux@f5d2ed4ed47d mtd: docg3: fix use-after-free in docg3_release()
gregkh/linux@153ab2c52355 ext4: fix missing brelse() in ext4_xattr_inode_dec_ref_all()
gregkh/linux@4166d5234fe8 md/raid5: fix soft lockup in retry_aligned_read()
gregkh/linux@ef4851d8324f md/raid5: validate payload size before accessing journal metadata
gregkh/linux@10edf7e0ffdc inotify: fix watch count leak when fsnotify_add_inode_mark_locked() fails
gregkh/linux@7aa7933a5607 tcp: call sk_data_ready() after listener migration
gregkh/linux@8da6b5437883 taskstats: set version in TGID exit notifications
gregkh/linux@9dc1b1ef4510 crypto: arm64/aes - Fix 32-bit aes_mac_update() arg treated as 64-bit
gregkh/linux@5ad40cde96d6 crypto: atmel-aes - Fix 3-page memory leak in atmel_aes_buff_cleanup
gregkh/linux@4acf55acbc1d crypto: atmel-ecc - Release client on allocation failure
gregkh/linux@edff42301dde crypto: hisilicon - Fix dma_unmap_single() direction
gregkh/linux@f53458c7c756 crypto: ccree - fix a memory leak in cc_mac_digest()
gregkh/linux@b9b28f3881dd crypto: atmel-tdes - fix DMA sync direction
gregkh/linux@249c831183fb dm mirror: fix integer overflow in create_dirty_log()
gregkh/linux@b0ca984b904b IB/core: Fix zero dmac race in neighbor resolution
gregkh/linux@598dd00eb4ec ktest: Fix the month in the name of the failure directory
gregkh/linux@bbad75336870 ntfs3: add buffer boundary checks to run_unpack()
gregkh/linux@424858f9a048 ntfs3: fix integer overflow in run_unpack() volume boundary check
gregkh/linux@2089218ed54f seg6: fix seg6 lwtunnel output redirect for L2 reduced encap mode
gregkh/linux@2f31cd1e64a0 crypto: authencesn - reject short ahash digests during instance creation
gregkh/linux@e1f4825d2fb5 driver core: Add kernel-doc for DEV_FLAG_COUNT enum value
gregkh/linux@d50223ae9814 ALSA: caiaq: Fix potentially leftover ep1_in_urb at error path
gregkh/linux@a0551215c4e3 ALSA: caiaq: Don't abort when no input device is available
gregkh/linux@be1fa0aa9b4f ipv6: rpl: reserve mac_len headroom when recompressed SRH grows
gregkh/linux@9bc925759c05 drm/amdgpu: fix zero-size GDS range init on RDNA4
gregkh/linux@6fa8dff64fb6 ALSA: caiaq: fix usb_dev refcount leak on probe failure
gregkh/linux@51fef5a7c4d1 net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels
gregkh/linux@4fccea585631 netfilter: reject zero shift in nft_bitwise
gregkh/linux@db0a4759d62c scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show()
gregkh/linux@304b56883b7e ipmi: Add limits to event and receive message requests
gregkh/linux@474e53d43970 ipmi: Check event message buffer response for bad data
gregkh/linux@ab48817aebe4 ipmi:si: Return state to normal if message allocation fails
gregkh/linux@5931f5651ee3 fbdev: udlfb: add vm_ops to dlfb_ops_mmap to prevent use-after-free
gregkh/linux@432c15f39172 ACPI: scan: Use acpi_dev_put() in object add error paths
gregkh/linux@14e43d924101 ACPI: CPPC: Fix related_cpus inconsistency during CPU hotplug
gregkh/linux@8d79505d1b14 ACPI: video: force native backlight on HP OMEN 16 (8A44)
gregkh/linux@762fc11ff007 spi: rockchip: fix controller deregistration
gregkh/linux@4642ea35c03c ksmbd: do not expire session on binding failure
gregkh/linux@d61bcec3aec6 spi: meson-spicc: Fix double-put in remove path
gregkh/linux@d9286202d9a7 um: virt-pci: Fix build failure
gregkh/linux@e3c4e78d636e octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_flows.c
gregkh/linux@c7335f4dc0fa net/sched: sch_red: Replace direct dequeue call with peek and qdisc_dequeue_peeked
gregkh/linux@a2f4d5f599f4 ipmi:ssif: Fix a shutdown race
gregkh/linux@f2d0a3ede5eb ipmi:ssif: Clean up kthread on errors
gregkh/linux@49a136ab05b3 ipmi:ssif: Remove unnecessary indention
gregkh/linux@95ef8de1bd72 ipmi:ssif: NULL thread on error
gregkh/linux@df805c1d085b wifi: b43legacy: enforce bounds check on firmware key index in RX path
gregkh/linux@9dfe8a4458a0 wifi: rsi: fix kthread lifetime race between self-exit and external-stop
gregkh/linux@9dd6aae4bc7b wifi: ath5k: do not access array OOB
gregkh/linux@3157ad40b084 wifi: b43: enforce bounds check on firmware key index in b43_rx()
gregkh/linux@612640abbd9e usb: usblp: fix heap leak in IEEE 1284 device ID via short response
gregkh/linux@cf24991619be usb: usblp: fix uninitialized heap leak via LPGETSTATUS ioctl
gregkh/linux@316aa0b1e3c5 ALSA: usb-audio: Avoid potential endless loop in convert_chmap_v3()
gregkh/linux@b922167aa798 ALSA: usb-audio: Fix UAC3 cluster descriptor size check
gregkh/linux@15c86d0360c2 USB: omap_udc: DMA: Don't enable burst 4 mode
gregkh/linux@2f966ae32f8c USB: serial: option: add Telit Cinterion LE910Cx compositions
gregkh/linux@f1b855c00988 usb: ulpi: fix memory leak on ulpi_register() error paths
gregkh/linux@dbf079a6ce85 ALSA: firewire-tascam: Do not drop unread control events
gregkh/linux@df6f26f33c62 xfrm: provide message size for XFRM_MSG_MAPPING
gregkh/linux@a20b34f6e854 ipv6: xfrm6: release dst on error in xfrm6_rcv_encap()
gregkh/linux@4236e55b2d9d Bluetooth: virtio_bt: clamp rx length before skb_put
gregkh/linux@149cfb42ad69 Bluetooth: virtio_bt: validate rx pkt_type header length
gregkh/linux@2422eaed0925 Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_new_connection_cb()
gregkh/linux@85426e97dc72 Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_state_change_cb()
gregkh/linux@dfb7d4843d4e spi: zynqmp-gqspi: fix controller deregistration
gregkh/linux@4a7611ad6537 fanotify: fix false positive on permission events
gregkh/linux@cccce3190ba4 net: rtnetlink: zero ifla_vf_broadcast to avoid stack infoleak in rtnl_fill_vfinfo
gregkh/linux@aae1498c59f4 sound: ua101: fix division by zero at probe
gregkh/linux@01b71ff2857d ip6_gre: Use cached t->net in ip6erspan_changelink().
gregkh/linux@46662f7dc594 net/rds: handle zerocopy send cleanup before the message is queued
gregkh/linux@4b8d4bab6df9 parisc: Fix IRQ leak in LASI driver
gregkh/linux@bc94c43d69a3 hwmon: (ltc2992) Clamp threshold writes to hardware range
gregkh/linux@e53cfe86a2d0 hwmon: (ltc2992) Fix u32 overflow in power read path
gregkh/linux@b577b7a02113 hwmon: (corsair-psu) Close HID device on probe errors
gregkh/linux@b8c1c11b4249 extcon: ptn5150: handle pending IRQ events during system resume
gregkh/linux@3943a0e523be hv_sock: fix ARM64 support
gregkh/linux@9a5e984d7af9 ibmveth: Disable GSO for packets with small MSS
gregkh/linux@7d1b6adbf90d udf: reject descriptors with oversized CRC length
gregkh/linux@a4bd02c6b769 thermal/drivers/sprd: Fix temperature clamping in sprd_thm_temp_to_rawdata
gregkh/linux@fa5ded4233d3 thermal/drivers/sprd: Fix raw temperature clamping in sprd_thm_rawdata_to_temp
gregkh/linux@36e58c436d2c spi: topcliff-pch: fix use-after-free on unbind
gregkh/linux@6edd5cfb3627 cpuidle: powerpc: avoid double clear when breaking snooze
gregkh/linux@7e4ee1ef0781 ASoC: fsl_easrc: fix comment typo
gregkh/linux@9ea23d22e121 ASoC: Intel: bytcr_wm5102: Fix MCLK leak on platform_clock_control error
gregkh/linux@f49b41c9eb7c dm-thin: fix metadata refcount underflow
gregkh/linux@d80093ef9af5 dm: don't report warning when doing deferred remove
gregkh/linux@448ee8fb79c2 dm: fix a buffer overflow in ioctl processing
gregkh/linux@d5701717d708 dm-verity-fec: correctly reject too-small FEC devices
gregkh/linux@b2e681ef7fcc dm-verity-fec: correctly reject too-small hash devices
gregkh/linux@d582e12378bc isofs: validate Rock Ridge CE continuation extent against volume size
gregkh/linux@31dbb4ba0f71 isofs: validate block number from NFS file handle in isofs_export_iget
gregkh/linux@c2374b92c729 libceph: Fix slab-out-of-bounds access in auth message processing
gregkh/linux@c716ab3034f8 md/raid10: fix divide-by-zero in setup_geo() with zero far_copies
gregkh/linux@8d66ba89480f nvmet: avoid recursive nvmet-wq flush in nvmet_ctrl_free
gregkh/linux@1f0a3aa8b569 RDMA/hns: Fix unlocked call to hns_roce_qp_remove()
gregkh/linux@35cd2ea36335 s390/debug: Reject zero-length input in debug_input_flush_fn()
gregkh/linux@1d595fbea14e PCI/AER: Clear only error bits in PCIe Device Status
gregkh/linux@e5b98f45d9a6 PCI/AER: Stop ruling out unbound devices as error source
gregkh/linux@1b9458156d12 power: supply: max17042: avoid overflow when determining health
gregkh/linux@0be6ae614ca7 RDMA/mlx4: Fix resource leak on error in mlx4_ib_create_srq()
gregkh/linux@443c991fbc95 RDMA/ocrdma: Don't NULL deref uctx on errors in ocrdma_copy_pd_uresp()
gregkh/linux@6a79b1ea0fcb RDMA/rxe: Reject unknown opcodes before ICRC processing
gregkh/linux@1df5711121cd RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path
gregkh/linux@c0ffc38d6cb4 mptcp: use MPJoinSynAckHMacFailure for SynAck HMAC failure
gregkh/linux@859d982ac4b0 mptcp: use MPTCP_RST_EMPTCP for ACK HMAC validation failure
gregkh/linux@4ec5d1ca799f mptcp: sockopt: set timestamp flags on subflow socket, not msk
gregkh/linux@0949d8bbbedb mptcp: fix scheduling with atomic in timestamp sockopt
gregkh/linux@da47347a1223 platform/x86: hp-wmi: Ignore backlight and FnLock events
gregkh/linux@674c3bf26158 media: uvcvideo: Enable VB2_DMABUF for metadata stream
gregkh/linux@c13721040a56 media: i2c: ov8856: free control handler on error in ov8856_init_controls()
gregkh/linux@8774f8cb661f staging: media: atomisp: Disallow all private IOCTLs
gregkh/linux@39f22d047081 regulator: max77650: fix OF node reference imbalance
gregkh/linux@e0301883ec77 media: rc: xbox_remote: heed DMA restrictions
gregkh/linux@3def7870039d media: rc: streamzap: Error handling in probe
gregkh/linux@846aa5e1682b regulator: act8945a: fix OF node reference imbalance
gregkh/linux@16271b4b305f regulator: bd9571mwv: fix OF node reference imbalance
gregkh/linux@fa96890cbcf5 media: dib8000: avoid division by 0 in dib8000_set_dds()
gregkh/linux@23c295f7329b media: i2c: imx412: Assert reset GPIO during probe
gregkh/linux@16f149bca2e5 spi: mtk-nor: fix controller deregistration
gregkh/linux@0b595f843bdd spi: imx: fix runtime pm leak on probe deferral
gregkh/linux@a4dd990f02e0 spi: orion: fix clock imbalance on registration failure
gregkh/linux@ed929d409630 spi: mpc52xx: fix use-after-free on unbind
gregkh/linux@f55552adb100 drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg
gregkh/linux@adfc5ba4ef4d drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs()
gregkh/linux@daa8bc5f8381 drm/amdkfd: validate SVM ioctl nattr against buffer size
gregkh/linux@4d9888a6c1bd drm/radeon: add missing revision check for CI
gregkh/linux@950374fad185 drm/amdgpu/gfx9: drop unnecessary 64-bit fence flag check in KIQ
gregkh/linux@25e7d56a3965 drm/amdgpu/sdma4: replace BUG_ON with WARN_ON in fence emission
gregkh/linux@dddb45ac542b drm/amdgpu/pm: add missing revision check for CI
gregkh/linux@6e0c5f780f7c drm/amdgpu/pm: align Hawaii mclk workaround with radeon
gregkh/linux@0dbc8cde6428 sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL
gregkh/linux@10bb1f366d88 batman-adv: fix integer overflow on buff_pos
gregkh/linux@dcff44644bb5 batman-adv: reject new tp_meter sessions during teardown
gregkh/linux@384e3050a42b batman-adv: stop caching unowned originator pointers in BAT IV
gregkh/linux@a1a99837bb61 batman-adv: bla: prevent use-after-free when deleting claims
gregkh/linux@6725c523a35e batman-adv: bla: only purge non-released claims
gregkh/linux@769f413d374f batman-adv: bla: put backbone reference on failed claim hash insert
gregkh/linux@6e8d1a2a677a Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_get_sndtimeo_cb()
gregkh/linux@caf11dfea523 vsock: fix buffer size clamping order
gregkh/linux@fd51e810affa vsock/virtio: fix accept queue count leak on transport mismatch
gregkh/linux@94a2b3739980 drm/amdgpu/vcn3: Avoid overflow on msg bound check
gregkh/linux@e9941e7963b9 bcache: fix uninitialized closure object
gregkh/linux@5822a05a841a fs/omfs: reject s_sys_blocksize smaller than OMFS_DIR_START
gregkh/linux@68ebb9183ac3 drbd: Balance RCU calls in drbd_adm_dump_devices()
gregkh/linux@9472d37799a0 nilfs2: reject zero bd_oblocknr in nilfs_ioctl_mark_blocks_dirty()
gregkh/linux@641551ec2655 pstore/ram: fix resource leak when ioremap() fails
gregkh/linux@4ee57a2ae488 devres: fix missing node debug info in devm_krealloc()
gregkh/linux@19ec1f2aa118 thermal/drivers/spear: Fix error condition for reading st,thermal-flags
gregkh/linux@294690ffc167 debugfs: check for NULL pointer in debugfs_create_str()
gregkh/linux@a63e95675fea irqchip/irq-pic32-evic: Address warning related to wrong printf() formatter
gregkh/linux@8d146ecf5c3d locking: Fix rwlock support in <linux/spinlock_up.h>
gregkh/linux@cd06f2ea352b firmware: dmi: Correct an indexing error in dmi.h
gregkh/linux@7214b5a04760 wifi: mwifiex: Fix memory leak in mwifiex_11n_aggregate_pkt()
gregkh/linux@fac1079e0fde wifi: rtlwifi: pci: fix possible use-after-free caused by unfinished irq_prepare_bcn_tasklet
gregkh/linux@814f08ae8912 dpaa2: add independent dependencies for FSL_DPAA2_SWITCH
gregkh/linux@ac288b26568c dpaa2: compile dpaa2 even CONFIG_FSL_DPAA2_ETH=n
gregkh/linux@c20617b70929 kernel: param: rename locate_module_kobject
gregkh/linux@7feee880295b kernel: globalize lookup_or_create_module_kobject()
gregkh/linux@895a39ac367e params: Replace __modinit with __init_or_module
gregkh/linux@f137a211311c module: Fix freeing of charp module parameters when CONFIG_SYSFS=n
gregkh/linux@474f8e8c6837 bpf, devmap: Remove unnecessary if check in for loop
gregkh/linux@4a3d0fe30b90 bpf: Use RCU-safe iteration in dev_map_redirect_multi() SKB path
gregkh/linux@f46bb8182c8d r8152: fix incorrect register write to USB_UPHY_XTAL
gregkh/linux@e411b0d08580 powerpc/crash: fix backup region offset update to elfcorehdr
gregkh/linux@cb022b8b0146 macvlan: annotate data-races around port->bc_queue_len_used
gregkh/linux@26d3339e465e bpf: fix end-of-list detection in cgroup_storage_get_next_key()
gregkh/linux@99ef54765917 wifi: brcmfmac: Fix error pointer dereference
gregkh/linux@bb547694af94 bpf-lsm: Make bpf_lsm_userns_create() sleepable
gregkh/linux@452a927cddcd bpf: Drop task_to_inode and inet_conn_established from lsm sleepable hooks
gregkh/linux@a9e777f856cd bpf: reject negative CO-RE accessor indices in bpf_core_parse_spec()
gregkh/linux@fb9a3c1f547d net: bcmgenet: fix off-by-one in bcmgenet_put_txcb
gregkh/linux@4c290b84a57b netfilter: xt_socket: enable defrag after all other checks
gregkh/linux@693740753b3e netfilter: nft_fwd_netdev: check ttl/hl before forwarding
gregkh/linux@b00e4c9e9a02 6pack: propagage new tty types
gregkh/linux@d4cceb518453 net: hamradio: 6pack: fix uninit-value in sixpack_receive_buf
gregkh/linux@a2e0c045c87a net/sched: act_ct: Only release RCU read lock after ct_ft
gregkh/linux@644f184d02da net/rds: Optimize rds_ib_laddr_check
gregkh/linux@3174fc703d08 net/rds: Restrict use of RDS/IB to the initial network namespace
gregkh/linux@5080e188c914 ppp: require CAP_NET_ADMIN in target netns for unattached ioctls
gregkh/linux@6a9f38d5ff11 bpf: reject short IPv4/IPv6 inputs in bpf_prog_test_run_skb
gregkh/linux@a9b0178637e0 Bluetooth: L2CAP: Fix printing wrong information if SDU length exceeds MTU
gregkh/linux@ed4033fb85cc Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error
gregkh/linux@9d4a6c0f43fc Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER
gregkh/linux@330b20ec9791 Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp
gregkh/linux@7408cb7193d0 net: phy: qcom: at803x: Use the correct bit to disable extended next page
gregkh/linux@f5c564076dd6 sctp: fix missing encap_port propagation for GSO fragments
gregkh/linux@3128b294b426 net, bpf: fix null-ptr-deref in xdp_master_redirect() for down master
gregkh/linux@e27b58095d7d drm/komeda: fix integer overflow in AFBC framebuffer size check
gregkh/linux@60d5a3f15cca ASoC: sti: Return errors from regmap_field_alloc()
gregkh/linux@c3af3bcfc1de ASoC: sti: use managed regmap_field allocations
gregkh/linux@ee38fb00e1a8 dm cache: fix null-deref with concurrent writes in passthrough mode
gregkh/linux@230ad9c83244 dm cache: fix write path cache coherency in passthrough mode
gregkh/linux@1b2bec4a7dcf dm cache policy smq: fix missing locks in invalidating cache blocks
gregkh/linux@c7d9d18eb82f dm cache: fix concurrent write failure in passthrough mode
gregkh/linux@6ce09144ff8d dm cache: support shrinking the origin device
gregkh/linux@5c98a3f1d7a5 dm cache: fix dirty mapping checking in passthrough mode switching
gregkh/linux@6b97cc7a4290 dm cache metadata: fix memory leak on metadata abort retry
gregkh/linux@defe483e4717 dm log: fix out-of-bounds write due to region_count overflow
gregkh/linux@f49dda23bad4 spi: fsl-qspi: Use reinit_completion() for repeated operations
gregkh/linux@72195ae5c424 drm/sun4i: Fix resource leaks
gregkh/linux@0edd1a4a3e0f dm init: ensure device probing has finished in dm-mod.waitfor=
gregkh/linux@05f0ae6d41e6 fbdev: matroxfb: Mark variable with __maybe_unused to avoid W=1 build break
gregkh/linux@732145c7b0e2 spi: hisi-kunpeng: prevent infinite while() loop in hisi_spi_flush_fifo
gregkh/linux@5481febc3597 drm/msm/dsi: rename MSM8998 DSI version from V2_2_0 to V2_0_0
gregkh/linux@4bb78421d2ae drm/panel: simple: Correct G190EAN01 prepare timing
gregkh/linux@22d0e2a9f027 ALSA: core: Validate compress device numbers without dynamic minors
gregkh/linux@2285f45368f8 drm/amd/pm/ci: Use highest MCLK on CI when MCLK DPM is disabled
gregkh/linux@c196f1204837 drm/amd/pm/ci: Disable MCLK DPM on problematic CI ASICs
gregkh/linux@cef296e3a187 drm/amd/pm/smu7: Fix SMU7 voltage dependency on display clock
gregkh/linux@a956d5c3d7c2 drm/amd/pm/ci: Fix powertune defaults for Hawaii 0x67B0
gregkh/linux@f86eb31b16c5 drm/amd/pm/ci: Clear EnabledForActivity field for memory levels
gregkh/linux@49a194135d9e drm/amd/pm/ci: Fill DW8 fields from SMC
gregkh/linux@98d3358c9596 drm/amd/pm/smu7: Add SCLK cap for quirky Hawaii board
gregkh/linux@f4045483356c ALSA: hda/realtek: Whitespace fix
gregkh/linux@cce64ebf5a88 ALSA: hda/realtek: fix code style (ERROR: else should follow close brace '}')
gregkh/linux@32b67f012652 drm/msm/a6xx: Fix HLSQ register dumping
gregkh/linux@f14d2d1df5a8 drm/msm/a6xx: Use barriers while updating HFI Q headers
gregkh/linux@b339aecde994 pmdomain: ti: omap_prm: Fix a reference leak on device node
gregkh/linux@d58f84b4390a pmdomain: imx: scu-pd: Fix device_node reference leak during ->probe()
gregkh/linux@7e67f85aab71 ASoC: fsl_xcvr: Fix event generation in fsl_xcvr_arc_mode_put()
gregkh/linux@516908b396f7 ASoC: fsl_xcvr: Fix event generation in fsl_xcvr_mode_put()
gregkh/linux@3942ca1039a7 ASoC: fsl_easrc: Check the variable range in fsl_easrc_iec958_put_bits()
gregkh/linux@61c806ae3a39 ASoC: fsl_easrc: Fix value type in fsl_easrc_iec958_get_bits()
gregkh/linux@2f19d9fb91fe ASoC: fsl_easrc: Change the type for iec958 channel status controls
gregkh/linux@84af732af42e PCI: Enable AtomicOps only if Root Port supports them
gregkh/linux@cd99f5181da6 Documentation: fix a hugetlbfs reservation statement
gregkh/linux@272b8124e5ea selftest: memcg: skip memcg_sock test if address family not supported
gregkh/linux@9bfdb26495d0 PCI: Add PCIE_PME_TO_L2_TIMEOUT_US L2 ready timeout value
gregkh/linux@fa5d1387c076 PCI: tegra194: Fix polling delay for L2 state
gregkh/linux@b31250b8a85a PCI: tegra194: Increase LTSSM poll time on surprise link down
gregkh/linux@15947c862ff2 PCI: tegra194: Disable LTSSM after transition to Detect on surprise link down
gregkh/linux@5e62eaf273a1 PCI: tegra194: Use devm_gpiod_get_optional() to parse "nvidia,refclk-select"
gregkh/linux@74ce81de32fe PCI: tegra194: Disable direct speed change for Endpoint mode
gregkh/linux@563da7952d63 ALSA: sc6000: Use standard print API
gregkh/linux@175729f03dcb ALSA: sc6000: Keep the programmed board state in card-private data
gregkh/linux@38897ae2b0af ktest: Avoid undef warning when WARNINGS_FILE is unset
gregkh/linux@16554d02447f ktest: Honor empty per-test option overrides
gregkh/linux@a93127766fe2 ktest: Run POST_KTEST hooks on failure and cancellation
gregkh/linux@f9438cb8c8ec quota: Fix race of dquot_scan_active() with quota deactivation
gregkh/linux@3b28eb75afe5 gfs2: add some missing log locking
gregkh/linux@cec556743547 gfs2: prevent NULL pointer dereference during unmount
gregkh/linux@67adde6bfdfd efi/capsule-loader: fix incorrect sizeof in phys array reallocation
gregkh/linux@57b47231055b ksmbd: fix use-after-free from async crypto on Qualcomm crypto engine
gregkh/linux@e2311f9fc2a1 ARM: dts: mediatek: mt7623: fix efuse fallback compatible
gregkh/linux@db0ae80865b5 memory: tegra124-emc: Fix dll_change check
gregkh/linux@c5345bf8c8da memory: tegra30-emc: Fix dll_change check
gregkh/linux@be55451c842e soc: qcom: ocmem: use scoped device node handling to simplify error paths
gregkh/linux@7861be6c8b17 soc: qcom: ocmem: register reasons for probe deferrals
gregkh/linux@18474bae4c73 soc: qcom: ocmem: return -EPROBE_DEFER is ocmem is not available
gregkh/linux@46de9549a60c arm64: dts: qcom: sdm845-xiaomi-beryllium: Mark l1a regulator as powered during boot
gregkh/linux@27ae6b17c9ba unshare: fix nsproxy leak in ksys_unshare() on set_cred_ucounts() failure
gregkh/linux@f69551139caf ocfs2/dlm: validate qr_numregions in dlm_match_regions()
gregkh/linux@c60a2710b738 ocfs2/dlm: fix off-by-one in dlm_match_regions() region comparison
gregkh/linux@01dfda6229aa soc: qcom: aoss: compare against normalized cooling state
gregkh/linux@2323084c1737 ocfs2: fix listxattr handling when the buffer is full
gregkh/linux@3e167e230d19 ocfs2: validate bg_bits during freefrag scan
gregkh/linux@22544ddedf38 ocfs2: validate group add input before caching
gregkh/linux@a3b7d9b8abc5 dmaengine: dw-axi-dmac: Remove unnecessary return statement from void function
gregkh/linux@d832d1455e7e dmaengine: mxs-dma: Fix missing return value from of_dma_controller_register()
gregkh/linux@dfd1cd57ee60 tracing: Rebuild full_name on each hist_field_name() call
gregkh/linux@125da5d64dd5 ima: check return value of crypto_shash_final() in boot aggregate
gregkh/linux@a21c4ac47c4d HID: asus: make asus_resume adhere to linux kernel coding standards
gregkh/linux@f1ab7c217c27 HID: asus: do not abort probe when not necessary
gregkh/linux@d1e4a668bf00 mtd: physmap_of_gemini: Fix disabled pinctrl state check
gregkh/linux@f6d624e9b3cc mtd: spi-nor: core: correct the op.dummy.nbytes when check read operations
gregkh/linux@e483e864efcd mtd: spi-nor: swp: check SR_TB flag when getting tb_mask
gregkh/linux@4447bbdff9a0 mtd: parsers: ofpart: call of_node_put() only in ofpart_fail path
gregkh/linux@60603f8b29d7 mtd: parsers: ofpart: call of_node_get() for dedicated subpartitions
gregkh/linux@c00c38073ce3 mtd: rawnand: sunxi: fix sunxi_nfc_hw_ecc_read_extra_oob
gregkh/linux@90550af0aad5 HID: usbhid: fix deadlock in hid_post_reset()
gregkh/linux@11fcca6ff30e pinctrl: pinctrl-pic32: Fix resource leak
gregkh/linux@4af19a37e740 perf branch: Avoid incrementing NULL
gregkh/linux@b329ad7983c7 perf: tools: cs-etm: Fix print issue for Coresight debug in ETE/TRBE trace
gregkh/linux@253fe7ec2c2a pinctrl: abx500: Fix type of 'argument' variable
gregkh/linux@f94103efb4c0 perf expr: Return -EINVAL for syntax error in expr__find_ids()
gregkh/linux@420994680384 perf util: Kill die() prototype, dead for a long time
gregkh/linux@81e4a546769d i3c: mipi-i3c-hci: fix IBI payload length calculation for final status
gregkh/linux@f9e387f0a932 driver core: device.h: remove extern from function prototypes
gregkh/linux@86455cf8fc52 driver core: Move dev_err_probe() to where it belogs
gregkh/linux@8bd8bfcdebaf dev_printk: add new dev_err_probe() helpers
gregkh/linux@033392d7c291 backlight: sky81452-backlight: Check return value of devm_gpiod_get_optional() in sky81452_bl_parse_dt()
gregkh/linux@fae32859c6c5 platform/surface: surfacepro3_button: Drop wakeup source on remove
gregkh/linux@227b2768aaac leds: lgm-sso: Remove duplicate assignments for priv->mmap
gregkh/linux@ca3583062b1d tty: hvc: remove HVC_IUCV_MAGIC
gregkh/linux@484357dff256 tty: hvc_iucv: fix off-by-one in number of supported devices
gregkh/linux@3939dda075c1 platform/x86: panasonic-laptop: Fix OPTD notifier registration and cleanup
gregkh/linux@4729266f56b4 mfd: mc13xxx-core: Fix memory leak in mc13xxx_add_subdevice_pdata()
gregkh/linux@ecd60107a98c nfs/blocklayout: Fix compilation error (make W=1) in bl_write_pagelist()
gregkh/linux@32b0686369e0 fs/ntfs3: terminate the cached volume label after UTF-8 conversion
gregkh/linux@3d61fd3b1840 platform/x86: dell_rbu: avoid uninit value usage in packet_size_write()
gregkh/linux@7b3dc1f764bf platform/x86: dell-wmi-sysman: bound enumeration string aggregation
gregkh/linux@87111356d58d RDMA/core: Prefer NLA_NUL_STRING
gregkh/linux@c47ccfb3d80d scsi: sg: Resolve soft lockup issue when opening /dev/sgX
gregkh/linux@2e1ed9a7b6ea scsi: target: core: Fix integer overflow in UNMAP bounds check
gregkh/linux@f4b800485ebf dt-bindings: clock: qcom,gcc-sc8180x: Add missing GDSCs
gregkh/linux@4cbccef02eec clk: qcom: gcc-sc8180x: Add missing GDSCs
gregkh/linux@31602b097372 clk: qcom: gcc-sc8180x: Use retention for USB power domains
gregkh/linux@22f885ea7436 clk: qcom: gcc-sc8180x: Use retention for PCIe power domains
gregkh/linux@cd790c8df7b1 clk: qcom: dispcc-sm8250: Use shared ops on the mdss vsync clk
gregkh/linux@ee37a4e81f59 clk: qcom: dispcc-sm8250: Enable parents for pixel clocks
gregkh/linux@5e85b84d50b0 clk: imx: imx6q: Fix device node reference leak in pll6_bypassed()
gregkh/linux@555756dc9387 clk: imx: imx6q: Fix device node reference leak in of_assigned_ldb_sels()
gregkh/linux@c4aa73eb54f0 clk: imx8mq: Correct the CSI PHY sels
gregkh/linux@d580763d9688 clk: qoriq: avoid format string warning
gregkh/linux@07ff0ffc3e53 clk: xgene: Fix mapping leak in xgene_pllclk_init()
gregkh/linux@a8f37fd48fa6 dt-bindings: clock: qcom,dispcc-sc7180: Define MDSS resets
gregkh/linux@fbe4c82cc073 clk: qcom: dispcc-sc7180: Add missing MDSS resets
gregkh/linux@d84cbbad02af lib/hexdump: print_hex_dump_bytes() calls print_hex_dump_debug()
gregkh/linux@608fa1b21ea1 crypto: sa2ul - Fix AEAD fallback algorithm names
gregkh/linux@798d409a8949 crypto: ccp - copy IV using skcipher ivsize
gregkh/linux@1b7c284965f3 PCMCIA: Fix garbled log messages for KERN_CONT
gregkh/linux@957624ed3f54 net/sched: sch_cake: fix NAT destination port not being updated in cake_update_flowkeys
gregkh/linux@9c2d6770a5f4 nexthop: fix IPv6 route referencing IPv4 nexthop
gregkh/linux@e592f3f06d67 net/sched: taprio: stop going through private ops for dequeue and peek
gregkh/linux@08eff95b415f net/sched: taprio: replace safety precautions with comments
gregkh/linux@f3e05f3ca9bc net/sched: taprio: continue with other TXQs if one dequeue() failed
gregkh/linux@99c75fd3862d net/sched: taprio: refactor one skb dequeue from TXQ to separate function
gregkh/linux@19af9a593720 net/sched: taprio: rename close_time to end_time
gregkh/linux@347187457816 net/sched: taprio: fix use-after-free in advance_sched() on schedule switch
gregkh/linux@e400be22bfc9 tcp: annotate data-races around (tp->write_seq - tp->snd_nxt)
gregkh/linux@46121019ca4c i40e: don't advertise IFF_SUPP_NOFCS
gregkh/linux@4f5887146e5f e1000e: Unroll PTP in probe error handling
gregkh/linux@aff0f28f5be8 ipv6: fix possible UAF in icmpv6_rcv()
gregkh/linux@2b5a2c957c77 sctp: fix OOB write to userspace in sctp_getsockopt_peer_auth_chunks
gregkh/linux@c85adc26c5fd dissector: do not set invalid PPP protocol
gregkh/linux@f33bb3ef7434 flow_dissector: Add number of vlan tags dissector
gregkh/linux@d7e541e86122 flow_dissector: Add PPPoE dissectors
gregkh/linux@ba758fdf1399 pppoe: drop PFC frames
gregkh/linux@d9e47e29aacb openvswitch: cap upcall PID array size and pre-size vport replies
gregkh/linux@e50ede329e4d netfilter: nft_osf: restrict it to ipv4
gregkh/linux@26900306a5a2 netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO
gregkh/linux@6bbf829b4c1b netfilter: conntrack: remove sprintf usage
gregkh/linux@7eaf9c740f33 netfilter: xtables: restrict several matches to inet family
gregkh/linux@69bee27edbb4 ipvs: fix MTU check for GSO packets in tunnel mode
gregkh/linux@1c136f2c44a5 netfilter: nfnetlink_osf: fix out-of-bounds read on option matching
gregkh/linux@c996a90f3071 netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check
gregkh/linux@72304fec672e slip: reject VJ receive packets on instances with no rstate array
gregkh/linux@9aafba2f49e1 slip: bound decode() reads against the compressed packet length
gregkh/linux@cccfc6cc3052 arm64: dts: meson-gxl-p230: fix ethernet PHY interrupt number
gregkh/linux@6cf25b111c5e ksmbd: destroy tree_conn_ida in ksmbd_session_destroy()
gregkh/linux@e74c00c6af42 ksmbd: scope conn->binding slowpath to bound sessions only
gregkh/linux@0797b2e69018 net/rds: zero per-item info buffer before handing it to visitors
gregkh/linux@84a383624642 net_sched: sch_hhf: annotate data-races in hhf_dump_stats()
gregkh/linux@395126b7c6ff net/sched: sch_pie: annotate data-races in pie_dump_stats()
gregkh/linux@e7d9d29f3a2a net/sched: sch_fq_codel: remove data-races from fq_codel_dump_stats()
gregkh/linux@3e9ca39cd616 net: sched: gred/red: remove unused variables in struct red_stats
gregkh/linux@9828d46a76c0 net/sched: sch_red: annotate data-races in red_dump_stats()
gregkh/linux@5327ed27ac7d net/sched: sch_sfb: annotate data-races in sfb_dump_stats()
gregkh/linux@7e6b500d8862 nfp: fix swapped arguments in nfp_encode_basic_qdr() calls
gregkh/linux@4ee4deadaae7 tipc: fix double-free in tipc_buf_append()
gregkh/linux@33d390ee6d6c vhost_net: fix sleeping with preempt-disabled in vhost_net_busy_poll()
gregkh/linux@1f0ed0f57f0f fs/adfs: validate nzones in adfs_validate_bblk()
gregkh/linux@e54c72bd5aa4 rtc: abx80x: Disable alarm feature if no interrupt attached
gregkh/linux@6e25480a1cd9 fbdev: offb: fix PCI device reference leak on probe failure
gregkh/linux@15c4cc3850cf mailbox: mailbox-test: free channels on probe error
gregkh/linux@1ae3e401ca58 cgroup/rdma: fix integer overflow in rdmacg_try_charge()
gregkh/linux@0f1144427111 mailbox: add sanity check for channel array
gregkh/linux@5d4f3d0f64f1 mailbox: mailbox-test: don't free the reused channel
gregkh/linux@58c935e1287c mailbox: mailbox-test: initialize struct earlier
gregkh/linux@a4d4bbb16042 mailbox: mailbox-test: make data_ready a per-instance variable
gregkh/linux@f2560f67018a btrfs: fix double-decrement of bytes_may_use in submit_one_async_extent()
gregkh/linux@4b172d61d053 tracing: branch: Fix inverted check on stat tracer registration
gregkh/linux@1e285362ef70 netfilter: arp_tables: fix IEEE1394 ARP payload parsing
gregkh/linux@bd46978b7e93 drm/amdgpu: fix spelling typos
gregkh/linux@1c61cd15b1a5 drm/amdgpu/uvd3.1: Don't validate the firmware when already validated
gregkh/linux@7e1b64dded05 drm/amdgpu/gfx6: Support harvested SI chips with disabled TCCs (v2)
gregkh/linux@fc1c518bb1f0 netfilter: xt_policy: fix strict mode inbound policy matching
gregkh/linux@9c6afcb1c3cb netfilter: nf_conntrack_sip: don't use simple_strtoul
gregkh/linux@58f5c0212a5f scsi: sr: Add memory allocation failure handling for get_capabilities()
gregkh/linux@7dd468dfa606 cdrom, scsi: sr: propagate read-only status to block layer via set_disk_ro()
gregkh/linux@6e2cfd090497 netdevsim: zero initialize struct iphdr in dummy sk_buff
gregkh/linux@356f03bb0fe6 net: sched: sch_netem: Refactor code in 4-state loss generator
gregkh/linux@8ebd5074d939 net/sched: netem: fix probability gaps in 4-state loss model
gregkh/linux@ef9a41b3870f net/sched: netem: fix queue limit check to include reordered packets
gregkh/linux@4999e86cec16 net/sched: netem: validate slot configuration
gregkh/linux@0c9899ad7f72 net: sched: choke: remove unused variables in struct choke_sched_data
gregkh/linux@665cdc655d65 net/sched: sch_choke: annotate data-races in choke_dump_stats()
gregkh/linux@b2c657fad6f4 net/sched: sch_fq_pie: annotate data-races in fq_pie_dump_stats()
gregkh/linux@4ab6fc60ed5a vrf: Fix a potential NPD when removing a port from a VRF
gregkh/linux@24831b0b2ada net: usb: rtl8150: fix use-after-free in rtl8150_start_xmit()
gregkh/linux@7dbbd285fa35 net: usb: rtl8150: free skb on usb_submit_urb() failure in xmit
gregkh/linux@e6f099dc13a7 NFC: trf7970a: Ignore antenna noise when checking for RF field
gregkh/linux@2472abcdbd88 net: phy: dp83869: fix setting CLK_O_SEL field.
gregkh/linux@2ab2797eab75 ASoC: codecs: ab8500: Fix casting of private data
gregkh/linux@f11c19ccdc36 netfilter: skip recording stale or retransmitted INIT
gregkh/linux@71681b75a527 sctp: discard stale INIT after handshake completion
gregkh/linux@b4d4bab12b3f ipv4: rename and move ip_route_output_tunnel()
gregkh/linux@9c7aad9d57d2 ipv4: remove "proto" argument from udp_tunnel_dst_lookup()
gregkh/linux@2c6d08c6ec18 ipv4: add new arguments to udp_tunnel_dst_lookup()
gregkh/linux@edf3d43c670b ipv6: rename and move ip6_dst_lookup_tunnel()
gregkh/linux@55193df8d6d3 bareudp: fix NULL pointer dereference in bareudp_fill_metadata_dst()
gregkh/linux@c80421525625 net/sched: sch_cake: annotate data-races in cake_dump_stats() (V)
gregkh/linux@6f5c6189c646 ALSA: hda/conexant: add a new hda codec SN6140
gregkh/linux@d35f9b77465f ALSA: hda/conexant: fix some typos
gregkh/linux@7074bc53323f ALSA: hda/conexant: Renaming the codec with device ID 0x1f86 and 0x1f87
gregkh/linux@49c2c5924552 ALSA: hda/conexant: Fix missing error check for jack detection
gregkh/linux@6b276ac69396 drm/amd/display: Allow DCE link encoder without AUX registers
gregkh/linux@6c2cce5b54ea drm/amd/display: Read EDID from VBIOS embedded panel info
gregkh/linux@4361954f0e15 btrfs: tracepoints: fix sleep while in atomic context in btrfs_sync_file()
gregkh/linux@bbd72a151ba1 SUNRPC: Check if the xprt is connected before handling sysfs reads
gregkh/linux@7dbee046e205 SUNRPC: Do not dereference non-socket transports in sysfs
gregkh/linux@abc5bc84e0f2 flow_dissector: do not dissect PPPoE PFC frames
gregkh/linux@aa7fcb398e55 flow_dissector: Do not count vlan tags inside tunnel payload
gregkh/linux@3c5c270f3bc8 net/sched: sch_pie: annotate more data-races in pie_dump_stats()
gregkh/linux@a9f68d9ed38d crypto: af_alg - Cap AEAD AD length to 0x80000000
gregkh/linux@f81cfec12cd8 i40e: Cleanup PTP pins on probe failure
gregkh/linux@febb4bf373ac audit: fix incorrect inheritable capability in CAPSET records
gregkh/linux@26ab32ec7394 netfilter: nft_ct: fix missing expect put in obj eval
gregkh/linux@18f30c6a58cb net: atlantic: preserve PCI wake-from-D3 on shutdown when WOL enabled
gregkh/linux@311f9175cda9 audit: enforce AUDIT_LOCKED for AUDIT_TRIM and AUDIT_MAKE_EQUIV
gregkh/linux@74f1a22f7a80 KVM: Reject wrapped offset in kvm_reset_dirty_gfn()
gregkh/linux@12032140ada4 KVM: x86: Fix Xen hypercall tracepoint argument assignment
gregkh/linux@79d18f10b898 drm/i915/dp: Fix VSC dynamic range signaling for RGB formats
gregkh/linux@c65b137d351e ALSA: usb-audio: Bound MIDI endpoint descriptor scans
gregkh/linux@d0cb994605c8 ceph: fix a buffer leak in __ceph_setxattr()
gregkh/linux@ceabfb9994d7 powerpc/warp: Fix error handling in pika_dtm_thread
gregkh/linux@3f2575bb7f95 libceph: Fix potential out-of-bounds access in osdmap_decode()
gregkh/linux@301286c0ccd3 libceph: Fix potential null-ptr-deref in decode_choose_args()
gregkh/linux@ebe76d58a48a libceph: Fix potential out-of-bounds access in crush_decode()
gregkh/linux@f47430fc1f81 libceph: handle rbtree insertion error in decode_choose_args()
gregkh/linux@d001cde538d3 iommu/vt-d: Disable DMAR for Intel Q35 IGFX
gregkh/linux@95d5a973a546 drm/i915: skip __i915_request_skip() for already signaled requests
gregkh/linux@293935f44900 drm/panfrost: Fix wait_bo ioctl leaking positive return from dma_resv_wait_timeout()
gregkh/linux@00ceb38a03d0 drm/gma500/oaktrail_hdmi: fix i2c adapter leak on setup
gregkh/linux@29037d5bdf2d io-wq: check that the predecessor is hashed in io_wq_remove_pending()
gregkh/linux@03014551938a net/rds: reset op_nents when zerocopy page pin fails
gregkh/linux@18eae8420081 io_uring: prevent opcode speculation
gregkh/linux@1d6ceb529a91 s390/debug: Reject zero-length input before trimming a newline
gregkh/linux@22332fd4050a Revert "x86/vdso: Fix output operand size of RDPID"
gregkh/linux@f117d0467215 net: dsa: sja1105: fix kasan out-of-bounds warning in sja1105_table_delete_entry()
gregkh/linux@6813a8b1b240 wifi: mac80211: check tdls flag in ieee80211_tdls_oper
gregkh/linux@56d997b25707 KVM: x86: Acquire SRCU in KVM_GET_MP_STATE to protect guest memory accesses
gregkh/linux@52ee10cce18b Revert "s390/cio: Fix device lifecycle handling in css_alloc_subchannel()"
gregkh/linux@9544559e5943 smb: client: reject userspace cifs.spnego descriptions
gregkh/linux@ccadd32cc126 sysfs: don't remove existing directory on update failure
gregkh/linux@ba09f4baa5bd hwmon: (pmbus/adm1266) widen blackbox-info buffer to I2C_SMBUS_BLOCK_MAX
gregkh/linux@5c09382f1da2 ALSA: ua101: Reject too-short USB descriptors
gregkh/linux@34d0d492a281 ALSA: asihpi: Fix potential OOB array access at reading cache
gregkh/linux@f1a4d5784781 net: wwan: iosm: fix potential memory leaks in ipc_imem_init()
gregkh/linux@4907596f25b1 Bluetooth: bnep: Fix UAF read of dev->name
gregkh/linux@e2d19969c8d9 Bluetooth: hci_uart: fix UAFs and race conditions in close and init paths
gregkh/linux@b2606c302d7f phonet/pep: disable BH around forwarded sk_receive_skb()
gregkh/linux@f2782ddac82c net: bcmgenet: keep RBUF EEE/PM disabled
gregkh/linux@588933f1a2ca netfilter: ip6t_hbh: reject oversized option lists
gregkh/linux@a698ac8ab256 netfilter: nf_queue: hold bridge skb->dev while queued
gregkh/linux@383418c20e69 netfilter: ipset: stop hash:* range iteration at end
gregkh/linux@5eb7f9ebddab ring-buffer: Fix reporting of missed events in iterator
gregkh/linux@1dd531e28f61 vsock/vmci: fix UAF when peer resets connection during handshake
gregkh/linux@3848a0ce8d6a wifi: ath11k: clear shared SRNG pointer state on restart
gregkh/linux@bc20dbd48c26 ipv4: raw: reject IP_HDRINCL packets with ihl < 5
gregkh/linux@6ef30384a50a ixgbevf: fix use-after-free in VEPA multicast source pruning
gregkh/linux@cedbb608494b wifi: cfg80211: advance loop vars in cfg80211_merge_profile()
gregkh/linux@b559a218eece tracing: Do not call map->ops->elt_free() if elt_alloc() fails
gregkh/linux@a83d3e4daba4 scsi: isci: Fix use-after-free in device removal path
gregkh/linux@a8f233fb0c7b spi: sprd: fix error pointer deref after DMA setup failure
gregkh/linux@3bbbe7ae3fda spi: ti-qspi: fix use-after-free after DMA setup failure
gregkh/linux@4a331582011d RDMA/siw: Reject MPA FPDU length underflow before signed receive math
gregkh/linux@f0e211d6539f device property: set fwnode->secondary to NULL in fwnode_init()
gregkh/linux@5a7d0df6e507 drm/bridge: it66121: acquire reset GPIO in probe
gregkh/linux@b28cf214228e drm/bridge: megachips: remove bridge when irq request fails
gregkh/linux@8903f28b28dd drm/amd/display: Fix integer overflow in bios_get_image()
gregkh/linux@d6590e3f766e drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async
gregkh/linux@78a63fb2f7d5 batman-adv: mcast: fix use-after-free in orig_node RCU release
gregkh/linux@e2ec4c712d19 batman-adv: clear current gateway during teardown
gregkh/linux@2edb8aeb3cdd batman-adv: dat: handle forward allocation error
gregkh/linux@37be61825b15 batman-adv: fix fragment reassembly length accounting
gregkh/linux@abae88fa254f batman-adv: fix tp_meter counter underflow during shutdown
gregkh/linux@bcda4814dc65 batman-adv: frag: disallow unicast fragment in fragment
gregkh/linux@3423a45e5c3d batman-adv: bla: fix report_work leak on backbone_gw purge
gregkh/linux@1a21c055f66e batman-adv: tp_meter: avoid use of uninit sender vars
gregkh/linux@55dc41fe8821 batman-adv: tt: fix negative last_changeset_len
gregkh/linux@33e5ede7ce6d batman-adv: tt: fix negative tt_buff_len
gregkh/linux@31630f46151c hwmon: (pmbus/adm1266) seed timestamp from the real-time clock
gregkh/linux@c2c56092710f hwmon: (pmbus/adm1266) reject implausible blackbox record_count
gregkh/linux@472744f69d25 hwmon: (pmbus/adm1266) include PEC byte in pmbus_block_xfer read buffer
gregkh/linux@9d5309500b46 hwmon: (pmbus/adm1266) bounce blackbox records through a protocol-sized buffer
gregkh/linux@17cee2f59029 hwmon: (pmbus/adm1266) cap PDIO scan in get_multiple at ADM1266_PDIO_NR
gregkh/linux@5777574d65db hwmon: (pmbus/adm1266) don't clobber GPIO bits before PDIO read in get_multiple
gregkh/linux@49e3c4d5a485 hwmon: (pmbus/adm1266) register the gpio_chip after pmbus_do_probe()
gregkh/linux@1a7514c6e425 hwmon: (pmbus/adm1266) register the nvmem device after pmbus_do_probe()
gregkh/linux@ee4799becf7d hwmon: (pmbus/adm1266) reject short block-read responses in the GPIO accessors
gregkh/linux@f98f131256be firmware: arm_ffa: Check for NULL FF-A ID table while driver registration
gregkh/linux@9f4efbad2c09 firmware: arm_ffa: Skip free_pages on RX buffer alloc failure
gregkh/linux@8caa4cd71a17 kunit: config: Enable KUNIT_DEBUGFS by default
gregkh/linux@296381e39973 kunit: config: KUNIT_DEBUGFS should depend on DEBUG_FS
gregkh/linux@812103fb6da9 ARM: integrator: Fix early initialization
gregkh/linux@a8ae1b5e722b netfilter: x_tables: unregister the templates first
gregkh/linux@d9d976951731 tcp: Fix imbalanced icsk_accept_queue count.
gregkh/linux@57e7ad8bf9c8 ice: fix locking in ice_dcb_rebuild()
gregkh/linux@bde8085013b8 phy: marvell: mvebu-a3700-utmi: fix incorrect USB2_PHY_CTRL register access
gregkh/linux@c85f9dc23be4 irqchip/ath79-cpu: Remove unused function
gregkh/linux@b6b22824b30e net: ethernet: cortina: Make RX SKB per-port
gregkh/linux@587f8ac8dc77 net: ethernet: cortina: Drop half-assembled SKB
gregkh/linux@7af1fabdee74 net: ethernet: cortina: Carry over frag counter
gregkh/linux@a795c3cfd386 net: ethernet: cs89x0: remove stale CONFIG_MACH_MX31ADS reference
gregkh/linux@d6c7b8d0dc22 wifi: ath11k: fix error path leaks in some WMI WOW calls
gregkh/linux@923b5ac7edc7 HID: quirks: really enable the intended work around for appledisplay
gregkh/linux@3009b7037a4c ethtool: fix ethnl_bitmap32_not_zero() bit interval semantics
gregkh/linux@3c2cdb7c07f6 drm/msm: Fix iommu_map_sgtable() return value check and avoid WARN
gregkh/linux@47110c3a9ac2 net: tls: fix off-by-one in sg_chain entry count for wrapped sk_msg ring
gregkh/linux@91359966e247 net: tls: prevent chain-after-chain in plain text SG
gregkh/linux@8fb070cf9584 drm/msm/snapshot: fix dumping of the unaligned regions
gregkh/linux@ddbca8714d16 net: dsa: mt7530: sync driver-specific behavior of MT7531 variants
gregkh/linux@79a0d584c798 net: dsa: mt7530: fix FDB entries not aging out with short timeout
gregkh/linux@7c25d834bca7 net: dsa: mt7530: rename mt753x_bpdu_port_fw enum to mt753x_to_cpu_fw
gregkh/linux@4f6072ce4103 net: dsa: mt7530: preserve VLAN tags on trapped link-local frames
gregkh/linux@a201c66edf2e net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer
gregkh/linux@d9c698f8a83e platform/x86: adv_swbutton: Check ACPI_HANDLE() against NULL
gregkh/linux@293231464335 platform/x86: hp_accel: Check ACPI_COMPANION() against NULL
gregkh/linux@79bf68bbc61e platform/x86: intel-hid: Check ACPI_HANDLE() against NULL
gregkh/linux@46b9ff059080 platform/x86: intel-vbtn: Check ACPI_HANDLE() against NULL
gregkh/linux@01e42aabaf76 RDMA/rtrs: Fix use-after-free in path file creation cleanup
gregkh/linux@b081fee497b0 net: bridge: Flush multicast groups when snooping is disabled
gregkh/linux@ddefd1b8e5eb bridge: mcast: Fix a possible use-after-free when removing a bridge port
gregkh/linux@37377b39ff86 tracing: Avoid NULL return from hist_field_name() on truncation
gregkh/linux@2cc88055c8ce net: ag71xx: check error for platform_get_irq
gregkh/linux@4ad8dceafc03 string: add mem_is_zero() helper to check if memory area is all zeros
gregkh/linux@45610e842aac gpiolib: cdev: use !mem_is_zero() instead of memchr_inv(s, 0, n)
gregkh/linux@c7c9d717eadf gpio: cdev: check if uAPI v2 config attributes are correctly zeroed
gregkh/linux@5ddc715324ba net: mana: validate rx_req_idx to prevent out-of-bounds array access
gregkh/linux@dc027a595035 Linux 5.15.209