UPDATE: 6.1.188

[fepitre-bot]

Update to 6.1.188

Details

Changes since previous version:
gregkh/linux@baf9b0383ff7 PCI: host-generic: Fix NULL pointer dereference on 32-bit CAM systems
gregkh/linux@56f0aa75c764 Bluetooth: RFCOMM: take rfcomm_mutex for the deferred setup accept
gregkh/linux@f8e6fde5db87 rndis_host: add overflow check in rndis_rx_fixup()
gregkh/linux@4d0892a90b57 ALSA: dummy: Check card index validity at probe
gregkh/linux@b4663405ae29 ocfs2: fix missing metadata reservation for large xattrs
gregkh/linux@41dd31117565 null_blk: fix UBSAN shift-out-of-bounds when zone_size is 0 or overflows
gregkh/linux@5dc59fc959b2 kcov: fix data corruption and race conditions on PREEMPT_RT
gregkh/linux@8865cd664484 ext4: stop retrying saturated xattr cache entries
gregkh/linux@d1efdcb37287 ext4: clear error before retrying inode xattr space fallback
gregkh/linux@03a12253dd2a xfs: validate attr entry pointer before field access
gregkh/linux@13327ed95222 misc: fastrpc: Rework fastrpc_req_munmap
gregkh/linux@99f8de36c84c misc: fastrpc: Remove buffer from list prior to unmap operation
gregkh/linux@272df0fbe6f3 NTB: ntb_netdev: Preserve RX queue depth on allocation failure
gregkh/linux@f70c9d4fba46 serial: amba-pl011: synchronize DMA teardown
gregkh/linux@4fe9b3b9e4b8 perf/core: Fix child_total_time_enabled accounting bug at task exit
gregkh/linux@6449c4223b53 perf: Fix cgroup state vs ERROR
gregkh/linux@3b1e5c44653f perf: Fix dangling cgroup pointer in cpuctx
gregkh/linux@f8a07021679a perf/core: Fix group leader use-after-free after sibling detach
gregkh/linux@142e287b3a25 packet: use consistent hard_header_len in non-ring send paths
gregkh/linux@e79f59a8527a packet: use consistent hard_header_len in TX_RING send path
gregkh/linux@7a11226e02f5 serial: sc16is7xx: fix copy-paste errors in EFR_SWFLOWx_BIT constants
gregkh/linux@739499f1da1a serial: sc16is7xx: convert bitmask definitions to use BIT() macro
gregkh/linux@d11f15dbbf83 serial: sc16is7xx: rename EFR mutex with generic name
gregkh/linux@b0c3604f816c serial: sc16is7xx: use guards for simple mutex locks
gregkh/linux@d40a28ab302e serial: sc16is7xx: enable THRI before filling TX FIFO
gregkh/linux@88ecc4e120bc net/packet: convert po->pressure to an atomic flag
gregkh/linux@f015c9de92b7 packet: synchronize pressure clearing with ring reconfiguration
gregkh/linux@08a04d7bfb9c inet: frags: publish queues before arming timer
gregkh/linux@b94b28c1f0fa s390/vfio_ccw: Cancel existing workqueues
gregkh/linux@7e9954e72120 drm/amdgpu: disallow multiple FENCE chunks in one submit
gregkh/linux@c9b85aa2cf73 s390/vfio_ccw: Move cp cleanup out of not operational
gregkh/linux@56d7488533ce s390/vfio_ccw: Selectively expand io_mutex
gregkh/linux@0edd222730a9 s390/vfio_ccw: Implement a crw lock
gregkh/linux@cacb1245edf4 xfs: don't use a xfs_log_iovec for ri_buf in log recovery
gregkh/linux@f7b5fa83e2c1 xfs: bounds-check buffer log item's dirty bitmap
gregkh/linux@0514f3054738 drm/amdgpu: check ASPM on the dGPU host link
gregkh/linux@63d2230e5076 gpio: ml-ioh: use raw_spinlock_t for the register lock
gregkh/linux@6509e270ae1b tls: fix lockless read of strp->msg_ready in ->poll
gregkh/linux@ef50eaab631f tls: handle data disappearing from under the TLS ULP
gregkh/linux@b8c9f25fd843 iomap: adjust read range correctly for non-block-aligned positions
gregkh/linux@4e942da2869b nfc: digital: clamp SENSF_RES length to the destination buffer
gregkh/linux@8d2c243b7985 nfc: fdp: bound the device-reported read length and fix an skb leak
gregkh/linux@cb2986722824 nfc: microread: validate target discovery payload lengths
gregkh/linux@65a0ec7783b0 nfc: llcp: bound the connect_sn TLV walk to the skb
gregkh/linux@9c47d6679635 nfc: llcp: fix OOB read and u8 offset wrap in TLV parsers
gregkh/linux@a7b9b449f5a5 nfc: llcp: reject PDUs shorter than the LLCP header
gregkh/linux@d63e85c5d555 nfc: pn533: purge fragmented skbs during cleanup
gregkh/linux@dd26d30f40c4 nfc: st21nfca: validate ATR_REQ length against the received frame
gregkh/linux@afd8605fb43b nfc: nci: fix out-of-bounds write in nci_target_auto_activated()
gregkh/linux@fe69fed3495f nfc: nci: fix uninit-value in the RF discover/activated NTF handlers
gregkh/linux@be678c7a41eb nfc: nci: free destination parameters when closing a connection
gregkh/linux@2ff70a8edba1 ndisc: ndisc_send_redirect() cleanup
gregkh/linux@f161be39201e libceph: fix OOB read in decode_watchers() via missing bounds check
gregkh/linux@74ce7389f8f5 ipv4: reject undersized MTUs in ip_do_fragment()
gregkh/linux@d960881b9312 ipv6: fix use-after-free in ip6_finish_output2()
gregkh/linux@447b668faa14 nvmet-auth: zero the AUTH_RECEIVE response buffer
gregkh/linux@1a8f007faefe nvmet-fc: fix invalid free in LS IOD error path
gregkh/linux@e7077e6c4542 nvmet-tcp: Do not WARN on remotely-controlled oversized SGL allocations
gregkh/linux@84b205297fa1 Input: byd - synchronize timer deletion before freeing private data
gregkh/linux@f84f2c81d792 ASoC: codecs: lpass-tx-macro: Fix enum kcontrol accesses
gregkh/linux@81d814214816 mptcp: pm: ADD_ADDR rtx: always decrease sk refcount
gregkh/linux@5da972efed3d mptcp: pm: ADD_ADDR rtx: free sk if last
gregkh/linux@e19f1e37f93d mptcp: pm: fix data race in add_addr timer callback
gregkh/linux@403cc9bd6ccb HID: magicmouse: do not keep a stale msc->input if no input is claimed
gregkh/linux@da86a2bf716f HID: magicmouse: Prevent out-of-bounds (OOB) read during DOUBLE_REPORT_ID
gregkh/linux@313ead1abed9 HID: core: fix OOB read of field->usage in hid_set_field()
gregkh/linux@f833821e4b52 xfrm: fix sk_dst_cache double-free in xfrm_user_policy()
gregkh/linux@17e01e342af7 s390/vfio_ccw: Free all memory if cp_init() fails
gregkh/linux@d7d4a8a75cd3 Input: atkbd - skip deactivate for HONOR FMB-P's internal keyboard
gregkh/linux@eb6b7753e8f7 Input: atkbd - skip deactivate for HONOR ZQC-P
gregkh/linux@cadee54a8691 can: use skb hash instead of private variable in headroom
gregkh/linux@2753722612d8 can: isotp: fix timer drain order, wakeup handling and tx_gen ordering
gregkh/linux@4753cc37b660 misc: fastrpc: Fix double free of 'buf' in error path
gregkh/linux@33ea29f8b614 HID: nintendo: fix out-of-bounds read in joycon_ctlr_read_handler()
gregkh/linux@634f498ea5d5 HID: core: fix number/pointer type confusion on long items
gregkh/linux@d37ff4e3635c HID: sensor: custom: Fix use-after-free in enable_sensor
gregkh/linux@8614c043b11c HID: hyperv: validate initial device info bounds
gregkh/linux@8e68c380290b Bluetooth: hci_event: fix LE list UAF on reset
gregkh/linux@37a5dcd6837f net: gro: properly validate BIG TCP aggregation criteria
gregkh/linux@79a9660d699e Linux 6.1.185
gregkh/linux@14a8f3e10fa9 inet: frags: strip GSO state from fragments before reassembly
gregkh/linux@d64a499eea6b Linux 6.1.186
gregkh/linux@9b7d66ea88ae RDMA/rxe: Fix OOB in free_rd_atomic_resources()
gregkh/linux@47276297140e inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP
gregkh/linux@09aa68552d25 KVM: x86/mmu: Check write tracking in all address spaces
gregkh/linux@5959cad3cfa8 ext4: don't enable DAX on new encrypted files
gregkh/linux@3d8500dfcc85 io_uring/io-wq: fix worker accounting when canceling creation callbacks
gregkh/linux@a10f5080afbe ipvs: reload ip header after head reallocation
gregkh/linux@edb0a2c6a663 Revert "usb: phy: fsl-usb: Fix use-after-free in delayed work during device removal"
gregkh/linux@d49d420e4833 wifi: ath11k: Add missing hw_ops->get_ring_selector() for IPQ5018
gregkh/linux@a63fa556ac57 drm/nouveau/kms/nv50-: init hpd_irq_lock for PIOR DP
gregkh/linux@b05c2e25a5c1 bpf: Remove tst_run from lwt_seg6local_prog_ops.
gregkh/linux@b57a8983916f jfs: add check read-only before truncation in jfs_truncate_nolock()
gregkh/linux@469bd67fc338 jfs: add check read-only before txBeginAnon() call
gregkh/linux@19efa170e012 ibmvnic: Use kernel helpers for hex dumps
gregkh/linux@4a2de0f5b8d7 jfs: Fix null-ptr-deref in jfs_ioc_trim
gregkh/linux@ea27703eb0ef exfat: fix double free in delayed_free
gregkh/linux@9b03c3ce32a6 media: platform: exynos4-is: Add hardware sync wait to fimc_is_hw_change_mode()
gregkh/linux@d8be1288e398 mISDN: hfcpci: Fix warning when deleting uninitialized timer
gregkh/linux@2c88069fac2c can: j1939: implement NETDEV_UNREGISTER notification handler
gregkh/linux@5e0de5cf9631 can: j1939: add missing calls in NETDEV_UNREGISTER notification handler
gregkh/linux@041ae05594f0 can: j1939: make j1939_sk_bind() fail if device is no longer registered
gregkh/linux@005a7173d8e4 smc: Fix use-after-free in __pnet_find_base_ndev().
gregkh/linux@b498f0da45a3 KVM: arm64: Prevent access to vCPU events before init
gregkh/linux@5a2fccc4b32c smc: Use __sk_dst_get() and dst_dev_rcu() in in smc_clc_prfx_set().
gregkh/linux@3f119c37aa29 smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match().
gregkh/linux@cd6b991de3e0 ASoC: nau8821: Cancel delayed work on component remove
gregkh/linux@fea55b034328 bpf: Fix use-after-free in offloaded map/prog info fill
gregkh/linux@f2d88b0d7aeb riscv: Fix register corruption from uninitialized cregs on error
gregkh/linux@3dfb3f82e043 Revert "PM: sleep: Use complete() in device_pm_sleep_init()"
gregkh/linux@7dfc256a7d0c ASoC: nau8821: Cancel pending work before suspend
gregkh/linux@ff4a5b10fb4e smc: Use _sk_dst_get() and dst_dev_rcu() in smc_vlan_by_tcpsk().
gregkh/linux@2a421e68c401 selinux: switch two allocations to use kzalloc_objs()
gregkh/linux@ca9ed69d038c Revert "mtd: maps: vmu-flash: fix fault in unaligned fixup"
gregkh/linux@2a9717e2e9f0 Revert "smb: client: use kvzalloc() for megabyte buffer in simple fallocate"
gregkh/linux@efb68671a7cb ASoC: tegra: Fix Master Volume Control
gregkh/linux@aa2ddcc65e85 block: make bio_check_eod work for zero sized devices
gregkh/linux@f48341830e42 mptcp: pm: fix memory leak from alloc-during-teardown race
gregkh/linux@ab6a99091811 ext4: propagate errors from fast commit range replay
gregkh/linux@0f2606a7c88c nilfs2: correct return value kernel-doc descriptions for ioctl functions
gregkh/linux@3bd064ccc70b nilfs2: reject invalid block index in GC ioctl
gregkh/linux@04e51353cb9f nfc: nci: add data_len bound checks to activation parameter extractors
gregkh/linux@4675a1279c44 HID: magicmouse: fix battery reporting for Bluetooth Magic Trackpad USB-C
gregkh/linux@8a10a624996f HID: magicmouse: prevent unbounded recursion in magicmouse_raw_event()
gregkh/linux@29f556cf01a3 HID: magicmouse: re-enable multitouch after reset-resume
gregkh/linux@978df308a2b1 nvme: rename CDR/MORE/DNR to NVME_STATUS*
gregkh/linux@0952541b153e nvmet-tcp: bound SGL data length before allocating command buffers
gregkh/linux@c2f3d51c7f52 HID: nintendo: stop device IO before hid_hw_stop on probe failure
gregkh/linux@dc5108f18f58 HID: uclogic: fix use-after-free of inrange_timer on remove
gregkh/linux@21b4caf37519 HID: ft260: improve i2c write performance
gregkh/linux@85fc8d7a4395 HID: ft260: improve i2c large reads performance
gregkh/linux@d9cd8c259b8a HID: ft260: skip unexpected HID input reports
gregkh/linux@12363736643b HID: ft260: wake up device from power saving mode
gregkh/linux@65d6c17a1e39 HID: ft260: missed NACK from busy device
gregkh/linux@f9fa2e2dc026 HID: ft260: validate i2c input report length
gregkh/linux@90e9298f2e43 HID: ft260: fix stack-use-after-return write in I2C read race
gregkh/linux@163a91e3e8af Bluetooth: hci_sync: Use bt_dev_err() to log error message in hci_update_event_filter_sync()
gregkh/linux@bb5f5414d1a6 Bluetooth: hci_sync: Fix accept list UAF during suspend
gregkh/linux@ac1a7c3deb7f Bluetooth: hci_conn: Fix not matching by CIS ID
gregkh/linux@a35c0b5a965d Bluetooth: ISO: use correct CIS order in Set CIG Parameters event
gregkh/linux@8317afc5d532 Bluetooth: hci_event: fix Set CIG Parameters error status handling
gregkh/linux@9e05783d0bb9 Bluetooth: hci_event: validate LE Set CIG Parameters response
gregkh/linux@74b301f7f197 ipv4: igmp: Fix potential UAF in igmp_gq_start_timer()
gregkh/linux@c6662f900b6b fpga: dfl: fme: add error handling
gregkh/linux@057b9feda326 accessibility: speakup: unregister tty ldisc on later init failures
gregkh/linux@9790f6e726ea usb: xhci: Handle USB3 port events when there is one roothub
gregkh/linux@43635ff6401c xhci: dbgtty: Fix unregister on tty_register_driver() failure
gregkh/linux@ce2d78f6f189 xhci: dbgtty: Fix unregister on tty_alloc_driver() failure
gregkh/linux@03cfeeb13542 fuse: fix invalidate lock leak on setattr writeback failure
gregkh/linux@a61524da59a2 fuse: fix invalidate lock leak on open O_TRUNC DAX failure
gregkh/linux@40102612180f usb: usbtest: disable dynamic ID support
gregkh/linux@178f59a0bccd usb: gadget: f_tcm: keep port count until LUN teardown completes
gregkh/linux@03ced5da6120 tls: device: fix out-of-bounds write in tls_append_frag()
gregkh/linux@4bc0dfa28dca xfrm: espintcp: fix UAF during close
gregkh/linux@6af5cdb03819 xfrm: drop ESP-in-TCP packets with no ingress device
gregkh/linux@1b7e066eabcc xfrm: ah6: validate routing header segments_left
gregkh/linux@ba0c110c2058 xfrm: fix xfrm_state_construct() auth-trunc leak
gregkh/linux@22226a2c3b90 net: bridge: mcast: fix use-after-free of a master VLAN's multicast context
gregkh/linux@9039e4f3e1c0 ipv6: seg6: clear IPv4 control block on IPIP decapsulation
gregkh/linux@993a31428da0 mm/swap: reject swapon() on filesystem-level encrypted files
gregkh/linux@978e45ae1672 crypto: atmel-tdes - use scatterlist length before DMA mapping
gregkh/linux@c9e0f06a0231 crypto: qce - fix CCM AAD buffer underallocation
gregkh/linux@e72a795df521 crypto: mxs-dcp - fix source scatterlist length access
gregkh/linux@531eeed53553 crypto: qce - Remove unsafe/deprecated algorithms
gregkh/linux@f6079dca67ec KVM: s390: vsie: zero stale crypto bits
gregkh/linux@ebf6edaf4871 Bluetooth: hci_core: Fix hci_conn_hash_lookup_cis
gregkh/linux@71cfda2fdf78 usb: core: Add lock to usb_wakeup_notification()
gregkh/linux@e4505facd9df usb: core: Strengthen error handling in hub_hub_status()
gregkh/linux@e9c00d7533f9 ALSA: usb-audio: fix OOB write in snd_usbmidi_novation_output()
gregkh/linux@3f06f3f5b162 ALSA: usb-audio: Complete cleanup after system-resume errors
gregkh/linux@6b8cf5422c7e USB: serial: option: fix slab OOB read in interrupt URB callback
gregkh/linux@9a12c4813de4 USB: serial: spcp8x5: drop broken carrier detect support
gregkh/linux@bb572801290e USB: c67x00: fix use-after-free in c67x00_add_iso_urb()
gregkh/linux@bd4bffc621a8 usb: usbfs: fix use-after-free of usb_device in usbdev_release()
gregkh/linux@cf82dcca9634 Linux 6.1.187
gregkh/linux@f3ce8be89372 ALSA: aloop: Fix racy access at PCM trigger
gregkh/linux@3727a3541788 ALSA: aloop: Fix peer runtime UAF during format-change stop
gregkh/linux@a51363d8b28e alpha: fix ieee_swcr_to_fpcr setting FPCR_DNOD unconditionally
gregkh/linux@096eeed5c31b alpha: don't leak hardware-fabricated FP exception bits to user space
gregkh/linux@753a220084df clocksource/drivers/timer-sun4i: Advertise a real minimum delta
gregkh/linux@a3ca92fc2224 powerpc/pseries/iommu: switch to Default DMA window during kdump
gregkh/linux@a17b345daff4 timers/itimer: Zero-init old itimerval before copy to userspace
gregkh/linux@a471d9a5add6 include/linux/list.h: mark list_add and __list_add as __always_inline
gregkh/linux@8c6d63d434eb mm/migrate: report RCU-tasks quiescent states in migrate_pages_batch()
gregkh/linux@a67a00a70a7c mm/vmscan: report RCU-tasks quiescent states in shrink_lruvec()
gregkh/linux@5c6f87d33733 mm: memcg: stop reclaim when a limit update is superseded
gregkh/linux@5029fbdb0cf2 tools/compiler: match glibc 2.42 definition of attribute_const
gregkh/linux@c6875423ad84 x86/tdx: Fix off-by-one in port I/O handling
gregkh/linux@68dcb7161304 x86/insn-eval: Move assign_register() out of KVM as insn_assign_reg()
gregkh/linux@8d13b99069c4 hwtracing: hisi_ptt: Propagate DMA reset timeout in trace_start()
gregkh/linux@98d06fb9865a tracing: Fix crash passing ERR_PTR to kthread_stop()
gregkh/linux@441aa6742dff tracing: Fix use-after-free with same-name named triggers
gregkh/linux@04004fa33730 device property: fix infinite loop in fwnode_for_each_child_node()
gregkh/linux@3e855f4ee24a powerpc/powermac: fix OF node refcount
gregkh/linux@26ccfe7d69e2 rapidio: mport_cdev: fix use-after-free in dma_req_free()
gregkh/linux@8027f82c0f54 Revert "media: v4l2-dev: fix error handling in __video_register_device()"
gregkh/linux@25862514595e staging: greybus: hid: fix SET_REPORT return value
gregkh/linux@5ce747918a25 usb: dwc2: gadget: Exit partial power down state when changing USB pull-up
gregkh/linux@7269dbcd6ce8 USB: phy: fsl-usb: fix missing static keywords
gregkh/linux@6f46762196f0 usb: gadget: u_audio: Fix use-after-free on sound card disconnect
gregkh/linux@bfa705aca113 usb: gadget: snps_udc_plat: clean up PHY on probe deferral
gregkh/linux@78a14ea22848 usb: gadget: f_tcm: fix deadlock in usbg_make_tpg()
gregkh/linux@502a7f5b79b7 usb: gadget: uvc: fix dangling pointers in uvc_function_bind() and uvc_function_unbind()
gregkh/linux@bafddd0f20b5 usb: gadget: f_fs: Prevent deadlock during ep0 read loop
gregkh/linux@2564ac3d3b8b fpga: altera-cvp: Avoid out-of-bounds read in trailing byte write
gregkh/linux@8bf8aaf2f74d HID: sensor-hub: Fix out-of-bounds write in sensor_hub_get_feature
gregkh/linux@3ada20e110bf lib/ucs2_string.c: fix out-of-bounds read in ucs2_strnlen()
gregkh/linux@37ac45f7d6e3 media: cec: stm32: prevent out-of-bounds write on RX overflow
gregkh/linux@d40838a63f2b media: vicodec: fix out-of-bounds write in FWHT encoder
gregkh/linux@4a1bb1f9f24a nilfs2: fix slab-out-of-bounds in nilfs_direct_propagate after truncation
gregkh/linux@f7f6c3e32a31 of: fix out-of-bounds read in of_alias_scan() stem parser
gregkh/linux@8cc3da72cf57 ubifs: fix out-of-bounds read in signature length check
gregkh/linux@467b1ad024c2 NFSD: Encode only the status in NFS-ACL v2 GETACL error replies
gregkh/linux@10b0bea9d7b2 NFSD: Fix off-by-one in DRC bucket pruning limit
gregkh/linux@659ee3da0731 NFSD: restart ssc_expire_umount walk after dropping nfsd_ssc_lock
gregkh/linux@9f4434893a27 NFSD: remove flawed WARN_ON_ONCE from nfsd_mode_check
gregkh/linux@ad3e41855325 NFSv4.1: fix layout segment leak on the pnfs_layout_process() forget path
gregkh/linux@8a08ffe73eb2 nfsd: Reset write verifier when async COPY writeback fails
gregkh/linux@7d501beeca1b nfsd: return NFS4ERR_NOTSUPP for unsupported netloc4 types
gregkh/linux@4728504c0216 nfsd: sample writeback error cursor before async COPY loop
gregkh/linux@8661d3cb38fd nfsd: validate symlink target length in NFSv4 CREATE
gregkh/linux@215030513488 nfsd: add fh_want_write() for early-verified SETATTR in nfsd_proc_setattr()
gregkh/linux@ec896c5fbdd3 nfsd: add filehandle match check to nfsd4_delegreturn()
gregkh/linux@2d9846fd1c76 nfsd: block non-SAVEFH ops after FOREIGN PUTFH to prevent NULL deref
gregkh/linux@6bba72b8ee68 nfsd: check client ownership when cancelling a copy-notify stateid
gregkh/linux@8eeca993357a nfsd: fix cpntf publish race in nfs4_init_cp_state
gregkh/linux@69a997edc9b9 nfsd: fix version mismatch loops in nfsd_acl_init_request()
gregkh/linux@65a72b721943 nfsd: fix XDR length calculation in nfsd4_ff_encode_layoutget
gregkh/linux@9be67a6be48d nfsd: fix XDR padding calculation in ff_encode_getdeviceinfo
gregkh/linux@4415a692346a nfsd: initialize copy-notify stateid before publishing it
gregkh/linux@5296a2442d12 nfsd: reject out-of-range useconds in NFSv2 SETATTR/CREATE
gregkh/linux@7c4e20b66519 nfsd: reject reclaim LOCK after RECLAIM_COMPLETE
gregkh/linux@a1fca0f7bbb7 nfsd: revoke copy-notify stateids before dropping their reference
gregkh/linux@b8bad5a11416 NFSD: Prevent lock owner use-after-free during client teardown
gregkh/linux@4aeb93daadf3 libceph: reject buckets with mismatched CRUSH ids
gregkh/linux@23eb34a53a53 ceph: fix UAF in __kick_flushing_caps() on cf entry freed during unlock
gregkh/linux@8c823bbab3c2 ceph: reject export_targets ranks >= CEPH_MAX_MDS in mdsmap decode
gregkh/linux@55a06b32438c ceph: bound num_export_targets array for mds info v2/v3
gregkh/linux@cb0cd79ae804 ceph: bound xattr value length in __build_xattrs()
gregkh/linux@695c85dc345a audit: avoid dropping live tree ref on fsnotify rule autoremove
gregkh/linux@f3d1ae1e6bc4 cifs: fix loff_t underflow in cifs_remap_file_range() when len == 0
gregkh/linux@14f60e959b5a smb: client: clear ce->tgthint in free_tgts()
gregkh/linux@2b4a25baa0b9 smb: client: fix ALIGN() overflow in symlink_data() error context loop
gregkh/linux@a48328afbc3f smb: client: harden DFS cache against invalid target hints
gregkh/linux@8dc662af0191 HID: picolcd: clamp eeprom debugfs read to bytes actually received
gregkh/linux@b3cc411daa50 HID: roccat: free buffered reports when destroying device
gregkh/linux@10b05fafff93 HID: sensor: custom: Fix field sysfs group cleanup on failure
gregkh/linux@fffcfa367072 HID: mcp2221: validate report size in mcp2221_raw_event()
gregkh/linux@1e90b1703ee1 fs/ntfs3: validate dirty page table on log replay
gregkh/linux@cd40eee4923d fs/ntfs3: fix info-leak on partial LZNT decompress in ni_read_frame()
gregkh/linux@bb742d103086 fs/ntfs3: bound page_lcns[] index by the log record
gregkh/linux@cdf79aade3b1 eCryptfs: bound the packet-length peek to the user buffer
gregkh/linux@215a5cbf4f16 ecryptfs: fix tag 11 packet exact-fit size check
gregkh/linux@956541efd125 ecryptfs: hold msg ctx list lock when cleaning daemon queue
gregkh/linux@3bd9bb3e167a ecryptfs: pass packet set buffer size to parser
gregkh/linux@d28024140811 ecryptfs: reject oversized encrypted_key_size in parse_tag_3_packet
gregkh/linux@2e5afed9503d ecryptfs: reject too-small tag 70 packets
gregkh/linux@590fc6140e29 ecryptfs: release message context on send failure
gregkh/linux@35c04a48892a ecryptfs: show filename encryption options
gregkh/linux@97d71ebee48c efivarfs: Rate limit statfs() handler
gregkh/linux@c335c0b3c39e fat: restore original value when fat_ent_write failed
gregkh/linux@f33a96e49284 fbdev: omapfb: panel-dsi-cm: initialize lock before registering display
gregkh/linux@16c2cfdaa797 fbdev: pvr2fb: correct user pointer annotation and sentinel initializer
gregkh/linux@17518e7123f7 fbdev: uvesafb: unregister connector callback on init failure
gregkh/linux@fc71c6c3d3e3 forcedeth: fix off-by-one when saving/restoring non-PCI config space
gregkh/linux@43579d5d149d fpga: stratix10-soc: Fix SVC mailbox handling during reconfiguration
gregkh/linux@9ecef057b7a7 hsi: omap_ssi_core: fix missing DMA mask setup for SSI controller device
gregkh/linux@d3af83e32756 ACPI: pfr_update: fix stack buffer overflow in query_capability()
gregkh/linux@5ab5d46db858 alpha/PCI: Fix I/O port accessor argument order in pci_legacy_write()
gregkh/linux@28a9a9b12612 alpha: marvel: Fix irq_set_status_flags to use correct IRQ number
gregkh/linux@9213d7dbdda2 alpha: marvel: Fix lock ordering in init_io7_irqs()
gregkh/linux@41172443acdb ARM: 9477/1: Disable broken eBPF JIT on the Risc PC
gregkh/linux@07baa310ea32 ata: libata-scsi: fix DSM TRIM for sector sizes larger than 2048 bytes
gregkh/linux@22586432c1ab auxdisplay: charlcd: cancel backlight work on registration failure
gregkh/linux@128aa24b3556 Bluetooth: btusb: Add ASUS USB-BT540 for Realtek 8761CU
gregkh/linux@566d0ed699a1 Bluetooth: btusb: Add ASUS USB-BT600 for Realtek 8761CU
gregkh/linux@b6902adf81ea Bluetooth: eir: Fix OOB read in eir_get_service_data()
gregkh/linux@07d4516e3eb1 bnx2x: fix double free in bnx2x_init_firmware() error path
gregkh/linux@a6183bc683f9 bpf: Harden bloom filter sizing and indexing on 32-bit kernels
gregkh/linux@e9fa68b89214 dm-era: fix shadowed superblock leak on take-snap failure
gregkh/linux@7b035983b895 dm raid1: reserve space for NUL-terminator in build_constructor_string()
gregkh/linux@a530a9a419a7 dm array: reject an array block whose value size is not the caller's
gregkh/linux@89ee0c8ea0cd cpufreq: schedutil: Fix rate limit overflow
gregkh/linux@e5430425006a Bluetooth: hci_bcm: fix usage_count leak when autosuspend_delay is negative
gregkh/linux@97ee03373508 Bluetooth: hci_uart: Fix false success return in hci_uart_setup()
gregkh/linux@1702f12cf59a Bluetooth: ISO: fix use-after-free of listener socket in iso_conn_ready
gregkh/linux@7ded32641064 Bluetooth: RFCOMM: serialize security confirmation handling
gregkh/linux@f92ca441260e Bluetooth: hci_conn: re-enable advertising only for peripheral role
gregkh/linux@cea69357cb4f Bluetooth: hci_event: clear HCI_LE_ADV only on a created connection
gregkh/linux@a97429aebf38 Bluetooth: hci_h5: fix usage_count leak when autosuspend_delay is negative
gregkh/linux@4b5db3fdda43 Bluetooth: hci_intel: fix usage_count leak when autosuspend_delay is negative
gregkh/linux@1909df2d0664 ipip: fix skb leak in collect_md mode when metadata_dst allocation fails
gregkh/linux@629d5557e635 ip6_tunnel: use skb_cow_head() in ip6_tnl_xmit()
gregkh/linux@b1e95e3602d8 ip6_gre: fix hardware header length for NBMA tunnels
gregkh/linux@9c6be625e1a7 ipv6: use RCU iterator to dump route exceptions
gregkh/linux@1c391696d279 libnvdimm/labels: Prevent integer overflow in __nd_label_validate()
gregkh/linux@8ade140ec13c mailbox: qcom-ipcc: fix duplicate channel allocation across holes
gregkh/linux@323f3a056dbc md: do overflow check for sb->bblog_shift in super_1_load()
gregkh/linux@bfaaff992383 mpls: reload header after pskb_may_pull()
gregkh/linux@954b5ea836eb mptcp: fix uninitialized local_id in syncookie MP_JOIN reconstruction
gregkh/linux@a924ac4c78af SUNRPC: xdr_buf_trim: clamp buf->len to avoid underflow
gregkh/linux@d79d7b9e8acb sunrpc: route to a populated pool in svc_pool_for_cpu()
gregkh/linux@cf239de7fdcc SUNRPC: always drain cache_cleaner before destroying a cache_detail
gregkh/linux@f4579a007731 SUNRPC: Guard svcauth_gss_release() dispatch on rq_auth_stat
gregkh/linux@075d7cfc4df8 SUNRPC: harden gss_krb5_unwrap_v2 against short tokens
gregkh/linux@401f6a5b338d SUNRPC: harden gss_unwrap_resp_priv length checks
gregkh/linux@7f5bcdc8da15 sunrpc: init gssp_lock before publishing proc entry
gregkh/linux@9fc6d6e6db49 SUNRPC: Reject krb5 v2 wrap tokens with oversized ec field
gregkh/linux@addbf02dfe3b svcrdma: Fix offset arithmetic in read_chunk_range
gregkh/linux@3a78b841879c svcrdma: Fix pcl_for_each_segment for empty chunks
gregkh/linux@19f36c6453cd udf: reject VAT indexes equal to the entry count
gregkh/linux@e11d5ae96d5e wifi: ath6kl: clamp assoc request/response lengths before subtracting IE offsets
gregkh/linux@547c757b0819 staging: media: tegra-video: vi: fix probe failure on skipped last port
gregkh/linux@a1311f02eee3 rpmsg: glink: smem: order FIFO read after availability check
gregkh/linux@855376456a4b arm64: dts: rockchip: Fix rk3399-roc-pc-plus analog audio
gregkh/linux@554689ff2d75 remoteproc: scp: Fix device reference leak on failed lookup
gregkh/linux@fa7c9bd2c4a8 qede: Fix NULL pointer dereference in TPA fragment processing
gregkh/linux@4681e731db07 RDMA/cxgb4: Cancel reg_work before freeing device on remove
gregkh/linux@a7f8d26e653e RDMA/ucma: Lock the handler in ucma_set_ib_path()
gregkh/linux@0bde4f140e90 regulator: as3722_get_regulator_dt_data: fix premature of_node_put leaving dangling of_node pointer
gregkh/linux@158c0add9db6 regulator: max8998_pmic_dt_parse_pdata: of_node_put on reg_np after ownership transferred to rdata
gregkh/linux@6e5924644ef4 orangefs: fix double-free of trailer_buf on readdir copy failure
gregkh/linux@0ef38d53bca5 orangefs: skip leading spaces before parsing client debug masks
gregkh/linux@f0261b3aca02 ocfs2: always run deallocs on copy-on-write completion
gregkh/linux@006c96ea488e ocfs2: bound namelen in dlm_migrate_request_handler
gregkh/linux@0e999d56917f ocfs2: validate lengths in dlm_mig_lockres_handler
gregkh/linux@c8b02f4ee91e ocfs2: validate rl_used against rl_count in refcount block validator
gregkh/linux@0cbc2f20a6ea ocfs2: cluster: don't sleep while holding o2hb_live_lock in o2hb_region_pin()
gregkh/linux@9b7c548c0416 ocfs2: cluster: avoid lock order inversion in o2hb_region_pin() from drop_item
gregkh/linux@75452e0ee890 ocfs2: cluster: fix o2hb_dependent_users leak on pin failure
gregkh/linux@1ae7029823ae ocfs2: fix readdir position truncation on 32-bit kernels
gregkh/linux@1f2e92e499d8 openrisc: fix arbitrary kernel memory access via or1k_atomic syscall
gregkh/linux@4477222e2916 openvswitch: only skb_tx_error() a packet we are about to drop
gregkh/linux@4e00e8b87bb0 arm64: compat: Fix decrementing LDM/STM alignment emulation
gregkh/linux@bc08f79c0f18 ASoC: amd: yc: Add DMI entry for MSI Thin A15 B7UC
gregkh/linux@41834b431ddd hwmon: (max6621) fix negative temperature offset and crit readings
gregkh/linux@86ca676cd3e3 hwmon: (max6621) fix temperature clamp range
gregkh/linux@550c19222c71 lockd: pin next file across nlm_inspect_file lock-drop
gregkh/linux@9d46462105fe nvme: nvme-fc: Fix nvme_fc_create_hw_io_queues() queue deletion in error path
gregkh/linux@415f2772ebcb nvme: zero the discard fallback page
gregkh/linux@7ed0b61bbc14 nvme-tcp: do not accept C2HData based on blk_rq_payload_bytes() alone
gregkh/linux@49a4dcf57608 nvme-tcp: fix host memory disclosure on R2T for a read command
gregkh/linux@aa107e3a68f4 nvme-tcp: reject a read that transferred too few bytes
gregkh/linux@ed85fe91a61b sctp: stop processing a packet once its association is deleted
gregkh/linux@0422b092a3d4 sctp: drop a chunk if its transport was removed
gregkh/linux@68891125af5a sctp: fix NULL deref on untransmitted RECONF completion
gregkh/linux@afd9b447ffcc sctp: distinguish sequence zero from wildcard in reconf lookup
gregkh/linux@793519e34386 sctp: fix stream->outcnt underflow on duplicate RECONF responses
gregkh/linux@a279e64c907f power: supply: bq24257: fix use-after-free on remove
gregkh/linux@fd08d4dbbec0 power: supply: bq256xx: drain usb_work before freeing the charger
gregkh/linux@a1905375dfc0 power: supply: cros_usbpd-charger: bound the EC-reported port count
gregkh/linux@dce1750ddbd3 power: supply: cros_usbpd: Limit port counts to EC_USB_PD_MAX_PORTS
gregkh/linux@035cc6bc4d41 power: supply: lp8727: fix use-after-free in lp8727_release_irq()
gregkh/linux@e9fffe10bd79 power: supply: twl4030_charger: cancel workers via devm
gregkh/linux@a9a7bb801c44 power: supply: ucs1002: fix use-after-free on remove
gregkh/linux@dc946222e4b5 power: supply: max17040: synchronize work cancellation on suspend
gregkh/linux@921ff697bb6f s390/dasd: Do not complete a failed ESE read as successful
gregkh/linux@bd8b4572528f s390/dasd: Guard sysfs discipline callbacks against unallocated private data
gregkh/linux@d0a2f97d8c97 s390/dasd: Propagate partial completion length across ERP recovery
gregkh/linux@53e03a150c4c PCI: Fix 32-bit config write in Intel PCH Root Port MPC ACS quirk
gregkh/linux@7f08a7f79336 PCI: meson: Fix GPIO state while requesting PERST#
gregkh/linux@ff72454bd750 PCI: Add ACS quirk for Pericom PI7C9X2G608 switches [12d8:2608]
gregkh/linux@ca4915276192 PCI/sysfs: Avoid spurious runtime PM wakeup on config space accesses
gregkh/linux@899eacfbe403 PCI/MSI: Enable memory decoding before restoring MSI-X messages
gregkh/linux@3ed89a17a0a8 PCI/proc: Avoid spurious runtime PM wakeup on config space accesses
gregkh/linux@53407535d49e PCI/proc: Use file_ns_capable() when checking config space read access
gregkh/linux@3118451204a5 PCI/proc: Warn on writes to kernel-exclusive config space regions
gregkh/linux@38e219b8995f iommu/vt-d: Fix no_iommu to disable platform opt-in
gregkh/linux@26f554f9f0fb platform/x86: dell-wmi-sysman: Don't hex dump attribute security buffer
gregkh/linux@806409f12fdb mmc: via-sdmmc: stop card-detect handling on probe failure
gregkh/linux@b207c6ee0423 platform/x86: ishtp_eclite: Fix ACPI device reference leak in probe error path
gregkh/linux@324880f94ba3 platform/chrome: sensorhub: Bound the EC-reported sensor number
gregkh/linux@9a671125d422 interconnect: Fix use after free in icc_get() and of_icc_get_by_index()
gregkh/linux@e527cd4e8006 ipmi: ipmb: validate write message length
gregkh/linux@f390b0e781ca ipmi: si: Fix NULL pointer dereference after failed registration
gregkh/linux@712330f8a429 net/iucv: filter frames in afiucv_hs_rcv() by ingress device
gregkh/linux@ced3e18cd9b9 xdp: fix zero-copy frame layout
gregkh/linux@e93ace1f4617 slip: fix use-after-free in sl_sync()
gregkh/linux@2d2b00f2f861 net: usb: qmi_wwan: add Telit Cinterion FE990D50 composition
gregkh/linux@18ef24cdb2eb net: tun: bound receive headroom
gregkh/linux@c15ef9a5bf59 net: openvswitch: fix flow mask use-after-free on flow deletion
gregkh/linux@8cf590f0761e net: openvswitch: fix nf_connlabels leak in ovs_ct_init
gregkh/linux@29ffd972531f net: ravb: avoid dereferencing an invalid PTP clock
gregkh/linux@d8fd31496b1a NTB: ntb_transport: Recycle TX entries before client callbacks
gregkh/linux@45cc11035165 NTB: ntb_transport: Fail TX enqueue when the QP link is down
gregkh/linux@9b0fa8a9e105 NTB: ntb_transport: Reject oversized TX buffers
gregkh/linux@daf7aa34f9c3 net: ntb_netdev: Avoid double-accounting netif_rx() drops
gregkh/linux@9f294ee96b58 net: ntb_netdev: Count packets dropped on RX refill failure
gregkh/linux@e20227019d9d net/smc: fix socket refcount leak in smc_switch_conns()
gregkh/linux@dadd97c8296b net/smc: fix use-after-free in smc_rx_pipe_buf_release()
gregkh/linux@d36e75f56691 net: cap advertised IP tunnel headroom
gregkh/linux@fd03acb6af5d net: fix spurious TX timeout after dev_activate()
gregkh/linux@363c4252ffc4 net: skbuff: don't touch shared zerocopy state in skb_tx_error()
gregkh/linux@9ae92198c24d seg6: reset IP6CB after IPv6 decapsulation
gregkh/linux@0c8a3c773823 ALSA: 6fire: bound the MIDI event length from the device
gregkh/linux@e35d11102ef0 ALSA: aloop: Check card index validity at probe
gregkh/linux@3c00004f134f ALSA: bcd2000: clear the URB pointers on disconnect
gregkh/linux@3a997371ac29 ALSA: mpu401: Check card index validity at probe
gregkh/linux@5168a6241e95 ALSA: mts64: Check card index validity at probe
gregkh/linux@a5f405adb022 ALSA: pcxhr: initialize mutexes before requesting threaded IRQ
gregkh/linux@0048994854f3 ALSA: portman2x4: Check card index validity at probe
gregkh/linux@1cb30691dc89 ALSA: serial-u16550: Check card index validity at probe
gregkh/linux@ffefee7daf23 ALSA: virmidi: Check card index validity at probe
gregkh/linux@45ac4b2b8497 cgroup/cpuset: Fix misplaced DL migration reset
gregkh/linux@62ab05bad834 PCI: hv: Set irq_retrigger callback for the Hyper-V PCI MSI irqchip
gregkh/linux@dca04b80a457 x86/tdx: Fix zero-extension for 32-bit port I/O
gregkh/linux@6a42e2ef9402 arch_numa: avoid false positive fortify warning in setup_node_to_cpumask_map()
gregkh/linux@564d17573ef6 dm-stats: fix a crash if allocation of per-cpu data fails
gregkh/linux@2cc7e3b0ff85 dm-switch: use WRITE_ONCE() in switch_region_table_write()
gregkh/linux@c64daaaba08e i3c: master: Fix info leak and UAF in device unregister path
gregkh/linux@7cc5ba756bc1 i3c: master: svc: bound IBI payload to the requested max_payload_len
gregkh/linux@a732c4f36a4c wifi: brcmfmac: Fix memory leak in brcmf_sdio_read_control()
gregkh/linux@9e06c9c8a1f1 wifi: mwifiex: Detach sync cmd buffer on interrupted wait
gregkh/linux@368bd73c4b4e wifi: rtl818x: initialize eeprom_93cx6 struct to zero
gregkh/linux@68676ce3313b wifi: rtw88: Fix potential memory leak in rtw_txq_push_skb()
gregkh/linux@33d29aeb4c0e wifi: mt76: mt7615: avoid waiting for mac work under the mt76 mutex
gregkh/linux@f3313d952fc3 vsock/virtio: flush works in dependency order
gregkh/linux@bf76d61e118b w1: ds28e17: reject an oversize length on an I2C block read
gregkh/linux@ab5525d80dc7 xarray: honor XA_FLAGS_ACCOUNT in xas_split_alloc()
gregkh/linux@07c2544a47da tpm: tpm_i2c_nuvoton: disable IRQ on wait timeout
gregkh/linux@148b0dae2a17 signal: avoid shared siginfo namespace rewrites
gregkh/linux@7c7fe043f309 smack: fix cred UAF in smack_file_send_sigiotask()
gregkh/linux@45f80ab3a614 taskstats: fix cpumask parsing cutting off the last character
gregkh/linux@49aaf7621eff timer: Keep debugobjects state consistent in migrate_timer_list()
gregkh/linux@08d3a8741f93 udf: Fix i_lenExtents truncation on 32-bit kernels
gregkh/linux@2fcd790518f8 platform/chrome: sensorhub: Fix dropped timestamp events and log spam
gregkh/linux@767ec2a65cc0 net: skbuff: don't skb_tx_error() the source skb in skb_zerocopy()
gregkh/linux@64a09bc1fe21 net: openvswitch: fix kernel-doc warnings in internal headers
gregkh/linux@3b41d907400c openvswitch: Fix CT limit teardown use-after-free
gregkh/linux@d739e3231847 landlock: Require LANDLOCK_ACCESS_FS_MAKE_REG for whiteout creation
gregkh/linux@523c881661dd netfilter: nf_tables: make nft_object rhltable per table
gregkh/linux@de75382d6e35 fsnotify: Fix stale object mask after concurrent mark updates
gregkh/linux@a7e761ba55ef tcp: fix potential race in tcp_v6_syn_recv_sock()
gregkh/linux@22bb836fc133 entry: Fix seccomp bypass after ptrace with TSYNC
gregkh/linux@c760c3c78321 selinux: avoid implicit conversions in services code
gregkh/linux@3480c081c23d selinux: reject an unclaimed class value in security_get_classes()
gregkh/linux@20e553166ca2 ALSA: seq: Fix port lock leak in deliver_to_subscribers()
gregkh/linux@d8c123e43430 net: ntb_netdev: Fix TX busy and drop handling
gregkh/linux@371425d4be77 vxlan: use pskb_network_may_pull() for transmit path header pulls
gregkh/linux@a6b2ba3b4ff4 tracing/mmiotrace: Remove reference to unused per CPU data pointer
gregkh/linux@4e4ab09db789 tracing/mmiotrace: Add NULL check for mmio_trace_array in logging functions
gregkh/linux@be167981c33b mm/huge_memory: use folio's memcg inside __folio_split()
gregkh/linux@fd2cbe08c6cc scsi: core: Fill in DMA padding bytes in scsi_alloc_sgtables()
gregkh/linux@67c6726dd604 usb: image: mdc800: change kmalloc() to kzalloc()
gregkh/linux@2dae0e3a59e3 ALSA: usb-audio: fix OOB write in snd_usbmidi_us122l_output()
gregkh/linux@4a54a54654a4 clk: qcom: gcc-mdm9607: Increase delay for USB PHY reset
gregkh/linux@be0f7745f883 media: usbtv: keep device alive while ALSA card exists
gregkh/linux@9c261a83131e usb-storage: ene_ub6250: fix race between scan work and probe
gregkh/linux@8f7658bd7ff0 usb: f_mass_storage: Bump local buffer size in fsg_common_create_luns()
gregkh/linux@1ffed96ef986 usb: typec: ucsi: displayport: Fix OOB altmode array index
gregkh/linux@87cbf9410b12 USB: gadget: fix NULL pointer dereference in gadget_dev_ioctl()
gregkh/linux@3a9691fff79b usb: gadget: fix null pointer dereference in usb_put_function_instance()
gregkh/linux@3a6457ebf390 staging: rtl8723bs: fix OOB read / stack overflow in rtw_get_wps_attr()
gregkh/linux@1410bce22351 staging: rtl8723bs: fix OOB read in rtw_action_frame_parse()
gregkh/linux@f655391df4e1 thermal/drivers/imx: Disable clock on runtime resume failure
gregkh/linux@4e4c2d0c0e0f thermal/drivers/qoriq: Disable clock on resume failure
gregkh/linux@b19dc17ed963 scsi: target: iscsi: Reserve a terminator byte for the login payload
gregkh/linux@0205db768570 scsi: pm8001: Use rollback index when freeing MSI-X vectors
gregkh/linux@baf392c19b7a mm/damon/sysfs: kobject_del() region and target (error) dirs
gregkh/linux@53ede3fa684b mm/damon/sysfs: kobject_del() target (normal), context and kdamond dirs
gregkh/linux@220ee9e04ca3 futex: Prevent rcuwait use-after-free during requeue PI
gregkh/linux@183da103022e HID: rmi: fix OOB access with undersized RMI reports
gregkh/linux@84781a1f3c5d HID: wacom: validate report length in wacom_intuos_pro2_bt_irq
gregkh/linux@b02e35b81176 dm: fix race when loading and unloading a table
gregkh/linux@3f04e6520d9a dm: fix resume-vs-remove race
gregkh/linux@1ebc214d36a6 dmaengine: dw-edma: Complete descriptors before pausing
gregkh/linux@07e50cef557d dmaengine: dw-edma: Initialize IRQ data before requesting IRQs
gregkh/linux@1312ae33b914 cpuidle: dt_idle_genpd: kfree() the original name allocation
gregkh/linux@d49da8aabc72 block: flag zoned disks with GENHD_FL_NO_PART
gregkh/linux@21e325980ad4 ata: ahci: work around lost interrupts on Marvell 88SE61xx
gregkh/linux@0de5b525c0cd ima: Check for ERR_PTR from dentry_path() in validate_hash_algo()
gregkh/linux@8f406205003f kprobes: Protect kprobe_blacklist with RCU
gregkh/linux@db947097f77a Input: aiptek - validate raw macro indices before updating state
gregkh/linux@5b2329845723 rtc: rzn1: Fix weekday underflow when alarm crosses month boundary
gregkh/linux@494cd798b45a rtc: rzn1: Disable alarm interrupt before reprogramming alarm registers
gregkh/linux@be0628a101ac perf/x86/intel: Fix kernel address leakages in LBR stack
gregkh/linux@1f1bcd4eca6c i2c: core: fix debugfs UAF on adapter removal
gregkh/linux@dd2c1e6747b1 i2c: mux: Fix channel node leak on adapter add failure
gregkh/linux@f86ff9238b0c ALSA: harmony: initialize locks before requesting IRQ
gregkh/linux@b599e7f16441 ALSA: pcm: Fix race between non-atomic ops and trigger-start
gregkh/linux@5b115d932f6e nvme-tcp: check the data direction of a C2HData PDU
gregkh/linux@58dc6035b79c nvmet-tcp: fix out-of-bounds write when receiving an over-long PDU
gregkh/linux@14beef7d4f12 nvmet-tcp: reject unsolicited H2CData PDUs
gregkh/linux@d9a5cc17dcde Revert "irqchip/mbigen: Fix mbigen node address layout"
gregkh/linux@c22e1898553f mm/hugetlb: fix missing migratable flag on same-node hugetlb migration
gregkh/linux@f6c5313aae79 nvdimm/btt: reject an arena whose nfree is below the lane count
gregkh/linux@21f063e3c2b1 parisc: eisa: Fix infinite loop when parsing invalid IRQ value
gregkh/linux@aa4157a68e18 parisc: Fix alignment of asm statements in head.S
gregkh/linux@4221ebda49c7 powerpc/pseries: Handle and log pseries-wdt registration failures
gregkh/linux@7a1a17cc3e9c powerpc/pseries: Move H_WATCHDOG definitions to a common header
gregkh/linux@4d24719def7e powerpc/crash: stop watchdogs before booting kdump kernel
gregkh/linux@c49e4e6e7884 s390/vfio-ap: Fix stale do_remove flag across iterations in vfio_ap_mdev_cfg_remove
gregkh/linux@12871a4269f1 s390/vfio-ap: Fix control domain removal in vfio_ap_mdev_cfg_remove
gregkh/linux@f58e824de857 s390/vfio-ap: Fix hot-unplug skipped when last AP adapter or domain removed
gregkh/linux@23202f89da84 s390/vfio-ap: Fix required lock not held during update of ap_matrix_mdev object
gregkh/linux@875daa3c7508 mtd: afs: validate v2 image info bounds
gregkh/linux@698944132083 mtd: mtdoops: free page bitmap when the backing MTD is removed
gregkh/linux@86948f81964e mtd: rawnand: validate ONFI extended parameter page sections
gregkh/linux@f4b4ae763b5d batman-adv: fix stale receive device on merged fragments
gregkh/linux@a170d4617e8c batman-adv: dat: avoid unaligned fault in IP extraction
gregkh/linux@aacffa780a37 batman-adv: bla: fix freeing of claims on meshif deletion
gregkh/linux@144348c76e78 batman-adv: bla: prevent CRC corruptions after claim flush
gregkh/linux@f20feedf85c3 clk: qcom: gcc-msm8916: Fix enable_reg for gcc_blsp1_sleep_clk
gregkh/linux@d12b80ad2804 clk: qcom: gcc-msm8939: Fix enable_reg for gcc_blsp1_sleep_clk
gregkh/linux@b0c566f26144 clk: qcom: gcc-mdm9607: Drop incorrect apss_tcu_clk_src
gregkh/linux@e265b9afcc7d clk: qcom: gcc-mdm9607: Drop incorrect system_noc_bfdcd_clk_src
gregkh/linux@eac2f377cc2b clk: qcom: gcc-mdm9607: Fix enable_reg for gcc_blsp1_sleep_clk
gregkh/linux@950785ba9991 clk: qcom: gcc-mdm9607: Fix halt_reg for gcc_apss_axi_clk
gregkh/linux@0c418de857d8 clk: qcom: gcc-mdm9607: Drop incorrect BIMC PLL and related clocks
gregkh/linux@f3d0ae50a943 i2c: mux: demux-pinctrl: fix OF node leak on kstrdup failure
gregkh/linux@a04722542c76 ASoC: cs35l33: drain threaded IRQ before runtime suspend
gregkh/linux@5b0637396199 ASoC: cs35l34: drain threaded IRQ before runtime suspend
gregkh/linux@9f71d345681e ASoC: fsl: mpc5200-i2s: Free DMA resources on probe failure
gregkh/linux@e3757d36beaa AsoC: intel: sst: fix PCI device reference leak on probe failure
gregkh/linux@c228e96ffc17 ASoC: samsung: aries_audio_probe: double of_node_put due to direct assignment without of_node_get
gregkh/linux@a595f4d3e4ee iio: chemical: atlas-sensor: fix PM reference leak in buffer postenable
gregkh/linux@3c6b52b258e6 iio: chemical: sgp30: Handle IAQ thread creation failure
gregkh/linux@1d3a7d7dd3ad iio: dac: m62332: Fix regulator reference count imbalance
gregkh/linux@0e1e0201bb1e iio: gyro: mpu3050: fix sign of raw angular velocity readings
gregkh/linux@39b180d9e388 iio: light: cm32181: return zero after writing calibscale
gregkh/linux@7e0c6561170e iio: light: gp2ap002: Disable regulators on resume failure
gregkh/linux@c09dfec957d3 iio: srf04: fix pm_runtime handling on probe error path
gregkh/linux@df16a17f49bf iio: temperature: hid-sensor-temperature: switch to non-devm iio_device_register()
gregkh/linux@8bc609999ec2 KVM: nVMX: Always flush vpid02 on first use
gregkh/linux@1025b938dc43 KVM: nVMX: Service local TLB flushes on failed nested VM-Enter
gregkh/linux@8aa467fe757d KVM: x86: hyper-v: Clamp stimer deadline to avoid livelock
gregkh/linux@71153d326251 KVM: s390: Fix length check __import_wp_info()
gregkh/linux@9071f75cbde3 KVM: s390: Fix memory leak in guest debug handling
gregkh/linux@c85d40255398 KVM: s390: Fix old_data leak in guest debug error path
gregkh/linux@d6280fc540d8 KVM: s390: Free guest debug data on vcpu destroy
gregkh/linux@6830fbc3724b KVM: s390: Take srcu when importing watchpoint data
gregkh/linux@b13d1c1e815f KVM: s390: Zero initialize irq in reinject_machine_check
gregkh/linux@72087c0d2139 KVM: s390: pv: Fix rc/rrc offset for PVM_DUMP
gregkh/linux@70f6f1e41a75 KVM: s390: Restore sigset on error path
gregkh/linux@155d0378ae0d media: airspy: use vb2_video_unregister_device() on disconnect to fix NULL deref
gregkh/linux@370f9c99c819 media: cec: meson: ao-cec-g12a: name the CEC core regmap to avoid debugfs clash
gregkh/linux@4b532b271c91 media: cec: Serialize exclusive follower delivery
gregkh/linux@ce5693b6e3a6 media: cedrus: fix memory leak in cedrus_init_ctrls()
gregkh/linux@61dfa8ded5ef media: cobalt: Avoid freeing ALSA private data twice
gregkh/linux@a5dd3d7fba35 media: cx231xx: reject geometry changes while the VBI queue is busy
gregkh/linux@140ecbcbf978 media: cx23885: cancel NetUP CI work before teardown
gregkh/linux@1abe9524dec0 media: em28xx: defer audio-only extension registration
gregkh/linux@da4b07da6281 media: em28xx: fix use-after-free of dev_next->devlist on disconnect
gregkh/linux@b7a0de398ad5 media: go7007: defer the ALSA v4l2 put until card release
gregkh/linux@8ddb3b69f67b media: i2c: ov02a10: fix endpoint parsing use-after-free
gregkh/linux@8a02ee6c1c4e media: i2c: ov7740: fix use-after-destroy in remove
gregkh/linux@3839b6be2279 media: meson: vdec: fix NULL pointer deref in vdec_try_fmt_common
gregkh/linux@4efd7146dcf9 media: rc: sunxi-cir: Unregister rc device on probe failure
gregkh/linux@0ef9f19010ae media: rtl2832_sdr: use vb2_video_unregister_device() on remove to fix DMA leak
gregkh/linux@0337ab075928 media: rtl2832_sdr: release URBs and stream buffers on start_streaming() failure
gregkh/linux@2542516a147b media: s2255: bound JPEG frame size before copying into the buffer
gregkh/linux@ffc27411ea60 media: s2255: check firmware size before reading trailing marker
gregkh/linux@daa5b32cdf7d media: saa7164: fix cleanup on resource allocation failure
gregkh/linux@3e5568d554c5 media: tda18250: fix possible integer overflow
gregkh/linux@19f394bec178 media: v4l2-ctrls: Allow unknown HDR10 white point and luminance
gregkh/linux@d92dc4692834 media: v4l2-fwnode: Fix fwnode leak in v4l2_fwnode_parse_link
gregkh/linux@52320ccce532 media: venus: fix payload size returned by parse_caps() and parse_alloc_mode()
gregkh/linux@f7e9056b8f14 media: venus: fix payload size calculation in parse_raw_formats()
gregkh/linux@5c35d380bea6 media: video-i2c: fix kthread error pointer left in kthread_vid_cap on failure
gregkh/linux@43fca143e8eb media: vimc: fix pixel format lookup in enum_framesizes
gregkh/linux@3ad6cf275050 media: zoran: Avoid freeing a registered video_device twice
gregkh/linux@97c45c75f5cd scsi: qla2xxx: Zero SFP DMA buffer in FRU/I2C bsg handlers
gregkh/linux@522d6dcdc645 scsi: qla2xxx: Bound i2c->length in I2C bsg handlers
gregkh/linux@2191b0034a2f scsi: qla2xxx: edif: Fix NULL pointer deref in RX SA delete check
gregkh/linux@11cf88433ab1 scsi: qla2xxx: Fix Name Server logout detection on FWI2 adapters
gregkh/linux@267533b28ddf scsi: qla2xxx: Hold vport reference in qla24xx_report_id_acquisition()
gregkh/linux@1a7cb8e7f3bb scsi: qla2xxx: Check entry_status in qla24xx_modify_vp_config()
gregkh/linux@7e3154c97ec1 scsi: qla2xxx: Bound image count in qla2x00_update_fru_versions()
gregkh/linux@802068b9b683 scsi: qla2xxx: Clamp MSI-X derived queue counts to avoid truncation
gregkh/linux@ae979c549cba scsi: qla2xxx: Serialize flash version read in reset handler
gregkh/linux@2c3b17ee53f0 scsi: qla2xxx: Fix cs84xx use-after-free on host teardown
gregkh/linux@edc464a4fc96 scsi: qla2xxx: Fix FCE trace use-after-free during firmware dump
gregkh/linux@13d645a2cdb2 scsi: qla2xxx: Zero mailbox struct in qla2x00_get_firmware_state()
gregkh/linux@f5e245164d18 scsi: qla2xxx: Fix FCE trace enable parsing in debugfs
gregkh/linux@22f44f77da49 scsi: qla2xxx: Don't query firmware state while chip is down
gregkh/linux@b7418198b45b scsi: qla2xxx: Reject non-SCSI SRB on status IOCB fast path
gregkh/linux@d841707fafba scsi: qla2xxx: Fix response queue over-consumption in __qla_consume_iocb()
gregkh/linux@f5b660e0b0d9 scsi: qla2xxx: Avoid double completion in async IOCB timeout
gregkh/linux@6b08c0cb110a scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read
gregkh/linux@1b995cf41574 scsi: qla2xxx: Avoid req_q_map double-read in qla2x00_error_entry()
gregkh/linux@263a571f834c scsi: qla2xxx: Drop vport reference under lock in report ID acquisition
gregkh/linux@7a94cd7e1ff3 scsi: qla2xxx: Use coherent DMA buffer for D_Port diagnostics
gregkh/linux@5ab32dff9102 scsi: qla2xxx: Zero-init bsg stack buffers to avoid info leak
gregkh/linux@652cfcfefa0c f2fs: return symlink writeback errors
gregkh/linux@4d6bb63697b1 f2fs: reject overlapping move range after len expansion
gregkh/linux@3699327156dc f2fs: return writeback error from collapse range
gregkh/linux@5f4690644047 f2fs: fix i_size when pinned fallocate partially fails
gregkh/linux@cb67d706ebd0 drm/bridge: dw-hdmi: fix i2c adapter leak on probe failure
gregkh/linux@f933d0f6fcd6 drm/panel-edp: fix i2c adapter leak on probe failure
gregkh/linux@6729990df9e7 drm: fix race between partial drm_dev_register() failure and ioctl
gregkh/linux@2239e6b49d33 drm/i915: Guard against NULL driver_data in i915_pci_probe()
gregkh/linux@9210647e5cb0 drm/sun4i: fix refcount leak in sun4i_backend_init_sat()
gregkh/linux@71089aa0e841 drm/hibmc: Fix list of formats on the primary plane
gregkh/linux@8c1d6fe527c6 drm/hibmc: Use drm_atomic_helper_check_plane_state()
gregkh/linux@c127ace7af2b drm/amd/display: avoid divide-by-zero in _is_lut_linear()
gregkh/linux@c2340281be4d drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check
gregkh/linux@9096edfd6f2e drm/gud: NUL-terminate TV mode names read from the device
gregkh/linux@06fcaf21c18a drm/gud: validate TV mode names before creating enum property
gregkh/linux@ad834d64d9ee drm/msm/dsi: round 6G byte clock rate to the PLL-achievable value
gregkh/linux@6a6a7aae4681 drm: Fix drm_crtc_commit leak if signaled when PAGE_FLIP_EVENT is used
gregkh/linux@4acb4b62a754 drm/amdgpu: check thunderbolt before switcheroo registration
gregkh/linux@8d7e1173d20b drm/amdgpu: fix autosuspend cleanup during removal
gregkh/linux@c18a99eb0b5b drm/amdgpu: use AMDGPU_GPU_PAGE_SHIFT instead of PAGE_SHIFT
gregkh/linux@4de01d57dc24 drm/nouveau: Use write-combined maps for coherent
gregkh/linux@a1629dfb0114 xhci: fix lost bounce buffers on TDs spanning several ring segments
gregkh/linux@71e9c53220ab tcp: clear sock_ops cb flags before force-closing a child socket
gregkh/linux@0c8f33148565 net/mlx5e: xsk: Fix unlocked writing to ICOSQ
gregkh/linux@664022fa1c93 nvmet-auth: Synchronize timeout work during SQ teardown
gregkh/linux@71a7fc32172d mm/damon/core-kunit: check region count before testing in split_at()
gregkh/linux@f3ebef744383 mm/damon/vaddr: drop last same folio access check optimization
gregkh/linux@2ac4d623c609 mm/damon/paddr: drop last same folio access check reuse optimization
gregkh/linux@fc8f4f4d70dc mm/damon/vaddr-kunit: check region count in three_regions test
gregkh/linux@9ccd8dd34f6f mm/damon/sysfs-schemes: kobject_del() scheme dirs
gregkh/linux@7e84cc228a75 mm/damon/tests/core-kunit: catch test failure in test_merge_regions_of()
gregkh/linux@e160b2ed94a2 bpf: Guard stack limits against 32bit overflow
gregkh/linux@8a912ef5b7c5 ax25: fix use-after-free bugs caused by ax25_ds_del_timer
gregkh/linux@fe9bab1d6441 x86/mm/ident_map: Use gbpages only where full GB page should be mapped.
gregkh/linux@7b1b15058b17 net: hns3: fix kernel crash when 1588 is sent on HIP08 devices
gregkh/linux@cdb329236999 wifi: ath11k: fix RCU stall while reaping monitor destination ring
gregkh/linux@8d0519f511d9 wifi: ath11k: Clear affinity hint before calling ath11k_pcic_free_irq() in error path
gregkh/linux@8da4d7f9141e net: fix NULL pointer dereference in l3mdev_l3_rcv
gregkh/linux@52a266008a94 net/niu: Niu requires MSIX ENTRY_DATA fields touch before entry reads
gregkh/linux@0b3d80c56957 ext4: move ext4_percpu_param_init() before ext4_mb_init()
gregkh/linux@e13194e60217 netfilter: nft_counter: serialize reset with spinlock
gregkh/linux@63c35b8fce77 net: usb: cdc_ncm: add ndpoffset to NDP16 nframes bounds check
gregkh/linux@baf246d6680b net: usb: cdc_ncm: add ndpoffset to NDP32 nframes bounds check
gregkh/linux@1ec86b4b9e28 bridge: mrp: reject zero test interval to avoid OOM panic
gregkh/linux@e357c3cf8a44 net: af_key: zero aligned sockaddr tail in PF_KEY exports
gregkh/linux@0e6b30657bbc bpf: Fix same-register dst/src OOB read and pointer leak in sock_ops
gregkh/linux@41b84c5a603f net: hns3: don't auto enable misc vector
gregkh/linux@8483d7b532be ksmbd: fix overflow in dacloffset bounds check
gregkh/linux@3a9a0a1c38ef ksmbd: fix FSCTL permission bypass by adding a permission check for FSCTL_SET_SPARSE
gregkh/linux@259db2c04586 batman-adv: dat: atomically update mac addresses
gregkh/linux@d5b0e7574da5 batman-adv: bla: avoid CRC corruption due to parallel claim add
gregkh/linux@2003918e13f4 perf sched: Fix register_pid() overflow, strcpy, and BUG_ON
gregkh/linux@1e509a6707d2 clk: meson: align gxbb_32k_clk_sel number of parents with actual count
gregkh/linux@9f8b8636f42a mm/damon/core: skip aging from repeated aggressive merging
gregkh/linux@9268d504cc01 drm: lcdif: Wait for vblank before disabling DMA
gregkh/linux@a51cb4f6c87c drm/rockchip: vop2: Recognise 10-bit YUV422 as YUV format
gregkh/linux@30be38b73d93 drm/bridge: cdns-mhdp8546: Return an error pointer on allocation failure
gregkh/linux@7be4bd21c50a smack: fix incorrect task context in smack_msg_queue_msgrcv
gregkh/linux@71c2a34eeded smack: simplify write handlers of sysfs entries
gregkh/linux@ebf94d311901 smack: deduplicate smackfs/{direct,mapped} file_operations
gregkh/linux@1b2ad9a86d0e smack: restrict smackfs/{direct,mapped} values to 0-255
gregkh/linux@d3a6bed80963 usb: typec: Add partner PD object wrapper
gregkh/linux@85d52accf981 platform/chrome: cros_ec_typec: Set parent of partner PD object
gregkh/linux@7617b210a220 platform/chrome: cros_ec_typec: Reject out-of-bounds PD cap count
gregkh/linux@6787f1828f56 HID: core: quiesce input in hid_hw_stop() to prevent use-after-free
gregkh/linux@7f4b3625cae9 HID: nintendo: Fix imu_timestamp_us double increment per report
gregkh/linux@67d7851f113f HID: roccat: bound device-supplied profile index
gregkh/linux@cff3455b8f5b soc: samsung: exynos-pmu: fix of_node refcount leak in exynos_get_pmu_regmap()
gregkh/linux@34788b291f71 media: cec-pin: Fix event FIFO ordering
gregkh/linux@8ad81dcf1c6b clk: versaclock7: Fix APLL clock leak on probe failure
gregkh/linux@cdb57efa796a clk: moxart: remove unused variables, fix refcount leak
gregkh/linux@b81c2131dbb6 ASoC: rt700-sdw: always drain jack work on remove
gregkh/linux@eb215a0b0045 clk: hisilicon: reset: Use devm_kzalloc to initialize hisi_reset_controller
gregkh/linux@bc12a52fee46 ARM: imx: fix device_node refcount leak in imx_src_init()
gregkh/linux@724842f072cd ARM: imx: fix device_node refcount leaks in imx7_src_init()
gregkh/linux@13701f08509b clk: imx: scu: drop redundant init.ops variable assignment
gregkh/linux@ad4e908096df drm/lima: call drm_mm_init() with a valid allocation range
gregkh/linux@39d707097a08 sched/fair: Fix overflow in update_tg_cfs_runnable()
gregkh/linux@3b552f0a46f2 perf/x86/intel/uncore: Keep PCI PMUs working when MMIO/MSR setup fails
gregkh/linux@dd6b1919e41d pinctrl: bcm2835: Don't remove an unregistered GPIO chip
gregkh/linux@d48a70b7bbe6 media: keymaps: Remove obsolete RC_MAP_RC5_TV keymap define
gregkh/linux@553aa5eacbaa media: keymaps: Remove obsolete RC_MAP_HAUPPAUGE_NEW keymap define
gregkh/linux@ce28032c0c15 perf tests stat_bpf_counters: Fix usage of '==' to address shellcheck warning
gregkh/linux@a46869825e1d perf test: raise limit to 20 percent for perf_stat--bpf-counters_test
gregkh/linux@6a0beecc71df perf test bpf-counters: Add test for BPF event modifier
gregkh/linux@e3ee0216c9d7 perf test stat_bpf_counter.sh: Stabilize the test results
gregkh/linux@a90df8cd560b perf test: Use sqrtloop workload to test bperf event
gregkh/linux@831452414ffc perf test: Fix perf stat --bpf-counters on hybrid machines
gregkh/linux@08c1316f983d perf tests: Fix flakiness in BPF counters test on hybrid systems
gregkh/linux@ce0d8e72836c drm/amdgpu/pm/powerplay: bounds-check voltage index in SMU7 lookup
gregkh/linux@ae25c92d91f2 drm/amdgpu/pm/powerplay: bounds-check voltage index in Vega10 lookup
gregkh/linux@660a19e46942 tools/bpf/bpftool: Reset vmlinux BTF after map commands
gregkh/linux@8e24b1caa78a bpftool: Define _GNU_SOURCE only once
gregkh/linux@08e9a60e06b3 bpftool: clean-up usage of libbpf_get_error()
gregkh/linux@bb1dc5aaf011 tools/bpf/bpftool: Reset vmlinux BTF after struct_ops commands
gregkh/linux@d9ba1a65de7d dmaengine: mediatek: mtk-uart-apdma: Return -ENOMEM on memory allocation failure
gregkh/linux@425630e9eea1 dmaengine: xilinx_dma: Fix channel idle state management in AXIDMA and MCDMA interrupt handlers
gregkh/linux@6008327ba937 dmaengine: hisilicon: Return -ENOMEM on dynamic memory allocation in probe
gregkh/linux@ca885f21cde8 soundwire: qcom: Fix port exhaustion check in stream_alloc_ports
gregkh/linux@3af20556158c iio: orientation: hid-sensor-rotation: Avoid race between callback setup and device exposure
gregkh/linux@863fa63fd149 csky: Fix a4/a5 restoration in syscall trace path
gregkh/linux@9d0d66162a0a selftests/rseq: Replace glibc-specific __GNUC_PREREQ with portable check
gregkh/linux@7e901aaf9582 platform/chrome: sensorhub: Fix memory overread in ring handler
gregkh/linux@eddf53f1edb0 wifi: rtw89: fix HE extended capability length check
gregkh/linux@2ff4101a5c38 perf/x86/amd/uncore: Refactor uncore management
gregkh/linux@7f70d97ee6f5 perf/x86/amd/uncore: Add group validation
gregkh/linux@fb1194b78a16 crypto: qat - clear AES key schedule from stack
gregkh/linux@e1b6427161cf crypto: atmel-ecc - replace min_t with min
gregkh/linux@cf1a58f1521b crypto: atmel-ecc - clean up and improve ECDH comments
gregkh/linux@3ea8b780d68f crypto: atmel-ecc - reject hardware ECDH without a public key
gregkh/linux@bcac9052e194 crypto: atmel-sha204a - fix heap info leak on I2C transfer failure
gregkh/linux@9a692a6a2b47 crypto: sa2ul - stop probe if context pool creation fails
gregkh/linux@cbe53ecd696e nvme-apple: Use acquire/release for queue enabled state
gregkh/linux@bd3f40fdec55 nvmet-rdma: avoid circular locking dependency on install_queue()
gregkh/linux@cdda74528778 nvmet-rdma: use sbitmap to replace rsp free list
gregkh/linux@8f9e3ae5bf00 nvmet-rdma: factor out response resource cleanup
gregkh/linux@156ec10a8be2 nvmet-rdma: fix response resource leak on queue teardown
gregkh/linux@b3c5a1eeb783 bus: ti-sysc: Fix /chosen node reference leak
gregkh/linux@31640cb7452e PM: sleep: Fix off-by-one in wakelocks number limit check
gregkh/linux@d8c9a64d2cf0 arm64: dts: qcom: sm7225-fairphone-fp4: Fix address in fb node name
gregkh/linux@086b52c0f526 bus: qcom-ebi2: Simplify with scoped for each OF child loop
gregkh/linux@f5f126cfdd2a bus: qcom-ebi2: Fix clock leak on probe failure
gregkh/linux@d131027054a8 wifi: mac80211_hwsim: avoid NULL skb in stop queue drain
gregkh/linux@2be63baad6a8 staging: greybus: audio: correct sscanf() return value check
gregkh/linux@5593804c3ef5 staging: sm750fb: gate dualview dataflow using g_dualview
gregkh/linux@6f764363b317 greybus: audio: bound the topology section sizes against the fetched size
gregkh/linux@41485dae3ce7 staging: fbtft: Use sysfs_emit_at() to print to sysfs file
gregkh/linux@a77efd85e0d4 staging: octeon: add missing tasklet_kill in cvm_oct_tx_shutdown
gregkh/linux@85bb05646247 staging: octeon: fix free_irq dev_id mismatch in cvm_oct_rx_shutdown
gregkh/linux@f99efd5d9cdf staging: octeon: ethernet-mem: replace pr_warn with dev_warn in free functions
gregkh/linux@5abfa6e8abe1 staging: octeon: replace pr_warn with dev_warn in fill and rx paths
gregkh/linux@c124049c3a70 staging: octeon: add missing napi_disable in cvm_oct_rx_shutdown
gregkh/linux@6c017ab2b0e1 staging: rtl8723bs: fix mismatched free of HalData in rtw_sdio_if1_init()
gregkh/linux@29aa219427b3 ALSA: via82xx: Remove unreachable branch in snd_via686_pcm_pointer()
gregkh/linux@a4e1c1aabbe1 selftests/bpf: Fix memory leak in msg_alloc_iov error path
gregkh/linux@d4dab68a26e1 selftests/bpf: Fix memory leak in msg_alloc_iov
gregkh/linux@770f6a223220 irqchip/gic-v3-its: Fix memleak in its_probe_one()
gregkh/linux@c262f1213360 selftests: timers: leap-a-day: Fix -w option and update usage comment
gregkh/linux@e33a66be24d4 clocksource: Unregister subsystem on device registration failure
gregkh/linux@29e09325209e y2038: uapi: Use 64-bit __kernel_old_timespec::tv_nsec on x32
gregkh/linux@e61adf8578a8 timekeeping: Account for monotonicity adjustment in ntp_error
gregkh/linux@167b7da8922b clk: qcom: gdsc: propagate gdsc_check_status() errors from gdsc_poll_status
gregkh/linux@c1467a1e0998 clk: qcom: gdsc: propagate gdsc_enable() failure for ALWAYS_ON domains
gregkh/linux@cfe16d993c57 clk: qcom: gdsc: tear down per-domain genpds in gdsc_unregister()
gregkh/linux@a5d0d1cf1c74 thermal/drivers/rcar_gen3_thermal: Do not call set_trips() when resuming
gregkh/linux@dda02c65704b thermal/drivers/rcar_gen3_thermal: Create device local ops struct
gregkh/linux@c71770fe5b95 thermal/drivers/rcar_gen3_thermal: Fix device initialization
gregkh/linux@75462bfc49b3 thermal/hwmon: Do not set no_hwmon before calling thermal_add_hwmon_sysfs()
gregkh/linux@a85bcd0c7ef6 thermal/drivers/rcar: Fix error checking in probe()
gregkh/linux@f9c43246128a usb: gadget: r8a66597: avoid double free of ep0_req in probe error path
gregkh/linux@a4c4e38b356a udf: Mark LVID buffer as uptodate before marking it dirty
gregkh/linux@e18a10b39c99 bpf: Fix vmlinux BTF prep race in bpf_get_btf_vmlinux
gregkh/linux@46e85c5aa8c6 efi: fix stale reference to efi_recover_from_page_fault()
gregkh/linux@db347840d6b6 bpf: Fix use-after-free on mm_struct in bpf_find_vma()
gregkh/linux@8acc3813ab50 bus: mhi: ep: Fix device refcount leak in the error path of MHI device creation
gregkh/linux@eec8701ff918 iommu/mediatek-v1: Fix off-by-one in MT2701_LARB_NR_MAX
gregkh/linux@26a63b32445b iommu/msm: Return -ENOMEM on memory allocation failure in probe
gregkh/linux@6d8c2fd1bb97 iommu/amd: Prevent SB IOAPIC from overriding IVRS validation errors
gregkh/linux@1e9b85064482 iommu/amd: Add support for Hygon family 18h model 4h IOAPIC
gregkh/linux@4c23f91bd48a iommu/amd: Fix false positive in SB IOAPIC IVRS validation
gregkh/linux@b769a4636291 leds: pca9532: Fix inverted GPIO output polarity
gregkh/linux@2d2108685a49 platform/x86: dell-privacy: Fix race condition
gregkh/linux@6836048b7057 platform/x86: dell-wmi-base: Fix resource leak on module load failure
gregkh/linux@e7f045f40ede hwspinlock: propagate errno when registering single lock
gregkh/linux@f6da500b0f81 usb: gadget: configfs: fix out-of-bounds read of qw_sign
gregkh/linux@e041563727c7 usb: gadget: aspeed_udc: Convert to platform remove callback returning void
gregkh/linux@d7ae1a48e70e usb: gadget: aspeed_udc: check endpoint DMA allocation
gregkh/linux@deb8156ebe5c Bluetooth: Add support for hci devcoredump
gregkh/linux@10308ce496f5 Bluetooth: btusb: Add btusb devcoredump support
gregkh/linux@8b7648962d41 USB: core: Use device_driver directly in struct usb_driver and usb_device_driver
gregkh/linux@2e30f71523ae USB: make single lock for all usb dynamic id lists
gregkh/linux@a0a2f494747f USB: make to_usb_driver() use container_of_const()
gregkh/linux@9b82ddf76827 usb: fix UAF when probe runs concurrent to dyn ID removal
gregkh/linux@fdfb736282b9 platform/mellanox: mlxbf-pmc: Check ACPI_COMPANION() against NULL
gregkh/linux@3855be0100ef platform/surface: acpi-notify: Check ACPI companion before use
gregkh/linux@6a054a356767 usb: mtu3: allow system suspend during active gadget connection
gregkh/linux@56fa55de915f usb: renesas_usbhs: Fix power-off ordering on unbind
gregkh/linux@068ea7ed68b9 drm/panel: samsung-s6d16d0: Power off on prepare failure
gregkh/linux@57765e298271 perf metricgroups: Use zfree() to reduce chances of use after free
gregkh/linux@f9af82938c95 perf metricgroup: Fix metric expression copy leaks
gregkh/linux@1aa399ce8811 bus: qcom-ebi2: use managed resources for clocks and children
gregkh/linux@95c8d6141b4b iio: accel: dmard09: Implement I...