Skip to content
Open
Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
2758 commits
Select commit Hold shift + click to select a range
5a55f9a
bpf: Reset register bounds before narrowing retval range in check_mem…
Jun 22, 2026
43f0005
bpf,fork: wipe ->bpf_storage before bailouts that access it
thejh Jun 26, 2026
28ce7bc
bpf: Add missing access_ok call to copy_user_syms
olsajiri Jun 16, 2026
fe1d912
selftests/bpf: Cover negative buffer pointer offsets
ahjf-07 Jul 14, 2026
02f8ad1
block: remove redundant GD_NEED_PART_SCAN in add_disk_final()
amateurcow Jun 15, 2026
c0f10f4
block: fix race in blk_time_get_ns() returning 0
waych Jul 15, 2026
d4cc255
block: fix IORING_URING_CMD_REISSUE flags check in blkdev_uring_cmd
wokron Jun 16, 2026
17f113e
net: sparx5: unregister blocking notifier on init failure
Jun 23, 2026
0562bd3
dm thin metadata: fix superblock refcount leak on snapshot shadow fai…
Jul 11, 2026
9f1a0d2
dm thin metadata: fix metadata snapshot consistency on commit failure
mingnus Jun 30, 2026
bafe3e7
dm era: fix out-of-bounds memory access for non-zero start sector
smoelius Jul 2, 2026
53477ce
dm-bufio: fix wrong count calculation in dm_bufio_issue_discard
Jul 10, 2026
df50c24
dm-ioctl: fix a possible overflow in list_version_get_info
Jul 9, 2026
79feb87
dm-log: fix a bitset_size overflow on 32bit machines
bmarzins Jul 3, 2026
0cbe13f
dm-pcache: reject option groups without values
smoelius Jun 29, 2026
f3441b3
dm-stats: fix dm_jiffies_to_msec64
Jul 10, 2026
750b23d
dm-stats: fix merge accounting
Jul 10, 2026
f00105b
dm: avoid leaking the caller's thread keyring via the table device file
iblech Jun 17, 2026
7d8ed7c
dm_early_create: fix freeing used table on dm_resume failure
Jul 9, 2026
8f0af84
dm-integrity: fix leaking uninitialized kernel memory
Jul 9, 2026
3d1afaa
dm-integrity: fix a bug if the bio is out of limits
Jul 9, 2026
829476c
dm-integrity: don't increment hash_offset twice
Jul 9, 2026
f7990c2
dm-verity: fix buffer overflow in FEC calculation
Jul 1, 2026
4146502
dm-verity: avoid double increment of &use_bh_wq_enabled
Jul 9, 2026
81f41d9
dm-verity: fix a possible NULL pointer dereference
Jul 9, 2026
e96df7f
dm-verity: increase sprintf buffer size
Jul 9, 2026
752e214
dm-verity: make error counter atomic
Jul 9, 2026
e2d9a2e
dma-fence: Make dma_fence_dedup_array() robust against 0-count input
Jun 29, 2026
562d5e6
dma-fence: use correct callback in dma_fence_timeline_name()
andred Jun 18, 2026
15ecfdf
dma-buf: dma-fence: Fix potential NULL pointer dereference
Jun 29, 2026
5da885c
accel/amdxdna: Fix use-after-free in amdxdna_gem_dmabuf_mmap()
ISCAS-Vulab Jun 25, 2026
f7d0860
accel/amdxdna: reject command submission on devices without a submit op
peaktwilight Jul 13, 2026
fff6509
accel/amdxdna: reject user command submission without a command BO
peaktwilight Jul 13, 2026
216e43d
accel/amdxdna: Use caller client for debug BO sync
shuv-amp Jun 15, 2026
6920e62
accel/ivpu: Reject firmware log with size smaller than header
Jhonraushan Jul 15, 2026
782e1bf
scsi: hpsa: Fix DMA mapping leak on IOACCEL2 reset path
Jun 22, 2026
0ce5a37
scsi: lpfc: Fix memory leak in lpfc_sli4_driver_resource_setup()
Jul 7, 2026
3cbabbf
scsi: sg: Report request-table problems when any status is set
Jul 7, 2026
1357fb3
scsi: xen: scsiback: Free the command tag on the TMR submit-failure path
mjbommar Jun 11, 2026
1e97c40
scsi: xen: scsiback: Free unsubmitted command instead of double-putti…
mjbommar Jun 11, 2026
555a898
scsi: target: Bound PR-OUT TransportID parsing to the received buffer
bryamzxz Jun 11, 2026
ef2ee18
scsi: target: core: Fix iSCSI ISID use-after-free in REGISTER AND MOVE
bryamzxz Jun 10, 2026
747eaea
scsi: elx: efct: Fix refcount leak in efct_hw_io_abort()
ISCAS-Vulab Jun 11, 2026
94cbfed
scsi: elx: efct: Fix I/O leak on unsupported additional CDB
Jun 22, 2026
7d330a1
fs/resctrl: Fix use-after-free during unmount
aegl Jul 6, 2026
bf0b58b
Input: ims-pcu - fix use-after-free and double-free in disconnect
dtor May 22, 2026
73e6687
Input: ims-pcu - only expose sysfs attributes on control interface
dtor Jun 1, 2026
8c3095c
Input: ims-pcu - release data interface on disconnect
dtor May 22, 2026
cbfa059
Input: ims-pcu - validate control endpoint type
dtor May 22, 2026
f3c63ae
Input: ims-pcu - add response length checks
dtor May 22, 2026
40693fc
Input: ims-pcu - fix DMA mapping violation in line setup
dtor May 22, 2026
47a9889
Input: ims-pcu - fix firmware leak in async update
dtor May 22, 2026
e555f00
Input: ims-pcu - fix logic error in packet reset
dtor May 22, 2026
f97bfc1
Input: ims-pcu - fix out-of-bounds read in ims_pcu_irq() debug logging
dtor May 22, 2026
bbbe314
Input: ims-pcu - fix potential infinite loop in CDC union descriptor …
dtor May 23, 2026
0259558
Input: ims-pcu - fix race condition in reset_device sysfs callback
dtor May 22, 2026
f4cf878
Input: ims-pcu - fix type confusion in CDC union descriptor parsing
dtor May 22, 2026
618cf6b
mmc: vub300: fix use-after-free on probe failure
lgs2513 Jun 12, 2026
088873a
net/mlx5e: macsec: fix use-after-free of metadata_dst on RX SC delete
peaktwilight Jun 27, 2026
05b24f6
tracing/user_events: Fix use-after-free in user_event_mm_dup()
mjbommar Jul 7, 2026
bcf7968
wifi: libertas_tf: fix use-after-free in lbtf_free_adapter()
maoyixie Jun 22, 2026
83f9fb5
locking/rt: Fix the incorrect RCU protection in rt_spin_unlock()
Jun 19, 2026
571e1f1
posix-cpu-timers: Use u64 multiplication in update_rlimit_cpu()
zhanxusheng1024-os Jun 16, 2026
f563358
selftests/ftrace: Drop invalid top-level local in test_ownership
RichardCao Apr 7, 2026
9f7dc35
cpu: hotplug: Preserve per instance callback errors
inc1de Jun 19, 2026
631d531
cpu: hotplug: Bound hotplug states sysfs output
inc1de Jun 19, 2026
282c521
net: mana: Validate the packet length reported by the NIC
dcui Jul 2, 2026
bc650dd
net: mana: Sync page pool RX frags for CPU
dcui Jul 2, 2026
e187f6f
gpio: mt7621: more robust management of IRQ domain teardown
paraka Jun 26, 2026
628c63f
gpio: tegra: do not call pinctrl for GPIO direction
Jun 19, 2026
422a056
gpio: mt7621: be sure IRQ domain is created before exposing GPIO chips
paraka Jun 26, 2026
b90f245
gpio-f7188x: Add support for NCT6126D version B
noctuelles Jun 29, 2026
a60a40c
gpio: mt7621: avoid corruption of shared interrupt trigger state
paraka Jun 26, 2026
f4170f4
gpios: palmas: add .get_direction() op
akemnade Jul 4, 2026
99ae324
net: sit: require CAP_NET_ADMIN in the device netns for changelink
maoyixie Jun 18, 2026
b3763f7
net: ethernet: ti: icssg: guard PA stat lookups
philschenker Jun 18, 2026
0c0a8c7
net: wwan: t7xx: destroy DMA pool on CLDMA late init failure
Jun 21, 2026
91850f5
net: ixp4xx_hss: fix duplicate HDLC netdev allocation
Jun 22, 2026
f7f45ce
net/sched: act_ct: preserve tc_skb_cb across defragmentation
Jun 13, 2026
6fed707
selftests: net: fix file owner for broadcast_ether_dst test
Jun 17, 2026
11f68eb
net: ena: clean up XDP TX queues when regular TX setup fails
Jun 16, 2026
f97e93e
net: ip6_vti: require CAP_NET_ADMIN in the device netns for changelink
maoyixie Jun 12, 2026
88b33ee
net: ip_vti: require CAP_NET_ADMIN in the device netns for changelink
maoyixie Jun 12, 2026
d49edcc
net: ipip: require CAP_NET_ADMIN in the device netns for changelink
maoyixie Jun 12, 2026
c38c8b0
net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink
maoyixie Jun 12, 2026
d4bcc20
net: ip6_tunnel: require CAP_NET_ADMIN in the device netns for change…
maoyixie Jun 12, 2026
d0c880c
octeontx2-af: Free BPID bitmap on setup failure
Jun 23, 2026
6383248
ieee802154: admin-gate legacy LLSEC dump operations
mjbommar May 20, 2026
2953ec2
ieee802154: allow legacy LLSEC ADD/DEL ops to pass strict validation
mjbommar May 20, 2026
7e3630f
ieee802154: ca8210: fix cas_ctl leak on spi_async failure
Apr 21, 2026
d8ce67f
ieee802154: ca8210: fix pointer truncation in kfifo on 64-bit
May 20, 2026
9f8e7f5
gve: fix header buffer corruption with header-split and HW-GRO
agarg2008 Jun 17, 2026
59da37f
octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF
avasummer Jun 15, 2026
9a7f7b5
ksmbd: fix stack buffer overflow in multichannel session-key copy
dhkts1 Jul 12, 2026
744da24
netfilter: nfnetlink_cthelper: cap to maximum number of expectation p…
ummakynes Jun 26, 2026
fcc621f
platform/x86/amd/pmc: Avoid logging "(null)" for DMI values
DanielGibson Jun 26, 2026
227dd2e
net/sched: sch_teql: move rcu_read_lock()/spin_lock() from _bh variants
jhsmt Jun 30, 2026
1b31e16
ACPICA: Define acpi_ut_safe_strncpy() as strscpy_pad() alias
rafaeljw Jun 30, 2026
835a2f9
drm/xe/userptr: Stub notifier_lock helpers when DRM_GPUSVM=n
ShuichengLin Jun 30, 2026
d1d73a3
netfilter: nfnetlink_cthelper: cap to maximum number of expectation p…
ummakynes Jul 1, 2026
fe08be9
KVM: arm64: Fix propagation of TLBI level in kvm_pgtable_stage2_relax…
Jul 7, 2026
c270eaa
riscv: vdso: Always declare vdso_start symbols
t-8ch May 4, 2026
c97d44a
pwm: rzg2l-gpt: Fix period_ticks type from u32 to u64
bijudas Jun 4, 2026
7bcce38
LoongArch: Fix nr passing in set_direct_map_valid_noflush()
Jun 25, 2026
e483da9
LoongArch: Fix missing dirty page tracking in {pte,pmd}_wrprotect()
Jun 25, 2026
7be349d
ipmi: Fix user refcount underflow in event delivery
mfleming May 21, 2026
a338ce4
espintcp: use sk_msg_free_partial to fix partial send
qsn Jun 12, 2026
0fd2399
ipmi: fix refcount leak in i_ipmi_request()
ISCAS-Vulab Jun 3, 2026
3560775
bnx2x: fix potential memory leak in bnx2x_alloc_mem_bp()
Jun 20, 2026
03f1725
rtc: renesas-rtca3: Fix PIE clear polling condition in alarm setup er…
prabhakarlad Jun 2, 2026
a36b952
fscrypt: Replace mk_users keyring with simple list
Jun 18, 2026
a3020a3
rtc: mpfs: fix counter upload completion condition
ConchuOD May 13, 2026
8a604fe
hwmon: (w83627hf) remove VID sysfs files on error and remove
neosys007 Jun 15, 2026
1f11a29
hwmon: (w83793) remove vrm sysfs file on probe failure
neosys007 Jun 15, 2026
4140c51
net: liquidio: fix BAR resource leak on PF number failure
Jun 24, 2026
8519e89
ACPI: TAD: Check AC wake capability before enabling wakeup
Jun 25, 2026
7ee43ec
hwmon: (occ) unregister sysfs devices outside occ lock
Jun 19, 2026
ca096be
fsl/fman: Free init resources on KeyGen failure in fman_init()
Jun 25, 2026
b99e890
net: lan743x: Initialize eth_syslock spinlock before use
arighi Jun 26, 2026
fffeb2a
net/sched: sch_multiq: Replace direct dequeue call with peek and qdis…
bryamzxz Jun 25, 2026
2dcebbd
net/sched: sch_taprio: Replace direct dequeue call with peek and qdis…
bryamzxz Jun 25, 2026
6ee183d
fhandle: reject detached mounts in capable_wrt_mount()
dslee2022 Jul 1, 2026
4a97d08
hwmon: (max1619) add missing 'select REGMAP' to Kconfig
cjd8 Jun 29, 2026
aac98ec
tracing/probes: Fix double addition of offset for @+FOFFSET
mhiramat Jun 24, 2026
e3d325c
orangefs: keep the readdir entry size 64-bit in fill_from_part()
bryamzxz Jun 19, 2026
ae0265f
net/mlx5: HWS, fix matcher leak on resize target setup failure
Jun 29, 2026
2997399
ata: libata-core: Add NOLPM quirk for PNY CS900 1TB SSD
bryamzxz Jun 20, 2026
7ba6028
ata: pata_pxa: Fix DMA channel leak on probe error
ISCAS-Vulab Jun 25, 2026
d43efd1
ata: libata-core: Reject an invalid concurrent positioning ranges count
bryamzxz Jun 23, 2026
77f0023
net: wwan: iosm: bound device offsets in the MUX downlink decoder
maoyixie Jun 25, 2026
3034e5d
net: ipa: fix SMEM state handle leaks in SMP2P init
Jun 24, 2026
b770fcf
hwmon: (asus_atk0110) Check package count before accessing element
sammiee5311 Jun 19, 2026
91b4d76
riscv: probes: save original sp in rethook trampoline
martin-kaiser Jun 30, 2026
23afc37
mm/compaction: handle free_pages_prepare() properly in compaction_free()
x-y-z Jun 22, 2026
b321a04
irqchip/irq-riscv-imsic-early: Fix fwnode leak on state setup failure
Jun 23, 2026
ae5347f
s390/monwriter: Reject buffer reuse with different data length
gerald-schaefer Jun 23, 2026
d8b5b66
mac802154: remove interfaces with RCU list deletion
Yousef13710 Jul 1, 2026
23d917a
octeontx2-pf: fix SQB pointer leak on init failure
Jun 30, 2026
680d9dc
selftests: net: make busywait timeout clock portable
nirmoy Jun 30, 2026
21a5376
llc: fix SAP refcount leak in llc_ui_autobind()
shuangpeng-kernel Jun 30, 2026
e5d0bb8
ipvs: use parsed transport offset in SCTP state lookup
ArtisticFantasy Jul 6, 2026
6335ab6
ipvs: reset full ip_vs_seq structs in ip_vs_conn_new
ArtisticFantasy Jul 2, 2026
c39087a
macsec: don't read an unset MAC header in macsec_encrypt()
4ncientH Jul 3, 2026
94fe0ab
dibs: loopback: validate offset and size in move_data()
Jul 7, 2026
109241d
net: macb: drop in-flight Tx SKBs on close
tleb Jul 2, 2026
f50d87f
amdkfd: properly free secondary context id
Jul 1, 2026
c3f200e
arm64: smp: Fix hot-unplug tearing by forcing unregistration
ruanjinjie-eng Jun 10, 2026
901a489
cpu/hotplug: Fix NULL kobject warning in cpuhp_smt_enable()
ruanjinjie-eng Jun 10, 2026
fa5c7c3
fs/resctrl: Free mon_data structures on rdt_get_tree() failure
aegl Jul 6, 2026
f7628ee
fs/resctrl: Fix double-add of pseudo-locked region's RMID to free list
rchatre Jul 6, 2026
f723ea5
ata: libata-core: Skip HPA resize for locked drives
Jul 6, 2026
f713d7a
ata: libata-core: Allow capacity transition to zero for locked drives
Jul 6, 2026
648d431
drbd: reject data replies with an out-of-range payload size
mjbommar Jul 10, 2026
d5b2752
riscv: Prevent NULL pointer dereference in machine_kexec_prepare()
liutgnu Jul 5, 2026
dd0160a
tracing/osnoise: Call synchronize_rcu() when unregistering
crwood-rh Jun 9, 2026
83fe36f
s390/diag: Add missing array_index_nospec() call to memtop_get_page_c…
hcahca Jun 22, 2026
2867320
s390/mm: Fix type mismatch in get_align_mask().
gerald-schaefer Jun 30, 2026
f45c8d3
selftests/rseq: Fix a building error for riscv arch
jason77-wang Jul 7, 2026
c17f06d
cgroup/cpuset: rebind mm mempolicy to effective_mems, not mems_allowed
farhad-alemi Jul 6, 2026
4ba6d71
pmdomain: imx93-blk-ctrl: Extract PHY as shared domain for DSI/CSI
Jun 9, 2026
36c2d77
pmdomain: mediatek: Fix possible nullptr KP in HWV cleanup/on-check
agdr-col Jul 9, 2026
331ee3b
pmdomain: imx: Fix i.MX8MP power notifier
MrVan Jun 10, 2026
4907f4c
pmdomain: imx: Fix i.MX8MP VC8000E power up sequence
MrVan Jun 10, 2026
19a1785
selftests/landlock: Skip scoped_signal subtest with MSG_OOB if not av…
huth Jul 10, 2026
90dfffc
selftests/landlock: Fix screwed up pointers in the scoped_signal_test
huth Jul 9, 2026
cc5c99b
mmc: sdhci-esdhc-imx: restore pinctrl before restoring ios timing on …
Jul 15, 2026
0b24b11
powerpc/pseries: fix memory leak on krealloc failure in papr_init
toblux Jun 14, 2026
6eb4cf2
net/mlx5: free mlx5_st_idx_data on final dealloc
zhipingz-51 Jul 2, 2026
5699485
wifi: rt2x00: avoid full teardown before work setup in probe
Jun 19, 2026
564e3fc
wifi: mwifiex: fix roaming to different channel in host_mlme mode
rbeims Jun 10, 2026
a7584f2
wifi: mac80211: fix memory leak in ieee80211_register_hw()
Jul 6, 2026
185bb15
wifi: brcmfmac: cyw: fix heap overflow on a short auth frame
maoyixie Jun 27, 2026
73a7bdf
riscv: vdso: Do not use LTO for the vDSO
t-8ch Jul 1, 2026
c8874e3
arch/riscv: vdso: remove CFI landing pad from rt_sigreturn
aurel32 Jun 23, 2026
b7f5bd5
regulator: ltc3676: Fix incorrect IRQSTAT bit offsets
abhishekojhasfl Jul 15, 2026
1b41cbe
net: openvswitch: reject oversized nested action attrs
manizada Jul 6, 2026
f1ca750
Bluetooth: btrtl: validate firmware patch bounds
laxmanacharya8 Jul 10, 2026
5c1e8f5
crypto: aes - Fix conditions for selecting MAC dependencies
Jul 9, 2026
3cc3768
llc: fix SAP refcount leak when creating incoming sockets
Jul 12, 2026
492cf77
macsec: fix promiscuity refcount leak in macsec_dev_open()
jamestiotio Jul 5, 2026
47f0c7d
memstick: ms_block: reject a card that reports too many blocks
maoyixie Jul 2, 2026
905d7a3
ipvs: fix more places with wrong ipv6 transport offsets
Jul 8, 2026
ad1e147
ipvs: reload ip header after head reallocation
Jul 8, 2026
68176d4
reset: imx7: Correct polarity of MIPI CSI resets on i.MX8MQ
Jun 19, 2026
d826d3e
reset: sunxi: fix memory region leak on ioremap failure
Jun 17, 2026
4efa313
powerpc/spufs: fix out-of-bounds access in spufs_mem_mmap_access()
avasummer Jun 1, 2026
d5c2347
powerpc/uaccess: correct check for CONFIG_PPC_E500 in mask_user_addre…
EthanNelson-Moore Jun 15, 2026
3b0505e
wifi: cfg80211: validate EHT MLE before MLD ID read
Jul 1, 2026
2b1589f
wifi: ieee80211: validate MLE common info length
Lyther Jun 11, 2026
179d9be
wifi: mac80211: free ack status frame on TX header build failure
rr00xxyy Jun 26, 2026
625fc70
wifi: mac80211: validate extension-frame layout before RX
Lyther Jun 11, 2026
6126e12
wifi: mwifiex: fix permanently busy scans after multiple roam iterations
rbeims Jun 12, 2026
0e65079
mtd: virt-concat: free duplicate generated name
Jun 26, 2026
9fc23fc
mtd: onenand: samsung: report DMA completion timeouts
neosys007 Jul 3, 2026
09e0441
mtd: mchp23k256: use SPI match data for chip caps
neosys007 Jul 3, 2026
c2e1d33
mmc: vub300: defer reset until cmd_mutex is unlocked
Jun 17, 2026
1773c6e
mtd: rawnand: fsl_ifc: return errors for failed page reads
neosys007 Jul 3, 2026
791fc00
mtd: rawnand: lpc32xx_mlc: fail DMA transfers on timeout
neosys007 Jul 3, 2026
cb2031f
mtd: rawnand: lpc32xx_slc: fail DMA transfer on completion timeout
neosys007 Jul 3, 2026
0e93010
mmc: block: fix RPMB device unregister ordering
Jul 6, 2026
f59d024
mmc: mmc_test: Fix __counted_by handling after kzalloc_flex() conversion
prabhakarlad Jun 2, 2026
657e0ac
mmc: sdhci-of-dwcmshc: check bus clock enable result in the probe() m…
Jun 1, 2026
4818893
mmc: sdhci-esdhc-imx: remove unnecessary mmc_card_wake_sdio_irq check…
Jul 15, 2026
24300de
mmc: sdhci-esdhc-imx: restore DLL override for DDR modes on resume
Jul 15, 2026
bb72b23
mmc: sdhci-esdhc-imx: fix esdhc_change_pinstate() to allow default st…
Jul 15, 2026
9bf4ee0
mmc: sdhci-esdhc-imx: disable irq during suspend to fix unhandled int…
Jul 15, 2026
6355749
mmc: sdhci-esdhc-imx: use pm_runtime_resume_and_get() in suspend
Jul 15, 2026
89b63cd
mmc: sdhci-esdhc-imx: make non-fatal errors non-blocking in suspend
Jul 15, 2026
a419421
mmc: sdhci-esdhc-imx: fix resume error handling
Jul 15, 2026
314bd59
bpf: Reject negative const offsets for buffer pointers
ahjf-07 Jul 14, 2026
810c9ae
mm/damon/core: trace esz at first setup
sjp38 May 20, 2026
db20589
samples/damon/mtier: fail early if address range parameters are invalid
Jun 29, 2026
c81e2af
device property: initialize the remaining fields of fwnode_handle in …
brgl Jul 2, 2026
cf8b593
f2fs: fix potential deadlock in f2fs_balance_fs()
Jul 3, 2026
aa80706
f2fs: fix potential deadlock in gc_merge path of f2fs_balance_fs()
chaseyu Jul 3, 2026
3c0dbfe
f2fs: fix listxattr handling of corrupted xattr entries
iganschel-bit Jul 3, 2026
b80d602
iio: hid-sensor-rotation: Fix stale or zero output when reading raw v…
lixuzha Jul 13, 2026
53e3dcf
ALSA: scarlett2: Allow selecting config_set by firmware version
geoffreybennett Jul 14, 2026
ac13289
ALSA: scarlett2: Update offsets for 2i2 Gen 4 firmware 2417
geoffreybennett Jul 14, 2026
cd99274
firmware_loader: Add cancel helper for async requests
CassivsGabriellis Jul 14, 2026
da9e3be
ALSA: hda/tas2781: Cancel async firmware request at unbind
CassivsGabriellis Jul 14, 2026
3f54f23
binder: Use LIST_HEAD() to initialize on stack list head
xhackerustc Jul 14, 2026
4257f45
binder: cache secctx size before release zeroes it
masoncl Jul 14, 2026
a2a2f68
Bluetooth: 6lowpan: fix cyclic locking warning on netdev unregister
pv Jul 15, 2026
733e76e
Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_new_connection_cb()
fourdim Jul 15, 2026
98185b3
ksmbd: fix path resolution in ksmbd_vfs_kern_path_create
Jul 16, 2026
cba4ee1
smb: move compression definitions into common/fscc.h
Jul 16, 2026
cfb2c6f
ksmbd: use opener credentials for FSCTL mutations
namjaejeon Jul 16, 2026
615104c
xfs: factor out a xfs_zone_mark_free helper
Jul 18, 2026
28f19c9
xfs: add newly added RTGs to the free pool in growfs
Jul 18, 2026
10cfea5
usb: atm: ueagle-atm: use dev_dbg() for 'device found' message
mfoliveira Jul 18, 2026
53430a3
usb: atm: ueagle-atm: remove function entry/exit debug messages
mfoliveira Jul 18, 2026
ddcdac4
usb: atm: ueagle-atm: wait for pre-firmware load in .disconnect()
mfoliveira Jul 18, 2026
3dc8a46
liveupdate: validate session type before performing operation
prati0100 Jul 21, 2026
9634db5
crypto: xilinx-trng - Remove crypto_rng interface
May 31, 2026
69b31ef
exfat: replace unsafe macros with static inline functions
namjaejeon Jul 21, 2026
390f1d7
exfat: add balloc parameter to exfat_map_cluster() for iomap support
namjaejeon Jul 21, 2026
8e4e884
exfat: add data_start_bytes and exfat_cluster_to_phys_bytes() helper
namjaejeon Jul 21, 2026
e2f0122
exfat: fix implicit declaration of brelse()
namjaejeon Jul 21, 2026
570967e
iomap: consolidate bio submission
Jul 21, 2026
5638dbf
drm/amd/display: Fix Color Manager (3DLUT, Shaper, Blend)
Mar 19, 2026
60325bf
posix-timers: Expand timer_[re]arm() callbacks with a boolean return …
Apr 8, 2026
ad1cafa
posix-cpu-timers: Prevent UAF caused by non-leader exec() race
Jul 3, 2026
872380f
Revert "gpib: cb7210: Fix region leak when request_irq fails"
gregkh May 30, 2026
155b42b
Linux 7.1.5
gregkh Jul 24, 2026
651c8f5
[FROM-ML] platform/x86: (ayn-ec) Add PWM Fan HWMON Interface
pastaq Jul 26, 2025
9ecb1c6
[FROM-ML] platform/x86: (ayn-ec) Add Temperature Sensors
pastaq Jul 26, 2025
d99585a
[FROM-ML] platform/x86: (ayn-ec) Add RGB Interface
pastaq Jul 26, 2025
2754a41
[FROM-ML] platform/x86: (ayn-ec) Add AYN EC Platform Documentation
pastaq Jul 26, 2025
142dcf8
[NOT-FOR-UPSTREAM] platform/x86: ayn-ec: Report RGB LED under the Leg…
KyleGospo Jul 29, 2026
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
The table of contents is too big for display.
Diff view
Diff view
  •  
  •  
  •  
13 changes: 8 additions & 5 deletions Documentation/ABI/testing/sysfs-class-reboot-mode-reboot_modes
Original file line number Diff line number Diff line change
Expand Up @@ -2,33 +2,36 @@ What: /sys/class/reboot-mode/<driver>/reboot_modes
Date: March 2026(TBD)
KernelVersion: TBD
Contact: linux-pm@vger.kernel.org
Description:
Description:
This interface exposes the reboot-mode arguments
registered with the reboot-mode framework. It is
a read-only interface and provides a space
separated list of reboot-mode arguments supported
on the current platform.
Example:

recovery fastboot bootloader

The exact sysfs path may vary depending on the
name of the driver that registers the arguments.
Example:
Example::

/sys/class/reboot-mode/nvmem-reboot-mode/reboot_modes
/sys/class/reboot-mode/syscon-reboot-mode/reboot_modes
/sys/class/reboot-mode/qcom-pon/reboot_modes

The supported arguments can be used by userspace to
invoke device reset using the standard reboot() system
call interface, with the "argument" as string to "*arg"
parameter along with LINUX_REBOOT_CMD_RESTART2.
call interface, with the "argument" as string to ``*arg``
parameter along with ``LINUX_REBOOT_CMD_RESTART2``.

A driver can expose the supported arguments by
registering them with the reboot-mode framework
using the property names that follow the
mode-<argument> format.
Example:
mode-bootloader, mode-recovery.

mode-bootloader, mode-recovery

This attribute is useful for scripts or initramfs
logic that need to programmatically determine
Expand Down
59 changes: 59 additions & 0 deletions Documentation/ABI/testing/sysfs-platform-ayn-ec
Original file line number Diff line number Diff line change
@@ -0,0 +1,59 @@
What: /sys/class/hwmon/hwmon[0-9]/pwm1_enable
Date: July 2025
KernelVersion: 6.17
Contact: "Derek J. Clark" <derekjohn.clark@gmail.com>
Description:
This sets the PWM fan mode of operation. Valid values are [0-3].
Values [0-2] conform with standard hwmon operating modes. Value 3
enables user defined fan curve settings.

Applies to AYN Loki and Tectoy Zeenix lines of handheld devices.

What: /sys/class/hwmon/hwmon[0-9]/pwm1_auto_point[1-5]_pwm
Date: July 2025
KernelVersion: 6.17
Contact: "Derek J. Clark" <derekjohn.clark@gmail.com>
Description:
This sets the PWM fan duty cycle for the given index of the fan curve.
When the temperature reaches the corresponding pwm1_auto_point[1-5]_temp,
the EC will automatically increase the fan duty cycle to the given value.

Values are [0-255]

Applies to AYN Loki and Tectoy Zeenix lines of handheld devices.

What: /sys/class/hwmon/hwmon[0-9]/pwm1_auto_point[1-5]_temp
Date: July 2025
KernelVersion: 6.17
Contact: "Derek J. Clark" <derekjohn.clark@gmail.com>
Description:
This sets the activation temperature for the given index of the fan curve.
When the temperature reaches the given value, the EC will automatically
increase the fan duty cycle to the corresponding pwm1_auto_point[1-5]_pwm
value.

Values are [0-100]

Applies to AYN Loki and Tectoy Zeenix lines of handheld devices.

What: /sys/class/leds/ayn:rgb:joystick_rings/effect
Date: July 2025
KernelVersion: 6.17
Contact: "Derek J. Clark" <derekjohn.clark@gmail.com>
Description:
This controls the display effect of the RGB interface.

Values are monocolor or breathe.

Applies to AYN Loki and Tectoy Zeenix lines of handheld devices.

What: /sys/class/leds/ayn:rgb:joystick_rings/effect_index
Date: July 2025
KernelVersion: 6.17
Contact: "Derek J. Clark" <derekjohn.clark@gmail.com>
Description:
This displays the available options for the effect attribute.

Values are monocolor or breathe.

Applies to AYN Loki and Tectoy Zeenix lines of handheld devices.
6 changes: 3 additions & 3 deletions Documentation/admin-guide/pm/cpufreq.rst
Original file line number Diff line number Diff line change
Expand Up @@ -516,7 +516,7 @@ This governor exposes the following tunables:
of those tasks above 0 and set this attribute to 1.

``sampling_down_factor``
Temporary multiplier, between 1 (default) and 100 inclusive, to apply to
Temporary multiplier, between 1 (default) and 100000 inclusive, to apply to
the ``sampling_rate`` value if the CPU load goes above ``up_threshold``.

This causes the next execution of the governor's worker routine (after
Expand Down Expand Up @@ -586,8 +586,8 @@ This governor exposes the following tunables:
100 (5 by default).

This is how much the frequency is allowed to change in one go. Setting
it to 0 will cause the default frequency step (5 percent) to be used
and setting it to 100 effectively causes the governor to periodically
it to 0 disables frequency changes by the governor entirely and setting
it to 100 effectively causes the governor to periodically
switch the frequency between the ``scaling_min_freq`` and
``scaling_max_freq`` policy limits.

Expand Down
28 changes: 16 additions & 12 deletions Documentation/arch/arm64/cpu-hotplug.rst
Original file line number Diff line number Diff line change
Expand Up @@ -47,11 +47,12 @@ ever have can be described at boot. There are no power-domain considerations
as such devices are emulated.

CPU Hotplug on virtual systems is supported. It is distinct from physical
CPU Hotplug as all resources are described as ``present``, but CPUs may be
marked as disabled by firmware. Only the CPU's online/offline behaviour is
influenced by firmware. An example is where a virtual machine boots with a
single CPU, and additional CPUs are added once a cloud orchestrator deploys
the workload.
CPU Hotplug as all vCPU resources are statically described in the firmware
configuration tables (e.g. MADT), meaning their maximum possible count is
known at boot. However, vCPUs that are not enabled at boot are not marked
as ``present`` by the kernel until they are hotplugged. An example is where
a virtual machine boots with a single CPU, and additional CPUs are added
once a cloud orchestrator deploys the workload.

For a virtual machine, the VMM (e.g. Qemu) plays the part of firmware.

Expand All @@ -60,16 +61,19 @@ brought online. Firmware can enforce its policy via PSCI's return codes. e.g.
``DENIED``.

The ACPI tables must describe all the resources of the virtual machine. CPUs
that firmware wishes to disable either from boot (or later) should not be
``enabled`` in the MADT GICC structures, but should have the ``online capable``
bit set, to indicate they can be enabled later. The boot CPU must be marked as
``enabled``. The 'always on' GICR structure must be used to describe the
redistributors.
that are hot-pluggable must have the ``online capable`` bit set and the
``enabled`` bit cleared in the MADT GICC structures to indicate they can be
enabled later. The boot CPU must be marked as ``enabled`` with its
``online capable`` bit cleared. The 'always on' GICR structure must be used
to describe the redistributors.

CPUs described as ``online capable`` but not ``enabled`` can be set to enabled
by the DSDT's Processor object's _STA method. On virtual systems the _STA method
must always report the CPU as ``present``. Changes to the firmware policy can
be notified to the OS via device-check or eject-request.
must always set the ``ACPI_STA_DEVICE_PRESENT`` bit, while toggling the
``ACPI_STA_DEVICE_ENABLED`` bit to reflect its plug status. The kernel will
then dynamically mark the vCPU as ``present`` within the OS when the
``ACPI_STA_DEVICE_ENABLED`` bit becomes set during hot-add. Changes to the
firmware policy can be notified to the OS via device-check or eject-request.

CPUs described as ``enabled`` in the static table, should not have their _STA
modified dynamically by firmware. Soft-restart features such as kexec will
Expand Down
46 changes: 46 additions & 0 deletions Documentation/arch/arm64/silicon-errata.rst
Original file line number Diff line number Diff line change
Expand Up @@ -128,16 +128,28 @@ stable kernels.
+----------------+-----------------+-----------------+-----------------------------+
| ARM | Cortex-A76 | #3324349 | ARM64_ERRATUM_3194386 |
+----------------+-----------------+-----------------+-----------------------------+
| ARM | Cortex-A76 | #4193800 | ARM64_ERRATUM_4118414 |
+----------------+-----------------+-----------------+-----------------------------+
| ARM | Cortex-A76AE | #4193801 | ARM64_ERRATUM_4118414 |
+----------------+-----------------+-----------------+-----------------------------+
| ARM | Cortex-A77 | #1491015 | N/A |
+----------------+-----------------+-----------------+-----------------------------+
| ARM | Cortex-A77 | #1508412 | ARM64_ERRATUM_1508412 |
+----------------+-----------------+-----------------+-----------------------------+
| ARM | Cortex-A77 | #3324348 | ARM64_ERRATUM_3194386 |
+----------------+-----------------+-----------------+-----------------------------+
| ARM | Cortex-A77 | #4193798 | ARM64_ERRATUM_4118414 |
+----------------+-----------------+-----------------+-----------------------------+
| ARM | Cortex-A78 | #3324344 | ARM64_ERRATUM_3194386 |
+----------------+-----------------+-----------------+-----------------------------+
| ARM | Cortex-A78 | #4193791 | ARM64_ERRATUM_4118414 |
+----------------+-----------------+-----------------+-----------------------------+
| ARM | Cortex-A78AE | #4193793 | ARM64_ERRATUM_4118414 |
+----------------+-----------------+-----------------+-----------------------------+
| ARM | Cortex-A78C | #3324346,3324347| ARM64_ERRATUM_3194386 |
+----------------+-----------------+-----------------+-----------------------------+
| ARM | Cortex-A78C | #4193794 | ARM64_ERRATUM_4118414 |
+----------------+-----------------+-----------------+-----------------------------+
| ARM | Cortex-A710 | #2119858 | ARM64_ERRATUM_2119858 |
+----------------+-----------------+-----------------+-----------------------------+
| ARM | Cortex-A710 | #2054223 | ARM64_ERRATUM_2054223 |
Expand All @@ -146,6 +158,8 @@ stable kernels.
+----------------+-----------------+-----------------+-----------------------------+
| ARM | Cortex-A710 | #3324338 | ARM64_ERRATUM_3194386 |
+----------------+-----------------+-----------------+-----------------------------+
| ARM | Cortex-A710 | #4193788 | ARM64_ERRATUM_4118414 |
+----------------+-----------------+-----------------+-----------------------------+
| ARM | Cortex-A715 | #2645198 | ARM64_ERRATUM_2645198 |
+----------------+-----------------+-----------------+-----------------------------+
| ARM | Cortex-A715 | #3456084 | ARM64_ERRATUM_3194386 |
Expand All @@ -158,20 +172,32 @@ stable kernels.
+----------------+-----------------+-----------------+-----------------------------+
| ARM | Cortex-X1 | #3324344 | ARM64_ERRATUM_3194386 |
+----------------+-----------------+-----------------+-----------------------------+
| ARM | Cortex-X1 | #4193791 | ARM64_ERRATUM_4118414 |
+----------------+-----------------+-----------------+-----------------------------+
| ARM | Cortex-X1C | #3324346 | ARM64_ERRATUM_3194386 |
+----------------+-----------------+-----------------+-----------------------------+
| ARM | Cortex-X1C | #4193792 | ARM64_ERRATUM_4118414 |
+----------------+-----------------+-----------------+-----------------------------+
| ARM | Cortex-X2 | #2119858 | ARM64_ERRATUM_2119858 |
+----------------+-----------------+-----------------+-----------------------------+
| ARM | Cortex-X2 | #2224489 | ARM64_ERRATUM_2224489 |
+----------------+-----------------+-----------------+-----------------------------+
| ARM | Cortex-X2 | #3324338 | ARM64_ERRATUM_3194386 |
+----------------+-----------------+-----------------+-----------------------------+
| ARM | Cortex-X2 | #4193788 | ARM64_ERRATUM_4118414 |
+----------------+-----------------+-----------------+-----------------------------+
| ARM | Cortex-X3 | #3324335 | ARM64_ERRATUM_3194386 |
+----------------+-----------------+-----------------+-----------------------------+
| ARM | Cortex-X3 | #4193786 | ARM64_ERRATUM_4118414 |
+----------------+-----------------+-----------------+-----------------------------+
| ARM | Cortex-X4 | #3194386 | ARM64_ERRATUM_3194386 |
+----------------+-----------------+-----------------+-----------------------------+
| ARM | Cortex-X4 | #4118414 | ARM64_ERRATUM_4118414 |
+----------------+-----------------+-----------------+-----------------------------+
| ARM | Cortex-X925 | #3324334 | ARM64_ERRATUM_3194386 |
+----------------+-----------------+-----------------+-----------------------------+
| ARM | Cortex-X925 | #4193781 | ARM64_ERRATUM_4118414 |
+----------------+-----------------+-----------------+-----------------------------+
| ARM | Neoverse-N1 | #1188873,1418040| ARM64_ERRATUM_1418040 |
+----------------+-----------------+-----------------+-----------------------------+
| ARM | Neoverse-N1 | #1349291 | N/A |
Expand All @@ -182,6 +208,8 @@ stable kernels.
+----------------+-----------------+-----------------+-----------------------------+
| ARM | Neoverse-N1 | #3324349 | ARM64_ERRATUM_3194386 |
+----------------+-----------------+-----------------+-----------------------------+
| ARM | Neoverse-N1 | #4193800 | ARM64_ERRATUM_4118414 |
+----------------+-----------------+-----------------+-----------------------------+
| ARM | Neoverse-N2 | #2139208 | ARM64_ERRATUM_2139208 |
+----------------+-----------------+-----------------+-----------------------------+
| ARM | Neoverse-N2 | #2067961 | ARM64_ERRATUM_2067961 |
Expand All @@ -190,20 +218,34 @@ stable kernels.
+----------------+-----------------+-----------------+-----------------------------+
| ARM | Neoverse-N2 | #3324339 | ARM64_ERRATUM_3194386 |
+----------------+-----------------+-----------------+-----------------------------+
| ARM | Neoverse-N2 | #4193789 | ARM64_ERRATUM_4118414 |
+----------------+-----------------+-----------------+-----------------------------+
| ARM | Neoverse-N3 | #3456111 | ARM64_ERRATUM_3194386 |
+----------------+-----------------+-----------------+-----------------------------+
| ARM | Neoverse-V1 | #1619801 | N/A |
+----------------+-----------------+-----------------+-----------------------------+
| ARM | Neoverse-V1 | #3324341 | ARM64_ERRATUM_3194386 |
+----------------+-----------------+-----------------+-----------------------------+
| ARM | Neoverse-V1 | #4193790 | ARM64_ERRATUM_4118414 |
+----------------+-----------------+-----------------+-----------------------------+
| ARM | Neoverse-V2 | #3324336 | ARM64_ERRATUM_3194386 |
+----------------+-----------------+-----------------+-----------------------------+
| ARM | Neoverse-V2 | #4193787 | ARM64_ERRATUM_4118414 |
+----------------+-----------------+-----------------+-----------------------------+
| ARM | Neoverse-V3 | #3312417 | ARM64_ERRATUM_3194386 |
+----------------+-----------------+-----------------+-----------------------------+
| ARM | Neoverse-V3 | #4193784 | ARM64_ERRATUM_4118414 |
+----------------+-----------------+-----------------+-----------------------------+
| ARM | Neoverse-V3AE | #3312417 | ARM64_ERRATUM_3194386 |
+----------------+-----------------+-----------------+-----------------------------+
| ARM | Neoverse-V3AE | #4193784 | ARM64_ERRATUM_4118414 |
+----------------+-----------------+-----------------+-----------------------------+
| ARM | C1-Premium | #4193780 | ARM64_ERRATUM_4118414 |
+----------------+-----------------+-----------------+-----------------------------+
| ARM | C1-Pro | #4193714 | ARM64_ERRATUM_4193714 |
+----------------+-----------------+-----------------+-----------------------------+
| ARM | C1-Ultra | #4193780 | ARM64_ERRATUM_4118414 |
+----------------+-----------------+-----------------+-----------------------------+
| ARM | MMU-500 | #841119,826419 | ARM_SMMU_MMU_500_CPRE_ERRATA|
| | | #562869,1047329 | |
+----------------+-----------------+-----------------+-----------------------------+
Expand Down Expand Up @@ -256,6 +298,8 @@ stable kernels.
+----------------+-----------------+-----------------+-----------------------------+
| NVIDIA | Carmel Core | N/A | NVIDIA_CARMEL_CNP_ERRATUM |
+----------------+-----------------+-----------------+-----------------------------+
| NVIDIA | Olympus core | T410-OLY-1029 | ARM64_ERRATUM_4118414 |
+----------------+-----------------+-----------------+-----------------------------+
| NVIDIA | T241 GICv3/4.x | T241-FABRIC-4 | N/A |
+----------------+-----------------+-----------------+-----------------------------+
| NVIDIA | T241 MPAM | T241-MPAM-1 | N/A |
Expand Down Expand Up @@ -323,3 +367,5 @@ stable kernels.
+----------------+-----------------+-----------------+-----------------------------+
| Microsoft | Azure Cobalt 100| #3324339 | ARM64_ERRATUM_3194386 |
+----------------+-----------------+-----------------+-----------------------------+
| Microsoft | Azure Cobalt 100| #4193789 | ARM64_ERRATUM_4118414 |
+----------------+-----------------+-----------------+-----------------------------+
31 changes: 4 additions & 27 deletions Documentation/crypto/userspace-if.rst
Original file line number Diff line number Diff line change
Expand Up @@ -327,33 +327,10 @@ CRYPTO_USER_API_RNG_CAVP option:
Zero-Copy Interface
-------------------

In addition to the send/write/read/recv system call family, the AF_ALG
interface can be accessed with the zero-copy interface of
splice/vmsplice. As the name indicates, the kernel tries to avoid a copy
operation into kernel space.

The zero-copy operation requires data to be aligned at the page
boundary. Non-aligned data can be used as well, but may require more
operations of the kernel which would defeat the speed gains obtained
from the zero-copy interface.

The system-inherent limit for the size of one zero-copy operation is 16
pages. If more data is to be sent to AF_ALG, user space must slice the
input into segments with a maximum size of 16 pages.

Zero-copy can be used with the following code example (a complete
working example is provided with libkcapi):

::

int pipes[2];

pipe(pipes);
/* input data in iov */
vmsplice(pipes[1], iov, iovlen, SPLICE_F_GIFT);
/* opfd is the file descriptor returned from accept() system call */
splice(pipes[0], NULL, opfd, NULL, ret, 0);
read(opfd, out, outlen);
AF_ALG used to have zero-copy support, but it was removed due to it being a
frequent source of vulnerabilities. For backwards compatibility the splice()
and sendfile() system calls are still supported, but the kernel will make an
internal copy of the data before passing it to the crypto code.


Setsockopt Interface
Expand Down
17 changes: 5 additions & 12 deletions Documentation/devicetree/bindings/clock/qcom,dispcc-sm6125.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -42,12 +42,6 @@ properties:
- const: cfg_ahb_clk
- const: gcc_disp_gpll0_div_clk_src

'#clock-cells':
const: 1

'#power-domain-cells':
const: 1

power-domains:
description:
A phandle and PM domain specifier for the CX power domain.
Expand All @@ -58,18 +52,16 @@ properties:
A phandle to an OPP node describing the power domain's performance point.
maxItems: 1

reg:
maxItems: 1

required:
- compatible
- reg
- clocks
- clock-names
- '#clock-cells'
- '#power-domain-cells'

additionalProperties: false
allOf:
- $ref: qcom,gcc.yaml#

unevaluatedProperties: false

examples:
- |
Expand Down Expand Up @@ -101,6 +93,7 @@ examples:
power-domains = <&rpmpd SM6125_VDDCX>;

#clock-cells = <1>;
#reset-cells = <1>;
#power-domain-cells = <1>;
};
...
Loading