Changelog in Linux kernel 6.18.33

drm/color-mgmt: Typo s/R332/RGB332/

drm/gma500/oaktrail_hdmi: fix i2c adapter leak on setup

drm/gma500/oaktrail_lvds: fix hang on init failure

drm/gma500/oaktrail_lvds: fix i2c adapter leaks on init

drm/i915/dp: Fix VSC dynamic range signaling for RGB formats

drm/i915/wm: Verify the correct plane DDB entry

drm/i915: skip __i915_request_skip() for already signaled requests

drm/imagination: Switch reset_reason fields from enum to u32

drm/komeda: fix integer overflow in AFBC framebuffer size check

drm/loongson: Use managed KMS polling

drm/msm/a6xx: Fix dumping A650+ debugbus blocks

drm/msm/a6xx: Fix HLSQ register dumping

drm/msm/a6xx: Use barriers while updating HFI Q headers

drm/msm/dpu: don't try using 2 LMs if only one DSC is available

drm/msm/dpu: drop INTF_0 on MSM8953

drm/msm/dpu: fix mismatch between power and frequency

drm/msm/dsi: add the missing parameter description

drm/msm/dsi: fix bits_per_pclk

drm/msm/dsi: fix hdisplay calculation for CMD mode panel

drm/msm/dsi: rename MSM8998 DSI version from V2_2_0 to V2_0_0

drm/msm/shrinker: Fix can_block() logic

drm/msm/vma: Avoid lock in VM_BIND fence signaling path

drm/msm: add missing MODULE_DEVICE_ID definitions

drm/msm: Fix VM_BIND UNMAP locking

drm/msm: Reject fb creation from _NO_SHARE objs

drm/panel: sharp-ls043t1le01: make use of prepare_prev_first

drm/panel: simple: Correct G190EAN01 prepare timing

drm/panfrost: Fix wait_bo ioctl leaking positive return from dma_resv_wait_timeout()

drm/sun4i: backend: fix error pointer dereference

drm/sun4i: Fix resource leaks

drm/sysfb: ofdrm: fix PCI device reference leaks

drm/ttm: Convert -EAGAIN from dmem_cgroup_try_charge to -ENOSPC

drm/v3d: Handle error from drm_sched_entity_init()

drm/v3d: Reject empty multisync extension to prevent infinite loop

drm/virtio: Allow importing prime buffers when 3D is enabled

drm/xe/debugfs: Correct printing of register whitelist ranges

drm/xe/dma-buf: fix UAF with retry loop

drm/xe/dma-buf: handle empty bo and UAF races

drm/xe/eustall: Fix drm_dev_put called before stream disable in close

drm/xe/gsc: Fix BO leak on error in query_compatibility_version()

drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl()

drm: Replace old pointer to new idr

dt-bindings: clock: qcom,dispcc-sc7180: Define MDSS resets

dt-bindings: clock: qcom,gcc-sc8180x: Add missing GDSCs

dt-bindings: clock: qcom: Add GCC video axi reset clock for Glymur

dt-bindings: interrupt-controller: arm,gic-v3: Fix EPPI range

dt-bindings: net: dsa: nxp,sja1105: make spi-cpol optional for sja1110

e1000e: Unroll PTP in probe error handling

efi/capsule-loader: fix incorrect sizeof in phys array reallocation

erofs: handle 48-bit blocks/uniaddr for extra devices

erofs: include the trailing NUL in FS_IOC_GETFSLABEL

erofs: unify lcn as u64 for 32-bit platforms

eth: fbnic: Use wake instead of start

eventfs: Use list_add_tail_rcu() for SRCU-protected children list

eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}()

eventpoll: fix ep_remove struct eventpoll / struct file UAF

eventpoll: kill __ep_remove()

eventpoll: move epi_fget() up

eventpoll: split __ep_remove()

eventpoll: use hlist_is_singular_node() in __ep_remove()

ext4: fix possible null-ptr-deref in mbt_kunit_exit()

f2fs: allow empty mount string for Opt_usr|grp|projjquota

f2fs: avoid reading already updated pages during GC

f2fs: expand scalability of f2fs mount option

f2fs: fix false alarm of lockdep on cp_global_sem lock

f2fs: fix to preserve previous reserve_{blocks,node} value when remount

f2fs: protect extension_list reading with sb_lock in f2fs_sbi_show()

f2fs: use f2fs_filemap_get_folio() instead of f2fs_pagecache_get_page()

fanotify: avoid/silence premature LSM capability checks

fanotify: call fanotify_events_supported() before path_permission() and security_path_notify()

fbdev: matroxfb: Mark variable with __maybe_unused to avoid W=1 build break

fbdev: offb: fix PCI device reference leak on probe failure

firmware: arm_ffa: Use the correct buffer size during RXTX_MAP

firmware: dmi: Correct an indexing error in dmi.h

fs/adfs: validate nzones in adfs_validate_bblk()

fs/mbcache: cancel shrink work before destroying the cache

fs/ntfs3: terminate the cached volume label after UTF-8 conversion

fs/omfs: reject s_sys_blocksize smaller than OMFS_DIR_START

fsnotify: fix inode reference leak in fsnotify_recalc_mask()

fuse: avoid 0x10 fault in fuse_readahead when max_pages == 0

futex: Drop CLONE_THREAD requirement for private default hash alloc

futex: Prevent lockup in requeue-PI during signal/ timeout wakeup

fwctl: Fix class init ordering to avoid NULL pointer dereference on device removal

gfs2: add some missing log locking

gfs2: Call unlock_new_inode before d_instantiate

gfs2: less aggressive low-memory log flushing

gfs2: prevent NULL pointer dereference during unmount

gpu: nova-core: bitfield: fix broken Default implementation

gpu: nova-core: bitfield: Move bitfield-specific code from register! into new macro

gpu: nova-core: register: use field type for Into implementation

HID: asus: do not abort probe when not necessary

HID: asus: make asus_resume adhere to linux kernel coding standards

HID: core: Fix size_t specifier in hid_report_raw_event()

HID: core: introduce hid_safe_input_report()

HID: pass the buffer size to hid_report_raw_event

HID: usbhid: fix deadlock in hid_post_reset()

hrtimer: Avoid pointless reprogramming in __hrtimer_start_range_ns()

hrtimer: Reduce trace noise in hrtimer_start()

hte: tegra194: remove Kconfig dependency on Tegra194 SoC

hwmon: (aspeed-g6-pwm-tach): remove redundant driver remove callback

i3c: dw: Fix memory leak in dw_i3c_master_i3c_xfers()

i3c: master: adi: Fix error propagation for CCCs

i3c: master: dw-i3c: Fix missing reset assertion in remove() callback

i3c: master: renesas: Fix memory leak in renesas_i3c_i3c_xfers()

i3c: mipi-i3c-hci: fix IBI payload length calculation for final status

i40e: Cleanup PTP pins on probe failure

i40e: don't advertise IFF_SUPP_NOFCS

iavf: add VIRTCHNL_OP_ADD_VLAN to success completion handler

iavf: fix wrong VLAN mask for legacy Rx descriptors L2TAG2

iavf: rename IAVF_VLAN_IS_NEW to IAVF_VLAN_ADDING

iavf: stop removing VLAN filters from PF on interface down

iavf: wait for PF confirmation before removing VLAN filters

ice: add dpll peer notification for paired SMA and U.FL pins

ice: fix 'adjust' timer programming for E830 devices

ice: fix double-free of tx_buf skb

ice: fix ICE_AQ_LINK_SPEED_M for 200G

ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g

ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw

ice: fix missing dpll notifications for SW pins

ice: fix missing SMA pin initialization in DPLL subsystem

ice: fix NULL pointer dereference in ice_reset_all_vfs()

ice: fix ready bitmap check for non-E822 devices

ice: fix SMA and U.FL pin state changes affecting paired pin

ice: fix timestamp interrupt configuration for E825C

ice: perform PHY soft reset for E825C ports at initialization

ice: Remove jumbo_remove step from TX path

ice: update PCS latency settings for E825 10G/25Gb modes

idpf: fix double free and use-after-free in aux device error paths

ima: check return value of crypto_shash_final() in boot aggregate

ima_fs: Correctly create securityfs files for unsupported hash algos

io-wq: check that the predecessor is hashed in io_wq_remove_pending()

io_uring/napi: cap busy_poll_to 10 msec

iommu/amd: Bounds-check devid in __rlookup_amd_iommu()

iommu/amd: Fix clone_alias() to use the original device's devid

iommu/riscv: Add IOTINVAL after updating DDT/PDT entries

iommu/riscv: Add missing GENERIC_MSI_IRQ

iommu/riscv: Fix signedness bug

iommu/riscv: Remove overflows on the invalidation path

iommu/riscv: Skip IRQ count check when using MSI interrupts

iommu/riscv: Stop polling when CQCSR reports an error

iommu/tegra241-cmdqv: Set supports_cmd op in tegra241_vcmdq_hw_init()

iommu/tegra241-cmdqv: Update uAPI to clarify HYP_OWN requirement

iommu/vt-d: Avoid NULL pointer dereference or refcount corruption

iommu/vt-d: Disable DMAR for Intel Q35 IGFX

iommu/vt-d: Fix oops due to out of scope access

iommufd/selftest: Fix page leaks in mock_viommu_{init,destroy}

iommufd: vfio compatibility extension check for noiommu mode

iopoll: fix function parameter names in read_poll_timeout_atomic()

ipmi: ssif_bmc: change log level to dbg in irq callback

ipmi: ssif_bmc: fix message desynchronization after truncated response

ipmi: ssif_bmc: fix missing check for copy_to_user() partial failure

ipv6: fix possible UAF in icmpv6_rcv()

ipvs: fix MTU check for GSO packets in tunnel mode

irqchip/gic-v5: Allocate ITS parent LPIs as a range

irqchip/gic-v5: Move LPI allocation into the LPI domain

irqchip/gic-v5: Support range allocation for LPIs

irqchip/irq-pic32-evic: Address warning related to wrong printf() formatter

irqchip/meson-gpio: Use the correct register in meson_s4_gpio_irq_set_type()

irqchip/renesas-rzg2l: Fix error path in rzg2l_irqc_common_probe()

irqchip/riscv-imsic: Clear interrupt move state during CPU offlining

kbuild: builddeb - avoid recompiles for non-cross-compiles

kbuild: Never respect CONFIG_WERROR / W=e to fixdep

kho: make debugfs interface optional

kselftest/arm64: Include for user_gcs definition

ksmbd: destroy async_ida in ksmbd_conn_free()

ksmbd: destroy tree_conn_ida in ksmbd_session_destroy()

ksmbd: fix durable fd leak on ClientGUID mismatch in durable v2 open

ksmbd: fix use-after-free from async crypto on Qualcomm crypto engine

ksmbd: fix use-after-free in smb2_open during durable reconnect

ksmbd: scope conn->binding slowpath to bound sessions only

ktest: Avoid undef warning when WARNINGS_FILE is unset

ktest: Honor empty per-test option overrides

ktest: Run POST_KTEST hooks on failure and cancellation

KVM: Reject wrapped offset in kvm_reset_dirty_gfn()

KVM: s390: pci: fix GAIT table indexing due to double-scaling pointer arithmetic

KVM: x86: Fix Xen hypercall tracepoint argument assignment

leds: lgm-sso: Remove duplicate assignments for priv->mmap

lib/hexdump: print_hex_dump_bytes() calls print_hex_dump_debug()

lib: kunit_iov_iter: fix memory leaks

libbpf: Prevent double close and leak of btf objects

libceph: Fix potential null-ptr-deref in decode_choose_args()

libceph: Fix potential out-of-bounds access in crush_decode()

libceph: Fix potential out-of-bounds access in osdmap_decode()

libceph: handle rbtree insertion error in decode_choose_args()

Linux: Linux 6.18.33

locking: Fix rwlock support in

loop: fix partition scan race between udev and loop_reread_partitions()

macsec: Support VLAN-filtering lower devices

macvlan: annotate data-races around port->bc_queue_len_used

macvlan: fix macvlan_get_size() not reserving space for IFLA_MACVLAN_BC_CUTOFF

mailbox: add sanity check for channel array

mailbox: mailbox-test: don't free the reused channel

mailbox: mailbox-test: free channels on probe error

mailbox: mailbox-test: initialize struct earlier

mailbox: mailbox-test: make data_ready a per-instance variable

mailbox: mtk-cmdq: Fix CURR and END addr for task insert case

md/md-bitmap: add a none backend for bitmap grow

md/md-bitmap: split bitmap sysfs groups

md/raid1,raid10: don't fail devices for invalid IO errors

md/raid1: fix the comparing region of interval tree

md: add fallback to correct bitmap_ops on version mismatch

md: factor bitmap creation away from sysfs handling

md: fix array_state=clear sysfs deadlock

md: remove unused static md_wq workqueue

md: wake raid456 reshape waiters before suspend

media: i2c: og01a1b: Fix V4L2 subdevice data initialization on probe

media: staging: imx: configure src_mux in csi_start

memblock: reserve_mem: fix end caclulation in reserve_mem_release_by_name()

memory: tegra124-emc: Fix dll_change check

memory: tegra30-emc: Fix dll_change check

mfd: mc13xxx-core: Fix memory leak in mc13xxx_add_subdevice_pdata()

module: Fix freeing of charp module parameters when CONFIG_SYSFS=n

mtd: parsers: ofpart: call of_node_get() for dedicated subpartitions

mtd: parsers: ofpart: call of_node_put() only in ofpart_fail path

mtd: physmap_of_gemini: Fix disabled pinctrl state check

mtd: rawnand: sunxi: fix sunxi_nfc_hw_ecc_read_extra_oob

mtd: spi-nor: core: correct the op.dummy.nbytes when check read operations

mtd: spi-nor: sfdp: introduce smpt_map_id fixup hook

mtd: spi-nor: sfdp: introduce smpt_read_dummy fixup hook

mtd: spi-nor: swp: check SR_TB flag when getting tb_mask

mtd: spi-nor: update spi_nor_fixups::post_sfdp() documentation

mtd: spinand: Add missing check

mtd: spinand: Add support for setting a bus interface

mtd: spinand: Create an array of operation templates

mtd: spinand: Decouple write enable and write disable operations

mtd: spinand: Gather all the bus interface steps in one single function

mtd: spinand: Give the bus interface to the configuration helper

mtd: spinand: winbond: Clarify when to enable the HS bit

mtd: spinand: winbond: Configure the IO mode after the dummy cycles

mtd: spinand: winbond: Rename IO_MODE register macro

neigh: let neigh_xmit take skb ownership

net, bpf: fix null-ptr-deref in xdp_master_redirect() for down master

net/mlx5: Fix HCA caps leak on notifier init failure

net/mlx5e: Fix features not applied during netdev registration

net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic()

net/rds: Optimize rds_ib_laddr_check

net/rds: reset op_nents when zerocopy page pin fails

net/rds: Restrict use of RDS/IB to the initial network namespace

net/rds: zero per-item info buffer before handing it to visitors

net/sched: act_ct: Only release RCU read lock after ct_ft

net/sched: act_mirred: fix wrong device for mac_header_xmit check in tcf_blockcast_redir

net/sched: cls_flower: revert unintended changes

net/sched: netem: check for negative latency and jitter

net/sched: netem: fix probability gaps in 4-state loss model

net/sched: netem: fix queue limit check to include reordered packets

net/sched: netem: fix slot delay calculation overflow

net/sched: netem: only reseed PRNG when seed is explicitly provided

net/sched: netem: validate slot configuration

net/sched: sch_cake: annotate data-races in cake_dump_stats() (III)

net/sched: sch_cake: annotate data-races in cake_dump_stats() (V)

net/sched: sch_cake: fix NAT destination port not being updated in cake_update_flowkeys

net/sched: sch_choke: annotate data-races in choke_dump_stats()

net/sched: sch_dualpi2: drain both C-queue and L-queue in dualpi2_change()

net/sched: sch_fq_codel: remove data-races from fq_codel_dump_stats()

net/sched: sch_fq_pie: annotate data-races in fq_pie_dump_stats()

net/sched: sch_pie: annotate data-races in pie_dump_stats()

net/sched: sch_pie: annotate more data-races in pie_dump_stats()

net/sched: sch_red: annotate data-races in red_dump_stats()

net/sched: sch_sfb: annotate data-races in sfb_dump_stats()

net/sched: taprio: fix NULL pointer dereference in class dump

net/sched: taprio: fix use-after-free in advance_sched() on schedule switch

net: airoha: Add airoha_eth_soc_data struct

net: airoha: Add airoha_ppe_get_num_stats_entries() and airoha_ppe_get_num_total_stats_entries()

net: airoha: Add AN7583 SoC support

net: airoha: Add dma_rmb() and READ_ONCE() in airoha_qdma_rx_process()

net: airoha: Add missing bits in airoha_qdma_cleanup_tx_queue()

net: airoha: Add missing PPE configurations in airoha_ppe_hw_init()

net: airoha: Add missing RX_CPU_IDX() configuration in airoha_qdma_cleanup_rx_queue()

net: airoha: Add size check for TX NAPIs in airoha_qdma_cleanup()

net: airoha: Add the capability to consume out-of-order DMA tx descriptors

net: airoha: Do not read uninitialized fragment address in airoha_dev_xmit()

net: airoha: Do not return err in ndo_stop() callback

net: airoha: Do not wake all netdev TX queues in airoha_qdma_wake_netdev_txqs()

net: airoha: Fix a copy and paste bug in probe()

net: airoha: fix BQL imbalance in TX path

net: airoha: Fix FE_PSE_BUF_SET configuration if PPE2 is available

net: airoha: Fix possible TX queue stall in airoha_qdma_tx_napi_poll()

net: airoha: fix typo in function name

net: airoha: Fix VIP configuration for AN7583 SoC

net: airoha: Generalize airoha_ppe2_is_enabled routine

net: airoha: Move entries to queue head in case of DMA mapping failure in airoha_dev_xmit()

net: airoha: Move ndesc initialization at end of airoha_qdma_init_rx_queue()

net: airoha: Move ndesc initialization at end of airoha_qdma_init_tx()

net: airoha: ppe: Dynamically allocate foe_check_time array in airoha_ppe struct

net: airoha: ppe: Move PPE memory info in airoha_eth_soc_data struct

net: airoha: Refactor src port configuration in airhoha_set_gdm2_loopback

net: airoha: Remove code duplication in airoha_regs.h

net: airoha: Rework the code flow in airoha_remove() and in airoha_probe() error path

net: airoha: stop net_device TX queue before updating CPU index

net: airoha: Use gdm port enum value whenever possible

net: airoha: Wait for NPU PPE configuration to complete in airoha_ppe_offload_setup()

net: atlantic: preserve PCI wake-from-D3 on shutdown when WOL enabled

net: bcmgenet: fix leaking free_bds

net: bcmgenet: fix off-by-one in bcmgenet_put_txcb

net: bcmgenet: fix racing timeout handler

net: dsa: append ethtool counters of all hidden ports to conduit

net: dsa: cpu_dp->orig_ethtool_ops might be NULL

net: dsa: realtek: rtl8365mb: fix mode mask calculation

net: dsa: remove redundant netdev_lock_ops() from conduit ethtool ops

net: dsa: use kernel data types for ethtool ops on conduit

net: ena: PHC: Check return code before setting timestamp output

net: ena: PHC: Fix potential use-after-free in get_timestamp

net: enetc: correct the command BD ring consumer index

net: enetc: fix NTMP DMA use-after-free issue

net: ethernet: ti-cpsw: fix linking built-in code to modules

net: ethernet: ti-cpsw:: rename soft_reset() function

net: hamradio: 6pack: fix uninit-value in sixpack_receive_buf

net: ipa: Fix decoding EV_PER_EE for IPA v5.0+

net: ipa: Fix programming of QTIME_TIMESTAMP_CFG

net: mana: Add standard counter rx_missed_errors

net: mana: Don't overwrite port probe error with add_adev result

net: mana: Fix EQ leak in mana_remove on NULL port

net: mana: Fix use-after-free in reset service rescan path

net: mana: Guard mana_remove against double invocation

net: mana: Handle hardware recovery events when probing the device

net: mana: Handle SKB if TX SGEs exceed hardware limit

net: mana: Implement ndo_tx_timeout and serialize queue resets per port.

net: mana: Init gf_stats_work before potential error paths in probe

net: mana: Init link_change_work before potential error paths in probe

net: mana: Move current_speed debugfs file to mana_init_port()

net: mana: Move hardware counter stats from per-port to per-VF context

net: mana: Support HW link state events

net: mana: Use pci_name() for debugfs directory naming

net: mctp i2c: check length before marking flow active

net: phy: dp83869: fix setting CLK_O_SEL field.

net: phy: fix a return path in get_phy_c45_ids()

net: phy: qcom: at803x: Use the correct bit to disable extended next page

net: psp: check for device unregister when creating assoc

net: psp: require admin permission for dev-set and key-rotate

net: skbuff: preserve shared-frag marker during coalescing

net: skbuff: propagate shared-frag marker through frag-transfer helpers

net: tls: fix strparser anchor skb leak on offload RX setup failure

net: usb: rtl8150: fix use-after-free in rtl8150_start_xmit()

net: usb: rtl8150: free skb on usb_submit_urb() failure in xmit

net: validate skb->napi_id in RX tracepoints

net_sched: sch_hhf: annotate data-races in hhf_dump_stats()

netconsole: propagate device name truncation in dev_name_store()

netdevsim: zero initialize struct iphdr in dummy sk_buff

netfilter: arp_tables: fix IEEE1394 ARP payload parsing

netfilter: conntrack: remove sprintf usage

netfilter: nat: use kfree_rcu to release ops

netfilter: nf_conntrack_sip: don't use simple_strtoul

netfilter: nf_conntrack_sip: get helper before allocating expectation

netfilter: nf_tables: use list_del_rcu for netlink hooks

netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO

netfilter: nfnetlink_osf: fix out-of-bounds read on option matching

netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check

netfilter: nft_ct: fix missing expect put in obj eval

netfilter: nft_fwd_netdev: check ttl/hl before forwarding

netfilter: nft_osf: restrict it to ipv4

netfilter: skip recording stale or retransmitted INIT

netfilter: xt_policy: fix strict mode inbound policy matching

netfilter: xt_socket: enable defrag after all other checks

netfilter: xtables: restrict several matches to inet family

netfs: fix error handling in netfs_extract_user_iter()

netfs: Fix potential uninitialised var in netfs_extract_user_iter()

netpoll: fix IPv6 local-address corruption

nexthop: fix IPv6 route referencing IPv4 nexthop

NFC: trf7970a: Ignore antenna noise when checking for RF field

nfp: fix swapped arguments in nfp_encode_basic_qdr() calls

nfs/blocklayout: Fix compilation error (`make W=1`) in bl_write_pagelist()

nfsd: fix file change detection in CB_GETATTR

NFSD: fix nfs4_file access extra count in nfsd4_add_rdaccess_to_wrdeleg

nilfs2: reject zero bd_oblocknr in nilfs_ioctl_mark_blocks_dirty()

nstree: fix func. parameter kernel-doc warnings

nvme-apple: Reset q->sq_tail during queue init

nvme-pci: fix missed admin queue sq doorbell write

nvmet-tcp: propagate nvmet_tcp_build_pdu_iovec() errors to its callers

ocfs2/dlm: fix off-by-one in dlm_match_regions() region comparison

ocfs2/dlm: validate qr_numregions in dlm_match_regions()

ocfs2: fix listxattr handling when the buffer is full

ocfs2: validate bg_bits during freefrag scan

ocfs2: validate group add input before caching

openvswitch: cap upcall PID array size and pre-size vport replies

OPP: debugfs: Use performance level if available to distinguish between rates

OPP: Move break out of scoped_guard in dev_pm_opp_xlate_required_opp()

padata: Put CPU offline callback in ONLINE section to allow failure

padata: Remove cpu online check from cpu add and removal

page_pool: fix memory-provider leak in page_pool_create_percpu() error path

params: Replace __modinit with __init_or_module

PCI/DPC: Log AER error info for DPC/EDR uncorrectable errors

PCI/NPEM: Set LED_HW_PLUGGABLE for hotplug-capable ports

PCI/TPH: Allow TPH enable for RCiEPs

PCI: dwc: Apply ECRC workaround to DesignWare 5.00a as well

PCI: dwc: ep: Fix MSI-X Table Size configuration in dw_pcie_ep_set_msix()

PCI: dwc: Fix type mismatch for kstrtou32_from_user() return value

PCI: dwc: Invoke post_init in dw_pcie_resume_noirq()

PCI: dwc: Perform cleanup in the error path of dw_pcie_resume_noirq()

PCI: dwc: rcar-gen4: Change EPC BAR alignment to 4K as per the documentation

PCI: Enable AtomicOps only if Root Port supports them

PCI: endpoint: pci-ep-msi: Fix error unwind and prevent double alloc

PCI: endpoint: pci-epf-test: Don't free doorbell IRQ unless requested

PCI: Fix alignment calculation for resource size larger than align

PCI: Fix premature removal from realloc_head list during resource assignment

PCI: imx6: Fix device node reference leak in imx_pcie_probe()

PCI: Initialize temporary device in new_id_store()

PCI: mediatek-gen3: Prevent leaking IRQ domains when IRQ not found

PCI: qcom: Advertise Hotplug Slot Capability with no Command Completion support

PCI: tegra194: Allow system suspend when the Endpoint link is not up

PCI: tegra194: Disable direct speed change for Endpoint mode

PCI: tegra194: Disable L1.2 capability of Tegra234 EP

PCI: tegra194: Disable LTSSM after transition to Detect on surprise link down

PCI: tegra194: Disable PERST# IRQ only in Endpoint mode

PCI: tegra194: Don't force the device into the D0 state before L2

PCI: tegra194: Fix CBB timeout caused by DBI access before core power-on

PCI: tegra194: Fix polling delay for L2 state

PCI: tegra194: Free up Endpoint resources during remove()

PCI: tegra194: Increase LTSSM poll time on surprise link down

PCI: tegra194: Remove unnecessary L1SS disable code

PCI: tegra194: Set LTR message request before PCIe link up in Endpoint mode

PCI: tegra194: Use devm_gpiod_get_optional() to parse "nvidia,refclk-select"

PCI: tegra194: Use DWC IP core version

PCI: use generic driver_override infrastructure

PCI: Use res_to_dev_res() in reassign_resources_sorted()

PCMCIA: Fix garbled log messages for KERN_CONT

perf branch: Avoid incrementing NULL

perf cgroup: Update metric leader in evlist__expand_cgroup

perf expr: Return -EINVAL for syntax error in expr__find_ids()

perf lock: Fix option value type in parse_max_stack

perf maps: Fix copy_from that can break sorted by name order

perf maps: Fix fixup_overlap_and_insert that can break sorted by name order

perf stat: Fix opt->value type for parse_cache_level

perf tools: Fix module symbol resolution for non-zero .text sh_addr

perf trace: Avoid an ERR_PTR in syscall_stats

perf trace: Fix IS_ERR() vs NULL check bug

perf util: Kill die() prototype, dead for a long time

perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler

perf/amd/ibs: Preserve PhyAddrVal bit when clearing PhyAddr MSR

perf/x86/intel: Disable PMI for self-reloaded ACR events

perf: tools: cs-etm: Fix print issue for Coresight debug in ETE/TRBE trace

pinctrl: abx500: Fix type of 'argument' variable

pinctrl: cy8c95x0: Avoid returning positive values to user space

pinctrl: cy8c95x0: remove duplicate error message

pinctrl: cy8c95x0: Unify messages with help of dev_err_probe()

pinctrl: pinconf-generic: Fully validate 'pinmux' property

pinctrl: pinctrl-pic32: Fix resource leak

pinctrl: realtek: Fix function signature for config argument

pinctrl: renesas: rzg2l: Fix save/restore of {IOLH,IEN,PUPD,SMT} registers

pinctrl: sophgo: pinctrl-sg2042: Fix wrong module description

pinctrl: sophgo: pinctrl-sg2044: Fix wrong module description

platform/chrome: chromeos_tbmc: Drop wakeup source on remove

platform/surface: surfacepro3_button: Drop wakeup source on remove

platform/wmi: use generic driver_override infrastructure

platform/x86: asus-wmi: adjust screenpad power/brightness handling

platform/x86: asus-wmi: fix screenpad brightness range

platform/x86: barco-p50-gpio: normalize return value of gpio_get

platform/x86: dell-wmi-sysman: bound enumeration string aggregation

platform/x86: dell_rbu: avoid uninit value usage in packet_size_write()

platform/x86: intel: Move debugfs register before creating devices

platform/x86: lenovo-wmi-helpers: Move gamezone enums to wmi-helpers

platform/x86: lenovo-wmi-other: Fix tunable_attr_01 struct members

platform/x86: panasonic-laptop: Fix OPTD notifier registration and cleanup

PM: domains: De-constify fields in struct dev_pm_domain_attach_data

pmdomain: imx: scu-pd: Fix device_node reference leak during ->probe()

pmdomain: ti: omap_prm: Fix a reference leak on device node

powerpc/crash: fix backup region offset update to elfcorehdr

powerpc/crash: Update backup region offset in elfcorehdr on memory hotplug

powerpc/pgtable-frag: Fix bad page state in pte_frag_destroy

powerpc/warp: Fix error handling in pika_dtm_thread

ppp: require CAP_NET_ADMIN in target netns for unattached ioctls

pppoe: drop PFC frames

pstore/ram: fix resource leak when ioremap() fails

pwm: atmel-tcb: Cache clock rates and mark chip as atomic

pwm: stm32: Fix rounding issue for requests with inverted polarity

quota: Fix race of dquot_scan_active() with quota deactivation

r8152: fix incorrect register write to USB_UPHY_XTAL

RDMA/core: Prefer NLA_NUL_STRING

remoteproc: imx_rproc: Check return value of regmap_attach_dev() in imx_rproc_mmio_detect_mode()

remoteproc: xlnx: Fix sram property parsing

reset: amlogic: t7: Fix null reset ops

Revert "ACPI: CPPC: Adjust debug messages in amd_set_max_freq_ratio() to warn"

Revert "arm64: dts: rockchip: add SPDIF audio to Beelink A1"

Revert "papr-hvpipe: convert papr_hvpipe_dev_create_handle() to FD_PREPARE()"

Revert "pseries/papr-hvpipe: Fix race with interrupt handler"

rtc: abx80x: Disable alarm feature if no interrupt attached

rtla/utils: Fix resource leak in set_comm_sched_attr()

rtla: Fix -C/--cgroup interface

rtla: Fix parse_cpu_set() bug introduced by strtoi()

rtla: Replace atoi() with a robust strtoi()

rust: sync: atomic: Remove bound `T: Sync` for `Atomic::from_ptr()`

s390/bpf: Zero-extend bpf prog return values and kfunc arguments

s390/cio: use generic driver_override infrastructure

s390/mm: Fix phys_to_folio() usage in do_secure_storage_access()

sched/fair: Clear rel_deadline when initializing forked entities

sched/fair: Fix wakeup_preempt_fair() for not waking up task

sched/fair: Fix wakeup_preempt_fair() vs delayed dequeue

sched/fair: Reimplement NEXT_BUDDY to align with EEVDF goals

sched/fair: Revert force wakeup preemption

sched/psi: fix race between file release and pressure write

sched/rt: Skip group schedulable check with rt_group_sched=0

sched/topology: Compute sd_weight considering cpuset partitions

sched/topology: Fix sched_domain_span()

sched_ext: Fix ops.cgroup_move() invocation kf_mask and rq tracking

sched_ext: Guard scx_dsq_move() against NULL kit->dsq after failed iter_new

sched_ext: Pass held rq to SCX_CALL_OP() for core_sched_before

sched_ext: Track @p's rq lock across set_cpus_allowed_scx -> ops.set_cpumask

scripts/gdb: timerlist: Adapt to move of tk_core

scsi: sg: Fix sysctl sg-big-buff register during sg_init()

scsi: sg: Resolve soft lockup issue when opening /dev/sgX

scsi: target: core: Fix integer overflow in UNMAP bounds check

scsi: ufs: rockchip,rk3576-ufshc: dt-bindings: Add new mphy reset item

sctp: discard stale INIT after handshake completion

sctp: fix missing encap_port propagation for GSO fragments

sctp: fix OOB write to userspace in sctp_getsockopt_peer_auth_chunks

selftest: memcg: skip memcg_sock test if address family not supported

selftests/bpf: fix __jited_unpriv tag name

selftests/bpf: Fix reg_bounds to match new tnum-based refinement

selftests/bpf: Remove test_access_variable_array

selftests/futex: Fix incorrect result reporting of futex_requeue test item

selftests/mm: skip migration tests if NUMA is unavailable

selftests/powerpc: Suppress -Wmaybe-uninitialized with GCC 15

selftests/sched_ext: Add missing error check for exit__load()

selftests: netfilter: nft_tproxy.sh: adjust to socat changes

sfc: fix error code in efx_devlink_info_running_versions()

slab: Introduce kmalloc_obj() and family

slip: bound decode() reads against the compressed packet length

slip: reject VJ receive packets on instances with no rstate array

smb/client: fix possible infinite loop and oob read in symlink_data()

smb: client: Use FullSessionKey for AES-256 encryption key derivation

smb: move smb_version_values to common/smbglob.h

soc/tegra: cbb: Fix cross-fabric target timeout lookup

soc/tegra: cbb: Fix incorrect ARRAY_SIZE in fabric lookup tables

soc/tegra: cbb: Set ERD on resume for err interrupt

soc: qcom: aoss: compare against normalized cooling state

soc: qcom: llcc: fix v1 SB syndrome register offset

soc: qcom: ocmem: make the core clock optional

soc: qcom: ocmem: register reasons for probe deferrals

soc: qcom: ocmem: return -EPROBE_DEFER is ocmem is not available

soundwire: bus: demote UNATTACHED state warnings to dev_dbg()

soundwire: cadence: Clear message complete before signaling waiting thread

soundwire: debugfs: initialize firmware_file to empty string

soundwire: Intel: test bus.bpt_stream before assigning it

sparc64: vdso: Link with -z noexecstack

spi: amlogic-spisg: initialize completion before requesting IRQ

spi: fsl-qspi: Use reinit_completion() for repeated operations

spi: hisi-kunpeng: prevent infinite while() loop in hisi_spi_flush_fifo

spi: mtk-snfi: unregister ECC engine on probe failure and remove() callback

spi: nxp-fspi: Use reinit_completion() for repeated operations

spi: rockchip: Read ISR, not IMR, to detect cs-inactive IRQ

spi: sifive: fix controller deregistration

spi: sifive: Simplify clock handling with devm_clk_get_enabled()

stop_machine: Fix the documentation for a NULL cpus argument

tcp: add data-race annotations around tp->data_segs_out and tp->total_retrans

tcp: add data-race annotations for TCP_NLA_SNDQ_SIZE

tcp: add data-races annotations around tp->reordering, tp->snd_cwnd

tcp: annotate data-races around (tp->write_seq - tp->snd_nxt)

tcp: annotate data-races around tp->bytes_retrans

tcp: annotate data-races around tp->bytes_sent

tcp: annotate data-races around tp->delivered and tp->delivered_ce

tcp: annotate data-races around tp->dsack_dups

tcp: annotate data-races around tp->plb_rehash

tcp: annotate data-races around tp->reord_seen

tcp: annotate data-races around tp->snd_ssthresh

tcp: annotate data-races around tp->srtt_us

tcp: annotate data-races around tp->timeout_rehash

tcp: annotate data-races in tcp_get_info_chrono_stats()

tcp: better handle TCP_TX_DELAY on established flows

tcp: Don't set treq->req_usec_ts in cookie_tcp_reqsk_init().

tcp: inline tcp_chrono_start()

tcp: make probe0 timer handle expired user timeout

tcp: move tp->chrono_type next tp->chrono_stat[]

tcp: send a challenge ACK on SEG.ACK > SND.NXT

thermal/drivers/spear: Fix error condition for reading st,thermal-flags

tipc: fix double-free in tipc_buf_append()

tools/nolibc/printf: Change variables 'c' to 'ch' and 'tmpbuf[]' to 'outbuf[]'

tools/nolibc/printf: Move snprintf length check to callback

tools/nolibc: implement %m if errno is not defined

tools/power turbostat.8: Document the "--force" option

tools/power turbostat: Fix and document --header_iterations

tools/power turbostat: Fix unrecognized option '-P'

tools/power turbostat: Use strtoul() for iteration parsing

tracing: branch: Fix inverted check on stat tracer registration

tracing: move __printf() attribute on __ftrace_vbprintk()

tracing: move tracing declarations from kernel.h to a dedicated header

tracing: Rebuild full_name on each hist_field_name() call

tracing: remove size parameter in __trace_puts()

tty: hvc_iucv: fix off-by-one in number of supported devices

tty: serial: ip22zilog: Fix section mispatch warning

udp: Force compute_score to always inline

unshare: fix nsproxy leak in ksys_unshare() on set_cred_ucounts() failure

usb: typec: Fix error pointer dereference

usb: typec: ps883x: Fix Oops at unbind

vdpa: use generic driver_override infrastructure

vfio: refactor vfio_pci_mmap_huge_fault function

vfio: unhide vdev->debug_root

vhost_net: fix sleeping with preempt-disabled in vhost_net_busy_poll()

virt: arm-cca-guest: fix error check for RSI_INCOMPLETE

virt: sev-guest: Do not use host-controlled page order in cleanup path

virtio_net: sync rss_trailer.max_tx_vq on queue_pairs change via VQ_PAIRS_SET

vrf: Fix a potential NPD when removing a port from a VRF

vsock/virtio: fix MSG_ZEROCOPY pinned-pages accounting

wifi: ath10k: fix station lookup failure during disconnect

wifi: brcmfmac: Fix error pointer dereference

wifi: ieee80211: fix definition of EHT-MCS 15 in MRU

wifi: ieee80211: split EHT definitions out

wifi: ieee80211: split HE definitions out

wifi: ieee80211: split HT definitions out

wifi: ieee80211: split mesh definitions out

wifi: ieee80211: split VHT definitions out

wifi: libertas: don't kill URBs in interrupt context

wifi: libertas: use USB anchors for tracking in-flight URBs

wifi: mac80211: handle VHT EXT NSS in ieee80211_determine_our_sta_mode()

wifi: mt76: fix deadlock in remain-on-channel

wifi: mt76: Fix memory leak destroying device

wifi: mt76: fix multi-radio on-channel scanning

wifi: mt76: mt7615: fix use_cts_prot support

wifi: mt76: mt7915: fix use-after-free bugs in mt7915_mac_dump_work()

wifi: mt76: mt7915: fix use_cts_prot support

wifi: mt76: mt7921: fix 6GHz regulatory update on connection

wifi: mt76: mt7921: fix potential deadlock in mt7921_roc_abort_sync

wifi: mt76: mt7921: Place upper limit on station AID

wifi: mt76: mt7921: Reset ampdu_state state in case of failure in mt76_connac2_tx_check_aggr()

wifi: mt76: mt7925: cqm rssi low/high event notify

wifi: mt76: mt7925: drop puncturing handling from BSS change path

wifi: mt76: mt7925: Fix incorrect MLO mode in firmware control

wifi: mt76: mt7925: fix potential deadlock in mt7925_roc_abort_sync

wifi: mt76: mt7925: prevent NULL pointer dereference in mt7925_tx_check_aggr()

wifi: mt76: mt7925: prevent NULL vif dereference in mt7925_mac_write_txwi

wifi: mt76: mt7996: Add missing CHANCTX_STA_CSA property

wifi: mt76: mt7996: Clear wcid pointer in mt7996_mac_sta_deinit_link()

wifi: mt76: mt7996: Decrement sta counter removing the link in mt7996_mac_reset_sta_iter()

wifi: mt76: mt7996: fix FCS error flag check in RX descriptor

wifi: mt76: mt7996: fix iface combination for different chipsets

wifi: mt76: mt7996: fix RRO EMU configuration

wifi: mt76: mt7996: fix struct mt7996_mcu_uni_event

wifi: mt76: mt7996: fix the behavior of radar detection

wifi: mt76: mt7996: fix use-after-free bugs in mt7996_mac_dump_work()

wifi: mt76: mt7996: fix wrong DMAD length when using MAC TXP

wifi: mt76: mt7996: Remove link pointer dependency in mt7996_mac_sta_remove_links()

wifi: mt76: mt7996: Reset ampdu_state state in case of failure in mt7996_tx_check_aggr()

wifi: mt76: mt7996: Reset mtxq->idx if primary link is removed in mt7996_vif_link_remove()

wifi: mt76: mt7996: Set mtxq->wcid just for primary link

wifi: mt76: mt7996: Switch to the secondary link if the default one is removed

wifi: mt76: mt7996: use correct link_id when filling TXD and TXP

wifi: mt76: support upgrading passive scans to active

wifi: mwifiex: Fix memory leak in mwifiex_11n_aggregate_pkt()

wifi: rtlwifi: pci: fix possible use-after-free caused by unfinished irq_prepare_bcn_tasklet

wifi: rtw89: phy: fix uninitialized variable access in rtw89_phy_cfo_set_crystal_cap()

workqueue: Fix wq->cpu_pwq leak in alloc_and_link_pwqs() WQ_UNBOUND path

x86/kexec: Push kjump return address even for non-kjump kexec

x86/tdx: Fix the typo in TDX_ATTR_MIGRTABLE

x86/um/vdso: Drop VDSO64-y from Makefile

x86/um: fix vDSO installation

x86/vdso: Clean up remnants of VDSO32_NOTE_MASK

xfs: fix memory leak on error in xfs_alloc_zone_info()