Skip to content
Open
Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
555 commits
Select commit Hold shift + click to select a range
53e821f
KVM: SVM: check validity of VMCB controls when returning from SMM
bonzini Mar 9, 2026
33fe956
net: stmmac: Disable EEE RX clock stop when VLAN is enabled
Nov 13, 2025
8d09618
net/sched: sch_red: Replace direct dequeue call with peek and qdisc_d…
jhsmt Apr 30, 2026
6f49f94
exit: prevent preemption of oopsing TASK_DEAD task
thejh May 11, 2026
5860ab3
wifi: mt76: mt7925: fix AMPDU state handling in mt7925_tx_check_aggr
Quanzhoucen Nov 27, 2025
6fc7c8b
wifi: mt76: mt7925: fix incorrect length field in txpower command
Sep 8, 2025
0aa63d3
wifi: mt76: mt7921: fix a potential clc buffer length underflow
leon-yen Oct 9, 2025
6d55948
wifi: mt76: mt7921: fix ROC abort flow interruption in mt7921_roc_work
Quanzhoucen Jan 23, 2026
9d1bc15
wifi: b43legacy: enforce bounds check on firmware key index in RX path
Apr 17, 2026
e131562
wifi: mac80211: drop stray 'static' from fast-RX rx_result
Lyther Apr 24, 2026
4f9a4ae
wifi: rsi: fix kthread lifetime race between self-exit and external-stop
name2965 Apr 22, 2026
7577a4b
wifi: mac80211: use safe list iteration in radar detect work
benzea May 5, 2026
e9f1081
wifi: ath5k: do not access array OOB
Dec 9, 2025
9e28654
wifi: mac80211: remove station if connection prep fails
jmberg-intel May 5, 2026
d702987
wifi: b43: enforce bounds check on firmware key index in b43_rx()
Apr 17, 2026
658d2e4
wifi: brcmfmac: Fix potential use-after-free issue when stopping watc…
mszyprow Apr 16, 2026
8247f52
usb: usblp: fix heap leak in IEEE 1284 device ID via short response
gregkh Apr 20, 2026
762a6cc
usb: usblp: fix uninitialized heap leak via LPGETSTATUS ioctl
gregkh Apr 20, 2026
00e095d
ALSA: usb-audio: midi2: Restart output URBs on resume
CassivsGabriellis May 4, 2026
be09b47
ALSA: usb-audio: Avoid potential endless loop in convert_chmap_v3()
tiwai Apr 27, 2026
411f2f7
ALSA: usb-audio: Fix UAC3 cluster descriptor size check
CassivsGabriellis Apr 24, 2026
52a0cf7
USB: omap_udc: DMA: Don't enable burst 4 mode
aakoskin Apr 13, 2026
6ef872d
USB: serial: option: add Telit Cinterion LE910Cx compositions
fabio-porcedda Apr 27, 2026
2a71e01
usb: ulpi: fix memory leak on ulpi_register() error paths
outman119 Apr 7, 2026
0c1c186
usb: typec: tcpm: fix debug accessory mode detection for sink ports
Apr 24, 2026
f8ad9ef
ALSA: hda: cs35l56: Propagate ASP TX source control errors
CassivsGabriellis Apr 23, 2026
ac3e9b5
ALSA: pcm: oss: Fix data race at accessing runtime.oss.trigger
tiwai Apr 24, 2026
d829cac
ALSA: hda/realtek: Fix speaker silence after S3 resume on Xiaomi Mi L…
ypadlyak Apr 29, 2026
d761428
ALSA: firewire-tascam: Do not drop unread control events
CassivsGabriellis May 4, 2026
878c19d
ALSA: core: Serialize deferred fasync state checks
CassivsGabriellis May 6, 2026
9ef79d4
ALSA: seq: Fix UMP group 16 filtering
CassivsGabriellis May 6, 2026
ef49059
powerpc/kdump: fix KASAN sanitization flag for core_$(BITS).o
sourabhjains Apr 7, 2026
c73fdf2
x86/efi: Restore IRQ state in EFI page fault handler
ardbiesheuvel May 1, 2026
0fe995a
xfrm: provide message size for XFRM_MSG_MAPPING
ruijieli51 Apr 28, 2026
4980162
xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete
kosiorkosa47 Apr 29, 2026
9d50477
ipv6: xfrm6: release dst on error in xfrm6_rcv_encap()
101010zyl Apr 12, 2026
7db99a0
xfrm: ah: account for ESN high bits in async callbacks
mjbommar Apr 19, 2026
e3e722e
selinux: fix avdcache auditing
stephensmalley Apr 10, 2026
d350fef
selinux: use sk blob accessor in socket permission helpers
chenzongyao200127 Apr 24, 2026
71e68e8
selinux: don't reserve xattr slot when we won't fill it
dwindsor Apr 26, 2026
e5c12a1
selinux: shrink critical section in sel_write_load()
stephensmalley Apr 30, 2026
52a5d96
selinux: prune /sys/fs/selinux/checkreqprot
stephensmalley May 5, 2026
058a5e7
selinux: prune /sys/fs/selinux/disable
stephensmalley May 5, 2026
05b63fb
selinux: prune /sys/fs/selinux/user
stephensmalley May 5, 2026
53ad20e
LoongArch: KVM: Fix missing EMULATE_FAIL in kvm_emu_mmio_read()
May 4, 2026
b40cdd1
Bluetooth: virtio_bt: clamp rx length before skb_put
mjbommar Apr 21, 2026
3485c72
Bluetooth: virtio_bt: validate rx pkt_type header length
mjbommar Apr 21, 2026
624fb79
Bluetooth: btmtk: validate WMT event SKB length before struct access
Apr 21, 2026
77981a5
Bluetooth: hci_event: Fix OOB read and infinite loop in hci_le_create…
Vudentz Apr 10, 2026
741e602
Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_new_connection_cb()
fourdim Apr 15, 2026
1810e42
Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_state_change_cb()
fourdim Apr 15, 2026
32bd343
Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_get_sndtimeo_cb()
fourdim Apr 15, 2026
4ea3b2e
rust: drm: gem: clean up GEM state in init failure case
Apr 23, 2026
16a7e84
rust: allow `clippy::collapsible_match` globally
ojeda Apr 26, 2026
ca488ac
rust: allow `clippy::collapsible_if` globally
ojeda Apr 26, 2026
40db1bd
spi: syncuacer: fix controller deregistration
jhovold Apr 10, 2026
9aea3d4
spi: sun4i: fix controller deregistration
jhovold Apr 10, 2026
9df7d25
spi: ti-qspi: fix controller deregistration
jhovold Apr 10, 2026
93f83b3
spi: sun6i: fix controller deregistration
jhovold Apr 10, 2026
4f0dd52
spi: zynqmp-gqspi: fix controller deregistration
jhovold Apr 10, 2026
1b66f16
spi: s3c64xx: fix NULL-deref on driver unbind
jhovold Apr 10, 2026
d71240d
staging: vme_user: fix root device leak on init failure
jhovold Apr 24, 2026
7baa02b
fanotify: fix false positive on permission events
Apr 10, 2026
83b131a
KVM: arm64: Fix kvm_vcpu_initialized() macro parameter
Apr 24, 2026
34bdcfb
mtd: spi-nor: debugfs: fix out-of-bounds read in spi_nor_params_show()
ambarus Apr 17, 2026
10c2525
arm64: signal: Preserve POR_EL0 if poe_context is missing
kevin-brodsky-arm Apr 27, 2026
8f75597
mm/hugetlb_cma: round up per_node before logging it
hqsz Apr 22, 2026
52070a9
LoongArch: Fix SYM_SIGFUNC_START definition for 32BIT
chenhuacai May 4, 2026
fbe0e61
net: rtnetlink: zero ifla_vf_broadcast to avoid stack infoleak in rtn…
IzenJ Apr 30, 2026
4bf22a0
mptcp: pm: ADD_ADDR rtx: skip inactive subflows
matttbe May 5, 2026
aab56b9
perf/x86/intel: Improve validation and configuration of ACR masks
Apr 30, 2026
0ff2b71
sound: ua101: fix division by zero at probe
suunj Apr 26, 2026
0479b6e
pseries/papr-hvpipe: Prevent kernel stack memory leak to userspace
riteshharjani May 1, 2026
2b1335e
pseries/papr-hvpipe: Fix & simplify error handling in papr_hvpipe_init()
riteshharjani May 1, 2026
62951b4
pseries/papr-hvpipe: Fix the usage of copy_to_user()
riteshharjani May 1, 2026
33c5bb5
net: libwx: fix VF illegal register access
Apr 29, 2026
e70cfb4
ip6_gre: Use cached t->net in ip6erspan_changelink().
maoyixie Apr 30, 2026
1bca036
net: libwx: use request_irq for VF misc interrupt
Apr 29, 2026
3d47d62
netpoll: pass buffer size to egress_dev() to avoid MAC truncation
leitao May 1, 2026
14ef6fd
net/rds: handle zerocopy send cleanup before the message is queued
tonanli66-code May 1, 2026
2b56d79
net: wwan: t7xx: validate port_count against message length in t7xx_p…
pavitrajha May 1, 2026
23ae72e
platform/chrome: cros_ec_typec: Init mutex in Thunderbolt registration
May 5, 2026
c9b6204
parisc: Fix IRQ leak in LASI driver
zenghongling0719 May 3, 2026
22b365b
x86/efi: Fix graceful fault handling after FPU softirq changes
Ivanhu5866 Apr 30, 2026
357ef14
hwmon: (ltc2992) Clamp threshold writes to hardware range
Apr 16, 2026
13a0f02
hwmon: (ltc2992) Fix u32 overflow in power read path
Apr 16, 2026
370d4de
clk: rk808: fix OF node reference imbalance
jhovold Apr 7, 2026
aa4d6fe
hwmon: (corsair-psu) Close HID device on probe errors
testacegi Apr 24, 2026
c34c414
af_unix: Reject SIOCATMARK on non-stream sockets
May 6, 2026
8aacf87
arm64/fpsimd: ptrace: zero target's fpsimd_state, not the tracer's
leitao May 5, 2026
cb27e43
pmdomain: mediatek: fix use-after-free in scpsys_get_bus_protection_l…
ISCAS-Vulab Apr 8, 2026
f17d521
block: add pgmap check to biovec_phys_mergeable
Apr 10, 2026
281a001
block: only read from sqe on initial invocation of blkdev_uring_cmd()
axboe May 4, 2026
064f2e4
cifs: abort open_cached_dir if we don't request leases
sprasad-microsoft Apr 28, 2026
196efa8
cifs: change_conf needs to be called for session setup
sprasad-microsoft Mar 30, 2026
bbf6327
extcon: ptn5150: handle pending IRQ events during system resume
Nov 15, 2025
5b95882
gpio: of: clear OF_POPULATED on hog nodes in remove path
Mar 9, 2026
cb028f7
hv: Select CONFIG_SYSFB only for CONFIG_HYPERV_VMBUS
tdz Apr 2, 2026
d1b9424
hv_sock: fix ARM64 support
effective-light Apr 28, 2026
317e434
hv_sock: Report EOF instead of -EIO for FIN
dcui Apr 16, 2026
4f82f04
hv_sock: Return -EIO for malformed/short packets
dcui Apr 23, 2026
c1f2618
ibmveth: Disable GSO for packets with small MSS
Apr 24, 2026
121d1f2
ice: fix double free in ice_sf_eth_activate() error path
lgs2513 Apr 17, 2026
d945d71
spi: microchip-core-qspi: fix controller deregistration
jhovold Apr 9, 2026
ec9d0dd
spi: microchip-core-qspi: don't attempt to transmit during emulated r…
ConchuOD Apr 30, 2026
998f431
spi: microchip-core-qspi: control built-in cs manually
ConchuOD Apr 30, 2026
b1040af
tracefs: Fix default permissions not being applied on initial mount
devnexen Apr 4, 2026
1873eb8
udf: reject descriptors with oversized CRC length
mjbommar Apr 13, 2026
eb295d2
thermal: core: Free thermal zone ID later during removal
rafaeljw Apr 7, 2026
3933dfb
thermal/drivers/sprd: Fix temperature clamping in sprd_thm_temp_to_ra…
toblux Mar 7, 2026
4b16c06
thermal/drivers/sprd: Fix raw temperature clamping in sprd_thm_rawdat…
toblux Mar 7, 2026
b3bdc7a
spi: topcliff-pch: fix controller deregistration
jhovold Apr 14, 2026
d50ef35
spi: topcliff-pch: fix use-after-free on unbind
jhovold Apr 14, 2026
b528c7f
tracing/probes: Limit size of event probe to 3K
rostedt Apr 28, 2026
9eccdb7
clk: imx: imx8-acm: fix flags for acm clocks
eichenberger Feb 12, 2026
a0780ae
clk: microchip: mpfs-ccc: fix out of bounds access during output regi…
ConchuOD Feb 24, 2026
54a44bb
cpuidle: powerpc: avoid double clear when breaking snooze
Mar 11, 2026
65aabf8
ASoC: amd: yc: Add HP OMEN Gaming Laptop 16-ap0xxx product line in qu…
t00m-s Apr 29, 2026
3a5287c
ASoC: ES8389: convert to devm_clk_get_optional() to get clock
Apr 17, 2026
846fcce
ASoC: fsl_easrc: fix comment typo
josephtsalisbury Mar 16, 2026
4e550b5
ASoC: Intel: bytcr_wm5102: Fix MCLK leak on platform_clock_control error
CassivsGabriellis Apr 28, 2026
6d43355
ASoC: qcom: q6apm-dai: reset queue ptr on trigger stop
Apr 2, 2026
7cab9f2
ASoC: qcom: q6apm-lpass-dai: Fix multiple graph opens
Apr 2, 2026
48102d8
ASoC: qcom: q6apm: remove child devices when apm is removed
Apr 2, 2026
9a06097
btrfs: fix double free in create_space_info() error path
lgs2513 Apr 1, 2026
fb388eb
btrfs: fix missing last_unlink_trans update when removing a directory
fdmanana Apr 9, 2026
85311a5
dm-thin: fix metadata refcount underflow
Apr 20, 2026
cb7c6a8
dm: don't report warning when doing deferred remove
Mar 16, 2026
5af6a87
dm: fix a buffer overflow in ioctl processing
Apr 9, 2026
52b109f
eventfs: Hold eventfs_mutex and SRCU when remount walks events
devnexen Apr 18, 2026
9a484c8
dm-verity-fec: correctly reject too-small FEC devices
Feb 6, 2026
1919acc
dm-verity-fec: correctly reject too-small hash devices
Feb 6, 2026
e69da8e
isofs: validate Rock Ridge CE continuation extent against volume size
mjbommar Apr 19, 2026
afbafed
isofs: validate block number from NFS file handle in isofs_export_iget
mjbommar Apr 19, 2026
0d96652
iommufd: Fix return value of iommufd_fault_fops_write()
duanzhenzhong Mar 30, 2026
3ea9ce7
iommu/vt-d: Block PASID attachment to nested domain with dirty tracking
duanzhenzhong Apr 2, 2026
cbb032f
iommu/arm-smmu-v3: Add a missing dma_wmb() for hitless STE update
nicolinc Mar 17, 2026
8637dfb
lib/crypto: mpi: Fix integer underflow in mpi_read_raw_from_sgl()
l1k Apr 12, 2026
8fbba68
lib/scatterlist: fix length calculations in extract_kvec_to_sg
Mar 26, 2026
7cdf186
lib/scatterlist: fix temp buffer in extract_user_to_sg()
Mar 26, 2026
b7df9fb
libceph: Fix slab-out-of-bounds access in auth message processing
Apr 21, 2026
913d556
md/raid10: fix divide-by-zero in setup_geo() with zero far_copies
avasummer Apr 16, 2026
c77c829
nvme-apple: drop invalid put of admin queue reference count
pchelkin91 Apr 8, 2026
67e1aaf
nvmet-tcp: fix race between ICReq handling and queue teardown
Apr 8, 2026
781f47d
nvmet: avoid recursive nvmet-wq flush in nvmet_ctrl_free
Apr 9, 2026
3df75ff
openvswitch: vport: fix self-deadlock on release of tunnel ports
igsilya Apr 30, 2026
51a7dd9
pmdomain: core: Fix detach procedure for virtual devices in genpd
Apr 17, 2026
ac4bf66
psp: strip variable-length PSP header in psp_dev_rcv()
devnexen May 2, 2026
1912f78
RDMA/hns: Fix unlocked call to hns_roce_qp_remove()
jgunthorpe Apr 28, 2026
bd62c0f
riscv: kvm: fix vector context allocation leak
osamakader Mar 16, 2026
e3eee7e
s390/debug: Reject zero-length input in debug_input_flush_fn()
Apr 17, 2026
cf90a96
s390/debug: Reject zero-length input before trimming a newline
neosys007 Apr 17, 2026
45dcc81
scsi: mpt3sas: Limit NVMe request size to 2 MiB
Apr 14, 2026
512d33b
smb/client: fix out-of-bounds read in smb2_compound_op()
May 6, 2026
b8c8a70
smb/client: fix out-of-bounds read in symlink_data()
May 2, 2026
be1ef95
smb: client: use kzalloc to zero-initialize security descriptor buffer
bjoernd Apr 30, 2026
c688f3e
smb: client: validate dacloffset before building DACL pointers
mjbommar Apr 20, 2026
d6f4e21
KVM: x86: check for nEPT/nNPT in slow flush hypercalls
bonzini Apr 27, 2026
bb17039
KVM: x86: Do IRR scan in __kvm_apic_update_irr even if PIR is empty
bonzini May 3, 2026
cb825c2
mm/damon/stat: detect and use fresh enabled value
sjp38 Apr 19, 2026
eafd6f5
mm/damon/sysfs-schemes: protect memcg_path kfree() with damon_sysfs_lock
sjp38 Apr 23, 2026
185d51e
PCI: Update saved_config_space upon resource assignment
l1k Apr 15, 2026
70a5d28
PCI/AER: Clear only error bits in PCIe Device Status
axiqia Feb 11, 2026
24582f5
PCI/AER: Stop ruling out unbound devices as error source
l1k Mar 27, 2026
1bf238e
PCI/ASPM: Fix pci_clear_and_set_config_dword() usage
l1k Feb 16, 2026
4b6886c
power: supply: max17042: avoid overflow when determining health
andred Mar 2, 2026
2546fb8
powerpc/xive: fix kmemleak caused by incorrect chip_data lookup
shroffni Mar 11, 2026
4490524
perf/x86/intel: Always reprogram ACR events to prevent stale masks
Apr 30, 2026
61df14f
RDMA/ionic: bound node_desc sysfs read with %.64s
IzenJ Apr 7, 2026
d886bcd
RDMA/ionic: Fix typo in format string
jgunthorpe Apr 28, 2026
ab64c63
RDMA/mana: Fix error unwind in mana_ib_create_qp_rss()
jgunthorpe Apr 28, 2026
bb9cb36
RDMA/mana: Fix mana_destroy_wq_obj() cleanup in mana_ib_create_qp_rss()
jgunthorpe Apr 28, 2026
9ef65af
RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss()
jgunthorpe Apr 28, 2026
012796f
RDMA/mana: Validate rx_hash_key_len
jgunthorpe Apr 28, 2026
1e2a448
RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event()
jgunthorpe Apr 28, 2026
e01b8c9
RDMA/mlx4: Fix resource leak on error in mlx4_ib_create_srq()
jgunthorpe Apr 28, 2026
b087913
RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init()
avasummer Apr 24, 2026
8832626
RDMA/ocrdma: Don't NULL deref uctx on errors in ocrdma_copy_pd_uresp()
jgunthorpe Apr 28, 2026
105bf79
RDMA/rxe: Reject non-8-byte ATOMIC_WRITE payloads
mjbommar Apr 18, 2026
006a3a5
RDMA/rxe: Reject unknown opcodes before ICRC processing
mjbommar Apr 14, 2026
0c63333
RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path
jgunthorpe Apr 28, 2026
a8f4a82
sched_ext: idle: Recheck prev_cpu after narrowing allowed mask
devnexen Apr 30, 2026
2efd6bd
selftests: mptcp: check output: catch cmd errors
matttbe May 5, 2026
2146145
selftests: mptcp: pm: restrict 'unknown' check to pm_nl_ctl
matttbe May 5, 2026
4f269fc
mptcp: fastclose msk when linger time is 0
matttbe Apr 27, 2026
fa26c8d
mptcp: use MPJoinSynAckHMacFailure for SynAck HMAC failure
shardulsdk-mpiric May 1, 2026
e74f33c
mptcp: use MPTCP_RST_EMPTCP for ACK HMAC validation failure
shardulsdk-mpiric May 1, 2026
c7362ee
mptcp: sockopt: set timestamp flags on subflow socket, not msk
Dwyane-Yan Apr 27, 2026
e083d1d
mptcp: sockopt: increase seq in mptcp_setsockopt_all_sf
matttbe May 1, 2026
e6ad28d
mptcp: fix rx timestamp corruption on fastopen
May 1, 2026
8a005fe
mptcp: fix scheduling with atomic in timestamp sockopt
Dwyane-Yan Apr 27, 2026
6f5ba49
mptcp: pm: prio: skip closed subflows
matttbe May 5, 2026
07c2f3c
mptcp: pm: kernel: correctly retransmit ADD_ADDR ID 0
matttbe May 5, 2026
cffc6fc
mptcp: pm: ADD_ADDR rtx: allow ID 0
matttbe May 5, 2026
2ad56e4
mptcp: pm: ADD_ADDR rtx: fix potential data-race
matttbe May 5, 2026
acd3d35
mptcp: pm: ADD_ADDR rtx: always decrease sk refcount
matttbe May 5, 2026
b74ad20
mptcp: pm: ADD_ADDR rtx: free sk if last
matttbe May 5, 2026
107e956
mptcp: pm: ADD_ADDR rtx: resched blocked ADD_ADDR quicker
matttbe May 5, 2026
464747e
mptcp: pm: ADD_ADDR rtx: return early if no retrans
matttbe May 5, 2026
060029e
f2fs: add READ_ONCE() for i_blocks in f2fs_update_inode()
zzzccc427 Mar 18, 2026
63c2d2a
f2fs: fix fiemap boundary handling when read extent cache is incomplete
Mar 23, 2026
bedb710
f2fs: fix fsck inconsistency caused by incorrect nat_entry flag usage
Mar 10, 2026
f37012c
f2fs: fix incorrect file address mapping when inline inode is unwritten
Feb 3, 2026
d438a9f
f2fs: fix incorrect multidevice info in trace_f2fs_map_blocks()
Mar 23, 2026
b0e4395
f2fs: fix node_cnt race between extent node destroy and writeback
Apr 3, 2026
8d269aa
f2fs: fix uninitialized kobject put in f2fs_init_sysfs()
lgs2513 Apr 10, 2026
4bdc05b
f2fs: refactor f2fs_move_node_folio function
Mar 18, 2026
03806ec
f2fs: fix inline data not being written to disk in writeback path
Mar 18, 2026
8be551f
f2fs: fix fsck inconsistency caused by FGGC of node block
Mar 18, 2026
837db07
KVM: arm64: Wake-up from WFI when iqrchip is in userspace
Apr 23, 2026
7b99369
KVM: arm64: vgic: Fix IIDR revision field extracted from wrong value
dwmw2 Apr 7, 2026
81e7907
KVM: arm64: Fix initialisation order in __pkvm_init_finalise()
Apr 24, 2026
7e9f5f6
KVM: arm64: Fix FEAT_SPE_FnE to use PMSIDR_EL1.FnE, not PMSVer
Apr 24, 2026
931c9c7
KVM: arm64: Fix FEAT_Debugv8p9 to check DebugVer, not PMUVer
Apr 24, 2026
7d3c27b
KVM: arm64: Fix pin leak and publication ordering in __pkvm_init_vcpu()
Apr 24, 2026
9e1aed6
LoongArch: Fix potential ADE in loongson_gpu_fixup_dma_hang()
opsiff May 4, 2026
e50d857
LoongArch: KVM: Cap KVM_CAP_NR_VCPUS by KVM_CAP_MAX_VCPUS
JohnsPony May 4, 2026
1c32824
LoongArch: KVM: Fix "unreliable stack" for kvm_exc_entry
lixianglai May 4, 2026
b715ceb
LoongArch: KVM: Fix HW timer interrupt lost when inject interrupt by …
bibo-mao May 4, 2026
3d44ed6
LoongArch: KVM: Move unconditional delay into timer clear scenery
bibo-mao May 4, 2026
aaaf41a
LoongArch: KVM: Use kvm_set_pte() in kvm_flush_pte()
May 4, 2026
23900db
LoongArch: Use per-root-bridge PCIH flag to skip mem resource fixup
chenhuacai May 4, 2026
2563d78
io_uring/kbuf: support min length left for incremental buffers
mgjm Apr 23, 2026
737adda
io_uring/tw: serialize ctx->retry_llist with ->uring_lock
axboe Apr 28, 2026
d18099f
bpf: Fix use-after-free in arena_vm_close on fork
Apr 13, 2026
1de2db1
mm/damon/core: disallow non-power of two min_region_sz on damon_start()
sjp38 Apr 11, 2026
25c2b77
fbdev: defio: Disconnect deferred I/O from the lifetime of struct fb_…
tdz May 4, 2026
609936d
dma-mapping: add __dma_from_device_group_begin()/end()
mstsirkin May 5, 2026
1869da3
hwmon: (powerz) Avoid cacheline sharing for DMA buffer
t-8ch May 5, 2026
b0f4711
octeon_ep_vf: add NULL check for napi_build_skb()
devnexen May 5, 2026
ebad723
mmc: core: Adjust MDT beyond 2025
avri-altman-sndk May 5, 2026
f597ab0
mmc: core: Add quirk for incorrect manufacturing date
avri-altman-sndk May 5, 2026
afece4e
mmc: core: Optimize time for secure erase/trim for some Kingston eMMCs
May 5, 2026
fb66168
crypto: qat - fix indentation of macros in qat_hal.c
sumanku3 May 5, 2026
4d7b429
crypto: qat - fix firmware loading failure for GEN6 devices
sumanku3 May 5, 2026
bbcef20
mm, swap: speed up hibernation allocation and writeout
ryncsn May 8, 2026
23b814e
firmware: exynos-acpm: Drop fake 'const' on handle pointer
krzk May 8, 2026
a420904
hfsplus: fix uninit-value by validating catalog record size
deepanshu406 May 9, 2026
d309d33
hfsplus: fix held lock freed on hfsplus_fill_super()
GoodLuck612 May 9, 2026
24da4cc
erofs: tidy up z_erofs_lz4_handle_overlap()
hsiangkao May 9, 2026
c9ce18e
erofs: fix unsigned underflow in z_erofs_lz4_handle_overlap()
avasummer May 9, 2026
ef63ef4
printk: add print_hex_dump_devel()
toblux May 9, 2026
5cffe3c
crypto: caam - guard HMAC key hex dumps in hash_digest_key
toblux May 9, 2026
9d1774b
net: stmmac: rename STMMAC_GET_ENTRY() -> STMMAC_NEXT_ENTRY()
May 10, 2026
4af2e62
net: stmmac: Prevent NULL deref when RX memory exhausted
CFSworks May 10, 2026
a0e560d
rust: pin-init: fix incorrect accessor reference lifetime
nbdd0121 May 12, 2026
28f5ed4
x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's…
prnangia Dec 9, 2025
1aa60fe
ksmbd: validate inherited ACE SID length
s-zaizen Apr 28, 2026
52dc660
Linux 6.18.30
gregkh May 14, 2026
a64e226
Merge tag 'v6.18.30' into qclinux.2.0
svankas May 15, 2026
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
The table of contents is too big for display.
Diff view
Diff view
  •  
  •  
  •  
70 changes: 52 additions & 18 deletions Documentation/devicetree/bindings/display/ti/ti,am65x-dss.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -36,34 +36,50 @@ properties:
reg:
description:
Addresses to each DSS memory region described in the SoC's TRM.
items:
- description: common DSS register area
- description: VIDL1 light video plane
- description: VID video plane
- description: OVR1 overlay manager for vp1
- description: OVR2 overlay manager for vp2
- description: VP1 video port 1
- description: VP2 video port 2
- description: common1 DSS register area
oneOf:
- items:
- description: common DSS register area
- description: VIDL1 light video plane
- description: VID video plane
- description: OVR1 overlay manager for vp1
- description: OVR2 overlay manager for vp2
- description: VP1 video port 1
- description: VP2 video port 2
- description: common1 DSS register area
- items:
- description: common DSS register area
- description: VIDL1 light video plane
- description: OVR1 overlay manager for vp1
- description: VP1 video port 1
- description: common1 DSS register area

reg-names:
items:
- const: common
- const: vidl1
- const: vid
- const: ovr1
- const: ovr2
- const: vp1
- const: vp2
- const: common1
oneOf:
- items:
- const: common
- const: vidl1
- const: vid
- const: ovr1
- const: ovr2
- const: vp1
- const: vp2
- const: common1
- items:
- const: common
- const: vidl1
- const: ovr1
- const: vp1
- const: common1

clocks:
minItems: 2
items:
- description: fck DSS functional clock
- description: vp1 Video Port 1 pixel clock
- description: vp2 Video Port 2 pixel clock

clock-names:
minItems: 2
items:
- const: fck
- const: vp1
Expand Down Expand Up @@ -180,6 +196,24 @@ allOf:
ports:
properties:
port@1: false
reg:
maxItems: 5
reg-names:
maxItems: 5
clocks:
maxItems: 2
clock-names:
maxItems: 2
else:
properties:
reg:
minItems: 8
reg-names:
minItems: 8
clocks:
minItems: 3
clock-names:
minItems: 3

- if:
properties:
Expand Down
12 changes: 7 additions & 5 deletions Documentation/scheduler/sched-ext.rst
Original file line number Diff line number Diff line change
Expand Up @@ -321,13 +321,15 @@ by a sched_ext scheduler:
ops.dispatch(); /* Task is moved to a local DSQ */
}
ops.running(); /* Task starts running on its assigned CPU */
while (task->scx.slice > 0 && task is runnable)
ops.tick(); /* Called every 1/HZ seconds */
ops.stopping(); /* Task stops running (time slice expires or wait) */

/* Task's CPU becomes available */
while task_is_runnable(p) {
while (task->scx.slice > 0 && task_is_runnable(p))
ops.tick(); /* Called every 1/HZ seconds */

ops.dispatch(); /* task->scx.slice can be refilled */
}

ops.dispatch(); /* task->scx.slice can be refilled */
ops.stopping(); /* Task stops running (time slice expires or wait) */
}

ops.quiescent(); /* Task releases its assigned CPU (wait) */
Expand Down
5 changes: 4 additions & 1 deletion Makefile
Original file line number Diff line number Diff line change
@@ -1,7 +1,7 @@
# SPDX-License-Identifier: GPL-2.0
VERSION = 6
PATCHLEVEL = 18
SUBLEVEL = 25
SUBLEVEL = 30
EXTRAVERSION =
NAME = Baby Opossum Posse

Expand Down Expand Up @@ -483,6 +483,8 @@ export rust_common_flags := --edition=2021 \
-Wclippy::as_ptr_cast_mut \
-Wclippy::as_underscore \
-Wclippy::cast_lossless \
-Aclippy::collapsible_if \
-Aclippy::collapsible_match \
-Wclippy::ignored_unit_patterns \
-Wclippy::mut_mut \
-Wclippy::needless_bitwise_bool \
Expand All @@ -492,6 +494,7 @@ export rust_common_flags := --edition=2021 \
-Wclippy::ptr_cast_constness \
-Wclippy::ref_as_ptr \
-Wclippy::undocumented_unsafe_blocks \
-Aclippy::uninlined_format_args \
-Wclippy::unnecessary_safety_comment \
-Wclippy::unnecessary_safety_doc \
-Wrustdoc::missing_crate_level_docs \
Expand Down
4 changes: 3 additions & 1 deletion arch/arm/mm/flush.c
Original file line number Diff line number Diff line change
Expand Up @@ -304,8 +304,10 @@ void __sync_icache_dcache(pte_t pteval)
else
mapping = NULL;

if (!test_and_set_bit(PG_dcache_clean, &folio->flags.f))
if (!test_bit(PG_dcache_clean, &folio->flags.f)) {
__flush_dcache_folio(mapping, folio);
set_bit(PG_dcache_clean, &folio->flags.f);
}

if (pte_exec(pteval))
__flush_icache_all();
Expand Down
5 changes: 5 additions & 0 deletions arch/arm64/boot/dts/marvell/armada-3720-uDPU.dtsi
Original file line number Diff line number Diff line change
Expand Up @@ -15,6 +15,11 @@
#include "armada-372x.dtsi"

/ {
aliases {
ethernet0 = &eth0;
ethernet1 = &eth1;
};

chosen {
stdout-path = "serial0:115200n8";
};
Expand Down
20 changes: 10 additions & 10 deletions arch/arm64/boot/dts/ti/k3-am62-verdin.dtsi
Original file line number Diff line number Diff line change
Expand Up @@ -572,16 +572,16 @@
/* On-module eMMC */
pinctrl_sdhci0: main-mmc0-default-pins {
pinctrl-single,pins = <
AM62X_IOPAD(0x220, PIN_INPUT, 0) /* (Y3) MMC0_CMD */
AM62X_IOPAD(0x218, PIN_INPUT, 0) /* (AB1) MMC0_CLK */
AM62X_IOPAD(0x214, PIN_INPUT, 0) /* (AA2) MMC0_DAT0 */
AM62X_IOPAD(0x210, PIN_INPUT, 0) /* (AA1) MMC0_DAT1 */
AM62X_IOPAD(0x20c, PIN_INPUT, 0) /* (AA3) MMC0_DAT2 */
AM62X_IOPAD(0x208, PIN_INPUT, 0) /* (Y4) MMC0_DAT3 */
AM62X_IOPAD(0x204, PIN_INPUT, 0) /* (AB2) MMC0_DAT4 */
AM62X_IOPAD(0x200, PIN_INPUT, 0) /* (AC1) MMC0_DAT5 */
AM62X_IOPAD(0x1fc, PIN_INPUT, 0) /* (AD2) MMC0_DAT6 */
AM62X_IOPAD(0x1f8, PIN_INPUT, 0) /* (AC2) MMC0_DAT7 */
AM62X_IOPAD(0x220, PIN_INPUT, 0) /* (Y3) MMC0_CMD */
AM62X_IOPAD(0x218, PIN_INPUT, 0) /* (AB1) MMC0_CLK */
AM62X_IOPAD(0x214, PIN_INPUT, 0) /* (AA2) MMC0_DAT0 */
AM62X_IOPAD(0x210, PIN_INPUT_PULLUP, 0) /* (AA1) MMC0_DAT1 */
AM62X_IOPAD(0x20c, PIN_INPUT_PULLUP, 0) /* (AA3) MMC0_DAT2 */
AM62X_IOPAD(0x208, PIN_INPUT_PULLUP, 0) /* (Y4) MMC0_DAT3 */
AM62X_IOPAD(0x204, PIN_INPUT_PULLUP, 0) /* (AB2) MMC0_DAT4 */
AM62X_IOPAD(0x200, PIN_INPUT_PULLUP, 0) /* (AC1) MMC0_DAT5 */
AM62X_IOPAD(0x1fc, PIN_INPUT_PULLUP, 0) /* (AD2) MMC0_DAT6 */
AM62X_IOPAD(0x1f8, PIN_INPUT_PULLUP, 0) /* (AC2) MMC0_DAT7 */
>;
};

Expand Down
4 changes: 2 additions & 2 deletions arch/arm64/crypto/aes-modes.S
Original file line number Diff line number Diff line change
Expand Up @@ -838,7 +838,7 @@ AES_FUNC_START(aes_mac_update)
encrypt_block v0, w2, x1, x7, w8
eor v0.16b, v0.16b, v4.16b
cmp w3, wzr
csinv x5, x6, xzr, eq
csinv w5, w6, wzr, eq
cbz w5, .Lmacout
encrypt_block v0, w2, x1, x7, w8
st1 {v0.16b}, [x4] /* return dg */
Expand All @@ -852,7 +852,7 @@ AES_FUNC_START(aes_mac_update)
eor v0.16b, v0.16b, v1.16b /* ..and xor with dg */

subs w3, w3, #1
csinv x5, x6, xzr, eq
csinv w5, w6, wzr, eq
cbz w5, .Lmacout

.Lmacenc:
Expand Down
2 changes: 1 addition & 1 deletion arch/arm64/include/asm/kvm_host.h
Original file line number Diff line number Diff line change
Expand Up @@ -1476,7 +1476,7 @@ static inline bool __vcpu_has_feature(const struct kvm_arch *ka, int feature)
#define kvm_vcpu_has_feature(k, f) __vcpu_has_feature(&(k)->arch, (f))
#define vcpu_has_feature(v, f) __vcpu_has_feature(&(v)->kvm->arch, (f))

#define kvm_vcpu_initialized(v) vcpu_get_flag(vcpu, VCPU_INITIALIZED)
#define kvm_vcpu_initialized(v) vcpu_get_flag(v, VCPU_INITIALIZED)

int kvm_trng_call(struct kvm_vcpu *vcpu);
#ifdef CONFIG_KVM
Expand Down
2 changes: 2 additions & 0 deletions arch/arm64/include/asm/mmu.h
Original file line number Diff line number Diff line change
Expand Up @@ -112,5 +112,7 @@ void kpti_install_ng_mappings(void);
static inline void kpti_install_ng_mappings(void) {}
#endif

extern bool page_alloc_available;

#endif /* !__ASSEMBLY__ */
#endif
4 changes: 2 additions & 2 deletions arch/arm64/kernel/ptrace.c
Original file line number Diff line number Diff line change
Expand Up @@ -957,8 +957,8 @@ static int sve_set_common(struct task_struct *target,
}

/* Always zero V regs, FPSR, and FPCR */
memset(&current->thread.uw.fpsimd_state, 0,
sizeof(current->thread.uw.fpsimd_state));
memset(&target->thread.uw.fpsimd_state, 0,
sizeof(target->thread.uw.fpsimd_state));

/* Registers: FPSIMD-only case */

Expand Down
54 changes: 43 additions & 11 deletions arch/arm64/kernel/signal.c
Original file line number Diff line number Diff line change
Expand Up @@ -67,20 +67,45 @@ struct rt_sigframe_user_layout {
unsigned long end_offset;
};

#define TERMINATOR_SIZE round_up(sizeof(struct _aarch64_ctx), 16)
#define EXTRA_CONTEXT_SIZE round_up(sizeof(struct extra_context), 16)

/*
* Holds any EL0-controlled state that influences unprivileged memory accesses.
* This includes both accesses done in userspace and uaccess done in the kernel.
*
* This state needs to be carefully managed to ensure that it doesn't cause
* uaccess to fail when setting up the signal frame, and the signal handler
* itself also expects a well-defined state when entered.
*
* The struct should be zero-initialised. Its members should only be accessed
* via the accessors below. __valid_fields tracks which of the fields are valid
* (have been set to some value).
*/
struct user_access_state {
u64 por_el0;
unsigned int __valid_fields;
u64 __por_el0;
};

#define TERMINATOR_SIZE round_up(sizeof(struct _aarch64_ctx), 16)
#define EXTRA_CONTEXT_SIZE round_up(sizeof(struct extra_context), 16)
#define UA_STATE_HAS_POR_EL0 BIT(0)

static void set_ua_state_por_el0(struct user_access_state *ua_state,
u64 por_el0)
{
ua_state->__por_el0 = por_el0;
ua_state->__valid_fields |= UA_STATE_HAS_POR_EL0;
}

static int get_ua_state_por_el0(const struct user_access_state *ua_state,
u64 *por_el0)
{
if (ua_state->__valid_fields & UA_STATE_HAS_POR_EL0) {
*por_el0 = ua_state->__por_el0;
return 0;
}

return -ENOENT;
}

/*
* Save the user access state into ua_state and reset it to disable any
Expand All @@ -94,7 +119,7 @@ static void save_reset_user_access_state(struct user_access_state *ua_state)
for (int pkey = 0; pkey < arch_max_pkey(); pkey++)
por_enable_all |= POR_ELx_PERM_PREP(pkey, POE_RWX);

ua_state->por_el0 = read_sysreg_s(SYS_POR_EL0);
set_ua_state_por_el0(ua_state, read_sysreg_s(SYS_POR_EL0));
write_sysreg_s(por_enable_all, SYS_POR_EL0);
/*
* No ISB required as we can tolerate spurious Overlay faults -
Expand Down Expand Up @@ -122,8 +147,10 @@ static void set_handler_user_access_state(void)
*/
static void restore_user_access_state(const struct user_access_state *ua_state)
{
if (system_supports_poe())
write_sysreg_s(ua_state->por_el0, SYS_POR_EL0);
u64 por_el0;

if (get_ua_state_por_el0(ua_state, &por_el0) == 0)
write_sysreg_s(por_el0, SYS_POR_EL0);
}

static void init_user_layout(struct rt_sigframe_user_layout *user)
Expand Down Expand Up @@ -333,11 +360,16 @@ static int restore_fpmr_context(struct user_ctxs *user)
static int preserve_poe_context(struct poe_context __user *ctx,
const struct user_access_state *ua_state)
{
int err = 0;
int err;
u64 por_el0;

err = get_ua_state_por_el0(ua_state, &por_el0);
if (WARN_ON_ONCE(err))
return err;

__put_user_error(POE_MAGIC, &ctx->head.magic, err);
__put_user_error(sizeof(*ctx), &ctx->head.size, err);
__put_user_error(ua_state->por_el0, &ctx->por_el0, err);
__put_user_error(por_el0, &ctx->por_el0, err);

return err;
}
Expand All @@ -353,7 +385,7 @@ static int restore_poe_context(struct user_ctxs *user,

__get_user_error(por_el0, &(user->poe->por_el0), err);
if (!err)
ua_state->por_el0 = por_el0;
set_ua_state_por_el0(ua_state, por_el0);

return err;
}
Expand Down Expand Up @@ -1095,7 +1127,7 @@ SYSCALL_DEFINE0(rt_sigreturn)
{
struct pt_regs *regs = current_pt_regs();
struct rt_sigframe __user *frame;
struct user_access_state ua_state;
struct user_access_state ua_state = {};

/* Always make any pending restarted system calls return -EINTR */
current->restart_block.fn = do_no_restart_syscall;
Expand Down Expand Up @@ -1507,7 +1539,7 @@ static int setup_rt_frame(int usig, struct ksignal *ksig, sigset_t *set,
{
struct rt_sigframe_user_layout user;
struct rt_sigframe __user *frame;
struct user_access_state ua_state;
struct user_access_state ua_state = {};
int err = 0;

fpsimd_save_and_flush_current_state();
Expand Down
4 changes: 4 additions & 0 deletions arch/arm64/kvm/arm.c
Original file line number Diff line number Diff line change
Expand Up @@ -755,6 +755,10 @@ int kvm_arch_vcpu_runnable(struct kvm_vcpu *v)
{
bool irq_lines = *vcpu_hcr(v) & (HCR_VI | HCR_VF | HCR_VSE);

irq_lines |= (!irqchip_in_kernel(v->kvm) &&
(kvm_timer_should_notify_user(v) ||
kvm_pmu_should_notify_user(v)));

return ((irq_lines || kvm_vgic_vcpu_pending_irq(v))
&& !kvm_arm_vcpu_stopped(v) && !v->arch.pause);
}
Expand Down
Loading