0e834b652056 drm-tip: 2026y-03m-23d-04h-28m-02s UTC integration manifest c369299895a5 Linux 7.0-rc5 ec69c9e88315 i2c: tegra: Don't mark devices with pins as IRQ safe 50b35c9e50a8 ftrace: Use hash argument for tmp_ops in update_ftrace_direct_mod f35dbac69421 ring-buffer: Fix to update per-subbuf entries of persistent ring buffer 07183aac4a68 tracing: Fix trace_marker copy link list updates edca33a56297 tracing: Fix failure to read user space from system call trace events a6f22e50c7d5 tracing: Revert "tracing: Remove pid in task_rename tracing output" 4a04d13576fd selftests/bpf: Add a test cases for sync_linked_regs regarding zext propagation bc308be380c1 bpf: Fix sync_linked_regs regarding BPF_ADD_CONST32 zext propagation 0ad1734cc559 selftests/bpf: Add tests for maybe_fork_scalars() OR vs AND handling c845894ebd6f bpf: Fix unsound scalar forking in maybe_fork_scalars() for BPF_OR 4ac95c65efea selftests/bpf: Add tests for sdiv32/smod32 with INT_MIN dividend c77b30bd1dcb bpf: Fix undefined behavior in interpreter sdiv/smod for INT_MIN a1e5c46eaed3 selftests/bpf: Add tests for bpf_throw lock leak from subprogs 6c2128505f61 bpf: Fix exception exit lock checking for subprogs 166a38809296 drm-tip: 2026y-03m-21d-09h-22m-07s UTC integration manifest e7bae9a7a5e1 hwmon: (max6639) Fix pulses-per-revolution implementation 1f6aa5bbf1d0 x86/platform/uv: Handle deconfigured sockets 63f8b60151dc x86/entry/vdso: Fix path of included gettimeofday.c e6d7eba23b66 ata: libata-scsi: report correct sense field pointer in ata_scsiop_maint_in() 78a6ee14f8b9 i2c: pxa: defer reset on Armada 3700 when recovery is used be627abcc0d5 i2c: fsi: Fix a potential leak in fsi_i2c_probe() aa79f996eb41 i2c: cp2615: fix serial string NULL-deref at probe 418eab7a6f3c io_uring/kbuf: propagate BUF_MORE through early buffer commit path 3ecd3e03144b io_uring/kbuf: fix missing BUF_MORE for incremental buffers at EOF 23b5df09c27a smb: client: fix generic/694 due to wrong ->i_blocks 7ab4a7c5d969 MPTCP: fix lock class name family in pm_nl_create_listen_socket 614aefe56af8 icmp: fix NULL pointer dereference in icmp_tag_validation() b48731849609 net: dsa: bcm_sf2: fix missing clk_disable_unprepare() in error paths d75ec7e8ba19 net: shaper: protect from late creation of hierarchy 0f9ea7141f36 net: shaper: protect late read accesses to the hierarchy 8c6e9b60f5c7 arm64: realm: Fix PTE_NS_SHARED for 52bit PA support 8a63baadf084 net: mvpp2: guard flow control update with global_tx_fc in buffer switching dbdfaae96096 nfnetlink_osf: validate individual option lengths in fingerprints d73f4b53aaae netfilter: nf_tables: release flowtable after rcu grace period on error 24f90fa3994b netfilter: bpf: defer hook memory release until rcu readers are done 605b52497bf8 net: bonding: fix NULL deref in bond_debug_rlb_hash_show b3a6df291fec udp_tunnel: fix NULL deref caused by udp_sock_create6 when CONFIG_IPV6=n beb6e2e5976a net/mlx5e: Fix race condition during IPSec ESN update 99b36850d881 net/mlx5e: Prevent concurrent access to IPSec ASO context b7e3a5d9c0d6 net/mlx5: qos: Restrict RTNL area to avoid a lock cycle 146bd2a87a65 bpf: Release module BTF IDR before module unload 064137935262 ipv6: add NULL checks for idev in SRv6 paths 55dc632ab2ac NFC: nxp-nci: allow GPIOs to sleep 34b11cc56e43 net: macb: fix uninitialized rx_fs_lock 8da13e6d63c1 net: macb: fix use-after-free access to PTP clock 7d9351435ebb netdevsim: drop PSP ext ref on forward failure 3b2c2ab4ceb8 tools/bootconfig: fix fd leak in load_xbc_file() on fstat failure bb288d7d869e lib/bootconfig: check xbc_init_node() return in override path 201bc182ad63 x86/mce/amd: Check SMCA feature bit before accessing SMCA MSRs 86259558e422 hwmon: (pmbus/isl68137) Fix unchecked return value and use sysfs_emit() c4192754e836 fs/tests: exec: Remove bad test vector b826d2c0b0ec pmdomain: bcm: bcm2835-power: Increase ASB control timeout b9465b04de4b mtd: rawnand: pl353: make sure optimal timings are applied 16dec014db0f mtd: spi-nor: Rename spi_nor_spimem_check_op() ac512cd351f7 mtd: spi-nor: Fix RDCR controller capability core check c0e296f25767 mshv: Fix error handling in mshv_region_pin e7648ffecb7f ACPI: bus: Fix MFD child automatic modprobe issue bf504b229cb8 ACPI: processor: Fix previous acpi_processor_errata_piix4() fix d5ad6ab61cbd wifi: mac80211: always free skb on ieee80211_tx_prepare_skb() failure deb353d9bb00 wifi: wlcore: Return -ENOMEM instead of -EAGAIN if there is not enough headroom c73bb9a2d33b wifi: mac80211: fix NULL deref in mesh_matches_local() b425e4d0eb32 ksmbd: fix use-after-free in durable v2 replay of active file handles c33615f995ae ksmbd: fix use-after-free of share_conf in compound request 3a64125730ca ksmbd: use volume UUID in FS_OBJECT_ID_INFORMATION 282343cf8a4a ksmbd: unset conn->binding on failed binding request 5258572aa5fd ksmbd: fix share_conf UAF in tree_conn disconnect 64dcbde7f8f8 bnxt_en: fix OOB access in DBG_BUF_PRODUCER async event handler 32f59301b989 hwmon: (pmbus/ina233) Add error check for pmbus_read_word_data() return value c6f45ed26b6e hwmon: (pmbus/mp2869) Check pmbus_read_byte_data() before using its return value 19d4b9c8a136 hwmon: (pmbus/mp2975) Add error check for pmbus_read_word_data() return value c925fccc4f8f hwmon: (pmbus/hac300s) Add error check for pmbus_read_word_data() return value 6850deb61118 libie: prevent memleak in fwlog code fc9c69be5947 iavf: fix VLAN filter lost on add/delete race 45b33e805bd3 igc: fix page fault in XDP TX timestamps handling 0ffba246652f igc: fix missing update of skb->tail in igc_xmit_frame() a68ed2df7213 io_uring/poll: fix multishot recv missing EOF on wakeup race ab93d7eee942 ACPICA: Update the format of Arg3 of _DSM 2b38efc05bf7 driver core: platform: use generic driver_override infrastructure c5f60e3f07b6 sh: platform_early: remove pdev->driver_override check 813bbc4d33d2 hwmon: axi-fan: don't use driver_override as IRQ name bcd085d5c76f docs: driver-model: document driver_override cb3d1049f4ea driver core: generalize driver_override in struct device 8c89a077ca79 spi: geni-qcom: Check DMA interrupts early in ISR d5b66179b0e2 lib/crypto: powerpc: Add powerpc/aesp8-ppc.S to clean-files 4221f30e3e0a regulator: dt-bindings: fix typos in regulator-uv-* descriptions 21647677ba9a PCI: endpoint: pci-epf-test: Roll back BAR mapping when subrange setup fails ba17de98545d iommu/amd: Block identity domain when SNP enabled 06e14c36e20b iommu/sva: Fix crash in iommu_sva_unbind_device() 45c6a2dc7ec8 iommu/io-pgtable: fix all kernel-doc warnings in io-pgtable.h 069c8f5aebe4 net: usb: aqc111: Do not perform PM inside suspend callback 0a4d00e2e99a iommu: Fix mapping check for 0x0 to avoid re-mapping it 39c20c4e83b9 iommu/vt-d: Only handle IOPF for SVA when PRI is supported fe89277c9ceb iommu/vt-d: Fix intel iommu iotlb sync hardlockup and retry a0671125d4f5 clsact: Fix use-after-free in init/destroy rollback asymmetry b17b79ff8963 btrfs: reject root items with drop_progress and zero drop_level adbb0ebacc32 btrfs: check block group before marking it unused in balance_remap_chunks() 057495ccc0ad btrfs: hold block group reference during entire move_existing_remap() 5118130e722b btrfs: fix an incorrect ASSERT() condition inside lzo_decompress_bio() 96a2d235896b btrfs: fix an incorrect ASSERT() condition inside zstd_decompress_bio() 3adf8f14152f btrfs: do not touch page cache for encoded writes 65ee6061388b btrfs: fix a bug that makes encoded write bio larger than expected f9a4e3015db1 btrfs: reserve enough transaction items for qgroup ioctls e716edafedad HID: multitouch: Check to ensure report responses match the request 2b4cb4e58f34 btrfs: check for NULL root after calls to btrfs_csum_root() 50242828700f btrfs: check for NULL root after calls to btrfs_extent_root() 76f0930d6e80 irqchip/riscv-rpmi-sysmsi: Fix mailbox channel leak in rpmi_sysmsi_probe() e4c00ba7274b tg3: replace placeholder MAC address with device property 77914255155e net: usb: cdc_ncm: add ndpoffset to NDP32 nframes bounds check 2aa8a4fa8d5b net: usb: cdc_ncm: add ndpoffset to NDP16 nframes bounds check d4a533ad249e net: airoha: Remove airoha_dev_stop() in airoha_remove() 66360460cab6 net/sched: teql: Fix double-free in teql_master_xmit 6d5e4538364b net/smc: fix NULL dereference and UAF in smc_tcp_syn_recv_sock() b7405dcf7385 bonding: prevent potential infinite loop in bond_header_parse() 50bfd2a22b75 cifs: smb1: fix comment typo 4e5019216402 objtool: Fix Clang jump table detection ee226656cd64 PCI/pwrctrl: Create pwrctrl devices only for PCI device nodes cf3287fb2c1f PCI/pwrctrl: Ensure that remote endpoint node parent has supply requirement 5133b61aaf43 nfsd: fix heap overflow in NFSv4.0 LOCK replay cache 6f93f7b06810 livepatch/klp-build: Fix inconsistent kernel version 28e367a969b0 objtool/klp: fix mkstemp() failure with long paths 2f2600decb30 objtool/klp: fix data alignment in __clone_symbol() 29ab76827761 PM: runtime: Fix a race condition related to device removal f4c31b07b136 sched: idle: Consolidate the handling of two special cases dee0774bbb2a spi: fix statistics allocation 8634e05b08ea spi: fix use-after-free on controller registration failure f7a4c78bfeb3 HID: logitech-hidpp: Prevent use-after-free on force feedback initialisation failure 2b658c1c442e HID: bpf: prevent buffer overflow in hid_hw_request 5d4c6c132ea9 selftests/hid: fix compilation when bpf_wq and hid_device are not exported 0a3fe972a7cb HID: core: Mitigate potential OOB by removing bogus memset() 5e3486e64094 mmc: sdhci: fix timing selection for 1-bit bus width ba3402f6c85b spi: geni-qcom: Fix CPHA and CPOL mode change detection 4bc7bc457922 HID: intel-thc-hid: Set HID_PHYS with PCI BDF ce5ae93d1a21 ata: libata-core: disable LPM on ADATA SU680 SSD c252c12d1f55 LoongArch: KVM: Fix typo issue in kvm_vm_init_features() b254c629a963 LoongArch: BPF: Make arch_protect_bpf_trampoline() return 0 d3b849196120 LoongArch: No need to flush icache if text copy failed 431ce839dad6 LoongArch: Check return values for set_memory_{rw,rox} a47f0754bdd0 LoongArch: Give more information if kmem access failed 8a69d02481ff LoongArch: Fix calling smp_processor_id() in preemptible code c8b8f3c50f48 LoongArch: Only use SC.Q when supported by the assembler 12b4c5d98cd7 smb: client: fix krb5 mount with username option 7fc5e2f5603c spi: axiado: Fix double-free in ax_spi_probe() b8db95529979 spi: amlogic-spisg: Fix memory leak in aml_spisg_probe() a00da54d06f4 spi: amlogic: spifc-a4: Remove redundant clock cleanup 2c98a8fbd6aa parisc: Flush correct cache in cacheflush() syscall 718d0766ce4c net: macb: Reinitialize tx/rx queue pointer registers and rx ring during resume 1a7124ecd655 net: macb: Introduce gem_init_rx_ring() 719d3e71691d net: ti: icssg-prueth: Fix memory leak in XDP_DROP for non-zero-copy mode ebba09f19807 crypto: padlock-sha - Disable for Zhaoxin processor fa103fc8f569 net: mana: fix use-after-free in mana_hwc_destroy_channel() by reordering teardown 6cfc3bc02b97 net: bcmgenet: increase WoL poll timeout 17ad31b3a43b sunrpc: fix cache_request leak in cache_release e7fcf179b82d NFSD: Hold net reference for the lifetime of /proc/fs/nfs/exports fd 48db892356d6 NFSD: Defer sub-object cleanup in export put callbacks 922814879542 atm: lec: fix use-after-free in sock_def_readable() 9e22e9c4a5bd ARM: multi_v7_defconfig: Drop duplicate CONFIG_TI_PRUSS=m 0d4aef630be9 batman-adv: avoid OGM aggregation when skb tailroom is insufficient 5c52607c43c3 crypto: ccp - Fix leaking the same page twice b2ae73d954f7 MAINTAINERS: Update maintainers for Hyper-V DRM driver 6922db250422 mshv: Fix use-after-free in mshv_map_user_memory error path f173d0f4c0f6 netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() 00050ec08cec netfilter: xt_time: use unsigned int for monthday bit shift f62a218a946b netfilter: xt_CT: drop pending enqueued packets on template removal 36eae0956f65 netfilter: nft_ct: drop pending enqueued packets on removal 0548a13b5a14 nf_tables: nft_dynset: fix possible stateful expression memleak in error path 1e3a3593162c netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case a3aca98aec9a netfilter: nf_flow_table_ip: reset mac header before vlan push 598adea720b9 netfilter: revert nft_set_rbtree: validate open interval overlap fbce58e719a1 netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() f900e1d77ee0 netfilter: conntrack: add missing netlink policy validations 5cb81eeda909 netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() fb75437b4478 arm_mpam: Force __iomem casts c1376f1ff3f0 arm_mpam: Disable preemption when making accesses to fake MSC in kunit test 4ad79c874e53 arm_mpam: Fix null pointer dereference when restoring bandwidth counters d499e9627d70 arm64/scs: Fix handling of advance_loc4 7d73872d949c wifi: mac80211: check tdls flag in ieee80211_tdls_oper fc1cd1f18c34 btrfs: tree-checker: fix misleading root drop_level error message 9573a365ff9f btrfs: log new dentries when logging parent dir of a conflicting inode 77603ab10429 btrfs: don't take device_list_mutex when querying zone info 4f6abe9c743e btrfs: pass 'verbose' parameter to btrfs_relocate_block_group 5eb608319bb5 vt: save/restore unicode screen buffer for alternate screen 99600f79b28c mpls: add missing unregister_netdevice_notifier to mpls_init 8431c602f551 ip_tunnel: adapt iptunnel_xmit_stats() to NETDEV_PCPU_STAT_DSTATS e1f0a18c9564 net/rose: fix NULL pointer dereference in rose_transmit_link on reconnect 3715a0085531 bridge: cfm: Fix race condition in peer_mep deletion e5b31d988a41 af_unix: Give up GC if MSG_PEEK intervened. 99b2c531e0e7 Bluetooth: qca: fix ROM version reading on WCN3998 chips dd815e6e3918 Bluetooth: L2CAP: Validate L2CAP_INFO_RSP payload length before access 15145675690c Bluetooth: L2CAP: Fix type confusion in l2cap_ecred_reconf_rsp() 5b3e2052334f Bluetooth: L2CAP: Fix accepting multiple L2CAP_ECRED_CONN_REQ 752a6c9596dd Bluetooth: L2CAP: Fix use-after-free in l2cap_unregister_user dbf666e4fc9b Bluetooth: HIDP: Fix possible UAF 17f89341cb42 Bluetooth: MGMT: Fix list corruption and UAF in command complete handlers 2cabe7ff1001 Bluetooth: hci_sync: Fix hci_le_create_conn_sync 62bcaa6b351b Bluetooth: ISO: Fix defer tests being unstable 0e4d4dcc1a6e Bluetooth: SMP: make SM/PER/KDU/BI-04-C happy b6a2bf43aa37 Bluetooth: LE L2CAP: Disconnect if sum of payload sizes exceed SDU e1d9a6688986 Bluetooth: LE L2CAP: Disconnect if received packet's SDU exceeds IMTU a7b9ce39fbe4 serial: 8250_dw: Ensure BUSY is deasserted e0a368ae7953 serial: 8250: Add late synchronize_irq() to shutdown to handle DW UART BUSY 73a4ed8f9efa serial: 8250_dw: Rework IIR_NO_INT handling to stop interrupt storm 883c5a2bc934 serial: 8250_dw: Rework dw8250_handle_irq() locking and IIR handling 8324a54f604d serial: 8250: Add serial8250_handle_irq_locked() 8002d6d6d0d8 serial: 8250_dw: Avoid unnecessary LCR writes 59a33d83bbe6 serial: 8250: Protect LCR write in shutdown 9c0072bc33d3 serial: 8250_pci: add support for the AX99100 455ce986fa35 serial: core: fix infinite loop in handle_tx() for PORT_UNKNOWN d54801cd5095 serial: uartlite: fix PM runtime usage count underflow on probe 24b98e8664e1 serial: 8250: always disable IRQ during THRE test a424a34b8fad serial: 8250: Fix TX deadlock when using DMA b22c526569e6 pmdomain: mediatek: Fix power domain count 1965445e13c0 HID: appletb-kbd: add .resume method in PM 70031e70ca15 HID: logitech-hidpp: Enable MX Master 4 over bluetooth e7fcc54524f0 perf/x86/intel: Fix OMR snoop information parsing issues 1d07bbd7ea36 perf/x86/intel: Add missing branch counters constraint apply 4b9ce6719606 perf: Make sure to use pmu_ctx->pmu for groups f1cac6ac62d2 x86/perf: Make sure to program the counter value for stopped events on migration 8d5fae601126 perf/x86: Move event pointer setup earlier in x86_pmu_enable() 14de1552a4e3 include/linux/local_lock_internal.h: Make this header file again compatible with sparse 0fc773b0e4c1 mshv: pass struct mshv_user_mem_region by reference afeb96cb188d x86/hyperv: Use any general-purpose register when saving %cr2 and %cr8 2536091d585a x86/hyperv: Use current_stack_pointer to avoid asm() in hv_hvcrash_ctxt_save() 3484127c19ac x86/hyperv: Save segment registers directly to memory in hv_hvcrash_ctxt_save() 3fde5281b805 x86/hyperv: Use __naked attribute to fix stackless C function edd20cb693d9 Revert "mshv: expose the scrub partition hypercall" da9ba4dcc01e mtd: rawnand: brcmnand: skip DMA during panic write bab2bc6e850a mtd: rawnand: serialize lock/unlock against other NAND operations 073b2db72426 dt-bindings: mtd: st,spear600-smi: Fix example c21cac8cdcdc dt-bindings: mtd: st,spear600-smi: #address/size-cells is mandatory db9a26765010 dt-bindings: mtd: st,spear600-smi: Fix description 227312b4a65c HID: input: Add HID_BATTERY_QUIRK_DYNAMIC for Elan touchscreens 487b23afaf4b HID: input: Drop Asus UX550* touchscreen ignore battery quirks 182b9b3d8d1d MAINTAINERS: update email address for Ignat Korchagin 939080834fef mm/huge_memory: fix early failure try_to_migrate() when split huge pmd for shared THP 29f40594a281 mm/rmap: fix incorrect pte restoration for lazyfree folios fae654083bfa mm/huge_memory: fix use of NULL folio in move_pages_huge_pmd() 6ffd853b0b10 build_bug.h: correct function parameters names in kernel-doc 36f46b0e3689 crash_dump: don't log dm-crypt key bytes in read_key_from_user_keying e06e6b800123 selftests/bpf: Fix pkg-config call on static builds 2321a9596d22 bpf: Fix constant blinding for PROBE_MEM32 stores ea1989746b77 selftests/bpf: Add test for BPF_END register ID reset a3125bc01884 bpf: Reset register ID for BPF_END value tracking d1afcd716582 HID: asus: add xg mobile 2022 external hardware support 652a3017c485 crypto: arm64/aes-neonbs - Move key expansion off the stack 2f1763f62909 HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq 8b8f1d5e350a kunit: Add documentation of --list_suites a8aec1423032 nvdimm/bus: Fix potential use after free in asynchronous initialization 4e701b47c3ba firmware: arm_scmi: Spelling s/mulit/multi/, s/currenly/currently/ 555317d61001 firmware: arm_scmi: Fix NULL dereference on notify error path 879c001afbac firmware: arm_scpi: Fix device_node reference leak in probe path a4e8473b7751 firmware: arm_ffa: Remove vm_id argument in ffa_rxtx_unmap() 85c2601e2c2f arm64: dts: renesas: r8a78000: Fix out-of-range SPI interrupt numbers 6dcbb6f070cc arm64: dts: renesas: rzg3s-smarc-som: Set bypass for Versa3 PLL2 f459672cf3ff arm64: dts: renesas: r9a09g087: Fix CPG register region sizes b12985ceca18 arm64: dts: renesas: r9a09g077: Fix CPG register region sizes a3f34651de42 arm64: dts: renesas: r9a09g057: Remove wdt{0,2,3} nodes 5c03465ecf6a arm64: dts: renesas: rzv2-evk-cn15-sd: Add ramp delay for SD0 regulator bb70589b6703 arm64: dts: renesas: rzt2h-n2h-evk: Add ramp delay for SD0 card regulator 6dccbc9f3e1d wifi: cfg80211: cancel pmsr_free_wk in cfg80211_pmsr_wdev_down b94ae8e0d5fe wifi: mac80211: Fix static_branch_dec() underflow for aql_disable. 672e5229e1ec mac80211: fix crash in ieee80211_chan_bw_change for AP_VLAN stations ac6f24cc9c0a wifi: mac80211: use jiffies_delta_to_msecs() for sta_info inactive times 708bbb455377 wifi: mac80211: remove keys after disabling beaconing bd9121a5e9fa wifi: mac80211_hwsim: fully initialise PMSR capabilities 2b76e0cc7803 mmc: sdhci-pci-gli: fix GL9750 DMA write corruption 08d9a4580f71 tee: shm: Remove refcounting of kernel pages 622d68772ddf mshv: add arm64 support for doorbell & intercept SINTs 5a674ef871fe mshv: refactor synic init and cleanup 0410e1a4c545 mtd: rawnand: cadence: Fix error check for dma_alloc_coherent() in cadence_nand_init() 8e2f8020270a mtd: Avoid boot crash in RedBoot partition table parser 82d938d52662 MAINTAINERS: add Takahiro Kuwano as SPI NOR reviewer 2b476739f93d MAINTAINERS: remove Tudor Ambarus as SPI NOR maintainer f69cfd8e8fd1 x86/hyperv: print out reserved vectors in hexadecimal 4ced4cf5c9d1 binfmt_elf_fdpic: fix AUXV size calculation for ELF_HWCAP3 and ELF_HWCAP4 e0cf84109bc6 reset: rzg2l-usbphy-ctrl: Check pwrrdy is valid before using it 3f4e40330418 soc: fsl: cpm1: qmc: Fix error check for devm_ioremap_resource() in qmc_qe_init_resources() 014077044e87 soc: fsl: qbman: fix race condition in qman_destroy_fq 24ed11ee5bac soc: rockchip: grf: Add missing of_node_put() when returning 0528a348b04b cache: ax45mp: Fix device node reference leak in ax45mp_cache_init() 3c85234b979a cache: starfive: fix device node leak in starlink_cache_init() ff4b6bf7eef4 riscv: dts: microchip: add can resets to mpfs 5a741f8cc6fe soc: microchip: mpfs: Fix memory leak in mpfs_sys_controller_probe()