6cfe03d5832d drm-tip: 2026y-05m-11d-10h-06m-53s UTC integration manifest
479669418253 drm/xe/dma-buf: fix UAF with retry loop
af1f2ad0c59f drm/xe/dma-buf: handle empty bo and UAF races
ddfbe68a1426 drm/dp: Use drm_printf_indent for DP SDP logging
936420e685eb drm/dp: Add target_rr_divider field in AS SDP logging
899f7991ea40 drm/dp: Add a helper to get the SDP type as a string
e878adca8477 drm/dp: Store coasting vtotal in struct drm_dp_as_sdp
24b960b83375 drm/dp: Refactor AS SDP logging to use space-separated field names
69070f4d2d2a drm/dp: Add DPCD for configuring AS SDP for PR + VRR
715e0fd96b83 drm/dp: Add bits for AS SDP FAVT Payload Fields Parsing support
f145a1cfc885 drm/dp: Clean up DPRX feature enumeration macros
59e5e15fef9c drm/dp: Rename and relocate AS SDP payload field masks
158fcf1b3994 Documentation/gpu: add remaining DOC: comments to Intel display documentation
bd30515d208f Documentation/gpu: use === for Intel display section heading underlines
931744602993 Documentation/gpu: add dedicated documentation for Intel display
fe417df954a9 drm/panel: Make drm_panel_init() static
90fb1524a845 drm/panel/startek-kd070fhfid015: Use refcounted allocation in place of devm_kzalloc()
9cdbfebb3856 drm/panel/truly-nt35597: Use refcounted allocation in place of devm_kzalloc()
c02427a772e9 drm/panel/sharp-ls043t1le01: Use refcounted allocation in place of devm_kzalloc()
928decbed75b drm/panel/tdo-tl070wsh30: Use refcounted allocation in place of devm_kzalloc()
98c38ff51e5b drm/panel/ilitek-ili9806e: Use refcounted allocation in place of devm_kzalloc()
c8c80bde1678 drm/panel/lxd-m9189a: Use refcounted allocation in place of devm_kzalloc()
e4fa6c4672e1 drm/panel/novatek-nt37700f: Use refcounted allocation in place of devm_kzalloc()
feb0d6613a6f drm/panel/samsung-s6e63m0: Use refcounted allocation in place of devm_kzalloc()
acc11bdc5b11 drm/panel/visionox-g2647fb105: Use refcounted allocation in place of devm_kzalloc()
ae951de6bc00 drm/i915/ddi: Fix cleanup after HDMI connector init failure
d7a189c0b6c0 drm/i915/ddi: Fix cleanup after DP connector init failure
5b9eb61b3774 drm/i915/dp: Drop call to intel_panel_fixed_mode() from compute_config
90d8acc6d8b7 drm/i915/intel_sdvo: Drop call to intel_panel_fixed_mode() from compute_config
c6aeb1229dc2 drm/i915/intel_dvo: Drop call to intel_panel_fixed_mode() from compute_config
9cdd4ec956b6 drm/i915/intel_panel: Avoid calls to intel_panel_fixed_mode() in mode_valid
dae483da5965 drm/i915/intel_sdvo: Check fixed_mode->clock against max_dotclock in mode_valid
0161e2c20163 drm/i915/hdcp: Skip inactive MST connectors when building stream list
5d6919055dec Linux 7.1-rc3
19d584a634fe drm/fourcc: Fix descriptions of 32b float formats
aa54b1d27fe0 rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present
a86f5af06a7f drm-tip: 2026y-05m-10d-00h-10m-49s UTC integration manifest
3ac1a467e376 bpf: Fix off-by-one boundary validation in arena direct-value access
bf6d507f7e3c xskmap: reject TX-only AF_XDP sockets
512809bb8a37 bpf: Don't run arg-tracking analysis twice on main subprog
9ef40a09c5de MAINTAINERS: Add Aksh Garg as PCIe CADENCE reviewer
78e115d806b0 MAINTAINERS: Update Hans Zhang email for PCIe CIX Sky1
bf5421b3d8d3 MAINTAINERS: Update Marek Vasut email for PCIe R-Car
f45a49a2380a PCI: Initialize temporary device in new_id_store()
909f7bf9b080 PCI: Update saved_config_space upon resource assignment
18fc650ccd7f bpf: Free reuseport cBPF prog after RCU grace period.
1c2958e4ab1e bpf: tcp: Fix type confusion in sol_tcp_sockopt().
843064b0a77e bpf: tcp: Fix type confusion in bpf_skc_to_tcp6_sock().
decb84b8383a bpf: tcp: Fix type confusion in bpf_skc_to_tcp_sock().
7995b216a731 mptcp: bpf: Fix type confusion in bpf_mptcp_sock_from_subflow()
d73549b8bb7f selftest: bpf: Add test for bpf_tcp_sock() and RAW socket.
481c2265286e bpf: tcp: Fix type confusion in bpf_tcp_sock().
f7700a4415af ublk: fix use-after-free in ublk_cancel_cmd()
99076a17a112 hwmon: (ads7871) Fix endianness bug in 16-bit register reads
05aaac8746c5 hwmon: (lm75) Fix configuration register writes.
3607422cdeeb hwmon: (lm75) Fix AS6200 and TMP112 setup and alarm handling
f98b48151cc5 smb: client: validate dacloffset before building DACL pointers
8d09328dfda0 smb/client: fix out-of-bounds read in smb2_compound_op()
d62b8d236fab smb/client: fix out-of-bounds read in symlink_data()
8cb6fc323150 smb: client: Zero-pad short GSS session keys per MS-SMB2
5be7a0cef322 smb: client: Use FullSessionKey for AES-256 encryption key derivation
41ae14071cd7 net: sparx5: configure serdes for 1000BASE-X in sparx5_port_init()
b131dc93f7bf net: sparx5: fix wrong chip ids for TSN SKUs
dedf6c90386d net: stmmac: dwmac-nuvoton: fix NULL pointer dereference in nvt_set_phy_intf_sel()
ecddc523cfdb tcp: Fix dst leak in tcp_v6_connect().
019c892e4654 ipmr: Call ipmr_fib_lookup() under RCU.
32cd651d14fc net: phy: broadcom: Save PHY counters during suspend
9032f7676935 net/smc: fix missing sk_err when TCP handshake fails
d119775f2bad af_unix: Reject SIOCATMARK on non-stream sockets
08f566e8f83b veth: fix OOB txq access in veth_poll() with asymmetric queue counts
593dfd40a94c eth: fbnic: fix double-free of PCS on phylink creation failure
3051cd060fa4 i2c: smbus: reject oversized block transfers in the common path
5772f6535227 x86/boot/e820: Re-enable BIOS fallback if e820 table is empty
b266bacba796 net: ethernet: cortina: Drop half-assembled SKB
53705ddfa184 selftests: mptcp: pm: restrict 'unknown' check to pm_nl_ctl
65db7b27b90e selftests: mptcp: check output: catch cmd errors
166b78344031 mptcp: pm: prio: skip closed subflows
62a9b19dce77 mptcp: pm: ADD_ADDR rtx: return early if no retrans
c6d395e2de13 mptcp: pm: ADD_ADDR rtx: skip inactive subflows
3cf12492891c mptcp: pm: ADD_ADDR rtx: resched blocked ADD_ADDR quicker
b7b9a4615697 mptcp: pm: ADD_ADDR rtx: free sk if last
9634cb35af17 mptcp: pm: ADD_ADDR rtx: always decrease sk refcount
5cd6e0ad79d2 mptcp: pm: ADD_ADDR rtx: fix potential data-race
03f324f3f1f7 mptcp: pm: ADD_ADDR rtx: allow ID 0
b12014d2d36e mptcp: pm: kernel: correctly retransmit ADD_ADDR ID 0
c8f7244c8ccc tcp: tcp_child_process() related UAF
770b136ff9bf net/sched: sch_sfq: annotate data-races from sfq_dump_class_stats()
67ef49047d31 inetpeer: add a missing read_seqretry() in inet_getpeer()
701ea57feaab net: rtsn: fix mdio_node leak in rtsn_mdio_alloc()
07bdec3fc737 netdevsim: psp: rcu protect psp_dev reference
24c96a42006e netdevsim: psp: serialize calls to nsim_psp_uninit()
7ce3f1bedaac netdevsim: psp: only call nsim_psp_uninit() on PFs
7aaa8f5e45a9 ipv6: fix potential UAF caused by ip6_forward_proxy_check()
0e1368a28dd5 selftests: drv-net: fix sort order of makefile and config
c5d415596cb6 Bluetooth: HIDP: serialise l2cap_unregister_user via hidp_session_sem
72d97cae2a83 Bluetooth: hci_event: fix memset typo
8f59d17b18a7 Bluetooth: RFCOMM: pull credit byte with skb_pull_data()
daf23014e5d9 Bluetooth: virtio_bt: validate rx pkt_type header length
21bd244b6de5 Bluetooth: virtio_bt: clamp rx length before skb_put
634a4408c061 Bluetooth: btmtk: validate WMT event SKB length before struct access
f958c7805b18 Bluetooth: ISO: Fix data-race on iso_pi(sk) in socket and HCI event paths
ca40d481079c Bluetooth: ISO: Fix data-race on dst in iso_sock_connect()
902fe40bce70 Bluetooth: hci_uart: Fix NULL deref in recv callbacks when priv is uninitialized
5917dd39db2b Bluetooth: btintel_pcie: treat boot stage bit 12 as warning
4e37f6452d58 Bluetooth: SCO: hold sk properly in sco_conn_ready
0a120d961663 Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_new_connection_cb()
78a88d43dab8 Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_get_sndtimeo_cb()
2ff1a41a912d Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_state_change_cb()
91b5a598b528 Bluetooth: l2cap: defer conn param update to avoid conn->lock/hdev->lock inversion
4f42363c814f Bluetooth: l2cap: fix MPS check in l2cap_ecred_reconf_req
72b8deccff17 Bluetooth: bnep: fix incorrect length parsing in bnep_rx_frame() extension handling
5ddb80142611 Bluetooth: hci_event: Fix OOB read and infinite loop in hci_le_create_big_complete_evt
0beddb0c380b Bluetooth: hci_conn: fix potential UAF in create_big_sync
b819db93d73f Bluetooth: SCO: fix sleeping under spinlock in sco_conn_ready
9f6d929ee2c6 sched/fair: Fix wakeup_preempt_fair() for not waking up task
b6eee96843e8 sched/fair: Fix overflow in vruntime_eligible()
e74406007687 selftests/rseq: Expand for optimized RSEQ ABI v2
99428157dcf3 rseq: Reenable performance optimizations conditionally
82f572449cfe rseq: Implement read only ABI enforcement for optimized RSEQ V2 mode
fdf4eb632683 selftests/rseq: Validate legacy behavior
0c8c88b8eb82 ovl: fix verity lazy-load guard broken by fsverity_active() semantic change
4bacec231752 spi: ch341: correct company name in MODULE_DESCRIPTION
628497e6d925 regulator: qcom-rpmh: Fix index for pmh0101 ldo16
fd4d83e1437d ASoC: cs35l56: Destroy workqueue in probe error path
bee87cf0f124 ASoC: cs35l56: Don't use devres to unregister component
5cbb61bf4168 arm64/fpsimd: ptrace: zero target's fpsimd_state, not the tracer's
45d2b37a37ab io_uring/wait: honour caller's time namespace for IORING_ENTER_ABS_TIMER
9cc6bac1bebf io_uring/timeout: honour caller's time namespace for IORING_TIMEOUT_ABS
86f33ca9bea3 ublk: validate physical_bs_shift, io_min_shift and io_opt_shift
79240f3f6d76 wifi: nl80211: re-check wiphy netns in nl80211_prepare_wdev_dump() continuation
15994bb0cbb8 wifi: nl80211: require CAP_NET_ADMIN over the target netns in SET_WIPHY_NETNS
0f3c0a197309 wifi: nl80211: fix NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST usage
283fc9e44ff5 wifi: mac80211: remove station if connection prep fails
2bcbb1631627 ALSA: sparc/dbri: add missing fallthrough
5337213381df ALSA: core: Serialize deferred fasync state checks
01801e20d693 ALSA: hda/realtek: Add mute LED fixup for HP Pavilion 15-cs1xxx
92429ca999db ALSA: seq: Fix UMP group 16 filtering
bd3c45dd0128 timers/migration: Fix another hotplug activation race
203cee647f55 xsk: fix u64 descriptor address truncation on 32-bit architectures
e0f229025a8e xsk: fix xsk_addrs slab leak on multi-buffer error path
8c2cff50afdd xsk: avoid skb leak in XDP_TX_METADATA case
3dec153ae484 xsk: prevent CQ desync when freeing half-built skbs in xsk_build_skb()
0f3776583d28 xsk: fix use-after-free of xs->skb in xsk_build_skb() free_err path
8cd3c1c6e7d9 xsk: handle NULL dereference of the skb without frags issue
0bb7a9caf5c1 xsk: free the skb when hitting the upper bound MAX_SKB_FRAGS
d73a9a63f9f7 xsk: reject sw-csum UMEM binding to IFF_TX_SKB_NO_LINEAR devices
f583bd5f64d4 powerpc/pasemi: Drop redundant res assignment
8333e4916040 powerpc/ps3: Drop redundant result assignment
60c71369ee35 powerpc/vdso: Drop -DCC_USING_PATCHABLE_FUNCTION_ENTRY from 32-bit flags with clang
525cb7ba6661 platform/chrome: cros_ec_typec: Init mutex in Thunderbolt registration
d466ddda5500 net/mlx5e: SD, Fix race condition in secondary device probe/remove
3564222cfdde net/mlx5e: SD, Fix missing cleanup on probe error
05217e4ffbb2 net/mlx5: SD, Keep multi-pf debugfs entries on primary
3abcedfdfd31 net/mlx5: SD: Serialize init/cleanup
4052b9320416 arch/powerpc: Drop CONFIG_FIRMWARE_EDID from defconfig files
c4a5c46199b5 net/mlx5e: psp: Hook PSP dev reg/unreg to profile enable/disable
50690733db59 net/mlx5e: psp: Expose only a fully initialized priv->psp
ae9582cd0b9c net/mlx5e: psp: Fix invalid access on PSP dev registration fail
131717e656b3 powerpc/perf: Update check for PERF_SAMPLE_DATA_SRC marked events
da107152c439 powerpc/8xx: Fix interrupt mask in cpm1_gpiochip_add16()
0e7c074cfcd9 net: wwan: t7xx: validate port_count against message length in t7xx_port_enum_msg_handler
38e989d504fc powerpc/vmx: avoid KASAN instrumentation in enter_vmx_ops() for kexec
b3a97f948408 powerpc/kdump: fix KASAN sanitization flag for core_$(BITS).o
629d1a901de5 pseries/papr-hvpipe: Fix style and checkpatch issues in enable_hvpipe_IRQ()
fe53d2ae82c0 pseries/papr-hvpipe: Refactor and simplify hvpipe_rtas_recv_msg()
4e2d83c80495 pseries/papr-hvpipe: Kill task_struct pointer from struct hvpipe_source_info
2eeac5774808 pseries/papr-hvpipe: Simplify spin unlock usage in papr_hvpipe_handle_release()
d48654bd8b1a pseries/papr-hvpipe: Fix the usage of copy_to_user()
713e468cdbc2 pseries/papr-hvpipe: Fix & simplify error handling in papr_hvpipe_init()
1b9f7aafa44f pseries/papr-hvpipe: Fix null ptr deref in papr_hvpipe_dev_create_handle()
cefeed442962 pseries/papr-hvpipe: Prevent kernel stack memory leak to userspace
7a4f0846ee6c pseries/papr-hvpipe: Fix race with interrupt handler
0342545a29bc powerpc/pseries/htmdump: Add memory configuration dump support to htmdump module
0031424cbc0a powerpc/pseries/htmdump: Fix the offset value used in htm status dump
4ec6ade73f16 powerpc/pseries/htmdump: Fix the offset value used in processor configuration dump
54d54f33813d powerpc/pseries/htmdump: Free the global buffers in htmdump module exit
f83e07b29246 net/sched: sch_fq_codel: annotate data-races from fq_codel_dump_class_stats()
bd279e104e5f bnxt_en: Use absolute target ns from ptp_clock_request
16517bc98a56 bnxt_en: Check return value of bnxt_hwrm_vnic_cfg
54c28fab2fa5 bnxt_en: Set bp->max_tpa according to what the FW supports
07f44433355f bnxt_en: Delay for 5 seconds after AER DPC for all chips
5ad509c1fdad ipv6: Fix null-ptr-deref in fib6_mtu().
901a7d9e2f28 ipv6: default IPV6_SIT to m
868f31e4061e selinux: shrink critical section in sel_write_load()
a02cd6805562 selinux: allow multiple opens of /sys/fs/selinux/policy
ad1ac3d740cc selinux: prune /sys/fs/selinux/user
19cfa0099024 selinux: prune /sys/fs/selinux/disable
644132a48f4e selinux: prune /sys/fs/selinux/checkreqprot
ac8eb3e18f41 wifi: mac80211: use safe list iteration in radar detect work
d97cb2ef0b22 selftests/rseq: Make registration flexible for legacy and optimized mode
02b44d943b3a selftests/rseq: Skip tests if time slice extensions are not available
b9eac6a9d93c rseq: Revert to historical performance killing behaviour
95084f1883a7 net: mana: Fix crash from unvalidated SHM offset read from BAR0 during FLR
44b550d88b26 net/rds: handle zerocopy send cleanup before the message is queued
05416ada37aa selftests: openvswitch: add tests for tunnel vport refcounting
aa69918bd418 openvswitch: vport: fix self-deadlock on release of tunnel ports
83861c48ba12 openvswitch: vport: fix race between tunnel creation and linking
8cf5dd235eff EDAC/versalnet: Fix device name memory leak
af64f7909699 ASoC: wm_adsp_fw_find_test: Clear searched_fw_files in find-by-index test
78538047717b ASoC: wm_adsp_fw_find_test: Redirect wm_adsp_release_firmware_files()
aa4384bc8f43 perf/x86/intel: Enable auto counter reload for DMR
1271aeccc307 perf/x86/intel: Disable PMI for self-reloaded ACR events
8ba0b706a485 perf/x86/intel: Always reprogram ACR events to prevent stale masks
5ad732a56be4 perf/x86/intel: Improve validation and configuration of ACR masks
c69df06e4e26 perf/core: Fix deadlock in perf_mmap() failure path
3985c9a56da4 net: mana: remove double CQ cleanup in mana_create_rxq error path
2a1c69118282 net: mana: Skip WQ object destruction for uninitialized RXQ
e9e334f8063a net: mana: check xdp_rxq registration before unreg in mana_destroy_rxq()
4a142520d166 wifi: libertas: notify firmware load wait on disconnect
5f8719945244 x86/xen: Fix a potential problem in xen_e820_resolve_conflicts()
212ec34e4e72 block: only read from sqe on initial invocation of blkdev_uring_cmd()
2c340aab5485 x86/efi: Restore IRQ state in EFI page fault handler
f4c50a4034e6 xfrm: esp: avoid in-place decrypt on shared skb frags
07d995873960 net: dsa: mt7530: fix .get_stats64 sleeping in atomic context
a6039776c799 ipmr: Add __rcu to netns_ipv4.mrt.
30cb24f97d44 psp: strip variable-length PSP header in psp_dev_rcv()
ac0841d7d202 net: prevent possible UAF in rtnl_prop_list_size()
70ece9d7021c mptcp: sockopt: increase seq in mptcp_setsockopt_all_sf
6254a16d6f0c mptcp: fix rx timestamp corruption on fastopen
a6da02d4c00f mptcp: use MPTCP_RST_EMPTCP for ACK HMAC validation failure
c4a99a921949 mptcp: use MPJoinSynAckHMacFailure for SynAck HMAC failure
059b7dbd20a6 vsock/virtio: fix potential unbounded skb queue
36bdc0e815b4 net: usb: asix: ax88772: re-add usbnet_link_change() in phylink callbacks
d0771f4995d3 ASoC: tas2770: Deal with bogus initial temperature value
915f9860fe1c ASoC: tas2764: Deal with bogus initial temperature register value
76b93a810757 netpoll: pass buffer size to egress_dev() to avoid MAC truncation
d82ba05263c6 af_unix: Set gc_in_progress to true in unix_gc().
8f78b749f3da sched/isolation: Make HK_TYPE_KTHREAD an alias of HK_TYPE_DOMAIN
aa6065206987 ipvs: Guard access of HK_TYPE_KTHREAD cpumask with RCU
4ee52b7021a7 ipvs: fix shift-out-of-bounds in ip_vs_rht_desired_size
2fd109238925 ipvs: fix races around est_mutex and est_cpulist
fbe1e01e818e ipvs: do not leak dest after get from dest trash
d493d9de1c21 ipvs: fix the spin_lock usage for RT build
f2da9a96abb4 ipvs: fix races around the conn_lfactor and svc_lfactor sysctl vars
afbd961305eb ipvs: fixes for the new ip_vs_status info
201ba706318d selftests: ovpn: reduce ping count in test.sh
c539cb30f93f ovpn: ensure packet delivery happens with BH disabled
a200cdbf9593 ovpn: reset MAC header before passing skb up
d8769544bde5 docs: cgroup-v1: Update charge-commit section
b34c82777a2c sched_ext: idle: Recheck prev_cpu after narrowing allowed mask
ff9eda4ea906 sched_ext: Skip past-sched_ext_dead() tasks in scx_task_iter_next_locked()
60f21a264930 cgroup, sched_ext: Include exiting tasks in cgroup iter
360f61bc2908 MAINTAINERS: Update mail for Peter Rosin
93618edf7538 cgroup: Defer css percpu_ref kill on rmdir until cgroup is depopulated
320e55722ca4 ALSA: usb-audio: add clock quirk for Motu 1248
f3c57c9c2a49 ALSA: usb-audio: midi2: Restart output URBs on resume
dc1e0172be54 ALSA: hda/realtek: Fix mute and mic-mute LEDs for HP Envy X360 15-fh0xxx
db4cd7d6c571 ALSA: usb-audio: Add quirk flags for JBL Pebbles
0749daa8eb5a ALSA: firewire-tascam: Do not drop unread control events
f80785888f7c ALSA: usb-audio: Add quirk flags for AlphaTheta EUPHONIA
d748603f12ba wifi: ath5k: do not access array OOB
0e1308803d2c wifi: ath12k: fix peer_id usage in normal RX path
81594a12d5ce wifi: ath12k: initialize RSSI dBm conversion event state
05c5078de822 wifi: ath12k: fix leak in some ath12k_wmi_xxx() functions
0b2eb1f8473e spi: microchip-core-qspi: remove some inline markings
eb56deaabf12 spi: microchip-core-qspi: don't attempt to transmit during emulated read-only dual/quad operations
7672749e1496 spi: microchip-core-qspi: control built-in cs manually
894e04b71162 spi: imx: Propagate prepare_transfer() error from spi_imx_setupxfer()
f5b554825504 spi: imx: Fix UAF on package-1 prepare failure in spi_imx_dma_data_prepare()
24e0fd8b8520 spi: imx: Fix precedence bug in spi_imx_dma_max_wml_find()
e8446a4a574d ASoC: fsl_xcvr: Fix event generation for cached controls
56d5a9eaf60a ASoC: sdw_utils: avoid the SDCA companion function not supported failure
d63c219b7ff3 ASoC: amd: yc: Add HP OMEN Gaming Laptop 16-ap0xxx product line in quirk table
0f9bfb84b3f0 ASoC: cs35l56: Fix out-of-bounds in dev_err() in cs35l56_read_onchip_spkid()
0e60d9661664 ASoC: amd: yc: Add DMI quirk for MSI Bravo 15 C7VE
c64e77490b7e ASoC: cs35l56: Fix hibernate write in runtime resume error path
ec0611868f2f ASoC: spacemit: fix RX DMA params not set when TX is running
e366ce8b22ec ASoC: codecs: ab8500: Remove suspicious code
359b626d3621 ALSA: pcmtest: Return -EFAULT on pattern read copy failure
6036b5067a81 i2c: stub: Reject I2C block transfers with invalid length
088f65e20608 x86/efi: Fix graceful fault handling after FPU softirq changes
b47bc7c022dd i2c: Compare the return value of gpiod_get_direction against GPIO_LINE_DIRECTION_OUT
37b0dc5e279f parisc: Fix IRQ leak in LASI driver
bc851db06045 staging: rtl8723bs: os_dep: avoid NULL pointer dereference in rtw_cbuf_alloc
617eb7c0961a i2c: dev: prevent integer overflow in I2C_TIMEOUT ioctl
32c91e8ee039 staging: vme_user: fix root device leak on init failure
9998e388be99 i2c: acpi: Add ELAN0678 to i2c_acpi_force_100khz_device_ids
8de779dc40d3 fbdev: udlfb: add vm_ops to dlfb_ops_mmap to prevent use-after-free
c5f25f5800f5 dt-bindings: i2c: apple,i2c: Add t8122 compatible
10161b4a791d iommu/amd: Fix precedence order in set_dte_passthrough()
02b7cd683892 i2c: stm32f7: reinit_completion() per transfer not per msg
9a937ca22741 dt-bindings: i2c: amlogic: Add compatible for T7 SOC
8bc6b14aab66 i2c: testunit: Replace system_long_wq with system_dfl_long_wq
65493f27a600 wifi: cw1200: Revert "Fix locking in error paths"
0cfff13c94cb wifi: mac80211: tests: mark HT check strict
04fe9aeb4f3c io_uring/eventfd: reset deferred signal state
b8c2e9e27636 io_uring/napi: clear tracked NAPI entries on unregister
5e489c6c47a2 smb: client: use kzalloc to zero-initialize security descriptor buffer
d68ce834f8cf cifs: abort open_cached_dir if we don't request leases
5a873d77ba79 LoongArch: KVM: Move unconditional delay into timer clear scenery
2433f3f5724b LoongArch: KVM: Fix HW timer interrupt lost when inject interrupt by software
6debfff78584 LoongArch: KVM: Move AVEC interrupt injection into switch loop
81e18777d614 LoongArch: KVM: Use kvm_set_pte() in kvm_flush_pte()
f26faae96c41 LoongArch: KVM: Fix missing EMULATE_FAIL in kvm_emu_mmio_read()
b3e31a6650d4 LoongArch: KVM: Cap KVM_CAP_NR_VCPUS by KVM_CAP_MAX_VCPUS
b323a441da60 LoongArch: KVM: Fix "unreliable stack" for kvm_exc_entry
5203012fa604 LoongArch: KVM: Compile switch.S directly into the kernel
7e2c41bc62e4 LoongArch: vDSO: Drop custom __arch_vdso_hres_capable()
8dfa2f8780e4 LoongArch: Fix potential ADE in loongson_gpu_fixup_dma_hang()
49f33840dcc9 LoongArch: Use per-root-bridge PCIH flag to skip mem resource fixup
98b8aebb14fd LoongArch: Fix SYM_SIGFUNC_START definition for 32BIT
5643c6b2c830 LoongArch: Specify -m32/-m64 explicitly for 32BIT/64BIT
4808e5cc4fe1 LoongArch: Make CONFIG_64BIT as the default option
0cb2af2ea66a KVM: x86: Fix shadow paging use-after-free due to unexpected GFN
0aec99f9bf02 KVM: x86: Fix misleading variable names and add more comments for PIR=>IRR flow
33fd0ccd2590 KVM: x86: Do IRR scan in __kvm_apic_update_irr even if PIR is empty
464af6fc2b1d KVM: x86: check for nEPT/nNPT in slow flush hypercalls
bd3a4795d574 selftests: tls: add test for data loss on small pipe
7e7be31bfdb0 net: tls: fix silent data drop under pipe back-pressure
67dc6c56b871 net/sched: sch_cake: annotate data-races in cake_dump_class_stats (II)
046111a1a35a net/sched: sch_cake: annotate data-races in cake_dump_class_stats (I)
0c99acbc8b6c RDMA/hns: Fix unlocked call to hns_roce_qp_remove()
7d51783d82fe RDMA/hns: Fix xarray race in hns_roce_create_qp_common()
48973c6c9387 RDMA/hns: Fix xarray race in hns_roce_create_srq()
c9341307ea16 RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event()
c54c7e4cb679 RDMA/mlx4: Fix resource leak on error in mlx4_ib_create_srq()
e38e86995df2 RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path
34fbf48cf3b4 RDMA/ocrdma: Don't NULL deref uctx on errors in ocrdma_copy_pd_uresp()
ea4e4b168a53 RDMA/ocrdma: Clarify the mm_head searching
6aaa978c6b62 RDMA/mana: Fix error unwind in mana_ib_create_qp_rss()
34ecf795692e RDMA/mana: Fix mana_destroy_wq_obj() cleanup in mana_ib_create_qp_rss()
159f2efabc89 RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss()
6dd2d4ad9c84 RDMA/mana: Validate rx_hash_key_len
45e8ebc9ede7 RDMA/mlx5: Add missing store/release for lock elision pattern
641858d52f23 RDMA/mlx5: Restore zero-init to mlx5_ib_modify_qp() ucmd
70f780edcd1e RDMA/ionic: Fix typo in format string
1d324c2f43f7 ip6_gre: Use cached t->net in ip6erspan_changelink().
3a3a30c14d7f selftests/tc-testing: Add tests that force red and sfb to dequeue from child's gso_skb
1b9bc71153b0 net/sched: sch_sfb: Replace direct dequeue call with peek and qdisc_dequeue_peeked
458d5615272d net/sched: sch_red: Replace direct dequeue call with peek and qdisc_dequeue_peeked
383d0fb89469 amd-xgbe: fix PTP addend overflow causing frozen clock
851bba8068d1 net: wan: fsl_ucc_hdlc: fix ucc_hdlc_remove
1a57efe250a1 net: wan: fsl_ucc_hdlc: fix uhdlc_memclean
ddca6da148b8 MAINTAINERS: Add self for the DEC LANCE network driver
0c7ae130698e tools/headers: Regenerate stddef.h to fix BPF selftests
996454bc0da8 ksmbd: validate inherited ACE SID length
6fd7dd4e44d7 ksmbd: fix kernel-doc warnings from ksmbd_conn_get/put()
a74668eb2c0b ksmbd: fail share config requests when path allocation fails
bf736184d063 ksmbd: close durable scavenger races against m_fp_list lookups
a42896bebfcc ksmbd: harden file lifetime during session teardown
b1f1e80620de ksmbd: centralize ksmbd_conn final release to plug transport leak
d1ae37dc6881 selftest: net: Add test for TCP flow failover with ECMP routes.
4bc852006b62 ipv6: update route serial number on NETDEV_CHANGE
6d4106e8df94 net/sched: sch_pie: annotate more data-races in pie_dump_stats()
a5148bc2fa27 net: usb: cdc_ncm: add Apple Mac USB-C direct networking quirk
c6bebaa744f7 ipv4: igmp: annotate data-races in igmp_heard_query()
4b9e32799181 net: rtnetlink: zero ifla_vf_broadcast to avoid stack infoleak in rtnl_fill_vfinfo
4f34002e2e37 ipmr: prevent info-leak in pmr_cache_report()
f93836b23677 net: usb: r8152: add TRENDnet TUC-ET2G v2.0
9900b9fee5a0 smb: smbdirect: fix MR registration for coalesced SG lists
e768103cfbac smb: smbdirect: introduce and use include/linux/smbdirect.h
5234094c0150 smb: smbdirect: make use of DEFAULT_SYMBOL_NAMESPACE and EXPORT_SYMBOL_GPL
010b7723c0a3 rseq: Don't advertise time slice extensions if disabled
e9766e6f7d33 rseq: Protect rseq_reset() against interrupts
2cb68e45120d rseq: Set rseq::cpu_id_start to 0 on unregistration
cb48828f06af selftests/rseq: Don't run tests with runner scripts outside of the scripts
41ca998fbe30 parisc: Fix 64-bit kernel build when CONFIG_COMPAT=n
ad39a189bfeb ALSA: usb-audio: add min_mute quirk for Razer Nommo V2 X
56722cfbb78d ALSA: hda/realtek: Add codec SSID quirk for Lenovo Yoga Pro 9 16IMH9
845db023a8ae ublk: don't issue uring_cmd from fallback task work
baa3c65435fb netfilter: flowtable: use skb_pull_rcsum() to pop vlan/pppoe header
bc968f61bf0a octeontx2-af: npc: cn20k: Reject missing default-rule MCAM indices
013717353c03 octeontx2-af: npc: cn20k: Tear down default MCAM rules explicitly on free
afb474bd4ffc octeontx2-af: npc: cn20k: Initialize default-rule index outputs up front
f6803eb070bf octeontx2-af: npc: cn20k: Fix MCAM actions read
2b6d6bb7282c octeontx2-af: npc: cn20k: Fix bank value
d2dabf09632c octeontx2-af: npc: cn20k: Clear MCAM entries by index and key width
d7e5940c4c50 octeontx2-af: npc: cn20k: Fix target map and rule
adb5ff41efbc octeontx2-af: npc: cn20k: Propagate errors in defrag MCAM alloc rollback
1100af13fd14 octeontx2-af: npc: cn20k: Drop debugfs_create_file() error checks in init
aaadccde312f octeontx2-af: npc: cn20k: Propagate MCAM key-type errors on cn20k
75df490c9e84 net: airoha: Move entries to queue head in case of DMA mapping failure in airoha_dev_xmit()
7a33345153ee net: libwx: use request_irq for VF misc interrupt
694de316f607 net: libwx: fix VF illegal register access
26ebd12e67bf net: enetc: fix VSI mailbox timeout handling and DMA lifecycle
3744b0964d52 ipv6: Implement limits on extension header parsing
e027c218c482 net: phy: micrel: fix LAN8814 QSGMII soft reset
69c54f80f4a7 netfilter: flowtable: fix inline pppoe encapsulation in xmit path
a177ae30f786 netfilter: flowtable: fix inline vlan encapsulation in xmit path
dff205550e71 hwmon: (lm63) Add locking to avoid TOCTOU
2adc8664018c rust: allow `clippy::collapsible_if` globally
838d852da850 rust: allow `clippy::collapsible_match` globally
68bf102226cf rust: pin-init: fix incorrect accessor reference lifetime
83ac2870310b rust: pin-init: internal: move alignment check to `make_field_check`
ba6b328588f7 rust: arch: um: Fix building 32-bit UML with GCC
768729710641 net: mctp: test: Use dev_direct_xmit for TX to our test device
18ed60e33e6c net: mctp: test: use a zeroed struct sockaddr_mctp
174606451fbb hwmon: (corsair-psu) Close HID device on probe errors
1a1414c675ee hwmon: Remove stale CONFIG_SENSORS_SBRMI Makefile reference
5ed26ffe57ff Documentation: hwmon: fix link to ideapad-laptop.c file
2da0c1fd01db hwmon: (ltc2992) Fix u32 overflow in power read path
d6cc7c99bf1f hwmon: (ltc2992) Clamp threshold writes to hardware range
ef4f741e8627 netfilter: flowtable: ensure sufficient headroom in xmit path
952e121c9613 netfilter: xtables: fix L4 header parsing for non-first fragments
009d203e56db netfilter: nf_tables: skip L4 header parsing for non-first fragments
0bf00859d7a5 netfilter: nf_socket: skip socket lookup for non-first fragments
92a8b5e2eff6 ALSA: hda/realtek: Fix speaker silence after S3 resume on Xiaomi Mi Laptop Pro 15
863810d4985a platform/x86: lenovo: wmi-other: Fix uninitialized variable in lwmi_om_hwmon_write()
c2d4b76458c9 platform/x86: hp-wmi: silence unknown board warning for 8D41
d3b7a868f1ae platform/wmi: Fix unchecked min_size in wmidev_invoke_method()
100201d349ed USB: serial: option: add Telit Cinterion LE910Cx compositions
e6a650acbd99 parisc: Fix build failure for 32-bit kernel with PA2.0 instruction set
63bac0278603 netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables
8bedb6c46945 netfilter: xt_CT: fix usersize for v1 and v2 revision
2f768d638d97 netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate
6813985ca456 netfilter: x_tables: add .check_hooks to matches and targets
1d47b55b36d2 netfilter: nft_fwd_netdev: use recursion counter in neigh egress path
0a0b35f0bf10 netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding
1049970d7583 netfilter: replace skb_try_make_writable() by skb_ensure_writable()
20e81c64c905 workqueue: Annotate alloc_workqueue_va() with __printf(1, 0)
6009cca96fcb RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation
1f3b337af223 RDMA/core: Fix rereg_mr use-after-free race
610771c62e2a IB/core: Fix IPv6 netlink message size in ib_nl_ip_send_msg()
9bee81cc5e88 RDMA/mlx5: Fix UAF in DCT destroy due to race with create
38694f4639c4 RDMA/mlx5: Fix UAF in SRQ destroy due to race with create
14acf9652e56 xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete
28465227c80f xfrm: provide message size for XFRM_MSG_MAPPING
cda92ac47c02 efi/libstub: Synchronize instruction cache after kernel relocation
ad6f4f3ea72f efi/loongarch: Implement efi_cache_sync_image()
883a32793c86 efi/libstub: Move efi_relocate_kernel() into its only remaining user
de019f203b0d clk: rk808: fix OF node reference imbalance
69056753231f MAINTAINERS: add myself as a reviewer for the clk subsystem
4ac170432cf7 reset: eyeq: drop device_set_of_node_from_dev() done by parent
a25ab518f355 clk: eyeq: add EyeQ5 children auxiliary device for generic PHYs
79a1886be156 clk: eyeq: use the auxiliary device creation helper
3e75021f615c clk: spacemit: k3: mark top_dclk as CLK_IS_CRITICAL
a8aebe93a493 ipmi:ssif: NULL thread on error
09dd798270ff ipmi:si: Return state to normal if message allocation fails
c4cca2369686 ipmi: Add limits to event and receive message requests
0de4cb473aed workqueue: fix devm_alloc_workqueue() va_list misuse
b8425ceefee5 parisc: drivers: switch to dynamic root device
8135b89a376a Revert "parisc: led: fix reference leak on failed device registration"
c488df06bd55 RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init()
1114c87aa6f1 RDMA/rxe: Reject non-8-byte ATOMIC_WRITE payloads
4c6f86d85d03 RDMA/rxe: Reject unknown opcodes before ICRC processing
76b48a70b16b IB/hfi1: Fix potential use-after-free in PIO and SDMA map teardown
d237f719b272 lib/fonts: Fix bit position when rotating by 180 degrees
0b996ae54d87 fbdev: defio: Remove duplicate include of linux/module.h
f1fb23a0a0fc fbdev: ipu-v3: clean up kernel-doc warnings
b336e40c62fb efi: pstore: Drop efivar lock when efi_pstore_open() returns with an error
a9e8765fd206 efivarfs: use QSTR() in efivarfs_alloc_dentry
db57a1aa54ff wifi: rsi: fix kthread lifetime race between self-exit and external-stop
fa90a3145c03 xfrm: Don't clobber inner headers when already set
e64e03b478e2 tools/selftests: Add a VXLAN+IPsec traffic test
ada95e5e603b tools/selftests: Use a sensible timeout value for iperf3 client
cfcbfe5cb116 PCI: Don't fallback to bus reset after failed slot reset
465b05bae5ac selftests: harness: Restore order of test functions
74f192205c48 selftests: kselftest: fix wrong test number in ksft_exit_skip
b38e53cbfb9d usb: usblp: fix uninitialized heap leak via LPGETSTATUS ioctl
7a400c6fe361 usb: usblp: fix heap leak in IEEE 1284 device ID via short response
aad35f9c926e usb: dwc3: Move GUID programming after PHY initialization
f6ec9bb4acc7 usb: typec: tcpm: fix debug accessory mode detection for sink ports
2909f0d4994f usb: typec: tcpm: reset internal port states on soft reset AMS
0b9fcab1b860 usb: ulpi: fix memory leak on ulpi_register() error paths
3f91484f6c13 USB: omap_udc: DMA: Don't enable burst 4 mode
ec1fcddb3117 pmdomain: mediatek: fix use-after-free in scpsys_get_bus_protection_legacy()
26735dfdd893 pmdomain: core: Fix detach procedure for virtual devices in genpd
f9471dc1a717 iommu/pages: Fix iommu_pages_flush_incoherent() for non-x86
1f44aab79bac iommu/amd: Use maximum PPR log buffer size when SNP is enabled on Family 0x19
58c0ac6125d8 iommu/amd: Use maximum Event log buffer size when SNP is enabled on Family 0x19
7a5b81e0c87a wifi: mac80211: drop stray 'static' from fast-RX rx_result
9b55d5c1f5e4 wifi: mac80211: check ieee80211_rx_data_set_link return in pubsta MLO path
381cd547bc6e wifi: nl80211: require admin perm on SET_PMK / DEL_PMK
3994b4afd521 wifi: libertas: fix integer underflow in process_cmdrequest()
a035766f970b wifi: b43legacy: enforce bounds check on firmware key index in RX path
1f4f78bf8549 wifi: b43: enforce bounds check on firmware key index in b43_rx()
c623b6358088 wifi: brcmfmac: Fix potential use-after-free issue when stopping watchdog task
711a9c018ad2 wifi: mac80211: skip ieee80211_verify_sta_ht_mcs_support check in non-strict mode
23c39cb59897 media: qcom: camss: avoid format string warning
d31fac47b39f media: qcom: camss: Add missing clocks for VFE lite on sa8775p
fe56c674118a media: qcom: camss: Fix csid clock configuration for sa8775p
dd1b37394107 media: qcom: camss: Fix csid IRQ offset for sa8775p
3e0b20537516 media: qcom: iris: increase H265D_MAX_SLICE to fix H.265 decoding on SC7280
3d9593ad1a58 media: iris: fix use-after-free of fmt_src during MBPF check
95a337f92f0a media: iris: switch to hardware mode after firmware boot
4a49ae56b0e4 media: iris: Fix dma_free_attrs() size in iris_hfi_queues_init()
f27cfdcfc916 media: iris: Fix use-after-free in iris_release_internal_buffers()
a297c5165f91 media: iris: fix QCOM_MDT_LOADER dependency
aa23c94cc433 media: venus: fix QCOM_MDT_LOADER dependency
b5c111f4967b bpf: Fix sk_local_storage diag dumping uninitialized special fields
1081de1accb2 bpf: Fix NULL pointer dereference in bpf_skb_fib_lookup()
6451d58a3556 sockmap: Fix sk_psock_drop() race vs sock_map_{unhash,close,destroy}().
375e4e33c18d bpf: Fix NULL pointer dereference in bpf_sk_storage_clone and diag paths
4498664e2d58 wifi: ath12k: use lockdep_assert_in_rcu_read_lock() for RCU assertions
c4b6ad0e14f5 wifi: ath10k: snoc: select POWER_SEQUENCING
f3ba9e05cc7b wifi: ath12k: fix OF node refcount imbalance in WSI graph traversal
4a1b53417739 wifi: ath12k: prepare REO update element only for primary link
2c7e33f1fc2e selftests/bpf: Verify bpf-tcp-cc rejects TCP_NODELAY
52b6b5334924 selftests/bpf: Test TCP_NODELAY in TCP hdr opt callbacks
54377fcab51f bpf: Reject TCP_NODELAY in bpf-tcp-cc
846c76ecc029 bpf: Reject TCP_NODELAY in TCP header option callbacks
2f3835771dff scsi: target: iscsi: reject invalid size Extended CDB AHS
b06cf63d83d3 scsi: ufs: core: Fix bRefClkFreq write failure in HS-LSS mode
36920f30e78e ipmi: Check event message buffer response for bad data
47e66bec3eda scsi: hisi_sas: Fix sparse warnings in prep_ata_v3_hw()
1dc39ed65575 scsi: pmcraid: Fix typo in comments
68c3a65a5a8e scsi: scsi_dh_alua: Increase default ALUA timeout to maximum spec value
d65efdf467ff scsi: smartpqi: Silence a recursive lock warning
04631f55afc5 scsi: mpt3sas: Limit NVMe request size to 2 MiB
7b03c93d2beb scsi: sg: Don't use GFP_ATOMIC in sg_start_req()
ec54093e6a8f xfrm: ah: account for ESN high bits in async callbacks
bc0fcb9823cd ipv6: xfrm6: release dst on error in xfrm6_rcv_encap()
772a896a56e0 scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show()