0375ba98c1fd drm-tip: 2026y-06m-08d-02h-44m-49s UTC integration manifest
4549871118cf Linux 7.1-rc7
98b708c6794c drm-tip: 2026y-06m-06d-23h-31m-44s UTC integration manifest
979c294509f9 cfi: Include uaccess.h for get_kernel_nofault()
fb402386af4c Input: atkbd - skip deactivate for HONOR BCC-N's internal keyboard
65b09bfa8aa7 kconfig: Fix repeated include selftest expectation
17f073f78fc4 KVM: arm64: Correctly identify executable PTEs at stage-2
49b32ddb87a3 KVM: arm64: nv: Fix handling of XN[0] when !FEAT_XNX
ed46f39c47eb io_uring/net: inherit IORING_CQE_F_BUF_MORE across bundle recv retries
70543358fa08 KVM: arm64: Reassign nested_mmus array behind mmu_lock
cbaffe843a94 KVM: arm64: Restore POR_EL0 access to host EL0
f2ca45b50d42 KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation
13031fb6b835 KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry
6f6947b2387e x86/resctrl: Only check Intel systems for SNC
2b5ff4db5d7a ALSA: seq: dummy: fix UMP event stack overread
b6197b386677 Reapply "bnxt_en: bring back rtnl_lock() in the bnxt_open() path"
3c94f241f776 udp: clear skb->dev before running a sockmap verdict
e374b22e9b07 sctp: purge outqueue on stale COOKIE-ECHO handling
b47ff80f280e bonding: annotate data-races arcound churn variables
7561c7fbc694 net/802/mrp: fix vector attribute parsing in mrp_pdu_parse_vecattr
9fc237f8d49f rtase: Avoid sleeping in get_stats64()
3a5f3f7aff18 ieee802154: 6lowpan: only accept IPv6 packets in lowpan_xmit()
791c91dc7a9d ipv6: mcast: Fix use-after-free when processing MLD queries
8df1c84e7272 selftests: net: add vxlan vnifilter notification test
84683b5b60c7 vxlan: vnifilter: fix spurious notification on VNI update
aa6ca1c5c338 vxlan: vnifilter: send notification on VNI add
ab1ecaabe74b rtase: Reset TX subqueue when clearing TX ring
1d31eb27e570 octeontx2-af: npc: Fix CPT channel mask in npc_install_flow
1232b3104b4b dt-bindings: ethernet: eswin: fix hsp-sp-csr backward compatibility
0861615c28de sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing
899ee91156e5 net/sched: fix pedit partial COW leading to page cache corruption
d76b56b06b27 ALSA: usb-audio: Add iface reset and delay quirk for AB13X USB Audio
88fe2e365872 ALSA: PCM: Fix wait queue list corruption in snd_pcm_drain() on linked streams
d486b4934a8e timers/migration: Fix livelock in tmigr_handle_remote_up()
c05fa14db43e vsock/vmci: fix sk_ack_backlog leak on failed handshake
d2dcd85f9e09 ASoC: amd: acp70: add standalone RT721 SoundWire machine
cad530a83711 ASoC: amd: yc: Add MSI Raider A18 HX A9WJG to quirk table
4790af1cc2e8 ASoC: fsl_sai: Fix 32 slots TDM broken by integer shift UB in xMR write
a764b0e8317a net: bonding: fix NULL pointer dereference in bond_do_ioctl()
0652a3daa787 tracing: Fix CFI violation in probestub being called by tprobes
1231623fd3b5 geneve: fix length used in GRO hint UDP checksum adjustment
2eea7f44b9c8 iomap: avoid potential null folio->mapping deref during error reporting
40ab6644b996 fhandle: fix UAF due to unlocked ->mnt_ns read in may_decode_fh()
80df409e1a48 net: ethernet: mtk_eth_soc: Fix use-after-free in metadata dst teardown
b38cae85d1c4 net: airoha: Fix use-after-free in metadata dst teardown
bd34fa025726 mptcp: add-addr: always drop other suboptions
5e939544f9d2 mptcp: fix uninit-value in mptcp_established_options
c378b1a6f8dd mptcp: check desc->count in read_sock
7690137e70ab mptcp: sockopt: set sockopt on all subflows
57132affbc89 mptcp: sockopt: check timestamping ret value
06fd2bec7aeb selftests: mptcp: add test for extra_subflows underflow on userspace PM
14e9fea30b68 mptcp: pm: fix extra_subflows underflow on userspace PM subflow creation
da23be77e129 mptcp: allow subflow rcv wnd to shrink
8ab24fdebc36 mptcp: close TOCTOU race while computing rcv_wnd
d1918b36edca mptcp: fix retransmission loop when csum is enabled
9d8d28738f24 mptcp: fix missing wakeups in edge scenarios
672bd0519e27 ptp: vclock: Switch from RCU to SRCU
d3915a1f5a4b ipv4: restrict IPOPT_SSRR and IPOPT_LSRR options
dd8975ad710e af_unix: Add test for SCM_INQ on partial read
c1f07a7f2d47 af_unix: Fix inq_len update problem in partial read
9a85ec3dc28b octeontx2-af: Fix initialization of mcam's entry2target_pffunc field
a910fb8f7b9e octeontx2-pf: Fix NDC sync operation errors
2cdeaba5a108 appletalk: aarp: zero-initialize aarp_entry to prevent heap info leak
56d088551449 net: sfp: initialize i2c_block_size at adapter configure time
22ba97ea9cc1 xsk: cache csum_start/csum_offset to fix TOCTOU in xsk_skb_metadata()
40a25d59e85b locking/rtmutex: Skip remove_waiter() when waiter is not enqueued
149324fc762c Bluetooth: MGMT: Fix backward compatibility with userspace
4847c5bca222 Bluetooth: SCO: Fix data-race on sco_pi fields in sco_connect
9ca7053d6215 Bluetooth: ISO: Fix data-race on iso_pi fields in hci_get_route calls
f50331f2a144 Bluetooth: ISO: Fix a use-after-free of the hci_conn pointer
5cbf290b7935 Bluetooth: ISO: Fix not releasing hdev reference on iso_conn_big_sync
37b3009bf597 Bluetooth: fix memory leak in error path of hci_alloc_dev()
6770d3a8acdf Bluetooth: bnep: reject short frames before parsing
5c65b96b549e Bluetooth: hci_sync: reject oversized Broadcast Announcement prepend
dd2147335444 Bluetooth: L2CAP: reject BR/EDR signaling packets over MTUsig
23882b828c3c Bluetooth: RFCOMM: validate skb length in MCC handlers
de23fb62259a Bluetooth: MGMT: validate advertising TLV before type checks
43c441edacf9 Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind()
db38bcb33110 KVM: SEV: Unmap and unpin the GHCB as needed on vCPU free
f041dc80de4a KVM: SEV: Decouple the need to sync the GHCB SA from the need to free the SA
08385c5e1814 KVM: SEV: Move sev_free_vcpu() down below sev_es_unmap_ghcb()
8618004d3e89 KVM: Don't WARN if memory is dirtied without a vCPU when the VM is dying
ce6ea7b33e00 KVM: SEV: Read start/end indices of PSC requests exactly once per #VMGEXIT
00b9744a3688 KVM: SEV: Add an anonymous "psc" struct to track current PSC metadata
17d62e0b157f KVM: SEV: Make it more obvious when KVM is writing back the current PSC index
cb9959ab5f99 wifi: cfg80211: enforce HE/EHT cap/oper consistency
e8694f7cc292 wifi: fix leak if split 6 GHz scanning fails
f723ccaff2fb ipv6: anycast: insert aca into global hash under idev->lock
ad0979fe053e Input: atkbd - add DMI quirk for Lenovo Yoga Air 14 (83QK)
57aff9911196 cgroup/cpuset: Change Ridong's email
02e545c4297a sched_ext: Don't warn on NULL cgrp_moving_from in scx_cgroup_move_task()
5eba3e48d78e sctp: diag: reject stale associations in dump_one path
b455410146bf net: fec: fix pinctrl default state restore order on resume
8173d22b211f net: lan743x: permit VLAN-tagged packets up to configured MTU
20cf0fb715c4 net: rds: clear i_sends on setup unwind
74e144274af3 futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock
3f7fbde4cdd4 vdso/datastore: Mark vdso_k_*_data pointers as __ro_after_init
16e408e607a9 net: garp: fix unsigned integer underflow in garp_pdu_parse_attr
ce4abda5e126 time: Fix off-by-one in settimeofday() usec validation
c1ca14ca227e clockevents: Fix duplicate type specifier in stub function parameter
afd0f17ca462 hsr: Remove WARN_ONCE() in hsr_addr_is_self().
e10902df2448 tcp: Add preempt_{disable,enable}_nested() in reqsk_queue_hash_req().
b748765019fe net: Annotate sk->sk_write_space() for UDP SOCKMAP.
73bf3cca7de6 pcnet32: stop holding device spin lock during napi_complete_done
c1edda54a0f7 KVM: s390: Remove ptep_zap_softleaf_entry()
6ae67dcac742 KVM: s390: Fix possible reference leak in fault-in code
7b53b4801884 KVM: s390: Prevent memslots outside the ASCE range
42546fc642e9 KVM: s390: Lock pte when making page secure
9a1dfbbd3506 KVM: s390: Fix fault-in code
6af5563e8279 KVM: s390: vsie: Fix rmap handling in _do_shadow_crste()
ca42c16638d5 KVM: s390: Fix guest / virtual address confusion in _essa_clear_cbrl()
89fa757931dc KVM: s390: Avoid potentially sleeping while atomic when zapping pages
d1adc098ce08 KVM: s390: Fix _gmap_crstep_xchg_atomic()
29e8751c1dd2 KVM: s390: Fix _gmap_unmap_crste()
6c0cf89f36ac wifi: mac80211: limit injected antenna index in ieee80211_parse_tx_radiotap
4cd92957e8f8 wifi: nl80211: reject oversized EMA RNR lists
6d99479799c6 rseq: Fix using an uninitialized stack variable in rseq_exit_user_update()
317d5146fb39 NFS: write_completion: dereference loop-local req, not hdr->req
3522b21fd7e1 devlink: Release nested relation on devlink free
a213a8950414 l2tp: pppol2tp: hold reference to session in pppol2tp_ioctl()
2a58899d1100 6lowpan: fix off-by-one in multicast context address compression
5057e1aca011 net/sched: act_api: use RCU with deferred freeing for action lifecycle
27f2d085bd72 erofs: fix EFSCORRUPTED on multi-algorithm images in z_erofs_map_sanity_check()
b5f53e6d3d32 x86/CPU/AMD: Add more Zen6 models
c9c64820a48d ASoC: amd: yc: Enable internal mic on MSI Bravo 17 C7VF
fc12cf16df9a ASoC: amd: acp: Add DMI quirk for Lenovo Yoga Pro 7 15ASH11
d3f0a606b9f2 dm cache policy smq: check allocation under invalidate lock
02896a7fa4cd net/mlx5: Reorder completion before putting command entry in cmd_work_handler
bb061d3de417 netfilter: nft_byteorder: remove multi-register support
67ba971ae025 netfilter: bridge: make ebt_snat ARP rewrite writable
3027ecbdb5fd netfilter: nft_ct: bail out on template ct in get eval
c32b26aaa2f9 netfilter: nft_tunnel: fix use-after-free on object destroy
66eba0ffce3b netfilter: conntrack_irc: fix possible out-of-bounds read
2fcba19caaeb netfilter: synproxy: add mutex to guard hook reference counting
36d29ceec32c netfilter: nft_fib_ipv6: bail out of sibling walk if rt got unlinked
193989cc6d80 ipvs: clear the svc scheduler ptr early on edit
c6c5327dd18b netfilter: xt_NFQUEUE: prefer raw_smp_processor_id
9d7bea186ba5 userfaultfd: remove redundant check in vm_uffd_ops()
df3ee3b3bbc3 userfaultfd: refuse to __mfill_atomic_pte() for unsupported VMAs
85668fda932a userfaultfd: verify VMA state across UFFDIO_COPY retry
8d878059924f mm/huge_memory: update file PMD counter before folio_put()
40990c87a26e mm/huge_memory: update file PUD counter before folio_put()
c7bde43f6daf mm/hugetlb_vmemmap: fix incorrect vmemmap restore in rollback
d6b8b02a27b3 mm/damon/ops-common: call folio_test_lru() after folio_get()
f580d27e8928 ksmbd: fix use-after-free of a deferred file_lock on double SMB2_CANCEL
7ce4fc40018d ksmbd: fix durable reconnect double-bind race in ksmbd_reopen_durable_fd
b003086d7696 ksmbd: fix NULL-deref of opinfo->conn in oplock/lease break notifiers
aa2f4addab44 ALSA: usb-audio: Set the value of potential sticky mixers to maximum
093305d801fa wifi: iwlwifi: pcie: simplify the resume flow if fast resume is not used
e0c121d54513 wifi: iwlwifi: mvm: avoid oversized UATS command copy
9bf1b409afc7 wifi: iwlwifi: mld: send tx power constraints before link activation
0eaa1f245ac0 wifi: iwlwifi: mvm: don't support the reset handshake for old firmwares
85e0f27dd139 tracing/probes: Point the error offset correctly for eprobe argument error
905b06d32a52 rust: x86: support Rust >= 1.98.0 target spec
7c6535c37dbc s390: Implement _THIS_IP_ using inline asm
ac35b5580ace rust: arm64: set uwtable llvm module flag for CONFIG_UNWIND_TABLES
dabfaca8140f xfs: Remove mention of PageWriteback
8070a50b8897 xfs: abort mount if xfs_fs_reserve_ag_blocks fails
2fa29c1a1677 xfs: factor rtgroup geom write pointer reporting into a helper
c316bb56bf4d xfs: drop the RTG reference later in xfs_ioc_rtgroup_geometry
c3e073894379 xfs: fix rtgroup cleanup in CoW fork repair
fcf4faba9f98 xfs: fix error returns in CoW fork repair
36ca6f11424a xfs: fix overlapping extents returned for pNFS LAYOUTGET
97bdbf2613eb xfs: fix use of uninitialized imap in xfs_fs_map_blocks error path
bc95fa240a1b xfs: handle racing deletions in xfs_zone_gc_iter_irec
f595e8e77a51 mmc: sdhci: add signal voltage switch in sdhci_resume_host
1e9a4850afa0 mmc: dw_mmc-rockchip: Add missing private data for very old controllers
99982b743e5b mmc: litex_mmc: Set mandatory idle clocks before CMD0
b837e38c255d mmc: litex_mmc: Use DIV_ROUND_UP for more accurate clock calculation
f48ee49726ee mmc: renesas_sdhi: Add OF entry for RZ/G2H SoC
8d4ae34e9970 mmc: sdhci-of-dwcmshc: Fix reset, clk, and SDIO support for Eswin EIC7700
7fe40c32a339 firmware: samsung: acpm: Fix infinite loop on sequence number exhaustion
bf296f83a3dd firmware: samsung: acpm: Fix missing LKMM barriers in sequence allocator
c889b1464788 firmware: samsung: acpm: Fix false timeouts and Use-After-Free in polling
1aee05e814d2 erofs: fix use-after-free on sbi->sync_decompress
00739e4dd46d mm/cma: fix reserved page leak on activation failure
3c2d42b8ee34 mm/memory-failure: fix hugetlb_lock AA deadlock in get_huge_page_for_hwpoison
40c81856e622 mm/hugetlb: restore reservation on error in hugetlb folio copy paths
c0ca59beb525 mm/cma_debug: fix invalid accesses for inactive CMA areas
c0cafe24d3f6 memcg: use round-robin victim selection in refill_stock
b4aea43cd37a mm/hugetlb: avoid false positive lockdep assertion
66ac2df408ed ARM: dts: gemini: Fix partition offsets
89c4a1167f3a fs/qnx6: fix pointer arithmetic in directory iteration
e824bbd4d224 VFS: fix possible failure to unlock in nfsd4_create_file()
3daad7f60aa9 s390/bug: Always emit format word in __BUG_ENTRY
b565a73baec2 tools/sched_ext: Fix scx_show_state per-scheduler state reads
645c3b7ef1a7 cgroup/cpuset: Add test cases for sibling CPU exclusion on partition update
0a68853de27b cgroup/cpuset: Use effective_xcpus in partcmd_update add/del mask calculation
880fa3a1e5c4 rust: helpers: add is_vmalloc_addr wrapper for NOMMU builds
63838c323924 ARM: socfpga: Fix OF node refcount leak in SMP setup
29d87434cb91 regulator: mt6363: select CONFIG_IRQ_DOMAIN
4a44b17406cb rust: kasan/kbuild: fix rustc-option when cross-compiling
539b7cf1f77a s390/configs: Enable IOMMUFD and VFIO cdev in defconfigs
90918794a4e2 signal: clear JOBCTL_PENDING_MASK for caller in zap_other_threads()
9c954499d43a fuse: reject fuse_notify() pagecache ops on directories
4e3d1b2c48ca fuse: limit FUSE_NOTIFY_RETRIEVE to uptodate folios
462a85f9f887 soc: qcom: ice: Fix the error code when 'qcom,ice' property is not found
90825ab392ac arm64: dts: qcom: eliza: Add power-domain and iface clk for ice node
b7c9047f851e arm64: dts: qcom: milos: Add power-domain and iface clk for ice node
0eb307d61317 selftests: harness: fix pidfd leak in __wait_for_test
471c18323dfd tee: qcomtee: add missing va_end in early return qcomtee_object_user_init()
6fa9b543f6b4 tee: fix params_from_user() error path in tee_ioctl_supp_recv
26682f5efc27 tee: shm: fix shm leak in register_shm_helper()
c15d7a2a11ea tee: fix tee_ioctl_object_invoke_arg padding
62c4d31d7829 pidfd: refuse access to tasks that have started exiting harder
b73953af9bbd arm64: defconfig: Enable PCI M.2 power sequencing driver
4ac19b36bf41 scsi: ufs: ufs-qcom: Remove NULL check from devm_of_qcom_ice_get()
2ccbb3fa5cf4 mmc: sdhci-msm: Remove NULL check from devm_of_qcom_ice_get()
b9ab7217dd7d soc: qcom: ice: Return proper error codes from devm_of_qcom_ice_get() instead of NULL
5a4dc805a80e soc: qcom: ice: Return -ENODEV if the ICE platform device is not found
d922113ef91e soc: qcom: ice: Fix race between qcom_ice_probe() and of_qcom_ice_get()
1711b6ed6953 ovl: keep err zero after successful ovl_cache_get()
4dc76c305a73 auxdisplay: Kconfig: drop unneeded quotes in PANEL_BOOT_MESSAGE dep
a7511dcd9dd4 auxdisplay: line-display: fix OOB read on zero-length message_store()
765aaba18413 ARM: dts: microchip: sam9x7: fix GMAC clock configuration
84a0f7caafc6 ARM: Do not select HAVE_RUST when KASAN is enabled
b66829b17f63 firmware: samsung: acpm: Fix mailbox channel leak on probe error
f133bd4b5daf firmware: samsung: acpm: Fix cross-thread RX length corruption
4b15b03166cc arm64: dts: qcom: x1-dell-thena: remove i2c20 (battery SMBus) and reserve its pins
12c97d1c15f9 arm64: dts: qcom: glymur: Drop RPMh CXO clocks from QMP PHYs
5a52c5701a67 mmc: core: Fix host controller programming for fixed driver type
0d5dc5818191 soc: qcom: ice: Allow explicit votes on 'iface' clock for ICE
e27264daac7d dt-bindings: crypto: qcom,ice: Fix missing power-domain and iface clk
2c6821657ce3 soc: imx8m: Fix match data lookup for soc device
d25e5cbac4e2 auxdisplay: max6959: use regmap_assign_bits() in max6959_enable()
754d60ad1c91 memory: atmel-ebi: Allow deferred probing
387a926ee166 tee: optee: prevent use-after-free when the client exits before the supplicant