UPDATE: 6.6.151

[fepitre-bot]

Update to 6.6.151

Details

Changes since previous version:
gregkh/linux@d8a1f7420d2d mm: refactor mm_access() to not return NULL
gregkh/linux@ae068b676196 Linux 6.6.146
gregkh/linux@12a891c773ae posix-cpu-timers: Prevent UAF caused by non-leader exec() race
gregkh/linux@a1153c0deb44 Linux 6.6.147
gregkh/linux@b10a69641172 platform/x86/intel-uncore-freq: Fix current_freq_khz after CPU hotplug
gregkh/linux@37ad2bb11e9d bpf: Fix ld_{abs,ind} failure path analysis in subprogs
gregkh/linux@a715cf4de28e selftests/bpf: Add tests for ld_{abs,ind} failure path in subprogs
gregkh/linux@30e439a141d2 drm/virtio: fix deadlock in display_info_cb by removing hotplug from dequeue worker
gregkh/linux@55ec4d9ee783 platform/x86/amd/pmc: Don't log during intermediate wakeups
gregkh/linux@c90b043ff068 platform/x86/amd/pmc: Avoid logging "(null)" for DMI values
gregkh/linux@4f292febac9b seqlock: Cure some more scoped_seqlock() optimization fails
gregkh/linux@69ae8730e657 seqlock: Allow KASAN to fail optimizing
gregkh/linux@1f140d295390 seqlock: Allow UBSAN_ALIGNMENT to fail optimizing
gregkh/linux@35e77467610c KVM: x86: Check for invalid/obsolete root after making MMU pages available
gregkh/linux@af56298e9d86 KVM: nVMX: Hide shadow VMCS right after VMCLEAR
gregkh/linux@6f4be7388030 KVM: x86/mmu: Fix use-after-free on vendor module reload
gregkh/linux@a7eb6db1cd3f can: bcm: add locking when updating filter and timer values
gregkh/linux@8b2783172d92 can: bcm: fix CAN frame rx/tx statistics
gregkh/linux@52f06e760378 can: bcm: extend bcm_tx_lock usage for data and timer updates
gregkh/linux@7d966cdee006 can: bcm: validate frame length in bcm_rx_setup() for RTR replies
gregkh/linux@84aa4807816e can: bcm: add missing device refcount for CAN filter removal
gregkh/linux@60d8a7942f4e can: bcm: fix stale rx/tx ops after device removal
gregkh/linux@5f246b96ab47 can: bcm: fix data race on rx_stamp/rx_ifindex in bcm_rx_handler()
gregkh/linux@18b45251e74e can: bcm: track a single source interface for ANYDEV timeout/throttle ops
gregkh/linux@0b811c4bbe3e can: isotp: fix use-after-free race with concurrent NETDEV_UNREGISTER
gregkh/linux@0b05eca9589f can: isotp: serialize TX state transitions under so->rx_lock
gregkh/linux@5b12de6229d6 dmaengine: sh: rz-dmac: Move interrupt request after everything is set up
gregkh/linux@5592a207e158 accel/ivpu: Reject firmware log with size smaller than header
gregkh/linux@abeff53233b9 gpu: host1x: Fix use-after-free in host1x_bo_clear_cached_mappings
gregkh/linux@6e3cb82fcd2f xprtrdma: Clear receive-side ownership pointers on release
gregkh/linux@40bbbf2e91fd Input: ims-pcu - fix heap-buffer-overflow in ims_pcu_process_data()
gregkh/linux@f97776607d0d Input: ims-pcu - fix logic error in packet reset
gregkh/linux@e9ea1f148a94 arm64: tegra: Fix CPU compatible string to cortex-a78ae on Tegra234
gregkh/linux@dfa535c94406 IB/mad: Drop unmatched RMPP responses before reassembly
gregkh/linux@9a797e0dc766 mtd: mtdswap: remove debugfs stats file on teardown
gregkh/linux@5e23b8ec04e2 mtd: nand: mtk-ecc: stop on ECC idle timeouts
gregkh/linux@33878ba25e26 btrfs: reject free space cache with more entries than pages
gregkh/linux@b3d39b037996 btrfs: fix root leak if its reloc root is unexpected in merge_reloc_roots()
gregkh/linux@86f5ea90f73b firmware: arm_ffa: Fix NULL dereference in ffa_partition_info_get()
gregkh/linux@e33760e07610 RDMA/cma: Fix hardware address comparison length in netevent callback
gregkh/linux@7cf6776ce441 RDMA/umem: Add support for creating pinned DMABUF umem with a given dma device
gregkh/linux@dfb905d933d8 RDMA/umem: Introduce an option to revoke DMABUF umem
gregkh/linux@76a3fb857bd2 RDMA/umem: Add ib_umem_dmabuf_get_pinned_and_lock helper
gregkh/linux@559b236086ab RDMA/umem: Move umem dmabuf revoke logic into helper function
gregkh/linux@5f38a3ec57a7 RDMA/umem: Add pinned revocable dmabuf import interface
gregkh/linux@0ccb86d5631c RDMA/umem: Add helpers for umem dmabuf revoke lock
gregkh/linux@fb46d134e1b8 RDMA/irdma: Prevent rereg_mr for non-mem regions
gregkh/linux@0e861c8a6967 RDMA/erdma: initialize ret for empty receive WR lists
gregkh/linux@2fcf86887f9a RDMA/hns: Fix potential integer overflow in mhop hem cleanup
gregkh/linux@8bf715284f08 RDMA/siw: Only check attrs->cap.max_send_wr in siw_create_qp
gregkh/linux@36e91a58397c RDMA/siw: publish QP after initialization
gregkh/linux@ffe21a3545b4 mtd: fix double free and WARN_ON in add_mtd_device() error paths
gregkh/linux@367958515c99 selftests/alsa: Fix memory leak in find_controls error path
gregkh/linux@2bc90b4535fd RDMA/irdma: Prevent overflows in memory contiguity checks
gregkh/linux@df6856c2dda9 xfrm6: clear dst.dev on error to avoid double netdev_put in xfrm6_fill_dst()
gregkh/linux@d9d9cc21cc90 xfrm: policy: preallocate inexact bins before xfrm_hash_rebuild reinsert
gregkh/linux@3368457b4871 wifi: cfg80211: cancel sched scan results work on unregister
gregkh/linux@f75b9a2a9d83 wifi: ipw2100: fix potential memory leak in ipw2100_pci_init_one()
gregkh/linux@82c5a30a66e2 wifi: mac80211_hwsim: clamp virtio RX length before skb_put
gregkh/linux@d497b7566e74 wifi: libertas: fix memory leak in helper_firmware_cb()
gregkh/linux@25c3b85af3fc wifi: p54: validate RX frame length in p54_rx_eeprom_readback()
gregkh/linux@fa9592ef7de1 wifi: nl80211: free RNR data on MBSSID mismatch
gregkh/linux@2d372cb06387 wifi: nl80211: validate nested MBSSID IE blobs
gregkh/linux@642d8373c4c5 wifi: cfg80211: validate PMSR measurement type data
gregkh/linux@44ea65d779e2 wifi: cfg80211: validate PMSR FTM preamble range
gregkh/linux@a17f5d27cca2 wifi: cfg80211: reject unsupported PMSR FTM location requests
gregkh/linux@be9dfcb0654c wifi: mac80211: free AP_VLAN bc_buf SKBs outside IRQ lock
gregkh/linux@f50a2b9e57a7 wifi: brcmfmac: initialize SDIO data work before cleanup
gregkh/linux@20c308d9a577 wifi: cfg80211: bound element ID read when checking non-inheritance
gregkh/linux@4b1add0fd960 ASoC: meson: aiu: fifo-spdif: soft reset the S/PDIF datapath on start/stop
gregkh/linux@4cb0783d612c ASoC: amd: ps: fix wrong ACP version string in pci_request_regions()
gregkh/linux@0404b5b0f33b ASoC: cs42l43: Correct report for forced microphone jack
gregkh/linux@5143f863f864 ASoC: tas2562: fix deprecated 'shut-down' GPIO always cleared after lookup
gregkh/linux@91fdc1878345 firmware: arm_scmi: Rate-limit queue-full warnings in IRQ context
gregkh/linux@4bb84e964ff0 ppp: defer channel free to an RCU grace period to fix pppol2tp RX UAF
gregkh/linux@8150b5365f02 ipv4: fib: free fib_alias with kfree_rcu() on insert error path
gregkh/linux@4dc0e63abf8b net/iucv: take a reference on the socket found in afiucv_hs_rcv()
gregkh/linux@fbe7df5d3a3a ata: sata_dwc_460ex: enable SATA interrupts only after IRQ handler is registered
gregkh/linux@b99eafbc644b ata: sata_dwc_460ex: use platform_get_irq()
gregkh/linux@29f289ef8b5a ata: sata_dwc_460ex: fix clear_interrupt_bit() clearing all pending interrupts
gregkh/linux@4c6e64cae2b2 ata: sata_dwc_460ex: fix infinite loop in NCQ tag completion bit-scanning
gregkh/linux@fd2049eec99e ALSA: usb-audio: Skip DSD quirk for Musical Fidelity M6s DAC
gregkh/linux@70354dbb5f72 Bluetooth: qca: fix NVM tag length underflow in TLV parser
gregkh/linux@8bc83f9ef678 Bluetooth: mgmt: fix locking in unpair_device/disconnect_sync
gregkh/linux@b56f2ecafc08 Bluetooth: mgmt: hold reference for hci_conn in mgmt_pending_cmds
gregkh/linux@5a3945e8dea6 Bluetooth: hci_qca: Clear memdump state on invalid dump size
gregkh/linux@437637f5ff3f smb/client: handle overlapping allocated ranges in fallocate
gregkh/linux@8506eaaa6481 drm/i915/gt: use correct selftest config symbol
gregkh/linux@b8c31ebdd22f sched/vtime: Get rid of generic vtime_task_switch() implementation
gregkh/linux@986cb66d37e5 powerpc/time: Prepare to stop elapsing in dynticks-idle
gregkh/linux@315b7d610b93 powerpc/vtime: Initialize starttime at boot for native accounting
gregkh/linux@7ffe529e7127 bpf, sockmap: Reject unhashed UDP sockets on sockmap update
gregkh/linux@b8f591ee8b9f can: j1939: fix lockless local-destination check
gregkh/linux@0f72fc9659d7 ksmbd: pin conn during async oplock break notification
gregkh/linux@2c307126ed8e ksmbd: validate compound request size before reading StructureSize2
gregkh/linux@f6141a52180e drm/i915/selftests: Fix GT PM sort comparators
gregkh/linux@531dbb5bb98e net/sched: act_tunnel_key: Defer dst_release to RCU callback
gregkh/linux@0b4414e43e08 sctp: fix auth_hmacs array size in struct sctp_cookie
gregkh/linux@d6eee7cd078a mpls: fix NULL deref in mpls_valid_fib_dump_req() on CONFIG_INET=n
gregkh/linux@e165a1d295e7 wifi: at76c50x-usb: avoid length underflow in at76_guess_freq()
gregkh/linux@37691a2fe764 USB: storage: add NO_ATA_1X quirk for Longmai USB Key
gregkh/linux@fc5cc9e194b9 usb: chipidea: fix usage_count leak when autosuspend_delay is negative
gregkh/linux@e2b2740f1242 usb: gadget: dummy_hcd: prevent fifo_req reuse during giveback
gregkh/linux@380b4bef46c2 usb: gadget: f_midi: cancel pending IN work before freeing the midi object
gregkh/linux@994afccfdcce usb: gadget: printer: fix infinite loop in printer_read()
gregkh/linux@29f3cd27ec35 USB: gadget: snps-udc: fix device name leak on probe failure
gregkh/linux@ec52db6cac5d USB: gadget: fsl-udc: fix device name leak on probe failure
gregkh/linux@e07751d0527c usb: gadget: f_ncm: validate datagram bounds in ncm_unwrap_ntb()
gregkh/linux@1a1d7158420d usb: gadget: udc: bdc: free IRQ and drain func_wake_notify before teardown
gregkh/linux@4e116372b7a4 usb: gadget: uvc: clamp SEND_RESPONSE length to the response buffer
gregkh/linux@f92bdb3df3b2 USB: serial: ftdi_sio: add support for E+H FXA291
gregkh/linux@ee57992c053a USB: serial: io_edgeport: cap received transmit credits
gregkh/linux@1420c23c6d59 USB: serial: keyspan_pda: fix data loss on receive throttling
gregkh/linux@d8d18d251049 USB: serial: option: add TDTECH MT5710-CN
gregkh/linux@7dc44840ca3c crypto: rsa-pkcs1pad: Don't WARN on an empty digest
gregkh/linux@9aa3b4223df5 Revert "drm/amd/display: Add missing kdoc for ALLM parameters"
gregkh/linux@f2ac9e32369b RISC-V: KVM: Serialize virtual interrupt pending state updates
gregkh/linux@6192a3f77c97 usb: xhci-pci: Limit VIA VL805 DMA addressing to 36 bits
gregkh/linux@7f184ca38a90 wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request
gregkh/linux@e517e207300e wifi: ath11k: fix NULL pointer dereference in ath11k_hal_srng_access_begin
gregkh/linux@e6e1e0f3050d hwmon: (corsair-psu) Stop device IO before calling hid_hw_stop
gregkh/linux@0975c42ed2a3 hwmon: (corsair-cpro) Stop device IO before calling hid_hw_stop
gregkh/linux@185c0880397a hwmon: (nzxt-smart2) Stop device IO before calling hid_hw_stop
gregkh/linux@2e47b91b9b40 watchdog: pretimeout: Fix UAF in watchdog_unregister_governor()
gregkh/linux@69a6a4f60b2d wifi: ath11k: fix potential buffer underflow in ath11k_hal_rx_msdu_list_get()
gregkh/linux@c78424ca5086 wifi: ath11k: Flush the posted write after writing to PCIE_SOC_GLOBAL_RESET
gregkh/linux@d0833f2d44de wifi: ath12k: Flush the posted write after writing to PCIE_SOC_GLOBAL_RESET
gregkh/linux@b7d633c7c923 firewire: net: Fix fragmented datagram reassembly
gregkh/linux@69ac7ba3a3df wifi: ath6kl: fix OOB read from firmware num_msg in TX complete handler
gregkh/linux@1c690f7c4c5b wifi: ath6kl: fix OOB read from firmware IE lengths in connect event
gregkh/linux@f74e34e66379 wifi: carl9170: bound memcpy length in cmd callback to prevent OOB read
gregkh/linux@7ed0dce8613c wifi: carl9170: fix OOB read from off-by-two in TX status handler
gregkh/linux@5acfa18de66b wifi: carl9170: fix buffer overflow in rx_stream failover path
gregkh/linux@646c14273df8 btrfs: declare btrfs_ioctl_search_args_v2::buf as __u8
gregkh/linux@92bedc045555 btrfs: free mapping node on duplicate reloc root insert
gregkh/linux@3ddb0d3e3650 ASoC: tas2781: bound firmware description string parsing
gregkh/linux@3958f6dab9f6 ASoC: bt-sco: fix duplicate DAPM widget names for wideband DAI
gregkh/linux@cbd3a027f248 ASoC: cs35l56: Don't use devres to unregister component
gregkh/linux@34c26cc9ab74 ASoC: cs35l56: Fix potential probe() deadlock
gregkh/linux@42a82b509a6d ASoC: cs35l56: Use complete_all() to signal init_completion
gregkh/linux@dafd46a72093 wifi: iwlwifi: mvm: validate SAR GEO response payload size
gregkh/linux@0a070d5ad798 wifi: iwlwifi: mvm: fix read in wake packet notification handler
gregkh/linux@c035b1198906 usb: atm: ueagle-atm: reject descriptors that confuse probe and disconnect
gregkh/linux@e73827d99021 hwmon: (asus-ec-sensors) fix looping over banks while reading from EC
gregkh/linux@12111669ba08 hwmon: (asus-ec-sensors) fix EC read intervals
gregkh/linux@7e3abf8ace7f hwmon: (asus-ec-sensors) add missed handle for ENOMEM
gregkh/linux@5b439f39f33e smb: client: validate DFS referral PathConsumed
gregkh/linux@112525534ab5 hwmon: occ: validate poll response sensor blocks
gregkh/linux@8de58bfa26e0 Bluetooth: btusb: validate Realtek vendor event length
gregkh/linux@80ec024d53a0 net/packet: avoid fanout hook re-registration after unregister
gregkh/linux@2a4bad24ac52 bonding: fix devconf_all NULL dereference when IPv6 is disabled
gregkh/linux@1e2e2d980694 rds: drop incoming messages that cross network namespace boundaries
gregkh/linux@1f4ca61b7a93 dpaa2-switch: put MAC endpoint device on disconnect
gregkh/linux@915012e92331 dpaa2-eth: put MAC endpoint device on disconnect
gregkh/linux@ab7faf5a172e iommu/amd: Wait for completion instead of returning early in iommu_completion_wait()
gregkh/linux@329589417214 wifi: mac80211: tear down new links on vif update error path
gregkh/linux@6dbd428119cb nfp: Check resource mutex allocation
gregkh/linux@f4834132773f wan: wanxl: Only reset hardware after BAR mapping
gregkh/linux@a3f47d7c75dd wifi: mwifiex: bound uAP association event IEs to the event buffer
gregkh/linux@1e31d2394e0d iommu/amd: Bound the early ACPI HID map
gregkh/linux@3078d82e7fe9 iommu/intel: Fix out-of-bounds memset in dmar_latency_disable()
gregkh/linux@70f70a4c419d wifi: mac80211: recalculate TIM when a station enters power save
gregkh/linux@3794cfb80b55 pds_core: reject component parameter in legacy firmware update
gregkh/linux@a02c0ac672d9 amd-xgbe: fix MAC_AUTO_SW handling in CL37 AN
gregkh/linux@5a365f1e4234 sctp: fix auth_chunk_list capacity check in sctp_auth_ep_add_chunkid
gregkh/linux@f79c7afdad47 pds_core: yield the CPU while waiting for the adminq to drain
gregkh/linux@37924f5c0e95 pds_core: order completion reads after the ownership check
gregkh/linux@646b58b543f3 pds_core: fix auxiliary device add/del races
gregkh/linux@649c6d37a38f pds_core: check for workqueue allocation failure
gregkh/linux@b255d8cd6cc6 sctp: validate stream count in sctp_process_strreset_inreq()
gregkh/linux@def321ca6b32 tls: device: push pending open record on splice EOF
gregkh/linux@eca8949e4061 selftest: af_unix: Add Kconfig file.
gregkh/linux@963b4ee31b1b selftests: af_unix: add USER_NS config
gregkh/linux@54dfe30a562f selftests: openvswitch: add config file
gregkh/linux@b3c733eaae7f gtp: check skb_pull_data() return in gtp1u_send_echo_resp()
gregkh/linux@c0936c131a71 nexthop: initialize extack in nh_res_bucket_migrate()
gregkh/linux@f9c669d9f4ca tipc: fix infinite loop in __tipc_nl_compat_dumpit
gregkh/linux@23a2b98e754d wifi: mt76: mt7915: guard HE capability lookups
gregkh/linux@b09508dd7bc4 wifi: mt76: connac: fix possible NULL-pointer deref in mt76_connac_mcu_uni_bss_he_tlv()
gregkh/linux@4fd85fd23735 wifi: mt76: mt7996: check pointer returned by mt76_connac_get_he_phy_cap()
gregkh/linux@2b1882cf313a wifi: mt76: mt7996: fix possible NULL-pointer deref in mt7996_mcu_sta_bfer_eht()
gregkh/linux@137e4710da62 wifi: brcmfmac: fix 802.1X-SHA256 call trace warning
gregkh/linux@9005b221cb1f amt: re-read skb header pointers after every pull
gregkh/linux@ec2f2f62e438 amt: make the head writable before rewriting the L2 header
gregkh/linux@490011a38f43 net: bridge: vlan: fix vlan range dumps starting with pvid
gregkh/linux@f72c312af6c7 net: hsr: fix memory leak on slave unregistration by removing synced VLANs
gregkh/linux@4528678f70e0 net: dpaa: fix mode setting
gregkh/linux@ec2e157fc967 sctp: auth: verify auth requirement when auth_chunk is NULL
gregkh/linux@667b6e52048e vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets
gregkh/linux@92492743e957 iomap: correct the range of a partial dirty clear
gregkh/linux@f02334a9e378 tipc: fix u16 MTU truncation in media and bearer MTU validation
gregkh/linux@ba351ae1028d net: stmmac: fix l3l4 filter rejecting unsupported offload requests
gregkh/linux@b664b326e167 net: stmmac: reset residual action in L3L4 filters on delete
gregkh/linux@e99309df721e net: stmmac: enable the MAC on link up for all supported speeds
gregkh/linux@c34fbb0e85f0 octeontx2-vf: set TC flower flag on MCAM entry allocation
gregkh/linux@72e2ccfe3963 ipv4: icmp: fill flow parameters in icmp_route_lookup decoy lookup
gregkh/linux@c71962f30091 ppp: use IFF_NO_QUEUE in virtual interfaces
gregkh/linux@1d03e26ef1d7 ppp: convert to percpu netstats
gregkh/linux@97562e355e3d ppp: enable TX scatter-gather
gregkh/linux@5d3427016234 ppp: annotate data races in ppp_generic
gregkh/linux@9f55eab598de hinic: remove unused ethtool RSS user configuration buffers
gregkh/linux@4b95e1f0d6e6 net: qrtr: restrict socket creation to the initial network namespace
gregkh/linux@43c287ce77ea net/mlx5: E-Switch, fix zero num_dest in prio_tag egress vlan rule
gregkh/linux@031749202414 net/mlx5e: Report zero bandwidth for non-ETS traffic classes
gregkh/linux@f110b4526f57 net/mlx5e: Reject unsupported CB Shaper TSA in ETS validation
gregkh/linux@b05b6bd1abf4 net: ipv6: fix dif and sdif mismatch in raw6_icmp_error
gregkh/linux@2cec93b60e36 ice: fix LAG recipe to profile association
gregkh/linux@ee762f684eef bpf, sockmap: Fix cork use-after-free in tcp_bpf_sendmsg()
gregkh/linux@f14d66e4b502 drm/rockchip: cdn-dp: add missing check in cdn_dp_config_video()
gregkh/linux@c18d46d9830c drm/bridge: cdns-dsi: Replace deprecated UNIVERSAL_DEV_PM_OPS()
gregkh/linux@22d9f7fc1aaa drm/dp/mst: fix OOB reads in remote DPCD/I2C sideband reply parsers
gregkh/linux@53937a2787d2 drm/dp/mst: fix buffer overflows in sideband chunk accumulation
gregkh/linux@bdf0508b1e67 drm/dp/mst: fix OOB reads on 2-byte fields in sideband reply parsers
gregkh/linux@c3fae34d6cb0 drm/amdgpu/uvd: Fix forcing MSG, FB BOs into VCPU segment when it isn't at 0 (v2)
gregkh/linux@4b606f32b38a drm/amdgpu/uvd: Place VCPU BO only in VRAM for UVD 4.x and older
gregkh/linux@f0d81d85e7ff drm/amdgpu: Fix amdgpu_bo_move() when old_mem and new_mem are both GTT
gregkh/linux@3f190956404d drm/amdgpu: validate CP_GFX_SHADOW chunk size in CS pass1
gregkh/linux@2473ac314387 drm/nouveau: fix reversed error cleanup order in ucopy functions
gregkh/linux@4a27275d2759 drm/i915/gem: Add missing nospec on parallel submit slot
gregkh/linux@3ed109a72176 drm/nouveau/acr: fix missing nvkm_done() in error path of nvkm_acr_oneinit()
gregkh/linux@ec26f6cdcc0e drm/radeon: fix r100_copy_blit for large BOs
gregkh/linux@85eedff5f0c4 drm/amdkfd: Check bounds in allocate_event_notification_slot
gregkh/linux@790aeed9df5c drm/amd/display: Handle struct drm_plane_state.ignore_damage_clips
gregkh/linux@f9922828a4eb drm/amd/display: detect_link_and_local_sink: DP alt mode timeout path leaks prev_sink reference
gregkh/linux@9fc2a017c5d5 drm/virtio: bound EDID block reads to the response buffer
gregkh/linux@2eb06c88426b drm/amdgpu/sdma6.0: replace BUG_ON() with WARN_ON()
gregkh/linux@01dfea84df91 drm/amdgpu/sdma5.2: replace BUG_ON() with WARN_ON()
gregkh/linux@f6212bc1bbd9 drm/amdgpu/sdma5.0: replace BUG_ON() with WARN_ON()
gregkh/linux@32c1a2afa90d drm/i915: Return NULL on error in active_instance
gregkh/linux@f014702fbd48 drm/i915/gem: Do not leak siblings[] on proto context error
gregkh/linux@edd2edaca52a drm/i915/gem: Fix NULL deref in I915_CONTEXT_PARAM_SSEU
gregkh/linux@1615811cd365 drm/amdgpu: Fix VFCT bus number matching with soft filter
gregkh/linux@f02c9e1588d4 drm/amd/pm/ci: Don't disable MCLK DPM on Bonaire 0x6658 (R7 260X)
gregkh/linux@ba8bf1dcbb44 drm/amd/display: set new_stream to NULL after release
gregkh/linux@51eeef1949c1 drm/amdgpu: fix bo->pin leaking in amdgpu_bo_create_reserved
gregkh/linux@5ff94e127917 drm/vmwgfx: Validate vmw_surface_metadata::array_size
gregkh/linux@9f0ee411fc2d drm/vc4: Prevent shader BO mappings from becoming writable
gregkh/linux@877686a74ecd media: airspy: Return queued buffers on start_streaming() failure
gregkh/linux@f522a7f05f21 media: aspeed: fix missing of_reserved_mem_device_release() on probe failure
gregkh/linux@8e1c938f08e7 media: cec: seco: unregister adapter on IR probe failure
gregkh/linux@d7bb9e62c0f2 media: cedrus: clean up media device on probe failure
gregkh/linux@e6db514875ab media: cedrus: Fix missing cleanup in error path
gregkh/linux@2ee8327c85b3 media: cedrus: skip invalid H.264 reference list entries
gregkh/linux@a373f1a5137e media: cx231xx: fix devres lifetime
gregkh/linux@8fbdca4c99f6 media: cx23885: add ioremap return check and cleanup
gregkh/linux@d59af4652d99 media: marvell-cam: fix missing pci_disable_device() on remove
gregkh/linux@c6cd08a71a63 media: meson: vdec: Fix memory leak in error path of vdec_open
gregkh/linux@1d58229b330b media: msi2500: Return queued buffers on start_streaming() failure
gregkh/linux@549dd1afce2c media: nxp: imx8-isi: Add missing v4l2_subdev_cleanup() in crossbar and pipe
gregkh/linux@1eee561d764d media: nxp: imx8-isi: Clean up already-initialized pipes on probe failure
gregkh/linux@ff5f7c2686dc media: nxp: imx8-isi: Fix missing v4l2_subdev_cleanup() in pipe init error path
gregkh/linux@690cdda752f3 media: nxp: imx8-isi: Fix potential out-of-bounds issues
gregkh/linux@9ed0184435a1 media: nxp: imx8-isi: Fix scale factor calculation for hardware rounding
gregkh/linux@46715fecc38a media: pci: dm1105: Free allocated workqueue
gregkh/linux@a56e7641e09b media: pwc: Drain fill_buf on start_streaming() failure
gregkh/linux@f2f9fcacd819 media: pwc: Return queued buffers on start_streaming() failure
gregkh/linux@4ca9c9f12b1b media: radio-si476x: Unregister v4l2_device on probe failure
gregkh/linux@9acd5bbbe1df media: rtl2832: fix use-after-free in rtl2832_remove()
gregkh/linux@465dc8e71d2d media: rtl2832_sdr: Return queued buffers on start_streaming() failure
gregkh/linux@134c979dd721 media: saa7134: Fix a possible memory leak in saa7134_video_init1
gregkh/linux@37ff63c5d711 media: stm32: dcmi: unregister notifier on probe failure
gregkh/linux@4872161e6fbe media: sun4i-csi: Return queued buffers on start_streaming() failure
gregkh/linux@cb0502d29978 media: tegra-video: vi: fix invalid u32 return value in format lookup
gregkh/linux@4ecf0cc0cf59 media: ti: vpe: unwind v4l2 device registration on probe error
gregkh/linux@ef78c8c02a46 media: v4l2-ctrls-request: add NULL check in v4l2_ctrl_request_complete()
gregkh/linux@9a998cc1c348 media: v4l2-ctrls: validate HEVC active reference counts
gregkh/linux@697b81e9c4b5 media: vb2: use ssize_t for vb2_read/vb2_write
gregkh/linux@32623707968b media: vidtv: fix reference leak on failed device registration
gregkh/linux@d912d5b14356 media: vimc: fix reference leak on failed device registration
gregkh/linux@783f26368b7f media: vivid: add vivid_update_reduced_fps()
gregkh/linux@a9cd0e8fb0b2 media: vivid: check for vb2_is_busy() when toggling caps
gregkh/linux@450dbb302419 media: vpif_capture: fix OF node reference imbalance
gregkh/linux@fb40d03ed792 ALSA: seq: close a re-opened queue timer in the destructor
gregkh/linux@d4558c140782 wifi: ath6kl: fix OOB access from firmware ADDBA window size
gregkh/linux@eb42c3c8fd47 wifi: mwifiex: fix NULL dereference when the AP has HT-cap but no HT-oper
gregkh/linux@584c8954ad55 wifi: wilc1000: validate assoc response length before subtracting header
gregkh/linux@f2a72f47c5fb wifi: mt76: mt7615: drop TXRX_NOTIFY on non-mmio buses
gregkh/linux@ef2ee5f820c3 wifi: mt76: mt7921: drop TXRX_NOTIFY on non-mmio buses
gregkh/linux@b7d1d8cb1bdc wifi: brcmfmac: make release_scratchbuffers idempotent
gregkh/linux@b9d9a4cd2e59 staging: rtl8723bs: fix OOB reads in rtw_get_wps_ie()
gregkh/linux@e126aaf82380 staging: rtl8723bs: fix inverted HT40 secondary channel offset
gregkh/linux@e4fa2c5c261d Bluetooth: hci_sync: Protect UUID list traversal
gregkh/linux@2894bd8c68e9 Bluetooth: RFCOMM: Fix session UAF in set_termios
gregkh/linux@c62bb00caba6 exec: fix unsigned loop counter wrap in transfer_args_to_stack()
gregkh/linux@0f19d54e2524 binfmt_misc: set have_execfd only once the interpreter is opened
gregkh/linux@f8b7d5ba99ab platform/loongarch: laptop: Explicitly reset bl_powered state when suspend
gregkh/linux@1d6e91540015 LoongArch: Fix oops during single-step debugging
gregkh/linux@7344c84e3241 cdrom: fix stack out-of-bounds read in CDROMVOLCTRL
gregkh/linux@fac60fefe876 x86/boot/compressed: Disable jump tables
gregkh/linux@b061bb4dca49 comedi: comedi_parport: deal with premature interrupt
gregkh/linux@42710bb9946a serial: sc16is7xx: implement gpio get_direction() callback
gregkh/linux@1096397c31f6 serial: 8250_mid: Fix NULL function pointer dereference on DNV/ICX-D/SNR platforms
gregkh/linux@441559d4c595 mei: bus: access mei_device under device_lock on cleanup
gregkh/linux@ddcf2064d7ec intel_th: fix MSC output device reference leak
gregkh/linux@faaf95135184 tracing: Fix mmiotrace possible NULL dereferencing of hiter->dev
gregkh/linux@f9e6dfe341fb tracing: Fix resource leak on mmiotrace trace_pipe close
gregkh/linux@08259252e0d3 tracing/eprobe: Fix exact system name matching in eprobe_dyn_event_match()
gregkh/linux@707720ab00c8 tracing/probes: Avoid temporary buffer truncation in trace_probe_match_command_args()
gregkh/linux@da0a33d41409 tracing/probes: Fix potential underflow in LEN_OR_ZERO macro
gregkh/linux@bdf9de52c09e tracing/probes: Prevent out-of-bounds write in __trace_probe_log_err()
gregkh/linux@8000a5f4d1d1 arm64: syscall: Ensure saved x0 is kept in-sync with tracer updates
gregkh/linux@8e558bcaf107 Revert "arm64: syscall: Ensure saved x0 is kept in-sync with tracer updates"
gregkh/linux@3cb65da64af9 mptcp: decrement subflows counter on failed passive join
gregkh/linux@3422658308d1 mptcp: only set DATA_FIN when a mapping is present
gregkh/linux@fedeb4468987 sctp: don't free the ASCONF's own transport in DEL-IP processing
gregkh/linux@9081c7179672 ceph: fix pre-auth out-of-bounds read on snaptrace in ceph_handle_caps()
gregkh/linux@340e0386aa39 libceph: bound get_version reply decode to front len
gregkh/linux@05c90e059269 libceph: Fix multiplication overflow in decode_new_up_state_weight()
gregkh/linux@c46d82c47afc libceph: guard missing CRUSH type name lookup
gregkh/linux@9d37aec9ffe4 libceph: refresh auth->authorizer_buf{,_len} after authorizer update
gregkh/linux@0591a15815b4 libceph: Reject monmaps advertising zero monitors
gregkh/linux@b8a9fb6bf806 libceph: reject zero bucket types in crush_decode
gregkh/linux@fc1010e7e020 libceph: remove debugfs files before client teardown
gregkh/linux@e4563e07ef5c binfmt_elf_fdpic: only honour the first PT_INTERP
gregkh/linux@b98fad81f120 fs: preserve ACL_DONT_CACHE state in forget_cached_acl()
gregkh/linux@330249609b70 fscrypt: Add missing superblock check in find_or_insert_direct_key()
gregkh/linux@3d0dd138a06c ftrace: Add global mutex to serialize trace_parser access
gregkh/linux@ae045ad927c2 iommu/vt-d: Disallow SVA if page walk is not coherent
gregkh/linux@8d931a75a38b phonet: pep: fix use-after-free in pep_get_sb()
gregkh/linux@b3793d7dccb1 vxlan: require CAP_NET_ADMIN in the device netns for changelink
gregkh/linux@eb3836eab474 net: slip: serialize receive against buffer reallocation
gregkh/linux@2abdacc927c9 geneve: require CAP_NET_ADMIN in the device netns for changelink
gregkh/linux@8bb111f87ded net/af_iucv: fix NULL deref in afiucv_hs_callback_syn()
gregkh/linux@23658b350b41 net/iucv: fix use-after-free of a severed iucv_path
gregkh/linux@3f4fe26c20c3 net/x25: fix use-after-free in x25_kill_by_neigh()
gregkh/linux@e054dcd990d8 net: hip04: fix RX buffer leak on build_skb failure
gregkh/linux@c674751ea591 proc: Fix broken error paths for namespace links
gregkh/linux@14995c4250f0 rbd: Reset positive result codes to zero in object map update path
gregkh/linux@5c833074b549 ksmbd: defer destroy_previous_session() until after NTLM authentication
gregkh/linux@0f33178ec690 ice: use READ_ONCE() to access cached PHC time
gregkh/linux@896a9512d0d8 ila: reload IPv6 header after pskb_may_pull in checksum adjust
gregkh/linux@bd7110f0caa3 mac802154: hold an interface reference across the scan worker
gregkh/linux@5bbf0cd9b6a7 mac802154: llsec: reject frames shorter than the authentication tag
gregkh/linux@36dc6d6964a3 mctp: serial: handle zero-length frames to prevent rx buffer overflow
gregkh/linux@e6493a4d1ee1 pppoe: reload header pointer after dev_hard_header()
gregkh/linux@b07d87b31631 tipc: clear sock->sk on the failed-insert path in tipc_sk_create()
gregkh/linux@5bc8fc1d2ff8 vxlan: mdb: Fix source list corruption on a failed replace
gregkh/linux@ff4fc24da753 drm/amd/pm: make pp_features read-only when scpm is enabled
gregkh/linux@793cdf17ddf9 drm/amdgpu/gfx10: replace BUG_ON() with WARN_ON()
gregkh/linux@96b6d68f2b5a drm/amdgpu/gfx11: replace BUG_ON() with WARN_ON()
gregkh/linux@ab05af6c345b drm/amdgpu/gfx8: drop unecessary BUG_ON()
gregkh/linux@c59b57c2e0c8 drm/amdgpu/gfx9.4.3: replace BUG_ON() with WARN_ON()
gregkh/linux@6c8b9c1f03c7 drm/amdgpu/gfx9: replace BUG_ON() with WARN_ON()
gregkh/linux@256d6f4803a9 drm/amdgpu/sdma4.4.2: replace BUG_ON() with WARN_ON()
gregkh/linux@a07430abd556 drm/amdgpu/vce: fix integer overflow in image size
gregkh/linux@bbbe6a2a8d8d drm/amdgpu/vcn4: avoid rereading IB param length
gregkh/linux@b1d05cc61dfa drm/dp_mst: Handle torn-down topology gracefully in drm_dp_mst_topology_queue_probe()
gregkh/linux@52f9a5882964 drm/amdgpu: fix division by zero with invalid uvd dimensions
gregkh/linux@bdfc7f1e0900 drm/amdgpu: invoke pm_genpd_remove() before freeing genpd
gregkh/linux@67bc3647e418 drm/amdgpu: fix aperture mapping leak
gregkh/linux@ef40d9411469 i40e: remove read access to debugfs files
gregkh/linux@160d3f0d7a55 ipv6: ndisc: fix NULL deref in accept_untracked_na()
gregkh/linux@8b386b6a24f6 net: qrtr: ns: Raise node count limit to 512
gregkh/linux@e31fada51437 ksmbd: validate num_subauth when copying ACE in set_ntacl_dacl
gregkh/linux@f4fcd0c1a243 ksmbd: restore DACL size on check_add_overflow() to avoid malformed ACL
gregkh/linux@6d9d7aa4a2c9 ksmbd: bound DACL dedup walk to copied ACEs
gregkh/linux@b7cb5bf08554 ksmbd: validate ACE size against SID sub-authorities
gregkh/linux@a16eaaf7c0b0 openvswitch: fix GSO userspace truncation underflow
gregkh/linux@4462ac3d90e8 fscrypt: Avoid dynamic allocation in fscrypt_get_devices()
gregkh/linux@67ce8034dc02 exfat: validate cluster allocation bits of the allocation bitmap
gregkh/linux@cafa53d3272c drm/amd/display: Fix dcn32 DTB DTO update breaking live pixel rate sources
gregkh/linux@80f7dac8c9f9 io_uring/rw: fix missing ERESTARTSYS conversion in read paths
gregkh/linux@2efa9f57d089 net: pcs: xpcs: fix SGMII state reading
gregkh/linux@d65e397a1fd6 bpf: drop bpf_lsm_getselfattr from hook list
gregkh/linux@5337eebdf8c5 bpf: Reject BPF_MAP_TYPE_INODE_STORAGE creation if BPF LSM is uninitialized
gregkh/linux@9ceebbd6f9eb iommu/amd: Don't split flush for amd_iommu_domain_flush_all()
gregkh/linux@583fa6925df3 udmabuf: Do not create malformed scatterlists
gregkh/linux@0db56e7eae93 dma-buf/udmabuf: skip redundant cpu sync to fix cacheline EEXIST warning
gregkh/linux@16381bda90b2 fpga: dfl-afu: validate DMA mapping length in afu_dma_map_region()
gregkh/linux@6709fc381d53 i2c: davinci: Unregister cpufreq notifier on probe failure
gregkh/linux@3ff7d3339841 VFS/audit: introduce kern_path_parent() for audit
gregkh/linux@26f32cae6496 audit: widen ino fields to u64
gregkh/linux@df550e88009a audit: use 'unsigned int' instead of 'unsigned'
gregkh/linux@36eb77f14b4e audit: fix recursive locking deadlock in audit_dupe_exe()
gregkh/linux@2ef69871b313 i2c: i801: fix hardware state machine corruption in error path
gregkh/linux@2874c1ae0640 ALSA: hda: conexant: Remove mic bias threshold override
gregkh/linux@a8367b6f8423 ALSA: hda: Fix cached processing coefficient verbs
gregkh/linux@10a9d4fde547 serial: max310x: replace bare use of 'unsigned' with 'unsigned int' (checkpatch)
gregkh/linux@c071d94d3fb9 serial: max310x: implement gpio_chip::get_direction()
gregkh/linux@815a1eb356f2 afs: Annotate struct afs_addr_list with __counted_by
gregkh/linux@b9f12329ef22 afs: Turn the afs_addr_list address array into an array of structs
gregkh/linux@4a7e71d5bf93 rxrpc: Pull out certain app callback funcs into an ops table
gregkh/linux@0337cdba0c47 rxrpc: serialize kernel accept preallocation with socket teardown
gregkh/linux@43fbdd21723f fbcon: Rename struct fbcon_ops to struct fbcon_par
gregkh/linux@03a0e49a2e38 fbcon: Use correct type for vc_resize() return value
gregkh/linux@12876864f9de tipc: restrict socket queue dumps in enqueue tracepoints
gregkh/linux@95051b9f962a rxrpc: Don't need barrier for ->tx_bottom and ->acks_hard_ack
gregkh/linux@77433b730970 rxrpc: Use irq-disabling spinlocks between app and I/O thread
gregkh/linux@dc31e0a74e34 rxrpc: Fix notification vs call-release vs recvmsg
gregkh/linux@c656e6a31232 rxrpc: Fix socket notification race
gregkh/linux@6b8d37b1998f vduse: Use fixed 4KB bounce pages for non-4KB page size
gregkh/linux@0a0f90adebc0 vduse: remove unused vaddr parameter of vduse_domain_free_coherent
gregkh/linux@680a38322b40 vduse: take out allocations from vduse_dev_alloc_coherent
gregkh/linux@fde25641cbdd VDUSE: avoid leaking information to userspace
gregkh/linux@d205563ee9e1 octeontx2: Annotate mmio regions as __iomem
gregkh/linux@e60543f29ffb octeontx2-pf: clear stale mailbox IRQ state before request_irq()
gregkh/linux@e2007df69e60 octeontx2-vf: clear stale mailbox IRQ state before request_irq()
gregkh/linux@d2ac7ab19381 fbdev/efifb: Replace references to global screen_info by local pointer
gregkh/linux@fafb2e08741b fbdev: efifb: fix memory leak in efifb_probe()
gregkh/linux@81051a495a9a ASoC: mediatek: mt8195: Remove afe-dai component and rework codec link
gregkh/linux@e63067d8f4bd ASoC: mediatek: mt8192-afe-pcm: Convert to devm_pm_runtime_enable()
gregkh/linux@21fc21eb477d ASoC: mediatek: mt8192-afe-pcm: Simplify with dev_err_probe()
gregkh/linux@074371b2d5b0 ASoC: mediatek: Use common mtk_afe_pcm_platform with common probe cb
gregkh/linux@5f2ae0405ff5 ASoC: mediatek: mt8192-afe-pcm: Simplify probe() with local dev variable
gregkh/linux@6e2ee6eacc3e ASoC: mediatek: mt8192: Check runtime resume during probe
gregkh/linux@233f357bf424 ASoC: mediatek: mt8183: Check runtime resume during probe
gregkh/linux@385e2a9360cc netfilter: nft_set_pipapo: use GFP_KERNEL for insertions
gregkh/linux@dde6b54848a5 netfilter: nft_set_pipapo: move prove_locking helper around
gregkh/linux@7583b0d84ca2 netfilter: nft_set_pipapo: make pipapo_clone helper return NULL
gregkh/linux@8e264996d95f netfilter: nft_set_pipapo: prepare walk function for on-demand clone
gregkh/linux@840daa6bc4d1 netfilter: nft_set_pipapo: merge deactivate helper into caller
gregkh/linux@fad1685df350 netfilter: nft_set_pipapo: prepare pipapo_get helper for on-demand clone
gregkh/linux@744dc9a47a84 netfilter: nft_set_pipapo: move cloning of match info to insert/removal path
gregkh/linux@047e813324ea netfilter: nft_set_pipapo: don't leak bad clone into future transaction
gregkh/linux@d787e4c3acdf lsm: infrastructure management of the sock security
gregkh/linux@5d4d93f9bfbc selinux: avoid sk_socket dereference in selinux_sctp_bind_connect()
gregkh/linux@0d713c11de5d netfilter: nf_conntrack_sip: remove net variable shadowing
gregkh/linux@e64a48c50a1f netfilter: nf_conntrack_sip: validate skb_dst() before accessing it
gregkh/linux@363e37bebbbd netfilter: nf_tables: Remove unused nft_reduce_is_readonly()
gregkh/linux@7cd3fee7b361 netfilter: nf_tables: remove register tracking infrastructure
gregkh/linux@4fee43759b48 netfilter: nft_fib: reject fib expression on the netdev egress hook
gregkh/linux@43ffd230b9cc NFSD: pass nfsd_file to nfsd_iter_read()
gregkh/linux@844520b33c80 sunrpc: allocate a separate bvec array for socket sends
gregkh/linux@18387968cff2 SUNRPC: Add helpers to convert xdr_buf byte ranges to scatterlists
gregkh/linux@fc2214723b45 SUNRPC: Return an error from xdr_buf_to_bvec() on overflow
gregkh/linux@8d9481369609 mm/mm_init: fix pageblock migratetype for ZONE_DEVICE compound pages
gregkh/linux@9db680306555 mtd: rawnand: Add a helper for calculating a page index
gregkh/linux@f83ba55179c2 mtd: rawnand: Ensure all continuous terms are always in sync
gregkh/linux@d26f0b293b43 mtd: rawnand: Pause continuous reads at block boundaries
gregkh/linux@ee14a2d7f07e taskstats: fill_stats_for_tgid: use for_each_thread()
gregkh/linux@f12885fe1bdb taskstats: retain dead thread stats in TGID queries
gregkh/linux@5cfa46154e0c dma: dw-edma: Fix build warning in dw_edma_pcie_probe()
gregkh/linux@ac710b2f4f2f dmaengine: dw-edma: Fix confusing cleanup.h syntax
gregkh/linux@2733b5dcb5a4 dmaengine: dw-edma-pcie: Reject devices without driver data
gregkh/linux@14b586152bb4 platform/x86: dell-smbios: Move request functions for reuse
gregkh/linux@e4908b3bed75 platform/x86: dell-laptop: fix missing cleanups in init error path
gregkh/linux@9d9c1f10f564 i2c: imx: separate atomic, dma and non-dma use case
gregkh/linux@016ef0f6ca4b i2c: imx: fix locked bus on SMBus block-read of 0 (atomic)
gregkh/linux@98e9a7bfd3a4 nfs: remove dead code for the old swap over NFS implementation
gregkh/linux@a442c258320b NFS: Charge unstable writes by request size, not folio size
gregkh/linux@45ead2e598cc ovl: use linked upper dentry in copy-up tmpfile
gregkh/linux@949f14390fe4 dm-verity: avoid double increment of &use_bh_wq_enabled
gregkh/linux@ac99781115d3 dm-verity: make error counter atomic
gregkh/linux@5e7cd480fb69 firmware_loader: introduce __free() cleanup hanler
gregkh/linux@a5dd47ea3904 Input: ims-pcu - fix firmware leak in async update
gregkh/linux@e0d8c1d9232f workqueue: Factor out init_cpu_worker_pool()
gregkh/linux@017ea3f38a2d workqueue: Add system_percpu_wq and system_dfl_wq
gregkh/linux@25acb6711da6 tracing/user_events: Fix use-after-free in user_event_mm_dup()
gregkh/linux@4714e95f5d61 wifi: libertas_tf: fix use-after-free in lbtf_free_adapter()
gregkh/linux@3cfaac77b3c3 locking/rt: Fix the incorrect RCU protection in rt_spin_unlock()
gregkh/linux@2e276b14b6d3 net: mana: Validate the packet length reported by the NIC
gregkh/linux@f53dd26462b8 pinctrl: remove pinctrl_gpio_direction_output()
gregkh/linux@e57a4845b0da gpio: tegra: do not call pinctrl for GPIO direction
gregkh/linux@2636d061bc23 net: ip6_tunnel: require CAP_NET_ADMIN in the device netns for changelink
gregkh/linux@207d3ebf36f6 gpio: mt7621: avoid corruption of shared interrupt trigger state
gregkh/linux@e9c5b0320850 octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF
gregkh/linux@3a4627d4cd97 bootconfig: do not put quotes on cmdline items unless necessary
gregkh/linux@3fb2d026fb0d bootconfig: move xbc_snprint_cmdline() to lib/bootconfig.c
gregkh/linux@07e82e2825e3 bootconfig: fix NULL-pointer arithmetic in xbc_snprint_cmdline()
gregkh/linux@9409e18ffe73 ipmi: fix refcount leak in i_ipmi_request()
gregkh/linux@148d7ec0a3a9 octeontx2-pf: fix SQB pointer leak on init failure
gregkh/linux@4cb4b4dd8853 ata: libata-core: Reject an invalid concurrent positioning ranges count
gregkh/linux@6124bd785073 net: macb: drop in-flight Tx SKBs on close
gregkh/linux@96ac6c08f2c1 net: ipa: fix SMEM state handle leaks in SMP2P init
gregkh/linux@916817689433 fs/resctrl: Fix double-add of pseudo-locked region's RMID to free list
gregkh/linux@40d790e0e7d0 KVM: Introduce vcpu->wants_to_run
gregkh/linux@ce409086174b KVM: x86: Only reset TSC Deadline Timer in apic_timer_expired on KVM_RUN
gregkh/linux@1d5ad6c5a210 coredump: fix pidfs file refcount leak in umh_coredump_setup
gregkh/linux@b585facbafbb mm/damon/core: validate ranges in damon_set_regions()
gregkh/linux@4b4a3e7ef7bb mm/damon/core: disallow overlapping input ranges for damon_set_regions()
gregkh/linux@62f61129621c ASoC: mediatek: mt8195: Add platform entry for ETDM1_OUT_BE dai link
gregkh/linux@45bd023c7a4e ASoC: mediatek: mt8195: Set ETDM1/2 IN/OUT to COMP_DUMMY()
gregkh/linux@410f8e562e37 udmabuf: Ensure to perform cache synchronisation in begin_cpu_udmabuf()
gregkh/linux@299e2a6eb501 rxrpc: Disable IRQ, not BH, to take the lock for ->attend_link
gregkh/linux@60283726f284 KVM: SVM: Bump asid_generation on CPU online to avoid ASID collision after hotplug
gregkh/linux@aa0e49877a2e Linux 6.6.148
gregkh/linux@608c8f5dccaa x86/bugs: Make Safe-RET robust against interrupt injection
gregkh/linux@80dfb0405055 Linux 6.6.149
gregkh/linux@4c34a21ff85c Revert "x86/bugs: Make Safe-RET robust against interrupt injection"
gregkh/linux@6703dba1d14c x86/bugs: Make Safe-RET robust against interrupt injection
gregkh/linux@6436c12a2ced Linux 6.6.150
gregkh/linux@da1f7306c8f2 netfilter: nf_conntrack_expect: restore helper propagation via expectation
gregkh/linux@06a1273ce721 netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge()
gregkh/linux@95651461cf77 net: mpls: initialize rtm_tos in mpls_getroute()
gregkh/linux@299d5728a731 gve: fix Rx queue stall on alloc failure
gregkh/linux@b802ff2a0467 HID: logitech-dj: Standardise hid_report_enum variable nomenclature
gregkh/linux@968e84f5c0dc HID: logitech-dj: Prevent REPORT_ID_DJ_SHORT related user initiated OOB write
gregkh/linux@1c8c6ac4d9f7 HID: logitech-dj: fix wrong detection of bad DJ_SHORT output report
gregkh/linux@35283a7b3468 soc: qcom: ice: Allow explicit votes on 'iface' clock for ICE
gregkh/linux@91b40862a020 thunderbolt: Prevent XDomain delayed work use-after-free on disconnect
gregkh/linux@9ae18a4b22ac pinctrl: qcom: sc8280xp: Add missing wakeup entries for GPIO143/151
gregkh/linux@27806fe7b970 dmaengine: sun6i-dma: Fix reclaim descriptors while terminating DMA
gregkh/linux@778ccbded2c8 dmaengine: idxd: fix fdev setup failure cleanup in idxd_cdev_open()
gregkh/linux@ee53aae5d7d3 ata: sata_mv: accept 1 or 2 resources in platform probe
gregkh/linux@e43eb5d7cedf ata: libahci_platform: support non-consecutive port numbers
gregkh/linux@55f3fc9c544c ahci: Introduce ahci_ignore_port() helper
gregkh/linux@c1fadd611cc5 ata: ahci_ceva: fix error paths in ceva_ahci_platform_enable_resources()
gregkh/linux@b6f1706afb59 ASoC: max98095: fix missing IS_ERR() before PTR_ERR() on mclk lookup
gregkh/linux@c031ef8093f4 ASoC: max98090: fix missing IS_ERR() before PTR_ERR() on mclk lookup
gregkh/linux@18577e77c2c8 btrfs: zoned: fix deadlock between metadata writeback and transaction commit
gregkh/linux@badff0ff5b20 phy-zynqmp: Postpone getting clock rate until actually needed
gregkh/linux@599516163bb3 phy: zynqmp: fix clock error handling in xpsgtr_phy_init()
gregkh/linux@8bba4129dc5c phy: zynqmp: fix runtime PM leak on probe allocation failure
gregkh/linux@63eea41759fd netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp()
gregkh/linux@c28d2ae71b70 drm/mediatek: Check CRTC state before freeing
gregkh/linux@d1933e03e8c7 keys: fix out-of-bounds read in keyring_get_key_chunk()
gregkh/linux@bd0f976ef89d keys: make keyring key-chunk byte order agree with keyring_diff_objects()
gregkh/linux@55fb23f8bd74 assoc_array: trim the final shortcut word using the current chunk end
gregkh/linux@24683fea1f06 netfilter: xt_hashlimit: validate hashtable supports XT_HASHLIMIT_RATE_MATCH
gregkh/linux@d1c4acc119ea sched: Add task_struct->faults_disabled_mapping
gregkh/linux@b3869d9b54e7 ipvs: fix the checksum validations
gregkh/linux@cdc55d6ca3a8 ipvs: fix places with wrong packet offsets
gregkh/linux@35c53f9b7839 ipvs: do not mangle ICMP replies for non-first fragments
gregkh/linux@b19b5d2e042c netfilter: nft_payload: fix mask build for partial field offload
gregkh/linux@8e48d7ab1e01 rds: Fix inet6_addr_lst NULL dereference when IPv6 is disabled
gregkh/linux@76dd48886eee rds: tcp: hold the RCU lock across ipv6_chk_addr() in rds_tcp_laddr_check()
gregkh/linux@870b4535f958 pinctrl-amd: Don't clear S4 wake bits at probe
gregkh/linux@7567f06abdef scsi: libiscsi: Fix stale-data leak into the SCSI sense buffer
gregkh/linux@c97b5265cc47 scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer
gregkh/linux@e50a6523a603 scsi: libsas: Fix HA resume deadlock and hisi_sas disk-wake race
gregkh/linux@593636dcdf20 smb: client: fix buffer leaks in SMB1 read and write
gregkh/linux@6b0fbc3fb7b7 spi: spi-cadence: supports transmission with bits_per_word of 16 and 32
gregkh/linux@a7b05d5eefc3 spi: spi-cadence: Move TX FIFO full busy-wait into FIFO
gregkh/linux@9a87dfaa05c3 hwmon: (nct6775-core) Fix number of temperature registers for NCT6116
gregkh/linux@4eed33c7db5c hwmon: (lm90) Only report alarms if driver is ready
gregkh/linux@70ad543ce81f hwmon: (nzxt-smart2) DMA-align output buffer
gregkh/linux@f5ecaa7ea768 net: do not send ICMP/NDISC Redirects when peer allocation fails
gregkh/linux@25b528816f5d hwmon: (nct6775-core) Prevent access to unsupported weight registers
gregkh/linux@b60702104b45 net: bridge: mrp: fix Option TLV length in MRP_Test frames
gregkh/linux@cf2dcde22845 forcedeth: fix UAF of txrx_stats in nv_remove
gregkh/linux@f114a8aa7905 hwmon: (adt7470) Fix fans stuck in manual mode on I2C errors
gregkh/linux@0c89e5ae2655 hwmon: (adt7470) Fix cache updated before hardware write on I2C error
gregkh/linux@1a42bd72a662 hwmon: (adt7470) Fix busy-loop and I2C flooding in update thread
gregkh/linux@40a3117650f9 hwmon: (adt7470) Fix temperature alarm logic in hwmon_temp_read()
gregkh/linux@97fac8440c9a hwmon: (adt7470) Fix swapped PWM3 and PWM4 auto mode masks
gregkh/linux@c11d1bc785f2 hwmon: (adt7470) Use cached PWM frequency value
gregkh/linux@d32817504517 hwmon: (adt7470) Fix divide-by-zero TOCTOU crash in fan speed read
gregkh/linux@ab8549d5b8f0 hwmon: (adt7470) Fix PWM auto temp state array and bounds check
gregkh/linux@3382cf66522d powerpc/boot: Fix simpleboot CPU node lookup check
gregkh/linux@1792fcda0178 powerpc/boot: Fix treeboot-currituck CPU node lookup check
gregkh/linux@961d80c6389d powerpc/boot: Fix treeboot-akebono CPU node lookup check
gregkh/linux@ff558072d199 wifi: mac80211: validate individual TWT params before driver setup
gregkh/linux@68c5b240dba9 hwmon: (pmbus) Fix return value from pmbus_update_byte_data()
gregkh/linux@cc1d39946d62 Bluetooth: ISO: clear iso_data always when detaching conn from hcon
gregkh/linux@fd4c1e301bde Bluetooth: L2CAP: fix UAF in l2cap_le_connect_rsp
gregkh/linux@38a9a30614cc Bluetooth: ISO: fix timeout vs sync_timeout typo in check_bcast_qos
gregkh/linux@c31be902ccbb Bluetooth: btintel: Validate length before parsing diagnostics TLV
gregkh/linux@759303b0012c Bluetooth: hci_sync: make hci_cmd_sync_run_once return -EEXIST if exists
gregkh/linux@64d1645f26aa Bluetooth: hci_conn: hold conn reference in abort_conn_sync()
gregkh/linux@716d47531e74 Bluetooth: hci_sync: fix hci_conn_del() use in hci_le_create_conn_sync
gregkh/linux@ba99aed7bad8 net: phylink: put link_gpio if phylink_create fails
gregkh/linux@3c60a8b4037d scsi: target: iblock: Fix wrong PR ops NULL check for PREEMPT/RELEASE
gregkh/linux@107d3d6c1791 scsi: ufs: core: Cancel RTC work in active-active suspend
gregkh/linux@1b42d05f1c59 scsi: zfcp: Fix memory leak during adapter release by destroying gid_pn_req
gregkh/linux@8f7812821ed7 scsi: target: Clear cmd_cnt when initial counter enrollment fails
gregkh/linux@3563e2486dcd net: sxgbe: free TX rings on RX allocation failure
gregkh/linux@128fe7596adc net: sxgbe: check descriptor ring allocation failures
gregkh/linux@2ba4c5cc3031 can: isotp: check register_netdevice_notifier() error in module init
gregkh/linux@481737704eee tracing/mmiotrace: Reset dropped_count in mmio_reset_data()
gregkh/linux@aecd00c33b50 accel/qaic: use sizeof(trans_hdr) for transaction length check
gregkh/linux@272eafaf1625 net: dsa: mt7530: error out on failed reads in MT7531 PHY polling
gregkh/linux@228757a2988c octeontx2-pf: Set correct sequence for carrier off and tx queue stop
gregkh/linux@e382a4efeeae qede: sync udp_tunnel ports outside qede_lock in the recovery path
gregkh/linux@fb27b7b7b7bb ksmbd: return success for deferred final close
gregkh/linux@67aaec2a1fdc ksmbd: fix use-after-free in __close_file_table_ids()
gregkh/linux@27210d433a8c ipv6: fib6: fix NULL deref in fib6_walk_continue() on multi-batch dump
gregkh/linux@c39643ad99fe rhashtable: clear stale iter->p on table restart
gregkh/linux@9d5de82acf28 pinctrl: microchip-sgpio: add missing select REGMAP_MMIO
gregkh/linux@929f6396baad pinctrl: devicetree: don't free uninitialized dev_name on error path
gregkh/linux@e8b3d09aa888 erofs: cap LZMA stream pool size
gregkh/linux@a583806ae969 pinctrl: bm1880: add missing select GENERIC_PINCONF
gregkh/linux@01504da375f5 mm/percpu-km: fix bitmap overflow and accounting in pcpu_create_chunk()
gregkh/linux@62e1c2741a4d mm/hugetlb: fix list corruption in allocate_file_region_entries()
gregkh/linux@421e447b53c7 mm/vmstat: fold stranded per-cpu node stats when a node comes online
gregkh/linux@451ee0f9ca1e tracing/probes: Reject $arg0 in meta argument expansion
gregkh/linux@6664a5aea453 KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active
gregkh/linux@78d9648e7e96 KVM: s390: pci: Reject adapter interrupt forwarding if already enabled
gregkh/linux@0a95abe96440 KVM: s390: pci: Fix NULL dereference on AIBV allocation failure
gregkh/linux@f00ef8efd414 KVM: s390: pci: Validate AIBV and AISB before pinning guest pages
gregkh/linux@93942b5772e0 sctp: validate Adaptation Indication parameter length
gregkh/linux@17099fad5ef9 audit: fix potential integer overflow in audit_log_n_string()
gregkh/linux@45bf3df5b32e audit: fix potential use-after-free in audit_del_rule()
gregkh/linux@c348057dc706 Bluetooth: btmtk: Fix short read errors in btmtk_usb_uhw_reg_read()
gregkh/linux@a9e7c2609b0c Bluetooth: mgmt: fix pending command UAF in EIR updates
gregkh/linux@86ed4dd6548c Bluetooth: mgmt: fix UAF in pair command cancellation
gregkh/linux@46ca5ab39737 Bluetooth: HIDP: reject frames without a transaction header
gregkh/linux@b7ad105d46ac Bluetooth: HIDP: validate numbered report payloads
gregkh/linux@487e437b8f09 bpf: lwt: Fix dst reference leak on reroute failure
gregkh/linux@49bc7741cd27 ALSA: 6fire: Fix UAF at error handling during probe
gregkh/linux@20aad5c44384 ALSA: lx6464es: fix period byte count for 16-bit streams
gregkh/linux@e8b784a3f4fb ALSA: pcm: wake linked drain waiters on unlink
gregkh/linux@e84d2e53a05c ALSA: ump: fix double free of out_cvts on rawmidi error
gregkh/linux@f56d1aac7239 ASoC: tas2562: fix DVC coefficient write order
gregkh/linux@2f840c7980bc ASoC: tas2562: fix broken entries in the volume lookup table
gregkh/linux@3d3339f71807 ata: libata-eh: Increase STANDBY IMMEDIATE timeout
gregkh/linux@49eccef6d6e1 ALSA: usb-audio: fix use-after-free in ump_to_endpoint()
gregkh/linux@29a4c2994363 ALSA: usb-audio: fix OOB write in snd_usbmidi_akai_output()
gregkh/linux@3852974608f5 ALSA: usb-audio: Fix DMA buffer out-of-bounds write when fill_max is set
gregkh/linux@56ac3e7c90f6 ALSA: usb-audio: Clamp frame size in implicit-feedback mode
gregkh/linux@dc390138a0a3 dmaengine: qcom: bam_dma: Fix command element mask field for BAM v1.6.0+
gregkh/linux@5c477b7a205f e1000: fix memory leak in e1000_probe()
gregkh/linux@31089f4eab42 igbvf: Fix leak in TX DMA error cleanup
gregkh/linux@44af98cc7d5e ipvs: do not propagate one-packet flag to synced conns
gregkh/linux@5a42f162b857 net/smc: fix socket use-after-free during link group termination
gregkh/linux@661ff9c0cfbe netfilter: ipset: do not update comments from kernel-side hash adds
gregkh/linux@d7940bb6a8e7 tipc: avoid use-after-free in poll trace queue dumps
gregkh/linux@25e5a3fe4f15 wifi: mwifiex: use the subframe length when parsing A-MSDU TDLS frames
gregkh/linux@1819f82dee76 binfmt_misc: reject a flag character as the field delimiter
gregkh/linux@f97804832657 mm/page_reporting: use system_freezable_wq to fix UAF during suspend
gregkh/linux@159ad90cb929 net: bridge: stop fast-leave after deleting a port group
gregkh/linux@6d98c70fe0ba net: ipv6: clear suppressed fib6 rule result
gregkh/linux@f020d756b313 powerpc/ps3: Fix map failure path in dma_ioc0_map_pages()
gregkh/linux@4b9601595e8b um: vector: fix use-after-free in vector_mmsg_rx()
gregkh/linux@2355c8c26d2a vxlan: re-fetch eth header after route_shortcircuit()
gregkh/linux@cbb154b2d71e vxlan: unclone skb head before modifying eth header in route_shortcircuit()
gregkh/linux@d08e8ac13f2e vxlan: use neigh_ha_snapshot() in route_shortcircuit()
gregkh/linux@42887be7c4cf vxlan: use pskb_network_may_pull() in route_shortcircuit()
gregkh/linux@ee41b00858ca ublk: reset kernel-owned dev_info fields in ublk_ctrl_add_dev()
gregkh/linux@d61ee2a27dfd tracing: Check return value of register_event() in trace_module_add_events()
gregkh/linux@47cef9b4445d tracing/filters: Fix false positive match in regex_match_full()
gregkh/linux@fc673c4eb23d spi: qcom-qspi: Correct max DMA length to avoid 64K boundary failure
gregkh/linux@7ecb40609362 selftests/mm: fix potential wild pointer access of getline due to missing init
gregkh/linux@03bfd969f2f7 selftests/clone3: fix wild pointer access of getline due to missing init
gregkh/linux@49e5b25a0b74 scsi: scsi_debug: Fix REPORT ZONES alloc_len underflow OOB write
gregkh/linux@61baa5020b0a sctp: reject stale cookies with mismatched verification tags
gregkh/linux@546221b86cee sctp: prevent peer transport count overflow
gregkh/linux@c985e96fa3e3 hwmon: (npcm750-pwm-fan): stop fan timer on device detach
gregkh/linux@d20f04fb30bd hwmon: (pmbus/core) notify on the hwmon device, not the i2c client
gregkh/linux@b7c2c5c88687 i2c: amd-mp2: Unregister callback on adapter add failure
gregkh/linux@83467180e057 gpio: pca953x: fix cache_only and IRQ state on restore_context() failure
gregkh/linux@a57082657fa5 cpufreq: powernow-k8: Fix possible memory leak in powernowk8_cpu_init()
gregkh/linux@a92df2b3d7a3 power: supply: bq25890: fix the -10 C NTC lookup entry
gregkh/linux@4e4816882581 s390/qeth: Check CAP_NET_ADMIN for private ioctls
gregkh/linux@e156c70c505c s390/dasd: Fix potential NULL pointer dereference
gregkh/linux@aca18289c86f s390/dasd: Fix undersized format-check buffer
gregkh/linux@b505dcc8307d s390/zcrypt: Fix wrong domain value verification with EP11 CPRBs
gregkh/linux@406b317ea2b5 s390/zcrypt: Validate length for CCA AES cipher key requests
gregkh/linux@dd25bd9b0f36 s390/zcrypt: Validate length for CCA ECC private key requests
gregkh/linux@9a83affa2fa1 phy: zynqmp: fix L0_TM_DISABLE_SCRAMBLE_ENCODER mask
gregkh/linux@bf3985016cc0 phy: zynqmp: use read-modify-write for SERDES scrambler bypass
gregkh/linux@1f1a8ca58641 phy: zynqmp: keep SERDES scrambler and 8b/10b enabled for USB
gregkh/linux@0310d1fa7f9d net: openvswitch: fix potential UAF on meter attach failure
gregkh/linux@27b3eb4fc407 net: openvswitch: fix skb leak on flow key update failure during recirculation
gregkh/linux@736e972f3f8a net: openvswitch: fix skb leak on flow key update failure during ct
gregkh/linux@5dd5485189c0 ice: wait for reset completion in ice_resume()
gregkh/linux@2b760e8f0ead ice: fix memory leak in ice_lbtest_prepare_rings()
gregkh/linux@14429dc1c756 i2c: jz4780: Cache host clock rate at probe to prevent CCF prepare_lock deadlock
gregkh/linux@b9f6f4883b9a i2c: imx: Fix slave registration race and error handling
gregkh/linux@a8a1f9ac3d76 i2c: imx: Cancel hrtimer before clearing slave pointer
gregkh/linux@29bc050802de can: c_can: c_can_chip_config(): keep controller in init mode until bittiming is configured
gregkh/linux@ce8125566b1d can: ems_usb: validate CPC message lengths
gregkh/linux@0ef136ba0521 can: etas_es58x: es58x_read_bulk_callback(): fix RX buffer leak on URB resubmit failure
gregkh/linux@5e2fd705c92e can: gs_usb: gs_usb_receive_bulk_callback(): resubmit URB on skb allocation failure
gregkh/linux@194d67e92197 can: j1939: transport: j1939_session_fresh_new(): initialize receive buffer
gregkh/linux@30b0b7691883 can: j1939: use netdevice_tracker for j1939{priv,session,ecu} tracking
gregkh/linux@b954b108891e can: kvaser_usb: kvaser_usb_hydra_get_busparams(): fix memory leak in kvaser_usb_hydra_get_busparams()
gregkh/linux@695aea154bb2 can: kvaser_usb_leaf: kvaser_usb_leaf_wait_cmd(): validate received command extents
gregkh/linux@ae588e5b9cc2 can: softing: fw_parse(): validate firmware record spans
gregkh/linux@825c903ca3c9 can: peak_usb: add bounds check for USB channel index
gregkh/linux@525640b93d3e can: peak_usb: peak_usb_start(): fix double free of transfer buffer on URB submit error
gregkh/linux@6067c878e38d can: peak_usb: validate uCAN receive record lengths
gregkh/linux@5bdd69e8301b can: ctucanfd: add missing MODULE_DEVICE_TABLE()
gregkh/linux@bfc20e429de9 can: ctucanfd: use self-test mode for PRESUME_ACK
gregkh/linux@4a666e648c6b can: ctucanfd: unmap BAR0 using base address
gregkh/linux@4c453560d3c2 can: ctucanfd: handle bus error interrupts
gregkh/linux@3c9d12561601 can: ctucanfd: mark error-active controller status valid
gregkh/linux@13bd7cf63610 drm/dp: Read the PCON max FRL bandwidth only for HDMI DFPs
gregkh/linux@2f2291a119e9 drm/vc4: Supply the overflow slot size in BPOS, not the whole bin BO size
gregkh/linux@f5802be65535 drm/vc4: Zero the tile state data array before each BIN job
gregkh/linux@8112f0a9396e drm/mediatek: ovl_adaptor: balance component registrations
gregkh/linux@ef3fa445edc0 drm/amdgpu: restore UMD profile pstate after runtime resume
gregkh/linux@668441cff9e0 drm/amdgpu: cap GTT size to physical RAM on APUs
gregkh/linux@ce813614f63b drm/amdkfd: Fix missing authorization check in KFD_IOC_DBG_TRAP_DISABLE
gregkh/linux@8924e2594a15 drm/amdkfd: fix QID bit leak in pqm_create_queue()
gregkh/linux@dec688cfa18c drm/amdkfd: Handle invalid event type in CRIU event restore
gregkh/linux@2040b7e39027 drm/amdkfd: hold event_mutex while checkpointing CRIU events
gregkh/linux@21bbe38faee4 drm/vmwgfx: fix guest_memory_dirty bitfield clobbered as size
gregkh/linux@7eae011829f9 drm/vmwgfx: reject DX_BIND_QUERY without a DX context
gregkh/linux@c1c22fca0a08 drm/vmwgfx: drop dma_buf reference on foreign-fd prime import
gregkh/linux@2666cddf0dd2 drm/vmwgfx: validate DRAW_PRIMITIVES header size before division
gregkh/linux@036e16ada953 drm/vmwgfx: bound DMA command body size against suffix pointer
gregkh/linux@1bbe7751f5eb drm/vmwgfx: use check_add_overflow for shader size+offset bound
gregkh/linux@4e0f669e2951 drm/vmwgfx: validate external BO copy bounds for both stride paths
gregkh/linux@b517ca5c6346 spi: spi-cadence: enable SPI_CONTROLLER_MUST_TX
gregkh/linux@95b3f23d6324 HID: logitech-dj: Fix maxfield check in DJ short report validation
gregkh/linux@015882996982 ata: libahci_platform: Do not set mask_port_map when not needed
gregkh/linux@9de51b5dbcdf ata: ahci: Make ahci_ignore_port() handle empty mask_port_map
gregkh/linux@6277e8577771 iommu/sva: move x86 disable check before allocation
gregkh/linux@69cb5825d998 mm/hugetlb: fix swap entry corruption when clearing uffd-wp at fork()
gregkh/linux@be106f7855f0 mm/huge_memory: unlock i_mmap_rwsem before releasing after-split folios
gregkh/linux@95f702e37296 firmware: stratix10-svc: fix memory leaks and list corruption bugs
gregkh/linux@16da33cb36e6 gpio: pch: use raw_spinlock_t for the register lock
gregkh/linux@bbd2a25bbb41 Revert "ia64: Make acpi_cpufreq_cpu_exit return void"
gregkh/linux@e56ccb286bc4 usb: musb: omap2430: clean up probe error handling
gregkh/linux@eed56f105a7f usb: musb: omap2430: Do not put borrowed of_node in probe
gregkh/linux@4c37112f1af9 drm: renesas: Move RZ/G2L MIPI DSI driver to rz-du
gregkh/linux@f5307073303a drm: renesas: rzg2l_mipi_dsi: Increase reset deassertion delay
gregkh/linux@3118bb872c7d usb: gadget: f_tcm: synchronize delayed set_alt with teardown
gregkh/linux@3a9e3344d1e5 usb: typec: ucsi: Only enable supported notifications
gregkh/linux@c888e052a09e usb: typec: ucsi: split connector lock classes
gregkh/linux@07f8aaffee70 usb: typec: ucsi: Fix race condition and ordering in port unregistration
gregkh/linux@d6c50b6605db drm/fb-helper: Allocate and release fb_info in single place
gregkh/linux@926a4e230106 drm/tegra: fbdev: Remove offset into framebuffer memory
gregkh/linux@aa31b60d6c4e drm/amdgpu: Respect placement requirements in amdgpu_gtt_mgr functions
gregkh/linux@c8420f048c15 drm/i915/vrr: Check HAS_VRR() first in intel_vrr_is_capable()
gregkh/linux@6598ac1721c3 drm/i915/vrr: require valid min/max vfreq for VRR
gregkh/linux@912762e93e6d media: i2c: imx219: Access height from active format in imx219_set_ctrl
gregkh/linux@bc24c30f403a media: i2c: imx219: Don't store the current mode in the imx219 structure
gregkh/linux@f2f85e5ff17e media: i2c: imx219: Drop IMX219_VTS macros
gregkh/linux@cdeb114ed964 media: i2c: imx219: Group functions by purpose
gregkh/linux@b0f5471b0a69 media: i2c: imx219: Calculate crop rectangle dynamically
gregkh/linux@af4fd77d3430 media: i2c: imx219: Rename VTS to FRM_LENGTH
gregkh/linux@f9fa11cdd5bf media: imx219: Fix maximum frame length in lines
gregkh/linux@d94b82d452ca rxrpc: Fix irq-disabled in local_bh_enable()
gregkh/linux@e38f054f0af9 netfilter: nf_tables: clone set on flush only
gregkh/linux@fa00d8070d85 media: v4l: async: Set owner for async sub-devices
gregkh/linux@47ef04cd13d3 media: v4l2-fwnode: Fix subdev owner overwritten in v4l2_async_register_subdev_sensor()
gregkh/linux@64af6534a085 wifi: ath6kl: fix use-after-free in aggr_reset_state()
gregkh/linux@b516ac892bcb wifi: brcmfmac: fix 43752 SDIO FWVID incorrectly labelled as Cypress (CYW)
gregkh/linux@1335161f8502 wifi: brcmfmac: set F2 blocksize to 256 for BCM43752
gregkh/linux@c268331845ee wifi: brcmfmac: drain bus_reset work on device removal
gregkh/linux@ac649bd51e7f sysctl: treewide: constify ctl_table_header::ctl_table_arg
gregkh/linux@66700c071967 sctp: avoid auth_enable sysctl UAF during netns teardown
gregkh/linux@1107f5959c03 can: use skb hash instead of private variable in headroom
gregkh/linux@bf5c4a8b24ac can: isotp: fix timer drain order, wakeup handling and tx_gen ordering
gregkh/linux@c30406c39a66 libceph: add doutc and *_client debug macros support
gregkh/linux@2cda8a74c91d ceph: print cluster fsid and client global_id in all debug logs
gregkh/linux@cb9c9ec479e0 ceph: fix refcount leak in ceph_readdir()
gregkh/linux@805b79892a92 mptcp: pm: avoid code duplication to lookup endp
gregkh/linux@19b0ae625755 mptcp: add mptcp_userspace_pm_lookup_addr helper
gregkh/linux@6b6dcc679df1 mptcp: pm: use addr entry for get_local_id
gregkh/linux@d2c3760b45f2 mptcp: pm: userspace: fix use-after-free in get_local_id
gregkh/linux@c6eb2d615210 sctp: close UDP tunnel sockets during netns teardown
gregkh/linux@b02ed4c9099a drm/i915/fbc: Extract intel_fbc_has_fences()
gregkh/linux@d1ba0459d8d0 drm/i915/hdcp: migrate away from kdev_to_i915() in bind/unbind
gregkh/linux@214b63a6df02 drm/i915/hdcp: Move to using intel_display in intel_hdcp
gregkh/linux@d7bec2276b60 drm/i915/hdcp: require monotonically increasing seq_num_v
gregkh/linux@84351f123903 drm/i915/hdcp: check streams[] bounds before overflow
gregkh/linux@dcaba7b28172 ALSA: hda: codecs: hdmi: disable keep-alive before audio format change
gregkh/linux@da302460e151 drm/tegra: fbdev: Do not assign to struct drm_fb_helper.info
gregkh/linux@5b75a6e292b8 usb: typec: ucsi: Correct teardown ordering in ucsi_init() error path
gregkh/linux@d27334b2888c Linux 6.6.151