Merge 6.6.55 into android15-6.6-lts
Changes in 6.6.55
static_call: Handle module init failure correctly in static_call_del_module()
static_call: Replace pointless WARN_ON() in static_call_module_notify()
jump_label: Simplify and clarify static_key_fast_inc_cpus_locked()
jump_label: Fix static_key_slow_dec() yet again
scsi: st: Fix input/output error on empty drive reset
scsi: pm8001: Do not overwrite PCI queue mapping
drm/amdgpu: Fix get each xcp macro
mailbox: rockchip: fix a typo in module autoloading
mailbox: bcm2835: Fix timeout during suspend mode
ceph: remove the incorrect Fw reference check when dirtying pages
ieee802154: Fix build error
net: sparx5: Fix invalid timestamps
net/mlx5: Fix error path in multi-packet WQE transmit
net/mlx5: Added cond_resched() to crdump collection
net/mlx5e: Fix NULL deref in mlx5e_tir_builder_alloc()
net/mlx5e: Fix crash caused by calling __xfrm_state_delete() twice
netfilter: uapi: NFTA_FLOWTABLE_HOOK is NLA_NESTED
net: ieee802154: mcr20a: Use IRQF_NO_AUTOEN flag in request_irq()
net: wwan: qcom_bam_dmux: Fix missing pm_runtime_disable()
selftests: netfilter: Fix nft_audit.sh for newer nft binaries
netfilter: nf_tables: prevent nf_skb_duplicated corruption
Bluetooth: MGMT: Fix possible crash on mgmt_index_removed
Bluetooth: L2CAP: Fix uaf in l2cap_connect
Bluetooth: btmrvl: Use IRQF_NO_AUTOEN flag in request_irq()
net: Add netif_get_gro_max_size helper for GRO
net: Fix gso_features_check to check for both dev->gso_{ipv4_,}max_size
net: ethernet: lantiq_etop: fix memory disclosure
net: fec: Restart PPS after link state change
net: fec: Reload PTP registers after link-state change
net: avoid potential underflow in qdisc_pkt_len_init() with UFO
net: add more sanity checks to qdisc_pkt_len_init()
net: stmmac: dwmac4: extend timeout for VLAN Tag register busy bit check
ipv4: ip_gre: Fix drops of small packets in ipgre_xmit
net: test for not too small csum_start in virtio_net_hdr_to_skb()
ppp: do not assume bh is held in ppp_channel_bridge_input()
iomap: constrain the file range passed to iomap_file_unshare
dt-bindings: net: xlnx,axi-ethernet: Add missing reg minItems
sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
i2c: xiic: improve error message when transfer fails to start
i2c: xiic: Try re-initialization on bus busy timeout
loop: don't set QUEUE_FLAG_NOMERGES
Bluetooth: hci_sock: Fix not validating setsockopt user input
media: usbtv: Remove useless locks in usbtv_video_free()
Bluetooth: ISO: Fix not validating setsockopt user input
Bluetooth: L2CAP: Fix not validating setsockopt user input
ASoC: atmel: mchp-pdmc: Skip ALSA restoration if substream runtime is uninitialized
ALSA: mixer_oss: Remove some incorrect kfree_const() usages
ALSA: hda/realtek: Fix the push button function for the ALC257
cifs: Remove intermediate object of failed create reparse call
ALSA: hda/generic: Unconditionally prefer preferred_dacs pairs
ASoC: imx-card: Set card.owner to avoid a warning calltrace if SND=m
cifs: Fix buffer overflow when parsing NFS reparse points
cifs: Do not convert delimiter when parsing NFS-style symlinks
ALSA: gus: Fix some error handling paths related to get_bpos() usage
ALSA: hda/conexant: Fix conflicting quirk for System76 Pangolin
wifi: ath9k: fix possible integer overflow in ath9k_get_et_stats()
wifi: rtw89: avoid to add interface to list twice when SER
wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
crypto: x86/sha256 - Add parentheses around macros' single arguments
crypto: octeontx - Fix authenc setkey
crypto: octeontx2 - Fix authenc setkey
ice: Adjust over allocation of memory in ice_sched_add_root_node() and ice_sched_add_node()
wifi: iwlwifi: mvm: Fix a race in scan abort flow
wifi: iwlwifi: mvm: drop wrong STA selection in TX
wifi: cfg80211: Set correct chandef when starting CAC
net/xen-netback: prevent UAF in xenvif_flush_hash()
net: hisilicon: hip04: fix OF node leak in probe()
net: hisilicon: hns_dsaf_mac: fix OF node leak in hns_mac_get_info()
net: hisilicon: hns_mdio: fix OF node leak in probe()
ACPI: PAD: fix crash in exit_round_robin()
ACPICA: Fix memory leak if acpi_ps_get_next_namepath() fails
ACPICA: Fix memory leak if acpi_ps_get_next_field() fails
e1000e: avoid failing the system during pm_suspend
wifi: mt76: mt7915: disable tx worker during tx BA session enable/disable
net: sched: consistently use rcu_replace_pointer() in taprio_change()
Bluetooth: btusb: Add Realtek RTL8852C support ID 0x0489:0xe122
Bluetooth: btrtl: Set msft ext address filter quirk for RTL8852B
ACPI: video: Add force_vendor quirk for Panasonic Toughbook CF-18
ACPI: CPPC: Add support for setting EPP register in FFH
blk_iocost: fix more out of bound shifts
wifi: ath12k: fix array out-of-bound access in SoC stats
wifi: ath11k: fix array out-of-bound access in SoC stats
wifi: rtw88: select WANT_DEV_COREDUMP
ACPI: EC: Do not release locks during operation region accesses
ACPICA: check null return of ACPI_ALLOCATE_ZEROED() in acpi_db_convert_to_package()
tipc: guard against string buffer overrun
net: mvpp2: Increase size of queue_name buffer
bnxt_en: Extend maximum length of version string by 1 byte
ipv4: Check !in_dev earlier for ioctl(SIOCSIFADDR).
wifi: rtw89: correct base HT rate mask for firmware
ipv4: Mask upper DSCP bits and ECN bits in NETLINK_FIB_LOOKUP family
net: atlantic: Avoid warning about potential string truncation
crypto: simd - Do not call crypto_alloc_tfm during registration
netpoll: Ensure clean state on setup failures
tcp: avoid reusing FIN_WAIT2 when trying to find port in connect() process
wifi: iwlwifi: mvm: use correct key iteration
wifi: iwlwifi: mvm: avoid NULL pointer dereference
wifi: mac80211: fix RCU list iterations
ACPICA: iasl: handle empty connection_node
proc: add config & param to block forcing mem writes
drivers/perf: arm_spe: Use perf_allow_kernel() for permissions
can: netlink: avoid call to do_set_data_bittiming callback with stale can_priv::ctrlmode
wifi: mt76: mt7915: add dummy HW offload of IEEE 802.11 fragmentation
wifi: mt76: mt7915: hold dev->mt76.mutex while disabling tx worker
wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
nfp: Use IRQF_NO_AUTOEN flag in request_irq()
ALSA: usb-audio: Add input value sanity checks for standard types
x86/ioapic: Handle allocation failures gracefully
ALSA: usb-audio: Define macros for quirk table entries
ALSA: usb-audio: Replace complex quirk lines with macros
ALSA: usb-audio: Add logitech Audio profile quirk
ASoC: codecs: wsa883x: Handle reading version failure
tools/x86/kcpuid: Protect against faulty "max subleaf" values
x86/pkeys: Add PKRU as a parameter in signal handling functions
x86/pkeys: Restore altstack access in sigreturn()
x86/kexec: Add EFI config table identity mapping for kexec kernel
ALSA: asihpi: Fix potential OOB array access
ALSA: hdsp: Break infinite MIDI input flush loop
tools/nolibc: powerpc: limit stack-protector workaround to GCC
selftests/nolibc: avoid passing NULL to printf("%s")
x86/syscall: Avoid memcpy() for ia32 syscall_get_arguments()
hwmon: (nct6775) add G15CF to ASUS WMI monitoring list
fbdev: efifb: Register sysfs groups through driver core
fbdev: pxafb: Fix possible use after free in pxafb_task()
rcuscale: Provide clear error when async specified without primitives
power: reset: brcmstb: Do not go into infinite loop if reset fails
iommu/vt-d: Always reserve a domain ID for identity setup
iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count
drm/stm: Avoid use-after-free issues with crtc and plane
drm/amdgpu: disallow multiple BO_HANDLES chunks in one submit
drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer
drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
ata: pata_serverworks: Do not use the term blacklist
ata: sata_sil: Rename sil_blacklist to sil_quirks
HID: Ignore battery for all ELAN I2C-HID devices
drm/amd/display: Handle null 'stream_status' in 'planes_changed_for_existing_stream'
drm/amd/display: Check null pointers before using dc->clk_mgr
drm/amd/display: Add null check for 'afb' in amdgpu_dm_plane_handle_cursor_update (v2)
drm/amd/display: fix double free issue during amdgpu module unload
jfs: UBSAN: shift-out-of-bounds in dbFindBits
jfs: Fix uaf in dbFreeBits
jfs: check if leafidx greater than num leaves per dmap tree
scsi: smartpqi: correct stream detection
drm/msm/adreno: Assign msm_gpu->pdev earlier to avoid nullptrs
jfs: Fix uninit-value access of new_ea in ea_buffer
drm/amdgpu: add raven1 gfxoff quirk
drm/amdgpu: enable gfxoff quirk on HP 705G4
drm/amdkfd: Fix resource leak in criu restore queue
HID: multitouch: Add support for Thinkpad X12 Gen 2 Kbd Portfolio
platform/x86: touchscreen_dmi: add nanote-next quirk
drm/stm: ltdc: reset plane transparency after plane disable
drm/amd/display: Check stream before comparing them
drm/amd/display: Check link_res->hpo_dp_link_enc before using it
drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
drm/amd/display: Fix index out of bounds in degamma hardware format translation
drm/amd/display: Fix index out of bounds in DCN30 color transformation
drm/amd/display: Avoid overflow assignment in link_dp_cts
drm/amd/display: Initialize get_bytes_per_element's default to 1
drm/printer: Allow NULL data in devcoredump printer
perf,x86: avoid missing caller address in stack traces captured in uprobe
scsi: aacraid: Rearrange order of struct aac_srb_unit
scsi: lpfc: Update PRLO handling in direct attached topology
drm/amdgpu: fix unchecked return value warning for amdgpu_gfx
perf: Fix event_function_call() locking
scsi: NCR5380: Initialize buffer for MSG IN and STATUS transfers
drm/radeon/r100: Handle unknown family in r100_cp_init_microcode()
drm/amdgpu: Block MMR_READ IOCTL in reset
drm/amdgpu/gfx9: use rlc safe mode for soft recovery
drm/amd/pm: ensure the fw_info is not null before using it
of/irq: Refer to actual buffer size in of_irq_parse_one()
powerpc/pseries: Use correct data types from pseries_hp_errorlog struct
drm/amdgpu/gfx11: use rlc safe mode for soft recovery
drm/amdgpu/gfx10: use rlc safe mode for soft recovery
platform/x86: lenovo-ymc: Ignore the 0x0 state
ksmbd: add refcnt to ksmbd_conn struct
bpf: Make the pointer returned by iter next method valid
ext4: ext4_search_dir should return a proper error
ext4: avoid use-after-free in ext4_ext_show_leaf()
ext4: fix i_data_sem unlock order in ext4_ind_migrate()
bpftool: Fix undefined behavior caused by shifting into the sign bit
iomap: handle a post-direct I/O invalidate race in iomap_write_delalloc_release
bpftool: Fix undefined behavior in qsort(NULL, 0, ...)
spi: spi-imx: Fix pm_runtime_set_suspended() with runtime pm enabled
spi: spi-cadence: Use helper function devm_clk_get_enabled()
spi: spi-cadence: Fix pm_runtime_set_suspended() with runtime pm enabled
spi: spi-cadence: Fix missing spi_controller_is_target() check
selftest: hid: add missing run-hid-tools-tests.sh
spi: s3c64xx: fix timeout counters in flush_fifo
selftests: breakpoints: use remaining time to check if suspend succeed
accel/ivpu: Add missing MODULE_FIRMWARE metadata
spi: rpc-if: Add missing MODULE_DEVICE_TABLE
perf callchain: Fix stitch LBR memory leaks
perf: Really fix event_function_call() locking
selftests: vDSO: fix vDSO name for powerpc
selftests: vDSO: fix vdso_config for powerpc
selftests: vDSO: fix vDSO symbols lookup for powerpc64
selftests/mm: fix charge_reserved_hugetlb.sh test
powerpc/vdso: Fix VDSO data access when running in a non-root time namespace
selftests: vDSO: fix ELF hash table entry size for s390x
selftests: vDSO: fix vdso_config for s390
Revert "ALSA: hda: Conditionally use snooping for AMD HDMI"
platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
i2c: qcom-geni: Use IRQF_NO_AUTOEN flag in request_irq()
i2c: xiic: Wait for TX empty to avoid missed TX NAKs
media: i2c: ar0521: Use cansleep version of gpiod_set_value()
i2c: xiic: Fix pm_runtime_set_suspended() with runtime pm enabled
i2c: designware: fix controller is holding SCL low while ENABLE bit is disabled
rust: sync: require `T: Sync` for `LockedBy::access`
ovl: fail if trusted xattrs are needed but caller lacks permission
firmware: tegra: bpmp: Drop unused mbox_client_to_bpmp()
memory: tegra186-emc: drop unused to_tegra186_emc()
dt-bindings: clock: exynos7885: Fix duplicated binding
spi: bcm63xx: Fix module autoloading
spi: bcm63xx: Fix missing pm_runtime_disable()
power: supply: hwmon: Fix missing temp1_max_alarm attribute
perf/core: Fix small negative period being ignored
parisc: Fix itlb miss handler for 64-bit programs
drm/mediatek: ovl_adaptor: Add missing of_node_put()
drm: Consistently use struct drm_mode_rect for FB_DAMAGE_CLIPS
ALSA: hda/tas2781: Add new quirk for Lenovo Y990 Laptop
ALSA: core: add isascii() check to card ID generator
ALSA: usb-audio: Add delay quirk for VIVO USB-C HEADSET
ALSA: usb-audio: Add native DSD support for Luxman D-08u
ALSA: line6: add hw monitor volume control to POD HD500X
ALSA: hda/realtek: Add quirk for Huawei MateBook 13 KLV-WX9
ALSA: hda/realtek: Add a quirk for HP Pavilion 15z-ec200
ext4: no need to continue when the number of entries is 1
ext4: correct encrypted dentry name hash when not casefolded
ext4: fix slab-use-after-free in ext4_split_extent_at()
ext4: propagate errors from ext4_find_extent() in ext4_insert_range()
ext4: fix incorrect tid assumption in ext4_fc_mark_ineligible()
ext4: dax: fix overflowing extents beyond inode size when partially writing
ext4: fix incorrect tid assumption in __jbd2_log_wait_for_space()
ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
ext4: aovid use-after-free in ext4_ext_insert_extent()
ext4: fix double brelse() the buffer of the extents path
ext4: fix timer use-after-free on failed mount
ext4: update orig_path in ext4_find_extent()
ext4: fix incorrect tid assumption in ext4_wait_for_tail_page_commit()
ext4: fix incorrect tid assumption in jbd2_journal_shrink_checkpoint_list()
ext4: fix fast commit inode enqueueing during a full journal commit
ext4: use handle to mark fc as ineligible in __track_dentry_update()
ext4: mark fc as ineligible using an handle in ext4_xattr_set()
parisc: Fix 64-bit userspace syscall path
parisc: Allow mmap(MAP_STACK) memory to automatically expand upwards
parisc: Fix stack start for ADDR_NO_RANDOMIZE personality
drm/rockchip: vop: clear DMA stop bit on RK3066
of: address: Report error on resource bounds overflow
of/irq: Support #msi-cells=<0> in of_msi_get_domain
drm: omapdrm: Add missing check for alloc_ordered_workqueue
resource: fix region_intersects() vs add_memory_driver_managed()
jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
jbd2: correctly compare tids with tid_geq function in jbd2_fc_begin_commit
mm: krealloc: consider spare memory for __GFP_ZERO
ocfs2: fix the la space leak when unmounting an ocfs2 volume
ocfs2: fix uninit-value in ocfs2_get_block()
ocfs2: reserve space for inline xattr before attaching reflink tree
ocfs2: cancel dqi_sync_work before freeing oinfo
ocfs2: remove unreasonable unlock in ocfs2_read_blocks
ocfs2: fix null-ptr-deref when journal load failed.
ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
arm64: fix selection of HAVE_DYNAMIC_FTRACE_WITH_ARGS
arm64: Subscribe Microsoft Azure Cobalt 100 to erratum 3194386
riscv: define ILLEGAL_POINTER_VALUE for 64bit
exfat: fix memory leak in exfat_load_bitmap()
perf python: Disable -Wno-cast-function-type-mismatch if present on clang
perf hist: Update hist symbol when updating maps
nfsd: fix delegation_blocked() to block correctly for at least 30 seconds
nfsd: map the EBADMSG to nfserr_io to avoid warning
NFSD: Fix NFSv4's PUTPUBFH operation
i3c: master: svc: Fix use after free vulnerability in svc_i3c_master Driver Due to Race Condition
RDMA/mana_ib: use the correct page size for mapping user-mode doorbell page
riscv: Fix kernel stack size when KASAN is enabled
aoe: fix the potential use-after-free problem in more places
media: ov5675: Fix power on/off delay timings
clk: rockchip: fix error for unknown clocks
remoteproc: k3-r5: Fix error handling when power-up failed
clk: qcom: dispcc-sm8250: use CLK_SET_RATE_PARENT for branch clocks
media: sun4i_csi: Implement link validate for sun4i_csi subdev
clk: qcom: gcc-sm8450: Do not turn off PCIe GDSCs during gdsc_disable()
media: uapi/linux/cec.h: cec_msg_set_reply_to: zero flags
clk: qcom: clk-rpmh: Fix overflow in BCM vote
clk: samsung: exynos7885: Update CLKS_NR_FSYS after bindings fix
clk: qcom: gcc-sm8150: De-register gcc_cpuss_ahb_clk_src
media: venus: fix use after free bug in venus_remove due to race condition
clk: qcom: gcc-sm8250: Do not turn off PCIe GDSCs during gdsc_disable()
media: qcom: camss: Remove use_count guard in stop_streaming
media: qcom: camss: Fix ordering of pm_runtime_enable
clk: qcom: gcc-sc8180x: Fix the sdcc2 and sdcc4 clocks freq table
clk: qcom: clk-alpha-pll: Fix CAL_L_VAL override for LUCID EVO PLL
smb: client: use actual path when queryfs
smb3: fix incorrect mode displayed for read-only files
iio: magnetometer: ak8975: Fix reading for ak099xx sensors
vrf: revert "vrf: Remove unnecessary RCU-bh critical section"
gso: fix udp gso fraglist segmentation after pull from frag_list
tomoyo: fallback to realpath if symlink's pathname does not exist
net: stmmac: Fix zero-division error when disabling tc cbs
rtc: at91sam9: fix OF node leak in probe() error path
Input: adp5589-keys - fix NULL pointer dereference
Input: adp5589-keys - fix adp5589_gpio_get_value()
cachefiles: fix dentry leak in cachefiles_open_file()
ACPI: resource: Add Asus Vivobook X1704VAP to irq1_level_low_skip_override[]
ACPI: resource: Add Asus ExpertBook B2502CVA to irq1_level_low_skip_override[]
btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
btrfs: send: fix invalid clone operation for file that got its size decreased
btrfs: wait for fixup workers before stopping cleaner kthread during umount
cpufreq: Avoid a bad reference count on CPU node
gpio: davinci: fix lazy disable
net: pcs: xpcs: fix the wrong register that was written back
Bluetooth: hci_event: Align BR/EDR JUST_WORKS paring with LE
mac802154: Fix potential RCU dereference issue in mac802154_scan_worker
ceph: fix cap ref leak via netfs init_request
tracing/hwlat: Fix a race during cpuhp processing
tracing/timerlat: Drop interface_lock in stop_kthread()
tracing/timerlat: Fix a race during cpuhp processing
tracing/timerlat: Fix duplicated kthread creation due to CPU online/offline
rtla: Fix the help text in osnoise and timerlat top tools
close_range(): fix the logics in descriptor table trimming
drm/i915/gem: fix bitwise and logical AND mixup
drm/sched: Add locking to drm_sched_entity_modify_sched
drm/amd/display: Add HDR workaround for specific eDP
drm/amd/display: Fix system hang while resume with TBT monitor
cpufreq: intel_pstate: Make hwp_notify_lock a raw spinlock
kconfig: qconf: fix buffer overflow in debug links
platform/x86: x86-android-tablets: Create a platform_device from module_init()
platform/x86: x86-android-tablets: Fix use after free on platform_device_register() errors
i2c: create debugfs entry per adapter
i2c: core: Lock address during client device instantiation
i2c: synquacer: Remove a clk reference from struct synquacer_i2c
i2c: synquacer: Deal with optional PCLK correctly
arm64: cputype: Add Neoverse-N3 definitions
arm64: errata: Expand speculative SSBS workaround once more
io_uring/net: harden multishot termination case for recv
uprobes: fix kernel info leak via "[uprobes]" vma
mm: z3fold: deprecate CONFIG_Z3FOLD
drm/amd/display: Allow backlight to go below `AMDGPU_DM_DEFAULT_MIN_BACKLIGHT`
build-id: require program headers to be right after ELF header
lib/buildid: harden build ID parsing logic
sched: psi: fix bogus pressure spikes from aggregation race
net: mana: Enable MANA driver on ARM64 with 4K page size
net: mana: Add support for page sizes other than 4KB on ARM64
RDMA/mana_ib: use the correct page table index based on hardware page size
media: i2c: imx335: Enable regulator supplies
media: imx335: Fix reset-gpio handling
remoteproc: k3-r5: Acquire mailbox handle during probe routine
remoteproc: k3-r5: Delay notification of wakeup event
dt-bindings: clock: qcom: Add missing UFS QREF clocks
dt-bindings: clock: qcom: Add GPLL9 support on gcc-sc8180x
iio: pressure: bmp280: Allow multiple chips id per family of devices
iio: pressure: bmp280: Improve indentation and line wrapping
iio: pressure: bmp280: Use BME prefix for BME280 specifics
iio: pressure: bmp280: Fix regmap for BMP280 device
iio: pressure: bmp280: Fix waiting time for BMP3xx configuration
r8169: Fix spelling mistake: "tx_underun" -> "tx_underrun"
r8169: add tally counter fields added with RTL8125
clk: qcom: gcc-sc8180x: Add GPLL9 support
ACPI: battery: Simplify battery hook locking
ACPI: battery: Fix possible crash when unregistering a battery hook
btrfs: relocation: return bool from btrfs_should_ignore_reloc_root
btrfs: relocation: constify parameters where possible
btrfs: drop the backref cache during relocation if we commit
drm/rockchip: vop: enable VOP_FEATURE_INTERNAL_RGB on RK3066
Revert "drm/amd/display: Skip Recompute DSC Params if no Stream on Link"
ubifs: ubifs_symlink: Fix memleak of inode->i_link in error path
netfilter: nf_tables: fix memleak in map from abort path
netfilter: nf_tables: restore set elements when delete set fails
net: dsa: fix netdev_priv() dereference before check on non-DSA netdevice events
iommufd: Fix protection fault in iommufd_test_syz_conv_iova
drm/bridge: adv7511: fix crash on irq during probe
efi/unaccepted: touch soft lockup during memory accept
platform/x86: think-lmi: Fix password opcode ordering for workstations
null_blk: Remove usage of the deprecated ida_simple_xx() API
null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
net: stmmac: move the EST lock to struct stmmac_priv
rxrpc: Fix a race between socket set up and I/O thread creation
vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
crypto: octeontx* - Select CRYPTO_AUTHENC
drm/amd/display: Revert Avoid overflow assignment
perf report: Fix segfault when 'sym' sort key is not used
drm/amd/display: enable_hpo_dp_link_output: Check link_res->hpo_dp_link_enc before using it
null_blk: Fix return value of nullb_device_power_store()
Revert "ubifs: ubifs_symlink: Fix memleak of inode->i_link in error path"
perf python: Allow checking for the existence of warning options in clang
Linux 6.6.55
Applicable to GKI build:
33f3e832 jump_label: Simplify and clarify static_key_fast_inc_cpus_locked() [1 file, +11/-9]
86fdd180 jump_label: Fix static_key_slow_dec() yet again [1 file, +27/-7]
8691a82a netfilter: uapi: NFTA_FLOWTABLE_HOOK is NLA_NESTED [1 file, +1/-1]
4e3542f4 netfilter: nf_tables: prevent nf_skb_duplicated corruption [2 files, +10/-4]
48832965 Bluetooth: MGMT: Fix possible crash on mgmt_index_removed [1 file, +14/-9]
b9090769 Bluetooth: L2CAP: Fix uaf in l2cap_connect [3 files, +3/-9]
dae9b99b net: Add netif_get_gro_max_size helper for GRO [2 files, +11/-7]
718b6634 net: Fix gso_features_check to check for both dev->gso_{ipv4_,}max_size [2 files, +10/-1]
25ab0b87 net: avoid potential underflow in qdisc_pkt_len_init() with UFO [1 file, +1/-1]
9b0ee571 net: add more sanity checks to qdisc_pkt_len_init() [1 file, +7/-3]
ea8cad4c ipv4: ip_gre: Fix drops of small packets in ipgre_xmit [1 file, +3/-3]
d9dfd41e net: test for not too small csum_start in virtio_net_hdr_to_skb() [1 file, +3/-1]
f9620e2a ppp: do not assume bh is held in ppp_channel_bridge_input() [1 file, +2/-2]
b66ff9a3 loop: don't set QUEUE_FLAG_NOMERGES [1 file, +2/-13]
0c18a640 Bluetooth: hci_sock: Fix not validating setsockopt user input [1 file, +8/-13]
6a6baa1e Bluetooth: ISO: Fix not validating setsockopt user input [1 file, +12/-24]
28234f8a Bluetooth: L2CAP: Fix not validating setsockopt user input [1 file, +20/-32]
1ab2cfe1 blk_iocost: fix more out of bound shifts [1 file, +5/-3]
12d26aa7 tipc: guard against string buffer overrun [1 file, +6/-2]
d4c4653b ipv4: Check !in_dev earlier for ioctl(SIOCSIFADDR). [1 file, +2/-4]
f989162f ipv4: Mask upper DSCP bits and ECN bits in NETLINK_FIB_LOOKUP family [1 file, +1/-1]
5cce1c07 tcp: avoid reusing FIN_WAIT2 when trying to find port in connect() process [1 file, +3/-0]
b4f8240b can: netlink: avoid call to do_set_data_bittiming callback with stale can_priv::ctrlmode [1 file, +51/-51]
864f68a2 ALSA: usb-audio: Add input value sanity checks for standard types [2 files, +28/-8]
70d5e30b ALSA: usb-audio: Add logitech Audio profile quirk [1 file, +6/-0]
4ee08b4a drm/printer: Allow NULL data in devcoredump printer [2 files, +61/-6]
66a403d8 perf: Fix event_function_call() locking [1 file, +5/-4]
fe2c86e1 of/irq: Refer to actual buffer size in of_irq_parse_one() [1 file, +2/-2]
b111ae42 bpf: Make the pointer returned by iter next method valid [1 file, +22/-4]
1fe28527 ext4: ext4_search_dir should return a proper error [1 file, +7/-5]
34b20963 ext4: avoid use-after-free in ext4_ext_show_leaf() [1 file, +4/-5]
d43776b9 ext4: fix i_data_sem unlock order in ext4_ind_migrate() [1 file, +1/-1]
390b9e54 iomap: handle a post-direct I/O invalidate race in iomap_write_delalloc_release [1 file, +9/-1]
9629c0c3 perf: Really fix event_function_call() locking [1 file, +8/-5]
bf47be54 ovl: fail if trusted xattrs are needed but caller lacks permission [1 file, +33/-5]
02825815 firmware: tegra: bpmp: Drop unused mbox_client_to_bpmp() [1 file, +0/-6]
ff580d01 memory: tegra186-emc: drop unused to_tegra186_emc() [1 file, +0/-5]
9fca08c0 perf/core: Fix small negative period being ignored [1 file, +5/-1]
c923bc87 drm: Consistently use struct drm_mode_rect for FB_DAMAGE_CLIPS [1 file, +1/-1]
aba1be9a ALSA: core: add isascii() check to card ID generator [1 file, +10/-4]
9d125aab ALSA: usb-audio: Add delay quirk for VIVO USB-C HEADSET [1 file, +2/-0]
228a8b95 ALSA: usb-audio: Add native DSD support for Luxman D-08u [1 file, +2/-0]
2d64e7da ext4: no need to continue when the number of entries is 1 [1 file, +1/-1]
a56e5f38 ext4: correct encrypted dentry name hash when not casefolded [1 file, +11/-3]
8fe11779 ext4: fix slab-use-after-free in ext4_split_extent_at() [1 file, +20/-1]
f4308d8e ext4: propagate errors from ext4_find_extent() in ext4_insert_range() [1 file, +1/-0]
8c762b4e ext4: fix incorrect tid assumption in ext4_fc_mark_ineligible() [1 file, +11/-4]
5efccdee ext4: dax: fix overflowing extents beyond inode size when partially writing [1 file, +4/-4]
93051d16 ext4: fix incorrect tid assumption in __jbd2_log_wait_for_space() [1 file, +5/-2]
1b558006 ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free [1 file, +10/-11]
8162ee5d ext4: aovid use-after-free in ext4_ext_insert_extent() [1 file, +1/-0]
68a69cf6 ext4: fix double brelse() the buffer of the extents path [1 file, +1/-0]
9203817b ext4: fix timer use-after-free on failed mount [1 file, +1/-1]
f55ecc58 ext4: update orig_path in ext4_find_extent() [2 files, +2/-2]
80dccb81 ext4: fix incorrect tid assumption in ext4_wait_for_tail_page_commit() [1 file, +7/-4]
1552199a ext4: fix incorrect tid assumption in jbd2_journal_shrink_checkpoint_list() [1 file, +5/-2]
d13a3558 ext4: fix fast commit inode enqueueing during a full journal commit [2 files, +15/-2]
c5771f1c ext4: use handle to mark fc as ineligible in __track_dentry_update() [1 file, +11/-8]
89bbc55d ext4: mark fc as ineligible using an handle in ext4_xattr_set() [1 file, +2/-1]
a17dfde5 parisc: Fix stack start for ADDR_NO_RANDOMIZE personality [1 file, +2/-1]
d657d286 of: address: Report error on resource bounds overflow [1 file, +5/-0]
0022085f of/irq: Support #msi-cells=<0> in of_msi_get_domain [1 file, +7/-27]
393331e1 resource: fix region_intersects() vs add_memory_driver_managed() [1 file, +50/-8]
1c62dc0d jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error [1 file, +5/-2]
fd349624 jbd2: correctly compare tids with tid_geq function in jbd2_fc_begin_commit [1 file, +1/-1]
e3a9fc15 mm: krealloc: consider spare memory for __GFP_ZERO [1 file, +7/-0]
bf0b3b35 exfat: fix memory leak in exfat_load_bitmap() [1 file, +5/-5]
af3122f5 gso: fix udp gso fraglist segmentation after pull from frag_list [1 file, +20/-2]
0f41f383 cpufreq: Avoid a bad reference count on CPU node [1 file, +1/-5]
830c03e5 Bluetooth: hci_event: Align BR/EDR JUST_WORKS paring with LE [1 file, +5/-8]
e676e4ea mac802154: Fix potential RCU dereference issue in mac802154_scan_worker [1 file, +3/-1]
a8023f8b close_range(): fix the logics in descriptor table trimming [3 files, +52/-83]
4a2be5a7 i2c: create debugfs entry per adapter [2 files, +13/-0]
316be491 i2c: core: Lock address during client device instantiation [2 files, +31/-0]
9a3e9aab arm64: cputype: Add Neoverse-N3 definitions [1 file, +2/-0]
24f7989e io_uring/net: harden multishot termination case for recv [1 file, +3/-1]
5b981d83 uprobes: fix kernel info leak via "[uprobes]" vma [1 file, +1/-1]
f941d779 build-id: require program headers to be right after ELF header [1 file, +14/-0]
c83a80d8 lib/buildid: harden build ID parsing logic [1 file, +44/-32]
GKI (arm64) relevant 79 out of 385 changes, affecting 92 files +798/-486
Change-Id: I44c3665935ccd89562de4f0c904061025569e953
Signed-off-by: 
Greg Kroah-Hartman <gregkh@google.com>
Loading
Please sign in to comment