Merge tag 'android12-5.10.243_r00' into android12-5.10
This merges the android12-5.10.243_r00 tag into the android12-5.10 branch, catching it up with the latest LTS releases. It contains the following commits: * 45ade170 Revert "e1000e: fix heap overflow in e1000_set_eeprom" * be8ad780 Revert "wifi: cw1200: cap SSID length in cw1200_do_join()" * f2b7aa09 Revert "wifi: libertas: cap SSID len in lbs_associate()" * e918b8b0 Merge 5.10.243 into android12-5.10-lts |\ | * 9d9b1219 Linux 5.10.243 | * dab666be dmaengine: mediatek: Fix a flag reuse error in mtk_cqdma_tx_status() | * 64ddb14f cifs: fix integer overflow in match_server() | * 071fdf70 clk: qcom: gdsc: Set retain_ff before moving to HW CTRL | * 8e206c64 spi: spi-fsl-lpspi: Reset FIFO and disable module on transfer abort | * 817efa7b spi: spi-fsl-lpspi: Set correct chip-select polarity bit | * 04c112dd spi: spi-fsl-lpspi: Fix transmissions when using CONT | * ae184024 pcmcia: Add error handling for add_interval() in do_validate_mem() | * e911f0dc ALSA: hda/hdmi: Add pin fix for another HP EliteDesk 800 G4 model | * 4c01ca5b net: phy: microchip: force IRQ polling mode for lan88xx | * 308bccbb net: phy: microchip: remove the use of .ack_interrupt() | * bb2c31b8 net: phy: microchip: implement generic .handle_interrupt() callback | * eabc92d1 randstruct: gcc-plugin: Fix attribute addition | * a5c6c343 randstruct: gcc-plugin: Remove bogus void member | * 8a7c4705 arm64: dts: marvell: uDPU: define pinctrl state for alarm LEDs | * 20aa0594 vmxnet3: update MTU after device quiesce | * 48f5e27c net: dsa: microchip: linearize skb for tail-tagging switches | * b21c1ab6 net: dsa: microchip: update tag_ksz masks for KSZ9477 family | * 2bcc31d6 dmaengine: mediatek: Fix a possible deadlock error in mtk_cqdma_tx_status() | * d43a31ae ALSA: hda/realtek - Add new HP ZBook laptop with micmute led fixup | * b23bb1c1 gpio: pca953x: fix IRQ storm on system wake up | * 957e8be1 iio: light: opt3001: fix deadlock due to concurrent flag access | * 119b2576 iio: chemical: pms7003: use aligned_s64 for timestamp | * 5defea81 KVM: x86: Take irqfds.lock when adding/deleting IRQ bypass producer | * 2075ccfc cpufreq/sched: Explicitly synchronize limits_changed flag handling | * f6601290 mm/slub: avoid accessing metadata when pointer is invalid in object_err() | * cee956ab mm/khugepaged: fix ->anon_vma race | * ce8829d3 e1000e: fix heap overflow in e1000_set_eeprom | * 1e36c6c8 batman-adv: fix OOB read/write in network-coding decode | * baa39f6a scsi: lpfc: Fix buffer free/clear order in deferred receive path | * 4c020f40 drm/amdgpu: drop hw access in non-DC audio fini | * 05daef04 wifi: mwifiex: Initialize the chan_stats array to zero | * 5ff2826c pcmcia: Fix a NULL pointer dereference in __iodyn_find_io_region() | * 100bb38c ALSA: usb-audio: Add mute TLV for playback volumes on some devices | * 87a35a36 ppp: fix memory leak in pad_compress_skb | * 3d295ffa net: atm: fix memory leak in atm_register_sysfs when device_register fail | * 5b079be1 ax25: properly unshare skbs in ax25_kiss_rcv() | * 5d108583 ipv4: Fix NULL vs error pointer check in inet_blackhole_dev_init() | * 044a47be net: thunder_bgx: decrement cleanup index before use | * caabe2ed net: thunder_bgx: add a missing of_node_put | * 30fc1555 wifi: libertas: cap SSID len in lbs_associate() | * a45926a8 wifi: cw1200: cap SSID length in cw1200_do_join() | * 64c916ef net: ethernet: mtk_eth_soc: fix tx vlan tag for llc packets | * 3c6fb929 i40e: Fix potential invalid access when MAC list is empty | * 33416e5c icmp: fix icmp_ndo_send address translation for reply direction | * 17c01212 mISDN: Fix memory leak in dsp_hwec_enable() | * 3a1de6d5 xirc2ps_cs: fix register access when enabling FullDuplex | * 83e1d989 Bluetooth: Fix use-after-free in l2cap_sock_cleanup_listen() | * 2c9c23eb netfilter: conntrack: helper: Replace -EEXIST by -EBUSY | * a97a9791 wifi: cfg80211: fix use-after-free in cmp_bss() | * 6d636608 arm64: dts: rockchip: Add vcc-supply to SPI flash on rk3399-pinebook-pro | * f2661886 tee: fix NULL pointer dereference in tee_shm_put | * 9f61018f drm/amd/display: Don't warn when missing DCE encoder caps * | 1700457f Merge 5.10.242 into android12-5.10-lts |\| | * c30b4019 Linux 5.10.242 | * 157ddfb0 xfs: do not propagate ENODATA disk errors into xattr code | * 47de1eb7 ASoC: Intel: sof_da7219_mx98360a: fail to initialize soundcard | * 7fb0e733 ASoC: Intel: sof_da7219_max98373: shrink platform_id below 20 characters | * ef3343af ASoC: Intel: glk_rt5682_max98357a: shrink platform_id below 20 characters | * d2d9ca50 ASoC: Intel: sof_rt5682: shrink platform_id names below 20 characters | * fbf28428 ASoC: Intel: bxt_da7219_max98357a: shrink platform_id below 20 characters | * fcd4f044 Revert "drm/dp: Change AUX DPCD probe address from DPCD_REV to LANE0_1_STATUS" | * 607581c2 HID: mcp2221: Handle reads greater than 60 bytes | * c8c7818c HID: mcp2221: Don't set bus speed on every transfer | * adba5035 drm/nouveau/disp: Always accept linear modifier | * 0bab4c67 net: usb: qmi_wwan: add Telit Cinterion LE910C4-WWX new compositions | * be100617 dma/pool: Ensure DMA_DIRECT_REMAP allocations are decrypted | * 40a0ee41 Revert "drm/amdgpu: fix incorrect vm flags to map bo" | * 019c34ca HID: hid-ntrig: fix unable to handle page fault in ntrig_report_version() | * 99d73f18 HID: wacom: Add a new Art Pen 2 | * 7170122e HID: asus: fix UAF via HID_CLAIMED_INPUT validation | * 31a0ad2f KVM: x86: use array_index_nospec with indices that come from guest | * 79439901 efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare | * 9546934c sctp: initialize more fields in sctp_v6_from_sk() | * 2c9b1273 net: stmmac: xgmac: Do not enable RX FIFO Overflow interrupts | * 9fae5fde net/mlx5e: Set local Xoff after FW update | * f92ff7b4 net/mlx5e: Update and set Xon/Xoff upon port speed set | * 0e07fb3b net/mlx5e: Update and set Xon/Xoff upon MTU set | * b2516e8a net: dlink: fix multicast stats being counted incorrectly | * 0a6a6d4f atm: atmtcp: Prevent arbitrary write in atmtcp_recv_control(). | * 1ef115e8 Bluetooth: hci_event: Detect if HCI_EV_NUM_COMP_PKTS is unbalanced | * 5dea003c powerpc/kvm: Fix ifdef to remove build warning | * 1907d844 net: ipv4: fix regression in local-broadcast routes | * 6771eea5 vhost/net: Protect ubufs with rcu read lock in vhost_net_ubuf_put() | * 0ff42a32 NFS: Fix a race when updating an existing write | * a4419861 nfs: fold nfs_page_group_lock_subrequests into nfs_lock_and_join_requests | * 62f12cde x86/cpu/hygon: Add missing resctrl_cpu_detect() in bsp_init helper | * bbee61dc scsi: core: sysfs: Correct sysfs attributes access rights | * 5ab0ec20 ftrace: Fix potential warning in trace_printk_seq during ftrace_dump | * c72a75be pinctrl: STMFX: add missing HAS_IOMEM dependency * | 6aad20bc ANDROID: GKI: fix up crc issue caused by new .h inclusion * | 4eaaec29 Revert "i3c: add missing include to internal header" * | bb5d4e05 Revert "PCI/ACPI: Fix runtime PM ref imbalance on Hot-Plug Capable ports" * | d8f5ff93 Revert "media: venus: vdec: Clamp param smaller than 1fps and bigger than 240." * | f48ff3ec Revert "media: dvb-frontends: w7090p: fix null-ptr-deref in w7090p_tuner_write_serpar and w7090p_tuner_read_serpar" * | eabc85af Merge 5.10.241 into android12-5.10-lts |\| | * c6a3b81c Linux 5.10.241 | * 6ca3f8a9 alloc_fdtable(): change calling conventions. | * 7b8b503c netfilter: nf_reject: don't leak dst refcount for loopback packets | * 97540d9e netfilter: nft_reject_inet: allow to use reject from inet ingress | * 4bbe8536 netfilter: nft_reject: unify reject init and dump into nft_reject | * 27d0ed38 s390/hypfs: Enable limited access during lockdown | * 5ef60326 s390/hypfs: Avoid unnecessary ioctl registration in debugfs | * 11fb6cff ALSA: usb-audio: Use correct sub-type for UAC3 feature unit validation | * 0e156e9d net/sched: Remove unnecessary WARNING condition for empty child qdisc in htb_activate | * de04ddd2 net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit | * 6a471e59 ixgbe: xsk: resolve the negative overflow of budget in ixgbe_xmit_zc | * 7ad81508 ipv6: sr: validate HMAC algorithm ID in seg6_hmac_info_add | * 3ae38a8a ALSA: usb-audio: Fix size validation in convert_chmap_v3() | * 7975ee33 mlxsw: spectrum: Forward packets with an IPv4 link-local source IP | * a732502b iommu/amd: Avoid stack buffer overflow from kernel cmdline | * ad8a9d38 scsi: qla4xxx: Prevent a potential error pointer dereference | * 92a0fc3c RDMA/bnxt_re: Fix to initialize the PBL array | * 94881731 cgroup/cpuset: Use static_branch_enable_cpuslocked() on cpusets_insane_config_key | * c65b1bd0 mm/page_alloc: detect allocation forbidden by cpuset and bail out early | * fd441fd9 iio: light: as73211: Ensure buffer holes are zeroed | * b842ef39 tracing: Limit access to parser->buffer when trace_get_user failed | * 78c8e107 tracing: Remove unneeded goto out logic | * 2eee9807 iio: imu: inv_icm42600: change invalid data error to -EBUSY | * 1f39c4fb usb: xhci: Fix slot_id resource race conflict | * 27b32b2c compiler: remove __ADDRESSABLE_ASM{_STR,}() again | * c010b7a9 net: usbnet: Fix the wrong netif_carrier_on() call | * 275116d5 selftests: mptcp: pm: check flush doesn't reset limits | * 389891ac gpio: rcar: Use raw_spinlock to protect register access | * 8731a0b1 usb: dwc3: core: remove lock of otg mode during gadget suspend/resume to avoid deadlock | * f2bfd0a2 usb: dwc3: Remove DWC3 locking during gadget suspend/resume | * 80506528 dm rq: don't queue request to blk-mq during DM suspend | * f6294371 dm: rearrange core declarations for extended use from dm-zone.c | * 261bbd90 uio_hv_generic: Fix another memory leak in error handling paths | * a532533f media: venus: vdec: Clamp param smaller than 1fps and bigger than 240. | * a6506543 f2fs: fix to avoid out-of-boundary access in dnode page | * d2e30bdc media: qcom: camss: cleanup media device allocated resource on error path | * 89d17a2d drm/dp: Change AUX DPCD probe address from DPCD_REV to LANE0_1_STATUS | * f4701828 drm/amd/display: Don't overclock DCE 6 by 15% | * 88cf63c2 media: venus: protect against spurious interrupts during probe | * 54601b83 media: venus: Add support for SSR trigger using fault injection | * e2624d8e media: venus: hfi: explicitly release IRQ during teardown | * 10ec31df media: venus: don't de-reference NULL pointers at IRQ time | * 4ad09285 media: v4l2-ctrls: Don't reset handler's error in v4l2_ctrl_handler_free() | * 7b4c52fd media: v4l2-ctrls: always copy the controls on completion | * 2bb4d0f8 wifi: ath11k: fix dest ring-buffer corruption when ring is full | * 5cd4c42f asm-generic: Add memory barrier dma_mb() | * 9c301923 locking/barriers, kcsan: Support generic instrumentation | * 9c57343c pwm: mediatek: Fix duty and period setting | * 24c9aed3 pwm: mediatek: Handle hardware enable and clock enable separately | * ee3d05d2 pwm: mediatek: Implement .apply() callback | * 52da3b69 platform/chrome: cros_ec: Unregister notifier in cros_ec_unregister() | * 5b5a17df platform/chrome: cros_ec: remove unneeded label and if-condition | * 3d3f5d3a platform/chrome: cros_ec: Use per-device lockdep key | * 45732bbd platform/chrome: cros_ec: Make cros_ec_unregister() return void | * 85ec0b4b ext4: fix hole length calculation overflow in non-extent inodes | * 3e0db489 minmax: add umin(a, b) and umax(a, b) | * fdee7a0a ACPI: processor: idle: Check acpi_fetch_acpi_dev() return value | * 1355258b btrfs: populate otime when logging an inode item | * c757f01d usb: musb: omap2430: fix device leak at unbind | * e1720eb3 soc: qcom: mdt_loader: Ensure we don't read past the ELF header | * a375a427 iio: adc: ad_sigma_delta: change to buffer predisable | * 01510a9e scsi: ufs: exynos: Fix programming of HCI_UTRL_NEXUS_TYPE | * a9dddcd0 ata: Fix SATA_MOBILE_LPM_POLICY description in Kconfig | * 3ee9a8c2 mm/ptdump: take the memory hotplug lock inside ptdump_walk_pgd() | * bdfddcde net/sched: ets: use old 'nbands' while purging unused classes | * 36b3872a net_sched: sch_ets: implement lockless ets_dump() | * c2ab3d67 net/sched: sch_ets: properly init all active DRR list handles | * 73fcb101 NFS: Fix the setting of capabilities when automounting a new filesystem | * 87ef3e7a NFS: Create an nfs4_server_set_init_caps() function | * cc55cbca NFSv4: Fix nfs4_bitmap_copy_adjust() | * 7378c7ad NFS: Don't set NFS_INO_REVAL_PAGECACHE in the inode cache validity | * 0c4398f2 scsi: pm80xx: Fix memory leak during rmmod | * 04c1af68 scsi: lpfc: Fix link down processing to address NULL pointer dereference | * a81e72d4 RDMA/rxe: Return CQE error if invalid lkey was supplied | * 785cc093 drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume | * 90eb79c4 dma-buf: insert memory barrier before updating num_fences | * ef01acda selftests/memfd: add test for mapping write-sealed memfd read-only | * b7cbdcf3 mm: reinstate ability to map write-sealed memfd mappings read-only | * c002f70d mm: update memfd seal write check to include F_SEAL_WRITE | * 609a43e1 mm: drop the assumption that VM_SHARED always implies writable | * 83a0b128 dpaa2-eth: Fix device reference count leak in MAC endpoint handling | * 5f5d326a dpaa2-eth: retry the probe when the MAC is not yet discovered on the bus | * b8f44f8c dpaa2-mac: export MAC counters even when in TYPE_FIXED | * b66c9697 dpaa2-mac: split up initializing the MAC object from connecting to it | * e211fc88 ARM: 9448/1: Use an absolute path to unified.h in KBUILD_AFLAGS | * f8fbbd06 btrfs: fix deadlock when cloning inline extents and using qgroups | * db60edbf block: don't call rq_qos_ops->done_bio if the bio isn't tracked | * f1c96d80 ptp: Fix possible memory leak in ptp_clock_register() | * c6825758 comedi: Fail COMEDI_INSNLIST ioctl if n_insns is too large | * fe092604 cdc-acm: fix race between initial clearing halt and open | * 70bc2b56 USB: cdc-acm: do not log successful probe on later errors | * 3ca41ab5 hv_netvsc: Fix panic during namespace deletion with VF | * f2e2c2e2 block: Make REQ_OP_ZONE_FINISH a write operation | * 79e56147 PCI/ACPI: Fix runtime PM ref imbalance on Hot-Plug Capable ports | * bbc3a5d0 usb: typec: fusb302: cache PD RX state | * fdcd6a03 net: usbnet: Avoid potential RCU stall on LINK_CHANGE event | * ac763090 ALSA: scarlett2: Add retry on -EPROTO from scarlett2_usb_tx() | * 415338b6 x86/fpu: Delay instruction pointer fixup until after warning | * 5fc46564 mm/zsmalloc: do not pass __GFP_MOVABLE if CONFIG_COMPACTION=n | * f0fc5036 mm/zsmalloc.c: convert to use kmem_cache_zalloc in cache_alloc_zspage() | * 298dc8b8 drm/sched: Remove optimization that causes hang when killing dependent jobs | * 435462f8 ice: Fix a null pointer dereference in ice_copy_and_init_pkg() | * aadee7c4 pmdomain: governor: Consider CPU latency tolerance from pm_domain_cpu_gov | * db456324 tracing: Add down_write(trace_event_sem) when adding trace event | * 5d047b12 smb: client: fix use-after-free in crypt_message when using async crypto | * 2b3ffb56 usb: hub: Don't try to recover devices lost during warm reset. | * 8b3b4c75 usb: hub: avoid warm port reset during USB3 disconnect | * 5960ce00 x86/mce/amd: Add default names for MCA banks and blocks | * 6854966d iio: hid-sensor-prox: Fix incorrect OFFSET calculation | * ecff54aa f2fs: fix to do sanity check on ino and xnid | * 244ddfda kbuild: userprogs: use correct linker when mixing clang and GNU ld | * cf3ad6aa usb: dwc3: Ignore late xferNotReady event to prevent halt timeout | * 599a26ff USB: storage: Ignore driver CD mode for Realtek multi-mode Wi-Fi dongles | * b5d507ef usb: storage: realtek_cr: Use correct byte order for bcs->Residue | * 035c8bc9 USB: storage: Add unusual-devs entry for Novatek NTK96550-based camera | * ded38108 usb: renesas-xhci: Fix External ROM access timeouts | * bd801b28 usb: quirks: Add DELAY_INIT quick for another SanDisk 3.2Gen1 Flash Drive | * 329b8c67 most: core: Drop device reference after usage in get_channel() | * b3a84909 iio: proximity: isl29501: fix buffered read on big-endian systems | * 6f9b83b1 iio: pressure: bmp280: Use IS_ERR() in bmp280_common_probe() | * c4cd9381 ftrace: Also allocate and copy hash for reading of filter files | * 56a00082 fpga: zynq_fpga: Fix the wrong usage of dma_map_sgtable() | * c41a18d0 use uniform permission checks for all mount propagation changes | * 75d40192 move_mount: allow to add a mount into an existing group | * 3169edb8 fs/buffer: fix use-after-free when call bh_read() helper | * c60d6b76 selftests: mptcp: connect: also cover alt modes | * 6c5179f8 drm/amd/display: Fill display clock and vblank time in dce110_fill_display_configs | * 837b6ea4 drm/amd/display: Find first CRTC and its line time in dce110_fill_display_configs | * dd97e728 drm/amd/display: Fix DP audio DTO1 clock source on DCE 6. | * 66ba142a drm/amd/display: Fix fractional fb divider in set_pixel_clock_v3 | * f0b3355e ALSA: hda/realtek: Add support for HP EliteBook x360 830 G6 and EliteBook 830 G6 | * 9bdb2e7f squashfs: fix memory leak in squashfs_fill_super | * 9daef862 mmc: sdhci-pci-gli: GL9763e: Rename the gli_set_gl9763e() for consistency | * 4dedae72 memstick: Fix deadlock by moving removing flag earlier | * a9945f7c sch_htb: make htb_deactivate() idempotent | * cc71a757 codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() | * 6836202b sch_qfq: make qfq_qlen_notify() idempotent | * 72c61ffb sch_hfsc: make hfsc_qlen_notify() idempotent | * c5768701 sch_drr: make drr_qlen_notify() idempotent | * 32ae12ce sch_htb: make htb_qlen_notify() idempotent | * 8d9bc4a3 net, hsr: reject HSR frame if skb can't hold tag | * 20e6f7dd drm/amd: Restore cached power limit during resume | * f5b7a943 media: venus: Add a check for packet size after reading from shared memory | * 87b57ecd media: ov2659: Fix memory leaks in ov2659_probe() | * 6aaef1a7 media: rainshadow-cec: fix TOCTOU race condition in rain_interrupt() | * ee7bade8 media: usbtv: Lock resolution while streaming | * b50fde17 media: imx: fix a potential memory leak in imx_media_csc_scaler_device_init() | * a4526104 media: hi556: correct the test pattern configuration | * 8f11e57e media: gspca: Add bounds checking to firmware parser | * d545ccaa soc/tegra: pmc: Ensure power-domains are in a known state | * f7ee8fd6 jbd2: prevent softlockup in jbd2_log_do_checkpoint() | * 4e4cbf21 PCI: endpoint: Fix configfs group removal on driver teardown | * d5aecddc PCI: endpoint: Fix configfs group list head handling | * 980f52e4 mtd: rawnand: fsmc: Add missing check after DMA map | * 01fa91dd hwmon: (gsc-hwmon) fix fan pwm setpoint show functions | * 0b7a272a pwm: imx-tpm: Reset counter if CMOD is 0 | * dfae8045 wifi: ath11k: fix source ring-buffer corruption | * 28df1f17 wifi: brcmsmac: Remove const from tbl_ptr parameter in wlc_lcnphy_common_read_table() | * fa0c6996 zynq_fpga: use sgtable-based scatterlist wrappers | * 0002fcf4 ata: libata-scsi: Fix ata_to_sense_error() status handling | * 48ac024a ext4: fix reserved gdt blocks handling in fsmap | * a71079f1 ext4: fix fsmap end of range reporting with bigalloc | * 59bf667c ext4: check fast symlink for ea_inode correctly | * 87a92aea Revert "vgacon: Add check for vc_origin address range in vgacon_scroll()" | * 87e491d6 lib/crypto: mips/chacha: Fix clang build and remove unneeded byteswap | * e603142e vt: defkeymap: Map keycodes above 127 to K_HOLE | * f987b9d5 vt: keyboard: Don't process Unicode characters in K_OFF mode | * f760503c bus: mhi: host: Fix endianness of BHI vector table | * e6d45ce8 usb: dwc3: meson-g12a: fix device leaks at unbind | * 8b39f139 usb: gadget: udc: renesas_usb3: fix device leak at unbind | * c3dc2769 usb: atm: cxacru: Merge cxacru_upload_firmware() into cxacru_heavy_init() | * 229a175f m68k: Fix lost column on framebuffer debug console | * eb2df34b cpufreq: armada-8k: Fix off by one in armada_8k_cpufreq_free_table() | * b8ca8e3f serial: 8250: fix panic due to PSLVERR | * 2a0fc8fc media: uvcvideo: Do not mark valid metadata as invalid | * 1e269581 media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format() | * 4b0151e1 mm/kmemleak: avoid deadlock by moving pr_warn() outside kmemleak_lock | * 1ef72a7f mm/kmemleak: avoid soft lockup in __kmemleak_do_cleanup() | * 2853ad83 parisc: Makefile: fix a typo in palo.conf | * a82b0f7b btrfs: fix log tree replay failure due to file with 0 links and extents | * 4995a13d thunderbolt: Fix copy+paste error in match_service_id() | * cd428612 comedi: fix race between polling and detaching | * 7a3f8d1a usb: typec: ucsi: Update power_supply on power role change | * 94191de3 misc: rtsx: usb: Ensure mmc child device is active when card is present | * 5c3097ed usb: core: config: Prevent OOB read in SS endpoint companion parsing | * 7d90a9d2 drm/amdgpu: fix incorrect vm flags to map bo | * b7fd68b1 ASoC: fsl_sai: replace regmap_write with regmap_update_bits | * 53b62474 ASoC: soc-dai.c: add missing flag check at snd_soc_pcm_dai_probe() | * 8797e9a8 scsi: lpfc: Remove redundant assignment to avoid memory leak | * 3128167d rtc: ds1307: remove clear of oscillator stop flag (OSF) in probe | * 2896f101 pNFS: Fix uninited ptr deref in block/scsi layout | * 01b690d5 pNFS: Handle RPC size limit for layoutcommits | * dd7cb493 pNFS: Fix disk addr range check in block/scsi layout | * 7a2105bb pNFS: Fix stripe mapping in block/scsi layout | * 41875191 block: avoid possible overflow for chunk_sectors check in blk_stack_limits() | * a4f9c504 net: phy: smsc: add proper reset flags for LAN8710A | * 76011e25 ipmi: Fix strcpy source and destination the same | * 37205ad7 kconfig: lxdialog: fix 'space' to (de)select options | * 116a981e kconfig: gconf: fix potential memory leak in renderer_edited() | * 327877f0 kconfig: gconf: avoid hardcoding model2 in on_treeview2_cursor_changed() | * 6f695884 ipmi: Use dev_warn_ratelimited() for incorrect message warnings | * d3db3607 scsi: aacraid: Stop using PCI_IRQ_AFFINITY | * 4de95d04 scsi: Fix sas_user_scan() to handle wildcard and multi-channel scans | * ee777917 kconfig: nconf: Ensure null termination where strncpy is used | * 90851a29 kconfig: lxdialog: replace strcpy() with strncpy() in inputbox.c | * 24b4af05 i2c: Force DLL0945 touchpad i2c freq to 100khz | * 4aca828f dm-mpath: don't print the "loaded" message if registering fails | * 264d76cd i3c: don't fail if GETHDRCAP is unsupported | * d79d05c4 rtc: ds1307: handle oscillator stop flag (OSF) for ds1341 | * 6e8e3fb5 i3c: add missing include to internal header | * 511ba402 md: dm-zoned-target: Initialize return variable r to avoid uninitialized use | * 3eaf16ff media: uvcvideo: Fix bandwidth issue for Alcor camera | * b3d77a3f media: dvb-frontends: w7090p: fix null-ptr-deref in w7090p_tuner_write_serpar and w7090p_tuner_read_serpar | * ce8b7c71 media: dvb-frontends: dib7090p: fix null-ptr-deref in dib7090p_rw_on_apb() | * 3a90b304 media: usb: hdpvr: disable zero-length read messages | * e02a4eff media: tc358743: Increase FIFO trigger level to 374 | * 10ad86fd media: tc358743: Return an appropriate colorspace from tc358743_set_fmt | * 28019480 media: tc358743: Check I2C succeeded during probe | * ac018e39 pinctrl: stm32: Manage irq affinity settings | * 3b4ec01f scsi: mpt3sas: Correctly handle ATA device errors | * 74bdf54a scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure | * f07aa00c RDMA/core: reduce stack using in nldev_stat_get_doit() | * 1a7cf828 RDMA: hfi1: fix possible divide-by-zero in find_hw_thread_mask() | * 10f818b8 leds: leds-lp50xx: Handle reg to get correct multi_index | * e78033e5 MIPS: Don't crash in stack_top() for tasks without ABI or vDSO | * a4f19920 jfs: upper bound check of tree index in dbAllocAG | * 6bc86f1d jfs: Regular file corruption check | * 5845b926 jfs: truncate good inode pages when hard link is 0 | * 9337c2af scsi: bfa: Double-free fix | * 2a428e38 MIPS: vpe-mt: add missing prototypes for vpe_{alloc,start,stop,free} | * a7366dc7 watchdog: dw_wdt: Fix default timeout | * 90419131 fs/orangefs: use snprintf() instead of sprintf() | * 9ea6d961 scsi: libiscsi: Initialize iscsi_conn->dd_data only if memory is allocated | * 1199a639 ext4: do not BUG when INLINE_DATA_FL lacks system.data xattr | * a4dc000d cifs: Fix calling CIFSFindFirst() for root path without msearch | * 8f9fa9b4 vhost: fail early when __vhost_add_used() fails | * 99170154 net: dsa: b53: fix IP_MULTICAST_CTRL on BCM5325 | * 281c1cff uapi: in6: restore visibility of most IPv6 socket options | * 495948bd drm/ttm: Should to return the evict error | * 94b2754f net: ncsi: Fix buffer overflow in fetching version id | * 16f9fe35 wifi: rtlwifi: fix possible skb memory leak in _rtl_pci_init_one_rxdesc() | * 2d1a8784 net: dsa: b53: prevent SWITCH_CTRL access on BCM5325 | * 515c23c0 net: dsa: b53: prevent GMII_PORT_OVERRIDE_CTRL access on BCM5325 | * 2bd780d1 net: dsa: b53: fix b53_imp_vlan_setup for BCM5325 | * 5d1710af gve: Return error for unknown admin queue command | * 21be225b net: vlan: Replace BUG() with WARN_ON_ONCE() in vlan_dev_* stubs | * 5631f829 wifi: iwlegacy: Check rate_idx range after addition | * 467e5c00 netmem: fix skb_frag_address_safe with unreadable skbs | * cca5b9c5 wifi: rtlwifi: fix possible skb memory leak in `_rtl_pci_rx_interrupt()`. | * 991ff7ef drm/amd/display: Fix 'failed to blank crtc!' | * b16d4610 wifi: iwlwifi: fw: Fix possible memory leak in iwl_fw_dbg_collect | * 996e3156 wifi: iwlwifi: dvm: fix potential overflow in rs_fill_link_cmd() | * e35b9eea drm/amd/display: Separate set_gsl from set_gsl_source_select | * 14f44b88 net: fec: allow disable coalescing | * 16100157 (powerpc/512) Fix possible `dma_unmap_single()` on uninitialized pointer | * 8ac5716a s390/stp: Remove udelay from stp_sync_clock() | * f008d5a9 wifi: iwlwifi: mvm: fix scan request validation | * cc3031e6 net: thunderx: Fix format-truncation warning in bgx_acpi_match_id() | * c374d798 net: ipv4: fix incorrect MTU in broadcast routes | * 0bb4319e wifi: cfg80211: Fix interface type validation | * f937759c rcu: Protect ->defer_qs_iw_pending from data race | * bb4ae722 net: ag71xx: Add missing check after DMA map | * 8ca79651 et131x: Add missing check after DMA map | * 71c3a735 be2net: Use correct byte order and format string for TCP seq and ack_seq | * 13fcdb9c s390/time: Use monotonic clock in get_cycles() | * 64082d48 wifi: cfg80211: reject HTC bit for management frames | * 54e8887b ktest.pl: Prevent recursion of default variable options | * 0397037b xen/netfront: Fix TX response spurious interrupts | * 066e2ab3 ASoC: codecs: rt5640: Retry DEVICE_ID verification | * c90222e5 iio: adc: ad7768-1: Ensure SYNC_IN pulse minimum timing requirement | * 8ed372c3 ALSA: usb-audio: Avoid precedence issues in mixer_quirks macros | * 9ce6e14a ALSA: pcm: Rewrite recalculate_boundary() to avoid costly loop | * fb8116c3 ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control | * 85b3b396 platform/chrome: cros_ec_typec: Defer probe on missing EC parent | * 164baecd platform/x86: thinkpad_acpi: Handle KCOV __init vs inline mismatches | * 52e257c1 pm: cpupower: Fix the snapshot-order of tsc,mperf, clock in mperf_stop() | * 55ecccb1 usb: core: usb_submit_urb: downgrade type check | * 8a6d408c usb: typec: intel_pmc_mux: Defer probe if SCU IPC isn't present | * 8b465bed ASoC: core: Check for rtd == NULL in snd_soc_remove_pcm_runtime() | * 18e3d602 ALSA: intel8x0: Fix incorrect codec index usage in mixer for ICH4 | * f9409310 ASoC: hdac_hdmi: Rate limit logging on connection and disconnection | * d6dabb66 x86/bugs: Avoid warning when overriding return thunk | * db1cba27 mmc: rtsx_usb_sdmmc: Fix error-path in sd_set_power_mode() | * a125e79e reset: brcmstb: Enable reset drivers for ARCH_BCM2835 | * 089acbf0 ACPI: APEI: GHES: add TAINT_MACHINE_CHECK on GHES panic path | * a93a8dfd mmc: sdhci-msm: Ensure SD card power isn't ON when card removed | * 24ea07bc ACPI: processor: fix acpi_object initialization | * 4ba02a48 PM: sleep: console: Fix the black screen issue | * bc98b81e thermal: sysfs: Return ENODATA instead of EAGAIN for reads | * 952ea2c4 PM: runtime: Clear power.needs_force_resume in pm_runtime_reinit() | * 6e94e448 selftests: tracing: Use mutex_unlock for testing glob filter | * 75a3bdfe ARM: tegra: Use I/O memcpy to write to IRAM | * 08571a4d gpio: tps65912: check the return value of regmap_update_bits() | * f3803a33 ASoC: soc-dapm: set bias_level if snd_soc_dapm_set_bias_level() was successed | * 9c83bf68 PM / devfreq: governor: Replace sscanf() with kstrtoul() in set_freq_store() | * 888a453c ARM: rockchip: fix kernel hang during smp initialization | * 9b02fdb0 cpufreq: Exit governor when failed to start old governor | * f8c816e3 gpio: wcd934x: check the return value of regmap_update_bits() | * 1e281d37 usb: xhci: Avoid showing errors during surprise removal | * d8fed523 usb: xhci: Set avg_trb_len = 8 for EP0 during Address Device Command | * a163d42a usb: xhci: Avoid showing warnings for dying controller | * 0a40f5ef usb: typec: ucsi: psy: Set current max to 100mA for BC 1.2 and Default | * 0e1b2af0 selftests/futex: Define SYS_futex on 32-bit architectures with 64-bit time_t | * 9415dd68 cpufreq: CPPC: Mark driver with NEED_UPDATE_LIMITS flag | * 00993cf6 usb: xhci: print xhci->xhc_state when queue_command failed | * d6ceeffb securityfs: don't pin dentries twice, once is enough... | * 45124d4e ata: libata-sata: Disallow changing LPM state if not supported | * 00b39419 better lockdep annotations for simple_recursive_removal() | * d8055f35 hfs: fix not erasing deleted b-tree node issue | * 810cd546 drbd: add missing kref_get in handle_write_conflicts | * 789a9cb1 udf: Verify partition map count | * 83dad63d arm64: Handle KCOV __init vs inline mismatches | * 9046566f hfsplus: don't use BUG_ON() in hfsplus_create_attributes_file() | * 76a4c663 hfsplus: fix slab-out-of-bounds read in hfsplus_uni2asc() | * ffee8a7b hfsplus: fix slab-out-of-bounds in hfsplus_bnode_read() | * 67ecc81f hfs: fix slab-out-of-bounds in hfs_bnode_read() | * 19a85787 cpuidle: governors: menu: Avoid using invalid recent intervals data | * d0a65363 intel_idle: Allow loading ACPI tables for any family | * 03d0cc68 sctp: linearize cloned gso packets in sctp_rcv | * 962518c6 netfilter: ctnetlink: fix refcount leak on table dump | * ceaca866 udp: also consider secpath when evaluating ipsec use for checksumming | * fc36403e ACPI: processor: perflib: Move problematic pr->performance check | * 608327a2 ACPI: processor: perflib: Fix initial _PPC limit application | * 637a7ac7 Documentation: ACPI: Fix parent device references | * f95638a8 fs: Prevent file descriptor table allocations exceeding INT_MAX | * d86d02c7 sunvdc: Balance device refcount in vdc_port_mpgroup_check | * 6af48f61 NFSD: detect mismatch of file handle and delegation stateid in OPEN op | * d35ac850 nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() | * 586d36ba net: dpaa: fix device leak when querying time stamp info | * af392b14 net: gianfar: fix device leak when querying time stamp info | * 6bee383f netlink: avoid infinite retry looping in netlink_unicast() | * 786571b1 ALSA: usb-audio: Validate UAC3 cluster segment descriptors | * ebc9e06b ALSA: usb-audio: Validate UAC3 power domain descriptors, too | * 27df8ad8 io_uring: don't use int for ABI | * 2db29235 usb: gadget : fix use-after-free in composite_dev_cleanup() | * 8613ddde mm/hmm: move pmd_to_hmm_pfn_flags() to the respective #ifdeffery | * 2051013d MIPS: mm: tlb-r4k: Uniquify TLB entries on init | * ad5f7b8c USB: serial: option: add Foxconn T99W709 | * d1a5b196 vsock: Do not allow binding to VMADDR_PORT_ANY | * 7da733f1 net/packet: fix a race in packet_set_ring() and packet_notifier() | * d52451a9 perf/core: Prevent VMA split of buffer mappings | * 9b90a48c perf/core: Exit early on perf_mmap() fail | * 1c4e0e9e perf/core: Don't leak AUX buffer refcount on allocation failure | * 86ebc71b pptp: fix pptp_xmit() error path | * 90644a88 smb: client: let recv_done() cleanup before notifying the callers. | * 1abcd287 ALSA: hda/ca0132: Fix missing error handling in ca0132_alt_select_out() | * 975e73b9 benet: fix BUG when creating VFs | * df6ad849 net: drop UFO packets in udp_rcv_segment() | * 3f638e0b ipv6: reject malicious packets in ipv6_gso_segment() | * 26672f16 pptp: ensure minimal skb length in pptp_xmit() | * dce33756 phy: mscc: Fix parsing of unicast frames | * 32a8746b netpoll: prevent hanging NAPI when netcons gets enabled | * 5838b3ab NFS: Fixup allocation flags for nfsiod's __GFP_NORETRY | * 1e9a17bc XArray: Add calls to might_alloc() | * 520fe579 mm: extract might_alloc() debug check | * 4ad4df53 NFSv4.2: another fix for listxattr | * cb09afa0 NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() | * 3b3d1508 pNFS/flexfiles: don't attempt pnfs on fatal DS errors | * a050c749 pNFS/flexfiles: Avoid spurious layout returns in ff_layout_choose_ds_for_read | * 6e7b5f92 PCI: pnv_php: Fix surprise plug detection and recovery | * 502f0883 powerpc/eeh: Make EEH driver device hotplug safe | * e5c5eb43 powerpc/eeh: Rely on dev->link_active_reporting | * 9b6081c3 powerpc/eeh: Export eeh_unfreeze_pe() | * bbdac60e PCI: pnv_php: Work around switches with broken presence detection | * 8c1ad4af PCI: pnv_php: Clean up allocated IRQs on unplug | * 0842b643 kconfig: qconf: fix ConfigList::updateListAllforAll() | * f5a88ffc scsi: ufs: core: Use link recovery when h8 exit fails during runtime resume | * 1cf1ff15 f2fs: fix to avoid out-of-boundary access in devs.path | * 9535e440 f2fs: fix to avoid panic in f2fs_evict_inode | * 4dcd830c f2fs: fix to avoid UAF in f2fs_sync_inode_meta() | * 6707f566 f2fs: doc: fix wrong quota mount option description | * 807997ed rtc: rv3028: fix incorrect maximum clock rate handling | * ec869ab3 rtc: pcf8563: fix incorrect maximum clock rate handling | * d705fc98 rtc: pcf85063: fix incorrect maximum clock rate handling | * f3f71d84 rtc: hym8563: fix incorrect maximum clock rate handling | * fdc50acf rtc: ds1307: fix incorrect maximum clock rate handling | * b401bee1 module: Restore the moduleparam prefix length check | * eda378a0 apparmor: ensure WB_HISTORY_SIZE value is a power of 2 | * 77d2993d bpf: Check flow_dissector ctx accesses are aligned | * 6d4c89b4 vhost-scsi: Fix log flooding with target does not exist errors | * f2ee4064 mtd: rawnand: atmel: set pmecc data setup time | * af740045 mtd: rawnand: atmel: Fix dma_mapping_error() address | * 676078c2 jfs: fix metapage reference count leak in dbAllocCtl | * f00c29e6 fbdev: imxfb: Check fb_add_videomode to prevent null-ptr-deref | * e5bf8f0f crypto: qat - fix seq_file position update in adf_ring_next() | * 39534c94 sh: Do not use hyphen in exported variable name | * f6ac1449 dmaengine: nbpfaxi: Add missing check after DMA map | * 25bfa98c dmaengine: mv_xor: Fix missing check after DMA map and missing unmap | * 84c9681b fs/orangefs: Allow 2 more characters in do_c_string() | * 76191502 soundwire: stream: restore params when prepare ports fail | * 7d745598 crypto: img-hash - Fix dma_unmap_sg() nents value | * 344fd8e2 hwrng: mtk - handle devm_pm_runtime_enable errors | * 5c670969 watchdog: ziirave_wdt: check record length in ziirave_firm_verify() | * 352fd83e scsi: isci: Fix dma_unmap_sg() nents value | * 0d1d577b scsi: mvsas: Fix dma_unmap_sg() nents value | * 7387662c scsi: ibmvscsi_tgt: Fix dma_unmap_sg() nents value | * c2d54155 clk: sunxi-ng: v3s: Fix de clock definition | * 7cb44418 perf tests bp_account: Fix leaked file descriptor | * ce63a839 crypto: ccp - Fix crash when rebind ccp device for ccp.ko | * f3f855d5 crypto: inside-secure - Fix `dma_unmap_sg()` nents value | * 1a6a558c pinctrl: sunxi: Fix memory leak on krealloc failure | * f19d1e26 power: supply: max14577: Handle NULL pdata when CONFIG_OF is not set | * 7843412e clk: davinci: Add NULL check in davinci_lpsc_clk_register() | * b2fdd90e mtd: fix possible integer overflow in erase_xfer() | * fbcac128 crypto: marvell/cesa - Fix engine load inaccuracy | * 13db02bb PCI: rockchip-host: Fix "Unexpected Completion" log message | * 4e7d0ee6 vrf: Drop existing dst reference in vrf_ip6_input_dst | * 7ea4bbdc selftests: rtnetlink.sh: remove esp4_offload after test | * e021a1ee netfilter: xt_nfacct: don't assume acct name is null-terminated | * 0bba3bfb can: kvaser_usb: Assign netdev.dev_port based on device channel index | * 8e22eb9a can: kvaser_pciefd: Store device channel index | * 7abdeed1 wifi: brcmfmac: fix P2P discovery failure in P2P peer due to missing P2P IE | * 336c3893 Reapply "wifi: mac80211: Update skb's control block key in ieee80211_tx_dequeue()" | * 8470f876 wifi: mac80211: Check 802.11 encaps offloading in ieee80211_tx_h_select_key() | * b1a1c989 mwl8k: Add missing check after DMA map | * 2d69fd43 wifi: rtl8xxxu: Fix RX skb size for aggregation disabled | * 94df5c3f xen/gntdev: remove struct gntdev_copy_batch from stack | * 924eee69 net_sched: act_ctinfo: use atomic64_t for three counters | * f088b6eb net/sched: Restrict conditions for adding duplicating netems to qdisc tree | * c47a6a16 arch: powerpc: defconfig: Drop obsolete CONFIG_NET_CLS_TCINDEX | * 16f70570 netfilter: nf_tables: adjust lockdep assertions handling | * f81cac77 drm/amd/pm/powerplay/hwmgr/smu_helper: fix order of mask and value | * 7b086f41 m68k: Don't unregister boot console needlessly | * c20d77f8 tcp: fix tcp_ofo_queue() to avoid including too much DUP SACK range | * 3a6daae9 wifi: ath11k: clear initialized flag for deinit-ed srng lists | * b398120f iwlwifi: Add missing check for alloc_ordered_workqueue | * 84210f14 wifi: iwlwifi: Fix memory leak in iwl_mvm_init() | * 78941577 wifi: rtl818x: Kill URBs before clearing tx status queue | * 830bb5d0 caif: reduce stack size, again | * f613ca79 bpftool: Fix memory leak in dump_xx_nlmsg on realloc failure | * 849d24dc bpf, ktls: Fix data corruption when using bpf_msg_pop_data() in ktls | * 0549c62b drm/rockchip: cleanup fb when drm_gem_fb_afbc_init failed | * 765cfb0d selftests/tracing: Fix false failure of subsystem event test | * aedb44bc staging: nvec: Fix incorrect null termination of battery manufacturer | * 19e61b3d samples: mei: Fix building on musl libc | * ba84ad73 cpufreq: Init policy->rwsem before it may be possibly used | * 2bfbee12 cpufreq: Initialize cpufreq-based frequency-invariance later | * cccdedfb arm64: dts: imx8mm-beacon: Fix HS400 USDHC clock speed | * 62c83c58 ARM: dts: imx6ul-kontron-bl-common: Fix RTS polarity for RS485 interface | * 6a9e356a usb: early: xhci-dbc: Fix early_ioremap leak | * 551a1249 Revert "vmci: Prevent the dispatching of uninitialized payloads" | * 86c717bf pps: fix poll support | * b097d921 vmci: Prevent the dispatching of uninitialized payloads | * c3b1c45c staging: fbtft: fix potential memory leak in fbtft_framebuffer_alloc() | * 5a837d4d ARM: dts: vfxxx: Correctly use two tuples for timer address | * 2e8cf233 ASoC: ops: dynamically allocate struct snd_ctl_elem_value | * 3f3d9eae ASoC: soc-dai: tidyup return value of snd_soc_xlate_tdm_slot_mask() | * fdd6aca6 hfsplus: remove mutex_lock check in hfsplus_free_extents | * c0c56386 fs_context: fix parameter name in infofc() macro | * fe572b18 ASoC: Intel: fix SND_SOC_SOF dependencies | * 334f0da7 ethernet: intel: fix building with large NR_CPUS | * 26c4e4f7 usb: phy: mxs: disconnect line when USB charger is attached | * 2b6794a5 usb: chipidea: add USB PHY event | * 5b670821 ALSA: hda: Add missing NVIDIA HDA codec IDs | * e9661e7f comedi: comedi_test: Fix possible deletion of uninitialized timers | * eaf108b6 x86/bugs: Fix use of possibly uninit value in amd_check_tsa_microcode() | * 2cf0c413 nilfs2: reject invalid file types when reading inodes | * 4b6086b3 gve: Fix stuck TX queue for DQ queue format | * 6c5142c0 e1000e: ignore uninitialized checksum word on tgp | * d35d8cae e1000e: disregard NVM checksum on tgp when valid checksum bit is not set | * d7e11de2 ALSA: hda/realtek - Add mute LED support for HP Pavilion 15-eg0xxx | * acfa2948 i2c: qup: jump out of the loop in case of timeout | * 2b9560c8 net: hns3: fixed vf get max channels bug | * a4002999 net: hns3: refine the struct hane3_tc_info | * 2083e7d4 net/sched: sch_qfq: Avoid triggering might_sleep in atomic context in qfq_delete_class | * 82d19a70 net: appletalk: Fix use-after-free in AARP proxy probe | * 52d2fec7 net: appletalk: fix kerneldoc warnings | * 96e16881 i40e: report VF tx_dropped with tx_errors instead of tx_discards | * c7850489 i40e: Add rx_missed_errors for buffer exhaustion | * a36f8f4c RDMA/core: Rate limit GID cache warning messages | * 6c49eac7 regulator: core: fix NULL dereference on unbind due to stale coupling data | * 13f098bf xhci: Disable stream for xHC controller with XHCI_BROKEN_STREAMS | * ddc8649d virtio-net: ensure the received length does not exceed allocated size | * 9cf2d043 mm/vmalloc: leave lazy MMU mode on PTE mapping error | * 78f9fca7 ASoC: fsl_sai: Force a software reset when starting in consumer mode | * 3371972f usb: dwc3: qcom: Don't leave BCR asserted | * 63ad6583 usb: musb: fix gadget state on disconnect | * e2d8d3f3 usb: musb: Add and use inline functions musb_{get,set}_state | * 57a10045 usb: hub: Fix flushing of delayed work used for post resume purposes | * 0f94efa7 usb: hub: Fix flushing and scheduling of delayed work that tunes runtime pm | * 8aa04df2 usb: hub: fix detection of high tier USB3 devices behind suspended hubs | * 5c0506cd net/sched: Return NULL when htb_lookup_leaf encounters an empty rbtree | * 35142b38 net: vlan: fix VLAN 0 refcount imbalance of toggling filtering during runtime | * 579fa239 Bluetooth: L2CAP: Fix attempting to adjust outgoing MTU | * 5a4509bf Bluetooth: SMP: Fix using HCI_ERROR_REMOTE_USER_TERM on timeout | * 375f4689 Bluetooth: SMP: If an unallowed command is received consider it a failure | * 2b27b389 Bluetooth: Fix null-ptr-deref in l2cap_sock_resume_cb() | * 5408cc66 usb: net: sierra: check for no status endpoint | * 2e6f4d9c hwmon: (corsair-cpro) Validate the size of the received input buffer | * c09e21df rpl: Fix use-after-free in rpl_do_srh_inline(). | * d841aa55 net/sched: sch_qfq: Fix race condition on qfq_aggregate | * 167c22f3 net: emaclite: Fix missing pointer increment in aligned_read() | * 13e4d903 comedi: Fix initialization of data for instructions that write to subdevice | * 16256d7e comedi: Fix use of uninitialized data in insn_rw_emulate_bits() | * fa3a5f4d comedi: Fix some signed shift left operations | * de8da106 comedi: das6402: Fix bit shift out of bounds | * d1291c69 comedi: das16m1: Fix bit shift out of bounds | * 5ac7c604 comedi: aio_iiro_16: Fix bit shift out of bounds | * 0489c30d comedi: pcl812: Fix bit shift out of bounds | * 8ab8589e iio: adc: stm32-adc: Fix race in installing chained IRQ handler | * 466bad8a iio: adc: max1363: Reorder mode_list[] entries | * d1276698 iio: adc: max1363: Fix MAX1363_4X_CHANS/MAX1363_8X_CHANS[] | * 9e1d2b97 soc: aspeed: lpc-snoop: Don't disable channels that aren't enabled | * 63746195 soc: aspeed: lpc-snoop: Cleanup resources in stack-order | * ea4f8bdd mmc: sdhci_am654: Workaround for Errata i2312 | * bb4ec4c1 mmc: sdhci-pci: Quirk for broken command queuing on Intel GLK-based Positivo models | * adc582e7 mmc: bcm2835: Fix dma_unmap_sg() nents value | * 62ca6640 memstick: core: Zero initialize id_reg in h_memstick_read_dev_id() | * 6995a412 isofs: Verify inode mode when loading from disk | * aec396b4 dmaengine: nbpfaxi: Fix memory corruption in probe() | * fee68f6a af_packet: fix soft lockup issue caused by tpacket_snd() | * dbf3580a af_packet: fix the SO_SNDTIMEO constraint not effective on tpacked_snd() | * 7bd3683a phonet/pep: Move call to pn_skb_get_dst_sockaddr() earlier in pep_sock_accept() | * 40e25aa7 HID: core: do not bypass hid_hw_raw_request | * 293812d1 HID: core: ensure __hid_request reserves the report ID as the first byte | * 9f2892f7 HID: core: ensure the allocated report buffer can contain the reserved report ID | * 95544048 pch_uart: Fix dma_sync_sg_for_device() nents value | * 0fff54f2 Input: xpad - set correct controller type for Acer NGR200 | * 9ee3db3f thunderbolt: Fix bit masking in tb_dp_port_set_hops() | * 23a70184 i2c: stm32: fix the device used for the DMA map | * d68b7c8f usb: gadget: configfs: Fix OOB read on empty string write | * 68afa896 USB: serial: ftdi_sio: add support for NDI EMGUIDE GEMINI | * 6c71382f USB: serial: option: add Foxconn T99W640 | * 5cdd92f9 USB: serial: option: add Telit Cinterion FE910C04 (ECM) composition | * ceb645ac phy: tegra: xusb: Fix unbalanced regulator disable in UTMI PHY mode * 18593a06 Merge android12-5.10 into android12-5.10-lts Change-Id: Ib9a85abecf21b0ae5b6eae86593b9679cf236c85 Signed-off-by:Greg Kroah-Hartman <gregkh@google.com>
Loading
Please sign in to comment