CLSA-2026-1787656450
See a problem?- Import Source
- https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1787656450.json
- JSON Data
- https://api.osv.dev/v1/vulns/CLSA-2026-1787656450
- Upstream
- Published
- 2026-08-27T15:49:18Z
- Modified
- 2026-10-26T09:31:53Z
- Summary
- Fix CVE(s): CVE-2023-6270, CVE-2026-31431, CVE-2026-53043
- Details
-
- Bump kernel ABI to 28: ship the ELS kernel as linux-image-4.19.0-28-*, distinct from Debian stock 4.19.0-27.
- Backport security fixes for CVE-2026-31431 (af_alg / AEAD):
- crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec
- crypto: scatterwalk - Backport memcpy_sglist()
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption
- crypto: authencesn - Fix src offset when decrypting in-place
- crypto: algif_aead - use memcpy_sglist() instead of null skcipher
- crypto: algif_aead - Revert to operating out-of-place
- crypto: algif_aead - snapshot IV for async AEAD requests
- crypto: authenc - use memcpy_sglist() instead of null skcipher
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl
- crypto: algif_aead - Fix minimum RX size check for decryption
- Backport security fixes for CVE-2026-53043 (ocfs2/dlm out-of-bounds):
- ocfs2/dlm: validate qr_numregions in dlm_match_regions()
- ocfs2/dlm: fix off-by-one in dlm_match_regions() region comparison
- New upstream stable update:
https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.317
- wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- wifi: iwlwifi: mvm: revert gen2 TX A-MPDU size to 64
- wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- ipv6: sr: block BH in seg6_output_core() and seg6_input_core()
- vxlan: Fix regression when dropping packets due to invalid src addresses
- tcp: count CLOSE-WAIT sockets for TCP_MIB_CURRESTAB
- ptp: Fix error message on failed pin verification
- af_unix: Annotate data-race of sk->sk_state in unix_inq_len().
- af_unix: Annotate data-races around sk->sk_state in unix_write_space() and poll().
- af_unix: Annotate data-races around sk->sk_state in sendmsg() and recvmsg().
- af_unix: Annotate data-races around sk->sk_state in UNIX_DIAG.
- af_unix: Annotate data-race of net->unx.sysctl_max_dgram_qlen.
- af_unix: Use unix_recvq_full_lockless() in unix_stream_connect().
- af_unix: Use skb_queue_len_lockless() in sk_diag_show_rqlen().
- af_unix: Annotate data-race of sk->sk_shutdown in sk_diag_fill().
- usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- drm/amd/display: Handle Y carry-over in VCP X.Y calculation
- serial: sc16is7xx: replace hardcoded divisor value with BIT() macro
- serial: sc16is7xx: fix bug in sc16is7xx_set_baud() when using prescaler
- media: mc: mark the media devnode as registered from the, start
- selftests/mm: compaction_test: fix incorrect write of zero to nr_hugepages
- selftests/mm: conform test to TAP format output
- selftests/mm: compaction_test: fix bogus test success on Aarch64
- nilfs2: Remove check for PageError
- nilfs2: return the mapped address from nilfs_get_page()
- nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors
- USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- mei: me: release irq in mei_me_pci_resume error path
- jfs: xattr: fix buffer overflow for invalid xattr
- xhci: Apply reset resume quirk to Etron EJ188 xHCI host
- xhci: Apply broken streams quirk to Etron EJ188 xHCI host
- Input: try trimming too long modalias strings
- xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING
- HID: core: remove unnecessary WARN_ON() in implement()
- iommu/amd: Fix sysfs leak in iommu init
- liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drm/bridge/panel: Fix runtime warning on panel bridge release
- tcp: fix race in tcp_v6_syn_recv_sock()
- Bluetooth: L2CAP: Fix rejecting L2CAP_CONN_PARAM_UPDATE_REQ
- ipv6/route: Add a missing check on proc_dointvec
- net/ipv6: Fix the RT cache flush via sysctl using a previous delay
- drivers: core: synchronize really_probe() and dev_uevent()
- drm/exynos/vidi: fix memory leak in .get_modes()
- vmci: prevent speculation leaks by sanitizing event in event_deliver()
- fs/proc: fix softlockup in __read_vmcore
- ocfs2: use coarse time for new created files
- ocfs2: fix races between hole punching and AIO+DIO
- PCI: rockchip-ep: Remove wrong mask on subsys_vendor_id
- dmaengine: axi-dmac: fix possible race in remove()
- intel_th: pci: Add Granite Rapids support
- intel_th: pci: Add Granite Rapids SOC support
- intel_th: pci: Add Sapphire Rapids SOC support
- intel_th: pci: Add Meteor Lake-S support
- intel_th: pci: Add Lunar Lake support
- nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- hv_utils: drain the timesync packets on onchannelcallback
- hugetlb_encode.h: fix undefined behaviour (34 << 26)
- usb-storage: alauda: Check whether the media is initialized
- rcutorture: Fix rcu_torture_one_read() pipe_count overflow comment
- batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- scsi: qedi: Fix crash while reading debugfs attribute
- powerpc/pseries: Enforce hcall result buffer validity and size
- powerpc/io: Avoid clang null pointer arithmetic warnings
- usb: misc: uss720: check for incompatible versions of the Belkin F5U002
- udf: udftime: prevent overflow in udf_disk_stamp_to_time()
- PCI/PM: Avoid D3cold for HP Pavilion 17 PC/1972 PCIe Ports
- MIPS: Octeon: Add PCIe link status check
- MIPS: Routerboard 532: Fix vendor retry check code
- cipso: fix total option length computation
- netrom: Fix a memory leak in nr_heartbeat_expiry()
- ipv6: prevent possible NULL dereference in rt6_probe()
- xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- virtio_net: checksum offloading handling fix
- net: usb: rtl8150 fix unintiatilzed variables in rtl8150_get_link_ksettings
- regulator: core: Fix modpost error "regulator_get_regmap" undefined
- dmaengine: ioatdma: Fix missing kmem_cache_destroy()
- ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- drm/radeon: fix UBSAN warning in kv_dpm.c
- gcov: add support for GCC 14
- ARM: dts: samsung: smdkv310: fix keypad no-autorepeat
- ARM: dts: samsung: exynos4412-origen: fix keypad no-autorepeat
- ARM: dts: samsung: smdk4412: fix keypad no-autorepeat
- selftests/ftrace: Fix checkbashisms errors
- tracing: Add MODULE_DESCRIPTION() to preemptirq_delay_test
- perf/core: Fix missing wakeup when waiting for context reference
- PCI: Add PCI_ERROR_RESPONSE and related definitions
- x86/amd_nb: Check for invalid SMN reads
- iio: dac: ad5592r-base: Replace indio_dev->mlock with own device lock
- iio: dac: ad5592r: un-indent code-block for scale read
- iio: dac: ad5592r: fix temperature channel scaling value
- scsi: mpt3sas: Add ioc_ logging macros
- scsi: mpt3sas: Gracefully handle online firmware update
- scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- xhci: Use soft retry to recover faster from transaction errors
- xhci: Set correct transferred length for cancelled bulk transfers
- usb: xhci: do not perform Soft Retry for some xHCI hosts
- pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- pinctrl: rockchip: fix pinmux bits for RK3328 GPIO2-B pins
- pinctrl: rockchip: fix pinmux bits for RK3328 GPIO3-B pins
- pinctrl: rockchip: fix pinmux reset in rockchip_pmx_set
- drm/amdgpu: fix UBSAN warning in kv_dpm.c
- netfilter: nf_tables: validate family when identifying table via handle
- ASoC: fsl-asoc-card: set priv->pdev before using it
- netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- net/iucv: Avoid explicit cpumask var allocation on stack
- ALSA: emux: improve patch ioctl data validation
- media: dvbdev: Initialize sbuf
- soc: ti: wkup_m3_ipc: Send NULL dummy message instead of pointer message
- nvme: fixup comment for nvme RDMA Provider Type
- gpio: davinci: Validate the obtained number of IRQs
- i2c: ocores: stop transfer on timeout
- i2c: ocores: set IACK bit after core is enabled
- x86: stop playing stack games in profile_pc()
- mmc: sdhci-pci: Convert PCIBIOS_* return codes to errnos
- iio: adc: ad7266: Fix variable checking bug
- iio: chemical: bme680: Fix pressure value output
- iio: chemical: bme680: Fix calibration data variable
- iio: chemical: bme680: Fix overflows in compensate() functions
- iio: chemical: bme680: Fix sensor data read operation
- net: usb: ax88179_178a: improve link status logs
- usb: gadget: printer: SS+ support
- usb: musb: da8xx: fix a resource leak in probe()
- usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- tty: mcf: MCF54418 has 10 UARTS
- hexagon: fix fadvise64_64 calling conventions
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- batman-adv: Don't accept TT entries for out-of-spec VIDs
- ata: libata-core: Fix double free on error
- ftruncate: pass a signed offset
- pwm: stm32: Refuse too small period requests
- ipv6: annotate some data-races around sk->sk_prot
- ipv6: Fix data races around sk->sk_prot.
- tcp: Fix data races around icsk->icsk_af_ops.
- arm64: dts: rockchip: Add sound-dai-cells for RK3368 https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.318
- asm-generic: Move common compat types to asm-generic/compat.h
- media: dvb: as102-fe: Fix as10x_register_addr packing
- media: dvb-usb: dib0700_devices: Add missing release_firmware()
- IB/core: Implement a limit on UMAD receive List
- drm/amd/display: Skip finding free audio for unknown engine_id
- media: dw2102: Don't translate i2c read into write
- sctp: prefer struct_size over open coded arithmetic
- firmware: dmi: Stop decoding on broken entry
- Input: ff-core - prefer struct_size over open coded arithmetic
- net: dsa: mv88e6xxx: Correct check for empty list
- media: dvb-frontends: tda18271c2dd: Remove casting during div
- media: s2255: Use refcount_t instead of atomic_t for num_channels
- media: dvb-frontends: tda10048: Fix integer overflow
- i2c: i801: Annotate apanel_addr as __ro_after_init
- powerpc/64: Set _IO_BASE to POISON_POINTER_DELTA not 0 for CONFIG_PCI=n
- orangefs: fix out-of-bounds fsid access
- powerpc/xmon: Check cpu id in commands "c#", "dp#" and "dx#"
- jffs2: Fix potential illegal address access in jffs2_free_inode
- s390/pkey: Wipe sensitive data on failure
- tcp: take care of compressed acks in tcp_add_reno_sack()
- tcp: tcp_mark_head_lost is only valid for sack-tcp
- tcp: add ece_ack flag to reno sack functions
- net: tcp better handling of reordering then loss cases
- UPSTREAM: tcp: fix DSACK undo in fast recovery to call tcp_try_to_open()
- tcp_metrics: validate source addr length
- bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- selftests: fix OOM in msg_zerocopy selftest
- selftests: make order checking verbose in msg_zerocopy selftest
- inet_diag: Initialize pad field in struct inet_diag_req_v2
- nilfs2: fix inode number range checks
- nilfs2: add missing check for inode numbers on directory entries
- mm: optimize the redundant loop of mm_update_owner_next()
- Bluetooth: Fix incorrect pointer arithmatic in ext_adv_report_evt
- can: kvaser_usb: Explicitly initialize family in leafimx driver_info struct
- fsnotify: Do not generate events for O_PATH file descriptors
- Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes
- drm/amdgpu/atomfirmware: silence UBSAN warning
- bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- media: dw2102: fix a potential buffer overflow
- i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- nilfs2: fix incorrect inode allocation from reserved inodes
- drm/i915: make find_fw_domain work on intel_uncore
- tcp: fix incorrect undo caused by DSACK of TLP retransmit
- net: lantiq_etop: add blank line after declaration
- net: ethernet: lantiq_etop: fix double free in detach
- ppp: reject claimed-as-LCP but actually malformed packets
- ARM: davinci: Convert comma to semicolon
- USB: serial: option: add Telit generic core-dump composition
- USB: serial: option: add Telit FN912 rmnet compositions
- USB: serial: option: add Fibocom FM350-GL
- USB: serial: option: add support for Foxconn T99W651
- USB: serial: option: add Netprisma LCUK54 series modules
- USB: serial: option: add Rolling RW350-GL variants
- USB: Add USB_QUIRK_NO_SET_INTF quirk for START BP-850k
- usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- hpet: Support 32-bit userspace
- libceph: fix race between delayed_work() and ceph_monc_stop()
- tcp: refactor tcp_retransmit_timer()
- net: tcp: fix unexcepted socket die when snd_wnd is 0
- tcp: use signed arithmetic in tcp_rtx_probe0_timed_out()
- tcp: avoid too many retransmit packets
- SUNRPC: Fix RPC client cleaned up the freed pipefs dentries
- nilfs2: fix kernel bug on rename operation of broken directory
- i2c: rcar: bring hardware to known state when probing https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.319
- gcc-plugins: Rename last_stmt() for GCC 14+
- scsi: qedf: Set qed_slowpath_params to zero before use
- ACPI: EC: Abort address space access upon error
- ACPI: EC: Avoid returning AE_OK on errors in address space handler
- wifi: mac80211: mesh: init nonpeer_pm to active by default in mesh sdata
- wifi: mac80211: fix UBSAN noise in ieee80211_prep_hw_scan()
- Input: silead - Always support 10 fingers
- ila: block BH in ila_output()
- kconfig: gconf: give a proper initial state to the Save button
- kconfig: remove wrong expr_trans_bool()
- fs/file: fix the check in find_next_fd()
- mei: demote client disconnect warning on suspend to debug
- wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- Input: elantech - fix touchpad state on resume for Lenovo N24
- bytcr_rt5640 : inverse jack detect for Archos 101 cesium
- can: kvaser_usb: fix return value for hif_usb_send_regout
- s390/sclp: Fix sclp_init() cleanup on failure
- ALSA: dmaengine_pcm: terminate dmaengine before synchronize
- net: usb: qmi_wwan: add Telit FN912 compositions
- net: mac802154: Fix racy device stats updates by DEV_STATS_INC() and DEV_STATS_ADD()
- Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- fs: better handle deep ancestor chains in is_subdir()
- spi: imx: Don't expect DMA for i.MX{25,35,50,51,53} cspi devices
- selftests/vDSO: fix clang build errors and warnings
- hfsplus: fix uninit-value in copy_name
- filelock: Remove locks reliably when fcntl/close race is detected
- ARM: 9324/1: fix get_user() broken with veneer
- ACPI: processor_idle: Fix invalid comparison with insertion sort for latency
- net: relax socket state check at accept time.
- ocfs2: add bounds checking to ocfs2_check_dir_entry()
- jfs: don't walk off the end of ealist
- filelock: Fix fcntl/close race recovery compat path https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.320
- platform/chrome: cros_ec_debugfs: fix wrong EC message version
- hfsplus: fix to avoid false alarm of circular locking
- x86/of: Return consistent error type from x86_of_pci_irq_enable()
- x86/pci/intel_mid_pci: Fix PCIBIOS_* return code handling
- x86/pci/xen: Fix PCIBIOS_* return code handling
- x86/platform/iosf_mbi: Convert PCIBIOS_* return codes to errnos
- hwmon: (adt7475) Fix default duty on fan is disabled
- pwm: stm32: Always do lazy disabling
- hwmon: (max6697) Fix underflow when writing limit attributes
- hwmon: Introduce SENSOR_DEVICE_ATTR_{RO, RW, WO} and variants
- hwmon: (max6697) Auto-convert to use SENSOR_DEVICE_ATTR_{RO, RW, WO}
- hwmon: (max6697) Fix swapped temp{1,8} critical alarms
- arm64: dts: rockchip: Increase VOP clk rate on RK3328
- m68k: atari: Fix TT bootup freeze / unexpected (SCU) interrupt messages
- x86/xen: Convert comma to semicolon
- m68k: cmpxchg: Fix return value for default case in __arch_xchg()
- wifi: brcmsmac: LCN PHY code is used for BCM4313 2G-only device
- net/smc: Allow SMC-D 1MB DMB allocations
- net/smc: set rmb's SG_MAX_SINGLE_ALLOC limitation only when CONFIG_ARCH_NO_SG_CHAIN is defined
- selftests/bpf: Check length of recv in test_sockmap
- wifi: cfg80211: fix typo in cfg80211_calculate_bitrate_he()
- wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- net: fec: Refactor: #define magic constants
- net: fec: Fix FEC_ECR_EN1588 being cleared on link-down
- ipvs: Avoid unnecessary calls to skb_is_gso_sctp
- perf: Fix perf_aux_size() for greater-than 32-bit size
- perf: Prevent passing zero nr_pages to rb_alloc_aux()
- bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- selftests: forwarding: devlink_lib: Wait for udev events after reloading
- media: imon: Fix race getting ictx->lock
- saa7134: Unchecked i2c_transfer function result fixed
- media: uvcvideo: Allow entity-defined get_info and get_cur
- media: uvcvideo: Override default flags
- media: renesas: vsp1: Fix _irqsave and _irq mix
- media: renesas: vsp1: Store RPF partition configuration per RPF instance
- leds: trigger: Unregister sysfs attributes before calling deactivate()
- perf report: Fix condition in sort__sym_cmp()
- drm/etnaviv: fix DMA direction handling for cached RW buffers
- mfd: omap-usb-tll: Use struct_size to allocate tll
- ext4: avoid writing unitialized memory to disk in EA inodes
- sparc64: Fix incorrect function signature and add prototype for prom_cif_init
- PCI: Equalize hotplug memory and io for occupied and empty slots
- PCI: Fix resource double counting on remove & rescan
- RDMA/mlx4: Fix truncated output warning in mad.c
- RDMA/mlx4: Fix truncated output warning in alias_GUID.c
- RDMA/rxe: Don't set BTH_ACK_MASK for UC or UD QPs
- mtd: make mtd_test.c a separate module
- Input: elan_i2c - do not leave interrupt disabled on suspend failure
- MIPS: Octeron: remove source file executable bit
- powerpc/xmon: Fix disassembly CPU feature checks
- macintosh/therm_windtunnel: fix module unload.
- bnxt_re: Fix imm_data endianness
- ice: Rework flex descriptor programming
- netfilter: ctnetlink: use helper function to calculate expect ID
- pinctrl: core: fix possible memory leak when pinctrl_enable() fails
- pinctrl: single: fix possible memory leak when pinctrl_enable() fails
- pinctrl: ti: ti-iodelay: Drop if block with always false condition
- pinctrl: ti: ti-iodelay: fix possible memory leak when pinctrl_enable() fails
- pinctrl: freescale: mxs: Fix refcount of child
- fs/nilfs2: remove some unused macros to tame gcc
- nilfs2: avoid undefined behavior in nilfs_cnt32_ge macro
- tick/broadcast: Make takeover of broadcast hrtimer reliable
- net: netconsole: Disable target before netpoll cleanup
- af_packet: Handle outgoing VLAN packets without hardware offloading
- ipv6: take care of scope when choosing the src addr
- char: tpm: Fix possible memory leak in tpm_bios_measurements_open()
- media: venus: fix use after free in vdec_close
- hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- m68k: amiga: Turn off Warp1260 interrupts during boot
- ext4: check dot and dotdot of dx_root before making dir indexed
- ext4: make sure the first directory block is not a hole
- wifi: mwifiex: Fix interface type change
- leds: ss4200: Convert PCIBIOS_* return codes to errnos
- tools/memory-model: Fix bug in lock.cat
- hwrng: amd - Convert PCIBIOS_* return codes to errnos
- PCI: hv: Return zero, not garbage, when reading PCI_INTERRUPT_PIN
- binder: fix hang of unregistered readers
- scsi: qla2xxx: Return ENOBUFS if sg_cnt is more than one for ELS cmds
- f2fs: fix to don't dirty inode for readonly filesystem
- clk: davinci: da8xx-cfgchip: Initialize clk_init_data before use
- ubi: eba: properly rollback inside self_check_eba
- decompress_bunzip2: fix rare decompression failure
- kobject_uevent: Fix OOB access within zap_modalias_env()
- rtc: cmos: Fix return value of nvmem callbacks
- scsi: qla2xxx: During vport delete send async logout explicitly
- scsi: qla2xxx: validate nvme_local_port correctly
- perf/x86/intel/pt: Fix topa_entry base length
- watchdog/perf: properly initialize the turbo mode timestamp and rearm counter
- platform: mips: cpu_hwmon: Disable driver on unsupported hardware
- RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- selftests/sigaltstack: Fix ppc64 GCC build
- nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- kdb: Fix bound check compiler warning
- kdb: address -Wformat-security warnings
- kdb: Use the passed prompt in kdb_position_cursor()
- jfs: Fix array-index-out-of-bounds in diFree
- dma: fix call order in dmam_free_coherent
- MIPS: SMP-CPS: Fix address for GCR_ACCESS register for CM3 and later
- net: ip_rt_get_source() - use new style struct initializer instead of memset
- ipv4: Fix incorrect source address in Record Route option
- net: bonding: correctly annotate RCU in bond_should_notify_peers()
- tipc: Return non-zero value from tipc_udp_addr2str() on error
- mISDN: Fix a use after free in hfcmulti_tx()
- mm: avoid overflows in dirty throttling logic
- PCI: rockchip: Make 'ep-gpios' DT property optional
- PCI: rockchip: Use GPIOD_OUT_LOW flag while requesting ep_gpio
- parport: parport_pc: Mark expected switch fall-through
- parport: Convert printk(KERN_ to pr_(
- parport: Standardize use of printmode
- dev/parport: fix the array out-of-bounds risk
- driver core: Cast to (void *) with __force for __percpu pointer
- devres: Fix memory leakage caused by driver API devm_free_percpu()
- perf/x86/intel/pt: Export pt_cap_get()
- perf/x86/intel/pt: Use helpers to obtain ToPA entry size
- perf/x86/intel/pt: Use pointer arithmetics instead in ToPA entry calculation
- perf/x86/intel/pt: Split ToPA metadata and page layout
- perf/x86/intel/pt: Fix a topa_entry base address calculation
- remoteproc: imx_rproc: ignore mapping vdev regions
- remoteproc: imx_rproc: Fix ignoring mapping vdev regions
- remoteproc: imx_rproc: Skip over memory region when node value is NULL
- drm/vmwgfx: Fix overlay when using Screen Targets
- net/iucv: fix use after free in iucv_sock_close()
- ipv6: fix ndisc_is_useropt() handling for PIO
- protect the fetch of ->fd[fd] in do_dup2() from mispredictions
- ALSA: usb-audio: Correct surround channels in UAC1 channel map
- net: usb: sr9700: fix uninitialized variable use in sr_mdio_read
- irqchip/mbigen: Fix mbigen node address layout
- x86/mm: Fix pti_clone_pgtable() alignment assumption
- net: usb: qmi_wwan: fix memory leak for not ip packets
- net: linkwatch: use system_unbound_wq
- Bluetooth: l2cap: always unlock channel in l2cap_conless_channel()
- net: fec: Stop PPS on driver remove
- md/raid5: avoid BUG_ON() while continue reshape after reassembling
- clocksource/drivers/sh_cmt: Address race condition for clock events
- PCI: Add Edimax Vendor ID to pci_ids.h
- udf: prevent integer overflow in udf_bitmap_free_blocks()
- wifi: nl80211: don't give key data to userspace
- btrfs: fix bitmap leak when loading free space cache on duplicate entry
- media: uvcvideo: Ignore empty TS packets
- media: uvcvideo: Fix the bandwdith quirk on USB 3.x
- jbd2: avoid memleak in jbd2_journal_write_metadata_buffer
- s390/sclp: Prevent release of buffer in I/O
- SUNRPC: Fix a race to wake a sync task
- ext4: fix wrong unit use in ext4_mb_find_by_goal
- arm64: Add support for SB barrier and patch in over DSB; ISB sequences
- arm64: cpufeature: Force HWCAP to be based on the sysreg visible to user-space
- arm64: Add Neoverse-V2 part
- arm64: cputype: Add Cortex-X4 definitions
- arm64: cputype: Add Neoverse-V3 definitions
- arm64: errata: Add workaround for Arm errata 3194386 and 3312417
- arm64: cputype: Add Cortex-X3 definitions
- arm64: cputype: Add Cortex-A720 definitions
- arm64: cputype: Add Cortex-X925 definitions
- arm64: errata: Unify speculative SSBS errata logic
- arm64: errata: Expand speculative SSBS workaround
- arm64: cputype: Add Cortex-X1C definitions
- arm64: cputype: Add Cortex-A725 definitions
- arm64: errata: Expand speculative SSBS workaround (again)
- i2c: smbus: Don't filter out duplicate alerts
- i2c: smbus: Improve handling of stuck alerts
- i2c: smbus: Send alert notifications to all devices if source not found
- bpf: kprobe: remove unused declaring of bpf_kprobe_override
- spi: lpspi: Replace all "master" with "controller"
- spi: lpspi: Add slave mode support
- spi: lpspi: Let watermark change with send data length
- spi: lpspi: Add i.MX8 boards support for lpspi
- spi: lpspi: add the error info of transfer speed setting
- spi: fsl-lpspi: remove unneeded array
- spi: spi-fsl-lpspi: Fix scldiv calculation
- ALSA: line6: Fix racy access to midibuf
- usb: vhci-hcd: Do not drop references before new references are gained
- USB: serial: debug: do not echo input by default
- usb: gadget: core: Check for unset descriptor
- scsi: ufs: core: Fix hba->last_dme_cmd_tstamp timestamp updating logic
- tick/broadcast: Move per CPU pointer access into the atomic section
- ntp: Clamp maxerror and esterror to operating range
- driver core: Fix uevent_show() vs driver detach race
- ntp: Safeguard against time_constant overflow
- serial: core: check uartclk for zero to avoid divide by zero
- power: supply: axp288_charger: Fix constant_charge_voltage writes
- power: supply: axp288_charger: Round constant_charge_voltage writes down
- tracing: Fix overflow in get_free_elt()
- x86/mtrr: Check if fixed MTRRs exist before saving them
- drm/bridge: analogix_dp: properly handle zero sized AUX transactions
- drm/mgag200: Set DDC timeout in milliseconds
- kbuild: Fix '-S -c' in x86 stack protector scripts
- netfilter: nf_tables: set element extended ACK reporting support
- netfilter: nf_tables: use timestamp to check for set element timeout
- netfilter: nf_tables: prefer nft_chain_validate
- arm64: cpufeature: Fix the visibility of compat hwcaps
- media: uvcvideo: Use entity get_cur in uvc_ctrl_set
- drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- exec: Fix ToCToU between perm check and set-uid/gid usage
- nvme/pci: Add APST quirk for Lenovo N60z laptop https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.321
- fuse: Initialize beyond-EOF page contents before setting uptodate
- ALSA: usb-audio: Support Yamaha P-125 quirk entry
- xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- arm64: ACPI: NUMA: initialize all values of acpi_early_node_map to NUMA_NO_NODE
- dm resume: don't return EINVAL when signalled
- dm persistent data: fix memory allocation failure
- bitmap: introduce generic optimized bitmap_size()
- fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE
- selinux: fix potential counting error in avc_add_xperms_decision()
- drm/amdgpu: Actually check flags for all context ops.
- memcg_write_event_control(): fix a user-triggerable oops
- s390/cio: rename bitmap_size() -> idset_bitmap_size()
- overflow.h: Add flex_array_size() helper
- overflow: Implement size_t saturating arithmetic helpers
- btrfs: rename bitmap_set_bits() -> btrfs_bitmap_set_bits()
- net/mlx5e: Correctly report errors for ethtool rx flows
- atm: idt77252: prevent use after free in dequeue_rx()
- net: dsa: vsc73xx: pass value in phy_write operation
- ssb: Fix division by zero issue in ssb_calc_clock_rate
- wifi: cw1200: Avoid processing an invalid TIM IE
- i2c: riic: avoid potential division by zero
- staging: ks7010: disable bh on tx_dev_lock
- binfmt_misc: cleanup on filesystem umount
- scsi: spi: Fix sshdr use
- gfs2: setattr_chown: Add missing initialization
- wifi: iwlwifi: abort scan when rfkill on but device enabled
- powerpc/xics: Check return value of kasprintf in icp_native_map_one_cpu
- ext4: do not trim the group with corrupted block bitmap
- quota: Remove BUG_ON from dqget()
- media: pci: cx23885: check cx23885_vdev_init() return
- fs: binfmt_elf_efpic: don't use missing interpreter's properties
- scsi: lpfc: Initialize status local variable in lpfc_sli4_repost_sgl_list()
- net/sun3_82586: Avoid reading past buffer in debug output
- md: clean up invalid BUG_ON in md_ioctl
- parisc: Use irq_enter_rcu() to fix warning at kernel/context_tracking.c:367
- powerpc/boot: Handle allocation failure in simple_realloc()
- powerpc/boot: Only free if realloc() succeeds
- btrfs: change BUG_ON to assertion when checking for delayed_node root
- btrfs: handle invalid root reference found in may_destroy_subvol()
- btrfs: send: handle unexpected data in header buffer in begin_cmd()
- btrfs: delete pointless BUG_ON check on quota root in btrfs_qgroup_account_extent()
- f2fs: fix to do sanity check in update_sit_entry
- usb: gadget: fsl: Increase size of name buffer for endpoints
- Bluetooth: bnep: Fix out-of-bound access
- NFS: avoid infinite loop in pnfs_update_layout.
- openrisc: Call setup_memory() earlier in the init sequence
- s390/iucv: fix receive buffer virtual vs physical address confusion
- usb: dwc3: core: Skip setting event buffers for host only controllers
- irqchip/gic-v3-its: Remove BUG_ON in its_vpe_irq_domain_alloc
- ext4: set the type of max_zeroout to unsigned int to avoid overflow
- nvmet-rdma: fix possible bad dereference when freeing rsps
- hrtimer: Prevent queuing of hrtimer without a function callback
- gtp: pull network headers in gtp_dev_xmit()
- block: use "unsigned long" for blk_validate_block_size().
- Bluetooth: Make use of __check_timeout on hci_sched_le
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- Bluetooth: hci_core: Fix LE quote calculation
- kcm: Serialise kcm_sendmsg() for the same socket.
- netfilter: nft_counter: Synchronize nft_counter_reset() against reader.
- ipv6: prevent UAF in ip6_send_skb()
- net: xilinx: axienet: Always disable promiscuous mode
- drm/msm: use drm_debug_enabled() to check for debug categories
- drm/msm/dpu: don't play tricks with debug macros
- mmc: mmc_test: Fix NULL dereference on allocation failure
- Bluetooth: MGMT: Add error handling to pair_device()
- HID: wacom: Defer calculation of resolution until resolution_code is known
- cxgb4: add forgotten u64 ivlan cast before shift
- mmc: dw_mmc: allow biu and ciu clocks to defer
- ALSA: timer: Relax start tick time check for slave timer elements
- Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- Input: MT - limit max slots
- tools: move alignment-related macros to new <linux/align.h>
- drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- pinctrl: single: fix potential NULL dereference in pcs_get_function()
- wifi: mwifiex: duplicate static structs used in driver instances
- dm suspend: return -ERESTARTSYS instead of -EINTR
- scsi: mpt3sas: Avoid IOMMU page faults on REPORT ZONES
- filelock: Correct the filelock owner in fcntl_setlk/fcntl_setlk64
- media: uvcvideo: Fix integer overflow calculating timestamp
- ata: libata-core: Fix null pointer dereference on error
- cgroup/cpuset: Prevent UAF in proc_cpuset_show()
- memcg: enable accounting of ipc resources
- fbcon: Prevent that screen size is smaller than font size
- fbmem: Check virtual screen sizes in fb_set_var()
- net:rds: Fix possible deadlock in rds_message_put
- ida: Fix crash in ida_free when the bitmap is empty
- net: prevent mss overflow in skb_segment()
- soundwire: stream: fix programming slave ports for non-continous port maps
- gtp: fix a potential NULL pointer dereference
- net: busy-poll: use ktime_get_ns() instead of local_clock()
- cdc-acm: Add DISABLE_ECHO quirk for GE HealthCare UI Controller
- USB: serial: option: add MeiG Smart SRM825L
- usb: dwc3: omap: add missing depopulate in probe error path
- usb: dwc3: core: Prevent USB core invalid event buffer address access
- usb: dwc3: st: fix probed platform device ref count on probe error path
- usb: core: sysfs: Unmerge @usb3_hardware_lpm_attr_group in remove_power_attributes()
- scsi: aacraid: Fix double-free on probe failure
- ipc: remove memcg accounting for sops objects in do_semtimedop()
- drm/fb-helper: set x/yres_virtual in drm_fb_helper_check_var https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.322
- net: usb: qmi_wwan: add MeiG Smart SRM825L
- usb: dwc3: st: Add of_node_put() before return in probe function
- usb: dwc3: st: add missing depopulate in probe error path
- drm/amdgpu: Fix uninitialized variable warning in amdgpu_afmt_acr
- drm/amdgpu: fix overflowed array index read warning
- drm/amdgpu: fix ucode out-of-bounds read warning
- drm/amdgpu: fix mc_data out-of-bounds read warning
- drm/amdkfd: Reconcile the definition and use of oem_id in struct kfd_topology_device
- apparmor: fix possible NULL pointer dereference
- usbip: Don't submit special requests twice
- smack: tcp: ipv4, fix incorrect labeling
- media: uvcvideo: Enforce alignment of frame and interval
- block: initialize integrity buffer to zero before writing it to media
- virtio_net: Fix napi_skb_cache_put warning
- udf: Limit file size to 4TB
- ALSA: usb-audio: Sanity checks for each pipe and EP types
- ALSA: usb-audio: Fix gpf in snd_usb_pipe_sanity_check
- sch/netem: fix use after free in netem_dequeue
- ALSA: hda/conexant: Add pincfg quirk to enable top speakers on Sirius devices
- ata: libata: Fix memory leak for error path in ata_host_alloc()
- mmc: dw_mmc: Fix IDMAC operation with pages bigger than 4K
- fuse: use unsigned type for getxattr/listxattr size truncation
- clk: qcom: clk-alpha-pll: Fix the pll post div mask
- nilfs2: fix missing cleanup on rollforward recovery error
- nilfs2: fix state management in error path of log writing function
- ALSA: hda: Add input value sanity checks to HDMI channel map controls
- smack: unix sockets: fix accept()ed socket label
- irqchip/armada-370-xp: Do not allow mapping IRQ 0 and 1
- af_unix: Remove put_pid()/put_cred() in copy_peercred().
- netfilter: nf_conncount: fix wrong variable type
- udf: Avoid excessive partition lengths
- wifi: brcmsmac: advertise MFP_CAPABLE to enable WPA3
- media: qcom: camss: Add check for v4l2_fwnode_endpoint_parse
- pcmcia: Use resource_size function on resource object
- can: bcm: Remove proc entry when dev is unregistered.
- igb: Fix not clearing TimeSync interrupts for 82580
- platform/x86: dell-smbios: Fix error path in dell_smbios_init()
- cx82310_eth: re-enable ethernet mode after router reboot
- drivers/net/usb: Remove all strcpy() uses
- net: usb: don't write directly to netdev->dev_addr
- usbnet: modern method to get random MAC
- rfkill: fix spelling mistake contidion to condition
- net: bridge: add support for sticky fdb entries
- bridge: switchdev: Allow clearing FDB entry offload indication
- net: bridge: fdb: convert is_local to bitops
- net: bridge: fdb: convert is_static to bitops
- net: bridge: fdb: convert is_sticky to bitops
- net: bridge: fdb: convert added_by_user to bitops
- net: bridge: fdb: convert added_by_external_learn to use bitops
- net: bridge: br_fdb_external_learn_add(): always set EXT_LEARN
- net: dsa: vsc73xx: fix possible subblocks range of CAPT block
- iommu/vt-d: Handle volatile descriptor status read
- cgroup: Protect css->cgroup write under css_set_lock
- um: line: always fill *error_out in setup_one_line()
- devres: Initialize an uninitialized struct member
- pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- hwmon: (lm95234) Fix underflows seen when writing limit attributes
- hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- smp: Add missing destroy_work_on_stack() call in smp_call_on_cpu()
- btrfs: replace BUG_ON with ASSERT in walk_down_proc()
- btrfs: clean up our handling of refs == 0 in snapshot delete
- PCI: Add missing bridge lock to pci_bus_lock()
- btrfs: initialize location to fix -Wmaybe-uninitialized in btrfs_lookup_dentry()
- HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- Input: uinput - reject requests with unreasonable number of slots
- usbnet: ipheth: race between ipheth_close and error handling
- Squashfs: sanity check symbolic link size
- of/irq: Prevent device address out-of-bounds read in interrupt map walk
- ata: pata_macio: Use WARN instead of BUG
- iio: buffer-dmaengine: fix releasing dma channel on error
- iio: fix scale application in iio_convert_raw_to_processed_unlocked
- nvmem: Fix return type of devm_nvmem_device_get() in kerneldoc
- uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- Drivers: hv: vmbus: Fix rescind handling in uio_hv_generic
- VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- clocksource/drivers/imx-tpm: Fix return -ETIME when delta exceeds INT_MAX
- clocksource/drivers/imx-tpm: Fix next event not taking effect sometime
- uprobes: Use kzalloc to allocate xol area
- ring-buffer: Rename ring_buffer_read() to read_buffer_iter_advance()
- tracing: Avoid possible softlockup in tracing_iter_reset()
- nilfs2: replace snprintf in show functions with sysfs_emit
- nilfs2: protect references to superblock parameters exposed in sysfs
- netns: add pre_exit method to struct pernet_operations
- ila: call nf_unregister_net_hooks() sooner
- ACPI: processor: Return an error if acpi_processor_get_info() fails in processor_add()
- ACPI: processor: Fix memory leaks in error paths of processor_add()
- drm/i915/fence: Mark debug_fence_init_onstack() with __maybe_unused
- drm/i915/fence: Mark debug_fence_free() with __maybe_unused
- rtmutex: Drop rt_mutex::wait_lock before scheduling
- net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- cx82310_eth: fix error return code in cx82310_bind()
- netns: restore ops before calling ops_exit_list
- Revert "parisc: Use irq_enter_rcu() to fix warning at kernel/context_tracking.c:367" https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.323
- staging: iio: frequency: ad9833: Get frequency value statically
- staging: iio: frequency: ad9833: Load clock using clock framework
- staging: iio: frequency: ad9834: Validate frequency parameter value
- usbnet: ipheth: fix carrier detection in modes 1 and 4
- net: ethernet: use ip_hdrlen() instead of bit shift
- net: phy: vitesse: repair vsc73xx autonegotiation
- scripts: kconfig: merge_config: config files: add a trailing newline
- arm64: dts: rockchip: override BIOS_DISABLE signal via GPIO hog on RK3399 Puma
- net/mlx5: Update the list of the PCI supported devices
- net: ftgmac100: Enable TX interrupt to avoid TX timeout
- net: dpaa: Pad packets to ETH_ZLEN
- soundwire: stream: Revert "soundwire: stream: fix programming slave ports for non-continous port maps"
- selftests/vm: remove call to ksft_set_plan()
- selftests/kcmp: remove call to ksft_set_plan()
- ASoC: allow module autoloading for table db1200_pids
- pinctrl: at91: make it work with current gpiolib
- microblaze: don't treat zero reserved memory regions as error
- net: ftgmac100: Ensure tx descriptor updates are visible
- wifi: iwlwifi: mvm: fix iwl_mvm_max_scan_ie_fw_cmd_room()
- wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- ASoC: tda7419: fix module autoloading
- spi: bcm63xx: Enable module autoloading
- x86/hyperv: Set X86_FEATURE_TSC_KNOWN_FREQ when Hyper-V provides frequency
- ocfs2: add bounds checking to ocfs2_xattr_find_entry()
- ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry()
- gpio: prevent potential speculation leaks in gpio_device_get_desc()
- USB: serial: pl2303: add device id for Macrosilicon MS3020
- ACPI: PMIC: Remove unneeded check in tps68470_pmic_opregion_probe()
- wifi: ath9k: fix parameter check in ath9k_init_debug()
- wifi: ath9k: Remove error checks when creating debugfs entries
- netfilter: nf_tables: elements with timeout below CONFIG_HZ never expire
- wifi: cfg80211: fix UBSAN noise in cfg80211_wext_siwscan()
- wifi: cfg80211: fix two more possible UBSAN-detected off-by-one errors
- wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop()
- can: bcm: Clear bo->bcm_proc_read after remove_proc_entry().
- Bluetooth: btusb: Fix not handling ZPL/short-transfer
- block, bfq: fix possible UAF for bfqq->bic with merge chain
- block, bfq: choose the last bfqq from merge chain in bfq_setup_cooperator()
- block, bfq: don't break merge chain in bfq_split_bfqq()
- spi: ppc4xx: handle irq_of_parse_and_map() errors
- spi: ppc4xx: Avoid returning 0 when failed to parse and map IRQ
- ARM: versatile: fix OF node leak in CPUs prepare
- reset: berlin: fix OF node leak in probe() error path
- clocksource/drivers/qcom: Add missing iounmap() on errors in msm_dt_timer_init()
- hwmon: (max16065) Fix overflows seen when writing limits
- mtd: slram: insert break after errors in parsing the map
- hwmon: (ntc_thermistor) fix module autoloading
- power: supply: max17042_battery: Fix SOC threshold calc w/ no current sense
- fbdev: hpfb: Fix an error handling path in hpfb_dio_probe()
- drm/stm: Fix an error handling path in stm_drm_platform_probe()
- drm/amd: fix typo
- drm/amdgpu: Replace one-element array with flexible-array member
- drm/amdgpu: properly handle vbios fake edid sizing
- drm/radeon: Replace one-element array with flexible-array member
- drm/radeon: properly handle vbios fake edid sizing
- drm/rockchip: vop: Allow 4096px width scaling
- drm/radeon/evergreen_cs: fix int overflow errors in cs track offsets
- jfs: fix out-of-bounds in dbNextAG() and diAlloc()
- drm/msm/a5xx: properly clear preemption records on resume
- drm/msm/a5xx: fix races in preemption evaluation stage
- ipmi: docs: don't advertise deprecated sysfs entries
- drm/msm: fix %s null argument error
- xen: use correct end address of kernel for conflict checking
- xen/swiotlb: simplify range_straddles_page_boundary()
- xen/swiotlb: add alignment check for dma buffers
- selftests/bpf: Fix error compiling test_lru_map.c
- xz: cleanup CRC32 edits from 2018
- kthread: add kthread_work tracepoints
- kthread: fix task state in kthread worker if being frozen
- jbd2: introduce/export functions jbd2_journal_submit|finish_inode_data_buffers()
- ext4: clear EXT4_GROUP_INFO_WAS_TRIMMED_BIT even mount with discard
- smackfs: Use rcu_assign_pointer() to ensure safe assignment in smk_set_cipso
- ext4: avoid negative min_clusters in find_group_orlov()
- ext4: return error on ext4_find_inline_entry
- ext4: avoid OOB when system.data xattr changes underneath the filesystem
- nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- nilfs2: determine empty node blocks as corrupted
- nilfs2: fix potential oob read in nilfs_btree_check_delete()
- perf sched timehist: Fix missing free of session in perf_sched__timehist()
- perf sched timehist: Fixed timestamp error when unable to confirm event sched_in time
- perf time-utils: Fix 32-bit nsec parsing
- clk: rockchip: Set parent rate for DCLK_VOP clock on RK3228
- drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error
- PCI: xilinx-nwl: Fix register misspelling
- RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- pinctrl: single: fix missing error code in pcs_probe()
- clk: ti: dra7-atl: Fix leak of of_nodes
- pinctrl: mvebu: Fix devinit_dove_pinctrl_probe function
- RDMA/cxgb4: Added NULL check for lookup_atid
- ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- nfsd: call cache_put if xdr_reserve_space returns NULL
- f2fs: enhance to update i_mode and acl atomically in f2fs_setattr()
- f2fs: fix typo
- f2fs: fix to update i_ctime in __f2fs_setxattr()
- f2fs: remove unneeded check condition in __f2fs_setxattr()
- f2fs: reduce expensive checkpoint trigger frequency
- coresight: tmc: sg: Do not leak sg_table
- netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition
- tcp: introduce tcp_skb_timestamp_us() helper
- tcp: check skb is non-NULL in tcp_rto_delta_us()
- net: qrtr: Update packets cloning when broadcasting
- netfilter: ctnetlink: compile ctnetlink_label_size with CONFIG_NF_CONNTRACK_EVENTS
- crypto: aead,cipher - zeroize key buffer after use
- Remove *.orig pattern from .gitignore
- soc: versatile: integrator: fix OF node leak in probe() error path
- USB: appledisplay: close race between probe and completion handler
- USB: misc: cypress_cy7c63: check for short transfer
- firmware_loader: Block path traversal
- tty: rp2: Fix reset with non forgiving PCIe host bridges
- drbd: Fix atomicity violation in drbd_uuid_set_bm()
- drbd: Add NULL check for net_conf to prevent dereference in state validation
- ACPI: sysfs: validate return type of _STR method
- f2fs: prevent possible int overflow in dir_block_index()
- f2fs: avoid potential int overflow in sanity_check_area_boundary()
- vfs: fix race between evice_inodes() and find_inode()&iput()
- fs: Fix file_set_fowner LSM hook inconsistencies
- nfs: fix memory leak in error path of nfs4_do_reclaim
- PCI: xilinx-nwl: Use irq_data_get_irq_chip_data()
- PCI: xilinx-nwl: Fix off-by-one in INTx IRQ handler
- soc: versatile: realview: fix memory leak during device remove
- soc: versatile: realview: fix soc_dev leak during device remove
- usb: yurex: Replace snprintf() with the safer scnprintf() variant
- USB: misc: yurex: fix race between read and write
- pps: remove usage of the deprecated ida_simple_xx() API
- pps: add an error check in parport_attach
- i2c: aspeed: Update the stop sw state when the bus recovery occurs
- i2c: isch: Add missed 'else'
- usb: yurex: Fix inconsistent locking bug in yurex_read()
- mailbox: rockchip: fix a typo in module autoloading
- mailbox: bcm2835: Fix timeout during suspend mode
- ceph: remove the incorrect Fw reference check when dirtying pages
- netfilter: uapi: NFTA_FLOWTABLE_HOOK is NLA_NESTED
- netfilter: nf_tables: prevent nf_skb_duplicated corruption
- r8152: Factor out OOB link list waits
- net: ethernet: lantiq_etop: fix memory disclosure
- net: avoid potential underflow in qdisc_pkt_len_init() with UFO
- net: add more sanity checks to qdisc_pkt_len_init()
- ipv4: ip_gre: Fix drops of small packets in ipgre_xmit
- sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
- ALSA: hda/generic: Unconditionally prefer preferred_dacs pairs
- ALSA: hda/conexant: Fix conflicting quirk for System76 Pangolin
- f2fs: Require FMODE_WRITE for atomic write ioctls
- wifi: ath9k: fix possible integer overflow in ath9k_get_et_stats()
- wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
- net: hisilicon: hip04: fix OF node leak in probe()
- net: hisilicon: hns_dsaf_mac: fix OF node leak in hns_mac_get_info()
- net: hisilicon: hns_mdio: fix OF node leak in probe()
- ACPICA: Fix memory leak if acpi_ps_get_next_namepath() fails
- ACPICA: Fix memory leak if acpi_ps_get_next_field() fails
- ACPI: EC: Do not release locks during operation region accesses
- ACPICA: check null return of ACPI_ALLOCATE_ZEROED() in acpi_db_convert_to_package()
- tipc: guard against string buffer overrun
- net: mvpp2: Increase size of queue_name buffer
- ipv4: Check !in_dev earlier for ioctl(SIOCSIFADDR).
- ipv4: Mask upper DSCP bits and ECN bits in NETLINK_FIB_LOOKUP family
- tcp: avoid reusing FIN_WAIT2 when trying to find port in connect() process
- ACPICA: iasl: handle empty connection_node
- wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- signal: Replace BUG_ON()s
- ALSA: asihpi: Fix potential OOB array access
- ALSA: hdsp: Break infinite MIDI input flush loop
- fbdev: pxafb: Fix possible use after free in pxafb_task()
- power: reset: brcmstb: Do not go into infinite loop if reset fails
- ata: sata_sil: Rename sil_blacklist to sil_quirks
- jfs: UBSAN: shift-out-of-bounds in dbFindBits
- jfs: Fix uaf in dbFreeBits
- jfs: check if leafidx greater than num leaves per dmap tree
- jfs: Fix uninit-value access of new_ea in ea_buffer
- drm/amd/display: Check stream before comparing them
- drm/amd/display: Fix index out of bounds in degamma hardware format translation
- drm/printer: Allow NULL data in devcoredump printer
- scsi: aacraid: Rearrange order of struct aac_srb_unit
- drm/radeon/r100: Handle unknown family in r100_cp_init_microcode()
- of/irq: Refer to actual buffer size in of_irq_parse_one()
- ext4: ext4_search_dir should return a proper error
- ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- spi: s3c64xx: fix timeout counters in flush_fifo
- selftests: breakpoints: use remaining time to check if suspend succeed
- selftests: vDSO: fix vDSO symbols lookup for powerpc64
- i2c: xiic: Wait for TX empty to avoid missed TX NAKs
- spi: bcm63xx: Fix module autoloading
- perf/core: Fix small negative period being ignored
- parisc: Fix itlb miss handler for 64-bit programs
- ALSA: core: add isascii() check to card ID generator
- ext4: no need to continue when the number of entries is 1
- ext4: propagate errors from ext4_find_extent() in ext4_insert_range()
- ext4: fix incorrect tid assumption in __jbd2_log_wait_for_space()
- ext4: aovid use-after-free in ext4_ext_insert_extent()
- ext4: fix double brelse() the buffer of the extents path
- ext4: fix incorrect tid assumption in ext4_wait_for_tail_page_commit()
- parisc: Fix 64-bit userspace syscall path
- of/irq: Support #msi-cells=<0> in of_msi_get_domain
- jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- ocfs2: fix the la space leak when unmounting an ocfs2 volume
- ocfs2: fix uninit-value in ocfs2_get_block()
- ocfs2: reserve space for inline xattr before attaching reflink tree
- ocfs2: cancel dqi_sync_work before freeing oinfo
- ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- ocfs2: fix null-ptr-deref when journal load failed.
- ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- riscv: define ILLEGAL_POINTER_VALUE for 64bit
- aoe: fix the potential use-after-free problem in more places
- clk: rockchip: fix error for unknown clocks
- media: uapi/linux/cec.h: cec_msg_set_reply_to: zero flags
- media: venus: fix use after free bug in venus_remove due to race condition
- iio: magnetometer: ak8975: Fix reading for ak099xx sensors
- tomoyo: fallback to realpath if symlink's pathname does not exist
- Input: adp5589-keys - fix adp5589_gpio_get_value()
- btrfs: wait for fixup workers before stopping cleaner kthread during umount
- gpio: davinci: fix lazy disable
- ext4: avoid ext4_error()'s caused by ENOMEM in the truncate path
- ext4: fix slab-use-after-free in ext4_split_extent_at()
- ext4: update orig_path in ext4_find_extent()
- arm64: Add Cortex-715 CPU part definition
- arm64: cputype: Add Neoverse-N3 definitions
- arm64: errata: Expand speculative SSBS workaround once more
- uprobes: fix kernel info leak via "[uprobes]" vma
- nfsd: use ktime_get_seconds() for timestamps
- nfsd: fix delegation_blocked() to block correctly for at least 30 seconds
- rtc: at91sam9: drop platform_data support
- rtc: at91sam9: fix OF node leak in probe() error path
- ACPI: battery: Simplify battery hook locking
- ACPI: battery: Fix possible crash when unregistering a battery hook
- ext4: fix inode tree inconsistency caused by ENOMEM
- net: ethernet: cortina: Drop TSO support
- tracing: Remove precision vsnprintf() check from print event
- drm: Move drm_mode_setcrtc() local re-init to failure path
- drm/crtc: fix uninitialized variable use even harder
- virtio_console: fix misc probe bugs
- Input: synaptics-rmi4 - fix UAF of IRQ domain on driver removal
- bpf: Check percpu map value size first
- s390/facility: Disable compile time optimization for decompressor code
- s390/mm: Add cond_resched() to cmm_alloc/free_pages()
- ext4: nested locking for xattr inode
- s390/cpum_sf: Remove WARN_ON_ONCE statements
- ktest.pl: Avoid false positives with grub2 skip regex
- clk: bcm: bcm53573: fix OF node leak in init
- i2c: i801: Use a different adapter-name for IDF adapters
- PCI: Mark Creative Labs EMU20k2 INTx masking as broken
- media: videobuf2-core: clear memory related fields in __vb2_plane_dmabuf_put()
- usb: chipidea: udc: enable suspend interrupt after usb reset
- tools/iio: Add memory allocation failure check for trigger_name
- driver core: bus: Return -EIO instead of 0 when show/store invalid bus attribute
- fbdev: sisfb: Fix strbuf array overflow
- NFS: Remove print_overflow_msg()
- SUNRPC: Fix integer overflow in decode_rc_list()
- tcp: fix tcp_enter_recovery() to zero retrans_stamp when it's safe
- netfilter: br_netfilter: fix panic with metadata_dst skb
- Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
- gpio: aspeed: Add the flush write to ensure the write complete.
- clk: Add (devm_)clk_get_optional() functions
- clk: generalize devm_clk_get() a bit
- clk: Provide new devm_clk helpers for prepared and enabled clocks
- gpio: aspeed: Use devm_clk api to manage clock source
- igb: Do not bring the device up after non-fatal error
- net: ibm: emac: mal: fix wrong goto
- ppp: fix ppp_async_encode() illegal access
- net: ipv6: ensure we call ipv6_mc_down() at most once
- CDC-NCM: avoid overflow in sanity checking
- HID: plantronics: Workaround for an unexcepted opposite volume key
- Revert "usb: yurex: Replace snprintf() with the safer scnprintf() variant"
- usb: xhci: Fix problem with xhci resume from suspend
- usb: storage: ignore bogus device raised by JieLi BR21 USB sound chip
- net: Fix an unsafe loop on the list
- posix-clock: Fix missing timespec64 check in pc_clock_settime()
- arm64: probes: Remove broken LDR (literal) uprobe support
- arm64: probes: Fix simulate_ldr*_literal()
- PCI: Add function 0 DMA alias quirk for Glenfly Arise chip
- fat: fix uninitialized variable
- KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- net: dsa: mv88e6xxx: Fix out-of-bound access
- s390/sclp_vt220: Convert newlines to CRLF instead of LFCR
- KVM: s390: Change virtual to physical address access in diag 0x258 handler
- x86/cpufeatures: Define X86_FEATURE_AMD_IBPB_RET
- drm/vmwgfx: Handle surface check failure correctly
- iio: dac: stm32-dac-core: add missing select REGMAP_MMIO in Kconfig
- iio: adc: ti-ads8688: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig
- iio: hid-sensors: Fix an error handling path in _hid_sensor_set_report_latency()
- iio: light: opt3001: add missing full-scale range value
- Bluetooth: Remove debugfs directory on module init failure
- Bluetooth: btusb: Fix regression with fake CSR controllers 0a12:0001
- xhci: Fix incorrect stream context type macro
- USB: serial: option: add support for Quectel EG916Q-GL
- USB: serial: option: add Telit FN920C04 MBIM compositions
- parport: Proper fix for array out-of-bounds access
- x86/apic: Always explicitly disarm TSC-deadline timer
- nilfs2: propagate directory read errors from nilfs_find_entry()
- clk: Fix pointer casting to prevent oops in devm_clk_release()
- clk: Fix slab-out-of-bounds error in devm_clk_release()
- RDMA/bnxt_re: Fix incorrect AVID type in WQE structure
- RDMA/cxgb4: Fix RDMA_CM_EVENT_UNREACHABLE error for iWARP
- RDMA/bnxt_re: Return more meaningful error
- drm/msm/dsi: fix 32-bit signed integer extension in pclk_rate calculation
- macsec: don't increment counters for an unrelated SA
- net: ethernet: aeroflex: fix potential memory leak in greth_start_xmit_gbit()
- net: systemport: fix potential memory leak in bcm_sysport_xmit()
- usb: typec: altmode should keep reference to parent
- Bluetooth: bnep: fix wild-memory-access in proto_unregister
- arm64:uprobe fix the uprobe SWBP_INSN in big-endian
- arm64: probes: Fix uprobes for big-endian kernels
- KVM: s390: gaccess: Refactor gpa and length calculation
- KVM: s390: gaccess: Refactor access address range check
- KVM: s390: gaccess: Cleanup access to guest pages
- KVM: s390: gaccess: Check if guest address is in memslot
- udf: fix uninit-value use in udf_get_fileshortad
- jfs: Fix sanity check in dbMount
- net/sun3_82586: fix potential memory leak in sun3_82586_send_packet()
- be2net: fix potential memory leak in be_xmit()
- net: usb: usbnet: fix name regression
- posix-clock: posix-clock: Fix unbalanced locking in pc_clock_settime()
- ALSA: hda/realtek: Update default depop procedure
- drm/amd: Guard against bad data for ATIF ACPI method
- ACPI: button: Add DMI quirk for Samsung Galaxy Book2 to fix initial lid detection issue
- nilfs2: fix kernel bug due to missing clearing of buffer delay flag
- hv_netvsc: Fix VF namespace also in synthetic NIC NETDEV_REGISTER event
- selinux: improve error checking in sel_write_load()
- arm64/uprobes: change the uprobe_opcode_t typedef to fix the sparse warning
- xfrm: validate new SA's prefixlen using SA family when sel.family is unset
- usb: dwc3: remove generic PHY calibrate() calls
- usb: dwc3: Add splitdisable quirk for Hisilicon Kirin Soc
- usb: dwc3: core: Stop processing of pending events if controller is halted
- cgroup: Fix potential overflow issue when checking max_depth
- wifi: mac80211: skip non-uploaded keys in ieee80211_iter_keys
- gtp: simplify error handling code in 'gtp_encap_enable()'
- gtp: allow -1 to be specified as file description from userspace
- net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT
- bpf: Fix out-of-bounds write in trie_get_next_key()
- net: support ip generic csum processing in skb_csum_hwoffload_help
- net: skip offload for NETIF_F_IPV6_CSUM if ipv6 header contains extension
- netfilter: nft_payload: sanitize offset and length before calling skb_checksum()
- firmware: arm_sdei: Fix the input parameter of cpuhp_remove_state()
- net: amd: mvme147: Fix probe banner message
- misc: sgi-gru: Don't disable preemption in GRU driver
- usbip: tools: Fix detach_port() invalid port error path
- usb: phy: Fix API devm_usb_put_phy() can not release the phy
- xhci: Fix Link TRB DMA in command ring stopped completion event
- Revert "driver core: Fix uevent_show() vs driver detach race"
- wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
- wifi: ath10k: Fix memory leak in management tx
- wifi: iwlegacy: Clear stale interrupts before resuming device
- nilfs2: fix potential deadlock with newly created symlinks
- ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow
- nilfs2: fix kernel bug due to missing clearing of checked flag
- mm: shmem: fix data-race in shmem_getattr()
- vt: prevent kernel-infoleak in con_font_get() https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.324
- arm64: dts: rockchip: Fix rt5651 compatible value on rk3399-sapphire-excavator
- ARM: dts: rockchip: fix rk3036 acodec node
- ARM: dts: rockchip: drop grf reference from rk3036 hdmi
- ARM: dts: rockchip: Fix the realtek audio codec on rk3036-kylin
- HID: core: zero-initialize the report buffer
- security/keys: fix slab-out-of-bounds in key_task_permission
- sctp: properly validate chunk size in sctp_sf_ootb()
- can: c_can: fix {rx,tx}_errors statistics
- net: hns3: fix kernel crash when uninstalling driver
- media: stb0899_algo: initialize cfr before using it
- media: dvbdev: prevent the risk of out of memory access
- media: dvb_frontend: don't play tricks with underflow values
- media: adv7604: prevent underflow condition when reporting colorspace
- ALSA: firewire-lib: fix return value on fail in amdtp_tscm_init()
- media: s5p-jpeg: prevent buffer overflows
- media: cx24116: prevent overflows on SNR calculus
- media: v4l2-tpg: prevent the risk of a division by zero
- drm/amdgpu: add missing size check in amdgpu_debugfs_gprwave_read()
- drm/amdgpu: prevent NULL pointer dereference if ATIF is not supported
- dm cache: correct the number of origin blocks to match the target length
- dm cache: fix out-of-bounds access to the dirty bitset when resizing
- dm cache: optimize dirty bit checking with find_next_bit when resizing
- dm cache: fix potential out-of-bounds access on the first resume
- dm-unstriped: cast an operand to sector_t to prevent potential uint32_t overflow
- nfs: Fix KMSAN warning in decode_getfattr_attrs()
- btrfs: reinitialize delayed ref list after deleting it from the list
- bonding (gcc13): synchronize bond_{a,t}lb_xmit() types
- net: bridge: xmit: make sure we have at least eth header len bytes
- media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format
- fs/proc: fix compile warning about variable 'vmcore_mmap_ops'
- usb: musb: sunxi: Fix accessing an released usb phy
- USB: serial: io_edgeport: fix use after free in debug printk
- USB: serial: qcserial: add support for Sierra Wireless EM86xx
- USB: serial: option: add Fibocom FG132 0x0112 composition
- USB: serial: option: add Quectel RG650V
- irqchip/gic-v3: Force propagation of the active state with a read-back
- ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()
- ALSA: pcm: Return 0 when size < start_threshold in capture
- ALSA: usb-audio: Add custom mixer status quirks for RME CC devices
- ALSA: usb-audio: Support jack detection on Dell dock
- ALSA: usb-audio: Add quirks for Dell WD19 dock
- hv_sock: Initializing vsk->trans to NULL to prevent a dangling pointer
- vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans
- ALSA: usb-audio: Add endianness annotations
- 9p: Avoid creating multiple slab caches with the same name
- HID: multitouch: Add quirk for HONOR MagicBook Art 14 touchpad
- bpf: use kvzmalloc to allocate BPF verifier environment
- sound: Make CONFIG_SND depend on INDIRECT_IOMEM instead of UML
- powerpc/powernv: Free name on error in opal_event_init()
- fs: Fix uninitialized value issue in from_kuid and from_kgid
- net: usb: qmi_wwan: add Fibocom FG132 0x0112 composition
- 9p: fix slab cache name creation for real https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.325
- netlink: terminate outstanding dump on socket close
- ocfs2: uncache inode which has failed entering the group
- nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint
- ocfs2: fix UBSAN warning in ocfs2_verify_volume()
- nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint
- Revert "mmc: dw_mmc: Fix IDMAC operation with pages bigger than 4K"
- media: dvbdev: fix the logic when DVB_DYNAMIC_MINORS is not set
- kbuild: Use uname for LINUX_COMPILE_HOST detection
- mm: revert "mm: shmem: fix data-race in shmem_getattr()"
- ASoC: Intel: bytcr_rt5640: Add DMI quirk for Vexia Edu Atla 10 tablet
- mac80211: fix user-power when emulating chanctx
- selftests/watchdog-test: Fix system accidentally reset after watchdog-test
- x86/amd_nb: Fix compile-testing without CONFIG_AMD_NB
- net: usb: qmi_wwan: add Quectel RG650V
- proc/softirqs: replace seq_printf with seq_put_decimal_ull_width
- nvme: fix metadata handling in nvme-passthrough
- initramfs: avoid filename buffer overrun
- m68k: mvme147: Fix SCSI controller IRQ numbers
- m68k: mvme16x: Add and use "mvme16x.h"
- m68k: mvme147: Reinstate early console
- acpi/arm64: Adjust error handling procedure in gtdt_parse_timer_block()
- s390/syscalls: Avoid creation of arch/arch/ directory
- hfsplus: don't query the device logical block size multiple times
- EDAC/fsl_ddr: Fix bad bit shift operations
- crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY
- crypto: cavium - Fix the if condition to exit loop after timeout
- crypto: bcm - add error check in the ahash_hmac_init function
- crypto: cavium - Fix an error handling path in cpt_ucode_load_fw()
- time: Fix references to _msecs_to_jiffies() handling of values
- soc: qcom: geni-se: fix array underflow in geni_se_clk_tbl_get()
- mmc: mmc_spi: drop buggy snprintf()
- ARM: dts: cubieboard4: Fix DCDC5 regulator constraints
- regmap: irq: Set lockdep class for hierarchical IRQ domains
- firmware: arm_scpi: Check the DVFS OPP count returned by the firmware
- drm/mm: Mark drm_mm_interval_tree*() functions with __maybe_unused
- wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service()
- drm/omap: Fix locking in omap_gem_new_dmabuf()
- bpf: Fix the xdp_adjust_tail sample prog issue
- wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_config_scan()
- drm/etnaviv: consolidate hardware fence handling in etnaviv_gpu
- drm/etnaviv: dump: fix sparse warnings
- drm/etnaviv: fix power register offset on GC300
- drm/etnaviv: hold GPU lock across perfmon sampling
- net: rfkill: gpio: Add check for clk_enable()
- ALSA: us122l: Use snd_card_free_when_closed() at disconnection
- ALSA: caiaq: Use snd_card_free_when_closed() at disconnection
- ALSA: 6fire: Release resources at card release
- netpoll: Use rcu_access_pointer() in netpoll_poll_lock
- trace/trace_event_perf: remove duplicate samples on the first tracepoint event
- powerpc/vdso: Flag VDSO64 entry points as functions
- mfd: da9052-spi: Change read-mask to write-mask
- cpufreq: loongson2: Unregister platform_driver on failure
- mtd: rawnand: atmel: Fix possible memory leak
- RDMA/bnxt_re: Check cqe flags to know imm_data vs inv_irkey
- mfd: rt5033: Fix missing regmap_del_irq_chip()
- scsi: bfa: Fix use-after-free in bfad_im_module_exit()
- scsi: fusion: Remove unused variable 'rc'
- scsi: qedi: Fix a possible memory leak in qedi_alloc_and_init_sb()
- ocfs2: fix uninitialized value in ocfs2_file_read_iter()
- powerpc/sstep: make emulate_vsx_load and emulate_vsx_store static
- fbdev/sh7760fb: Alloc DMA memory from hardware device
- fbdev: sh7760fb: Fix a possible memory leak in sh7760fb_alloc_mem()
- dt-bindings: clock: adi,axi-clkgen: convert old binding to yaml format
- dt-bindings: clock: axi-clkgen: include AXI clk
- clk: axi-clkgen: use devm_platform_ioremap_resource() short-hand
- clk: clk-axi-clkgen: make sure to enable the AXI bus clock
- perf probe: Correct demangled symbols in C++ program
- PCI: cpqphp: Use PCI_POSSIBLE_ERROR() to check config reads
- PCI: cpqphp: Fix PCIBIOS_* return value confusion
- m68k: mcfgpio: Fix incorrect register offset for CONFIG_M5441x
- m68k: coldfire/device.c: only build FEC when HW macros are defined
- rpmsg: glink: Add TX_DATA_CONT command while sending
- rpmsg: glink: Send READ_NOTIFY command in FIFO full case
- rpmsg: glink: Fix GLINK command prefix
- rpmsg: glink: use only lower 16-bits of param2 for CMD_OPEN name length
- NFSD: Prevent NULL dereference in nfsd4_process_cb_update()
- NFSD: Cap the number of bytes copied by nfs4_reset_recoverydir()
- vfio/pci: Properly hide first-in-list PCIe extended capability
- power: supply: core: Remove might_sleep() from power_supply_put()
- net: usb: lan78xx: Fix memory leak on device unplug by freeing PHY device
- tg3: Set coherent DMA mask bits to 31 for BCM57766 chipsets
- net: usb: lan78xx: Fix refcounting and autosuspend on invalid WoL configuration
- marvell: pxa168_eth: fix call balance of pep->clk handling routines
- net: stmmac: dwmac-socfpga: Set RX watchdog interrupt as broken
- usb: using mutex lock and supporting O_NONBLOCK flag in iowarrior_read()
- USB: chaoskey: fail open after removal
- USB: chaoskey: Fix possible deadlock chaoskey_list_lock
- misc: apds990x: Fix missing pm_runtime_disable()
- apparmor: fix 'Do simple duplicate message elimination'
- usb: ehci-spear: fix call balance of sehci clk handling routines
- ext4: supress data-race warnings in ext4_free_inodes_{count,set}()
- ext4: fix FS_IOC_GETFSMAP handling
- jfs: xattr: check invalid xattr size more strictly
- ASoC: codecs: Fix atomicity violation in snd_soc_component_get_drvdata()
- PCI: Fix use-after-free of slot->bus on hot remove
- tty: ldsic: fix tty_ldisc_autoload sysctl's proc_handler
- Bluetooth: Fix type of len in rfcomm_sock_getsockopt{,_old}()
- ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices
- Revert "usb: gadget: composite: fix OS descriptors w_value logic"
- serial: sh-sci: Clean sci_ports[0] after at earlycon exit
- Revert "serial: sh-sci: Clean sci_ports[0] after at earlycon exit"
- netfilter: ipset: add missing range check in bitmap_ip_uadt
- spi: Fix acpi deferred irq probe
- ubi: wl: Put source PEB into correct list if trying locking LEB failed
- um: ubd: Do not use drvdata in release
- um: net: Do not use drvdata in release
- serial: 8250: omap: Move pm_runtime_get_sync
- um: vector: Do not use drvdata in release
- sh: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- arm64: tls: Fix context-switching of tpidrro_el0 when kpti is enabled
- block: fix ordering between checking BLK_MQ_S_STOPPED request adding
- HID: wacom: Interpret tilt data from Intuos Pro BT as signed values
- media: wl128x: Fix atomicity violation in fmc_send_cmd()
- usb: dwc3: gadget: Fix checking for number of TRBs left
- lib: string_helpers: silence snprintf() output truncation warning
- NFSD: Prevent a potential integer overflow
- rpmsg: glink: Propagate TX failures in intentless mode as well
- um: Fix the return value of elf_core_copy_task_fpregs
- NFSv4.0: Fix a use-after-free problem in the asynchronous open()
- rtc: check if __rtc_read_time was successful in rtc_timer_do_work()
- ubifs: Correct the total block count by deducting journal reservation
- ubi: fastmap: Fix duplicate slab cache names while attaching
- jffs2: fix use of uninitialized variable
- block: return unsigned int from bdev_io_min
- 9p/xen: fix init sequence
- 9p/xen: fix release of IRQ
- modpost: remove incorrect code in do_eisa_entry()
- sh: intc: Fix use-after-free bug in register_intc_controller()
- References