- Update to 5.4.302.
- 9p: fix /sys/fs/9p/caches overwriting itself
- 9p: sysfs_init: don't hardcode error to ENOMEM
- ACPI: debug: fix signedness issues in read/write helpers
- ACPI: processor: idle: Fix memory leak when register cpuidle device failed
- ACPI: property: Return present device nodes only on fwnode interface
- ACPI: TAD: Add missing sysfs_remove_group() for ACPI_TAD_RT
- ACPI: video: Fix use-after-free in acpi_video_switch_brightness()
- ACPI: video: force native for Lenovo 82K8
- ACPICA: dispatcher: Use acpi_ds_clear_operands() in acpi_ds_call_control_method()
- ACPICA: Update dsmethod.c to get rid of unused variable warning
- allow finish_no_open(file, ERR_PTR(-E...))
- ALSA: firewire: amdtp-stream: fix enum kernel-doc warnings
- ALSA: firewire-motu: drop EPOLLOUT from poll return values as write is not supported
- ALSA: lx_core: use int type to store negative error codes
- ALSA: usb-audio: Add mixer quirk for Sony DualSense PS5
- ALSA: usb-audio: apply quirk for MOONDROP Quark2
- ALSA: usb-audio: Avoid multiple assignments in mixer_quirks
- ALSA: usb-audio: Convert comma to semicolon
- ALSA: usb-audio: Fix block comments in mixer_quirks
- ALSA: usb-audio: Fix build with CONFIG_INPUT=n
- ALSA: usb-audio: Fix NULL pointer dereference in snd_usb_mixer_controls_badd
- ALSA: usb-audio: fix uac2 clock source at terminal parser
- ALSA: usb-audio: Remove unneeded wmb() in mixer_quirks
- ALSA: usb-audio: Simplify NULL comparison in mixer_quirks
- amd-xgbe: Avoid spurious link down messages during interface toggle
- arc: Fix __fls() const-foldability via __builtin_clzl()
- ASoC: cs4271: Fix regulator leak on probe failure
- ASoC: Intel: bytcht_es8316: Fix invalid quirk input mapping
- ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping
- ASoC: Intel: bytcr_rt5651: Fix invalid quirk input mapping
- ASoC: max98090/91: fixed max98091 ALSA widget powering up/down
- ASoC: qdsp6: q6asm: do not sleep while atomic
- ASoC: SOF: Intel: hda-stream: Fix incorrect variable used in error message
- ASoC: wm8940: Correct typo in control name
- ASoC: wm8974: Correct PLL rate rounding
- ata: libata-scsi: Fix system suspend for a security locked drive
- be2net: pass wrb_params in case of OS2BMC
- binder: remove "invalid inc weak" check
- blk-mq: check kobject state_in_sysfs before deleting in blk_mq_unregister_hctx
- block: use int to store blk_stack_limits() return value
- Bluetooth: 6lowpan: Don't hold spin lock over sleeping functions
- Bluetooth: 6lowpan: fix BDADDR_LE vs ADDR_LE_DEV address type confusion
- Bluetooth: 6lowpan: reset link-local header on ipv6 recv path
- Bluetooth: bcsp: receive data only if registered
- Bluetooth: btusb: reorder cleanup in btusb_disconnect to avoid UAF
- Bluetooth: L2CAP: export l2cap_chan_hold for modules
- Bluetooth: SCO: Fix UAF on sco_conn_free
- bpf: Don't use %pK through printk
- bpf: Explicitly check accesses to bpf_sock_addr
- bridge: Redirect to backup port when port is administratively down
- btrfs: avoid potential out-of-bounds in btrfs_encode_fh()
- btrfs: use smp_mb__after_atomic() when forcing COW in create_pending_snapshot()
- can: gs_usb: increase max interface to U8_MAX
- can: hi311x: populate ndo_change_mtu() to prevent buffer overflow
- can: j1939: j1939_local_ecu_get(): undo increment when j1939_local_ecu_get() fails
- can: j1939: j1939_sk_bind(): call j1939_priv_put() immediately when j1939_local_ecu_get() failed
- can: mcba_usb: populate ndo_change_mtu() to prevent buffer overflow
- can: peak_usb: fix shift-out-of-bounds issue
- can: rcar_can: rcar_can_resume(): fix s2ram with PSCI
- can: sun4i_can: populate ndo_change_mtu() to prevent buffer overflow
- ceph: add checking of wait_for_completion_killable() return value
- cgroup: split cgroup_destroy_wq into 3 workqueues
- char: misc: Does not request module for miscdevice with dynamic minor
- clk: nxp: Fix pll0 rate check condition in LPC18xx CGU driver
- clk: nxp: lpc18xx-cgu: convert from round_rate() to determine_rate()
- clocksource/drivers/clps711x: Fix resource leaks in error paths
- clocksource/drivers/vf-pit: Replace raw_readl/writel to readl/writel
- cnic: Fix use-after-free bugs in cnic_delete_task
- comedi: fix divide-by-zero in comedi_buf_munge()
- compiler_types: Move unused static inline functions warning to W=2
- cpufreq: intel_pstate: Fix object lifecycle issue in update_qos_request()
- cpufreq/longhaul: handle NULL policy in longhaul_exit
- cramfs: Verify inode mode when loading from disk
- crypto: atmel - Fix dma_unmap_sg() direction
- crypto: essiv - Check ssize for decryption and in-place encryption
- devcoredump: Fix circular locking dependency with devcd->mutex.
- dlm: check for defined force value in dlm_lockspace_release
- dm: fix NULL pointer dereference in __dm_suspend()
- dmaengine: dw-edma: Set status for callback_result
- dmaengine: mv_xor: match alloc_wc and free_wc
- dmaengine: qcom: bam_dma: Fix DT error handling for num-channels/ees
- dmaengine: sh: setup_xref error handling
- dmaengine: ti: edma: Fix memory allocation size for queue_priority_map
- dm-integrity: limit MAX_TAG_SIZE to 255
- driver core/PM: Set power.no_callbacks along with power.no_pm
- drivers/base/node: fix double free in register_one_node()
- drivers/base/node: handle error properly in register_one_node()
- drm/amdgpu: use atomic functions with memory barriers for vm fault info
- drm/amdkfd: return -ENOTTY for unsupported IOCTLs
- drm/amdkfd: Tie UNMAP_LATENCY to queue_preemption
- drm/etnaviv: fix flush sequence logic
- drm/exynos: exynos7_drm_decon: remove ctx->suspended
- drm/gma500: Fix null dereference in hdmi teardown
- drm/nouveau: fix bad ret code in nouveau_bo_move_prep
- drm/nouveau: replace snprintf() with scnprintf() in nvkm_snprintbf()
- drm/radeon/r600_cs: clean up of dead code in r600_cs
- drm/vmwgfx: Fix Use-after-free in validation
- drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE
- EDAC/altera: Delete an inappropriate dma_free_coherent() call
- EDAC/altera: Handle OCRAM ECC enable after warm reset
- EDAC/altera: Use INTTEST register for Ethernet and USB SBE injection
- exec: Fix incorrect type for ret
- ext4: avoid potential buffer over-read in parse_apply_sb_mount_options()
- ext4: correctly handle queries for metadata mappings
- ext4: detect invalid INLINE_DATA + EXTENTS flag combination
- ext4: guard against EA inode refcount underflow in xattr update
- ext4: increase i_disksize to offset + len in ext4_update_disksize_before_punch()
- extcon: adc-jack: Cleanup wakeup source only if it was enabled
- extcon: adc-jack: Fix wakeup source leaks on device unbind
- fbcon: fix integer overflow in fbcon_do_set_font
- fbcon: Fix OOB access in font allocation
- fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds
- fbdev: atyfb: Check if pll_ops->init_pll failed
- fbdev: bitblit: bound-check glyph index in bit_putcs*
- fbdev: pvr2fb: Fix leftover reference to ONCHIP_NR_DMA_CHANNELS
- fbdev: valkyriefb: Fix reference count leak in valkyriefb_init
- firmware: meson_sm: fix device leak at probe
- fs: Add 'initramfs_options' to set initramfs mount options
- fs: udf: fix OOB read in lengthAllocDescs handling
- fs/hpfs: Fix error code for new_inode() failure in mkdir/create/mknod/symlink
- fs/proc: fix uaf in proc_readdir_de()
- fuse: check if copy_file_range() returns larger than requested size
- fuse: prevent overflow in copy_file_range return value
- gcov: add support for GCC 15
- genirq: Export affinity setter for modules
- genirq: Provide new interfaces for affinity hints
- genirq/affinity: Add irq_update_affinity_desc()
- hfs: clear offset and space out of valid records in b-tree node
- hfs: fix KMSAN uninit-value issue in hfs_find_set_zero_bits()
- hfs: make proper initalization of struct hfs_find_data
- hfs: validate record offset in hfsplus_bmap_alloc
- hfsplus: fix KMSAN uninit-value issue in hfsplus_delete_cat()
- hfsplus: fix KMSAN uninit-value issue in __hfsplus_ext_cache_extent()
- hfsplus: fix slab-out-of-bounds read in hfsplus_strcasecmp()
- hfsplus: return EIO when type of hidden directory mismatch in hfsplus_fill_super()
- HID: quirks: avoid Cooler Master MM712 dongle wakeup bug
- HID: quirks: work around VID/PID conflict for 0x4c4a/0x4155
- hwmon: (dell-smm) Add support for Dell OptiPlex 7040
- i2c: designware: Add disabling clocks when probe fails
- i2c: mediatek: fix potential incorrect use of I2C_MASTER_WRRD
- i40e: add mask to apply valid bits for itr_idx
- i40e: add max boundary check for VF filters
- i40e: add validation for ring_len param
- i40e: fix idx validation in config queues msg
- i40e: fix idx validation in i40e_validate_queue_map
- i40e: fix input validation logic for action_meta
- i40e: fix IRQ freeing in i40e_vsi_request_irq_msix error path
- i40e: fix validation of VF state in get resources
- i40e: increase max descriptors for XL710
- i40e: remove redundant memory barrier when cleaning Tx descs
- i40e: Use irq_update_affinity_hint()
- IB/mlx5: Fix obj_type mismatch for SRQ event subscriptions
- IB/sa: Fix sa_local_svc_timeout_ms read race
- igb: fix link test skipping when interface is admin down
- iio: adc: spear_adc: mask SPEAR_ADC_STATUS channel and avg sample before setting register
- iio: consumers: Fix offset handling in iio_convert_raw_to_processed()
- iio: dac: ad5360: use int type to store negative error codes
- iio: dac: ad5421: use int type to store negative error codes
- iio: frequency: adf4350: Fix ADF4350_REG3_12BIT_CLKDIV_MODE
- iio: frequency: adf4350: Fix prescaler usage.
- Input: cros_ec_keyb - fix an invalid memory access
- Input: pegasus-notetaker - fix potential out-of-bounds access
- Input: remove third argument of usb_maxpacket()
- Input: uinput - zero-initialize uinput_ff_upload_compat to avoid info leak
- ipv4: route: Prevent rt_bind_exception() from rebinding stale fnhe
- ipv6: np->rxpmtu race annotation
- ipvs: Defer ip_vs_ftp unregister during netns cleanup
- irqchip/gic-v2m: Handle Multiple MSI base IRQ Alignment
- isdn: mISDN: hfcsusb: fix memory leak in hfcsusb_probe()
- jbd2: ensure that all ongoing I/O complete before freeing blocks
- jfs: fix uninitialized waitqueue in transaction manager
- jfs: Verify inode mode when loading from disk
- kconfig/mconf: Initialize the default locale at startup
- kconfig/nconf: Initialize the default locale at startup
- KEYS: trusted_tpm1: Compare HMAC values in constant time
- KVM: SVM: Sync TPR from LAPIC into VMCB::V_TPR even if AVIC is active
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O
- lib/genalloc: fix device leak in of_gen_pool_get()
- mailbox: zynqmp-ipi: Remove dev.parent check in zynqmp_ipi_free_mboxes
- mailbox: zynqmp-ipi: Remove redundant mbox_controller_unregister() call
- media: b2c2: Fix use-after-free causing by irq_check_work in flexcop_pci_remove
- media: cx18: Add missing check after DMA map
- media: fix uninitialized symbol warnings
- media: i2c: mt9v111: fix incorrect type for ret
- media: i2c: tc358743: Fix use-after-free bugs caused by orphan timer in probe
- media: imon: grab lock earlier in imon_ir_change_protocol()
- media: imon: make send_packet() more robust
- media: imon: reorganize serialization
- media: lirc: Fix error handling in lirc_register()
- media: mc: Clear minor number before put device
- media: pci: ivtv: Add missing check after DMA map
- media: pci: ivtv: Don't create fake v4l2_fh
- media: pci/ivtv: switch from 'pci_' to 'dma_' API
- media: rc: Add support for another iMON 0xffdc device
- media: rc: Directly use ida_free()
- media: rc: fix races with imon_disconnect()
- media: redrat3: use int type to store negative error codes
- media: rj54n1cb0c: Fix memleak in rj54n1_probe()
- media: s5p-mfc: remove an unused/uninitialized variable
- media: tuner: xc5000: Fix use-after-free in xc5000_release
- media: tunner: xc5000: Refactor firmware load
- memory: samsung: exynos-srom: Correct alignment
- memory: samsung: exynos-srom: Fix of_iomap leak in exynos_srom_probe
- memstick: Add timeout to prevent indefinite waiting
- mfd: intel_soc_pmic_chtdc_ti: Drop unneeded assignment for cache_type
- mfd: intel_soc_pmic_chtdc_ti: Fix invalid regmap-config max_register value
- mfd: intel_soc_pmic_chtdc_ti: Set use_single_read regmap_config flag
- mfd: madera: Work around false-positive -Wininitialized warning
- mfd: stmpe: Remove IRQ domain upon removal
- mfd: stmpe-i2c: Add missing MODULE_LICENSE
- mfd: vexpress-sysreg: Check the return value of devm_gpiochip_add_data()
- minixfs: Verify inode mode when loading from disk
- mips: lantiq: danube: add missing device_type in pci node
- mips: lantiq: danube: add missing properties to cpu node
- mips: lantiq: xway: sysctrl: rename stp clock
- MIPS: Malta: Fix !EVA SOC-it PCI MMIO
- MIPS: Malta: Fix keyboard resource preventing i8042 driver from registering
- misc: genwqe: Fix incorrect cmd field being reported in error
- mlxsw: spectrum: Fix memory leak in mlxsw_sp_flower_stats()
- mm: hugetlb: avoid soft lockup when mprotect to large memory area
- mmc: core: SPI mode remove cmd7
- mmc: host: renesas_sdhi: Fix the actual clock
- mmc: mvsdio: Fix dma_unmap_sg() nents value
- mmc: sdhci-msm: Enable tuning for SDR50 mode for SD card
- mm/hugetlb: fix folio is still mapped when deleted
- mm/khugepaged: fix the address passed to notifier on testing young
- mm/ksm: fix flag-dropping behavior in ksm_madvise
- mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory
- mm/migrate_device: don't add folio to be freed to LRU in migrate_device_finalize()
- mm/page_alloc: fix hash table order logging in alloc_large_system_hash()
- mtd: nand: raw: atmel: Fix comment in timings preparation
- mtd: nand: raw: atmel: Respect tAR, tCLR in read setup timing
- mtd: rawnand: fsmc: Default to autodetect buswidth
- mtd: rawnand: stm32_fmc2: avoid overlapping mappings on ECC buffer
- mtd: rawnand: stm32_fmc2: fix ECC overwrite
- net: add ndo_fdb_del_bulk
- net: bonding: fix possible peer notify event loss or dup issue
- net: call cond_resched() less often in __release_sock()
- net: Call trace_sock_exceed_buf_limit() for memcg failure with SK_MEM_RECV.
- net: dl2k: switch from 'pci_' to 'dma_' API
- net: dlink: handle dma_map_single() failure properly
- net: dsa: b53: fix enabling ip multicast
- net: dsa: b53: fix resetting speed and pause on forced link
- net: dsa: b53: prevent GMII_PORT_OVERRIDE_CTRL access on BCM5325
- net: dsa: b53: stop reading ARL entries if search is done
- net: dsa/b53: change b53_force_port_config() pause argument
- net: ena: return 0 in ena_get_rxfh_key_size() when RSS hash key is not configurable
- net: enetc: correct the value of ENETC_RXB_TRUESIZE
- net: ethernet: ti: netcp: Standardize knav_dma_open_channel to return NULL on error
- net: fec: correct rx_bytes statistic for the case SHIFT16 is set
- net: fec: Fix possible NPD in fec_enet_phy_reset_after_clk_enable()
- net: Fix null-ptr-deref by sock_lock_init_class_and_name() and rmmod.
- net: fsl_pq_mdio: Fix device node reference leak in fsl_pq_mdio_probe
- net: intel: fm10k: Fix parameter idx set but not used
- net: ipv6: fix field-spanning memcpy warning in AH output
- net: liquidio: fix overflow in octeon_init_instr_queue()
- net: macb: avoid dealing with endianness in macb_set_hwaddr()
- net: mdio: fix resource leak in mdiobus_register_device()
- net: natsemi: fix `rx_dropped` double accounting on `netif_rx()` failure
- net: netlink: add NLM_F_BULK delete request modifier
- net: netpoll: fix incorrect refcount handling causing incorrect cleanup
- net: nfc: nci: Increase NCI_DATA_TIMEOUT to 3000 ms
- net: openvswitch: remove never-working support for setting nsh fields
- net: phy: dp83867: Disable EEE support as not implemented
- net: qede: Initialize qede_ll_ops with designated initializer
- net: ravb: Enforce descriptor type ordering
- net: ravb: Ensure memory write completes before ringing TX doorbell
- net: rfkill: gpio: add DT support
- net: rfkill: gpio: Fix crash due to dereferencering uninitialized pointer
- net: rtnetlink: add bulk delete support flag
- net: rtnetlink: add helper to extract msg type's kind
- net: rtnetlink: add msg kind names
- net: rtnetlink: add NLM_F_BULK support to rtnl_fdb_del
- net: rtnetlink: fix module reference count leak issue in rtnetlink_rcv_msg
- net: rtnetlink: remove redundant assignment to variable err
- net: rtnetlink: use BIT for flag values
- net: sched: act_ife: initialize struct tc_ife to fix KMSAN kernel-infoleak
- net: sh_eth: Disable WoL if system can not suspend
- net: usb: asix_devices: Check return value of usbnet_get_endpoints
- net: usb: qmi_wwan: initialize MAC header offset in qmimux_rx_fixup
- net: usb: Remove disruptive netif_wake_queue in rtl8150_set_multicast
- net: usb: rtl8150: Fix frame padding
- net: vlan: sync VLAN features with lower device
- net: When removing nexthops, don't call synchronize_net if it is not necessary
- net/9p: fix double req put in p9_fd_cancelled
- net/cls_cgroup: Fix task_get_classid() during qdisc run
- netfilter: ipset: Remove unused htable_bits in macro ahash_region
- net/ip6_tunnel: Prevent perpetual tunnel growth
- net/mlx4: prevent potential use after free in mlx4_en_do_uc_filter()
- net/mlx5e: Fix maxrate wraparound in threshold between units
- net/mlx5e: Fix wraparound in rate limiting for values above 255 Gbps
- net_sched: limit try_bulk_dequeue_skb() batches
- net_sched: remove need_resched() from qdisc_run()
- net/sched: sch_qfq: Fix null-deref in agg_dequeue
- net/sctp: fix a null dereference in sctp_disposition sctp_sf_do_5_1D_ce()
- nfp: fix RSS hash key size when RSS is not supported
- NFS4: Fix state renewals missing after boot
- nfs4_setup_readdir(): insufficient locking for ->d_parent->d_inode dereferencing
- NFSD: Define a proc_layoutcommit for the FlexFiles layout type
- NFSD: Fix last write offset handling in layoutcommit
- NFSD: Minor cleanup in layoutcommit processing
- nfsd: nfserr_jukebox in nlm_fopen should lead to a retry
- NFSv4: Don't clear capabilities that won't be reset
- NFSv4: handle ERR_GRACE on delegation recalls
- NFSv4.1: fix backchannel max_resp_sz verification check
- NFSv4.1: fix mount hang after CREATE_SESSION failure
- nilfs2: fix CFI failure when accessing /sys/fs/nilfs2/features/*
- ocfs2: clear extent cache after moving/defragmenting extents
- ocfs2: fix double free in user_cluster_connect()
- ocfs2: fix recursive semaphore deadlock in fiemap call
- orangefs: fix xattr related buffer overflow...
- padata: Reset next CPU when reorder sequence wraps around
- page_pool: Clamp pool size to max 16K pages
- PCI: Disable MSI on RDC PCI to PCIe bridges
- PCI: keystone: Use devm_request_irq() to free "ks-pcie-error-irq" on exit
- PCI: tegra: Fix devm_kcalloc() argument order for port->phys allocation
- PCI/AER: Fix missing uevent on recovery when a reset is requested
- PCI/IOV: Add PCI rescan-remove locking when enabling/disabling SR-IOV
- PCI/P2PDMA: Fix incorrect pointer usage in devm_kfree() call
- pcmcia: omap_cf: Mark driver struct with __refdata to prevent section mismatch
- perf session: Fix handling when buffer exceeds 2 GiB
- perf subcmd: avoid crash in exclude_cmds when excludes is empty
- perf util: Fix compression checks returning -1 as bool
- phy: cadence: cdns-dphy: Enable lower resolutions in dphy
- phy: ti-pipe3: fix device leak at unbind
- pid: Add a judgment for ns null in pid_nr_ns
- pinctrl: check the return value of pinmux_ops::get_function_name()
- pinctrl: meson-gxl: add missing i2c_d pinmux
- pmdomain: imx: Fix reference count leak in imx_gpc_remove
- power: supply: bq27xxx: fix error return in case of no bq27000 hdq battery
- power: supply: bq27xxx: restrict no-battery detection to bq27000
- powerpc/eeh: Use result of error_detected() in uevent
- pps: fix warning in pps_register_cdev when register device fail
- pwm: berlin: Fix wrong register in suspend/resume
- pwm: tiehrpwm: Fix corner case in clock divisor calculation
- RDMA/core: Resolve MAC of next-hop device without ARP support
- RDMA/siw: Always report immediate post SQ errors
- rds: Fix endianness annotation for RDS_MPATH_HASH
- rds: ib: Increment i_fastreg_wrs before bailing out
- regmap: Remove superfluous check for !config in __regmap_init()
- regmap: slimbus: fix bus_context pointer in regmap init calls
- regulator: fixed: fix GPIO descriptor leak on register failure
- regulator: fixed: use dev_err_probe for register
- remoteproc: qcom: q6v5: Avoid disabling handover IRQ twice
- remoteproc: qcom: q6v5: Avoid handling handover twice
- Revert "cpuidle: menu: Avoid discarding useful information"
- Revert "net/mlx5e: Update and set Xon/Xoff upon MTU set"
- Revert "net/mlx5e: Update and set Xon/Xoff upon port speed set"
- rseq/selftests: Use weak symbol reference, not definition, to link with glibc
- rtc: interface: Ensure alarm irq is enabled when UIE is enabled
- rtc: interface: Fix long-standing race when setting alarm
- rtc: x1205: Fix Xicor X1205 vendor prefix
- rtnetlink: Allow deleting FDB entries in user namespace
- sched: Make newidle_balance() static again
- sched/balancing: Rename newidle_balance() => sched_balance_newidle()
- sched/fair: Fix pelt lost idle time detection
- sched/fair: Trivial correction of the newidle_balance() comment
- scsi: hpsa: Fix potential memory leak in hpsa_big_passthru_ioctl()
- scsi: libsas: Add sas_task_find_rq()
- scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET
- scsi: lpfc: Define size of debugfs entry for xri rebalancing
- scsi: mpt3sas: Fix crash in transport port remove by using ioc_info()
- scsi: mvsas: Delete mvs_tag_init()
- scsi: mvsas: Fix use-after-free bugs in mvs_work_queue
- scsi: mvsas: Use sas_task_find_rq() for tagging
- scsi: myrs: Fix dma_alloc_coherent() error check
- scsi: pm8001: Use int instead of u32 to store error codes
- scsi: pm80xx: Fix array-index-out-of-of-bounds on rmmod
- scsi: sg: Do not sleep in atomic context
- scsi: target: target_core_configfs: Add length check to avoid buffer overflow
- scsi: target: tcm_loop: Fix segfault in tcm_loop_tpg_address_show()
- sctp: avoid NULL dereference when chunk data buffer is missing
- sctp: Fix MAC comparison to be constant-time
- sctp: get netns from asoc and ep base
- sctp: Hold RCU read lock while iterating over address list
- sctp: prevent possible shift-out-of-bounds in sctp_transport_update_rto
- sctp: Prevent TOCTOU out-of-bounds write
- selftests: Disable dad for ipv6 in fcnal-test.sh
- selftests: Replace sleep with slowwait
- selftests: watchdog: skip ping loop if WDIOF_KEEPALIVEPING not supported
- selftests/bpf: Fix bpf_prog_detach2 usage in test_lirc_mode2
- selftests/Makefile: include $(INSTALL_DEP_TARGETS) in clean target to clean net/lib dependency
- selftests/net: Ensure assert() triggers in psock_tpacket.c
- selftests/net: Replace non-standard __WORDSIZE with sizeof(long) * 8
- serial: 8250_dw: handle reset control deassert error
- serial: 8250_dw: Use devm_add_action_or_reset()
- serial: 8250_dw: Use devm_clk_get_optional() to get the input clock
- serial: max310x: Add error checking in probe()
- serial: sc16is7xx: fix bug in flow control levels init
- soc: qcom: mdt_loader: Deal with zero e_shentsize
- soc: qcom: rpmh-rsc: Unconditionally clear _TRIGGER bit for TCS
- soc: qcom: smem: Fix endian-unaware access of num_entries
- spi: cadence-quadspi: Flush posted register writes before DAC access
- spi: cadence-quadspi: Flush posted register writes before INDAC access
- spi: loopback-test: Don't use %pK through printk
- spi: Try to get ACPI GPIO IRQ earlier
- Squashfs: add additional inode sanity checking
- Squashfs: fix uninit-value in squashfs_get_parent
- Squashfs: reject negative file sizes in squashfs_read_inode()
- staging: axis-fifo: fix maximum TX packet length check
- staging: axis-fifo: flush RX FIFO on read errors
- strparser: Fix signed/unsigned mismatch bug
- tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect().
- tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request().
- tcp: fix __tcp_close() to only send RST when required
- tcp: fix tcp_tso_should_defer() vs large RTT
- tcp_bpf: Call sk_msg_free() when tcp_bpf_send_verdict() fails to allocate psock->cork.
- tee: allow a driver to allocate a tee_device without a pool
- tg3: prevent use of uninitialized remote_adv and local_adv variables
- tipc: Fix use-after-free in tipc_mon_reinit_self().
- tipc: simplify the finalize work queue
- tls: always set record_type in tls_process_cmsg
- tls: don't rely on tx_work during send()
- tools build: Align warning options with perf
- tools/cpupower: Fix incorrect size in cpuidle_state_disable()
- tools/power x86_energy_perf_policy: Enhance HWP enable
- tools/power x86_energy_perf_policy: Prefer driver HWP limits
- tpm, tpm_tis: Claim locality before writing interrupt registers
- tpm_tis: Fix incorrect arguments in tpm_tis_probe_irq_single
- tracing: Fix memory leaks in create_field_var()
- tracing: Fix race condition in kprobe initialization causing NULL pointer dereference
- tty: hvc_console: Call hvc_kick in hvc_write unconditionally
- udp: Fix memory accounting leak.
- uio_hv_generic: Let userspace take care of interrupt mask
- uio_hv_generic: Set event for all channels on the device
- uprobe: Do not emulate/sstep original instruction when ip is changed
- usb: core: Add 0x prefix to quirks debug output
- usb: deprecate the third argument of usb_maxpacket()
- usb: gadget: configfs: Correctly set use_os_string at bind
- USB: gadget: dummy-hcd: Fix locking bug in RT-enabled kernels
- usb: gadget: dummy_hcd: remove usage of list iterator past the loop body
- usb: gadget: f_fs: Fix epfile null pointer access after ep enable.
- usb: gadget: f_hid: Fix zero length packet transfer
- usb: gadget: f_ncm: Fix MAC assignment NCM ethernet
- usb: host: max3421-hcd: Fix error pointer dereference in probe cleanup
- usb: hub: Fix flushing of delayed work used for post resume purposes
- usb: mon: Increase BUFF_MAX to 64 MiB to support multi-MB URBs
- usb: phy: twl6030: Fix incorrect type for ret
- USB: serial: option: add Quectel RG255C
- USB: serial: option: add SIMCom 8230C compositions
- USB: serial: option: add Telit Cinterion FN990A w/audio compositions
- USB: serial: option: add Telit Cinterion LE910C4-WWX new compositions
- USB: serial: option: add Telit FN920C04 ECM compositions
- USB: serial: option: add UNISOC UIS7720
- usb: vhci-hcd: Prevent suspending virtually attached devices
- usb: xhci: plat: Facilitate using autosuspend for xhci plat devices
- usb/core/quirks: Add Huawei ME906S to wakeup quirk
- usbnet: Prevents free active kevent
- vfs: Don't leak disconnected dentries on umount
- video: backlight: lp855x_bl: Set correct EPROM start for LP8556
- vsock: Ignore signal/timeout on connect() if already established
- watchdog: mpc8xxx_wdt: Reload the watchdog timer when enabling the watchdog
- wifi: ath10k: Fix memory leak on unsupported WMI command
- wifi: brcmfmac: fix crash while sending Action Frames in standalone AP Mode
- wifi: mac80211: fix incorrect type for ret
- wifi: mac80211: skip rate verification for not captured PSDUs
- wifi: mt76: fix potential memory leak in mt76_wmac_probe()
- wifi: mwifiex: send world regulatory domain to driver
- wifi: rtlwifi: rtl8192cu: Don't claim USB ID 07b8:8188
- x86/bugs: Fix reporting of LFENCE retpoline
- x86/resctrl: Fix miscount of bandwidth event when reactivating previously unavailable RMID
- x86/umip: Check that the instruction opcode is at least two bytes
- x86/umip: Fix decoding of register forms of 0F 01 (SGDT and SIDT aliases)
- x86/vdso: Fix output operand size of RDPID
- x86/vsyscall: Do not require X86_PF_INSTR to emulate vsyscall
- xen/events: Cleanup find_virq() return codes
- xen/events: Update virq_to_irq on migration
- xen/manage: Fix suspend error path
- xhci: dbc: enable back DbC in resume if it was enabled before suspend