- ACPI: debug: fix signedness issues in read/write helpers
- ACPI: NFIT: Fix incorrect ndr_desc being reportedin dev_err message
- ACPI: processor: idle: Fix memory leak when register cpuidle device failed
- ACPI: TAD: Add missing sysfs_remove_group() for ACPI_TAD_RT
- ALSA: firewire: amdtp-stream: fix enum kernel-doc warnings
- ALSA: lx_core: use int type to store negative error codes
- amd-xgbe: Avoid spurious link down messages during interface toggle
- arch_topology: Fix incorrect error check in topology_parse_cpu_capacity()
- ASoC: codecs: wcd934x: Simplify with dev_err_probe
- ASoC: Intel: bytcht_es8316: Fix invalid quirk input mapping
- ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping
- ASoC: Intel: bytcr_rt5651: Fix invalid quirk input mapping
- ASoC: wcd934x: fix error handling in wcd934x_codec_parse_data()
- binder: remove "invalid inc weak" check
- blk-crypto: fix missing blktrace bio split events
- blk-mq: check kobject state_in_sysfs before deleting in blk_mq_unregister_hctx
- block: use int to store blk_stack_limits() return value
- Bluetooth: MGMT: Fix not exposing debug UUID on MGMT_OP_READ_EXP_FEATURES_INFO
- bpf: Explicitly check accesses to bpf_sock_addr
- bpf: Fix metadata_dst leak __bpf_redirect_neigh_v{4,6}
- btrfs: avoid potential out-of-bounds in btrfs_encode_fh()
- btrfs: remove duplicated in_range() macro
- bus: fsl-mc: Check return value of platform_get_resource()
- bus: mhi: host: Do not use uninitialized 'dev' pointer in mhi_init_irq_setup()
- clk: at91: peripheral: fix return value
- clk: nxp: Fix pll0 rate check condition in LPC18xx CGU driver
- clk: nxp: lpc18xx-cgu: convert from round_rate() to determine_rate()
- clocksource/drivers/clps711x: Fix resource leaks in error paths
- comedi: fix divide-by-zero in comedi_buf_munge()
- copy_sighand: Handle architectures where sizeof(unsigned long) < sizeof(u64)
- cpufreq: intel_pstate: Fix object lifecycle issue in update_qos_request()
- cramfs: Verify inode mode when loading from disk
- crypto: atmel - Fix dma_unmap_sg() direction
- crypto: essiv - Check ssize for decryption and in-place encryption
- crypto: rng - Ensure set_ent is always present
- crypto: rockchip - Fix dma_unmap_sg() nents value
- dax: skip read lock assertion for read-only filesystems
- dlm: check for defined force value in dlm_lockspace_release
- dm: fix NULL pointer dereference in __dm_suspend()
- dm-integrity: limit MAX_TAG_SIZE to 255
- Documentation: trace: historgram-design: Separate sched_waking histogram section heading and the following diagram
- dpaa2-eth: fix the pointer passed to PTR_ALIGN on Tx path
- driver core/PM: Set power.no_callbacks along with power.no_pm
- drivers/base/node: fix double free in register_one_node()
- drivers/base/node: handle error properly in register_one_node()
- drm/amd/display: Add missing DCE6 SCL_HORZ_FILTER_INIT* SRIs
- drm/amd/display: Fix potential null dereference
- drm/amd/display: Properly clear SCL_*_FILTER_CONTROL on DCE6
- drm/amd/display: Properly disable scaling on DCE6
- drm/amd/display: Remove redundant safeguards for dmub-srv destroy()
- drm/amdgpu: Add additional DCE6 SCL registers
- drm/amdgpu: Power up UVD 3 for FW validation (v2)
- drm/amdgpu: use atomic functions with memory barriers for vm fault info
- drm/amd/powerplay: Fix CIK shutdown temperature
- drm/exynos: exynos7_drm_decon: remove ctx->suspended
- drm/nouveau: fix bad ret code in nouveau_bo_move_prep
- drm/radeon/r600_cs: clean up of dead code in r600_cs
- drm/vmwgfx: Fix Use-after-free in validation
- exec: Fix incorrect type for ret
- ext4: avoid potential buffer over-read in parse_apply_sb_mount_options()
- ext4: correctly handle queries for metadata mappings
- ext4: detect invalid INLINE_DATA + EXTENTS flag combination
- ext4: guard against EA inode refcount underflow in xattr update
- ext4: increase i_disksize to offset + len in ext4_update_disksize_before_punch()
- filelock: add FL_RECLAIM to show_fl_flags() macro
- firmware: meson_sm: fix device leak at probe
- fs: Add 'initramfs_options' to set initramfs mount options
- fs: always return zero on success from replace_fd()
- fs: udf: fix OOB read in lengthAllocDescs handling
- fscontext: do not consume log entries when returning -EMSGSIZE
- fsdax: Fix infinite loop in dax_iomap_rw()
- fsdax: switch dax_iomap_rw to use iomap_iter
- fuse: fix livelock in synchronous file put from fuseblk workers
- gpio: wcd934x: mark the GPIO controller as sleeping
- gpio: wcd934x: Remove duplicate assignment of of_gpio_n_cells
- hfs: clear offset and space out of valid records in b-tree node
- hfs: fix KMSAN uninit-value issue in hfs_find_set_zero_bits()
- hfs: make proper initalization of struct hfs_find_data
- hfs: validate record offset in hfsplus_bmap_alloc
- hfsplus: fix KMSAN uninit-value issue in hfsplus_delete_cat()
- hfsplus: fix KMSAN uninit-value issue in __hfsplus_ext_cache_extent()
- hfsplus: fix slab-out-of-bounds read in hfsplus_strcasecmp()
- hfsplus: return EIO when type of hidden directory mismatch in hfsplus_fill_super()
- hid: fix I2C read buffer overflow in raw_event() for mcp2221
- HID: multitouch: fix sticky fingers
- hwrng: ks-sa - fix division by zero in ks_sa_rng_init
- i2c: designware: Add disabling clocks when probe fails
- i2c: mediatek: fix potential incorrect use of I2C_MASTER_WRRD
- IB/sa: Fix sa_local_svc_timeout_ms read race
- iio: consumers: Fix offset handling in iio_convert_raw_to_processed()
- iio: dac: ad5360: use int type to store negative error codes
- iio: dac: ad5421: use int type to store negative error codes
- iio: frequency: adf4350: Fix ADF4350_REG3_12BIT_CLKDIV_MODE
- iio: frequency: adf4350: Fix prescaler usage.
- iio: imu: inv_icm42600: Avoid configuring if already pm_runtime suspended
- iio: imu: inv_icm42600: Drop redundant pm_runtime reinitialization in resume
- iio: imu: inv_icm42600: Simplify pm_runtime setup
- iio: imu: inv_icm42600: use = { } instead of memset()
- init: handle bootloader identifier in kernel parameters
- Input: atmel_mxt_ts - allow reset GPIO to sleep
- Input: uinput - zero-initialize uinput_ff_upload_compat to avoid info leak
- iomap: add the new iomap_iter model
- ipvs: Defer ip_vs_ftp unregister during netns cleanup
- jbd2: ensure that all ongoing I/O complete before freeing blocks
- KEYS: trusted_tpm1: Compare HMAC values in constant time
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O
- libbpf: Fix reuse of DEVMAP
- lib/crypto/curve25519-hacl64: Disable KASAN with clang-17 and older
- lib/genalloc: fix device leak in of_gen_pool_get()
- libperf event: Ensure tracing data is multiple of 8 sized
- locking: Introduce __cleanup() based infrastructure
- m68k: bitops: Fix find_*_bit() signatures
- mailbox: zynqmp-ipi: Remove dev.parent check in zynqmp_ipi_free_mboxes
- mailbox: zynqmp-ipi: Remove redundant mbox_controller_unregister() call
- media: b2c2: Fix use-after-free causing by irq_check_work in flexcop_pci_remove
- media: cx18: Add missing check after DMA map
- media: i2c: mt9v111: fix incorrect type for ret
- media: i2c: tc358743: Fix use-after-free bugs caused by orphan timer in probe
- media: lirc: Fix error handling in lirc_register()
- media: mc: Clear minor number before put device
- media: pci: ivtv: Add check for DMA map result
- media: pci: ivtv: Add missing check after DMA map
- media: pci/ivtv: switch from 'pci_' to 'dma_' API
- media: rc: Directly use ida_free()
- media: rc: fix races with imon_disconnect()
- media: rj54n1cb0c: Fix memleak in rj54n1_probe()
- media: s5p-mfc: remove an unused/uninitialized variable
- media: tuner: xc5000: Fix use-after-free in xc5000_release
- media: tunner: xc5000: Refactor firmware load
- mei: me: add wildcat lake P DID
- memory: samsung: exynos-srom: Fix of_iomap leak in exynos_srom_probe
- mfd: intel_soc_pmic_chtdc_ti: Drop unneeded assignment for cache_type
- mfd: intel_soc_pmic_chtdc_ti: Fix invalid regmap-config max_register value
- mfd: intel_soc_pmic_chtdc_ti: Set use_single_read regmap_config flag
- mfd: vexpress-sysreg: Check the return value of devm_gpiochip_add_data()
- minixfs: Verify inode mode when loading from disk
- minmax: add a few more MIN_T/MAX_T users
- minmax: add in_range() macro
- minmax: allow comparisons of 'int' against 'unsigned char/short'
- minmax: allow min()/max()/clamp() if the arguments have the same signedness.
- minmax: avoid overly complicated constant expressions in VM code
- minmax: clamp more efficiently by avoiding extra comparison
- minmax: deduplicate __unconst_integer_typeof()
- minmax: don't use max() in situations that want a C constant expression
- minmax: fix header inclusions
- minmax: fix indentation of __cmp_once() and __clamp_once()
- minmax: fix up min3() and max3() too
- minmax: improve macro expansion and type checking
- minmax: Introduce {min,max}_array()
- minmax: make generic MIN() and MAX() macros available everywhere
- minmax: relax check to allow comparison between unsigned arguments and signed constants
- minmax: sanity check constant bounds when clamping
- minmax: simplify and clarify min_t()/max_t() implementation
- minmax: simplify min()/max()/clamp() implementation
- minmax.h: add whitespace around operators and after commas
- minmax.h: move all the clamp() definitions after the min/max() ones
- minmax.h: reduce the #define expansion of min(), max() and clamp()
- minmax.h: remove some #defines that are only expanded once
- minmax.h: simplify the variants of clamp()
- minmax.h: update some comments
- minmax.h: use BUILD_BUG_ON_MSG() for the lo < hi test in clamp()
- misc: genwqe: Fix incorrect cmd field being reported in error
- mm: hugetlb: avoid soft lockup when mprotect to large memory area
- mmc: core: SPI mode remove cmd7
- mm/slab: make __free(kfree) accept error pointers
- most: usb: Fix use-after-free in hdm_disconnect
- most: usb: hdm_probe: Fix calling put_device() before device initialization
- mtd: rawnand: fsmc: Default to autodetect buswidth
- net: add ndo_fdb_del_bulk
- net: bonding: fix possible peer notify event loss or dup issue
- net: dlink: handle copy_thresh allocation failure
- net: dlink: handle dma_map_single() failure properly
- net: ena: return 0 in ena_get_rxfh_key_size() when RSS hash key is not configurable
- net: enetc: correct the value of ENETC_RXB_TRUESIZE
- net: fsl_pq_mdio: Fix device node reference leak in fsl_pq_mdio_probe
- net: netlink: add NLM_F_BULK delete request modifier
- net: ravb: Ensure memory write completes before ringing TX doorbell
- net: rtnetlink: add bulk delete support flag
- net: rtnetlink: add helper to extract msg type's kind
- net: rtnetlink: add msg kind names
- net: rtnetlink: add NLM_F_BULK support to rtnl_fdb_del
- net: rtnetlink: fix module reference count leak issue in rtnetlink_rcv_msg
- net: rtnetlink: use BIT for flag values
- net: usb: lan78xx: Add error handling to lan78xx_init_mac_address
- net: usb: lan78xx: fix use of improperly initialized dev->chipid in lan78xx_reset
- net: usb: Remove disruptive netif_wake_queue in rtl8150_set_multicast
- net: usb: rtl8150: Fix frame padding
- net: usb: use eth_hw_addr_set() instead of ether_addr_copy()
- net/9p: fix double req put in p9_fd_cancelled
- netfilter: ipset: Remove unused htable_bits in macro ahash_region
- net/ip6_tunnel: Prevent perpetual tunnel growth
- net/mlx4: prevent potential use after free in mlx4_en_do_uc_filter()
- net/sctp: fix a null dereference in sctp_disposition sctp_sf_do_5_1D_ce()
- nfp: fix RSS hash key size when RSS is not supported
- NFSD: Define a proc_layoutcommit for the FlexFiles layout type
- NFSD: Fix destination buffer size in nfsd4_ssc_setup_dul()
- NFSD: Fix last write offset handling in layoutcommit
- NFSD: Minor cleanup in layoutcommit processing
- nfsd: nfserr_jukebox in nlm_fopen should lead to a retry
- NFSD: Rework encoding and decoding of nfsd4_deviceid
- NFSv4.1: fix backchannel max_resp_sz verification check
- ocfs2: clear extent cache after moving/defragmenting extents
- ocfs2: fix double free in user_cluster_connect()
- openat2: don't trigger automounts with RESOLVE_NO_XDEV
- overflow, tracing: Define the is_signed_type() macro once
- padata: Reset next CPU when reorder sequence wraps around
- PCI: Add sysfs attribute for device power state
- PCI: j721e: Fix programming sequence of "strap" settings
- PCI: keystone: Use devm_request_irq() to free "ks-pcie-error-irq" on exit
- PCI: tegra: Fix devm_kcalloc() argument order for port->phys allocation
- PCI: tegra194: Fix broken tegra_pcie_ep_raise_msi_irq()
- PCI: tegra194: Handle errors in BPMP response
- PCI/AER: Fix missing uevent on recovery when a reset is requested
- PCI/AER: Support errors introduced by PCIe r6.0
- PCI/ERR: Fix uevent on failure to recover
- PCI/IOV: Add PCI rescan-remove locking when enabling/disabling SR-IOV
- PCI/sysfs: Ensure devices are powered for config reads
- PCI/sysfs: Use sysfs_emit() and sysfs_emit_at() in "show" functions
- perf: arm_spe: Prevent overflow in PERF_IDX2OFF()
- perf session: Fix handling when buffer exceeds 2 GiB
- perf subcmd: avoid crash in exclude_cmds when excludes is empty
- perf util: Fix compression checks returning -1 as bool
- pid: Add a judgment for ns null in pid_nr_ns
- pinctrl: check the return value of pinmux_ops::get_function_name()
- pinctrl: meson-gxl: add missing i2c_d pinmux
- pinctrl: renesas: Use int type to store negative error codes
- PM: runtime: Add new devm functions
- PM: sleep: core: Clear power.must_resume in noirq suspend error path
- pps: fix warning in pps_register_cdev when register device fail
- pwm: berlin: Fix wrong register in suspend/resume
- pwm: tiehrpwm: Fix corner case in clock divisor calculation
- r8169: fix packet truncation after S4 resume on RTL8168H/RTL8111H
- RDMA/cm: Rate limit destroy CM ID timeout error message
- RDMA/core: Resolve MAC of next-hop device without ARP support
- RDMA/siw: Always report immediate post SQ errors
- regmap: Remove superfluous check for !config in __regmap_init()
- remoteproc: qcom: q6v5: Avoid disabling handover IRQ twice
- Revert "cpuidle: menu: Avoid discarding useful information"
- Revert "net/mlx5e: Update and set Xon/Xoff upon MTU set"
- rseq/selftests: Use weak symbol reference, not definition, to link with glibc
- rtc: interface: Ensure alarm irq is enabled when UIE is enabled
- rtc: interface: Fix long-standing race when setting alarm
- rtc: x1205: Fix Xicor X1205 vendor prefix
- rtnetlink: Allow deleting FDB entries in user namespace
- sched/balancing: Rename newidle_balance() => sched_balance_newidle()
- sched/fair: Fix pelt lost idle time detection
- sched/fair: Trivial correction of the newidle_balance() comment
- scsi: hpsa: Fix potential memory leak in hpsa_big_passthru_ioctl()
- scsi: libsas: Add sas_task_find_rq()
- scsi: mpt3sas: Fix crash in transport port remove by using ioc_info()
- scsi: mvsas: Delete mvs_tag_init()
- scsi: mvsas: Fix use-after-free bugs in mvs_work_queue
- scsi: mvsas: Use sas_task_find_rq() for tagging
- scsi: myrs: Fix dma_alloc_coherent() error check
- scsi: pm80xx: Fix array-index-out-of-of-bounds on rmmod
- scsi: target: target_core_configfs: Add length check to avoid buffer overflow
- sctp: avoid NULL dereference when chunk data buffer is missing
- sctp: Fix MAC comparison to be constant-time
- selftests: arm64: Check fread return value in exec_target
- selftests: watchdog: skip ping loop if WDIOF_KEEPALIVEPING not supported
- serial: 8250_exar: add support for Advantech 2 port card with Device ID 0x0018
- serial: max310x: Add error checking in probe()
- serial: stm32: allow selecting console when the driver is module
- soc: qcom: rpmh-rsc: Unconditionally clear _TRIGGER bit for TCS
- spi: cadence-quadspi: Flush posted register writes before DAC access
- spi: cadence-quadspi: Flush posted register writes before INDAC access
- Squashfs: add additional inode sanity checking
- Squashfs: fix uninit-value in squashfs_get_parent
- Squashfs: reject negative file sizes in squashfs_read_inode()
- staging: axis-fifo: fix maximum TX packet length check
- staging: axis-fifo: flush RX FIFO on read errors
- tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request().
- tcp: fix __tcp_close() to only send RST when required
- tcp: fix tcp_tso_should_defer() vs large RTT
- tg3: prevent use of uninitialized remote_adv and local_adv variables
- tls: always set record_type in tls_process_cmsg
- tls: don't rely on tx_work during send()
- tools build: Align warning options with perf
- tpm_tis: Fix incorrect arguments in tpm_tis_probe_irq_single
- tracing: Fix race condition in kprobe initialization causing NULL pointer dereference
- udf: fix uninit-value use in udf_get_fileshortad
- udp: Fix memory accounting leak.
- uio_hv_generic: Let userspace take care of interrupt mask
- usb: gadget: configfs: Correctly set use_os_string at bind
- usb: host: max3421-hcd: Fix error pointer dereference in probe cleanup
- usb: phy: twl6030: Fix incorrect type for ret
- usb: raw-gadget: do not limit transfer length
- USB: serial: option: add Quectel RG255C
- USB: serial: option: add SIMCom 8230C compositions
- USB: serial: option: add Telit FN920C04 ECM compositions
- USB: serial: option: add UNISOC UIS7720
- usb: vhci-hcd: Prevent suspending virtually attached devices
- usb/core/quirks: Add Huawei ME906S to wakeup quirk
- vfs: Don't leak disconnected dentries on umount
- vsock: fix lock inversion in vsock_assign_transport()
- watchdog: mpc8xxx_wdt: Reload the watchdog timer when enabling the watchdog
- wifi: ath11k: HAL SRNG: don't deinitialize and re-initialize again
- wifi: mt76: fix potential memory leak in mt76_wmac_probe()
- wifi: mwifiex: send world regulatory domain to driver
- wifi: rt2x00: use explicitly signed or unsigned types
- wifi: rtlwifi: rtl8192cu: Don't claim USB ID 07b8:8188
- x86/umip: Check that the instruction opcode is at least two bytes
- x86/umip: Fix decoding of register forms of 0F 01 (SGDT and SIDT aliases)
- x86/vdso: Fix output operand size of RDPID
- xen/events: Cleanup find_virq() return codes
- xen/events: Update virq_to_irq on migration
- xen/manage: Fix suspend error path
- xhci: dbc: enable back DbC in resume if it was enabled before suspend