UPDATE: 6.12.94

[fepitre-bot]

Update to 6.12.94

Details

Changes since previous version:
gregkh/linux@298db6167f81 bpf: Free reuseport cBPF prog after RCU grace period.
gregkh/linux@6cb48f8890f9 USB: serial: mct_u232: fix memory corruption with small endpoint
gregkh/linux@47c5d569d39d ARM: group is_permission_fault() with is_translation_fault()
gregkh/linux@d5e8be7bea8d ARM: allow __do_kernel_fault() to report execution of memory faults
gregkh/linux@25ae6a5c473b ARM: fix hash_name() fault
gregkh/linux@fed889edca79 ARM: fix branch predictor hardening
gregkh/linux@78498bb7bca4 net: phy: micrel: fix LAN8814 QSGMII soft reset
gregkh/linux@f86d4c6272b0 wifi: remove zero-length arrays
gregkh/linux@ff02add34ffd i2c: dev: prevent integer overflow in I2C_TIMEOUT ioctl
gregkh/linux@b2eb8886200b ipv6: mcast: Fix use-after-free when processing MLD queries
gregkh/linux@89f6fbe0033c net/smc: fix sleep-inside-lock in __smc_setsockopt() causing local DoS
gregkh/linux@d366a01475f9 tee: optee: prevent use-after-free when the client exits before the supplicant
gregkh/linux@e6ec8c4d525e soc: qcom: ice: Return -ENODEV if the ICE platform device is not found
gregkh/linux@09737c4fb106 erofs: add sysfs node to drop internal caches
gregkh/linux@974339e126c1 erofs: tidy up synchronous decompression
gregkh/linux@86ab00cf81d4 erofs: fix use-after-free on sbi->sync_decompress
gregkh/linux@1ff58dcfcab4 ksmbd: fix NULL-deref of opinfo->conn in oplock/lease break notifiers
gregkh/linux@05524b940bdb netfilter: xt_NFQUEUE: prefer raw_smp_processor_id
gregkh/linux@14e4689c113b ipvs: clear the svc scheduler ptr early on edit
gregkh/linux@640441348258 netfilter: synproxy: add mutex to guard hook reference counting
gregkh/linux@ddddd8271359 netfilter: conntrack_irc: fix possible out-of-bounds read
gregkh/linux@8470f676eade netfilter: nft_ct: bail out on template ct in get eval
gregkh/linux@153ea96c806a netfilter: bridge: make ebt_snat ARP rewrite writable
gregkh/linux@03ffe1112ed8 dm cache policy smq: check allocation under invalidate lock
gregkh/linux@5dd51e09020c net/sched: act_api: use RCU with deferred freeing for action lifecycle
gregkh/linux@dcb1bec1c32e 6lowpan: fix off-by-one in multicast context address compression
gregkh/linux@78cdfdca88cb l2tp: pppol2tp: hold reference to session in pppol2tp_ioctl()
gregkh/linux@a91372868847 devlink: Release nested relation on devlink free
gregkh/linux@bfd44bb52dd1 drm/imx: Fix three kernel-doc warnings in dcss-scaler.c
gregkh/linux@f6d3dc8e8492 wifi: mac80211: limit injected antenna index in ieee80211_parse_tx_radiotap
gregkh/linux@f647f46a4d29 pcnet32: stop holding device spin lock during napi_complete_done
gregkh/linux@c2f081323c25 net: Annotate sk->sk_write_space() for UDP SOCKMAP.
gregkh/linux@0232b6fcb761 hsr: Remove WARN_ONCE() in hsr_addr_is_self().
gregkh/linux@d4c86ea09ae3 net: garp: fix unsigned integer underflow in garp_pdu_parse_attr
gregkh/linux@c55f283e3c4b net: lan743x: permit VLAN-tagged packets up to configured MTU
gregkh/linux@82fa4e422fbc net: fec: fix pinctrl default state restore order on resume
gregkh/linux@b0e33e409715 Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind()
gregkh/linux@18fea1cb0c25 Bluetooth: MGMT: validate advertising TLV before type checks
gregkh/linux@1b070ac9e99c Bluetooth: RFCOMM: validate skb length in MCC handlers
gregkh/linux@74839a653519 Bluetooth: bnep: fix incorrect length parsing in bnep_rx_frame() extension handling
gregkh/linux@d76dec1a3712 Bluetooth: bnep: reject short frames before parsing
gregkh/linux@bc2efe73c194 Bluetooth: fix memory leak in error path of hci_alloc_dev()
gregkh/linux@4bbec25f47b9 Bluetooth: ISO: Fix not releasing hdev reference on iso_conn_big_sync
gregkh/linux@16940be689de Bluetooth: ISO: Fix not using bc_sid as advertisement SID
gregkh/linux@9798f7d41d85 Bluetooth: ISO: Fix data-race on iso_pi fields in hci_get_route calls
gregkh/linux@1b725635b43a Bluetooth: MGMT: Fix backward compatibility with userspace
gregkh/linux@642217c62d3b octeontx2-pf: Fix NDC sync operation errors
gregkh/linux@c85460037b7e octeontx2-af: Fix initialization of mcam's entry2target_pffunc field
gregkh/linux@00e8845fe342 ipv4: restrict IPOPT_SSRR and IPOPT_LSRR options
gregkh/linux@e9f803bf2b03 ptp: vclock: Switch from RCU to SRCU
gregkh/linux@459c6f35c58c net: ethernet: mtk_eth_soc: Fix use-after-free in metadata dst teardown
gregkh/linux@f22f943b7f9d net_sched: act_pedit: use RCU in tcf_pedit_dump()
gregkh/linux@2bec122b9fb9 net/sched: fix pedit partial COW leading to page cache corruption
gregkh/linux@b7f64a85b604 octeontx2-af: npc: Fix CPT channel mask in npc_install_flow
gregkh/linux@3a8c880081aa vxlan: vnifilter: send notification on VNI add
gregkh/linux@be852062e352 vxlan: vnifilter: fix spurious notification on VNI update
gregkh/linux@c1819c8defa2 ieee802154: 6lowpan: only accept IPv6 packets in lowpan_xmit()
gregkh/linux@fd9c3a47c670 net/802/mrp: fix vector attribute parsing in mrp_pdu_parse_vecattr
gregkh/linux@1d4652f67790 sctp: purge outqueue on stale COOKIE-ECHO handling
gregkh/linux@a2003c457b4f ipmi: Fix rcu_read_unlock to srcu_read_unlock in handle_read_event_rsp
gregkh/linux@76aebd9ef200 signal: clear JOBCTL_PENDING_MASK for caller in zap_other_threads()
gregkh/linux@a8c0131e15d5 time: Fix off-by-one in settimeofday() usec validation
gregkh/linux@b053fcd8912f ALSA: PCM: Fix wait queue list corruption in snd_pcm_drain() on linked streams
gregkh/linux@a7ef78a2c536 ALSA: seq: dummy: fix UMP event stack overread
gregkh/linux@3aeafbe67b81 ima: kexec: skip IMA segment validation after kexec soft reboot
gregkh/linux@e47decc2f321 ima: kexec: move IMA log copy from kexec load to execute
gregkh/linux@2e7cd62c37f5 spi: cadence-quadspi: fix unclocked access on unbind
gregkh/linux@838ac324f70d tools/rv: Fix cleanup after failed trace setup
gregkh/linux@d68eab61944a tap: free page on error paths in tap_get_user_xdp()
gregkh/linux@1c984b047056 arm64: tlb: Allow XZR argument to TLBI ops
gregkh/linux@d7fdb5d7d5a7 arm64: tlb: Optimize ARM64_WORKAROUND_REPEAT_TLBI
gregkh/linux@c4ba2c33851a iomap: don't revert iov_iter on partially completed buffered writes
gregkh/linux@030f8582635b dma-debug: fix physical address retrieval in debug_dma_sync_sg_for_device
gregkh/linux@88697cf98022 xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx()
gregkh/linux@71c52da13c37 netlabel: validate unlabeled address and mask attribute lengths
gregkh/linux@4ef24338eda3 gpio: mvebu: fix NULL pointer dereference in suspend/resume
gregkh/linux@2f1be283aa77 ASoC: wm_adsp: Fix NULL dereference when removing firmware controls
gregkh/linux@82b3e7ce10c5 tcp: restrict SO_ATTACH_FILTER to priv users
gregkh/linux@9e636c995b7b net: add pskb_may_pull() to skb_gro_receive_list()
gregkh/linux@8b13d9b7b495 net/mlx4: avoid GCC 10 __bad_copy_from() false positive
gregkh/linux@cf8e14db93ea net: ibm: emac: Fix use-after-free during device removal
gregkh/linux@e055ca9205d3 netdev: fix double-free in netdev_nl_bind_rx_doit()
gregkh/linux@9326b654f90a net: phy: clean the sfp upstream if phy probing fails
gregkh/linux@7de2d447072b net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove
gregkh/linux@537d87784e81 net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list
gregkh/linux@7b3eeba50fbc net/mlx5e: xsk: Fix DMA and xdp_frame leak on XDP_TX xmit failure
gregkh/linux@8b3ca2376bac net/mlx5: Use effective affinity mask for IRQ selection
gregkh/linux@59f80c919713 ipv6: sit: reload inner IPv6 header after GSO offloads
gregkh/linux@e3d509a1b713 net: openvswitch: fix possible kfree_skb of ERR_PTR
gregkh/linux@e43bc32c6f9d r8152: handle the return value of usb_reset_device()
gregkh/linux@4582893ac8db gpio: zynq: fix runtime PM leak on remove
gregkh/linux@d6bd0bb7697e sctp: fix uninit-value in __sctp_rcv_asconf_lookup()
gregkh/linux@e0665b2a8e90 net: guard timestamp cmsgs to real error queue skbs
gregkh/linux@0f7baa82a248 net/rds: fix NULL deref in rds_ib_send_cqe_handler() on masked atomic completion
gregkh/linux@90fd4513315c ip6_vti: fix incorrect tunnel matching in vti6_tnl_lookup()
gregkh/linux@d41020725194 rds: mark snapshot pages dirty in rds_info_getsockopt()
gregkh/linux@43330a1e8aac netfilter: revalidate bridge ports
gregkh/linux@f92c90a2a3e6 netfilter: nf_conntrack: destroy stale expectfn expectations on unregister
gregkh/linux@8d67e42ad3b1 netfilter: x_tables: avoid leaking percpu counter pointers
gregkh/linux@c38d41134085 netfilter: nf_log: validate MAC header was set before dumping it
gregkh/linux@67b27434c43b netfilter: nft_exthdr: fix register tracking for F_PRESENT flag
gregkh/linux@23548007b3c6 net: mvpp2: sync RX data at the hardware packet offset
gregkh/linux@994bd2b58d2b net: mvpp2: limit XDP frame size to the RX buffer
gregkh/linux@147e772e0210 net: mvpp2: Add metadata support for xdp mode
gregkh/linux@d0c8c4fbd22d net: mvpp2: refill RX buffers before XDP or skb use
gregkh/linux@48bf2b2772dd net: mvpp2: build skb from XDP-adjusted data on XDP_PASS
gregkh/linux@192df376a05c ipv6: Fix a potential NPD in cleanup_prefix_route()
gregkh/linux@d52fa1fa7440 netfilter: ctnetlink: ensure safe access to master conntrack
gregkh/linux@fabfc1fcddc5 writeback: Avoid contention on wb->list_lock when switching inodes
gregkh/linux@156cc63691c1 writeback: Fix use after free in inode_switch_wbs_work_fn()
gregkh/linux@af4b8c5e9d6d xfrm: hold device only for the asynchronous decryption
gregkh/linux@4236c30b437b xfrm: hold dev ref until after transport_finish NF_HOOK
gregkh/linux@531e030d6925 KVM: VMX: Update SVI during runtime APICv activation
gregkh/linux@63f92dca0152 clk: qcom: x1e80100-dispcc: Stop disp_cc_mdss_mdp_clk_src from getting parked
gregkh/linux@03aceec63b3a clk: samsung: gs101: Fix missing USI7_USI DIV clock in peric0_clk_regs
gregkh/linux@d345eeb542c3 clk: qcom: dispcc-sc8280xp: Don't park mdp_clk_src at registration time
gregkh/linux@38a5f891cda6 drm/virtio: Fix driver removal with disabled KMS
gregkh/linux@c034aa0b1ba5 drm/vc4: fix krealloc() memory leak
gregkh/linux@68b1620b9986 drm/xe: fix refcount leak in xe_range_fence_insert()
gregkh/linux@fda6573a46ad netfilter: nft_tunnel: fix use-after-free on object destroy
gregkh/linux@4277759906b4 tee: shm: fix shm leak in register_shm_helper()
gregkh/linux@02f50e8bb69f Bluetooth: hci_sync: reject oversized Broadcast Announcement prepend
gregkh/linux@a8335f3db15b Bluetooth: L2CAP: reject BR/EDR signaling packets over MTUsig
gregkh/linux@fabafc0c90e0 soc: qcom: ice: Fix race between qcom_ice_probe() and of_qcom_ice_get()
gregkh/linux@5961c7034140 accel/ivpu: Add bounds checks for firmware log indices
gregkh/linux@d3c12ed33e89 accel/ivpu: Add buffer overflow check in MS get_info_ioctl
gregkh/linux@4788556d4dd9 accel/ivpu: Fix signed integer truncation in IPC receive
gregkh/linux@0afbe0bcfd70 tracing/probes: Point the error offset correctly for eprobe argument error
gregkh/linux@38c29b6c8312 rust: x86: support Rust >= 1.98.0 target spec
gregkh/linux@bde772ee2397 rust: arm64: set uwtable llvm module flag for CONFIG_UNWIND_TABLES
gregkh/linux@b3b5dc382ab2 rust: kasan/kbuild: fix rustc-option when cross-compiling
gregkh/linux@c3acabc7e22d mmc: litex_mmc: Use DIV_ROUND_UP for more accurate clock calculation
gregkh/linux@66a8e7ddd901 KVM: Don't WARN if memory is dirtied without a vCPU when the VM is dying
gregkh/linux@8f187024933b KVM: SEV: Decouple the need to sync the GHCB SA from the need to free the SA
gregkh/linux@3bd168dd835b drm/i915/gem: Fix phys BO pread/pwrite with offset
gregkh/linux@d487a9457693 pinctrl: mcp23s08: Initialize mcp->dev and mcp->addr before regmap init
gregkh/linux@89ae9df09d2c ksmbd: fix use-after-free of a deferred file_lock on double SMB2_CANCEL
gregkh/linux@ba21439302db xfrm: espintcp: do not reuse an in-progress partial send
gregkh/linux@b849f30d1a9e USB: serial: io_ti: fix heap overflow in get_manuf_info()
gregkh/linux@130d6567eb14 USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr()
gregkh/linux@4188bb361c81 USB: serial: option: add usb-id for Dell Wireless DW5826e-m
gregkh/linux@70d86e355c56 USB: serial: kl5kusb105: fix bulk-out buffer overflow
gregkh/linux@586b219a22b1 ALSA: timer: Forcibly close timer instances at closing
gregkh/linux@38034d04d4a7 ALSA: timer: Fix UAF at snd_timer_user_params()
gregkh/linux@f40570fda3f3 io_uring/net: inherit IORING_CQE_F_BUF_MORE across bundle recv retries
gregkh/linux@73524e9f96a2 drm/virtio: fix dma_fence refcount leak on error in virtio_gpu_dma_fence_wait()
gregkh/linux@85c8edabad9c drm/amd/display: Reject gpio_bitshift >= 32 in bios_parser_get_gpio_pin_info()
gregkh/linux@6c29a8ba084e mm/huge_memory: update file PMD counter before folio_put()
gregkh/linux@759aa680bd36 mm/damon/ops-common: call folio_test_lru() after folio_get()
gregkh/linux@201503819593 RDMA/srp: bound SRP_RSP sense copy by the received length
gregkh/linux@77a602b505ce zram: fix use-after-free in zram_bvec_write_partial()
gregkh/linux@90d35188aaa9 udp: clear skb->dev before running a sockmap verdict
gregkh/linux@23b4abf431eb ARM: socfpga: Fix OF node refcount leak in SMP setup
gregkh/linux@87ffe7a089e8 ARM: 9474/1: io: avoid KASAN instrumentation of raw halfword I/O
gregkh/linux@c74990828d3c ARM: 9475/1: entry: use byte load for KASAN VMAP stack shadow
gregkh/linux@358a38e9343e mptcp: fix retransmission loop when csum is enabled
gregkh/linux@c4f4cf607979 mptcp: close TOCTOU race while computing rcv_wnd
gregkh/linux@aa3861f40ac3 mptcp: allow subflow rcv wnd to shrink
gregkh/linux@043bdb2a6399 mptcp: sockopt: check timestamping ret value
gregkh/linux@7587f6e16b76 selftests: mptcp: add test for extra_subflows underflow on userspace PM
gregkh/linux@60992dba0b94 mptcp: add-addr: always drop other suboptions
gregkh/linux@30c3fa80f423 wifi: nl80211: reject oversized EMA RNR lists
gregkh/linux@bcb275626055 vsock/vmci: fix sk_ack_backlog leak on failed handshake
gregkh/linux@07b3b83587fb timers/migration: Fix livelock in tmigr_handle_remote_up()
gregkh/linux@f3e04f0013e4 ASoC: fsl_sai: Fix 32 slots TDM broken by integer shift UB in xMR write
gregkh/linux@08e57d014ea1 bnxt_en: Fix NULL pointer dereference
gregkh/linux@c5584e089b5a IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN
gregkh/linux@c22599cc90e1 inet: frags: fix use-after-free caused by the fqdir_pre_exit() flush
gregkh/linux@73633ec17b49 pidfd: refuse access to tasks that have started exiting harder
gregkh/linux@569eef358f08 fs/qnx6: fix pointer arithmetic in directory iteration
gregkh/linux@99c317d7f8b7 fuse: reject fuse_notify() pagecache ops on directories
gregkh/linux@4cd206c1d57a i2c: qcom-cci: Fix NULL pointer dereference in cci_remove()
gregkh/linux@44e94b903025 i2c: stm32f7: fix timing computation ignoring i2c-analog-filter
gregkh/linux@34cd998b107e i2c: tegra: Fix NOIRQ suspend/resume
gregkh/linux@dbe8eb999bb6 Input: atkbd - add DMI quirk for Lenovo Yoga Air 14 (83QK)
gregkh/linux@686042316c0f Input: atkbd - skip deactivate for HONOR BCC-N's internal keyboard
gregkh/linux@b5107b4ce3ad ipc/shm: serialize orphan cleanup with shm_nattch updates
gregkh/linux@ecea4967c2bf misc: fastrpc: fix use-after-free of fastrpc_user in workqueue context
gregkh/linux@5b0166112019 misc: fastrpc: fix use-after-free race in fastrpc_map_create
gregkh/linux@e69e306a4ccc misc: fastrpc: fix DMA address corruption due to find_vma misuse
gregkh/linux@4bfdf0a9855d misc: fastrpc: Fix NULL pointer dereference in rpmsg callback
gregkh/linux@2d5a6c7aa025 net/mlx5: Reorder completion before putting command entry in cmd_work_handler
gregkh/linux@c2cfe290fdb1 net: bonding: fix NULL pointer dereference in bond_do_ioctl()
gregkh/linux@c2d5cf8a0772 net: mv643xx: fix OF node refcount
gregkh/linux@f16ad421a4e3 net: rds: clear i_sends on setup unwind
gregkh/linux@e0d38bf47a72 nvmem: core: fix use-after-free bugs in error paths
gregkh/linux@fd47edeabadf nvmem: layouts: onie-tlv: fix hang on unknown types
gregkh/linux@afb711b89fce octeontx2-af: fix memory leak in rvu_setup_hw_resources()
gregkh/linux@6c3be7ce45d0 io_uring/kbuf: don't truncate end buffer for bundles
gregkh/linux@5b1d474011f5 io_uring/wait: fix min_timeout behavior
gregkh/linux@e47bf16af3c4 mm/hugetlb: restore reservation on error in hugetlb folio copy paths
gregkh/linux@552b9077733e mmc: core: Fix host controller programming for fixed driver type
gregkh/linux@b1180ff50cca mmc: dw_mmc-rockchip: Add missing private data for very old controllers
gregkh/linux@3571d606e802 mmc: litex_mmc: Set mandatory idle clocks before CMD0
gregkh/linux@1778597c2260 mmc: renesas_sdhi: Add OF entry for RZ/G2H SoC
gregkh/linux@5c8d3ad0ea87 mmc: sdhci: add signal voltage switch in sdhci_resume_host
gregkh/linux@b3995adcaa85 pmdomain: imx: fix OF node refcount
gregkh/linux@1bffee0505ea rtase: Avoid sleeping in get_stats64()
gregkh/linux@7a754bf28ed0 rtase: Reset TX subqueue when clearing TX ring
gregkh/linux@480f754580b5 sctp: diag: reject stale associations in dump_one path
gregkh/linux@39dc2b0eb537 sctp: stream: fully roll back denied add-stream state
gregkh/linux@ca11e7da4fba thunderbolt: Reject zero-length property entries in validator
gregkh/linux@0a32040a48db thunderbolt: Bound root directory content to block size
gregkh/linux@05a43157676c thunderbolt: Clamp XDomain response data copy to allocation size
gregkh/linux@79235c8add5d thunderbolt: Validate XDomain request packet size before type cast
gregkh/linux@a15b6d3136ac thunderbolt: Limit XDomain response copy to actual frame size
gregkh/linux@f8382d6aca93 slimbus: qcom-ngd-ctrl: fix OF node refcount
gregkh/linux@aa401167c398 slimbus: qcom-ngd-ctrl: Fix up platform_driver registration
gregkh/linux@efd7fddb20fd slimbus: qcom-ngd-ctrl: Fix probe error path ordering
gregkh/linux@fa3790c7ea98 slimbus: qcom-ngd-ctrl: Register callbacks after creating the ngd
gregkh/linux@28534f885055 slimbus: qcom-ngd-ctrl: Initialize controller resources in controller
gregkh/linux@3a4e83f6e293 slimbus: qcom-ngd-ctrl: Correct PDR and SSR cleanup ownership
gregkh/linux@f88814a004ff slimbus: qcom-ngd-ctrl: Balance pm_runtime enablement for NGD
gregkh/linux@aad4337a21b9 slimbus: qcom-ngd-ctrl: Avoid ABBA on tx_lock/ctrl->lock
gregkh/linux@daeceb0fe2a1 drm/amdkfd: fix NULL dereference in get_queue_ids()
gregkh/linux@2c5b66c9b405 drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11
gregkh/linux@9ee53ecadeb5 drm/xe: Clear pending_disable before signaling suspend fence
gregkh/linux@0b59d0946913 drm/v3d: Fix vaddr leak when indirect CSD has zeroed workgroups
gregkh/linux@3561252a7281 drm/amdgpu: restart the CS if some parts of the VM are still invalidated
gregkh/linux@b3498e00aff5 drm/amd/pm: fix smu13 power limit default/cap calculation
gregkh/linux@965e25835350 drm/amd/pm: mark metrics.energy_accumulator is invalid for smu 14.0.2
gregkh/linux@ffacb386acdd drm/amd/pm: smu_v14_0_0: use SoftMin for gfxclk in set_soft_freq_limited_range
gregkh/linux@6173cfea2f91 drm/amd/display: Bound VBIOS record-chain walk loops
gregkh/linux@bfba882cfcd0 drm/amd/display: Clamp HDMI HDCP2 rx_id_list read to buffer size
gregkh/linux@d6be8e59af41 drm/amd/display: Clamp VBIOS HDMI retimer register count to array size
gregkh/linux@117b499eee01 drm/amd/display: add missing CSC entries for BT.2020 for DCE IPs
gregkh/linux@7ae95c0275c3 drm/amd/display: Fix NULL deref and buffer over-read in SDP debugfs
gregkh/linux@a914aa802669 drm/amd/display: Use krealloc_array() in dal_vector_reserve()
gregkh/linux@1bee417678f1 fs/fcntl: fix SOFTIRQ-unsafe lock order in fasync signaling
gregkh/linux@e1256028e3ad driver core: reject devices with unregistered buses
gregkh/linux@536ab67654e7 mailbox: Fix NULL message support in mbox_send_message()
gregkh/linux@918c0c988239 hv_netvsc: use kmap_local_page in netvsc_copy_to_send_buf
gregkh/linux@cdff2eb97be1 sched_ext: Don't warn on NULL cgrp_moving_from in scx_cgroup_move_task()
gregkh/linux@8c84885e9790 netfilter: nft_fib: fix stale stack leak via the OIFNAME register
gregkh/linux@a33bfed648c1 mm/memory-failure: fix hugetlb_lock AA deadlock in get_huge_page_for_hwpoison
gregkh/linux@dfa093254cf0 RDMA/umem: Add ib_umem_dmabuf_get_pinned_and_lock helper
gregkh/linux@24d44eab1b65 RDMA/umem: Move umem dmabuf revoke logic into helper function
gregkh/linux@171559364937 RDMA/umem: Add helpers for umem dmabuf revoke lock
gregkh/linux@eba5df21eda0 RDMA: During rereg_mr ensure that REREG_ACCESS is compatible
gregkh/linux@97e87dac21cb RDMA/umem: fix kernel-doc warnings
gregkh/linux@b26b5ef985e8 RDMA: Move DMA block iterator logic into dedicated files
gregkh/linux@baf8685bcf56 RDMA/umem: Fix truncation for block sizes >= 4G
gregkh/linux@b987d94c58b4 mm/hugetlb: avoid false positive lockdep assertion
gregkh/linux@b0c69e6f2e0e mptcp: fix missing wakeups in edge scenarios
gregkh/linux@9f8813e8f762 ipmi:ssif: Remove unnecessary indention
gregkh/linux@d177e1d68e42 ipmi:ssif: NULL thread on error
gregkh/linux@d643c1ec80b7 ipvs: skip ipv6 extension headers for csum checks
gregkh/linux@1eca304f97a3 vsock/virtio: fix potential unbounded skb queue
gregkh/linux@f3bf0f3b8d5c vsock/virtio: fix skb overhead accounting to preserve full buf_alloc
gregkh/linux@faf6c45592c7 block: fix handling of dead zone write plugs
gregkh/linux@bed7108bfb98 arm64: cputype: Add NVIDIA Olympus definitions
gregkh/linux@cce1ef3711fd arm64: cputype: Add C1-Ultra definitions
gregkh/linux@2125f57780e4 arm64: cputype: Add C1-Premium definitions
gregkh/linux@4e7c80742e6d arm64: errata: Mitigate TLBI errata on various Arm CPUs
gregkh/linux@fd0781fcbf4d arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU
gregkh/linux@2321cb9e80ea arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU
gregkh/linux@96ced0fbb6c5 net: introduce EXPORT_IPV6_MOD() and EXPORT_IPV6_MOD_GPL()
gregkh/linux@5bc841c420d3 tcp: use EXPORT_IPV6_MOD_GPL
gregkh/linux@5da5662181ef tcp: secure_seq: add back ports to TS offset
gregkh/linux@ede079218fd4 mptcp: pm: fix extra_subflows underflow on userspace PM subflow creation
gregkh/linux@6b2176a5c99b Revert "selftest/ptp: update ptp selftest to exercise the gettimex options"
gregkh/linux@149205a18bcf vsock/virtio: fix skb overhead overflow on 32-bit builds
gregkh/linux@367abcacc13a netfilter: require Ethernet MAC header before using eth_hdr()
gregkh/linux@0b8f247169e4 Linux 6.12.94