Daily update · Sep 10–11, 2026

Linux mainline update: SMB/CIFS hardening, IPv6 fixes, and driver reliability

A roundup of recently merged kernel changes, with emphasis on security fixes, networking stability, and hardware enablement.

Hardware support Security and hardening

#Bluetooth #IPv6 #memory safety #netfilter #network drivers #SMB/CIFS

223 meaningful commitsDaily snapshot

In brief

This mainline batch touches many subsystems at once. The CIFS/SMB client receives a series of hardening and correctness fixes, IPv6 fragment reassembly and route-walker bugs are closed, and network drivers from Broadcom, STMMAC, MediaTek, and Intel get important stability updates. Several memory-accounting and qdisc changes also reduce denial-of-service risks.

Security and hardening

Harden SMB1 client against malformed server responses

The CIFS SMB1 read path now rejects responses shorter than the READ_RSP header or with an out-of-bounds DataOffset, preventing out-of-bounds reads and information disclosure from malicious servers.

Why it matters: Users mounting SMB1 shares via vers=1.0 are protected from crashes and memory leaks when connecting to a hostile server.

e6142a8bfc23 5be5bdda5863

Restrict cifs.idmap key descriptions to kernel origin

The CIFS key type now only accepts idmap descriptions when the request comes from the kernel's private root_cred, preventing unprivileged users from injecting forged authority fields that trigger a root usermodehelper upcall.

Why it matters: Closes a local privilege-escalation vector on systems using cifs.idmap for CIFS user mapping.

d9d7eeb0cea5

Cap network queue length to prevent memory exhaustion

The kernel now rejects attempts to set tx_queue_len above S16_MAX, both via sysfs/ioctl and netlink, preventing unprivileged users from triggering huge ring buffer allocations in pfifo_fast, tun, and tap.

Why it matters: Eliminates a simple denial-of-service where any local user could exhaust system memory by setting an oversized transmit queue length.

66ab4c59b74d 1aa9e143bf51

Harden IPVS synchronization against invalid and corrupt records

IPVS sync receivers now reject connection templates with invalid protocol states, and the sender correctly serializes sequence numbers instead of leaving stale heap bytes in the message.

Why it matters: Protects IPVS load balancers from crashes and stale kernel memory disclosure via malformed sync traffic.

74cb39735b6c b04578b74f2d

Fix SIP conntrack helper out-of-bounds read

sip_skip_whitespace() now returns NULL when it runs out of buffer, matching the expected convention, preventing an out-of-bounds read when a SIP header ends with whitespace and no colon.

Why it matters: Hardens the netfilter SIP helper, used in NAT gateways, against crashes or potential information leaks from malformed SIP packets.

e8f8231824b5

Fix ip6tables protocol check bypass

The kernel now sets IP6T_F_PROTO when a nonzero protocol is supplied, matching ip6tables userspace behavior and preventing rules from bypassing protocol checks by omitting the flag.

Why it matters: Firewall rules using -p are enforced consistently, closing a potential IPv6 filter bypass.

da4afc5a956d

Cap duplicate IPv6 flowlabel leases per socket

Repeated GET requests for a shareable IPv6 flowlabel could grow a socket's lease list without bound; unprivileged leases are now limited to FL_MAX_PER_SOCK.

Why it matters: Prevents memory exhaustion through the IPv6 flowlabel API.

8d6cd1885085

Fix IPv6 fragmentation reassembly heap corruption

Invalidates incomplete fragment queues before flushing them so stale metadata cannot be reused after the per-netns limit is cleared. For IPv6, stale metadata could make ip6_frag_reasm() access out of bounds, leading to heap corruption.

Why it matters: Prevents a local privilege escalation vector reachable via crafted IPv6 fragments on systems with unprivileged network namespaces.

b824476c56a1

Fix IPv6 route walker use-after-free

Fixes a use-after-free where a fib6 walker can remain linked on the netns list after seq stop, causing a later route deletion to use freed memory.

Why it matters: Prevents potential local memory corruption or privilege escalation when reading /proc/net/ipv6_route or using BPF IPv6 route iterators while routes change.

19b4ed644d68

Fix heap overflow in Huawei Hinic mailbox handling

Fixes a 16-byte heap buffer overflow in the Hinic NIC driver's mailbox segment validation by limiting the last segment to the remaining buffer space.

Why it matters: Closes a memory corruption flaw in the Hinic driver that could be triggered by malformed mailbox messages.

5d4d98595743

Fix SMB client heap overflow in DACL owner/group rewrite

When rewriting a DACL, the client sized the buffer from the old ACL and used a u16 size accumulator, so long replacement SIDs could overflow the heap or wrap the size.

Why it matters: Prevents memory corruption when using cifs.idmap with SIDs containing many sub-authorities.

0ee150794c75 d05045177a85

Stop leaking kernel stack via malformed SMB POSIX entries

cifs_posix_to_fattr() ignored parse failures and passed uninitialized SID bytes to the idmapping upcall.

Why it matters: Prevents a malicious SMB server from leaking kernel stack memory to userspace.

da6e25842431

Networking

Fix bonding ALB/RLB cloned skb corruption

The bonding driver now uses skb_cow_head() before modifying source MAC addresses in ALB and ARP transmit paths, preventing silent corruption of shared or cloned socket buffers.

Why it matters: Users of bonding in adaptive load balancing mode get reliable network transmission without occasional corrupted frames.

1746ef2e2df2

Fix tunnel PMTUD ICMP errors reusing stale dst

The tunnel core now drops the overlay packet's stale dst entry before building an ICMP error, so the error is routed correctly instead of being dropped or sent back into the tunnel.

Why it matters: Fixes path MTU discovery for VXLAN and GENEVE tunnels, preventing connectivity issues on links with smaller MTUs.

b58d74963320

Convert bridge multicast port groups to RCU

The bridge's multicast port group list is now properly RCU-protected, fixing a use-after-free that could occur when a port group was removed while another thread was iterating it.

Why it matters: Improves stability for Linux bridges with multicast snooping, a common feature in VMs and containers.

4b772869a1e5

Reject VXLAN dynamic FDB entries using nexthops

The VXLAN driver now refuses to add dynamic FDB entries that reference a nexthop ID, avoiding list corruption and race conditions when multiple VXLAN devices share the same nexthop.

Why it matters: Prevents crashes and data corruption for VXLAN deployments that use nexthop-based load balancing.

98fc57d16744

Clamp qdisc quantum values to prevent soft-lockup DoS

fq, fq_pie, sfq, hhf, dualpi2, pie, drr, and ets now clamp quantum/MTU values passed via tc; crafted size tables could otherwise make the deficit-refill loop spin billions of times under the qdisc lock.

Why it matters: Prevents a local user with CAP_NET_ADMIN from locking the kernel and makes misconfigured qdiscs fail safely.

094cc07f98df 4864f58c53eb fb9f88a33c51 eb56a495f59b 3c01f1ca5dfc 54370e44c002 8382abec0f15 1c38487f46b2

Fix AF_UNIX out-of-band zero-length peek hangs

Blocking recv(MSG_PEEK) with a zero-length buffer could busy-loop when the last queued skb is OOB; the last-skb marker is updated and zero-length peeks now return immediately like TCP.

Why it matters: Applications using zero-byte MSG_PEEK on Unix sockets avoid CPU spins and hangs.

94fd4debd2e3 6e5ee08eb585

Fix UDP length overflow with oversized MTUs

UDP corking now caps fragsize to IP_MAX_MTU/IP6_MAX_MTU, preventing a 16-bit UDP length overflow when PMTU discovery is set to PROBE/DO on devices with unusually large MTUs; the IPv6 forwarding MTU clamp is also restored.

Why it matters: Avoids kernel WARN/corruption on networks with jumbo or oversized MTUs while preserving UDP jumbogram support.

b83641e0ab8b 0ae10b6be49b 199271ebc71c

Fix nfnetlink_log instance use-after-free

Concurrent UNBIND and instance destruction could unhash the same nfnetlink_log instance twice, causing a general protection fault.

Why it matters: Avoids crashes in NFLOG-based logging setups under racing userspace.

387d744fa7e4

Fix null-pointer dereference in IPv6 route deletion

A race in IPv6 route deletion could access a fib6_node that was concurrently replaced, leading to a null-pointer dereference.

Why it matters: Prevents kernel crashes when IPv6 routes are changed concurrently.

cdca92eddc02

Fix use-after-free in Open vSwitch flow mask array

The Open vSwitch flow mask array was freed before the pointer was swapped, so new readers could access freed memory during an RCU grace period.

Why it matters: Prevents memory corruption or crashes in Open vSwitch under concurrent flow table updates.

ba4ba11ed6eb

Fix MPTCP path manager overflow and disconnect race

The MPTCP userspace PM could wrap a full address ID to reserved ID 0, the in-kernel PM could leave stale ADD_ADDR entries when removing ID0, and disconnect() could race with the retransmit timer.

Why it matters: Improves MPTCP stability and prevents address conflicts and socket state corruption.

f9f0068e8813 2ac7d6e62076 85c580b0d859

Account multicast routing memory to memory cgroups

Multicast routing tables and MFC caches were not charged to memory cgroups, letting network namespace owners create many tables and grow unreclaimable slab memory. The fix marks these allocations with GFP_KERNEL_ACCOUNT/SLAB_ACCOUNT.

Why it matters: Prevents containers or unprivileged network namespaces from exhausting host kernel memory through many multicast routing tables, improving memory isolation and accounting.

b7ee18725f22

Fix OVS IPv6 extension header parsing

A bitmask typo in OVS flow parsing used IPPROTO_FRAGMENT where the OFPIEH12_FRAG bit was intended, causing ESP and AH extension headers to be misclassified as out-of-order.

Why it matters: Open vSwitch users get more accurate flow matching for IPv6 packets with ESP/AH extension headers, avoiding incorrect classification or drops.

e184a4a6f423

Fix tc action reference leak on batched action failure

When a batched RTM_NEWACTION request failed after replacing an action bound to a filter, the kernel leaked temporary references and IDR slots. The fix releases each reference without rejecting bound actions.

Why it matters: Prevents tc action IDs from being exhausted after failed batch updates, keeping traffic control configuration reliable.

478eb5abb519

Fix uninitialized metadata in VXLAN transmit path

Initializes the local metadata structure in vxlan_xmit_one() so a VXLAN device configured with both COLLECT_METADATA and GBP cannot use uninitialized stack data when an external ip_tunnel_info lacks the VXLAN option flag.

Why it matters: Prevents potential crashes or stack data leaks on VXLAN tunnels using metadata and GBP.

be83178bfc44

Filesystems and SMB

Fix CIFS/SMB reference leaks that could crash unmount

Three commits fix reference-count leaks in oplock break and deferred close paths, which left dentries/inodes busy and could trigger a kernel BUG on unmount.

Why it matters: SMB users avoid failed unmounts and crashes, especially with multiuser mounts or slow servers.

9f2e63f1b2d5 23b26f4408ac 5520e89a5a4f

Fix SMB uid/gid handling with POSIX extensions and forceuid/forcegid

Several SMB client ownership paths ignored forceuid/forcegid mount options, and getattr replaced server-provided uid/gid with the caller's credentials when POSIX extensions were active.

Why it matters: Correct file ownership reporting and lets administrators enforce local ownership on SMB mounts even against untrusted servers.

cf4d35896621 18a72975e9f3 cd2b2b57921d

Fix SMB file type corruption for reparse points and WSL metadata

Several reparse-point attribute conversions set file type bits without clearing the old S_IFMT bits, so modes could combine multiple types.

Why it matters: Fixes wrong file type reporting, for example symlinks appearing as regular files, on SMB mounts especially with WSL.

fa7a2cfcf1e6 65d5dbdc089b 6bd360447941

Fix out-of-bounds read in SMB symlink parsing

Fixes a one-byte out-of-bounds read in smb2_parse_native_symlink() when copying share-root relative symlink targets, as reported by KASAN.

Why it matters: Avoids a potential crash or information disclosure when accessing malicious SMB symlinks from the CIFS/SMB client.

cb26524ef4ac

Drivers and hardware

Add support for Quectel RG660QB 5G module

Adds the Quectel RG660QB USB ID to qmi_wwan so its QMI interface is recognized by the driver.

Why it matters: Users of this 5G module can use it with the standard QMI driver on Linux.

4ff75f130d1b

Fix MediaTek Bluetooth remote wakeup hang on Ryzen laptops

Remote wakeup on MT7922/MT7925 Bluetooth devices could leave the USB interface unresponsive; the fix disables it for devices attached to Ryzen root hubs.

Why it matters: Prevents Bluetooth from requiring a power cycle on many Ryzen laptops.

dcaf83ead130

Declare missing MT7920 Bluetooth firmware file

The MT7920 Bluetooth driver requested a firmware file but did not declare it with MODULE_FIRMWARE, so modinfo/initramfs tools omitted it.

Why it matters: Fixes Bluetooth initialization on MT7920 hardware when firmware is managed via module metadata.

3d8a8e81ea8a

Fix use-after-free in Bluetooth USB driver during disconnect

btusb used asynchronous cancellation of RX work, allowing it to run after btusb_data was freed on disconnect.

Why it matters: Prevents kernel crashes or memory corruption when unplugging Bluetooth USB devices.

1c12c3117639

Harden Intel Bluetooth PCIe driver against out-of-bounds access

The Intel Bluetooth PCIe driver lacked packet length validation and had an off-by-one in TX handle bounds, enabling out-of-bounds reads/writes.

Why it matters: Security hardening for Intel Bluetooth PCIe hardware; prevents memory corruption from malformed data.

6436e1b5331b 3dd1b41f96aa

Fix OPP table use-after-free causing boot crash on Tensor devices

The OPP core freed an opp_table before using it in an error message, causing an Oops during boot on gs101-oriole.

Why it matters: Fixes boot crashes on Pixel/GS101 and other DT CPUfreq platforms.

1f6de65e3314

Fix Broadcom bnxt_en TPA ring handling and allocation failures

The driver could wrap firmware TPA IDs beyond the allocated array and ignored TPA buffer allocation failures, leaving zeroed RX ring entries and potentially passing zero DMA addresses to the NIC.

Why it matters: Prevents rare crashes or data corruption on Broadcom NICs under memory pressure or with certain firmware TPA counts.

b814dfbfeb0a 961e2a17c5e3 8e6a850c0746 c0aceaf65b70

Fix TX descriptor underrun in stmmac TSO

Corrects the free-descriptor estimate for TSO skbs to account for per-fragment descriptors and possible MSS context descriptor, preventing writes past the ring.

Why it matters: Avoids memory corruption and network stalls on STMMAC-based Ethernet devices when sending large fragmented TSO packets.

5e38d732ec67

Enable EEE on MediaTek MT7530 and MTK Ethernet MACs

Populates the lpi_interfaces bitmaps required by phylink managed EEE, so ethtool again reports EEE as supported and users can enable it on MT7530 DSA switches and MTK Ethernet.

Why it matters: Restores Energy-Efficient Ethernet configuration for routers and boards using MT7530/MTK Ethernet.

3c18e3c9a54e d876c9cb2d16

Disable defective EEE advertisement on MT7530 internal PHY

Stops the MT7530 internal GE PHY from advertising EEE by default because its EEE implementation is defective and can prevent gigabit link training on 2-pair cables.

Why it matters: Fixes link stability issues on devices with the MT7530 switch where EEE advertisement caused no link or DHCP lease.

ccbe7540e4aa

Core kernel and infrastructure

Fix cpufreq sysfs exposure racing with policy init

The cpufreq policy semaphore and cpumask are now initialized before the policy kobject appears in sysfs, eliminating races where user-space reads could access uninitialized data.

Why it matters: Users of CPU frequency scaling are less likely to see intermittent errors or crashes when interacting with cpufreq sysfs attributes during boot or hotplug.

3e5d1bf4bd68 54d37bcf2f49

Restore sysctl to disable syscall user dispatch

The sysctl guard was changed to CONFIG_SYSCTL after CONFIG_PROC_SYSCTL was removed, so kernel.syscall_user_dispatch is registered again.

Why it matters: Administrators can once again disable new syscall user dispatch activations via sysctl.

353a95f1cd8d

Remove 32-bit arptables compatibility interface

Removes the kernel's 32-bit compatibility layer for arptables on 64-bit kernels; most distributions already disabled it.

Why it matters: Users relying on old 32-bit arptables binaries need native 64-bit tools, but the removal reduces kernel attack surface and maintenance.

0bd7ed1a3263

Source commits223 entries +

53432c4c3e86

ice: add missing xa_destroy for sched_node_ids

Jacob Keller · Jul 6, 2026 · 3 files

979d5b8de8ed

ieee802154: hwsim: serialize pib updates to fix double-free

David Carlier · Jul 9, 2026 · 1 files

7dd4c829bac2

idpf: disable DIM work before freeing q_vectors

Myeonghun Pak · Jul 20, 2026 · 1 files

650f197d8ea6

idpf: disable PTM on probe failure and on remove

Myeonghun Pak · Jul 20, 2026 · 1 files

2f37fba846c9

mac802154: fix use-after-free of sdata via queued RX frames

Ibrahim Hashimov · Jul 25, 2026 · 6 files

cc6d60ef9227

idpf: account for VLAN header when parsing RSC packet header

Joshua Hay · Jul 27, 2026 · 1 files

c88a6338ae48

hwmon: (nct6694) do not expose enable on DTIN temperature channels

Ali Ahmet Memis · Aug 3, 2026 · 1 files

9012da455ab9

net: 6lowpan: fix mismatched comments

Chenguang Zhao · Aug 6, 2026 · 1 files

74cb39735b6c

ipvs: reject invalid states in connection template sync records

Kyle Zeng · Aug 10, 2026 · 1 files

b04578b74f2d

ipvs: fix reversed sequence option serialization

Kyle Zeng · Aug 10, 2026 · 1 files

ff5891b266a7

ieee802154: cc2520: fix FIFOP work use-after-free

Fan Wu · Aug 12, 2026 · 1 files

5ad0af4f4367

thermal: sysfs: switch to use scnprintf() to suppress truncation warning

Andy Shevchenko · Aug 17, 2026 · 1 files

013c5a93e806

Documentation: hwmon: replace full-width colon by a standard ASCII colon

Antonin Godard · Aug 18, 2026 · 1 files

e8f8231824b5

netfilter: nf_conntrack_sip: fix OOB read in sip_skip_whitespace()

Joas Antonio dos Santos · Aug 18, 2026 · 1 files

a2471ed17b0e

hwmon: (gpio-fan) Fix use-after-free in alarm work

Fan Wu · Aug 19, 2026 · 1 files

9607c245ca66

hwmon: (mcp9982) Propagate one-shot polling errors

Nikhil Gurudasani · Aug 19, 2026 · 1 files

e317326d1755

hwmon: (ltc4282) Make sure clk_init_data is fully initialized

Geert Uytterhoeven · Aug 19, 2026 · 1 files

8afc94bfb0ff

hwmon: (ina2xx) Acquire hwmon_lock in shunt_resistor_show()

Jared Kangas · Aug 20, 2026 · 1 files

3d44ab826e02

hwmon: (ina2xx) Parameterize ina2xx_data in ina226_alert_read()

Jared Kangas · Aug 20, 2026 · 1 files

e92b9208415a

hwmon: (ina2xx) Replace masks with enum in alert functions

Jared Kangas · Aug 20, 2026 · 1 files

35760f5efd7b

hwmon: (ina2xx) Decouple in0 and curr1 alarms

Jared Kangas · Aug 20, 2026 · 1 files

354ccc99b2dc

hwmon: Fix potential UAF in pec_store

Guenter Roeck · Aug 20, 2026 · 1 files

b8bf9bfda5f6

eth: ice: don't dereference pointers from TP_printk()

Jakub Kicinski · Aug 21, 2026 · 1 files

b4fffa75c1d6

Documentation/hwmon: Document hwmon_notify_event()

Guenter Roeck · Aug 21, 2026 · 1 files

2bf98a6af103

hwmon: Ensure that 'dev' passed to hwmon_notify_event() is a hwmon device

Guenter Roeck · Aug 21, 2026 · 1 files

100eb7c7d0b2

hwmon: (yogafan) fix non-kernel-doc comment

hanzhijian · Aug 21, 2026 · 1 files

06b7cf395b1f

hwmon: (sht4x) Add missing locks

Guenter Roeck · Aug 21, 2026 · 1 files

70c33e211b2b

hwmon: (sht4x) Fix return value from heater_enable_store()

Guenter Roeck · Aug 21, 2026 · 1 files

353a95f1cd8d

syscall_user_dispatch: Use CONFIG_SYSCTL for sysctl guard

Karl Mehltretter · Aug 22, 2026 · 2 files

2c018cc4842c

netfilter: nf_log: unregister loggers before per-net teardown

Chengfeng Ye · Aug 23, 2026 · 2 files

286b175bb038

hwmon: (chipcap2) fix channels in humidity alarm notifications

Javier Carrasco · Aug 23, 2026 · 1 files

fec9b1de0d02

netfilter: cttimeout: prevent UAF during module unload

Chengfeng Ye · Aug 24, 2026 · 1 files

387d744fa7e4

netfilter: nfnetlink_log: cope with concurrent instance destruction

Florian Westphal · Aug 25, 2026 · 1 files

6d760f8b41ae

hwmon: (pmbus) Clear generic status alarms with CLEAR_FAULTS

Vishnu Razdan · Aug 25, 2026 · 1 files

0bd7ed1a3263

netfilter: arp_tables: remove the 32bit compat interface

Florian Westphal · Aug 25, 2026 · 3 files

da4afc5a956d

netfilter: ip6_tables: set F_PROTO when proto value is nonzero

Florian Westphal · Aug 25, 2026 · 1 files

7a099b347fef

netfilter: report NLM_F_DUMP_FILTERED when all is filtered out

Ilya Maximets · Aug 25, 2026 · 1 files

e11811a55225

OPP: of: Fix potential multiplication overflow when calculating freq

Colin Ian King · Aug 26, 2026 · 1 files

e3eceb765159

watchdog: msc313e: Fix NULL pointer dereference in PM callbacks

Tzung-Bi Shih · Aug 27, 2026 · 1 files

aab55360fa11

watchdog: sunxi_wdt: preserve boot-enabled watchdog

James Hilliard · Aug 28, 2026 · 1 files

4ee875c423c6

hwmon: (corsair-cpro) Remove debugfs entries when probe fails

Linmao Li · Aug 28, 2026 · 1 files

5a0aacaa2d59

hwmon: (applesmc) fix key backlight workqueue leak on register failure

Cong Nguyen · Aug 28, 2026 · 1 files

3c73a37f5e40

watchdog: msc313e: Avoid division by zero

Tzung-Bi Shih · Aug 28, 2026 · 1 files

3db30f315935

watchdog: msc313e: Fix clock leak and spurious timer in settimeout()

Tzung-Bi Shih · Aug 28, 2026 · 1 files

3db2df24e7f1

watchdog: msc313e: Enable clock before accessing hardware registers

Tzung-Bi Shih · Aug 28, 2026 · 1 files

4f6817c9eff4

watchdog: msc313e: Fix spurious reset on suspend

Tzung-Bi Shih · Aug 28, 2026 · 1 files

ab390021b2a3

watchdog: msc313e: Fix undefined behavior

Tzung-Bi Shih · Aug 28, 2026 · 1 files

01504d14e47b

watchdog: msc313e: Sync timeout value if WDT was running at boot

Tzung-Bi Shih · Aug 28, 2026 · 1 files

bf79662bc85e

ieee802154: 6lowpan: fix NULL dereference in lowpan_newlink

Zhiling Zou · Aug 29, 2026 · 1 files

a5096d4927d1

opp: Use %pe to print symbolic error name

Sumeet Pawnikar · Aug 29, 2026 · 2 files

09a9e1746a87

hwmon: (aspeed-pwm-tacho) Propagate reset deassert errors

Pengpeng Hou · Aug 30, 2026 · 1 files

b752e041d584

enic: preserve V2 VF carrier across netdev reopen

Satish Kharat · Aug 30, 2026 · 4 files

8972d252f495

enic: match mailbox replies to request numbers

Satish Kharat · Aug 30, 2026 · 3 files

508baf1713f3

hwmon: (corsair-cpro) Create debugfs entries after hwmon registration

Linmao Li · Aug 31, 2026 · 1 files

d83b7502bb08

MAINTAINERS: Update URI for watchdog tree

Antonio Borneo · Aug 31, 2026 · 1 files

1c12c3117639

Bluetooth: btusb: Fix UAF of btusb_data by rx_work

Luiz Augusto von Dentz · Aug 31, 2026 · 1 files

18e5e0ec0e92

net: bcmasp: clear txcb->last before writing each descriptor

Justin Chen · Aug 31, 2026 · 1 files

0c5cf62e72d7

net: bcmasp: fix tx_spb_ring_full() checking same slot cnt times

Justin Chen · Aug 31, 2026 · 1 files

7980325b2f71

pds_core: fix cmd_regs access racing BAR unmap on reset

Nikhil P. Rao · Sep 1, 2026 · 2 files

73608de7e592

pds_core: don't release PCI regions for VFs on reset

Nikhil P. Rao · Sep 1, 2026 · 1 files

c91b4d6e5cc3

ionic: use netif_txq_maybe_stop() in ionic_tx()

Nikhil P. Rao · Sep 1, 2026 · 1 files

a09ceadff95b

mailmap: add entries for Lorenzo Bianconi

Lorenzo Bianconi · Sep 1, 2026 · 1 files

1f29543126dd

octeontx2-af: mcs: Clear stale X2P calibration state before calibration

Viswajith Murali · Sep 1, 2026 · 1 files

efdfb1e27a33

ipv4: fib: bound automatic table ID allocation

Zihan Xi · Sep 1, 2026 · 1 files

80dd7e754b3a

net: mana: Reserve extra CQ slot for the fence completion CQE

Sahil Chandna · Sep 1, 2026 · 1 files

54d37bcf2f49

cpufreq: zero-initialize policy cpumask before sysfs publication

Zhongqiu Han · Sep 1, 2026 · 1 files

74f27fc8642b

s390/qeth: allow bridgeport queries despite OS_MISMATCH

Nagamani PV · Sep 1, 2026 · 3 files

bb2424c3502c

hwmon: (gpio-fan) take fan_data->lock in gpio_fan_shutdown()

Cong Nguyen · Sep 1, 2026 · 1 files

dcaf83ead130

Bluetooth: Properly disable remote wakeup for MT7922/MT7925 on Ryzen platform

Rong Zhang · Sep 1, 2026 · 2 files

b83641e0ab8b

net: ipv4: Fix UDP length overflow with PMTU discover and big MTU

Alice Mikityanska · Sep 1, 2026 · 1 files

0ae10b6be49b

net: ipv6: Fix UDP length overflow with PMTU discover and big MTU

Alice Mikityanska · Sep 1, 2026 · 1 files

18a9a4342136

selftests: net: Test UDP length overflow with PMTU discover and big MTU

Alice Mikityanska · Sep 1, 2026 · 2 files

199271ebc71c