← Back to archive

Daily update · Sep 18–19, 2026

Linux kernel: SMB security fixes, GPU driver updates, and platform stability

Today's mainline patches harden SMB and SCSI paths, correct AMD/Adreno/Nouveau GPU behavior, and fix hibernation, watchdog, and board-level issues.

In brief

This batch includes extensive SMB client memory-safety fixes, a USB storage stack-disclosure fix, multiple AMD and Qualcomm GPU corrections, arm64 hibernation and per-CPU fixes, MIPS atomic-ordering stability, and targeted platform updates for Amlogic, Renesas, i.MX, and ThinkPad hardware.

Security and memory safety

Harden SMB client against malformed or malicious servers

A series of fixes addresses use-after-free conditions, missing bounds checks on server-supplied offsets and lengths, PDU length validation for compound encrypted frames, and unsafe handling of native symlink targets without NT drive prefixes.

Why it matters: Mounted SMB shares are less likely to trigger kernel memory corruption or crashes from buggy or hostile servers.

05762c5bc1cfb4694f269e66f73726b83e47e83330c55edc1b3221bb1210eeb5ef6083e1b09d092eb24a4775c3b7a5975f0306e731e2d034e836eefd717e0a25036b23c240d9509e

Validate SCSI MODE SENSE lengths before CDL enable

scsi_cdl_enable() now validates MODE SENSE length fields before using them to locate the ATA feature mode page, preventing out-of-bounds stack access.

Why it matters: Malicious USB storage devices can no longer trigger a kernel stack disclosure during scanning.

3d676e458fe0

Fix use-after-free in MSM GPU scheduler fences

MSM ringbuffers and GPU VMs now use RCU freeing so userspace-exported fences cannot keep pointing at freed embedded GPU scheduler memory.

Why it matters: Qualcomm Adreno GPU users get a fix for a potential unprivileged use-after-free.

01c8d1f385f7

Storage and filesystem

Fix SMB multiuser lease breaks and reconnect races

Lease-break acknowledgments now go through the session owning the file instead of the worker's fsuid, and reconnect delayed work is canceled and list initialization corrected to avoid use-after-free and concurrent list corruption.

Why it matters: Multiuser SMB mounts are more reliable, and dropped connections reconnect without crashing.

ebc5660132ddc65eae6f61d15f270f091256

Fix ksmbd session expiry and compound request handling

The SMB server now follows SMB2 session expiration semantics instead of dropping valid sessions during SessionSetup, and preserves earlier compound responses when query info fails.

Why it matters: Windows clients with mapped drives stay connected, and normalized-name/compound queries work better.

d7fd1f98607ff4fafaf021749fa26285ae70

Ignore broken SD write-protect on ThinkPad X260

A quirk disables write-protect detection for the Realtek RTS522A card reader, which incorrectly reports inserted SD cards as read-only.

Why it matters: ThinkPad X260 owners can write to SD cards.

9c182bc5d781

Fix JMicron JMB585 SATA controller regression

Clears PxCLBU and PxFBU for AHCI controllers using the 32-bit DMA flag, fixing a regression from forcing 32-bit DMA on JMicron JMB582/JMB585.

Why it matters: Restores functionality of JMicron JMB585 SATA controllers.

82e47533221d

GPU and display

Fix AMD GPU PCIe link capability reporting

The driver now caches both ends of the physical PCIe link and uses GPU-side capabilities instead of accidentally reporting the host port's capabilities.

Why it matters: Tools and logs show correct PCIe link speed for AMD GPUs, such as Gen4 x8 instead of Gen5 x16.

04de4007d323

Fix AMD GPU peer-to-peer with runtime-suspended GPUs

Holds a runtime PM reference on the exporting GPU while mapping dma-buf attachments for peer-to-peer use, preventing buffer migration to VRAM when the exporter is runtime-suspended.

Why it matters: Multi-GPU setups, such as a compositor on an APU using a buffer from an idle discrete GPU, work reliably.

636139603b99

Fix AMD display idle power optimization at high refresh rates

Fixes arithmetic underflow in the MALL hysteresis timer calculation that could disable the optimization or trigger an assert when the requested delay is too short.

Why it matters: Display idle power savings are preserved on high refresh rate monitors.

2ac2fe765ef4

Fix AMD GPU RAS interrupt NULL dereference

Adds NULL checks for the RAS context and object in the nbio_v7_9 interrupt handler, which could be called before RAS initialization completes.

Why it matters: Prevents kernel crashes if a RAS interrupt arrives during early boot.

723d4dc628d7

Add energy accumulator reporting for AMD SMU 14.0.3

Adds energy accumulator reporting for AMD SMU 14.0.3 firmware versions 0x00685000 and above.

Why it matters: Compatible AMD GPUs can report energy consumption through hwmon.

9413959fa9fe

Fix Qualcomm Adreno timestamps, GMU init, and PAS detection

A750 GPUs now use the correct CX AO counter for timestamps, the GMU firmware init timeout is increased from 10ms to 100ms, and zap-shader loading only checks TrustZone PAS when needed.

Why it matters: Adreno A750/Snapdragon devices get accurate GPU timestamps and fewer initialization failures; SC7180 Chromebooks initialize correctly.

ed9ad3d41830a2b65837980aba970587a0e1b7c0f8436f07

Fix Nouveau runtime power management for GSP GPUs

Follow-up fixes force GcOff to 0, enable GSP display suspend/resume flags, and increase the GSP finalization sleep timeout after a previous suspend/resume fix was reverted.

Why it matters: NVIDIA laptop users with GSP-enabled GPUs should see more reliable suspend/resume and runtime PM.

a5c41fa7f92512f6eff11ccf24fbd6d4bcf3bbb9293c9bb7

Fix DRM memory management for swapped-out and large mappings

TTM now removes swapped-out resources from bulk_move ranges and fixes the cgroup-charge condition; dma-buf mapping uses 64-bit lengths and page-aligned scatterlist splits to avoid overflow and unaligned DMA.

Why it matters: GPU memory swapping and peer-to-peer/large-BAR transfers are safer under memory pressure.

3db7d7d58341fcfe64715b42b344ca94e8cc06dd5e1ae8ce

Fix DRM scheduler virtual runtime race

Closes a race between job queue push and pop that could push an entity to the rear of the run queue for a long time.

Why it matters: Prevents GPU job scheduling delays in DRM-based drivers.

2ab510e63197

Fix vc4 use-after-free on Raspberry Pi unbind

The vc4 driver now uses managed KMS polling so output poll work cannot run after the device is freed.

Why it matters: Prevents crashes when unloading or unbinding the display driver on Raspberry Pi.

073a30d75f30

Fix Qualcomm DisplayPort and DSI panel setup

DP mode validation no longer halves bandwidth requirements for wide-bus modes incorrectly, and DSI byte clock rounding happens after reparenting to the PHY PLL.

Why it matters: Prevents unsupported DP modes and broken DSI panels on SM8650/SM8750 and similar Snapdragon platforms.

58995b11dfb72028280686f4

Revert Intel selective fetch change causing register access errors

Reverts a commit that wrote to selective fetch registers on all display 12+ platforms, including pipes that do not implement them, causing unclaimed register access.

Why it matters: Prevents display glitches and kernel warnings on Intel GPUs with HDMI outputs.

a26204be587c

Architecture and core

Fix arm64 hibernation resume

Two fixes restore EL2 hyp vectors by passing HVC_SET_VECTORS arguments on resume and limit the cloned linear map to the runtime VA space.

Why it matters: arm64 hibernation resumes more reliably, especially with 52-bit VA configurations.

955d86e5f3b9e4a6f57d22e0

Fix arm64 per-CPU operation correctness

Per-cpu helpers now parenthesize casts and masks correctly and use the proper LSE size suffix for 8/16-bit operations.

Why it matters: Prevents subtle memory corruption in kernel code using per-cpu variables on arm64.

885bff055a0f44274c6572568cf2093f5372

Fix MIPS I6500 cmpxchg ordering

MIPS EyeQ/I6500 kernels now select CONFIG_WEAK_REORDERING_BEYOND_LLSC so lld/scd atomic loops are surrounded by sync instructions.

Why it matters: Fixes potential NULL page faults on MIPS I6500 systems like Mobileye EyeQ5.

bbc448c541ed

Platform and hardware support

Fix Amlogic T7 board stability and SD card support

Device-tree fixes point UART_A at its real clock, describe PWM-controlled power supplies, and allow SD cards to be power-cycled.

Why it matters: Khadas Vim4 and AN400 owners get stable boot and reliable SD card operation.

882de800bf58c793a084ab301e5a53bd16ac

Fix Renesas GBETH network resets under sustained load

GBETH TX queues now use Weighted-Round-Robin scheduling instead of strict priority, preventing one queue from starving others.

Why it matters: Ethernet on r9a09g0xx Renesas SoCs no longer resets under heavy multi-queue UDP traffic.

33da68f61d2566fcbdbeca0163016c3a91f2f9d9a1913c092ac7bad110be

Fix i.MX hardware RNG and PCIe initialization

CAAM job ring registers are mapped without claiming the memory region, avoiding a conflict that stopped the hardware RNG; i.MX6 PCIe clock enable is moved back after core reset to fix ASMedia SATA initialization.

Why it matters: Restores hardware RNG on i.MX6/7/8 boards and PCIe support on i.MX6Q with ASMedia SATA controllers.

53cf0f26eecec9dc7d730319

Fix watchdog resets during suspend on DA9062/DA9063

Suspend/resume handling now checks WDOG_HW_RUNNING, so a watchdog left running by the driver is disabled during suspend.

Why it matters: Prevents unexpected system resets on systems using DA9062/DA9063 watchdogs.

5071122bf5a67cb575b71ab9

Fix bogus CCD temperature readings on AMD Zen5 mobile processors

k10temp restricted the Zen5 Turin per-CCD temperature range to desktop parts, eliminating implausible readings on mobile models.

Why it matters: Owners of affected AMD Ryzen mobile systems get sane temperature readings instead of false 149°C values.

451b1c19dc7c

Source commits168 entries +
33da68f61d25

arm64: dts: renesas: r9a09g057: Switch GBETH TX queue scheduling to WRR

Ovidiu Panait · Jul 22, 2026 · 1 files

66fcbdbeca01

arm64: dts: renesas: r9a09g056: Switch GBETH TX queue scheduling to WRR

Ovidiu Panait · Jul 22, 2026 · 1 files

63016c3a91f2

arm64: dts: renesas: r9a09g047: Switch GBETH TX queue scheduling to WRR

Ovidiu Panait · Jul 22, 2026 · 1 files

f9d9a1913c09

arm64: dts: renesas: r9a09g077: Switch GBETH TX queue scheduling to WRR

Ovidiu Panait · Jul 22, 2026 · 1 files

2ac7bad110be

arm64: dts: renesas: r9a09g087: Switch GBETH TX queue scheduling to WRR

Ovidiu Panait · Jul 22, 2026 · 1 files

32471d84a487

firmware: arm_scpi: reject DVFS OPP count above MAX_DVFS_OPPS

Xixin Liu · Jul 28, 2026 · 1 files

65320b642025

firmware: arm_scpi: fix device_node leak in scpi_dev_domain_id

Xixin Liu · Jul 28, 2026 · 1 files

70f4b78d560e

clk: scpi: bound-check DVFS index in scpi_dvfs_recalc_rate

Xixin Liu · Jul 28, 2026 · 1 files

ab06cf8152da

clk: scpi: register scpi-cpufreq once and clear on failure

Xixin Liu · Jul 28, 2026 · 1 files

86d923a882f4

clk: scpi: use PLATFORM_DEVID_NONE for scpi-cpufreq

Xixin Liu · Jul 28, 2026 · 1 files

ea9dadeac79c

drm/msm: mark the fbdev framebuffer as system memory

Dmitry Baryshkov · Jul 30, 2026 · 1 files

90af7fde083e

memstick: ms_block: destroy io_queue workqueue on removal

Yifei Gao · Aug 4, 2026 · 1 files

8ee521b8b189

drm/amdkfd: Avoid integer underflow in EOP ring size calculation.

David Francis · Aug 5, 2026 · 2 files

c883d0a132d4

drm/amdkfd: Avoid integer underflow with ffs in EOP ring size calc

David Francis · Aug 5, 2026 · 4 files

6feadbecdae6

mmc: core: Cancel SDIO IRQ work before freeing host

Fan Wu · Aug 6, 2026 · 1 files

d3a421c82412

mmc: mxcmmc: cancel data work and watchdog on remove

Fan Wu · Aug 7, 2026 · 1 files

ff894dced1a7

mmc: sdhci_am654: Move tuning_loop to local variable

Diogo Ivo (Schneider Electric) · Aug 7, 2026 · 1 files

7197d9107d95

mmc: sdhci_am654: Reset command and data lines on failed tuning

Diogo Ivo (Schneider Electric) · Aug 7, 2026 · 1 files

c9f47cc8c37f

mmc: sdhci_am654: Clear ITAPDLY on tuning failure

Diogo Ivo (Schneider Electric) · Aug 7, 2026 · 1 files

308d05225281

mmc: sdhci_am654: Fallback to DT-provided itap delay on DDR50 tuning failure

Diogo Ivo (Schneider Electric) · Aug 7, 2026 · 1 files

6fbbf1e152f3

drm/msm/adreno: fix autosuspend cleanup during teardown

Guangshuo Li · Aug 8, 2026 · 1 files

e249a6e2a130

drm/msm/dp: skip PUSH_IDLE when the link was never enabled

Jesse Casco · Aug 8, 2026 · 1 files

955d86e5f3b9

arm64: hibernate: pass HVC_SET_VECTORS args to the resume hvc

Bradley Morgan · Aug 9, 2026 · 1 files

58995b11dfb7

drm/msm/dp: fix link bandwidth check when wide bus is enabled

William Bright · Aug 12, 2026 · 1 files

5f28bb1c2cd9

drm/amdkfd: implement restore_mqd callbacks for GFX12/12.1

Vladimir Marioukhine · Aug 12, 2026 · 3 files

c9dc7d730319

PCI: imx6: Move clock enable after core reset assertion

Richard Zhu · Aug 13, 2026 · 1 files

5d132990475f

mmc: hsq: Fix use-after-free in retry work

Fan Wu · Aug 14, 2026 · 1 files

2b19cf3e50cd

mmc: mmci: Fix use-after-free in busy-timeout work

Fan Wu · Aug 14, 2026 · 1 files

a5c41fa7f925

Revert "nouveau/gsp: fix suspend/resume regression on r570 firmware"

Lyude Paul · Aug 14, 2026 · 4 files

12f6eff11ccf

drm/nouveau/gsp/r570: Set GcOff = 0 in fbsr

Lyude Paul · Aug 14, 2026 · 1 files

24fbd6d4bcf3

drm/nouveau/gsp/r570: Enable S/R Display workaround in GSP

Lyude Paul · Aug 14, 2026 · 2 files

bbb9293c9bb7

drm/nouveau/gsp: Increase delay for magic sleep in r535_gsp_fini()

Lyude Paul · Aug 14, 2026 · 1 files

3163cd725343

drm/msm: remove stale perf counter XML TODO

George Emmanuel Thomas · Aug 15, 2026 · 1 files

fb5a08026a68

mips: econet: fix unmet dependencies for ECONET

Julian Braha · Aug 15, 2026 · 1 files

e261bfd3c042

MIPS: config: Add EcoNet EN751221 defconfig

Caleb James DeLisle · Aug 17, 2026 · 2 files

8b0cc8707f65

mmc: spi: reset bytes_xfered before retrying CRC failures

Xu Rao · Aug 18, 2026 · 1 files

b7c0f8436f07

drm/msm/adreno: Only check for PAS when a zap shader is present

Paul Hollinsky · Aug 21, 2026 · 1 files

53823e25793a

mmc: sdio_uart: fix xmit_fifo leak when the port table is full

Felix Gu · Aug 21, 2026 · 1 files

073a30d75f30

drm/vc4: Use managed KMS polling to fix UAF on unbind

Karl Mehltretter · Aug 22, 2026 · 1 files

882de800bf58

arm64: dts: amlogic: t7: use the real UART pclk

Lucas Tanure · Aug 23, 2026 · 2 files

c793a084ab30

arm64: dts: amlogic: t7: khadas-vim4: allow the SD card to be power cycled

Lucas Tanure · Aug 23, 2026 · 1 files

9c182bc5d781

mmc: rtsx_pci_sdmmc: ignore broken write-protect on ThinkPad X260

Florian Maillard · Aug 24, 2026 · 1 files

9413959fa9fe

drm/amd/pm: report energy accumulator for smu 14.0.3

Kevin Wang · Aug 25, 2026 · 1 files

63e19ef3ddab

drm/amd/display: Atomize IRQ register read/modify/write ops

Leo Li · Aug 26, 2026 · 9 files

9eb1a393c89a

drm: Fix drm_pending_vblank_event leak in error path for out_fence_ptr

Thadeu Lima de Souza Cascardo · Aug 26, 2026 · 1 files

5f8cb07d7a85

arm64: dts: socfpga: change access permission from 755 to 644

Dinh Nguyen · Aug 28, 2026 · 2 files

a5b5cc909931

drm/msm/dpu: clear pending peripheral flush state

Saim Shujah · Aug 28, 2026 · 1 files

bbc448c541ed

mips: select CONFIG_WEAK_REORDERING_BEYOND_LLSC from CONFIG_EYEQ

Théo Lebrun · Aug 28, 2026 · 1 files

ae7be5c58a81

arm64: dts: amlogic: t7: fix the pin groups of two PWM outputs

Lucas Tanure · Aug 29, 2026 · 1 files

1e5a53bd16ac

arm64: dts: amlogic: t7: khadas-vim4: add the PWM-driven supplies

Lucas Tanure · Aug 29, 2026 · 1 files

406292fd75f9

arm64: dts: amlogic: t7: fix the pin groups of the vsync PWM

Lucas Tanure · Aug 29, 2026 · 1 files

cfc1e9a543e3

ARM: socfpga: select the PL310 erratum 753970 workaround

Pengpeng Hou · Aug 30, 2026 · 1 files

d034e836eefd

smb: client: fix use-after-free of iface in cifs_try_adding_channels()

Joseph Qi · Sep 1, 2026 · 1 files

3bb3e80faf21

firmware: arm_ffa: Tear down driver during shutdown

Sudeep Holla · Sep 1, 2026 · 1 files

b344ca94e8cc

dma-buf: Fix silent overflow for phys vec to sgt

David Hu · Sep 1, 2026 · 1 files

06dd5e1ae8ce

dma-buf: Split sgl by largest page-aligned chunk

David Hu · Sep 1, 2026 · 1 files

126f16e0a1b3

MIPS: Octeon: apply USB FDT fixups also when USB is modular

Orgad Shaneh · Sep 1, 2026 · 1 files

53cf0f26eece

crypto: caam - map job ring registers without claiming region

Rosen Penev · Sep 1, 2026 · 1 files

01c8d1f385f7

drm/msm: RCU-free the scheduler-containing ring and VM objects

Jonghyuk Kim(MalHyuk) · Sep 2, 2026 · 4 files

59ced288fcba

drm/gud: fix out-of-bounds write in gud_plane_atomic_check()

Sajal Gupta · Sep 2, 2026 · 1 files

d5ea0d226e8f

mmc: sh_mmcif: initialize IRQ-thread mutex before requesting interrupt

Runyu Xiao · Sep 2, 2026 · 1 files

d7fd1f98607f

ksmbd: follow SMB2 session expiration semantics

Namjae Jeon · Sep 3, 2026 · 9 files

1274045b0eda

scsi: ibmvfc: Add Kconfig dependency to fix link failure when NVME_FC=m

Venkat Rao Bagalkote · Sep 3, 2026 · 1 files

5535d5e61a77

drm/loongson: Create blend mode property for cursor plane

Huacai Chen · Sep 3, 2026 · 1 files

2028280686f4

drm/msm/dsi: round the byte clock rate after reparenting to the PHY PLL

Dmitry Baryshkov · Sep 3, 2026 · 1 files

0cb1fd924126

scsi: fnic: Fix missed link-up when critical IRQ targets offline CPU

Arun Easi · Sep 3, 2026 · 3 files

2ac2fe765ef4

drm/amd/display: fix MALL hysteresis timer underflow at high refresh rates

Francis Marlou Pacaro · Sep 4, 2026 · 1 files

631946431ddc

ntfs: account for MFT records added during allocation

Namjae Jeon · Sep 4, 2026 · 3 files

3ed11c671ff7

dma-buf/dma-fence: fix checking signaling bit for timeline and driver name v3

Christian König · Sep 4, 2026 · 2 files

08b54e16d547

mmc: core: Fix OF node reference leak on card add failure

Zhu Ling · Sep 4, 2026 · 1 files

44caf1844a25

firmware: arm_scmi: Fix typo "upto" in comment

Hemanth Selam · Sep 4, 2026 · 1 files

82e47533221d

ata: libahci: clear PxCLBU and PxFBU for AHCI_HFLAG_32BIT_ONLY

Niklas Cassel · Sep 4, 2026 · 1 files

3d676e458fe0

scsi: core: Validate MODE SENSE lengths in scsi_cdl_enable()

Alberto Carboneri · Sep 4, 2026 · 1 files

b1d732e62a5b

ntfs: repack $MFT/$ATTRIBUTE LIST

Namjae Jeon · Sep 6, 2026 · 3 files

91709ba5d6d7

ntfs: protect runlist updates with the runlist lock

Namjae Jeon · Sep 6, 2026 · 8 files

8061ee61b942

drm/msm/adreno: Fix the skip_gpu parameter description

Karl Mehltretter · Sep 6, 2026 · 1 files

adf596733131

drm/msm: Fix the separate_gpu_kms parameter description

Karl Mehltretter · Sep 6, 2026 · 1 files

264bf9655c3d

scsi: pm80xx: Fix the use_msix, use_tasklet and read_wwn parameter descriptions

Karl Mehltretter · Sep 6, 2026 · 1 files

779f202a92ef

scsi: qla2xxx: Fix the ql2xfc2target parameter description

Karl Mehltretter · Sep 6, 2026 · 1 files

143755bdabaa

dma-buf: Make DMABUF_DEBUG default to y on DEBUG_KERNEL kernels

Karl Mehltretter · Sep 7, 2026 · 1 files

1923eeffa63e

ntfs: propagate folio errors

Namjae Jeon · Sep 7, 2026 · 1 files

8c5dc7587fdd

ntfs: ignore interrupted inode reads as corruption

Namjae Jeon · Sep 7, 2026 · 2 files

fc440366c470

ntfs: discard inodes that fail initialization

Namjae Jeon · Sep 7, 2026 · 1 files

0c32a42fd96a

ntfs: unhash failed inode reads

Namjae Jeon · Sep 7, 2026 · 1 files

fdb9ebc7fb77

arm64: mte: Fix PTRACE_{PEEK,POKE}MTETAGS error documentation

Catalin Marinas · Sep 7, 2026 · 2 files

229e8188307b

ntfs: fix $MFTMirr write offset when it spans multiple folios

Zhu Tianhao · Sep 7, 2026 · 1 files

5155002b03b2

drm/amdgpu: fix rmmio iounmap skipped on device removal

Chengjun Yao · Sep 8, 2026 · 1 files

6d8c197c9992

ntfs: use dynamic MFT tail reservation

Namjae Jeon · Sep 8, 2026 · 5 files

ee415ce8cba1

drm/i915/display: check configuration index before shifting

Luca Coelho · Sep 8, 2026 · 1 files

885bff055a0f

arm64: percpu: Fix this_cpu_write() casting

Mark Rutland · Sep 8, 2026 · 1 files

44274c657256

arm64: percpu: Fix this_cpu_and() mask generation

Mark Rutland · Sep 8, 2026 · 1 files

8cf2093f5372

arm64: percpu: Fix LSE operations on {8,16}-bit types

Mark Rutland · Sep 8, 2026 · 1 files

247a82da6f56

drm/xe/mmio_gem: forbid VMA split

Ilia Levi · Sep 8, 2026 · 1 files

819f189265a5

drm/xe/mmio_gem: use write-back mapping for dummy page

Ilia Levi · Sep 8, 2026 · 1 files

0c50663403b7

drm/xe/mmio_gem: simplify fault handler loop

Ilia Levi · Sep 8, 2026 · 1 files

37fcbd7b2f89

drm/xe/mmio_gem: Revoke drm_vma_node on xe_mmio_gem destroy

Shuicheng Lin · Sep 8, 2026 · 2 files

de40d31275cd

drm/xe/mmio_gem: cache the dummy page per object

Ilia Levi · Sep 8, 2026 · 1 files

d0c095287819

drm/xe/mmio_gem: fix destroy flow

Ilia Levi · Sep 8, 2026 · 1 files

f4fafaf02174

ksmbd: fix partial normalized name responses

Namjae Jeon · Sep 9, 2026 · 2 files

9fa26285ae70

ksmbd: keep compound responses on query info errors

Namjae Jeon · Sep 9, 2026 · 1 files

a26204be587c

Revert "drm/i915/display: Clear SEL_FETCH_PLANE_CTL on plane disable"

Nemesa Garg · Sep 9, 2026 · 2 files

ed9ad3d41830

drm/msm/a6xx: Add CX AO Counter registers used for a750 GPUs

Neil Armstrong · Sep 9, 2026 · 1 files

a2b65837980a

drm/msm/a6xx: Use CX AO Counter register for timestamp on a750 GPUs

Neil Armstrong · Sep 9, 2026 · 1 files

3fc9f0558c95

drm/ci: Update xfails for kms_cursor_legacy regression

Rob Clark · Sep 9, 2026 · 1 files

3d1ba5cbfb62

kselftest/arm64: Fix size of thread_data values for pthread_join()

Thomas Huth · Sep 9, 2026 · 1 files

3c90e42a0142

drm/xe/shrinker: Return the freed page count through a parameter

Shuicheng Lin · Sep 9, 2026 · 1 files

985862be16c7

drm/xe/shrinker: Take a runtime PM ref before shrinking non-system memory

Shuicheng Lin · Sep 9, 2026 · 1 files

5f270f091256

smb: client: fix rlist race and missing initialization

Paulo Alcantara · Sep 9, 2026 · 1 files

3db7d7d58341

drm/ttm: fix swapped-out resources never leaving their bulk_move range

Vadim Nikitushkin · Sep 9, 2026 · 1 files

effce1cb87ee

drm/gud: Ignore damage clips in full update mode

Sophie D · Sep 10, 2026 · 1 files

ebc5660132dd

smb/client: send lease break ACKs thru correct session for multiuser mounts

April Cardenas · Sep 10, 2026 · 1 files

5a83606d9f31

drm/verisilicon: set blend mode for the cursor plane

Icenowy Zheng · Sep 10, 2026 · 1 files

e5d43d7e924d

drm/verisilicon: add primary modifier for format tables

Icenowy Zheng · Sep 10, 2026 · 3 files

6c62dfd2820f

drm/verisilicon: remove ARGB formats from primary plane

Icenowy Zheng · Sep 10, 2026 · 1 files

49daa3d668b6

perf/arm-cmn: Fix wp_dev_sel2 setting for multi-DTM configurations

Shouping Wang · Sep 10, 2026 · 1 files

e4a6f57d22e0

arm64: hibernate: clone only the linear map that exists at runtime

Breno Leitao · Sep 10, 2026 · 1 files

fcfe64715b42

drm/ttm: apply the swapout bulk_move fix to the intended condition

Vadim Nikitushkin · Sep 10, 2026 · 1 files

23c240d9509e

smb: client: validate absolute native symlink targets before NT fixups

Jérémy Jean · Sep 10, 2026 · 1 files

451b1c19dc7c

hwmon: (k10temp) Fix model id range of Zen5 Turin

Rong Zhang · Sep 10, 2026 · 1 files

26d5ff797685

hwmon: (pwm-fan) Stop RPM timer before freeing tach data

Yibo Tan · Sep 11, 2026 · 1 files

8dc2615d5702

arm64: dts: renesas: r8a779f0: Set UFS lane count

Koichiro Den · Sep 11, 2026 · 1 files

f0e9f963a3d2

drm/xe/i2c: Disable IRQ on unbind

Raag Jadav · Sep 11, 2026 · 1 files

06bd6794b5fd

hwmon: (pmbus/core) increase number of phases and add new mask

Nuno Sá · Sep 11, 2026 · 1 files

7bae83ffb133

hwmon: (cgbc-hwmon) Fix current sensors ID lookup

Thomas Richard (congatec GmbH) · Sep 11, 2026 · 1 files

3550d1dbbcb9

hwmon: (cgbc-hwmon) Add missing sensors

Thomas Richard (congatec GmbH) · Sep 11, 2026 · 2 files

636139603b99

drm/amdgpu: hold a runtime PM reference for P2P dma-buf attachments

Mike Lothian · Sep 11, 2026 · 1 files

c65eae6f61d1

smb: client: cancel reconnect work in clean_demultiplex_info()

Paulo Alcantara · Sep 12, 2026 · 1 files

ba970587a0e1

drm/msm/a6xx+: Increase GMU FW init timeout

Rob Clark · Sep 12, 2026 · 1 files

1d9763f34a85

watchdog: msc313e: Propagate error code in resume()

Tzung-Bi Shih · Sep 12, 2026 · 1 files

e75c96157d45

smb: client: fix smbd_connection leak on cifs_get_tcp_session() error

Paulo Alcantara · Sep 12, 2026 · 1 files

400cb663ca01

watchdog: digicolor: Avoid division by zero

Tzung-Bi Shih · Sep 13, 2026 · 1 files

5af7d2cbd20f

watchdog: rtd119x: Avoid division by zero

Tzung-Bi Shih · Sep 13, 2026 · 1 files

6274281c41ef

watchdog: rzv2h: Avoid division by zero

Tzung-Bi Shih · Sep 13, 2026 · 1 files

22737cfced62

watchdog: msc313e: Fix premature reset during timeout update

Tzung-Bi Shih · Sep 13, 2026 · 1 files

f4fae975db08

drm/msm/hdmi_phy: fix runtime PM cleanup on probe failure

Guangshuo Li · Sep 13, 2026 · 1 files

a15fac810c76

dt-bindings: display/msm: Use consistent indentation in the example

Krzysztof Kozlowski · Sep 13, 2026 · 5 files

4396d70bb7fe

mmc: sdhci-of-aspeed: Remove children before releasing SDC resources

Myeonghun Pak · Sep 13, 2026 · 1 files

e1aeaf79dea5

smb: client: fix unaligned access in WSL reparse point parser

Paulo Alcantara · Sep 14, 2026 · 2 files

e1253a82bb4c

smb: client: fix fattr leaking on wsl_to_fattr() failure

Paulo Alcantara · Sep 14, 2026 · 1 files

5071122bf5a6

watchdog: da9062: fix suspend/resume handling of HW_RUNNING watchdog

Li Jun · Sep 14, 2026 · 1 files

0ff9c7775e51

hwmon: (w83791d) remove fan/pwm 4-5 sysfs group on remove

Guangshuo Li · Sep 14, 2026 · 1 files

c702a5f18b78

hwmon: (w83793) release probe data through kref

Guangshuo Li · Sep 14, 2026 · 1 files

bdf5f731957d

hwmon: (gpio-fan) return IRQ_HANDLED from the shared alarm IRQ handler

Cong Nguyen · Sep 14, 2026 · 1 files

723d4dc628d7

drm/amdgpu: check ras and obj before dereference

Dmitriy Chumachenko · Sep 14, 2026 · 1 files

0d1cb83337f1

ata: libahci_platform: Fix device reference leak in ahci_platform_get_resources()

Wentao Liang · Sep 15, 2026 · 1 files

0d2f4cfa5643

drm/amd/display: Fix NULL dereference in dcn50/dcn60 init_hw

Srinivasan Shanmugam · Sep 15, 2026 · 2 files

2ab510e63197

drm/sched: Fix virtual runtime race

Tvrtko Ursulin · Sep 15, 2026 · 2 files

04de4007d323

drm/amdgpu: Fix GPU PCIe link capability reporting

Mario Limonciello · Sep 15, 2026 · 2 files

1d12fb94ac09

hwmon: (pmbus/tps53679) Fix TPS53676 phase page decoding

Sanman Pradhan · Sep 15, 2026 · 1 files

7f9caa70aef0

drm/amdgpu: Skip KFD mapping clear before initialization

Mario Limonciello · Sep 15, 2026 · 1 files

e6cb0b4d4ecb

hwmon: (hp-wmi-sensors) Fix use-after-free in fungible_show()

Muhammad Bilal · Sep 16, 2026 · 1 files

8d836581f9b1

ata: libata-scsi: fix ata_dsm_trim_pages() kernel-doc

Niklas Cassel · Sep 16, 2026 · 1 files

88f113634028

watchdog: sp5100_tco: Fix pci_dev reference leak in sp5100_tco_init()

Wentao Liang · Sep 16, 2026 · 1 files

8f0ca55016a7

watchdog: starfive-wdt: Fix runtime PM leak in starfive_wdt_pm_start()

Wentao Liang · Sep 16, 2026 · 1 files

05762c5bc1cf

smb: client: fix next_buffer UAF and NextCommand bounds in compound PDUs

Frank Sorenson · Sep 16, 2026 · 1 files

b4694f269e66

smb: client: validate minimum PDU size before smb2_get_data_area_len()

Frank Sorenson · Sep 16, 2026 · 1 files

f73726b83e47

smb: client: fix server->total_read for compound encrypted PDUs

Frank Sorenson · Sep 16, 2026 · 1 files

e83330c55edc

smb: client: fix missing lower-bound check on DFS referral string offsets

Frank Sorenson · Sep 16, 2026 · 1 files

1b3221bb1210

smb: client: reject short Next offsets in parse_server_interfaces()

Frank Sorenson · Sep 16, 2026 · 1 files

eeb5ef6083e1

smb: client: fix OOB struct field reads in move_smb2_ea_to_cifs()

Frank Sorenson · Sep 16, 2026 · 2 files

b09d092eb24a

smb: client: fix missing iov bounds check in parse_posix_sids()

Frank Sorenson · Sep 16, 2026 · 1 files

4775c3b7a597

smb: client: fix potential OOB read in smb3_enum_snapshots()

Frank Sorenson · Sep 16, 2026 · 1 files

5f0306e731e2

smb: client: fix reparse buffer bounds in cifs_query_reparse_point()

Frank Sorenson · Sep 16, 2026 · 1 files

92b68492eae7

hwmon: (hp-wmi-sensors) Improve raw WMI string handling

James Seo · Sep 16, 2026 · 1 files

089070b51ccb

hwmon: (pmbus/tps53679) Select page 0 for single-page TPS53676

Sanman Pradhan · Sep 16, 2026 · 1 files

7cb575b71ab9

watchdog: da9063: fix suspend/resume handling of HW_RUNNING watchdog

Li Jun · Sep 17, 2026 · 1 files

4dd1999783d7

soc: samsung: exynos-pmu: fix use-after-free of interrupt generator node

Alexey Klimov · Sep 17, 2026 · 1 files

717e0a25036b

cifs: Fix server use-after-free in cifs_chan_skip_or_disable()

Wentao Liang · Sep 17, 2026 · 1 files