Daily update · Oct 2–3, 2026
Linux kernel: NVMe, SMB/CIFS, BPF, TPM, and audio fixes
A broad set of mainline fixes improves storage reliability, BPF/TPM security, confidential VM boot, and audio support.
In brief
This update covers NVMe multipath and authentication hardening, SMB/CIFS data integrity improvements, BPF verifier and trampoline fixes, TPM memory-safety work, and numerous audio quirks for laptops and USB devices. It also addresses confidential VM boot crashes, io_uring edge cases, and a few core deadlock fixes.
Storage and filesystems
NVMe fixes: IOMMU faults, multipath security, and reset races
A batch of NVMe fixes addresses Micron 4100AT command faults from unaligned DMA pool descriptors, out-of-bounds reads in multipath ANA log handling, an out-of-bounds write in target authentication, a use-after-free in command-effects logging, and a controller reset race during device creation.
Why it matters: Improves stability and security for NVMe users, especially multipath setups, NVMe-over-Fabrics authentication, and Micron 4100AT drives.
c72f9f7bd23c63fa2d9c9c37fa6778e030be72ece656abd4c20bba234f3e
Network filesystem read/write integrity fixes
Netfs and SMB/CIFS changes prevent stale post-EOF pagecache data from becoming visible, zero gaps from short reads, avoid races around server-side zero/copy/clone/truncate operations, and keep signed writes stable while in flight. The client also queries the server's authoritative size when lease state is stale.
Why it matters: Prevents data corruption and spurious write failures on SMB/CIFS mounts, particularly when files are extended, copied, or used with fallocate.
69bf14300b5035024595f641da4fe97fb6c77b473ac7cd6f4721587f96cbaa994489bd833581f843defa8f8d32c1044fc9b1194e8ec9fafc68cccf8ab5d59e7270d075aa4b4d557153c5c2c1095e8db55c5cd831dd05add7b2b6
Block-layer fixes for kyber, dm-thin, and virtio-blk zones
Kyber now marks scheduler-owned requests correctly to avoid token leaks and I/O stalls. dm-thin's blk-cgroup lookup saves IRQ state to prevent a deadlock, and virtio-blk zone write granularity is propagated to the block layer instead of being rounded up.
Why it matters: Improves I/O scheduler reliability, avoids hangs on dm-thin devices, and makes zoned storage in VMs behave correctly.
Kernel hardening and security
BPF verifier, trampoline, and allocator fixes
BPF fixes close a verifier out-of-bounds packet access with shared pointer IDs, prevent use-after-free during trampoline detach by waiting for RCU tasks grace periods, reject overflowing constant-blinding jump offsets, and fix allocator leaks plus a PREEMPT_RCU batch-delete crash.
Why it matters: Prevents memory corruption, verification bypasses, and crashes in BPF tracing, kprobe-multi, and hardened JIT environments.
b88822d2584f0fb5751a6e4117637e1a581aad139384ecddfbd97dd1d3cede020dc8049b
TPM memory safety and reset-attack hardening
TPM fixes address a heap buffer overflow in command transmission, an off-by-four bounds check that could expose stale response bytes, an auth session leak, and now disable the TPM when the null key name check detects a reset attack.
Why it matters: Protects TPM users from memory corruption and improves resistance to TPM reset attacks.
Confidential VM boot and snapshot restore fixes
The vmgenid driver now remaps its memory as decrypted for SEV-SNP guests and sets driver_data before registering notification handlers, avoiding boot failures and NULL-pointer crashes during snapshot restore interrupts.
Why it matters: Makes confidential VMs on AWS/Firecracker boot and restore reliably.
io_uring task_work and multishot fixes
io_uring now holds an RCU read lock while adding task_work to prevent an SQPOLL thread from freeing the ring context too early. Multishot zero-copy receives are requeued after local resource exhaustion, and TX timestamp multishots end cleanly when the CQ ring is full.
Why it matters: Prevents kernel crashes and improves reliability for high-performance io_uring network workloads.
Audio and input support
Laptop audio quirks for Lenovo, ASUS, Dell, and AMD SoundWire
DMI and codec quirks enable internal microphones and speakers on several Lenovo models, the Chuwi Hi8, and the IPASON SmartBook S1. They also restore speakers on Lenovo Legion Pro 7 and ASUS ROG Strix G16, fix Dell XPS 13 speaker ID detection, add ALC235 headset support, and fix SoundWire enumeration on the ASUS Zenbook S14 and AMD ACP7.0 boards.
Why it matters: Restores working audio capture and playback on a range of laptops and AMD SoundWire systems.
4cae4ca34992d395e1b62d965d35f9be9b54c5a8fc2abe05e0cb0570d0ebf4b506f735e3cfc0a117d773cad16d850e379ee4266827cfde0be324fcb928114992dd2f
USB audio, codec, and sound card fixes
This batch adds native DSD support for the HiBy FC4 USB DAC, disables USB autosuspend on ASUS SupremeFX Hi-Fi to avoid firmware corruption, works around Behringer and Audient usb-audio regressions, fixes a caiaq use-after-free on probe failure, restores Creative Titanium HD output, and corrects rt274 and wm8903 codec behavior.
Why it matters: Improves reliability for USB DACs and sound cards, while fixing sample-rate and DRC issues on affected codecs.
d24b03248ac6d49f8d9680eeb5c4823cf3e4a154f7b9f1970b7bd20f63794fa0c91c2c4c6eda8938a790e31ae4aeb049
HID security fixes, Logitech revert, and Turtle Beach support
Intel THC HID transports now include protocol header space in buffer size calculations, HID BPF hardware request errors propagate correctly, and the Logitech Bolt receiver HID++ patch is reverted because it caused erratic scroll-wheel behavior with multiple connected mice. The Turtle Beach VelocityOne Race is also added to the force-feedback driver.
Why it matters: Prevents memory corruption on Intel HID-over-I2C/SPI devices, improves HID BPF reliability, restores stable pointer/scroll behavior for Logitech Bolt users, and enables force feedback for the Turtle Beach wheel.
5e5c3b9db1c5a1cdd72371273afefbfe55c23fabd8ec206b53f7f7955a68
Core kernel fixes
Deadlock and tracing fixes
kfree_rcu no longer wakes kswapd while called under scheduler locks, avoiding a circular lock dependency. ALSA sequencer compat ioctl now takes ioctl_mutex to close a race, and fprobe unregistration properly handles handlers running in idle or nohz_full contexts.
Why it matters: Prevents rare kernel deadlocks and use-after-free crashes in scheduler, ALSA sequencer, and fprobe tracing paths.
PCI AtomicOps and vDSO build fixes
pci_enable_atomic_ops_to_root() now accepts AtomicOps already enabled by the hypervisor, and the random vDSO avoids LLVM-generated memset calls that broke builds on PowerPC, RISC-V, and other architectures.
Why it matters: Fixes PCIe device behavior in passthrough VMs and unblocks kernel builds with newer clang.
Source commits134 entries +
virt: vmgenid: remap memory as decrypted
Vitaly Kuznetsov · Dec 22, 2025 · 1 files
drbd: remove unused drbd_nl_mcgrps[] array
Arnd Bergmann · May 19, 2026 · 1 files
virt: vmgenid: set driver_data before registering notification handlers
Zhichen Wang · Aug 25, 2026 · 1 files
virt: vmgenid: move to using dev_set/get_drvdata
Jason A. Donenfeld · Aug 31, 2026 · 1 files
siphash: clean up kernel-doc comments
Randy Dunlap · Aug 31, 2026 · 1 files
tpm: Fix heap buffer overflow in tpm_transmit_cmd()
Jiangshan Yi · Sep 1, 2026 · 1 files
tpm: Fix auth session leak in tpm2_get_random() error path
Jiangshan Yi · Sep 2, 2026 · 1 files
tpm: fix off-by-four bounds check in tpm2_get_random()
Jiangshan Yi · Sep 3, 2026 · 1 files
nvme-pci: add NVME_QUIRK_DMAPOOL_ALIGN_512 for Micron 4100AT
Bean Huo · Sep 4, 2026 · 1 files
random: vDSO: fix repeated word 'to' in comment
Hemanth Selam · Sep 7, 2026 · 1 files
nvmet: preserve device path on allocation failure
Julian Sun · Sep 8, 2026 · 1 files
nvme-fc: do not warn on controller removal race
Maurizio Lombardi · Sep 8, 2026 · 1 files
random: fix vgetrandom_opaque_params kernel-doc
Karl Mehltretter · Sep 9, 2026 · 1 files
blk-cgroup: save IRQ state in blkg_tryget_closest()
Hao Zhang · Sep 11, 2026 · 1 files
nvmet-auth: fix out-of-bounds write in nvmet_auth_challenge()
Weiming Shi · Sep 12, 2026 · 1 files
Revert "nvme-tcp: lockdep: use dynamic lockdep keys per socket instance"
Shin'ichiro Kawasaki · Sep 14, 2026 · 1 files
nvme-tcp: delay nvme_tcp_reclassify_socket()
Eric Dumazet · Sep 14, 2026 · 1 files
ASoC: codecs: max98363: fix uninitialized stream_config->type
Jiangshan Yi · Sep 14, 2026 · 1 files
ASoC: codecs: rt1017-sdca-sdw: fix uninitialized stream_config->type
Jiangshan Yi · Sep 14, 2026 · 1 files
nvme-multipath: set BLK_FEAT_ZONED only after the zone info is known
Guixin Liu · Sep 14, 2026 · 1 files
selftests: ublk: fix unused_result error
Dirk Gouders · Sep 14, 2026 · 1 files
nvme-multipath: fix underflow in ANA log bounds checks
Daehyeon Ko · Sep 15, 2026 · 1 files
nvmet: pci-epf: reject too-short SGL segments
Daehyeon Ko · Sep 15, 2026 · 1 files
nvme: do not reset controllers in NVME_CTRL_NEW state
Maurizio Lombardi · Sep 15, 2026 · 1 files
HID: bpf: cast size to ssize_t when checking hid_bpf_hw_request
Benjamin Tissoires · Sep 15, 2026 · 1 files
selftest/hid: add test for negative return codes for hid_bpf_hw_request
Benjamin Tissoires · Sep 15, 2026 · 1 files
nvmet: copy the hostid into the ctrl before creating PR pc_refs
Guixin Liu · Sep 16, 2026 · 1 files
nvme: work around -Wformat-security warning
Arnd Bergmann · Sep 16, 2026 · 3 files
nvme: work around all -Wformat-security warnings
Arnd Bergmann · Sep 17, 2026 · 1 files
ALSA: hda/realtek - Add headset mode for Dell Pro QC1255
Kailang Yang · Sep 17, 2026 · 1 files
ALSA: hda/realtek: Add quirk for IPASON SmartBook S1
Jianyu Zhou · Sep 17, 2026 · 1 files
ALSA: seq: Serialize compat port-info ioctls
Kyle Zeng · Sep 17, 2026 · 1 files
ASoC: amd: yc: Add Lenovo ThinkPad E16 Gen 2 (21JN) to quirks
Seiji Adachi · Sep 17, 2026 · 1 files
ASoC: rt766: fix HID dependency for SND_SOC_SDCA_HID
Arnd Bergmann · Sep 17, 2026 · 1 files
MAINTAINERS: update slab.git URL
Vlastimil Babka (SUSE) · Sep 17, 2026 · 1 files
ASoC: amd: acp: enable TAS2783 and add RT712-VB SoundWire machine
Syed Saba Kareem · Sep 17, 2026 · 2 files
tpm: Disable TPM on null key name mismatch
Surendran Kanagaraj · Sep 18, 2026 · 1 files
ALSA: hda/realtek: Add quirk for Acer Nitro ANV16-41
Zhang Heng · Sep 18, 2026 · 1 files
ASoC: codecs: rt286: Revert delay value for jack setup
Cezary Rojewski · Sep 18, 2026 · 1 files
ASoC: codecs: rt274: Fix format setting for 44100 rate
Cezary Rojewski · Sep 18, 2026 · 1 files
virtio_blk: set the zone write granularity
Niklas Cassel · Sep 18, 2026 · 1 files
nvmet: defer setting ns->enabled to false in nvmet_ns_disable()
Nilay Shroff · Sep 18, 2026 · 2 files
nvmet: don't allow I/O admission after percpu ns reference is killed
Nilay Shroff · Sep 18, 2026 · 1 files
ALSA: ua101: reject mismatched capture/playback packet sizes
Xiang Mei · Sep 18, 2026 · 1 files
ALSA: line6: reject oversized playback packets
Xiang Mei · Sep 18, 2026 · 1 files
io_uring/bpf_filter: mark source as COW when cloning filters
Hui Peng · Sep 19, 2026 · 1 files
io_uring: only post the dummy skip CQE on CQE_MIXED rings
Hui Peng · Sep 19, 2026 · 1 files
io_uring: fix free entry check for 32b CQEs on CQE32 rings
Hui Peng · Sep 19, 2026 · 1 files
io_uring: zero big_cqe for aux CQEs on CQE32 rings
Hui Peng · Sep 19, 2026 · 1 files
ASoC: amd: yc: Add DMI quirk for Lenovo V15 G6 ARP
Daniel Ortiz · Sep 20, 2026 · 1 files
ASoC: wm8903: Move the DRC QR threshold to the register that holds it
HyeongJun An · Sep 20, 2026 · 1 files
smb: client: clear post-EOF pagecache when extending a file via truncate
Paulo Alcantara · Sep 20, 2026 · 4 files
smb: client: discard post-EOF pagecache when extending a file via zero range
Paulo Alcantara · Sep 20, 2026 · 1 files
smb: client: discard post-EOF pagecache when extending a file via copy range
Paulo Alcantara · Sep 20, 2026 · 1 files
smb: client: discard post-EOF pagecache when extending a file via clone range
Paulo Alcantara · Sep 20, 2026 · 1 files
ALSA: usb-audio: Add native DSD quirk for HiBy FC4
Achilles Zhang · Sep 21, 2026 · 1 files
ASoC: tegra: Fix ASRC Stream6 input threshold control
Sheetal · Sep 21, 2026 · 1 files
PCI: Accept AtomicOps already enabled by the hypervisor
Nikola Prica · Sep 21, 2026 · 1 files
ALSA: hda/realtek: Add quirk for Lenovo ThinkBook G8+
Zhang Heng · Sep 21, 2026 · 1 files
ALSA: hda/realtek: Add quirk for Acer Nitro AN515-45
Zhang Heng · Sep 21, 2026 · 1 files
ALSA: hda/realtek: Add mute LED quirk for HP Victus 15-fb2xxx
Krish Gulati · Sep 21, 2026 · 1 files
netfs: clear post-EOF pagecache when extending a file via write
Paulo Alcantara · Sep 21, 2026 · 6 files
ALSA: hda/realtek: Limit internal mic boost on HP Pavilion 15 (103c:2164)
Hernan Ganzo · Sep 21, 2026 · 1 files
ALSA: hda/realtek: Drop Yoga Pro 9 16IAH10 PCI SSID quirk
Matt Barr · Sep 21, 2026 · 1 files
ALSA: hda/realtek: Add mute LED quirk for HP Pavilion 15-ec1xxx
Luis Banha · Sep 21, 2026 · 1 files
HID: Intel-thc-hid: Intel-quicki2c: Fix buffer overflow
Even Xu · Sep 22, 2026 · 1 files
HID: Intel-thc-hid: Intel-quickspi: Fix buffer overflow
Even Xu · Sep 22, 2026 · 1 files
nvme: fix command effects log lifetime for multipath heads
Yao Sang · Sep 22, 2026 · 2 files
mm/slab: do not wake up kswapd in __kfree_rcu_sheaf()
Harry Yoo (Meta) · Sep 22, 2026 · 1 files
ASoC: amd: acp: Add DMI quirk for Lenovo Yoga Pro 7 14ASP9
Zhang Heng · Sep 22, 2026 · 1 files
HID: universal-pidff: Add support for Turtle Beach VelocityOne Race
Tomasz Pakuła · Sep 22, 2026 · 2 files
blk-mq: set RQF_USE_SCHED when the operation is known
Keith Busch · Sep 22, 2026 · 2 files
blk-mq: allow cached requests to be used for flush operations
Keith Busch · Sep 22, 2026 · 1 files
ALSA: hda/realtek: Add quirk for Lenovo ThinkBook 16p Gen 3 ARH (21EK)
KIM MinWoo · Sep 23, 2026 · 1 files
io_uring: initialize task context before running the BPF loop
Yao Kai · Sep 23, 2026 · 1 files
ALSA: usb-audio: Add quirk flag for ASUS SupremeFX Hi-Fi
Roman Bolotov · Sep 23, 2026 · 1 files
Revert "HID: logitech: add Bolt receiver support for Logitech HID++ devices"
Benjamin Tissoires · Sep 23, 2026 · 2 files
io_uring/zcrx: requeue multishot receives stopped by a local resource
Junyuan Feng · Sep 23, 2026 · 1 files
block: reject polled dio with user integrity metadata
Yang Xiuwei · Sep 23, 2026 · 1 files
ALSA: hda/realtek: Add quirk for HP ENVY 13-aq1xxx
Tarun Noonemunthala · Sep 23, 2026 · 1 files
HID: multitouch: stop the release timer from being rearmed on remove
Aldo Ariel Panzardo · Sep 23, 2026 · 1 files
ALSA: hda/realtek: Fix square wave output on ASUS Strix G615LR
Zhang Heng · Sep 23, 2026 · 1 files
ALSA: hda/realtek: Fix silent speaker on Higole F9B
Yu-Hsiang Tseng · Sep 23, 2026 · 1 files
ALSA: usb-audio: Add mixer mapping for MSI MAG B850M MORTAR WIFI
Tomasz Bojanowski · Sep 23, 2026 · 1 files
ASoC: SDCA: Set suspended flag after resuming within system suspend
Maciej Strozek · Sep 24, 2026 · 1 files
ASoC: SDCA: Add better pm_runtime error handling in func probe
Maciej Strozek · Sep 24, 2026 · 1 files
ALSA: hda/realtek: Fix speakers on ASUS PM3406CHA
Muhtasham Nawr al-Mahmud · Sep 24, 2026 · 1 files
bpf: Fix overflow of jump offset in constant blinding
Alexei Starovoitov · Sep 24, 2026 · 1 files
bpf: Hold map BTF for the memory allocator destructor record
Kumar Kartikeya Dwivedi · Sep 25, 2026 · 1 files
ASoC: Intel: bytcr_rt5651: Add quirk for Chuwi Hi8 with generic DMI strings
Jasper Firth · Sep 25, 2026 · 1 files
ALSA: caiaq: unregister the input device when probe fails
Nguyen Ngoc Thang · Sep 25, 2026 · 1 files
random: vDSO: avoid call to memset() when zeroing reserved parameter
Nathan Chancellor · Sep 25, 2026 · 7 files
smb: client: flush and commit data before querying allocated ranges
Paulo Alcantara · Sep 25, 2026 · 1 files
smb: client: drain outstanding I/O before truncating on O_TRUNC open
Paulo Alcantara · Sep 25, 2026 · 1 files
ALSA: hda/tegra: Re-enable SDO workaround for Tegra194
Aaron Kling · Sep 26, 2026 · 1 files
bpf: Wait for an RCU tasks grace period before freeing trampoline progs
Florent Revest (Anthropic) · Sep 26, 2026 · 3 files
bpf: Skip detached progs in trampoline images that are still in use
Florent Revest (Anthropic) · Sep 26, 2026 · 8 files
selftests/bpf: Detach a trampoline prog while a task sleeps before it
Florent Revest (Anthropic) · Sep 26, 2026 · 5 files
ALSA: hda/realtek: Add ALC235 support for headset mode
Zeyu Li · Sep 26, 2026 · 1 files
smb: client: flush dirty data before zeroing a range
Paulo Alcantara · Sep 26, 2026 · 1 files
smb: client: drain and invalidate before server-side copy/clone
Paulo Alcantara · Sep 26, 2026 · 1 files
smb: client: only require read lease for size-extending zero range
Paulo Alcantara · Sep 26, 2026 · 1 files
netfs: zero gaps in read-gaps folio to avoid writing back stale data
Paulo Alcantara · Sep 26, 2026 · 1 files
smb: client: only require read lease for size-extending preallocate
Paulo Alcantara · Sep 26, 2026 · 1 files
netfs: zero the tail of a short DIO/unbuffered read
Paulo Alcantara · Sep 26, 2026 · 1 files
ASoC: qcom: lpass-cpu: use DAI table index for playback constraints
Zimeng Li · Sep 27, 2026 · 1 files
io_uring/cmd_net: end TX_TIMESTAMP multishot when the CQ is full
lollipopkit · Sep 27, 2026 · 1 files
smb: client: distinguish real EOF from a stale remote_i_size on read
Paulo Alcantara · Sep 27, 2026 · 1 files
ASoC: amd: acp-config: Add ACP70 DMI quirk for ASUS UM5406GA
Zhang Heng · Sep 28, 2026 · 1 files
ASoC: Intel: Add quirk to block match table for Lenovo Yoga Slim 7
Charles Keepax · Sep 28, 2026 · 3 files
smb: client: require stable pages for signed connections
Paulo Alcantara · Sep 28, 2026 · 1 files
ALSA: hda/realtek: Add mute LED quirks for HP Pavilion 15-eh3174nw and HP Laptop 15-dw1xxx
Bartosz Brom · Sep 28, 2026 · 1 files
ALSA: hda/realtek: Add mute LED quirk for HP Laptop 15-fd2xxx
Preston Lam · Sep 28, 2026 · 1 files
fprobe: Use guard(rcu_sched_notrace) and check rcu_is_watching()
Masami Hiramatsu (Google) · Sep 29, 2026 · 1 files
bpf: Fix missing migration protection in __rhtab_map_lookup_and_delete_batch()
Ömer Mete Kaya · Sep 29, 2026 · 1 files
ALSA: hda/realtek: Add quirk for HP Pavilion AiO 24 speaker
Zhang Heng · Sep 29, 2026 · 1 files
ASoC: codecs: lpass-wsa-macro: rewrite the interpolator volume after enabling clocks
Liviu Nicoara · Sep 29, 2026 · 1 files
ALSA: usb-audio: Apply boot quirk for Behringer models generically
Takashi Iwai · Sep 29, 2026 · 1 files
io_uring: fix task_work add use-after-free with SQPOLL
Jens Axboe · Sep 29, 2026 · 2 files
ALSA: usb-audio: Apply IGNORE_CTL_ERROR quirk to all Audient devices
Takashi Iwai · Sep 29, 2026 · 1 files
ALSA: hda/realtek: Fix mute and micmute LEDs on HP ENVY x360 15-ey0xxx
Harrison Lucas · Sep 29, 2026 · 1 files
kprobes: Skip disarmed probes when checking optkprobe overlap
Leon Hwang · Sep 30, 2026 · 1 files
ALSA: hda/realtek: Add mute LED quirk for HP Pavilion 14-dv1001TU
renpanpan · Sep 30, 2026 · 1 files
bpf: Factor out __do_call_rcu_ttrace()
Alexei Starovoitov · Sep 30, 2026 · 1 files
bpf: Fix objects stuck in free_by_rcu_ttrace
Alexei Starovoitov · Sep 30, 2026 · 1 files
selftests/bpf: Add a test for objects stuck in free_by_rcu_ttrace
Alexei Starovoitov · Sep 30, 2026 · 2 files
ALSA: ctxfi: Fix silent playback on Titanium HD (SB1270)
Harin Lee · Sep 30, 2026 · 1 files
ALSA: hda/realtek: Add micmute LED quirk for Acer Swift SFG16-72
Jakub Gawlik · Sep 30, 2026 · 1 files
smb: client: split cifsFileInfo bitfields to avoid shared-byte RMW races
Frank Sorenson · Sep 30, 2026 · 1 files
spi: cs42l43: Workaround for wrong speaker ID on Dell XPS 13 DX13260
Richard Fitzgerald · Oct 1, 2026 · 1 files
bpf: Fix packet range of pointers sharing an id
Alexei Starovoitov · Oct 1, 2026 · 2 files
selftests/bpf: Test packet range of pointers sharing an id
Alexei Starovoitov · Oct 1, 2026 · 2 files
ALSA: core: Define auto-cleanup for snd_card_free()
Takashi Iwai · Oct 1, 2026 · 1 files
ALSA: ice1712: Fix the error handling via auto-cleanup at probe
Takashi Iwai · Oct 1, 2026 · 1 files