← Back to archive

Weekly briefing · Sep 14–21, 2026

Linux mainline: week of Sep 14

A weekly briefing built from 7 published daily update(s).

In brief

This weekly briefing gathers the meaningful changes that entered Linux mainline over the previous seven days.

Bug fixes

Pass initial cgroup idle state and suppress duplicate idle callbacks

sched_ext now includes the cpu.idle state in scx_cgroup_init_args, so BPF schedulers see cgroups that were already configured idle before the scheduler was loaded. It also stops delivering ops.cgroup_set_idle() when the written value does not change, mirroring the existing guard for weight writes.

Why it matters: Gives BPF schedulers an accurate initial view of cgroup idle state and prevents repeated callbacks from confusing toggle- or accounting-based schedulers.

93d88ac4a44829871903f3a3

Use the correct scheduler in dispatch_one() keep decisions

dispatch_one() was checking the root scheduler's flags and bypass state when deciding whether to keep running @prev, even when @prev belongs to a sub-scheduler. The local variable is renamed to root_sch and the keep decisions now read from @prev's scheduler.

Why it matters: Avoids marking a sub-scheduler's last task with the last-task enqueue flag when that sub-scheduler did not opt in, and prevents the associated WARN_ON_ONCE.

3265ef0b670190f19b2816f5

Fix qmap example scheduler races and idle-claim handling

The scx_qmap sample scheduler gets four fixes: rescue inserts no longer add the IMMED flag, placements wait until a cid's caps are actually in effect, pending partition work is published before becoming the runner, and idle claims are restored from ops.dispatch() when a task never arrives.

Why it matters: Prevents rescue tasks from bouncing, tasks being placed on cids whose caps are not active yet, missed partition updates, and cids staying marked busy after an unused idle claim.

a0d356696f8763b4ff62224489ff16f071399a0b159ff18c

Fix sched_ext error-path NULL dereference and pre-enable race

Two core sched_ext fixes: the COMPAT kfunc wrappers scx_bpf_select_cpu_and() and scx_bpf_dsq_insert_vtime() no longer dereference a NULL scheduler when called with a task that has no scheduler. The pre-enable error claim window is closed so an error claimed by a BPF program cannot race with the enable work and leave the scheduler stuck and later freed while still in use.

Why it matters: Avoids NULL-pointer dereferences and a use-after-free in sched_ext error handling.

0a85182723b6c7a1c6e8004a

Avoid iterating cgroup dying tasks with zero refcount

The cgroup task iterator now avoids tasks on the dying_tasks list whose reference count has already dropped to zero, closing a race between cgroup_task_release() and cgroup_task_free().

Why it matters: Prevents the iterator from reaching tasks that are no longer safely referenceable.

057dac23d329

Restore sysctl range checks and fix jiffies conversion truncation

Three sysctl fixes restore range checks in proc_dointvec_ms_jiffies_minmax and do_proc_ulong_conv_ms_jiffies that were accidentally removed during a refactor. sysctl_msec_to_jiffies also returns MAX_JIFFY_OFFSET instead of truncating very large millisecond values through a u64-to-u32 conversion.

Why it matters: Out-of-range writes are rejected again, and large millisecond values no longer wrap through type truncation.

82431877d837318012c56576afdf35cfae0d

Fix use-after-free in nested-guest TLB invalidation

kvmhv_emulate_tlbie_all_lpid() iterates nested-guest entries and temporarily drops mmu_lock without holding a reference on the kvm_nested_guest pointer. A concurrent vCPU can free that structure during the window, leaving a dangling pointer. The fix takes a reference inside the loop before dropping the lock.

Why it matters: Prevents a race that could lead to memory corruption or a crash when handling TLB invalidation for nested guests.

51938dfa8a51

Fix secure device page leak on uv_page_in() failure

In kvmppc_svm_page_in(), if uv_page_in() fails after kvmppc_uvmem_get_page() succeeds, the secure device page is never released. The failure path skips the assignment needed for migrate_vma_finalize() to reclaim the page, leaking a firmware-bounded secure memory entry and associated metadata.

Why it matters: Prevents gradual exhaustion of the secure memory pool and stale secure-page markings after a failed page-in operation.

0a416ee20bcc

Fix overflow validation in TCE IOBA check

The unified iommu_tce_check_ioba() ignored the caller's npages value and always validated a single page. This missed overflows for multi-page TCE operations such as H_STUFF_TCE and H_PUT_TCE_INDIRECT. The fix accounts for npages and checks the full requested range against the table capacity.

Why it matters: Closes a validation gap that could allow out-of-range TCE accesses in KVM and VFIO paths.

0b271f7d7f5e

Fix zone activation check for RAID profiles on zoned devices

btrfs_can_activate_zone() only handled single and DUP profiles. For RAID0/RAID1/RAID1C3/RAID1C4/RAID10, it returned false even with free zones, causing data allocations to fail with -EAGAIN and hang in direct I/O.

Why it matters: Prevents permanent write hangs on zoned Btrfs filesystems using RAID profiles; each profile now requires one active zone per device like single.

3a35e787ac1a

Protect commit-root iteration during device replace

mark_block_group_to_copy() iterated the commit root without holding the commit root semaphore, so a concurrent transaction commit could free extent buffers during iteration.

Why it matters: Avoids a use-after-free crash during device-replace operations.

0594e3423f4b

Stop creating compressed inline extents that don't save space

A recent refactor passed the block size to the compression code, so it no longer rejected compressed data that was not smaller than the original. This could create compressed inline extents that waste metadata space and require decompression on read.

Why it matters: Prevents inefficient inline extents for small files; restores the intended rejection when compression doesn't help.

cc337324cc6b

Handle missing space when rolling back verity items

If enable_verity() failed due to a qgroup limit or ENOSPC, the rollback and orphan cleanup could themselves fail for lack of metadata reservation, forcing the filesystem read-only and leaving unreachable subvolumes. The fix uses the global reserve for these deletion-only transactions.

Why it matters: Prevents forced read-only mounts and unreachable subvolumes after a failed verity setup.

76bf149cd029

Clear free space tree creation flag on rebuild failure

btrfs_rebuild_free_space_tree() set a creation flag and several error paths returned without clearing it. On a live filesystem, the stale flag caused delayed reference processing to be skipped.

Why it matters: Avoids metadata inconsistency after a failed free space tree rebuild; the tree remains marked untrusted so callers fall back to extent-tree caching.

3565893cc72c

Abort transaction when inode update fails during hole punch/reflink

If updating the inode failed after file extent items were dropped or inserted, the transaction was not aborted, so a later commit could leave the filesystem inconsistent.

Why it matters: Prevents persistent metadata corruption after errors during hole punching or reflinking.

97fcd34aa9fd

Validate chunk item size in system chunk array

The superblock validation checked space for a key but not for the chunk item before reading its stripe count, allowing a malformed superblock to trigger an out-of-bounds access.

Why it matters: Hardens superblock validation against corrupted system chunk arrays.

aeab4c628757

Restore device path detection for rootfs without initramfs

A previous lockdep fix broke device path resolution for btrfs root filesystems without initramfs, causing grub-probe to fail. This adds an exception for /dev/root so the boot-time device path is recognized.

Why it matters: Fixes grub-probe and device detection for the minority of users running btrfs rootfs without initramfs.

b797b52e88a6

Derive f_fsid from dev_t only when temp_fsid is active

A previous change mixed dev_t into f_fsid for all single-device filesystems, which changed statfs(2) values across kernel upgrades and reboots. Now the old UUID-based derivation is used unless temp_fsid is active.

Why it matters: Restores stable f_fsid values for normal Btrfs mounts and preserves backward compatibility.

72de4807ba84

Fix misleading tree-checker error messages

Two messages in the tree checker were wrong: one printed the dev extent objectid instead of the offset, and another referred to a free space info item instead of a free space extent item.

Why it matters: Improves diagnostics when corrupted metadata is detected; no functional change.

a1167d942047f59d86d25e41

Fix kernel stack disclosure in evdev EVIOCSABS ioctl

The ioctl handler copied a user-controlled number of bytes into an uninitialized on-stack struct, then stored the entire struct in the device, allowing stale stack data to be read back. It now zeroes the struct before copying.

Why it matters: Closes a local information leak that any user with access to input devices could exploit.

8b852965b8ea

Fix kernel stack disclosure in force-feedback compat path

The compat translation copied only the smaller compat structure into a full native struct, leaving the tail uninitialized; the full struct was later stored and could be read back by a force-feedback daemon. The struct is now zeroed first.

Why it matters: Prevents a kernel stack memory leak through the evdev/uinput force-feedback interface.

f84819ef8d66

Fix memory corruption in Cypress Gen5 touchscreen driver

The driver used a device-supplied size field directly as the memcpy length into a fixed-size buffer. It now clamps the report size to the buffer size before copying.

Why it matters: Prevents a faulty or malicious touchscreen controller from corrupting kernel memory, which could crash or compromise the system.

85f080fb87ed

SELinux: always return a fully initialized access decision

avc_has_perm_noaudit() left its decision output uninitialized when no permissions were requested, and callers later used those bytes for audit and caching. It now fills in a deny-all/audit-all decision.

Why it matters: Eliminates undefined behavior and incorrect SELinux audit results, improving security enforcement reliability.

8861db305103

SELinux: preserve original user SID across nested backing files

For stacked filesystems, the saved user file SID could be replaced by the mounter's SID, so mprotect() checked the wrong target. The original user SID is now preserved when the user_file is itself a backing file.

Why it matters: Fixes SELinux denials and wrong-target checks on nested overlayfs/FUSE setups, important for containers and desktop users.

8c0c602202b9

SELinux: recheck all backing layers on mprotect()

mprotect() only rechecked the top-level and lowest backing file, skipping intermediate layers that mmap() checks, enabling a policy bypass. It now rechecks every backing layer.

Why it matters: Closes a SELinux bypass that could allow executing code from a denied layer in stacked filesystems.

78fc54b934bf

futex: allocate private hash on vfork()

vfork() shares the address space, so private futexes can be used across the vforked child; without allocating the private hash, waiters could be left in an unsafe state. The private hash is now allocated for vfork as well.

Why it matters: Fixes a potential use-after-free/security issue with private futexes in vforked processes.

b61b6f95d672

Fix use-after-free race between exec and signal delivery

A race between exec and POSIX timer signal delivery could free a signal structure while still in use, causing a KASAN-detected UAF. The exec path now prevents the race.

Why it matters: Eliminates a kernel crash/security bug triggered by concurrent exec and signal/timer operations.

d2710c8d938a

Fix out-of-bounds read in Synaptics RMI4 SMBus driver

When chunking writes into SMBus blocks, the block length was calculated from the total length instead of the remaining length, causing reads past the end of the buffer on the final partial chunk. It now uses the remaining length.

Why it matters: Prevents a kernel memory over-read on laptops with Synaptics touchpads using SMBus.

51cfe54f815a

Clean up POSIX timers immediately after exec thread handoff

When a non-leader thread execs, the PID ownership changes and a per-thread CPU timer node could remain queued on the old task. The timers are now cleaned up right after de_thread().

Why it matters: Prevents potential timer misbehavior or use-after-free after exec, improving stability for multithreaded programs.

acb03d388181

Fix use-after-free and refcount bugs in DMA engine core

dma_chan_put() could drop a device reference on fast-path get/put, and device release could free memory while RCU readers or dma_chan_put() still accessed it. The commits fix the reference counting and lifetime handling.

Why it matters: Prevents kernel crashes and memory corruption in systems using DMA engine clients such as audio, SPI, and storage.

44dab659064ee873c74132f0dc750422170a

Fix signal context for rejected INT instructions on Intel FRED

FRED delivery didn't construct the #GP error code and rewound the IP incorrectly for user INT instructions, breaking Wine's handling of INT 0x2d and causing crashes in games. Now the IP is rewound and the error code synthesized.

Why it matters: Improves Wine/gaming compatibility on Intel CPUs with FRED, such as recent Core Ultra processors.

93f53499d0b9

Prevent native kernel builds from using APX extended registers

When CONFIG_X86_NATIVE_CPU is enabled, the kernel could be compiled with -march=native and inadvertently use Extended General Purpose Registers (EGPRs) on CPUs supporting APX. This commit disables that usage for C and Rust code because the kernel does not yet support context switching those registers.

Why it matters: Users who build their own kernels with '-march=native' on recent AMD/Intel CPUs avoid potential crashes or corruption from unsupported register usage.

63edf5a009ae

Fix race in POSIX CPU timer deletion

A race in the POSIX CPU timer code could free a timer that was still queued on the expiry list. The fix restores the distinction between a timer canceled before expiry and one still owned by the expiry handler.

Why it matters: This prevents a use-after-free that could cause kernel crashes or memory corruption in applications using POSIX CPU timers, such as profiling or timeout mechanisms.

c21eaa72f02f

Hardware support

DMA and memory allocation fixes

Corrects DMA bounce buffer handling and reserved memory assignment, and fixes allocation for IOMMU-backed devices on AMD SME/SEV systems.

Why it matters: Prevents silent data corruption and allocation failures on systems with specific DMA configurations.

b7d7914a9ae3504981db4f6955a8e1451869

Platform hardware support

Adds mute LED support for HP OmniBook 7 laptops and fixes GPIO hogs in device tree overlays.

Why it matters: Better laptop indicator support and correct GPIO behavior on embedded systems.

1c4f6202876a1f1d0812f6a8

Fix Amlogic T7 board stability and SD card support

Device-tree fixes point UART_A at its real clock, describe PWM-controlled power supplies, and allow SD cards to be power-cycled.

Why it matters: Khadas Vim4 and AN400 owners get stable boot and reliable SD card operation.

882de800bf58c793a084ab301e5a53bd16ac

Fix Renesas GBETH network resets under sustained load

GBETH TX queues now use Weighted-Round-Robin scheduling instead of strict priority, preventing one queue from starving others.

Why it matters: Ethernet on r9a09g0xx Renesas SoCs no longer resets under heavy multi-queue UDP traffic.

33da68f61d2566fcbdbeca0163016c3a91f2f9d9a1913c092ac7bad110be

Fix i.MX hardware RNG and PCIe initialization

CAAM job ring registers are mapped without claiming the memory region, avoiding a conflict that stopped the hardware RNG; i.MX6 PCIe clock enable is moved back after core reset to fix ASMedia SATA initialization.

Why it matters: Restores hardware RNG on i.MX6/7/8 boards and PCIe support on i.MX6Q with ASMedia SATA controllers.

53cf0f26eecec9dc7d730319

Fix watchdog resets during suspend on DA9062/DA9063

Suspend/resume handling now checks WDOG_HW_RUNNING, so a watchdog left running by the driver is disabled during suspend.

Why it matters: Prevents unexpected system resets on systems using DA9062/DA9063 watchdogs.

5071122bf5a67cb575b71ab9

Fix bogus CCD temperature readings on AMD Zen5 mobile processors

k10temp restricted the Zen5 Turin per-CCD temperature range to desktop parts, eliminating implausible readings on mobile models.

Why it matters: Owners of affected AMD Ryzen mobile systems get sane temperature readings instead of false 149°C values.

451b1c19dc7c

Fix MediaTek MT8195 HDMI PHY clocking for 4K@60 output

Fixed a PLL divisor overflow for high pixel clocks and corrected the TMDS clock ratio register value, allowing the PHY to output 3840x2160@60Hz within spec.

Why it matters: Enables reliable 4K@60 HDMI output on devices using the MT8195 SoC.

de7f29a1fe1d486a70ef8482

Resend QRTR HELLO on MHI resume to fix Qualcomm Wi-Fi suspend

On Qualcomm Wi-Fi cards like WCN7850, the QRTR HELLO handshake was only sent at registration, so after suspend/resume the firmware waited indefinitely for a new HELLO. This commit triggers the handshake during resume.

Why it matters: Fixes resume failures ('timeout while waiting for restart complete') on laptops with Qualcomm Wi-Fi 7, such as the Lenovo Slim 7x.

6a5719cc3ef2

Security and hardening

Harden network protocol handling against races and malformed packets

Fixes memory-safety issues in TCP ACK validation, netlink group bitmap resizing, socket timestamp ioctls, WWAN modem parsing, AF_PACKET TPACKET rings, pskb_carve, the Unix socket garbage collector, and rejects too-low tcp_rmem values.

Why it matters: Reduces crash and memory-corruption risk from malicious or buggy network traffic and long-running socket usage.

f81e6c3fb063ceac0de741bf9ed55f3dbef45d063822ac5131550d585589c7ead970424933ff111d7ba337213e611202a5117e1eccac4a4263dfeaba83a945a529d6

Fix MPTCP receive path and scheduler race

MPTCP recvmsg() could return 0 instead of an error when another thread disconnected the socket, and the scheduler could race with subflow state changes and use mss_now reset to zero in a division. Both paths are now handled explicitly.

Why it matters: Improves MPTCP connection stability and prevents spurious end-of-stream or potential divide-by-zero crashes.

60404266ef3e42064de57fb8

Network scheduler, tunnel, and driver fixes

Prevents a soft lockup via tiny CoDel intervals, caps HHF flow limits to avoid memory exhaustion, fixes a kernel panic when adding Geneve tunnel options, and corrects Ethernet driver issues affecting ethtool filters, TSO with long IPv6 headers, and PTP timestamp accuracy.

Why it matters: More stable networking under load, with specific qdisc configurations, tunnel options, and on Broadcom/Synopsys/Cadence hardware.

7f4a5ec6258f2cef2588c995455ebeadf71423ca4ddc4fce15989abd74f19ca4ba242591

Harden SMB client against malformed or malicious servers

A series of fixes addresses use-after-free conditions, missing bounds checks on server-supplied offsets and lengths, PDU length validation for compound encrypted frames, and unsafe handling of native symlink targets without NT drive prefixes.

Why it matters: Mounted SMB shares are less likely to trigger kernel memory corruption or crashes from buggy or hostile servers.

05762c5bc1cfb4694f269e66f73726b83e47e83330c55edc1b3221bb1210eeb5ef6083e1b09d092eb24a4775c3b7a5975f0306e731e2d034e836eefd717e0a25036b23c240d9509e

Validate SCSI MODE SENSE lengths before CDL enable

scsi_cdl_enable() now validates MODE SENSE length fields before using them to locate the ATA feature mode page, preventing out-of-bounds stack access.

Why it matters: Malicious USB storage devices can no longer trigger a kernel stack disclosure during scanning.

3d676e458fe0

Fix use-after-free in MSM GPU scheduler fences

MSM ringbuffers and GPU VMs now use RCU freeing so userspace-exported fences cannot keep pointing at freed embedded GPU scheduler memory.

Why it matters: Qualcomm Adreno GPU users get a fix for a potential unprivileged use-after-free.

01c8d1f385f7

Source commits515 entries +
f76017a7663c

nfsd: fix handling of NFSEXP_PNFS in the netlink codepath

Jeff Layton · Apr 14, 2026 · 1 files

1caceeb2d74b

RDMA/rxe: insert mcg into mcg_tree only after rxe_mcast_add() succeeds

Michael Bommarito · Jun 17, 2026 · 1 files

48e97c59a49c

phy: renesas: rcar-gen3-usb2: Avoid long delay in atomic context

Claudiu Beznea · Jul 16, 2026 · 1 files

33da68f61d25

arm64: dts: renesas: r9a09g057: Switch GBETH TX queue scheduling to WRR

Ovidiu Panait · Jul 22, 2026 · 1 files

66fcbdbeca01

arm64: dts: renesas: r9a09g056: Switch GBETH TX queue scheduling to WRR

Ovidiu Panait · Jul 22, 2026 · 1 files

63016c3a91f2

arm64: dts: renesas: r9a09g047: Switch GBETH TX queue scheduling to WRR

Ovidiu Panait · Jul 22, 2026 · 1 files

f9d9a1913c09

arm64: dts: renesas: r9a09g077: Switch GBETH TX queue scheduling to WRR

Ovidiu Panait · Jul 22, 2026 · 1 files

2ac7bad110be

arm64: dts: renesas: r9a09g087: Switch GBETH TX queue scheduling to WRR

Ovidiu Panait · Jul 22, 2026 · 1 files

769001ce838d

RDMA/rxe: Restore HMM_PFN_WRITE check in ODP write paths

Weiming Shi · Jul 26, 2026 · 1 files

d1fc569fcbc7

dmaengine: mmp_pdma: fix wrong extended DRCMR base for SpacemiT K3

Troy Mitchell · Jul 27, 2026 · 1 files

32471d84a487

firmware: arm_scpi: reject DVFS OPP count above MAX_DVFS_OPPS

Xixin Liu · Jul 28, 2026 · 1 files

65320b642025

firmware: arm_scpi: fix device_node leak in scpi_dev_domain_id

Xixin Liu · Jul 28, 2026 · 1 files

70f4b78d560e

clk: scpi: bound-check DVFS index in scpi_dvfs_recalc_rate

Xixin Liu · Jul 28, 2026 · 1 files

ab06cf8152da

clk: scpi: register scpi-cpufreq once and clear on failure

Xixin Liu · Jul 28, 2026 · 1 files

86d923a882f4

clk: scpi: use PLATFORM_DEVID_NONE for scpi-cpufreq

Xixin Liu · Jul 28, 2026 · 1 files

d042487dc118

xfrm: iptfs: fix stack OOB read in iptfs_skb_reset_frag_walk()

Roshan Kumar · Jul 28, 2026 · 1 files

89fefad9f971

xfrm: serialize state GC with device state flush

Chengfeng Ye · Jul 30, 2026 · 1 files

2afb8dc1f439

xfrm: use hlist_del_init_rcu for state_cache and state_cache_input

Siwei Zhang · Jul 30, 2026 · 1 files

ea9dadeac79c

drm/msm: mark the fbdev framebuffer as system memory

Dmitry Baryshkov · Jul 30, 2026 · 1 files

42d100f5232f

xfrm: add missing RCU read lock in xfrm_send_migrate_state()

Aleksandr Nogikh · Jul 31, 2026 · 1 files

820b8cff81c7

wifi: ath11k: cleanup arsta in ath11k_mac_peer_cleanup_all()

Nicolas Escande · Jul 31, 2026 · 1 files

dc33262be1fe

xfrm: iptfs: fix runt reassembly panic from short inner tot_len

Henry Martin · Aug 3, 2026 · 1 files

8e2b86140398

fs/dax: check zero or empty entry before converting xarray entry

Seunguk Shin · Aug 3, 2026 · 1 files

6973a21ee73c

ipv6: xfrm: use full sockets in local error paths

Zhiling Zou · Aug 3, 2026 · 1 files

d1ebd9081879

xfrm: fix compat ALLOCSPI request use-after-free

Kyle Zeng · Aug 4, 2026 · 1 files

90af7fde083e

memstick: ms_block: destroy io_queue workqueue on removal

Yifei Gao · Aug 4, 2026 · 1 files

51cfe54f815a

Input: rmi_smbus - fix out-of-bounds read in rmi_smb_write_block()

Dmitry Torokhov · Aug 5, 2026 · 1 files

8ee521b8b189

drm/amdkfd: Avoid integer underflow in EOP ring size calculation.

David Francis · Aug 5, 2026 · 2 files

c883d0a132d4

drm/amdkfd: Avoid integer underflow with ffs in EOP ring size calc

David Francis · Aug 5, 2026 · 4 files

fe10579b6dc3

Input: synaptics-rmi4 - fix GPF in suspend and resume when unbound

Dmitry Torokhov · Aug 6, 2026 · 1 files

6feadbecdae6

mmc: core: Cancel SDIO IRQ work before freeing host

Fan Wu · Aug 6, 2026 · 1 files

d3a421c82412

mmc: mxcmmc: cancel data work and watchdog on remove

Fan Wu · Aug 7, 2026 · 1 files

ff894dced1a7

mmc: sdhci_am654: Move tuning_loop to local variable

Diogo Ivo (Schneider Electric) · Aug 7, 2026 · 1 files

7197d9107d95

mmc: sdhci_am654: Reset command and data lines on failed tuning

Diogo Ivo (Schneider Electric) · Aug 7, 2026 · 1 files

c9f47cc8c37f

mmc: sdhci_am654: Clear ITAPDLY on tuning failure

Diogo Ivo (Schneider Electric) · Aug 7, 2026 · 1 files

308d05225281

mmc: sdhci_am654: Fallback to DT-provided itap delay on DDR50 tuning failure

Diogo Ivo (Schneider Electric) · Aug 7, 2026 · 1 files

ba6cb7c0868a

wifi: wilc1000: fix out-of-bounds read in P2P public action frames

Ali Ahmet Memis · Aug 7, 2026 · 1 files

e2de8d5eb298

wifi: brcmfmac: cyw: pass PMKID to firmware if present

Bogdan Nicolae · Aug 7, 2026 · 1 files

d2f5082f9e84

xfrm: add missing rcu_read_lock(), skb_dst_force() and dev_hold() for xfrm_trans_reinject()

Eric Dumazet · Aug 7, 2026 · 1 files

6fbbf1e152f3

drm/msm/adreno: fix autosuspend cleanup during teardown

Guangshuo Li · Aug 8, 2026 · 1 files

da2ca406f45a

wifi: mac80211: avoid WARN in set_bitrate_mask when sdata not in driver

Rik van Riel · Aug 8, 2026 · 1 files

e249a6e2a130

drm/msm/dp: skip PUSH_IDLE when the link was never enabled

Jesse Casco · Aug 8, 2026 · 1 files

975396b9e5a4

IB/hfi1: Resolve the credit-return buffer through the send context's node

Shuhei Takeshita · Aug 9, 2026 · 1 files

62f0f34fbd2b

IB/hfi1: Fix the PIO_CRED credit-return mmap

Shuhei Takeshita · Aug 9, 2026 · 1 files

f9edf7cf63b9

wifi: virt_wifi: free skb when disconnected

Mariano Baragiola · Aug 9, 2026 · 1 files

955d86e5f3b9

arm64: hibernate: pass HVC_SET_VECTORS args to the resume hvc

Bradley Morgan · Aug 9, 2026 · 1 files

621d90169cef

wifi: brcmfmac: fix lost 802.1x TX completion wakeup

Karl Mehltretter · Aug 11, 2026 · 1 files

a44a3f175eae

RDMA/uverbs: Fix mmap_lock/disassociation_lock circular dependency

Or Har-Toov · Aug 11, 2026 · 3 files

2be77295316c

RDMA/mlx5: Remove warn on missing representor in query_port_speed

Or Har-Toov · Aug 11, 2026 · 1 files

0294b6dd5152

dmaengine: ti: k3-udma-glue: fix NULL dereference in k3_udma_glue_release_rx_chn()

Alexander Chesnokov · Aug 12, 2026 · 1 files

ef9fbe1b93f3

RDMA/core: Reject unregistering netdevs in ib_get_eth_speed

Krystian Kaniewski · Aug 12, 2026 · 1 files

58995b11dfb7

drm/msm/dp: fix link bandwidth check when wide bus is enabled

William Bright · Aug 12, 2026 · 1 files

5f28bb1c2cd9

drm/amdkfd: implement restore_mqd callbacks for GFX12/12.1

Vladimir Marioukhine · Aug 12, 2026 · 3 files

5ce5721e8cbe

wifi: libipw: reject too-short beacon and probe responses

Shmulik Cohen · Aug 12, 2026 · 1 files

adb7118b7d2c

wifi: libipw: reject too-short association responses

Shmulik Cohen · Aug 12, 2026 · 1 files

c46cfaf8db42

wifi: ipw2x00: bound management frame length to the receive buffer

Shmulik Cohen · Aug 12, 2026 · 2 files

c9dc7d730319

PCI: imx6: Move clock enable after core reset assertion

Richard Zhu · Aug 13, 2026 · 1 files

a7df136ec529

dmaengine: sprd: Fix runtime PM reference leak in probe

Ruoyu Wang · Aug 13, 2026 · 1 files

16b10f64c63f

gpiolib: Put fwnode reference on failure

Michail Tatas · Aug 13, 2026 · 1 files

5d132990475f

mmc: hsq: Fix use-after-free in retry work

Fan Wu · Aug 14, 2026 · 1 files

2b19cf3e50cd

mmc: mmci: Fix use-after-free in busy-timeout work

Fan Wu · Aug 14, 2026 · 1 files

d10e2a08799e

RDMA/rxe: Fix integer overflow in mr_check_range() leading to OOB access

Gang Yan · Aug 14, 2026 · 1 files

4d7fa28e151a

dt-bindings: input: mediatek,mt6779-keypad: add mt6572

Roman Vivchar · Aug 14, 2026 · 1 files

e667aee1c192

wifi: mwifiex: bound the pairwise-cipher OUI walk to the IE length

Doruk Tan Ozturk · Aug 14, 2026 · 1 files

a5c41fa7f925

Revert "nouveau/gsp: fix suspend/resume regression on r570 firmware"

Lyude Paul · Aug 14, 2026 · 4 files

12f6eff11ccf

drm/nouveau/gsp/r570: Set GcOff = 0 in fbsr

Lyude Paul · Aug 14, 2026 · 1 files

24fbd6d4bcf3

drm/nouveau/gsp/r570: Enable S/R Display workaround in GSP

Lyude Paul · Aug 14, 2026 · 2 files

bbb9293c9bb7

drm/nouveau/gsp: Increase delay for magic sleep in r535_gsp_fini()

Lyude Paul · Aug 14, 2026 · 1 files

bbb9a0ab96d4

wifi: libertas_tf: fix UAF in lbtf_free_adapter()

Jiangshan Yi · Aug 15, 2026 · 1 files

1eeca1d5e092

wifi: brcmsmac: fix UAF in brcms_free_timer()

Jiangshan Yi · Aug 15, 2026 · 1 files

3687d7d48070

wifi: mwifiex: validate scan response extents

Pengpeng Hou · Aug 15, 2026 · 1 files

3163cd725343

drm/msm: remove stale perf counter XML TODO

George Emmanuel Thomas · Aug 15, 2026 · 1 files

1f1d0812f6a8

gpiolib: of: don't mark hog nodes OF_POPULATED before a chip is found

Abdurrahman Hussain · Aug 15, 2026 · 1 files

fb5a08026a68

mips: econet: fix unmet dependencies for ECONET

Julian Braha · Aug 15, 2026 · 1 files

1af874e9f4ce

IB/mlx4: Fix use-after-free on pkey sysfs registration failure

Shuangpeng Bai · Aug 16, 2026 · 1 files

641aade99f06

fs: fix missed removal of super_fs_objects_eligible()

Qi Zheng · Aug 17, 2026 · 1 files

cee9c863ee68

dmaengine: xilinx_dma: Fix hardware buffer descriptor reuse order

Alex Bereza · Aug 17, 2026 · 1 files

f89416eb3db1

esp: downgrade zerocopy managed frags before mutating skb frags

Maher Azzouzi · Aug 17, 2026 · 2 files

c90b6973daa3

dmaengine: sun6i: fix non-atomic read of DMA position registers

Christian Lugnberg · Aug 17, 2026 · 1 files

9096bdc8d930

dmaengine: sun6i: fix undefined behaviour in sun6i_dma_tx_status

Christian Lugnberg · Aug 17, 2026 · 1 files

f6504be006aa

dmaengine: pxa: fix double counting of the hw descriptors

Sascha Hauer · Aug 17, 2026 · 1 files

e261bfd3c042

MIPS: config: Add EcoNet EN751221 defconfig

Caleb James DeLisle · Aug 17, 2026 · 2 files

9cdfad5dd552

RDMA/srp: Fix srp_remove_target()

Bart Van Assche · Aug 18, 2026 · 1 files

7ed1e3070c9b

dmaengine: xilinx_dma: Fix hardware buffer descriptor chain after cyclic DMA

Alex Bereza · Aug 18, 2026 · 1 files

8b0cc8707f65

mmc: spi: reset bytes_xfered before retrying CRC failures

Xu Rao · Aug 18, 2026 · 1 files

21efadc62272

Input: adp5588-keys - cache GPIO state before registering the gpiochip

Alvin Šipraga · Aug 18, 2026 · 1 files

7362a1553eb0

i2c: qcom-cci: fix device_node refcount leak in cci_probe()/cci_remove()

Liu Zhenlong · Aug 18, 2026 · 1 files

d85f0f0a7c85

IB/iser: reject a remote invalidation of an unregistered direction

Yehyeong Lee · Aug 19, 2026 · 1 files

4e93c65f8782

Bluetooth: hci_qca: Do not write to the serial port after it is closed

Ibrahim Abdelkader · Aug 19, 2026 · 1 files

fa00193eb991

wifi: mwifiex: prevent authentication frame length truncation

Linmao Li · Aug 20, 2026 · 1 files

b5526b780f8b

wifi: iwlegacy: fix broadcast stations deallocation

Stanislaw Gruszka · Aug 20, 2026 · 1 files

8a1f3cf89ddc

wifi: wlcore: release runtime PM ref on regdomain config failure

Runyu Xiao · Aug 20, 2026 · 1 files

2725ab3f5ad1

keys: fix lost wakeup when reaping a dead key type

Karl Mehltretter · Aug 21, 2026 · 1 files

a8fe3dfce8c0

IB/isert: wait for deferred control PDU completions before releasing the connection

Yehyeong Lee · Aug 21, 2026 · 2 files

b7c0f8436f07

drm/msm/adreno: Only check for PAS when a zap shader is present

Paul Hollinsky · Aug 21, 2026 · 1 files

6c368f7baaea

RDMA/bnxt_re: check create_singlethread_workqueue() in DCB setup

Linkai Gong · Aug 21, 2026 · 1 files

0d6a4268b060

keys: translate request_key_auth pid for the reading procfs instance

Maoyi Xie · Aug 21, 2026 · 2 files

9a10987a2f16

Bluetooth: hci_sync: Serialize local codec list cleanup

Chengfeng Ye · Aug 21, 2026 · 1 files

53823e25793a

mmc: sdio_uart: fix xmit_fifo leak when the port table is full

Felix Gu · Aug 21, 2026 · 1 files

073a30d75f30

drm/vc4: Use managed KMS polling to fix UAF on unbind

Karl Mehltretter · Aug 22, 2026 · 1 files

424103642d00

dmaengine: add dma_device_get() helper

Shivank Garg · Aug 22, 2026 · 1 files

44dab659064e

dmaengine: Fix device kref underflow in dma_chan_put()

Shivank Garg · Aug 22, 2026 · 1 files

e873c74132f0

dmaengine: fix use-after-free in dma_chan_put() and dma_release_channel()

Shivank Garg · Aug 22, 2026 · 1 files

dc750422170a

dmaengine: wait for RCU readers before releasing dma_device

Shivank Garg · Aug 22, 2026 · 1 files

99c24a8968eb

RDMA/rtrs: guard against null kobj name

Ryan Mehri · Aug 23, 2026 · 2 files

882de800bf58

arm64: dts: amlogic: t7: use the real UART pclk

Lucas Tanure · Aug 23, 2026 · 2 files

c793a084ab30

arm64: dts: amlogic: t7: khadas-vim4: allow the SD card to be power cycled

Lucas Tanure · Aug 23, 2026 · 1 files

9c182bc5d781

mmc: rtsx_pci_sdmmc: ignore broken write-protect on ThinkPad X260

Florian Maillard · Aug 24, 2026 · 1 files

d0795cfd6f65

Bluetooth: hci_codec: validate vendor codec count length

Laxman Acharya Padhya · Aug 24, 2026 · 1 files

3a35e787ac1a

btrfs: zoned: handle RAID profiles in btrfs_can_activate_zone()

Johannes Thumshirn · Aug 24, 2026 · 1 files

23d7e03a52ec

RDMA/bnxt_re: Avoid exposing umdbr to userspace

Sriharsha Basavapatna · Aug 24, 2026 · 2 files

93d88ac4a448

sched_ext: Pass the initial cpu.idle state in scx_cgroup_init_args

Tao Cui · Aug 25, 2026 · 3 files

ce9d5197d651

wifi: ath12k: ahb: Revert undocumented ABI and dead code

Krzysztof Kozlowski · Aug 25, 2026 · 1 files

d313499df661

netfilter: nft_nat: fully initialise new_addr in netmap setup

Theodor Arsenij Larionov Trichkine · Aug 25, 2026 · 1 files

1c25bfad93e6

wifi: mwifiex: validate action frame fixed fields

Zhao Li · Aug 25, 2026 · 1 files

9413959fa9fe

drm/amd/pm: report energy accumulator for smu 14.0.3

Kevin Wang · Aug 25, 2026 · 1 files

63e19ef3ddab

drm/amd/display: Atomize IRQ register read/modify/write ops

Leo Li · Aug 26, 2026 · 9 files

08d4d9802d58

RDMA/uverbs: Fix potential leak of resources->collection in flow_resources_alloc()

Li RongQing · Aug 26, 2026 · 1 files

3476c28c9add

RDMA/mad: Fix receive buffer leak when PKey enforcement fails

Li RongQing · Aug 26, 2026 · 1 files

9eb1a393c89a

drm: Fix drm_pending_vblank_event leak in error path for out_fence_ptr

Thadeu Lima de Souza Cascardo · Aug 26, 2026 · 1 files

3b54dbd11980

power: sequencing: Fix build issue with COMPILE_TEST

Biju Das · Aug 26, 2026 · 1 files

9fa903b24b1f

xfrm: hold net_device reference under RCU in bundle creation

Cen Zhang (Microsoft Security FORGE Labs) · Aug 26, 2026 · 1 files

af72b5946d49

wifi: mac80211: include TIM bitmap control for buffered S1G mcast traffic

Lachlan Hodges · Aug 27, 2026 · 1 files

444e4c88c9c6

netfilter: nf_tables: fix device name and prefix match in hook lookup

Fernando Fernandez Mancera · Aug 27, 2026 · 1 files

32cd87f54dd1

RDMA/siw: Clear association under lock if siw_qp_modify fails in siw_accept

Guoqing Jiang · Aug 27, 2026 · 1 files

f7eeb1af8537

i2c: at91: release DMA channels on remove and probe error

Shengzhuo Wei · Aug 27, 2026 · 3 files

e9f03b9625e2

i2c: imx: release DMA channels on probe error

Shengzhuo Wei · Aug 27, 2026 · 1 files

268aacb2e2a5

i2c: qcom-geni: release DMA channels on probe error

Shengzhuo Wei · Aug 27, 2026 · 1 files

ae36a5b609ae

RDMA/rxe: validate access flags before swapping the MR's PD

Norbert Szetei · Aug 27, 2026 · 1 files

e384abeb559d

mm/huge_memory: bypass THP tuneables for huge pfnmap mappings

Lorenzo Stoakes (ARM) · Aug 27, 2026 · 1 files

5f8cb07d7a85

arm64: dts: socfpga: change access permission from 755 to 644

Dinh Nguyen · Aug 28, 2026 · 2 files

00baeade709f

RDMA/erdma: Use IRQ-safe XArray helpers for QP and CQ tables

Cheng Xu · Aug 28, 2026 · 2 files

a5b5cc909931

drm/msm/dpu: clear pending peripheral flush state

Saim Shujah · Aug 28, 2026 · 1 files

e1d56f046507

mailmap: map Coiby Xu's address

Coiby Xu · Aug 28, 2026 · 1 files

a3d722190cde

wifi: mwifiex: fix IRQ leak using wrong index in MSI-X error path

Peng Hao · Aug 28, 2026 · 1 files

397432cab17b

mm/mremap: account mm->locked_vm correctly for MREMAP_DONTUNMAP

Lorenzo Stoakes (ARM) · Aug 28, 2026 · 1 files

aefbda23eeba

Input: atkbd - skip deactivate for Xiaomi Redmi Book Pro 16 2026

Alexei Turtanov · Aug 28, 2026 · 1 files

bbc448c541ed

mips: select CONFIG_WEAK_REORDERING_BEYOND_LLSC from CONFIG_EYEQ

Théo Lebrun · Aug 28, 2026 · 1 files

12e9ac7bc5b2

mm, swap: fix SWAP_USAGE_OFFLIST_BIT collision with real usage count

Nhat Pham · Aug 28, 2026 · 1 files

6e673d0879ef

memcg: avoid charging the root memcg from obj_cgroup_charge_pages()

Shakeel Butt · Aug 29, 2026 · 1 files

3cf5cdecd99c

xfrm: save input state data before secpath resets

Zhiling Zou · Aug 29, 2026 · 1 files

ae7be5c58a81

arm64: dts: amlogic: t7: fix the pin groups of two PWM outputs

Lucas Tanure · Aug 29, 2026 · 1 files

1e5a53bd16ac

arm64: dts: amlogic: t7: khadas-vim4: add the PWM-driven supplies

Lucas Tanure · Aug 29, 2026 · 1 files

406292fd75f9

arm64: dts: amlogic: t7: fix the pin groups of the vsync PWM

Lucas Tanure · Aug 29, 2026 · 1 files

e1d469a8d6c6

mailmap: update entry for Christopher Obbard

Christopher Obbard · Aug 29, 2026 · 1 files

96f01b53c2d0

net: xfrm: reject unrepresentable espintcp transport headers

Wyatt Feng · Aug 29, 2026 · 1 files

848d2ce2fce1

mm: filemap: retain mapped dropbehind folios

Wenjie Qi · Aug 29, 2026 · 1 files

8c0c602202b9

selinux: preserve user SID across nested backing files

Karl Mehltretter · Aug 29, 2026 · 2 files

78fc54b934bf

selinux: recheck intermediate backing files on mprotect()

Karl Mehltretter · Aug 29, 2026 · 2 files

2ae16aaa78b5

RDMA/rtrs-clt: Fix CQ pool leak when connect is interrupted

Quanye Yang · Aug 30, 2026 · 2 files

cfc1e9a543e3

ARM: socfpga: select the PL310 erratum 753970 workaround

Pengpeng Hou · Aug 30, 2026 · 1 files

ce858fa6b8a2

wifi: p54: validate curve data length in the calibration curve converters

Shengzhuo Wei · Aug 30, 2026 · 1 files

d8efd84f4937

wifi: p54: require a full exp_if record in PDR_INTERFACE_LIST

Shengzhuo Wei · Aug 30, 2026 · 1 files

0594e3423f4b

btrfs: take commit root semaphore when iterating in mark_block_group_to_copy()

Hongling Zeng · Aug 31, 2026 · 1 files

6d49beec658f

soundwire: dmi-quirks: Disable ghost Realtek on Asus GX651AX

Ian Luites · Aug 31, 2026 · 1 files

6e33dc90df10

MAINTAINERS: update memblock tree URLs

Mike Rapoport (Microsoft) · Aug 31, 2026 · 1 files

662ade4de9ff

RDMA/ucma: Serialize join and leave on copy_to_user failure

Quanye Yang · Aug 31, 2026 · 1 files

55fc280e951a

Input: tsc2007 - read "ti,poll-period" as u32

Rob Herring (Arm) · Aug 31, 2026 · 1 files

d034e836eefd

smb: client: fix use-after-free of iface in cifs_try_adding_channels()

Joseph Qi · Sep 1, 2026 · 1 files

aba7b41faeec

soundwire: cadence_master: wait and cancel cdns->work before clock stop

Bard Liao · Sep 1, 2026 · 1 files

85f080fb87ed

Input: cyttsp5 - clamp the HID report size before memcpy

Linkai Gong · Sep 1, 2026 · 1 files

29871903f3a3

sched_ext: Don't deliver duplicate ops.cgroup_set_idle() for same value

Tao Cui · Sep 1, 2026 · 1 files

8b852965b8ea

Input: evdev - zero absinfo before partial copy in EVIOCSABS

Iván Ezequiel Rodriguez · Sep 1, 2026 · 1 files

f84819ef8d66

Input: zero ff_effect before compat copy in input_ff_effect_from_user

Iván Ezequiel Rodriguez · Sep 1, 2026 · 1 files

3bb3e80faf21

firmware: arm_ffa: Tear down driver during shutdown

Sudeep Holla · Sep 1, 2026 · 1 files

3fb905f07ea4

RDMA/irdma: Enforce local fence for IB_WR_REG_MR

Jacob Moroni · Sep 1, 2026 · 1 files

b344ca94e8cc

dma-buf: Fix silent overflow for phys vec to sgt

David Hu · Sep 1, 2026 · 1 files

06dd5e1ae8ce

dma-buf: Split sgl by largest page-aligned chunk

David Hu · Sep 1, 2026 · 1 files

e14a34548064

mm/mlock: use the IRQ-safe accessor for NR_MLOCK in __munlock_folio()

Shakeel Butt · Sep 1, 2026 · 1 files

126f16e0a1b3

MIPS: Octeon: apply USB FDT fixups also when USB is modular

Orgad Shaneh · Sep 1, 2026 · 1 files

0791a234b35d

remove old lib/alloc_tag.c

Andrew Morton · Sep 1, 2026 · 1 files

53cf0f26eece

crypto: caam - map job ring registers without claiming region

Rosen Penev · Sep 1, 2026 · 1 files

114f00d738f1

KEYS: trusted: Fix tpm2_load_cmd() boundary check

Jarkko Sakkinen · Sep 1, 2026 · 1 files

01c8d1f385f7

drm/msm: RCU-free the scheduler-containing ring and VM objects

Jonghyuk Kim(MalHyuk) · Sep 2, 2026 · 4 files

7891fbb9512f

mm/folio: EXPORT_SYMBOL_FOR_KVM(lru_cache_drain_for_folio)

Ackerley Tng · Sep 2, 2026 · 1 files

932cfb25e7ce

mm/shrinker: fix bogus set_shrinker_bit() with cgroup.memory=nokmem

Jiayuan Chen · Sep 2, 2026 · 1 files

e2d5b01f878d

mm: memblock: show all region flags in debugfs

Meijing Zhao · Sep 2, 2026 · 1 files

59ced288fcba

drm/gud: fix out-of-bounds write in gud_plane_atomic_check()

Sajal Gupta · Sep 2, 2026 · 1 files

9a141d3dc869

IB/IPoIB: Avoid restoring OPER_UP after multicast flush

Carolina Jubran · Sep 2, 2026 · 3 files

d5ea0d226e8f

mmc: sh_mmcif: initialize IRQ-thread mutex before requesting interrupt

Runyu Xiao · Sep 2, 2026 · 1 files

309731e95917

Input: hp_sdc - shut down kicker timer on module exit

Runyu Xiao · Sep 2, 2026 · 1 files

6cc27d821963

mm/vma: correctly unaccount on mmap_prepare() failure

Lorenzo Stoakes (ARM) · Sep 2, 2026 · 1 files

cbdd39ce4253

netfilter: nf_nat: unregister and release hooks on error

Pablo Neira Ayuso · Sep 2, 2026 · 1 files

d7fd1f98607f

ksmbd: follow SMB2 session expiration semantics

Namjae Jeon · Sep 3, 2026 · 9 files

0a85182723b6

sched_ext: Fix NULL sched deref in kfunc sub-sched error paths

Wanwu Li · Sep 3, 2026 · 2 files

1274045b0eda

scsi: ibmvfc: Add Kconfig dependency to fix link failure when NVME_FC=m

Venkat Rao Bagalkote · Sep 3, 2026 · 1 files

5535d5e61a77

drm/loongson: Create blend mode property for cursor plane

Huacai Chen · Sep 3, 2026 · 1 files

971fa7ea8621

Input: xpad - add support for Victrix Pro BFG Controller

Erich Sartison · Sep 3, 2026 · 1 files

8861db305103

selinux: always fill AVC decision in avc_has_perm_noaudit()

Christian Göttsche · Sep 3, 2026 · 1 files

2028280686f4

drm/msm/dsi: round the byte clock rate after reparenting to the PHY PLL

Dmitry Baryshkov · Sep 3, 2026 · 1 files

e6031f02269c

wifi: mac80211: avoid out-of-bounds read for empty PREQ elements

Ivan Pustogarov · Sep 3, 2026 · 1 files

0cb1fd924126

scsi: fnic: Fix missed link-up when critical IRQ targets offline CPU

Arun Easi · Sep 3, 2026 · 3 files

2ac2fe765ef4

drm/amd/display: fix MALL hysteresis timer underflow at high refresh rates

Francis Marlou Pacaro · Sep 4, 2026 · 1 files

631946431ddc

ntfs: account for MFT records added during allocation

Namjae Jeon · Sep 4, 2026 · 3 files

3ed11c671ff7

dma-buf/dma-fence: fix checking signaling bit for timeline and driver name v3

Christian König · Sep 4, 2026 · 2 files

08b54e16d547

mmc: core: Fix OF node reference leak on card add failure

Zhu Ling · Sep 4, 2026 · 1 files

44caf1844a25

firmware: arm_scmi: Fix typo "upto" in comment

Hemanth Selam · Sep 4, 2026 · 1 files

33fb59da49c4

RDMA/core: fix refcount bug in iwpm_get_nlmsg_request()

Jeffin Philip · Sep 4, 2026 · 1 files

c1ba7f7f1846

wifi: wilc1000: fix RX buffer OOB-write in wilc_wlan_handle_isr_ext()

Tianchu Chen · Sep 4, 2026 · 1 files

82e47533221d

ata: libahci: clear PxCLBU and PxFBU for AHCI_HFLAG_32BIT_ONLY

Niklas Cassel · Sep 4, 2026 · 1 files

3d676e458fe0

scsi: core: Validate MODE SENSE lengths in scsi_cdl_enable()

Alberto Carboneri · Sep 4, 2026 · 1 files

e6c5ed7a98d7

wifi: rsi: fix heap OOB write on key removal

Tianchu Chen · Sep 4, 2026 · 1 files

a7783e585360

wifi: cfg80211: don't get the radio mask for netdev-less wdevs

Johannes Berg · Sep 4, 2026 · 1 files

48b2c5c628b0

wifi: cfg80211: check IP header size in cfg80211_classify8021d()

Johannes Berg · Sep 4, 2026 · 1 files

dab68a74e90b

wifi: cfg80211: don't free driver-owned scan requests

Johannes Berg · Sep 4, 2026 · 4 files

068843ed0902

wifi: cfg80211: only group hidden BSSes with beacon entries

Johannes Berg · Sep 4, 2026 · 1 files

b377e1000d96

wifi: cfg80211: don't filter by BSS type when removing stale entries

Johannes Berg · Sep 4, 2026 · 1 files

708f9d43d6a2

wifi: cfg80211: ibss: ref BSS entry for joined event

Johannes Berg · Sep 4, 2026 · 3 files

17a5f8571d1d

wifi: cfg80211: fix NAN regulatory enforcement

Johannes Berg · Sep 4, 2026 · 1 files

f4e72e375807

wifi: cfg80211: reduce RTNL holding in regulatory enforcement

Johannes Berg · Sep 4, 2026 · 4 files

f5dd0626d2b0

wifi: mac80211: don't apply peer rates to off-channel frames

Johannes Berg · Sep 4, 2026 · 1 files

23c68b4aaf5e

wifi: mac80211: don't drop scan probe requests for lack of peer rates

Johannes Berg · Sep 4, 2026 · 1 files

733f0fde9539

wifi: mac80211: don't start a ROC while scanning

Johannes Berg · Sep 4, 2026 · 1 files

a7491b7efbd9

wifi: mac80211: don't warn when an IBSS has no channel to scan

Johannes Berg · Sep 4, 2026 · 1 files

362bd5bce29e

wifi: mac80211: don't offload TC setup on AP_VLAN interfaces

Johannes Berg · Sep 4, 2026 · 1 files

bf29d085e0eb

wifi: mac80211: suppress chanctx warning for debugfs reset

Johannes Berg · Sep 4, 2026 · 4 files

ac7472a24bd4

wifi: mac80211: abort chanswitch when leaving a mesh

Johannes Berg · Sep 4, 2026 · 1 files

3f28551d0241

wifi: mac80211: reset state when starting AP fails

Johannes Berg · Sep 4, 2026 · 1 files

78183e833195

wifi: mac80211: reset the LED state when ifup fails

Johannes Berg · Sep 4, 2026 · 1 files

6f0a100df853

wifi: mac80211: only operate on TDLS peers in the TDLS code

Johannes Berg · Sep 4, 2026 · 1 files

87840d4a3a21

wifi: mac80211_hwsim: don't hand frames to mac80211 while stopping

Johannes Berg · Sep 4, 2026 · 1 files

eeee52cfd1d6

wifi: cfg80211: restore netns_immutable on failures

Johannes Berg · Sep 4, 2026 · 1 files

a41bd1938a9b

wifi: cfg80211: undo netns switch if renaming the wiphy fails

Johannes Berg · Sep 4, 2026 · 1 files

eee2efd82867

wifi: mac80211: unlist vifs when their netdev is unregistered

Johannes Berg · Sep 4, 2026 · 1 files

4635b1a1c1d6

wifi: cfg80211: get the wiphy out of a dying network namespace

Johannes Berg · Sep 4, 2026 · 1 files

7e61560628d1

objtool: Validate disassembler headers in libopcodes probe

Ulises Mendez Martinez · Sep 4, 2026 · 1 files

88aed0422f39

perf: Fix null pointer access in is_include_guest_event()

Vinay Belgaumkar · Sep 4, 2026 · 1 files

2b04d6556964

wifi: mac80211: refuse to make a monitor active when it has no queue

Devin Wittmayer · Sep 4, 2026 · 1 files

504981db4f69

dma-coherent: report a failed reserved memory assignment

Donggeun Yoo · Sep 5, 2026 · 1 files

b7d7914a9ae3

swiotlb: use the adjusted address for the highmem page lookup

Donggeun Yoo · Sep 5, 2026 · 1 files

45b003789970

Input: trackpoint - fix the inertia attribute name in the ABI document

Karl Mehltretter · Sep 5, 2026 · 1 files

a52ae68a937e

Input: eeti_ts - publish the OF module alias

hpp.iscas · Sep 5, 2026 · 1 files

3265ef0b6701

sched_ext: Rename sch to root_sch in dispatch_one()

Tejun Heo · Sep 5, 2026 · 1 files

90f19b2816f5

sched_ext: Use @prev's scheduler for the keep decisions in dispatch_one()

Tejun Heo · Sep 5, 2026 · 1 files

a0d356696f87

sched_ext: scx_qmap: Do not add IMMED to rescue inserts

Tejun Heo · Sep 5, 2026 · 1 files

63b4ff622244

sched_ext: scx_qmap: Place only on cids whose caps are in effect

Tejun Heo · Sep 5, 2026 · 2 files

89ff16f07139

sched_ext: scx_qmap: Fix pending partition work handoff

Tejun Heo · Sep 5, 2026 · 1 files

82431877d837

sysctl: Check range in proc_dointvec_ms_jiffies_minmax

Kuniyuki Iwashima · Sep 5, 2026 · 1 files

318012c56576

sysctl: Check range in do_proc_ulong_conv_ms_jiffies

Kuniyuki Iwashima · Sep 5, 2026 · 1 files

b1d732e62a5b

ntfs: repack $MFT/$ATTRIBUTE LIST

Namjae Jeon · Sep 6, 2026 · 3 files

91709ba5d6d7

ntfs: protect runlist updates with the runlist lock

Namjae Jeon · Sep 6, 2026 · 8 files

cba76c0f47af

Input: xpad - add support for Azeron devices

Roberts Kursitis · Sep 6, 2026 · 1 files

6610c6fe4b89

Bluetooth: hci_core: Fix queuing tx_work after workqueue is drained

ThangNN99 · Sep 6, 2026 · 1 files

d236517c264e

Bluetooth: coredump: Quiesce dump work on unregister

Weiming Shi · Sep 6, 2026 · 3 files

8061ee61b942

drm/msm/adreno: Fix the skip_gpu parameter description

Karl Mehltretter · Sep 6, 2026 · 1 files

adf596733131

drm/msm: Fix the separate_gpu_kms parameter description

Karl Mehltretter · Sep 6, 2026 · 1 files

264bf9655c3d

scsi: pm80xx: Fix the use_msix, use_tasklet and read_wwn parameter descriptions

Karl Mehltretter · Sep 6, 2026 · 1 files

779f202a92ef

scsi: qla2xxx: Fix the ql2xfc2target parameter description

Karl Mehltretter · Sep 6, 2026 · 1 files

e8241766794c

Bluetooth: eir: validate service data length before reading UUID

Aamir Ahmed · Sep 6, 2026 · 1 files

143755bdabaa

dma-buf: Make DMABUF_DEBUG default to y on DEBUG_KERNEL kernels

Karl Mehltretter · Sep 7, 2026 · 1 files

1923eeffa63e

ntfs: propagate folio errors

Namjae Jeon · Sep 7, 2026 · 1 files

8c5dc7587fdd

ntfs: ignore interrupted inode reads as corruption

Namjae Jeon · Sep 7, 2026 · 2 files

fc440366c470

ntfs: discard inodes that fail initialization

Namjae Jeon · Sep 7, 2026 · 1 files

0c32a42fd96a

ntfs: unhash failed inode reads

Namjae Jeon · Sep 7, 2026 · 1 files

ad34235808b6

i2c: atr: fix dangling adapter pointer on add failure

Linkai Gong · Sep 7, 2026 · 1 files

ad7265b29995

.get_maintainer.ignore: add myself

Johannes Berg · Sep 7, 2026 · 1 files

fdb9ebc7fb77

arm64: mte: Fix PTRACE_{PEEK,POKE}MTETAGS error documentation

Catalin Marinas · Sep 7, 2026 · 2 files

92c6a8d6470f

dma-mapping: don't trace the DMA address when the allocation fails

Donggeun Yoo · Sep 7, 2026 · 1 files

25e424eb4ae1

Input: i8042 - add quirk for Acer Aspire Go 15 AG15-42P

Chris Sommers · Sep 7, 2026 · 1 files

e75a9fa1d44b

netfilter: flowtable: hold reference on ct until flow is released

Pablo Neira Ayuso · Sep 7, 2026 · 1 files

229e8188307b

ntfs: fix $MFTMirr write offset when it spans multiple folios

Zhu Tianhao · Sep 7, 2026 · 1 files

5155002b03b2

drm/amdgpu: fix rmmio iounmap skipped on device removal

Chengjun Yao · Sep 8, 2026 · 1 files

6d8c197c9992

ntfs: use dynamic MFT tail reservation

Namjae Jeon · Sep 8, 2026 · 5 files

a5f7a5bb3b7f

x86/kprobes: Fix crash when probing CS CALL instructions

Jinke Han · Sep 8, 2026 · 3 files

2b50adefed98

Bluetooth: btusb: fix NXP IW610 composite device handling

Nicolas Thibert · Sep 8, 2026 · 1 files

9ff797e516db

RDMA/siw: Bound fragmented header copies by the remaining length

Jérémy Jean · Sep 8, 2026 · 1 files

4b837ebd0ea2

Bluetooth: btintel_pcie: validate TX skb length in send_sync

Chandrashekar Devegowda · Sep 8, 2026 · 1 files

ee415ce8cba1

drm/i915/display: check configuration index before shifting

Luca Coelho · Sep 8, 2026 · 1 files

55a8e1451869

x86/mm: Don't force unencrypted DMA for IOMMU-backed devices

Aneesh Kumar K.V (Arm) · Sep 8, 2026 · 1 files

e14bf37bb2b3

wifi: mac80211: don't allow injecting frames wider than the chanctx

Johannes Berg · Sep 8, 2026 · 3 files

4504f3960dc4

wifi: mac80211: reset the AP_VLAN tailroom counter on ifdown

Johannes Berg · Sep 8, 2026 · 1 files

038e1d126304

wifi: mac80211: require a peer station for TDLS setup confirm

Johannes Berg · Sep 8, 2026 · 1 files

370872d30349

wifi: mac80211: don't allow link changes when iface is down

Johannes Berg · Sep 8, 2026 · 1 files

b481e64e4498

wifi: mac80211: don't RCU-dereference the mesh CSA settings we just set

Johannes Berg · Sep 8, 2026 · 1 files

0b1de9feeb86

wifi: mac80211: don't access the TSF of a down interface

Johannes Berg · Sep 8, 2026 · 1 files

cd54bf333f56

wifi: mac80211: add HE 6 GHz capability in the scan elems len

Johannes Berg · Sep 8, 2026 · 1 files

860134b3af77

wifi: mac80211: mesh: reset the CSA state when leaving

Johannes Berg · Sep 8, 2026 · 1 files

ae97fff6495a

wifi: mac80211: mesh: release the channel if start fails

Johannes Berg · Sep 8, 2026 · 1 files

50d3d79dc074

wifi: mac80211: set up the TX info early to fix failure paths

Johannes Berg · Sep 8, 2026 · 1 files

885bff055a0f

arm64: percpu: Fix this_cpu_write() casting

Mark Rutland · Sep 8, 2026 · 1 files

44274c657256

arm64: percpu: Fix this_cpu_and() mask generation

Mark Rutland · Sep 8, 2026 · 1 files

8cf2093f5372

arm64: percpu: Fix LSE operations on {8,16}-bit types

Mark Rutland · Sep 8, 2026 · 1 files

247a82da6f56

drm/xe/mmio_gem: forbid VMA split

Ilia Levi · Sep 8, 2026 · 1 files

819f189265a5

drm/xe/mmio_gem: use write-back mapping for dummy page

Ilia Levi · Sep 8, 2026 · 1 files

0c50663403b7

drm/xe/mmio_gem: simplify fault handler loop

Ilia Levi · Sep 8, 2026 · 1 files

37fcbd7b2f89

drm/xe/mmio_gem: Revoke drm_vma_node on xe_mmio_gem destroy

Shuicheng Lin · Sep 8, 2026 · 2 files

de40d31275cd

drm/xe/mmio_gem: cache the dummy page per object

Ilia Levi · Sep 8, 2026 · 1 files

d0c095287819

drm/xe/mmio_gem: fix destroy flow

Ilia Levi · Sep 8, 2026 · 1 files

4914c4998961

Bluetooth: put the peer's on-air address on air when we cannot resolve

Radek Podgorny · Sep 8, 2026 · 1 files

f4fafaf02174

ksmbd: fix partial normalized name responses

Namjae Jeon · Sep 9, 2026 · 2 files

9fa26285ae70

ksmbd: keep compound responses on query info errors

Namjae Jeon · Sep 9, 2026 · 1 files

06f42accaf3c

wifi: libipw: reject TKIP frames without a full MIC

Daehyeon Ko · Sep 9, 2026 · 1 files

d56fe35c1bce

ASoC: rt712-sdca: reconfigure PLL2 to fix calibration time-out

Jack Yu · Sep 9, 2026 · 3 files

ed22ad5fdbdb

Input: soc_button_array - fix MS Surface Pro 11 probe failure

Hans de Goede · Sep 9, 2026 · 1 files

fb5022278b6e

Input: soc_button_array - check btns_desc->package.count

Hans de Goede · Sep 9, 2026 · 1 files

a26204be587c

Revert "drm/i915/display: Clear SEL_FETCH_PLANE_CTL on plane disable"

Nemesa Garg · Sep 9, 2026 · 2 files

5f90f85eae4e

power: sequencing: don't call .post_enable() if pwrseq_unit_enable() failed

Bartosz Golaszewski · Sep 9, 2026 · 1 files

115b303e8e09

power: sequencing: fix NULL-pointer dereference in pwrseq_unit_new()

Bartosz Golaszewski · Sep 9, 2026 · 1 files

242da4318d97

power: sequencing: fix NULL-pointer dereference in pwrseq_device_register()

Bartosz Golaszewski · Sep 9, 2026 · 1 files

e5c8d7acd31b

wifi: virt_wifi: don't transfer operstate before register

Zihan Xi · Sep 9, 2026 · 1 files

ed9ad3d41830

drm/msm/a6xx: Add CX AO Counter registers used for a750 GPUs

Neil Armstrong · Sep 9, 2026 · 1 files

a2b65837980a

drm/msm/a6xx: Use CX AO Counter register for timestamp on a750 GPUs

Neil Armstrong · Sep 9, 2026 · 1 files

930a7312c946

spi: spi-qpic-snand: avoid writing QPIC_EBI2_ECC_BUF_CFG register

Gabor Juhos · Sep 9, 2026 · 1 files

3fc9f0558c95

drm/ci: Update xfails for kms_cursor_legacy regression

Rob Clark · Sep 9, 2026 · 1 files

3d1ba5cbfb62

kselftest/arm64: Fix size of thread_data values for pthread_join()

Thomas Huth · Sep 9, 2026 · 1 files

3c90e42a0142

drm/xe/shrinker: Return the freed page count through a parameter

Shuicheng Lin · Sep 9, 2026 · 1 files

985862be16c7

drm/xe/shrinker: Take a runtime PM ref before shrinking non-system memory

Shuicheng Lin · Sep 9, 2026 · 1 files

5f270f091256

smb: client: fix rlist race and missing initialization

Paulo Alcantara · Sep 9, 2026 · 1 files

3db7d7d58341

drm/ttm: fix swapped-out resources never leaving their bulk_move range

Vadim Nikitushkin · Sep 9, 2026 · 1 files

764dcebb0337

neighbour: Add missing RCU annotation for neightbl_dump_info().

Kuniyuki Iwashima · Sep 9, 2026 · 1 files

6d79b223ec44

neighbour: Enforce min/max to NDTPA_INTERVAL_PROBE_TIME_MS.

Kuniyuki Iwashima · Sep 9, 2026 · 3 files

7b430fcfc972

neighbour: Don't render blackhole_netdev via RTM_GETNEIGHTBL.

Kuniyuki Iwashima · Sep 9, 2026 · 1 files

979aabdad8dd

neighbour: Skip default parms when resumed in neightbl_dump_info().

Kuniyuki Iwashima · Sep 9, 2026 · 1 files

effce1cb87ee

drm/gud: Ignore damage clips in full update mode

Sophie D · Sep 10, 2026 · 1 files

d9be5e755307

wifi: wcn36xx: Fix potential use-after-free in TX ack timer teardown

Fan Wu · Sep 10, 2026 · 1 files

075bc7b1d3dd

dmaengine: mmp_pdma: fix wrong sg length in mmp_pdma_prep_slave_sg()

Baineng Shou · Sep 10, 2026 · 1 files

ebc5660132dd

smb/client: send lease break ACKs thru correct session for multiuser mounts

April Cardenas · Sep 10, 2026 · 1 files

6fb0a9d9071f

rust: net: phy: fix off-by-one bit positions in device status accessors

Chunfeng Song · Sep 10, 2026 · 1 files

7c8810c2e69c

net: fddi: skfp: fix NULL deref when setting the MAC address while down

Hohyun Sim · Sep 10, 2026 · 1 files

4ae3128c2303

wifi: cfg80211: do not support direct add of station to AP_VLAN interfaces

Slawomir Stepien · Sep 10, 2026 · 1 files

e3d1acb02767

wifi: cfg80211: move link_id validation earlier in nl80211_new_station()

Slawomir Stepien · Sep 10, 2026 · 1 files

a842cfc1d6d8

wifi: cfg80211: check if AP has been started or joined a mesh before adding new station

Slawomir Stepien · Sep 10, 2026 · 1 files

6e05e46fa821

net/sched: act_api: release tail references on DELACTION failure

Xuanqiang Luo · Sep 10, 2026 · 1 files

14c5eb685cde

selftests: tc-testing: test action batch deletion failure cleanup

Xuanqiang Luo · Sep 10, 2026 · 1 files

5a83606d9f31

drm/verisilicon: set blend mode for the cursor plane

Icenowy Zheng · Sep 10, 2026 · 1 files

e5d43d7e924d

drm/verisilicon: add primary modifier for format tables

Icenowy Zheng · Sep 10, 2026 · 3 files

6c62dfd2820f

drm/verisilicon: remove ARGB formats from primary plane

Icenowy Zheng · Sep 10, 2026 · 1 files

afdf35cfae0d

sysctl: Fix type truncation in sysctl_msec_to_jiffies

Joel Granados · Sep 10, 2026 · 1 files

4d855d747521

ASoC: Rename snd_soc_dai_link_ch_map.ch_mask to cpu_ch_mask

Richard Fitzgerald · Sep 10, 2026 · 3 files

88b14c0d0bab

ASoC: Add codec_ch_mask to snd_soc_dai_link_ch_map

Richard Fitzgerald · Sep 10, 2026 · 1 files

6b382bdfe26a

ASoC: soc-pcm: Apply snd_soc_dai_link_ch_map.codec_ch_mask to codec params

Richard Fitzgerald · Sep 10, 2026 · 1 files

290845e151cd

ASoC: sdw_utils: Set snd_soc_dai_link_ch_map.codec_ch_mask for capture

Richard Fitzgerald · Sep 10, 2026 · 1 files

b5b00a57868b

ASoC: sdw_utils: cs_amp: Delete bogus and incorrect capture channel fixup

Richard Fitzgerald · Sep 10, 2026 · 3 files

49daa3d668b6

perf/arm-cmn: Fix wp_dev_sel2 setting for multi-DTM configurations

Shouping Wang · Sep 10, 2026 · 1 files

88c4aff39452

ASoC: wm_adsp: Firmware search progress log should not look like an error

Richard Fitzgerald · Sep 10, 2026 · 1 files

9e92ad4630f5

net: dsa: mxl862xx: disable the stats poll on teardown

Daniel Golle · Sep 10, 2026 · 1 files

e08aca85c02f

RDMA/efa: Keep admin queues alive while IRQ is registered

Leon Romanovsky · Sep 10, 2026 · 2 files

e22a3627b715

RDMA/efa: Keep EQ resources alive while IRQ is registered

Leon Romanovsky · Sep 10, 2026 · 3 files

e4a6f57d22e0

arm64: hibernate: clone only the linear map that exists at runtime

Breno Leitao · Sep 10, 2026 · 1 files

2998147b59c9

ipv4: icmp: reject RTN_UNREACHABLE input routes in icmp_route_lookup

Dong Chenchen · Sep 10, 2026 · 1 files

fcfe64715b42

drm/ttm: apply the swapout bulk_move fix to the intended condition

Vadim Nikitushkin · Sep 10, 2026 · 1 files

221253723dc5

ALSA: bcd2000: Fix race between rawmidi and disconnect

Takashi Iwai · Sep 10, 2026 · 1 files

29218a4d11a3

ASoC: amd: acp: bounds-check SoundWire link ID in machine drivers

Vijendar Mukunda · Sep 10, 2026 · 2 files

0b7d55d3a912

ASoC: amd: acp: refactor codec config count in SOF SoundWire machine driver

Vijendar Mukunda · Sep 10, 2026 · 1 files

27098aaf28b9

ASoC: amd: acp: fix ffs() operator precedence for SoundWire link ID

Vijendar Mukunda · Sep 10, 2026 · 2 files

d57616f8be56

ASoC: amd: acp: fix card name length warning in SOF SoundWire machine driver

Vijendar Mukunda · Sep 10, 2026 · 1 files

a1167d942047

btrfs: tree-checker: print dev extent offset in error message

Filipe Manana · Sep 10, 2026 · 1 files

26eb3d92c7a4

Input: synaptics - disable InterTouch on ThinkPad T440p (board id 2722)

Raphaël Larocque · Sep 10, 2026 · 1 files

f59d86d25e41

btrfs: tree-checker: fix error message regarding free space extent items

Filipe Manana · Sep 10, 2026 · 1 files

e922bad8b2d5

spi: spi-zynqmp-gqspi: stop the controller on shutdown

Itai Handler · Sep 10, 2026 · 1 files

ca18ee413a7c

Bluetooth: ISO: Fix parent socket leak in iso_conn_ready()

Luiz Augusto von Dentz · Sep 10, 2026 · 1 files

296e7f3c5071

Bluetooth: ISO: set BT_LISTEN before requesting a BIG sync

Luiz Augusto von Dentz · Sep 10, 2026 · 1 files

23c240d9509e

smb: client: validate absolute native symlink targets before NT fixups

Jérémy Jean · Sep 10, 2026 · 1 files

451b1c19dc7c

hwmon: (k10temp) Fix model id range of Zen5 Turin

Rong Zhang · Sep 10, 2026 · 1 files

6a038ef2b579

drop_monitor: synchronize tracepoint unregistration on error path

Eric Dumazet · Sep 10, 2026 · 1 files

c391a40f7188

drop_monitor: use timer_shutdown_sync() to prevent timer rearming during teardown

Eric Dumazet · Sep 10, 2026 · 1 files

c19b7d35086b

drop_monitor: use raw_cpu_ptr() in tracepoint probes

Eric Dumazet · Sep 10, 2026 · 1 files

439f392084f8

drop_monitor: fix out-of-bounds write in reset_per_cpu_data()

Eric Dumazet · Sep 10, 2026 · 1 files

5d063822ac51

net: wwan: mhi_wwan_mbim: guard against a cyclic NDP chain

Guanglei Zhu · Sep 11, 2026 · 1 files

31550d585589

net: wwan: mhi_wwan_mbim: check skb_copy_bits() return value

Guanglei Zhu · Sep 11, 2026 · 1 files

c7ead9704249

net: wwan: t7xx: validate the netif index in t7xx_ccmni_recv_skb()

Guanglei Zhu · Sep 11, 2026 · 1 files

6c05d00af307

ALSA: virtio: reset device before deleting virtqueues

Yuho Choi · Sep 11, 2026 · 1 files

26d5ff797685

hwmon: (pwm-fan) Stop RPM timer before freeing tach data

Yibo Tan · Sep 11, 2026 · 1 files

8dc2615d5702

arm64: dts: renesas: r8a779f0: Set UFS lane count

Koichiro Den · Sep 11, 2026 · 1 files

f97d8c7bab78

rds: ib: use rds_conn_drop() on protocol version mismatch

Aohan Mei · Sep 11, 2026 · 1 files

de7f29a1fe1d

phy: mediatek: phy-mtk-hdmi-mt8195: Fix PLL calc divisor overflow

AngeloGioacchino Del Regno · Sep 11, 2026 · 1 files

486a70ef8482

phy: mediatek: phy-mtk-hdmi-mt8195: Fix TMDS clk bit ratio setting

AngeloGioacchino Del Regno · Sep 11, 2026 · 2 files

576725ded009

ASoC: Intel: sof_es8336: Add a quirk for Huawei Matebook B3-420

Ai Chao · Sep 11, 2026 · 1 files

90e4b849dfa6

net: stmmac: propagate FPE preemption-class mapping errors

Lorenzo Bianconi · Sep 11, 2026 · 2 files

02fffd1939f6

net: stmmac: preserve real_num_tx_queues on mqprio setup failure

Lorenzo Bianconi · Sep 11, 2026 · 1 files

b61b6f95d672

futex: Also allocate private hash on vfork()

Peter Zijlstra · Sep 11, 2026 · 1 files

d2710c8d938a

signal: Prevent exec() race

Thomas Gleixner · Sep 11, 2026 · 2 files

acb03d388181

exec: Cleanup POSIX timers right after de_thread()

Hyunwoo Kim · Sep 11, 2026 · 1 files

15989abd74f1

net: stmmac: fix TSO header length truncation

Lorenzo Bianconi · Sep 11, 2026 · 1 files

c60ae98c5aa6

9p: Fix v9fs_issue_write() to update i_size and remote_i_size

David Howells · Sep 11, 2026 · 1 files

18a6fe05fb6e

net: bridge: mst: move switchdev call outside rcu

Nikolay Aleksandrov · Sep 11, 2026 · 1 files

2ea5a87a5a7a

Bluetooth: btintel_pcie: fix off-by-one bounds check in RX submit

Sai Teja Aluvala · Sep 11, 2026 · 1 files

f0e9f963a3d2

drm/xe/i2c: Disable IRQ on unbind

Raag Jadav · Sep 11, 2026 · 1 files

06bd6794b5fd

hwmon: (pmbus/core) increase number of phases and add new mask

Nuno Sá · Sep 11, 2026 · 1 files

ceac0de741bf

netlink: do not free nlk->groups while lockless readers can use it

Eric Dumazet · Sep 11, 2026 · 2 files

7bae83ffb133

hwmon: (cgbc-hwmon) Fix current sensors ID lookup

Thomas Richard (congatec GmbH) · Sep 11, 2026 · 1 files

3550d1dbbcb9

hwmon: (cgbc-hwmon) Add missing sensors

Thomas Richard (congatec GmbH) · Sep 11, 2026 · 2 files

8697c431e297

KEYS: encrypted: fix integer overflow of datablob_len

Cen Zhang · Sep 11, 2026 · 1 files

636139603b99

drm/amdgpu: hold a runtime PM reference for P2P dma-buf attachments

Mike Lothian · Sep 11, 2026 · 1 files

c65eae6f61d1

smb: client: cancel reconnect work in clean_demultiplex_info()

Paulo Alcantara · Sep 12, 2026 · 1 files

4a4263dfeaba

af_unix: Unify scc_index when finalising SCC in __unix_walk_scc().

Kuniyuki Iwashima · Sep 12, 2026 · 1 files

b645ccd41054

selftest: af_unix: Add test case with mixed lowpoint in scm_rights.c.

Kuniyuki Iwashima · Sep 12, 2026 · 1 files

5cddf63367ef

ALSA: hda/realtek: Add quirk for HP Victus 15-fa1xxx (MB 8BB1) mute LED

Krish Gulati · Sep 12, 2026 · 1 files

150dba2c69e9

net: remove WARN_ON_ONCE() from the dev_fill_forward_path() loop check

Farhad Alemi · Sep 12, 2026 · 1 files

b797b52e88a6

btrfs: add "/dev/root" exception for device path update

Qu Wenruo · Sep 12, 2026 · 1 files

c7a1c6e8004a

sched_ext: Close the pre-enable ops error claim window

fangqiurong · Sep 12, 2026 · 1 files

3f118c8217c1

openvswitch: avoid reallocating confirmed conntrack labels

Zhiling Zou · Sep 12, 2026 · 1 files

bde5212360bd

net: phy: mediatek: do not report link and per-speed LED rules together

Ahmed Naseef · Sep 12, 2026 · 1 files

83a945a529d6

tcp: do not let tcp_rmem be set below 4096

Eric Dumazet · Sep 12, 2026 · 2 files

ba970587a0e1

drm/msm/a6xx+: Increase GMU FW init timeout

Rob Clark · Sep 12, 2026 · 1 files

fd95e68df6fe

ALSA: core: Fix potential UAF after asynchronous card release

Takashi Iwai · Sep 12, 2026 · 1 files

1d9763f34a85

watchdog: msc313e: Propagate error code in resume()

Tzung-Bi Shih · Sep 12, 2026 · 1 files

e75c96157d45

smb: client: fix smbd_connection leak on cifs_get_tcp_session() error

Paulo Alcantara · Sep 12, 2026 · 1 files

72de4807ba84

btrfs: derive f_fsid with dev_t only when temp_fsid is active

Anand Jain · Sep 12, 2026 · 1 files

7f4a5ec6258f

net/sched: codel: bound the dropping loop per dequeue call

Jamal Hadi Salim · Sep 12, 2026 · 2 files

f6fb2ac5e19a

selftests/tc-testing: add codel/fq_codel interval boundary cases

Jamal Hadi Salim · Sep 12, 2026 · 2 files

2cef2588c995

net/sched: hhf: cap hh_flows_limit at change time

Jamal Hadi Salim · Sep 12, 2026 · 1 files

0654f4dba1fb

selftests/tc-testing: add hhf hh_limit cap tests

Jamal Hadi Salim · Sep 12, 2026 · 1 files

095858324f06

spi: virtio: Use the per-transfer bits per word

Hao-Qun Huang · Sep 12, 2026 · 1 files

76a986c980bb

ALSA: usb-audio: Clamp implicit feedback packet count to URB capacity

Xiang Mei · Sep 12, 2026 · 2 files

ecc7253683a3

pppoatm: ensure a writable skb header and linear data

Eric Dumazet · Sep 12, 2026 · 1 files

801fb950cae7

Bluetooth: RFCOMM: avoid socket lock inversion in listener cleanup

Juan Perdomo · Sep 13, 2026 · 1 files

5ae916fabca1

net: netsec: fix device_node reference leak on phy_np

Yige Jiang · Sep 13, 2026 · 1 files

400cb663ca01

watchdog: digicolor: Avoid division by zero

Tzung-Bi Shih · Sep 13, 2026 · 1 files

5af7d2cbd20f

watchdog: rtd119x: Avoid division by zero

Tzung-Bi Shih · Sep 13, 2026 · 1 files

6274281c41ef

watchdog: rzv2h: Avoid division by zero

Tzung-Bi Shih · Sep 13, 2026 · 1 files

22737cfced62

watchdog: msc313e: Fix premature reset during timeout update

Tzung-Bi Shih · Sep 13, 2026 · 1 files

f4fae975db08

drm/msm/hdmi_phy: fix runtime PM cleanup on probe failure

Guangshuo Li · Sep 13, 2026 · 1 files

455ebeadf714

net: ip_tunnel: initialize `options_len` before referencing options

Gris Ge · Sep 13, 2026 · 1 files

33ff111d7ba3

net/packet: clear RX owner on VNET header error

Mark Amirkan · Sep 13, 2026 · 1 files

60404266ef3e

mptcp: return sk_wait_data() errors from recvmsg()

Mark Amirkan · Sep 13, 2026 · 1 files

37213e611202

net/packet: avoid truncating TPACKET_V3 private size

Mark Amirkan · Sep 13, 2026 · 1 files

a15fac810c76

dt-bindings: display/msm: Use consistent indentation in the example

Krzysztof Kozlowski · Sep 13, 2026 · 5 files

c9e6e5f38bf7

ALSA: hda: trace PCM open only after assigning a stream

Slavin Liu · Sep 13, 2026 · 1 files

1e713f9bb2ac

ALSA: pcm: set timer->private_data before registering the PCM timer

Nguyen Ngoc Thang · Sep 13, 2026 · 1 files

11fc0048a693

ASoC: ux500: Parenthesize MSP_{RX,TX}_CLKPOL_BIT() arguments

Sasha Levin · Sep 13, 2026 · 1 files

23ca4ddc4fce

net: bcmgenet: restore the hardware filters on open

Nicolai Buchwitz · Sep 13, 2026 · 1 files

7616242a2b37

seg6: set IPSKB_L3SLAVE from IP6SKB_L3SLAVE on IPIP decapsulation

Andrea Mayer · Sep 13, 2026 · 1 files

555cd2bd860e

Bluetooth: keep dst_type with dst when reusing an LE connection

Radek Podgorny · Sep 13, 2026 · 1 files

2de887f89166

ALSA: hda/realtek: Add mute LED quirk for HP OMEN 15-ax

Xavier Goffin · Sep 13, 2026 · 1 files

4396d70bb7fe

mmc: sdhci-of-aspeed: Remove children before releasing SDC resources

Myeonghun Pak · Sep 13, 2026 · 1 files

e1aeaf79dea5

smb: client: fix unaligned access in WSL reparse point parser

Paulo Alcantara · Sep 14, 2026 · 2 files

a9ce4053dc94

net: lan743x: fix RX checksum use-after-free

Mark Amirkan · Sep 14, 2026 · 1 files

e1253a82bb4c

smb: client: fix fattr leaking on wsl_to_fattr() failure

Paulo Alcantara · Sep 14, 2026 · 1 files

ea48250a0dc9

Input: document that no new LED codes should be added

Dmitry Torokhov · Sep 14, 2026 · 1 files

beb34fe8312e

ALSA: usb-audio: Add capture quirk for Behringer FCA1616

Kitty Makin · Sep 14, 2026 · 1 files

7bc369cb3d3f

Input: xpad - fix PDP Marvel Xbox 360 controller

Jeremy Nyberg · Sep 14, 2026 · 1 files

8e759cd1f644

tcp: Don't call skb_clone_and_charge_r() for close()d listener in tcp_v6_do_rcv().

Kuniyuki Iwashima · Sep 14, 2026 · 1 files

50fd0ada8d37

gpio: virtuser: skip free_irq when no IRQ is installed

Runyu Xiao · Sep 14, 2026 · 1 files

5071122bf5a6

watchdog: da9062: fix suspend/resume handling of HW_RUNNING watchdog

Li Jun · Sep 14, 2026 · 1 files

0ff9c7775e51

hwmon: (w83791d) remove fan/pwm 4-5 sysfs group on remove

Guangshuo Li · Sep 14, 2026 · 1 files

78b6abd6c7a7

Bluetooth: btmtk: fix wrong status for short WMT FUNC_CTRL events

Chris Lu · Sep 14, 2026 · 1 files

8879e3e0a84a

Bluetooth: btmtksdio, btmtkuart: validate WMT event length before struct access

Chris Lu · Sep 14, 2026 · 2 files

c702a5f18b78

hwmon: (w83793) release probe data through kref

Guangshuo Li · Sep 14, 2026 · 1 files

f0ef4b1eaed0

net: stmmac: do not overwrite phc_index when no PTP clock is registered

Lorenzo Bianconi · Sep 14, 2026 · 1 files

1589afe2d099

ALSA: 6fire: fix OOB write from device-reported iso length

Xiang Mei · Sep 14, 2026 · 1 files

ba7a79b9bc87

wifi: cfg80211: verify if AP_VLAN belongs to the correct AP

Slawomir Stepien · Sep 14, 2026 · 1 files

f81e6c3fb063

tcp: exclude old ACKs from tcp fast path

Inbal Schussheim · Sep 14, 2026 · 1 files

d841cd7513f3

selftests: net: packetdrill: test exclusion of old ACK from TCP fast path

Inbal Schussheim · Sep 14, 2026 · 1 files

e0c3e9d76adb

i2c: imx: disable autosuspend on remove

Guangshuo Li · Sep 14, 2026 · 1 files

14cb1e7702e5

net: mvpp2: prevent buffer overflow in page_pool allocation

Dmitriy Okunev · Sep 14, 2026 · 1 files

7b60ee5f46f2

Bluetooth: btmtksdio: Fix PM runtime reference leak in shutdown

Tzung-Bi Shih · Sep 14, 2026 · 1 files

0030f62683d5

ASoC: adau1977: make the Kconfig symbols user selectable

Alvin Šipraga · Sep 14, 2026 · 1 files

528a0da3e55b

ASoC: adau1977-spi: drop __maybe_unused and of_match_ptr()

Alvin Šipraga · Sep 14, 2026 · 1 files

76a8fe25b978

ASoC: adau1977-i2c: add OF match table for I2C

Alvin Šipraga · Sep 14, 2026 · 1 files

bdf5f731957d

hwmon: (gpio-fan) return IRQ_HANDLED from the shared alarm IRQ handler

Cong Nguyen · Sep 14, 2026 · 1 files

03a5699a0a04

ASoC: codecs: rt712-sdca-dmic: fix uninitialized stream_config->type

Jiangshan Yi · Sep 14, 2026 · 1 files

2842ce397dd0

net: bridge: vlan: fix bugs caused by switchdev deletion errors

Nikolay Aleksandrov · Sep 14, 2026 · 1 files

5ab3dc647751

ALSA: usb-audio: skip the broken mute control on AVerMedia GC553Pro

Asai Neko · Sep 14, 2026 · 1 files

057dac23d329

cgroup: Avoid iteration of dying tasks with zero refcount

Michal Koutný · Sep 14, 2026 · 1 files

3482062c786c

ASoC: cs-amp-lib: Prevent NULL pointer if efi variable is zero length

Richard Fitzgerald · Sep 14, 2026 · 1 files

1c4f6202876a

ALSA: hda/realtek: Enable mute LEDs on HP OmniBook 7 17-dc0xxx

Jaeho Cho · Sep 14, 2026 · 1 files

723d4dc628d7

drm/amdgpu: check ras and obj before dereference

Dmitriy Chumachenko · Sep 14, 2026 · 1 files

cc337324cc6b

btrfs: fix creation of compressed inline extents that don't save space

Filipe Manana · Sep 14, 2026 · 1 files

1dd85662fee6

net: ethernet: cortina: Ack RX overrun interrupt correctly

Linus Walleij · Sep 14, 2026 · 1 files

490599ab2313

eth: fbnic: ring the doorbell if a burst ends in a drop

Jakub Kicinski · Sep 15, 2026 · 2 files

9ed55f3dbef4

net: lock the socket in sock_gettstamp()

Eric Dumazet · Sep 15, 2026 · 1 files

9ca4ba242591

net: macb: fix ordering around PTP timestamp read

James Clark · Sep 15, 2026 · 1 files

0d1cb83337f1

ata: libahci_platform: Fix device reference leak in ahci_platform_get_resources()

Wentao Liang · Sep 15, 2026 · 1 files

9a0b159ff18c

sched_ext: scx_qmap: Restore unused idle claims from ops.dispatch()

Tejun Heo · Sep 15, 2026 · 2 files

a9e3760b0838

sched_ext: Maintain an online cid mask in the scheduler arena

Tejun Heo · Sep 15, 2026 · 4 files

0d2f4cfa5643

drm/amd/display: Fix NULL dereference in dcn50/dcn60 init_hw

Srinivasan Shanmugam · Sep 15, 2026 · 2 files

c17ae8c26eac

ASoC: hdmi-codec: Report a change when the channel status moves

HyeongJun An · Sep 15, 2026 · 1 files

a5117e1eccac

net: skbuff: do not leave stale header offsets after pskb_carve()

Eric Dumazet · Sep 15, 2026 · 1 files

2ab510e63197

drm/sched: Fix virtual runtime race

Tvrtko Ursulin · Sep 15, 2026 · 2 files

04de4007d323

drm/amdgpu: Fix GPU PCIe link capability reporting

Mario Limonciello · Sep 15, 2026 · 2 files

dbd9d1cbf970

ALSA: usb-audio: fix list_add double-add in push_back_to_ready_list

Nguyen Ngoc Thang · Sep 15, 2026 · 1 files

51938dfa8a51

KVM: PPC: Book3S HV: fix use-after-free in kvmhv_emulate_tlbie_all_lpid()

Amit Machhiwal · Sep 15, 2026 · 1 files

0a416ee20bcc

KVM: PPC: Book3S HV: fix secure device page leak on uv_page_in() failure

Amit Machhiwal · Sep 15, 2026 · 1 files

0b271f7d7f5e

powerpc/iommu: Fix the overflow validation in iommu_tce_check_ioba

Shivaprasad G Bhat · Sep 15, 2026 · 1 files

1d12fb94ac09

hwmon: (pmbus/tps53679) Fix TPS53676 phase page decoding

Sanman Pradhan · Sep 15, 2026 · 1 files

7f9caa70aef0

drm/amdgpu: Skip KFD mapping clear before initialization

Mario Limonciello · Sep 15, 2026 · 1 files

fe3c73d7bc76

sched/core: Avoid false migration warning for proxy donors

Andrea Righi · Sep 15, 2026 · 1 files

d798162eb364

dpll: reject a reference sync pin which is not on the pin's dpll

Jakub Kicinski · Sep 15, 2026 · 1 files

a41f24c612c3

net: psp: avoid conflicts with skb->decrypted and sk_validate_xmit_skb()

Daniel Zahka · Sep 15, 2026 · 4 files

b4288c59bda8

selftests: drv-net: psp: test PSP and TCP ULP mutual exclusion

Daniel Zahka · Sep 15, 2026 · 2 files

e6cb0b4d4ecb

hwmon: (hp-wmi-sensors) Fix use-after-free in fungible_show()

Muhammad Bilal · Sep 16, 2026 · 1 files

3565893cc72c

btrfs: clear free space tree creation state on rebuild failure

Guanghui Yang · Sep 16, 2026 · 1 files

76bf149cd029

btrfs: handle lack of space when cleaning up verity items

Daniel Linjama · Sep 16, 2026 · 2 files

a5e22cba3549

ASoC: rt721: Reset codec to fix abnormal sound

Oder Chiou · Sep 16, 2026 · 2 files

8d836581f9b1

ata: libata-scsi: fix ata_dsm_trim_pages() kernel-doc

Niklas Cassel · Sep 16, 2026 · 1 files

97fcd34aa9fd

btrfs: abort transaction on failure to update inode for hole punching and reflinking

Filipe Manana · Sep 16, 2026 · 1 files

aeab4c628757

btrfs: check if there is space for chunk item when validating sys chunk array

Filipe Manana · Sep 16, 2026 · 1 files

88f113634028

watchdog: sp5100_tco: Fix pci_dev reference leak in sp5100_tco_init()

Wentao Liang · Sep 16, 2026 · 1 files

8f0ca55016a7

watchdog: starfive-wdt: Fix runtime PM leak in starfive_wdt_pm_start()

Wentao Liang · Sep 16, 2026 · 1 files

c21eaa72f02f

posix-cpu-timers: Prevent freeing a timer which is queued on the expiry list

Thomas Gleixner · Sep 16, 2026 · 1 files

05762c5bc1cf

smb: client: fix next_buffer UAF and NextCommand bounds in compound PDUs

Frank Sorenson · Sep 16, 2026 · 1 files

b4694f269e66

smb: client: validate minimum PDU size before smb2_get_data_area_len()

Frank Sorenson · Sep 16, 2026 · 1 files

f73726b83e47

smb: client: fix server->total_read for compound encrypted PDUs

Frank Sorenson · Sep 16, 2026 · 1 files

e83330c55edc

smb: client: fix missing lower-bound check on DFS referral string offsets

Frank Sorenson · Sep 16, 2026 · 1 files

1b3221bb1210

smb: client: reject short Next offsets in parse_server_interfaces()

Frank Sorenson · Sep 16, 2026 · 1 files

eeb5ef6083e1

smb: client: fix OOB struct field reads in move_smb2_ea_to_cifs()

Frank Sorenson · Sep 16, 2026 · 2 files

b09d092eb24a

smb: client: fix missing iov bounds check in parse_posix_sids()

Frank Sorenson · Sep 16, 2026 · 1 files

4775c3b7a597

smb: client: fix potential OOB read in smb3_enum_snapshots()

Frank Sorenson · Sep 16, 2026 · 1 files

5f0306e731e2

smb: client: fix reparse buffer bounds in cifs_query_reparse_point()

Frank Sorenson · Sep 16, 2026 · 1 files

92b68492eae7

hwmon: (hp-wmi-sensors) Improve raw WMI string handling

James Seo · Sep 16, 2026 · 1 files

e7d3e2f46dd5

x86/microcode/intel: Reject problematic loading on Granite Rapids systems

Chang S. Bae · Sep 16, 2026 · 1 files

63edf5a009ae

x86/build/64: Prevent native builds from generating EGPR use

Chang S. Bae · Sep 16, 2026 · 3 files

089070b51ccb

hwmon: (pmbus/tps53679) Select page 0 for single-page TPS53676

Sanman Pradhan · Sep 16, 2026 · 1 files

7cb575b71ab9

watchdog: da9063: fix suspend/resume handling of HW_RUNNING watchdog

Li Jun · Sep 17, 2026 · 1 files

4dd1999783d7

soc: samsung: exynos-pmu: fix use-after-free of interrupt generator node

Alexey Klimov · Sep 17, 2026 · 1 files

2b0f561f21b2

mptcp: avoid unneeded actions on subflow reset

Paolo Abeni · Sep 17, 2026 · 3 files

42064de57fb8

mptcp: close race between scheduler and state change

Paolo Abeni · Sep 17, 2026 · 1 files

f3ef03357396

mptcp: fix bad accounting in __mptcp_subflow_push_pending()

Paolo Abeni · Sep 17, 2026 · 1 files

3d743adf090c

spi: fsl-qspi: Reprogram the clock rate when the operation frequency changes

Frieder Schrempf · Sep 17, 2026 · 1 files

717e0a25036b

cifs: Fix server use-after-free in cifs_chan_skip_or_disable()

Wentao Liang · Sep 17, 2026 · 1 files

93f53499d0b9

x86/fred: Reconstruct the #GP context for rejected INT instructions

Matthew Schwartz · Sep 17, 2026 · 1 files

96443a53bc3e

selftests/x86: Check signal state for rejected software interrupts

Matthew Schwartz · Sep 17, 2026 · 2 files

6a5719cc3ef2

net: qrtr: resend HELLO on MHI resume

Daniel J Blueman · Sep 20, 2026 · 3 files

93f51579e7df

Linux 7.3-rc4

Linus Torvalds · Sep 20, 2026 · 1 files