← Back to archive

Weekly briefing · Oct 12–19, 2026

Linux mainline: week of Oct 12

A weekly briefing built from 6 published daily update(s).

In brief

This weekly briefing gathers the meaningful changes that entered Linux mainline over the previous seven days.

Bug fixes

Power-supply driver and documentation fixes

max17042 now stores the over-voltage property in the correct field, ds2780 returns a proper success value from its capacity helper, generic-adc-battery converts temperature from milli-degrees to deci-degrees, and the core prevents unregistering a supply while callbacks are still running. A kernel-doc name mismatch is also corrected.

Why it matters: Avoids wrong battery thresholds, capacity read failures, temperature unit errors, and a possible use-after-free during removal.

f444a42dce5c45d4af4e80a2a58cbc8b36ec6bca94e642555b4bd13e0552

KVM SVM AVIC lifecycle fixes

AVIC (AMD Virtual Interrupt Controller) is AMD's hardware interrupt-delivery aid. These commits add a helper to check whether a vCPU ID fits AVIC's physical ID table, use it in load/put sanity checks, and clear the table entry when vCPU creation fails so it cannot keep pointing at freed memory.

Why it matters: Reduces the chance of a stale AVIC table entry causing a use-after-free after a failed vCPU creation.

86a24feec19112e0d427c33588c15bbd43ae

KVM SEV, MMIO cache, and nested-page-fault fixes

SEV (AMD Secure Encrypted Virtualization) now uses a locked page-dirtying call in the gmem post-populate path. KVM's per-vCPU MMIO cache now selects the active memslot set instead of always using address space 0, which matters in SMM (System Management Mode). The #NPF (nested page fault) handling also tolerates an unexpected SS bit from Hyper-V instead of indexing the permission array out of bounds.

Why it matters: Fixes a potential SEV page-dirty race, stale SMM MMIO cache entries, and out-of-bounds access warnings from odd AMD nested-page-fault codes.

97818b2fa708b3e6212dea2ee90ab3669181

Turbostat reliability fixes

The CPU power tool now reads complete sysfs/cgroup CPU lists instead of stopping at 1024 bytes, checks calloc() returns, prints out-of-range GFX%rc6 and SAM%mc6 values as NaN, fixes file-descriptor leaks and off-by-one errors, and warns instead of failing when older perf lacks L2 stats. It also bumps its version string.

Why it matters: Makes turbostat output and resource handling more reliable on large or fragmented CPU-topology systems.

c24362650f7a1de8307e8617148aefa949b1485c59972808767c64414c4c5e940dd96bef11741cc90f91154b96dab83fd3eea584b56f

Bootconfig and nios2 build-warning cleanups

The bootconfig tool gives its static_assert a message so clang does not warn about a C23 extension, and nios2's csum_fold() casts __wsum before shifting to avoid a sparse warning.

Why it matters: Cleaner builds for the bootconfig tool and nios2 kernel code.

a1ddc2721467b963f2345fa2

ARM64 Poly1305: fix lost carry when resuming NEON state

When the NEON code resumes from a base-2^26 accumulator and the next chunk has an odd number of full 16-byte blocks, it converts to base-2^64 form. The final ADC of that conversion stores the carry into d2, but the following accumulation and poly1305_mult() use h2, so a carry above bit 128 is dropped and the emitted tag can be wrong.

Why it matters: Correctness fix for ARM64 Poly1305 when updates are split across multiple calls; without it, an incorrect authentication tag could be produced.

24f07e8c07a0

Poly1305 final: use memzero_explicit() to clear context

poly1305_final() previously cleared the descriptor with a plain struct assignment, which could theoretically be optimized away by dead store elimination under LTO. Replacing it with memzero_explicit() guarantees the state is actually zeroized.

Why it matters: Ensures sensitive Poly1305 state is erased after use; no actual compiler-driven leak is known to have occurred, but the theoretical risk is removed.

da619121a5d2

Ethernet drivers: assign netdev_ops before PHY attach

A recent PHY layer change reads the network device operations table while attaching a PHY. Several drivers were attaching the PHY before assigning netdev_ops, causing a NULL-pointer crash at probe time when CONFIG_NET_SHAPER is enabled. This batch moves the assignment earlier, matching an existing emac fix.

Why it matters: Prevents a probe-time crash on HiSilicon FEMAC/HIP04, Actions Owl, ADI ADIN1140, Marvell mv643xx, AMD Au1000, OpenCores ethoc, Aeroflex GRETH, TI ICSSM-PRUETH, and Microchip LAN865X devices under that config.

444889dfa27b0d9342701f14c2c482431985ea1565cbf063a3eef3d2cca0beabbafdd0f6c9f8ce62a5fad71483f0716e955bb7cf680d2a3f6d2a9ac3

sched_ext: dispatch-queue and bypass race fixes

sched_ext is the BPF-based scheduler extension interface. This set fixes cases where a task could be left on a local dispatch queue without a reschedule, where a destroyed user dispatch queue could be read by a deferred reenqueue, and where nested schedulers under a parent bypass could end up with the wrong bypass/dispatch state. It also makes restricted idle selection respect task affinity.

Why it matters: Avoids task stalls, use-after-free, and bypass accounting WARNs in sched_ext environments, especially under cgroup teardown or PM suspend.

7a9df7667963069403dff337dcf7f650a2485bdeca322a6f6ac4544eff7918f5c699d1d02935062be771

Hyper-V/VMBus and vPCI fixes

Fixes VMBus connection state handling so teardown doesn't skip the unload handshake, avoids an infinite retry in vCPU index initialization when a NUMA node has no managed-IRQ housekeeping CPU, and stops using an unallocated per-cpu output page for an APIC-to-VP index hypercall. Also probes virtual PCI buses asynchronously to avoid serialized host round-trips, warns when a host response waits indefinitely, and checks per-CPU register pages before mmap.

Why it matters: Improves Hyper-V guest reliability during shutdown/panic and device initialization, prevents a possible hang in CPU selection, and makes slow host responses visible.

32ea0a33e3a07b74c117e2aaec31dc39e835c37fc4deee00ca039df94983874194a8de75

Netlink hardening and network protocol fixes

Netlink now resets the skb network and MAC headers before socket filters can inspect a message, preventing headroom bytes from leaking through bytecode reads. It also replaces the raw net namespace pointer with an opaque cookie in the rhashtable key to avoid leaking kernel addresses. Protocol fixes cover vsock TCP_CLOSING races, RDS connection-ID lifetime, SCTP output stream revalidation after connect, CALIPSO payload_len handling for BIG TCP, and a tc action use-after-free.

Why it matters: Closes a local info-leak path in netlink and fixes memory-safety/hang bugs in vsock, RDS, SCTP, CALIPSO, and tc.

8bf659bd54e1f88bb3606e4b4f6ac74fa594492ba6ac1b1f98d446b7c013b7ad72414c678070ed578b6b7b16eb911091

Network driver fixes: bcmgenet, stmmac, mlx5, ath9k

bcmgenet unshares skbs before writing its control block to avoid byte-queue-limit stalls under pktgen clone_skb mode; dwmac1000 clears a stale RGMII status interrupt that could storm the CPU after resume; mlx5 HWS fixes pool release for L2-to-L3 tunnel reformats and corrects flow-meter offsets within a bulk. The ath9k change reverts a WMI response length check that broke AR9271 USB adapters.

Why it matters: Avoids queue/BQL stalls, resume-time interrupt storms, wrong mlx5 flow-meter behavior, and restores AR9271 support on kernels containing the earlier regression.

89771ce4f8f6aa07285705f839e02ddf74bb1b0aad53ad7190201351a862

Core kernel, PCI, IOMMU, and KVM fixes

A workqueue mem-reclaim helper no longer dereferences current_pwq when a kworker isn't running a work item. PCI fixes keep the Apple T2 Secure Enclave's ANFE mask unchanged to avoid spontaneous power loss, and move Rockchip DW PCIe INTx IRQ setup out of .init() so root-port resets don't leak IRQ domains. KVM fixes stop an NMI-context #PF from consuming async-PF flags and reset the MMU after failed nested VMX state load. An AMD IOMMU cleanup is reverted, and the IOMMU kunit build is fixed for ThinLTO.

Why it matters: Prevents kernel panics/NULL derefs in workqueue, KVM, and PCI paths; avoids Apple T2 power loss; restores AMD IOMMU behavior on affected GPU systems; fixes an arm64/ThinLTO kunit build issue.

d1a4549a36457209846a169f4e9f69d0825381d99abe2bd8c8f4cfe1cf933ba149029a434bcfe2902199

Device-tree and platform fixes

DRA7's PCIe PHY clock divider table is restored in the correct order because the clock driver derives register values from table indices. The BeagleV Fire device tree drops duplicate GPIO interrupts that were preventing the mcp3564 driver from probing. A Tegra PMC fix initializes the early PMC clock rate for 32-bit Tegra to avoid a suspend warning. The sama5 defconfig is updated to use the current Microchip KSZ DSA Kconfig symbols.

Why it matters: Fixes PCIe PHY clock behavior on DRA7, restores mcp3564 probing on BeagleV Fire, removes a spurious Tegra suspend warning, and makes sama5 defconfig match current DSA driver options.

2fabd2f406d00f70fd6f4c1dc5c95dbdc901afb1ecfeda3f

Fix shadowed segment index in get_seg_reg_override_idx()

The prefix-scanning macro for_each_insn_prefix() declares its own loop counter named idx, which shadowed a same-named local used for the segment register result. Assignments in the loop body therefore wrote to the loop counter instead of the intended variable.

Why it matters: FS and GS segment overrides were ignored, and a CS override could make the loop non-terminating, potentially causing a task to spin during UMIP emulation of SGDT, SIDT, or SMSW.

32c52ec87d62

SCSI tape: fix use-after-free and partition position

st_remove() drops the last reference before removing the tape from the lookup table, so a concurrent open can find freed memory. Separately, after a device reset the saved tape block is recorded under the wrong partition. Both are corrected.

Why it matters: Avoids a slab use-after-free on driver unload and prevents tape positioning errors after resets.

71caf7f84bd6c9e9f024dd4f

iSCSI: validate command tags from incoming PDUs

libiscsi trusted the ITT in Reject responses, management responses, and transport-parsed indexes with only an upper bound. A negative index reads before the command array, and a stale or unsolicited tag can name a task whose slot is NULL or already released. The patches add lower-bound and NULL checks.

Why it matters: Prevents crashes and use-after-free variants when an iSCSI target sends malformed or unsolicited PDUs.

8ee2a09a1dbbc5958c770b2a11bffcd9cb34

iSCSI target: serialize discovery auth updates

Two concurrent configfs writes to the discovery AuthMethod parameter could free the same string twice. The update now takes the TPG access lock around lookup and replacement.

Why it matters: Avoids a double-free crash when changing iSCSI discovery authentication settings concurrently.

e15b81f602ed

SCSI target: take delayed command lock with IRQs disabled

One workqueue path took delayed_cmd_lock with interrupts enabled while all other paths disabled them. The patch switches to the irqsave variant so no interrupt can nest on the same lock.

Why it matters: Closes a potential deadlock in ordered command handling.

04a67a8b1a44

Xen SCSI frontend: check shadow entry before dereferencing

A backend response with an in-range but unused request ID dereferences a NULL shadow slot. The frontend now checks the entry before testing its inflight flag.

Why it matters: Prevents a guest kernel crash from a buggy or malicious Xen SCSI backend.

8c8222c25577

libsas: avoid SMP command deadlock during host resume

Resuming a SAS host can trigger a SATA hard reset that issues an SMP command; that path called pm_runtime_get_sync(), which waits for the ongoing resume and deadlocks. The patch avoids the runtime PM wait on this path.

Why it matters: Fixes a hang when resuming systems with expander-attached SATA disks.

81e097a064b2

BSG: size reply buffers for UFS RPMB

bsg-lib always allocated 96-byte reply buffers, but UFS Advanced RPMB replies are 104 bytes. Transports can now pass the required size, and UFS BSG requests enough space for the header plus EHS bytes.

Why it matters: Prevents a buffer overrun from UFS RPMB and returns full replies to userspace.

ec6b083915e8

sched: wake up preemption on scheduler class changes

When a queued task changes class (for example from CFS to RT), the scheduler did not always re-evaluate preemption, leaving an idle CPU with a runnable task. sched_change_end() now calls wakeup_preempt() for queued tasks.

Why it matters: Fixes lost wakeups reported under RCU torture, where a CPU idled with an RT task waiting.

118a2cf4ced6

sched/fair: fix overflow in EEVDF placement

place_entity() multiplies virtual lag by load+weight before dividing, and with scaled weights the intermediate product can overflow s64. The calculation is now done in a wider/ordered way to avoid the overflow.

Why it matters: Prevents incorrect task placement in corner cases with group scheduling and very small effective weights.

2f93bcb3f9aa

futex: use stable per-MM ID for shared futexes

A shared futex was keyed by the MM pointer, so a freed and reallocated MM at the same address could consume wakeups intended for another process. A unique 64-bit per-MM ID now identifies FUT_OFF_MMSHARED futexes.

Why it matters: Avoids lost or misdirected wakeups on shared futexes after an MM is reused.

3267512ad1c2

entry: count deferred hrtimer rearm as part of timer interrupt

Lockdep saw the deferred clock-event reprogramming after an interrupt as a separate context, creating a huge number of lock chains and eventually exhausting the lockdep pool. It is now counted as part of the timer interrupt's hardirq context.

Why it matters: Keeps lockdep validation alive much longer on debug kernels instead of switching itself off after a couple of days.

7cbaa0f4579f

regmap: fix IRQ domain leak and cache lifecycle races

regmap IRQ creation now frees its irqdomain on error, debugfs is removed before cache teardown to avoid concurrent access, and the map lock is released during cache allocation so raw spinlocks are not held while allocating memory.

Why it matters: Avoids a leaked IRQ domain, a debugfs use-after-free, and lockdep 'invalid wait context' warnings on Apple GPIO and similar regmap users.

2e42cade8ff1834035934cefabff0a48b110

i2c: fix clock selection and runtime PM in several drivers

QCom Geni now keeps the platform's chosen source clock instead of always switching to 32 MHz, QCom CCI accumulates HALT_ACK reset requests instead of dropping one, Wondermedia uses devm_clk_get() to avoid a clock leak, and Xiic drops the devres runtime-PM conversion that caused a suspend/clock WARN.

Why it matters: Fixes HID keyboard/touchpad probe failures on X1E80100, lost CCI master resets, clock leaks, and remove-time WARN floods.

8cb5c17be3a2195f3d74b5deaaabefc79b0fd33373c565af

spi: fix chip-select handling and DMA bounce-buffer corruption

Tegra114's SPI driver deasserted the CS GPIO between transfers when cs_change was set, so later transfers in a message ran with the chip deselected. i.MX SPI allocated DMA bounce buffers rounded only to 4 bytes but DMA-mapped them rounded to cache line size, corrupting slab memory.

Why it matters: Fixes broken multi-transfer register reads with ADIS16470 on Tegra and slab corruption observed with mcp251xfd on i.MX8MP.

8980bc573ae259eb22641f0c

firewire: close split-transaction race

For split transactions both the response handler and the timeout callback can manipulate the same pending entry; a refactor let both run, causing a use-after-free. The response handler now leaves the entry alone when the timeout callback is already running.

Why it matters: Prevents a firewire core use-after-free under split-transaction timing races.

7f9f2d6abc40

Hardware support

Tegra264 device tree additions

Tegra264's device tree gains nodes for its PWM controllers and PCIe root ports, along with a reg/reg-names reorder to match bindings. The Jetson AGX Thor DevKit also gets a PWM fan node so the fan is actively controlled instead of stopping or running at full speed.

Why it matters: Provides device-tree coverage for Tegra264 PWM/PCIe and improves out-of-the-box fan behavior on the Jetson AGX Thor DevKit.

dd3b6f7adcc5b86eaddf467a4ee64cda9866a93db5724ada

Source commits232 entries +
4ee64cda9866

arm64: tegra: Reorder reg and reg-names to match bindings

Thierry Reding · May 7, 2025 · 1 files

767c64414c4c

tools/power turbostat: Fix fd_perf leak on reset

Len Brown · May 1, 2026 · 1 files

5e940dd96bef

tools/power turbostat: Fix CWF PMT off-by-one

Len Brown · May 1, 2026 · 1 files

154b96dab83f

tools/power turbostat: Fix add_counter issue if > 24 counters.

Len Brown · May 3, 2026 · 1 files

11741cc90f91

tools/power turbostat: Fix PMT error path fd handling

Len Brown · May 3, 2026 · 1 files

d3eea584b56f

turbostat 2026.09.28

Len Brown · May 24, 2026 · 1 files

485c59972808

tools/power turbostat: Sanity check GFX%rc6 and SAM%mc6 percentages

Len Brown · Jun 22, 2026 · 1 files

dd3b6f7adcc5

arm64: tegra: Add PWM controllers on Tegra264

Thierry Reding · Jul 1, 2026 · 1 files

4ac852419f0d

accel/rocket: clear rdev on device init failure

Guangshuo Li · Jul 8, 2026 · 1 files

2fabd2f406d0

ARM: dts: ti/omap: dra7: fix PCIe PHY clock divider definition

David Oberhollenzer · Jul 16, 2026 · 1 files

b86eaddf467a

arm64: tegra: Add PCIe root ports on Tegra264

Thierry Reding · Jul 16, 2026 · 1 files

c24362650f7a

tools/power turbostat: Read complete CPU lists

Ali Ahmet Memis · Jul 30, 2026 · 1 files

2f4a0fb66d31

soc/tegra: fuse: Add missing newline to APBMISC error message

Jinhui Guo · Aug 4, 2026 · 1 files

b3e6212dea2e

KVM: x86: Use active memslots for the per-vCPU MMIO cache

Jinu Kim · Aug 7, 2026 · 1 files

97818b2fa708

KVM: SEV: Fix page dirtying in sev_gmem_post_populate()

Jann Horn · Aug 10, 2026 · 1 files

e15b81f602ed

scsi: target: iscsi: Fix race in discovery auth updates

Linfeng Sun · Aug 11, 2026 · 1 files

1de8307e8617

tools/power turbostat: Warn, but don't Err on out-dated perf systems

Len Brown · Aug 13, 2026 · 1 files

afb1ecfeda3f

ARM: configs: sama5: enable current Microchip KSZ DSA symbols

Pengpeng Hou · Aug 14, 2026 · 1 files

c5c95dbdc901

soc/tegra: pmc: Fix uninitialised clock rate

Jon Hunter · Aug 21, 2026 · 1 files

a93db5724ada

arm64: tegra: Add PWM fan on Jetson AGX Thor DevKit

Thierry Reding · Aug 27, 2026 · 1 files

fbfd6d0d3596

pinctrl: qcom: nord: Split QUP1 SE2/SE3 into lane-pair functions

Shawn Guo · Aug 30, 2026 · 2 files

32ea0a33e3a0

Drivers: hv: Avoid infinite retry loop in init_vp_index()

Waiman Long · Aug 30, 2026 · 1 files

0cdd57a4c561

x86/hyperv: Fix stale comments after stimer message mode removal

Jiangshan Yi · Sep 1, 2026 · 2 files

ec31dc39e835

Drivers: hv: Don't reset VMBus connection state on error/exit paths

Michael Kelley · Sep 1, 2026 · 2 files

f444a42dce5c

power: supply: max17042_battery: Fix vmin assigned instead of vmax in DT parsing

Xueqin Luo · Sep 1, 2026 · 1 files

a58cbc8b36ec

power: supply: ds2780: Fix ds2780_get_capacity() returning raw value

Xueqin Luo · Sep 1, 2026 · 1 files

2e42cade8ff1

regmap: irq: Free the irqdomain we create

Mark Brown · Sep 1, 2026 · 1 files

7b74c117e2aa

x86/hyperv: Avoid using per-cpu output page in hv_apicid_to_vp_index()

Michael Kelley · Sep 2, 2026 · 1 files

148aefa949b1

tools/power turbostat: add NULL check after calloc()

longlong yan · Sep 2, 2026 · 1 files

6eff1d69dae8

accel/rocket: search every core slot when a core is removed

Igor Paunovic · Sep 4, 2026 · 3 files

0f70fd6f4c1d

riscv: dts: microchip: beaglev-fire: remove double definition of gpio interrupts

Conor Dooley · Sep 4, 2026 · 1 files

818103dc7f59

pinctrl: qcom: ipq5210: Publish the OF module alias

hpp.iscas · Sep 5, 2026 · 1 files

89c2c777df17

accel/rocket: search every core slot when looking up a scheduler

Igor Paunovic · Sep 5, 2026 · 1 files

c37fc4deee00

PCI: hv: Probe vPCI buses asynchronously

Naman Jain · Sep 7, 2026 · 1 files

45d4af4e80a2

power: supply: Fix maintenance charge table kernel-doc

Karl Mehltretter · Sep 9, 2026 · 1 files

b5629f4a0869

drm/amdgpu: fix sched entity leak in ttm buffer entity init

Perry Yuan · Sep 10, 2026 · 1 files

5b0a459f990b

drm/amdgpu: destroy mutex when tearing down ttm buffer entity

Perry Yuan · Sep 10, 2026 · 1 files

3c516a564628

drm/amdgpu: fix GEM object leak on ENOMEM in userptr ioctl

Perry Yuan · Sep 10, 2026 · 1 files

5b4bd13e0552

power: supply: core: prevent unregistering a power supply while a callback runs

Alexey Charkov · Sep 10, 2026 · 2 files

874194a8de75

mshv_vtl: Check per-CPU register page before mmap

Hardik Garg · Sep 11, 2026 · 1 files

a0777b9e5315

tracing: Fix NULL dereference when copying keys for a field variable

Donggeun Yoo · Sep 14, 2026 · 1 files

ca039df94983

PCI: hv: Warn when wait_for_response() waits indefinitely

Sahil Chandna · Sep 14, 2026 · 1 files

2afe7575fb24

tracing: Take trace_types_lock when dropping the buffer_meta reference

David Carlier · Sep 14, 2026 · 1 files

3f23cae09a46

ring-buffer: Do not show buffer_meta for CPUs without a buffer

David Carlier · Sep 14, 2026 · 1 files

12f631d5ded5

MAINTAINERS: remove myself from the Hyper-V entries

Long Li · Sep 15, 2026 · 1 files

7724f2364396

Drivers: hv: vmbus: fix typo "substract" in comment

Hemanth Selam · Sep 15, 2026 · 1 files

d5e689696017

tools/hv: fix typo "retrive" in comment

Hemanth Selam · Sep 15, 2026 · 1 files

647c2f97fcb9

tracing: Fix the shift out of bounds in the log2 histogram modifier

Donggeun Yoo · Sep 16, 2026 · 1 files

aaabefc79b0f

i2c: viai2c-wmt: Fix clock leak in wmt_i2c_probe()

Wentao Liang · Sep 16, 2026 · 1 files

68ab4a6a84b9

pinctrl: qcom: nord: fix GPIO interrupt target width

Zhangfei Gao · Sep 16, 2026 · 1 files

55a67aa89342

drm/amd/display: Fix NULL sink dereference in USB4 bandwidth functions

Srinivasan Shanmugam · Sep 17, 2026 · 1 files

9d4c3e0c6a53

pinctrl: qcom: hawi: Fix intr_target_width

Konrad Dybcio · Sep 17, 2026 · 1 files

912df33f296e

pinctrl: qcom: maili: Fix intr_target_width

Konrad Dybcio · Sep 17, 2026 · 1 files

dcb5df182b37

pinctrl: qcom: qcs8300: Fix intr_target_width

Konrad Dybcio · Sep 17, 2026 · 1 files

25132363c723

ring-buffer: Fix the sub-buffer array base in rb_meta_subbuf_idx()

Donggeun Yoo · Sep 18, 2026 · 1 files

6a8bf59de3ef

drm/i915/cx0_phy: Fix ARL-S host bridge detection

Dnyaneshwar Bhadane · Sep 21, 2026 · 1 files

c6c159fcdb4e

pinctrl: qcom: ipq5018: add missing pwm3 function on gpio13

Gilberto Conde · Sep 21, 2026 · 1 files

8bb1858db453

drm/i915/dmc: Harden DMC firmware payload parsing

Dibin Moolakadan Subrahmanian · Sep 22, 2026 · 1 files

7dedc5bb11f9

drm/i915/dmc: Add sanity check for DMC load address

Dibin Moolakadan Subrahmanian · Sep 22, 2026 · 2 files

b963f2345fa2

nios2: fix __wsum type degradation in csum_fold()

Keith Busch · Sep 22, 2026 · 1 files

c902b6d70984

tracing: Fix empty symbol names in simple_ring_buffer undef check

Vincent Donnefort · Sep 23, 2026 · 1 files

ba875c448335

tracing: Fix simple_ring_buffer undef check on parisc

Vincent Donnefort · Sep 23, 2026 · 1 files

0fa993581aaa

tracing: Fix simple_ring_buffer undef check on sparc64

Vincent Donnefort · Sep 23, 2026 · 1 files

86a24feec191

KVM: SVM: Add paranoid helper for checking if vCPU is AVIC-addressable

Sean Christopherson · Sep 23, 2026 · 1 files

12e0d427c335

KVM: SVM: Use "is AVIC-addressable" helper to sanity check load()/put()

Sean Christopherson · Sep 23, 2026 · 1 files

88c15bbd43ae

KVM: SVM: Clear AVIC Physical ID table entry if vCPU creation fails

Naveen N Rao (AMD) · Sep 23, 2026 · 3 files

4e9f69d08253

PCI: dw-rockchip: Move INTx IRQ setup to probe

Shawn Lin · Sep 24, 2026 · 1 files

89bab1dba8a0

ring-buffer: Fix false warning in ring_buffer_map_get_reader()

Krystian Kaniewski · Sep 24, 2026 · 1 files

5e0ed1108504

Revert "dma-buf: Make DMABUF_DEBUG default to y on DEBUG_KERNEL kernels"

Jianfeng Liu · Sep 26, 2026 · 1 files

6bca94e64255

power: supply: generic-adc-battery: Fix temperature IIO channel conversion

Svyatoslav Ryhel · Sep 26, 2026 · 1 files

8907eb42c08b

drm/virtio: Reset device before deleting virtqueues on freeze

Yuho Choi · Sep 26, 2026 · 1 files

19fc4240358b

pinctrl: qcom: spmi-gpio: make direction changes exclusive

Shawn Guo · Sep 27, 2026 · 1 files

04a67a8b1a44

scsi: target: Disable interrupts while holding delayed_cmd_lock

Yu Zhang · Sep 27, 2026 · 1 files

d1a4549a3645

workqueue: Fix NULL current_pwq deref in mem-reclaim helper

Pavankumar Kondeti · Sep 28, 2026 · 1 files

81e097a064b2

scsi: libsas: Fix SMP IO deadlock during HA resume

Xingui Yang · Sep 28, 2026 · 1 files

65db42a9fae0

pinctrl: qcom: ipq5018: update PWM groups and corresponding pin functions

George Moussalem · Sep 28, 2026 · 1 files

2f93bcb3f9aa

sched/fair: Avoid overflow in place_entity()

Hui Su · Sep 28, 2026 · 1 files

8cb5c17be3a2

i2c: qcom-geni: Restore the source-clock selection policy

Abel Vesa · Sep 28, 2026 · 1 files

3110d09bb98e

tracing: Fix ignored return value of resize_buffer_duplicate_size()

Dmitry Kandybka · Sep 28, 2026 · 1 files

9414ca3b99e5

tracing: Fix hist trigger timestamps for buffered events

Tengda Wu · Sep 29, 2026 · 1 files

3267512ad1c2

futex: Fix mm reuse handling for FUT_OFF_MMSHARED

Jann Horn · Sep 29, 2026 · 3 files

81d99abe2bd8

x86/kvm: Don't consume async #PF flags on a kernel #PF in NMI context

EJ Campbell · Sep 29, 2026 · 1 files

c8f4cfe1cf93

KVM: nVMX: Reset MMU back to the root MMU if loading L2 state fails for !VM-Entry

Amirmohammad Eftekhar · Oct 1, 2026 · 1 files

36ebddca56b9

fsnotify: prevent mark additions during connector teardown

Kyle Zeng · Oct 2, 2026 · 2 files

40bb03d3ea6f

pipe: preserve existing fasync readers on writer setup failure

Kyle Zeng · Oct 2, 2026 · 1 files

8980bc573ae2

spi: tegra114: assert CS GPIO for every transfer in a message

Carlos Jones Jr · Oct 2, 2026 · 1 files

3f57b34485dc

drm/vc4: hdmi: Move packet RAM enable to PM runtime

Dave Stevenson · Oct 2, 2026 · 1 files

709ba1c547ea

pinctrl: qcom: ipq5018: replace gcc_plltest with pwm2 on gpio12

Adriel Santos · Oct 2, 2026 · 1 files

81933038f5e2

pid_namespace: make zap_pid_ns_processes() freezable

Aviv Vaknin · Oct 2, 2026 · 2 files

78436f3882fb

perf: Track the perf mlock gift separately

Lorenzo Stoakes (ARM) · Oct 3, 2026 · 2 files

492ba6ac1b1f

net: rds: fix uninitialized trans dereference in CM event handler

Aohan Mei · Oct 3, 2026 · 1 files

98d446b7c013

net/rds: don't let the rdma_cm destroy an id RDS still owns on route failure

Allison Henderson · Oct 3, 2026 · 1 files

dbd674ccf30f

power: sequencing: qcom-wcn: power off WLAN at probe

François Roux · Oct 4, 2026 · 1 files

4f6ac74fa594

vsock: treat TCP_CLOSING as once-established

Michal Luczaj · Oct 5, 2026 · 1 files

8c8222c25577

scsi: xen/scsifront: Check for a NULL shadow entry on a backend response

Yehyeong Lee · Oct 5, 2026 · 1 files

1cca81a683da

pinctrl: amd: Clear S4 wake bits when firmware has _AEI

Mario Limonciello · Oct 5, 2026 · 1 files

fd8662823caa

drm/xe/oa: Zero OA buffer at allocation

Bommu Krishnaiah · Oct 6, 2026 · 1 files

834035934cef

regmap: Remove debugfs before cache teardown

Michael Reeves · Oct 6, 2026 · 2 files

abff0a48b110

regmap: Drop map lock during cache init and exit

Michael Reeves · Oct 6, 2026 · 3 files

da619121a5d2

lib/crypto: poly1305: Use memzero_explicit() in poly1305_final()

Eric Biggers · Oct 6, 2026 · 1 files

c9e9f024dd4f

scsi: st: Save the visited block for the partition the drive is in

Laurence Oberman · Oct 6, 2026 · 1 files

800ea86e83e1

drm/amdgpu/uvd3.1: Fix checking whether UVD firmware keyselect was already set

Timur Kristóf · Oct 6, 2026 · 1 files

752480ad6296

drm/amdgpu/sdma3: Work around POLL_REGMEM / FENCE hang

Timur Kristóf · Oct 6, 2026 · 1 files

8bf659bd54e1

netlink: reset skb headers before unicast and multicast filtering

Kyle Zeng · Oct 6, 2026 · 1 files

8ee2a09a1dbb

scsi: libiscsi: Reject a negative task index from parse_pdu_itt

Yehyeong Lee · Oct 7, 2026 · 1 files

c5958c770b2a

scsi: libiscsi: Validate the ITT reflected in a Reject PDU

Yehyeong Lee · Oct 7, 2026 · 1 files

11bffcd9cb34

scsi: libiscsi: Validate the task named by a management response

Yehyeong Lee · Oct 7, 2026 · 1 files

b7ad72414c67

sctp: revalidate output stream after association connect wait

Daehyeon Ko · Oct 7, 2026 · 1 files

c5895eadf287

pinctrl: sunxi: dt: do not accumulate npins across probe attempts

Pablo Mazzini · Oct 7, 2026 · 1 files

fcbc48dc650d

gpio: nct6694: Mark the GPIO controller as sleeping

Ming Yu · Oct 7, 2026 · 1 files

26401a4999f1

drm/exec: don't immediately add prelocked obj to array of locked objs

Christian König · Oct 7, 2026 · 2 files

39e02ddf74bb

net/mlx5: HWS, release L2 to L3 tunnel reformats to their own pool

Alexandre Cassen · Oct 7, 2026 · 1 files

1b0aad53ad71

net/mlx5: HWS, fix flow meter offset within its bulk

Alexandre Cassen · Oct 7, 2026 · 1 files

7a9df7667963

sched_ext: Fix stall when a task enqueued with SCX_ENQ_LAST lands back on its CPU's local DSQ

Tejun Heo · Oct 7, 2026 · 2 files

65676cd4203c

autofs: ignore notification errors from a replaced pipe

Sung Byeongchan · Oct 7, 2026 · 1 files

e415915c5258

Revert "drm/virtio: Add pixel blend mode property to cursor plane"

Dmitry Osipenko · Oct 7, 2026 · 1 files

f88bb3606e4b

netlink: avoid hashing the network namespace pointer

Kyle Zeng · Oct 8, 2026 · 1 files

444889dfa27b

net: hisilicon: hisi_femac: Move setting of netops to fix crash

David Yang · Oct 8, 2026 · 1 files

0d9342701f14

net: hisilicon: hip04_eth: Move setting of netops to fix crash

David Yang · Oct 8, 2026 · 1 files

c2c482431985

net: ethernet: actions: Move setting of netops to fix crash

David Yang · Oct 8, 2026 · 1 files

ea1565cbf063

net: ethernet: adi: Move setting of netops to fix crash

David Yang · Oct 8, 2026 · 1 files

a3eef3d2cca0

net: mv643xx: move setting of netops to fix crash

David Yang · Oct 8, 2026 · 1 files

beabbafdd0f6

net: au1000: move setting of netops to fix crash

David Yang · Oct 8, 2026 · 1 files

c9f8ce62a5fa

net: ethoc: move setting of netops to fix crash

David Yang · Oct 8, 2026 · 1 files

d71483f0716e

net: ethernet: aeroflex: move setting of netops to fix crash

David Yang · Oct 8, 2026 · 1 files

955bb7cf680d

net: ti: icssm-prueth: Move setting of netops to fix crash

David Yang · Oct 8, 2026 · 1 files

2a3f6d2a9ac3

microchip: lan865x: move setting of netops to fix crash

David Yang · Oct 8, 2026 · 1 files

cf1f186e08da

perf/x86/intel/uncore: Fix DMR CXL CM invert filter

Guixiong Wei · Oct 8, 2026 · 1 files

746de48c3a25

ASoC: SOF: ipc4-topology: Fix shift-out-of-bounds for aggregated ALH capture

Peter Ujfalusi · Oct 8, 2026 · 1 files

f90f8afb61be

ASoC: SOF: sof-client: Use event-handler mutex consistently

Peter Ujfalusi · Oct 8, 2026 · 1 files

a2eae9f4fa1b

drm/amd/pm: add zero fan stop temperature support on smu 14.0.2

Kenneth Feng · Oct 8, 2026 · 1 files

203436d2aeb7

ASoC: cs42l56: Put the Limiter Cushion control on the limiter register

HyeongJun An · Oct 8, 2026 · 1 files

8b08b98796d2

ASoC: cs42l52: Fix the NG Type Switch bit

HyeongJun An · Oct 8, 2026 · 1 files

b26edc925c1c

ASoC: pcm3168a: Fix the DAC zero flag polarity bit

HyeongJun An · Oct 8, 2026 · 1 files

f7934340c56a

ASoC: max98371: Fix the Speaker DHT Min Volume bits

HyeongJun An · Oct 8, 2026 · 1 files

d0567ca9a2fa

ASoC: wm8978: Fix the 128x oversampling switch bits

HyeongJun An · Oct 8, 2026 · 1 files

4db45fc1da3d

ASoC: nau8822: Fix the 128x oversampling switch bits

HyeongJun An · Oct 8, 2026 · 1 files

7b16eb911091

net/sched: fix use-after-free in __tcf_action_put()

Jérémy Jean · Oct 8, 2026 · 1 files

8240e19d329e

accel/amdxdna: Fix Kconfig invalid configuration

Liam R. Howlett · Oct 9, 2026 · 1 files

de9f6bcdb44f

drm/amdgpu: don't drop the runtime PM reference twice in amdgpu_gpr

Jesse Zhang · Oct 9, 2026 · 1 files

ffbfd3f98f43

drm/xe: Don't transfer shrinker pages for pinned bos on purgeable state change

Thomas Hellström · Oct 9, 2026 · 1 files

1b4da805a0ba

drm/amdgpu: free the userptr ranges when a CS fails after parser_bos

Jesse Zhang · Oct 9, 2026 · 1 files

89771ce4f8f6

net: bcmgenet: unshare the skb before writing the control block

Nicolai Buchwitz · Oct 9, 2026 · 1 files

4eac392e48fc

spi: spi-fsl-lpspi: pass struct fsl_lpspi_data instead of struct spi_controller if possible

Marc Kleine-Budde · Oct 9, 2026 · 1 files

b0f0c761ed3f

spi: spi-fsl-lpspi: directly return ret in fsl_lpspi_transfer_one()

Marc Kleine-Budde · Oct 9, 2026 · 1 files

e90ab3669181

KVM: x86/mmu: Cope with the SS bit being set in #NPF exit codes

Paolo Bonzini · Oct 9, 2026 · 2 files

24f07e8c07a0

lib/crypto: arm64: Fix lost Poly1305 carry when resuming NEON state

Jérémy Jean · Oct 9, 2026 · 1 files

7b817748bf08

lib/crypto: tests: Add Poly1305 split-update carry regression test

Eric Biggers · Oct 9, 2026 · 1 files

32d0771ef4ca

drm/amdgpu/userq: actually validate userq BOs

Benjamin Cheng · Oct 9, 2026 · 1 files

1c1e8c24d537

MAINTAINERS: add Gustavo Luiz Duarte as netconsole reviewer

Breno Leitao · Oct 9, 2026 · 1 files

8070ed578b6b

calipso: keep BIG TCP payload_len in calipso_skbuff_setattr()

Joas Antonio dos Santos · Oct 9, 2026 · 1 files

b3b974008388

tracing: Do not initialize tracefs work if tracing is disabled

Amit Machhiwal · Oct 9, 2026 · 1 files

aa07285705f8

net: stmmac: dwmac1000: clear the RGMII status interrupt

Igor Velkov · Oct 9, 2026 · 1 files

c17b44266a1f

ext4: free the sbi after a grace period

Christian Brauner · Oct 9, 2026 · 6 files

59e483739f2f

afs: free the super info after a grace period

Christian Brauner · Oct 9, 2026 · 2 files

bcec7fc2e224

9p: free the session after a grace period

Christian Brauner · Oct 9, 2026 · 2 files

2cd88c498ecf

eventfs: Free the eventfs_inode after an rcu grace period too

Christian Brauner · Oct 9, 2026 · 1 files

6e6928b39668

eventfs: free the eventfs_inode after an rcu grace period too

Christian Brauner · Oct 9, 2026 · 1 files

f0e48172a59e

ipc: drop the mqueue mount with kern_unmount() on setup failure

Christian Brauner · Oct 9, 2026 · 1 files

a96c5299bd73

unicode: free the map after a grace period

Christian Brauner · Oct 9, 2026 · 2 files

c01b091b0641

ntfs3: free the sbi after a grace period

Christian Brauner · Oct 9, 2026 · 2 files

56c3824de56b

ntfs3: free replaced mount options after a grace period

Christian Brauner · Oct 9, 2026 · 3 files

069403dff337

sched_ext: Fix use-after-free of a destroyed user DSQ by a deferred reenqueue

Tejun Heo · Oct 9, 2026 · 1 files

5e531d62f1f8

watch_queue: Fix note pool publication race in watch_queue_set_size()

Cen Zhang (Microsoft) · Oct 9, 2026 · 1 files

f6be9f558a83

ASoC: Intel: avs: Reset the stream unless it is already prepared

Sergey Tiraspolsky · Oct 10, 2026 · 1 files

7afc36c92a28

MAINTAINERS: update my email address

Andy Yan · Oct 10, 2026 · 1 files

0936bbd35a24

ASoC: stm32: spdifrx: fix synchronization state check

Avi Weiss · Oct 11, 2026 · 1 files

28d2905d77bc

exit: fix lost-update race on the child_subreaper bitfields

Nickolai Zeldovich · Oct 11, 2026 · 1 files

a291a5cf0023

fs: drop the smp_mb()s that mnt_get_count() made redundant

Christian Brauner · Oct 11, 2026 · 1 files

4c435828932b

ocfs2/dlm: Protect the recovery list during debugfs reads

Cen Zhang · Oct 11, 2026 · 3 files

6ac4544eff79

sched_ext: idle: Respect task affinity in restricted CPU selection

Hui Su · Oct 11, 2026 · 1 files

0f8b5d90d179

PCI: Ignore Immediate Readiness on Samsung 990 PRO and 990 EVO Plus NVMe

Alexander Gruhlke · Oct 11, 2026 · 1 files

e8df1d194c39

PCI: Don't treat ~0 as ready in pci_dev_wait() with RRS SV

Alexander Gruhlke · Oct 11, 2026 · 1 files

5bdeca322a6f

sched_ext: Fix the bypass dispatch claim for schedulers bypassed by an ancestor

Tejun Heo · Oct 11, 2026 · 1 files

dcf7f650a248

sched_ext: Propagate every bypass depth change to the descendants

Tejun Heo · Oct 11, 2026 · 1 files

52336337f1a0

tools: gpio: fix building from the top level with O=

Sasha Levin · Oct 11, 2026 · 1 files

a1ddc2721467

bootconfig: give the footer size static_assert a message

Sasha Levin · Oct 11, 2026 · 1 files

f1365f97fb74

samples: pidfd: fix userprogs typo

Sasha Levin · Oct 11, 2026 · 1 files

d65a459dbc9a

drm/amdgpu: report the BO alignment in bytes in GEM_LIST_HANDLES

Jesse Zhang · Oct 12, 2026 · 1 files

3c44cbcec5eb

drm/amdgpu: keep the eviction fence until the last handle is closed

Jesse Zhang · Oct 12, 2026 · 1 files

4505a262deae

x86/kcfi: Decode the kCFI check from the trap address

Kees Cook · Oct 12, 2026 · 1 files

41d1119e2f85

x86/kcfi: Emit the FineIBT paranoid "cs" prefix as a byte

Kees Cook · Oct 12, 2026 · 1 files

99ae7dc43924

ovl: reject lowerdir ending with unescaped backslash

Guanglei Zhu · Oct 12, 2026 · 1 files

195f3d74b5de

i2c: qcom-cci: Fix HALT_ACK reset request being dropped

Loic Poulain · Oct 12, 2026 · 1 files

98b6cf102b35

namei: test for a negative dentry the way traverse_mounts() does

Christian Brauner · Oct 12, 2026 · 1 files

d2ce8fcd778e

drm/xe: Bump LRU for external objects on exec and rebind

Thomas Hellström · Oct 12, 2026 · 3 files

7209846a169f

PCI/AER: Keep ANFE masked on Apple T2 Secure Enclave

Jason Perlow · Oct 12, 2026 · 3 files

18f5c699d1d0

sched_ext: Rename scx_reenq_wait_dispatching() to scx_wait_dispatching()

Kuba Piecuch · Oct 12, 2026 · 3 files

2935062be771

sched_ext: Wait for SCX_OPSS_DISPATCHING before moving tasks off DSQs

Kuba Piecuch · Oct 12, 2026 · 1 files

448e76cbdc66

drm/xe: skip eviction of a BO with no resource

Niranjana Vishwanathapura · Oct 12, 2026 · 1 files

9cd0df397a11

fs: pass flags to copy_fs()

Christian Brauner · Oct 12, 2026 · 1 files

d2bdb9b61b42

fs: let idle threads share init_fs

Christian Brauner · Oct 12, 2026 · 1 files

38d44f78f041

gpio: mxc: fix race between chained IRQ handler install and probe completion

Peng Fan · Oct 13, 2026 · 1 files

b7719c575dec

gpio: mxc: fix both_edges bit operations

Peng Fan · Oct 13, 2026 · 1 files

170aeff46fb5

gpio: mxc: fix wakeup_pads bit operations

Peng Fan · Oct 13, 2026 · 1 files

205cccd06e54

gpio: mxc: fix race between gpiochip registration and IRQ domain setup

Peng Fan · Oct 13, 2026 · 1 files

7cbaa0f4579f

entry: Account the deferred hrtimer rearm as hardirq context for lockdep

Mikhail Gavrilov · Oct 13, 2026 · 1 files

c9fc60c18b6d

ring-buffer: Skip si_mem_available() for persistent and remote buffers

Vincent Donnefort · Oct 13, 2026 · 1 files

13d530f2daed

ring-buffer: Use subbuf_order in available memory estimation

Vincent Donnefort · Oct 13, 2026 · 1 files

8642201f02e1

MAINTAINERS: Add myself as reviewer for the Rocket NPU driver

Heiko Stuebner · Oct 13, 2026 · 1 files

a244c241593b

tracing/histograms: Reject non-stacktrace fields for synthetic stacktrace fields

Lee Jones · Oct 13, 2026 · 1 files

2a31b5378c6d

ASoC: amd: yc: disable MSI on resume

Mario Limonciello · Oct 13, 2026 · 1 files

4bcfe2902199

iommupt/kunit: Use if_changed_rule for the kunit

Jason Gunthorpe · Oct 13, 2026 · 1 files

ec6b083915e8

scsi: bsg: Pass reply_len to bsg_setup_queue() to fit UFS ARPMB replies

Stanley Jhu · Oct 13, 2026 · 7 files

19ed235c1adc

printk: fix kernel-doc name for nbcon_write_context_is_braille

Muhammad Mahdi Amirpour · Oct 13, 2026 · 1 files

118a2cf4ced6

sched/core: Call wakeup_preempt() for queued tasks during class change

K Prateek Nayak · Oct 13, 2026 · 1 files

d8e5fc300229

nbcon/reboot: Switch NBCON consoles into the emergency mode in emergency_restart()

Petr Mladek · Oct 13, 2026 · 1 files

e76b36b4be71

perf: Fix perf_pmu_migrate_context() leaving events behind

Haris Okanovic · Oct 13, 2026 · 1 files

71caf7f84bd6

scsi: st: Fix use-after-free race between st_remove() and st_open()

Laurence Oberman · Oct 13, 2026 · 1 files

c347fef5f8f8

drm/panthor: fix immortalis condition

Erik Faye-Lund · Oct 14, 2026 · 1 files

66c658033d84

tracing: probes: error if BTF is required but unavailable

Martin Kaiser · Oct 14, 2026 · 1 files

851bb4a42991

gpio: kunit: fix GPIO device reference leak with __free()

Bartosz Golaszewski · Oct 14, 2026 · 1 files

bd22f7e63509

gpio: shared: fix use-after-free bug when adding shared proxies

Bartosz Golaszewski · Oct 14, 2026 · 1 files

cf73c3fc03c4

gpio: shared: gracefully handle no-device lookup of shared GPIOs

Bartosz Golaszewski · Oct 14, 2026 · 1 files

3ba149029a43

Revert "iommu/amd: Remove redundant check in irq_remapping_select()"

Joerg Roedel · Oct 14, 2026 · 3 files

69fbe94f80bc

namespace: a mount that copy_tree() leaves out can't take over a lock

Christian Brauner · Oct 14, 2026 · 1 files

eadfe727dd80

selftests/filesystems: test that a mntns file can't take over a lock

Christian Brauner · Oct 14, 2026 · 1 files

d33373c565af

i2c: xiic: restore non-managed runtime PM to fix clk WARN flood

Abdurrahman Hussain · Oct 14, 2026 · 1 files

c28846ca1ac6

gpiolib: fix memory leak in gpiod_set_array_value_complex() on error paths

Kent Gibson · Oct 15, 2026 · 1 files

dbc393f6f009

MAINTAINERS: drop KY from Hyper-V maintainers list

Wei Liu · Oct 15, 2026 · 1 files

e4c7c401c6b9

perf: Update cgroup time when rotating multiplexed events

Antoine Huret · Oct 15, 2026 · 1 files

3cc117514d69

tracing: Fix crash in print_graph_function_event()

Hao Ge · Oct 15, 2026 · 1 files

803aa6fc2dbe

tracing: Keep the predicate limit separate from program capacity

Taeyang Lee · Oct 15, 2026 · 1 files

c47a7b11bcb3

tracing: Check operator stack capacity before pushing

Taeyang Lee · Oct 15, 2026 · 1 files

59eb22641f0c

spi: imx: fix slab corruption from undersized DMA bounce buffers

Richard Leitner · Oct 15, 2026 · 1 files

519abe8d9acb

MAINTAINERS: remove myself

Darrick J. Wong · Oct 16, 2026 · 1 files

90201351a862

wifi: atk9k: Revert "wifi: ath9k: reject short WMI command responses"

Toke Høiland-Jørgensen · Oct 16, 2026 · 2 files

214897acc8c2

Revert "namei: don't reveal overmounted entries in refwalk"

Christian Brauner · Oct 16, 2026 · 1 files

5f339c46f153

printk: Postpone kthread startup

John Ogness · Oct 16, 2026 · 1 files

32c52ec87d62

x86/insn-eval: Fix shadowed segment index in get_seg_reg_override_idx()

Lukas Zobernig · Oct 17, 2026 · 2 files

7f9f2d6abc40

firewire: core: fix race condition in split transaction handling

Takashi Sakamoto · Oct 18, 2026 · 1 files

c03c1a14507d

Linux 7.3

Linus Torvalds · Oct 18, 2026 · 1 files