lists.openwall.net   lists  /  announce  owl-users  owl-dev  john-users  john-dev  passwdqc-users  yescrypt  popa3d-users  /  oss-security  kernel-hardening  musl  sabotage  tlsify  passwords  /  crypt-dev  xvendor  /  Bugtraq  Full-Disclosure  linux-kernel  linux-netdev  linux-ext4  linux-hardening  linux-cve-announce  PHC 
Open Source and information security mailing list archives
 
Hash Suite: Windows password security audit tool. GUI, reports in PDF.
[<prev] [next>] [thread-next>] [day] [month] [year] [list]
Message-ID: <20251021195021.492915002@linuxfoundation.org>
Date: Tue, 21 Oct 2025 21:50:09 +0200
From: Greg Kroah-Hartman <gregkh@...uxfoundation.org>
To: stable@...r.kernel.org
Cc: Greg Kroah-Hartman <gregkh@...uxfoundation.org>,
	patches@...ts.linux.dev,
	linux-kernel@...r.kernel.org,
	torvalds@...ux-foundation.org,
	akpm@...ux-foundation.org,
	linux@...ck-us.net,
	shuah@...nel.org,
	patches@...nelci.org,
	lkft-triage@...ts.linaro.org,
	pavel@...x.de,
	jonathanh@...dia.com,
	f.fainelli@...il.com,
	sudipm.mukherjee@...il.com,
	rwarsow@....de,
	conor@...nel.org,
	hargar@...rosoft.com,
	broonie@...nel.org,
	achill@...ill.org
Subject: [PATCH 6.6 000/105] 6.6.114-rc1 review

This is the start of the stable review cycle for the 6.6.114 release.
There are 105 patches in this series, all will be posted as a response
to this one.  If anyone has any issues with these being applied, please
let me know.

Responses should be made by Thu, 23 Oct 2025 19:49:51 +0000.
Anything received after that time might be too late.

The whole patch series can be found in one patch at:
	https://www.kernel.org/pub/linux/kernel/v6.x/stable-review/patch-6.6.114-rc1.gz
or in the git tree and branch at:
	git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-6.6.y
and the diffstat can be found below.

thanks,

greg k-h

-------------
Pseudo-Shortlog of commits:

Greg Kroah-Hartman <gregkh@...uxfoundation.org>
    Linux 6.6.114-rc1

Niklas Cassel <cassel@...nel.org>
    PCI: tegra194: Reset BARs when running in PCIe endpoint mode

Siddharth Vadapalli <s-vadapalli@...com>
    PCI: j721e: Fix programming sequence of "strap" settings

Siddharth Vadapalli <s-vadapalli@...com>
    PCI: j721e: Enable ACSPCIE Refclk if "ti,syscon-acspcie-proxy-ctrl" exists

Jakub Acs <acsjakub@...zon.de>
    mm/ksm: fix flag-dropping behavior in ksm_madvise

Namjae Jeon <linkinjeon@...nel.org>
    ksmbd: browse interfaces list on FSCTL_QUERY_INTERFACE_INFO IOCTL

Brian Norris <briannorris@...gle.com>
    PCI/sysfs: Ensure devices are powered for config reads (part 2)

Scott Mayhew <smayhew@...hat.com>
    nfsd: decouple the xprtsec policy check from check_nfsd_access()

Jedrzej Jagielski <jedrzej.jagielski@...el.com>
    ixgbevf: fix mailbox API compatibility by negotiating supported features

Jedrzej Jagielski <jedrzej.jagielski@...el.com>
    ixgbevf: fix getting link speed data for E610 devices

Piotr Kwapulinski <piotr.kwapulinski@...el.com>
    ixgbevf: Add support for Intel(R) E610 device

Piotr Kwapulinski <piotr.kwapulinski@...el.com>
    PCI: Add PCI_VDEVICE_SUB helper macro

Devarsh Thakkar <devarsht@...com>
    phy: cadence: cdns-dphy: Update calibration wait time for startup state machine

Theodore Ts'o <tytso@....edu>
    ext4: avoid potential buffer over-read in parse_apply_sb_mount_options()

Jan Kara <jack@...e.cz>
    vfs: Don't leak disconnected dentries on umount

Chuck Lever <chuck.lever@...cle.com>
    NFSD: Define a proc_layoutcommit for the FlexFiles layout type

Shashank A P <shashank.ap@...sung.com>
    fs: quota: create dedicated workqueue for quota_release_work

Kemeng Shi <shikemeng@...weicloud.com>
    quota: remove unneeded return value of register_quota_format

Xiao Liang <shaw.leon@...il.com>
    padata: Reset next CPU when reorder sequence wraps around

Darrick J. Wong <djwong@...nel.org>
    xfs: use deferred intent items for reaping crosslinked blocks

Sean Nyekjaer <sean@...nix.com>
    iio: imu: inv_icm42600: Avoid configuring if already pm_runtime suspended

Jean-Baptiste Maneyrol <jean-baptiste.maneyrol@....com>
    iio: imu: inv_icm42600: reorganize DMA aligned buffers in structure

Devarsh Thakkar <devarsht@...com>
    phy: cadence: cdns-dphy: Fix PLL lock and O_CMN_READY polling

Tomi Valkeinen <tomi.valkeinen@...asonboard.com>
    phy: cdns-dphy: Store hs_clk_rate and return it

Sean Nyekjaer <sean@...nix.com>
    iio: imu: inv_icm42600: Simplify pm_runtime setup

Bence Csókás <csokas.bence@...lan.hu>
    PM: runtime: Add new devm functions

Christoph Hellwig <hch@....de>
    xfs: fix log CRC mismatches between i386 and other architectures

Christoph Hellwig <hch@....de>
    xfs: rename the old_crc variable in xlog_recover_process

Sergey Bashirov <sergeybashirov@...il.com>
    NFSD: Fix last write offset handling in layoutcommit

Sergey Bashirov <sergeybashirov@...il.com>
    NFSD: Minor cleanup in layoutcommit processing

Sergey Bashirov <sergeybashirov@...il.com>
    NFSD: Rework encoding and decoding of nfsd4_deviceid

Ryusuke Konishi <konishi.ryusuke@...il.com>
    nilfs2: fix deadlock warnings caused by lock dependency in init_nilfs()

Darrick J. Wong <djwong@...nel.org>
    block: fix race between set_blocksize and read paths

Mark Rutland <mark.rutland@....com>
    arm64: errata: Apply workarounds for Neoverse-V3AE

Mark Rutland <mark.rutland@....com>
    arm64: cputype: Add Neoverse-V3AE definitions

Viacheslav Dubeyko <slava@...eyko.com>
    hfsplus: fix slab-out-of-bounds read in hfsplus_strcasecmp()

Xing Guo <higuoxing@...il.com>
    selftests: arg_parsing: Ensure data is flushed to disk before reading.

Thadeu Lima de Souza Cascardo <cascardo@...lia.com>
    HID: multitouch: fix name of Stylus input devices

Dmitry Torokhov <dmitry.torokhov@...il.com>
    HID: hid-input: only ignore 0 battery events for digitizers

Jiaming Zhang <r772577952@...il.com>
    ALSA: usb-audio: Fix NULL pointer deference in try_to_register_card

Andrii Nakryiko <andrii@...nel.org>
    selftests/bpf: make arg_parsing.c more robust to crashes

Youssef Samir <quic_yabdulra@...cinc.com>
    accel/qaic: Treat remaining == 0 as error in find_and_map_user_pages()

Randy Dunlap <rdunlap@...radead.org>
    ALSA: firewire: amdtp-stream: fix enum kernel-doc warnings

Vincent Guittot <vincent.guittot@...aro.org>
    sched/fair: Fix pelt lost idle time detection

Ingo Molnar <mingo@...nel.org>
    sched/balancing: Rename newidle_balance() => sched_balance_newidle()

Alok Tiwari <alok.a.tiwari@...cle.com>
    drm/rockchip: vop2: use correct destination rectangle height check

Timur Kristóf <timur.kristof@...il.com>
    drm/amd/powerplay: Fix CIK shutdown temperature

Zhanjun Dong <zhanjun.dong@...el.com>
    drm/i915/guc: Skip communication warning on reset in progress

Cristian Ciocaltea <cristian.ciocaltea@...labora.com>
    ASoC: nau8821: Add DMI quirk to bypass jack debounce circuit

Cristian Ciocaltea <cristian.ciocaltea@...labora.com>
    ASoC: nau8821: Generalize helper to clear IRQ status

Cristian Ciocaltea <cristian.ciocaltea@...labora.com>
    ASoC: nau8821: Cancel jdet_work before handling jack ejection

Christophe Leroy <christophe.leroy@...roup.eu>
    ASoC: codecs: Fix gain setting ranges for Renesas IDT821034 codec

Marek Vasut <marek.vasut@...lbox.org>
    drm/bridge: lt9211: Drop check for last nibble of version register

Fabian Vogt <fvogt@...e.de>
    riscv: kprobes: Fix probe address validation

Amit Chaudhary <achaudhary@...estorage.com>
    nvme-multipath: Skip nr_active increments in RETRY disposition

I Viswanath <viswanathiyyappan@...il.com>
    net: usb: lan78xx: fix use of improperly initialized dev->chipid in lan78xx_reset

Oleksij Rempel <o.rempel@...gutronix.de>
    net: usb: lan78xx: Add error handling to lan78xx_init_mac_address

Sabrina Dubroca <sd@...asysnail.net>
    tls: don't rely on tx_work during send()

Sabrina Dubroca <sd@...asysnail.net>
    tls: wait for pending async decryptions if tls_strp_msg_hold fails

Sabrina Dubroca <sd@...asysnail.net>
    tls: always set record_type in tls_process_cmsg

Sabrina Dubroca <sd@...asysnail.net>
    tls: wait for async encrypt in case of error during latter iterations of sendmsg

Sascha Hauer <s.hauer@...gutronix.de>
    net: tls: wait for async completion on last message

Sabrina Dubroca <sd@...asysnail.net>
    tls: trim encrypted message to match the plaintext on short splice

Alexey Simakov <bigalex934@...il.com>
    tg3: prevent use of uninitialized remote_adv and local_adv variables

Eric Dumazet <edumazet@...gle.com>
    tcp: fix tcp_tso_should_defer() vs large RTT

Raju Rangoju <Raju.Rangoju@....com>
    amd-xgbe: Avoid spurious link down messages during interface toggle

Dmitry Safonov <0x7f454c46@...il.com>
    net/ip6_tunnel: Prevent perpetual tunnel growth

Linmao Li <lilinmao@...inos.cn>
    r8169: fix packet truncation after S4 resume on RTL8168H/RTL8111H

Nicolas Dichtel <nicolas.dichtel@...nd.com>
    doc: fix seg6_flowlabel path

Yeounsu Moon <yyyynoom@...il.com>
    net: dlink: handle dma_map_single() failure properly

Marc Kleine-Budde <mkl@...gutronix.de>
    can: m_can: m_can_plat_remove(): add missing pm_runtime_disable()

Yuezhang Mo <Yuezhang.Mo@...y.com>
    dax: skip read lock assertion for read-only filesystems

Benjamin Tissoires <bentiss@...nel.org>
    HID: multitouch: fix sticky fingers

Kuen-Han Tsai <khtsai@...gle.com>
    usb: gadget: f_rndis: Refactor bind path to use __free()

Kuen-Han Tsai <khtsai@...gle.com>
    usb: gadget: f_ncm: Refactor bind path to use __free()

Kuen-Han Tsai <khtsai@...gle.com>
    usb: gadget: f_acm: Refactor bind path to use __free()

Kuen-Han Tsai <khtsai@...gle.com>
    usb: gadget: f_ecm: Refactor bind path to use __free()

Kuen-Han Tsai <khtsai@...gle.com>
    usb: gadget: Introduce free_usb_request helper

Kuen-Han Tsai <khtsai@...gle.com>
    usb: gadget: Store endpoint pointer in usb_request

Guoniu Zhou <guoniu.zhou@....com>
    media: nxp: imx8-isi: m2m: Fix streaming cleanup on release

Laurent Pinchart <laurent.pinchart@...asonboard.com>
    media: nxp: imx8-isi: Drop unused argument to mxc_isi_channel_chain()

Kaustabh Chakraborty <kauschluss@...root.org>
    drm/exynos: exynos7_drm_decon: remove ctx->suspended

Kaustabh Chakraborty <kauschluss@...root.org>
    drm/exynos: exynos7_drm_decon: properly clear channels during bind

Kaustabh Chakraborty <kauschluss@...root.org>
    drm/exynos: exynos7_drm_decon: fix uninitialized crtc reference in functions

Akhil P Oommen <akhilpo@....qualcomm.com>
    drm/msm/a6xx: Fix PDC sleep sequence

Konrad Dybcio <konrad.dybcio@...aro.org>
    drm/msm/adreno: De-spaghettify the use of memory barriers

Nam Cao <namcao@...utronix.de>
    eventpoll: Replace rwlock with spinlock

Huang Xiaojia <huangxiaojia2@...wei.com>
    epoll: Remove ep_scan_ready_list() in comments

Zenm Chen <zenmchen@...il.com>
    Bluetooth: btusb: Add USB ID 2001:332a for D-Link AX9U rev. A1

Rafael J. Wysocki <rafael.j.wysocki@...el.com>
    cpufreq: CPPC: Avoid using CPUFREQ_ETERNAL as transition delay

Mario Limonciello <mario.limonciello@....com>
    drm/amd: Check whether secure display TA loaded successfully

Gui-Dong Han <hanguidong02@...il.com>
    drm/amdgpu: use atomic functions with memory barriers for vm fault info

Tvrtko Ursulin <tvrtko.ursulin@...lia.com>
    drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies

Eugene Korenevsky <ekorenevsky@...yun.com>
    cifs: parse_dfs_referrals: prevent oob on malformed input

Celeste Liu <uwu@...lacanthus.name>
    can: gs_usb: increase max interface to U8_MAX

Celeste Liu <uwu@...lacanthus.name>
    can: gs_usb: gs_make_candev(): populate net_device->dev_port

Filipe Manana <fdmanana@...e.com>
    btrfs: do not assert we found block group item when creating free space tree

Boris Burkov <boris@....io>
    btrfs: fix incorrect readahead expansion length

Filipe Manana <fdmanana@...e.com>
    btrfs: fix clearing of BTRFS_FS_RELOC_RUNNING if relocation already running

Deepanshu Kartikey <kartikey406@...il.com>
    ext4: detect invalid INLINE_DATA + EXTENTS flag combination

Zhang Yi <yi.zhang@...wei.com>
    ext4: wait for ongoing I/O to complete before freeing blocks

Zhang Yi <yi.zhang@...wei.com>
    jbd2: ensure that all ongoing I/O complete before freeing blocks

Jaegeuk Kim <jaegeuk@...nel.org>
    f2fs: fix wrong block mapping for multi-devices

Oliver Upton <oliver.upton@...ux.dev>
    KVM: arm64: Prevent access to vCPU events before init

Yi Cong <yicong@...inos.cn>
    r8152: add error handling in rtl8152_driver_init

Shuhao Fu <sfual@....ust.hk>
    smb: client: Fix refcount leak for cifs_sb_tlink


-------------

Diffstat:

 Documentation/arch/arm64/silicon-errata.rst        |   2 +
 Documentation/networking/seg6-sysctl.rst           |   3 +
 Makefile                                           |   4 +-
 arch/arm64/Kconfig                                 |   1 +
 arch/arm64/include/asm/cputype.h                   |   2 +
 arch/arm64/kernel/cpu_errata.c                     |   1 +
 arch/arm64/kvm/arm.c                               |   6 +
 arch/riscv/kernel/probes/kprobes.c                 |  13 +-
 block/bdev.c                                       |  17 ++
 block/blk-zoned.c                                  |   5 +-
 block/fops.c                                       |  16 ++
 block/ioctl.c                                      |   6 +
 drivers/accel/qaic/qaic_control.c                  |   2 +-
 drivers/base/power/runtime.c                       |  44 ++++
 drivers/bluetooth/btusb.c                          |   2 +
 drivers/cpufreq/cppc_cpufreq.c                     |  14 +-
 drivers/gpu/drm/amd/amdgpu/amdgpu_amdkfd_gpuvm.c   |   5 +-
 drivers/gpu/drm/amd/amdgpu/amdgpu_psp.c            |   2 +-
 drivers/gpu/drm/amd/amdgpu/gmc_v7_0.c              |   7 +-
 drivers/gpu/drm/amd/amdgpu/gmc_v8_0.c              |   7 +-
 .../gpu/drm/amd/pm/powerplay/hwmgr/smu7_hwmgr.c    |   3 +-
 drivers/gpu/drm/bridge/lontium-lt9211.c            |   3 +-
 drivers/gpu/drm/exynos/exynos7_drm_decon.c         |  98 ++++-----
 drivers/gpu/drm/i915/gt/uc/intel_guc_ct.c          |   9 +-
 drivers/gpu/drm/msm/adreno/a6xx_gmu.c              |  38 ++--
 drivers/gpu/drm/msm/adreno/a6xx_gmu.h              |   6 +
 drivers/gpu/drm/msm/adreno/a6xx_gpu.c              |  10 +-
 drivers/gpu/drm/rockchip/rockchip_drm_vop2.c       |   2 +-
 drivers/gpu/drm/scheduler/sched_main.c             |  13 +-
 drivers/hid/hid-input.c                            |   5 +-
 drivers/hid/hid-multitouch.c                       |  28 +--
 drivers/iio/imu/inv_icm42600/inv_icm42600.h        |   8 +-
 drivers/iio/imu/inv_icm42600/inv_icm42600_core.c   |  35 ++--
 .../media/platform/nxp/imx8-isi/imx8-isi-core.h    |   2 +-
 drivers/media/platform/nxp/imx8-isi/imx8-isi-hw.c  |   2 +-
 drivers/media/platform/nxp/imx8-isi/imx8-isi-m2m.c | 225 +++++++++------------
 .../media/platform/nxp/imx8-isi/imx8-isi-pipe.c    |   2 +-
 drivers/net/can/m_can/m_can_platform.c             |   2 +-
 drivers/net/can/usb/gs_usb.c                       |  23 +--
 drivers/net/ethernet/amd/xgbe/xgbe-drv.c           |   1 -
 drivers/net/ethernet/amd/xgbe/xgbe-mdio.c          |   1 +
 drivers/net/ethernet/broadcom/tg3.c                |   5 +-
 drivers/net/ethernet/dlink/dl2k.c                  |  23 ++-
 drivers/net/ethernet/intel/ixgbevf/defines.h       |   6 +-
 drivers/net/ethernet/intel/ixgbevf/ipsec.c         |  10 +
 drivers/net/ethernet/intel/ixgbevf/ixgbevf.h       |  13 +-
 drivers/net/ethernet/intel/ixgbevf/ixgbevf_main.c  |  46 ++++-
 drivers/net/ethernet/intel/ixgbevf/mbx.h           |   8 +
 drivers/net/ethernet/intel/ixgbevf/vf.c            | 194 +++++++++++++++---
 drivers/net/ethernet/intel/ixgbevf/vf.h            |   5 +-
 drivers/net/ethernet/realtek/r8169_main.c          |   5 +-
 drivers/net/usb/lan78xx.c                          |  38 +++-
 drivers/net/usb/r8152.c                            |   7 +-
 drivers/nvme/host/multipath.c                      |   6 +-
 drivers/pci/controller/cadence/pci-j721e.c         |  64 +++++-
 drivers/pci/controller/dwc/pcie-tegra194.c         |  10 +
 drivers/pci/pci-sysfs.c                            |  10 +-
 drivers/phy/cadence/cdns-dphy.c                    | 133 +++++++++---
 drivers/usb/gadget/function/f_acm.c                |  42 ++--
 drivers/usb/gadget/function/f_ecm.c                |  48 ++---
 drivers/usb/gadget/function/f_ncm.c                |  78 +++----
 drivers/usb/gadget/function/f_rndis.c              |  85 ++++----
 drivers/usb/gadget/udc/core.c                      |   3 +
 fs/btrfs/extent_io.c                               |   2 +-
 fs/btrfs/free-space-tree.c                         |  15 +-
 fs/btrfs/relocation.c                              |  13 +-
 fs/dax.c                                           |   2 +-
 fs/dcache.c                                        |   2 +
 fs/eventpoll.c                                     | 145 +++----------
 fs/ext4/ext4_jbd2.c                                |  11 +-
 fs/ext4/inode.c                                    |   8 +
 fs/ext4/super.c                                    |  17 +-
 fs/f2fs/data.c                                     |   2 +-
 fs/hfsplus/unicode.c                               |  24 +++
 fs/jbd2/transaction.c                              |  13 +-
 fs/nfsd/blocklayout.c                              |   5 +-
 fs/nfsd/blocklayoutxdr.c                           |   7 +-
 fs/nfsd/export.c                                   |  60 +++++-
 fs/nfsd/export.h                                   |   2 +
 fs/nfsd/flexfilelayout.c                           |   8 +
 fs/nfsd/flexfilelayoutxdr.c                        |   3 +-
 fs/nfsd/nfs4layouts.c                              |   1 -
 fs/nfsd/nfs4proc.c                                 |  34 ++--
 fs/nfsd/nfs4xdr.c                                  |  14 +-
 fs/nfsd/nfsfh.c                                    |  12 +-
 fs/nfsd/xdr4.h                                     |  36 +++-
 fs/nilfs2/the_nilfs.c                              |   3 -
 fs/ocfs2/super.c                                   |   6 +-
 fs/quota/dquot.c                                   |  13 +-
 fs/quota/quota_v1.c                                |   3 +-
 fs/quota/quota_v2.c                                |   9 +-
 fs/smb/client/inode.c                              |   6 +-
 fs/smb/client/misc.c                               |  17 ++
 fs/smb/client/smb2ops.c                            |   8 +-
 fs/smb/server/ksmbd_netlink.h                      |   3 +-
 fs/smb/server/server.h                             |   1 +
 fs/smb/server/smb2pdu.c                            |   4 +
 fs/smb/server/transport_ipc.c                      |   1 +
 fs/smb/server/transport_tcp.c                      |  67 +++---
 fs/smb/server/transport_tcp.h                      |   1 +
 fs/xfs/libxfs/xfs_log_format.h                     |  30 ++-
 fs/xfs/scrub/reap.c                                |  19 +-
 fs/xfs/xfs_log.c                                   |   8 +-
 fs/xfs/xfs_log_priv.h                              |   4 +-
 fs/xfs/xfs_log_recover.c                           |  34 +++-
 fs/xfs/xfs_ondisk.h                                |   2 +
 include/linux/cpufreq.h                            |   3 +
 include/linux/mm.h                                 |   2 +-
 include/linux/pci.h                                |  14 ++
 include/linux/pm_runtime.h                         |   4 +
 include/linux/quota.h                              |   2 +-
 include/linux/usb/gadget.h                         |  25 +++
 include/net/ip_tunnels.h                           |  15 ++
 kernel/padata.c                                    |   6 +-
 kernel/sched/fair.c                                |  38 ++--
 mm/shmem.c                                         |   7 +-
 net/ipv4/ip_tunnel.c                               |  14 --
 net/ipv4/tcp_output.c                              |  19 +-
 net/ipv6/ip6_tunnel.c                              |   3 +-
 net/tls/tls_main.c                                 |   7 +-
 net/tls/tls_sw.c                                   |  33 ++-
 rust/bindings/bindings_helper.h                    |   2 +
 rust/bindings/lib.rs                               |   1 +
 sound/firewire/amdtp-stream.h                      |   2 +-
 sound/soc/codecs/idt821034.c                       |  12 +-
 sound/soc/codecs/nau8821.c                         |  53 +++--
 sound/usb/card.c                                   |  10 +-
 .../testing/selftests/bpf/prog_tests/arg_parsing.c |  12 +-
 128 files changed, 1549 insertions(+), 924 deletions(-)



Powered by blists - more mailing lists

Powered by Openwall GNU/*/Linux Powered by OpenVZ