6.1.178longterm
Fixed
- ALSA: seq: Fix uninitialised heap leak in snd_seq_event_dup()
- iio: imu: inv_icm42600: fix timestamp clock period by using lower value
- iio: invensense: fix odr switching to same value
- iio: imu: inv_mpu6050: fix frequency setting when chip is off
- virtio_ring: fix syncs DMA memory with different direction
- cifs: fix lock ordering while disabling multichannel
- driver core: Fix missing jiffies conversion in deferred_probe_extend_timeout()
- writeback: Fix use after free in inode_switch_wbs_work_fn()
- Bluetooth: L2CAP: fix tx ident leak for commands without a response
- Bluetooth: L2CAP: Fix regressions caused by reusing ident
- btrfs: fix incorrect buffered IO fallback for append direct writes
- btrfs: fix false IO failure after falling back to buffered write
- regulator: scmi: fix of_node refcount leak in scmi_regulator_probe()
- audit: fix potential integer overflow in audit_log_n_hex()
- crypto: qat - validate RSA CRT component lengths
- crypto: qat - fix restarting state leak on allocation failure
- usb: gadget: f_fs: Tie read_buffer lifetime to ffs_epfile
- usb: typec: tcpm: Fix VDM type for Enter Mode commands
- usb: atm: ueagle-atm: wait for pre-firmware load in .disconnect()
- usb: iowarrior: remove inherent race with minor number
The 113 most recent commits in this release — the full changelog is longer:
- Linux 6.1.178
- perf/x86/amd/core: Always use the NMI latency mitigation
- ALSA: seq: Fix uninitialised heap leak in snd_seq_event_dup()
- iio: imu: inv_icm42600: fix timestamp clock period by using lower value
- ALSA: seq: Check UMP support for midi_version change
- ALSA: seq: Skip event type filtering for UMP events
- bluetooth/hci: disallow setting handle bigger than HCI_CONN_HANDLE_MAX
- Bluetooth: Ignore too large handle values in BIG
- iio: invensense: fix odr switching to same value
- iio: imu: inv_mpu6050: fix frequency setting when chip is off
- virtio_ring: fix syncs DMA memory with different direction
- cifs: fix lock ordering while disabling multichannel
- tools/virtio: Add dma sync api for virtio test
- ALSA: seq: Avoid confusion of aligned read size
- driver core: Guard deferred probe timeout extension with delayed_work_pending()
- driver core: Fix missing jiffies conversion in deferred_probe_extend_timeout()
- jiffies: Cast to unsigned long in secs_to_jiffies() conversion
- jiffies: Define secs_to_jiffies()
- writeback: drop now-unnecessary rcu_barrier() in cgroup_writeback_umount()
- writeback: Fix use after free in inode_switch_wbs_work_fn()
- Bluetooth: L2CAP: fix tx ident leak for commands without a response
- Bluetooth: L2CAP: Fix regressions caused by reusing ident
- seqlock: fix scoped_seqlock_read kernel-doc
- KVM: Move kvm_io_bus_get_dev() locking responsibilities to callers
- mm/damon/sysfs-schemes: fix dir put orders in access_pattern_add_dirs()
- mm/damon/core: make charge_addr_from aware of end-address exclusivity
- btrfs: fix incorrect buffered IO fallback for append direct writes
- btrfs: fix false IO failure after falling back to buffered write
- regulator: scmi: fix of_node refcount leak in scmi_regulator_probe()
- regulator: scmi: Simplify with scoped for each OF child loop
- audit: fix potential integer overflow in audit_log_n_hex()
- audit: add audit_log_nf_skb helper function
- crypto: qat - validate RSA CRT component lengths
- btrfs: check and set EXTENT_DELALLOC_NEW before clearing EXTENT_DELALLOC
- crypto: qat - fix restarting state leak on allocation failure
- usb: gadget: f_fs: Tie read_buffer lifetime to ffs_epfile
- nvmet: remove superfluous initialization
- crypto: atmel-sha204a - drop hwrng quality reduction for ATSHA204A
- crypto: atmel - Drop explicit initialization of struct i2c_device_id::driver_data to 0
- crypto: atmel-sha204a - Mark OF related data as maybe unused
- usb: gadget: f_fs: initialize reset_work at allocation time
- usb: typec: tcpm: Fix VDM type for Enter Mode commands
- usb: atm: ueagle-atm: wait for pre-firmware load in .disconnect()
- usb: iowarrior: remove inherent race with minor number
- bpf: Allow LPM map access from sleepable BPF programs
- bpf: Consistently use bpf_rcu_lock_held() everywhere
- hfs/hfsplus: fix u32 overflow in check_and_correct_requested_length
- hfs/hfsplus: prevent getting negative values of offset/length
- serial: 8250_mid: Disable DMA for selected platforms
- serial: 8250_mid: Remove 8250_pci usage
- HID: appleir: fix UAF on pending key_up_timer in remove()
- treewide: Switch/rename to timer_delete_sync
- proc: protect ptrace_may_access() with exec_update_lock (part 1)
- seqlock: Change do_task_stat() to use scoped_seqlock_read()
- seqlock: Introduce scoped_seqlock_read()
- HID: multitouch: fix out-of-bounds bit access on mt_io_flags
- HID: add haptics page defines
- proc: protect ptrace_may_access() with exec_update_lock (FD links)
- proc: rename proc_setattr to proc_nochmod_setattr
- proc: Move fdinfo PTRACE_MODE_READ check into the inode .permission operation
- proc: use generic setattr() for /proc/$PID/net
- writeback: fix race between cgroup_writeback_umount() and inode_switch_wbs()
- writeback: Avoid contention on wb->list_lock when switching inodes
- ksmbd: track the connection owning a byte-range lock
- ksmbd: centralize ksmbd_conn final release to plug transport leak
- ksmbd: destroy async_ida in ksmbd_conn_free()
- ksmbd: fix mechToken leak when SPNEGO decode fails after token alloc
- ksmbd: fix use-after-free in __ksmbd_close_fd() via durable scavenger
- smb: move smb_version_values to common/smbglob.h
- smb: move some duplicate definitions to common/cifsglob.h
- ksmbd: use opener credentials for FSCTL mutations
- smb: client: resolve SWN tcon from live registrations
- cifs: Add tracing for the cifs_tcon struct refcounting
- cifs: Fix reacquisition of volume cookie on still-live connection
- cifs: after disabling multichannel, mark tcon for reconnect
- cifs: handle when server stops supporting multichannel
- Bluetooth: hci_core: Enable buffer flow control for SCO/eSCO
- Bluetooth: L2CAP: cancel pending_rx_work before taking conn->lock
- Bluetooth: L2CAP: Fix deadlock in l2cap_conn_del()
- Bluetooth: L2CAP: Fix not tracking outstanding TX ident
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_new_connection_cb()
- Bluetooth: 6lowpan: fix cyclic locking warning on netdev unregister
- Bluetooth: L2CAP: Fix slab-use-after-free in l2cap_connect()
- Bluetooth: Remove BT_HS
- Bluetooth: Make handle of hci_conn be unique
- netfilter: ebtables: zero chainstack array
- netfilter: ebtables: Use vmalloc_array() to improve code
- mm: shrinker: fix NULL pointer dereference in debugfs
- mm: shrinkers: fix debugfs file permissions
- gpio: sch: use raw_spinlock_t in the irq startup path
- coresight: etb10: restore atomic_t for shared reading state
- mm/shrinker: do not hold RCU lock in shrinker_debugfs_count_show()
- mm: shrinker: remove redundant shrinker_rwsem in debugfs operations
- PCI: Skip Resizable BAR restore on read error
- PCI: Move Resizable BAR code to rebar.c
- PCI: Add kerneldoc for pci_resize_resource()
- PCI: Fix restoring BARs on BAR resize rollback path
- PCI: Free saved list without holding pci_bus_sem
- PCI: Prevent resource tree corruption when BAR resize fails
- crypto: qat - fix VF2PF work teardown race in adf_disable_sriov()
- staging: rtl8723bs: fix OOB reads in rtw_get_sec_ie(), rtw_get_wapi_ie(), and rtw_get_wps_attr()
- staging: rtl8723bs: fix spaces around binary operators
- staging: rtl8723bs: core: move constants to right side in comparison
- PCI: mediatek: Fix IRQ domain leak when port fails to enable
- PCI: mediatek: Use generic MACRO for TPVPERL delay
- PCI: mediatek: Convert bool to single quirks entry and bitmap
- PCI: controller: Use dev_fwnode() instead of of_fwnode_handle()
- staging: rtl8723bs: fix heap buffer overflow in rtw_cfg80211_set_wpa_ie()
- staging: rtl8723bs: Fix space issues
- staging: rtl8723bs: Fix indentation issues
- PCI: imx6: Fix IMX6SX_GPR12_PCIE_TEST_POWERDOWN handling
- vfio/mlx5: Fix racy bitfields and tighten struct layout
- PCI: altera: Fix resource leaks on probe failure