6.18.40longterm
Fixed
- RDMA/bnxt_re: Avoid repeated requests to allocate WC pages
- RDMA/bnxt_re: Initialize dpi variable to zero
- ksmbd: fix durable reconnect double-bind race in ksmbd_reopen_durable_fd
- perf callchain: Handle multiple address spaces
- perf inject: With --convert-callchain ignore the dummy event for dwarf stacks
- PCI: Fix Resizable BAR restore order
- PCI: Fix BAR resize rollback path overwriting ret
- perf symbol: Fix ENOENT case for filename__read_build_id
- pinctrl: airoha: fix pinctrl function mismatch issue
- bpf: Reject BPF_MAP_TYPE_INODE_STORAGE creation if BPF LSM is uninitialized
- iommufd: Move vevent memory allocation outside spinlock
- iommufd: Propagate allocation failure in iommufd_veventq_deliver_fetch()
- KVM: arm64: nv: Re-translate VNCR before injecting abort
- KVM: arm64: Fix propagation of TLBI level in kvm_pgtable_stage2_relax_perms()
- KVM: arm64: Ensure level is always initialized when relaxing perms
- btrfs: fix incorrect buffered IO fallback for append direct writes
- btrfs: fix false IO failure after falling back to buffered write
- crypto: qat - fix restarting state leak on allocation failure
- crypto: atmel-sha204a - fail on hwrng registration error in probe path
- usb: gadget: f_fs: Tie read_buffer lifetime to ffs_epfile
The 118 most recent commits in this release — the full changelog is longer:
- Linux 6.18.40
- RDMA/bnxt_re: Avoid repeated requests to allocate WC pages
- RDMA/bnxt_re: Initialize dpi variable to zero
- ksmbd: fix durable reconnect double-bind race in ksmbd_reopen_durable_fd
- perf callchain: Handle multiple address spaces
- seqlock: fix scoped_seqlock_read kernel-doc
- perf inject: With --convert-callchain ignore the dummy event for dwarf stacks
- PCI: Fix Resizable BAR restore order
- PCI: Fix BAR resize rollback path overwriting ret
- perf symbol: Fix ENOENT case for filename__read_build_id
- pinctrl: airoha: fix pinctrl function mismatch issue
- bpf: Reject BPF_MAP_TYPE_INODE_STORAGE creation if BPF LSM is uninitialized
- iommufd: Move vevent memory allocation outside spinlock
- iommufd: Propagate allocation failure in iommufd_veventq_deliver_fetch()
- KVM: arm64: nv: Re-translate VNCR before injecting abort
- KVM: arm64: Deduplicate ASID retrieval code
- samples/damon/mtier: fail early if address range parameters are invalid
- mm/damon/core: trace esz at first setup
- mm/damon/core: always put unsuccessfully committed target pids
- KVM: arm64: Fix propagation of TLBI level in kvm_pgtable_stage2_relax_perms()
- KVM: arm64: Ensure level is always initialized when relaxing perms
- btrfs: fix incorrect buffered IO fallback for append direct writes
- btrfs: fix false IO failure after falling back to buffered write
- crypto: qat - fix restarting state leak on allocation failure
- btrfs: remove folio parameter from ordered io related functions
- btrfs: replace for_each_set_bit() with for_each_set_bitmap()
- btrfs: concentrate the error handling of submit_one_sector()
- crypto: atmel-sha204a - fail on hwrng registration error in probe path
- usb: gadget: f_fs: Tie read_buffer lifetime to ffs_epfile
- usb: gadget: f_fs: initialize reset_work at allocation time
- functionfs: use spinlock for FFS_DEACTIVATED/FFS_CLOSING transitions
- functionfs: switch to simple_remove_by_name()
- functionfs: don't bother with ffs->ref in ffs_data_{opened,closed}()
- functionfs: don't abuse ffs_data_closed() on fs shutdown
- new helper: simple_remove_by_name()
- usb: atm: ueagle-atm: wait for pre-firmware load in .disconnect()
- usb: atm: ueagle-atm: remove function entry/exit debug messages
- usb: atm: ueagle-atm: use dev_dbg() for 'device found' message
- usb: dwc3: fix dwc3_readl() and dwc3_writel() calls in dwc3_ulpi_setup()
- usb: dwc3: Support USB3340x ULPI PHY high-speed negotiation.
- xfs: use bio_reuse in the zone GC code
- xfs: only log freed extents for the current RTG in zoned growfs
- xfs: add a xfs_groups_to_rfsbs helper
- bpf: Allow LPM map access from sleepable BPF programs
- bpf: Consistently use bpf_rcu_lock_held() everywhere
- bpf: Keep dynamic inner array lookups nullable
- bpf: Introduce struct bpf_map_desc in verifier
- bpf: Consistently use reg_state() for register access in the verifier
- xfs: initialize iomap->flags earlier in xfs_bmbt_to_iomap
- hfs/hfsplus: fix u32 overflow in check_and_correct_requested_length
- hfs/hfsplus: prevent getting negative values of offset/length
- proc: protect ptrace_may_access() with exec_update_lock (part 1)
- seqlock: Change do_task_stat() to use scoped_seqlock_read()
- seqlock: Introduce scoped_seqlock_read()
- proc: protect ptrace_may_access() with exec_update_lock (FD links)
- proc: rename proc_setattr to proc_nochmod_setattr
- ksmbd: validate NTLMv2 response before updating session key
- ksmbd: Use HMAC-MD5 library for NTLMv2
- ksmbd: Use HMAC-SHA256 library for message signing and key generation
- ksmbd: Use SHA-512 library for SMB3.1.1 preauth hash
- ksmbd: track the connection owning a byte-range lock
- ksmbd: centralize ksmbd_conn final release to plug transport leak
- ksmbd: fix path resolution in ksmbd_vfs_kern_path_create
- ksmbd: use opener credentials for FSCTL mutations
- cifs: SMB1 split: Add some #includes
- cifs: SMB1 split: Rename cifstransport.c
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_new_connection_cb()
- Bluetooth: 6lowpan: fix cyclic locking warning on netdev unregister
- media: nxp: imx8-isi: Fix use-after-free on remove
- media: nxp: imx8-isi: use devm_pm_runtime_enable() to simplify code
- crypto: qat - fix VF2PF work teardown race in adf_disable_sriov()
- staging: rtl8723bs: fix OOB reads in rtw_get_sec_ie(), rtw_get_wapi_ie(), and rtw_get_wps_attr()
- staging: rtl8723bs: fix spaces around binary operators
- staging: rtl8723bs: core: move constants to right side in comparison
- PCI: Skip Resizable BAR restore on read error
- PCI: Move Resizable BAR code to rebar.c
- PCI: Add kerneldoc for pci_resize_resource()
- PCI: Fix restoring BARs on BAR resize rollback path
- PCI: Free saved list without holding pci_bus_sem
- PCI: Try BAR resize even when no window was released
- PCI: Change pci_dev variable from 'bridge' to 'dev'
- PCI/IOV: Adjust ->barsz[] when changing BAR size
- PCI: imx6: Configure REF_USE_PAD before PHY reset for i.MX95
- PCI: imx6: Fix reference clock source selection for i.MX95
- binder: cache secctx size before release zeroes it
- binder: Use LIST_HEAD() to initialize on stack list head
- vfio/mlx5: Fix racy bitfields and tighten struct layout
- ALSA: hda/tas2781: Cancel async firmware request at unbind
- firmware_loader: Add cancel helper for async requests
- ALSA: scarlett2: Update offsets for 2i2 Gen 4 firmware 2417
- ALSA: scarlett2: Allow selecting config_set by firmware version
- iio: hid-sensor-rotation: Fix stale or zero output when reading raw values
- ACPI: NFIT: core: Fix possible deadlock and missing notifications
- ACPI: NFIT: core: Use devm_acpi_install_notify_handler()
- ACPI: bus: Introduce devm_acpi_install_notify_handler()
- ACPI: driver: Check ACPI_COMPANION() against NULL during probe
- ACPI: NFIT: core: Fix acpi_nfit_init() error cleanup
- crypto: xilinx-trng - Remove crypto_rng interface
- mmc: sdhci-esdhc-imx: fix resume error handling
- mmc: sdhci-esdhc-imx: make non-fatal errors non-blocking in suspend
- mmc: sdhci-esdhc-imx: use pm_runtime_resume_and_get() in suspend
- mmc: sdhci-esdhc-imx: disable irq during suspend to fix unhandled interrupt
- mmc: sdhci-esdhc-imx: fix esdhc_change_pinstate() to allow default state restore
- mmc: sdhci-esdhc-imx: restore DLL override for DDR modes on resume
- mmc: sdhci-esdhc-imx: remove unnecessary mmc_card_wake_sdio_irq check for tuning save/restore
- mmc: sdhci-of-dwcmshc: check bus clock enable result in the probe() method
- mmc: block: fix RPMB device unregister ordering
- mtd: rawnand: lpc32xx_slc: fail DMA transfer on completion timeout
- mtd: rawnand: lpc32xx_mlc: fail DMA transfers on timeout
- mtd: rawnand: fsl_ifc: return errors for failed page reads
- mmc: vub300: defer reset until cmd_mutex is unlocked
- mtd: mchp23k256: use SPI match data for chip caps
- mtd: onenand: samsung: report DMA completion timeouts
- wifi: mwifiex: fix permanently busy scans after multiple roam iterations
- wifi: mac80211: free ack status frame on TX header build failure
- wifi: ieee80211: validate MLE common info length
- wifi: cfg80211: validate EHT MLE before MLD ID read
- powerpc/spufs: fix out-of-bounds access in spufs_mem_mmap_access()