Linux Kernel 6.6.148

The 120 most recent commits in this release — the full changelog is longer:

• Linux 6.6.148
• KVM: SVM: Bump asid_generation on CPU online to avoid ASID collision after hotplug
• rxrpc: Disable IRQ, not BH, to take the lock for ->attend_link
• udmabuf: Ensure to perform cache synchronisation in begin_cpu_udmabuf()
• ASoC: mediatek: mt8195: Set ETDM1/2 IN/OUT to COMP_DUMMY()
• ASoC: mediatek: mt8195: Add platform entry for ETDM1_OUT_BE dai link
• mm/damon/core: disallow overlapping input ranges for damon_set_regions()
• mm/damon/core: validate ranges in damon_set_regions()
• coredump: fix pidfs file refcount leak in umh_coredump_setup
• KVM: x86: Only reset TSC Deadline Timer in apic_timer_expired on KVM_RUN
• KVM: Introduce vcpu->wants_to_run
• fs/resctrl: Fix double-add of pseudo-locked region's RMID to free list
• net: ipa: fix SMEM state handle leaks in SMP2P init
• net: macb: drop in-flight Tx SKBs on close
• ata: libata-core: Reject an invalid concurrent positioning ranges count
• octeontx2-pf: fix SQB pointer leak on init failure
• ipmi: fix refcount leak in i_ipmi_request()
• bootconfig: fix NULL-pointer arithmetic in xbc_snprint_cmdline()
• bootconfig: move xbc_snprint_cmdline() to lib/bootconfig.c
• bootconfig: do not put quotes on cmdline items unless necessary
• octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF
• gpio: mt7621: avoid corruption of shared interrupt trigger state
• net: ip6_tunnel: require CAP_NET_ADMIN in the device netns for changelink
• gpio: tegra: do not call pinctrl for GPIO direction
• pinctrl: remove pinctrl_gpio_direction_output()
• net: mana: Validate the packet length reported by the NIC
• locking/rt: Fix the incorrect RCU protection in rt_spin_unlock()
• wifi: libertas_tf: fix use-after-free in lbtf_free_adapter()
• tracing/user_events: Fix use-after-free in user_event_mm_dup()
• workqueue: Add system_percpu_wq and system_dfl_wq
• workqueue: Factor out init_cpu_worker_pool()
• Input: ims-pcu - fix firmware leak in async update
• firmware_loader: introduce __free() cleanup hanler
• dm-verity: make error counter atomic
• dm-verity: avoid double increment of &use_bh_wq_enabled
• ovl: use linked upper dentry in copy-up tmpfile
• NFS: Charge unstable writes by request size, not folio size
• nfs: remove dead code for the old swap over NFS implementation
• i2c: imx: fix locked bus on SMBus block-read of 0 (atomic)
• i2c: imx: separate atomic, dma and non-dma use case
• platform/x86: dell-laptop: fix missing cleanups in init error path
• platform/x86: dell-smbios: Move request functions for reuse
• dmaengine: dw-edma-pcie: Reject devices without driver data
• dmaengine: dw-edma: Fix confusing cleanup.h syntax
• dma: dw-edma: Fix build warning in dw_edma_pcie_probe()
• taskstats: retain dead thread stats in TGID queries
• taskstats: fill_stats_for_tgid: use for_each_thread()
• mtd: rawnand: Pause continuous reads at block boundaries
• mtd: rawnand: Ensure all continuous terms are always in sync
• mtd: rawnand: Add a helper for calculating a page index
• mm/mm_init: fix pageblock migratetype for ZONE_DEVICE compound pages
• SUNRPC: Return an error from xdr_buf_to_bvec() on overflow
• SUNRPC: Add helpers to convert xdr_buf byte ranges to scatterlists
• sunrpc: allocate a separate bvec array for socket sends
• NFSD: pass nfsd_file to nfsd_iter_read()
• netfilter: nft_fib: reject fib expression on the netdev egress hook
• netfilter: nf_tables: remove register tracking infrastructure
• netfilter: nf_tables: Remove unused nft_reduce_is_readonly()
• netfilter: nf_conntrack_sip: validate skb_dst() before accessing it
• netfilter: nf_conntrack_sip: remove net variable shadowing
• selinux: avoid sk_socket dereference in selinux_sctp_bind_connect()
• lsm: infrastructure management of the sock security
• netfilter: nft_set_pipapo: don't leak bad clone into future transaction
• netfilter: nft_set_pipapo: move cloning of match info to insert/removal path
• netfilter: nft_set_pipapo: prepare pipapo_get helper for on-demand clone
• netfilter: nft_set_pipapo: merge deactivate helper into caller
• netfilter: nft_set_pipapo: prepare walk function for on-demand clone
• netfilter: nft_set_pipapo: make pipapo_clone helper return NULL
• netfilter: nft_set_pipapo: move prove_locking helper around
• netfilter: nft_set_pipapo: use GFP_KERNEL for insertions
• ASoC: mediatek: mt8183: Check runtime resume during probe
• ASoC: mediatek: mt8192: Check runtime resume during probe
• ASoC: mediatek: mt8192-afe-pcm: Simplify probe() with local dev variable
• ASoC: mediatek: Use common mtk_afe_pcm_platform with common probe cb
• ASoC: mediatek: mt8192-afe-pcm: Simplify with dev_err_probe()
• ASoC: mediatek: mt8192-afe-pcm: Convert to devm_pm_runtime_enable()
• ASoC: mediatek: mt8195: Remove afe-dai component and rework codec link
• fbdev: efifb: fix memory leak in efifb_probe()
• fbdev/efifb: Replace references to global screen_info by local pointer
• octeontx2-vf: clear stale mailbox IRQ state before request_irq()
• octeontx2-pf: clear stale mailbox IRQ state before request_irq()
• octeontx2: Annotate mmio regions as __iomem
• VDUSE: avoid leaking information to userspace
• vduse: take out allocations from vduse_dev_alloc_coherent
• vduse: remove unused vaddr parameter of vduse_domain_free_coherent
• vduse: Use fixed 4KB bounce pages for non-4KB page size
• rxrpc: Fix socket notification race
• rxrpc: Fix notification vs call-release vs recvmsg
• rxrpc: Use irq-disabling spinlocks between app and I/O thread
• rxrpc: Don't need barrier for ->tx_bottom and ->acks_hard_ack
• tipc: restrict socket queue dumps in enqueue tracepoints
• fbcon: Use correct type for vc_resize() return value
• fbcon: Rename struct fbcon_ops to struct fbcon_par
• rxrpc: serialize kernel accept preallocation with socket teardown
• rxrpc: Pull out certain app callback funcs into an ops table
• afs: Turn the afs_addr_list address array into an array of structs
• afs: Annotate struct afs_addr_list with __counted_by
• serial: max310x: implement gpio_chip::get_direction()
• serial: max310x: replace bare use of 'unsigned' with 'unsigned int' (checkpatch)
• ALSA: hda: Fix cached processing coefficient verbs
• ALSA: hda: conexant: Remove mic bias threshold override
• i2c: i801: fix hardware state machine corruption in error path
• audit: fix recursive locking deadlock in audit_dupe_exe()
• audit: use 'unsigned int' instead of 'unsigned'
• audit: widen ino fields to u64
• VFS/audit: introduce kern_path_parent() for audit
• i2c: davinci: Unregister cpufreq notifier on probe failure
• fpga: dfl-afu: validate DMA mapping length in afu_dma_map_region()
• dma-buf/udmabuf: skip redundant cpu sync to fix cacheline EEXIST warning
• udmabuf: Do not create malformed scatterlists
• iommu/amd: Don't split flush for amd_iommu_domain_flush_all()
• bpf: Reject BPF_MAP_TYPE_INODE_STORAGE creation if BPF LSM is uninitialized
• bpf: drop bpf_lsm_getselfattr from hook list
• net: pcs: xpcs: fix SGMII state reading
• io_uring/rw: fix missing ERESTARTSYS conversion in read paths
• drm/amd/display: Fix dcn32 DTB DTO update breaking live pixel rate sources
• exfat: validate cluster allocation bits of the allocation bitmap
• fscrypt: Avoid dynamic allocation in fscrypt_get_devices()
• openvswitch: fix GSO userspace truncation underflow
• ksmbd: validate ACE size against SID sub-authorities