7.0.14stable
Changed
- net: export netif_open for self_test usage
Fixed
- virtiofs: fix UAF on submount umount
- media: vidtv: fix NULL pointer dereference in vidtv_mux_push_si
- ksmbd: reject non-VALID session in compound request branch
- drivers/base/memory: set mem->altmap after successful device registration
- serial: 8250_dw: unregister 8250 port if clk_notifier_register() fails
- serial: qcom_geni: Fix RX DMA stall when SE_DMA_RX_LEN_IN is zero
- vc_screen: fix null-ptr-deref in vcs_notifier() during concurrent vcs_write
- iio: adc: ti-ads1298: add bounds check to pga_settings index
- iio: light: veml6075: add bounds check to veml6075_it_ms index
- net: net_failover: Fix the deadlock in slave register
- rose: don't free fd-owned sockets when reaping in the heartbeat
- rose: clear neighbour pointer in rose_kill_by_device()
- rose: cancel neighbour timers in rose_neigh_put() before freeing
- rose: drop CALL_REQUEST in loopback timer when device is not running
- rose: release netdev ref and destroy orphaned incoming sockets
- rose: fix netdev double-hold in rose_make_new()
- rose: disconnect orphaned STATE_2 sockets when device is gone
- rose: set SOCK_DESTROY in rose_kill_by_device() for prompt cleanup
Removed
- crypto: qat - remove unused character device and IOCTLs
43 commits in this release:
- Linux 7.0.14
- virtiofs: fix UAF on submount umount
- media: vidtv: fix NULL pointer dereference in vidtv_mux_push_si
- ksmbd: reject non-VALID session in compound request branch
- drivers/base/memory: set mem->altmap after successful device registration
- serial: 8250_dw: unregister 8250 port if clk_notifier_register() fails
- serial: qcom_geni: Fix RX DMA stall when SE_DMA_RX_LEN_IN is zero
- vc_screen: fix null-ptr-deref in vcs_notifier() during concurrent vcs_write
- crypto: qat - remove unused character device and IOCTLs
- iio: adc: ti-ads1298: add bounds check to pga_settings index
- iio: light: veml6075: add bounds check to veml6075_it_ms index
- net: net_failover: Fix the deadlock in slave register
- net: export netif_open for self_test usage
- rose: don't free fd-owned sockets when reaping in the heartbeat
- rose: clear neighbour pointer in rose_kill_by_device()
- rose: cancel neighbour timers in rose_neigh_put() before freeing
- rose: drop CALL_REQUEST in loopback timer when device is not running
- rose: release netdev ref and destroy orphaned incoming sockets
- rose: fix netdev double-hold in rose_make_new()
- rose: disconnect orphaned STATE_2 sockets when device is gone
- rose: set SOCK_DESTROY in rose_kill_by_device() for prompt cleanup
- rose: fix notifier unregistered too early in rose_exit()
- rose: fix netdev double-hold in rose_rx_call_request()
- rose: guard rose_neigh_put() against NULL in timer expiry
- rose: clear neighbour pointer after rose_neigh_put() in state machines
- rose: fix race between loopback timer and module removal
- rose: hold loopback neighbour reference across timer callback
- rose: fix dev_put() leak in rose_loopback_timer()
- agp/amd64: Fix broken error propagation in agp_amd64_probe()
- net: qualcomm: rmnet: fix endpoint use-after-free in rmnet_dellink()
- i2c: stub: Reject I2C block transfers with invalid length
- bpf: Fix NULL pointer dereference in bpf_sk_storage_clone and diag paths
- RDMA/bnxt_re: zero shared page before exposing to userspace
- Revert "NFSD: Defer sub-object cleanup in export put callbacks"
- fuse: re-lock request before replacing page cache folio
- firmware: samsung: acpm: Fix missing LKMM barriers in sequence allocator
- firmware: samsung: acpm: Fix false timeouts and Use-After-Free in polling
- firmware: samsung: acpm: Fix cross-thread RX length corruption
- firmware: exynos-acpm: Count acpm_xfer buffers with __counted_by_ptr
- firmware: exynos-acpm: Count number of commands in acpm_xfer
- lockd: fix TEST handling when not all permissions are available.
- arm64/entry: Fix arm64-specific rseq brokenness
- io_uring/net: Avoid msghdr on op_connect/op_bind async data