Linux Kernel 7.1.6

The 116 most recent commits in this release — the full changelog is longer:

• Linux 7.1.6
• cifs: consolidate time_last_write stamp into _cifsFileInfo_put()
• cifs: fix time_last_write stamp placement in setattr/truncate paths
• KVM: SVM: Bump asid_generation on CPU online to avoid ASID collision after hotplug
• selftests: drv-net: so_txtime: relax variance bounds
• selftests: drv-net: cope with slow env in so_txtime.py test
• sched_ext: Preserve rq tracking across local DSQ dispatch
• sched_ext: Move shared helpers from ext.c into internal.h and cid.h
• bootconfig: fix NULL-pointer arithmetic in xbc_snprint_cmdline()
• bootconfig: move xbc_snprint_cmdline() to lib/bootconfig.c
• net: mana: Optimize irq affinity for low vcpu configs
• mm/sparse-vmemmap: fix DAX vmemmap accounting with optimization
• mm/sparse-vmemmap: pass @pgmap argument to memory deactivation paths
• SUNRPC: Return an error from xdr_buf_to_bvec() on overflow
• SUNRPC: Add helpers to convert xdr_buf byte ranges to scatterlists
• xfs: don't replace the wrong part of the cow fork
• fuse-uring: fix race between registration and connection abortion
• audit: fix recursive locking deadlock in audit_dupe_exe()
• audit: use 'unsigned int' instead of 'unsigned'
• drm/amd/display: Fix DTB DTO updates breaking live pixel rate sources
• ksmbd: validate ACE size against SID sub-authorities
• ksmbd: bound DACL dedup walk to copied ACEs
• ksmbd: restore DACL size on check_add_overflow() to avoid malformed ACL
• ksmbd: validate num_subauth when copying ACE in set_ntacl_dacl
• selftests: drv-net: add missing kconfig for psp.py
• drm/amdgpu: fix check in amdgpu_hmm_invalidate_gfx
• drm/amd/pm: fix smu13 power limit range calculation
• drm/amdgpu: fix aperture mapping leak
• drm/amdgpu: reject mapping a reserved doorbell to a new queue
• drm/amdgpu: invoke pm_genpd_remove() before freeing genpd
• drm/amdgpu: fix resource leak on ACP reset timeout
• drm/amdgpu: Fix kernel panic during driver load failure
• drm/amdgpu: fix division by zero with invalid uvd dimensions
• drm/dp_mst: Handle torn-down topology gracefully in drm_dp_mst_topology_queue_probe()
• drm/amdgpu/vcn4: avoid rereading IB param length
• drm/amdgpu/vce: fix integer overflow in image size
• drm/amdgpu/sdma7.1: replace BUG_ON() with WARN_ON()
• drm/amdgpu/sdma4.4.2: replace BUG_ON() with WARN_ON()
• drm/amdgpu/mes11: set doorbell offset for suspending userq
• drm/amdgpu/jpeg: fix jpeg_v5_0_1_is_idle detection
• drm/amdgpu/jpeg: fix jpeg_v4_0_3_is_idle detection
• drm/amdgpu/gfx9: replace BUG_ON() with WARN_ON()
• drm/amdgpu/gfx9.4.3: replace BUG_ON() with WARN_ON()
• drm/amdgpu/gfx8: drop unecessary BUG_ON()
• drm/amdgpu/gfx12: replace BUG_ON() with WARN_ON()
• drm/amdgpu/gfx12: fix EOP interrupt routing for KQ and userq
• drm/amdgpu/gfx11: fix EOP interrupt routing for KQ and userq
• drm/amdgpu/gfx12.1: replace BUG_ON() with WARN_ON()
• drm/amdgpu/gfx10: replace BUG_ON() with WARN_ON()
• drm/amd/pm: make pp_features read-only when scpm is enabled
• drm/amd/pm: fix amdgpu_pm_info power display units
• watchdog: s32g_wdt: remove incorrect options in watchdog_info struct
• vxlan: mdb: Fix source list corruption on a failed replace
• vsock/virtio: collapse receive queue under memory pressure
• tipc: clear sock->sk on the failed-insert path in tipc_sk_create()
• tcp: challenge ACK for non-exact RST in SYN-RECEIVED
• tcp: initialize standalone TCP-AO response padding
• rtase: Workaround for TX hang caused by hardware packet parsing
• pppoe: reload header pointer after dev_hard_header()
• ovpn: hold peer before scheduling keepalive work
• ovpn: fix peer refcount leak in TCP error paths
• openvswitch: fix GSO userspace truncation underflow
• mctp: serial: handle zero-length frames to prevent rx buffer overflow
• mac802154: llsec: reject frames shorter than the authentication tag
• mac802154: hold an interface reference across the scan worker
• ila: reload IPv6 header after pskb_may_pull in checksum adjust
• ice: use READ_ONCE() to access cached PHC time
• ice: reject out-of-range ptype in ice_parser_profile_init
• gve: fix Rx queue stall on alloc failure
• ksmbd: validate minimum PDU size for transform requests
• ksmbd: defer destroy_previous_session() until after NTLM authentication
• smb: client: handle STATUS_STOPPED_ON_SYMLINK responses without a symlink target
• rbd: Reset positive result codes to zero in object map update path
• super: fix emergency thaw deadlock on frozen block devices
• ice: fix PTP Call Trace during PTP release
• ptp: ptp_s390: Add missing facility check
• s390/ptff: Export ptff_function_mask[]
• proc: Fix broken error paths for namespace links
• net: qrtr: ns: Raise node count limit to 512
• net: pcs: xpcs: fix SGMII state reading
• net: hip04: fix RX buffer leak on build_skb failure
• net: gro: fix double aggregation of flush-marked skbs
• net/x25: fix use-after-free in x25_kill_by_neigh()
• net/sched: serialize qdisc_rtab_list against concurrent get/put
• net/mlx5e: Use sender devcom for MPV master-up
• net/iucv: fix use-after-free of a severed iucv_path
• net/af_iucv: fix NULL deref in afiucv_hs_callback_syn()
• geneve: require CAP_NET_ADMIN in the device netns for changelink
• net: slip: serialize receive against buffer reallocation
• vxlan: require CAP_NET_ADMIN in the device netns for changelink
• phonet: pep: fix use-after-free in pep_get_sb()
• net: stmmac: intel: skip SerDes reconfig when rate is unchanged
• mm/slab: fix a memory leak due to bootstrapping sheaves twice
• mm/slub: fix lost local objects when bulk remote free batch fills
• iommu/vt-d: Disallow SVA if page walk is not coherent
• iomap: fix out-of-bounds bitmap_set() with zero-length range
• io_uring/rw: fix missing ERESTARTSYS conversion in read paths
• ftrace: Add global mutex to serialize trace_parser access
• fscrypt: Avoid dynamic allocation in fscrypt_get_devices()
• fscrypt: Add missing superblock check in find_or_insert_direct_key()
• fs: preserve ACL_DONT_CACHE state in forget_cached_acl()
• fs/super: fix emergency thaw double-unlock of s_umount
• binfmt_elf_fdpic: only honour the first PT_INTERP
• ASoC: fsl_sai: Fix spurious BCLK on resume by clearing BYP
• ASoC: fsl: imx-card: Skip sysclk reset for active DAIs in shutdown
• amt: fix use-after-free in AMT delayed works
• libceph: remove debugfs files before client teardown
• libceph: reject zero bucket types in crush_decode
• libceph: Reject monmaps advertising zero monitors
• libceph: refresh auth->authorizer_buf{,_len} after authorizer update
• libceph: guard missing CRUSH type name lookup
• libceph: fix two unsafe bare decodes in decode_lockers()
• libceph: Fix multiplication overflow in decode_new_up_state_weight()
• libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE
• libceph: bound get_version reply decode to front len
• ceph: fix writeback_count leak in write_folio_nounlock()