Syzbot CI

Subject	5.10.270-rc1 review
Author	gregkh@linuxfoundation.org
Date	2026-09-12 06:53:49 +0000 UTC
Version
Cc	achill@achill.org akpm@linux-foundation.org broonie@kernel.org conor@kernel.org f.fainelli@gmail.com gregkh@linuxfoundation.org hargar@microsoft.com jonathanh@nvidia.com linux-kernel@vger.kernel.org linux@roeck-us.net lkft-triage@lists.linaro.org patches@kernelci.org patches@lists.linux.dev pavel@nabladev.com rwarsow@gmx.de shuah@kernel.org sr@sladewatkins.com stable@vger.kernel.org sudipm.mukherjee@gmail.com torvalds@linux-foundation.org

Name	Content [All]
[PATCH 5.10 001/798] Revert "USB: serial: keyspan_pda: fix information leak"	[Body]
[PATCH 5.10 002/798] ALSA: aloop: Fix racy access at PCM trigger	[Body]
[PATCH 5.10 003/798] clocksource/drivers/timer-sun4i: Advertise a real minimum delta	[Body]
[PATCH 5.10 004/798] timers/itimer: Zero-init old itimerval before copy to userspace	[Body]
[PATCH 5.10 005/798] include/linux/list.h: mark list_add and __list_add as __always_inline	[Body]
[PATCH 5.10 006/798] mm/vmscan: report RCU-tasks quiescent states in shrink_lruvec()	[Body]
[PATCH 5.10 007/798] mm: memcg: stop reclaim when a limit update is superseded	[Body]
[PATCH 5.10 008/798] tools/compiler: match glibc 2.42 definition of __attribute_const__	[Body]
[PATCH 5.10 009/798] x86/insn-eval: Move assign_register() out of KVM as insn_assign_reg()	[Body]
[PATCH 5.10 010/798] tracing: Fix crash passing ERR_PTR to kthread_stop()	[Body]
[PATCH 5.10 011/798] powerpc/powermac: fix OF node refcount	[Body]
[PATCH 5.10 012/798] rapidio: mport_cdev: fix use-after-free in dma_req_free()	[Body]
[PATCH 5.10 013/798] Revert "media: v4l2-dev: fix error handling in __video_register_device()"	[Body]
[PATCH 5.10 014/798] staging: greybus: hid: fix SET_REPORT return value	[Body]
[PATCH 5.10 015/798] USB: phy: fsl-usb: fix missing static keywords	[Body]
[PATCH 5.10 016/798] usb: gadget: snps_udc_plat: clean up PHY on probe deferral	[Body]
[PATCH 5.10 017/798] usb: gadget: f_tcm: fix deadlock in usbg_make_tpg()	[Body]
[PATCH 5.10 018/798] usb: gadget: uvc: fix dangling pointers in uvc_function_bind() and uvc_function_unbind()	[Body]
[PATCH 5.10 019/798] usb: gadget: f_fs: Prevent deadlock during ep0 read loop	[Body]
[PATCH 5.10 020/798] fpga: altera-cvp: Avoid out-of-bounds read in trailing byte write	[Body]
[PATCH 5.10 021/798] HID: sensor-hub: Fix out-of-bounds write in sensor_hub_get_feature	[Body]
[PATCH 5.10 022/798] lib/ucs2_string.c: fix out-of-bounds read in ucs2_strnlen()	[Body]
[PATCH 5.10 023/798] media: cec: stm32: prevent out-of-bounds write on RX overflow	[Body]
[PATCH 5.10 024/798] media: vicodec: fix out-of-bounds write in FWHT encoder	[Body]
[PATCH 5.10 025/798] nilfs2: fix slab-out-of-bounds in nilfs_direct_propagate after truncation	[Body]
[PATCH 5.10 026/798] of: fix out-of-bounds read in of_alias_scan() stem parser	[Body]
[PATCH 5.10 027/798] ubifs: fix out-of-bounds read in signature length check	[Body]
[PATCH 5.10 028/798] NFSD: Encode only the status in NFS-ACL v2 GETACL error replies	[Body]
[PATCH 5.10 029/798] NFSD: Fix off-by-one in DRC bucket pruning limit	[Body]
[PATCH 5.10 030/798] NFSD: restart ssc_expire_umount walk after dropping nfsd_ssc_lock	[Body]
[PATCH 5.10 031/798] NFSD: remove flawed WARN_ON_ONCE from nfsd_mode_check	[Body]
[PATCH 5.10 032/798] nfsd: Reset write verifier when async COPY writeback fails	[Body]
[PATCH 5.10 033/798] nfsd: return NFS4ERR_NOTSUPP for unsupported netloc4 types	[Body]
[PATCH 5.10 034/798] nfsd: sample writeback error cursor before async COPY loop	[Body]
[PATCH 5.10 035/798] nfsd: validate symlink target length in NFSv4 CREATE	[Body]
[PATCH 5.10 036/798] nfsd: add fh_want_write() for early-verified SETATTR in nfsd_proc_setattr()	[Body]
[PATCH 5.10 037/798] nfsd: add filehandle match check to nfsd4_delegreturn()	[Body]
[PATCH 5.10 038/798] nfsd: block non-SAVEFH ops after FOREIGN PUTFH to prevent NULL deref	[Body]
[PATCH 5.10 039/798] nfsd: check client ownership when cancelling a copy-notify stateid	[Body]
[PATCH 5.10 040/798] nfsd: fix cpntf publish race in nfs4_init_cp_state	[Body]
[PATCH 5.10 041/798] nfsd: fix version mismatch loops in nfsd_acl_init_request()	[Body]
[PATCH 5.10 042/798] nfsd: fix XDR length calculation in nfsd4_ff_encode_layoutget	[Body]
[PATCH 5.10 043/798] nfsd: fix XDR padding calculation in ff_encode_getdeviceinfo	[Body]
[PATCH 5.10 044/798] nfsd: initialize copy-notify stateid before publishing it	[Body]
[PATCH 5.10 045/798] nfsd: reject out-of-range useconds in NFSv2 SETATTR/CREATE	[Body]
[PATCH 5.10 046/798] nfsd: reject reclaim LOCK after RECLAIM_COMPLETE	[Body]
[PATCH 5.10 047/798] nfsd: revoke copy-notify stateids before dropping their reference	[Body]
[PATCH 5.10 048/798] NFSD: Prevent lock owner use-after-free during client teardown	[Body]
[PATCH 5.10 049/798] libceph: reject buckets with mismatched CRUSH ids	[Body]
[PATCH 5.10 050/798] ceph: fix UAF in __kick_flushing_caps() on cf entry freed during unlock	[Body]
[PATCH 5.10 051/798] ceph: bound xattr value length in __build_xattrs()	[Body]
[PATCH 5.10 052/798] audit: avoid dropping live tree ref on fsnotify rule autoremove	[Body]
[PATCH 5.10 053/798] HID: picolcd: clamp eeprom debugfs read to bytes actually received	[Body]
[PATCH 5.10 054/798] HID: roccat: free buffered reports when destroying device	[Body]
[PATCH 5.10 055/798] HID: sensor: custom: Fix field sysfs group cleanup on failure	[Body]
[PATCH 5.10 056/798] HID: mcp2221: validate report size in mcp2221_raw_event()	[Body]
[PATCH 5.10 057/798] eCryptfs: bound the packet-length peek to the user buffer	[Body]
[PATCH 5.10 058/798] ecryptfs: fix tag 11 packet exact-fit size check	[Body]
[PATCH 5.10 059/798] ecryptfs: hold msg ctx list lock when cleaning daemon queue	[Body]
[PATCH 5.10 060/798] ecryptfs: pass packet set buffer size to parser	[Body]
[PATCH 5.10 061/798] ecryptfs: reject oversized encrypted_key_size in parse_tag_3_packet	[Body]
[PATCH 5.10 062/798] ecryptfs: reject too-small tag 70 packets	[Body]
[PATCH 5.10 063/798] ecryptfs: release message context on send failure	[Body]
[PATCH 5.10 064/798] ecryptfs: show filename encryption options	[Body]
[PATCH 5.10 065/798] fat: restore original value when fat_ent_write failed	[Body]
[PATCH 5.10 066/798] fbdev: omapfb: panel-dsi-cm: initialize lock before registering display	[Body]
[PATCH 5.10 067/798] fbdev: pvr2fb: correct user pointer annotation and sentinel initializer	[Body]
[PATCH 5.10 068/798] fbdev: uvesafb: unregister connector callback on init failure	[Body]
[PATCH 5.10 069/798] forcedeth: fix off-by-one when saving/restoring non-PCI config space	[Body]
[PATCH 5.10 070/798] fpga: stratix10-soc: Fix SVC mailbox handling during reconfiguration	[Body]
[PATCH 5.10 071/798] hsi: omap_ssi_core: fix missing DMA mask setup for SSI controller device	[Body]
[PATCH 5.10 072/798] alpha/PCI: Fix I/O port accessor argument order in pci_legacy_write()	[Body]
[PATCH 5.10 073/798] alpha: marvel: Fix irq_set_status_flags to use correct IRQ number	[Body]
[PATCH 5.10 074/798] alpha: marvel: Fix lock ordering in init_io7_irqs()	[Body]
[PATCH 5.10 075/798] ata: libata-scsi: fix DSM TRIM for sector sizes larger than 2048 bytes	[Body]
[PATCH 5.10 076/798] Bluetooth: btusb: Add ASUS USB-BT540 for Realtek 8761CU	[Body]
[PATCH 5.10 077/798] Bluetooth: btusb: Add ASUS USB-BT600 for Realtek 8761CU	[Body]
[PATCH 5.10 078/798] bnx2x: fix double free in bnx2x_init_firmware() error path	[Body]
[PATCH 5.10 079/798] dm-era: fix shadowed superblock leak on take-snap failure	[Body]
[PATCH 5.10 080/798] dm raid1: reserve space for NUL-terminator in build_constructor_string()	[Body]
[PATCH 5.10 081/798] dm array: reject an array block whose value size is not the callers	[Body]
[PATCH 5.10 082/798] cpufreq: schedutil: Fix rate limit overflow	[Body]
[PATCH 5.10 083/798] Bluetooth: hci_bcm: fix usage_count leak when autosuspend_delay is negative	[Body]
[PATCH 5.10 084/798] Bluetooth: hci_uart: Fix false success return in hci_uart_setup()	[Body]
[PATCH 5.10 085/798] Bluetooth: RFCOMM: serialize security confirmation handling	[Body]
[PATCH 5.10 086/798] Bluetooth: hci_event: clear HCI_LE_ADV only on a created connection	[Body]
[PATCH 5.10 087/798] Bluetooth: hci_intel: fix usage_count leak when autosuspend_delay is negative	[Body]
[PATCH 5.10 088/798] ip6_tunnel: use skb_cow_head() in ip6_tnl_xmit()	[Body]
[PATCH 5.10 089/798] ip6_gre: fix hardware header length for NBMA tunnels	[Body]
[PATCH 5.10 090/798] ipv6: use RCU iterator to dump route exceptions	[Body]
[PATCH 5.10 091/798] libnvdimm/labels: Prevent integer overflow in __nd_label_validate()	[Body]
[PATCH 5.10 092/798] md: do overflow check for sb->bblog_shift in super_1_load()	[Body]
[PATCH 5.10 093/798] mpls: reload header after pskb_may_pull()	[Body]
[PATCH 5.10 094/798] mptcp: fix uninitialized local_id in syncookie MP_JOIN reconstruction	[Body]
[PATCH 5.10 095/798] SUNRPC: xdr_buf_trim: clamp buf->len to avoid underflow	[Body]
[PATCH 5.10 096/798] sunrpc: route to a populated pool in svc_pool_for_cpu()	[Body]
[PATCH 5.10 097/798] SUNRPC: always drain cache_cleaner before destroying a cache_detail	[Body]
[PATCH 5.10 098/798] SUNRPC: Guard svcauth_gss_release() dispatch on rq_auth_stat	[Body]
[PATCH 5.10 099/798] SUNRPC: harden gss_krb5_unwrap_v2 against short tokens	[Body]
[PATCH 5.10 100/798] SUNRPC: harden gss_unwrap_resp_priv length checks	[Body]
[PATCH 5.10 101/798] sunrpc: init gssp_lock before publishing proc entry	[Body]
[PATCH 5.10 102/798] SUNRPC: Reject krb5 v2 wrap tokens with oversized ec field	[Body]
[PATCH 5.10 103/798] udf: reject VAT indexes equal to the entry count	[Body]
[PATCH 5.10 104/798] wifi: ath6kl: clamp assoc request/response lengths before subtracting IE offsets	[Body]
[PATCH 5.10 105/798] rpmsg: glink: smem: order FIFO read after availability check	[Body]
[PATCH 5.10 106/798] remoteproc: scp: Fix device reference leak on failed lookup	[Body]
[PATCH 5.10 107/798] qede: Fix NULL pointer dereference in TPA fragment processing	[Body]
[PATCH 5.10 108/798] RDMA/cxgb4: Cancel reg_work before freeing device on remove	[Body]
[PATCH 5.10 109/798] RDMA/ucma: Lock the handler in ucma_set_ib_path()	[Body]
[PATCH 5.10 110/798] regulator: as3722_get_regulator_dt_data: fix premature of_node_put leaving dangling of_node pointer	[Body]
[PATCH 5.10 111/798] regulator: max8998_pmic_dt_parse_pdata: of_node_put on reg_np after ownership transferred to rdata	[Body]
[PATCH 5.10 112/798] orangefs: fix double-free of trailer_buf on readdir copy failure	[Body]
[PATCH 5.10 113/798] orangefs: skip leading spaces before parsing client debug masks	[Body]
[PATCH 5.10 114/798] ocfs2: always run deallocs on copy-on-write completion	[Body]
[PATCH 5.10 115/798] ocfs2: bound namelen in dlm_migrate_request_handler	[Body]
[PATCH 5.10 116/798] ocfs2: validate lengths in dlm_mig_lockres_handler	[Body]
[PATCH 5.10 117/798] ocfs2: validate rl_used against rl_count in refcount block validator	[Body]
[PATCH 5.10 118/798] ocfs2: cluster: dont sleep while holding o2hb_live_lock in o2hb_region_pin()	[Body]
[PATCH 5.10 119/798] ocfs2: cluster: avoid lock order inversion in o2hb_region_pin() from drop_item	[Body]
[PATCH 5.10 120/798] ocfs2: cluster: fix o2hb_dependent_users leak on pin failure	[Body]
[PATCH 5.10 121/798] ocfs2: fix readdir position truncation on 32-bit kernels	[Body]
[PATCH 5.10 122/798] openrisc: fix arbitrary kernel memory access via or1k_atomic syscall	[Body]
[PATCH 5.10 123/798] openvswitch: only skb_tx_error() a packet we are about to drop	[Body]
[PATCH 5.10 124/798] hwmon: (max6621) fix negative temperature offset and crit readings	[Body]
[PATCH 5.10 125/798] hwmon: (max6621) fix temperature clamp range	[Body]
[PATCH 5.10 126/798] lockd: pin next file across nlm_inspect_file lock-drop	[Body]
[PATCH 5.10 127/798] nvme: nvme-fc: Fix nvme_fc_create_hw_io_queues() queue deletion in error path	[Body]
[PATCH 5.10 128/798] nvme: zero the discard fallback page	[Body]
[PATCH 5.10 129/798] nvme-tcp: do not accept C2HData based on blk_rq_payload_bytes() alone	[Body]
[PATCH 5.10 130/798] sctp: stop processing a packet once its association is deleted	[Body]
[PATCH 5.10 131/798] sctp: drop a chunk if its transport was removed	[Body]
[PATCH 5.10 132/798] sctp: fix NULL deref on untransmitted RECONF completion	[Body]
[PATCH 5.10 133/798] sctp: distinguish sequence zero from wildcard in reconf lookup	[Body]
[PATCH 5.10 134/798] sctp: fix stream->outcnt underflow on duplicate RECONF responses	[Body]
[PATCH 5.10 135/798] power: supply: cros_usbpd-charger: bound the EC-reported port count	[Body]
[PATCH 5.10 136/798] power: supply: cros_usbpd: Limit port counts to EC_USB_PD_MAX_PORTS	[Body]
[PATCH 5.10 137/798] power: supply: lp8727: fix use-after-free in lp8727_release_irq()	[Body]
[PATCH 5.10 138/798] power: supply: max17040: synchronize work cancellation on suspend	[Body]
[PATCH 5.10 139/798] s390/dasd: Do not complete a failed ESE read as successful	[Body]
[PATCH 5.10 140/798] s390/dasd: Guard sysfs discipline callbacks against unallocated private data	[Body]
[PATCH 5.10 141/798] s390/dasd: Propagate partial completion length across ERP recovery	[Body]
[PATCH 5.10 142/798] PCI: Fix 32-bit config write in Intel PCH Root Port MPC ACS quirk	[Body]
[PATCH 5.10 143/798] PCI: meson: Fix GPIO state while requesting PERST#	[Body]
[PATCH 5.10 144/798] PCI/sysfs: Avoid spurious runtime PM wakeup on config space accesses	[Body]
[PATCH 5.10 145/798] PCI/proc: Avoid spurious runtime PM wakeup on config space accesses	[Body]
[PATCH 5.10 146/798] PCI/proc: Use file_ns_capable() when checking config space read access	[Body]
[PATCH 5.10 147/798] iommu/vt-d: Fix no_iommu to disable platform opt-in	[Body]
[PATCH 5.10 148/798] mmc: via-sdmmc: stop card-detect handling on probe failure	[Body]
[PATCH 5.10 149/798] platform/chrome: sensorhub: Bound the EC-reported sensor number	[Body]
[PATCH 5.10 150/798] interconnect: Fix use after free in icc_get() and of_icc_get_by_index()	[Body]
[PATCH 5.10 151/798] ipmi: ipmb: validate write message length	[Body]
[PATCH 5.10 152/798] ipmi: si: Fix NULL pointer dereference after failed registration	[Body]
[PATCH 5.10 153/798] net/iucv: filter frames in afiucv_hs_rcv() by ingress device	[Body]
[PATCH 5.10 154/798] xdp: fix zero-copy frame layout	[Body]
[PATCH 5.10 155/798] slip: fix use-after-free in sl_sync()	[Body]
[PATCH 5.10 156/798] net: usb: qmi_wwan: add Telit Cinterion FE990D50 composition	[Body]
[PATCH 5.10 157/798] net: tun: bound receive headroom	[Body]
[PATCH 5.10 158/798] net: openvswitch: fix flow mask use-after-free on flow deletion	[Body]
[PATCH 5.10 159/798] net: openvswitch: fix nf_connlabels leak in ovs_ct_init	[Body]
[PATCH 5.10 160/798] NTB: ntb_transport: Recycle TX entries before client callbacks	[Body]
[PATCH 5.10 161/798] NTB: ntb_transport: Fail TX enqueue when the QP link is down	[Body]
[PATCH 5.10 162/798] NTB: ntb_transport: Reject oversized TX buffers	[Body]
[PATCH 5.10 163/798] net: ntb_netdev: Avoid double-accounting netif_rx() drops	[Body]
[PATCH 5.10 164/798] net: ntb_netdev: Count packets dropped on RX refill failure	[Body]
[PATCH 5.10 165/798] net: cap advertised IP tunnel headroom	[Body]
[PATCH 5.10 166/798] seg6: reset IP6CB after IPv6 decapsulation	[Body]
[PATCH 5.10 167/798] ALSA: 6fire: bound the MIDI event length from the device	[Body]
[PATCH 5.10 168/798] ALSA: bcd2000: clear the URB pointers on disconnect	[Body]
[PATCH 5.10 169/798] ALSA: mpu401: Check card index validity at probe	[Body]
[PATCH 5.10 170/798] ALSA: mts64: Check card index validity at probe	[Body]
[PATCH 5.10 171/798] ALSA: portman2x4: Check card index validity at probe	[Body]
[PATCH 5.10 172/798] ALSA: serial-u16550: Check card index validity at probe	[Body]
[PATCH 5.10 173/798] netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst	[Body]
[PATCH 5.10 174/798] mptcp: pm: ADD_ADDR rtx: always decrease sk refcount	[Body]
[PATCH 5.10 175/798] mptcp: pm: ADD_ADDR rtx: free sk if last	[Body]
[PATCH 5.10 176/798] PCI: hv: Set irq_retrigger callback for the Hyper-V PCI MSI irqchip	[Body]
[PATCH 5.10 177/798] dm-stats: fix a crash if allocation of per-cpu data fails	[Body]
[PATCH 5.10 178/798] dm-switch: use WRITE_ONCE() in switch_region_table_write()	[Body]
[PATCH 5.10 179/798] i3c: master: Fix info leak and UAF in device unregister path	[Body]
[PATCH 5.10 180/798] wifi: brcmfmac: Fix memory leak in brcmf_sdio_read_control()	[Body]
[PATCH 5.10 181/798] wifi: mwifiex: Detach sync cmd buffer on interrupted wait	[Body]
[PATCH 5.10 182/798] wifi: rtl818x: initialize eeprom_93cx6 struct to zero	[Body]
[PATCH 5.10 183/798] wifi: rtw88: Fix potential memory leak in rtw_txq_push_skb()	[Body]
[PATCH 5.10 184/798] vsock/virtio: flush works in dependency order	[Body]
[PATCH 5.10 185/798] w1: ds28e17: reject an oversize length on an I2C block read	[Body]
[PATCH 5.10 186/798] tpm: tpm_i2c_nuvoton: disable IRQ on wait timeout	[Body]
[PATCH 5.10 187/798] signal: avoid shared siginfo namespace rewrites	[Body]
[PATCH 5.10 188/798] timer: Keep debugobjects state consistent in migrate_timer_list()	[Body]
[PATCH 5.10 189/798] udf: Fix i_lenExtents truncation on 32-bit kernels	[Body]
[PATCH 5.10 190/798] platform/chrome: sensorhub: Fix dropped timestamp events and log spam	[Body]
[PATCH 5.10 191/798] usb: gadget: u_audio: Fix use-after-free on sound card disconnect	[Body]
[PATCH 5.10 192/798] net: skbuff: dont touch shared zerocopy state in skb_tx_error()	[Body]
[PATCH 5.10 193/798] net: skbuff: dont skb_tx_error() the source skb in skb_zerocopy()	[Body]
[PATCH 5.10 194/798] net: openvswitch: fix kernel-doc warnings in internal headers	[Body]
[PATCH 5.10 195/798] openvswitch: Fix CT limit teardown use-after-free	[Body]
[PATCH 5.10 196/798] netfilter: nf_tables: make nft_object rhltable per table	[Body]
[PATCH 5.10 197/798] RDMA/rxe: Fix over copying in get_srq_wqe	[Body]
[PATCH 5.10 198/798] RDMA/rxe: Missing unlock on error in get_srq_wqe()	[Body]
[PATCH 5.10 199/798] RDMA/rxe: Use the correct size of wqe when processing SRQ	[Body]
[PATCH 5.10 200/798] RDMA/rxe: Fix TOCTOU heap overflow in get_srq_wqe	[Body]
[PATCH 5.10 201/798] entry: Fix seccomp bypass after ptrace with TSYNC	[Body]
[PATCH 5.10 202/798] fsnotify: Fix stale object mask after concurrent mark updates	[Body]
[PATCH 5.10 203/798] tcp: fix potential race in tcp_v6_syn_recv_sock()	[Body]
[PATCH 5.10 204/798] selinux: avoid implicit conversions in services code	[Body]
[PATCH 5.10 205/798] selinux: reject an unclaimed class value in security_get_classes()	[Body]
[PATCH 5.10 206/798] net: ntb_netdev: Fix TX busy and drop handling	[Body]
[PATCH 5.10 207/798] drm/vmwgfx: drop dma_buf reference on foreign-fd prime import	[Body]
[PATCH 5.10 208/798] net/smc: fix potential panic dues to unprotected smc_llc_srv_add_link()	[Body]
[PATCH 5.10 209/798] tracing/mmiotrace: Remove reference to unused per CPU data pointer	[Body]
[PATCH 5.10 210/798] tracing/mmiotrace: Add NULL check for mmio_trace_array in logging functions	[Body]
[PATCH 5.10 211/798] scsi: core: Fill in DMA padding bytes in scsi_alloc_sgtables()	[Body]
[PATCH 5.10 212/798] espintcp: remove encap socket caching to avoid reference leak	[Body]
[PATCH 5.10 213/798] usb: image: mdc800: change kmalloc() to kzalloc()	[Body]
[PATCH 5.10 214/798] ALSA: usb-audio: fix OOB write in snd_usbmidi_us122l_output()	[Body]
[PATCH 5.10 215/798] media: usbtv: keep device alive while ALSA card exists	[Body]
[PATCH 5.10 216/798] usb-storage: ene_ub6250: fix race between scan work and probe	[Body]
[PATCH 5.10 217/798] usb: f_mass_storage: Bump local buffer size in fsg_common_create_luns()	[Body]
[PATCH 5.10 218/798] usb: typec: ucsi: displayport: Fix OOB altmode array index	[Body]
[PATCH 5.10 219/798] USB: gadget: fix NULL pointer dereference in gadget_dev_ioctl()	[Body]
[PATCH 5.10 220/798] usb: gadget: fix null pointer dereference in usb_put_function_instance()	[Body]
[PATCH 5.10 221/798] staging: rtl8723bs: fix OOB read in rtw_action_frame_parse()	[Body]
[PATCH 5.10 222/798] thermal/drivers/imx: Disable clock on runtime resume failure	[Body]
[PATCH 5.10 223/798] thermal/drivers/qoriq: Disable clock on resume failure	[Body]
[PATCH 5.10 224/798] scsi: target: iscsi: Reserve a terminator byte for the login payload	[Body]
[PATCH 5.10 225/798] scsi: pm8001: Use rollback index when freeing MSI-X vectors	[Body]
[PATCH 5.10 226/798] HID: rmi: fix OOB access with undersized RMI reports	[Body]
[PATCH 5.10 227/798] HID: wacom: validate report length in wacom_intuos_pro2_bt_irq	[Body]
[PATCH 5.10 228/798] dm: fix resume-vs-remove race	[Body]
[PATCH 5.10 229/798] dmaengine: dw-edma: Complete descriptors before pausing	[Body]
[PATCH 5.10 230/798] ata: ahci: work around lost interrupts on Marvell 88SE61xx	[Body]
[PATCH 5.10 231/798] perf/x86/intel: Fix kernel address leakages in LBR stack	[Body]
[PATCH 5.10 232/798] i2c: mux: Fix channel node leak on adapter add failure	[Body]
[PATCH 5.10 233/798] ALSA: pcm: Fix race between non-atomic ops and trigger-start	[Body]
[PATCH 5.10 234/798] nvme-tcp: check the data direction of a C2HData PDU	[Body]
[PATCH 5.10 235/798] nvmet-tcp: fix out-of-bounds write when receiving an over-long PDU	[Body]
[PATCH 5.10 236/798] nvmet-tcp: reject unsolicited H2CData PDUs	[Body]
[PATCH 5.10 237/798] Revert "irqchip/mbigen: Fix mbigen node address layout"	[Body]
[PATCH 5.10 238/798] nvdimm/btt: reject an arena whose nfree is below the lane count	[Body]
[PATCH 5.10 239/798] parisc: eisa: Fix infinite loop when parsing invalid IRQ value	[Body]
[PATCH 5.10 240/798] parisc: Fix alignment of asm statements in head.S	[Body]
[PATCH 5.10 241/798] mtd: afs: validate v2 image info bounds	[Body]
[PATCH 5.10 242/798] mtd: mtdoops: free page bitmap when the backing MTD is removed	[Body]
[PATCH 5.10 243/798] mtd: rawnand: validate ONFI extended parameter page sections	[Body]
[PATCH 5.10 244/798] batman-adv: fix stale receive device on merged fragments	[Body]
[PATCH 5.10 245/798] batman-adv: dat: avoid unaligned fault in IP extraction	[Body]
[PATCH 5.10 246/798] batman-adv: bla: fix freeing of claims on meshif deletion	[Body]
[PATCH 5.10 247/798] batman-adv: bla: prevent CRC corruptions after claim flush	[Body]
[PATCH 5.10 248/798] clk: qcom: gcc-msm8916: Fix enable_reg for gcc_blsp1_sleep_clk	[Body]
[PATCH 5.10 249/798] clk: qcom: gcc-msm8939: Fix enable_reg for gcc_blsp1_sleep_clk	[Body]
[PATCH 5.10 250/798] i2c: mux: demux-pinctrl: fix OF node leak on kstrdup failure	[Body]
[PATCH 5.10 251/798] ASoC: cs35l33: drain threaded IRQ before runtime suspend	[Body]
[PATCH 5.10 252/798] ASoC: cs35l34: drain threaded IRQ before runtime suspend	[Body]
[PATCH 5.10 253/798] ASoC: fsl: mpc5200-i2s: Free DMA resources on probe failure	[Body]
[PATCH 5.10 254/798] AsoC: intel: sst: fix PCI device reference leak on probe failure	[Body]
[PATCH 5.10 255/798] ASoC: samsung: aries_audio_probe: double of_node_put due to direct assignment without of_node_get	[Body]
[PATCH 5.10 256/798] iio: chemical: sgp30: Handle IAQ thread creation failure	[Body]
[PATCH 5.10 257/798] iio: dac: m62332: Fix regulator reference count imbalance	[Body]
[PATCH 5.10 258/798] iio: gyro: mpu3050: fix sign of raw angular velocity readings	[Body]
[PATCH 5.10 259/798] iio: light: cm32181: return zero after writing calibscale	[Body]
[PATCH 5.10 260/798] iio: light: gp2ap002: Disable regulators on resume failure	[Body]
[PATCH 5.10 261/798] iio: srf04: fix pm_runtime handling on probe error path	[Body]
[PATCH 5.10 262/798] iio: temperature: hid-sensor-temperature: switch to non-devm iio_device_register()	[Body]
[PATCH 5.10 263/798] KVM: x86: hyper-v: Clamp stimer deadline to avoid livelock	[Body]
[PATCH 5.10 264/798] KVM: s390: Fix memory leak in guest debug handling	[Body]
[PATCH 5.10 265/798] KVM: s390: Fix old_data leak in guest debug error path	[Body]
[PATCH 5.10 266/798] KVM: s390: Free guest debug data on vcpu destroy	[Body]
[PATCH 5.10 267/798] KVM: s390: Zero initialize irq in reinject_machine_check	[Body]
[PATCH 5.10 268/798] KVM: s390: Restore sigset on error path	[Body]
[PATCH 5.10 269/798] media: airspy: use vb2_video_unregister_device() on disconnect to fix NULL deref	[Body]
[PATCH 5.10 270/798] media: cec: meson: ao-cec-g12a: name the CEC core regmap to avoid debugfs clash	[Body]
[PATCH 5.10 271/798] media: cec: Serialize exclusive follower delivery	[Body]
[PATCH 5.10 272/798] media: cedrus: fix memory leak in cedrus_init_ctrls()	[Body]
[PATCH 5.10 273/798] media: cobalt: Avoid freeing ALSA private data twice	[Body]
[PATCH 5.10 274/798] media: cx231xx: reject geometry changes while the VBI queue is busy	[Body]
[PATCH 5.10 275/798] media: cx23885: cancel NetUP CI work before teardown	[Body]
[PATCH 5.10 276/798] media: em28xx: defer audio-only extension registration	[Body]
[PATCH 5.10 277/798] media: em28xx: fix use-after-free of dev_next->devlist on disconnect	[Body]
[PATCH 5.10 278/798] media: go7007: defer the ALSA v4l2 put until card release	[Body]
[PATCH 5.10 279/798] media: i2c: ov7740: fix use-after-destroy in remove	[Body]
[PATCH 5.10 280/798] media: meson: vdec: fix NULL pointer deref in vdec_try_fmt_common	[Body]
[PATCH 5.10 281/798] media: rtl2832_sdr: use vb2_video_unregister_device() on remove to fix DMA leak	[Body]
[PATCH 5.10 282/798] media: rtl2832_sdr: release URBs and stream buffers on start_streaming() failure	[Body]
[PATCH 5.10 283/798] media: s2255: bound JPEG frame size before copying into the buffer	[Body]
[PATCH 5.10 284/798] media: s2255: check firmware size before reading trailing marker	[Body]
[PATCH 5.10 285/798] media: tda18250: fix possible integer overflow	[Body]
[PATCH 5.10 286/798] media: v4l2-fwnode: Fix fwnode leak in v4l2_fwnode_parse_link	[Body]
[PATCH 5.10 287/798] media: venus: fix payload size returned by parse_caps() and parse_alloc_mode()	[Body]
[PATCH 5.10 288/798] media: venus: fix payload size calculation in parse_raw_formats()	[Body]
[PATCH 5.10 289/798] media: video-i2c: fix kthread error pointer left in kthread_vid_cap on failure	[Body]
[PATCH 5.10 290/798] media: vimc: fix pixel format lookup in enum_framesizes	[Body]
[PATCH 5.10 291/798] scsi: qla2xxx: Zero SFP DMA buffer in FRU/I2C bsg handlers	[Body]
[PATCH 5.10 292/798] scsi: qla2xxx: Bound i2c->length in I2C bsg handlers	[Body]
[PATCH 5.10 293/798] scsi: qla2xxx: Fix Name Server logout detection on FWI2 adapters	[Body]
[PATCH 5.10 294/798] scsi: qla2xxx: Hold vport reference in qla24xx_report_id_acquisition()	[Body]
[PATCH 5.10 295/798] scsi: qla2xxx: Check entry_status in qla24xx_modify_vp_config()	[Body]
[PATCH 5.10 296/798] scsi: qla2xxx: Bound image count in qla2x00_update_fru_versions()	[Body]
[PATCH 5.10 297/798] scsi: qla2xxx: Clamp MSI-X derived queue counts to avoid truncation	[Body]
[PATCH 5.10 298/798] scsi: qla2xxx: Serialize flash version read in reset handler	[Body]
[PATCH 5.10 299/798] scsi: qla2xxx: Fix cs84xx use-after-free on host teardown	[Body]
[PATCH 5.10 300/798] scsi: qla2xxx: Fix FCE trace use-after-free during firmware dump	[Body]
[PATCH 5.10 301/798] scsi: qla2xxx: Zero mailbox struct in qla2x00_get_firmware_state()	[Body]
[PATCH 5.10 302/798] scsi: qla2xxx: Fix FCE trace enable parsing in debugfs	[Body]
[PATCH 5.10 303/798] scsi: qla2xxx: Dont query firmware state while chip is down	[Body]
[PATCH 5.10 304/798] scsi: qla2xxx: Avoid double completion in async IOCB timeout	[Body]
[PATCH 5.10 305/798] scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read	[Body]
[PATCH 5.10 306/798] scsi: qla2xxx: Avoid req_q_map double-read in qla2x00_error_entry()	[Body]
[PATCH 5.10 307/798] scsi: qla2xxx: Drop vport reference under lock in report ID acquisition	[Body]
[PATCH 5.10 308/798] scsi: qla2xxx: Use coherent DMA buffer for D_Port diagnostics	[Body]
[PATCH 5.10 309/798] scsi: qla2xxx: Zero-init bsg stack buffers to avoid info leak	[Body]
[PATCH 5.10 310/798] f2fs: return symlink writeback errors	[Body]
[PATCH 5.10 311/798] f2fs: reject overlapping move range after len expansion	[Body]
[PATCH 5.10 312/798] f2fs: fix i_size when pinned fallocate partially fails	[Body]
[PATCH 5.10 313/798] drm/bridge: dw-hdmi: fix i2c adapter leak on probe failure	[Body]
[PATCH 5.10 314/798] drm: fix race between partial drm_dev_register() failure and ioctl	[Body]
[PATCH 5.10 315/798] drm/sun4i: fix refcount leak in sun4i_backend_init_sat()	[Body]
[PATCH 5.10 316/798] drm/hibmc: Fix list of formats on the primary plane	[Body]
[PATCH 5.10 317/798] drm/amd/display: avoid divide-by-zero in __is_lut_linear()	[Body]
[PATCH 5.10 318/798] drm: Fix drm_crtc_commit leak if signaled when PAGE_FLIP_EVENT is used	[Body]
[PATCH 5.10 319/798] drm/amdgpu: use AMDGPU_GPU_PAGE_SHIFT instead of PAGE_SHIFT	[Body]
[PATCH 5.10 320/798] xhci: fix lost bounce buffers on TDs spanning several ring segments	[Body]
[PATCH 5.10 321/798] tcp: clear sock_ops cb flags before force-closing a child socket	[Body]
[PATCH 5.10 322/798] bpf: Guard stack limits against 32bit overflow	[Body]
[PATCH 5.10 323/798] net: fix NULL pointer dereference in l3mdev_l3_rcv	[Body]
[PATCH 5.10 324/798] bridge: mrp: reject zero test interval to avoid OOM panic	[Body]
[PATCH 5.10 325/798] net: af_key: zero aligned sockaddr tail in PF_KEY exports	[Body]
[PATCH 5.10 326/798] bpf: Fix same-register dst/src OOB read and pointer leak in sock_ops	[Body]
[PATCH 5.10 327/798] Input: aiptek - validate raw macro indices before updating state	[Body]
[PATCH 5.10 328/798] net: hns3: dont auto enable misc vector	[Body]
[PATCH 5.10 329/798] batman-adv: bla: avoid CRC corruption due to parallel claim add	[Body]
[PATCH 5.10 330/798] perf sched: Fix register_pid() overflow, strcpy, and BUG_ON	[Body]
[PATCH 5.10 331/798] firmware: stratix10-svc: Add mutex in stratix10 memory management	[Body]
[PATCH 5.10 332/798] clk: meson: align gxbb_32k_clk_sel number of parents with actual count	[Body]
[PATCH 5.10 333/798] bpf: Enforce expected_attach_type for tailcall compatibility	[Body]
[PATCH 5.10 334/798] drm/bridge: cdns-mhdp8546: Return an error pointer on allocation failure	[Body]
[PATCH 5.10 335/798] Smack: fix W=1 build warnings	[Body]
[PATCH 5.10 336/798] smack: fix incorrect task context in smack_msg_queue_msgrcv	[Body]
[PATCH 5.10 337/798] smack: mark smack_enabled global variable as __initdata	[Body]
[PATCH 5.10 338/798] smack: simplify write handlers of sysfs entries	[Body]
[PATCH 5.10 339/798] smack: deduplicate smackfs/{direct,mapped} file_operations	[Body]
[PATCH 5.10 340/798] smack: restrict smackfs/{direct,mapped} values to 0-255	[Body]
[PATCH 5.10 341/798] HID: core: quiesce input in hid_hw_stop() to prevent use-after-free	[Body]
[PATCH 5.10 342/798] HID: roccat: bound device-supplied profile index	[Body]
[PATCH 5.10 343/798] soc: samsung: exynos-pmu: fix of_node refcount leak in exynos_get_pmu_regmap()	[Body]
[PATCH 5.10 344/798] media: cec-pin: Fix event FIFO ordering	[Body]
[PATCH 5.10 345/798] clk: moxart: remove unused variables, fix refcount leak	[Body]
[PATCH 5.10 346/798] clk: hisilicon: reset: Use devm_kzalloc to initialize hisi_reset_controller	[Body]
[PATCH 5.10 347/798] ARM: imx: fix device_node refcount leak in imx_src_init()	[Body]
[PATCH 5.10 348/798] clk: imx: scu: Add A53 frequency scaling support	[Body]
[PATCH 5.10 349/798] clk: imx: scu: Add A72 frequency scaling support	[Body]
[PATCH 5.10 350/798] clk: imx: scu: drop redundant init.ops variable assignment	[Body]
[PATCH 5.10 351/798] drm/lima: call drm_mm_init() with a valid allocation range	[Body]
[PATCH 5.10 352/798] perf/x86/intel/uncore: Keep PCI PMUs working when MMIO/MSR setup fails	[Body]
[PATCH 5.10 353/798] pinctrl: bcm2835: Dont remove an unregistered GPIO chip	[Body]
[PATCH 5.10 354/798] media: keymaps: Remove obsolete RC_MAP_RC5_TV keymap define	[Body]
[PATCH 5.10 355/798] media: keymaps: Remove obsolete RC_MAP_HAUPPAUGE_NEW keymap define	[Body]
[PATCH 5.10 356/798] drm/amdgpu/pm/powerplay: bounds-check voltage index in SMU7 lookup	[Body]
[PATCH 5.10 357/798] drm/amdgpu/pm/powerplay: bounds-check voltage index in Vega10 lookup	[Body]
[PATCH 5.10 358/798] dmaengine: mediatek: mtk-uart-apdma: Return -ENOMEM on memory allocation failure	[Body]
[PATCH 5.10 359/798] dmaengine: xilinx_dma: Fix channel idle state management in AXIDMA and MCDMA interrupt handlers	[Body]
[PATCH 5.10 360/798] dmaengine: hisilicon: Return -ENOMEM on dynamic memory allocation in probe	[Body]
[PATCH 5.10 361/798] soundwire: add static port mapping support	[Body]
[PATCH 5.10 362/798] soundwire: qcom: update port map allocation bit mask	[Body]
[PATCH 5.10 363/798] soundwire: qcom: add static port map support	[Body]
[PATCH 5.10 364/798] soundwire: qcom: Fix port exhaustion check in stream_alloc_ports	[Body]
[PATCH 5.10 365/798] iio: orientation: hid-sensor-rotation: Avoid race between callback setup and device exposure	[Body]
[PATCH 5.10 366/798] csky: Fix a4/a5 restoration in syscall trace path	[Body]
[PATCH 5.10 367/798] selftests/rseq: Replace glibc-specific __GNUC_PREREQ with portable check	[Body]
[PATCH 5.10 368/798] platform/chrome: sensorhub: Fix memory overread in ring handler	[Body]
[PATCH 5.10 369/798] crypto: ecdh - move curve_id of ECDH from the key to algorithm name	[Body]
[PATCH 5.10 370/798] crypto: atmel-ecc - Struct headers need to start with keyword struct	[Body]
[PATCH 5.10 371/798] crypto: atmel-ecc - replace min_t with min	[Body]
[PATCH 5.10 372/798] crypto: atmel-ecc - clean up and improve ECDH comments	[Body]
[PATCH 5.10 373/798] crypto: atmel-ecc - reject hardware ECDH without a public key	[Body]
[PATCH 5.10 374/798] crypto: atmel-sha204a - fix heap info leak on I2C transfer failure	[Body]
[PATCH 5.10 375/798] crypto: sa2ul - Use the defined variable to clean code	[Body]
[PATCH 5.10 376/798] crypto: sa2ul - stop probe if context pool creation fails	[Body]
[PATCH 5.10 377/798] nvmet-rdma: factor out response resource cleanup	[Body]
[PATCH 5.10 378/798] bus: ti-sysc: Fix /chosen node reference leak	[Body]
[PATCH 5.10 379/798] PM: sleep: Fix off-by-one in wakelocks number limit check	[Body]
[PATCH 5.10 380/798] of: Add cleanup.h based auto release via __free(device_node) markings	[Body]
[PATCH 5.10 381/798] staging: greybus: audio: correct sscanf() return value check	[Body]
[PATCH 5.10 382/798] staging: sm750fb: gate dualview dataflow using g_dualview	[Body]
[PATCH 5.10 383/798] greybus: audio: bound the topology section sizes against the fetched size	[Body]
[PATCH 5.10 384/798] staging: fbtft: Use sysfs_emit_at() to print to sysfs file	[Body]
[PATCH 5.10 385/798] staging: octeon: add missing tasklet_kill in cvm_oct_tx_shutdown	[Body]
[PATCH 5.10 386/798] staging: octeon: fix free_irq dev_id mismatch in cvm_oct_rx_shutdown	[Body]
[PATCH 5.10 387/798] staging: octeon: ethernet-mem: replace pr_warn with dev_warn in free functions	[Body]
[PATCH 5.10 388/798] staging: rtl8723bs: fix mismatched free of HalData in rtw_sdio_if1_init()	[Body]
[PATCH 5.10 389/798] ALSA: via82xx: Remove unreachable branch in snd_via686_pcm_pointer()	[Body]
[PATCH 5.10 390/798] selftests/bpf: Fix memory leak in msg_alloc_iov error path	[Body]
[PATCH 5.10 391/798] selftests/bpf: Fix memory leak in msg_alloc_iov	[Body]
[PATCH 5.10 392/798] irqchip/gic-v3-its: Fix memleak in its_probe_one()	[Body]
[PATCH 5.10 393/798] selftests: timers: leap-a-day: Fix -w option and update usage comment	[Body]
[PATCH 5.10 394/798] clocksource: Unregister subsystem on device registration failure	[Body]
[PATCH 5.10 395/798] y2038: uapi: Use 64-bit __kernel_old_timespec::tv_nsec on x32	[Body]
[PATCH 5.10 396/798] timekeeping: Account for monotonicity adjustment in ntp_error	[Body]
[PATCH 5.10 397/798] clk: qcom: gdsc: propagate gdsc_check_status() errors from gdsc_poll_status	[Body]
[PATCH 5.10 398/798] clk: qcom: gdsc: propagate gdsc_enable() failure for ALWAYS_ON domains	[Body]
[PATCH 5.10 399/798] clk: qcom: gdsc: enable optional power domain support	[Body]
[PATCH 5.10 400/798] clk: qcom: gdsc: Release pm subdomains in reverse add order	[Body]
[PATCH 5.10 401/798] clk: qcom: gdsc: Capture pm_genpd_add_subdomain result code	[Body]
[PATCH 5.10 402/798] clk: qcom: gdsc: tear down per-domain genpds in gdsc_unregister()	[Body]
[PATCH 5.10 403/798] usb: gadget: r8a66597: avoid double free of ep0_req in probe error path	[Body]
[PATCH 5.10 404/798] udf: Mark LVID buffer as uptodate before marking it dirty	[Body]
[PATCH 5.10 405/798] bpf: Fix vmlinux BTF prep race in bpf_get_btf_vmlinux	[Body]
[PATCH 5.10 406/798] iommu/msm: Return -ENOMEM on memory allocation failure in probe	[Body]
[PATCH 5.10 407/798] iommu/amd: Prevent SB IOAPIC from overriding IVRS validation errors	[Body]
[PATCH 5.10 408/798] iommu/amd: Add support for Hygon family 18h model 4h IOAPIC	[Body]
[PATCH 5.10 409/798] iommu/amd: Fix false positive in SB IOAPIC IVRS validation	[Body]
[PATCH 5.10 410/798] leds: pca9532: Fix inverted GPIO output polarity	[Body]
[PATCH 5.10 411/798] hwspinlock: propagate errno when registering single lock	[Body]
[PATCH 5.10 412/798] usb: gadget: configfs: fix out-of-bounds read of qw_sign	[Body]
[PATCH 5.10 413/798] driver core: platform: reorder functions	[Body]
[PATCH 5.10 414/798] driver core: platform: change logic implementing platform_driver_probe	[Body]
[PATCH 5.10 415/798] driver core: platform: use bus_type functions	[Body]
[PATCH 5.10 416/798] driver core: platform: Emit a warning if a remove callback returned non-zero	[Body]
[PATCH 5.10 417/798] platform: Provide a remove callback that returns no value	[Body]
[PATCH 5.10 418/798] usb: renesas_usbhs: Fix power-off ordering on unbind	[Body]
[PATCH 5.10 419/798] drm/panel: samsung-s6d16d0: Power off on prepare failure	[Body]
[PATCH 5.10 420/798] iio: accel: dmard09: Implement IIO_CHAN_INFO_SCALE	[Body]
[PATCH 5.10 421/798] RDMA/core: Avoid flush_workqueue(system_unbound_wq) usage	[Body]
[PATCH 5.10 422/798] RDMA/core: Wait for RCU callbacks before unloading ib_core	[Body]
[PATCH 5.10 423/798] RDMA/ipoib: Drain RCU callbacks during module teardown	[Body]
[PATCH 5.10 424/798] hwrng: ks-sa - access private data via struct hwrng	[Body]
[PATCH 5.10 425/798] hwrng: ks-sa - Fix runtime PM cleanup on registration failure	[Body]
[PATCH 5.10 426/798] xfrm6: fix out-of-bounds write in xfrm6_input_addr() when secpath is full	[Body]
[PATCH 5.10 427/798] ALSA: hpi: Check transport errors during HPI6000 adapter initialization	[Body]
[PATCH 5.10 428/798] pmdomain: bcm: bcm2835: handle genpd provider registration errors	[Body]
[PATCH 5.10 429/798] misc: rtsx_usb: avoid USB I/O in runtime autosuspend	[Body]
[PATCH 5.10 430/798] RDMA/hfi1: Preserve unit 0 on allocation failure	[Body]
[PATCH 5.10 431/798] RDMA/hfi1: Remove redundant PCI device ID validation	[Body]
[PATCH 5.10 432/798] RDMA/hfi1: Create workqueues before device initialization	[Body]
[PATCH 5.10 433/798] RDMA/hfi1: Stop flushing the global IB workqueue	[Body]
[PATCH 5.10 434/798] RDMA/hfi1: Initialize debugfs after probe completes	[Body]
[PATCH 5.10 435/798] highmem: Provide generic variant of kmap_atomic*	[Body]
[PATCH 5.10 436/798] iov_iter: lift memzero_page() to highmem.h	[Body]
[PATCH 5.10 437/798] rpmsg: glink: Remove the rpmsg dev in close_ack	[Body]
[PATCH 5.10 438/798] rpmsg: glink: remove duplicate code for rpmsg device remove	[Body]
[PATCH 5.10 439/798] rpmsg: glink: fix deadlock in endpoint destroy during driver detach	[Body]
[PATCH 5.10 440/798] hfsplus: validate thread record before delete key rebuild	[Body]
[PATCH 5.10 441/798] wifi: ath11k: cap out-of-range rx MCS instead of leaving bogus rate	[Body]
[PATCH 5.10 442/798] libnvdimm/labels: Bound the on-media label size before the shift	[Body]
[PATCH 5.10 443/798] cpufreq: spear: Fix an IS_ERR() vs NULL bug in spear1340_set_cpu_rate()	[Body]
[PATCH 5.10 444/798] irqdomain: Introduce irq_domain_instantiate()	[Body]
[PATCH 5.10 445/798] irqdomain: Handle additional domain flags in irq_domain_instantiate()	[Body]
[PATCH 5.10 446/798] cpufreq: intel_pstate: Simplify intel_cpufreq_update_pstate()	[Body]
[PATCH 5.10 447/798] cpufreq: schedutil: Add util to struct sg_cpu	[Body]
[PATCH 5.10 448/798] cpufreq: schedutil: Fix self-contradictory comment in sugov_iowait_apply()	[Body]
[PATCH 5.10 449/798] remoteproc: qcom: Fix glink->node reference leak in qcom_add_glink_subdev	[Body]
[PATCH 5.10 450/798] drm/bridge: tc358767: clamp the reported AUX read size to the request	[Body]
[PATCH 5.10 451/798] gpu: host1x: Fix offset calculation in trace_write_gather	[Body]
[PATCH 5.10 452/798] gpu: host1x: Avoid stack over-read in debug output helpers	[Body]
[PATCH 5.10 453/798] media: ACPI / bus: Add acpi_dev_get_next_match_dev() and helper macro	[Body]
[PATCH 5.10 454/798] ACPI: move from strlcpy() with unused retval to strscpy()	[Body]
[PATCH 5.10 455/798] ACPI: processor: idle: Expand _LPI package sanity checks	[Body]
[PATCH 5.10 456/798] usb: gadget: f_uac1_legacy: remove broken string configfs attributes	[Body]
[PATCH 5.10 457/798] tty: hvc: restrict HVC_DCC to ARMv6+ and ARM64	[Body]
[PATCH 5.10 458/798] UDF symlink pathComponent header OOB read	[Body]
[PATCH 5.10 459/798] uio: Fix stale info pointer in failed registration path	[Body]
[PATCH 5.10 460/798] accessibility: speakup: Fix incorrect string length computation in report_char_chartab_status()	[Body]
[PATCH 5.10 461/798] speakup: keyhelp: guard letter_offsets possible out-of-range indexing	[Body]
[PATCH 5.10 462/798] misc: rtsx: add missing write register handling	[Body]
[PATCH 5.10 463/798] misc: ad525x_dpot: Make ad_dpot_remove() return void	[Body]
[PATCH 5.10 464/798] misc: ad525x_dpot: use driver core groups for sysfs files	[Body]
[PATCH 5.10 465/798] ppdev: prevent overflow when setting port timeout	[Body]
[PATCH 5.10 466/798] char: xilinx_hwicap: unregister class on init errors	[Body]
[PATCH 5.10 467/798] vfio/pci: clear vdev->msi_perm after freeing it on init failure	[Body]
[PATCH 5.10 468/798] soc: ti: knav_qmss_queue: Implement resource cleanup in remove()	[Body]
[PATCH 5.10 469/798] soc: ti: knav_qmss: Remove debugfs file on teardown	[Body]
[PATCH 5.10 470/798] mtd: mtdswap: Avoid freeing registered blktrans device twice	[Body]
[PATCH 5.10 471/798] mtd: part: reject MTDPART_OFS_RETAIN in mtd_add_partition()	[Body]
[PATCH 5.10 472/798] perf ui hists: Fix uninitialized stack memory free on pstack allocation failure	[Body]
[PATCH 5.10 473/798] software node: Fix software_node_get_reference_args() with index -1	[Body]
[PATCH 5.10 474/798] driver core: soc: remove layering violation for the soc_bus	[Body]
[PATCH 5.10 475/798] driver core: soc: Unregister bus on early device registration failure	[Body]
[PATCH 5.10 476/798] dmaengine: dw-edma: Serialize abort state updates	[Body]
[PATCH 5.10 477/798] dmaengine: dw-edma: Serialize channel state checks	[Body]
[PATCH 5.10 478/798] dmaengine: dw-edma: Clear stale requests on termination	[Body]
[PATCH 5.10 479/798] ASoC: meson: Keep link pointers valid on realloc failure	[Body]
[PATCH 5.10 480/798] RDMA/hfi1: Propagate sdma_txinit_ahg() errors	[Body]
[PATCH 5.10 481/798] RDMA/srpt: Fix srpt_alloc_rw_ctxs() unwind counters	[Body]
[PATCH 5.10 482/798] irqchip/gic-v3-its: Prevent leak in its_vpe_irq_domain_alloc()	[Body]
[PATCH 5.10 483/798] ACPI: processor: validate MADT IOAPIC entry bounds	[Body]
[PATCH 5.10 484/798] ACPI: PCI: Clear driver_data on all paths that free the acpi_pci_root	[Body]
[PATCH 5.10 485/798] ext4: skip extra isize expansion during mount to prevent deadlock	[Body]
[PATCH 5.10 486/798] scsi: qla2xxx: Drop TARGET_SCF_LOOKUP_LUN_FROM_TAG	[Body]
[PATCH 5.10 487/798] scsi: target: Remove TARGET_SCF_LOOKUP_LUN_FROM_TAG	[Body]
[PATCH 5.10 488/798] scsi: qla2xxx: Move sess cmd list/lock to driver	[Body]
[PATCH 5.10 489/798] scsi: target: core: Replace in_interrupt() usage in target_submit_cmd_map_sgls()	[Body]
[PATCH 5.10 490/798] scsi: target: core: Rename transport_init_se_cmd()	[Body]
[PATCH 5.10 491/798] scsi: target: core: Break up target_submit_cmd_map_sgls()	[Body]
[PATCH 5.10 492/798] scsi: target: srpt: Convert to new submission API	[Body]
[PATCH 5.10 493/798] RDMA/srpt: Pass the mapped task attribute to target_init_cmd()	[Body]
[PATCH 5.10 494/798] RDMA/restrack: Fix typos in the comments	[Body]
[PATCH 5.10 495/798] iommu/arm-smmu: Add missing pm_runtime_disable() in qcom_iommu_device_probe	[Body]
[PATCH 5.10 496/798] iommu/qcom: Remove sysfs device on probe failure path	[Body]
[PATCH 5.10 497/798] iommu/qcom: Fix inverted fault report check in qcom_iommu_fault()	[Body]
[PATCH 5.10 498/798] thermal: int340x_thermal: Consolidate priv->data_vault checks	[Body]
[PATCH 5.10 499/798] thermal: intel: int3400: clean up ODVP on probe failures	[Body]
[PATCH 5.10 500/798] ext4: drain in-flight DIO before buffered write fallback	[Body]
[PATCH 5.10 501/798] wifi: ath6kl: avoid buffer overreads in WMI event handlers	[Body]
[PATCH 5.10 502/798] wifi: ath11k: Correctly copy the hint BSSID in WMI scan request	[Body]
[PATCH 5.10 503/798] ath11k: add trace log support	[Body]
[PATCH 5.10 504/798] wifi: ath11k: Avoid buffer overread in ath11k_wmi_tlv_op_rx()	[Body]
[PATCH 5.10 505/798] ARM: dts: allwinner: a10: Fix PMU interrupt	[Body]
[PATCH 5.10 506/798] perf cs-etm: Flush thread stacks after decoder reset	[Body]
[PATCH 5.10 507/798] perf cs-etm: Avoid truncating AUX buffer sizes to int	[Body]
[PATCH 5.10 508/798] leds: pca9532: Fix phantom device registration on missing hardware	[Body]
[PATCH 5.10 509/798] drm/tve200: add OF module alias for autoloading	[Body]
[PATCH 5.10 510/798] netfilter: nf_nat_sip: rewind offset when NAT shrinks the packet	[Body]
[PATCH 5.10 511/798] arm64: dts: rockchip: Add gru-scarlet-dumo board	[Body]
[PATCH 5.10 512/798] arm64: dts: rockchip: Fix PCI node addresses on rk3399-gru	[Body]
[PATCH 5.10 513/798] arm64: dts: rockchip: Fix Gru WLAN sideband interrupt	[Body]
[PATCH 5.10 514/798] ARM: lpc32xx: only run SoC init on LPC32xx hardware	[Body]
[PATCH 5.10 515/798] power: supply: sbs-battery: cache constant string properties	[Body]
[PATCH 5.10 516/798] power: supply: sbs-battery: Use a per-device serial number buffer	[Body]
[PATCH 5.10 517/798] RDMA/mlx5: Fix integer overflow of user QP buffer size	[Body]
[PATCH 5.10 518/798] isofs: release zisofs block pointer buffer head	[Body]
[PATCH 5.10 519/798] w1: ds2482: Fix signedness bug in ds2482_w1_triplet()	[Body]
[PATCH 5.10 520/798] remoteproc: Remove useless check in rproc_del()	[Body]
[PATCH 5.10 521/798] remoteproc: Add new RPROC_ATTACHED state	[Body]
[PATCH 5.10 522/798] remoteproc: use freezable workqueue for crash notifications	[Body]
[PATCH 5.10 523/798] remoteproc: Use unbounded workqueue for recovery work	[Body]
[PATCH 5.10 524/798] remoteproc: core: Attach rproc asynchronously in rproc_add() path via schedule_work()	[Body]
[PATCH 5.10 525/798] remoteproc: Prevent crash handling to race with rproc_del()	[Body]
[PATCH 5.10 526/798] staging: rtl8723bs: use kfree_sensitive() for key material	[Body]
[PATCH 5.10 527/798] RDMA/efa: Fix PBL chunk length computation	[Body]
[PATCH 5.10 528/798] arm64: dts: allwinner: sun50i-a64-pinephone: Fix mpu6050 mount matrix	[Body]
[PATCH 5.10 529/798] clk: tegra: tegra124-emc: put EMC node on register failure	[Body]
[PATCH 5.10 530/798] clk: palmas: Manage external-control prepare with devm	[Body]
[PATCH 5.10 531/798] clk/x86: pmc_atom: add kasprintf return value check	[Body]
[PATCH 5.10 532/798] nilfs2: fix infinite loop in nilfs_clean_segments()	[Body]
[PATCH 5.10 533/798] nilfs2: prevent out-of-bounds read in super root block parsing	[Body]
[PATCH 5.10 534/798] RDMA/mlx5: Fix stack out-of-bounds read in cc_params debugfs	[Body]
[PATCH 5.10 535/798] RDMA/mlx5: Send cong param changes to the resolved port mdev	[Body]
[PATCH 5.10 536/798] RDMA/cxgb4: free STAG index when TPT entry write fails	[Body]
[PATCH 5.10 537/798] IB/isert: reject PDUs declaring more data than was received	[Body]
[PATCH 5.10 538/798] IB/isert: reject login PDUs declaring more data than was received	[Body]
[PATCH 5.10 539/798] nvme-fc: unmap cmd_iu DMA on rsp_iu mapping failure in init_request	[Body]
[PATCH 5.10 540/798] wifi: rtlwifi: pci: fix error path in rtl_pci_probe()	[Body]
[PATCH 5.10 541/798] md/raid5-ppl: fix use-after-free in ppl_do_flush()	[Body]
[PATCH 5.10 542/798] selftests/zram: fix kernel_gte() for POSIX sh	[Body]
[PATCH 5.10 543/798] power: supply: isp1704_charger: cancel work on remove	[Body]
[PATCH 5.10 544/798] power: supply: sc2731_charger: Convert to platform remove callback returning void	[Body]
[PATCH 5.10 545/798] power: supply: sc2731_charger: cancel work on remove	[Body]
[PATCH 5.10 546/798] bpf: Fix potential UAF in bpf_netns_link_update_prog	[Body]
[PATCH 5.10 547/798] lib/test_hmm: fail dmirror_fault() when the mirrored mm is gone	[Body]
[PATCH 5.10 548/798] clk: qcom: Return expected ENOMEM error on dynamic allocation failure	[Body]
[PATCH 5.10 549/798] iommu/dma: Check atomic pool allocation result directly	[Body]
[PATCH 5.10 550/798] i3c: dw: avoid shift-out-of-bounds when DAA assigns no devices	[Body]
[PATCH 5.10 551/798] i3c: master: Fix device_register() error path	[Body]
[PATCH 5.10 552/798] locking/lockdep: Fix NULL pointer dereference in __lock_set_class()	[Body]
[PATCH 5.10 553/798] misc: vmc_vmci: Fix potential memory leak in vmci_event_subscribe()	[Body]
[PATCH 5.10 554/798] fanotify: report full event length for FIONREAD	[Body]
[PATCH 5.10 555/798] wifi: mt76: mt76x02: do not WARN on invalid rx descriptor length	[Body]
[PATCH 5.10 556/798] wifi: mt76: mt7915: avoid nss underflow in mt7915_mcu_get_sta_nss	[Body]
[PATCH 5.10 557/798] wifi: mt76: mt7915: use little-endian for bss_info_ra wire fields	[Body]
[PATCH 5.10 558/798] perf: arm_spe: Make wakeup range check overflow safe	[Body]
[PATCH 5.10 559/798] drm/msm/dsi: Drop dev_pm_opp_set_rate(0)	[Body]
[PATCH 5.10 560/798] wifi: ath11k: fix leak in ath11k_service_ready_ext_event()	[Body]
[PATCH 5.10 561/798] regulator: core: use system_freezable_wq for init complete work	[Body]
[PATCH 5.10 562/798] perf machine: Guard against NULL strlist in machines__findnew()	[Body]
[PATCH 5.10 563/798] perf machine: Use snprintf() for guestmount path construction	[Body]
[PATCH 5.10 564/798] perf machine: Check snprintf truncation in machines__findnew()	[Body]
[PATCH 5.10 565/798] perf machine: Dont abort guest map creation on first inaccessible dir	[Body]
[PATCH 5.10 566/798] perf machine: Reset errno before strtol in guest kernel map creation	[Body]
[PATCH 5.10 567/798] perf machine: Free scandir entries in guest kernel map creation	[Body]
[PATCH 5.10 568/798] perf machine: Check snprintf truncation for guest kallsyms path	[Body]
[PATCH 5.10 569/798] wifi: ath10k: snoc: use memcpy_fromio() for MSA ramdump	[Body]
[PATCH 5.10 570/798] iommu/arm-smmu-v3: Convert to use atomic poll timeout	[Body]
[PATCH 5.10 571/798] wifi: zd1211rw: reject secondary interfaces to prevent conflicts	[Body]
[PATCH 5.10 572/798] mac80211: add ieee80211_is_tx_data helper function	[Body]
[PATCH 5.10 573/798] firmware: coreboot: Check size of table entry and use flex-array	[Body]
[PATCH 5.10 574/798] firmware: google: Add bounds checks in coreboot_table_populate()	[Body]
[PATCH 5.10 575/798] firmware: coreboot: Validate table bounds	[Body]
[PATCH 5.10 576/798] powerpc/smp: add NULL guard for cause_ipi in smp_muxed_ipi_message_pass	[Body]
[PATCH 5.10 577/798] MIPS: ptrace: Fix syscall skipping via PTRACE_SYSCALL	[Body]
[PATCH 5.10 578/798] serial: amba-pl011: unprepare console clock on unregister	[Body]
[PATCH 5.10 579/798] tty: clear cdev pointer after cdev_add() failure	[Body]
[PATCH 5.10 580/798] HID: split apart hid_device_probe to make logic more apparent	[Body]
[PATCH 5.10 581/798] HID: ensure timely release of driver-allocated resources	[Body]
[PATCH 5.10 582/798] HID: synchronize input before cleaning up a failed probe	[Body]
[PATCH 5.10 583/798] HID: i2c-hid: Switch i2c_hid_parse() to goto style error handling	[Body]
[PATCH 5.10 584/798] HID: i2c-hid: Fix "(null)" output when reading report descriptor fails	[Body]
[PATCH 5.10 585/798] HID: lg4ff: validate report length before fixed offsets	[Body]
[PATCH 5.10 586/798] perf thread-stack: Fix heap buffer overflow on branch stack wrap copy	[Body]
[PATCH 5.10 587/798] perf auxtrace: Fix queue grow overflow and old array leak	[Body]
[PATCH 5.10 588/798] perf intel-pt: Fix off-by-one in auxtrace_info minimum size check	[Body]
[PATCH 5.10 589/798] perf intel-bts: Fix off-by-one in auxtrace_info minimum size check	[Body]
[PATCH 5.10 590/798] iio: light: tsl2772: fix ALS calibscale readback	[Body]
[PATCH 5.10 591/798] iio: light: isl29028: return zero in write_raw() on success	[Body]
[PATCH 5.10 592/798] iio: light: tsl2583: return zero in write_raw() on success	[Body]
[PATCH 5.10 593/798] phonet: pep: do not write beyond optlen in getsockopt	[Body]
[PATCH 5.10 594/798] block/blk-stat: drain per-cpu callback stats over possible CPUs	[Body]
[PATCH 5.10 595/798] block/blk-iocost: collect per-cpu latency stats over possible CPUs	[Body]
[PATCH 5.10 596/798] block/kyber-iosched: flush per-cpu latency buckets over possible CPUs	[Body]
[PATCH 5.10 597/798] lib/string: fix memchr_inv() for large ranges	[Body]
[PATCH 5.10 598/798] pps: dont try to wait for negative timeouts in PPS_FETCH	[Body]
[PATCH 5.10 599/798] rapidio: clear mport->net when rio_add_net() fails	[Body]
[PATCH 5.10 600/798] fat: release buffer head after rebuilding parent	[Body]
[PATCH 5.10 601/798] PCI/sysfs: Add static PCI resource attribute macros	[Body]
[PATCH 5.10 602/798] remoteproc: Add a rproc_set_firmware() API	[Body]
[PATCH 5.10 603/798] remoteproc: Add new detach() remoteproc operation	[Body]
[PATCH 5.10 604/798] remoteproc: Introduce function __rproc_detach()	[Body]
[PATCH 5.10 605/798] remoteproc: Introduce function rproc_detach()	[Body]
[PATCH 5.10 606/798] remoteproc: Fix various kernel-doc warnings	[Body]
[PATCH 5.10 607/798] remoteproc: Move resource table data structure to its own header	[Body]
[PATCH 5.10 608/798] remoteproc: use rsc_table_for_each_entry() in rproc_handle_resources()	[Body]
[PATCH 5.10 609/798] remoteproc: fix OOB read via signed offset in rsc_table_for_each_entry()	[Body]
[PATCH 5.10 610/798] scripts/tags.sh: improve compiled sources generation	[Body]
[PATCH 5.10 611/798] scripts/tags.sh: Prevent binary files appearing in cscope.files	[Body]
[PATCH 5.10 612/798] RDMA/srp: fix heap information leak on a truncated SRP_CRED_REQ	[Body]
[PATCH 5.10 613/798] ARM: 9485/1: mm: acquire mmap write lock around show_pte() for user faults	[Body]
[PATCH 5.10 614/798] ocfs2: use bitmap API in fill_node_map	[Body]
[PATCH 5.10 615/798] ocfs2: synchronize heartbeat callbacks with o2net teardown	[Body]
[PATCH 5.10 616/798] drm/sun4i: vi scaler: Fix coefficient selection	[Body]
[PATCH 5.10 617/798] of: property: add missing kerneldoc for of_graph_get_endpoint_count()	[Body]
[PATCH 5.10 618/798] of: property: use unsigned int return on of_graph_get_endpoint_count()	[Body]
[PATCH 5.10 619/798] bitfield: Add less-checking __FIELD_{GET,PREP}()	[Body]
[PATCH 5.10 620/798] bitfield: Add non-constant field_{prep,get}() helpers	[Body]
[PATCH 5.10 621/798] drm/sun4i: tcon: Drop TCON TOP device reference	[Body]
[PATCH 5.10 622/798] drm/sun4i: crtc: Propagate layer initialization error	[Body]
[PATCH 5.10 623/798] drm/sun4i: tcon: Drop remote endpoint reference	[Body]
[PATCH 5.10 624/798] drm/sun4i: dw-hdmi: Drop TCON TOP port reference	[Body]
[PATCH 5.10 625/798] drm/sun4i: hdmi-phy: Fix H6 8-bit MPLL config at 594 MHz	[Body]
[PATCH 5.10 626/798] cpufreq: imx6q: fix devres accumulation across driver rebind	[Body]
[PATCH 5.10 627/798] cpufreq: imx6q: fix out-of-bounds write when probed more than once	[Body]
[PATCH 5.10 628/798] IB/isert: delay the final Login Response until the session is registered	[Body]
[PATCH 5.10 629/798] IB/isert: post the full-feature receive buffers after session registration	[Body]
[PATCH 5.10 630/798] RDMA/siw: Introduce siw_free_cm_id	[Body]
[PATCH 5.10 631/798] RDMA/siw: Fix use-after-free in siw_accept()	[Body]
[PATCH 5.10 632/798] arm64: hibernate: mask DAIF before restoring hibernated kernel	[Body]
[PATCH 5.10 633/798] arm64: hibernate: Restore DAIF state on error	[Body]
[PATCH 5.10 634/798] mfd: rave-sp: validate received frame payload lengths	[Body]
[PATCH 5.10 635/798] mfd: iqs62x: Reject zero-length firmware records	[Body]
[PATCH 5.10 636/798] drm/amdgpu/gfx6: Fixup emit_cntxcntl()	[Body]
[PATCH 5.10 637/798] perf trace-event: Fix buffer overflow in read_string()	[Body]
[PATCH 5.10 638/798] drm/amdgpu/gfx6: Fixup emitting SWITCH_BUFFER packets	[Body]
[PATCH 5.10 639/798] drm/amdgpu/gfx6: Use PFP on the compute queues too	[Body]
[PATCH 5.10 640/798] scsi: qla2xxx: Remove redundant VPD flash read in sysfs read path	[Body]
[PATCH 5.10 641/798] firmware_loader: Check fw_state_is_done in loading_store	[Body]
[PATCH 5.10 642/798] firmware_loader: do not queue completed sysfs fallback requests	[Body]
[PATCH 5.10 643/798] pinctrl: rockchip: Reset the pin count when recalculating SoC data	[Body]
[PATCH 5.10 644/798] hugetlbfs: release subpool on fill_super failure	[Body]
[PATCH 5.10 645/798] phy: qcom: snps-femto-v2: Fix possible NULL-deref on early runtime suspend	[Body]
[PATCH 5.10 646/798] regulator: qcom-rpmh: Fix PMIC5 BOB bypass mode handling	[Body]
[PATCH 5.10 647/798] sched/fair: Introduce a CPU capacity comparison helper	[Body]
[PATCH 5.10 648/798] sched/fair: Check CPU capacity before comparing group types during load balance	[Body]
[PATCH 5.10 649/798] Bluetooth: btusb: Fix BD_ADDR byte order in btusb_set_bdaddr_wcn6855()	[Body]
[PATCH 5.10 650/798] perf trace-event: Fix integer truncation in do_read() and skip()	[Body]
[PATCH 5.10 651/798] Bluetooth: MSFT: validate evt_prefix_len against the response length	[Body]
[PATCH 5.10 652/798] iio: light: gp2ap002: Fix unbalanced runtime PM on repeated event writes	[Body]
[PATCH 5.10 653/798] iio: light: gp2ap002: re-enable irq if runtime suspend fails	[Body]
[PATCH 5.10 654/798] arm64: dts: turris-mox: fix usb3 phys	[Body]
[PATCH 5.10 655/798] ARM: dts: helios4: add vcc-supply to EEPROM	[Body]
[PATCH 5.10 656/798] ARM: dts: helios4: add vcc-supply to GPIO expander	[Body]
[PATCH 5.10 657/798] ARM: dts: helios4: add SATA regulator supplies	[Body]
[PATCH 5.10 658/798] perf stat: Clear screen only if output file is a tty	[Body]
[PATCH 5.10 659/798] perf stat: Fix evsel_list leak in cmd_stat	[Body]
[PATCH 5.10 660/798] perf synthetic-events: Fix uninitialized pthread_join	[Body]
[PATCH 5.10 661/798] perf synthetic-events: Fix divide by zero in perf_event__synthesize_threads	[Body]
[PATCH 5.10 662/798] fbdev: kyro: Validate overlay viewport coordinates	[Body]
[PATCH 5.10 663/798] iommu/vt-d: Fix UCTP context table slot when copying root entries	[Body]
[PATCH 5.10 664/798] m68k: Fix backtraces for non-running tasks	[Body]
[PATCH 5.10 665/798] SUNRPC: check rpc_sockaddr2uaddr() return value in rpcb_register_inet4/6	[Body]
[PATCH 5.10 666/798] powerpc/configs: enable CONFIG_RAS to fix EDAC support	[Body]
[PATCH 5.10 667/798] spi: sprd-adi: Fix probe succeeding without registering the controller	[Body]
[PATCH 5.10 668/798] nfc: llcp: avoid userspace overflow on invalid optlen	[Body]
[PATCH 5.10 669/798] nfc: llcp: read llcp_sock->local under the socket lock in getsockopt	[Body]
[PATCH 5.10 670/798] nfc: nci: fix double completion race in nci_data_exchange_complete	[Body]
[PATCH 5.10 671/798] nfc: llcp: bound SNL TLV parsing to the skb and add length checks	[Body]
[PATCH 5.10 672/798] nfc: pn533: hold a reference to the request skb during send_frame	[Body]
[PATCH 5.10 673/798] nfc: digital: Do not dump a NULL response in command completion	[Body]
[PATCH 5.10 674/798] dmaengine: qcom-bam-dma: fix autosuspend cleanup during removal	[Body]
[PATCH 5.10 675/798] RDMA/cxgb4: Free debugfs on registration failure	[Body]
[PATCH 5.10 676/798] RDMA/cma: Fix WARNING in res_to_rt	[Body]
[PATCH 5.10 677/798] ASoC: pxa: Use devm_clk_get_optional() for extclk clock	[Body]
[PATCH 5.10 678/798] ASoC: fsl-asoc-card: defer probe when the CPU DAI device is not ready	[Body]
[PATCH 5.10 679/798] ubi: Fix repeated words in comments	[Body]
[PATCH 5.10 680/798] ubi: fastmap: Use the bitmap API to allocate bitmaps	[Body]
[PATCH 5.10 681/798] ubi: fastmap: Fix missed ec updating after erasing old fastmap data block	[Body]
[PATCH 5.10 682/798] ubi: fastmap: erase_block: Get erase counter from wl_entry rather than flash	[Body]
[PATCH 5.10 683/798] ubi: fastmap: Allocate memory with GFP_NOFS in ubi_update_fastmap	[Body]
[PATCH 5.10 684/798] ubi: Replace erase_block() with sync_erase()	[Body]
[PATCH 5.10 685/798] UBI: Preserve torture flag when rescheduling failed erasures	[Body]
[PATCH 5.10 686/798] UBI: fastmap: Pass to_be_tortured when reusing old fastmap PEBs	[Body]
[PATCH 5.10 687/798] ubi: fastmap: Add fastmap control support for UBI_IOCATT ioctl	[Body]
[PATCH 5.10 688/798] ubi: fastmap: Add fastmap control support for module parameter	[Body]
[PATCH 5.10 689/798] ubi: Simplify bool conversion	[Body]
[PATCH 5.10 690/798] ubi: fastmap: Wait until there are enough free PEBs before filling pools	[Body]
[PATCH 5.10 691/798] ubi: fastmap: Fix lapsed wear leveling for first 64 PEBs	[Body]
[PATCH 5.10 692/798] ubi: fastmap: Add module parameter to control reserving filling pool PEBs	[Body]
[PATCH 5.10 693/798] ubi: Fix rollback for explicit UBI device numbers	[Body]
[PATCH 5.10 694/798] ASoC: xilinx: formatter_pcm: fix stream_data leak on open error	[Body]
[PATCH 5.10 695/798] UBI: fix two issues in the ubi.mtd MODULE_PARM_DESC	[Body]
[PATCH 5.10 696/798] spi: img-spfi: dont disable runtime PM on DMA deferred probe	[Body]
[PATCH 5.10 697/798] power: supply: bd99954: Drop bad register fields	[Body]
[PATCH 5.10 698/798] power: supply: bq27xxx: bq27520g4: fix REG_TTES address	[Body]
[PATCH 5.10 699/798] power: supply: bq27xxx: bq28z610: fix invalid AverageEnergy address	[Body]
[PATCH 5.10 700/798] power: supply: bq27xxx: bq27z561: fix invalid AverageEnergy address	[Body]
[PATCH 5.10 701/798] xenbus: Unregister reboot notifier on init failure	[Body]
[PATCH 5.10 702/798] clocksource/drivers/clps711x: Do not unmap clocksource MMIO	[Body]
[PATCH 5.10 703/798] clocksource/drivers/armada: Unwind timer clock on init failure	[Body]
[PATCH 5.10 704/798] x86/pkeys: Fix pkey_alloc() return value when pkeys are not supported	[Body]
[PATCH 5.10 705/798] bpftool: Fix double close in map dump	[Body]
[PATCH 5.10 706/798] ocfs2: fix circular locking dependency in ocfs2_init_acl()	[Body]
[PATCH 5.10 707/798] Squashfs: check block offset is not negative	[Body]
[PATCH 5.10 708/798] scsi: mpt3sas: Avoid freeing unallocated PCIe SGL buffers	[Body]
[PATCH 5.10 709/798] seq_buf: Add seq_buf_terminate() API	[Body]
[PATCH 5.10 710/798] tracing: Add a verifier to check string pointers for trace events	[Body]
[PATCH 5.10 711/798] tracing: Add DYNAMIC flag for dynamic events	[Body]
[PATCH 5.10 712/798] tracing: Have TRACE_DEFINE_ENUM affect trace event types as well	[Body]
[PATCH 5.10 713/798] bpf: Fix pending_pos walk on 32-bit ring position wrap	[Body]
[PATCH 5.10 714/798] perf dso: Guard close() against invalid fd in dso__decompress_kmodule_path()	[Body]
[PATCH 5.10 715/798] perf dso: Guard against cache underflow on short reads in dso_cache__memcpy()	[Body]
[PATCH 5.10 716/798] mailbox: rockchip: disable pclk on probe failure and unbind	[Body]
[PATCH 5.10 717/798] hwmon: (emc1403) Add support for EMC1442	[Body]
[PATCH 5.10 718/798] lwt_bpf: Restore reserved headroom after xmit program	[Body]
[PATCH 5.10 719/798] bpf: Reject negative optlen in cgroup getsockopt hook	[Body]
[PATCH 5.10 720/798] NFS: Always clear an invalid mapping when attempting a buffered write	[Body]
[PATCH 5.10 721/798] nfs: replace atomic bitops sequence with clear_and_wake_up_bit helper	[Body]
[PATCH 5.10 722/798] NFSv4/pnfs: Clean up layout get on open	[Body]
[PATCH 5.10 723/798] nfs: refactor pNFS functions using clear_and_wake_up_bit	[Body]
[PATCH 5.10 724/798] NFSv4: remove callback IDR entry on client allocation failure	[Body]
[PATCH 5.10 725/798] net: kcm: Hold RCU read lock while running BPF parser	[Body]
[PATCH 5.10 726/798] pppox: drain queued packets on channel handoff	[Body]
[PATCH 5.10 727/798] hsr: Use a single struct for self_node.	[Body]
[PATCH 5.10 728/798] net: hsr: Use full string description when opening HSR network device	[Body]
[PATCH 5.10 729/798] ipvs: fix integer overflow in ftp helper port/address parsing	[Body]
[PATCH 5.10 730/798] net: bridge: vlan: fix inverted default vlan notification	[Body]
[PATCH 5.10 731/798] ALSA: hda: Fix connection list comparison in proc output	[Body]
[PATCH 5.10 732/798] 8139cp: fix Rx and Tx not being disabled in cp_suspend	[Body]
[PATCH 5.10 733/798] vsock: use sock_error() to consume sk_err after a failed connect	[Body]
[PATCH 5.10 734/798] bonding: initialize err for empty target lists	[Body]
[PATCH 5.10 735/798] virtio_balloon: disable indirect descriptors	[Body]
[PATCH 5.10 736/798] vdpa/mlx5: fix wrong list iterated in add_direct_chain error path	[Body]
[PATCH 5.10 737/798] rtc: pcf8563: fix clock provider leak on unbind	[Body]
[PATCH 5.10 738/798] prctl: fix PR_SET_MM_AUXV losing the forced AT_NULL terminator	[Body]
[PATCH 5.10 739/798] RDMA/ucma: Allow path records to exactly fit the output buffer	[Body]
[PATCH 5.10 740/798] net: bridge: Reject descending VLAN tunnel ranges	[Body]
[PATCH 5.10 741/798] net: thunderbolt: Count delivered packets in rx_packets and rx_bytes	[Body]
[PATCH 5.10 742/798] forcedeth: stop the tx_timeout register dump past the requested window	[Body]
[PATCH 5.10 743/798] net/smc: free pending qentry in smc_llc_flow_stop() before memset	[Body]
[PATCH 5.10 744/798] NFSv4.2: fix LAYOUTSTATS send buffer exhaustion	[Body]
[PATCH 5.10 745/798] nfs: move the nfs4_data_server_cache into struct nfs_net	[Body]
[PATCH 5.10 746/798] NFSv4/pnfs: key the data server cache on the NFS version	[Body]
[PATCH 5.10 747/798] scsi: qla2xxx: Fix an loop timeout test	[Body]
[PATCH 5.10 748/798] Bluetooth: compute LE flow credits based on recvbuf space	[Body]
[PATCH 5.10 749/798] bluetooth/l2cap: sync sock recv cb and release	[Body]
[PATCH 5.10 750/798] Bluetooth: 6lowpan: fix cyclic locking warning on netdev unregister	[Body]
[PATCH 5.10 751/798] Bluetooth: btmtksdio: Take exclusive ownership of the SKB before TX	[Body]
[PATCH 5.10 752/798] Bluetooth: RFCOMM: Validate MTU in rfcomm_apply_pn() to prevent infinite loop	[Body]
[PATCH 5.10 753/798] gtp: add synchronize_net() in gtp_newlink() error path to prevent use-after-free	[Body]
[PATCH 5.10 754/798] net: qualcomm: rmnet: restore skb->dev on deaggregated frames	[Body]
[PATCH 5.10 755/798] net/rds: use wq_has_sleeper() in rds_cong_map_updated()	[Body]
[PATCH 5.10 756/798] cifs: fix clearing stats for fastest execution of each smb2 command	[Body]
[PATCH 5.10 757/798] net: ip6_gre: Remove the unused function ip6gre_tnl_addr_conflict()	[Body]
[PATCH 5.10 758/798] net_sched: sch_fq: struct sched_data reorg	[Body]
[PATCH 5.10 759/798] net_sched: sch_fq: change how @inactive is tracked	[Body]
[PATCH 5.10 760/798] net_sched: export pfifo_fast prio2band[]	[Body]
[PATCH 5.10 761/798] net/sched: fq_codel: clamp default quantum and mtu	[Body]
[PATCH 5.10 762/798] net/sched: sch_codel: clamp default mtu to avoid disabling CoDel	[Body]
[PATCH 5.10 763/798] net/sched: fq_pie: clamp default quantum to avoid signed overflow	[Body]
[PATCH 5.10 764/798] net/sched: hhf: clamp quantum before hhf_change() to avoid overflow	[Body]
[PATCH 5.10 765/798] net/sched: sfq: clamp quantum to avoid signed overflow soft lockup	[Body]
[PATCH 5.10 766/798] net/sched: sch_teql: restore skb->dev on the slave failure path	[Body]
[PATCH 5.10 767/798] tpm: st33zp24: Return zero on status read failure	[Body]
[PATCH 5.10 768/798] tpm: st33zp24: Validate locality read result	[Body]
[PATCH 5.10 769/798] apparmor: Replace sprintf/strcpy with scnprintf/strscpy in aa_policy_init	[Body]
[PATCH 5.10 770/798] apparmor: policy_int make sure list heads are initialized before fail path	[Body]
[PATCH 5.10 771/798] ASoC: dapm: Fix off-by-one check on the second enum channel	[Body]
[PATCH 5.10 772/798] net: ethernet: sun4i-emac: Fix IRQ error handling	[Body]
[PATCH 5.10 773/798] netfilter: nf_tables: move hardware offload step after building the chain blob	[Body]
[PATCH 5.10 774/798] netfilter: xt_cgroup: Make it independent from net_cls	[Body]
[PATCH 5.10 775/798] netfilter: xt_HL: add pr_fmt and checkentry validation	[Body]
[PATCH 5.10 776/798] netfilter: x_tables: replace pr_{info,err}() by pr_info_ratelimited()	[Body]
[PATCH 5.10 777/798] selftests/arm64: Treat KSM merge_across_nodes as optional	[Body]
[PATCH 5.10 778/798] net: stmmac: selftests: Check multiple MMC counters	[Body]
[PATCH 5.10 779/798] net: stmmac: dwmac1000: Account for the primary MAC address for UC filtering	[Body]
[PATCH 5.10 780/798] net: stmmac: dwmac4: Account for the primary MAC address for UC filtering	[Body]
[PATCH 5.10 781/798] net: stmmac: dwxgmac: Account for the primary MAC address for UC filtering	[Body]
[PATCH 5.10 782/798] net: stmmac: selftests: Account for the UC filter list for filtering tests	[Body]
[PATCH 5.10 783/798] net/sched: bound qdisc_pkt_len to prevent qdisc soft lockup	[Body]
[PATCH 5.10 784/798] net: fec: only stop PTP if it was initialized	[Body]
[PATCH 5.10 785/798] usb: atm: usbatm: fix invalid ci_range initialization	[Body]
[PATCH 5.10 786/798] tcp: fix corruption of urgent data on multi-segment retransmit	[Body]
[PATCH 5.10 787/798] driver core: platform: dont oops in platform_shutdown() on unbound devices	[Body]
[PATCH 5.10 788/798] crypto: ecdh - extend cra_driver_name with curve name	[Body]
[PATCH 5.10 789/798] crypto: testmgr - fix initialization of secret_size	[Body]
[PATCH 5.10 790/798] clk: qcom: gdsc: Bump parent usage count when GDSC is found enabled	[Body]
[PATCH 5.10 791/798] mm/highmem: Take kmap_high_get() properly into account	[Body]
[PATCH 5.10 792/798] ACPI: utils: Document for_each_acpi_dev_match() macro	[Body]
[PATCH 5.10 793/798] scsi: qla2xxx: Fix memory leak in __qlt_24xx_handle_abts()	[Body]
[PATCH 5.10 794/798] HID: fix an error code in hid_check_device_match()	[Body]
[PATCH 5.10 795/798] tracing: Fix race between update_event_fields and, event_define_fields	[Body]
[PATCH 5.10 796/798] tracing: Have trace event string test handle zero length strings	[Body]
[PATCH 5.10 797/798] tracing: Handle %.*s in trace_check_vprintf()	[Body]
[PATCH 5.10 798/798] Bluetooth: L2CAP: Fix send LE flow credits in ACL link	[Body]

ID (for dev)	e9c3a072-6684-45fb-aa61-83ebb1d17214
Status	finished
Execution Log	[Link]

Patches (798)

Series Summary

Sessions

Session 2026-09-15