Syzbot CI

Subject	5.10.273-rc1 review
Author	gregkh@linuxfoundation.org
Date	2026-10-28 16:52:33 +0000 UTC
Version
Cc	achill@achill.org akpm@linux-foundation.org broonie@kernel.org conor@kernel.org f.fainelli@gmail.com gregkh@linuxfoundation.org hargar@microsoft.com jonathanh@nvidia.com linux-kernel@vger.kernel.org linux@roeck-us.net lkft-triage@lists.linaro.org patches@kernelci.org patches@lists.linux.dev pavel@nabladev.com rwarsow@gmx.de shuah@kernel.org sr@sladewatkins.com stable@vger.kernel.org sudipm.mukherjee@gmail.com torvalds@linux-foundation.org

Name	Content [All]
[PATCH 5.10 001/516] tls: device: fix out-of-bounds write in tls_append_frag()	[Body]
[PATCH 5.10 002/516] apparmor: fix out-of-bounds write when null terminating a label vec	[Body]
[PATCH 5.10 003/516] device property: Add cleanup.h based fwnode_handle_put() scope based cleanup.	[Body]
[PATCH 5.10 004/516] device property: fix infinite loop in fwnode_for_each_child_node()	[Body]
[PATCH 5.10 005/516] nfsd: fix nfsd_file leak on inter-server COPY setup failure	[Body]
[PATCH 5.10 006/516] ceph: bound copied dentry name length in NFS export get_name	[Body]
[PATCH 5.10 007/516] ceph: bound num_export_targets array for mds info v2/v3	[Body]
[PATCH 5.10 008/516] smb: client: fix OOB read/write from unvalidated DataOffset in coalesce_t2()	[Body]
[PATCH 5.10 009/516] nouveau/gem: reserve the bo in the info ioctl around the vma lookup	[Body]
[PATCH 5.10 010/516] ocfs2: validate dx_root extent list fields during block read	[Body]
[PATCH 5.10 011/516] ocfs2: validate directory-index entry counts when reading metadata	[Body]
[PATCH 5.10 012/516] nvme-tcp: validate R2T PDU in nvme_tcp_handle_r2t()	[Body]
[PATCH 5.10 013/516] nvme-tcp: fix host memory disclosure on R2T for a read command	[Body]
[PATCH 5.10 014/516] nvme-tcp: Do not reset transport on data digest errors	[Body]
[PATCH 5.10 015/516] nvme-tcp: reject a read that transferred too few bytes	[Body]
[PATCH 5.10 016/516] wifi: rtl8xxxu: fix use-after-free from rx_urb_wq on stop	[Body]
[PATCH 5.10 017/516] staging: rtl8723bs: fix spacing around operators	[Body]
[PATCH 5.10 018/516] staging: rtl8723bs: fix OOB read in rtw_restruct_wmm_ie()	[Body]
[PATCH 5.10 019/516] ftrace: Take trace_array reference before accessing its ftrace_ops	[Body]
[PATCH 5.10 020/516] kprobes: Protect kprobe_blacklist with RCU	[Body]
[PATCH 5.10 021/516] nvme: add missing SRCU grace period in error path	[Body]
[PATCH 5.10 022/516] KVM: s390: Zero initialize data structures for inject_pfault_token	[Body]
[PATCH 5.10 023/516] scsi: qla2xxx: Zero dport diagnostics buffer to avoid info leak	[Body]
[PATCH 5.10 024/516] scsi: qla2xxx: Fix queue teardown NULL dma_free and bitmap locking	[Body]
[PATCH 5.10 025/516] scsi: qla2xxx: Fix use-after-free of qpair work on queue teardown	[Body]
[PATCH 5.10 026/516] scsi: qla2xxx: Validate BSG request_len before reading vendor_cmd[]	[Body]
[PATCH 5.10 027/516] f2fs: embed f2fs_gc_kthread in f2fs_sb_info	[Body]
[PATCH 5.10 028/516] tick/broadcast: Plug clockevents replacement race	[Body]
[PATCH 5.10 029/516] Bluetooth: btqcomsmd: Convert to platform remove callback returning void	[Body]
[PATCH 5.10 030/516] Bluetooth: btqcomsmd: destroy RPMsg endpoints before freeing hci_dev	[Body]
[PATCH 5.10 031/516] genetlink: pin family module during policy dump	[Body]
[PATCH 5.10 032/516] io_uring/rw: end write accounting from ->ki_complete	[Body]
[PATCH 5.10 033/516] smb: client: reject userspace cifs.idmap descriptions	[Body]
[PATCH 5.10 034/516] smb: client: avoid leaking refcount in cifs_queue_oplock_break()	[Body]
[PATCH 5.10 035/516] wifi: libipw: reject TKIP frames without a full MIC	[Body]
[PATCH 5.10 036/516] smb: client: fix potential OOB read in smb3_enum_snapshots()	[Body]
[PATCH 5.10 037/516] smb: client: fix next_buffer UAF and NextCommand bounds in compound PDUs	[Body]
[PATCH 5.10 038/516] smb: client: fix OOB struct field reads in move_smb2_ea_to_cifs()	[Body]
[PATCH 5.10 039/516] vlan: require the MAC header to be present in __vlan_insert_inner_tag()	[Body]
[PATCH 5.10 040/516] fuse: fix invalidate lock leak on open O_TRUNC DAX failure	[Body]
[PATCH 5.10 041/516] fuse: fix invalidate lock leak on setattr writeback failure	[Body]
[PATCH 5.10 042/516] usb: xhci: bail out of setup if the controller is inaccessible	[Body]
[PATCH 5.10 043/516] gtp: serialize PDP context updates	[Body]
[PATCH 5.10 044/516] KEYS: trusted: Fix TPM teardown ordering	[Body]
[PATCH 5.10 045/516] zram: fixup read_block_state()	[Body]
[PATCH 5.10 046/516] zram: fix out-of-bounds access in read_block_state()	[Body]
[PATCH 5.10 047/516] nfsd: release path refs on follow_down() error	[Body]
[PATCH 5.10 048/516] nfsd: check nfsd4_acl_to_attr() return value in nfsd4_create()	[Body]
[PATCH 5.10 049/516] nfsd: fix clock domain mismatch in clients_still_reclaiming()	[Body]
[PATCH 5.10 050/516] nfsd: gate nfs2 setacl by argp->mask	[Body]
[PATCH 5.10 051/516] cifs: fix loff_t underflow in cifs_remap_file_range() when len == 0	[Body]
[PATCH 5.10 052/516] coresight: etm3x: Fix cntr_val_show() to match cntr_val_store() behavior	[Body]
[PATCH 5.10 053/516] kernel/params.c: Use kstrtobool() instead of strtobool()	[Body]
[PATCH 5.10 054/516] params: Do not go over the limit when getting the string length	[Body]
[PATCH 5.10 055/516] params: Use size_add() for kmalloc()	[Body]
[PATCH 5.10 056/516] params: Sort headers	[Body]
[PATCH 5.10 057/516] params: Fix multi-line comment style	[Body]
[PATCH 5.10 058/516] params: fix charp corruption on allocation failure	[Body]
[PATCH 5.10 059/516] dmaengine: Add devm_dma_request_chan()	[Body]
[PATCH 5.10 060/516] i2c: mxs: fix DMA channel leak on probe error	[Body]
[PATCH 5.10 061/516] lockd: fix swapped arguments in nlmsvc_match_ip()	[Body]
[PATCH 5.10 062/516] power: supply: rt9455: Convert to i2cs .probe_new()	[Body]
[PATCH 5.10 063/516] power: supply: rt9455: quiesce delayed work before teardown	[Body]
[PATCH 5.10 064/516] i2c: core: Introduce i2c_client_get_device_id helper function	[Body]
[PATCH 5.10 065/516] power: supply: max17040: Convert to i2cs .probe_new()	[Body]
[PATCH 5.10 066/516] power: supply: max17040: drop incorrect I2C functionality check	[Body]
[PATCH 5.10 067/516] mmc: via-sdmmc: cancel card-detect work on remove	[Body]
[PATCH 5.10 068/516] workqueue: Add resource managed version of delayed work init	[Body]
[PATCH 5.10 069/516] power: supply: bq24257: fix use-after-free on remove	[Body]
[PATCH 5.10 070/516] power: supply: ucs1002: fix use-after-free on remove	[Body]
[PATCH 5.10 071/516] net/smc: fix socket refcount leak in smc_switch_conns()	[Body]
[PATCH 5.10 072/516] hwrng: stm32 - Fix runtime PM cleanup on registration failure	[Body]
[PATCH 5.10 073/516] ALSA: pcxhr: use __func__ to get funcions name in an output message	[Body]
[PATCH 5.10 074/516] ALSA: pcxhr: initialize mutexes before requesting threaded IRQ	[Body]
[PATCH 5.10 075/516] i3c: master: Do not treat master device as a duplicate target	[Body]
[PATCH 5.10 076/516] i3c: master: Fix use-after-free of master->this	[Body]
[PATCH 5.10 077/516] usb: gadget: f_mass_storage: fix null pointer dereference in fsg_common_set_num_buffers()	[Body]
[PATCH 5.10 078/516] spi: bcm63xx: disable clock on resume failure	[Body]
[PATCH 5.10 079/516] staging: sm750fb: sm750_accel: Provide description for accel and fix function naming	[Body]
[PATCH 5.10 080/516] staging: sm750fb: fix mono image source stride mismatch in lynxfb_ops_imageblit()	[Body]
[PATCH 5.10 081/516] ftrace: Synchronize the initialization of ftrace_ops	[Body]
[PATCH 5.10 082/516] arm64: mm: Fix the lockless page-table walk in show_pte()	[Body]
[PATCH 5.10 083/516] ALSA: parisc: Fix assignment in if condition	[Body]
[PATCH 5.10 084/516] ALSA: harmony: initialize locks before requesting IRQ	[Body]
[PATCH 5.10 085/516] KVM: nVMX: Service local TLB flushes on failed nested VM-Enter	[Body]
[PATCH 5.10 086/516] KVM: s390: Fix length check __import_wp_info()	[Body]
[PATCH 5.10 087/516] media: saa7164: fix cleanup on resource allocation failure	[Body]
[PATCH 5.10 088/516] media: zoran: Avoid freeing a registered video_device twice	[Body]
[PATCH 5.10 089/516] scsi: qla2xxx: Null out freed pointers in qla2x00_mem_alloc() error path	[Body]
[PATCH 5.10 090/516] scsi: qla2xxx: Fix 64G link speed reporting in get_data_rate	[Body]
[PATCH 5.10 091/516] scsi: qla2xxx: Quiesce response IRQ before freeing request queue	[Body]
[PATCH 5.10 092/516] scsi: qla2xxx: Use memset_io() to clear QLAFX00 request ring slot	[Body]
[PATCH 5.10 093/516] f2fs: return writeback error from collapse range	[Body]
[PATCH 5.10 094/516] f2fs: limit recovery filename logging to stored length	[Body]
[PATCH 5.10 095/516] drm/msm/dsi: do not enable PHYs when called for the slave DSI interface	[Body]
[PATCH 5.10 096/516] drm/msm/dsi: rename dual DSI to bonded DSI	[Body]
[PATCH 5.10 097/516] drm/msm/dsi: round 6G byte clock rate to the PLL-achievable value	[Body]
[PATCH 5.10 098/516] ipmr: account multicast table and route memory	[Body]
[PATCH 5.10 099/516] net/sched: act_api: release all action references on NEWACTION failure	[Body]
[PATCH 5.10 100/516] ring-buffer: Acquire the lock with irqsave in rb_wake_up_waiters()	[Body]
[PATCH 5.10 101/516] devm-helpers: Add resource managed version of work init	[Body]
[PATCH 5.10 102/516] hwmon: (gpio-fan) Fix use-after-free in alarm work	[Body]
[PATCH 5.10 103/516] smb: client: fix file type corruption in cifs_reparse_point_to_fattr()	[Body]
[PATCH 5.10 104/516] watchdog: rtd119x: Use devm_clk_get_enabled() helper	[Body]
[PATCH 5.10 105/516] watchdog: rtd119x: Avoid division by zero	[Body]
[PATCH 5.10 106/516] wifi: wcn36xx: Fix potential use-after-free in TX ack timer teardown	[Body]
[PATCH 5.10 107/516] smb: client: fix smbd_connection leak on cifs_get_tcp_session() error	[Body]
[PATCH 5.10 108/516] tcp: prevent collapsing skbs across boundary in rtx queue	[Body]
[PATCH 5.10 109/516] drm/amdgpu: Fix runtime PM leak in amdgpu_debugfs_test_ib_show()	[Body]
[PATCH 5.10 110/516] perf/x86/intel: Remove anythread_deprecated bit from perf_capabilities	[Body]
[PATCH 5.10 111/516] mm/rmap: fix missing barrier between anon_vma init and vma->anon_vma publish	[Body]
[PATCH 5.10 112/516] net: openvswitch: conntrack: fix helper UAF due to extensions realloc	[Body]
[PATCH 5.10 113/516] smb3: make query_on_disk_id open context consistent and move to common code	[Body]
[PATCH 5.10 114/516] smb: client: fix create context out-of-bounds reads	[Body]
[PATCH 5.10 115/516] perf tools: Fix a asan issue in parse_events_multi_pmu_add()	[Body]
[PATCH 5.10 116/516] perf test bpf: Address error about non-null argument for epoll_pwait 2nd arg	[Body]
[PATCH 5.10 117/516] drm/nouveau: switch over to the new pin interface	[Body]
[PATCH 5.10 118/516] drm/nouveau: dont bump pin count on failed re-pin in nouveau_bo_pin_locked()	[Body]
[PATCH 5.10 119/516] net: ipconfig: Remove outdated comment and indent code block	[Body]
[PATCH 5.10 120/516] net: ipconfig: bound DHCP option construction	[Body]
[PATCH 5.10 121/516] pinctrl: sunxi: Refactor register/offset calculation	[Body]
[PATCH 5.10 122/516] pinctrl: sunxi: Use devm_clk_get_enabled() helpers	[Body]
[PATCH 5.10 123/516] pinctrl: sunxi: keep a shadow copy of the data register output latches	[Body]
[PATCH 5.10 124/516] net: ena: fix MMIO read buffer leak on probe failure	[Body]
[PATCH 5.10 125/516] smb: client: use finish_no_open() for non-regular inodes	[Body]
[PATCH 5.10 126/516] tools/thermal/tmon: Fix compilation warning for wrong format	[Body]
[PATCH 5.10 127/516] smb: client: validate POSIX create context length	[Body]
[PATCH 5.10 128/516] Bluetooth: mgmt: fix race in read_unconf_index_list()	[Body]
[PATCH 5.10 129/516] Bluetooth: btusb: Add IMC Networks QCA9377 to quirks table	[Body]
[PATCH 5.10 130/516] HID: core: remove #ifdef CONFIG_PM from hid_driver	[Body]
[PATCH 5.10 131/516] HID: hid-alps: use default remove for hid device	[Body]
[PATCH 5.10 132/516] HID: hid-alps: Use pm_ptr instead of #ifdef CONFIG_PM	[Body]
[PATCH 5.10 133/516] HID: alps: unregister DualPoint Stick input device on remove	[Body]
[PATCH 5.10 134/516] smb/client: use stack-allocated smb2_file_all_info in smb3_query_mf_symlink()	[Body]
[PATCH 5.10 135/516] smb/client: pass cifs_open_info_data to SMB2_open()	[Body]
[PATCH 5.10 136/516] smb: client: close handle after create-context parsing failure	[Body]
[PATCH 5.10 137/516] smb: client: close completed creates on compound wait errors	[Body]
[PATCH 5.10 138/516] audit: fix exe mark UAF in kill_rules()	[Body]
[PATCH 5.10 139/516] of/irq: Fix remaining refcount leaks in of_irq_init()	[Body]
[PATCH 5.10 140/516] of/overlay: put property on deadprops only after changeset add succeeds	[Body]
[PATCH 5.10 141/516] netfilter: nft_flow_offload: drop flowtable reference on init error path	[Body]
[PATCH 5.10 142/516] net/packet: prevent TX_RING byte count overflow	[Body]
[PATCH 5.10 143/516] rtc: spear: initialize IRQ state before requesting alarm IRQ	[Body]
[PATCH 5.10 144/516] sctp: check RCV_SHUTDOWN after the sendmsg connect wait	[Body]
[PATCH 5.10 145/516] wifi: cfg80211: avoid double free if updating BSS fails	[Body]
[PATCH 5.10 146/516] drm/msm/adreno: Assign msm_gpu->pdev earlier to avoid nullptrs	[Body]
[PATCH 5.10 147/516] openvswitch: add nf_ct_is_confirmed check before assigning the helper	[Body]
[PATCH 5.10 148/516] rds_tcp: close NULL deref window in rds_tcp_set_callbacks	[Body]
[PATCH 5.10 149/516] vxlan: use one headroom snapshot for neighbour replies	[Body]
[PATCH 5.10 150/516] of/irq: add missing of_node_put() for interrupt parent node	[Body]
[PATCH 5.10 151/516] vt: skip screen update for DEC alignment test on backgroup consoles	[Body]
[PATCH 5.10 152/516] ALSA: caiaq: unregister the input device when probe fails	[Body]
[PATCH 5.10 153/516] ALSA: line6: reject oversized playback packets	[Body]
[PATCH 5.10 154/516] hsr: Remove WARN_ONCE() in hsr_addr_is_self().	[Body]
[PATCH 5.10 155/516] scsi: qla2xxx: Initialize NVMe abort_work once at submission	[Body]
[PATCH 5.10 156/516] scsi: qla2xxx: Fix NVMe abort reference leak on repeated abort	[Body]
[PATCH 5.10 157/516] nvmet: preserve device path on allocation failure	[Body]
[PATCH 5.10 158/516] of/overlay: dont leak fragment references when changeset init fails	[Body]
[PATCH 5.10 159/516] of/overlay: dont create "//" paths for fragments targeting the root	[Body]
[PATCH 5.10 160/516] ASoC: wm8903: Move the DRC QR threshold to the register that holds it	[Body]
[PATCH 5.10 161/516] wifi: ath11k: reset ar->num_stations on hardware start	[Body]
[PATCH 5.10 162/516] wifi: cfg80211: preserve hidden-group beacon IE ownership	[Body]
[PATCH 5.10 163/516] ASoC: codecs: rt274: Fix format setting for 44100 rate	[Body]
[PATCH 5.10 164/516] Bluetooth: hci_core: free the HCI ID if naming fails	[Body]
[PATCH 5.10 165/516] Bluetooth: btintel: validate DDC record lengths	[Body]
[PATCH 5.10 166/516] netfilter: ipset: do not update comments from kernel-side adds	[Body]
[PATCH 5.10 167/516] net: systemport: Fix RUNT MIB counter register offset calculation	[Body]
[PATCH 5.10 168/516] tipc: prevent GCM nonce reuse on peer key changes	[Body]
[PATCH 5.10 169/516] net/sched: fq_codel: match the no-drop threshold to the packet size	[Body]
[PATCH 5.10 170/516] net/sched: sch_codel: match the no-drop threshold to the packet size	[Body]
[PATCH 5.10 171/516] tcp: refresh TS.Recent for accepted old ACKs	[Body]
[PATCH 5.10 172/516] ipvs: fix missing counter decrement in lblc	[Body]
[PATCH 5.10 173/516] ipvs: do not create invisible templates	[Body]
[PATCH 5.10 174/516] ipvs: filter some flags received in the backup server	[Body]
[PATCH 5.10 175/516] netfilter: nf_tables: avoid skb access on nf_stolen	[Body]
[PATCH 5.10 176/516] net: add and use skb_get_hash_net	[Body]
[PATCH 5.10 177/516] ipv6: sr: use skb_get_hash_net() in seg6_make_flowlabel()	[Body]
[PATCH 5.10 178/516] i2c: at91: release DMA channels when probe defers	[Body]
[PATCH 5.10 179/516] PCI: Accept AtomicOps already enabled by the hypervisor	[Body]
[PATCH 5.10 180/516] drm/radeon: Read the VRAM VBIOS signature with readb()	[Body]
[PATCH 5.10 181/516] kgdboc: Fix tty driver reference leak in configure_kgdboc()	[Body]
[PATCH 5.10 182/516] Input: atkbd - skip deactivate for Lenovo IdeaPad Slim 3 15IWC11	[Body]
[PATCH 5.10 183/516] Input: i8042 - add nomux quirk for Fujitsu LIFEBOOK U7410	[Body]
[PATCH 5.10 184/516] Input: synaptics - add LEN205b entry to smbus_pnp_ids for ThinkPad T490	[Body]
[PATCH 5.10 185/516] Input: synaptics - limit T440p InterTouch quirk to LEN0036	[Body]
[PATCH 5.10 186/516] nitro_enclaves: fix use-after-free on SLOT_ALLOC failure	[Body]
[PATCH 5.10 187/516] USB: cdc-acm: fix racy TIOCMIWAIT implementation	[Body]
[PATCH 5.10 188/516] USB: serial: fix port tear down use-after-free	[Body]
[PATCH 5.10 189/516] usb: storage: sierra_ms: reject short SWoC info transfers	[Body]
[PATCH 5.10 190/516] usb: hub: use shorter 120ms post resume hold for SS root hubs	[Body]
[PATCH 5.10 191/516] usb: ohci-da8xx: disable controller wakeup on cleanup	[Body]
[PATCH 5.10 192/516] usb: ohci-s3c2410: disable controller wakeup on removal	[Body]
[PATCH 5.10 193/516] usb: ohci-st: disable controller wakeup on removal	[Body]
[PATCH 5.10 194/516] usb: gadget: f_uac1_legacy: validate bRequest index in generic_{set,get}_cmd	[Body]
[PATCH 5.10 195/516] usb: gadget: aspeed-vhub: cancel wake work on device removal	[Body]
[PATCH 5.10 196/516] USB: gadget: dummy-hcd: Fix wait for outstanding request completions	[Body]
[PATCH 5.10 197/516] usb: gadget: f_fs: Fix NULL pointer dereference in FUNCTIONFS_ENDPOINT_DESC	[Body]
[PATCH 5.10 198/516] usb: core: clear both ep_in and ep_out for non-ep0 control endpoints	[Body]
[PATCH 5.10 199/516] usb: typec: ucsi: Get the connector fwnode based on reg value	[Body]
[PATCH 5.10 200/516] usb: typec: ucsi: displayport: Current CAM OOB index fixup	[Body]
[PATCH 5.10 201/516] usb: cdns3: Fix NULL pointer dereference in cdns3_pci_probe	[Body]
[PATCH 5.10 202/516] tty: amiserial: fix broken TIOCMIWAIT	[Body]
[PATCH 5.10 203/516] tty: vcc: zero-initialize control packet in vcc_send_ctl()	[Body]
[PATCH 5.10 204/516] tty: vcc: hold port lock when clearing tty pointer in vcc_cleanup	[Body]
[PATCH 5.10 205/516] tty: serial: qcom_geni_serial: Keep console RX functional after deep idle	[Body]
[PATCH 5.10 206/516] serial: tegra: dont clear the Tx FIFO on an Rx-only reset	[Body]
[PATCH 5.10 207/516] serial: vt8500: Fix clock reference leak in vt8500_serial_probe()	[Body]
[PATCH 5.10 208/516] ALSA: ua101: reject mismatched capture/playback packet sizes	[Body]
[PATCH 5.10 209/516] Bluetooth: RFCOMM: Fix initial port reference race	[Body]
[PATCH 5.10 210/516] Bluetooth: hci_core: Fix inquiry cache timestamps on 64-bit systems	[Body]
[PATCH 5.10 211/516] Bluetooth: hci_core: Serialize ACL scheduling with channel deletion	[Body]
[PATCH 5.10 212/516] Bluetooth: btintel: fix buffer over-read in btintel_hw_error()	[Body]
[PATCH 5.10 213/516] ipvs: bound LBLCR and LBLC cache growth	[Body]
[PATCH 5.10 214/516] kprobes: Skip disarmed probes when checking optkprobe overlap	[Body]
[PATCH 5.10 215/516] nvme-multipath: fix underflow in ANA log bounds checks	[Body]
[PATCH 5.10 216/516] mtd: rawnand: cadence: Initialize IRQ state before requesting IRQ	[Body]
[PATCH 5.10 217/516] mtd: rawnand: vf610_nfc: fix reads on chips with more than 64 bytes of OOB	[Body]
[PATCH 5.10 218/516] wifi: cw1200: fix TX padding OOB read leaking heap data to device	[Body]
[PATCH 5.10 219/516] wifi: iwlegacy: 3945: free EEPROM data on remove	[Body]
[PATCH 5.10 220/516] wifi: mac80211: drain PS delivery work during station teardown	[Body]
[PATCH 5.10 221/516] wifi: mac80211: release mesh path quota on failed additions	[Body]
[PATCH 5.10 222/516] wifi: mac80211: handle empty FILS association request payload	[Body]
[PATCH 5.10 223/516] USB: serial: cp210x: add Corsair AX1500i Power Supply	[Body]
[PATCH 5.10 224/516] USB: serial: quatech2: fix baud rate overflow	[Body]
[PATCH 5.10 225/516] USB: serial: ssu100: fix baud rate overflow	[Body]
[PATCH 5.10 226/516] USB: serial: fix dynamic id driver deregistration race	[Body]
[PATCH 5.10 227/516] USB: serial: option: add support for SIMCom SIM8260C	[Body]
[PATCH 5.10 228/516] USB: serial: option: add Quectel EG060W	[Body]
[PATCH 5.10 229/516] USB: serial: option: add Compal EXM-G1x support	[Body]
[PATCH 5.10 230/516] USB: serial: option: add Quectel RG660QB	[Body]
[PATCH 5.10 231/516] USB: serial: option: add Compal EXC-T1 support	[Body]
[PATCH 5.10 232/516] thunderbolt: Reject oversized XDomain properties responses	[Body]
[PATCH 5.10 233/516] iio: accel: kxcjk-1013: reject duplicate event disable	[Body]
[PATCH 5.10 234/516] iio: accel: sca3000: fix frequency divider condition check	[Body]
[PATCH 5.10 235/516] iio: adc: sun4i-gpadc-iio: clean up on thermal zone registration failure	[Body]
[PATCH 5.10 236/516] iio: adc: sun4i-gpadc-iio: drop underflowing pm_runtime_put() calls	[Body]
[PATCH 5.10 237/516] iio: gyro: adis16136: fix unprotected debugfs reads	[Body]
[PATCH 5.10 238/516] iio: imu: adis16400: fix unprotected debugfs reads	[Body]
[PATCH 5.10 239/516] iio: imu: adis16480: fix unprotected debugfs reads	[Body]
[PATCH 5.10 240/516] iio: light: gp2ap020a00f: drain irq_work after free_irq	[Body]
[PATCH 5.10 241/516] iio: proximity: isl29501: Fix return type of isl29501_register_write	[Body]
[PATCH 5.10 242/516] iio: proximity: pulsedlight: fix iio_device left registered on PM setup failure	[Body]
[PATCH 5.10 243/516] loop: Fix use-after-free issues	[Body]
[PATCH 5.10 244/516] net: sched: cls_u32: Undo tcf_bind_filter if u32_replace_hw_knode	[Body]
[PATCH 5.10 245/516] Revert "scsi: sd: sd_zbc: Use logical blocks as unit when querying zones"	[Body]
[PATCH 5.10 246/516] arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved	[Body]
[PATCH 5.10 247/516] drm/amd/powerplay: fix VoltageObjectInfo zero-stride loop and OOB read	[Body]
[PATCH 5.10 248/516] SUNRPC: fix gssx_dec_option_array error path bugs	[Body]
[PATCH 5.10 249/516] SUNRPC: reject duplicate CREDS_VALUE options	[Body]
[PATCH 5.10 250/516] vc_screen: reload vc pointer before if (ret) in vcs_write() to avoid UAF	[Body]
[PATCH 5.10 251/516] page_pool: always add GFP_NOWARN for ATOMIC allocations	[Body]
[PATCH 5.10 252/516] mtd: rawnand: vf610_nfc: fix false bitflips on reads of erased pages	[Body]
[PATCH 5.10 253/516] smb: client: split cifsFileInfo bitfields to avoid shared-byte RMW races	[Body]
[PATCH 5.10 254/516] wifi: wl12xx: Drop if with an always false condition	[Body]
[PATCH 5.10 255/516] wifi: wlcore: Convert to platform remove callback returning void	[Body]
[PATCH 5.10 256/516] wifi: wlcore: Fix runtime PM leak in wlcore_remove()	[Body]
[PATCH 5.10 257/516] RDMA/hns: Fix WQ_MEM_RECLAIM warning	[Body]
[PATCH 5.10 258/516] staging: vchiq_arm: Avoid NULL ptr deref in vchiq_dump_platform_instances	[Body]
[PATCH 5.10 259/516] vxlan: Fix potential null-ptr-deref in vxlan_gro_prepare_receive().	[Body]
[PATCH 5.10 260/516] iommu: disable SVA when CONFIG_X86 is set	[Body]
[PATCH 5.10 261/516] ALSA: seq: Clear variable event pointer on read	[Body]
[PATCH 5.10 262/516] wifi: wcn36xx: fix heap overflow from oversized firmware HAL response	[Body]
[PATCH 5.10 263/516] net: usb: qmi_wwan: add Quectel EG120K-EA	[Body]
[PATCH 5.10 264/516] usb: typec: tcpm: fix debug accessory mode detection for sink ports	[Body]
[PATCH 5.10 265/516] usb: typec: tcpm: constrain TCPM_SOURCING_VBUS event handling	[Body]
[PATCH 5.10 266/516] xen/netfront: drop RX packets with a short Ethernet header	[Body]
[PATCH 5.10 267/516] smb: client: clear setuid/setgid bit on write with cifsacl/modefromsid/posix extensions	[Body]
[PATCH 5.10 268/516] drm/amd/pm/si: Check AMD_IS_MOBILITY flag for PPSMC_SYSTEMFLAG_GPIO_DC	[Body]
[PATCH 5.10 269/516] soc: qcom: geni-se: Correct QUP Core ICC vote constants	[Body]
[PATCH 5.10 270/516] tty: fix saved termios reset race	[Body]
[PATCH 5.10 271/516] perf: Require kernel access for text poke events	[Body]
[PATCH 5.10 272/516] ALSA: seq: Serialize compat port-info ioctls	[Body]
[PATCH 5.10 273/516] arm64: errata: Factor out broken AMU const counter cap	[Body]
[PATCH 5.10 274/516] arm64: errata: Add Cortex-A725 erratum 3821522 workaround	[Body]
[PATCH 5.10 275/516] fsverity: add dependency on 64K or smaller pages	[Body]
[PATCH 5.10 276/516] drm/amd/pm/si: Fix updating clock limits on AC/DC	[Body]
[PATCH 5.10 277/516] drm/amdgpu: reset VI ASIC on MacBookPro15,1	[Body]
[PATCH 5.10 278/516] drm/amdgpu: reset VI ASIC on MacBookPro14,3	[Body]
[PATCH 5.10 279/516] drm/amdgpu: fix ACP MFD device leak on init failure	[Body]
[PATCH 5.10 280/516] drm/amdgpu/gfx6: fix firmware leak on teardown	[Body]
[PATCH 5.10 281/516] usb: octeon-hcd: fix the FIFO-flush timeout computation	[Body]
[PATCH 5.10 282/516] usb: ohci-spear: Remove unnecessary NULL check before clk_disable_unprepare()	[Body]
[PATCH 5.10 283/516] usb: ohci-spear: disable controller wakeup on removal	[Body]
[PATCH 5.10 284/516] usb: cdns3: fix use-after-free in cdns3_gadget_exit()	[Body]
[PATCH 5.10 285/516] usb: typec: ucsi: acpi: Assume UCSI 1.2 on Acer Nitro ANV15-41	[Body]
[PATCH 5.10 286/516] tty: tty_port: restore TTY_IO_ERROR on activation failure	[Body]
[PATCH 5.10 287/516] tty: abort break signalling on hangup	[Body]
[PATCH 5.10 288/516] tty: serial: max3100: shut down timer before freeing port	[Body]
[PATCH 5.10 289/516] Input: s6sy761 - fix resume ordering and restore sensing	[Body]
[PATCH 5.10 290/516] tty: vt: fix memory leak in vc_allocate()	[Body]
[PATCH 5.10 291/516] serial: fix TIOCMIWAIT race	[Body]
[PATCH 5.10 292/516] drm/amd/display: Mark DCE 6.4 as not APU	[Body]
[PATCH 5.10 293/516] wifi: mac80211: keep fallback association elements alive	[Body]
[PATCH 5.10 294/516] thunderbolt: Fix KASAN reported use-after-free when request is canceled	[Body]
[PATCH 5.10 295/516] USB: serial: fix ioctl hangup race	[Body]
[PATCH 5.10 296/516] mtd: block2mtd: Fix divide error when erase_size is zero	[Body]
[PATCH 5.10 297/516] mtd: spinand: Enable QE on all dies	[Body]
[PATCH 5.10 298/516] wifi: mac80211: account proxy paths against the mesh path limit	[Body]
[PATCH 5.10 299/516] USB: serial: clean up core error labels	[Body]
[PATCH 5.10 300/516] USB: serial: fix driver deregistration order	[Body]
[PATCH 5.10 301/516] bnxt_en: fix DMA mapping length for padded small packets	[Body]
[PATCH 5.10 302/516] tty: introduce and use tty_port_tty_vhangup() helper	[Body]
[PATCH 5.10 303/516] tty: port: fix tty_port_tty_vhangup() race	[Body]
[PATCH 5.10 304/516] wifi: mac80211: keep paired old chanctx alive	[Body]
[PATCH 5.10 305/516] wifi: mac80211: count only matching reservations in reserved switch	[Body]
[PATCH 5.10 306/516] fs: Free any excess xarray nodes in clear_inode()	[Body]
[PATCH 5.10 307/516] mm/hugetlb: fix avoid_reserve to allow taking folio from subpool	[Body]
[PATCH 5.10 308/516] KVM: SVM: Use the active VMCBs MSR bitmap when checking if MSR is intercepted	[Body]
[PATCH 5.10 309/516] wifi: mac80211: set info->band for 802.3 encap offload frames	[Body]
[PATCH 5.10 310/516] iio: adc: aspeed: propagate reset deassert errors	[Body]
[PATCH 5.10 311/516] iio: adc: max1363: sign-extend bipolar differential channel reads	[Body]
[PATCH 5.10 312/516] HID: core: introduce hid_safe_input_report()	[Body]
[PATCH 5.10 313/516] HID: uhid: convert to hid_safe_input_report()	[Body]
[PATCH 5.10 314/516] crypto: drbg - Fix ineffective sanity check	[Body]
[PATCH 5.10 315/516] btrfs: scrub: fix local_root reference leak in scrub_print_warning_inode()	[Body]
[PATCH 5.10 316/516] dm ioctl: dont let data_start run past the buffer	[Body]
[PATCH 5.10 317/516] wireguard: noise: reject response consumption after intermediate initiation	[Body]
[PATCH 5.10 318/516] workqueue: Fix NULL current_pwq deref in chained work check	[Body]
[PATCH 5.10 319/516] xen/netfront: dont leak the skb when xennet_fill_frags() fails	[Body]
[PATCH 5.10 320/516] strparser: make sure __strp_recv isnt running before tearing down the parser	[Body]
[PATCH 5.10 321/516] tipc: destroy topsrv workqueues before closing connections	[Body]
[PATCH 5.10 322/516] tipc: hold a reference to nodes found by link name	[Body]
[PATCH 5.10 323/516] Revert "wifi: libertas: reject short monitor TX frames"	[Body]
[PATCH 5.10 324/516] selinux: preserve NATIVE_LABELS on already-initialized sb in set_mnt_opts	[Body]
[PATCH 5.10 325/516] sctp: copy zeroed stats to user in sctp_getsockopt_pr_streamstatus() when !streamoute	[Body]
[PATCH 5.10 326/516] ibmveth: h_free logical LAN on open-fail after register	[Body]
[PATCH 5.10 327/516] keys: finalize persistent keyring timeout after link attempt	[Body]
[PATCH 5.10 328/516] KEYS: Fix add_key() race with keyring restriction	[Body]
[PATCH 5.10 329/516] memstick: core: wait for request completion before freeing card	[Body]
[PATCH 5.10 330/516] memstick: rtsx_usb_ms: complete requests after eject instead of dropping them	[Body]
[PATCH 5.10 331/516] dm-crypt: reject the lmk IV mode with AEAD ciphers	[Body]
[PATCH 5.10 332/516] dm-snap: reject the transient exception store for snapshot-merge	[Body]
[PATCH 5.10 333/516] mmc: cavium-octeon: destroy slot platform devices on remove	[Body]
[PATCH 5.10 334/516] mmc: cavium-thunderx: destroy slot platform devices on remove	[Body]
[PATCH 5.10 335/516] mmc: mtk-sd: Cancel request timeout work on remove	[Body]
[PATCH 5.10 336/516] mmc: sdhci-sprd: disable runtime PM on remove	[Body]
[PATCH 5.10 337/516] net/packet: guard the ll header push in packet_rcv_spkt()	[Body]
[PATCH 5.10 338/516] net/smc: protect clcsock lifetime in smc_getname	[Body]
[PATCH 5.10 339/516] net: usb: ax88179_178a: fix rx frame length for non-last packets	[Body]
[PATCH 5.10 340/516] openvswitch: fix soft lockup in the netlink flow dump	[Body]
[PATCH 5.10 341/516] regulator: ltc3676: dont read the write-only HRST and CLIRQ registers	[Body]
[PATCH 5.10 342/516] scsi: qedi: Initialize callback state before registration	[Body]
[PATCH 5.10 343/516] Bluetooth: hci_sock: Serialize dead-device detachment	[Body]
[PATCH 5.10 344/516] Bluetooth: RFCOMM: free the skb when the DLC has no owner	[Body]
[PATCH 5.10 345/516] Bluetooth: RFCOMM: Fix NULL tty_dev dereference in rfcomm_dev_shutdown	[Body]
[PATCH 5.10 346/516] drm/i915/gem: Prevent overstepping exec array boundary	[Body]
[PATCH 5.10 347/516] drm/amdgpu: make Mac FB workaround generic	[Body]
[PATCH 5.10 348/516] fs: refuse fspick() on internal superblocks	[Body]
[PATCH 5.10 349/516] namespace: check a submount for references right before unmounting it	[Body]
[PATCH 5.10 350/516] dcache: dont put a mountpoint on a dentry thats being removed	[Body]
[PATCH 5.10 351/516] namespace: refuse an automount below a mount that is in no namespace	[Body]
[PATCH 5.10 352/516] staging: rtl8723bs: fix OOB read in OnAssocRsp() IE loop	[Body]
[PATCH 5.10 353/516] drm/aspeed: Balance the display clock enable on teardown	[Body]
[PATCH 5.10 354/516] drm/vc4: Free the BO cache size list on teardown	[Body]
[PATCH 5.10 355/516] net/sched: em_text: reject unterminated algo before autoload	[Body]
[PATCH 5.10 356/516] cxgb4/ch_ktls: disable softirqs around tid_list erases	[Body]
[PATCH 5.10 357/516] nvmet: use the local P2P device on metadata allocation failure	[Body]
[PATCH 5.10 358/516] ASoC: samsung: i2s: enable op_clk in probe to balance runtime PM	[Body]
[PATCH 5.10 359/516] flow_dissector: avoid u16 truncation of skb->len when computing thoff	[Body]
[PATCH 5.10 360/516] flow_dissector: avoid u16 truncation of hlen in bpf_flow_dissect()	[Body]
[PATCH 5.10 361/516] net/mlx5e: Order ICOSQ cc update after CQ doorbell	[Body]
[PATCH 5.10 362/516] net: openvswitch: validate transport header presence in set_ipv6_addr	[Body]
[PATCH 5.10 363/516] can: fix unique skb identifier regression under RPS	[Body]
[PATCH 5.10 364/516] drm/amd/display: Dont replace a sink mode that shares the native totals	[Body]
[PATCH 5.10 365/516] HID: hid-steam: Fix cleanup in probe()	[Body]
[PATCH 5.10 366/516] HID: hid-steam: Make client_opened a counter	[Body]
[PATCH 5.10 367/516] HID: steam: Fully unregister controller when hidraw is opened	[Body]
[PATCH 5.10 368/516] HID: steam: Rearrange teardown sequence	[Body]
[PATCH 5.10 369/516] HID: steam: Refactor registration	[Body]
[PATCH 5.10 370/516] HID: steam: Clean up locking	[Body]
[PATCH 5.10 371/516] tracing: Set the trace clock before registering the histogram trigger	[Body]
[PATCH 5.10 372/516] wifi: brcmfmac: fix P2P device removal race in brcmf_detach()	[Body]
[PATCH 5.10 373/516] selinux: fix data race on AVC latest_notif	[Body]
[PATCH 5.10 374/516] EDAC/amd64: Mask UMC chip select to the four implemented selects	[Body]
[PATCH 5.10 375/516] mm/mremap: fix locked_vm leak by splitting VMA for MREMAP_DONTUNMAP	[Body]
[PATCH 5.10 376/516] mm/mremap: fix locked_vm leak from MREMAP_DONTUNMAP self-merge	[Body]
[PATCH 5.10 377/516] netfilter: nf_tables: fix bidirectional offload regression	[Body]
[PATCH 5.10 378/516] net: bridge: avoid recursive multicast port cleanup	[Body]
[PATCH 5.10 379/516] net: team: Remove unused team_mode_op, port_enabled	[Body]
[PATCH 5.10 380/516] net: team: Rename port_disabled team mode op to port_tx_disabled	[Body]
[PATCH 5.10 381/516] net: team: fix NULL pointer dereference in team_xmit during mode change	[Body]
[PATCH 5.10 382/516] net: team: stop reusing skb after queue override	[Body]
[PATCH 5.10 383/516] Bluetooth: RFCOMM: connect the session socket without rfcomm_mutex	[Body]
[PATCH 5.10 384/516] drm/vmwgfx: validate pitch coming from userspace	[Body]
[PATCH 5.10 385/516] namespace: dont inherit MNT_UMOUNT in clone_mnt()	[Body]
[PATCH 5.10 386/516] namespace: check the mounts before reading their parents in pivot_root()	[Body]
[PATCH 5.10 387/516] highmem: round down the address passed to kunmap_flush_on_unmap()	[Body]
[PATCH 5.10 388/516] dm: fix reading free memory in do_resume	[Body]
[PATCH 5.10 389/516] pmdomain: rockchip: fix clock leak on domain probe failure	[Body]
[PATCH 5.10 390/516] pmdomain: rockchip: dont ignore clock lookup errors on attach	[Body]
[PATCH 5.10 391/516] pmdomain: rockchip: propagate subdomain add errors	[Body]
[PATCH 5.10 392/516] optee: register TEE devices only once fully initialized	[Body]
[PATCH 5.10 393/516] scsi: ch: Do not keep references to data transfer element devices	[Body]
[PATCH 5.10 394/516] drm/fb-helper: defer setup when fbdev_probe() fails, not just on -EAGAIN	[Body]
[PATCH 5.10 395/516] drm/i915/gt: Unmask interrupts only when ACTIVE is true	[Body]
[PATCH 5.10 396/516] namespace: unhash a dentry before detaching the mounts on it	[Body]
[PATCH 5.10 397/516] namespace: dont copy an unmounted mount tree	[Body]
[PATCH 5.10 398/516] fcntl: refuse F_SET_RW_HINT on an immutable inode	[Body]
[PATCH 5.10 399/516] namespace: handle mount locking for automounts correctly	[Body]
[PATCH 5.10 400/516] devm-helpers: Fix devm_delayed_work_autocancel() kerneldoc	[Body]
[PATCH 5.10 401/516] netfilter: nf_tables: fix crash when nf_trace is enabled	[Body]
[PATCH 5.10 402/516] xfrm: prevent policy_hthresh.work from racing with netns teardown	[Body]
[PATCH 5.10 403/516] xfs: hoist recovered bmap intent checks out of xfs_bui_item_recover	[Body]
[PATCH 5.10 404/516] xfs: improve the code that checks recovered bmap intent items	[Body]
[PATCH 5.10 405/516] xfs: hoist recovered rmap intent checks out of xfs_rui_item_recover	[Body]
[PATCH 5.10 406/516] xfs: improve the code that checks recovered rmap intent items	[Body]
[PATCH 5.10 407/516] xfs: hoist recovered refcount intent checks out of xfs_cui_item_recover	[Body]
[PATCH 5.10 408/516] xfs: improve the code that checks recovered refcount intent items	[Body]
[PATCH 5.10 409/516] xfs: dont nest icloglock inside ic_callback_lock	[Body]
[PATCH 5.10 410/516] xfs: convert XLOG_FORCED_SHUTDOWN() to xlog_is_shutdown()	[Body]
[PATCH 5.10 411/516] xfs: log items should have a xlog pointer, not a mount	[Body]
[PATCH 5.10 412/516] xfs: aborting inodes on shutdown may need buffer lock	[Body]
[PATCH 5.10 413/516] xfs: remove xfs_buf_t typedef	[Body]
[PATCH 5.10 414/516] xfs: fix super block buf log item UAF during force shutdown	[Body]
[PATCH 5.10 415/516] xfs: fix intermittent hang during quotacheck	[Body]
[PATCH 5.10 416/516] xfs: buffer pins need to hold a buffer reference	[Body]
[PATCH 5.10 417/516] xfs: xfs_ifree_cluster vs xfs_iflush_shutdown_abort deadlock	[Body]
[PATCH 5.10 418/516] xfs: catch stale AGF/AGF metadata	[Body]
[PATCH 5.10 419/516] xfs: rearrange code in xfs_buf_item.c	[Body]
[PATCH 5.10 420/516] xfs: factor out stale buffer item completion	[Body]
[PATCH 5.10 421/516] xfs: fix unmount hang with unflushable inodes stuck in the AIL	[Body]
[PATCH 5.10 422/516] KVM: x86: Use active memslots for the per-vCPU MMIO cache	[Body]
[PATCH 5.10 423/516] bpf: Do mark_chain_precision for ARG_CONST_ALLOC_SIZE_OR_ZERO	[Body]
[PATCH 5.10 424/516] skmsg: Skip zero length skb in sk_msg_recvmsg	[Body]
[PATCH 5.10 425/516] bpf: fix potential 32-bit overflow when accessing ARRAY map element	[Body]
[PATCH 5.10 426/516] power: supply: ds2780: Fix ds2780_get_capacity() returning raw value	[Body]
[PATCH 5.10 427/516] Drivers: hv: Dont reset VMBus connection state on error/exit paths	[Body]
[PATCH 5.10 428/516] vsock: treat TCP_CLOSING as once-established	[Body]
[PATCH 5.10 429/516] ASoC: stm32: spdifrx: fix synchronization state check	[Body]
[PATCH 5.10 430/516] ASoC: cs42l56: Put the Limiter Cushion control on the limiter register	[Body]
[PATCH 5.10 431/516] ASoC: cs42l52: Fix the NG Type Switch bit	[Body]
[PATCH 5.10 432/516] ASoC: pcm3168a: Fix the DAC zero flag polarity bit	[Body]
[PATCH 5.10 433/516] ASoC: max98371: Fix the Speaker DHT Min Volume bits	[Body]
[PATCH 5.10 434/516] ASoC: wm8978: Fix the 128x oversampling switch bits	[Body]
[PATCH 5.10 435/516] ASoC: nau8822: Fix the 128x oversampling switch bits	[Body]
[PATCH 5.10 436/516] netlink: remove netlink_broadcast_filtered	[Body]
[PATCH 5.10 437/516] netlink: Reverse the patch which removed filtering	[Body]
[PATCH 5.10 438/516] netlink: reset skb headers before unicast and multicast filtering	[Body]
[PATCH 5.10 439/516] nios2: fix __wsum type degradation in csum_fold()	[Body]
[PATCH 5.10 440/516] scsi: st: Save the visited block for the partition the drive is in	[Body]
[PATCH 5.10 441/516] scsi: target: iscsi: Fix race in discovery auth updates	[Body]
[PATCH 5.10 442/516] ocfs2/dlm: Protect the recovery list during debugfs reads	[Body]
[PATCH 5.10 443/516] samples: pidfd: fix userprogs typo	[Body]
[PATCH 5.10 444/516] clone: add CLONE_AUTOREAP	[Body]
[PATCH 5.10 445/516] exit: fix lost-update race on the child_subreaper bitfields	[Body]
[PATCH 5.10 446/516] pipe: preserve existing fasync readers on writer setup failure	[Body]
[PATCH 5.10 447/516] net: initialize net->net_cookie at netns setup	[Body]
[PATCH 5.10 448/516] netlink: avoid hashing the network namespace pointer	[Body]
[PATCH 5.10 449/516] autofs: ignore notification errors from a replaced pipe	[Body]
[PATCH 5.10 450/516] KVM: nVMX: Reset MMU back to the root MMU if loading L2 state fails for !VM-Entry	[Body]
[PATCH 5.10 451/516] fsnotify: prevent mark additions during connector teardown	[Body]
[PATCH 5.10 452/516] net/sched: fix use-after-free in __tcf_action_put()	[Body]
[PATCH 5.10 453/516] net: rds: fix uninitialized trans dereference in CM event handler	[Body]
[PATCH 5.10 454/516] sctp: revalidate output stream after association connect wait	[Body]
[PATCH 5.10 455/516] tools: gpio: fix building from the top level with O=	[Body]
[PATCH 5.10 456/516] i2c: qcom-cci: Fix HALT_ACK reset request being dropped	[Body]
[PATCH 5.10 457/516] scsi: libiscsi: Reject a negative task index from parse_pdu_itt	[Body]
[PATCH 5.10 458/516] scsi: libiscsi: Validate the ITT reflected in a Reject PDU	[Body]
[PATCH 5.10 459/516] scsi: libiscsi: Validate the task named by a management response	[Body]
[PATCH 5.10 460/516] drm/amdgpu/sdma3: Work around POLL_REGMEM / FENCE hang	[Body]
[PATCH 5.10 461/516] drm/amdgpu: dont drop the runtime PM reference twice in amdgpu_gpr	[Body]
[PATCH 5.10 462/516] tracing: Fix the shift out of bounds in the log2 histogram modifier	[Body]
[PATCH 5.10 463/516] wifi: p54: validate firmware record lengths	[Body]
[PATCH 5.10 464/516] tcp: fix use-after-free in do_tcp_getsockopt(TCP_CC_INFO)	[Body]
[PATCH 5.10 465/516] dm cache: fix demotion stats in passthrough mode	[Body]
[PATCH 5.10 466/516] dm cache: fix issue with background work locking	[Body]
[PATCH 5.10 467/516] dm-crypt: fix a tiny race condition in crypt_dec_pending	[Body]
[PATCH 5.10 468/516] dm-ebs: fix incorrect device offset check in ebs_ctr()	[Body]
[PATCH 5.10 469/516] tipc: protect node reset trace dump with node lock	[Body]
[PATCH 5.10 470/516] sctp: validate chunk length in the inqueue parser	[Body]
[PATCH 5.10 471/516] s390/ctcm: Prevent XID null dereference	[Body]
[PATCH 5.10 472/516] s390/pci: Fix leak of uninitialized kernel data in SCLP report	[Body]
[PATCH 5.10 473/516] ipv4: avoid divide by zero in fib_rebalance	[Body]
[PATCH 5.10 474/516] bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS	[Body]
[PATCH 5.10 475/516] mm/vmalloc: acquire init_mm lock on huge vmap to avoid ptdump UAF	[Body]
[PATCH 5.10 476/516] drm/amdgpu: Fix VCE 3 ring align_mask	[Body]
[PATCH 5.10 477/516] security/keys: fix missed RCU read section on lookup	[Body]
[PATCH 5.10 478/516] net/sched: cls_u32: skip hash tables in u32_bind_class()	[Body]
[PATCH 5.10 479/516] OPP: Fix race between OPP addition and lookup	[Body]
[PATCH 5.10 480/516] KVM: x86/mmu: Preserve nested TDP shadow page tables if they are used as roots	[Body]
[PATCH 5.10 481/516] net/sched: cls_flower: validate mask pointer after nla_next()	[Body]
[PATCH 5.10 482/516] tracing/histograms: Reject non-stacktrace fields for synthetic stacktrace fields	[Body]
[PATCH 5.10 483/516] scsi: st: Fix use-after-free race between st_remove() and st_open()	[Body]
[PATCH 5.10 484/516] KVM: arm64: vgic-its: Dont dereference a NULL collection on ITT save	[Body]
[PATCH 5.10 485/516] hwmon: (drivetemp) Fix driver producing garbage data when SCSI errors occur	[Body]
[PATCH 5.10 486/516] watch_queue: Fix note pool publication race in watch_queue_set_size()	[Body]
[PATCH 5.10 487/516] unicode: free the map after a grace period	[Body]
[PATCH 5.10 488/516] Input: byd - synchronize timer deletion before freeing private data	[Body]
[PATCH 5.10 489/516] mm/huge_memory: transfer the pmd dirty bit to the folio on zap	[Body]
[PATCH 5.10 490/516] netfilter: nf_tables: release flowtable after rcu grace period on error	[Body]
[PATCH 5.10 491/516] dm-integrity: require stable writes for internal hash modes	[Body]
[PATCH 5.10 492/516] ipv4: udp: Create exceptions before socket matching	[Body]
[PATCH 5.10 493/516] net: bridge: mcast: dont truncate the port group walk on teardown	[Body]
[PATCH 5.10 494/516] i2c: viai2c-wmt: Fix clock leak in wmt_i2c_probe()	[Body]
[PATCH 5.10 495/516] futex: Fix mm reuse handling for FUT_OFF_MMSHARED	[Body]
[PATCH 5.10 496/516] drm/i915/dmc: Harden DMC firmware payload parsing	[Body]
[PATCH 5.10 497/516] dm-integrity: fix infinite loop on discard with large tag size	[Body]
[PATCH 5.10 498/516] cifs: add revalidation on FSCTL failure in smb2_duplicate_extents()	[Body]
[PATCH 5.10 499/516] xfs: dont hold buffer locks across sync transaction commit in xfs_sync_sb_buf	[Body]
[PATCH 5.10 500/516] net: bonding: fix use-after-free in bond_xmit_broadcast()	[Body]
[PATCH 5.10 501/516] netfilter: nf_tables: always increment set element count	[Body]
[PATCH 5.10 502/516] netfilter: nf_tables: unconditionally bump set->nelems before insertion	[Body]
[PATCH 5.10 503/516] net_sched: codel: fix stale state for empty flows in fq_codel	[Body]
[PATCH 5.10 504/516] Bluetooth: L2CAP: access chan->conn safely in get/setsockopt	[Body]
[PATCH 5.10 505/516] Bluetooth: L2CAP: refuse __l2cap_chan_add if chan already has conn	[Body]
[PATCH 5.10 506/516] tracing: Reject incomplete event filter expressions	[Body]
[PATCH 5.10 507/516] tracing: Save the event file instead of the compatible histogram	[Body]
[PATCH 5.10 508/516] tracing: Unregister field variable histograms when the command fails	[Body]
[PATCH 5.10 509/516] tracing: Fix 64-bit and signed histogram fields on 32-bit kernels	[Body]
[PATCH 5.10 510/516] keys: Avoid the owner account dereference in named keyring lookup	[Body]
[PATCH 5.10 511/516] keys: Check the authorization payload in process keyring searches	[Body]
[PATCH 5.10 512/516] keys: Protect the type name while describing a key	[Body]
[PATCH 5.10 513/516] keys: make keyring indexes independent of kernel addresses	[Body]
[PATCH 5.10 514/516] keys: Protect the read method check against type removal	[Body]
[PATCH 5.10 515/516] KEYS: Fix key_reject_and_link() race with keyring restriction	[Body]
[PATCH 5.10 516/516] signal: dont retarget shared signals in a dying thread group	[Body]

ID (for dev)	6afb5231-59eb-468e-aa87-f82ebec19d0e
Status	finished
Triaged	OK [Log]
Execution Log	[Link]

Test	Base	Patched	Verdict
[KASAN] Build Base	aca95a35f1bcc0626c4fa4d1252bf2d4c990a1a2 [Config]		passed [Log]
[KASAN] Boot test: Base	aca95a35f1bcc0626c4fa4d1252bf2d4c990a1a2 [Config]		passed [Log]
[KASAN] Build Patched		aca95a35f1bcc0626c4fa4d1252bf2d4c990a1a2 [Config] [patched]	passed [Log]
[KASAN] Boot test: Patched		aca95a35f1bcc0626c4fa4d1252bf2d4c990a1a2 [Config] [patched]	passed [Log]
[KASAN] Fuzz	aca95a35f1bcc0626c4fa4d1252bf2d4c990a1a2 [Config]	aca95a35f1bcc0626c4fa4d1252bf2d4c990a1a2 [Config] [patched]	passed [Log] [Artifacts]

Patches (516)

Series Summary

Sessions

Session 2026-10-29