* Bump kernel ABI to 28: ship the ELS kernel as linux-image-4.19.0-28-*, distinct from Debian stock 4.19.0-27. * Backport security fixes for CVE-2026-31431 (af_alg / AEAD): - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec - crypto: scatterwalk - Backport memcpy_sglist() - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption - crypto: authencesn - Fix src offset when decrypting in-place - crypto: algif_aead - use memcpy_sglist() instead of null skcipher - crypto: algif_aead - Revert to operating out-of-place - crypto: algif_aead - snapshot IV for async AEAD requests - crypto: authenc - use memcpy_sglist() instead of null skcipher - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl - crypto: algif_aead - Fix minimum RX size check for decryption * Backport security fixes for CVE-2026-53043 (ocfs2/dlm out-of-bounds): - ocfs2/dlm: validate qr_numregions in dlm_match_regions() - ocfs2/dlm: fix off-by-one in dlm_match_regions() region comparison * New upstream stable update: https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.317 - wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects - wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup() - wifi: iwlwifi: mvm: revert gen2 TX A-MPDU size to 64 - wifi: iwlwifi: mvm: don't read past the mfuart notifcation - ipv6: sr: block BH in seg6_output_core() and seg6_input_core() - vxlan: Fix regression when dropping packets due to invalid src addresses - tcp: count CLOSE-WAIT sockets for TCP_MIB_CURRESTAB - ptp: Fix error message on failed pin verification - af_unix: Annotate data-race of sk->sk_state in unix_inq_len(). - af_unix: Annotate data-races around sk->sk_state in unix_write_space() and poll(). - af_unix: Annotate data-races around sk->sk_state in sendmsg() and recvmsg(). - af_unix: Annotate data-races around sk->sk_state in UNIX_DIAG. - af_unix: Annotate data-race of net->unx.sysctl_max_dgram_qlen. - af_unix: Use unix_recvq_full_lockless() in unix_stream_connect(). - af_unix: Use skb_queue_len_lockless() in sk_diag_show_rqlen(). - af_unix: Annotate data-race of sk->sk_shutdown in sk_diag_fill(). - usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete - drm/amd/display: Handle Y carry-over in VCP X.Y calculation - serial: sc16is7xx: replace hardcoded divisor value with BIT() macro - serial: sc16is7xx: fix bug in sc16is7xx_set_baud() when using prescaler - media: mc: mark the media devnode as registered from the, start - selftests/mm: compaction_test: fix incorrect write of zero to nr_hugepages - selftests/mm: conform test to TAP format output - selftests/mm: compaction_test: fix bogus test success on Aarch64 - nilfs2: Remove check for PageError - nilfs2: return the mapped address from nilfs_get_page() - nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors - USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages - mei: me: release irq in mei_me_pci_resume error path - jfs: xattr: fix buffer overflow for invalid xattr - xhci: Apply reset resume quirk to Etron EJ188 xHCI host - xhci: Apply broken streams quirk to Etron EJ188 xHCI host - Input: try trimming too long modalias strings - xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING - HID: core: remove unnecessary WARN_ON() in implement() - iommu/amd: Fix sysfs leak in iommu init - liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet - drm/bridge/panel: Fix runtime warning on panel bridge release - tcp: fix race in tcp_v6_syn_recv_sock() - Bluetooth: L2CAP: Fix rejecting L2CAP_CONN_PARAM_UPDATE_REQ - ipv6/route: Add a missing check on proc_dointvec - net/ipv6: Fix the RT cache flush via sysctl using a previous delay - drivers: core: synchronize really_probe() and dev_uevent() - drm/exynos/vidi: fix memory leak in .get_modes() - vmci: prevent speculation leaks by sanitizing event in event_deliver() - fs/proc: fix softlockup in __read_vmcore - ocfs2: use coarse time for new created files - ocfs2: fix races between hole punching and AIO+DIO - PCI: rockchip-ep: Remove wrong mask on subsys_vendor_id - dmaengine: axi-dmac: fix possible race in remove() - intel_th: pci: Add Granite Rapids support - intel_th: pci: Add Granite Rapids SOC support - intel_th: pci: Add Sapphire Rapids SOC support - intel_th: pci: Add Meteor Lake-S support - intel_th: pci: Add Lunar Lake support - nilfs2: fix potential kernel bug due to lack of writeback flag waiting - hv_utils: drain the timesync packets on onchannelcallback - hugetlb_encode.h: fix undefined behaviour (34 << 26) - usb-storage: alauda: Check whether the media is initialized - rcutorture: Fix rcu_torture_one_read() pipe_count overflow comment - batman-adv: bypass empty buckets in batadv_purge_orig_ref() - scsi: qedi: Fix crash while reading debugfs attribute - powerpc/pseries: Enforce hcall result buffer validity and size - powerpc/io: Avoid clang null pointer arithmetic warnings - usb: misc: uss720: check for incompatible versions of the Belkin F5U002 - udf: udftime: prevent overflow in udf_disk_stamp_to_time() - PCI/PM: Avoid D3cold for HP Pavilion 17 PC/1972 PCIe Ports - MIPS: Octeon: Add PCIe link status check - MIPS: Routerboard 532: Fix vendor retry check code - cipso: fix total option length computation - netrom: Fix a memory leak in nr_heartbeat_expiry() - ipv6: prevent possible NULL dereference in rt6_probe() - xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr() - virtio_net: checksum offloading handling fix - net: usb: rtl8150 fix unintiatilzed variables in rtl8150_get_link_ksettings - regulator: core: Fix modpost error "regulator_get_regmap" undefined - dmaengine: ioatdma: Fix missing kmem_cache_destroy() - ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine." - drm/radeon: fix UBSAN warning in kv_dpm.c - gcov: add support for GCC 14 - ARM: dts: samsung: smdkv310: fix keypad no-autorepeat - ARM: dts: samsung: exynos4412-origen: fix keypad no-autorepeat - ARM: dts: samsung: smdk4412: fix keypad no-autorepeat - selftests/ftrace: Fix checkbashisms errors - tracing: Add MODULE_DESCRIPTION() to preemptirq_delay_test - perf/core: Fix missing wakeup when waiting for context reference - PCI: Add PCI_ERROR_RESPONSE and related definitions - x86/amd_nb: Check for invalid SMN reads - iio: dac: ad5592r-base: Replace indio_dev->mlock with own device lock - iio: dac: ad5592r: un-indent code-block for scale read - iio: dac: ad5592r: fix temperature channel scaling value - scsi: mpt3sas: Add ioc_ logging macros - scsi: mpt3sas: Gracefully handle online firmware update - scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory - xhci: Use soft retry to recover faster from transaction errors - xhci: Set correct transferred length for cancelled bulk transfers - usb: xhci: do not perform Soft Retry for some xHCI hosts - pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER - pinctrl: rockchip: fix pinmux bits for RK3328 GPIO2-B pins - pinctrl: rockchip: fix pinmux bits for RK3328 GPIO3-B pins - pinctrl: rockchip: fix pinmux reset in rockchip_pmx_set - drm/amdgpu: fix UBSAN warning in kv_dpm.c - netfilter: nf_tables: validate family when identifying table via handle - ASoC: fsl-asoc-card: set priv->pdev before using it - netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers - drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep - net/iucv: Avoid explicit cpumask var allocation on stack - ALSA: emux: improve patch ioctl data validation - media: dvbdev: Initialize sbuf - soc: ti: wkup_m3_ipc: Send NULL dummy message instead of pointer message - nvme: fixup comment for nvme RDMA Provider Type - gpio: davinci: Validate the obtained number of IRQs - i2c: ocores: stop transfer on timeout - i2c: ocores: set IACK bit after core is enabled - x86: stop playing stack games in profile_pc() - mmc: sdhci-pci: Convert PCIBIOS_* return codes to errnos - iio: adc: ad7266: Fix variable checking bug - iio: chemical: bme680: Fix pressure value output - iio: chemical: bme680: Fix calibration data variable - iio: chemical: bme680: Fix overflows in compensate() functions - iio: chemical: bme680: Fix sensor data read operation - net: usb: ax88179_178a: improve link status logs - usb: gadget: printer: SS+ support - usb: musb: da8xx: fix a resource leak in probe() - usb: atm: cxacru: fix endpoint checking in cxacru_bind() - tty: mcf: MCF54418 has 10 UARTS - hexagon: fix fadvise64_64 calling conventions - drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes - drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes - batman-adv: Don't accept TT entries for out-of-spec VIDs - ata: libata-core: Fix double free on error - ftruncate: pass a signed offset - pwm: stm32: Refuse too small period requests - ipv6: annotate some data-races around sk->sk_prot - ipv6: Fix data races around sk->sk_prot. - tcp: Fix data races around icsk->icsk_af_ops. - arm64: dts: rockchip: Add sound-dai-cells for RK3368 https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.318 - asm-generic: Move common compat types to asm-generic/compat.h - media: dvb: as102-fe: Fix as10x_register_addr packing - media: dvb-usb: dib0700_devices: Add missing release_firmware() - IB/core: Implement a limit on UMAD receive List - drm/amd/display: Skip finding free audio for unknown engine_id - media: dw2102: Don't translate i2c read into write - sctp: prefer struct_size over open coded arithmetic - firmware: dmi: Stop decoding on broken entry - Input: ff-core - prefer struct_size over open coded arithmetic - net: dsa: mv88e6xxx: Correct check for empty list - media: dvb-frontends: tda18271c2dd: Remove casting during div - media: s2255: Use refcount_t instead of atomic_t for num_channels - media: dvb-frontends: tda10048: Fix integer overflow - i2c: i801: Annotate apanel_addr as __ro_after_init - powerpc/64: Set _IO_BASE to POISON_POINTER_DELTA not 0 for CONFIG_PCI=n - orangefs: fix out-of-bounds fsid access - powerpc/xmon: Check cpu id in commands "c#", "dp#" and "dx#" - jffs2: Fix potential illegal address access in jffs2_free_inode - s390/pkey: Wipe sensitive data on failure - tcp: take care of compressed acks in tcp_add_reno_sack() - tcp: tcp_mark_head_lost is only valid for sack-tcp - tcp: add ece_ack flag to reno sack functions - net: tcp better handling of reordering then loss cases - UPSTREAM: tcp: fix DSACK undo in fast recovery to call tcp_try_to_open() - tcp_metrics: validate source addr length - bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set() - selftests: fix OOM in msg_zerocopy selftest - selftests: make order checking verbose in msg_zerocopy selftest - inet_diag: Initialize pad field in struct inet_diag_req_v2 - nilfs2: fix inode number range checks - nilfs2: add missing check for inode numbers on directory entries - mm: optimize the redundant loop of mm_update_owner_next() - Bluetooth: Fix incorrect pointer arithmatic in ext_adv_report_evt - can: kvaser_usb: Explicitly initialize family in leafimx driver_info struct - fsnotify: Do not generate events for O_PATH file descriptors - Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again" - drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes - drm/amdgpu/atomfirmware: silence UBSAN warning - bnx2x: Fix multiple UBSAN array-index-out-of-bounds - media: dw2102: fix a potential buffer overflow - i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr - nilfs2: fix incorrect inode allocation from reserved inodes - drm/i915: make find_fw_domain work on intel_uncore - tcp: fix incorrect undo caused by DSACK of TLP retransmit - net: lantiq_etop: add blank line after declaration - net: ethernet: lantiq_etop: fix double free in detach - ppp: reject claimed-as-LCP but actually malformed packets - ARM: davinci: Convert comma to semicolon - USB: serial: option: add Telit generic core-dump composition - USB: serial: option: add Telit FN912 rmnet compositions - USB: serial: option: add Fibocom FM350-GL - USB: serial: option: add support for Foxconn T99W651 - USB: serial: option: add Netprisma LCUK54 series modules - USB: serial: option: add Rolling RW350-GL variants - USB: Add USB_QUIRK_NO_SET_INTF quirk for START BP-850k - usb: gadget: configfs: Prevent OOB read/write in usb_string_copy() - USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor - hpet: Support 32-bit userspace - libceph: fix race between delayed_work() and ceph_monc_stop() - tcp: refactor tcp_retransmit_timer() - net: tcp: fix unexcepted socket die when snd_wnd is 0 - tcp: use signed arithmetic in tcp_rtx_probe0_timed_out() - tcp: avoid too many retransmit packets - SUNRPC: Fix RPC client cleaned up the freed pipefs dentries - nilfs2: fix kernel bug on rename operation of broken directory - i2c: rcar: bring hardware to known state when probing https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.319 - gcc-plugins: Rename last_stmt() for GCC 14+ - scsi: qedf: Set qed_slowpath_params to zero before use - ACPI: EC: Abort address space access upon error - ACPI: EC: Avoid returning AE_OK on errors in address space handler - wifi: mac80211: mesh: init nonpeer_pm to active by default in mesh sdata - wifi: mac80211: fix UBSAN noise in ieee80211_prep_hw_scan() - Input: silead - Always support 10 fingers - ila: block BH in ila_output() - kconfig: gconf: give a proper initial state to the Save button - kconfig: remove wrong expr_trans_bool() - fs/file: fix the check in find_next_fd() - mei: demote client disconnect warning on suspend to debug - wifi: cfg80211: wext: add extra SIOCSIWSCAN data check - Input: elantech - fix touchpad state on resume for Lenovo N24 - bytcr_rt5640 : inverse jack detect for Archos 101 cesium - can: kvaser_usb: fix return value for hif_usb_send_regout - s390/sclp: Fix sclp_init() cleanup on failure - ALSA: dmaengine_pcm: terminate dmaengine before synchronize - net: usb: qmi_wwan: add Telit FN912 compositions - net: mac802154: Fix racy device stats updates by DEV_STATS_INC() and DEV_STATS_ADD() - Bluetooth: hci_core: cancel all works upon hci_unregister_dev() - fs: better handle deep ancestor chains in is_subdir() - spi: imx: Don't expect DMA for i.MX{25,35,50,51,53} cspi devices - selftests/vDSO: fix clang build errors and warnings - hfsplus: fix uninit-value in copy_name - filelock: Remove locks reliably when fcntl/close race is detected - ARM: 9324/1: fix get_user() broken with veneer - ACPI: processor_idle: Fix invalid comparison with insertion sort for latency - net: relax socket state check at accept time. - ocfs2: add bounds checking to ocfs2_check_dir_entry() - jfs: don't walk off the end of ealist - filelock: Fix fcntl/close race recovery compat path https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.320 - platform/chrome: cros_ec_debugfs: fix wrong EC message version - hfsplus: fix to avoid false alarm of circular locking - x86/of: Return consistent error type from x86_of_pci_irq_enable() - x86/pci/intel_mid_pci: Fix PCIBIOS_* return code handling - x86/pci/xen: Fix PCIBIOS_* return code handling - x86/platform/iosf_mbi: Convert PCIBIOS_* return codes to errnos - hwmon: (adt7475) Fix default duty on fan is disabled - pwm: stm32: Always do lazy disabling - hwmon: (max6697) Fix underflow when writing limit attributes - hwmon: Introduce SENSOR_DEVICE_ATTR_{RO, RW, WO} and variants - hwmon: (max6697) Auto-convert to use SENSOR_DEVICE_ATTR_{RO, RW, WO} - hwmon: (max6697) Fix swapped temp{1,8} critical alarms - arm64: dts: rockchip: Increase VOP clk rate on RK3328 - m68k: atari: Fix TT bootup freeze / unexpected (SCU) interrupt messages - x86/xen: Convert comma to semicolon - m68k: cmpxchg: Fix return value for default case in __arch_xchg() - wifi: brcmsmac: LCN PHY code is used for BCM4313 2G-only device - net/smc: Allow SMC-D 1MB DMB allocations - net/smc: set rmb's SG_MAX_SINGLE_ALLOC limitation only when CONFIG_ARCH_NO_SG_CHAIN is defined - selftests/bpf: Check length of recv in test_sockmap - wifi: cfg80211: fix typo in cfg80211_calculate_bitrate_he() - wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he() - net: fec: Refactor: #define magic constants - net: fec: Fix FEC_ECR_EN1588 being cleared on link-down - ipvs: Avoid unnecessary calls to skb_is_gso_sctp - perf: Fix perf_aux_size() for greater-than 32-bit size - perf: Prevent passing zero nr_pages to rb_alloc_aux() - bna: adjust 'name' buf size of bna_tcb and bna_ccb structures - selftests: forwarding: devlink_lib: Wait for udev events after reloading - media: imon: Fix race getting ictx->lock - saa7134: Unchecked i2c_transfer function result fixed - media: uvcvideo: Allow entity-defined get_info and get_cur - media: uvcvideo: Override default flags - media: renesas: vsp1: Fix _irqsave and _irq mix - media: renesas: vsp1: Store RPF partition configuration per RPF instance - leds: trigger: Unregister sysfs attributes before calling deactivate() - perf report: Fix condition in sort__sym_cmp() - drm/etnaviv: fix DMA direction handling for cached RW buffers - mfd: omap-usb-tll: Use struct_size to allocate tll - ext4: avoid writing unitialized memory to disk in EA inodes - sparc64: Fix incorrect function signature and add prototype for prom_cif_init - PCI: Equalize hotplug memory and io for occupied and empty slots - PCI: Fix resource double counting on remove & rescan - RDMA/mlx4: Fix truncated output warning in mad.c - RDMA/mlx4: Fix truncated output warning in alias_GUID.c - RDMA/rxe: Don't set BTH_ACK_MASK for UC or UD QPs - mtd: make mtd_test.c a separate module - Input: elan_i2c - do not leave interrupt disabled on suspend failure - MIPS: Octeron: remove source file executable bit - powerpc/xmon: Fix disassembly CPU feature checks - macintosh/therm_windtunnel: fix module unload. - bnxt_re: Fix imm_data endianness - ice: Rework flex descriptor programming - netfilter: ctnetlink: use helper function to calculate expect ID - pinctrl: core: fix possible memory leak when pinctrl_enable() fails - pinctrl: single: fix possible memory leak when pinctrl_enable() fails - pinctrl: ti: ti-iodelay: Drop if block with always false condition - pinctrl: ti: ti-iodelay: fix possible memory leak when pinctrl_enable() fails - pinctrl: freescale: mxs: Fix refcount of child - fs/nilfs2: remove some unused macros to tame gcc - nilfs2: avoid undefined behavior in nilfs_cnt32_ge macro - tick/broadcast: Make takeover of broadcast hrtimer reliable - net: netconsole: Disable target before netpoll cleanup - af_packet: Handle outgoing VLAN packets without hardware offloading - ipv6: take care of scope when choosing the src addr - char: tpm: Fix possible memory leak in tpm_bios_measurements_open() - media: venus: fix use after free in vdec_close - hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode() - drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes - drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes - m68k: amiga: Turn off Warp1260 interrupts during boot - ext4: check dot and dotdot of dx_root before making dir indexed - ext4: make sure the first directory block is not a hole - wifi: mwifiex: Fix interface type change - leds: ss4200: Convert PCIBIOS_* return codes to errnos - tools/memory-model: Fix bug in lock.cat - hwrng: amd - Convert PCIBIOS_* return codes to errnos - PCI: hv: Return zero, not garbage, when reading PCI_INTERRUPT_PIN - binder: fix hang of unregistered readers - scsi: qla2xxx: Return ENOBUFS if sg_cnt is more than one for ELS cmds - f2fs: fix to don't dirty inode for readonly filesystem - clk: davinci: da8xx-cfgchip: Initialize clk_init_data before use - ubi: eba: properly rollback inside self_check_eba - decompress_bunzip2: fix rare decompression failure - kobject_uevent: Fix OOB access within zap_modalias_env() - rtc: cmos: Fix return value of nvmem callbacks - scsi: qla2xxx: During vport delete send async logout explicitly - scsi: qla2xxx: validate nvme_local_port correctly - perf/x86/intel/pt: Fix topa_entry base length - watchdog/perf: properly initialize the turbo mode timestamp and rearm counter - platform: mips: cpu_hwmon: Disable driver on unsupported hardware - RDMA/iwcm: Fix a use-after-free related to destroying CM IDs - selftests/sigaltstack: Fix ppc64 GCC build - nilfs2: handle inconsistent state in nilfs_btnode_create_block() - kdb: Fix bound check compiler warning - kdb: address -Wformat-security warnings - kdb: Use the passed prompt in kdb_position_cursor() - jfs: Fix array-index-out-of-bounds in diFree - dma: fix call order in dmam_free_coherent - MIPS: SMP-CPS: Fix address for GCR_ACCESS register for CM3 and later - net: ip_rt_get_source() - use new style struct initializer instead of memset - ipv4: Fix incorrect source address in Record Route option - net: bonding: correctly annotate RCU in bond_should_notify_peers() - tipc: Return non-zero value from tipc_udp_addr2str() on error - mISDN: Fix a use after free in hfcmulti_tx() - mm: avoid overflows in dirty throttling logic - PCI: rockchip: Make 'ep-gpios' DT property optional - PCI: rockchip: Use GPIOD_OUT_LOW flag while requesting ep_gpio - parport: parport_pc: Mark expected switch fall-through - parport: Convert printk(KERN_ to pr_( - parport: Standardize use of printmode - dev/parport: fix the array out-of-bounds risk - driver core: Cast to (void *) with __force for __percpu pointer - devres: Fix memory leakage caused by driver API devm_free_percpu() - perf/x86/intel/pt: Export pt_cap_get() - perf/x86/intel/pt: Use helpers to obtain ToPA entry size - perf/x86/intel/pt: Use pointer arithmetics instead in ToPA entry calculation - perf/x86/intel/pt: Split ToPA metadata and page layout - perf/x86/intel/pt: Fix a topa_entry base address calculation - remoteproc: imx_rproc: ignore mapping vdev regions - remoteproc: imx_rproc: Fix ignoring mapping vdev regions - remoteproc: imx_rproc: Skip over memory region when node value is NULL - drm/vmwgfx: Fix overlay when using Screen Targets - net/iucv: fix use after free in iucv_sock_close() - ipv6: fix ndisc_is_useropt() handling for PIO - protect the fetch of ->fd[fd] in do_dup2() from mispredictions - ALSA: usb-audio: Correct surround channels in UAC1 channel map - net: usb: sr9700: fix uninitialized variable use in sr_mdio_read - irqchip/mbigen: Fix mbigen node address layout - x86/mm: Fix pti_clone_pgtable() alignment assumption - net: usb: qmi_wwan: fix memory leak for not ip packets - net: linkwatch: use system_unbound_wq - Bluetooth: l2cap: always unlock channel in l2cap_conless_channel() - net: fec: Stop PPS on driver remove - md/raid5: avoid BUG_ON() while continue reshape after reassembling - clocksource/drivers/sh_cmt: Address race condition for clock events - PCI: Add Edimax Vendor ID to pci_ids.h - udf: prevent integer overflow in udf_bitmap_free_blocks() - wifi: nl80211: don't give key data to userspace - btrfs: fix bitmap leak when loading free space cache on duplicate entry - media: uvcvideo: Ignore empty TS packets - media: uvcvideo: Fix the bandwdith quirk on USB 3.x - jbd2: avoid memleak in jbd2_journal_write_metadata_buffer - s390/sclp: Prevent release of buffer in I/O - SUNRPC: Fix a race to wake a sync task - ext4: fix wrong unit use in ext4_mb_find_by_goal - arm64: Add support for SB barrier and patch in over DSB; ISB sequences - arm64: cpufeature: Force HWCAP to be based on the sysreg visible to user-space - arm64: Add Neoverse-V2 part - arm64: cputype: Add Cortex-X4 definitions - arm64: cputype: Add Neoverse-V3 definitions - arm64: errata: Add workaround for Arm errata 3194386 and 3312417 - arm64: cputype: Add Cortex-X3 definitions - arm64: cputype: Add Cortex-A720 definitions - arm64: cputype: Add Cortex-X925 definitions - arm64: errata: Unify speculative SSBS errata logic - arm64: errata: Expand speculative SSBS workaround - arm64: cputype: Add Cortex-X1C definitions - arm64: cputype: Add Cortex-A725 definitions - arm64: errata: Expand speculative SSBS workaround (again) - i2c: smbus: Don't filter out duplicate alerts - i2c: smbus: Improve handling of stuck alerts - i2c: smbus: Send alert notifications to all devices if source not found - bpf: kprobe: remove unused declaring of bpf_kprobe_override - spi: lpspi: Replace all "master" with "controller" - spi: lpspi: Add slave mode support - spi: lpspi: Let watermark change with send data length - spi: lpspi: Add i.MX8 boards support for lpspi - spi: lpspi: add the error info of transfer speed setting - spi: fsl-lpspi: remove unneeded array - spi: spi-fsl-lpspi: Fix scldiv calculation - ALSA: line6: Fix racy access to midibuf - usb: vhci-hcd: Do not drop references before new references are gained - USB: serial: debug: do not echo input by default - usb: gadget: core: Check for unset descriptor - scsi: ufs: core: Fix hba->last_dme_cmd_tstamp timestamp updating logic - tick/broadcast: Move per CPU pointer access into the atomic section - ntp: Clamp maxerror and esterror to operating range - driver core: Fix uevent_show() vs driver detach race - ntp: Safeguard against time_constant overflow - serial: core: check uartclk for zero to avoid divide by zero - power: supply: axp288_charger: Fix constant_charge_voltage writes - power: supply: axp288_charger: Round constant_charge_voltage writes down - tracing: Fix overflow in get_free_elt() - x86/mtrr: Check if fixed MTRRs exist before saving them - drm/bridge: analogix_dp: properly handle zero sized AUX transactions - drm/mgag200: Set DDC timeout in milliseconds - kbuild: Fix '-S -c' in x86 stack protector scripts - netfilter: nf_tables: set element extended ACK reporting support - netfilter: nf_tables: use timestamp to check for set element timeout - netfilter: nf_tables: prefer nft_chain_validate - arm64: cpufeature: Fix the visibility of compat hwcaps - media: uvcvideo: Use entity get_cur in uvc_ctrl_set - drm/i915/gem: Fix Virtual Memory mapping boundaries calculation - exec: Fix ToCToU between perm check and set-uid/gid usage - nvme/pci: Add APST quirk for Lenovo N60z laptop https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.321 - fuse: Initialize beyond-EOF page contents before setting uptodate - ALSA: usb-audio: Support Yamaha P-125 quirk entry - xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration - arm64: ACPI: NUMA: initialize all values of acpi_early_node_map to NUMA_NO_NODE - dm resume: don't return EINVAL when signalled - dm persistent data: fix memory allocation failure - bitmap: introduce generic optimized bitmap_size() - fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE - selinux: fix potential counting error in avc_add_xperms_decision() - drm/amdgpu: Actually check flags for all context ops. - memcg_write_event_control(): fix a user-triggerable oops - s390/cio: rename bitmap_size() -> idset_bitmap_size() - overflow.h: Add flex_array_size() helper - overflow: Implement size_t saturating arithmetic helpers - btrfs: rename bitmap_set_bits() -> btrfs_bitmap_set_bits() - net/mlx5e: Correctly report errors for ethtool rx flows - atm: idt77252: prevent use after free in dequeue_rx() - net: dsa: vsc73xx: pass value in phy_write operation - ssb: Fix division by zero issue in ssb_calc_clock_rate - wifi: cw1200: Avoid processing an invalid TIM IE - i2c: riic: avoid potential division by zero - staging: ks7010: disable bh on tx_dev_lock - binfmt_misc: cleanup on filesystem umount - scsi: spi: Fix sshdr use - gfs2: setattr_chown: Add missing initialization - wifi: iwlwifi: abort scan when rfkill on but device enabled - powerpc/xics: Check return value of kasprintf in icp_native_map_one_cpu - ext4: do not trim the group with corrupted block bitmap - quota: Remove BUG_ON from dqget() - media: pci: cx23885: check cx23885_vdev_init() return - fs: binfmt_elf_efpic: don't use missing interpreter's properties - scsi: lpfc: Initialize status local variable in lpfc_sli4_repost_sgl_list() - net/sun3_82586: Avoid reading past buffer in debug output - md: clean up invalid BUG_ON in md_ioctl - parisc: Use irq_enter_rcu() to fix warning at kernel/context_tracking.c:367 - powerpc/boot: Handle allocation failure in simple_realloc() - powerpc/boot: Only free if realloc() succeeds - btrfs: change BUG_ON to assertion when checking for delayed_node root - btrfs: handle invalid root reference found in may_destroy_subvol() - btrfs: send: handle unexpected data in header buffer in begin_cmd() - btrfs: delete pointless BUG_ON check on quota root in btrfs_qgroup_account_extent() - f2fs: fix to do sanity check in update_sit_entry - usb: gadget: fsl: Increase size of name buffer for endpoints - Bluetooth: bnep: Fix out-of-bound access - NFS: avoid infinite loop in pnfs_update_layout. - openrisc: Call setup_memory() earlier in the init sequence - s390/iucv: fix receive buffer virtual vs physical address confusion - usb: dwc3: core: Skip setting event buffers for host only controllers - irqchip/gic-v3-its: Remove BUG_ON in its_vpe_irq_domain_alloc - ext4: set the type of max_zeroout to unsigned int to avoid overflow - nvmet-rdma: fix possible bad dereference when freeing rsps - hrtimer: Prevent queuing of hrtimer without a function callback - gtp: pull network headers in gtp_dev_xmit() - block: use "unsigned long" for blk_validate_block_size(). - Bluetooth: Make use of __check_timeout on hci_sched_le - Bluetooth: hci_core: Fix not handling link timeouts propertly - Bluetooth: hci_core: Fix LE quote calculation - kcm: Serialise kcm_sendmsg() for the same socket. - netfilter: nft_counter: Synchronize nft_counter_reset() against reader. - ipv6: prevent UAF in ip6_send_skb() - net: xilinx: axienet: Always disable promiscuous mode - drm/msm: use drm_debug_enabled() to check for debug categories - drm/msm/dpu: don't play tricks with debug macros - mmc: mmc_test: Fix NULL dereference on allocation failure - Bluetooth: MGMT: Add error handling to pair_device() - HID: wacom: Defer calculation of resolution until resolution_code is known - cxgb4: add forgotten u64 ivlan cast before shift - mmc: dw_mmc: allow biu and ciu clocks to defer - ALSA: timer: Relax start tick time check for slave timer elements - Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO - Input: MT - limit max slots - tools: move alignment-related macros to new - drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc - pinctrl: single: fix potential NULL dereference in pcs_get_function() - wifi: mwifiex: duplicate static structs used in driver instances - dm suspend: return -ERESTARTSYS instead of -EINTR - scsi: mpt3sas: Avoid IOMMU page faults on REPORT ZONES - filelock: Correct the filelock owner in fcntl_setlk/fcntl_setlk64 - media: uvcvideo: Fix integer overflow calculating timestamp - ata: libata-core: Fix null pointer dereference on error - cgroup/cpuset: Prevent UAF in proc_cpuset_show() - memcg: enable accounting of ipc resources - fbcon: Prevent that screen size is smaller than font size - fbmem: Check virtual screen sizes in fb_set_var() - net:rds: Fix possible deadlock in rds_message_put - ida: Fix crash in ida_free when the bitmap is empty - net: prevent mss overflow in skb_segment() - soundwire: stream: fix programming slave ports for non-continous port maps - gtp: fix a potential NULL pointer dereference - net: busy-poll: use ktime_get_ns() instead of local_clock() - cdc-acm: Add DISABLE_ECHO quirk for GE HealthCare UI Controller - USB: serial: option: add MeiG Smart SRM825L - usb: dwc3: omap: add missing depopulate in probe error path - usb: dwc3: core: Prevent USB core invalid event buffer address access - usb: dwc3: st: fix probed platform device ref count on probe error path - usb: core: sysfs: Unmerge @usb3_hardware_lpm_attr_group in remove_power_attributes() - scsi: aacraid: Fix double-free on probe failure - ipc: remove memcg accounting for sops objects in do_semtimedop() - drm/fb-helper: set x/yres_virtual in drm_fb_helper_check_var https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.322 - net: usb: qmi_wwan: add MeiG Smart SRM825L - usb: dwc3: st: Add of_node_put() before return in probe function - usb: dwc3: st: add missing depopulate in probe error path - drm/amdgpu: Fix uninitialized variable warning in amdgpu_afmt_acr - drm/amdgpu: fix overflowed array index read warning - drm/amdgpu: fix ucode out-of-bounds read warning - drm/amdgpu: fix mc_data out-of-bounds read warning - drm/amdkfd: Reconcile the definition and use of oem_id in struct kfd_topology_device - apparmor: fix possible NULL pointer dereference - usbip: Don't submit special requests twice - smack: tcp: ipv4, fix incorrect labeling - media: uvcvideo: Enforce alignment of frame and interval - block: initialize integrity buffer to zero before writing it to media - virtio_net: Fix napi_skb_cache_put warning - udf: Limit file size to 4TB - ALSA: usb-audio: Sanity checks for each pipe and EP types - ALSA: usb-audio: Fix gpf in snd_usb_pipe_sanity_check - sch/netem: fix use after free in netem_dequeue - ALSA: hda/conexant: Add pincfg quirk to enable top speakers on Sirius devices - ata: libata: Fix memory leak for error path in ata_host_alloc() - mmc: dw_mmc: Fix IDMAC operation with pages bigger than 4K - fuse: use unsigned type for getxattr/listxattr size truncation - clk: qcom: clk-alpha-pll: Fix the pll post div mask - nilfs2: fix missing cleanup on rollforward recovery error - nilfs2: fix state management in error path of log writing function - ALSA: hda: Add input value sanity checks to HDMI channel map controls - smack: unix sockets: fix accept()ed socket label - irqchip/armada-370-xp: Do not allow mapping IRQ 0 and 1 - af_unix: Remove put_pid()/put_cred() in copy_peercred(). - netfilter: nf_conncount: fix wrong variable type - udf: Avoid excessive partition lengths - wifi: brcmsmac: advertise MFP_CAPABLE to enable WPA3 - media: qcom: camss: Add check for v4l2_fwnode_endpoint_parse - pcmcia: Use resource_size function on resource object - can: bcm: Remove proc entry when dev is unregistered. - igb: Fix not clearing TimeSync interrupts for 82580 - platform/x86: dell-smbios: Fix error path in dell_smbios_init() - cx82310_eth: re-enable ethernet mode after router reboot - drivers/net/usb: Remove all strcpy() uses - net: usb: don't write directly to netdev->dev_addr - usbnet: modern method to get random MAC - rfkill: fix spelling mistake contidion to condition - net: bridge: add support for sticky fdb entries - bridge: switchdev: Allow clearing FDB entry offload indication - net: bridge: fdb: convert is_local to bitops - net: bridge: fdb: convert is_static to bitops - net: bridge: fdb: convert is_sticky to bitops - net: bridge: fdb: convert added_by_user to bitops - net: bridge: fdb: convert added_by_external_learn to use bitops - net: bridge: br_fdb_external_learn_add(): always set EXT_LEARN - net: dsa: vsc73xx: fix possible subblocks range of CAPT block - iommu/vt-d: Handle volatile descriptor status read - cgroup: Protect css->cgroup write under css_set_lock - um: line: always fill *error_out in setup_one_line() - devres: Initialize an uninitialized struct member - pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv - hwmon: (adc128d818) Fix underflows seen when writing limit attributes - hwmon: (lm95234) Fix underflows seen when writing limit attributes - hwmon: (nct6775-core) Fix underflows seen when writing limit attributes - hwmon: (w83627ehf) Fix underflows seen when writing limit attributes - wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id() - smp: Add missing destroy_work_on_stack() call in smp_call_on_cpu() - btrfs: replace BUG_ON with ASSERT in walk_down_proc() - btrfs: clean up our handling of refs == 0 in snapshot delete - PCI: Add missing bridge lock to pci_bus_lock() - btrfs: initialize location to fix -Wmaybe-uninitialized in btrfs_lookup_dentry() - HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup - Input: uinput - reject requests with unreasonable number of slots - usbnet: ipheth: race between ipheth_close and error handling - Squashfs: sanity check symbolic link size - of/irq: Prevent device address out-of-bounds read in interrupt map walk - ata: pata_macio: Use WARN instead of BUG - iio: buffer-dmaengine: fix releasing dma channel on error - iio: fix scale application in iio_convert_raw_to_processed_unlocked - nvmem: Fix return type of devm_nvmem_device_get() in kerneldoc - uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind - Drivers: hv: vmbus: Fix rescind handling in uio_hv_generic - VMCI: Fix use-after-free when removing resource in vmci_resource_remove() - clocksource/drivers/imx-tpm: Fix return -ETIME when delta exceeds INT_MAX - clocksource/drivers/imx-tpm: Fix next event not taking effect sometime - uprobes: Use kzalloc to allocate xol area - ring-buffer: Rename ring_buffer_read() to read_buffer_iter_advance() - tracing: Avoid possible softlockup in tracing_iter_reset() - nilfs2: replace snprintf in show functions with sysfs_emit - nilfs2: protect references to superblock parameters exposed in sysfs - netns: add pre_exit method to struct pernet_operations - ila: call nf_unregister_net_hooks() sooner - ACPI: processor: Return an error if acpi_processor_get_info() fails in processor_add() - ACPI: processor: Fix memory leaks in error paths of processor_add() - drm/i915/fence: Mark debug_fence_init_onstack() with __maybe_unused - drm/i915/fence: Mark debug_fence_free() with __maybe_unused - rtmutex: Drop rt_mutex::wait_lock before scheduling - net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket - cx82310_eth: fix error return code in cx82310_bind() - netns: restore ops before calling ops_exit_list - Revert "parisc: Use irq_enter_rcu() to fix warning at kernel/context_tracking.c:367" https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.323 - staging: iio: frequency: ad9833: Get frequency value statically - staging: iio: frequency: ad9833: Load clock using clock framework - staging: iio: frequency: ad9834: Validate frequency parameter value - usbnet: ipheth: fix carrier detection in modes 1 and 4 - net: ethernet: use ip_hdrlen() instead of bit shift - net: phy: vitesse: repair vsc73xx autonegotiation - scripts: kconfig: merge_config: config files: add a trailing newline - arm64: dts: rockchip: override BIOS_DISABLE signal via GPIO hog on RK3399 Puma - net/mlx5: Update the list of the PCI supported devices - net: ftgmac100: Enable TX interrupt to avoid TX timeout - net: dpaa: Pad packets to ETH_ZLEN - soundwire: stream: Revert "soundwire: stream: fix programming slave ports for non-continous port maps" - selftests/vm: remove call to ksft_set_plan() - selftests/kcmp: remove call to ksft_set_plan() - ASoC: allow module autoloading for table db1200_pids - pinctrl: at91: make it work with current gpiolib - microblaze: don't treat zero reserved memory regions as error - net: ftgmac100: Ensure tx descriptor updates are visible - wifi: iwlwifi: mvm: fix iwl_mvm_max_scan_ie_fw_cmd_room() - wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead - ASoC: tda7419: fix module autoloading - spi: bcm63xx: Enable module autoloading - x86/hyperv: Set X86_FEATURE_TSC_KNOWN_FREQ when Hyper-V provides frequency - ocfs2: add bounds checking to ocfs2_xattr_find_entry() - ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry() - gpio: prevent potential speculation leaks in gpio_device_get_desc() - USB: serial: pl2303: add device id for Macrosilicon MS3020 - ACPI: PMIC: Remove unneeded check in tps68470_pmic_opregion_probe() - wifi: ath9k: fix parameter check in ath9k_init_debug() - wifi: ath9k: Remove error checks when creating debugfs entries - netfilter: nf_tables: elements with timeout below CONFIG_HZ never expire - wifi: cfg80211: fix UBSAN noise in cfg80211_wext_siwscan() - wifi: cfg80211: fix two more possible UBSAN-detected off-by-one errors - wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop() - can: bcm: Clear bo->bcm_proc_read after remove_proc_entry(). - Bluetooth: btusb: Fix not handling ZPL/short-transfer - block, bfq: fix possible UAF for bfqq->bic with merge chain - block, bfq: choose the last bfqq from merge chain in bfq_setup_cooperator() - block, bfq: don't break merge chain in bfq_split_bfqq() - spi: ppc4xx: handle irq_of_parse_and_map() errors - spi: ppc4xx: Avoid returning 0 when failed to parse and map IRQ - ARM: versatile: fix OF node leak in CPUs prepare - reset: berlin: fix OF node leak in probe() error path - clocksource/drivers/qcom: Add missing iounmap() on errors in msm_dt_timer_init() - hwmon: (max16065) Fix overflows seen when writing limits - mtd: slram: insert break after errors in parsing the map - hwmon: (ntc_thermistor) fix module autoloading - power: supply: max17042_battery: Fix SOC threshold calc w/ no current sense - fbdev: hpfb: Fix an error handling path in hpfb_dio_probe() - drm/stm: Fix an error handling path in stm_drm_platform_probe() - drm/amd: fix typo - drm/amdgpu: Replace one-element array with flexible-array member - drm/amdgpu: properly handle vbios fake edid sizing - drm/radeon: Replace one-element array with flexible-array member - drm/radeon: properly handle vbios fake edid sizing - drm/rockchip: vop: Allow 4096px width scaling - drm/radeon/evergreen_cs: fix int overflow errors in cs track offsets - jfs: fix out-of-bounds in dbNextAG() and diAlloc() - drm/msm/a5xx: properly clear preemption records on resume - drm/msm/a5xx: fix races in preemption evaluation stage - ipmi: docs: don't advertise deprecated sysfs entries - drm/msm: fix %s null argument error - xen: use correct end address of kernel for conflict checking - xen/swiotlb: simplify range_straddles_page_boundary() - xen/swiotlb: add alignment check for dma buffers - selftests/bpf: Fix error compiling test_lru_map.c - xz: cleanup CRC32 edits from 2018 - kthread: add kthread_work tracepoints - kthread: fix task state in kthread worker if being frozen - jbd2: introduce/export functions jbd2_journal_submit|finish_inode_data_buffers() - ext4: clear EXT4_GROUP_INFO_WAS_TRIMMED_BIT even mount with discard - smackfs: Use rcu_assign_pointer() to ensure safe assignment in smk_set_cipso - ext4: avoid negative min_clusters in find_group_orlov() - ext4: return error on ext4_find_inline_entry - ext4: avoid OOB when system.data xattr changes underneath the filesystem - nilfs2: fix potential null-ptr-deref in nilfs_btree_insert() - nilfs2: determine empty node blocks as corrupted - nilfs2: fix potential oob read in nilfs_btree_check_delete() - perf sched timehist: Fix missing free of session in perf_sched__timehist() - perf sched timehist: Fixed timestamp error when unable to confirm event sched_in time - perf time-utils: Fix 32-bit nsec parsing - clk: rockchip: Set parent rate for DCLK_VOP clock on RK3228 - drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error - drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error - PCI: xilinx-nwl: Fix register misspelling - RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency - pinctrl: single: fix missing error code in pcs_probe() - clk: ti: dra7-atl: Fix leak of of_nodes - pinctrl: mvebu: Fix devinit_dove_pinctrl_probe function - RDMA/cxgb4: Added NULL check for lookup_atid - ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir() - nfsd: call cache_put if xdr_reserve_space returns NULL - f2fs: enhance to update i_mode and acl atomically in f2fs_setattr() - f2fs: fix typo - f2fs: fix to update i_ctime in __f2fs_setxattr() - f2fs: remove unneeded check condition in __f2fs_setxattr() - f2fs: reduce expensive checkpoint trigger frequency - coresight: tmc: sg: Do not leak sg_table - netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put() - net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition - tcp: introduce tcp_skb_timestamp_us() helper - tcp: check skb is non-NULL in tcp_rto_delta_us() - net: qrtr: Update packets cloning when broadcasting - netfilter: ctnetlink: compile ctnetlink_label_size with CONFIG_NF_CONNTRACK_EVENTS - crypto: aead,cipher - zeroize key buffer after use - Remove *.orig pattern from .gitignore - soc: versatile: integrator: fix OF node leak in probe() error path - USB: appledisplay: close race between probe and completion handler - USB: misc: cypress_cy7c63: check for short transfer - firmware_loader: Block path traversal - tty: rp2: Fix reset with non forgiving PCIe host bridges - drbd: Fix atomicity violation in drbd_uuid_set_bm() - drbd: Add NULL check for net_conf to prevent dereference in state validation - ACPI: sysfs: validate return type of _STR method - f2fs: prevent possible int overflow in dir_block_index() - f2fs: avoid potential int overflow in sanity_check_area_boundary() - vfs: fix race between evice_inodes() and find_inode()&iput() - fs: Fix file_set_fowner LSM hook inconsistencies - nfs: fix memory leak in error path of nfs4_do_reclaim - PCI: xilinx-nwl: Use irq_data_get_irq_chip_data() - PCI: xilinx-nwl: Fix off-by-one in INTx IRQ handler - soc: versatile: realview: fix memory leak during device remove - soc: versatile: realview: fix soc_dev leak during device remove - usb: yurex: Replace snprintf() with the safer scnprintf() variant - USB: misc: yurex: fix race between read and write - pps: remove usage of the deprecated ida_simple_xx() API - pps: add an error check in parport_attach - i2c: aspeed: Update the stop sw state when the bus recovery occurs - i2c: isch: Add missed 'else' - usb: yurex: Fix inconsistent locking bug in yurex_read() - mailbox: rockchip: fix a typo in module autoloading - mailbox: bcm2835: Fix timeout during suspend mode - ceph: remove the incorrect Fw reference check when dirtying pages - netfilter: uapi: NFTA_FLOWTABLE_HOOK is NLA_NESTED - netfilter: nf_tables: prevent nf_skb_duplicated corruption - r8152: Factor out OOB link list waits - net: ethernet: lantiq_etop: fix memory disclosure - net: avoid potential underflow in qdisc_pkt_len_init() with UFO - net: add more sanity checks to qdisc_pkt_len_init() - ipv4: ip_gre: Fix drops of small packets in ipgre_xmit - sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start - ALSA: hda/generic: Unconditionally prefer preferred_dacs pairs - ALSA: hda/conexant: Fix conflicting quirk for System76 Pangolin - f2fs: Require FMODE_WRITE for atomic write ioctls - wifi: ath9k: fix possible integer overflow in ath9k_get_et_stats() - wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit - net: hisilicon: hip04: fix OF node leak in probe() - net: hisilicon: hns_dsaf_mac: fix OF node leak in hns_mac_get_info() - net: hisilicon: hns_mdio: fix OF node leak in probe() - ACPICA: Fix memory leak if acpi_ps_get_next_namepath() fails - ACPICA: Fix memory leak if acpi_ps_get_next_field() fails - ACPI: EC: Do not release locks during operation region accesses - ACPICA: check null return of ACPI_ALLOCATE_ZEROED() in acpi_db_convert_to_package() - tipc: guard against string buffer overrun - net: mvpp2: Increase size of queue_name buffer - ipv4: Check !in_dev earlier for ioctl(SIOCSIFADDR). - ipv4: Mask upper DSCP bits and ECN bits in NETLINK_FIB_LOOKUP family - tcp: avoid reusing FIN_WAIT2 when trying to find port in connect() process - ACPICA: iasl: handle empty connection_node - wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext() - signal: Replace BUG_ON()s - ALSA: asihpi: Fix potential OOB array access - ALSA: hdsp: Break infinite MIDI input flush loop - fbdev: pxafb: Fix possible use after free in pxafb_task() - power: reset: brcmstb: Do not go into infinite loop if reset fails - ata: sata_sil: Rename sil_blacklist to sil_quirks - jfs: UBSAN: shift-out-of-bounds in dbFindBits - jfs: Fix uaf in dbFreeBits - jfs: check if leafidx greater than num leaves per dmap tree - jfs: Fix uninit-value access of new_ea in ea_buffer - drm/amd/display: Check stream before comparing them - drm/amd/display: Fix index out of bounds in degamma hardware format translation - drm/printer: Allow NULL data in devcoredump printer - scsi: aacraid: Rearrange order of struct aac_srb_unit - drm/radeon/r100: Handle unknown family in r100_cp_init_microcode() - of/irq: Refer to actual buffer size in of_irq_parse_one() - ext4: ext4_search_dir should return a proper error - ext4: fix i_data_sem unlock order in ext4_ind_migrate() - spi: s3c64xx: fix timeout counters in flush_fifo - selftests: breakpoints: use remaining time to check if suspend succeed - selftests: vDSO: fix vDSO symbols lookup for powerpc64 - i2c: xiic: Wait for TX empty to avoid missed TX NAKs - spi: bcm63xx: Fix module autoloading - perf/core: Fix small negative period being ignored - parisc: Fix itlb miss handler for 64-bit programs - ALSA: core: add isascii() check to card ID generator - ext4: no need to continue when the number of entries is 1 - ext4: propagate errors from ext4_find_extent() in ext4_insert_range() - ext4: fix incorrect tid assumption in __jbd2_log_wait_for_space() - ext4: aovid use-after-free in ext4_ext_insert_extent() - ext4: fix double brelse() the buffer of the extents path - ext4: fix incorrect tid assumption in ext4_wait_for_tail_page_commit() - parisc: Fix 64-bit userspace syscall path - of/irq: Support #msi-cells=<0> in of_msi_get_domain - jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error - ocfs2: fix the la space leak when unmounting an ocfs2 volume - ocfs2: fix uninit-value in ocfs2_get_block() - ocfs2: reserve space for inline xattr before attaching reflink tree - ocfs2: cancel dqi_sync_work before freeing oinfo - ocfs2: remove unreasonable unlock in ocfs2_read_blocks - ocfs2: fix null-ptr-deref when journal load failed. - ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate - riscv: define ILLEGAL_POINTER_VALUE for 64bit - aoe: fix the potential use-after-free problem in more places - clk: rockchip: fix error for unknown clocks - media: uapi/linux/cec.h: cec_msg_set_reply_to: zero flags - media: venus: fix use after free bug in venus_remove due to race condition - iio: magnetometer: ak8975: Fix reading for ak099xx sensors - tomoyo: fallback to realpath if symlink's pathname does not exist - Input: adp5589-keys - fix adp5589_gpio_get_value() - btrfs: wait for fixup workers before stopping cleaner kthread during umount - gpio: davinci: fix lazy disable - ext4: avoid ext4_error()'s caused by ENOMEM in the truncate path - ext4: fix slab-use-after-free in ext4_split_extent_at() - ext4: update orig_path in ext4_find_extent() - arm64: Add Cortex-715 CPU part definition - arm64: cputype: Add Neoverse-N3 definitions - arm64: errata: Expand speculative SSBS workaround once more - uprobes: fix kernel info leak via "[uprobes]" vma - nfsd: use ktime_get_seconds() for timestamps - nfsd: fix delegation_blocked() to block correctly for at least 30 seconds - rtc: at91sam9: drop platform_data support - rtc: at91sam9: fix OF node leak in probe() error path - ACPI: battery: Simplify battery hook locking - ACPI: battery: Fix possible crash when unregistering a battery hook - ext4: fix inode tree inconsistency caused by ENOMEM - net: ethernet: cortina: Drop TSO support - tracing: Remove precision vsnprintf() check from print event - drm: Move drm_mode_setcrtc() local re-init to failure path - drm/crtc: fix uninitialized variable use even harder - virtio_console: fix misc probe bugs - Input: synaptics-rmi4 - fix UAF of IRQ domain on driver removal - bpf: Check percpu map value size first - s390/facility: Disable compile time optimization for decompressor code - s390/mm: Add cond_resched() to cmm_alloc/free_pages() - ext4: nested locking for xattr inode - s390/cpum_sf: Remove WARN_ON_ONCE statements - ktest.pl: Avoid false positives with grub2 skip regex - clk: bcm: bcm53573: fix OF node leak in init - i2c: i801: Use a different adapter-name for IDF adapters - PCI: Mark Creative Labs EMU20k2 INTx masking as broken - media: videobuf2-core: clear memory related fields in __vb2_plane_dmabuf_put() - usb: chipidea: udc: enable suspend interrupt after usb reset - tools/iio: Add memory allocation failure check for trigger_name - driver core: bus: Return -EIO instead of 0 when show/store invalid bus attribute - fbdev: sisfb: Fix strbuf array overflow - NFS: Remove print_overflow_msg() - SUNRPC: Fix integer overflow in decode_rc_list() - tcp: fix tcp_enter_recovery() to zero retrans_stamp when it's safe - netfilter: br_netfilter: fix panic with metadata_dst skb - Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change - gpio: aspeed: Add the flush write to ensure the write complete. - clk: Add (devm_)clk_get_optional() functions - clk: generalize devm_clk_get() a bit - clk: Provide new devm_clk helpers for prepared and enabled clocks - gpio: aspeed: Use devm_clk api to manage clock source - igb: Do not bring the device up after non-fatal error - net: ibm: emac: mal: fix wrong goto - ppp: fix ppp_async_encode() illegal access - net: ipv6: ensure we call ipv6_mc_down() at most once - CDC-NCM: avoid overflow in sanity checking - HID: plantronics: Workaround for an unexcepted opposite volume key - Revert "usb: yurex: Replace snprintf() with the safer scnprintf() variant" - usb: xhci: Fix problem with xhci resume from suspend - usb: storage: ignore bogus device raised by JieLi BR21 USB sound chip - net: Fix an unsafe loop on the list - posix-clock: Fix missing timespec64 check in pc_clock_settime() - arm64: probes: Remove broken LDR (literal) uprobe support - arm64: probes: Fix simulate_ldr*_literal() - PCI: Add function 0 DMA alias quirk for Glenfly Arise chip - fat: fix uninitialized variable - KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin() - net: dsa: mv88e6xxx: Fix out-of-bound access - s390/sclp_vt220: Convert newlines to CRLF instead of LFCR - KVM: s390: Change virtual to physical address access in diag 0x258 handler - x86/cpufeatures: Define X86_FEATURE_AMD_IBPB_RET - drm/vmwgfx: Handle surface check failure correctly - iio: dac: stm32-dac-core: add missing select REGMAP_MMIO in Kconfig - iio: adc: ti-ads8688: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig - iio: hid-sensors: Fix an error handling path in _hid_sensor_set_report_latency() - iio: light: opt3001: add missing full-scale range value - Bluetooth: Remove debugfs directory on module init failure - Bluetooth: btusb: Fix regression with fake CSR controllers 0a12:0001 - xhci: Fix incorrect stream context type macro - USB: serial: option: add support for Quectel EG916Q-GL - USB: serial: option: add Telit FN920C04 MBIM compositions - parport: Proper fix for array out-of-bounds access - x86/apic: Always explicitly disarm TSC-deadline timer - nilfs2: propagate directory read errors from nilfs_find_entry() - clk: Fix pointer casting to prevent oops in devm_clk_release() - clk: Fix slab-out-of-bounds error in devm_clk_release() - RDMA/bnxt_re: Fix incorrect AVID type in WQE structure - RDMA/cxgb4: Fix RDMA_CM_EVENT_UNREACHABLE error for iWARP - RDMA/bnxt_re: Return more meaningful error - drm/msm/dsi: fix 32-bit signed integer extension in pclk_rate calculation - macsec: don't increment counters for an unrelated SA - net: ethernet: aeroflex: fix potential memory leak in greth_start_xmit_gbit() - net: systemport: fix potential memory leak in bcm_sysport_xmit() - usb: typec: altmode should keep reference to parent - Bluetooth: bnep: fix wild-memory-access in proto_unregister - arm64:uprobe fix the uprobe SWBP_INSN in big-endian - arm64: probes: Fix uprobes for big-endian kernels - KVM: s390: gaccess: Refactor gpa and length calculation - KVM: s390: gaccess: Refactor access address range check - KVM: s390: gaccess: Cleanup access to guest pages - KVM: s390: gaccess: Check if guest address is in memslot - udf: fix uninit-value use in udf_get_fileshortad - jfs: Fix sanity check in dbMount - net/sun3_82586: fix potential memory leak in sun3_82586_send_packet() - be2net: fix potential memory leak in be_xmit() - net: usb: usbnet: fix name regression - posix-clock: posix-clock: Fix unbalanced locking in pc_clock_settime() - ALSA: hda/realtek: Update default depop procedure - drm/amd: Guard against bad data for ATIF ACPI method - ACPI: button: Add DMI quirk for Samsung Galaxy Book2 to fix initial lid detection issue - nilfs2: fix kernel bug due to missing clearing of buffer delay flag - hv_netvsc: Fix VF namespace also in synthetic NIC NETDEV_REGISTER event - selinux: improve error checking in sel_write_load() - arm64/uprobes: change the uprobe_opcode_t typedef to fix the sparse warning - xfrm: validate new SA's prefixlen using SA family when sel.family is unset - usb: dwc3: remove generic PHY calibrate() calls - usb: dwc3: Add splitdisable quirk for Hisilicon Kirin Soc - usb: dwc3: core: Stop processing of pending events if controller is halted - cgroup: Fix potential overflow issue when checking max_depth - wifi: mac80211: skip non-uploaded keys in ieee80211_iter_keys - gtp: simplify error handling code in 'gtp_encap_enable()' - gtp: allow -1 to be specified as file description from userspace - net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT - bpf: Fix out-of-bounds write in trie_get_next_key() - net: support ip generic csum processing in skb_csum_hwoffload_help - net: skip offload for NETIF_F_IPV6_CSUM if ipv6 header contains extension - netfilter: nft_payload: sanitize offset and length before calling skb_checksum() - firmware: arm_sdei: Fix the input parameter of cpuhp_remove_state() - net: amd: mvme147: Fix probe banner message - misc: sgi-gru: Don't disable preemption in GRU driver - usbip: tools: Fix detach_port() invalid port error path - usb: phy: Fix API devm_usb_put_phy() can not release the phy - xhci: Fix Link TRB DMA in command ring stopped completion event - Revert "driver core: Fix uevent_show() vs driver detach race" - wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower - wifi: ath10k: Fix memory leak in management tx - wifi: iwlegacy: Clear stale interrupts before resuming device - nilfs2: fix potential deadlock with newly created symlinks - ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow - nilfs2: fix kernel bug due to missing clearing of checked flag - mm: shmem: fix data-race in shmem_getattr() - vt: prevent kernel-infoleak in con_font_get() https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.324 - arm64: dts: rockchip: Fix rt5651 compatible value on rk3399-sapphire-excavator - ARM: dts: rockchip: fix rk3036 acodec node - ARM: dts: rockchip: drop grf reference from rk3036 hdmi - ARM: dts: rockchip: Fix the realtek audio codec on rk3036-kylin - HID: core: zero-initialize the report buffer - security/keys: fix slab-out-of-bounds in key_task_permission - sctp: properly validate chunk size in sctp_sf_ootb() - can: c_can: fix {rx,tx}_errors statistics - net: hns3: fix kernel crash when uninstalling driver - media: stb0899_algo: initialize cfr before using it - media: dvbdev: prevent the risk of out of memory access - media: dvb_frontend: don't play tricks with underflow values - media: adv7604: prevent underflow condition when reporting colorspace - ALSA: firewire-lib: fix return value on fail in amdtp_tscm_init() - media: s5p-jpeg: prevent buffer overflows - media: cx24116: prevent overflows on SNR calculus - media: v4l2-tpg: prevent the risk of a division by zero - drm/amdgpu: add missing size check in amdgpu_debugfs_gprwave_read() - drm/amdgpu: prevent NULL pointer dereference if ATIF is not supported - dm cache: correct the number of origin blocks to match the target length - dm cache: fix out-of-bounds access to the dirty bitset when resizing - dm cache: optimize dirty bit checking with find_next_bit when resizing - dm cache: fix potential out-of-bounds access on the first resume - dm-unstriped: cast an operand to sector_t to prevent potential uint32_t overflow - nfs: Fix KMSAN warning in decode_getfattr_attrs() - btrfs: reinitialize delayed ref list after deleting it from the list - bonding (gcc13): synchronize bond_{a,t}lb_xmit() types - net: bridge: xmit: make sure we have at least eth header len bytes - media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format - fs/proc: fix compile warning about variable 'vmcore_mmap_ops' - usb: musb: sunxi: Fix accessing an released usb phy - USB: serial: io_edgeport: fix use after free in debug printk - USB: serial: qcserial: add support for Sierra Wireless EM86xx - USB: serial: option: add Fibocom FG132 0x0112 composition - USB: serial: option: add Quectel RG650V - irqchip/gic-v3: Force propagation of the active state with a read-back - ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove() - ALSA: pcm: Return 0 when size < start_threshold in capture - ALSA: usb-audio: Add custom mixer status quirks for RME CC devices - ALSA: usb-audio: Support jack detection on Dell dock - ALSA: usb-audio: Add quirks for Dell WD19 dock - hv_sock: Initializing vsk->trans to NULL to prevent a dangling pointer - vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans - ALSA: usb-audio: Add endianness annotations - 9p: Avoid creating multiple slab caches with the same name - HID: multitouch: Add quirk for HONOR MagicBook Art 14 touchpad - bpf: use kvzmalloc to allocate BPF verifier environment - sound: Make CONFIG_SND depend on INDIRECT_IOMEM instead of UML - powerpc/powernv: Free name on error in opal_event_init() - fs: Fix uninitialized value issue in from_kuid and from_kgid - net: usb: qmi_wwan: add Fibocom FG132 0x0112 composition - 9p: fix slab cache name creation for real https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.325 - netlink: terminate outstanding dump on socket close - ocfs2: uncache inode which has failed entering the group - nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint - ocfs2: fix UBSAN warning in ocfs2_verify_volume() - nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint - Revert "mmc: dw_mmc: Fix IDMAC operation with pages bigger than 4K" - media: dvbdev: fix the logic when DVB_DYNAMIC_MINORS is not set - kbuild: Use uname for LINUX_COMPILE_HOST detection - mm: revert "mm: shmem: fix data-race in shmem_getattr()" - ASoC: Intel: bytcr_rt5640: Add DMI quirk for Vexia Edu Atla 10 tablet - mac80211: fix user-power when emulating chanctx - selftests/watchdog-test: Fix system accidentally reset after watchdog-test - x86/amd_nb: Fix compile-testing without CONFIG_AMD_NB - net: usb: qmi_wwan: add Quectel RG650V - proc/softirqs: replace seq_printf with seq_put_decimal_ull_width - nvme: fix metadata handling in nvme-passthrough - initramfs: avoid filename buffer overrun - m68k: mvme147: Fix SCSI controller IRQ numbers - m68k: mvme16x: Add and use "mvme16x.h" - m68k: mvme147: Reinstate early console - acpi/arm64: Adjust error handling procedure in gtdt_parse_timer_block() - s390/syscalls: Avoid creation of arch/arch/ directory - hfsplus: don't query the device logical block size multiple times - EDAC/fsl_ddr: Fix bad bit shift operations - crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY - crypto: cavium - Fix the if condition to exit loop after timeout - crypto: bcm - add error check in the ahash_hmac_init function - crypto: cavium - Fix an error handling path in cpt_ucode_load_fw() - time: Fix references to _msecs_to_jiffies() handling of values - soc: qcom: geni-se: fix array underflow in geni_se_clk_tbl_get() - mmc: mmc_spi: drop buggy snprintf() - ARM: dts: cubieboard4: Fix DCDC5 regulator constraints - regmap: irq: Set lockdep class for hierarchical IRQ domains - firmware: arm_scpi: Check the DVFS OPP count returned by the firmware - drm/mm: Mark drm_mm_interval_tree*() functions with __maybe_unused - wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service() - drm/omap: Fix locking in omap_gem_new_dmabuf() - bpf: Fix the xdp_adjust_tail sample prog issue - wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_config_scan() - drm/etnaviv: consolidate hardware fence handling in etnaviv_gpu - drm/etnaviv: dump: fix sparse warnings - drm/etnaviv: fix power register offset on GC300 - drm/etnaviv: hold GPU lock across perfmon sampling - net: rfkill: gpio: Add check for clk_enable() - ALSA: us122l: Use snd_card_free_when_closed() at disconnection - ALSA: caiaq: Use snd_card_free_when_closed() at disconnection - ALSA: 6fire: Release resources at card release - netpoll: Use rcu_access_pointer() in netpoll_poll_lock - trace/trace_event_perf: remove duplicate samples on the first tracepoint event - powerpc/vdso: Flag VDSO64 entry points as functions - mfd: da9052-spi: Change read-mask to write-mask - cpufreq: loongson2: Unregister platform_driver on failure - mtd: rawnand: atmel: Fix possible memory leak - RDMA/bnxt_re: Check cqe flags to know imm_data vs inv_irkey - mfd: rt5033: Fix missing regmap_del_irq_chip() - scsi: bfa: Fix use-after-free in bfad_im_module_exit() - scsi: fusion: Remove unused variable 'rc' - scsi: qedi: Fix a possible memory leak in qedi_alloc_and_init_sb() - ocfs2: fix uninitialized value in ocfs2_file_read_iter() - powerpc/sstep: make emulate_vsx_load and emulate_vsx_store static - fbdev/sh7760fb: Alloc DMA memory from hardware device - fbdev: sh7760fb: Fix a possible memory leak in sh7760fb_alloc_mem() - dt-bindings: clock: adi,axi-clkgen: convert old binding to yaml format - dt-bindings: clock: axi-clkgen: include AXI clk - clk: axi-clkgen: use devm_platform_ioremap_resource() short-hand - clk: clk-axi-clkgen: make sure to enable the AXI bus clock - perf probe: Correct demangled symbols in C++ program - PCI: cpqphp: Use PCI_POSSIBLE_ERROR() to check config reads - PCI: cpqphp: Fix PCIBIOS_* return value confusion - m68k: mcfgpio: Fix incorrect register offset for CONFIG_M5441x - m68k: coldfire/device.c: only build FEC when HW macros are defined - rpmsg: glink: Add TX_DATA_CONT command while sending - rpmsg: glink: Send READ_NOTIFY command in FIFO full case - rpmsg: glink: Fix GLINK command prefix - rpmsg: glink: use only lower 16-bits of param2 for CMD_OPEN name length - NFSD: Prevent NULL dereference in nfsd4_process_cb_update() - NFSD: Cap the number of bytes copied by nfs4_reset_recoverydir() - vfio/pci: Properly hide first-in-list PCIe extended capability - power: supply: core: Remove might_sleep() from power_supply_put() - net: usb: lan78xx: Fix memory leak on device unplug by freeing PHY device - tg3: Set coherent DMA mask bits to 31 for BCM57766 chipsets - net: usb: lan78xx: Fix refcounting and autosuspend on invalid WoL configuration - marvell: pxa168_eth: fix call balance of pep->clk handling routines - net: stmmac: dwmac-socfpga: Set RX watchdog interrupt as broken - usb: using mutex lock and supporting O_NONBLOCK flag in iowarrior_read() - USB: chaoskey: fail open after removal - USB: chaoskey: Fix possible deadlock chaoskey_list_lock - misc: apds990x: Fix missing pm_runtime_disable() - apparmor: fix 'Do simple duplicate message elimination' - usb: ehci-spear: fix call balance of sehci clk handling routines - ext4: supress data-race warnings in ext4_free_inodes_{count,set}() - ext4: fix FS_IOC_GETFSMAP handling - jfs: xattr: check invalid xattr size more strictly - ASoC: codecs: Fix atomicity violation in snd_soc_component_get_drvdata() - PCI: Fix use-after-free of slot->bus on hot remove - tty: ldsic: fix tty_ldisc_autoload sysctl's proc_handler - Bluetooth: Fix type of len in rfcomm_sock_getsockopt{,_old}() - ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices - Revert "usb: gadget: composite: fix OS descriptors w_value logic" - serial: sh-sci: Clean sci_ports[0] after at earlycon exit - Revert "serial: sh-sci: Clean sci_ports[0] after at earlycon exit" - netfilter: ipset: add missing range check in bitmap_ip_uadt - spi: Fix acpi deferred irq probe - ubi: wl: Put source PEB into correct list if trying locking LEB failed - um: ubd: Do not use drvdata in release - um: net: Do not use drvdata in release - serial: 8250: omap: Move pm_runtime_get_sync - um: vector: Do not use drvdata in release - sh: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK - arm64: tls: Fix context-switching of tpidrro_el0 when kpti is enabled - block: fix ordering between checking BLK_MQ_S_STOPPED request adding - HID: wacom: Interpret tilt data from Intuos Pro BT as signed values - media: wl128x: Fix atomicity violation in fmc_send_cmd() - usb: dwc3: gadget: Fix checking for number of TRBs left - lib: string_helpers: silence snprintf() output truncation warning - NFSD: Prevent a potential integer overflow - rpmsg: glink: Propagate TX failures in intentless mode as well - um: Fix the return value of elf_core_copy_task_fpregs - NFSv4.0: Fix a use-after-free problem in the asynchronous open() - rtc: check if __rtc_read_time was successful in rtc_timer_do_work() - ubifs: Correct the total block count by deducting journal reservation - ubi: fastmap: Fix duplicate slab cache names while attaching - jffs2: fix use of uninitialized variable - block: return unsigned int from bdev_io_min - 9p/xen: fix init sequence - 9p/xen: fix release of IRQ - modpost: remove incorrect code in do_eisa_entry() - sh: intc: Fix use-after-free bug in register_intc_controller()