• d2b4146 Linux 6.1.40-xanmod1
• f90370a Merge tag 'v6.1.40' into 6.1
• 7538911 Linux 6.1.40
• 9879d6e net/ncsi: change from ndo_set_mac_address to dev_set_mac_address
• e2c3356 net/ncsi: make one oem_gma function for all mfr id
• e4a0e09 drm/atomic: Fix potential use-after-free in nonblocking commits
• d34a347 net/sched: sch_qfq: reintroduce lmax bound check for MTU
• ff06cd4 swiotlb: mark swiotlb_memblock_alloc() as __init
• d64b70d Revert "drm/amd: Disable PSR-SU on Parade 0803 TCON"
• fbfb6b7 MIPS: kvm: Fix build error with KVM_MIPS_DEBUG_COP0_COUNTERS enabled
• fec55ec scsi: qla2xxx: Fix end of loop test
• f459d58 scsi: qla2xxx: Remove unused nvme_ls_waitq wait queue
• b06d1b5 scsi: qla2xxx: Pointer may be dereferenced
• b88b124 scsi: qla2xxx: Correct the index of array
• e466930 scsi: qla2xxx: Check valid rport returned by fc_bsg_to_rport()
• ce2cdbe scsi: qla2xxx: Fix potential NULL pointer dereference
• 2dddbf8 scsi: qla2xxx: Fix buffer overrun
• 477bc74 scsi: qla2xxx: Avoid fcport pointer dereference
• 2b3bdef scsi: qla2xxx: Array index may go out of bound
• d994ac7 scsi: qla2xxx: Fix mem access after free
• 90770da scsi: qla2xxx: Wait for io return on terminate rport
• 1802e5d scsi: qla2xxx: Fix hang in task management
• 35985b0 scsi: qla2xxx: Fix task management cmd fail due to unavailable resource
• 843665c scsi: qla2xxx: Fix task management cmd failure
• ff92567 scsi: qla2xxx: Multi-que support for TMF
• 95e3412 tracing/user_events: Fix struct arg size match check
• a95c1fe tracing/probes: Fix to update dynamic data counter if fetcharg uses it
• 837f92d tracing/probes: Fix not to count error code to total length
• 2f41d35 selftests: mptcp: pm_nl_ctl: fix 32-bit support
• ee35229 selftests: mptcp: depend on SYN_COOKIES
• 08daab1 selftests: mptcp: userspace_pm: report errors with 'remove' tests
• 4098a43 selftests: mptcp: userspace_pm: use correct server port
• c118baa selftests: mptcp: sockopt: return error if wrong mark
• 6714867 selftests: mptcp: connect: fail if nft supposed to work
• 938d5b7 tracing: Fix null pointer dereference in tracing_err_log_open()
• fbcd0c2 fprobe: Ensure running fprobe_exit_handler() finished before calling rethook_free()
• ce3ec57 fprobe: Release rethook after the ftrace_ops is unregistered
• 2e9a46e pwm: meson: fix handling of period/duty if greater than UINT_MAX
• ba1ede1 pwm: meson: modify and simplify calculation in meson_pwm_get_state
• 9a2c57f PM: QoS: Restore support for default value on frequency QoS
• 15ec83d perf/x86: Fix lockdep warning in for_each_sibling_event() on SPR
• 22fc9fd xtensa: ISS: fix call to split_if_spec
• 6a05de6 cifs: if deferred close is disabled then close files immediately
• bd8cd38 drm/amd/pm: conditionally disable pcie lane/speed switching for SMU13
• 11dc77a drm/amd/pm: share the code around SMU13 pcie parameters update
• 99fe81d ftrace: Fix possible warning on checking all pages used in ftrace_process_locs()
• 8b0b63f ring-buffer: Fix deadloop issue on reading trace_pipe
• 90947eb net: ena: fix shift-out-of-bounds in exponential backoff
• b1a726a regmap-irq: Fix out-of-bounds access when allocating config buffers
• aeb62be perf: RISC-V: Remove PERF_HES_STOPPED flag checking in riscv_pmu_start()
• e2c7a05 samples: ftrace: Save required argument registers in sample trampolines
• 9d6a260 nvme: don't reject probe due to duplicate IDs for single-ported PCIe devices
• be970e2 tracing: Fix memory leak of iter->temp when reading trace_pipe
• 5fd32eb tracing/histograms: Add histograms to hist_vars if they have referenced variables
• 0a1dc63 dm: verity-loadpin: Add NULL pointer check for 'bdev' parameter
• 08aaeda s390/decompressor: fix misaligned symbol build error
• 2ebf4dd bus: ixp4xx: fix IXP4XX_EXP_T1_MASK
• 599c0eb Revert "8250: add support for ASIX devices with a FIFO bug"
• 801daff soundwire: qcom: fix storing port config out-of-bounds
• 76ab057 opp: Fix use-after-free in lazy_opp_tables after probe deferral
• be06ffa meson saradc: fix clock divider mask length
• 610ddd7 xhci: Show ZHAOXIN xHCI root hub speed correctly
• 892ef75 xhci: Fix TRB prefetch issue of ZHAOXIN hosts
• 8e273a2 xhci: Fix resume issue of some ZHAOXIN hosts
• 8293614 ceph: don't let check_caps skip sending responses for revoke msgs
• 0471d90 ceph: fix blindly expanding the readahead windows
• d545ff9 ceph: add a dedicated private data for netfs rreq
• 183c0ae libceph: harden msgr2.1 frame segment length checks
• cb8a31a firmware: stratix10-svc: Fix a potential resource leak in svc_create_memory_pool()
• 5553d58 tty: serial: imx: fix rs485 rx after tx
• f0bf102 tty: serial: samsung_tty: Fix a memory leak in s3c24xx_serial_getclk() when iterating clk
• 34f5b82 tty: serial: samsung_tty: Fix a memory leak in s3c24xx_serial_getclk() in case of error
• 9fd9e1d serial: atmel: don't enable IRQs prematurely
• f037f60 drm/ttm: Don't leak a resource on swapout move error
• fe26d0f drm/amdgpu: avoid restore process run into dead loop.
• 8404d0e drm/amd/display: Add monitor specific edid quirk
• 7ad4046 drm/amd/display: Correct DMUB_FW_VERSION macro
• ad85fc9 drm/amd/display: add a NULL pointer check
• 3092bee drm/amd: Disable PSR-SU on Parade 0803 TCON
• 91e69e6 drm/amdgpu: fix clearing mappings for BOs that are always valid in VM
• 3546f76 drm/amd/display: disable seamless boot if force_odm_combine is enabled
• a2ef316 drm/amd/display: Remove Phantom Pipe Check When Calculating K1 and K2
• c4629c7 drm/amd/display: edp do not add non-edid timings
• 31fb25e drm/amd/display: fix seamless odm transitions
• c41963e drm/rockchip: vop: Leave vblank enabled in self-refresh
• db0a9a2 drm/atomic: Allow vblank-enabled + self-refresh "disable"
• 6436ca0 scsi: lpfc: Fix double free in lpfc_cmpl_els_logo_acc() caused by lpfc_nlp_not_used()
• 7adcc32 fs: dlm: fix mismatch of plock results from userspace
• adeaef5 fs: dlm: make F_SETLK use unkillable wait_event
• 2a37d73 fs: dlm: interrupt posix locks only when process is killed
• a1b6adf fs: dlm: fix cleanup pending ops when interrupted
• 3346ffd fs: dlm: return positive pid value for F_GETLK
• be19cb6 dm init: add dm-mod.waitfor to wait for asynchronously probed block devices
• e301289 md/raid0: add discard support for the 'original' layout
• 31df8b9 mfd: pm8008: Fix module autoloading
• 7ef181f misc: pci_endpoint_test: Re-init completion for every test
• c2dba13 misc: pci_endpoint_test: Free IRQs before removing the device
• 0813bb2 PCI: rockchip: Set address alignment for endpoint mode
• 5b15ebe PCI: rockchip: Use u32 variable to access 32-bit registers
• 1a48294 PCI: rockchip: Fix legacy IRQ generation for RK3399 PCIe endpoint core
• dfd20eb PCI: rockchip: Add poll and timeout to wait for PHY PLLs to be locked
• 05f55f7 PCI: rockchip: Write PCI Device ID to correct register
• b2e2ffb PCI: rockchip: Assert PCI Configuration Enable bit after probe
• 07d997e PCI: epf-test: Fix DMA transfer completion detection
• bcd276f PCI: epf-test: Fix DMA transfer completion initialization
• cf0d7b7 PCI: qcom: Disable write access to read only registers for IP v2.3.3
• c459365 PCI: Add function 1 DMA alias quirk for Marvell 88SE9235
• 465c195 PCI: Release resource invalidated by coalescing
• 3367d4b PCI/PM: Avoid putting EloPOS E2/S2/H2 PCIe Ports in D3cold
• 25cb64e s390/zcrypt: do not retry administrative requests
• 026e46d scsi: mpi3mr: Propagate sense data for admin queue SCSI I/O
• b933df9 dm integrity: reduce vmalloc space footprint on 32-bit architectures
• ef70935 hwrng: imx-rngc - fix the timeout for init and self check
• c7feb54 jfs: jfs_dmap: Validate db_l2nbperpage while mounting
• 9e54fd1 ext2/dax: Fix ext2_setsize when len is page aligned
• 33f8dff soc: qcom: mdt_loader: Fix unconditional call to scm_pas_mem_setup
• 5dc507d fs: dlm: revert check required context while close
• 95d49f7 ext4: only update i_reserved_data_blocks on successful block allocation
• deef86f ext4: turn quotas off if mount failed after enabling quotas
• 029c6b1 ext4: fix to check return value of freeze_bdev() in ext4_shutdown()
• e861961 ext4: fix wrong unit use in ext4_mb_new_blocks
• 2038d35 ext4: get block from bh in ext4_free_blocks for fast commit replay
• 782166a ext4: fix wrong unit use in ext4_mb_clear_bb
• 0a90e70 ext4: Fix reusing stale buffer heads from last failed mounting
• bd9cf2a MIPS: KVM: Fix NULL pointer dereference
• d56b7a4 MIPS: Loongson: Fix cpu_probe_loongson() again
• 58d1c81 powerpc/64s: Fix native_hpte_remove() to be irq-safe
• 484b8fb powerpc/security: Fix Speculation_Store_Bypass reporting on Power10
• 23ab732 misc: fastrpc: Create fastrpc scalar with correct buffer count
• 16eceb3 powerpc: Fail build if using recordmcount with binutils v2.37
• 5aea2ac tracing/user_events: Fix incorrect return value for writing operation when events are disabled
• a433634 kasan: add kasan_tag_mismatch prototype
• 6d80684 net: phy: dp83td510: fix kernel stall during netboot in DP83TD510E PHY driver
• eac0aac net: bcmgenet: Ensure MDIO unregistration has clocks enabled
• de67dad mtd: rawnand: meson: fix unaligned DMA buffers handling
• bb4e824 tpm: return false from tpm_amd_is_rng_defective on non-x86 platforms
• ad24970 tpm: tis_i2c: Limit write bursts to I2C_SMBUS_BLOCK_MAX (32) bytes
• f5a734a tpm: tis_i2c: Limit read bursts to I2C_SMBUS_BLOCK_MAX (32) bytes
• 99b998f tpm: tpm_vtpm_proxy: fix a race condition in /dev/vtpmx creation
• 0028313 tpm: Do not remap from ACPI resources again for Pluton TPM
• 6d84885 pinctrl: amd: Unify debounce handling into amd_pinconf_set()
• dce19c9 pinctrl: amd: Drop pull up select configuration
• 326b3f1 pinctrl: amd: Use amd_pinconf_set() for all config options
• 3cadcab pinctrl: amd: Only use special debounce behavior for GPIO 0
• 57f6d48 pinctrl: amd: Revert "pinctrl: amd: disable and mask interrupts on probe"
• 1cd1a01 pinctrl: amd: Detect and mask spurious interrupts
• 1516518 pinctrl: amd: Fix mistake in handling clearing pins at startup
• 8a2d8e1 pinctrl: amd: Detect internal GPIO0 debounce handling
• 4484ce0 pinctrl: amd: Add fields for interrupt status and wake status
• a56afed pinctrl: amd: Adjust debugfs output
• 03590f9 pinctrl: amd: Add Z-state wake control bits
• a996fec f2fs: fix deadlock in i_xattr_sem and inode page lock
• 2cb10f4 f2fs: fix the wrong condition to determine atomic context
• 13e8af9 drm/amd/pm: add abnormal fan detection for smu 13.0.0
• e8b6b7b drm/amdgpu: Fix minmax warning
• d7d53c6 drm/amdgpu: add the fan abnormal detection feature
• c8c703b drm/amd/pm: revise the ASPM settings for thunderbolt attached scenario
• 4596c81 drm/amdgpu/sdma4: set align mask to 255
• 7c88018 drm/client: Send hotplug event after registering a client
• 40e2ed0 cifs: fix session state check in smb2_find_smb_ses
• c4a5fb1 ovl: fix null pointer dereference in ovl_get_acl_rcu()
• 06b3f0b ovl: let helper ovl_i_path_real() return the realinode
• 000a9a7 fs/ntfs3: Check fields while reading
• bf2f2c0 nvme-pci: fix DMA direction of unmapping integrity data
• 70feebd net/sched: sch_qfq: account for stab overhead in qfq_enqueue
• 4b33836 net/sched: sch_qfq: refactor parsing of netlink parameters
• 0aec8da wifi: rtw89: debug: fix error code in rtw89_debug_priv_send_h2c_set()
• 3d1dc71 net/sched: make psched_mtu() RTNL-less safe
• 1c806e4 netdevsim: fix uninitialized data in nsim_dev_trap_fa_cookie_write()
• 1b125be riscv: mm: fix truncation warning on RV32
• 174cfa0 net/sched: flower: Ensure both minimum and maximum ports are specified
• b11a9b4 bpf: cpumap: Fix memory leak in cpu_map_update_elem
• 4719576 wifi: airo: avoid uninitialized warning in airo_get_rate()
• 9e6474e erofs: fix fsdax unavailability for chunk-based regular files
• dc8158a erofs: avoid infinite loop in z_erofs_do_read_page() when reading beyond EOF
• 83879f7 erofs: avoid useless loops in z_erofs_pcluster_readmore() when reading beyond EOF
• 2727279 octeontx2-pf: Add additional check for MCAM rules
• 5a9aecb drm/i915: Fix one wrong caching mode enum usage
• f1e746a drm/i915: Don't preserve dpll_hw_state for slave crtc in Bigjoiner
• ba05762 riscv, bpf: Fix inconsistent JIT image generation
• 13a30e2 nvme: fix the NVME_ID_NS_NVM_STS_MASK definition
• 66afb6a igc: Fix inserting of empty frame for launchtime
• 1b87509 igc: Fix launchtime before start of cycle
• f92a82d kernel/trace: Fix cleanup logic of enable_trace_eprobe
• 7772d5c platform/x86: wmi: Break possible infinite loop when parsing GUID
• 89726b0 net: dsa: qca8k: Add check for skb_copy
• 436b7cc ipv6/addrconf: fix a potential refcount underflow for idev
• 5554414 NTB: ntb_tool: Add check for devm_kcalloc
• 8d7b875 NTB: ntb_transport: fix possible memory leak while device_register() fails
• bece678 ntb: intel: Fix error handling in intel_ntb_pci_driver_init()
• d4317d4 NTB: amd: Fix error handling in amd_ntb_pci_driver_init()
• 4e5daad ntb: idt: Fix error handling in idt_pci_driver_init()
• 360db93 udp6: fix udp6_ehashfn() typo
• 1462e9d icmp6: Fix null-ptr-deref of ip6_null_entry->rt6i_idev in icmp6_dev().
• 1731234 net: prevent skb corruption on frag list segmentation
• 685b57a net: bgmac: postpone turning IRQs off to avoid SoC hangs
• dc47046 ionic: remove WARN_ON to prevent panic_on_warn
• 6cc293d octeontx2-af: Move validation of ptp pointer before its usage
• bb56b79 octeontx2-af: Promisc enable/disable through mbox
• 2b4086a gve: Set default duplex configuration to full
• c91fb29 net/sched: cls_fw: Fix improper refcount update leads to use-after-free
• 831fbc2 net: mvneta: fix txq_map in case of txq_number==1
• b2e74de bpf: Fix max stack depth check for async callbacks
• 714d81a scsi: ufs: ufs-mediatek: Add dependency for RESET_CONTROLLER
• 574d523 scsi: qla2xxx: Fix error code in qla2x00_start_sp()
• 49f6ac6 blk-crypto: use dynamic lock class for blk_crypto_profile::lock
• d752be6 igc: Handle PPS start time programming for past time values
• 246fc96 igc: set TP bit in 'supported' and 'advertising' fields of ethtool_link_ksettings
• e962fd5 net/mlx5e: Check for NOT_READY flag state after locking
• 83a8f73 net/mlx5e: fix memory leak in mlx5e_ptp_open
• 75df2fe net/mlx5e: fix memory leak in mlx5e_fs_tt_redirect_any_create
• 7ca1914 net/mlx5e: fix double free in mlx5e_destroy_flow_table
• 68b654e igc: Remove delay during TX ring configuration
• dfaed76 ice: Fix max_rate check while configuring TX rate limits
• 1294311 drm/panel: simple: Add Powertip PH800480T013 drm_display_mode flags
• fd5b64c swiotlb: reduce the number of areas to match actual memory pool size
• fc3db7f swiotlb: reduce the swiotlb buffer size on allocation failure
• 24b2486 swiotlb: always set the number of areas before allocating the pool
• 02d43b8 drm/bridge: ti-sn65dsi86: Fix auxiliary bus lifetime
• d48029c drm/panel: simple: Add connector_type for innolux_at043tn24
• ef572ff ksmbd: fix out of bounds read in smb2_sess_setup
• 869ef4f ksmbd: add missing compound request handing in some commands
• 2d57a15 workqueue: clean up WORK_* constant types, clarify masking
• 4b5ab64 net: lan743x: Don't sleep in atomic context
• 5a45ed1 HID: amd_sfh: Fix for shift-out-of-bounds
• d0b30d8 HID: amd_sfh: Rename the float32 variable