merge-upstream/v6.18.32 from branch/tag: upstream/v6.18.32 into branch: cos-6.18
Changelog:
-------------------------------------------------------------
Abdun Nihaal (1):
media: pci: zoran: fix potential memory leak in zoran_probe()
Alex Deucher (4):
drm/radeon: add missing revision check for CI
drm/amdgpu/pm: add missing revision check for CI
drm/amdgpu/pm: align Hawaii mclk workaround with radeon
drm/amdgpu: rework how we handle TLB fences
Alexander Koskovich (1):
media: i2c: ov8856: free control handler on error in ov8856_init_controls()
Alysa Liu (2):
drm/amdkfd: Add upper bound check for num_of_nodes
drm/amdkfd: validate SVM ioctl nattr against buffer size
Amir Shetaia (1):
drm/amdkfd: Clear VRAM on allocation to prevent stale data exposure
Amit Sunil Dhamne (1):
usb: typec: tcpm: reset internal port states on soft reset AMS
Anna Maniscalco (1):
drm/msm: always recover the gpu
Arnd Bergmann (2):
media: iris: fix QCOM_MDT_LOADER dependency
media: venus: fix QCOM_MDT_LOADER dependency
Ashutosh Desai (1):
drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs()
Ben Morris (1):
sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL
Benjamin Cheng (7):
drm/amdgpu: Add bounds checking to ib_{get,set}_value
drm/amdgpu/vcn4: Prevent OOB reads when parsing IB
drm/amdgpu/vce: Prevent partial address patches
drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg
drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg
drm/amdgpu/vcn3: Avoid overflow on msg bound check
drm/amdgpu/vcn4: Avoid overflow on msg bound check
Chenglei Xie (1):
drm/amdgpu: gate VM CPU HDP flush on reset lock
Christian Brauner (1):
papr-hvpipe: convert papr_hvpipe_dev_create_handle() to FD_PREPARE()
Cristian Ciocaltea (2):
media: dt-bindings: rockchip,vdec: Add alternative reg-names order for RK35{76,88}
media: dt-bindings: rockchip,vdec: Mark reg-names required for RK35{76,88}
Damien Le Moal (1):
block: fix zone write plug removal
David Carlier (1):
Bluetooth: hci_conn: fix potential UAF in create_big_sync
Dikshita Agarwal (1):
media: iris: Fix use-after-free in iris_release_internal_buffers()
Dmitry Baryshkov (1):
media: qcom: iris: increase H265D_MAX_SLICE to fix H.265 decoding on SC7280
Dudu Lu (1):
vsock/virtio: fix accept queue count leak on transport mismatch
Ethan Tidmore (1):
media: intel/ipu6: fix error pointer dereference
Felix Kuehling (1):
drm/amdkfd: Make all TLB-flushes heavy-weight
Filipe Manana (1):
btrfs: remove fs_info argument from btrfs_sysfs_add_space_info_type()
Francis, David (1):
drm: Set old handle to NULL before prime swap in change_handle
Greg Kroah-Hartman (1):
Linux 6.18.32
Gregor Herburger (2):
arm64: dts: broadcom: bcm2712-d-rpi-5-b: add fixes for pinctrl/pinctrl_aon
arm64: dts: broadcom: bcm2712-d-rpi-5-b: update uart10 interrupt
Guangshuo Li (1):
btrfs: fix double free in create_space_info_sub_group() error path
Guoniu Zhou (1):
media: nxp: imx8-isi: Reduce minimum queued buffers from 2 to 0
Haoxiang Li (2):
media: chips-media: wave5: fix a potential memory leak in wave5_vdi_init()
media: omap3isp: drop the use count of v4l2 pipeline
Icenowy Zheng (2):
drm/panel: himax-hx83102: restore MODE_LPM after sending disable cmds
drm/panel: boe-tv101wum-nl6: restore MODE_LPM after sending disable cmds
Jai Luthra (2):
media: i2c: imx283: Enter full standby when stopping streaming
media: i2c: imx283: Fix hang when going from large to small resolution
Janne Grunau (1):
media: videobuf2: Set vma_flags in vb2_dma_sg_mmap
Jia Yao (1):
drm/xe/uapi: Reject coh_none PAT index for CPU cached memory in madvise
Jiexun Wang (3):
batman-adv: reject new tp_meter sessions during teardown
batman-adv: stop tp_meter sessions during mesh teardown
batman-adv: stop caching unowned originator pointers in BAT IV
Johan Hovold (54):
spi: bcm63xx: fix controller deregistration
spi: atmel: fix controller deregistration
regulator: mt6357: fix OF node reference imbalance
spi: st-ssc4: fix controller deregistration
regulator: max77650: fix OF node reference imbalance
regulator: bq257xx: fix OF node reference imbalance
regulator: rk808: fix OF node reference imbalance
regulator: act8945a: fix OF node reference imbalance
regulator: s2dos05: fix OF node reference imbalance
regulator: bd9571mwv: fix OF node reference imbalance
spi: lantiq-ssc: fix controller deregistration
spi: meson-spicc: fix controller deregistration
spi: qup: fix controller deregistration
spi: at91-usart: fix controller deregistration
spi: amlogic-spisg: fix controller deregistration
spi: aspeed-smc: fix controller deregistration
spi: mxs: fix controller deregistration
spi: mt65xx: fix controller deregistration
spi: dln2: fix controller deregistration
spi: s3c64xx: fix controller deregistration
spi: fsl-espi: fix controller deregistration
spi: omap2-mcspi: fix controller deregistration
spi: pic32: fix controller deregistration
spi: mtk-nor: fix controller deregistration
spi: pl022: fix controller deregistration
spi: ch341: fix devres lifetime
spi: sh-hspi: fix controller deregistration
spi: fsl: fix controller deregistration
spi: bcmbca-hsspi: fix controller deregistration
spi: coldfire-qspi: fix controller deregistration
spi: npcm-pspi: fix controller deregistration
spi: cavium-thunderx: fix controller deregistration
spi: pic32-sqi: fix controller deregistration
spi: sprd: fix controller deregistration
spi: rspi: fix controller deregistration
spi: sh-msiof: fix controller deregistration
spi: slave-mt27xx: fix controller deregistration
spi: img-spfi: fix controller deregistration
spi: mpfs: fix controller deregistration
spi: imx: fix runtime pm leak on probe deferral
spi: mxic: fix controller deregistration
spi: orion: fix controller deregistration
spi: orion: fix runtime pm leak on unbind
spi: orion: fix clock imbalance on registration failure
spi: mpc52xx: fix use-after-free on registration failure
spi: mpc52xx: fix controller deregistration
spi: mpc52xx: fix use-after-free on unbind
spi: cadence: fix controller deregistration
spi: cadence: fix unclocked access on unbind
spi: cadence: fix clock imbalance on probe failure
spi: uniphier: fix controller deregistration
spi: tegra20-sflash: fix controller deregistration
spi: tegra114: fix controller deregistration
spi: zynq-qspi: fix controller deregistration
John B. Moore (2):
drm/amdgpu/gfx9: drop unnecessary 64-bit fence flag check in KIQ
drm/amdgpu/sdma4: replace BUG_ON with WARN_ON in fence emission
Josua Mayer (1):
arm64: dts: lx2160a-cex7/lx2162a-sr-som: fix usd-cd & gpio pinmux
Jouni Högander (1):
drm/i915/psr: Init variable to avoid early exit from et alignment loop
Kory Maincent (TI) (1):
drm/bridge: tda998x: Use __be32 for audio port OF property pointer
Krishna Chomal (1):
platform/x86: hp-wmi: Ignore backlight and FnLock events
Krzysztof Kozlowski (1):
drm/msm/hdmi: Fix wrong CTRL1 register used in writing info frames
Luigi Leonardi (1):
vsock/virtio: fix MSG_PEEK ignoring skb offset when calculating bytes to copy
Lyes Bourennani (1):
batman-adv: fix integer overflow on buff_pos
Marek Vasut (1):
drm/imx: parallel-display: Prefer bus format set via legacy "interface-pix-fmt" DT property
Mario Kleiner (1):
drm/amd/display: Change dither policy for 10 bpc output back to dithering
Masami Hiramatsu (Google) (2):
tracing/fprobe: Unregister fprobe even if memory allocation fails
tracing/fprobe: Remove fprobe from hash in failure path
Matthew Brost (1):
drm/gpusvm: Force unmapping on error in drm_gpusvm_get_pages
Matthias Fend (2):
media: i2c: ov08d10: fix image vertical start setting
media: i2c: ov08d10: fix runtime PM handling in probe
Menglong Dong (2):
tracing: fprobe: use rhltable for fprobe_ip_table
tracing: fprobe: optimization for entry only case
Michael Tretter (1):
media: staging: imx: request mbus_config in csi_start
Norbert Szetei (1):
vsock: fix buffer size clamping order
Oliver Neukum (2):
media: rc: xbox_remote: heed DMA restrictions
media: rc: streamzap: Error handling in probe
Osama Abdelkader (1):
drm/exynos: remove bridge when component_add fails
Pavel Begunkov (2):
io_uring/zcrx: use guards for locking
io_uring/zcrx: warn on freelist violations
Pei Xiao (2):
spi: uniphier: Simplify clock handling with devm_clk_get_enabled()
spi: zynq-qspi: Simplify clock handling with devm_clk_get_enabled()
Philip Yang (1):
drm/amdgpu: zero-initialize GART table on allocation
Prasanna Kumar T S M (1):
EDAC/versalnet: Fix device name memory leak
Prashanth K (2):
usb: dwc3: Remove of dep->regs
usb: dwc3: Add dwc pointer to dwc3_readl/writel
Prike Liang (2):
drm/amdgpu: validate the flush_gpu_tlb_pasid()
Revert "drm/amdgpu: don't attach the tlb fence for SI"
Ramalingeswara Reddy, Kanala (1):
drm/amdgpu: Use SMUIO 15.0.0 offsets for TSC upper and lower count.
Ricardo Ribalda (1):
media: uvcvideo: Enable VB2_DMABUF for metadata stream
Ritesh Harjani (IBM) (1):
pseries/papr-hvpipe: Fix race with interrupt handler
Sakari Ailus (1):
staging: media: atomisp: Disallow all private IOCTLs
Sangyun Kim (2):
HID: appletb-kbd: fix UAF in inactivity-timer cleanup path
HID: appletb-kbd: run inactivity autodim from workqueues
Sasha Finkelstein (1):
drm/appletbdrm: Use kvzalloc for big allocations
Selvarasu Ganesan (1):
usb: dwc3: Move GUID programming after PHY initialization
SeongJae Park (4):
mm/damon/core: implement damon_kdamond_pid()
mm/damon/lru_sort: detect and use fresh enabled and kdamond_pid values
mm/damon/reclaim: detect and use fresh enabled and kdamond_pid values
mm/damon/core: disallow time-quota setting zero esz
Sergey Shtylyov (1):
media: dib8000: avoid division by 0 in dib8000_set_dds()
Shixiong Ou (1):
drm/udl: Increase GET_URB_TIMEOUT
Shuicheng Lin (4):
drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure
drm/xe/bo: Fix bo leak on GGTT flag validation in xe_bo_init_locked()
drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import()
drm/xe/bo: Fix bo leak on unaligned size validation in xe_bo_init_locked()
Siddharth Vadapalli (1):
arm64: dts: ti: k3-am62a7-sk: Fix pin name in comment from M19 to N22
Stefano Garzarella (2):
vsock/virtio: fix length and offset in tap skb for split packets
vsock/virtio: fix empty payload in tap skb for non-linear buffers
Sven Eckelmann (4):
batman-adv: bla: prevent use-after-free when deleting claims
batman-adv: bla: only purge non-released claims
batman-adv: bla: put backbone reference on failed claim hash insert
batman-adv: tp_meter: fix tp_num leak on kmalloc failure
T.J. Mercier (1):
HID: playstation: Clamp num_touch_reports
Tejun Heo (1):
sched_ext: Read scx_root under scx_cgroup_ops_rwsem in cgroup setters
Thomas Fourier (1):
media: iris: Fix dma_free_attrs() size in iris_hfi_queues_init()
Thomas Zimmermann (2):
fbcon: Rename struct fbcon_ops to struct fbcon_par
fbcon: Avoid OOB font access if console rotation fails
Timur Kristóf (1):
drm/amdgpu: Fix validating flush_gpu_tlb_pasid()
Tomasz Pakuła (1):
HID: pidff: Fix integer overflow in pidff_rescale
Tomi Valkeinen (2):
media: renesas: vsp1: Fix NULL pointer deref on module unload
media: renesas: vin: Fix RAW8 (again)
Viken Dadhaniya (1):
arm64: dts: qcom: lemans: Correct QUP interrupt numbers
Wang Jun (1):
media: saa7164: add ioremap return checks and cleanups
Wenmeng Liu (4):
media: i2c: imx412: Assert reset GPIO during probe
media: qcom: camss: Fix csid clock configuration for sa8775p
media: qcom: camss: Fix csid IRQ offset for sa8775p
media: qcom: camss: Add missing clocks for VFE lite on sa8775p
Xianglai Li (1):
LoongArch: KVM: Compile switch.S directly into the kernel
Yang Wang (1):
drm/amd/pm: fix incorrect FeatureCtrlMask setting on smu v14.0.x
Yasuaki Torimaru (1):
drm/msm/gem: fix error handling in msm_ioctl_gem_info_get_metadata()
Yochai Eisenrich (1):
btrfs: fix btrfs_ioctl_space_info() slot_count TOCTOU which can lead to info-leak
Ziyi Guo (2):
media: chips-media: wave5: add missing spinlock protection for send_eos_event()
media: chips-media: wave5: add missing spinlock protection for handle_dynamic_resolution_change()
zhidao su (1):
sched/ext: Implement cgroup_set_idle() callback
BUG=b/514234440
TEST=tryjob, validation and K8s e2e
RELEASE_NOTE=Updated the Linux kernel to v6.18.32.
Change-Id: I2b7eaa1f7101886ca8b72c35f70ef07f359cfb9d
Signed-off-by: COS Kernel Merge Bot <cloud-image-merge-automation@prod.google.com>
Reviewed-on: https://cos-review.googlesource.com/c/third_party/kernel/+/152444
Tested-by: Cusky Presubmit Bot <presubmit@cos-infra-prod.iam.gserviceaccount.com>
Tested-by: Derek Taylor <ddtaylor@google.com>
Reviewed-by: Derek Taylor <ddtaylor@google.com>
Reviewed-by: Kevin Berry <kpberry@google.com>
