Skip to content
Closed
Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
703 commits
Select commit Hold shift + click to select a range
2fcd26f
RDMA/cxgb4: Fix dereg_skb leak and double free in write_tpt_entry()
rleon Jul 29, 2026
0787e34
PCI: Make pci_match_one_device() match on ID instead of device
nbdd0121 Jul 23, 2026
5e81d10
PCI: Fix dyn_id add TOCTOU
nbdd0121 Jul 23, 2026
c36816f
PCI: Fix UAF when probe runs concurrent to dyn ID removal
nbdd0121 Jul 23, 2026
268cbe3
iommu/tegra241-cmdqv: Don't fall back to a freed smmu after devm_krea…
nicolinc Jul 14, 2026
9d39f6d
scsi: ufs: core: Convert string descriptor format macros to enum
beanhuo Nov 7, 2025
f3480c5
scsi: ufs: core: Validate string descriptors
Jul 17, 2026
01b5fcd
pinctrl: mediatek: use devm_gpiochip_add_data() for GPIO chip
justinyeh0907 Jul 23, 2026
094f0a8
bpf: Fix WARNING in bpf_tracing_link_release
Asphaltt Jul 22, 2026
074d062
ext4: fix ABBA deadlock in ext4_xattr_inode_cache_find()
aditya2999 Jun 26, 2026
21bc072
firmware: arm_scmi: Clear SystemPower flag on create failure
Jul 14, 2026
f853332
firmware: arm_scmi: Fix OF node reference handling
Jul 14, 2026
a60bc2d
firmware: arm_scmi: Fix SCMI device destroy lifetimes
Jul 14, 2026
c6492e1
cxl/features: Serialize multi-part Get/Set Feature transfers
davejiang Jul 9, 2026
6a2e023
fs/resctrl: Fix UAF from worker threads when domains are removed
rchatre Jul 13, 2026
80968b4
RDMA/rvt: Return NULL after port allocation failure
rleon Jul 13, 2026
1ad6456
esp: do not unref managed frag pages in esp_ssg_unref()
MaherAzzouzi Jul 12, 2026
8410cd2
platform/x86: asus-wmi: fix resource leaks on probe failure
scardracs Jun 17, 2026
0203146
usb: gadget: uac: validate rate list length before storing
May 19, 2026
93a20b1
bpf: Reject rdonly/rdwr_buf_size kfunc arguments that exceed u32 max
KalliopeMain Jul 9, 2026
16a82ad
platform/x86: dell-wmi-base: Fix handling of ultra performance key
Wer-Wolf Jun 12, 2026
644cf4e
bpf: Reject writes through untrusted BTF pointers
KalliopeMain Oct 8, 2026
cf08ff2
bpf: Reject MEM_ALLOC BTF accesses past object bounds
Jun 30, 2026
7abc9b4
uprobes/x86: Move optimized uprobe from nop5 to nop10
olsajiri Jul 3, 2026
f786e7b
dmaengine: xilinx_dma: Fix CPU stall in xilinx_dma_poll_timeout
lxbrz Apr 2, 2026
3a03827
drm/amd/display: Fix dangling pointer in CRTC reset function
evg28bur Jun 29, 2026
3d8391d
drm/amd/display: Fix dangling pointer in plane reset function
evg28bur Jun 29, 2026
96d4b27
dm-pcache: validate seg_id fields from persistent memory
bryamzxz Jul 17, 2026
65aa0a4
nfsd: use workqueue enable/disable APIs for v4_end_grace sync
neilbrown Dec 13, 2025
40bab0d
nfsd: convert nfsd_net boolean flags to unsigned long flags word
May 30, 2026
041cce6
drm/xe: don't WARN on kernel job timeout when device already wedged
NitinGote Aug 14, 2026
ebdd932
ACPI: bus: Introduce acpi_bus_get_primary_device()
rafaeljw Aug 12, 2026
e3388ed
powerpc/xive: add error return value to xive_smp_probe()
gouhao2025 Jul 27, 2026
5c9ab0c
powerpc/xive: propagate IPI init errors to prevent use-after-free
gouhao2025 Jul 27, 2026
2e7e39b
remoteproc: qcom_wcnss: Fix handling the lack of PD regulators in v3
valpackett Feb 1, 2026
eb2e3bb
ksmbd: remove redundant DACL check in smb_check_perm_dacl
Dec 10, 2025
28289d8
ksmbd: fix maximum allowed access checks
namjaejeon Jul 5, 2026
2be31f2
smb: client: avoid using uninitialized SIDs in cifs_posix_to_fattr()
pcacjr Sep 6, 2026
6ac7a29
smb: client: honor forceuid/forcegid when mapping SIDs to uid/gid
pcacjr Sep 6, 2026
30dacb5
drm/amdgpu: skip the VMID 0 flush for VRAM
arunpravin24 Sep 2, 2026
d9232a9
tracing: Take trace_array reference when opening a tracer options file
rostedt Sep 11, 2026
7f8ee0b
vhost: invalidate vring access on IOTLB transitions
physicalmtea Aug 28, 2026
831dab9
vduse: validate virtqueue alignment
physicalmtea Aug 30, 2026
3e6400e
virtio_ring: fix stale descriptor flags after a failed packed add
agraf Aug 17, 2026
787405e
iommu/riscv: Serialize command queue publishing
fangyu0809 Sep 1, 2026
b1fe637
bpf: mark a NULL call argument precise
eddyz87 Sep 5, 2026
3f30b2c
tracing: Fix subbuf resize races with trace_pipe_raw readers
vdonnefort Sep 4, 2026
08b534b
bpf: Preserve inner map identity in callback frames
kkdwvd Sep 4, 2026
bb667eb
bpf: Mark NULL kptr stores precise
kkdwvd Sep 4, 2026
8d19e2c
bpf: Keep refcount_acquire nullable for borrowed RCU kptrs
nding0405 Sep 4, 2026
65bea67
bpf: Don't infer non-NULL from a pointer with an unbounded offset
eddyz87 Sep 4, 2026
c4d3bdb
bpf: don't rewrite bpf_fastcall patterns entered by a jump
eddyz87 Sep 3, 2026
6bb6ae5
bpf: zero extend the result of an arena 32-bit cmpxchg
eddyz87 Sep 3, 2026
5b40198
ring-buffer: Skip invalid sub-buffers when validating persistent ring…
mhiramat May 22, 2026
364a310
ring-buffer: Add checking nr_subbufs to persistent ring buffer valida…
rostedt Sep 3, 2026
65f6363
bpf: Mark syscall helpers as sleepable
kkdwvd Sep 3, 2026
3a39bc9
bpf: backtracking shouldn't clear outer frame R1-R5 for callbacks
eddyz87 Sep 1, 2026
a0cd9e2
bpf: backtrack_insn(): Handle ld_{abs,ind} subprog exit edge
eddyz87 Sep 2, 2026
45462e5
ipv6: mcast: annotate data-races around mca_users
yuyang-huang-90 May 24, 2026
afca229
ipv6: mcast: use rcu_assign_pointer() for __rcu list updates
edumazet Aug 28, 2026
8a3257f
net: stmmac: fix dma mapping leak in stmmac_tso_xmit()
LorenzoBianconi Aug 26, 2026
9bf96b4
bpf: check_cond_jmp_op(): properly infer if register is null
eddyz87 Aug 26, 2026
0af43b5
printk: Don't WARN on kthread_run failure.
Aug 4, 2026
46a431c
ksmbd: convert tree_conns_lock to rw_semaphore
namjaejeon Feb 9, 2026
fea9c70
smb/server: fix tree connection leak in smb2_tree_connect()
Aug 14, 2026
ab0f329
arm64: dts: lx2160a: fix incorrect pinmux
vjardin Aug 24, 2026
5a67369
arm64: dts: lx2160a: fix IIC1 pinmux submask rejected by pinctrl-single
vjardin Aug 24, 2026
cc21cda
arm64: dts: lx2160a: fix the iic5 spi3 pinmux offset and value
vjardin Aug 24, 2026
7505f13
mount: refuse MOVE_MOUNT_SET_GROUP on an unbindable mount
brauner Sep 23, 2026
6850385
fs: move mntput_no_expire() slowpath into a dedicated routine
mjguzik Nov 14, 2025
62a167e
fs: don't let a migrating task hide its reference from do_umount()
brauner Sep 23, 2026
39ab048
Bluetooth: btintel_pcie: fix TX descriptor bounds check
ravindr1 Sep 29, 2026
73e8503
Bluetooth: btintel_pcie: Add shared HW reset for clean start
aluvalasaitejaintel Sep 29, 2026
5b26dbb
drm/dp: don't mark the AUX backlight enabled when enabling failed
okeri Sep 25, 2026
0131892
gpio: exar: initialize the ID before registering its cleanup
KoreaSecurity Sep 29, 2026
742619c
drm/aspeed: Balance the display clock enable on teardown
testacegi Sep 13, 2026
bea10b8
drm/vc4: Free the BO cache size list on teardown
mairacanal Sep 30, 2026
85e5512
net/sched: em_text: reject unterminated algo before autoload
jhsmt Sep 30, 2026
181cb48
amt: send the relay's General Query directly from the receive path
kkroo Sep 28, 2026
7110c7f
cxgb4/ch_ktls: disable softirqs around tid_list erases
KoreaSecurity Sep 29, 2026
c83bf39
tee: optee: fix kernel-doc warnings
rodrigoffzz Mar 22, 2026
cbab667
tee: optee: ffa: support shared memory offsets on large-page kernels
mahantesh-nvidia Sep 10, 2026
b7725ac
ice: Restore Ordered MMIO Writes for Tx Doorbells
bryanfraschetti Sep 28, 2026
e76979e
nvmet: return Invalid Field for invalid NSIDs feature 82h
guixinliu1995 Sep 20, 2026
ce79a6c
nvmet: use the local P2P device on metadata allocation failure
KoreaSecurity Sep 30, 2026
7057b68
arm64/boot: Don't set PMUv3p9 FGT2 bits without PMUv3
ftabba Sep 30, 2026
77de9ad
zloop: zero out only the unread tail of short reads
kawasaki Sep 16, 2026
033dda5
btrfs: always return -EIOCBQUEUED after btrfs_uring_read_extent_endio
Aug 19, 2026
7a3addb
btrfs: free iov when btrfs_uring_read_extent() fails
Aug 19, 2026
2797eb3
btrfs: unlock inode and extent in caller when io_uring read extent fails
Aug 19, 2026
a97114b
btrfs: fix xattr replace when multiple xattrs are packed in the same …
fdmanana Sep 25, 2026
36d7e2d
btrfs: fix lost error return value in btrfs_listxattr()
fdmanana Sep 25, 2026
63bc3cf
drm/xe/mmio: Fix xe_mmio_wait32() to honor delay/sleep maximums
aalteres Sep 29, 2026
2c77af8
net: make dev_xdp_sb_prog_count() see programs attached through a link
kuba-moo Oct 1, 2026
b56f9e1
riscv: vector: Fix data pointer constraints in context save/restore
TroyMitchell911 Oct 6, 2026
0cf8453
riscv: vector: Fix output operands in context save
aurel32 Oct 6, 2026
aafd172
wifi: mt76: don't return TXQ when exceeding max non-AQL packets
blocktrron Jan 29, 2026
09c6284
wifi: mac80211: add AQL support for multicast packets
nbd168 Jul 24, 2026
12b4676
wifi: mac80211: add ieee80211_txq_aql_pending()
nbd168 Jul 24, 2026
65b0803
wifi: mt76: add PS buffering support for HW-managed TIM drivers
nbd168 Aug 1, 2026
9f28f50
wifi: mt76: account non-AQL frames per peer rather than per link
nbd168 Aug 18, 2026
a18f68c
wifi: mt76: route nullfunc frames to PSD/ALTX queue
nbd168 Mar 9, 2026
69aae41
wifi: mt76: use ALTX queue for packets to disassociated stations
nbd168 Sep 1, 2026
0ed29ec
wifi: mt76: mt7925: restore the legacy BSS after MLO teardown
pyma1 Aug 26, 2026
f240282
wifi: mt76: mt7996: fix struct mt7996_mcu_wed_rro_ba_delete_event layout
gongtao0607 Aug 23, 2026
0f9afe2
wifi: mt76: mt7915: disable rx napi when removing device
Aug 10, 2026
7fb2d37
wifi: mt76: mt7925: don't put the band auto marker in TGID
Lucid-Duck Sep 11, 2026
83ec70a
wifi: mt76: mt792x: treat 0xff ACPI SAR entries as no limit
Junjie650 Sep 10, 2026
e3f7cc4
wifi: mt76: mt792x: pick the SAR table layout from the table itself
Lucid-Duck Sep 5, 2026
1bee950
Revert "wifi: ath12k: add panic handler"
MilanoPipo Jun 12, 2026
47c0c7a
ASoC: adau1372: allow sleepy powerdown GPIOs
sipraga Oct 6, 2026
ef15a51
ASoC: adau1372: fix invalid default state of output ASRC and DAC muxes
sipraga Oct 6, 2026
64bb350
ASoC: samsung: i2s: enable op_clk in probe to balance runtime PM
mszyprow Oct 2, 2026
f3e80f5
spi: sg2044-nor: Return transfer errors
RevySR Sep 30, 2026
1194fd4
spi: sg2044-nor: Honor SPI clock limits
RevySR Sep 30, 2026
0bcebf2
cgroup/cpuset: Call is_in_v2_mode() after acquiring cpuset_mutex in c…
Waiman-Long Oct 5, 2026
9993e6a
flow_dissector: avoid u16 truncation of skb->len when computing thoff
Oct 1, 2026
2774858
net: sparx5: start the TOD counters on non-PTP lan969x variants
Oct 5, 2026
8de57bf
devlink: fix devlink_rel reference leak when notify work is pending
Oct 1, 2026
972b928
net/sched: cls_route: reject change with no routing attribute
vbnogueira Oct 1, 2026
e378bd8
Revert "net/mlx5: E-Switch, preserve max tx speed on vport state modi…
ohartoov Oct 4, 2026
75e7f85
net: bcmgenet: if UMAC was suspended in SW_RESET, restore it to SW_RESET
Ryceancurry Sep 30, 2026
b18a649
pfcp: make sure the SEID is linear before reading it
Sep 30, 2026
8ef2b3c
bnxt_en: Add bnxt_clear_bars() helper
Oct 5, 2026
f41becb
bnxt_en: Fix driver init in kdump kernel
Oct 5, 2026
5026c50
bnxt_en: Delay for 5 seconds after AER DPC for all chips
May 4, 2026
fd6a2b0
bnxt_en: Drop pci_save_state() after pci_restore_state()
l1k May 7, 2026
cb0d557
bnxt_en: Re-write the BARs following any type of PCIe errors
pavanchebbi Oct 5, 2026
cc18eb0
flow_dissector: avoid u16 truncation of hlen in bpf_flow_dissect()
Oct 7, 2026
9caa2ec
drm/imagination: Fix reference and vm_bo handling in remap()
gye976 Oct 1, 2026
e241465
veth: fix peer NETDEV_XDP_ACT_NDO_XMIT after GRO is toggled while down
tgao-cf Oct 6, 2026
5b1fb3b
net/mlx5e: Order ICOSQ cc update after CQ doorbell
lrq-max Oct 6, 2026
3938430
mlxsw: spectrum_flower: Fix port range register leak in tmplt_create()
pmachata Oct 6, 2026
0849ecf
ptp: ocp: fix PCIe delay estimation calculation
Oct 7, 2026
2594795
net: openvswitch: validate transport header presence in set_ipv6_addr
ffmancera Oct 8, 2026
4835dbc
vsock: Fix memory leak in vmci_transport_recv_dgram_cb()
Oct 8, 2026
bf0f341
drm/vc4: Fix binner slot allocation failing on an idle GPU
mairacanal Sep 30, 2026
e3e6779
x86/CPU/AMD: Fix AMD TLBI Erratum #1718
Oct 2, 2026
fdee357
drm/panthor: validate userspace queue count against initialized firmw…
osamakader Aug 4, 2026
8f7285d
btrfs: make sure EXTENT_BUFFER_READING is cleared under refs_lock
adam900710 Jun 20, 2026
4719852
cifs: consolidate time_last_write stamp into _cifsFileInfo_put()
fsorenson Jul 24, 2026
a582e73
netfs, afs: Fix symlink reading
dhowells Sep 15, 2026
07861e8
media: verisilicon: Fix kernel panic due to __initconst misuse
Mar 6, 2026
22adb67
net: fix backlog_unlock_irq_restore() vs CONFIG_PREEMPT_RT
edumazet Feb 13, 2026
5c03da7
netfs: Fix missing alloc tagging of direct mempool allocations
Sep 23, 2026
7673661
workqueue: fix devm_alloc_workqueue() va_list misuse
leitao Apr 28, 2026
5844001
s390/zcrypt: Improve CCA CPRB length and overflow checks
hfreude Aug 3, 2026
f463f47
s390/zcrypt: Improve EP11 CPRB length and overflow checks
hfreude Aug 3, 2026
00a44ff
s390/zcrypt: Improve EP11 CPRB domain handling with ASN.1 parsing
hfreude Aug 3, 2026
44e61f1
s390/zcrypt: Pad trailing CCA or EP11 message with zeros
hfreude Aug 3, 2026
27f52d4
accel/amdxdna: Resume power for creating and destroying hardware context
houlz0507 Oct 8, 2025
a82142a
accel/amdxdna: Fix race condition when checking rpm_on
houlz0507 Dec 8, 2025
2d2c32b
accel/amdxdna: Fix crash when destroying a suspended hardware context
houlz0507 Feb 6, 2026
5e9c814
workqueue: Annotate alloc_workqueue_va() with __printf(1, 0)
htejun Apr 29, 2026
d0813c7
ACPI: scan: Do not mark button ACPI devices as wakeup-capable
rafaeljw Dec 15, 2025
30e08c9
ACPI: scan: Use acpi_setup_gpe_for_wake() for buttons
rafaeljw Jan 10, 2026
87655ad
xfs: remove duplicate INO1_WRITTEN check
Sep 14, 2026
7d3b9b2
xfs: stop exchanging reflink flags when exchanging mappings
nszetei Oct 7, 2026
cf32eb2
xfs: fix exchange-range-to-eof file size exchange
Oct 7, 2026
69bf8d1
can: fix unique skb identifier regression under RPS
hartkopp Oct 13, 2026
3264261
SUNRPC: Add Kconfig dependency on CRYPTO_KRB5
chucklever Apr 27, 2026
82ac8c4
regulator: of: fill in supply names in of_regulator_bulk_get_all()
alchark Oct 12, 2026
f94a12d
drm/amd/display: Don't replace a sink mode that shares the native totals
cinema-ONE Oct 12, 2026
3142648
sched_ext: Generate qseq from a per-task counter
j-piecuch Oct 13, 2026
05d3990
HID: steam: Fully unregister controller when hidraw is opened
endrift Oct 13, 2026
86724f4
HID: steam: Rearrange teardown sequence
endrift Oct 13, 2026
cf71a6e
HID: steam: Refactor registration
endrift Oct 13, 2026
d1e095c
HID: steam: Clean up locking
endrift Oct 13, 2026
2ff600d
Linux 6.18.57
gregkh Oct 15, 2026
1288892
x86/hyperv: enable a Xen PV dom0 to use the L0 Hyper-V host
kaniini Jul 23, 2026
722b9fc
Drivers: hv: use host frames for GPADLs and SynIC pages when nested o…
kaniini Jul 23, 2026
3ef82af
drivers: hv: deliver the VMBus interrupt via a Xen VIRQ when nested o…
kaniini Jul 23, 2026
431a976
hv_netvsc: DMA-map transmit pages when nested on Xen
kaniini Jul 23, 2026
903ce39
x86/hyperv: take vPCI device interrupts through Xen when nested on Xen
kaniini Jul 28, 2026
415b496
drivers: hv: tear down the Xen VMBus interrupt bridge on unwind
kaniini Sep 17, 2026
e8e5e28
iommu/xen: Add Xen PV-IOMMU driver
azenla Sep 2, 2026
e5933fb
iommu/xen: Allow the PV-IOMMU driver in a guest
azenla Sep 2, 2026
12805ee
iommu/xen: Give the identity domain a type and ops
azenla Sep 2, 2026
3498eb1
iommu/dma: Don't reserve PCI windows under a paravirtual IOMMU
azenla Sep 2, 2026
e8f5ee2
xen/pcifront: Let callers ask for a device's machine BDF
azenla Sep 2, 2026
7e24afb
iommu/xen: Default a PV guest to the identity context
azenla Sep 2, 2026
5f8f985
PCI/MSI: don't write the MSI-X table in a Xen PV guest
azenla Sep 3, 2026
1c86da9
iommu/xen: batch map subops over contiguous runs
azenla Sep 3, 2026
71710a0
iommu/xen: do not claim the IOMMU itself
azenla Sep 3, 2026
9ac3485
x86/xen: disable the right interrupt type when tearing down MSI
azenla Sep 3, 2026
857e0d1
iommu/xen: flush the IOTLB once per mapping, not once per subop
azenla Sep 3, 2026
960cad0
iommu/xen: restrict the PV-IOMMU driver to x86
kaniini Sep 17, 2026
59fc34c
x86/topology: Tolerate lack of APIC when booting as Xen domU
azenla Apr 10, 2025
d29d7ca
x86/CPU/AMD: avoid printing reset reasons on Xen domU
kaniini Sep 4, 2025
0cb695b
9p/xen: share one frontend across mounts and advertise it (6.18)
azenla Jul 15, 2026
a4c204c
x86/amd_node: fix integer divide by zero during init
tycho Nov 14, 2025
9cdf9c3
xen/evtchn: diagnose ring_overflow with post-barrier cons re-read
tycho Jul 20, 2026
86693ba
xen: add xen_mfn_to_node to resolve a foreign frame's host NUMA node
tycho Jul 20, 2026
a0b48cc
xen: make xen_alloc_unpopulated_pages NUMA-aware
tycho Jul 20, 2026
74bcbd3
xen/grant-table: add gnttab_alloc_pages_node
tycho Jul 20, 2026
c62d863
xen/events: add _on_node variants of the lateeoi bind helpers
tycho Jul 20, 2026
b2e95c2
xen/xenbus: home ring mappings on the foreign frame's host node
tycho Jul 20, 2026
b2d6a50
xen/xenbus: add xenbus_setup_ring_node for per-node ring allocation
tycho Jul 20, 2026
afe7d4a
xen-netback: place per-queue kthreads and IRQs near the ring
tycho Jul 20, 2026
b405ca2
xen-blkback: place per-ring kthread and IRQ near the ring
tycho Jul 20, 2026
5b1b027
xen-netfront: place per-queue rings on per-queue nodes, with XPS
tycho Jul 20, 2026
4724b17
xen-blkfront: place per-ring buffers on per-hctx nodes
tycho Jul 20, 2026
3262952
xen/gntdev: home grant-map placeholder pages on the foreign frame's node
tycho Jul 20, 2026
8ae3306
xen: xlate_mmu: relocate remap_pfn utils
alexandermerritt May 27, 2026
86514fd
xen: xlate_mmu: batch gfn mappings
alexandermerritt May 27, 2026
8288057
feat(xen): deflate balloon via oom notifier
alexandermerritt Aug 6, 2026
2d4a64c
firmware: qemu_fw_cfg: do not use the DMA interface on Xen PV
bleggett Aug 11, 2026
6cbca14
security: Add openpax configuration menus
kaniini Jul 7, 2024
40c019c
xattr: add support for retrieving PaX flags stored in xattrs
kaniini Jul 7, 2024
ad1f7b8
mm: add openpax flags, settable via atomics
kaniini Jul 7, 2024
444a3b2
mman: enforce MPROTECT when enabled for a task
kaniini Jul 7, 2024
777c894
elf: wire up setup for PaX flags
kaniini Jul 7, 2024
f79d64b
security: openpax: add OPENPAX_SOFTMODE configuration knob
kaniini Jul 10, 2024
8e00d58
documentation: add pax_softmode= to kernel parameters doc
kaniini Jul 10, 2024
2717112
init: add pax_softmode= kernel command-line option
kaniini Jul 10, 2024
7367bf4
sysctl: wire up PaX softmode setting
kaniini Jul 10, 2024
5f51be6
elf: only enable PaX features by default if softmode is disabled
kaniini Jul 10, 2024
b275e91
elf: enable PAXF_RANDMMAP if randomize_va_space > 0
kaniini Jul 11, 2024
cb53f54
elf: use PAXF_RANDMMAP to control whether ASLR is enabled on a process
kaniini Jul 11, 2024
d847006
elf: allow executable stacks if PAXF_EMUTRAMP is enabled
kaniini Jul 11, 2024
b1e123f
proc: display PaX status in procfs status entries
kaniini Jul 11, 2024
ecdd603
elf: only test for PAXF_RANDMMAP if OPENPAX is enabled
kaniini Jul 16, 2024
df147a4
security: add openpax EMUTRAMP config option
kaniini Jul 21, 2024
c3990d0
elf: simplify executable stack logic
kaniini Jul 21, 2024
eaf0a99
x86: fault: add openpax_fault_is_trampoline to detect if a page-fault…
kaniini Jul 22, 2024
257c6d4
x86: fault: add stack trampoline emulator
kaniini Jul 22, 2024
b0798d8
x86: fault: hook up stack trampoline emulator
kaniini Jul 22, 2024
3dd385e
security: openpax: add OPENPAX_EMUTRAMP_DEFAULT config option
kaniini Jul 22, 2024
0ca33a1
elf: enable EMUTRAMP by default if CONFIG_OPENPAX_EMUTRAMP_DEFAULT is…
kaniini Jul 22, 2024
509c02b
arm64: determine stack entropy based on mmap entropy
thestinger May 22, 2017
00e6eb2
x86: determine stack entropy based on mmap entropy
thestinger May 22, 2017
1372e05
mmap: further improve randomization of brk(2) addresses
kaniini Jul 23, 2024
1499e34
exec: randomize argument block location
kaniini Jul 23, 2024
fa47f4f
use maximum supported mmap rnd entropy by default
thestinger May 7, 2017
60d3382
elf: avoid double read of randomize_va_space in OpenPaX flag setup
kaniini Sep 13, 2024
a2722b4
init: provide pax_softmode symbol unconditionally
kaniini Oct 31, 2024
121963a
security: openpax: disable OpenPaX by default
azenla Sep 26, 2026
bfff3c6
xen/mem-reservation: add ordered populate
alexandermerritt Sep 24, 2026
bbd3941
x86/xen: add batched helpers for remapping a contiguous pfn run
alexandermerritt Sep 24, 2026
b598a48
xen/mem-reservation: add contiguous mapping helpers
alexandermerritt Sep 24, 2026
ec08c17
xen/balloon: inflate in 2 MiB blocks
alexandermerritt Sep 24, 2026
5fa706d
xen/balloon: deflate in 2 MiB blocks
alexandermerritt Sep 24, 2026
9b58071
xen/balloon: deflate 2 MiB blocks in the OOM path
alexandermerritt Sep 24, 2026
6fa03d0
automation: rebase edera/6.18-lts onto stable linux-6.18.y nightly
kaniini Oct 9, 2026
3511b33
automation: propose a 6.18-lts backport for each merged mainline PR
kaniini Oct 9, 2026
ad2d127
automation: allow github-actions to initiate workflows
azenla Oct 12, 2026
4d77ba6
iommu/xen: register before xen-pciback binds its devices
azenla Oct 10, 2026
194fac0
automation: do not fail backport retries when nothing needs retrying
kaniini Oct 12, 2026
83dafb4
x86/xen: take the early CPU frequency from the hypervisor
azenla Aug 22, 2026
3068346
xen/xenbus: wake the boot device wait when a backend changes state
azenla Aug 22, 2026
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
The table of contents is too big for display.
Diff view
Diff view
  •  
  •  
  •  
11 changes: 11 additions & 0 deletions .automation/backport-skip
Original file line number Diff line number Diff line change
@@ -0,0 +1,11 @@
# Edera commits on edera/mainline that must never be backported to
# edera/6.18-lts, one subject per line, exactly as the commit has it.
#
# Each pull request merged into edera/mainline is backported on its own
# (.github/workflows/lts-backport.yml); label it no-backport to opt out. This
# file is for commits that did not arrive through such a pull request, or
# were ported to 6.18 in a form the subject match cannot see. A commit that
# is listed here, or belongs to a no-backport pull request, does not hold up
# later backports that touch the same files.
#
# Blank lines and lines starting with # are ignored.
206 changes: 206 additions & 0 deletions .automation/skills/mainline-backport/SKILL.md
Original file line number Diff line number Diff line change
@@ -0,0 +1,206 @@
---
name: mainline-backport
description: Backport of one merged edera/mainline pull request to edera/6.18-lts, run unattended in CI by .github/workflows/lts-backport.yml. Covers the cherry-picks, adapting a commit to the older kernel, spotting a dependency on another backport, build checks, and the report that becomes the backport pull request.
---

# Mainline pull request backport

Edera kernel work lands on `edera/mainline` first, one pull request at a time,
and every merged pull request is proposed for `edera/6.18-lts` as its own
backport pull request. You are preparing one of those. The workflow has
already worked out which of the pull request's commits the LTS tree still
lacks and hands you that list.

The goal is that each backport changes **exactly what its mainline commit
changes**. Where 6.18 differs from mainline enough that the same change does
not apply, you adapt it the way a careful stable maintainer would and you say
exactly what you did.

This runs unattended. Nobody is watching while you work, and nobody can answer
a question. Everything a reviewer needs has to end up in the report.

## What happens to your result

You cannot push, and nothing you write lands on `edera/6.18-lts`: a maintainer
merges the backport pull request, or does not. When you finish, the workflow
independently:

1. runs `verify-backport.sh`, which checks from git alone that your branch
fast-forwards the LTS tip, is linear, and holds one commit per requested
commit, in order, each naming its source with a `(cherry picked from
commit <sha>)` trailer, keeping its source's subject, and changing the
same files by the same +/- lines;
2. builds x86_64 and arm64 `vmlinux` with `kernel-build.sh`.

Both results go into the pull request next to your report. A commit you had
to adapt **will** show up as adapted there. That is expected, not a failure;
your report explains it. Never reword a subject, merge two commits into one,
or split one into two: backports are recognised later by subject, and a
renamed one would be offered again.

## Inputs

The workflow gives you, in the prompt:

- `MAINLINE_PR`: the number and title of the merged pull request.
- `OLD_TIP`: the `edera/6.18-lts` commit to build on (already checked out).
- `REQUEST`: a file listing the pull request's commits to backport, one per
line as `<sha> TAB <subject>`, oldest first. Their objects are already
fetched. Commits the LTS tree already has, and automation-only commits, are
not in it.
- `PENDING`: a file listing every Edera commit on `edera/mainline` that the
LTS tree lacks, in the same format, oldest first. The request's own commits
are among them. The workflow has already checked that nothing earlier in
this list touches the request's files; you look for the dependencies a file
match cannot see.
- `RESULT`: the local branch name your result must end up on.
- `REPORT`: the path your report must be written to.

The automation's own scripts are in `.rebase-tools/scripts/`, copied from the
commit this run started from. Use those, never the copy inside the tree.

### How to run commands here

Your shell commands are checked against an allowlist that matches the
command's first word. Shell variables, `$(...)`, `<(...)` and `VAR=x cmd`
prefixes will be refused, so `OLD_TIP`, `RESULT`, `<sha>` and `<...>` below
are placeholders: substitute the literal value. Put scratch files, worktrees
and build output under `.rebase-scratch/` in the repository root; the
kernel's `.gitignore` ignores it.

This is a blobless clone: file contents are fetched from GitHub the first time
a command needs them, so the first checkout or `git show` can be slow. That is
not a hang.

## 1. Read the request

```sh
cat REQUEST
cat PENDING
git show --stat <sha> # for each requested commit
```

For each commit, read its message and diff, and check what it depends on:
does it call a helper, use a struct field or a Kconfig symbol that 6.18
lacks? If so, where does that come from?

- From an earlier commit in the request: fine, it is backported first.
- From a commit in `PENDING` that is not in the request: this backport has to
**wait** for that one. Stop here; see "If it has to wait".
- From upstream (Linus' tree) only: see the next section.

## 2. Cherry-pick, in order

```sh
git switch -c RESULT OLD_TIP
git cherry-pick -x <sha> # one at a time, oldest first
```

`-x` is required: the trailer it adds is how the checker pairs your commit
with its source. If you have to amend, keep the trailer and the subject.

When a pick conflicts, or applies but would not build or behave the same on
6.18:

- Read what differs between the two kernels around the change, and adapt the
change so it does on 6.18 what it does on mainline. Prefer the smallest
adaptation; do not backport an unrelated upstream refactor to make the
patch apply.
- If the conflict is with Edera code that only a pending commit brings,
that is a dependency: **wait**, as above.
- If the commit depends on an upstream change 6.18 lacks and cannot be
adapted without it, do not pull that upstream change in. Leave the commit
out (`git cherry-pick --abort` for that one, then continue with the next)
and make it a **Needs a decision** item saying what it needs.
- If the commit does not apply to 6.18 at all (it fixes code only mainline
has), leave it out the same way and say so.
- If you cannot tell what the right adaptation is, make the most conservative
one you can defend, mark it **UNSURE** in the report, and explain both
readings.
- Never use `-X ours`, `-X theirs`, or `git checkout --ours/--theirs` on a
whole file to make a conflict go away.
- Never commit anything that is not a backport of a requested commit. If a
backport needs a 6.18-only fix to build, fold it into that backport and
report it as an adaptation.

## 3. Build

```sh
bash .rebase-tools/scripts/kernel-build.sh x86_64 .rebase-scratch/obj-x86 4
bash .rebase-tools/scripts/kernel-build.sh arm64 .rebase-scratch/obj-arm64 4
```

If a build fails because of a backport, fix it **in that backport**: drive the
todo list with sed, `git -c sequence.editor="sed -i 's/^pick <sha>/edit
<sha>/'" rebase -i OLD_TIP`, amend (keeping subject and trailer), then `git
rebase --continue`. Never rebase below OLD_TIP.

If a build fails on OLD_TIP too, it is not yours: build OLD_TIP the same way
in a `.rebase-scratch/` worktree to confirm, and report it as pre-existing.

## 4. Check yourself

```sh
bash .rebase-tools/scripts/verify-backport.sh OLD_TIP RESULT REQUEST
```

Every commit it lists as adapted or left out must be accounted for in your
report. If one is not, you changed something you did not mean to: find it and
undo it.

## 5. Report

Write the report to the `REPORT` path, in Markdown. Its **first line** is the
status, exactly one of:

- `Status: proposed` when the RESULT branch holds a backport for review;
- `Status: waiting` when it has to wait for another backport (no RESULT
branch);
- `Status: not-applicable` when none of the request applies to 6.18 (no
RESULT branch).

The rest becomes the pull request body (or the comment on the mainline pull
request when there is no branch), so lead with what a reviewer must decide.
No preamble, no sign-off.

```markdown
Status: proposed

## Summary
One paragraph: commits requested, backported unchanged, adapted, left out,
and whether you expect the checker to pass.

## Needs a decision
One bullet per question, each starting **UNSURE:**, with both readings and
what you committed. Every left-out commit is one. "None." if there is
nothing.

## Adapted commits
Per commit: subject, what differs on 6.18, what you changed and why. "None."
if none.

## Left out
Per commit: subject and why. "None." if none.

## Builds
x86_64, arm64: pass, fail (with the first error), or pre-existing failure
(confirmed on OLD_TIP).
```

Then stop. The workflow reads the branch, not the working tree.

## If it has to wait

Do not create the RESULT branch. Write the report with `Status: waiting`,
and under `## Waiting on` list each pending commit it needs, as `` `<sha>`
<subject> ``, with one line on what it needs from it. The workflow labels the
mainline pull request `backport-waiting` and tries again once other backports
land.

## If nothing applies, or you cannot finish

If none of the request applies to 6.18, do not create the RESULT branch and
write the report with `Status: not-applicable`, explaining why. If you could
not produce a backport for any other reason, do not create the branch either
and explain what went wrong; the first line is then whatever fits best, and
a missing branch is treated as needing a human either way.
Loading