[xdp-hints] Patch "veth: Introduce veth_xdp_buff wrapper for xdp_buff" has been added to the 6.1-stable tree

[<gregkh@linuxfoundation.org>]

This is a note to let you know that I've just added the patch titled

    veth: Introduce veth_xdp_buff wrapper for xdp_buff

to the 6.1-stable tree which can be found at:
    http://www.kernel.org/git/?p=linux/kernel/git/stable/stable-queue.git;a=summary

The filename of the patch is:
     veth-introduce-veth_xdp_buff-wrapper-for-xdp_buff.patch
and it can be found in the queue-6.1 subdirectory.

If you, or anyone else, feels it should not be added to the stable tree,
please let <stable@vger.kernel.org> know about it.


From stable+bounces-304469-greg=kroah.com@vger.kernel.org Wed Aug 19 16:57:22 2026
From: Sasha Levin <sashal@kernel.org>
Date: Wed, 19 Aug 2026 10:56:57 -0400
Subject: veth: Introduce veth_xdp_buff wrapper for xdp_buff
To: stable@vger.kernel.org
Cc: Stanislav Fomichev <sdf@google.com>, Martin KaFai Lau <martin.lau@linux.dev>, Jakub Kicinski <kuba@kernel.org>, Willem de Bruijn <willemb@google.com>, Jesper Dangaard Brouer <brouer@redhat.com>, Anatoly Burakov <anatoly.burakov@intel.com>, Alexander Lobakin <alexandr.lobakin@intel.com>, Magnus Karlsson <magnus.karlsson@gmail.com>, Maryam Tahhan <mtahhan@redhat.com>, xdp-hints@xdp-project.net, netdev@vger.kernel.org, Martin KaFai Lau <martin.lau@kernel.org>, Sasha Levin <sashal@kernel.org>
Message-ID: <20260819145658.3901994-1-sashal@kernel.org>

From: Stanislav Fomichev <sdf@google.com>

[ Upstream commit fefb695a745f10247fd68f5561e6e3d85e1d7b59 ]

No functional changes. Boilerplate to allow stuffing more data after xdp_buff.

Cc: Martin KaFai Lau <martin.lau@linux.dev>
Cc: Jakub Kicinski <kuba@kernel.org>
Cc: Willem de Bruijn <willemb@google.com>
Cc: Jesper Dangaard Brouer <brouer@redhat.com>
Cc: Anatoly Burakov <anatoly.burakov@intel.com>
Cc: Alexander Lobakin <alexandr.lobakin@intel.com>
Cc: Magnus Karlsson <magnus.karlsson@gmail.com>
Cc: Maryam Tahhan <mtahhan@redhat.com>
Cc: xdp-hints@xdp-project.net
Cc: netdev@vger.kernel.org
Signed-off-by: Stanislav Fomichev <sdf@google.com>
Link: https://lore.kernel.org/r/20230119221536.3349901-10-sdf@google.com
Signed-off-by: Martin KaFai Lau <martin.lau@kernel.org>
Stable-dep-of: cb6379feaaff ("veth: fix skb length accounting after XDP frag adjustment")
Signed-off-by: Sasha Levin <sashal@kernel.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
---
 drivers/net/veth.c |   56 +++++++++++++++++++++++++++++------------------------
 1 file changed, 31 insertions(+), 25 deletions(-)

--- a/drivers/net/veth.c
+++ b/drivers/net/veth.c
@@ -116,6 +116,10 @@ static struct {
 	{ "peer_ifindex" },
 };
 
+struct veth_xdp_buff {
+	struct xdp_buff xdp;
+};
+
 static int veth_get_link_ksettings(struct net_device *dev,
 				   struct ethtool_link_ksettings *cmd)
 {
@@ -586,23 +590,24 @@ static struct xdp_frame *veth_xdp_rcv_on
 	rcu_read_lock();
 	xdp_prog = rcu_dereference(rq->xdp_prog);
 	if (likely(xdp_prog)) {
-		struct xdp_buff xdp;
+		struct veth_xdp_buff vxbuf;
+		struct xdp_buff *xdp = &vxbuf.xdp;
 		u32 act;
 
-		xdp_convert_frame_to_buff(frame, &xdp);
-		xdp.rxq = &rq->xdp_rxq;
+		xdp_convert_frame_to_buff(frame, xdp);
+		xdp->rxq = &rq->xdp_rxq;
 
-		act = bpf_prog_run_xdp(xdp_prog, &xdp);
+		act = bpf_prog_run_xdp(xdp_prog, xdp);
 
 		switch (act) {
 		case XDP_PASS:
-			if (xdp_update_frame_from_buff(&xdp, frame))
+			if (xdp_update_frame_from_buff(xdp, frame))
 				goto err_xdp;
 			break;
 		case XDP_TX:
 			orig_frame = *frame;
-			xdp.rxq->mem = frame->mem;
-			if (unlikely(veth_xdp_tx(rq, &xdp, bq) < 0)) {
+			xdp->rxq->mem = frame->mem;
+			if (unlikely(veth_xdp_tx(rq, xdp, bq) < 0)) {
 				trace_xdp_exception(rq->dev, xdp_prog, act);
 				frame = &orig_frame;
 				stats->rx_drops++;
@@ -613,8 +618,8 @@ static struct xdp_frame *veth_xdp_rcv_on
 			goto xdp_xmit;
 		case XDP_REDIRECT:
 			orig_frame = *frame;
-			xdp.rxq->mem = frame->mem;
-			if (xdp_do_redirect(rq->dev, &xdp, xdp_prog)) {
+			xdp->rxq->mem = frame->mem;
+			if (xdp_do_redirect(rq->dev, xdp, xdp_prog)) {
 				frame = &orig_frame;
 				stats->rx_drops++;
 				goto err_xdp;
@@ -793,7 +798,8 @@ static struct sk_buff *veth_xdp_rcv_skb(
 {
 	void *orig_data, *orig_data_end;
 	struct bpf_prog *xdp_prog;
-	struct xdp_buff xdp;
+	struct veth_xdp_buff vxbuf;
+	struct xdp_buff *xdp = &vxbuf.xdp;
 	u32 act, metalen;
 	int off;
 
@@ -807,22 +813,22 @@ static struct sk_buff *veth_xdp_rcv_skb(
 	}
 
 	__skb_push(skb, skb->data - skb_mac_header(skb));
-	if (veth_convert_skb_to_xdp_buff(rq, &xdp, &skb))
+	if (veth_convert_skb_to_xdp_buff(rq, xdp, &skb))
 		goto drop;
 
-	orig_data = xdp.data;
-	orig_data_end = xdp.data_end;
+	orig_data = xdp->data;
+	orig_data_end = xdp->data_end;
 
-	act = bpf_prog_run_xdp(xdp_prog, &xdp);
+	act = bpf_prog_run_xdp(xdp_prog, xdp);
 
 	switch (act) {
 	case XDP_PASS:
 		break;
 	case XDP_TX:
-		veth_xdp_get(&xdp);
+		veth_xdp_get(xdp);
 		consume_skb(skb);
-		xdp.rxq->mem = rq->xdp_mem;
-		if (unlikely(veth_xdp_tx(rq, &xdp, bq) < 0)) {
+		xdp->rxq->mem = rq->xdp_mem;
+		if (unlikely(veth_xdp_tx(rq, xdp, bq) < 0)) {
 			trace_xdp_exception(rq->dev, xdp_prog, act);
 			stats->rx_drops++;
 			goto err_xdp;
@@ -831,10 +837,10 @@ static struct sk_buff *veth_xdp_rcv_skb(
 		rcu_read_unlock();
 		goto xdp_xmit;
 	case XDP_REDIRECT:
-		veth_xdp_get(&xdp);
+		veth_xdp_get(xdp);
 		consume_skb(skb);
-		xdp.rxq->mem = rq->xdp_mem;
-		if (xdp_do_redirect(rq->dev, &xdp, xdp_prog)) {
+		xdp->rxq->mem = rq->xdp_mem;
+		if (xdp_do_redirect(rq->dev, xdp, xdp_prog)) {
 			stats->rx_drops++;
 			goto err_xdp;
 		}
@@ -854,7 +860,7 @@ static struct sk_buff *veth_xdp_rcv_skb(
 	rcu_read_unlock();
 
 	/* check if bpf_xdp_adjust_head was used */
-	off = orig_data - xdp.data;
+	off = orig_data - xdp->data;
 	if (off > 0)
 		__skb_push(skb, off);
 	else if (off < 0)
@@ -863,21 +869,21 @@ static struct sk_buff *veth_xdp_rcv_skb(
 	skb_reset_mac_header(skb);
 
 	/* check if bpf_xdp_adjust_tail was used */
-	off = xdp.data_end - orig_data_end;
+	off = xdp->data_end - orig_data_end;
 	if (off != 0)
 		__skb_put(skb, off); /* positive on grow, negative on shrink */
 
 	/* XDP frag metadata (e.g. nr_frags) are updated in eBPF helpers
 	 * (e.g. bpf_xdp_adjust_tail), we need to update data_len here.
 	 */
-	if (xdp_buff_has_frags(&xdp))
+	if (xdp_buff_has_frags(xdp))
 		skb->data_len = skb_shinfo(skb)->xdp_frags_size;
 	else
 		skb->data_len = 0;
 
 	skb->protocol = eth_type_trans(skb, rq->dev);
 
-	metalen = xdp.data - xdp.data_meta;
+	metalen = xdp->data - xdp->data_meta;
 	if (metalen)
 		skb_metadata_set(skb, metalen);
 out:
@@ -890,7 +896,7 @@ xdp_drop:
 	return NULL;
 err_xdp:
 	rcu_read_unlock();
-	xdp_return_buff(&xdp);
+	xdp_return_buff(xdp);
 xdp_xmit:
 	return NULL;
 }


Patches currently in stable-queue which might be from sashal@kernel.org are

queue-6.1/udmabuf-do-not-create-malformed-scatterlists.patch
queue-6.1/treewide-rename-pinctrl_gpio_direction_input_new.patch
queue-6.1/dma-buf-udmabuf-skip-redundant-cpu-sync-to-fix-cacheline-eexist-warning.patch
queue-6.1/wifi-brcmfmac-set-f2-blocksize-to-256-for-bcm43752.patch
queue-6.1/usb-gadget-f_tcm-synchronize-delayed-set_alt-with-teardown.patch
queue-6.1/input-mms114-reject-an-oversized-device-packet-size.patch
queue-6.1/iommu-amd-don-t-split-flush-for-amd_iommu_domain_flush_all.patch
queue-6.1/dm-fix-trailing-statements.patch
queue-6.1/fbcon-rename-struct-fbcon_ops-to-struct-fbcon_par.patch
queue-6.1/usb-typec-ucsi-fix-race-condition-and-ordering-in-port-unregistration.patch
queue-6.1/fpga-dfl-afu-validate-dma-mapping-length-in-afu_dma_map_region.patch
queue-6.1/mm-mm_init-fix-uninitialized-struct-pages-for-zone_device.patch
queue-6.1/netfilter-nft_set_pipapo-move-cloning-of-match-info-to-insert-removal-path.patch
queue-6.1/smb-server-fix-minimum-smb1-pdu-size.patch
queue-6.1/smb-server-rename-include-guard-in-smb_common.h.patch
queue-6.1/vduse-remove-unused-vaddr-parameter-of-vduse_domain_free_coherent.patch
queue-6.1/netfilter-nf_tables-remove-unused-nft_reduce_is_readonly.patch
queue-6.1/erofs-cap-lzma-stream-pool-size.patch
queue-6.1/net-sched-serialize-qdisc_rtab_list-against-concurrent-get-put.patch
queue-6.1/bootconfig-fix-null-pointer-arithmetic-in-xbc_snprint_cmdline.patch
queue-6.1/alsa-hda-codecs-hdmi-disable-keep-alive-before-audio-format-change.patch
queue-6.1/octeontx2-annotate-mmio-regions-as-__iomem.patch
queue-6.1/siw-inline-do_tcp_sendpages.patch
queue-6.1/netfilter-conntrack-sctp-use-nf-log-infrastructure-for-invalid-packets.patch
queue-6.1/erofs-maintain-cookies-of-share-domain-in-self-contained-list.patch
queue-6.1/kvm-s390-pci-fix-resource-leak-on-irq-registration-f.patch
queue-6.1/net-gro-fix-double-aggregation-of-flush-marked-skbs.patch
queue-6.1/net-mana-validate-the-packet-length-reported-by-the-nic.patch
queue-6.1/netfilter-nft_set_pipapo-move-prove_locking-helper-around.patch
queue-6.1/mlxsw-fix-refcount-leak-in-mlxsw_sp_port_lag_join.patch
queue-6.1/mptcp-pm-avoid-code-duplication-to-lookup-endp.patch
queue-6.1/super-fix-emergency-thaw-deadlock-on-frozen-block-devices.patch
queue-6.1/s390-cpum_cf-merge-source-files-for-cpu-measurement-counter-facility.patch
queue-6.1/octeontx2-af-cn10k-restrict-vf-lmtline-sharing-to-its-own-pf.patch
queue-6.1/ksmbd-restore-dacl-size-on-check_add_overflow-to-avoid-malformed-acl.patch
queue-6.1/mm-move-most-of-core-mm-initialization-to-mm-mm_init.c.patch
queue-6.1/overflow-change-define_flex-to-take-__counted_by-member.patch
queue-6.1/veth-introduce-veth_xdp_buff-wrapper-for-xdp_buff.patch
queue-6.1/mptcp-pm-use-addr-entry-for-get_local_id.patch
queue-6.1/mmc-vub300-fix-use-after-free-on-probe-failure.patch
queue-6.1/openvswitch-move-key-and-ovs_cb-update-out-of-handle_fragments.patch
queue-6.1/ipvs-separate-destination-availability-state.patch
queue-6.1/net-pktgen-fix-code-style-warning-block-comments.patch
queue-6.1/libceph-add-doutc-and-_client-debug-macros-support.patch
queue-6.1/ata-libata-core-reject-an-invalid-concurrent-positioning-ranges-count.patch
queue-6.1/bootconfig-move-xbc_snprint_cmdline-to-lib-bootconfig.c.patch
queue-6.1/taskstats-retain-dead-thread-stats-in-tgid-queries.patch
queue-6.1/fs-ntfs3-undo-critial-modificatins-to-keep-directory-consistency.patch
queue-6.1/mm-vmemmap-devdax-fix-kernel-crash-when-probing-devdax-devices.patch
queue-6.1/usb-musb-omap2430-clean-up-probe-error-handling.patch
queue-6.1/netfilter-nf_conntrack-defer-invalid-log-until-after-unlock.patch
queue-6.1/dm-add-missing-empty-lines.patch
queue-6.1/ksmbd-rename-smb2_get_msg-to-smb_get_msg.patch
queue-6.1/net-ipa-fix-smem-state-handle-leaks-in-smp2p-init.patch
queue-6.1/vfio-pci-fix-racy-bitfields-and-tighten-struct-layout.patch
queue-6.1/octeontx2-pf-clear-stale-mailbox-irq-state-before-request_irq.patch
queue-6.1/ceph-pass-the-mdsc-to-several-helpers.patch
queue-6.1/drm-amdgpu-move-debug_vm-handling-to-amdgpu_cs_parser_fini.patch
queue-6.1/mm-vmalloc-acquire-init_mm-lock-on-huge-vmap-to-avoid-ptdump-uaf.patch
queue-6.1/ice-fix-vf-interrupts-cleanup.patch
queue-6.1/fbcon-use-correct-type-for-vc_resize-return-value.patch
queue-6.1/bluetooth-hci_sync-fix-advertising-data-uafs.patch
queue-6.1/netfilter-nf_conntrack_sip-remove-net-variable-shadowing.patch
queue-6.1/netfilter-nf_tables-pass-context-structure-to-nft_parse_register_load.patch
queue-6.1/ksmbd-conn-lock-to-serialize-smb2-negotiate.patch
queue-6.1/can-gs_usb-gs_usb_receive_bulk_callback-resubmit-urb-on-skb-allocation-failure.patch
queue-6.1/remoteproc-qcom-pas-adjust-the-phys-addr-wrt-the-mem-region.patch
queue-6.1/bluetooth-mgmt-fix-uaf-in-pair-command-cancellation.patch
queue-6.1/wifi-ath6kl-fix-use-after-free-in-aggr_reset_state.patch
queue-6.1/asoc-mediatek-use-common-mtk_afe_pcm_platform-with-common-probe-cb.patch
queue-6.1/wifi-brcmfmac-fix-43752-sdio-fwvid-incorrectly-labelled-as-cypress-cyw.patch
queue-6.1/can-rcar_canfd-change-the-initializing-flow-for-clocks-and-resets.patch
queue-6.1/vduse-avoid-leaking-information-to-userspace.patch
queue-6.1/asoc-mediatek-mt8192-check-runtime-resume-during-probe.patch
queue-6.1/tipc-restrict-socket-queue-dumps-in-enqueue-tracepoints.patch
queue-6.1/ceph-avoid-fs-reclaim-while-using-current-journal_info.patch
queue-6.1/drm-i915-hdcp-move-to-using-intel_display-in-intel_hdcp.patch
queue-6.1/usb-typec-ucsi-split-connector-lock-classes.patch
queue-6.1/f2fs-fix-uaf-issue-in-f2fs_merge_page_bio.patch
queue-6.1/drm-i915-hdcp-require-monotonically-increasing-seq_num_v.patch
queue-6.1/pmdomain-imx-fix-i.mx8mp-power-notifier.patch
queue-6.1/mmc-vub300-fix-use-after-free-on-disconnect.patch
queue-6.1/mtd-maps-vmu-flash-fix-fault-in-unaligned-fixup.patch
queue-6.1/ceph-fix-hanging-__ceph_get_caps-with-stale-mds_wanted.patch
queue-6.1/remoteproc-qcom-fix-leak-when-custom-dump_segments-addition-fails.patch
queue-6.1/libceph-amend-checking-to-fix-make-w-1-build-breakage.patch
queue-6.1/dm-crypt-correct-foo-to-foo.patch
queue-6.1/libceph-bound-pg_-temp-upmap-upmap_items-length-to-ceph_pg_max_size.patch
queue-6.1/selinux-avoid-sk_socket-dereference-in-selinux_sctp_bind_connect.patch
queue-6.1/drm-amd-pm-fix-torn-gpu-metrics-reads.patch
queue-6.1/mptcp-pm-userspace-fix-use-after-free-in-get_local_id.patch
queue-6.1/bluetooth-hci_conn-hci_sync-use-__counted_by-to-avoid-wfamnae-warnings.patch
queue-6.1/drm-bridge-cdns-dsi-replace-deprecated-universal_dev_pm_ops.patch
queue-6.1/net-sched-act_ct-fix-sk_buff-leak-when-the-header-checks-reject-a-packet.patch
queue-6.1/kvm-introduce-vcpu-wants_to_run.patch
queue-6.1/drm-i915-hdcp-check-streams-bounds-before-overflow.patch
queue-6.1/dm-remove-unnecessary-braces-from-single-statement-blocks.patch
queue-6.1/tcp_bpf-inline-do_tcp_sendpages-as-it-s-now-a-wrapper-around-tcp_sendmsg.patch
queue-6.1/bluetooth-remove-usage-of-the-deprecated-ida_simple_xx-api.patch
queue-6.1/vduse-take-out-allocations-from-vduse_dev_alloc_coherent.patch
queue-6.1/can-rcar_canfd-use-devm_clk_get_optional-for-ram-clk.patch
queue-6.1/lsm-infrastructure-management-of-the-sock-security.patch
queue-6.1/remoteproc-qcom-replace-kstrdup-with-kstrndup.patch
queue-6.1/can-rcar_canfd-extract-rcar_canfd_global_-de-init.patch
queue-6.1/i2c-bcm-iproc-remove-printout-on-handled-timeouts.patch
queue-6.1/audit-use-unsigned-int-instead-of-unsigned.patch
queue-6.1/wifi-brcmfmac-drain-bus_reset-work-on-device-removal.patch
queue-6.1/i2c-davinci-unregister-cpufreq-notifier-on-probe-failure.patch
queue-6.1/bootconfig-do-not-put-quotes-on-cmdline-items-unless-necessary.patch
queue-6.1/ice-fix-memory-leak-in-ice_lbtest_prepare_rings.patch
queue-6.1/mptcp-add-mptcp_userspace_pm_lookup_addr-helper.patch
queue-6.1/i2c-imx-separate-atomic-dma-and-non-dma-use-case.patch
queue-6.1/locking-rt-fix-the-incorrect-rcu-protection-in-rt_spin_unlock.patch
queue-6.1/drm-displayid-fix-tiled-display-topology-id-size.patch
queue-6.1/netfilter-nft_set_pipapo-merge-deactivate-helper-into-caller.patch
queue-6.1/dm-integrity-don-t-increment-hash_offset-twice.patch
queue-6.1/fs-don-t-block-write-during-exec-on-pre-content-watched-files.patch
queue-6.1/vfs-audit-introduce-kern_path_parent-for-audit.patch
queue-6.1/bpf-fork-wipe-bpf_storage-before-bailouts-that-access-it.patch
queue-6.1/audit-fix-recursive-locking-deadlock-in-audit_dupe_exe.patch
queue-6.1/asoc-fsl_sai-fix-spurious-bclk-on-resume-by-clearing-byp.patch
queue-6.1/binfmt_misc-restore-write-access-when-removing-an-entry.patch
queue-6.1/drm-tegra-fbdev-remove-offset-into-framebuffer-memory.patch
queue-6.1/openvswitch-use-skb_ip_totlen-in-conntrack.patch
queue-6.1/rxrpc-serialize-kernel-accept-preallocation-with-socket-teardown.patch
queue-6.1/mei-bus-access-mei_device-under-device_lock-on-cleanup.patch
queue-6.1/usb-musb-omap2430-do-not-put-borrowed-of_node-in-probe.patch
queue-6.1/block-stop-the-timeout-timer-when-releasing-a-never-.patch
queue-6.1/s390-cpum_cf-move-stccm_avail.patch
queue-6.1/9p-skip-nlink-update-in-cacheless-mode-to-fix-warn_on.patch
queue-6.1/veth-fix-skb-length-accounting-after-xdp-frag-adjustment.patch
queue-6.1/netfilter-nf_tables-drop-unused-3rd-argument-from-validate-callback-ops.patch
queue-6.1/mmc-vub300-rename-probe-error-labels.patch
queue-6.1/kvm-x86-only-reset-tsc-deadline-timer-in-apic_timer_expired-on-kvm_run.patch
queue-6.1/usb-typec-ucsi-only-enable-supported-notifications.patch
queue-6.1/netfilter-nft_set_pipapo-use-gfp_kernel-for-insertions.patch
queue-6.1/tracing-rename-kvfree_rcu-to-kvfree_rcu_mightsleep.patch
queue-6.1/mm-migrate_device-page_remove_rmap-folio_remove_rmap_pte.patch
queue-6.1/ksmbd-fix-sid-memory-leak-in-set_posix_acl_entries_dacl-on-overflow.patch
queue-6.1/drm-i915-vrr-check-has_vrr-first-in-intel_vrr_is_capable.patch
queue-6.1/mm-do-file-ownership-checks-with-the-proper-mount-idmap.patch
queue-6.1/i2c-iproc-reset-bus-after-timeout-if-start_busy-is-stuck.patch
queue-6.1/bluetooth-hci_sync-introduce-hci_cmd_sync_run-hci_cmd_sync_run_once.patch
queue-6.1/vduse-use-fixed-4kb-bounce-pages-for-non-4kb-page-size.patch
queue-6.1/alsa-hda-fix-cached-processing-coefficient-verbs.patch
queue-6.1/net-ip6_tunnel-require-cap_net_admin-in-the-device-netns-for-changelink.patch
queue-6.1/dm-verity-make-error-counter-atomic.patch
queue-6.1/alsa-hda-conexant-remove-mic-bias-threshold-override.patch
queue-6.1/bluetooth-mgmt-protect-mgmt_pending-list-with-its-own-lock.patch
queue-6.1/media-i2c-imx219-correct-the-minimum-vblanking-value.patch
queue-6.1/fsnotify-opt-in-for-permission-events-at-file-open-time.patch
queue-6.1/ksmbd-validate-minimum-pdu-size-for-transform-requests.patch
queue-6.1/kvm-s390-pci-fix-memory-accounting-for-pinned-unpinn.patch
queue-6.1/net-sched-sch_taprio-replace-direct-dequeue-call-with-peek-and-qdisc_dequeue_peeked.patch
queue-6.1/i2c-imx-fix-locked-bus-on-smbus-block-read-of-0-atomic.patch
queue-6.1/wifi-libertas_tf-fix-use-after-free-in-lbtf_free_adapter.patch
queue-6.1/bluetooth-mgmt-remove-unused-mgmt_pending_find_data.patch
queue-6.1/netfilter-nft_set_pipapo-don-t-leak-bad-clone-into-future-transaction.patch
queue-6.1/input-mms114-fix-touch-indexing-for-mms134s-and-mms136.patch
queue-6.1/smb-server-fix-minimum-smb2-pdu-size.patch
queue-6.1/mlxsw-spectrum-on-port-enslavement-to-a-lag-join-upper-s-bridges.patch
queue-6.1/firmware_loader-introduce-__free-cleanup-hanler.patch
queue-6.1/ksmbd-validate-num_subauth-when-copying-ace-in-set_ntacl_dacl.patch
queue-6.1/netfilter-nf_conntrack_sip-validate-skb_dst-before-accessing-it.patch
queue-6.1/espintcp-inline-do_tcp_sendpages.patch
queue-6.1/s390-perf_cpum_cf-add-missing-array_index_nospec-to-__hw_perf_event_init.patch
queue-6.1/asoc-mediatek-mt8183-check-runtime-resume-during-probe.patch
queue-6.1/dm-verity-avoid-double-increment-of-use_bh_wq_enabled.patch
queue-6.1/net-sched-use-skb_ip_totlen-and-iph_totlen.patch
queue-6.1/ceph-rename-_to_client-to-_to_fs_client.patch
queue-6.1/octeontx2-vf-clear-stale-mailbox-irq-state-before-request_irq.patch
queue-6.1/net-thunderbolt-fix-frags-overflow-by-bounding-frame_count.patch
queue-6.1/netfilter-nft_set_pipapo-make-pipapo_clone-helper-return-null.patch
queue-6.1/net-pktgen-fix-proc-entry-use-after-free.patch
queue-6.1/ntfs3-validate-split-point-offset-in-indx_insert_into_buffer.patch
queue-6.1/espintcp-use-sk_msg_free_partial-to-fix-partial-send.patch
queue-6.1/mm-migrate_device-fix-pte_pfn-pte_dirty-called-on-non-present-pte.patch
queue-6.1/netfilter-bitwise-rename-some-boolean-operation-functions.patch
queue-6.1/igc-remove-napi_synchronize-in-igc_down.patch
queue-6.1/fscrypt-use-the-mount-idmap-for-the-owner-check-in-f.patch
queue-6.1/input-ims-pcu-fix-firmware-leak-in-async-update.patch
queue-6.1/bluetooth-hci_core-fix-not-handling-hdev-le_num_of_adv_sets-1.patch
queue-6.1/kernel-user-allow-user_struct-locked_vm-to-be-usable.patch
queue-6.1/media-i2c-imx219-drop-imx219_vts_-macros.patch
queue-6.1/s390-cpum_cf-move-cpum_cf_ctrset_size.patch
queue-6.1/net-sched-taprio-avoid-calling-child-ops-dequeue-child-twice.patch
queue-6.1/erofs-tidy-up-internal.h.patch
queue-6.1/can-rcar_canfd-invert-reset-assert-order.patch
queue-6.1/octeontx2-pf-fix-sqb-pointer-leak-on-init-failure.patch
queue-6.1/ipmi-fix-refcount-leak-in-i_ipmi_request.patch
queue-6.1/ksmbd-reject-repeated-smb2-negotiate-requests.patch
queue-6.1/kvm-s390-pci-fix-missing-error-codes-and-memory-unac.patch
queue-6.1/tracing-osnoise-call-synchronize_rcu-when-unregistering.patch
queue-6.1/media-i2c-imx219-rename-vts-to-frm_length.patch
queue-6.1/mm-vmstat-fold-stranded-per-cpu-node-stats-when-a-node-comes-online.patch
queue-6.1/veth-convert-frag_list-skbs-before-running-xdp.patch
queue-6.1/remoteproc-qcom-fix-sparse-warnings.patch
queue-6.1/gpio-tegra-do-not-call-pinctrl-for-gpio-direction.patch
queue-6.1/libceph-fix-two-unsafe-bare-decodes-in-decode_lockers.patch
queue-6.1/netfilter-nft_objref-validate-objref-and-objrefmap-expressions.patch
queue-6.1/net-sched-act_ct-preserve-tc_skb_cb-across-defragmentation.patch
queue-6.1/media-imx219-fix-maximum-frame-length-in-lines.patch
queue-6.1/kvm-svm-serialize-accesses-to-the-owner-and-mirror-list-with-separate-lock.patch
queue-6.1/serial-max310x-replace-bare-use-of-unsigned-with-unsigned-int-checkpatch.patch
queue-6.1/drm-i915-vrr-require-valid-min-max-vfreq-for-vrr.patch
queue-6.1/audit-widen-ino-fields-to-u64.patch
queue-6.1/net-macb-drop-in-flight-tx-skbs-on-close.patch
queue-6.1/drm-amdgpu-respect-placement-requirements-in-amdgpu_gtt_mgr-functions.patch
queue-6.1/asoc-mediatek-mt8192-afe-pcm-simplify-probe-with-local-dev-variable.patch
queue-6.1/bpf-reject-bpf_map_type_inode_storage-creation-if-bpf-lsm-is-uninitialized.patch
queue-6.1/ovl-use-linked-upper-dentry-in-copy-up-tmpfile.patch
queue-6.1/bluetooth-hci-remove-hci_amp-support.patch
queue-6.1/netfilter-nft_set_pipapo-prepare-pipapo_get-helper-for-on-demand-clone.patch
queue-6.1/tcp_bpf-smc-tls-espintcp-siw-reduce-msg_sendpage_notlast-usage.patch
queue-6.1/netfilter-nft_set_pipapo-prepare-walk-function-for-on-demand-clone.patch
queue-6.1/taskstats-fill_stats_for_tgid-use-for_each_thread.patch
queue-6.1/thunderbolt-prevent-xdomain-delayed-work-use-after-free-on-disconnect.patch
queue-6.1/asoc-mediatek-mt8192-afe-pcm-simplify-with-dev_err_probe.patch
queue-6.1/asoc-mediatek-mt8192-afe-pcm-convert-to-devm_pm_runtime_enable.patch
queue-6.1/fs-resctrl-fix-double-add-of-pseudo-locked-region-s-rmid-to-free-list.patch
queue-6.1/s390-cpum_cf-remove-in-kernel-counting-facility-interface.patch
queue-6.1/asoc-sof-ipc3-control-fix-heap-overflow-in-bytes_ext-put-get.patch
queue-6.1/drm-amd-pm-fix-pptable-use-after-free.patch
queue-6.1/net-move-skb_gro_receive_list-from-udp-to-core.patch
queue-6.1/kvm-s390-pci-fix-aisb-calculation.patch
queue-6.1/serial-max310x-implement-gpio_chip-get_direction.patch
queue-6.1/sctp-avoid-auth_enable-sysctl-uaf-during-netns-teardown.patch
queue-6.1/bluetooth-mgmt-fix-not-generating-command-complete-for-mgmt_op_disconnect.patch
queue-6.1/gpio-mt7621-avoid-corruption-of-shared-interrupt-trigger-state.patch