Commit a55f7f5f authored Apr 09, 2026 by Linus Torvalds

Merge tag 'net-7.0-rc8' of git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net

Pull networking fixes from Paolo Abeni:
 "Including fixes from netfilter, IPsec and wireless. This is again
  considerably bigger than the old average. No known outstanding
  regressions.

  Current release - regressions:

   - net: increase IP_TUNNEL_RECURSION_LIMIT to 5

   - eth: ice: fix PTP timestamping broken by SyncE code on E825C

  Current release - new code bugs:

   - eth: stmmac: dwmac-motorcomm: fix eFUSE MAC address read failure

  Previous releases - regressions:

   - core: fix cross-cache free of KFENCE-allocated skb head

   - sched: act_csum: validate nested VLAN headers

   - rxrpc: fix call removal to use RCU safe deletion

   - xfrm:
      - wait for RCU readers during policy netns exit
      - fix refcount leak in xfrm_migrate_policy_find

   - wifi: rt2x00usb: fix devres lifetime

   - mptcp: fix slab-use-after-free in __inet_lookup_established

   - ipvs: fix NULL deref in ip_vs_add_service error path

   - eth:
      - airoha: fix memory leak in airoha_qdma_rx_process()
      - lan966x: fix use-after-free and leak in lan966x_fdma_reload()

  Previous releases - always broken:

   - ipv6: ioam: fix potential NULL dereferences in __ioam6_fill_trace_data()

   - ipv4: nexthop: avoid duplicate NHA_HW_STATS_ENABLE on nexthop group
     dump

   - bridge: guard local VLAN-0 FDB helpers against NULL vlan group

   - xsk: tailroom reservation and MTU validation

   - rxrpc:
      - fix to request an ack if window is limited
      - fix RESPONSE authenticator parser OOB read

   - netfilter: nft_ct: fix use-after-free in timeout object destroy

   - batman-adv: hold claim backbone gateways by reference

   - eth:
      - stmmac: fix PTP ref clock for Tegra234
      - idpf: fix PREEMPT_RT raw/bh spinlock nesting for async VC handling
      - ipa: fix GENERIC_CMD register field masks for IPA v5.0+"

* tag 'net-7.0-rc8' of git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net: (104 commits)
  net: lan966x: fix use-after-free and leak in lan966x_fdma_reload()
  net: lan966x: fix page pool leak in error paths
  net: lan966x: fix page_pool error handling in lan966x_fdma_rx_alloc_page_pool()
  nfc: pn533: allocate rx skb before consuming bytes
  l2tp: Drop large packets with UDP encap
  net: ipa: fix event ring index not programmed for IPA v5.0+
  net: ipa: fix GENERIC_CMD register field masks for IPA v5.0+
  MAINTAINERS: Add Prashanth as additional maintainer for amd-xgbe driver
  devlink: Fix incorrect skb socket family dumping
  af_unix: read UNIX_DIAG_VFS data under unix_state_lock
  Revert "mptcp: add needs_id for netlink appending addr"
  mptcp: fix slab-use-after-free in __inet_lookup_established
  net: txgbe: leave space for null terminators on property_entry
  net: ioam6: fix OOB and missing lock
  rxrpc: proc: size address buffers for %pISpc output
  rxrpc: only handle RESPONSE during service challenge
  rxrpc: Fix buffer overread in rxgk_do_verify_authenticator()
  rxrpc: Fix leak of rxgk context in rxgk_verify_response()
  rxrpc: Fix integer overflow in rxgk_verify_response()
  rxrpc: Fix missing error checks for rxkad encryption/decryption failure
  ...

parents 8b02520e b4afe3fa

Documentation/devicetree/bindings/net/nvidia,tegra234-mgbe.yaml

+2 −2

Original line number	Diff line number	Diff line
		@@ -42,7 +42,7 @@ properties:
		- const: mgbe
		- const: mac
		- const: mac-divider
		- const: ptp-ref
		- const: ptp_ref
		- const: rx-input-m
		- const: rx-input
		- const: tx
		@@ -133,7 +133,7 @@ examples:
		<&bpmp TEGRA234_CLK_MGBE0_RX_PCS_M>,
		<&bpmp TEGRA234_CLK_MGBE0_RX_PCS>,
		<&bpmp TEGRA234_CLK_MGBE0_TX_PCS>;
		clock-names = "mgbe", "mac", "mac-divider", "ptp-ref", "rx-input-m",
		clock-names = "mgbe", "mac", "mac-divider", "ptp_ref", "rx-input-m",
		"rx-input", "tx", "eee-pcs", "rx-pcs-input", "rx-pcs-m",
		"rx-pcs", "tx-pcs";
		resets = <&bpmp TEGRA234_RESET_MGBE0_MAC>,

MAINTAINERS

+3 −3

Original line number	Diff line number	Diff line
		@@ -1291,6 +1291,7 @@ F: include/uapi/drm/amdxdna_accel.h

		AMD XGBE DRIVER
		M: Raju Rangoju <Raju.Rangoju@amd.com>
		M: Prashanth Kumar K R <PrashanthKumar.K.R@amd.com>
		L: netdev@vger.kernel.org
		S: Maintained
		F: arch/arm64/boot/dts/amd/amd-seattle-xgbe*.dtsi
		@@ -21075,8 +21076,7 @@ F: include/uapi/linux/atmppp.h
		F: net/atm/pppoatm.c

		PPP OVER ETHERNET
		M: Michal Ostrowski <mostrows@earthlink.net>
		S: Maintained
		S: Orphan
		F: drivers/net/ppp/pppoe.c
		F: drivers/net/ppp/pppox.c

		@@ -22130,7 +22130,7 @@ S: Supported
		F: drivers/infiniband/sw/rdmavt

		RDS - RELIABLE DATAGRAM SOCKETS
		M: Allison Henderson <allison.henderson@oracle.com>
		M: Allison Henderson <achender@kernel.org>
		L: netdev@vger.kernel.org
		L: linux-rdma@vger.kernel.org
		L: rds-devel@oss.oracle.com (moderated for non-subscribers)

drivers/net/ethernet/airoha/airoha_eth.c

+1 −2

Original line number	Diff line number	Diff line
		@@ -697,9 +697,8 @@ static int airoha_qdma_rx_process(struct airoha_queue *q, int budget)
		if (q->skb) {
		dev_kfree_skb(q->skb);
		q->skb = NULL;
		} else {
		page_pool_put_full_page(q->page_pool, page, true);
		}
		page_pool_put_full_page(q->page_pool, page, true);
		}
		airoha_qdma_fill_rx_queue(q);

drivers/net/ethernet/altera/altera_tse_main.c

+1 −0

Original line number	Diff line number	Diff line
		@@ -570,6 +570,7 @@ static netdev_tx_t tse_start_xmit(struct sk_buff skb, struct net_device dev)
		DMA_TO_DEVICE);
		if (dma_mapping_error(priv->device, dma_addr)) {
		netdev_err(priv->dev, "%s: DMA mapping error\n", __func__);
		dev_kfree_skb_any(skb);
		ret = NETDEV_TX_OK;
		goto out;
		}

drivers/net/ethernet/freescale/Kconfig

+1 −1

Original line number	Diff line number	Diff line
		@@ -28,7 +28,7 @@ config FEC
		depends on PTP_1588_CLOCK_OPTIONAL
		select CRC32
		select PHYLIB
		select FIXED_PHY if M5272
		select FIXED_PHY
		select PAGE_POOL
		imply PAGE_POOL_STATS
		imply NET_SELFTESTS