Linux 7.1-rc4: security list "almost unmanageable" from AI bug reports

From: Linus Torvalds

To: Linux Kernel Mailing List

Subject: Linux 7.1-rc4

Date: Sun, 17 May 2026 14:29:22 -0700

Message-ID:

Archive-link: Article

You all know the drill by now - another week, another release candidate.

Things continue to look fairly normal (where "normal" is the "new normal" with a fair amount of changes). Drivers are about half the patch, with GPU leading the way as is tradition. But there's a little bit of everything in driver land.

The rest is mostly networking, core kernel, filesystems, and arch updates.

Some of the documentation updates might be worth highlighting: the continued flood of AI reports has basically made the security list almost entirely unmanageable, with enormous duplication due to different people finding the same things with the same tools. People spend all their time just forwarding things to the right people or saying "that was already fixed a week/month ago" and pointing to the public discussion.

Which is all entirely pointless churn, and we're making it clear that AI detected bugs are pretty much by definition not secret, and treating them on some private list is a waste of time for everybody involved - and only makes that duplication worse because the reporters can't even see each other's reports.

AI tools are great, but only if they actually help, rather than cause unnecessary pain and pointless make-believe work. Feel free to use them, but use them in a way that is productive and makes for a better experience.

The documentation may be a bit less blunt than I am, but that's the core gist of it. So just to make it really clear: if you found a bug using AI tools, the chances are somebody else found it too. If you actually want to add value, read the documentation, create a patch too, and add some real value on *top* of what the AI did. Don't be the drive-by "send a random report with no real understanding" kind of person. Ok?

Linus

---

Aaron Sacks (1): KVM: Reject wrapped offset in kvm_reset_dirty_gfn()

Aboorva Devarajan (1): powerpc/hv-gpci: fix preempt count leak in sysfs show paths

Adrien Burnett (1): ALSA: hda/realtek: Add mute LED quirk for HP Pavilion Laptop 16-ag0xxx

Alain Michaud (1): HID: logitech-hidpp: Add support for newer Bluetooth keyboards

AlanCui4080 (1): Revert "nvme: add quirk NVME_QUIRK_IGNORE_DEV_SUBNQN for 144d:a808"

Alex Williamson (1): vfio/pci: fix dma-buf kref underflow after revoke

Alexandru Elisei (1): KVM: arm64: Handle permission faults with guest_memfd

Alice Ryhl (1): genetlink: free the skb on 'group >= family->n_mcgrps'

Allison Henderson (1): net/rds: reset op_nents when zerocopy page pin fails

Ally Heev (1): powerpc: 82xx: fix uninitialized pointers with free attribute

Andrea Righi (4): selftests/sched_ext: Fix build error in dequeue selftest sched_ext: Fix ops->priv clobber on concurrent attach/detach sched_ext: Clear ops->priv on scx_alloc_and_add_sched() error paths sched_ext: Use HK_TYPE_DOMAIN_BOOT to detect isolcpus= domain isolation

Andy Shevchenko (1): ALSA: hda/cs35l56: Drop malformed default N from Kconfig

Arnd Bergmann (1): ring-buffer remote: Avoid unexpected symbol warnings (arm, s390)

Arthur Kiyanovski (2): net: ena: PHC: Fix potential use-after-free in get_timestamp net: ena: PHC: Check return code before setting timestamp output

Arvind Yadav (1): drm/xe/madvise: Track purgeability with BO-local counters

Avi Radinsky (1): Documentation: riscv: cmodx: fix typos

Ayaan Mirza Baig (2): platform/x86: samsung-galaxybook: Refactor camera lens cover input device platform/x86: samsung-galaxybook: Handle ACPI hotkey notifications

Bart Van Assche (2): ice: fix locking in ice_dcb_rebuild() powerpc/powermac: Remove pmac_low_i2c_{lock,unlock}()

Ben Horgan (3): arm_mpam: Fix monitor instance selection when checking for hardware NRDY arm_mpam: Pretend that NRDY is always hardware managed arm_mpam: Improve check for whether or not NRDY is hardware managed

Ben Morris (1): sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL

Benjamin Tissoires (2): HID: pass the buffer size to hid_report_raw_event HID: core: introduce hid_safe_input_report()

Borislav Petkov (AMD) (1): x86/mce: Restore MCA polling interval halving

Breno Leitao (2): workqueue: Release PENDING in __queue_work() drain/destroy reject path workqueue: Fix wq->cpu_pwq leak in alloc_and_link_pwqs() WQ_UNBOUND path

Calvin Owens (1): btrfs: always pass __GFP_NOWARN from add_ra_bio_pages()

Carlos López (1): virt: sev-guest: Do not use host-controlled page order in cleanup path

Casey Chen (1): block: recompute nr_integrity_segments in blk_insert_cloned_request

Chaitanya Kumar Borah (1): drm/i915/dp: Fix VSC dynamic range signaling for RGB formats

Chen Wandun (1): cgroup/cpuset: move PF_EXITING check before __GFP_HARDWALL in cpuset_current_node_allowed()

Chen-Shi-Hong (1): docs: hwmon: sy7636a: fix temperature sysfs attribute name

Chenguang Zhao (1): ethtool: fix ethnl_bitmap32_not_zero() bit interval semantics

Chia-Lin Kao (AceLan) (1): nvme-pci: fix use-after-free in nvme_free_host_mem()

Christian König (4): drm/amdgpu: remove deadlocks from amdgpu_userq_pre_reset drm/amdgpu: rework amdgpu_userq_signal_ioctl v3 drm/amdgpu: remove almost all calls to amdgpu_userq_detect_and_reset_queues drm/amdgpu: fix userq hang detection and reset

Christoph Hellwig (3): xfs: fix the "limiting open zones" message block: pass a minsize argument to bio_iov_iter_bounce block: align down bounces bios

Chuck Lever (1): NFSD: Fix infinite loop in layout state revocation

Cássio Gabriel (3): ALSA: usb-audio: Bound MIDI endpoint descriptor scans ALSA: usb-audio: Bound MIDI 2.0 endpoint descriptor scans ALSA: usb-audio: qcom: Check offload mapping failures

DaeMyung Kang (1): cifs: client: stage smb3_reconfigure() updates and restore ctx on failure

Damien Dejean (1): HID: elan: Add support for ELAN SB974D touchpad

Damien Le Moal (1): block: fix handling of dead zone write plugs

Dan Carpenter (1): HID: intel-thc-hid: Intel-quickspi: Fix some error codes

Daniel Schaefer (1): ALSA: hda/realtek: fix mic boost on Framework PTL

David Carlier (5): mm/memfd_luo: report error when restoring a folio fails mid-loop mm/memfd_luo: reject memfds whose page count exceeds UINT_MAX mm/memfd_luo: document preservation of file seals block: don't overwrite bip_vcnt in bio_integrity_copy_user() net: ethtool: phy: avoid NULL deref when PHY driver is unbound

David Gow (2): kunit: config: Enable KUNIT_DEBUGFS by default kunit: config: KUNIT_DEBUGFS should depend on DEBUG_FS

David Howells (1): smbdirect: Fix error cleanup in smbdirect_map_sges_from_iter()

David Woodhouse (1): x86/kexec: Push kjump return address even for non-kjump kexec

Davide Caratti (1): net/sched: dualpi2: initialize timer earlier in dualpi2_init()

Derek J. Clark (5): platform/x86: lenovo-wmi-other: Zero initialize WMI arguments platform/x86: lenovo-wmi-other: Fix tunable_attr_01 struct members platform/x86: lenovo-wmi-helpers: Move gamezone enums to wmi-helpers platform/x86: lenovo-wmi-other: Add Attribute ID helper functions platform/x86: lenovo-wmi-other: Limit adding attributes to supported devices

Dragos Tatulea (1): net: napi: Avoid gro timer misfiring at end of busypoll

Eder Zulian (1): iommu/amd: Remove latent out-of-bounds access in IOMMU debugfs

Edson Juliano Drosdeck (1): ALSA: hda/realtek: Limit mic boost on Positivo DN50E

Edward Adam Davis (1): drm: Replace old pointer to new idr

Emil Tantilov (1): idpf: fix read_dev_clk_lock spinlock init in idpf_ptp_init()

Ethan Nelson-Moore (1): net: ethernet: cs89x0: remove stale CONFIG_MACH_MX31ADS reference

Evangelos Petrongonas (1): kho: skip KHO for crash kernel

Evgenii Burenchev (1): qed: fix division by zero in qed_init_wfq_param when all vports are configured

Faicker Mo (1): net: net_failover: Fix the deadlock in slave register

Filipe Manana (1): btrfs: tracepoints: fix sleep while in atomic context in btrfs_sync_file()

Florian Pradines (1): HID: mcp2221: fix OOB write in mcp2221_raw_event()

Florian Westphal (9): netfilter: x_tables: allow initial table replace without emitting audit log message netfilter: x_tables: allocate hook ops while under mutex netfilter: x_tables: add and use xt_unregister_table_pre_exit netfilter: x_tables: unregister the templates first netfilter: x_tables: add and use xtables_unregister_table_exit netfilter: ebtables: move to two-stage removal scheme netfilter: ebtables: close dangling table module init race netfilter: x_tables: close dangling table module init race netfilter: bridge: eb_tables: close module init race

Fuad Tabba (6): KVM: arm64: Make EL2 exception entry and exit context-synchronization events KVM: arm64: Guard against NULL vcpu on VHE hyp panic path KVM: arm64: Fix __deactivate_fgt macro parameter typo KVM: arm64: Seed pkvm_ownership_selftest vcpu memcache KVM: arm64: Pre-check vcpu memcache for host->guest share KVM: arm64: Pre-check vcpu memcache for host->guest donate

Greg Kroah-Hartman (1): idpf: fix double free and use-after-free in aux device error paths

Guangshuo Li (1): drm/bridge: imx8qxp-pxl2dpi: avoid ERR_PTR with device_node cleanup

Guenter Roeck (2): hwmon: (lm90) Stop work before releasing hwmon device hwmon: (lm90) Add lock protection to lm90_alert

Guo Ren (Alibaba DAMO Academy) (1): riscv: mm: Fixup no5lvl failure when vaddr is invalid

Guopeng Zhang (3): cgroup/dmem: Return -ENOMEM on failed pool preallocation cgroup/cpuset: Reset DL migration state on can_attach() failure cgroup/cpuset: Reserve DL bandwidth only for root-domain moves

Gyeyoung Baek (2): accel/rocket: Fix prep_bo ioctl leaking positive return from dma_resv_wait_timeout() drm/panfrost: Fix wait_bo ioctl leaking positive return from dma_resv_wait_timeout()

Haichen Feng (1): platform/x86: hp-wmi: Add support for Victus 16-r0xxx (8BC2)

Hannes Reinecke (1): nvmet-auth: Do not print DH-HMAC-CHAP secrets

Holger Brunck (1): net: wan: fsl_ucc_hdlc: free tx_skbuff in uhdlc_memclean

Hongfu Li (2): selftests/cgroup: Fix cg_read_strcmp() empty string comparison selftests/cgroup: Fix string comparison in write_test

Hristo Venev (1): ceph: put folios not suitable for writeback

Hui Wang (2): riscv: cpufeature: Drop this_hwcap clear in T-Head vector workaround riscv: cpufeature: Use pre-defined ISA ext macros to index isa2hwcap

Ilya Maximets (1): net: nsh: fix incorrect header length macros

Ivan Vecera (2): ice: dpll: fix rclk pin state get for E810 ice: dpll: fix misplaced header macros

Jackie Dong (1): ALSA: hda/realtek: ALC269 fixup for Lenovo Yoga Pro 7 15ASH111 audio

Jakub Kicinski (12): net: shaper: flip the polarity of the valid flag net: shaper: fix trivial ordering issue in net_shaper_commit() net: shaper: reject duplicate leaves in GROUP request selftests: drv-net: add shaper test for duplicate leaves net: shaper: set ret to -ENOMEM when genlmsg_new() fails in group_doit net: shaper: fix undersized reply skb allocation in GROUP command tools: ynl: add scope qualifier for definitions net: shaper: reject handle IDs exceeding internal bit-width net: shaper: enforce singleton NETDEV scope with id 0 net: shaper: reject QUEUE scope handle with missing id net: tls: fix off-by-one in sg_chain entry count for wrapped sk_msg ring net: tls: prevent chain-after-chain in plain text SG

Jamal Hadi Salim (1): net/sched: sch_cbs: Call qdisc_reset for child qdisc

James Morse (3): KVM: arm64: Work around C1-Pro erratum 4193714 for protected guests arm_mpam: Fix false positive assert failure during mpam_disable() arm_mpam: Check whether the config array is allocated before destroying it

Jann Horn (1): exit: prevent preemption of oopsing TASK_DEAD task

Jason Gunthorpe (5): iommu: Fix loss of errno on map failure for classic ops iommu: Fix up map/unmap debugging for iommupt domains iommu: Handle unmap error when iommu_debug is enabled iommupt: Check for missing PAGE_SIZE in the pgsize_bitmap iommupt: Fix the end_index calculation

[truncated for AI cost control]