Commit 8cb0606271a9 for kernel
commit 8cb0606271a9102f1ccac34e9fc9ee76f350a2ab
Merge: ae09f35bd358 4396d70bb7fe
Author: Linus Torvalds <torvalds@linux-foundation.org>
Date: Fri Sep 18 10:53:42 2026 -0700
Merge tag 'mmc-v7.3-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/ulfh/mmc
Pull MMC/MEMSTICK fixes from Ulf Hansson:
"MMC core:
- Prevent potential use-after-free for SDIO IRQ work
- Fix OF node reference leak on card add failure
- Fix memory lea when the port table is full for sdio_uart
MMC host:
- hsq: Fix use-after-free in retry work
- mmci: Fix use-after-free in busy-timeout work
- mmc_spi: Reset bytes_xfered before retrying CRC failures
- mxcmmc: Cancel data work and watchdog on remove
- rtsx_pci_sdmmc: Ignore broken write-protect on ThinkPad X260
- sdhci_am654: A couple of fixes for the tuning sequence
- sdhci-of-aspeed: Remove children before releasing SDC resources
- sh_mmcif: Initialize IRQ-thread mutex before requesting interrupt
MEMSTICK:
- ms_block: Destroy io_queue workqueue on removal
* tag 'mmc-v7.3-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/ulfh/mmc:
mmc: sdhci-of-aspeed: Remove children before releasing SDC resources
mmc: sh_mmcif: initialize IRQ-thread mutex before requesting interrupt
mmc: core: Fix OF node reference leak on card add failure
mmc: rtsx_pci_sdmmc: ignore broken write-protect on ThinkPad X260
mmc: sdio_uart: fix xmit_fifo leak when the port table is full
mmc: spi: reset bytes_xfered before retrying CRC failures
mmc: sdhci_am654: Fallback to DT-provided itap delay on DDR50 tuning failure
mmc: sdhci_am654: Clear ITAPDLY on tuning failure
mmc: sdhci_am654: Reset command and data lines on failed tuning
mmc: sdhci_am654: Move tuning_loop to local variable
mmc: hsq: Fix use-after-free in retry work
mmc: mxcmmc: cancel data work and watchdog on remove
mmc: mmci: Fix use-after-free in busy-timeout work
mmc: core: Cancel SDIO IRQ work before freeing host
memstick: ms_block: destroy io_queue workqueue on removal