elsa-2025-20095

{
  "cves": [
    "CVE-2024-40939",
    "CVE-2024-46841",
    "CVE-2024-56597",
    "CVE-2024-53165",
    "CVE-2024-53181",
    "CVE-2024-53150",
    "CVE-2024-56532",
    "CVE-2024-50278",
    "CVE-2024-53112",
    "CVE-2024-56615",
    "CVE-2024-56581",
    "CVE-2024-56747",
    "CVE-2024-43864",
    "CVE-2024-53104",
    "CVE-2024-56622",
    "CVE-2024-56634",
    "CVE-2024-53145",
    "CVE-2024-53217",
    "CVE-2024-56548",
    "CVE-2024-53142",
    "CVE-2024-50275",
    "CVE-2024-50287",
    "CVE-2024-53131",
    "CVE-2024-56759",
    "CVE-2024-56633",
    "CVE-2024-56571",
    "CVE-2024-41080",
    "CVE-2024-50299",
    "CVE-2024-56606",
    "CVE-2024-56614",
    "CVE-2024-56708",
    "CVE-2024-46871",
    "CVE-2024-53227",
    "CVE-2024-56531",
    "CVE-2024-56601",
    "CVE-2024-53172",
    "CVE-2024-50292",
    "CVE-2024-56616",
    "CVE-2024-56766",
    "CVE-2024-56595",
    "CVE-2024-56605",
    "CVE-2024-56623",
    "CVE-2024-56637",
    "CVE-2024-53173",
    "CVE-2024-53158",
    "CVE-2024-53161",
    "CVE-2024-53135",
    "CVE-2024-56739",
    "CVE-2024-53180",
    "CVE-2024-56694",
    "CVE-2024-56705",
    "CVE-2024-56754",
    "CVE-2024-49950",
    "CVE-2024-53052",
    "CVE-2024-56644",
    "CVE-2024-56746",
    "CVE-2024-56728",
    "CVE-2024-56715",
    "CVE-2024-56659",
    "CVE-2024-56661",
    "CVE-2024-56648",
    "CVE-2024-53174",
    "CVE-2024-42268",
    "CVE-2024-42315",
    "CVE-2024-56716",
    "CVE-2024-56600",
    "CVE-2024-56568",
    "CVE-2024-56690",
    "CVE-2024-44940",
    "CVE-2024-53088",
    "CVE-2024-53101",
    "CVE-2024-56763",
    "CVE-2024-56610",
    "CVE-2024-56630",
    "CVE-2024-56640",
    "CVE-2024-38556",
    "CVE-2024-47730",
    "CVE-2024-50241",
    "CVE-2024-50295",
    "CVE-2024-50296",
    "CVE-2024-53066",
    "CVE-2024-53141",
    "CVE-2024-56596",
    "CVE-2024-56602",
    "CVE-2024-56562",
    "CVE-2024-56688",
    "CVE-2024-56704",
    "CVE-2024-53171",
    "CVE-2024-53184",
    "CVE-2024-53197",
    "CVE-2024-53198",
    "CVE-2024-53155",
    "CVE-2024-56723",
    "CVE-2024-46809",
    "CVE-2024-49998",
    "CVE-2024-50261",
    "CVE-2024-50283",
    "CVE-2024-53120",
    "CVE-2024-56626",
    "CVE-2024-56767",
    "CVE-2024-56769",
    "CVE-2024-56586",
    "CVE-2024-56643",
    "CVE-2024-56558",
    "CVE-2024-56567",
    "CVE-2024-56698",
    "CVE-2024-56700",
    "CVE-2024-56679",
    "CVE-2024-26595",
    "CVE-2024-38538",
    "CVE-2024-39494",
    "CVE-2024-49974",
    "CVE-2024-50036",
    "CVE-2024-50265",
    "CVE-2024-53063",
    "CVE-2024-53103",
    "CVE-2024-53113",
    "CVE-2024-53122",
    "CVE-2024-56589",
    "CVE-2024-56593",
    "CVE-2024-56594",
    "CVE-2024-56629",
    "CVE-2024-53146",
    "CVE-2024-53148",
    "CVE-2024-56748",
    "CVE-2024-56726",
    "CVE-2024-56756",
    "CVE-2024-50055",
    "CVE-2024-50268",
    "CVE-2024-50282",
    "CVE-2024-50290",
    "CVE-2024-53073",
    "CVE-2024-53125",
    "CVE-2024-53129",
    "CVE-2024-53140",
    "CVE-2024-53164",
    "CVE-2024-56662",
    "CVE-2024-56670",
    "CVE-2024-56598",
    "CVE-2024-56603",
    "CVE-2024-53183",
    "CVE-2024-56741",
    "CVE-2024-56701",
    "CVE-2024-53237",
    "CVE-2024-53157",
    "CVE-2024-56570",
    "CVE-2024-40906",
    "CVE-2024-49996",
    "CVE-2024-50269",
    "CVE-2024-50301",
    "CVE-2024-53096",
    "CVE-2024-53099",
    "CVE-2024-53119",
    "CVE-2024-53130",
    "CVE-2024-56587",
    "CVE-2024-56590",
    "CVE-2024-56636",
    "CVE-2024-56650",
    "CVE-2024-53215",
    "CVE-2024-53151",
    "CVE-2024-56745",
    "CVE-2024-56575",
    "CVE-2024-42138",
    "CVE-2024-44949",
    "CVE-2024-50121",
    "CVE-2024-50267",
    "CVE-2024-50273",
    "CVE-2024-50279",
    "CVE-2024-50302",
    "CVE-2024-53061",
    "CVE-2024-56627",
    "CVE-2024-53240",
    "CVE-2024-56642",
    "CVE-2024-56724",
    "CVE-2024-56691",
    "CVE-2024-53239",
    "CVE-2024-56569",
    "CVE-2024-56574",
    "CVE-2024-56576",
    "CVE-2024-56578",
    "CVE-2024-42073",
    "CVE-2024-50264",
    "CVE-2024-53241",
    "CVE-2024-53194",
    "CVE-2024-53214",
    "CVE-2024-56533",
    "CVE-2024-56539",
    "CVE-2024-53156",
    "CVE-2024-56681",
    "CVE-2024-56693",
    "CVE-2024-56572",
    "CVE-2024-56619"
  ],
  "cvss": 0.0,
  "database_specific": {
    "severity": "IMPORTANT"
  },
  "description": "[5.15.0-305.176.4]\n- x86/asm: Make serialize() always_inline (Juergen Gross)  \n- hwmon: (tmp513) Fix division of negative numbers (David Lechner)  \n- Revert 'mtd: spi-nor: core: replace dummy buswidth from addr to data' (Pratyush Yadav)  \n- Revert 'regmap: detach regmap from dev on regmap_exit' (Greg Kroah-Hartman)  \n- Revert 'drm/amdgpu: rework resume handling for display (v2)' (Greg Kroah-Hartman)  \n- Revert 'PCI: Use preserve_config in place of pci_flags' (Terry Tritton)  \n- virtio-net: synchronize probe with ndo_set_features (Jason Wang)  [Orabug: 36637822] \n- virtio-net: synchronize operstate with admin state on up/down (Jason Wang)  [Orabug: 36637822] \n- virtio: allow driver to disable the configure change notification (Jason Wang)  [Orabug: 36637822] \n- virtio: rename virtio_config_enabled to virtio_config_core_enabled (Jason Wang)  [Orabug: 36637822] \n- mlxsw: pci: Fix driver initialization with Spectrum-4 (Ido Schimmel)  [Orabug: 36811057] \n- mlxsw: pci: Fix driver initialization with old firmware (Ido Schimmel)  [Orabug: 36811057] \n- mmc: sdhci-of-dwcmshc: th1520: Increase tuning loop count to 128 (Maksim Kiselev)  [Orabug: 36811057] \n- net/mlx5e: Switch to using _bh variant of of spinlock API in port timestamping NAPI poll context (Rahul Rameshbabu)  [Orabug: 36811057] \n- net/mlx5e: Fix MACsec state loss upon state update in offload path (Emeel Hakim)  [Orabug: 36811057] \n- net/mlx5e: Change the warning when ignore_flow_level is not supported (Jianbo Liu)  [Orabug: 36811057] \n- Revert 'net/mlx5: Block entering switchdev mode with ns inconsistency' (Gavin Li)  [Orabug: 36811057] \n- IB/mlx5: Don't expose debugfs entries for RRoCE general parameters if not supported (Mark Zhang)  [Orabug: 36811057] \n- net/mlx5e: Ignore IPsec replay window values on sender side (Leon Romanovsky)  [Orabug: 36811057] \n- net/mlx5e: Allow software parsing when IPsec crypto is enabled (Leon Romanovsky)  [Orabug: 36811057] \n- net/mlx5: Use mlx5 device constant for selecting CQ period mode for ASO (Rahul Rameshbabu)  [Orabug: 36811057] \n- net/mlx5: Bridge, fix multicast packets sent to uplink (Moshe Shemesh)  [Orabug: 36811057] \n- net/mlx5: Fix a WARN upon a callback command failure (Yishai Hadas)  [Orabug: 36811057] \n- net/mlx5e: Fix peer flow lists handling (Vlad Buslov)  [Orabug: 36811057] \n- net/mlx5: Fix query of sd_group field (Tariq Toukan)  [Orabug: 36811057] \n- net/mlx5e: Use the correct lag ports number when creating TISes (Saeed Mahameed)  [Orabug: 36811057] \n- selftests: mlxsw: qos_pfc: Remove wrong description (Amit Cohen)  [Orabug: 36811057] \n- mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path (Ido Schimmel)  [Orabug: 36811057] \n- gpio: mlxbf3: add an error code check in mlxbf3_gpio_probe (Su Hui)  [Orabug: 36811057] \n- vdpa/mlx5: Add mkey leak detection (Dragos Tatulea)  [Orabug: 36811057] \n- vdpa/mlx5: Introduce reference counting to mrs (Dragos Tatulea)  [Orabug: 36811057] \n- vdpa/mlx5: Use vq suspend/resume during .set_map (Dragos Tatulea)  [Orabug: 36811057] \n- vdpa/mlx5: Mark vq state for modification in hw vq (Dragos Tatulea)  [Orabug: 36811057] \n- vdpa/mlx5: Mark vq addrs for modification in hw vq (Dragos Tatulea)  [Orabug: 36811057] \n- vdpa/mlx5: Introduce per vq and device resume (Dragos Tatulea)  [Orabug: 36811057] \n- vdpa/mlx5: Allow modifying multiple vq fields in one modify command (Dragos Tatulea)  [Orabug: 36811057] \n- vdpa/mlx5: Expose resumable vq capability (Dragos Tatulea)  [Orabug: 36811057] \n- Revert 'mlx5 updates 2023-12-20' (Jakub Kicinski)  [Orabug: 36811057] \n- net/mlx5: DPLL, Implement fractional frequency offset get pin op (Jiri Pirko)  [Orabug: 36811057] \n- net/mlx5: DPLL, Use struct to get values from mlx5_dpll_synce_status_get() (Jiri Pirko)  [Orabug: 36811057] \n- net: macsec: move sci_to_cpu to macsec header (Radu Pirea (NXP OSS))  [Orabug: 36811057] \n- net/mlx5: Implement management PF Ethernet profile (Armen Ratner)  [Orabug: 36811057] \n- net/mlx5: Enable SD feature (Tariq Toukan)  [Orabug: 36811057] \n- net/mlx5e: Block TLS device offload on combined SD netdev (Tariq Toukan)  [Orabug: 36811057] \n- net/mlx5e: Support per-mdev queue counter (Tariq Toukan)  [Orabug: 36811057] \n- net/mlx5e: Support cross-vhca RSS (Tariq Toukan)  [Orabug: 36811057] \n- net/mlx5e: Let channels be SD-aware (Tariq Toukan)  [Orabug: 36811057] \n- net/mlx5e: Create EN core HW resources for all secondary devices (Tariq Toukan)  [Orabug: 36811057] \n- net/mlx5e: Create single netdev per SD group (Tariq Toukan)  [Orabug: 36811057] \n- net/mlx5: SD, Add informative prints in kernel log (Tariq Toukan)  [Orabug: 36811057] \n- net/mlx5: SD, Implement steering for primary and secondaries (Tariq Toukan)  [Orabug: 36811057] \n- net/mlx5: SD, Implement devcom communication and primary election (Tariq Toukan)  [Orabug: 36811057] \n- net/mlx5: SD, Implement basic query and instantiation (Tariq Toukan)  [Orabug: 36811057] \n- net/mlx5: SD, Introduce SD lib (Tariq Toukan)  [Orabug: 36811057] \n- net/mlx5: Fix query of sd_group field (Tariq Toukan)  [Orabug: 36811057] \n- net/mlx5e: Use the correct lag ports number when creating TISes (Saeed Mahameed)  [Orabug: 36811057] \n- mlxsw: spectrum_fid: Set NVE flood profile as part of FID configuration (Petr Machata)  [Orabug: 36811057] \n- mlxsw: spectrum_fid: Add an 'any' packet type (Petr Machata)  [Orabug: 36811057] \n- mlxsw: reg: Add nve_flood_prf_id field to SFMR (Petr Machata)  [Orabug: 36811057] \n- net/mlx5: DR, Use swap() instead of open coding it (Jiapeng Chong)  [Orabug: 36811057] \n- net/mlx5: devcom, Add component size getter (Tariq Toukan)  [Orabug: 36811057] \n- net/mlx5e: Decouple CQ from priv (Tariq Toukan)  [Orabug: 36811057] \n- net/mlx5e: Add wrapping for auxiliary_driver ops and remove unused args (Tariq Toukan)  [Orabug: 36811057] \n- net/mlx5e: Statify function mlx5e_monitor_counter_arm (Tariq Toukan)  [Orabug: 36811057] \n- net/mlx5: Move TISes from priv to mdev HW resources (Tariq Toukan)  [Orabug: 36811057] \n- net/mlx5e: Remove TLS-specific logic in generic create TIS API (Tariq Toukan)  [Orabug: 36811057] \n- net/mlx5: fs, Command to control TX flow table root (Tariq Toukan)  [Orabug: 36811057] \n- net/mlx5: fs, Command to control L2TABLE entry silent mode (Tariq Toukan)  [Orabug: 36811057] \n- net/mlx5: Expose Management PCIe Index Register (MPIR) (Tariq Toukan)  [Orabug: 36811057] \n- net/mlx5: Add mlx5_ifc bits used for supporting single netdev Socket-Direct (Tariq Toukan)  [Orabug: 36811057] \n- net/mlx5: Manage ICM type of SW encap (Shun Hao)  [Orabug: 36811057] \n- RDMA/mlx5: Support handling of SW encap ICM area (Shun Hao)  [Orabug: 36811057] \n- net/mlx5: Introduce indirect-sw-encap ICM properties (Shun Hao)  [Orabug: 36811057] \n- mmc: sdhci-of-dwcmshc: Use logical OR instead of bitwise OR in dwcmshc_probe() (Nathan Chancellor)  [Orabug: 36811057] \n- mmc: sdhci-of-dwcmshc: Add support for T-Head TH1520 (Drew Fustini)  [Orabug: 36811057] \n- mmc: sdhci: add __sdhci_execute_tuning() to header (Drew Fustini)  [Orabug: 36811057] \n- mlxsw: spectrum: Use CFF mode where available (Petr Machata)  [Orabug: 36811057] \n- mlxsw: spectrum_fid: Add support for rFID family in CFF flood mode (Petr Machata)  [Orabug: 36811057] \n- mlxsw: spectrum_fid: Add a family for bridge FIDs in CFF flood mode (Petr Machata)  [Orabug: 36811057] \n- mlxsw: spectrum_fid: Initialize flood profiles in CFF mode (Petr Machata)  [Orabug: 36811057] \n- mlxsw: spectrum_fid: Add profile_id to flood profile (Petr Machata)  [Orabug: 36811057] \n- mlxsw: spectrum_fid: Add an object to keep flood profiles (Petr Machata)  [Orabug: 36811057] \n- mlxsw: spectrum_fid: Add hooks for RSP table maintenance (Petr Machata)  [Orabug: 36811057] \n- mlxsw: spectrum_fid: Add a not-UC packet type (Petr Machata)  [Orabug: 36811057] \n- mlxsw: spectrum_fid: Add an op for packing SFMR (Petr Machata)  [Orabug: 36811057] \n- mlxsw: spectrum_fid: Add an op to get PGT address of a FID (Petr Machata)  [Orabug: 36811057] \n- mlxsw: spectrum_fid: Add an op to get PGT allocation size (Petr Machata)  [Orabug: 36811057] \n- mlxsw: spectrum_fid: Add an op for flood table initialization (Petr Machata)  [Orabug: 36811057] \n- mlxsw: spectrum_fid: Move mlxsw_sp_fid_flood_table_init() up (Petr Machata)  [Orabug: 36811057] \n- mlxsw: spectrum_fid: Make mlxsw_sp_fid_ops.setup return an int (Petr Machata)  [Orabug: 36811057] \n- mlxsw: spectrum_fid: Split a helper out of mlxsw_sp_fid_flood_table_mid() (Petr Machata)  [Orabug: 36811057] \n- mlxsw: spectrum_fid: Rename FID ops, families, arrays (Petr Machata)  [Orabug: 36811057] \n- mlxsw: spectrum_fid: Privatize FID families (Petr Machata)  [Orabug: 36811057] \n- mlxsw: pci: Fix missing error checking (Ido Schimmel)  [Orabug: 36811057] \n- mlxsw: spectrum_router: Call RIF setup before obtaining FID (Petr Machata)  [Orabug: 36811057] \n- mlxsw: spectrum_router: Add a helper to get subport number from a RIF (Petr Machata)  [Orabug: 36811057] \n- mlxsw: spectrum_fid: Extract SFMR packing into a helper (Petr Machata)  [Orabug: 36811057] \n- mlxsw: spectrum_fid: Drop unnecessary conditions (Petr Machata)  [Orabug: 36811057] \n- mlxsw: pci: Permit enabling CFF mode (Petr Machata)  [Orabug: 36811057] \n- mlxsw: core, pci: Add plumbing related to CFF mode (Petr Machata)  [Orabug: 36811057] \n- mlxsw: reg: Add to SFMR register the fields related to CFF flood mode (Petr Machata)  [Orabug: 36811057] \n- mlxsw: reg: Extract flood-mode specific part of mlxsw_reg_sfmr_pack() (Petr Machata)  [Orabug: 36811057] \n- mlxsw: reg: Drop unnecessary writes from mlxsw_reg_sfmr_pack() (Petr Machata)  [Orabug: 36811057] \n- mlxsw: reg: Mark SFGC  some SFMR fields as reserved in CFF mode (Petr Machata)  [Orabug: 36811057] \n- mlxsw: reg: Add Switch FID Flooding Profiles Register (Petr Machata)  [Orabug: 36811057] \n- mlxsw: resources: Add max_cap_nve_flood_prf (Petr Machata)  [Orabug: 36811057] \n- mlxsw: cmd: Add MLXSW_CMD_MBOX_CONFIG_PROFILE_FLOOD_MODE_CFF (Petr Machata)  [Orabug: 36811057] \n- mlxsw: cmd: Add cmd_mbox.query_fw.cff_support (Petr Machata)  [Orabug: 36811057] \n- EDAC/bluefield: Convert to platform remove callback returning void (Uwe Kleine-Konig)  [Orabug: 36811057] \n- selftests: mlxsw: Add PCI reset test (Ido Schimmel)  [Orabug: 36811057] \n- mlxsw: pci: Implement PCI reset handlers (Ido Schimmel)  [Orabug: 36811057] \n- mlxsw: pci: Add support for new reset flow (Ido Schimmel)  [Orabug: 36811057] \n- mlxsw: pci: Move software reset code to a separate function (Amit Cohen)  [Orabug: 36811057] \n- mlxsw: pci: Rename mlxsw_pci_sw_reset() (Amit Cohen)  [Orabug: 36811057] \n- mlxsw: Extend MRSR pack() function to support new commands (Amit Cohen)  [Orabug: 36811057] \n- net/mlx5e: Remove early assignment to netdev-features (Tariq Toukan)  [Orabug: 36811057] \n- net/mlx5e: Add local loopback counter to vport rep stats (Or Har-Toov)  [Orabug: 36811057] \n- net/mlx5: Query maximum frequency adjustment of the PTP hardware clock (Rahul Rameshbabu)  [Orabug: 36811057] \n- net/mlx5: Convert scaled ppm values outside the s32 range for PHC frequency adjustments (Rahul Rameshbabu)  [Orabug: 36811057] \n- net/mlx5: Initialize clock-ptp_info inside mlx5_init_timer_clock (Rahul Rameshbabu)  [Orabug: 36811057] \n- net/mlx5: Refactor real time clock operation checks for PHC (Rahul Rameshbabu)  [Orabug: 36811057] \n- net/mlx5e: Access array with enum values instead of magic numbers (Gal Pressman)  [Orabug: 36811057] \n- net/mlx5: simplify mlx5_set_driver_version string assignments (Justin Stitt)  [Orabug: 36811057] \n- net/mlx5: Annotate struct mlx5_flow_handle with __counted_by (Kees Cook)  [Orabug: 36811057] \n- net/mlx5: Annotate struct mlx5_fc_bulk with __counted_by (Kees Cook)  [Orabug: 36811057] \n- net/mlx5e: Some cleanup in mlx5e_tc_stats_matchall() (Amir Tzin)  [Orabug: 36811057] \n- net/mlx5: Allow sync reset flow when BF MGT interface device is present (Moshe Shemesh)  [Orabug: 36811057] \n- net/mlx5: print change on SW reset semaphore returns busy (Moshe Shemesh)  [Orabug: 36811057] \n- vdpa/mlx5: clean up indenting in handle_ctrl_vlan() (Dan Carpenter)  [Orabug: 36811057] \n- vdpa/mlx5: fix error code for deleting vlan (Dan Carpenter)  [Orabug: 36811057] \n- vdpa/mlx5: Fix syntax errors in comments (Xiang wangx)  [Orabug: 36811057] \n- macsec: Fix use-after-free while sending the offloading packet (Jianbo Liu)  [Orabug: 37268700]  {CVE-2024-50261}\n- xfrm: Export symbol xfrm_dev_state_delete. (Steffen Klassert)  [Orabug: 37357287] \n- xfrm: Fix unregister netdevice hang on hardware offload. (Steffen Klassert)  [Orabug: 37357287] \n- xfrm: fix a data-race in xfrm_lookup_with_ifid() (Eric Dumazet)  [Orabug: 37357287] \n- xfrm: generalize xdo_dev_state_update_curlft to allow statistics update (Leon Romanovsky)  [Orabug: 37357287] \n- xfrm: copy_to_user_state fetch offloaded SA packets/bytes statistics (Raed Salem)  [Orabug: 37357287] \n- xfrm: annotate data-race around use_time (Eric Dumazet)  [Orabug: 37357287] \n- xfrm: consistently use time64_t in xfrm_timer_handler() (Eric Dumazet)  [Orabug: 37357287] \n- cpufreq: intel_pstate: Update Balance-performance EPP for Granite Rapids (Srinivas Pandruvada)  [Orabug: 37383554] \n- cpufreq: intel_pstate: Update Balance performance EPP for Emerald Rapids (Pedro Henrique Kopper)  [Orabug: 37383554] \n- cpufreq: intel_pstate: Use Meteor Lake EPPs for Arrow Lake (Srinivas Pandruvada)  [Orabug: 37383554] \n- cpufreq: intel_pstate: Update Meteor Lake EPPs (Srinivas Pandruvada)  [Orabug: 37383554] \n- cpufreq: intel_pstate: Switch to new Intel CPU model defines (Tony Luck)  [Orabug: 37383554] \n- cpufreq: Switch to new Intel CPU model defines (Tony Luck)  [Orabug: 37383554] \n- x86/cpu/vfm: Update arch/x86/include/asm/intel-family.h (Tony Luck)  [Orabug: 37383554] \n- x86/cpu: Add model number for another Intel Arrow Lake mobile processor (Tony Luck)  [Orabug: 37383554] \n- cpufreq: intel_pstate: Update default EPPs for Meteor Lake (Srinivas Pandruvada)  [Orabug: 37383554] \n- cpufreq: intel_pstate: Allow model specific EPPs (Srinivas Pandruvada)  [Orabug: 37383554] \n- x86/cpu: Add model number for Intel Clearwater Forest processor (Tony Luck)  [Orabug: 37383554] \n- cpufreq: intel_pstate: Update hybrid scaling factor for Meteor Lake (Srinivas Pandruvada)  [Orabug: 37383554] \n- cpufreq: intel_pstate: Prioritize firmware-provided balance performance EPP (Srinivas Pandruvada)  [Orabug: 37383554] \n- x86/cpu: Add model number for Intel Arrow Lake mobile processor (Tony Luck)  [Orabug: 37383554] \n- x86/cpu: Update Hybrids (Peter Zijlstra)  [Orabug: 37383554] \n- cpufreq: intel_pstate: Fix scaling for hybrid-capable systems with disabled E-cores (Srinivas Pandruvada)  [Orabug: 37383554] \n- cpufreq: intel_pstate: Enable HWP IO boost for all servers (Srinivas Pandruvada)  [Orabug: 37383554] \n- cpufreq: intel_pstate: Allow EPP 0x80 setting by the firmware (Srinivas Pandruvada)  [Orabug: 37383554] \n- cpufreq: intel_pstate: Use firmware default EPP (Srinivas Pandruvada)  [Orabug: 37383554] \n- net/mlx5: Add a timeout to acquire the command queue semaphore (Akiva Goldberger)  [Orabug: 37388415] \n- PCI: Fix pci_enable_acs() support for the ACS quirks (Jason Gunthorpe)  [Orabug: 37477375] \n- PCI: Clear Secondary Status errors after enumeration (Vidya Sagar)  [Orabug: 37477375] \n- PCI/AER: Configure ECRC only if AER is native (Vidya Sagar)  [Orabug: 37477375] \n- PCI: Extend ACS configurability (Vidya Sagar)  [Orabug: 37477375] \n- NFSv4/pNFS: Do layout state recovery upon reboot (Trond Myklebust)  [Orabug: 37477755] \n- NFSv4/pNFS: Remove redundant call to unhash the layout (Trond Myklebust)  [Orabug: 37477755] \n- NFSv4/pnfs: Give nfs4_proc_layoutreturn() a flags argument (Trond Myklebust)  [Orabug: 37477755] \n- NFSv4/pNFS: Retry the layout return later in case of a timeout or reboot (Trond Myklebust)  [Orabug: 37477755] \n- NFSv4/pNFS: Handle server reboots in pnfs_poc_release() (Trond Myklebust)  [Orabug: 37477755] \n- NFSv4/pNFS: Add a helper to defer failed layoutreturn calls (Trond Myklebust)  [Orabug: 37477755] \n- NFSv4/pnfs: Add support for the PNFS_LAYOUT_FILE_BULK_RETURN flag (Trond Myklebust)  [Orabug: 37477755] \n- pNFS: Add a flag argument to pnfs_destroy_layouts_byclid() (Trond Myklebust)  [Orabug: 37477755] \n- NFSv4: Clean up encode_nfs4_stateid() (Trond Myklebust)  [Orabug: 37477755] \n- NFSv4.1: constify the stateid argument in nfs41_test_stateid() (Trond Myklebust)  [Orabug: 37477755] \n- NFSv4/pnfs: Remove redundant list check (Trond Myklebust)  [Orabug: 37477755] \n- uek-rpm: Enable CONFIG_SENSORS_ARM_SCMI and CONFIG_MVL_MHU (Thomas Tai)  [Orabug: 37498899]\n\n[5.15.0-305.176.3]\n- LTS version: v5.15.176 (Vijayendra Suman)\n- mm: vmscan: account for free pages to prevent infinite Loop in throttle_direct_reclaim() (Seiji Nishikawa)\n- dt-bindings: display: adi,adv7533: Drop single lane support (Biju Das)\n- drm: adv7511: Drop dsi single lane support (Biju Das)\n- net/sctp: Prevent autoclose integer overflow in sctp_association_init() (Nikolay Kuratov)\n- sky2: Add device ID 11ab:4373 for Marvell 88E8075 (Pascal Hambourg)\n- pinctrl: mcp23s08: Fix sleeping in atomic context due to regmap locking (Evgenii Shatokhin)\n- RDMA/uverbs: Prevent integer overflow issue (Dan Carpenter)\n- kcov: mark in_softirq_really() as __always_inline (Arnd Bergmann)\n- modpost: fix the missed iteration for the max bit in do_input() (Masahiro Yamada)\n- modpost: fix input MODULE_DEVICE_TABLE() built for 64-bit on 32-bit host (Masahiro Yamada)\n- usb: xhci: Avoid queuing redundant Stop Endpoint commands (Michal Pecio)\n- ARC: build: Try to guess GCC variant of cross compiler (Leon Romanovsky)\n- irqchip/gic: Correct declaration of *percpu_base pointer in union gic_base (Uros Bizjak)\n- net: usb: qmi_wwan: add Telit FE910C04 compositions (Daniele Palmas)\n- bpf: fix potential error return (Anton Protopopov)\n- sound: usb: format: don't warn that raw DSD is unsupported (Adrian Ratiu)\n- sound: usb: enable DSD output for ddHiFi TC44C (Adrian Ratiu)\n- btrfs: flush delalloc workers queue before stopping cleaner kthread during unmount (Filipe Manana)\n- drm/amdkfd: Correct the migration DMA map direction (Prike Liang)\n- wifi: mac80211: wake the queues in case of failure in resume (Emmanuel Grumbach)\n- btrfs: sysfs: fix direct super block member reads (Qu Wenruo)\n- btrfs: sysfs: convert scnprintf and snprintf to sysfs_emit (Anand Jain)\n- btrfs: fix use-after-free when COWing tree bock and tracing is enabled (Filipe Manana)\n- btrfs: rename and export __btrfs_cow_block() (Filipe Manana)\n- ila: serialize calls to nf_register_net_hooks() (Eric Dumazet)\n- af_packet: fix vlan_get_protocol_dgram() vs MSG_PEEK (Eric Dumazet)\n- af_packet: fix vlan_get_tci() vs MSG_PEEK (Eric Dumazet)\n- net: wwan: iosm: Properly check for valid exec stage in ipc_mmio_init() (Maciej S. Szmigiero)\n- net: restrict SO_REUSEPORT to inet sockets (Eric Dumazet)\n- RDMA/rtrs: Ensure 'ib_sge list' is accessible (Li Zhijian)\n- net: mv643xx_eth: fix an OF node reference leak (Joe Hattori)\n- eth: bcmsysport: fix call balance of priv-clk handling routines (Vitalii Mordan)\n- ALSA: usb-audio: US16x08: Initialize array before use (Tanya Agarwal)\n- net: llc: reset skb-transport_header (Antonio Pastor)\n- netfilter: nft_set_hash: unaligned atomic read on struct nft_set_ext (Pablo Neira Ayuso)\n- drm/i915/dg1: Fix power gate sequence. (Rodrigo Vivi)\n- netrom: check buffer length before accessing it (Ilya Shchipletsov)\n- net: fix memory leak in tcp_conn_request() (Wang Liang)\n- net: stmmac: restructure the error path of stmmac_probe_config_dt() (Joe Hattori)\n- net: stmmac: don't create a MDIO bus if unnecessary (Andrew Halaney)\n- net: stmmac: platform: provide devm_stmmac_probe_config_dt() (Bartosz Golaszewski)\n- RDMA/hns: Fix missing flush CQE for DWQE (Chengchang Tang)\n- RDMA/hns: Fix warning storm caused by invalid input in IO path (Chengchang Tang)\n- RDMA/hns: Fix mapping error of zero-hop WQE buffer (wenglianfa)\n- RDMA/hns: Remove redundant 'bt_level' for hem_list_alloc_item() (Yunsheng Lin)\n- RDMA/hns: Remove redundant 'attr_mask' in modify_qp_init_to_init() (Yixing Liu)\n- drm/bridge: adv7511_audio: Update Audio InfoFrame properly (Stefan Ekenberg)\n- RDMA/bnxt_re: Fix the locking while accessing the QP table (Selvin Xavier)\n- RDMA/bnxt_re: Fix max_qp_wrs reported (Selvin Xavier)\n- RDMA/bnxt_re: Fix reporting hw_ver in query_device (Kalesh AP)\n- RDMA/bnxt_re: Add check for path mtu in modify_qp (Saravanan Vajravel)\n- RDMA/mlx5: Enforce same type port association for multiport RoCE (Patrisious Haddad)\n- xhci: Turn NEC specific quirk for handling Stop Endpoint errors generic (Mathias Nyman)\n- usb: xhci: Limit Stop Endpoint retries (Michal Pecio)\n- xhci: retry Stop Endpoint on buggy NEC controllers (Michal Pecio)\n- thunderbolt: Add support for Intel Panther Lake-M/P (Mika Westerberg)\n- thunderbolt: Add support for Intel Lunar Lake (Mika Westerberg)\n- thunderbolt: Add Intel Barlow Ridge PCI ID (Mika Westerberg)\n- thunderbolt: Add support for Intel Meteor Lake (Mika Westerberg)\n- thunderbolt: Add support for Intel Raptor Lake (George D Sworo)\n- tracing: Have process_string() also allow arrays (Steven Rostedt)\n- selinux: ignore unknown extended permissions (Thiebaud Weksteen)\n- x86/hyperv: Fix hv tsc page based sched_clock for hibernation (Naman Jain)\n- net: dsa: improve shutdown sequence (Vladimir Oltean)\n- nfsd: cancel nfsd_shrinker_work using sync mode in nfs4_state_shutdown_net (Yang Erkun)\n- btrfs: avoid monopolizing a core when activating a swap file (Filipe Manana)\n- power: supply: gpio-charger: Fix set charge current limits (Dimitri Fedrau)\n- tracing: Prevent bad count for tracing_cpumask_write (Lizhi Xu)\n- tracing: Constify string literal data member in struct trace_event_call (Christian Gottsche)\n- ksmbd: fix racy issue from session lookup and expire (Namjae Jeon)\n- lib: stackinit: hide never-taken branch from compiler (Kees Cook)\n- drm/dp_mst: Verify request type in the corresponding down message reply (Imre Deak)\n- arm64: Ensure bits ASID[15:8] are masked out when the kernel uses 8-bit ASIDs (Catalin Marinas)\n- arm64: mm: Rename asid2idx() to ctxid2asid() (Yunfeng Ye)\n- ksmbd: fix Out-of-Bounds Write in ksmbd_vfs_stream_write (Jordy Zomer)\n- ksmbd: fix Out-of-Bounds Read in ksmbd_vfs_stream_read (Jordy Zomer)\n- drm/dp_mst: Fix MST sideband message body length check (Imre Deak)\n- bpf: Check validity of link-type in bpf_link_show_fdinfo() (Hou Tao)\n- MIPS: Probe toolchain support of -msym32 (Jiaxun Yang)\n- vmalloc: fix accounting with i915 (Matthew Wilcox (Oracle))\n- virtio-blk: don't keep queue frozen during system suspend (Ming Lei)\n- scsi: storvsc: Do not flag MAINTENANCE_IN return of SRB_STATUS_DATA_OVERRUN as an error (Cathy Avery)\n- scsi: mpt3sas: Diag-Reset when Doorbell-In-Use bit is set during driver load time (Ranjan Kumar)\n- platform/x86: asus-nb-wmi: Ignore unknown event 0xCF (Armin Wolf)\n- regmap: Use correct format specifier for logging range errors (Mark Brown)\n- ALSA: hda/conexant: fix Z60MR100 startup pop issue (bo liu)\n- scsi: megaraid_sas: Fix for a potential deadlock (Tomas Henzl)\n- scsi: qla1280: Fix hw revision numbering for ISP1020/1040 (Magnus Lindholm)\n- watchdog: it87_wdt: add PWRGD enable quirk for Qotom QCML04 (James Hilliard)\n- tracing/kprobe: Make trace_kprobe's module callback called after jump_label update (Masami Hiramatsu (Google))\n- mtd: rawnand: fix double free in atmel_pmecc_create_user() (Dan Carpenter)\n- dmaengine: at_xdmac: avoid null_prt_deref in at_xdmac_prep_dma_memset (Chen Ridong)\n- dmaengine: dw: Select only supported masters for ACPI devices (Andy Shevchenko)\n- dmaengine: mv_xor: fix child node refcount handling in early exit (Javier Carrasco)\n- phy: core: Fix that API devm_phy_destroy() fails to destroy the phy (Zijun Hu)\n- phy: core: Fix that API devm_of_phy_provider_unregister() fails to unregister the phy provider (Zijun Hu)\n- phy: core: Fix that API devm_phy_put() fails to release the phy (Zijun Hu)\n- phy: core: Fix an OF node refcount leakage in of_phy_provider_lookup() (Zijun Hu)\n- phy: core: Fix an OF node refcount leakage in _of_phy_get() (Zijun Hu)\n- mtd: rawnand: arasan: Fix missing de-registration of NAND (Maciej Andrzejewski)\n- mtd: rawnand: arasan: Fix double assertion of chip-select (Maciej Andrzejewski)\n- mtd: diskonchip: Cast an operand to prevent potential overflow (Zichen Xie)\n- nfsd: restore callback functionality for NFSv4.0 (NeilBrown)\n- bpf: Check negative offsets in __bpf_skb_min_len() (Cong Wang)\n- tcp_bpf: Add sk_rmem_alloc related logic for tcp_bpf ingress redirection (Zijian Zhang)\n- tcp_bpf: Charge receive socket buffer in bpf_tcp_ingress() (Cong Wang)\n- mm/vmstat: fix a W=1 clang compiler warning (Bart Van Assche)\n- media: dvb-frontends: dib3000mb: fix uninit-value in dib3000_write_reg (Nikita Zhandarovich)\n- drm/amdgpu: Handle NULL bo-tbo.resource (again) in amdgpu_vm_bo_update (Michel Danzer)\n- epoll: Add synchronous wakeup support for ep_poll_callback (Xuewen Yan)\n- ceph: validate snapdirname option length when mounting (Ilya Dryomov)\n- of: Fix refcount leakage for OF node returned by __of_get_dma_parent() (Zijun Hu)\n- of: Fix error path in of_parse_phandle_with_args_map() (Herve Codina)\n- udmabuf: also check for F_SEAL_FUTURE_WRITE (Jann Horn)\n- nilfs2: prevent use of deleted inode (Edward Adam Davis)\n- of/irq: Fix using uninitialized variable @addr_len in API of_irq_parse_one() (Zijun Hu)\n- NFS/pnfs: Fix a live lock between recalled layouts and layoutget (Trond Myklebust)\n- tracing: Add '%s' check in test_event_printk() (Steven Rostedt)\n- tracing: Add missing helper functions in event pointer dereference check (Steven Rostedt)\n- tracing: Fix test_event_printk() to process entire print argument (Steven Rostedt)\n- KVM: x86: Play nice with protected guests in complete_hypercall_exit() (Sean Christopherson)\n- Drivers: hv: util: Avoid accessing a ringbuffer not initialized yet (Michael Kelley)\n- btrfs: tree-checker: reject inline extent items with 0 ref count (Qu Wenruo)\n- zram: refuse to use zero sized block device as backing device (Kairui Song)\n- sh: clk: Fix clk_enable() to return 0 on NULL clk (Geert Uytterhoeven)\n- hwmon: (tmp513) Fix interpretation of values of Temperature Result and Limit Registers (Murad Masimov)\n- hwmon: (tmp513) Fix Current Register value interpretation (Murad Masimov)\n- hwmon: (tmp513) Fix interpretation of values of Shunt Voltage and Limit Registers (Murad Masimov)\n- hwmon: (tmp513) Use SI constants from units.h (Andy Shevchenko)\n- hwmon: (tmp513) Simplify with dev_err_probe() (Andy Shevchenko)\n- hwmon: (tmp513) Don't use 'proxy' headers (Andy Shevchenko)\n- drm/modes: Avoid divide by zero harder in drm_mode_vrefresh() (Ville Syrjala)\n- USB: serial: option: add Telit FE910C04 rmnet compositions (Daniele Palmas)\n- USB: serial: option: add MediaTek T7XX compositions (Jack Wu)\n- USB: serial: option: add Netprisma LCUK54 modules for WWAN Ready (Mank Wang)\n- USB: serial: option: add MeiG Smart SLM770A (Michal Hrusecky)\n- USB: serial: option: add TCL IK512 MBIM  ECM (Daniel Swanemar)\n- efivarfs: Fix error on non-existent file (James Bottomley)\n- i2c: riic: Always round-up when calculating bus period (Geert Uytterhoeven)\n- chelsio/chtls: prevent potential integer overflow on 32bit (Dan Carpenter)\n- mmc: sdhci-tegra: Remove SDHCI_QUIRK_BROKEN_ADMA_ZEROLEN_DESC quirk (Prathamesh Shete)\n- net: mdiobus: fix an OF node reference leak (Joe Hattori)\n- netfilter: ipset: Fix for recursive locking warning (Phil Sutter)\n- net: ethernet: bgmac-platform: fix an OF node reference leak (Joe Hattori)\n- net: hinic: Fix cleanup in create_rxqs/txqs() (Dan Carpenter)\n- ionic: use ee-offset when returning sprom data (Shannon Nelson)\n- ionic: Fix netdev notifier unregister on failure (Brett Creeley)\n- netdevsim: prevent bad user input in nsim_dev_health_break_write() (Eric Dumazet)\n- net/smc: check return value of sock_recvmsg when draining clc data (Guangguan Wang)\n- net/smc: check smcd_v2_ext_offset when receiving proposal msg (Guangguan Wang)\n- net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg (Guangguan Wang)\n- net/smc: check sndbuf_space again after NOSPACE flag is set in smc_poll (Guangguan Wang)\n- erofs: fix incorrect symlink detection in fast symlink (Gao Xiang)\n- i2c: pnx: Fix timeout in wait functions (Vladimir Riabchun)\n- usb: dwc2: gadget: Don't write invalid mapped sg entries into dma_desc with iommu enabled (Peng Hongchi)\n- MIPS: Loongson64: DTS: Fix msi node for ls7a (Jiaxun Yang)\n- PCI: Add ACS quirk for Broadcom BCM5760X NIC (Ajit Khaparde)\n- PCI: vmd: Create domain symlink before pci_bus_add_devices() (Jiwei Sun)\n- ASoC: Intel: sof_sdw: fix jack detection on ADL-N variant RVP (Pierre-Louis Bossart)\n- usb: cdns3: Add quirk flag to enable suspend residency (Roger Quadros)\n- ALSA: usb: Fix UBSAN warning in parse_audio_unit() (Takashi Iwai)\n- PCI/AER: Disable AER service on suspend (Kai-Heng Feng)\n- PCI: Use preserve_config in place of pci_flags (Vidya Sagar)\n- net: sched: fix ordering of qlen adjustment (Lion Ackermann)\n- LTS version: v5.15.175 (Vijayendra Suman)\n- x86/static-call: fix 32-bit build (Juergen Gross)\n- ALSA: usb-audio: Fix a DMA to stack memory bug (Dan Carpenter)\n- x86/xen: remove hypercall page (Juergen Gross)\n- x86/xen: use new hypercall functions instead of hypercall page (Juergen Gross)\n- x86/xen: add central hypercall functions (Juergen Gross)\n- x86/xen: don't do PV iret hypercall through hypercall page (Juergen Gross)\n- x86/static-call: provide a way to do very early static-call updates (Juergen Gross)\n- objtool/x86: allow syscall instruction (Juergen Gross)\n- x86: make get_cpu_vendor() accessible from Xen code (Juergen Gross)\n- xen/netfront: fix crash when removing device (Juergen Gross)\n- Revert 'parisc: fix a possible DMA corruption' (Greg Kroah-Hartman)\n- tracing/kprobes: Skip symbol counting logic for module symbols in create_local_trace_kprobe() (Nikolay Kuratov)\n- bpf: sync_linked_regs() must preserve subreg_def (Eduard Zingerman)\n- blk-iocost: Avoid using clamp() on inuse in __propagate_weights() (Nathan Chancellor)\n- ACPICA: events/evxfregn: don't release the ContextMutex that was never acquired (Daniil Tatianin)\n- team: Fix feature propagation of NETIF_F_GSO_ENCAP_ALL (Daniel Borkmann)\n- bonding: Fix feature propagation of NETIF_F_GSO_ENCAP_ALL (Daniel Borkmann)\n- net/sched: netem: account for backlog updates from child qdisc (Martin Ottens)\n- Documentation: PM: Clarify pm_runtime_resume_and_get() return value (Paul Barker)\n- qca_spi: Make driver probing reliable (Stefan Wahren)\n- qca_spi: Fix clock speed for multiple QCA7000 (Stefan Wahren)\n- cxgb4: use port number to set mac addr (Anumula Murali Mohan Reddy)\n- ACPI: resource: Fix memory resource type union access (Ilpo Jarvinen)\n- net: sparx5: fix the maximum frame length register (Daniel Machon)\n- net: sparx5: fix FDMA performance issue (Daniel Machon)\n- net: lapb: increase LAPB_HEADER_LEN (Eric Dumazet)\n- ptp: kvm: x86: Return EOPNOTSUPP instead of ENODEV from kvm_arch_ptp_init() (Thomas Weissschuh)\n- ptp: kvm: Use decrypted memory in confidential guest on x86 (Jeremi Piotrowski)\n- selftests: mlxsw: sharedbuffer: Remove duplicate test cases (Danielle Ratson)\n- selftests: mlxsw: sharedbuffer: Remove h1 ingress test case (Danielle Ratson)\n- tipc: fix NULL deref in cleanup_bearer() (Eric Dumazet)\n- batman-adv: Do not let TT changes list grows indefinitely (Remi Pommarel)\n- batman-adv: Remove uninitialized data in full table TT response (Remi Pommarel)\n- batman-adv: Do not send uninitialized TT changes (Remi Pommarel)\n- acpi: nfit: vmalloc-out-of-bounds Read in acpi_nfit_ctl (Suraj Sonawane)\n- exfat: fix potential deadlock on __exfat_get_dentry_set (Sungjong Seo)\n- virtio/vsock: Fix accept_queue memory leak (Michal Luczaj)\n- bpf, sockmap: Fix update element with same (Michal Luczaj)\n- xfs: fix scrub tracepoints when inode-rooted btrees are involved (Darrick J. Wong)\n- xfs: return from xfs_symlink_verify early on V4 filesystems (Darrick J. Wong)\n- xfs: don't drop errno values when we fail to ficlone the entire range (Darrick J. Wong)\n- xfs: update btree keys correctly when _insrec splits an inode root block (Darrick J. Wong)\n- drm/i915: Fix memory leak by correcting cache object name in error handler (Jiasheng Jiang)\n- usb: gadget: u_serial: Fix the issue that gs_start_io crashed due to accessing null pointer (Lianqin Hu)\n- usb: ehci-hcd: fix call balance of clocks handling routines (Vitalii Mordan)\n- usb: dwc2: Fix HCD port connection race (Stefan Wahren)\n- usb: dwc2: hcd: Fix GetPortStatus  SetPortFeature (Stefan Wahren)\n- usb: dwc2: Fix HCD resume (Stefan Wahren)\n- ata: sata_highbank: fix OF node reference leak in highbank_initialize_phys() (Joe Hattori)\n- usb: host: max3421-hcd: Correctly abort a USB request. (Mark Tomlinson)\n- ALSA: usb-audio: Add implicit feedback quirk for Yamaha THR5 (Jaakko Salo)\n- tcp: check space before adding MPTCP SYN options (MoYuanhao)\n- LTS version: v5.15.174 (Vijayendra Suman)\n- Bluetooth: hci_core: Fix calling mgmt_device_connected (Luiz Augusto von Dentz)\n- net/smc: Fix af_ops of child socket pointing to released memory (Karsten Graul)\n- media: venus: vdec: fixed possible memory leak issue (Ameer Hamza)\n- serial: amba-pl011: fix build regression (Arnd Bergmann)\n- drm/amdgpu: rework resume handling for display (v2) (Alex Deucher)\n- drm/amd/display: Correct the defined value for AMDGPU_DMUB_NOTIFICATION_MAX (Wayne Lin)\n- net: dsa: microchip: correct KSZ8795 static MAC table access (Tristram Ha)\n- Bluetooth: L2CAP: Fix uaf in l2cap_connect (Luiz Augusto von Dentz)\n- arm64: smccc: Remove broken support for SMCCCv1.3 SVE discard hint (Mark Rutland)\n- arm64/sve: Discard stale CPU state when handling SVE traps (Mark Brown)\n- gve: Fixes for napi_poll when budget is 0 (Ziwei Xiao)\n- scsi: core: Fix scsi_mode_select() buffer length handling (Damien Le Moal)\n- Revert 'drm/amdgpu: add missing size check in amdgpu_debugfs_gprwave_read()' (Zhang Zekun)\n- fou: remove warn in gue_gro_receive on unsupported protocol (Willem de Bruijn)\n- ima: Fix use-after-free on a dentry's dname.name (Stefan Berger)\n- crypto: hisilicon/qm - inject error before stopping queue (Weili Qian)\n- drm/amd/display: Check BIOS images before it is used (Alex Hung)\n- mmc: mtk-sd: Fix error handle of probe function (Andy-ld Lu)\n- xhci: dbc: Fix STALL transfer event handling (Mathias Nyman)\n- mm/damon/vaddr: fix issue in damon_va_evenly_split_region() (Zheng Yejian)\n- mm/damon/vaddr-test: split a test function having 1024 bytes frame size (SeongJae Park)\n- jffs2: Fix rtime decompressor (Richard Weinberger)\n- jffs2: Prevent rtime decompress memory corruption (Kinsey Moore)\n- KVM: arm64: vgic-its: Clear ITE when DISCARD frees an ITE (Kunkun Jiang)\n- KVM: arm64: vgic-its: Clear DTE when MAPD unmaps a device (Kunkun Jiang)\n- KVM: arm64: vgic-its: Add a data length check in vgic_its_save_* (Jing Zhang)\n- tracing/eprobe: Fix to release eprobe when failed to add dyn_event (Masami Hiramatsu (Google))\n- btrfs: fix missing snapshot drew unlock when root is dead during swap activation (Filipe Manana)\n- sched/core: Prevent wakeup of ksoftirqd during idle load balance (K Prateek Nayak)\n- sched/fair: Check idle_cpu() before need_resched() to detect ilb CPU turning busy (K Prateek Nayak)\n- sched/fair: Add NOHZ balancer flag for nohz.next_balance updates (Valentin Schneider)\n- sched/core: Remove the unnecessary need_resched() check in nohz_csd_func() (K Prateek Nayak)\n- modpost: Add .irqentry.text to OTHER_SECTIONS (Thomas Gleixner)\n- modpost: Include '.text.*' in TEXT_SECTIONS (Nathan Chancellor)\n- misc: eeprom: eeprom_93cx6: Add quirk for extra read clock cycle (Parker Newman)\n- powerpc/prom_init: Fixup missing powermac #size-cells (Michael Ellerman)\n- MIPS: Loongson64: DTS: Really fix PCIe port nodes for ls7a (Xi Ruoyao)\n- usb: chipidea: udc: handle USB Error Interrupt if IOC not set (Xu Yang)\n- i3c: Use i3cdev-desc-info instead of calling i3c_device_get_info() to avoid deadlock (Defa Li)\n- PCI: Add ACS quirk for Wangxun FF5xxx NICs (Mengyuan Lou)\n- PCI: Add 'reset_subordinate' to reset hierarchy below bridge (Keith Busch)\n- PCI: Detect and trust built-in Thunderbolt chips (Esther Shimanovich)\n- i3c: mipi-i3c-hci: Mask ring interrupts before ring stop request (Jarkko Nikula)\n- f2fs: fix f2fs_bug_on when uninstalling filesystem call f2fs_evict_inode. (Qi Han)\n- nvdimm: rectify the illogical code within nd_dax_probe() (Yi Yang)\n- pinctrl: qcom-pmic-gpio: add support for PM8937 (Barnabas Czeman)\n- scsi: st: Add MTIOCGET and MTLOAD to ioctls allowed after device reset (Kai Makisara)\n- scsi: st: Don't modify unknown block number in MTIOCGET (Kai Makisara)\n- leds: class: Protect brightness_show() with led_cdev-led_access mutex (Mukesh Ojha)\n- scsi: hisi_sas: Add cond_resched() for no forced preemption model (Yihang Li)\n- tracing: Use atomic64_inc_return() in trace_clock_counter() (Uros Bizjak)\n- pinctrl: freescale: fix COMPILE_TEST error with PINCTRL_IMX_SCU (Esben Haabendal)\n- netpoll: Use rcu_access_pointer() in __netpoll_setup (Breno Leitao)\n- net/neighbor: clear error in case strict check is not set (Jakub Kicinski)\n- rocker: fix link status detection in rocker_carrier_init() (Dmitry Antipov)\n- ASoC: hdmi-codec: reorder channel allocation list (Jonas Karlman)\n- Bluetooth: hci_core: Fix not checking skb length on hci_acldata_packet (Luiz Augusto von Dentz)\n- wifi: brcmfmac: Fix oops due to NULL pointer dereference in brcmf_sdiod_sglist_rw() (Norbert van Bolhuis)\n- wifi: ipw2x00: libipw_rx_any(): fix bad alignment (Jiapeng Chong)\n- drm/amdgpu: set the right AMDGPU sg segment limitation (Prike Liang)\n- drm/amdgpu: skip amdgpu_device_cache_pci_state under sriov (Victor Zhao)\n- jfs: add a check to prevent array-index-out-of-bounds in dbAdjTree (Nihar Chaithanya)\n- jfs: fix array-index-out-of-bounds in jfs_readdir (Ghanshyam Agrawal)\n- jfs: fix shift-out-of-bounds in dbSplit (Ghanshyam Agrawal)\n- jfs: array-index-out-of-bounds fix in dtReadFirst (Ghanshyam Agrawal)\n- dma-debug: fix a possible deadlock on radix_lock (Levi Yun)\n- drm/amdgpu: refine error handling in amdgpu_ttm_tt_pin_userptr (Lang Yu)\n- drm/amdgpu: Dereference the ATCS ACPI buffer (Prike Liang)\n- drm/amdgpu: clear RB_OVERFLOW bit when enabling interrupts for vega20_ih (Victor Lu)\n- drm/panel: simple: Add Microchip AC69T88A LVDS Display panel (Manikandan Muralidharan)\n- wifi: ath5k: add PCI ID for Arcadyan devices (Rosen Penev)\n- wifi: ath5k: add PCI ID for SX76X (Rosen Penev)\n- net: inet6: do not leave a dangling sk pointer in inet6_create() (Ignat Korchagin)\n- net: inet: do not leave a dangling sk pointer in inet_create() (Ignat Korchagin)\n- net: ieee802154: do not leave a dangling sk pointer in ieee802154_create() (Ignat Korchagin)\n- net: af_can: do not leave a dangling sk pointer in can_create() (Ignat Korchagin)\n- Bluetooth: L2CAP: do not leave dangling sk pointer on error in l2cap_sock_create() (Ignat Korchagin)\n- af_packet: avoid erroring out after sock_init_data() in packet_create() (Ignat Korchagin)\n- net/sched: cbs: Fix integer overflow in cbs_set_port_rate() (Elena Salomatkina)\n- net: ethernet: fs_enet: Use %pa to format resource_size_t (Simon Horman)\n- net: fec_mpc52xx_phy: Use %pa to format resource_size_t (Simon Horman)\n- samples/bpf: Fix a resource leak (Zhu Jun)\n- r8169: don't apply UDP padding quirk on RTL8126A (Heiner Kallweit)\n- drm/radeon/r600_cs: Fix possible int overflow in r600_packet3_check() (Igor Artemiev)\n- drm/mcde: Enable module autoloading (Liao Chen)\n- drm: panel-orientation-quirks: Add quirk for AYA NEO 2 model (Joaquin Ignacio Aramendia)\n- drm/vc4: hvs: Set AXI panic modes for the HVS (Dave Stevenson)\n- soc: imx8m: Probe the SoC driver as platform driver (Marek Vasut)\n- media: cx231xx: Add support for Dexatek USB Video Grabber 1d19:6108 (Rohan Barar)\n- media: uvcvideo: Add a quirk for the Kaiweets KTI-W02 infrared camera (David Given)\n- kcsan: Turn report_filterlist_lock into a raw_spinlock (Marco Elver)\n- kselftest/arm64: Don't leak pipe fds in pac.exec_sign_all() (Mark Brown)\n- btrfs: avoid unnecessary device path update for the same device (Qu Wenruo)\n- s390/cpum_sf: Handle CPU hotplug remove during sampling (Thomas Richter)\n- epoll: annotate racy check (Christian Brauner)\n- iommu/arm-smmu: Defer probe of clients after smmu device bound (Pratyush Brahma)\n- ocfs2: update seq_file index in ocfs2_dlm_seq_next (Wengang Wang)\n- mmc: core: Further prevent card detect during shutdown (Ulf Hansson)\n- mmc: sdhci-pci: Add DMI quirk for missing CD GPIO on Vexia Edu Atla 10 tablet (Hans de Goede)\n- regmap: detach regmap from dev on regmap_exit (Cosmin Tanislav)\n- xsk: fix OOB map writes when deleting elements (Maciej Fijalkowski)\n- dma-buf: fix dma_fence_array_signaled v4 (Christian Konig)\n- bpf: fix OOB devmap writes when deleting elements (Maciej Fijalkowski)\n- bcache: revert replacing IS_ERR_OR_NULL with IS_ERR again (Liequan Che)\n- nilfs2: fix potential out-of-bounds memory access in nilfs_find_entry() (Ryusuke Konishi)\n- scsi: ufs: core: sysfs: Prevent div by zero (Gwendal Grignou)\n- scsi: qla2xxx: Remove check req_sg_cnt should be equal to rsp_sg_cnt (Saurav Kashyap)\n- scsi: qla2xxx: Fix use after free on unload (Quinn Tran)\n- scsi: qla2xxx: Supported speed displayed incorrectly for VPorts (Anil Gurumurthy)\n- scsi: qla2xxx: Fix NVMe and NPIV connect issue (Quinn Tran)\n- ALSA: hda/realtek: Add support for Samsung Galaxy Book3 360 (NP730QFG) (Sahas Leelodharry)\n- ALSA: hda/realtek: Enable mute and micmute LED on HP ProBook 430 G8 (Nazar Bilinskyi)\n- ALSA: usb-audio: add mixer mapping for Corsair HS80 (Marie Ramlow)\n- arm64: ptrace: fix partial SETREGSET for NT_ARM_TAGGED_ADDR_CTRL (Mark Rutland)\n- tracing: Fix cmp_entries_dup() to respect sort() comparison rules (Kuan-Wei Chiu)\n- can: dev: can_set_termination(): allow sleeping GPIOs (Marc Kleine-Budde)\n- watchdog: rti: of: honor timeout-sec property (Alexander Sverdlin)\n- HID: wacom: fix when get product name maybe null pointer (WangYuli)\n- bpf: Fix exact match conditions in trie_get_next_key() (Hou Tao)\n- bpf: Handle BPF_EXIST and BPF_NOEXIST for LPM trie (Hou Tao)\n- ocfs2: free inode when ocfs2_get_init_inode() fails (Tetsuo Handa)\n- drm/v3d: Enable Performance Counters before clearing them (Maira Canal)\n- spi: mpc52xx: Add cancel_work_sync before module remove (Pei Xiao)\n- tools: Override makefile ARCH variable if defined, but empty (Bjorn Topel)\n- ALSA: usb-audio: Notify xrun for low-latency mode (Takashi Iwai)\n- ALSA: pcm: Avoid reference to status-state (Takashi Iwai)\n- ALSA: pcm: Add more disconnection checks at file ops (Takashi Iwai)\n- tcp_bpf: Fix the sk_mem_uncharge logic in tcp_bpf_sendmsg (Zijian Zhang)\n- drm/sti: Add __iomem for mixer_dbg_mxn's parameter (Pei Xiao)\n- bpftool: fix potential NULL pointer dereferencing in prog_dump() (Amir Mohammadi)\n- bpftool: Remove asserts from JIT disassembler (Quentin Monnet)\n- serial: amba-pl011: Fix RX stall when DMA is used (Kartik Rajput)\n- serial: amba-pl011: Use port lock wrappers (Thomas Gleixner)\n- dt-bindings: serial: rs485: Fix rs485-rts-delay property (Michal Simek)\n- dt_bindings: rs485: Correct delay values (Lino Sanfilippo)\n- gpio: grgpio: Add NULL check in grgpio_probe (Charles Han)\n- gpio: grgpio: use a helper variable to store the address of ofdev-dev (Bartosz Golaszewski)\n- geneve: do not assume mac header is set in geneve_xmit_skb() (Eric Dumazet)\n- ethtool: Fix wrong mod state in case of verbose and no_mask bitset (Kory Maincent)\n- netfilter: nft_set_hash: skip duplicated elements pending gc run (Pablo Neira Ayuso)\n- netfilter: ipset: Hold module reference while requesting a module (Phil Sutter)\n- net: sched: fix erspan_opt settings in cls_flower (Xin Long)\n- igb: Fix potential invalid memory access in igb_init_module() (Yuan Can)\n- net/qed: allow old cards not supporting 'num_images' to work (Louis Leseur)\n- net/smc: fix LGR and link use-after-free issue (Wen Gu)\n- net/smc: Limit backlog connections (D. Wythe)\n- tipc: Fix use-after-free of kernel socket in cleanup_bearer(). (Kuniyuki Iwashima)\n- dccp: Fix memory leak in dccp_feat_change_recv (Ivan Solodovnikov)\n- net/ipv6: release expired exception dst cached in socket (Jiri Wiesner)\n- can: j1939: j1939_session_new(): fix skb reference counting (Dmitry Antipov)\n- net: hsr: avoid potential out-of-bound access in fill_frame_info() (Eric Dumazet)\n- net/sched: tbf: correct backlog statistic for GSO packets (Martin Ottens)\n- ptp: Add error handling for adjfine callback in ptp_clock_adjtime (Ajay Kaher)\n- netfilter: x_tables: fix LED ID check in led_tg_check() (Dmitry Antipov)\n- ipvs: fix UB due to uninitialized stack access in ip_vs_protocol_init() (Jinghao Jia)\n- can: ems_usb: ems_usb_rx_err(): fix {rx,tx}_errors statistics (Dario Binacchi)\n- can: sun4i_can: sun4i_can_err(): fix {rx,tx}_errors statistics (Dario Binacchi)\n- can: ifi_canfd: ifi_canfd_handle_lec_err(): fix {rx,tx}_errors statistics (Dario Binacchi)\n- can: m_can: m_can_handle_lec_err(): fix {rx,tx}_errors statistics (Dario Binacchi)\n- can: sun4i_can: sun4i_can_err(): call can_change_state() even if cf is NULL (Dario Binacchi)\n- can: c_can: c_can_handle_bus_err(): update statistics if skb allocation fails (Dario Binacchi)\n- can: do not increase rx statistics when generating a CAN rx error message frame (Vincent Mailhol)\n- can: peak_usb: CANFD: store 64-bits hw timestamps (Stephane Grosjean)\n- watchdog: mediatek: Make sure system reset gets asserted in mtk_wdt_restart() (Yassine Oudjana)\n- iTCO_wdt: mask NMI_NOW bit for update_no_reboot_bit() call (Oleksandr Ocheretnyi)\n- drm/etnaviv: flush shader L1 cache after user commandstream (Lucas Stach)\n- drm/sti: avoid potential dereference of error pointers (Ma Ke)\n- drm/sti: avoid potential dereference of error pointers in sti_gdp_atomic_check (Ma Ke)\n- drm/sti: avoid potential dereference of error pointers in sti_hqvdp_atomic_check (Ma Ke)\n- btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc() (Josef Bacik)\n- nfsd: fix nfs4_openowner leak when concurrent nfsd4_open occur (Yang Erkun)\n- nfsd: make sure exp active before svc_export_show (Yang Erkun)\n- PCI: rockchip-ep: Fix address translation unit programming (Damien Le Moal)\n- dm thin: Add missing destroy_work_on_stack() (Yuan Can)\n- ovl: properly handle large files in ovl_security_fileattr (Oleksandr Tymoshenko)\n- PCI: keystone: Add link up check to ks_pcie_other_map_bus() (Kishon Vijay Abraham I)\n- i3c: master: Fix miss free init_dyn_addr at i3c_master_put_i3c_addrs() (Frank Li)\n- scsi: ufs: exynos: Fix hibern8 notify callbacks (Peter Griffin)\n- util_macros.h: fix/rework find_closest() macros (Alexandru Ardelean)\n- s390/entry: Mark IRQ entries to fix stack depot warnings (Vasily Gorbik)\n- ad7780: fix division by zero in ad7780_write_raw() (Zicheng Qu)\n- btrfs: ref-verify: fix use-after-free after invalid ref action (Filipe Manana)\n- btrfs: add a sanity check for btrfs root in btrfs_search_slot() (Lizhi Xu)\n- btrfs: add might_sleep() annotations (ChenXiaoSong)\n- quota: flush quota_release_work upon quota writeback (Ojaswin Mujoo)\n- xfs: remove unknown compat feature check in superblock write validation (Long Li)\n- xfs: fix log recovery when unknown rocompat bits are set (Darrick J. Wong)\n- ASoC: fsl_micfil: fix the naming style for mask definition (Shengjiu Wang)\n- sh: intc: Fix use-after-free bug in register_intc_controller() (Dan Carpenter)\n- sunrpc: clear XPRT_SOCK_UPD_TIMEOUT when reset transport (Liu Jian)\n- sunrpc: remove unnecessary test in rpc_task_set_client() (Thiago Rafael Becker)\n- nfs: ignore SB_RDONLY when mounting nfs (Li Lingfeng)\n- modpost: remove incorrect code in do_eisa_entry() (Masahiro Yamada)\n- rtc: ab-eoz9: don't fail temperature reads on undervoltage notification (Maxime Chevallier)\n- 9p/xen: fix release of IRQ (Alex Zenla)\n- 9p/xen: fix init sequence (Alex Zenla)\n- block: return unsigned int from bdev_io_min (Christoph Hellwig)\n- jffs2: fix use of uninitialized variable (Qingfang Deng)\n- ubifs: authentication: Fix use-after-free in ubifs_tnc_end_commit (Waqar Hameed)\n- ubi: fastmap: Fix duplicate slab cache names while attaching (Zhihao Cheng)\n- ubifs: Correct the total block count by deducting journal reservation (Zhihao Cheng)\n- rtc: check if __rtc_read_time was successful in rtc_timer_do_work() (Yongliang Gao)\n- rtc: abx80x: Fix WDT bit position of the status register (Nobuhiro Iwamatsu)\n- rtc: st-lpc: Use IRQF_NO_AUTOEN flag in request_irq() (Jinjie Ruan)\n- NFSv4.0: Fix a use-after-free problem in the asynchronous open() (Trond Myklebust)\n- um: Always dump trace for specified task in show_stack (Tiwei Bie)\n- um: Fix the return value of elf_core_copy_task_fpregs (Tiwei Bie)\n- um: Fix potential integer overflow during physmem setup (Tiwei Bie)\n- rpmsg: glink: Propagate TX failures in intentless mode as well (Bjorn Andersson)\n- SUNRPC: make sure cache entry active before cache_show (Yang Erkun)\n- NFSD: Prevent a potential integer overflow (Chuck Lever)\n- lib: string_helpers: silence snprintf() output truncation warning (Bartosz Golaszewski)\n- usb: dwc3: gadget: Fix looping of queued SG entries (Thinh Nguyen)\n- usb: dwc3: gadget: Fix checking for number of TRBs left (Thinh Nguyen)\n- ALSA: hda/realtek: Apply quirk for Medion E15433 (Takashi Iwai)\n- ALSA: hda/realtek: Fix Internal Speaker and Mic boost of Infinix Y4 Max (Dinesh Kumar)\n- ALSA: hda/realtek: Set PCBeep to default value for ALC274 (Kailang Yang)\n- ALSA: hda/realtek: Update ALC225 depop procedure (Kailang Yang)\n- ALSA: pcm: Add sanity NULL check for the default mmap fault handler (Takashi Iwai)\n- media: v4l2-core: v4l2-dv-timings: check cvt/gtf result (Hans Verkuil)\n- soc: fsl: rcpm: fix missing of_node_put() in copy_ippdexpcr1_setting() (Javier Carrasco)\n- media: wl128x: Fix atomicity violation in fmc_send_cmd() (Qiu-ji Chen)\n- HID: wacom: Interpret tilt data from Intuos Pro BT as signed values (Jason Gerecke)\n- block: fix ordering between checking BLK_MQ_S_STOPPED request adding (Muchun Song)\n- arm64: tls: Fix context-switching of tpidrro_el0 when kpti is enabled (Will Deacon)\n- sh: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK (Huacai Chen)\n- um: vector: Do not use drvdata in release (Tiwei Bie)\n- serial: 8250: omap: Move pm_runtime_get_sync (Bin Liu)\n- um: net: Do not use drvdata in release (Tiwei Bie)\n- um: ubd: Do not use drvdata in release (Tiwei Bie)\n- ubi: wl: Put source PEB into correct list if trying locking LEB failed (Zhihao Cheng)\n- platform/chrome: cros_ec_typec: fix missing fwnode reference decrement (Javier Carrasco)\n- cpufreq: mediatek-hw: Fix wrong return value in mtk_cpufreq_get_cpu_power() (Jinjie Ruan)\n- mtd: spi-nor: core: replace dummy buswidth from addr to data (Cheng Ming Lin)\n- spi: Fix acpi deferred irq probe (Stanislaw Gruszka)\n- netfilter: ipset: add missing range check in bitmap_ip_uadt (Jeongjun Park)\n- gpio: exar: set value when external pull-up or pull-down is present (Sai Kumar Cholleti)\n- Revert 'serial: sh-sci: Clean sci_ports[0] after at earlycon exit' (Greg Kroah-Hartman)\n- serial: sh-sci: Clean sci_ports[0] after at earlycon exit (Claudiu Beznea)\n- Revert 'usb: gadget: composite: fix OS descriptors w_value logic' (Michal Vrastil)\n- driver core: bus: Fix double free in driver API bus_register() (Zijun Hu)\n- usb: xhci: Fix TD invalidation under pending Set TR Dequeue (Michal Pecio)\n- Bluetooth: Fix type of len in rfcomm_sock_getsockopt{,_old}() (Andrej Shadura)\n- exfat: fix uninit-value in __exfat_get_dentry_set (Namjae Jeon)\n- locking/lockdep: Avoid creating new name string literals in lockdep_set_subclass() (Ahmed Ehab)\n- tty: ldsic: fix tty_ldisc_autoload sysctl's proc_handler (Nicolas Bouchinet)\n- apparmor: test: Fix memory leak for aa_unpack_strdup() (Jinjie Ruan)\n- comedi: Flush partial mappings in error case (Jann Horn)\n- fsnotify: fix sending inotify event with unexpected filename (Amir Goldstein)\n- PCI: Fix use-after-free of slot-bus on hot remove (Lukas Wunner)\n- KVM: arm64: Ignore PMCNTENSET_EL0 while checking for overflow status (Raghavendra Rao Ananta)\n- powerpc/pseries: Fix KVM guest detection for disabling hardlockup detector (Gautam Menghani)\n- crypto: x86/aegis128 - access 32-bit arguments as 32-bit (Eric Biggers)\n- perf/x86/intel/pt: Fix buffer full but size is 0 case (Adrian Hunter)\n- ASoC: codecs: Fix atomicity violation in snd_soc_component_get_drvdata() (Qiu-ji Chen)\n- jfs: xattr: check invalid xattr size more strictly (Artem Sadovnikov)\n- ext4: fix FS_IOC_GETFSMAP handling (Theodore Ts'o)\n- ext4: supress data-race warnings in ext4_free_inodes_{count,set}() (Jeongjun Park)\n- ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices (Benoit Sevens)\n- soc: qcom: socinfo: fix revision check in qcom_socinfo_probe() (Manikanta Mylavarapu)\n- ASoC: Intel: sst: Fix used of uninitialized ctx to log an error (Hans de Goede)\n- Revert 'drivers: clk: zynqmp: update divider round rate logic' (Joel Guittet)\n- usb: ehci-spear: fix call balance of sehci clk handling routines (Vitalii Mordan)\n- ALSA: usb-audio: Fix out of bounds reads when finding clock sources (Takashi Iwai)\n- xen: Fix the issue of resource not being properly released in xenbus_dev_probe() (Qiu-ji Chen)\n- ksmbd: fix slab-use-after-free in smb3_preauth_hash_rsp (Namjae Jeon)\n- parisc: fix a possible DMA corruption (Mikulas Patocka)\n- apparmor: fix 'Do simple duplicate message elimination' (chao liu)\n- ALSA: hda/realtek: Update ALC256 depop procedure (Kailang Yang)\n- counter: stm32-timer-cnt: Add check for clk_enable() (Jiasheng Jiang)\n- misc: apds990x: Fix missing pm_runtime_disable() (Jinjie Ruan)\n- USB: chaoskey: Fix possible deadlock chaoskey_list_lock (Edward Adam Davis)\n- USB: chaoskey: fail open after removal (Oliver Neukum)\n- usb: yurex: make waiting on yurex_write interruptible (Oliver Neukum)\n- usb: using mutex lock and supporting O_NONBLOCK flag in iowarrior_read() (Jeongjun Park)\n- iio: light: al3010: Fix an error handling path in al3010_probe() (Christophe JAILLET)\n- bnxt_en: Reserve rings after PCIe AER recovery if NIC interface is down (Saravanan Vajravel)\n- net: hsr: fix hsr_init_sk() vs network/transport headers. (Eric Dumazet)\n- spi: atmel-quadspi: Fix register name in verbose logging function (Csokas, Bence)\n- octeontx2-af: RPM: Fix mismatch in lmac type (Hariprasad Kelam)\n- net: stmmac: dwmac-socfpga: Set RX watchdog interrupt as broken (Maxime Chevallier)\n- marvell: pxa168_eth: fix call balance of pep-clk handling routines (Vitalii Mordan)\n- net: mdio-ipq4019: add missing error check (Rosen Penev)\n- net: usb: lan78xx: Fix refcounting and autosuspend on invalid WoL configuration (Oleksij Rempel)\n- tg3: Set coherent DMA mask bits to 31 for BCM57766 chipsets (Pavan Chebbi)\n- net: usb: lan78xx: Fix memory leak on device unplug by freeing PHY device (Oleksij Rempel)\n- power: supply: bq27xxx: Fix registers of bq27426 (Barnabas Czeman)\n- power: supply: core: Remove might_sleep() from power_supply_put() (Bart Van Assche)\n- fs_parser: update mount_api doc to match function signature (Randy Dunlap)\n- vfio/pci: Properly hide first-in-list PCIe extended capability (Avihai Horon)\n- selftests/mount_setattr: Fix failures on 64K PAGE_SIZE kernels (Michael Ellerman)\n- vdpa/mlx5: Fix suboptimal range on iotlb iteration (Si-Wei Liu)\n- hwmon: (tps23861) Fix reporting of negative temperatures (Murad Masimov)\n- NFSD: Fix nfsd4_shutdown_copy() (Chuck Lever)\n- svcrdma: fix miss destroy percpu_counter in svc_rdma_proc_init() (Ye Bin)\n- sunrpc: simplify two-level sysctl registration for svcrdma_parm_table (Luis Chamberlain)\n- NFSD: Cap the number of bytes copied by nfs4_reset_recoverydir() (Chuck Lever)\n- NFSD: Prevent NULL dereference in nfsd4_process_cb_update() (Chuck Lever)\n- remoteproc: qcom_q6v5_mss: Re-order writes to the IMEM region (Sibi Sankar)\n- rpmsg: glink: use only lower 16-bits of param2 for CMD_OPEN name length (Jonathan Marek)\n- rpmsg: glink: Fix GLINK command prefix (Bjorn Andersson)\n- rpmsg: glink: Send READ_NOTIFY command in FIFO full case (Arun Kumar Neelakantam)\n- rpmsg: glink: Add TX_DATA_CONT command while sending (Arun Kumar Neelakantam)\n- perf trace: Avoid garbage when not printing a syscall's arguments (Benjamin Peterson)\n- perf trace: Do not lose last events in a race (Benjamin Peterson)\n- svcrdma: Address an integer overflow (Chuck Lever)\n- m68k: coldfire/device.c: only build FEC when HW macros are defined (Antonio Quartulli)\n- m68k: mcfgpio: Fix incorrect register offset for CONFIG_M5441x (Jean-Michel Hautbois)\n- perf trace: avoid garbage when not printing a trace event's arguments (Benjamin Peterson)\n- f2fs: check curseg-inited before write_sum_page in change_curseg (Yongpeng Yang)\n- f2fs: remove the unused flush argument to change_curseg (Christoph Hellwig)\n- f2fs: open code allocate_segment_by_default (Christoph Hellwig)\n- f2fs: remove struct segment_allocation default_salloc_ops (Christoph Hellwig)\n- f2fs: fix the wrong f2fs_bug_on condition in f2fs_do_replace_block (LongPing Wei)\n- PCI: cpqphp: Fix PCIBIOS_* return value confusion (Ilpo Jarvinen)\n- PCI: cpqphp: Use PCI_POSSIBLE_ERROR() to check config reads (weiyufeng)\n- perf probe: Correct demangled symbols in C++ program (Leo Yan)\n- perf probe: Fix libdw memory leak (Ian Rogers)\n- PCI: Fix reset_method_store() memory leak (Todd Kjos)\n- perf cs-etm: Don't flush when packet_queue fills up (James Clark)\n- mailbox: arm_mhuv2: clean up loop in get_irq_chan_comb() (Dan Carpenter)\n- pinctrl: k210: Undef K210_PC_DEFAULT (zhang jiao)\n- clk: clk-axi-clkgen: make sure to enable the AXI bus clock (Nuno Sa)\n- dt-bindings: clock: axi-clkgen: include AXI clk (Nuno Sa)\n- fbdev: sh7760fb: Fix a possible memory leak in sh7760fb_alloc_mem() (Zhen Lei)\n- fbdev/sh7760fb: Alloc DMA memory from hardware device (Thomas Zimmermann)\n- powerpc/kexec: Fix return of uninitialized variable (Zhang Zekun)\n- powerpc/sstep: make emulate_vsx_load and emulate_vsx_store static (Michal Suchanek)\n- ocfs2: fix uninitialized value in ocfs2_file_read_iter() (Dmitry Antipov)\n- RDMA/hns: Fix out-of-order issue of requester when setting FENCE (Junxian Huang)\n- scsi: qedi: Fix a possible memory leak in qedi_alloc_and_init_sb() (Zhen Lei)\n- scsi: qedf: Fix a possible memory leak in qedf_alloc_and_init_sb() (Zhen Lei)\n- scsi: fusion: Remove unused variable 'rc' (Zeng Heng)\n- scsi: bfa: Fix use-after-free in bfad_im_module_exit() (Ye Bin)\n- mfd: rt5033: Fix missing regmap_del_irq_chip() (Zhang Changzhong)\n- clk: imx: clk-scu: fix clk enable state save and restore (Dong Aisheng)\n- clk: imx: lpcg-scu: SW workaround for errata (e10858) (Peng Fan)\n- powerpc/pseries: Fix dtl_access_lock to be a rw_semaphore (Michael Ellerman)\n- powerpc/mm/fault: Fix kfence page fault reporting (Ritesh Harjani (IBM))\n- mtd: rawnand: atmel: Fix possible memory leak (Miquel Raynal)\n- cpufreq: loongson2: Unregister platform_driver on failure (Yuan Can)\n- mfd: intel_soc_pmic_bxtwc: Use IRQ domain for PMIC devices (Andy Shevchenko)\n- mfd: intel_soc_pmic_bxtwc: Use IRQ domain for TMU device (Andy Shevchenko)\n- mfd: intel_soc_pmic_bxtwc: Use IRQ domain for USB Type-C device (Andy Shevchenko)\n- mfd: intel_soc_pmic_bxtwc: Use dev_err_probe() (Andy Shevchenko)\n- mfd: da9052-spi: Change read-mask to write-mask (Marcus Folkesson)\n- mfd: tps65010: Use IRQF_NO_AUTOEN flag in request_irq() to fix race (Jinjie Ruan)\n- pinctrl: zynqmp: drop excess struct member description (Bartosz Golaszewski)\n- trace/trace_event_perf: remove duplicate samples on the first tracepoint event (Levi Yun)\n- bpf: fix recursive lock when verdict program return SK_PASS (Jiayuan Chen)\n- wireguard: selftests: load nf_conntrack if not present (Hangbin Liu)\n- netpoll: Use rcu_access_pointer() in netpoll_poll_lock (Breno Leitao)\n- Bluetooth: fix use-after-free in device_for_each_child() (Dmitry Antipov)\n- driver core: Introduce device_find_any_child() helper (Andy Shevchenko)\n- ALSA: 6fire: Release resources at card release (Takashi Iwai)\n- ALSA: caiaq: Use snd_card_free_when_closed() at disconnection (Takashi Iwai)\n- ALSA: us122l: Use snd_card_free_when_closed() at disconnection (Takashi Iwai)\n- ALSA: usx2y: Use snd_card_free_when_closed() at disconnection (Takashi Iwai)\n- net: rfkill: gpio: Add check for clk_enable() (Mingwei Zheng)\n- drm/amdkfd: Fix wrong usage of INIT_WORK() (Yuan Can)\n- selftests: net: really check for bg process completion (Paolo Abeni)\n- bpf, sockmap: Fix sk_msg_reset_curr (Zijian Zhang)\n- bpf, sockmap: Several fixes to bpf_msg_pop_data (Zijian Zhang)\n- bpf, sockmap: Several fixes to bpf_msg_push_data (Zijian Zhang)\n- selftests/bpf: Add push/pop checking for msg_verify_data in test_sockmap (Zijian Zhang)\n- selftests/bpf: Fix total_bytes in msg_loop_rx in test_sockmap (Zijian Zhang)\n- selftests, bpf: Add one test for sockmap with strparser (Liu Jian)\n- selftests/bpf: Fix SENDPAGE data logic in test_sockmap (Zijian Zhang)\n- selftests/bpf: Add txmsg_pass to pull/push/pop in test_sockmap (Zijian Zhang)\n- netlink: typographical error in nlmsg_type constants definition (Maurice Lambert)\n- netfilter: nf_tables: must hold rcu read lock while iterating object type list (Florian Westphal)\n- netfilter: nf_tables: skip transaction if update object is not implemented (Pablo Neira Ayuso)\n- drm/msm/dpu: cast crtc_clk calculation to u64 in _dpu_core_perf_calc_clk() (Zichen Xie)\n- wifi: wfx: Fix error handling in wfx_core_init() (Yuan Can)\n- drm/etnaviv: hold GPU lock across perfmon sampling (Lucas Stach)\n- drm/etnaviv: fix power register offset on GC300 (Doug Brown)\n- drm/etnaviv: Request pages from DMA32 zone on addressing_limited (Xiaolei Wang)\n- drm/msm/adreno: Use IRQF_NO_AUTOEN flag in request_irq() (Jinjie Ruan)\n- drm/panfrost: Remove unused id_mask from struct panfrost_model (Steven Price)\n- octeontx2-pf: handle otx2_mbox_get_rsp errors in cn10k.c (Dipendra Khadka)\n- octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_ethtool.c (Dipendra Khadka)\n- octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_common.c (Dipendra Khadka)\n- drm: fsl-dcu: enable PIXCLK on LS1021A (Matthias Schiffer)\n- wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_config_scan() (Alper Nebi Yasak)\n- selftests/bpf: Fix txmsg_redir of test_txmsg_pull in test_sockmap (Zijian Zhang)\n- selftests/bpf: Fix msg_verify_data in test_sockmap (Zijian Zhang)\n- drm/bridge: tc358767: Fix link properties discovery (Tomi Valkeinen)\n- netdevsim: copy addresses for both in and out paths (Hangbin Liu)\n- libbpf: fix sym_is_subprog() logic for weak global subprogs (Andrii Nakryiko)\n- bpf: Fix the xdp_adjust_tail sample prog issue (Yuan Chen)\n- libbpf: Fix output .symtab byte-order during linking (Tony Ambardar)\n- drm/bridge: anx7625: Drop EDID cache on bridge power off (Pin-yen Lin)\n- ASoC: dt-bindings: mt6359: Update generic node name and dmic-mode (Macpaul Lin)\n- ASoC: fsl_micfil: fix regmap_write_bits usage (Shengjiu Wang)\n- ASoC: fsl_micfil: use GENMASK to define register bit fields (Sascha Hauer)\n- ASoC: fsl_micfil: do not define SHIFT/MASK for single bits (Sascha Hauer)\n- ASoC: fsl_micfil: Drop unnecessary register read (Sascha Hauer)\n- dt-bindings: vendor-prefixes: Add NeoFidelity, Inc (Igor Prusov)\n- wifi: ath10k: fix invalid VHT parameters in supported_vht_mcs_rate_nss2 (Baochen Qiang)\n- wifi: ath10k: fix invalid VHT parameters in supported_vht_mcs_rate_nss1 (Baochen Qiang)\n- drm/v3d: Address race-condition in MMU flush (Maira Canal)\n- drm/imx/ipuv3: Use IRQF_NO_AUTOEN flag in request_irq() (Jinjie Ruan)\n- drm/imx/dcss: Use IRQF_NO_AUTOEN flag in request_irq() (Jinjie Ruan)\n- wifi: mwifiex: Use IRQF_NO_AUTOEN flag in request_irq() (Jinjie Ruan)\n- wifi: p54: Use IRQF_NO_AUTOEN flag in request_irq() (Jinjie Ruan)\n- drm/omap: Fix locking in omap_gem_new_dmabuf() (Tomi Valkeinen)\n- drm/omap: Fix possible NULL dereference (Tomi Valkeinen)\n- wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service() (Jeongjun Park)\n- drm/mm: Mark drm_mm_interval_tree*() functions with __maybe_unused (Andy Shevchenko)\n- platform/x86: panasonic-laptop: Return errno correctly in show callback (Yao Zi)\n- platform/x86: panasonic-laptop: Replace snprintf in show functions with sysfs_emit (Qing Wang)\n- media: atomisp: Add check for rgby_data memory allocation failure (Li Huafei)\n- media: atomisp: remove #ifdef HAS_NO_HMEM (Mauro Carvalho Chehab)\n- media: venus: provide ctx queue lock for ioctl synchronization (Sergey Senozhatsky)\n- venus: venc: add handling for VIDIOC_ENCODER_CMD (Dikshita Agarwal)\n- media: venus : Addition of support for VIDIOC_TRY_ENCODER_CMD (Dikshita Agarwal)\n- media: venus : Addition of EOS Event support for Encoder (Viswanath Boma)\n- media: venus: vdec: decoded picture buffer handling during reconfig sequence (Mansur Alisha Shaik)\n- media: venus: venc: Use pmruntime autosuspend (Stanimir Varbanov)\n- firmware: arm_scpi: Check the DVFS OPP count returned by the firmware (Luo Qiu)\n- selftests/resctrl: Protect against array overrun during iMC config parsing (Reinette Chatre)\n- arm64: dts: mediatek: mt8183-kukui-jacuzzi: Add supplies for fixed regulators (Chen-Yu Tsai)\n- arm64: dts: mediatek: mt8183-kukui-jacuzzi: Fix DP bridge supply names (Chen-Yu Tsai)\n- arm64: dts: mt8183: jacuzzi: Move panel under aux-bus (Hsin-Yi Wang)\n- arm64: dts: mt8183: jacuzzi: remove unused ddc-i2c-bus (Hsin-Yi Wang)\n- regmap: irq: Set lockdep class for hierarchical IRQ domains (Andy Shevchenko)\n- spi: zynqmp-gqspi: Undo runtime PM changes at driver exit time (Jinjie Ruan)\n- spi: tegra210-quad: Avoid shift-out-of-bounds (Breno Leitao)\n- pmdomain: ti-sci: Add missing of_node_put() for args.np (Zhang Zekun)\n- ARM: dts: cubieboard4: Fix DCDC5 regulator constraints (Andre Przywara)\n- pwm: imx27: Workaround of the pwm output bug when decrease the duty cycle (Clark Wang)\n- arm64: dts: mt8183: Damu: add i2c2's i2c-scl-internal-delay-ns (Daolong Zhu)\n- arm64: dts: mt8183: burnet: add i2c2's i2c-scl-internal-delay-ns (Daolong Zhu)\n- arm64: dts: mt8183: fennel: add i2c2's i2c-scl-internal-delay-ns (Daolong Zhu)\n- cgroup/bpf: only cgroup v2 can be attached by bpf programs (Chen Ridong)\n- Revert 'cgroup: Fix memory leak caused by missing cgroup_bpf_offline' (Chen Ridong)\n- arm64: dts: mediatek: mt8173-elm-hana: Add vdd-supply to second source trackpad (Chen-Yu Tsai)\n- arm64: dts: mt8183: kukui: Fix the address of eeprom at i2c4 (Hsin-Te Yuan)\n- arm64: dts: mt8183: krane: Fix the address of eeprom at i2c4 (Hsin-Te Yuan)\n- tpm: fix signed/unsigned bug when checking event logs (Gregory Price)\n- mmc: mmc_spi: drop buggy snprintf() (Bartosz Golaszewski)\n- soc: qcom: geni-se: fix array underflow in geni_se_clk_tbl_get() (Dan Carpenter)\n- soc: ti: smartreflex: Use IRQF_NO_AUTOEN flag in request_irq() (Jinjie Ruan)\n- spi: spi-fsl-lpspi: Use IRQF_NO_AUTOEN flag in request_irq() (Jinjie Ruan)\n- spi: spi-fsl-lpspi: downgrade log level for pio mode (Alexander Stein)\n- clocksource/drivers:sp804: Make user selectable (Mark Brown)\n- kcsan, seqlock: Fix incorrect assumption in read_seqbegin() (Marco Elver)\n- kcsan, seqlock: Support seqcount_latch_t (Marco Elver)\n- seqlock/latch: Provide raw_read_seqcount_latch_retry() (Peter Zijlstra)\n- timekeeping: Consolidate fast timekeeper (Thomas Gleixner)\n- time: Fix references to _msecs_to_jiffies() handling of values (Miguel Ojeda)\n- crypto: cavium - Fix an error handling path in cpt_ucode_load_fw() (Christophe JAILLET)\n- crypto: bcm - add error check in the ahash_hmac_init function (Chen Ridong)\n- crypto: caam - add error check to caam_rsa_set_priv_key_form (Chen Ridong)\n- EDAC/igen6: Avoid segmentation fault on module unload (Orange Kao)\n- crypto: cavium - Fix the if condition to exit loop after timeout (Everest K.C)\n- crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY (Yi Yang)\n- EDAC/fsl_ddr: Fix bad bit shift operations (Priyanka Singh)\n- thermal: core: Initialize thermal zones before registering them (Rafael J. Wysocki)\n- crypto: qat - remove faulty arbiter config reset (Ahsan Atta)\n- EDAC/bluefield: Fix potential integer overflow (David Thompson)\n- firmware: google: Unregister driver_info on failure (Yuan Can)\n- crypto: caam - Fix the pointer passed to caam_qi_shutdown() (Christophe JAILLET)\n- hfsplus: don't query the device logical block size multiple times (Thadeu Lima de Souza Cascardo)\n- s390/syscalls: Avoid creation of arch/arch/ directory (Masahiro Yamada)\n- acpi/arm64: Adjust error handling procedure in gtdt_parse_timer_block() (Aleksandr Mishin)\n- arm64: fix .data.rel.ro size assertion when CONFIG_LTO_CLANG (Masahiro Yamada)\n- m68k: mvme147: Reinstate early console (Daniel Palmer)\n- m68k: mvme16x: Add and use 'mvme16x.h' (Geert Uytterhoeven)\n- m68k: mvme147: Fix SCSI controller IRQ numbers (Daniel Palmer)\n- nvme-pci: fix freeing of the HMB descriptor table (Christoph Hellwig)\n- initramfs: avoid filename buffer overrun (David Disseldorp)\n- mips: asm: fix warning when disabling MIPS_FP_SUPPORT (Jonas Gorski)\n- brd: defer automatic disk creation until module initialization succeeds (Yang Erkun)\n- brd: remove brd_devices_mutex mutex (Tetsuo Handa)\n- s390/cio: Do not unregister the subchannel based on DNV (Vineeth Vijayan)\n- kselftest/arm64: mte: fix printf type warnings about longs (Andre Przywara)\n- x86/barrier: Do not serialize MSR accesses on AMD (Borislav Petkov (AMD))\n- nvme: fix metadata handling in nvme-passthrough (Puranjay Mohan)\n- cifs: Fix buffer overflow when parsing NFS reparse points (Pali Rohar)\n- rcu-tasks: Idle tasks on offline CPUs are in quiescent states (Paul E. McKenney)\n- ipmr: Fix access to mfc_cache_list without lock held (Breno Leitao)\n- ARM: 9420/1: smp: Fix SMP for xip kernels (Harith G)\n- ALSA: usb-audio: Fix Yamaha P-125 Quirk Entry (Eryk Zagorski)\n- proc/softirqs: replace seq_printf with seq_put_decimal_ull_width (David Wang)\n- ASoC: stm: Prevent potential division by zero in stm32_sai_get_clk_div() (Luo Yifan)\n- ASoC: stm: Prevent potential division by zero in stm32_sai_mclk_round_rate() (Luo Yifan)\n- can: j1939: fix error in J1939 documentation. (Alexander Holzl)\n- platform/x86: dell-wmi-base: Handle META key Lock/Unlock events (Kurt Borja)\n- platform/x86: dell-smbios-base: Extends support to Alienware products (Kurt Borja)\n- regulator: rk808: Add apply_bit for BUCK3 on RK809 (Mikhail Rudenko)\n- soc: qcom: Add check devm_kasprintf() returned value (Charles Han)\n- net: usb: qmi_wwan: add Quectel RG650V (Benoit Monin)\n- x86/amd_nb: Fix compile-testing without CONFIG_AMD_NB (Arnd Bergmann)\n- ALSA: hda/realtek: Add subwoofer quirk for Infinix ZERO BOOK 13 (Piyush Raj Chouhan)\n- selftests/watchdog-test: Fix system accidentally reset after watchdog-test (Li Zhijian)\n- usb: add support for new USB device ID 0x17EF:0x3098 for the r8152 driver (Benjamin Grosse)\n- mac80211: fix user-power when emulating chanctx (Ben Greear)\n- wifi: iwlwifi: mvm: Use the sync timepoint API in suspend (Daniel Gabay)\n- ASoC: Intel: sst: Support LPE0F28 ACPI HID (Hans de Goede)\n- ASoC: Intel: bytcr_rt5640: Add DMI quirk for Vexia Edu Atla 10 tablet (Hans de Goede)\n- ASoC: Intel: bytcr_rt5640: Add support for non ACPI instantiated codec (Hans de Goede)\n- NFS: nfs_async_write_reschedule_io must not recurse into the writeback code (Trond Myklebust)\n- mm: resolve faulty mmap_region() error path behaviour (Lorenzo Stoakes)\n- mm: refactor arch_calc_vm_flag_bits() and arm64 MTE handling (Lorenzo Stoakes)\n- mm: unconditionally close VMAs on error (Lorenzo Stoakes)\n- mm: avoid unsafe VMA hook invocation when error arises on mmap hook (Lorenzo Stoakes)\n- mptcp: cope racing subflow creation in mptcp_rcv_space_adjust (Paolo Abeni)\n- NFSD: Never decrement pending_async_copies on error (Chuck Lever)\n- NFSD: Initialize struct nfsd4_copy earlier (Chuck Lever)\n- NFSD: Limit the number of concurrent async COPY operations (Chuck Lever)\n- NFSD: Async COPY result needs to return a write verifier (Chuck Lever)\n- NFSD: initialize copy-cp_clp early in nfsd4_copy for use by trace point (Dai Ngo)\n- media: dvbdev: fix the logic when DVB_DYNAMIC_MINORS is not set (Mauro Carvalho Chehab)\n- mmc: sunxi-mmc: Fix A100 compatible description (Andre Przywara)\n- mmc: sunxi-mmc: Add D1 MMC variant (Samuel Holland)\n- drm/bridge: tc358768: Fix DSI command tx (Francesco Dolcini)\n- nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint (Ryusuke Konishi)\n- ocfs2: fix UBSAN warning in ocfs2_verify_volume() (Dmitry Antipov)\n- nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint (Ryusuke Konishi)\n- KVM: VMX: Bury Intel PT virtualization (guest/host mode) behind CONFIG_BROKEN (Sean Christopherson)\n- KVM: nVMX: Treat vpid01 as current if L2 is active, but with VPID disabled (Sean Christopherson)\n- vdpa/mlx5: Fix PA offset with unaligned starting iotlb map (Si-Wei Liu)\n- ocfs2: uncache inode which has failed entering the group (Dmitry Antipov)\n- mm: fix NULL pointer dereference in alloc_pages_bulk_noprof (Jinjiang Tu)\n- x86/mm: Fix a kdump kernel failure on SME system when CONFIG_IMA_KEXEC=y (Baoquan He)\n- ARM: 9419/1: mm: Fix kernel memory mapping for xip kernels (Harith G)\n- samples: pktgen: correct dev to DEV (Wei Fang)\n- net/mlx5e: CT: Fix null-ptr-deref in add rule err flow (Moshe Shemesh)\n- net/mlx5e: kTLS, Fix incorrect page refcounting (Dragos Tatulea)\n- net/mlx5: fs, lock FTE when checking if active (Mark Bloch)\n- drm/rockchip: vop: Fix a dereferenced before check warning (Andy Yan)\n- netlink: terminate outstanding dump on socket close (Jakub Kicinski)\n- clk: qcom: gcc-qcs404: fix initial rate of GPLL3 (Gabor Juhos)\n- leds: lp55xx: Remove redundant test for invalid channel number (Michal Vokac)\n- iommu/io-pgtable-arm: Fix stage-2 map/unmap for concatenated tables (Mostafa Saleh)\n- vmstat: call fold_vm_zone_numa_events() before show per zone NUMA event (MengEn Sun)\n- ftrace: Fix regression with module command in stack_trace_filter (guoweikang)\n- ovl: Filter invalid inodes with missing lookup function (Vasiliy Kovalev)\n- media: uvcvideo: Require entities to have a non-zero unique ID (Thadeu Lima de Souza Cascardo)\n- media: uvcvideo: Stop stream during unregister (Ricardo Ribalda)\n- media: platform: allegro-dvt: Fix possible memory leak in allocate_buffers_internal() (Gaosheng Cui)\n- media: gspca: ov534-ov772x: Fix off-by-one error in set_frame_rate() (Jinjie Ruan)\n- media: venus: Fix pm_runtime_set_suspended() with runtime pm enabled (Jinjie Ruan)\n- media: ts2020: fix null-ptr-deref in ts2020_probe() (Li Zetao)\n- media: imx-jpeg: Ensure power suppliers be suspended before detach them (Ming Qian)\n- media: i2c: tc358743: Fix crash in the probe error path when using polling (Alexander Shiyan)\n- media: imx-jpeg: Set video drvdata before register video device (Ming Qian)\n- arm64: dts: allwinner: pinephone: Add mount matrix to accelerometer (Dragan Simic)\n- LTS version: v5.15.173 (Vijayendra Suman)\n- 9p: fix slab cache name creation for real (Linus Torvalds)\n- udf: Avoid directory type conversion failure due to ENOMEM (Jan Kara)\n- udf: Allocate name buffer in directory iterator on heap (Jan Kara)\n- mm/memory: add non-anonymous page check in the copy_present_page() (Yuanzheng Song)\n- io_uring: fix possible deadlock in io_register_iowq_max_workers() (Hagar Hemdan)\n- md/raid10: improve code of mrdev in raid10_sync_request (Li Nan)\n- net: usb: qmi_wwan: add Fibocom FG132 0x0112 composition (Reinhard Speyerer)\n- HID: lenovo: Add support for Thinkpad X1 Tablet Gen 3 keyboard (Hans de Goede)\n- HID: multitouch: Add quirk for Logitech Bolt receiver w/ Casa touchpad (Kenneth Albanowski)\n- fs: Fix uninitialized value issue in from_kuid and from_kgid (Alessandro Zanni)\n- vDPA/ifcvf: Fix pci_read_config_byte() return code handling (Yuan Can)\n- powerpc/powernv: Free name on error in opal_event_init() (Michael Ellerman)\n- drm/vmwgfx: Limit display layout ioctl array size to VMWGFX_NUM_DISPLAY_UNITS (Ian Forbes)\n- sound: Make CONFIG_SND depend on INDIRECT_IOMEM instead of UML (Julian Vetter)\n- crypto: marvell/cesa - Disable hash algorithms (Herbert Xu)\n- bpf: use kvzmalloc to allocate BPF verifier environment (Rik van Riel)\n- HID: multitouch: Add quirk for HONOR MagicBook Art 14 touchpad (WangYuli)\n- HID: multitouch: Add support for B2402FVA track point (Stefan Blum)\n- block: Fix elevator_get_default() checking for NULL q-tag_set (SurajSonawane2415)\n- irqchip/ocelot: Fix trigger register address (Sergey Matsievskiy)\n- 9p: Avoid creating multiple slab caches with the same name (Pedro Falcato)\n- LTS version: v5.15.172 (Vijayendra Suman)\n- ALSA: usb-audio: Add endianness annotations (Jan Schar)\n- vsock/virtio: Initialization of the dangling pointer occurring in vsk-trans (Hyunwoo Kim)\n- hv_sock: Initializing vsk-trans to NULL to prevent a dangling pointer (Hyunwoo Kim)\n- ALSA: usb-audio: Add quirks for Dell WD19 dock (Jan Schar)\n- ALSA: usb-audio: Support jack detection on Dell dock (Jan Schar)\n- ucounts: fix counter leak in inc_rlimit_get_ucounts() (Andrei Vagin)\n- ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove() (Andrew Kanner)\n- irqchip/gic-v3: Force propagation of the active state with a read-back (Marc Zyngier)\n- USB: serial: option: add Quectel RG650V (Benoit Monin)\n- USB: serial: option: add Fibocom FG132 0x0112 composition (Reinhard Speyerer)\n- USB: serial: qcserial: add support for Sierra Wireless EM86xx (Jack Wu)\n- USB: serial: io_edgeport: fix use after free in debug printk (Dan Carpenter)\n- usb: typec: fix potential out of bounds in ucsi_ccg_update_set_new_cam_cmd() (Dan Carpenter)\n- usb: musb: sunxi: Fix accessing an released usb phy (Zijun Hu)\n- fs/proc: fix compile warning about variable 'vmcore_mmap_ops' (Qi Xi)\n- media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format (Benoit Sevens)\n- net: do not delay dst_entries_add() in dst_release() (Eric Dumazet)\n- net: bridge: xmit: make sure we have at least eth header len bytes (Nikolay Aleksandrov)\n- btrfs: reinitialize delayed ref list after deleting it from the list (Filipe Manana)\n- nfs: Fix KMSAN warning in decode_getfattr_attrs() (Roberto Sassu)\n- io_uring/rw: fix missing NOWAIT check for O_DIRECT start write (Jens Axboe)\n- io_uring: use kiocb_{start,end}_write() helpers (Amir Goldstein)\n- fs: create kiocb_{start,end}_write() helpers (Amir Goldstein)\n- io_uring: rename kiocb_end_write() local helper (Amir Goldstein)\n- posix-cpu-timers: Clear TICK_DEP_BIT_POSIX_TIMER on clone (Benjamin Segall)\n- ALSA: usb-audio: Add quirk for HP 320 FHD Webcam (Takashi Iwai)\n- dm-unstriped: cast an operand to sector_t to prevent potential uint32_t overflow (Zichen Xie)\n- dm cache: fix potential out-of-bounds access on the first resume (Ming-Hung Tsai)\n- dm cache: optimize dirty bit checking with find_next_bit when resizing (Ming-Hung Tsai)\n- dm cache: fix out-of-bounds access to the dirty bitset when resizing (Ming-Hung Tsai)\n- dm cache: correct the number of origin blocks to match the target length (Ming-Hung Tsai)\n- thermal/drivers/qcom/lmh: Remove false lockdep backtrace (Dmitry Baryshkov)\n- drm/amdgpu: add missing size check in amdgpu_debugfs_gprwave_read() (Alex Deucher)\n- drm/amdgpu: Adjust debugfs eviction and IB access permissions (Alex Deucher)\n- pwm: imx-tpm: Use correct MODULO value for EPWM mode (Erik Schumacher)\n- media: v4l2-ctrls-api: fix error handling for v4l2_g_ctrl() (Mauro Carvalho Chehab)\n- media: v4l2-tpg: prevent the risk of a division by zero (Mauro Carvalho Chehab)\n- media: pulse8-cec: fix data timestamp at pulse8_setup() (Mauro Carvalho Chehab)\n- media: cx24116: prevent overflows on SNR calculus (Mauro Carvalho Chehab)\n- media: s5p-jpeg: prevent buffer overflows (Mauro Carvalho Chehab)\n- ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove (Amelie Delaunay)\n- ALSA: firewire-lib: fix return value on fail in amdtp_tscm_init() (Murad Masimov)\n- scsi: sd_zbc: Use kvzalloc() to allocate REPORT ZONES buffer (Johannes Thumshirn)\n- media: adv7604: prevent underflow condition when reporting colorspace (Mauro Carvalho Chehab)\n- media: dvb_frontend: don't play tricks with underflow values (Mauro Carvalho Chehab)\n- media: dvbdev: prevent the risk of out of memory access (Mauro Carvalho Chehab)\n- media: stb0899_algo: initialize cfr before using it (Mauro Carvalho Chehab)\n- net: arc: fix the device for dma_map_single/dma_unmap_single (Johan Jonker)\n- net: stmmac: Fix unbalanced IRQ wake disable warning on single irq case (Nicolas F. R. A. Prado)\n- net: phy: ti: add PHY_RST_AFTER_CLK_EN flag (Diogo Silva)\n- net: hns3: fix kernel crash when uninstalling driver (Peiyang Wang)\n- i40e: fix race condition by adding filter's intermediate sync state (Aleksandr Loktionov)\n- can: c_can: fix {rx,tx}_errors statistics (Dario Binacchi)\n- sctp: properly validate chunk size in sctp_sf_ootb() (Xin Long)\n- net: enetc: set MAC address to the VF net_device (Wei Fang)\n- security/keys: fix slab-out-of-bounds in key_task_permission (Chen Ridong)\n- nfs: avoid i_lock contention in nfs_clear_invalid_mapping (Mike Snitzer)\n- NFSv3: handle out-of-order write replies. (NeilBrown)\n- NFS: Add a tracepoint to show the results of nfs_set_cache_invalid() (Benjamin Coddington)\n- NFSv3: only use NFS timeout for MOUNT when protocols are compatible (NeilBrown)\n- HID: core: zero-initialize the report buffer (Jiri Kosina)\n- ARM: dts: rockchip: Fix the realtek audio codec on rk3036-kylin (Heiko Stuebner)\n- ARM: dts: rockchip: Fix the spi controller on rk3036 (Heiko Stuebner)\n- ARM: dts: rockchip: drop grf reference from rk3036 hdmi (Heiko Stuebner)\n- ARM: dts: rockchip: fix rk3036 acodec node (Heiko Stuebner)\n- arm64: dts: imx8mp: correct sdhc ipg clk (Peng Fan)\n- arm64: dts: rockchip: Fix LED triggers on rk3308-roc-cc (Heiko Stuebner)\n- arm64: dts: rockchip: Remove #cooling-cells from fan on Theobroma lion (Heiko Stuebner)\n- arm64: dts: rockchip: Fix bluetooth properties on Rock960 boards (Heiko Stuebner)\n- arm64: dts: rockchip: Remove hdmi's 2nd interrupt on rk3328 (Diederik de Haas)\n- arm64: dts: rockchip: Fix rt5651 compatible value on rk3399-sapphire-excavator (Geert Uytterhoeven)\n\n[5.15.0-305.171.2]\n- rds: ib: Avoid UAF on RDS Socket's rs_trans_lock (Hakon Bugge)  [Orabug: 37475726]\n- rds: ib: Fix blocked processes related to race in rds_rdma_free_dev_rs_worker() (Hakon Bugge)  [Orabug: 37475726]\n- rds: ib: Fix deterministic UAF in rds_rdma_free_dev_rs_worker() (Hakon Bugge)  [Orabug: 37475726]\n- uek-misc: Define a prefix for uek module messages (Alejandro Jimenez)  [Orabug: 37459411]\n- uek-misc: Clear the AVIC capability on platforms with known errata (Alejandro Jimenez)  [Orabug: 37459411]\n- uek-misc: Add identification for OCI platform (Alejandro Jimenez)  [Orabug: 37459411]\n- Revert 'MIPS: do not call flush_tlb_all when setting pmd entry' (Vijay Kumar)  [Orabug: 37454162]\n- cpufreq: intel_pstate: Support highest performance change interrupt (Srinivas Pandruvada)  [Orabug: 37426908]\n- x86/cpufeatures: Add HWP highest perf change feature flag (Srinivas Pandruvada)  [Orabug: 37426908]\n- cpufreq: intel_pstate: Get rid of unnecessary READ_ONCE() annotations (Rafael J. Wysocki)  [Orabug: 37426908]\n- cpufreq: intel_pstate: Wait for canceled delayed work to complete (Rafael J. Wysocki)  [Orabug: 37426908]\n- cpufreq: intel_pstate: Simplify spinlock locking (Rafael J. Wysocki)  [Orabug: 37426908]\n- cpufreq: intel_pstate: Update cpuinfo.max_freq on HWP_CAP changes (Rafael J. Wysocki)  [Orabug: 37426908]\n- uek-rpm: Enable CONFIG_FIPS_SIGNATURE_SELFTEST for all archs (Saeed Mirzamohammadi)  [Orabug: 37400483]\n- uek-rpm: set DEFAULTKERNEL to other installed uek if possible (Sherry Yang)  [Orabug: 37399094]\n\n[5.15.0-305.171.1]\n- octeontx2-af: Fix CPT AF register offset calculation (Bharat Bhushan)  [Orabug: 37445471]\n- perf/arm-cmn: Remove for loop intial declarations (Dave Kleikamp)  [Orabug: 37409090]\n- perf/arm-cmn: Ensure port and device id bits are set properly (Namhyung Kim)  [Orabug: 37409090]\n- perf/arm-cmn: Improve format attr printing (Robin Murphy)  [Orabug: 37409090]\n- perf/arm-cmn: Clean up unnecessary NUMA_NO_NODE check (Robin Murphy)  [Orabug: 37409090]\n- perf/arm-cmn: Support CMN S3 (Robin Murphy)  [Orabug: 37409090]\n- dt-bindings: perf: arm-cmn: Add CMN S3 (Robin Murphy)  [Orabug: 37409090]\n- perf/arm-cmn: Refactor DTC PMU register access (Robin Murphy)  [Orabug: 37409090]\n- perf/arm-cmn: Make cycle counts less surprising (Robin Murphy)  [Orabug: 37409090]\n- perf/arm-cmn: Improve build-time assertion (Robin Murphy)  [Orabug: 37409090]\n- perf/arm-cmn: Ensure dtm_idx is big enough (Robin Murphy)  [Orabug: 37409090]\n- perf/arm-cmn: Fix CCLA register offset (Robin Murphy)  [Orabug: 37409090]\n- perf/arm-cmn: Refactor node ID handling. Again. (Robin Murphy)  [Orabug: 37409090]\n- perf/arm-cmn: Enable support for tertiary match group (Ilkka Koskinen)  [Orabug: 37409090]\n- perf/arm-cmn: Decouple wp_config registers from filter group number (Ilkka Koskinen)  [Orabug: 37409090]\n- perf/arm-cmn: Workaround AmpereOneX errata AC04_MESH_1 (incorrect child count) (Ilkka Koskinen)  [Orabug: 37409090]\n- perf/arm-cmn: Improve debugfs pretty-printing for large configs (Robin Murphy)  [Orabug: 37409090]\n- perf: arm-cmn: Convert to platform remove callback returning void (Uwe Kleine-Konig)  [Orabug: 37409090]\n- perf/arm-cmn: Fail DTC counter allocation correctly (Robin Murphy)  [Orabug: 37409090]\n- perf/arm-cmn: Fix HN-F class_occup_id events (Robin Murphy)  [Orabug: 37409090]\n- perf/arm-cmn: Enable per-DTC counter allocation (Robin Murphy)  [Orabug: 37409090]\n- perf/arm-cmn: Rework DTC counters (again) (Robin Murphy)  [Orabug: 37409090]\n- perf/arm-cmn: Fix DTC domain detection (Robin Murphy)  [Orabug: 37409090]\n- perf/arm-cmn: Add CMN-700 r3 support (Robin Murphy)  [Orabug: 37409090]\n- perf/arm-cmn: Refactor HN-F event selector macros (Robin Murphy)  [Orabug: 37409090]\n- perf/arm-cmn: Remove spurious event aliases (Robin Murphy)  [Orabug: 37409090]\n- perf/arm-cmn: Add sysfs identifier (Robin Murphy)  [Orabug: 37409090]\n- perf/arm-cmn: Revamp model detection (Robin Murphy)  [Orabug: 37409090]\n- perf/arm-cmn: Fix port detection for CMN-700 (Robin Murphy)  [Orabug: 37409090]\n- perf/arm-cmn: Validate cycles events fully (Robin Murphy)  [Orabug: 37409090]\n- perf/arm-cmn: Move overlapping wp_combine field (Ilkka Koskinen)  [Orabug: 37409090]\n- Partially revert 'perf/arm-cmn: Optimise DTC counter accesses' (Robin Murphy)  [Orabug: 37409090]\n- perf/arm-cmn: Reset DTM_PMU_CONFIG at probe (Robin Murphy)  [Orabug: 37409090]\n- perf/arm-cmn: Decode CAL devices properly in debugfs (Robin Murphy)  [Orabug: 37409090]\n- perf/arm-cmn: Fix filter_sel lookup (Robin Murphy)  [Orabug: 37409090]\n- perf/arm-cmn: Add CMN-700 support (Robin Murphy)  [Orabug: 37409090]\n- perf/arm-cmn: Refactor occupancy filter selector (Robin Murphy)  [Orabug: 37409090]\n- perf/arm-cmn: Add CMN-650 support (Robin Murphy)  [Orabug: 37409090]\n- dt-bindings: perf: arm-cmn: Add CMN-650 and CMN-700 (Robin Murphy)  [Orabug: 37409090]\n- perf/arm-cmn: Update watchpoint format (Robin Murphy)  [Orabug: 37409090]\n- perf/arm-cmn: Hide XP PUB events for CMN-600 (Robin Murphy)  [Orabug: 37409090]\n- perf/arm-cmn: Make arm_cmn_debugfs static (Robin Murphy)  [Orabug: 37409090]\n- perf/arm-cmn: Add debugfs topology info (Robin Murphy)  [Orabug: 37409090]\n- perf/arm-cmn: Add CI-700 Support (Robin Murphy)  [Orabug: 37409090]\n- dt-bindings: perf: arm-cmn: Add CI-700 (Robin Murphy)  [Orabug: 37409090]\n- perf/arm-cmn: Support new IP features (Robin Murphy)  [Orabug: 37409090]\n- perf/arm-cmn: Demarcate CMN-600 specifics (Robin Murphy)  [Orabug: 37409090]\n- perf/arm-cmn: Move group validation data off-stack (Robin Murphy)  [Orabug: 37409090]\n- perf/arm-cmn: Optimise DTC counter accesses (Robin Murphy)  [Orabug: 37409090]\n- perf/arm-cmn: Optimise DTM counter reads (Robin Murphy)  [Orabug: 37409090]\n- perf/arm-cmn: Refactor DTM handling (Robin Murphy)  [Orabug: 37409090]\n- perf/arm-cmn: Streamline node iteration (Robin Murphy)  [Orabug: 37409090]\n- perf/arm-cmn: Refactor node ID handling (Robin Murphy)  [Orabug: 37409090]\n- perf/arm-cmn: Drop compile-test restriction (Robin Murphy)  [Orabug: 37409090]\n- perf/arm-cmn: Account for NUMA affinity (Robin Murphy)  [Orabug: 37409090]\n- Acquire mem_cgroup_per_node.lruvec locks for online nodes only. (Imran Khan)  [Orabug: 37405595]\n- Fix issues seen with mail thread patches. (Imran Khan)  [Orabug: 37405595]\n- mm: lru: use lruvec lock to serialize memcg changes (Muchun Song)  [Orabug: 37405595]\n- mm: lru: add VM_BUG_ON_PAGE to lru maintenance function (Muchun Song)  [Orabug: 37405595]\n- mm: memcontrol: rename {un}lock_page_memcg() to {un}lock_page_objcg() (Muchun Song)  [Orabug: 37405595]\n- mm: memcontrol: use obj_cgroup APIs to charge the LRU pages (Muchun Song)  [Orabug: 37405595]\n- mm: memcontrol: introduce memcg_reparent_ops (Muchun Song)  [Orabug: 37405595]\n- mm: memcontrol: make all the callers of page_memcg() safe (Muchun Song)  [Orabug: 37405595]\n- mm: thp: make split queue lock safe when LRU pages reparented (Muchun Song)  [Orabug: 37405595]\n- mm: thp: introduce split_queue_lock/unlock{_irqsave}() (Muchun Song)  [Orabug: 37405595]\n- mm: vmscan: rework move_pages_to_lru() (Muchun Song)  [Orabug: 37405595]\n- mm: memcontrol: make lruvec lock safe when the LRU pages reparented (Muchun Song)  [Orabug: 37405595]\n- mm: memcontrol: introduce compact_lock_page_irqsave (Muchun Song)  [Orabug: 37405595]\n- mm: memcontrol: prepare objcg API for non-kmem usage (Muchun Song)  [Orabug: 37405595]\n- mm: move mem_cgroup_kmem_disabled() to memcontrol.h (Muchun Song)  [Orabug: 37405595]\n- Uek-rpm/ol9: Enable CONFIG_FIPS_SIGNATURE_SELFTEST for mips64 (Vijay Kumar)  [Orabug: 37390881]\n- sfc: Fix an error handling path in efx_pci_probe() (Christophe JAILLET)  [Orabug: 37384497]\n- sfc: Separate netdev probe/remove from PCI probe/remove (Jonathan Cooper)  [Orabug: 37384497]\n- sfc: replace function name in string with __func__ (Jonathan Cooper)  [Orabug: 37384497]\n- sfc: Unsplit literal string. (Jonathan Cooper)  [Orabug: 37384497]\n- sfc: Move EF100 efx_nic_type structs to the end of the file (Jonathan Cooper)  [Orabug: 37384497]\n- sfc: Separate efx_nic memory from net_device memory (Jonathan Cooper)  [Orabug: 37384497]\n- sfc: Encapsulate access to netdev_priv() (Jonathan Cooper)  [Orabug: 37384497]\n- sfc: Add a PROBED state for EF100 VDPA use. (Jonathan Cooper)  [Orabug: 37384497]\n- ACPICA: Allow PCC Data Type in MCTP resource. (Adam Young)  [Orabug: 37311726]\n- ACPICA: Avoid undefined behavior: member access within misaligned address (Tamir Duberstein)  [Orabug: 37311726]\n- arm64: errata: Enable the AC03_CPU_38 workaround for ampere1a (D Scott Phillips)  [Orabug: 37311726]\n- arm64: Expose the end of the linear map in PHYSMEM_END (D Scott Phillips)  [Orabug: 37311726]\n- seqcount: replace smp_rmb() in read_seqcount() with load acquire (Christoph Lameter (Ampere))  [Orabug: 37311726]\n- uek-rpm: Enable new config options for Ampere (Dave Kleikamp)  [Orabug: 37311726]\n- vmalloc: modify the alloc_vmap_area() error message for better diagnostics (Shubhang Kaushik OS)  [Orabug: 37311726]\n- NUMA: early use of cpu_to_node() returns 0 instead of the correct node id (Huang Shijie)  [Orabug: 37311726]\n- mm: mmap: no need to call khugepaged_enter_vma() for stack (Yang Shi)  [Orabug: 37311726]\n- crash_core: export vmemmap when CONFIG_SPARSEMEM_VMEMMAP is enabled (Huang Shijie)  [Orabug: 37311726]\n- PCI: acpiphp: Allow built-in drivers for Attention Indicators (D Scott Phillips)  [Orabug: 37311726]\n- PCI: acpiphp: Add missing MODULE_DESCRIPTION() macro (Jeff Johnson)  [Orabug: 37311726]\n- PCI: hotplug: Add Ampere Altra Attention Indicator extension driver (D Scott Phillips)  [Orabug: 37311726]\n- mm: mempolicy: keep VMA walk if both MPOL_MF_STRICT and MPOL_MF_MOVE are specified (Yang Shi)  [Orabug: 37311726]\n- arm64: compat: Work around uninitialized variable warning (Ard Biesheuvel)  [Orabug: 37311726]\n- arm64: compat: Implement misalignment fixups for multiword loads (Ard Biesheuvel)  [Orabug: 37311726]\n- RDMA/mlx5: Expose vhca id for all ports in multiport mode (Mark Bloch)  [Orabug: 37234285]\n- rds/ib: avoid scq/rcq polling during rds connection shutdown (Arumugam Kolappan)  [Orabug: 37055939]\n- RDMA/mlx5: Send UAR page index as ioctl attribute (Akiva Goldberger)  [Orabug: 37029766]\n- RDMA: Pass entire uverbs attr bundle to create cq function (Akiva Goldberger)  [Orabug: 37029766]\n- net/mlx5e: Fix CT entry update leaks of modify header context (Chris Mi)  [Orabug: 36948578] {CVE-2024-43864}\n- net/mlx5e: Require mlx5 tc classifier action support for IPsec prio capability (Rahul Rameshbabu)  [Orabug: 36948578]\n- net/mlx5: Fix missing lock on sync reset reload (Moshe Shemesh)  [Orabug: 36948578] {CVE-2024-42268}\n- net/mlx5: Lag, don't use the hardcoded value of the first port (Mark Bloch)  [Orabug: 36948578]\n- mlxsw: core_linecards: Fix double memory deallocation in case of invalid INI file (Aleksandr Mishin)  [Orabug: 36948578] {CVE-2024-42138}\n- net/mlx5e: Add mqprio_rl cleanup and free in mlx5e_priv_cleanup() (Jianbo Liu)  [Orabug: 36948578]\n- net/mlx5: E-switch, Create ingress ACL when needed (Chris Mi)  [Orabug: 36948578]\n- mlxsw: spectrum_buffers: Fix memory corruptions on Spectrum-4 systems (Ido Schimmel)  [Orabug: 36948578] {CVE-2024-42073}\n- RDMA/mlx5: Fix unwind flow as part of mlx5_ib_stage_init_init (Yishai Hadas)  [Orabug: 36948578]\n- RDMA/mlx5: Ensure created mkeys always have a populated rb_key (Jason Gunthorpe)  [Orabug: 36948578]\n- RDMA/mlx5: Follow rb_key.ats when creating new mkeys (Jason Gunthorpe)  [Orabug: 36948578]\n- RDMA/mlx5: Remove extra unlock on error path (Jason Gunthorpe)  [Orabug: 36948578]\n- net: wwan: iosm: Fix tainted pointer delete is case of region creation fail (Aleksandr Mishin)  [Orabug: 36948578] {CVE-2024-40939}\n- net/mlx5: Always stop health timer during driver removal (Shay Drory)  [Orabug: 36948578] {CVE-2024-40906}\n- net/mlx5: Fix MTMP register capability offset in MCAM register (Gal Pressman)  [Orabug: 36948578]\n- net/mlx5e: Advertise mlx5 ethernet driver updates sk_buff md_dst for MACsec (Rahul Rameshbabu)  [Orabug: 36948578]\n- mlxsw: core_env: Fix driver initialization with old firmware (Ido Schimmel)  [Orabug: 36948578]\n- net/mlx5: Lag, restore buckets number to default after hash LAG deactivation (Shay Drory)  [Orabug: 36948578]\n- net/mlx5e: Do not produce metadata freelist entries in Tx port ts WQE xmit (Rahul Rameshbabu)  [Orabug: 36948578]\n- RDMA/mlx5: Change check for cacheable mkeys (Or Har-Toov)  [Orabug: 36948578]\n- RDMA/mlx5: Uncacheable mkey has neither rb_key or cache_ent (Or Har-Toov)  [Orabug: 36948578]\n- mlx5: avoid truncating error message (Arnd Bergmann)  [Orabug: 36948578]\n- net/mlx5: Check capability for fw_reset (Moshe Shemesh)  [Orabug: 36948578]\n- net/mlx5: SF, Stop waiting for FW as teardown was called (Moshe Shemesh)  [Orabug: 36948578]\n- netlink: Correct offload_xstats size (Christoph Paasch)  [Orabug: 36948578]\n- net: fix net_dev_start_xmit trace event vs skb_transport_offset() (Eric Dumazet)  [Orabug: 36948578]\n- lib/bitmap: drop optimization of bitmap_{from,to}_arr64 (Yury Norov)  [Orabug: 36948578]\n- net: macsec: fix double free of percpu stats (Fedor Pchelkin)  [Orabug: 36948578]\n- tcp: gso: really support BIG TCP (Eric Dumazet)  [Orabug: 36948578]\n- RDMA/mlx5: Use rdma_umem_for_each_dma_block() (Jason Gunthorpe)  [Orabug: 36948578]\n- nfp: flower: fix ingress police using matchall filter (Tianyu Yuan)  [Orabug: 36948578]\n- lib/bitmap: fix off-by-one in bitmap_to_arr64() (Alexander Lobakin)  [Orabug: 36948578]\n- RDMA/mlx5: Fix flow steering egress flow (Leon Romanovsky)  [Orabug: 36948578]\n- rtnetlink: Fix handling of disabled L3 stats in RTM_GETSTATS replies (Petr Machata)  [Orabug: 36948578]\n- tun: annotate access to queue-trans_start (Antoine Tenart)  [Orabug: 36948578]\n- xsk: Do not write NULL in SW ring at allocation failure (Magnus Karlsson)  [Orabug: 36948578]\n- net/sched: fix incorrect vlan_push_eth dest field (Louis Peens)  [Orabug: 36948578]\n- RDMA/nldev: Prevent underflow in nldev_stat_set_counter_dynamic_doit() (Dan Carpenter)  [Orabug: 36948578]\n- net_tstamp: define new flag HWTSTAMP_FLAG_BONDED_PHC_INDEX (Hangbin Liu)  [Orabug: 36948578]\n- net: add missing include in include/net/gro.h (Eric Dumazet)  [Orabug: 36948578]\n- IB/hfi1: Properly allocate rdma counter desc memory (Dennis Dalessandro)  [Orabug: 36948578]\n- xsk: Initialise xskb free_list_node (Ciara Loftus)  [Orabug: 36948578]\n- xsk: Fix crash on double free in buffer pool (Magnus Karlsson)  [Orabug: 36948578]\n- KVM: x86: WARN only once if KVM leaves a dangling userspace I/O request (Sean Christopherson)  [Orabug: 36815282]\n- KVM: x86: Suppress pending MMIO write exits if emulator detects exception (Sean Christopherson)  [Orabug: 36815282]",
  "id": "ELSA-2025-20095",
  "ovalId": "oval:com.oracle.elsa:def:202520095",
  "source": "oracle_linux",
  "title": "ELSA-2025-20095: Unbreakable Enterprise kernel security update (IMPORTANT)",
  "url": "https://linux.oracle.com/errata/ELSA-2025-20095.html"
}