elsa-2025-20480
oracle_linux[6.12.0-101.33.4.3.el10uek] - Revert 'Add normal counters' (Boris Ostrovsky) [Orabug: 38171405] [6.12.0-101.33.4.2.el10uek] - sunrpc: handle SVC_GARBAGE during svc auth processing as auth error (Jeff Layton) [Orabug: 38178286] {CVE-2025-38089} - mm: memcontrol: remove memcg from LRU on release instead of offline (Harry Yoo) [Orabug: 38162790] - Revert 'SUNRPC: Don't allow waiting for exiting tasks' (Harshvardhan Jha) [Orabug: 38175263] - ipv6: replace ipcm6_init calls with ipcm6_init_sk (Willem de Bruijn) [Orabug: 38175246] - ipv6: remove leftover ip6 cookie initializer (Willem de Bruijn) [Orabug: 38175246] [6.12.0-101.33.4.1.el10uek] - Add Zen34 clients (Borislav Petkov (AMD)) [Orabug: 38023239] {CVE-2024-36350} {CVE-2024-36357} - x86/process: Move the buffer clearing before MONITOR (Kim Phillips) [Orabug: 38023239] {CVE-2024-36350} {CVE-2024-36357} - Add normal counters (Borislav Petkov (AMD)) [Orabug: 38023239] {CVE-2024-36350} {CVE-2024-36357} - KVM: SVM: Advertize TSA CPUID bits to guests (Borislav Petkov (AMD)) [Orabug: 38023239] {CVE-2024-36350} {CVE-2024-36357} - x86/bugs: Add a Transient Scheduler Attacks mitigation (Borislav Petkov (AMD)) [Orabug: 38023239] {CVE-2024-36350} {CVE-2024-36357} - x86/bugs: Rename MDS machinery to something more generic (Borislav Petkov (AMD)) [Orabug: 38023239] {CVE-2024-36350} {CVE-2024-36357} [6.12.0-101.33.4.el10uek] - rds: ib: Add cm_id generation scheme in order to detect new ones (Hakon Bugge) [Orabug: 37617972] - uek-rpm: Enable the FWCTL PDS and CXL support in UEK8 (Qing Huang) [Orabug: 38006732] - cxl/feature: Update out_len in set feature failure case (Li Ming) [Orabug: 38006732] - cxl: Fix devm host device for CXL fwctl initialization (Dave Jiang) [Orabug: 38006732] - fwctl/cxl: Fix uuid_t usage in uapi (Dan Williams) [Orabug: 38006732] - pds_fwctl: add Documentation entries (Shannon Nelson) [Orabug: 38006732] - pds_fwctl: add rpc and query support (Brett Creeley) [Orabug: 38006732] - pds_fwctl: initial driver framework (Shannon Nelson) [Orabug: 38006732] - pds_core: add new fwctl auxiliary_device (Shannon Nelson) [Orabug: 38006732] - cxl: Fixup kdoc issues for include/cxl/features.h (Dave Jiang) [Orabug: 38006732] - fwctl/cxl: Add documentation to FWCTL CXL (Dave Jiang) [Orabug: 38006732] - cxl/test: Add Set Feature support to cxl_test (Dave Jiang) [Orabug: 38006732] - cxl/test: Add Get Feature support to cxl_test (Dave Jiang) [Orabug: 38006732] - cxl: Add support to handle user feature commands for set feature (Dave Jiang) [Orabug: 38006732] - cxl: Add support to handle user feature commands for get feature (Dave Jiang) [Orabug: 38006732] - cxl: Add support for fwctl RPC command to enable CXL feature commands (Dave Jiang) [Orabug: 38006732] - cxl: Move cxl feature command structs to user header (Dave Jiang) [Orabug: 38006732] - cxl: Add FWCTL support to CXL (Dave Jiang) [Orabug: 38006732] - cxl: Setup exclusive CXL features that are reserved for the kernel (Dave Jiang) [Orabug: 38006732] - cxl/mbox: Add SET_FEATURE mailbox command (Shiju Jose) [Orabug: 38006732] - cxl/mbox: Add GET_FEATURE mailbox command (Shiju Jose) [Orabug: 38006732] - cxl/test: Add Get Supported Features mailbox command support (Dave Jiang) [Orabug: 38006732] - cxl: Add Get Supported Features command for kernel usage (Dave Jiang) [Orabug: 38006732] - cxl: Enumerate feature commands (Dave Jiang) [Orabug: 38006732] - cxl: Refactor user ioctl command path from mds to mailbox (Dave Jiang) [Orabug: 38006732] - vhost-scsi: Fix log flooding with target does not exist errors (Mike Christie) [Orabug: 38053075] - vhost-scsi: Change def inline_sg_cnt and max_io_vqs for exadata (Mike Christie) [Orabug: 38053233] - sched/numa: add tracepoint that tracks the skipping of numa balancing due to cpuset memory pinning (Libo Chen) [Orabug: 38070168] - sched/numa: skip VMA scanning on memory pinned to one NUMA node via cpuset.mems (Libo Chen) [Orabug: 38070168] - uek-rpm: Enable CONFIG_SERIAL_RP2 as m (Samasth Norway Ananda) [Orabug: 38091733] - serial: update the rp2 driver code (Samasth Norway Ananda) [Orabug: 38091733] [6.12.0-101.33.3.el10uek] - mm: do not write protect COW mappings when preserving across exec (Anthony Yznaga) [Orabug: 38029049] - mm: hold the source mmap write lock when copying PTEs (Anthony Yznaga) [Orabug: 38029049] - Enable EROFS modules and related config options (Harshit Mogalapalli) [Orabug: 38042713] [6.12.0-101.33.2.el10uek] - net: mana: Add support for Multi Vports on Bare metal (Haiyang Zhang) [Orabug: 38052741] - tools: hv: Enable debug logs for hv_kvp_daemon (Shradha Gupta) [Orabug: 38052759] - LTS version: v6.12.33 (Jack Vogel) - Revert 'drm/amd/display: more liberal vmin/vmax update for freesync' (Aurabindo Pillai) - dt-bindings: phy: imx8mq-usb: fix fsl,phy-tx-vboost-level-microvolt property (Xu Yang) - dt-bindings: usb: cypress,hx3: Add support for all variants (Lukasz Czechowski) - thunderbolt: Do not double dequeue a configuration request (Sergey Senozhatsky) - usb: usbtmc: Fix timeout value in get_stb (Dave Penkler) - serial: jsm: fix NPE during jsm_uart_port_init (Dustin Lundquist) - Bluetooth: hci_qca: move the SoC type check to the right place (Bartosz Golaszewski) - usb: typec: ucsi: fix Clang -Wsign-conversion warning (Qasim Ijaz) - USB: serial: pl2303: add new chip PL2303GC-Q20 and PL2303GT-2AB (Charles Yeh) - usb: storage: Ignore UAS driver for SanDisk 3.2 Gen2 storage device (Hongyu Xie) - usb: quirks: Add NO_LPM quirk for SanDisk Extreme 55AE (Jiayi Li) - Revert 'cpufreq: tegra186: Share policy per cluster' (Jonathan Hunter) - block: fix adding folio to bio (Ming Lei) [Orabug: 37844657] {CVE-2025-22122} - PCI/ASPM: Disable L1 before disabling L1 PM Substates (Ajay Agarwal) - accel/ivpu: Update power island delays (Karol Wachowski) - accel/ivpu: Add initial Panther Lake support (Maciej Falkowski) - rtc: Fix offset calculation for .start_secs 0 (Alexandre Mergnat) - rtc: Make rtc_time64_to_tm() support dates before 1970 (Alexandre Mergnat) - Documentation: ACPI: Use all-string data node references (Sakari Ailus) - acpi-cpufreq: Fix nominal_freq units to KHz in get_max_boost_ratio() (Gautham R. Shenoy) - pinctrl: armada-37xx: set GPIO output value before setting direction (Gabor Juhos) - pinctrl: armada-37xx: use correct OUTPUT_VAL register for GPIOs 31 (Gabor Juhos) - f2fs: fix to avoid accessing uninitialized curseg (Chao Yu) [Orabug: 37844644] {CVE-2025-22123} - tracing: Fix compilation warning on arm32 (Pan Taixi) - LTS version: v6.12.32 (Jack Vogel) - ksmbd: use list_first_entry_or_null for opinfo_get_list() (Namjae Jeon) - net: ethernet: ti: am65-cpsw: Lower random mac address error print to info (Nishanth Menon) - platform/x86: thinkpad_acpi: Ignore battery threshold change event notification (Mark Pearson) - ALSA: hda/realtek - restore auto-mute mode for Dell Chrome platform (Kailang Yang) - platform/x86: fujitsu-laptop: Support Lifebook S2110 hotkeys (Valtteri Koskivuori) - NFS: Avoid flushing data while holding directory locks in nfs_rename() (Trond Myklebust) - char: tpm: tpm-buf: Add sanity check fallback in read helpers (Purva Yeshi) - drm/xe: Save the gt pointer in lrc and drop the tile (Umesh Nerlige Ramappa) - drm/xe/xe2hpg: Add Wa_22021007897 (Aradhya Bhatia) - nvme-pci: add NVME_QUIRK_NO_DEEPEST_PS quirk for SOLIDIGM P44 Pro (Ilya Guterman) - spi: spi-sun4i: fix early activation (Alessandro Grassi) - phy: phy-rockchip-samsung-hdptx: Fix PHY PLL output 50.25MHz error (Algea Cao) - phy: starfive: jh7110-usb: Fix USB 2.0 host occasional detection failure (Hal Feng) - drm/amd/display: check stream id dml21 wrapper to get plane_id (Aurabindo Pillai) - drm/amd/display: fix link_set_dpms_off multi-display MST corner case (George Shen) - gpio: virtuser: fix potential out-of-bound write (Markus Burri) [Orabug: 38095181] {CVE-2025-38082} - um: let 'make clean' properly clean underlying SUBARCH as well (Masahiro Yamada) - platform/x86: thinkpad_acpi: Support also NEC Lavie X1475JAS (John Chau) - nfs: don't share pNFS DS connections between net namespaces (Jeff Layton) - HID: quirks: Add ADATA XPG alpha wireless mouse support (Milton Barrera) - dmaengine: idxd: cdev: Fix uninitialized use of sva in idxd_cdev_open (Purva Yeshi) - coredump: hand a pidfd to the usermode coredump helper (Christian Brauner) - coredump: fix error handling for replace_fd() (Christian Brauner) - perf/arm-cmn: Add CMN S3 ACPI binding (Robin Murphy) - perf/arm-cmn: Initialise cmn-cpu earlier (Robin Murphy) - perf/arm-cmn: Fix REQ2/SNP2 mixup (Robin Murphy) - net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (Pedro Tammela) [Orabug: 38049363] {CVE-2025-38001} - arm64: dts: ti: k3-j784s4-j742s2-main-common: Fix length of serdes_ln_ctrl (Siddharth Vadapalli) - arm64: dts: ti: k3-j722s-main: Disable 'serdes_wiz0' and 'serdes_wiz1' (Siddharth Vadapalli) - arm64: dts: ti: k3-j722s-evm: Enable 'serdes_wiz0' and 'serdes_wiz1' (Siddharth Vadapalli) - arm64: dts: ti: k3-j721e-sk: Add requiried voltage supplies for IMX219 (Yemike Abhilash Chandra) - arm64: dts: ti: k3-j721e-sk: Remove clock-names property from IMX219 overlay (Yemike Abhilash Chandra) - arm64: dts: ti: k3-j721e-sk: Add DT nodes for power regulators (Yemike Abhilash Chandra) - arm64: dts: ti: k3-am68-sk: Fix regulator hierarchy (Yemike Abhilash Chandra) - arm64: dts: ti: k3-am65-main: Add missing taps to sdhci0 (Judith Mendez) - arm64: dts: ti: k3-am62x: Rename I2C switch to I2C mux in OV5640 overlay (Yemike Abhilash Chandra) - arm64: dts: ti: k3-am62x: Rename I2C switch to I2C mux in IMX219 overlay (Yemike Abhilash Chandra) - arm64: dts: ti: k3-am62x: Remove clock-names property from IMX219 overlay (Yemike Abhilash Chandra) - arm64: dts: ti: k3-am62p-j722s-common-main: Set eMMC clock parent to default (Judith Mendez) - arm64: dts: ti: k3-am62a-main: Set eMMC clock parent to default (Judith Mendez) - arm64: dts: ti: k3-am62-main: Set eMMC clock parent to default (Judith Mendez) - arm64: dts: qcom: x1e80100: Fix video thermal zone (Stephan Gerhold) - arm64: dts: qcom: x1e80100-yoga-slim7x: mark l12b and l15b always-on (Johan Hovold) - arm64: dts: qcom: x1e80100-qcp: mark l12b and l15b always-on (Johan Hovold) - arm64: dts: qcom: x1e80100-qcp: Fix vreg_l2j_1p2 voltage (Stephan Gerhold) - arm64: dts: qcom: x1e80100-lenovo-yoga-slim7x: Fix vreg_l2j_1p2 voltage (Stephan Gerhold) - arm64: dts: qcom: x1e80100-asus-vivobook-s15: Fix vreg_l2j_1p2 voltage (Stephan Gerhold) - arm64: dts: qcom: sm8650: Add missing properties for cryptobam (Stephan Gerhold) - arm64: dts: qcom: sm8550: Add missing properties for cryptobam (Stephan Gerhold) - arm64: dts: qcom: sm8450: Add missing properties for cryptobam (Stephan Gerhold) - arm64: dts: qcom: sm8350: Fix typo in pil_camera_mem node (Alok Tiwari) - arm64: dts: qcom: sa8775p: Remove cdsp compute-cb@10 (Karthik Sanagavarapu) - arm64: dts: qcom: sa8775p: Remove extra entries from the iommus property (Ling Xu) - arm64: dts: qcom: ipq9574: Add missing properties for cryptobam (Stephan Gerhold) - can: kvaser_pciefd: Force IRQ edge in case of nested IRQ (Axel Forsman) - RDMA/bnxt_re: Remove unusable nq variable (Leon Romanovsky) [Orabug: 37822348] - RDMA/bnxt_re: Fix budget handling of notification queue (Kashyap Desai) [Orabug: 37822348] - bnxt_en: Add FW trace coredump segments to the coredump (Shruti Parab) [Orabug: 37822348] - bnxt_en: Add a new ethtool -W dump flag (Michael Chan) [Orabug: 37822348] - bnxt_en: Add 2 parameters to bnxt_fill_coredump_seg_hdr() (Shruti Parab) [Orabug: 37822348] - bnxt_en: Add functions to copy host context memory (Sreekanth Reddy) [Orabug: 37822348] - bnxt_en: Do not free FW log context memory (Hongguang Gao) [Orabug: 37822348] - bnxt_en: Manage the FW trace context memory (Shruti Parab) [Orabug: 37822348] - bnxt_en: Allocate backing store memory for FW trace logs (Shruti Parab) [Orabug: 37822348] - bnxt_en: Add a 'force' parameter to bnxt_free_ctx_mem() (Hongguang Gao) [Orabug: 37822348] - bnxt_en: Refactor bnxt_free_ctx_mem() (Hongguang Gao) [Orabug: 37822348] - bnxt_en: Add mem_valid bit to struct bnxt_ctx_mem_type (Shruti Parab) [Orabug: 37822348] - bnxt_en: refactor bnxt_alloc_rx_rings() to call bnxt_alloc_rx_agg_bmap() (David Wei) [Orabug: 37822348] - bnxt_en: ethtool: Support unset l4proto on ip4/ip6 ntuple rules (Daniel Xu) [Orabug: 37822348] - bnxt_en: ethtool: Remove ip4/ip6 ntuple support for IPPROTO_RAW (Daniel Xu) [Orabug: 37822348] - bnxt_en: use irq_update_affinity_hint() (Mohammad Heib) [Orabug: 37822348] - bnxt_en: add unlocked version of bnxt_refclk_read (Vadim Fedorenko) [Orabug: 37822348] - bnxt_en: replace PTP spinlock with seqlock (Vadim Fedorenko) [Orabug: 37822348] - bnxt_en: cache only 24 bits of hw counter (Vadim Fedorenko) [Orabug: 37822348] - bnxt_en: Update firmware interface spec to 1.10.3.85 (Michael Chan) [Orabug: 37822348] - bnxt_en: Skip reading PXP registers during ethtool -d if unsupported (Michael Chan) [Orabug: 37822348] - bnxt_en: Skip MAC loopback selftest if it is unsupported by FW (Michael Chan) [Orabug: 37822348] - bnxt_en: Skip PHY loopback ethtool selftest if unsupported by FW (Michael Chan) [Orabug: 37822348] - bnxt_en: Do not allow ethtool -m on an untrusted VF (Michael Chan) [Orabug: 37822348] - RDMA/bnxt_re: Fix reporting maximum SRQs on P7 chips (Preethi G) [Orabug: 37822348] - RDMA/bnxt_re: Fix allocation of QP table (Kashyap Desai) [Orabug: 37822348] - RDMA/bnxt_re: Remove deliver net device event (Yuyu Li) [Orabug: 37822348] - RDMA/bnxt_re: Remove unnecessary goto in bnxt_re_netdev_event (Kalesh Ap) [Orabug: 37822348] - RDMA/bnxt_re: Remove extra new line in bnxt_re_netdev_event (Kalesh Ap) [Orabug: 37822348] - RDMA/bnxt_re: Optimize error handling in bnxt_re_probe (Kalesh Ap) [Orabug: 37822348] - RDMA/bnxt_re: Fix an issue in bnxt_re_async_notifier (Kalesh Ap) [Orabug: 37822348] - RDMA/bnxt_re: Pass the context for ulp_irq_stop (Kalesh Ap) [Orabug: 37822348] - RDMA/bnxt_re: Add support to handle DCB_CONFIG_CHANGE event (Kalesh Ap) [Orabug: 37822348] - RDMA/bnxt_re: Query firmware defaults of CC params during probe (Kalesh Ap) [Orabug: 37822348] - RDMA/bnxt_re: Add Async event handling support (Kalesh Ap) [Orabug: 37822348] - RDMA/bnxt_re: Remove unnecessary header file inclusion (Kalesh Ap) [Orabug: 37822348] - RDMA/bnxt_re: Eliminate need for some forward declarations (Kalesh Ap) [Orabug: 37822348] - bnxt_en: Add ULP call to notify async events (Michael Chan) [Orabug: 37822348] - RDMA/bnxt_re: Fix issue in the unload path (Kalesh Ap) [Orabug: 37822348] - RDMA/bnxt_re: Fix setting mandatory attributes for modify_qp (Damodharam Ammepalli) [Orabug: 37822348] - RDMA/bnxt_re: Don't fail destroy QP and cleanup debugfs earlier (Kalesh Ap) [Orabug: 37822348] - RDMA/bnxt_re: Use the default mode of congestion control (Kalesh Ap) [Orabug: 37822348] - RDMA/bnxt_re: Support different traffic class (Chandramohan Akula) [Orabug: 37822348] - RDMA/bnxt_re: Refurbish CQ to NQ hash calculation (Kalesh Ap) [Orabug: 37822348] - RDMA/bnxt_re: Enhance RoCE SRIOV resource configuration design (Bhargava Chenna Marreddy) [Orabug: 37822348] - bnxt_en: Add support for RoCE sriov configuration (Vikas Gupta) [Orabug: 37822348] - RDMA/bnxt_re: Add debugfs hook in the driver (Kalesh Ap) [Orabug: 37822348] - RDMA/bnxt_re: Support raw data query for each resources (Kashyap Desai) [Orabug: 37822348] - RDMA/bnxt_re: Add support for querying HW contexts (Kashyap Desai) [Orabug: 37822348] - RDMA/bnxt_re: Support driver specific data collection using rdma tool (Kashyap Desai) [Orabug: 37822348] - RDMA/bnxt_re: Fix access flags for MR and QP modify (Hongguang Gao) [Orabug: 37822348] - RDMA/bnxt_re: Add support for CQ rx coalescing (Chandramohan Akula) [Orabug: 37822348] - RDMA/bnxt_re: Add support for optimized modify QP (Kalesh Ap) [Orabug: 37822348] - mm/memcontrol: Fix LRU reparenting logic when !MGLRU (Kamalesh Babulal) [Orabug: 37920452] - mm: multi-gen LRU: skip rotation of offlined memcgs (Harry Yoo) [Orabug: 37997501] - mm: lru: move VM_WARN_ON_ONCE_FOLIO before MGLRU functions (Harry Yoo) [Orabug: 37997580] - mm: thp: replace folio_memcg() with folio_memcg_charged() (Muchun Song) [Orabug: 37997580] - mm: zswap: prevent lruvec release in zswap_folio_swapin() (Muchun Song) [Orabug: 37997580] - mm: workingset: prevent lruvec release in workingset_refault() (Muchun Song) [Orabug: 37997580] - mm: page_io: prevent memory cgroup release in page_io module (Muchun Song) [Orabug: 37997580] - mm: workingset: prevent memory cgroup release in lru_gen_eviction() (Muchun Song) [Orabug: 37997580] - writeback: prevent memory cgroup release in writeback module (Muchun Song) [Orabug: 37997580] - mm: memcontrol: protect lruvec critical section with the RCU read lock (Harry Yoo) [Orabug: 37997580] - mm: vmscan: disable IRQ before __mod_lruvec_state() (Harry Yoo) [Orabug: 37997618] - mm: multi-gen LRU: fix two warnings in evict_folios() (Harry Yoo) [Orabug: 37997618] - mm: multi-gen LRU: update lrugen-nr_pages during lruvec reparenting (Harry Yoo) [Orabug: 37997618] - ocfs2: fix the issue with discontiguous allocation in the global_bitmap (Heming Zhao) [Orabug: 38041352] - Reapply 'ocfs2: fix sparse warnings' (Gautham Ananthakrishna) [Orabug: 38041352] - Reapply 'ocfs2: speed up chain-list searching' (Gautham Ananthakrishna) [Orabug: 38041352] - Reapply 'ocfs2: adjust enabling place for la window' (Gautham Ananthakrishna) [Orabug: 38041352] - Reapply 'ocfs2: improve write IO performance when fragmentation is high' (Gautham Ananthakrishna) [Orabug: 38041352] [6.12.0-101.31.1.el10uek] - LTS version: v6.12.31 (Jack Vogel) - drm/gem: Internally test import_attach for imported objects (Thomas Zimmermann) - x86/mm/init: Handle the special case of device private pages in add_pages(), to not increase max_pfn and trigger dma_addressing_limited() bounce buffers bounce buffers (Balbir Singh) - i3c: master: svc: Fix implicit fallthrough in svc_i3c_master_ibi_work() (Nathan Chancellor) - pinctrl: tegra: Fix off by one in tegra_pinctrl_get_group() (Dan Carpenter) - watchdog: aspeed: fix 64-bit division (Arnd Bergmann) - drm/amdkfd: Correct F8_MODE for gfx950 (Amber Lin) - serial: sh-sci: Save and restore more registers (Geert Uytterhoeven) - bpf: abort verification if env-cur_state-loop_entry != NULL (Eduard Zingerman) - drm/amd/display: Exit idle optimizations before accessing PHY (Ovidiu Bunea) - kbuild: Properly disable -Wunterminated-string-initialization for clang (Nathan Chancellor) - Fix mis-uses of 'cc-option' for warning disablement (Linus Torvalds) - gcc-15: disable '-Wunterminated-string-initialization' entirely for now (Linus Torvalds) - gcc-15: make 'unterminated string initialization' just a warning (Linus Torvalds) - err.h: move IOMEM_ERR_PTR() to err.h (Raag Jadav) - spi: spi-fsl-dspi: Reset SR flags before sending a new message (Larisa Grigore) - spi: spi-fsl-dspi: Halt the module after a new message transfer (Bogdan-Gabriel Roman) - spi: spi-fsl-dspi: restrict register range for regmap access (Larisa Grigore) - spi: use container_of_cont() for to_spi_device() (Greg Kroah-Hartman) - platform/x86: think-lmi: Fix attribute name usage for non-compliant items (Mark Pearson) - ksmbd: fix stream write failure (Namjae Jeon) - Revert 'arm64: dts: allwinner: h6: Use RSB for AXP805 PMIC connection' (Jernej Skrabec) - Bluetooth: btmtksdio: Do close if SDIO card removed without close (Chris Lu) - Bluetooth: btmtksdio: Check function enabled before doing close (Chris Lu) - nilfs2: fix deadlock warnings caused by lock dependency in init_nilfs() (Ryusuke Konishi) - mm: mmap: map MAP_STACK to VM_NOHUGEPAGE only if THP is enabled (Ignacio Moreno Gonzalez) - mm/page_alloc.c: avoid infinite retries caused by cpuset race (Tianyang Zhang) - memcg: always call cond_resched() after fn() (Breno Leitao) - highmem: add folio_test_partial_kmap() (Matthew Wilcox) - Input: xpad - add more controllers (Vicki Pfau) - Revert 'drm/amd: Keep display off while going into S4' (Mario Limonciello) - smb: client: Reset all search buffer pointers when releasing buffer (Zhaolong Wang) - arm64: dts: marvell: uDPU: define pinctrl state for alarm LEDs (Gabor Juhos) - smb: client: Fix use-after-free in cifs_fill_dirent (Zhaolong Wang) [Orabug: 38094970] {CVE-2025-38051} - drm/edid: fixed the bug that hdr metadata was not reset (Feijuan Li) - thermal: intel: x86_pkg_temp_thermal: Fix bogus trip temperature (Zhang Rui) - platform/x86: dell-wmi-sysman: Avoid buffer overflow in current_password_store() (Vladimir Moskovkin) [Orabug: 38095141] {CVE-2025-38077} - pmdomain: core: Fix error checking in genpd_dev_pm_attach_by_id() (Dan Carpenter) - pmdomain: renesas: rcar: Remove obsolete nullify checks (Geert Uytterhoeven) - vmxnet3: update MTU after device quiesce (Ronak Doshi) - net: dsa: microchip: linearize skb for tail-tagging switches (Jakob Unterwurzacher) - can: kvaser_pciefd: Fix echo_skb race (Axel Forsman) - can: kvaser_pciefd: Continue parsing DMA buf after dropped RX (Axel Forsman) - llc: fix data loss when reading from a socket in llc_ui_recvmsg() (Gavrilov Ilia) - ALSA: hda/realtek: Add quirk for Lenovo Yoga Pro 7 14ASP10 (Ed Burcher) - ALSA: pcm: Fix race of buffer access at PCM OSS layer (Takashi Iwai) [Orabug: 38095145] {CVE-2025-38078} - ASoC: SOF: ipc4-pcm: Delay reporting is only supported for playback direction (Peter Ujfalusi) - ASoc: SOF: topology: connect DAI to a single DAI link (Kai Vehmanen) - ASoC: SOF: Intel: hda-bus: Use PIO mode on ACE2+ platforms (Peter Ujfalusi) - ASoC: SOF: ipc4-control: Use SOF_CTRL_CMD_BINARY as numid for bytes_ext (Peter Ujfalusi) - can: bcm: add missing rcu read protection for procfs content (Oliver Hartkopp) [Orabug: 38049369] {CVE-2025-38003} - can: bcm: add locking for bcm_op runtime updates (Oliver Hartkopp) [Orabug: 38049374] {CVE-2025-38004} - can: slcan: allow reception of short error messages (Carlos Sanchez) - padata: do not leak refcount in reorder_work (Dominik Grzegorzek) [Orabug: 38094842] {CVE-2025-38031} - crypto: algif_hash - fix double free in hash_accept (Ivan Pravdin) [Orabug: 38095153] {CVE-2025-38079} - clk: s2mps11: initialise clk_hw_onecell_data::num before accessing ::hws[] in probe() (Andre Draszik) - octeontx2-af: Fix APR entry mapping based on APR_LMT_CFG (Geetha Sowjanya) - octeontx2-af: Set LMT_ENA bit for APR table entries (Subbaraya Sundeep) - net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done (Wang Liang) [Orabug: 38094978] {CVE-2025-38052} - octeontx2-pf: Add AF_XDP non-zero copy support (Suman Ghosh) - sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (Cong Wang) [Orabug: 38049357] {CVE-2025-38000} - idpf: fix idpf_vport_splitq_napi_poll() (Eric Dumazet) - io_uring: fix overflow resched cqe reordering (Pavel Begunkov) - net: lan743x: Restore SGMII CTRL register on resume (Thangaraj Samynathan) - net: dwmac-sun8i: Use parsed internal PHY address instead of 1 (Paul Kocialkowski) - pinctrl: qcom: switch to devm_register_sys_off_handler() (Dmitry Baryshkov) - loop: don't require -write_iter for writable files in loop_configure (Christoph Hellwig) - idpf: fix null-ptr-deref in idpf_features_check (Pavan Kumar Linga) [Orabug: 38094982] {CVE-2025-38053} - ice: Fix LACP bonds without SRIOV environment (Dave Ertman) - ice: fix vf-num_mac count with port representors (Jacob Keller) - bridge: netfilter: Fix forwarding of fragmented packets (Ido Schimmel) - ptp: ocp: Limit signal/freq counts in summary output functions (Sagi Maimon) [Orabug: 38094984] {CVE-2025-38054} - Bluetooth: btusb: use skb_pull to avoid unsafe access in QCA dump handling (En-Wei Wu) - Bluetooth: L2CAP: Fix not checking l2cap_chan security level (Luiz Augusto von Dentz) - perf/x86/intel: Fix segfault with PEBS-via-PT with sample_freq (Adrian Hunter) [Orabug: 38094988] {CVE-2025-38055} - irqchip/riscv-imsic: Start local sync timer on correct CPU (Andrew Bresticker) - ASoC: SOF: Intel: hda: Fix UAF when reloading module (Tavian Barnes) [Orabug: 38094991] {CVE-2025-38056} - devres: Introduce devm_kmemdup_array() (Raag Jadav) - driver core: Split devres APIs to device/devres.h (Andy Shevchenko) - dmaengine: fsl-edma: Fix return code for unhandled interrupts (Stefan Wahren) - dmaengine: idxd: Fix -poll() return value (Dave Jiang) - xfrm: Sanitize marks before insert (Paul Chaignon) - clk: sunxi-ng: d1: Add missing divider for MMC mod clocks (Andre Przywara) - remoteproc: qcom_wcnss: Fix on platforms without fallback regulators (Matti Lehtimaki) - kernel/fork: only call untrack_pfn_clear() on VMAs duplicated for fork() (David Hildenbrand) - x86/sev: Fix operator precedence in GHCB_MSR_VMPL_REQ_LEVEL macro (Seongman Lee) - dmaengine: idxd: Fix allowing write() from different address spaces (Vinicius Costa Gomes) - xfrm: Fix UDP GRO handling for some corner cases (Tobias Brunner) - espintcp: remove encap socket caching to avoid reference leak (Sabrina Dubroca) - espintcp: fix skb leaks (Sabrina Dubroca) [Orabug: 38094993] {CVE-2025-38057} - soundwire: bus: Fix race on the creation of the IRQ domain (Charles Keepax) - __legitimize_mnt(): check for MNT_SYNC_UMOUNT should be under mount_lock (Al Viro) [Orabug: 38095000] {CVE-2025-38058} - drm/amd/display: Call FP Protect Before Mode Programming/Mode Support (Austin Zheng) - xenbus: Allow PVH dom0 a non-local xenstore (Jason Andryuk) - x86/Kconfig: make CFI_AUTO_DEFAULT depend on !RUST or Rust = 1.88 (Pawel Anikiel) [Orabug: 38094847] {CVE-2025-38033} - wifi: iwlwifi: add support for Killer on MTL (Johannes Berg) - block: only update request sector if needed (Johannes Thumshirn) - tools: ynl-gen: validate 0 len strings from kernel (David Wei) - btrfs: avoid NULL pointer dereference if no valid csum tree (Qu Wenruo) [Orabug: 38095010] {CVE-2025-38059} - btrfs: handle empty eb-folios in num_extent_folios() (Boris Burkov) - btrfs: correct the order of prelim_ref arguments in btrfs__prelim_ref (Goldwyn Rodrigues) [Orabug: 38094856] {CVE-2025-38034} - btrfs: compression: adjust cb-compressed_folios allocation type (Kees Cook) - ASoC: intel/sdw_utils: Add volume limit to cs42l43 speakers (Stefan Binding) - cifs: Fix changing times and read-only attr over SMB1 smb_set_file_info() function (Pali Rohar) - cifs: Fix and improve cifs_query_path_info() and cifs_query_file_info() (Pali Rohar) - io_uring/fdinfo: annotate racy sq/cq head/tail reads (Jens Axboe) - nvmet-tcp: don't restore null sk_state_change (Alistair Francis) [Orabug: 38094863] {CVE-2025-38035} - ALSA: usb-audio: Fix duplicated name in MIDI substream names (Takashi Iwai) - nvme-pci: add quirks for WDC Blue SN550 15b7:5009 (Guan Wentao) - nvme-pci: add quirks for device 126f:1001 (Guan Wentao) - ALSA: hda/realtek: Add quirk for HP Spectre x360 15-df1xxx (Takashi Iwai) - ASoC: Intel: bytcr_rt5640: Add DMI quirk for Acer Aspire SW3-013 (Takashi Iwai) - ASoC: cs42l43: Disable headphone clamps during type detection (Charles Keepax) - platform/x86: ideapad-laptop: add support for some new buttons (Gasper Nemgar) - platform/x86: asus-wmi: Disable OOBE state after resume from hibernation (Pavel Nikulin) - platform/x86/intel: hid: Add Pantherlake support (Saranya Gopal) - smb: server: smb2pdu: check return value of xa_store() (Salah Triki) - pinctrl: meson: define the pull up/down resistor value as 60 kOhm (Martin Blumenstingl) - book3s64/radix: Fix compile errors when CONFIG_ARCH_WANT_OPTIMIZE_DAX_VMEMMAP=n (Ritesh Harjani) - ASoC: imx-card: Adjust over allocation of memory in imx_card_parse_of() (Chenyuan Yang) - drm: Add valid clones check (Jessica Zhang) - drm/panel-edp: Add Starry 116KHD024006 (Douglas Anderson) - drm/buddy: fix issue that force_merge cannot free all roots (Lin Cao) - drm/atomic: clarify the rules around drm_atomic_state-allow_modeset (Simona Vetter) - drm/xe: Reject BO eviction if BO is bound to current VM (Oak Zeng) - drm/xe/sa: Always call drm_suballoc_manager_fini() (Michal Wajdeczko) - wifi: rtw89: coex: Separated Wi-Fi connecting event from Wi-Fi scan event (Ching-Te Ku) - drm/xe: Do not attempt to bootstrap VF in execlists mode (Maarten Lankhorst) - drm/xe: Move suballocator init to after display init (Maarten Lankhorst) - wifi: ath11k: Use dma_alloc_noncoherent for rx_tid buffer allocation (P Praneesh) - drm/nouveau: fix the broken marco GSP_MSG_MAX_SIZE (Zhi Wang) - drm: bridge: adv7511: fill stream capabilities (Olivier Moysan) - wifi: ath12k: Fix end offset bit definition in monitor ring descriptor (P Praneesh) - wifi: ath12k: Fetch regdb.bin file from board-2.bin (Aaradhana Sahu) - wifi: ath9k: return by of_get_mac_address (Rosen Penev) - drm/xe/pf: Reset GuC VF config when unprovisioning critical resource (Michal Wajdeczko) - accel/qaic: Mask out SR-IOV PCI resources (Youssef Samir) - wifi: ath12k: fix ath12k_hal_tx_cmd_ext_desc_setup() info1 override (Nicolas Escande) - regulator: ad5398: Add device tree support (Isaac Scott) - spi: zynqmp-gqspi: Always acknowledge interrupts (Sean Anderson) - wifi: rtw89: add wiphy_lock() to work that isn't held wiphy_lock() yet (Ping-Ke Shih) - wifi: rtw88: Don't use static local variable in rtw8822b_set_tx_power_index_by_rate (Bitterblue Smith) - wifi: rtl8xxxu: retry firmware download on error (Soeren Moch) - clk: renesas: rzg2l-cpg: Refactor Runtime PM clock validation (Lad Prabhakar) - perf/amd/ibs: Fix -config to sample period calculation for OP PMU (Ravi Bangoria) - perf/amd/ibs: Fix perf_ibs_op.cnt_mask for CurCnt (Ravi Bangoria) - firmware: arm_scmi: Relax duplicate name constraint across protocol ids (Sudeep Holla) - bpftool: Fix readlink usage in get_fd_type (Viktor Malik) - bpf: Use kallsyms to find the function name of a struct_ops's stub function (Martin Kafai Lau) - drm/ast: Find VBIOS mode from regular display size (Thomas Zimmermann) - dm vdo: use a short static string for thread name prefix (Matthew Sakai) - dm vdo indexer: prevent unterminated string warning (Chung Chung) - irqchip/riscv-aplic: Add support for hart indexes (Vladimir Kondratiev) - ASoC: rt722-sdca: Add some missing readable registers (Charles Keepax) - ASoC: codecs: pcm3168a: Allow for 24-bit in provider mode (Cezary Rojewski) - arm64: zynqmp: add clock-output-names property in clock nodes (Naman Trivedi Manojbhai) - HID: usbkbd: Fix the bit shift number for LED_KANA (Junan) - wifi: ath12k: Avoid napi_sync() before napi_enable() (Avula Sri Charan) - scsi: st: Restore some drive settings after reset (Kai Makisara) - net/mana: fix warning in the writer of client oob (Konstantin Taranov) - drm/xe/relay: Don't use GFP_KERNEL for new transactions (Michal Wajdeczko) - ice: count combined queues using Rx/Tx count (Michal Swiatkowski) - perf: Avoid the read if the count is already updated (Peter Zijlstra) - rcu: fix header guard for rcu_all_qs() (Ankur Arora) - rcu: handle unstable rdp in rcu_read_unlock_strict() (Ankur Arora) - rcu: handle quiescent states for PREEMPT_RCU=n, PREEMPT_COUNT=y (Ankur Arora) - ice: treat dyn_allowed only as suggestion (Michal Swiatkowski) - ice: init flow director before RDMA (Michal Swiatkowski) - bridge: mdb: Allow replace of a host-joined group (Petr Machata) - net: flush_backlog() small changes (Eric Dumazet) - r8169: don't scan PHY addresses 0 (Heiner Kallweit) - ipv4: ip_gre: Fix set but not used warning in ipgre_err() if IPv4-only (Geert Uytterhoeven) - vxlan: Annotate FDB data races (Ido Schimmel) [Orabug: 38094879] {CVE-2025-38037} - cpufreq: amd-pstate: Remove unnecessary driver_lock in set_boost (Dhananjay Ugwekar) [Orabug: 38094888] {CVE-2025-38038} - tools: ynl-gen: don't output external constants (Jakub Kicinski) - eth: fbnic: set IFF_UNICAST_FLT to avoid enabling promiscuous mode when adding unicast addrs (Alexander Duyck) - drm/rockchip: vop2: Improve display modes handling on RK3588 HDMI0 (Cristian Ciocaltea) - media: qcom: camss: Add default case in vfe_src_pad_code (Depeng Shao) - media: qcom: camss: csid: Only add TPG v4l2 ctrl if TPG hardware is available (Depeng Shao) - f2fs: introduce f2fs_base_attr for global sysfs entries (Jaegeuk Kim) - hwmon: (xgene-hwmon) use appropriate type for the latency value (Andrey Vatoropin) - tools/power turbostat: Clustered Uncore MHz counters should honor show/hide options (Len Brown) - net: page_pool: avoid false positive warning if NAPI was never added (Jakub Kicinski) - clk: qcom: camcc-sm8250: Use clk_rcg2_shared_ops for some RCGs (Jordan Crouse) - wifi: rtw89: call power_on ahead before selecting firmware (Ping-Ke Shih) - wifi: rtw89: fw: validate multi-firmware header before accessing (Ping-Ke Shih) - wifi: rtw89: fw: validate multi-firmware header before getting its size (Ping-Ke Shih) - wifi: rtw89: coex: Assign value over than 0 to avoid firmware timer hang (Ching-Te Ku) - wifi: rtw88: Fix __rtw_download_firmware() for RTL8814AU (Bitterblue Smith) - wifi: rtw88: Fix download_firmware_validate() for RTL8814AU (Bitterblue Smith) - ext4: remove writable userspace mappings before truncating page cache (Zhang Yi) - ext4: don't write back data before punch hole in nojournal mode (Zhang Yi) - leds: trigger: netdev: Configure LED blink interval for HW offload (Marek Vasut) - pstore: Change kmsg_bytes storage size to u32 (Kees Cook) - iio: adc: ad7944: don't use storagebits for sizing (David Lechner) - r8152: add vendor/device ID pair for Dell Alienware AW1022z (Aleksander Jan Bajkowski) - ip: fib_rules: Fetch net from fib_rule in fib[46]_rule_configure(). (Kuniyuki Iwashima) - arch/powerpc/perf: Check the instruction type before creating sample with perf_mem_data_src (Athira Rajeev) - powerpc/pseries/iommu: create DDW for devices with DMA mask less than 64-bits (Gaurav Batra) - powerpc/pseries/iommu: memory notifier incorrectly adds TCEs for pmemory (Gaurav Batra) - net: fec: Refactor MAC reset to function (Csokas Bence) - wifi: mac80211: set ieee80211_prep_tx_info::link_id upon Auth Rx (Emmanuel Grumbach) - wifi: mac80211: remove misplaced drv_mgd_complete_tx() call (Johannes Berg) - wifi: mac80211: don't unconditionally call drv_mgd_complete_tx() (Johannes Berg) - wifi: iwlwifi: don't warn during reprobe (Miri Korenblit) - wifi: iwlwifi: use correct IMR dump variable (Johannes Berg) - mptcp: pm: userspace: flags: clearer msg if no remote addr (Matthieu Baerts) - wifi: ath12k: fix the ampdu id fetch in the HAL_RX_MPDU_START TLV (P Praneesh) - xfrm: prevent high SEQ input in non-ESN mode (Leon Romanovsky) - drm/v3d: Add clock handling (Stefan Wahren) - net/mlx5e: reduce the max log mpwrq sz for ECPF and reps (William Tu) - net/mlx5e: reduce rep rxq depth to 256 for ECPF (William Tu) - net/mlx5e: set the tx_queue_len for pfifo_fast (William Tu) - net/mlx5: Extend Ethtool loopback selftest to support non-linear SKB (Alexei Lazar) - net/mlx5: XDP, Enable TX side XDP multi-buffer support (Alexei Lazar) - scsi: target: spc: Fix loop traversal in spc_rsoc_get_descr() (Chaohai Chen) - drm/amd/display/dm: drop hw_support check in amdgpu_dm_i2c_xfer() (Alex Deucher) - drm/amdgpu: enlarge the VBIOS binary size limit (Morris Zhang) - drm/amdgpu: Use active umc info from discovery (Lijo Lazar) - drm/amd/display: Populate register address for dentist for dcn401 (Dillon Varone) - drm/amd/display: Use Nominal vBlank If Provided Instead Of Capping It (Austin Zheng) - drm/amd/display: Increase block_sequence array size (Joshua Aberback) [Orabug: 38095164] {CVE-2025-38080} - drm/amd/display: Initial psr_version with correct setting (Tom Chung) - drm/amd/display: Update CR AUX RD interval interpretation (George Shen) - Revert 'drm/amd/display: Exit idle optimizations before attempt to access PHY' (Brandon Syu) - drm/amd/display: Support multiple options during psr entry. (Martin Tsai) - drm/amd/pm: Skip P2S load for SMU v13.0.12 (Asad Kamal) - drm/amdgpu: reset psp-cmd to NULL after releasing the buffer (Jiang Liu) - drm/amd/display: Don't try AUX transactions on disconnected link (Ilya Bakoulin) - drm/amd/display: pass calculated dram_speed_mts to dml2 (Charlene Liu) - drm/amdgpu: Set snoop bit for SDMA for MI series (Harish Kasiviswanathan) - drm/amdkfd: fix missing L2 cache info in topology (Eric Huang) - drm/amdgpu/mes11: fix set_hw_resources_1 calculation (Alex Deucher) - net: stmmac: dwmac-loongson: Set correct {tx,rx}_fifo_size (Huacai Chen) - soundwire: cadence_master: set frame shape and divider based on actual clk freq (Bard Liao) - soundwire: amd: change the soundwire wake enable/disable sequence (Vijendar Mukunda) - phy: exynos5-usbdrd: fix EDS distribution tuning (gs101) (Andre Draszik) - phy: core: don't require set_mode() callback for phy_get_mode() to work (Dmitry Baryshkov) - phy: phy-rockchip-samsung-hdptx: Swap the definitions of LCPLL_REF and ROPLL_REF (Damon Ding) - pinctrl: renesas: rzg2l: Add suspend/resume support for pull up/down (Claudiu Beznea) - serial: sh-sci: Update the suspend/resume support (Claudiu Beznea) - sched: Reduce the default slice to avoid tasks getting an extra tick (Zihan Zhou) - x86/traps: Cleanup and robustify decode_bug() (Peter Zijlstra) - x86/ibt: Handle FineIBT in handle_cfi_failure() (Peter Zijlstra) - drm/xe/debugfs: Add missing xe_pm_runtime_put in wedge_mode_set (Shuicheng Lin) - drm/xe/debugfs: fixed the return value of wedged_mode_set (Xin Wang) - clk: qcom: clk-alpha-pll: Do not use random stack value for recalc rate (Krzysztof Kozlowski) - clk: qcom: ipq5018: allow it to be bulid on arm32 (Karl Chan) - drm/xe: Fix xe_tile_init_noalloc() error propagation (Lucas De Marchi) - drm/xe: Stop ignoring errors from xe_ttm_stolen_mgr_init() (Lucas De Marchi) - net/mlx4_core: Avoid impossible mlx4_db_alloc() order value (Kees Cook) - media: v4l: Memset argument to 0 before calling get_mbus_config pad op (Sakari Ailus) - media: i2c: imx219: Correct the minimum vblanking value (David Plowman) - kunit: tool: Use qboot on QEMU x86_64 (Brendan Jackman) - smack: Revert 'smackfs: Added check catlen' (Konstantin Andreev) - smack: recognize ipv4 CIPSO w/o categories (Konstantin Andreev) - pinctrl: devicetree: do not goto err when probing hogs in pinctrl_dt_to_map (Valentin Caron) - ASoC: soc-dai: check return value at snd_soc_dai_set_tdm_slot() (Kuninori Morimoto) - ASoC: tas2764: Power up/down amp on mute ops (Hector Martin) - ASoC: tas2764: Mark SW_RESET as volatile (Hector Martin) - ASoC: tas2764: Add reg defaults for TAS2764_INT_CLK_CFG (Hector Martin) - ASoC: ops: Enforce platform maximum on initial value (Martin Poviser) - firmware: xilinx: Dont send linux address to get fpga config get status (Siva Durga Prasad Paladugu) - firmware: arm_ffa: Handle the presence of host partition in the partition info (Sudeep Holla) - firmware: arm_ffa: Reject higher major version as incompatible (Sudeep Holla) - net/mlx5: Apply rate-limiting to high temperature warning (Shahar Shitrit) - net/mlx5: Modify LSB bitmask in temperature event to include only the first bit (Shahar Shitrit) - media: test-drivers: vivid: don't call schedule in loop (Hans Verkuil) - irqchip/riscv-imsic: Set irq_set_affinity() for IMSIC base (Andrew Jones) - hrtimers: Replace hrtimer_clock_to_base_table with switch-case (Andy Shevchenko) - vxlan: Join / leave MC group after remote changes (Petr Machata) - ACPI: HED: Always initialize before evged (Xiaofei Tan) - PCI: Fix old_size lower bound in calculate_iosize() too (Ilpo Jarvinen) - eth: mlx4: don't try to complete XDP frames in netpoll (Jakub Kicinski) - bpf: copy_verifier_state() should copy 'loop_entry' field (Eduard Zingerman) [Orabug: 38095018] {CVE-2025-38060} - bpf: don't do clean_live_states when state-loop_entry-branches 0 (Eduard Zingerman) - can: c_can: Use of_property_present() to test existence of DT property (Krzysztof Kozlowski) - pmdomain: imx: gpcv2: use proper helper for property detection (Ahmad Fatoum) - RDMA/core: Fix best page size finding when it can cross SG entries (Michael Margolin) - serial: mctrl_gpio: split disable_ms into sync and no_sync APIs (Alexis Lothore) [Orabug: 38094901] {CVE-2025-38040} - drm/amd/display: Don't treat wb connector as physical in create_validate_stream_for_sink (Harry Wentland) - Revert 'drm/amd/display: Request HW cursor on DCN3.2 with SubVP' (Leo Zeng) - drm/amd/display: Read LTTPR ALPM caps during link cap retrieval (George Shen) - drm/amd/display: Fix BT2020 YCbCr limited/full range input (Ilya Bakoulin) - drm/amd/display: Guard against setting dispclk low when active (Nicholas Kazlauskas) - drm/amd/display: Add support for disconnected eDP streams (Harry Vanzylldejong) - drm/amd/pm: Fetch current power limit from PMFW (Lijo Lazar) - irqchip/riscv-imsic: Separate next and previous pointers in IMSIC vector (Anup Patel) - eeprom: ee1004: Check chip before probing (Eddie James) - mfd: axp20x: AXP717: Add AXP717_TS_PIN_CFG to writeable regs (Chris Morgan) - i3c: master: svc: Flush FIFO before sending Dynamic Address Assignment(DAA) (Frank Li) - EDAC/ie31200: work around false positive build warning (Arnd Bergmann) - power: supply: axp20x_battery: Update temp sensor for AXP717 from device tree (Chris Morgan) - net: pktgen: fix access outside of user given buffer in pktgen_thread_write() (Peter Seiderer) [Orabug: 38095024] {CVE-2025-38061} - wifi: rtw89: 8922a: fix incorrect STA-ID in EHT MU PPDU (Kuan-Chung Chen) - wifi: rtw89: fw: add blacklist to avoid obsolete secure firmware (Ping-Ke Shih) - wifi: rtw89: fw: get sb_sel_ver via get_unaligned_le32() (Ping-Ke Shih) - wifi: rtw89: fw: propagate error code from rtw89_h2c_tx() (Ping-Ke Shih) - wifi: rtw88: Fix rtw_desc_to_mcsrate() to handle MCS16-31 (Bitterblue Smith) - wifi: rtw88: Fix rtw_init_ht_cap() for RTL8814AU (Bitterblue Smith) - wifi: rtw88: Fix rtw_init_vht_cap() for RTL8814AU (Bitterblue Smith) - PCI: epf-mhi: Update device ID for SA8775P (Mrinmay Sarkar) - clocksource: mips-gic-timer: Enable counter when CPUs start (Paul Burton) - MIPS: pm-cps: Use per-CPU variables as per-CPU, not per-core (Paul Burton) - genirq/msi: Store the IOMMU IOVA directly in msi_desc instead of iommu_cookie (Jason Gunthorpe) [Orabug: 38095031] {CVE-2025-38062} - x86/locking: Use ALT_OUTPUT_SP() for percpu_{,try_}cmpxchg{64,128}_op() (Uros Bizjak) - drm/amdgpu: remove all KFD fences from the BO on release (Christian Konig) - MIPS: Use arch specific syscall name match function (Bibo Mao) - drm/xe/oa: Ensure that polled read returns latest data (Umesh Nerlige Ramappa) - net: ipv6: Init tunnel link-netns before registering dev (Xiao Liang) - crypto: skcipher - Zap type in crypto_alloc_sync_skcipher (Herbert Xu) - crypto: ahash - Set default reqsize from ahash_alg (Herbert Xu) - x86/kaslr: Reduce KASLR entropy on most x86 systems (Balbir Singh) - net/mlx5: Change POOL_NEXT_SIZE define value and make it global (Patrisious Haddad) - scsi: scsi_debug: First fixes for tapes (Kai Makisara) - dm: fix unconditional IO throttle caused by REQ_PREFLUSH (Jinliang Zheng) [Orabug: 38095038] {CVE-2025-38063} - libbpf: Fix out-of-bound read (Nandakumar Edamana) - loop: check in LO_FLAGS_DIRECT_IO in loop_default_blocksize (Christoph Hellwig) - net/mlx5e: Add correct match to check IPSec syndromes for switchdev mode (Jianbo Liu) - media: tc358746: improve calculation of the D-PHY timing registers (Matthias Fend) - media: adv7180: Disable test-pattern control on adv7180 (Niklas Soderlund) - cpuidle: menu: Avoid discarding useful information (Rafael J. Wysocki) - vdpa/mlx5: Fix mlx5_vdpa_get_config() endianness on big-endian machines (Konstantin Shkolnyy) - x86/nmi: Add an emergency handler in nmi_desc use it in nmi_shootdown_cpus() (Waiman Long) - ASoC: mediatek: mt8188: Add reference for dmic clocks (Nicolas F R A Prado) - ASoC: mediatek: mt8188: Treat DMIC_GAINx_CUR as non-volatile (Nicolas F R A Prado) - drm/amd/display: Fix mismatch type comparison (Navid Assadian) - drm/amd/display: fix dcn4x init failed (Charlene Liu) - drm/amd/display: handle max_downscale_src_width fail check (Yihan Zhu) - x86/build: Fix broken copy command in genimage.sh when making isoimage (Nir Lichtman) - Octeontx2-af: RPM: Register driver with PCI subsys IDs (Hariprasad Kelam) - bpf: Search and add kfuncs in struct_ops prologue and epilogue (Amery Hung) - soc: ti: k3-socinfo: Do not use syscon helper to build regmap (Andrew Davis) - wifi: ath12k: Improve BSS discovery with hidden SSID in 6 GHz band (Ramasamy Kaliappan) - bonding: report duplicate MAC address in all situations (Hangbin Liu) - net: xgene-v2: remove incorrect ACPI_PTR annotation (Arnd Bergmann) - net: ethernet: mtk_ppe_offload: Allow QinQ, double ETH_P_8021Q only (Eric Woudstra) - leds: pwm-multicolor: Add check for fwnode_property_read_u32 (Yuanjun Gong) - drm/xe: xe_gen_wa_oob: replace program_invocation_short_name (Daniel Gomez) - drm/amdkfd: KFD release_work possible circular locking (Philip Yang) - pinctrl: sophgo: avoid to modify untouched bit when setting cv1800 pinconf (Inochi Amaoto) - selftests/net: have gro.sh -t return a correct exit code (Kevin Krakauer) - net/mlx5: Avoid report two health errors on same syndrome (Moshe Shemesh) - drm/xe/pf: Create a link between PF and VF devices (K V P Satyanarayana) - drm/xe/vf: Retry sending MMIO request to GUC on timeout error (K V P Satyanarayana) - firmware: arm_ffa: Set dma_mask for ffa devices (Viresh Kumar) [Orabug: 38094925] {CVE-2025-38043} - PCI: brcmstb: Add a softdep to MIP MSI-X driver (Stanimir Varbanov) - PCI: brcmstb: Expand inbound window size up to 64GB (Stanimir Varbanov) - wifi: ath12k: Report proper tx completion status to mac80211 (Vinith Kumar R) - soc: apple: rtkit: Implement OSLog buffers properly (Hector Martin) - soc: apple: rtkit: Use high prio work queue (Janne Grunau) - perf: arm_pmuv3: Call kvm_vcpu_pmu_resync_el0() before enabling counters (Rob Herring) - fpga: altera-cvp: Increase credit timeout (Kuhanh Murugasen Krishnan) - drm/mediatek: mtk_dpi: Add checks for reg_h_fre_con existence (AngeloGioacchino Del Regno) - ARM: at91: pm: fix at91_suspend_finish for ZQ calibration (Li Bin) - hwmon: (gpio-fan) Add missing mutex locks (Alexander Stein) - x86/bugs: Make spectre user default depend on MITIGATION_SPECTRE_V2 (Breno Leitao) - clk: imx8mp: inform CCF of maximum frequency of clocks (Ahmad Fatoum) - media: uvcvideo: Handle uvc menu translation inside uvc_get_le_value (Ricardo Ribalda) - media: uvcvideo: Add sanity check to uvc_ioctl_xu_ctrl_map (Ricardo Ribalda) - ublk: complete command synchronously on error (Caleb Sander) - block: mark bounce buffering as incompatible with integrity (Christoph Hellwig) - drm/rockchip: vop2: Add uv swap for cluster window (Andy Yan) - ipv4: fib: Move fib_valid_key_len() to rtm_to_fib_config(). (Kuniyuki Iwashima) - scsi: logging: Fix scsi_logging_level bounds (Nicolas Bouchinet) - ALSA: hda/realtek: Enable PC beep passthrough for HP EliteBook 855 G7 (Maciej S. Szmigiero) - perf/hw_breakpoint: Return EOPNOTSUPP for unsupported breakpoint type (Saket Kumar Bhaskar) - net: pktgen: fix mpls maximum labels list parsing (Peter Seiderer) - media: imx335: Set vblank immediately (Paul Elder) - iommufd: Disallow allocating nested parent domain with fault ID (Yi Liu) - ublk: enforce ublks_max only for unprivileged devices (Uday Shankar) - dpll: Add an assertion to check freq_supported_num (Jiasheng Jiang) - net: phy: nxp-c45-tja11xx: add match_phy_device to TJA1103/TJA1104 (Andrei Botila) - net: ethernet: ti: cpsw_new: populate netdev of_node (Alexander Sverdlin) - rcu: Fix get_state_synchronize_rcu_full() GP-start detection (Paul E. McKenney) - pinctrl: bcm281xx: Use 'unsigned int' instead of bare 'unsigned' (Artur Weber) - media: cx231xx: set device_caps for 417 (Hans Verkuil) [Orabug: 38094934] {CVE-2025-38044} - perf/core: Clean up perf_try_init_event() (Peter Zijlstra) - drm/amd/display: Request HW cursor on DCN3.2 with SubVP (Aric Cyr) - drm/amd/display: Fix p-state type when p-state is unsupported (Dillon Varone) - drm/amd/display: Fix DMUB reset sequence for DCN401 (Dillon Varone) - drm/amd/display: Skip checking FRL_MODE bit for PCON BW determination (George Shen) - drm/amd/display: Ensure DMCUB idle before reset on DCN31/DCN35 (Nicholas Kazlauskas) - drm/amdgpu: Do not program AGP BAR regs under SRIOV in gfxhub_v1_0.c (Victor Lu) - remoteproc: qcom_wcnss: Handle platforms with only single power domain (Matti Lehtimaki) - blk-throttle: don't take carryover for prioritized processing of metadata (Ming Lei) - net: phylink: use pl-link_interface in phylink_expects_phy() (Choong Yong Liang) - drm/gem: Test for imported GEM buffers with helper (Thomas Zimmermann) - orangefs: Do not truncate file size (Matthew Wilcox) [Orabug: 38095056] {CVE-2025-38065} - soc: mediatek: mtk-mutex: Add DPI1 SOF/EOF to MT8188 mutex tables (AngeloGioacchino Del Regno) - dm cache: prevent BUG_ON by blocking retries on failed device resumes (Ming-Hung Tsai) [Orabug: 38095063] {CVE-2025-38066} - usb: xhci: set page size to the xHCI-supported size (Niklas Neronin) - media: c8sectpfe: Call of_node_put(i2c_bus) only once in c8sectpfe_probe() (Markus Elfring) - ARM: tegra: Switch DSI-B clock parent to PLLD on Tegra114 (Svyatoslav Ryhel) - soc: samsung: include linux/array_size.h where needed (Arnd Bergmann) - drm/xe: Retry BO allocation (Matthew Brost) - drm/xe: Nuke VM's mapping upon close (Matthew Brost) - ieee802154: ca8210: Use proper setters and getters for bitwise types (Andy Shevchenko) - rtc: ds1307: stop disabling alarms on probe (Alexandre Belloni) - tcp: bring back NUMA dispersion in inet_ehash_locks_alloc() (Eric Dumazet) - ALSA: seq: Improve data consistency at polling (Takashi Iwai) - powerpc/prom_init: Fixup missing #size-cells on PowerBook6,7 (Andreas Schwab) - arm64: tegra: Resize aperture for the IGX PCIe C5 slot (Jonathan Hunter) - arm64: tegra: p2597: Fix gpio for vdd-1v8-dis regulator (Diogo Ivo) - drm/amdgpu: Fix missing drain retry fault the last entry (Emily Deng) - drm/amdkfd: Set per-process flags only once cik/vi (Harish Kasiviswanathan) - drm/amdkfd: Set per-process flags only once for gfx9/10/11/12 (Harish Kasiviswanathan) - crypto: mxs-dcp - Only set OTP_KEY bit for OTP key (Sven Schwermer) - crypto: lzo - Fix compression buffer overrun (Herbert Xu) [Orabug: 38095079] {CVE-2025-38068} - misc: pci_endpoint_test: Give disabled BARs a distinct error code (Niklas Cassel) - PCI: endpoint: pci-epf-test: Fix double free that causes kernel to oops (Christian Bruel) [Orabug: 38095087] {CVE-2025-38069} - watchdog: aspeed: Update bootstatus handling (Chin-Ting Kuo) - cpufreq: tegra186: Share policy per cluster (Aaron Kling) - iommu/amd/pgtbl_v2: Improve error handling (Vasant Hegde) - coresight-etb10: change etb_drvdata spinlock's type to raw_spinlock_t (Levi Yun) - badblocks: Fix a nonsense WARN_ON() which checks whether a u64 variable 0 (Coly Li) - ASoC: qcom: sm8250: explicitly set format in sm8250_be_hw_params_fixup() (Alexey Klimov) - auxdisplay: charlcd: Partially revert 'Move hwidth and bwidth to struct hd44780_common' (Andy Shevchenko) - gfs2: Check for empty queue in run_queue (Andreas Gruenbacher) - drm/amd/display: Fix incorrect DPCD configs while Replay/PSR switch (Leon Huang) - drm/amd/display: not abort link train when bw is low (Peichen Huang) - drm/amd/display: calculate the remain segments for all pipes (Zhikai Zhai) - drm/amd/display: remove minimum Dispclk and apply oem panel timing. (Charlene Liu) - ipv6: save dontfrag in cork (Willem de Bruijn) - wifi: cfg80211: allow IR in 20 MHz configurations (Anjaneyulu) - wifi: mac80211_hwsim: Fix MLD address translation (Ilan Peer) - wifi: mac80211: fix warning on disconnect during failed ML reconf (Johannes Berg) - wifi: iwlwifi: fix the ECKV UEFI variable name (Emmanuel Grumbach) - wifi: iwlwifi: mark Br device not integrated (Johannes Berg) - wifi: iwlwifi: fix debug actions order (Johannes Berg) [Orabug: 38094942] {CVE-2025-38045} - wifi: iwlwifi: w/a FW SMPS mode selection (Daniel Gabay) - wifi: iwlwifi: don't warn when if there is a FW error (Miri Korenblit) - printk: Check CON_SUSPEND when unblanking a console (Marcos Paulo de Souza) - iommu: Keep dev-iommu state consistent (Robin Murphy) - hwmon: (dell-smm) Increment the number of fans (Kurt Borja) - wifi: iwlwifi: mvm: fix setting the TK when associated (Avraham Stern) - usb: xhci: Don't change the status of stalled TDs on failed Stop EP (Michal Pecio) - mmc: sdhci: Disable SD card clock before changing parameters (Erick Shepherd) - mmc: dw_mmc: add exynos7870 DW MMC support (Kaustabh Chakraborty) - arm64/mm: Check PUD_TYPE_TABLE in pud_bad() (Ryan Roberts) - arm64/mm: Check pmd_table() in pmd_trans_huge() (Ryan Roberts) - phy: rockchip: usbdp: Only verify link rates/lanes/voltage when the corresponding set flags are set (Andy Yan) - PNP: Expand length of fixup id string (Kees Cook) - netfilter: conntrack: Bound nf_conntrack sysctl writes (Nicolas Bouchinet) - wifi: rtw89: set force HE TB mode when connecting to 11ax AP (Dian-Syuan Yang) - timer_list: Don't use %pK through printk() (Thomas Weissschuh) - net: hsr: Fix PRP duplicate detection (Jaakko Karrenpalo) - net: stmmac: dwmac-rk: Validate GRF and peripheral GRF during probe (Jonas Karlman) - posix-timers: Ensure that timer initialization is fully visible (Thomas Gleixner) - posix-timers: Add cond_resched() to posix_timer_add() search loop (Eric Dumazet) - RDMA/uverbs: Propagate errors from rdma_lookup_get_uobject() (Maher Sanalla) - ext4: do not convert the unwritten extents if data writeback fails (Baokun Li) - ext4: reject the 'data_err=abort' option in nojournal mode (Baokun Li) - clk: qcom: lpassaudiocc-sc7280: Add support for LPASS resets for QCM6490 (Taniya Das) - ASoC: sun4i-codec: support hp-det-gpios property (Ryan Walklin) - drm/amdgpu: Update SRIOV video codec caps (David Rosca) - drm/amdgpu/gfx11: don't read registers in mqd init (Alex Deucher) - drm/amdgpu/gfx12: don't read registers in mqd init (Alex Deucher) - mfd: tps65219: Remove TPS65219_REG_TI_DEV_ID check (Shree Ramamoorthy) - pinctrl-tegra: Restore SFSEL bit when freeing pins (Prathamesh Shete) - xen: Add support for XenServer 6.1 platform device (Frediano Ziglio) - net/smc: use the correct ndev to find pnetid by pnetid table (Guangguan Wang) - dm: restrict dm device size to 2^63-512 bytes (Mikulas Patocka) - crypto: octeontx2 - suppress auth failure screaming due to negative tests (Shashank Gupta) - kconfig: do not clear SYMBOL_VALID when reading include/config/auto.conf (Masahiro Yamada) - kbuild: fix argument parsing in scripts/config (Seyediman Seyedarab) - bpf: Allow pre-ordering for bpf cgroup progs (Yonghong Song) - ASoC: mediatek: mt6359: Add stub for mt6359_accdet_enable_jack_detect (Nicolas F R A Prado) - ASoC: pcm6240: Drop bogus code handling IRQ as GPIO (Linus Walleij) - spi: spi-mux: Fix coverity issue, unchecked return value (Sergio Perez Gonzalez) - erofs: initialize decompression early (Gao Xiang) - thunderbolt: Do not add non-active NVM if NVM upgrade is disabled for retimer (Mika Westerberg) - objtool: Fix error handling inconsistencies in check() (Josh Poimboeuf) - rtc: rv3032: fix EERD location (Alexandre Belloni) - tcp: reorganize tcp_in_ack_event() and tcp_count_delivered() (Ilpo Jarvinen) - jbd2: do not try to recover wiped journal (Jan Kara) - PCI: dwc: Use resource start as ioremap() input in dw_pcie_pme_turn_off() (Frank Li) - bpf: Return prog btf_id without capable check (Mykyta Yatsenko) - vfio/pci: Handle INTx IRQ_NOTCONNECTED (Alex Williamson) - scsi: st: ERASE does not change tape location (Kai Makisara) - scsi: st: Tighten the page format heuristics with MODE SELECT (Kai Makisara) - hypfs_create_cpu_files(): add missing check for hypfs_mkdir() failure (Al Viro) - ext4: reorder capability check last (Christian Gottsche) - riscv: Call secondary mmu notifier when flushing the tlb (Alexandre Ghiti) - bnxt_en: Query FW parameters when the CAPS_CHANGE bit is set (Shantiprasad Shettar) - wifi: mwifiex: Fix HT40 bandwidth issue. (Jeff Chen) - um: Update min_low_pfn to match changes in uml_reserved (Tiwei Bie) - um: Store full CSGSFS and SS register from mcontext (Benjamin Berg) - clocksource/drivers/timer-riscv: Stop stimecmp when cpu hotplug (Nick Hu) - dlm: make tcp still work in multi-link env (Heming Zhao) - s390/tlb: Use mm_has_pgste() instead of mm_alloc_pgste() (Heiko Carstens) - i3c: master: svc: Fix missing STOP for master request (Stanley Chu) - drm/amdgpu: adjust drm_firmware_drivers_only() handling (Alex Deucher) - drm/amd/display: Guard against setting dispclk low for dcn31x (Jing Zhou) - drm/amdgpu: release xcp_mgr on exit (Flora Cui) - blk-cgroup: improve policy registration error handling (Chen Linxuan) - btrfs: send: return -ENAMETOOLONG when attempting a path that is too long (Filipe Manana) - btrfs: get zone unusable bytes while holding lock at btrfs_reclaim_bgs_work() (Filipe Manana) - btrfs: fix non-empty delayed iputs list on unmount due to async workers (Filipe Manana) - btrfs: run btrfs_error_commit_super() early (Qu Wenruo) - btrfs: avoid linker error in btrfs_find_create_tree_block() (Mark Harmstone) - btrfs: make btrfs_discard_workfn() block_group ref explicit (Boris Burkov) - i2c: pxa: fix call balance of i2c-clk handling routines (Vitalii Mordan) - i2c: qup: Vote for interconnect bandwidth to DRAM (Stephan Gerhold) - x86/mm: Check return value from memblock_phys_alloc_range() (Philip Redkin) [Orabug: 38095101] {CVE-2025-38071} - x86/microcode: Update the Intel processor flag scan check (Sohil Mehta) - x86/smpboot: Fix INIT delay assignment for extended Intel Families (Sohil Mehta) - x86/stackprotector/64: Only export __ref_stack_chk_guard on CONFIG_SMP (Ingo Molnar) - x86/headers: Replace __ASSEMBLY__ with __ASSEMBLER__ in UAPI headers (Thomas Huth) - wifi: mt76: mt7925: fix fails to enter low power mode in suspend state (Quan Zhou) - wifi: mt76: mt7925: load the appropriate CLC data based on hardware type (Ming Yen Hsieh) - wifi: mt76: mt7996: revise TXS size (Benjamin Lin) - wifi: mt76: mt7996: fix SER reset trigger on WED reset (Rex Lu) - wifi: mt76: only mark tx-status-failed frames as ACKed on mt76x0/2 (Felix Fietkau) - cgroup/rstat: avoid disabling irqs for O(num_cpu) (Eric Dumazet) - drm/amdgpu: Skip pcie_replay_count sysfs creation for VF (Victor Skvortsov) - mmc: host: Wait for Vdd to settle on card power off (Erick Shepherd) - staging: vchiq_arm: Create keep-alive thread during probe (Stefan Wahren) - pidfs: improve multi-threaded exec and premature thread-group leader exit polling (Christian Brauner) - libnvdimm/labels: Fix divide error in nd_label_data_init() (Robert Richter) [Orabug: 38095109] {CVE-2025-38072} - ext4: on a remount, only log the ro or r/w state when it has changed (Nicolas Bretz) - xen/pci: Do not register devices with segments = 0x10000 (Roger Pau Monne) - PCI: vmd: Disable MSI remapping bypass under Xen (Roger Pau Monne) - drm/amdkfd: set precise mem ops caps to disabled for gfx 11 and 12 (Jonathan Kim) - drm/amdgpu/discovery: check ip_discovery fw file available (Flora Cui) - pNFS/flexfiles: Report ENETDOWN as a connection error (Trond Myklebust) - tools/build: Don't pass test log files to linker (Ian Rogers) - r8169: disable RTL8126 ZRX-DC timeout (Chunhao Lin) - PCI: dwc: ep: Ensure proper iteration over outbound map windows (Frank Li) - objtool: Properly disable uaccess validation (Josh Poimboeuf) - lockdep: Fix wait context check on softirq for PREEMPT_RT (Ryo Takakura) - dql: Fix dql-limit value when reset. (Jing Su) - Bluetooth: Disable SCO support if READ_VOICE_SETTING is unsupported/broken (Pedro Nishiyama) - Bluetooth: btmtksdio: Prevent enabling interrupts after IRQ handler removal (Sean Wang) - thermal/drivers/qoriq: Power down TMU on system suspend (Alice Guo) - thermal/drivers/mediatek/lvts: Start sensor interrupts disabled (Nicolas F R A Prado) - net: tn40xx: create swnode for mdio and aqr105 phy and add to mdiobus (Hans-Frieder Vogt) - net: tn40xx: add pci-id of the aqr105-based Tehuti TN4010 cards (Hans-Frieder Vogt) - mctp: Fix incorrect tx flow invalidation condition in mctp-i2c (Daniel Hsu) - ASoC: codecs: wsa883x: Correct VI sense channel mask (Krzysztof Kozlowski) - ASoC: codecs: wsa884x: Correct VI sense channel mask (Krzysztof Kozlowski) - spi-rockchip: Fix register out of bounds access (Luis de Arquer) [Orabug: 38095173] {CVE-2025-38081} - SUNRPC: rpcbind should never reset the port to the value '0' (Trond Myklebust) - SUNRPC: rpc_clnt_set_transport() must not change the autobind setting (Trond Myklebust) - NFSv4: Treat ENETUNREACH errors as fatal for state recovery (Trond Myklebust) - cifs: Fix establishing NetBIOS session for SMB2+ connection (Pali Rohar) - cifs: add validation check for the fields in smb_aces (Namjae Jeon) - cifs: Set default Netbios RFC1001 server name to hostname in UNC (Pali Rohar) - fbdev: core: tileblit: Implement missing margin clearing for tileblit (Zsolt Kajtar) - fbcon: Use correct erase colour for clearing in fbcon (Zsolt Kajtar) - fbdev: fsl-diu-fb: add missing device_remove_file() (Shixiong Ou) - riscv: Allow NOMMU kernels to access all of RAM (Samuel Holland) - mailbox: use error ret code of of_parse_phandle_with_args() (Tudor Ambarus) - mailbox: pcc: Use acpi_os_ioremap() instead of ioremap() (Sudeep Holla) - tpm: Convert warn to dbg in tpm2_start_auth_session() (Jonathan Mcdowell) - ACPI: PNP: Add Intel OC Watchdog IDs to non-PNP device list (Diogo Ivo) - tracing: Mark binary printing functions with __printf() attribute (Andy Shevchenko) - iommufd: Extend IOMMU_GET_HW_INFO to report PASID capability (Yi Liu) - arm64: Add support for HIP09 Spectre-BHB mitigation (Jinqian Yang) - SUNRPC: Don't allow waiting for exiting tasks (Trond Myklebust) - NFS: Don't allow waiting for exiting tasks (Trond Myklebust) - NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Trond Myklebust) - io_uring/msg: initialise msg request opcode (Pavel Begunkov) - exfat: call bh_read in get_block only when necessary (Sungjong Seo) - fuse: Return EPERM rather than ENOSYS from link() (Matt Johnston) - smb: client: Store original IO parameters and prevent zero IO sizes (Zhaolong Wang) - cifs: Fix negotiate retry functionality (Pali Rohar) - cifs: Fix querying and creating MF symlinks over SMB1 (Pali Rohar) - cifs: Add fallback for SMB2 CREATE without FILE_READ_ATTRIBUTES (Pali Rohar) - s390/vfio-ap: Fix no AP queue sharing allowed message written to kernel log (Tony Krowiak) - x86/fred: Fix system hang during S4 resume with FRED enabled (Xin Li) [Orabug: 38094951] {CVE-2025-38047} - kconfig: merge_config: use an empty file as initfile (Daniel Gomez) - samples/bpf: Fix compilation failure for samples/bpf on LoongArch Fedora (Haoran Jiang) - bpf: fix possible endless loop in BPF map iteration (Brandon Kammerdiener) - io_uring: don't duplicate flushing in io_req_post_cqe (Pavel Begunkov) - block: fix race between set_blocksize and read paths (Darrick J. Wong) [Orabug: 38095117] {CVE-2025-38073} - selftests/bpf: Mitigate sockmap_ktls disconnect_after_delete failure (Ihor Solodrai) - drm/amdgpu: Allow P2P access through XGMI (Felix Kuehling) - drm/amd/display: Enable urgent latency adjustment on DCN35 (Nicholas Susanto) - fs/ext4: use sleeping version of sb_find_get_block() (Davidlohr Bueso) - fs/jbd2: use sleeping version of __find_get_block() (Davidlohr Bueso) - fs/ocfs2: use sleeping version of __find_get_block() (Davidlohr Bueso) - fs/buffer: use sleeping version of __find_get_block() (Davidlohr Bueso) - fs/buffer: introduce sleeping flavors for pagecache lookups (Davidlohr Bueso) - fs/buffer: split locking for pagecache lookups (Davidlohr Bueso) - ima: process_measurement() needlessly takes inode_lock() on MAY_READ (Frederick Lawler) - dma-mapping: Fix warning reported for missing prototype (Balbir Singh) - net: enetc: refactor bulk flipping of RX buffers to separate function (Vladimir Oltean) - vhost_task: fix vhost_task_create() documentation (Stefano Garzarella) - cgroup: Fix compilation issue due to cgroup_mutex not being exported (Gao Xu) - dma-mapping: avoid potential unused data compilation warning (Marek Szyprowski) - mei: vsc: Use struct vsc_tp_packet as vsc-tp tx_buf and rx_buf type (Hans de Goede) - intel_th: avoid using deprecated page-mapping, index fields (Lorenzo Stoakes) - dma/mapping.c: dev_dbg support for dma_addressing_limited (Balbir Singh) - virtio_ring: Fix data race by tagging event_triggered as racy for KCSAN (Zhongqiu Han) [Orabug: 38094958] {CVE-2025-38048} - scsi: ufs: Introduce quirk to extend PA_HIBERN8TIME for UFS devices (Manish Pandey) - scsi: target: iscsi: Fix timeout on deleted connection (Dmitry Bogdanov) [Orabug: 38095134] {CVE-2025-38075} - nvmem: qfprom: switch to 4-byte aligned reads (Dmitry Baryshkov) - nvmem: core: update raw_len if the bit reading is required (Dmitry Baryshkov) - nvmem: core: verify cell's raw_len (Dmitry Baryshkov) - nvmem: core: fix bit offsets of more than one byte (Dmitry Baryshkov) - nvmem: rockchip-otp: add rk3576 variant data (Heiko Stuebner) - nvmem: rockchip-otp: Move read-offset into variant-data (Heiko Stuebner) - cpufreq: Add SM8650 to cpufreq-dt-platdev blocklist (Pengyu Luo) - phy: renesas: rcar-gen3-usb2: Assert PLL reset on PHY power off (Claudiu Beznea) - phy: renesas: rcar-gen3-usb2: Lock around hardware registers and driver data (Claudiu Beznea) - phy: renesas: rcar-gen3-usb2: Move IRQ request in probe (Claudiu Beznea) - i2c: designware: Fix an error handling path in i2c_dw_pci_probe() (Christophe Jaillet) - i2c: designware: Use temporary variable for struct device (Andy Shevchenko) - drm/amd/display: Defer BW-optimization-blocked DRR adjustments (John Olender) - drm/amd/display: Correct timing_adjust_pending flag setting. (Zhongwei) - drm/amd/display: Do not enable replay when vtotal update is pending. (Sung-Huai Wang) - drm/amd/display: Configure DTBCLK_P with OPTC only for dcn401 (Dillon Varone) - LTS version: v6.12.30 (Jack Vogel) - drm/amdgpu: fix pm notifier handling (Alex Deucher) - phy: tegra: xusb: remove a stray unlock (Dan Carpenter) - usb: typec: ucsi: displayport: Fix deadlock (Andrei Kuchynski) [Orabug: 37977018] {CVE-2025-37967} - drm/tiny: panel-mipi-dbi: Use drm_client_setup_with_fourcc() (Fabio Estevam) - drm/panel-mipi-dbi: Run DRM default client setup (Thomas Zimmermann) - drm/fbdev-dma: Support struct drm_driver.fbdev_probe (Thomas Zimmermann) - Bluetooth: btnxpuart: Fix kernel panic during FW release (Neeraj Sanjay Kale) [Orabug: 37844459] {CVE-2025-22102} - iio: light: opt3001: fix deadlock due to concurrent flag access (Luca Ceresoli) [Orabug: 37977026] {CVE-2025-37968} - accel/ivpu: Fix fw log printing (Jacek Lawrynowicz) - accel/ivpu: Refactor functions in ivpu_fw_log.c (Jacek Lawrynowicz) - accel/ivpu: Reset fw log on cold boot (Tomasz Rusinowicz) - accel/ivpu: Rename ivpu_log_level to fw_log_level (Jacek Lawrynowicz) - mm/page_alloc: fix race condition in unaccepted memory handling (Kirill A. Shutemov) [Orabug: 38094767] {CVE-2025-38008} - drm/xe/gsc: do not flush the GSC worker from the reset path (Daniele Ceraolo Spurio) - CIFS: New mount option for cifs.upcall namespace resolution (Ritvik Budhiraja) - dmaengine: idxd: Refactor remove call with idxd_cleanup() helper (Shuai Xue) [Orabug: 38094790] {CVE-2025-38014} - dmaengine: idxd: fix memory leak in error handling path of idxd_pci_probe (Shuai Xue) - dmaengine: idxd: fix memory leak in error handling path of idxd_alloc (Shuai Xue) [Orabug: 38094793] {CVE-2025-38015} - dmaengine: idxd: Add missing idxd cleanup to fix memory leak in remove call (Shuai Xue) - dmaengine: idxd: Add missing cleanups in cleanup internals (Shuai Xue) - dmaengine: idxd: Add missing cleanup for early error out in idxd_setup_internals (Shuai Xue) - dmaengine: idxd: fix memory leak in error handling path of idxd_setup_groups (Shuai Xue) - dmaengine: idxd: fix memory leak in error handling path of idxd_setup_engines (Shuai Xue) - dmaengine: idxd: fix memory leak in error handling path of idxd_setup_wqs (Shuai Xue) - dmaengine: ti: k3-udma: Use cap_mask directly from dma_device structure instead of a local copy (Yemike Abhilash Chandra) - dmaengine: ti: k3-udma: Add missing locking (Ronald Wahl) [Orabug: 38094756] {CVE-2025-38005} - mm: userfaultfd: correct dirty flags set for both present and swap pte (Barry Song) - net: qede: Initialize qede_ll_ops with designated initializer (Nathan Chancellor) - ring-buffer: Fix persistent buffer when commit page is the reader page (Steven Rostedt) - wifi: mt76: disable napi on driver removal (Fedor Pchelkin) [Orabug: 38094770] {CVE-2025-38009} - tpm: Mask TPM RC in tpm2_start_auth_session() (Jarkko Sakkinen) - spi: tegra114: Use value to check for invalid delays (Aaron Kling) - smb: client: fix memory leak during error handling for POSIX mkdir (Jethro Donaldson) - scsi: sd_zbc: block: Respect bio vector limits for REPORT ZONES buffer (Steve Siwinski) - phy: renesas: rcar-gen3-usb2: Set timing registers only once (Claudiu Beznea) - phy: renesas: rcar-gen3-usb2: Fix role detection on unbind/bind (Claudiu Beznea) - phy: Fix error handling in tegra_xusb_port_init (Ma Ke) - phy: tegra: xusb: Use a bitmask for UTMI pad power state tracking (Wayne Chang) [Orabug: 38094777] {CVE-2025-38010} - tracing: samples: Initialize trace_array_printk() with the correct function (Steven Rostedt) - ftrace: Fix preemption accounting for stacktrace filter command (Donglin Peng) - ftrace: Fix preemption accounting for stacktrace trigger command (Donglin Peng) - kbuild: Disable -Wdefault-const-init-unsafe (Nathan Chancellor) - Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Michael Kelley) - Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Michael Kelley) - arm64: dts: rockchip: Remove overdrive-mode OPPs from RK3588J SoC dtsi (Dragan Simic) - arm64: dts: amlogic: dreambox: fix missing clkc_audio node (Christian Hewitt) - hv_netvsc: Remove rmsg_pgcnt (Michael Kelley) - hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Michael Kelley) - hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Michael Kelley) - dma-buf: insert memory barrier before updating num_fences (Hyejeong Choi) - ALSA: usb-audio: Add sample rate quirk for Microdia JP001 USB Camera (Nicolas Chauvet) - ALSA: usb-audio: Add sample rate quirk for Audioengine D1 (Christian Heusel) - ALSA: es1968: Add error handling for snd_pcm_hw_constraint_pow2() (Xu Wang) - ACPI: PPTT: Fix processor subtable walk (Jeremy Linton) - gpio: pca953x: fix IRQ storm on system wake up (Emanuele Ghidoli) - MAINTAINERS: Update Alexey Makhalov's email address (Alexey Makhalov) - drm/amd/display: Avoid flooding unnecessary info messages (Wayne Lin) - drm/amd/display: Correct the reply value when AUX write incomplete (Wayne Lin) - drm/amdgpu: csa unmap use uninterruptible lock (Philip Yang) [Orabug: 38094779] {CVE-2025-38011} - drm/amdgpu: fix incorrect MALL size for GFX1151 (Tim Huang) - Revert 'drm/amd/display: Hardware cursor changes color when switched to software cursor' (Melissa Wen) - btrfs: add back warning for mount option commit values exceeding 300 (Kyoji Ogasawara) - btrfs: fix folio leak in submit_one_async_extent() (Boris Burkov) - btrfs: fix discard worker infinite loop after disabling discard (Filipe Manana) - LoongArch: uprobes: Remove redundant code about resume_era (Tiezhu Yang) - LoongArch: uprobes: Remove user_{en,dis}able_single_step() (Tiezhu Yang) - LoongArch: Fix MAX_REG_OFFSET calculation (Huacai Chen) - LoongArch: Save and restore CSR.CNTC for hibernation (Huacai Chen) - LoongArch: Move __arch_cpu_idle() to .cpuidle.text section (Huacai Chen) - LoongArch: Prevent cond_resched() occurring within kernel-fpu (Tianyang Zhang) - HID: bpf: abort dispatch if device destroyed (Rongrong) [Orabug: 38094796] {CVE-2025-38016} - udf: Make sure i_lenExtents is uptodate on inode eviction (Jan Kara) - sched_ext: bpf_iter_scx_dsq_new() should always initialize iterator (Tejun Heo) [Orabug: 38094786] {CVE-2025-38012} - dmaengine: Revert 'dmaengine: dmatest: Fix dmatest waiting less when interrupted' (Nathan Lynch) - NFSv4/pnfs: Reset the layout state after a layoutreturn (Trond Myklebust) - tsnep: fix timestamping with a stacked DSA driver (Gerhard Engleder) - net/tls: fix kernel panic when alloc_page failed (Pengtao He) [Orabug: 38094802] {CVE-2025-38018} - mlxsw: spectrum_router: Fix use-after-free when deleting GRE net devices (Ido Schimmel) [Orabug: 38094804] {CVE-2025-38019} - wifi: mac80211: Set n_channels after allocating struct cfg80211_scan_request (Kees Cook) [Orabug: 38094788] {CVE-2025-38013} - octeontx2-pf: Do not reallocate all ntuple filters (Subbaraya Sundeep) - octeontx2-af: Fix CGX Receive counters (Hariprasad Kelam) - net: ethernet: mtk_eth_soc: fix typo for declaration MT7988 ESW capability (Bc-Bocun Chen) - octeontx2-pf: macsec: Fix incorrect max transmit size in TX secy (Subbaraya Sundeep) - netlink: specs: tc: all actions are indexed arrays (Jakub Kicinski) - netlink: specs: tc: fix a couple of attribute names (Jakub Kicinski) - drm/xe: Save CTX_TIMESTAMP mmio value instead of LRC value (Umesh Nerlige Ramappa) - regulator: max20086: fix invalid memory access (Cosmin Tanislav) [Orabug: 38094833] {CVE-2025-38027} - qlcnic: fix memory leak in qlcnic_sriov_channel_cfg_cmd() (Abdun Nihaal) - net/mlx5e: Disable MACsec offload for uplink representor profile (Carolina Jubran) [Orabug: 38094808] {CVE-2025-38020} - vsock/test: Fix occasional failure in SIOCOUTQ tests (Konstantin Shkolnyy) - net: dsa: b53: prevent standalone from trying to forward to other ports (Jonas Gorski) - ALSA: sh: SND_AICA should depend on SH_DMA_API (Geert Uytterhoeven) - nvme-pci: acquire cq_poll_lock in nvme_poll_irqdisable (Keith Busch) - nvme-pci: make nvme_pci_npages_prp() __always_inline (Kees Cook) - net: dsa: sja1105: discard incoming frames in BR_STATE_LISTENING (Vladimir Oltean) - net: cadence: macb: Fix a possible deadlock in macb_halt_tx. (Mathieu Othacehe) - ALSA: ump: Fix a typo of snd_ump_stream_msg_device_info (Takashi Iwai) - ALSA: seq: Fix delivery of UMP events to group ports (Takashi Iwai) - net: mctp: Ensure keys maintain only one ref to corresponding dev (Andrew Jeffery) - tests/ncdevmem: Fix double-free of queue array (Cosmin Ratiu) - selftests: ncdevmem: Switch to AF_INET6 (Stanislav Fomichev) - selftests: ncdevmem: Make client_ip optional (Stanislav Fomichev) - selftests: ncdevmem: Unify error handling (Stanislav Fomichev) - selftests: ncdevmem: Separate out dmabuf provider (Stanislav Fomichev) - selftests: ncdevmem: Redirect all non-payload output to stderr (Stanislav Fomichev) - net: mctp: Don't access ifa_index when missing (Matt Johnston) - mctp: no longer rely on net-dev_index_head[] (Eric Dumazet) - tools/net/ynl: ethtool: fix crash when Hardware Clock info is missing (Hangbin Liu) - net_sched: Flush gso_skb list too during -change() (Cong Wang) [Orabug: 37998128] {CVE-2025-37992} - Bluetooth: MGMT: Fix MGMT_OP_ADD_DEVICE invalid device flags (Luiz Augusto von Dentz) - RDMA/core: Fix 'KASAN: slab-use-after-free Read in ib_register_device' problem (Zhu Yanjun) [Orabug: 38094813] {CVE-2025-38022} - spi: loopback-test: Do not split 1024-byte hexdumps (Geert Uytterhoeven) - nfs: handle failure of nfs_get_lock_context in unlock path (Li Lingfeng) [Orabug: 38094818] {CVE-2025-38023} - HID: uclogic: Add NULL check in uclogic_input_configured() (Henry Martin) [Orabug: 38094764] {CVE-2025-38007} - HID: thrustmaster: fix memory leak in thrustmaster_interrupts() (Qasim Ijaz) - RDMA/rxe: Fix slab-use-after-free Read in rxe_queue_cleanup bug (Zhu Yanjun) [Orabug: 38094827] {CVE-2025-38024} - virtio_net: ensure netdev_tx_reset_queue is called on bind xsk for tx (Koichiro Den) - virtio_ring: add a func argument 'recycle_done' to virtqueue_reset() (Koichiro Den) - iio: chemical: sps30: use aligned_s64 for timestamp (David Lechner) - iio: adc: ad7768-1: Fix insufficient alignment of timestamp. (Jonathan Cameron) - xhci: dbc: Avoid event polling busyloop if pending rx transfers are inactive. (Mathias Nyman) - xhci: dbc: Improve performance by removing delay in transfer event polling. (Mathias Nyman) - Revert 'drm/amd: Stop evicting resources on APUs in suspend' (Alex Deucher) - drm/amd: Add Suspend/Hibernate notification callback support (Mario Limonciello) - iio: pressure: mprls0025pa: use aligned_s64 for timestamp (David Lechner) - iio: chemical: pms7003: use aligned_s64 for timestamp (David Lechner) - iio: adc: ad7266: Fix potential timestamp alignment issue. (Jonathan Cameron) - KVM: x86/mmu: Prevent installing hugepages when mem attributes are changing (Sean Christopherson) - KVM: Add member to struct kvm_gfn_range to indicate private/shared (Isaku Yamahata) - uio_hv_generic: Fix sysfs creation path for ring buffer (Naman Jain) - tpm: tis: Double the timeout B to 4s (Michal Suchanek) - tracing: probes: Fix a possible race in trace_probe_log APIs (Masami Hiramatsu) - cgroup/cpuset: Extend kthread_is_per_cpu() check to all PF_NO_SETAFFINITY tasks (Waiman Long) - arm64: dts: imx8mp-var-som: Fix LDO5 shutdown causing SD card timeout (Himanshu Bhavani) - platform/x86: asus-wmi: Fix wlan_ctrl_by_user detection (Hans de Goede) - platform/x86/amd/pmc: Declare quirk_spurious_8042 for MECHREVO Wujie 14XA (GX4HRXL) (Runhua He) - binfmt_elf: Move brk for static PIE even if ASLR disabled (Kees Cook) - riscv: dts: sophgo: fix DMA data-width configuration for CV18xx (Ze Huang) - drivers/platform/x86/amd: pmf: Check for invalid Smart PC Policies (Mario Limonciello) - drivers/platform/x86/amd: pmf: Check for invalid sideloaded Smart PC Policies (Mario Limonciello) - fs/xattr.c: fix simple_xattr_list to always include security.* xattrs (Stephen Smalley) - arm64: dts: rockchip: Assign RT5616 MCLK rate on rk3588-friendlyelec-cm3588 (Tom Vincent) - LTS version: v6.12.29 (Jack Vogel) - arm64: proton-pack: Add new CPUs 'k' values for branch mitigation (James Morse) - arm64: bpf: Only mitigate cBPF programs loaded by unprivileged users (James Morse) [Orabug: 37977004] {CVE-2025-37963} - arm64: bpf: Add BHB mitigation to the epilogue for cBPF programs (James Morse) [Orabug: 37976926] {CVE-2025-37948} - arm64: proton-pack: Expose whether the branchy loop k value (James Morse) - arm64: proton-pack: Expose whether the platform is mitigated by firmware (James Morse) - arm64: insn: Add support for encoding DSB (James Morse) - mm: page_alloc: speed up fallbacks in rmqueue_bulk() (Johannes Weiner) - mm: page_alloc: don't steal single pages from biggest buddy (Johannes Weiner) - Bluetooth: btmtk: Remove the resetting step before downloading the fw (Hao Qin) - Bluetooth: btmtk: Remove resetting mt7921 before downloading the fw (Hao Qin) - io_uring: always arm linked timeouts prior to issue (Jens Axboe) - rust: clean Rust 1.88.0's clippy::uninlined_format_args lint (Miguel Ojeda) - rust: allow Rust 1.87.0's clippy::ptr_eq lint (Miguel Ojeda) - Revert 'um: work around sched_yield not yielding in time-travel mode' (Christian Lamparter) - do_umount(): add missing barrier before refcount checks in sync case (Al Viro) - io_uring/sqpoll: Increase task_work submission batch size (Gabriel Krisman Bertazi) - drm/xe/tests/mocs: Hold XE_FORCEWAKE_ALL for LNCF regs (Tejas Upadhyay) - drm/xe/tests/mocs: Update xe_force_wake_get() return handling (Himal Prasad Ghimiray) - riscv: misaligned: enable IRQs while handling misaligned accesses (Clement Leger) - riscv: misaligned: factorize trap handling (Clement Leger) - nvme: unblock ctrl state transition for firmware update (Daniel Wagner) - drm/panel: simple: Update timings for AUO G101EVN010 (Kevin Baker) - loop: Add sanity check for read/write_iter (Lizhi Xu) - loop: factor out a loop_assign_backing_file helper (Christoph Hellwig) - loop: refactor queue limits updates (Christoph Hellwig) - loop: Fix ABBA locking race (Ogawa Hirofumi) - loop: Simplify discard granularity calc (John Garry) - loop: Use bdev limit helpers for configuring discard (John Garry) - riscv: misaligned: Add handling for ZCB instructions (Nylon Chen) - MIPS: Fix MAX_REG_OFFSET (Thorsten Blum) - iio: adc: dln2: Use aligned_s64 for timestamp (Jonathan Cameron) - iio: accel: adxl355: Make timestamp 64-bit aligned using aligned_s64 (Jonathan Cameron) - types: Complement the aligned types with signed 64-bit one (Andy Shevchenko) - iio: temp: maxim-thermocouple: Fix potential lack of DMA safe buffer. (Jonathan Cameron) - iio: accel: adxl367: fix setting odr for activity time update (Lothar Rubusch) - usb: usbtmc: Fix erroneous generic_read ioctl return (Dave Penkler) - usb: usbtmc: Fix erroneous wait_srq ioctl return (Dave Penkler) - usb: usbtmc: Fix erroneous get_stb ioctl error returns (Dave Penkler) - USB: usbtmc: use interruptible sleep in usbtmc_read (Oliver Neukum) - usb: typec: ucsi: displayport: Fix NULL pointer access (Andrei Kuchynski) [Orabug: 38015126] {CVE-2025-37994} - usb: typec: tcpm: delay SNK_TRY_WAIT_DEBOUNCE to SRC_TRYWAIT transition (Rd Babiera) - usb: misc: onboard_usb_dev: fix support for Cypress HX3 hubs (Lukasz Czechowski) - usb: host: tegra: Prevent host controller crash when OTG port is used (Jim Lin) - usb: gadget: Use get_status callback to set remote wakeup capability (Prashanth K) - usb: gadget: tegra-xudc: ACK ST_RC after clearing CTRL_RUN (Wayne Chang) - usb: gadget: f_ecm: Add get_status callback (Prashanth K) - usb: cdnsp: fix L1 resume issue for RTL_REVISION_NEW_LPM version (Pawel Laszczak) - usb: cdnsp: Fix issue with resuming from L1 (Pawel Laszczak) - usb: dwc3: gadget: Make gadget_wakeup asynchronous (Prashanth K) - x86/microcode: Consolidate the loader enablement checking (Borislav Petkov) - module: ensure that kobject_put() is safe for module type kobjects (Dmitry Antipov) [Orabug: 38015131] {CVE-2025-37995} - memblock: Accept allocated memory before use in memblock_double_array() (Tom Lendacky) [Orabug: 37976994] {CVE-2025-37960} - clocksource/i8253: Use raw_spinlock_irqsave() in clockevent_i8253_disable() (Sebastian Andrzej Siewior) - arm64: cpufeature: Move arm64_use_ng_mappings to the .data section to prevent wrong idmap generation (Levi Yun) - accel/ivpu: Increase state dump msg timeout (Jacek Lawrynowicz) - xenbus: Use kref to track req lifetime (Jason Andryuk) [Orabug: 37976934] {CVE-2025-37949} - xen: swiotlb: Use swiotlb bouncing if kmalloc allocation demands it (John Ernberg) - smb: client: Avoid race in open_cached_dir with lease breaks (Paul Aurich) [Orabug: 37976959] {CVE-2025-37954} - usb: uhci-platform: Make the clock really optional (Alexey Charkov) - drm/amdgpu/hdp7: use memcfg register to post the write for HDP flush (Alex Deucher) - drm/amdgpu/hdp6: use memcfg register to post the write for HDP flush (Alex Deucher) - drm/amdgpu/hdp5: use memcfg register to post the write for HDP flush (Alex Deucher) - drm/amdgpu/hdp5.2: use memcfg register to post the write for HDP flush (Alex Deucher) - drm/amdgpu/hdp4: use memcfg register to post the write for HDP flush (Alex Deucher) - drm/amd/display: Copy AUX read reply data whenever length 0 (Wayne Lin) - drm/amd/display: Fix wrong handling for AUX_DEFER case (Wayne Lin) - drm/amd/display: Remove incorrect checking in dmub aux handler (Wayne Lin) - drm/amd/display: Fix the checking condition in dmub aux handling (Wayne Lin) - drm/amd/display: more liberal vmin/vmax update for freesync (Aurabindo Pillai) - drm/amd/display: Fix invalid context error in dml helper (Roman Li) [Orabug: 37977185] {CVE-2025-37965} - drm/amdgpu/vcn: using separate VCN1_AON_SOC offset (Ruijing Dong) - drm/xe: Add page queue multiplier (Matthew Brost) - drm/v3d: Add job to pending list if the reset was skipped (Maira Canal) [Orabug: 37976942] {CVE-2025-37951} - iio: imu: st_lsm6dsx: fix possible lockup in st_lsm6dsx_read_tagged_fifo (Silvano Seva) [Orabug: 37977031] {CVE-2025-37969} - iio: imu: st_lsm6dsx: fix possible lockup in st_lsm6dsx_read_fifo (Silvano Seva) [Orabug: 37977037] {CVE-2025-37970} - iio: imu: inv_mpu6050: align buffer for timestamp (David Lechner) - iio: adis16201: Correct inclinometer channel resolution (Gabriel) - iio: adc: rockchip: Fix clock initialization sequence (Simon Xue) - iio: adc: ad7606: fix serial register access (Angelo Dureghello) - io_uring: ensure deferred completions are flushed for multishot (Jens Axboe) - drm/amd/display: Shift DMUB AUX reply command if necessary (Wayne Lin) - KVM: SVM: Forcibly leave SMM mode on SHUTDOWN interception (Mikhail Lobanov) [Orabug: 37976977] {CVE-2025-37957} - selftests/mm: fix a build failure on powerpc (Nysal Jan K.A.) - selftests/mm: compaction_test: support platform with huge mount of memory (Feng Tang) - mm/userfaultfd: fix uninitialized output field for -EAGAIN race (Peter Xu) - mm/huge_memory: fix dereferencing invalid pmd migration entry (Gavin Guo) [Orabug: 37976982] {CVE-2025-37958} - mm: fix folio_pte_batch() on XEN PV (Petr Vanek) - x86/mm: Eliminate window where TLB flushes may be inadvertently skipped (Dave Hansen) [Orabug: 37977013] {CVE-2025-37964} - staging: axis-fifo: Correct handling of tx_fifo_depth for size validation (Gabriel) - staging: axis-fifo: Remove hardware resets for user errors (Gabriel) - staging: bcm2835-camera: Initialise dev in v4l2_dev (Dave Stevenson) [Orabug: 37977042] {CVE-2025-37971} - staging: iio: adc: ad7816: Correct conditional logic for store mode (Gabriel) - rust: clean Rust 1.88.0's warning about clippy::disallowed_macros configuration (Miguel Ojeda) - objtool/rust: add one more noreturn Rust function for Rust 1.87.0 (Miguel Ojeda) - rust: clean Rust 1.88.0's unnecessary_transmutes lint (Miguel Ojeda) - Input: synaptics - enable InterTouch on TUXEDO InfinityBook Pro 14 v5 (Aditya Garg) - Input: synaptics - enable SMBus for HP Elitebook 850 G1 (Dmitry Torokhov) - Input: synaptics - enable InterTouch on Dell Precision M3800 (Aditya Garg) - Input: synaptics - enable InterTouch on Dynabook Portege X30L-G (Aditya Garg) - Input: synaptics - enable InterTouch on Dynabook Portege X30-D (Manuel Fombuena) - Input: xpad - fix two controller table values (Vicki Pfau) - Input: xpad - add support for 8BitDo Ultimate 2 Wireless Controller (Lode Willems) - Input: xpad - fix Share button on Xbox One controllers (Vicki Pfau) - Input: mtk-pmic-keys - fix possible null pointer dereference (Gary Bisson) [Orabug: 37977044] {CVE-2025-37972} - Input: cyttsp5 - fix power control issue on wakeup (Mikael Gonella-Bolduc) - Input: cyttsp5 - ensure minimum reset pulse width (Hugo Villeneuve) - virtio-net: fix total qstat values (Jakub Kicinski) - net: export a helper for adding up queue stats (Jakub Kicinski) - fbnic: Do not allow mailbox to toggle to ready outside fbnic_mbx_poll_tx_ready (Alexander Duyck) - fbnic: Pull fbnic_fw_xmit_cap_msg use out of interrupt context (Alexander Duyck) - fbnic: Improve responsiveness of fbnic_mbx_poll_tx_ready (Alexander Duyck) - fbnic: Actually flush_tx instead of stalling out (Alexander Duyck) - fbnic: Gate AXI read/write enabling on FW mailbox (Alexander Duyck) - fbnic: Fix initialization of mailbox descriptor rings (Alexander Duyck) - net: dsa: b53: do not set learning and unicast/multicast on up (Jonas Gorski) - net: dsa: b53: fix learning on VLAN unaware bridges (Jonas Gorski) - net: dsa: b53: fix toggling vlan_filtering (Jonas Gorski) - net: dsa: b53: do not program vlans when vlan filtering is off (Jonas Gorski) - net: dsa: b53: do not allow to configure VLAN 0 (Jonas Gorski) - net: dsa: b53: always rejoin default untagged VLAN on bridge leave (Jonas Gorski) - net: dsa: b53: fix VLAN ID for untagged vlan on bridge leave (Jonas Gorski) - net: dsa: b53: fix flushing old pvid VLAN on pvid change (Jonas Gorski) - net: dsa: b53: fix clearing PVID of a port (Jonas Gorski) - net: dsa: b53: keep CPU port always tagged again (Jonas Gorski) - net: dsa: b53: allow leaky reserved multicast (Jonas Gorski) - bpf: Scrub packet on bpf_redirect_peer (Paul Chaignon) [Orabug: 37976990] {CVE-2025-37959} - netfilter: ipset: fix region locking in hash types (Jozsef Kadlecsik) [Orabug: 38015141] {CVE-2025-37997} - ipvs: fix uninit-value for saddr in do_output_route4 (Julian Anastasov) [Orabug: 37976996] {CVE-2025-37961} - erofs: ensure the extra temporary copy is valid for shortened bvecs (Gao Xiang) - ice: use DSN instead of PCI BDF for ice_adapter index (Przemek Kitszel) - ice: Initial support for E825C hardware in ice_adapter (Sergey Temerkhanov) - wifi: mac80211: fix the type of status_code for negotiated TID to Link Mapping (Michael-Cy Lee) - can: gw: fix RCU/BH usage in cgw_create_job() (Oliver Hartkopp) - can: mcp251xfd: fix TDC setting for low data bit rates (Kelsey Maes) - can: m_can: m_can_class_allocate_dev(): initialize spin lock on device probe (Antonios Salios) [Orabug: 38015123] {CVE-2025-37993} - net: ethernet: mtk_eth_soc: do not reset PSE when setting FE (Frank Wunderlich) - net: ethernet: mtk_eth_soc: reset all TX queues on DMA free (Daniel Golle) - gre: Fix again IPv6 link-local address generation. (Guillaume Nault) - virtio-net: free xsk_buffs on error in virtnet_xsk_pool_enable() (Jakub Kicinski) [Orabug: 37976969] {CVE-2025-37955} - virtio_net: xsk: bind/unbind xsk for tx (Xuan Zhuo) - sch_htb: make htb_deactivate() idempotent (Cong Wang) [Orabug: 37977176] {CVE-2025-37953} - s390/entry: Fix last breaking event handling in case of stack corruption (Heiko Carstens) - ksmbd: fix memory leak in parse_lease_state() (Zhaolong Wang) [Orabug: 37977180] {CVE-2025-37962} - openvswitch: Fix unsafe attribute parsing in output_userspace() (Eelco Chaudron) [Orabug: 38015148] {CVE-2025-37998} - ksmbd: Fix UAF in __close_file_table_ids (Sean Heelan) [Orabug: 37976951] {CVE-2025-37952} - ksmbd: prevent out-of-bounds stream writes by validating *pos (Norbert Szetei) [Orabug: 37976923] {CVE-2025-37947} - ksmbd: prevent rename with empty string (Namjae Jeon) [Orabug: 37976972] {CVE-2025-37956} - can: rockchip_canfd: rkcanfd_remove(): fix order of unregistration calls (Marc Kleine-Budde) - can: mcp251xfd: mcp251xfd_remove(): fix order of unregistration calls (Marc Kleine-Budde) - s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has child VFs (Niklas Schnelle) [Orabug: 37976920] {CVE-2025-37946} - vfio/pci: Align huge faults to order (Alex Williamson) - wifi: cfg80211: fix out-of-bounds access during multi-link element defragmentation (Veerendranath Jakkam) [Orabug: 37977046] {CVE-2025-37973} - s390/pci: Fix missing check for zpci_create_device() error return (Niklas Schnelle) [Orabug: 37977050] {CVE-2025-37974} - can: mcan: m_can_class_unregister(): fix order of unregistration calls (Marc Kleine-Budde) - firmware: arm_scmi: Fix timeout checks on polling path (Cristian Marussi) - arm64: dts: imx8mm-verdin: Link reg_usdhc2_vqmmc to usdhc2 (Wojciech Dubowik) - Revert 'btrfs: canonicalize the device path before adding it' (Qu Wenruo) - fs/erofs/fileio: call erofs_onlinefolio_split() after bio_add_folio() (Max Kellermann) [Orabug: 38015155] {CVE-2025-37999} - dm: add missing unlock on in dm_keyslot_evict() (Dan Carpenter) - mm/vmscan: wake up flushers conditionally to avoid cgroup OOM (Zeng Jingxiang) [Orabug: 37480932] - dmaengine: idxd: Narrow the restriction on BATCH to ver. 1 only (Vinicius Costa Gomes) [Orabug: 37801355] - uek-rpm: build the fwctl mlx5 driver on UEK (Qing Huang) [Orabug: 37810636] - fwctl: Adapt upstream code for UEK8 (Mikhael Goikhman) [Orabug: 37810636] - mlx5: Create an auxiliary device for fwctl_mlx5 (Saeed Mahameed) [Orabug: 37810636] - fwctl/mlx5: Support for communicating with mlx5 fw (Saeed Mahameed) [Orabug: 37810636] - fwctl: Add documentation (Jason Gunthorpe) [Orabug: 37810636] - fwctl: FWCTL_RPC to execute a Remote Procedure Call to device firmware (Jason Gunthorpe) [Orabug: 37810636] - taint: Add TAINT_FWCTL (Jason Gunthorpe) [Orabug: 37810636] - fwctl: FWCTL_INFO to return basic information about the device (Jason Gunthorpe) [Orabug: 37810636] - fwctl: Basic ioctl dispatch for the character device (Jason Gunthorpe) [Orabug: 37810636] - fwctl: Add basic structure for a class subsystem with a cdev (Jason Gunthorpe) [Orabug: 37810636] - Revert 'fwctl: Add basic structure for a class subsystem with a cdev' (Qing Huang) [Orabug: 37810636] - Revert 'fwctl: Basic ioctl dispatch for the character device' (Qing Huang) [Orabug: 37810636] - Revert 'fwctl: FWCTL_INFO to return basic information about the device' (Qing Huang) [Orabug: 37810636] - Revert 'fwctl: FWCTL_RPC to execute a Remote Procedure Call to device firmware' (Qing Huang) [Orabug: 37810636] - Revert 'fwctl/mlx5: Support for communicating with mlx5 fw' (Qing Huang) [Orabug: 37810636] - Revert 'mlx5: Create an auxiliary device for fwctl_mlx5' (Qing Huang) [Orabug: 37810636] - Revert 'taint: Add TAINT_FWCTL' (Qing Huang) [Orabug: 37810636] - Revert 'fwctl: Adapt code for UEK-NEXT' (Qing Huang) [Orabug: 37810636] - Revert 'fwctl/mlx5: Add INTERNAL_DEV_RES uctx capability' (Qing Huang) [Orabug: 37810636] - Revert 'fwctl: Allow up to 4k devices' (Qing Huang) [Orabug: 37810636] - Revert 'uek-rpm: build the fwctl mlx5 driver on UEK' (Qing Huang) [Orabug: 37810636] - dmaengine: idxd: Change err messages to dbg (Jack Vogel) [Orabug: 37841831] - PCI: Add PCI_VDEVICE_SUB helper macro (Piotr Kwapulinski) [Orabug: 37889575] - ixgbevf: Add support for Intel(R) E610 device (Piotr Kwapulinski) [Orabug: 37889575] - ixgbe: Enable link management in E610 device (Piotr Kwapulinski) [Orabug: 37889575] - ixgbe: Clean up the E610 link management related code (Piotr Kwapulinski) [Orabug: 37889575] - ixgbe: Add ixgbe_x540 multiple header inclusion protection (Piotr Kwapulinski) [Orabug: 37889575] - ixgbe: Add support for EEPROM dump in E610 device (Piotr Kwapulinski) [Orabug: 37889575] - ixgbe: Add support for NVM handling in E610 device (Piotr Kwapulinski) [Orabug: 37889575] - ixgbe: Add link management support for E610 device (Piotr Kwapulinski) [Orabug: 37889575] - ixgbe: Add support for E610 device capabilities detection (Piotr Kwapulinski) [Orabug: 37889575] - ixgbe: Add support for E610 FW Admin Command Interface (Piotr Kwapulinski) [Orabug: 37889575] - uek-rpm: Move the gve kernel module from extra to kernel-uek-core (Samasth Norway Ananda) [Orabug: 37940897] - uek-rpm/config-aarch64: Enable BT_HCIUART_BCM for RPi Bluetooth (Vijay Kumar) [Orabug: 37961540] - platform/mellanox: mlxbf-pmc: Support additional PMC blocks (Shravan Kumar Ramani) [Orabug: 37964051] - mlxbf-bootctl: use sysfs_emit_at() in secure_boot_fuse_state_show() (David Thompson) [Orabug: 37964051,38037120] {CVE-2025-37866} - mlxbf-bootctl: Support sysfs entries for RTC battery status (Xiangrong Li) [Orabug: 37964051] - platform/mellanox: mlxbf-bootctl: use sysfs_emit() instead of sprintf() (Ai Chao) [Orabug: 37964051] - uek-rpm: CONFIG_PTP_1588_CLOCK_OCP enable for OCI (Vijayendra Suman) [Orabug: 37966384] - x86/its: Fix build errors when CONFIG_MODULES=n (Eric Biggers) [Orabug: 37970148] - x86/its: Use dynamic thunks for indirect branches (Peter Zijlstra) [Orabug: 37970148] - x86/ibt: Keep IBT disabled during alternative patching (Pawan Gupta) [Orabug: 37970148] - RDMA/mlx5: Fix CC counters query for MPV (Patrisious Haddad) [Orabug: 37989268] - amd_hsmp: Increase the SMU timeout to 500ms (Vijay Kumar) [Orabug: 38000074]
- Published
- unknown
- Last Modified
- unknown
CVSS details not available.
No product information available.
No references available.
No linked vulnerabilities found.
{
"cves": [
"CVE-2012-3430",
"CVE-2015-6937",
"CVE-2016-5244",
"CVE-2018-12928",
"CVE-2018-5332",
"CVE-2018-5333",
"CVE-2018-7492",
"CVE-2019-11815",
"CVE-2021-3695",
"CVE-2021-3696",
"CVE-2021-3697",
"CVE-2021-45095",
"CVE-2022-21385",
"CVE-2022-28733",
"CVE-2022-28734",
"CVE-2022-28735",
"CVE-2022-28736",
"CVE-2023-22024",
"CVE-2023-3159",
"CVE-2024-28956",
"CVE-2024-36350",
"CVE-2024-36357",
"CVE-2024-39282",
"CVE-2024-41090",
"CVE-2024-41091",
"CVE-2024-41149",
"CVE-2024-41932",
"CVE-2024-41935",
"CVE-2024-43098",
"CVE-2024-45828",
"CVE-2024-46896",
"CVE-2024-47141",
"CVE-2024-47143",
"CVE-2024-47408",
"CVE-2024-47794",
"CVE-2024-47809",
"CVE-2024-48873",
"CVE-2024-48875",
"CVE-2024-48876",
"CVE-2024-48881",
"CVE-2024-49568",
"CVE-2024-49569",
"CVE-2024-49570",
"CVE-2024-49571",
"CVE-2024-49573",
"CVE-2024-50051",
"CVE-2024-51729",
"CVE-2024-52319",
"CVE-2024-52332",
"CVE-2024-52559",
"CVE-2024-53103",
"CVE-2024-53104",
"CVE-2024-53141",
"CVE-2024-53142",
"CVE-2024-53143",
"CVE-2024-53145",
"CVE-2024-53146",
"CVE-2024-53147",
"CVE-2024-53148",
"CVE-2024-53149",
"CVE-2024-53150",
"CVE-2024-53151",
"CVE-2024-53152",
"CVE-2024-53153",
"CVE-2024-53154",
"CVE-2024-53155",
"CVE-2024-53156",
"CVE-2024-53157",
"CVE-2024-53158",
"CVE-2024-53160",
"CVE-2024-53161",
"CVE-2024-53162",
"CVE-2024-53163",
"CVE-2024-53164",
"CVE-2024-53165",
"CVE-2024-53166",
"CVE-2024-53167",
"CVE-2024-53168",
"CVE-2024-53169",
"CVE-2024-53170",
"CVE-2024-53171",
"CVE-2024-53172",
"CVE-2024-53173",
"CVE-2024-53174",
"CVE-2024-53175",
"CVE-2024-53176",
"CVE-2024-53177",
"CVE-2024-53178",
"CVE-2024-53179",
"CVE-2024-53180",
"CVE-2024-53181",
"CVE-2024-53182",
"CVE-2024-53183",
"CVE-2024-53184",
"CVE-2024-53185",
"CVE-2024-53186",
"CVE-2024-53187",
"CVE-2024-53188",
"CVE-2024-53189",
"CVE-2024-53190",
"CVE-2024-53191",
"CVE-2024-53192",
"CVE-2024-53193",
"CVE-2024-53194",
"CVE-2024-53195",
"CVE-2024-53197",
"CVE-2024-53198",
"CVE-2024-53199",
"CVE-2024-53200",
"CVE-2024-53201",
"CVE-2024-53202",
"CVE-2024-53203",
"CVE-2024-53204",
"CVE-2024-53205",
"CVE-2024-53206",
"CVE-2024-53207",
"CVE-2024-53208",
"CVE-2024-53209",
"CVE-2024-53210",
"CVE-2024-53211",
"CVE-2024-53212",
"CVE-2024-53213",
"CVE-2024-53214",
"CVE-2024-53215",
"CVE-2024-53216",
"CVE-2024-53217",
"CVE-2024-53218",
"CVE-2024-53219",
"CVE-2024-53220",
"CVE-2024-53221",
"CVE-2024-53222",
"CVE-2024-53223",
"CVE-2024-53224",
"CVE-2024-53225",
"CVE-2024-53226",
"CVE-2024-53227",
"CVE-2024-53228",
"CVE-2024-53229",
"CVE-2024-53230",
"CVE-2024-53231",
"CVE-2024-53232",
"CVE-2024-53233",
"CVE-2024-53234",
"CVE-2024-53235",
"CVE-2024-53236",
"CVE-2024-53237",
"CVE-2024-53238",
"CVE-2024-53239",
"CVE-2024-53240",
"CVE-2024-53241",
"CVE-2024-53680",
"CVE-2024-53681",
"CVE-2024-53682",
"CVE-2024-53685",
"CVE-2024-53687",
"CVE-2024-53690",
"CVE-2024-54031",
"CVE-2024-54191",
"CVE-2024-54193",
"CVE-2024-54455",
"CVE-2024-54456",
"CVE-2024-54458",
"CVE-2024-54460",
"CVE-2024-54683",
"CVE-2024-55639",
"CVE-2024-55641",
"CVE-2024-55642",
"CVE-2024-55881",
"CVE-2024-55916",
"CVE-2024-56368",
"CVE-2024-56369",
"CVE-2024-56372",
"CVE-2024-56531",
"CVE-2024-56532",
"CVE-2024-56533",
"CVE-2024-56534",
"CVE-2024-56535",
"CVE-2024-56536",
"CVE-2024-56537",
"CVE-2024-56538",
"CVE-2024-56539",
"CVE-2024-56540",
"CVE-2024-56541",
"CVE-2024-56542",
"CVE-2024-56543",
"CVE-2024-56544",
"CVE-2024-56545",
"CVE-2024-56546",
"CVE-2024-56547",
"CVE-2024-56549",
"CVE-2024-56550",
"CVE-2024-56551",
"CVE-2024-56552",
"CVE-2024-56553",
"CVE-2024-56554",
"CVE-2024-56555",
"CVE-2024-56556",
"CVE-2024-56557",
"CVE-2024-56558",
"CVE-2024-56559",
"CVE-2024-56560",
"CVE-2024-56561",
"CVE-2024-56562",
"CVE-2024-56563",
"CVE-2024-56564",
"CVE-2024-56565",
"CVE-2024-56566",
"CVE-2024-56567",
"CVE-2024-56568",
"CVE-2024-56569",
"CVE-2024-56570",
"CVE-2024-56572",
"CVE-2024-56573",
"CVE-2024-56574",
"CVE-2024-56575",
"CVE-2024-56576",
"CVE-2024-56577",
"CVE-2024-56578",
"CVE-2024-56579",
"CVE-2024-56580",
"CVE-2024-56581",
"CVE-2024-56582",
"CVE-2024-56583",
"CVE-2024-56584",
"CVE-2024-56585",
"CVE-2024-56586",
"CVE-2024-56587",
"CVE-2024-56588",
"CVE-2024-56589",
"CVE-2024-56590",
"CVE-2024-56591",
"CVE-2024-56592",
"CVE-2024-56593",
"CVE-2024-56594",
"CVE-2024-56595",
"CVE-2024-56596",
"CVE-2024-56597",
"CVE-2024-56598",
"CVE-2024-56599",
"CVE-2024-56600",
"CVE-2024-56601",
"CVE-2024-56602",
"CVE-2024-56603",
"CVE-2024-56604",
"CVE-2024-56605",
"CVE-2024-56606",
"CVE-2024-56607",
"CVE-2024-56608",
"CVE-2024-56609",
"CVE-2024-56610",
"CVE-2024-56611",
"CVE-2024-56612",
"CVE-2024-56613",
"CVE-2024-56614",
"CVE-2024-56615",
"CVE-2024-56616",
"CVE-2024-56617",
"CVE-2024-56618",
"CVE-2024-56619",
"CVE-2024-56620",
"CVE-2024-56621",
"CVE-2024-56622",
"CVE-2024-56623",
"CVE-2024-56624",
"CVE-2024-56625",
"CVE-2024-56626",
"CVE-2024-56627",
"CVE-2024-56628",
"CVE-2024-56629",
"CVE-2024-56630",
"CVE-2024-56631",
"CVE-2024-56632",
"CVE-2024-56633",
"CVE-2024-56634",
"CVE-2024-56635",
"CVE-2024-56636",
"CVE-2024-56637",
"CVE-2024-56638",
"CVE-2024-56639",
"CVE-2024-56640",
"CVE-2024-56641",
"CVE-2024-56642",
"CVE-2024-56643",
"CVE-2024-56644",
"CVE-2024-56645",
"CVE-2024-56646",
"CVE-2024-56647",
"CVE-2024-56648",
"CVE-2024-56649",
"CVE-2024-56650",
"CVE-2024-56651",
"CVE-2024-56652",
"CVE-2024-56653",
"CVE-2024-56654",
"CVE-2024-56655",
"CVE-2024-56656",
"CVE-2024-56657",
"CVE-2024-56658",
"CVE-2024-56659",
"CVE-2024-56660",
"CVE-2024-56661",
"CVE-2024-56662",
"CVE-2024-56663",
"CVE-2024-56664",
"CVE-2024-56665",
"CVE-2024-56666",
"CVE-2024-56667",
"CVE-2024-56668",
"CVE-2024-56669",
"CVE-2024-56670",
"CVE-2024-56671",
"CVE-2024-56672",
"CVE-2024-56673",
"CVE-2024-56674",
"CVE-2024-56675",
"CVE-2024-56676",
"CVE-2024-56677",
"CVE-2024-56678",
"CVE-2024-56679",
"CVE-2024-56680",
"CVE-2024-56681",
"CVE-2024-56682",
"CVE-2024-56683",
"CVE-2024-56684",
"CVE-2024-56685",
"CVE-2024-56687",
"CVE-2024-56688",
"CVE-2024-56690",
"CVE-2024-56691",
"CVE-2024-56692",
"CVE-2024-56693",
"CVE-2024-56694",
"CVE-2024-56695",
"CVE-2024-56696",
"CVE-2024-56697",
"CVE-2024-56698",
"CVE-2024-56699",
"CVE-2024-56700",
"CVE-2024-56701",
"CVE-2024-56702",
"CVE-2024-56703",
"CVE-2024-56704",
"CVE-2024-56705",
"CVE-2024-56706",
"CVE-2024-56707",
"CVE-2024-56708",
"CVE-2024-56709",
"CVE-2024-56710",
"CVE-2024-56711",
"CVE-2024-56712",
"CVE-2024-56713",
"CVE-2024-56714",
"CVE-2024-56715",
"CVE-2024-56716",
"CVE-2024-56717",
"CVE-2024-56718",
"CVE-2024-56719",
"CVE-2024-56720",
"CVE-2024-56721",
"CVE-2024-56722",
"CVE-2024-56723",
"CVE-2024-56724",
"CVE-2024-56725",
"CVE-2024-56726",
"CVE-2024-56727",
"CVE-2024-56728",
"CVE-2024-56729",
"CVE-2024-56730",
"CVE-2024-56739",
"CVE-2024-56740",
"CVE-2024-56742",
"CVE-2024-56743",
"CVE-2024-56744",
"CVE-2024-56745",
"CVE-2024-56746",
"CVE-2024-56747",
"CVE-2024-56748",
"CVE-2024-56749",
"CVE-2024-56750",
"CVE-2024-56751",
"CVE-2024-56752",
"CVE-2024-56753",
"CVE-2024-56754",
"CVE-2024-56755",
"CVE-2024-56756",
"CVE-2024-56757",
"CVE-2024-56758",
"CVE-2024-56759",
"CVE-2024-56760",
"CVE-2024-56761",
"CVE-2024-56763",
"CVE-2024-56764",
"CVE-2024-56765",
"CVE-2024-56766",
"CVE-2024-56767",
"CVE-2024-56768",
"CVE-2024-56769",
"CVE-2024-56770",
"CVE-2024-56771",
"CVE-2024-56772",
"CVE-2024-56773",
"CVE-2024-56774",
"CVE-2024-56775",
"CVE-2024-56776",
"CVE-2024-56777",
"CVE-2024-56778",
"CVE-2024-56779",
"CVE-2024-56780",
"CVE-2024-56781",
"CVE-2024-56782",
"CVE-2024-56783",
"CVE-2024-56784",
"CVE-2024-56785",
"CVE-2024-56787",
"CVE-2024-56788",
"CVE-2024-57791",
"CVE-2024-57792",
"CVE-2024-57793",
"CVE-2024-57795",
"CVE-2024-57798",
"CVE-2024-57799",
"CVE-2024-57800",
"CVE-2024-57801",
"CVE-2024-57802",
"CVE-2024-57804",
"CVE-2024-57805",
"CVE-2024-57806",
"CVE-2024-57807",
"CVE-2024-57809",
"CVE-2024-57834",
"CVE-2024-57838",
"CVE-2024-57839",
"CVE-2024-57841",
"CVE-2024-57843",
"CVE-2024-57844",
"CVE-2024-57849",
"CVE-2024-57850",
"CVE-2024-57852",
"CVE-2024-57857",
"CVE-2024-57872",
"CVE-2024-57874",
"CVE-2024-57875",
"CVE-2024-57876",
"CVE-2024-57877",
"CVE-2024-57878",
"CVE-2024-57879",
"CVE-2024-57880",
"CVE-2024-57881",
"CVE-2024-57882",
"CVE-2024-57883",
"CVE-2024-57884",
"CVE-2024-57885",
"CVE-2024-57886",
"CVE-2024-57887",
"CVE-2024-57888",
"CVE-2024-57889",
"CVE-2024-57890",
"CVE-2024-57891",
"CVE-2024-57892",
"CVE-2024-57893",
"CVE-2024-57895",
"CVE-2024-57896",
"CVE-2024-57897",
"CVE-2024-57898",
"CVE-2024-57899",
"CVE-2024-57900",
"CVE-2024-57901",
"CVE-2024-57902",
"CVE-2024-57903",
"CVE-2024-57904",
"CVE-2024-57905",
"CVE-2024-57906",
"CVE-2024-57907",
"CVE-2024-57908",
"CVE-2024-57909",
"CVE-2024-57910",
"CVE-2024-57911",
"CVE-2024-57912",
"CVE-2024-57913",
"CVE-2024-57914",
"CVE-2024-57916",
"CVE-2024-57917",
"CVE-2024-57918",
"CVE-2024-57919",
"CVE-2024-57921",
"CVE-2024-57922",
"CVE-2024-57923",
"CVE-2024-57924",
"CVE-2024-57925",
"CVE-2024-57926",
"CVE-2024-57927",
"CVE-2024-57928",
"CVE-2024-57929",
"CVE-2024-57930",
"CVE-2024-57931",
"CVE-2024-57932",
"CVE-2024-57933",
"CVE-2024-57934",
"CVE-2024-57935",
"CVE-2024-57936",
"CVE-2024-57938",
"CVE-2024-57939",
"CVE-2024-57940",
"CVE-2024-57941",
"CVE-2024-57942",
"CVE-2024-57943",
"CVE-2024-57944",
"CVE-2024-57945",
"CVE-2024-57946",
"CVE-2024-57948",
"CVE-2024-57950",
"CVE-2024-57951",
"CVE-2024-57952",
"CVE-2024-57953",
"CVE-2024-57973",
"CVE-2024-57974",
"CVE-2024-57975",
"CVE-2024-57977",
"CVE-2024-57978",
"CVE-2024-57979",
"CVE-2024-57980",
"CVE-2024-57981",
"CVE-2024-57982",
"CVE-2024-57984",
"CVE-2024-57985",
"CVE-2024-57986",
"CVE-2024-57987",
"CVE-2024-57988",
"CVE-2024-57989",
"CVE-2024-57990",
"CVE-2024-57991",
"CVE-2024-57993",
"CVE-2024-57994",
"CVE-2024-57996",
"CVE-2024-57997",
"CVE-2024-57998",
"CVE-2024-57999",
"CVE-2024-58001",
"CVE-2024-58002",
"CVE-2024-58003",
"CVE-2024-58004",
"CVE-2024-58005",
"CVE-2024-58006",
"CVE-2024-58007",
"CVE-2024-58008",
"CVE-2024-58009",
"CVE-2024-58010",
"CVE-2024-58011",
"CVE-2024-58012",
"CVE-2024-58013",
"CVE-2024-58014",
"CVE-2024-58016",
"CVE-2024-58017",
"CVE-2024-58018",
"CVE-2024-58019",
"CVE-2024-58020",
"CVE-2024-58021",
"CVE-2024-58034",
"CVE-2024-58042",
"CVE-2024-58051",
"CVE-2024-58052",
"CVE-2024-58053",
"CVE-2024-58054",
"CVE-2024-58055",
"CVE-2024-58056",
"CVE-2024-58057",
"CVE-2024-58058",
"CVE-2024-58060",
"CVE-2024-58061",
"CVE-2024-58062",
"CVE-2024-58063",
"CVE-2024-58064",
"CVE-2024-58068",
"CVE-2024-58069",
"CVE-2024-58070",
"CVE-2024-58071",
"CVE-2024-58072",
"CVE-2024-58075",
"CVE-2024-58076",
"CVE-2024-58077",
"CVE-2024-58078",
"CVE-2024-58079",
"CVE-2024-58080",
"CVE-2024-58081",
"CVE-2024-58082",
"CVE-2024-58083",
"CVE-2024-58084",
"CVE-2024-58086",
"CVE-2024-58087",
"CVE-2024-58088",
"CVE-2024-58089",
"CVE-2024-58090",
"CVE-2024-58092",
"CVE-2024-58093",
"CVE-2024-58098",
"CVE-2024-58100",
"CVE-2024-58237",
"CVE-2025-21629",
"CVE-2025-21631",
"CVE-2025-21632",
"CVE-2025-21634",
"CVE-2025-21636",
"CVE-2025-21637",
"CVE-2025-21638",
"CVE-2025-21639",
"CVE-2025-21640",
"CVE-2025-21641",
"CVE-2025-21642",
"CVE-2025-21643",
"CVE-2025-21644",
"CVE-2025-21645",
"CVE-2025-21646",
"CVE-2025-21647",
"CVE-2025-21648",
"CVE-2025-21649",
"CVE-2025-21650",
"CVE-2025-21652",
"CVE-2025-21653",
"CVE-2025-21654",
"CVE-2025-21655",
"CVE-2025-21656",
"CVE-2025-21657",
"CVE-2025-21658",
"CVE-2025-21659",
"CVE-2025-21660",
"CVE-2025-21661",
"CVE-2025-21662",
"CVE-2025-21663",
"CVE-2025-21664",
"CVE-2025-21665",
"CVE-2025-21666",
"CVE-2025-21667",
"CVE-2025-21668",
"CVE-2025-21669",
"CVE-2025-21670",
"CVE-2025-21671",
"CVE-2025-21672",
"CVE-2025-21673",
"CVE-2025-21674",
"CVE-2025-21675",
"CVE-2025-21676",
"CVE-2025-21678",
"CVE-2025-21679",
"CVE-2025-21680",
"CVE-2025-21681",
"CVE-2025-21682",
"CVE-2025-21683",
"CVE-2025-21684",
"CVE-2025-21685",
"CVE-2025-21687",
"CVE-2025-21688",
"CVE-2025-21689",
"CVE-2025-21690",
"CVE-2025-21691",
"CVE-2025-21692",
"CVE-2025-21693",
"CVE-2025-21694",
"CVE-2025-21695",
"CVE-2025-21696",
"CVE-2025-21697",
"CVE-2025-21699",
"CVE-2025-21700",
"CVE-2025-21701",
"CVE-2025-21702",
"CVE-2025-21703",
"CVE-2025-21704",
"CVE-2025-21705",
"CVE-2025-21706",
"CVE-2025-21707",
"CVE-2025-21708",
"CVE-2025-21710",
"CVE-2025-21711",
"CVE-2025-21712",
"CVE-2025-21714",
"CVE-2025-21715",
"CVE-2025-21716",
"CVE-2025-21718",
"CVE-2025-21719",
"CVE-2025-21720",
"CVE-2025-21721",
"CVE-2025-21722",
"CVE-2025-21723",
"CVE-2025-21724",
"CVE-2025-21725",
"CVE-2025-21726",
"CVE-2025-21727",
"CVE-2025-21728",
"CVE-2025-21729",
"CVE-2025-21730",
"CVE-2025-21731",
"CVE-2025-21732",
"CVE-2025-21733",
"CVE-2025-21734",
"CVE-2025-21735",
"CVE-2025-21736",
"CVE-2025-21737",
"CVE-2025-21738",
"CVE-2025-21739",
"CVE-2025-21741",
"CVE-2025-21742",
"CVE-2025-21743",
"CVE-2025-21744",
"CVE-2025-21745",
"CVE-2025-21746",
"CVE-2025-21748",
"CVE-2025-21749",
"CVE-2025-21750",
"CVE-2025-21753",
"CVE-2025-21754",
"CVE-2025-21756",
"CVE-2025-21758",
"CVE-2025-21759",
"CVE-2025-21760",
"CVE-2025-21761",
"CVE-2025-21762",
"CVE-2025-21763",
"CVE-2025-21764",
"CVE-2025-21765",
"CVE-2025-21766",
"CVE-2025-21767",
"CVE-2025-21768",
"CVE-2025-21770",
"CVE-2025-21771",
"CVE-2025-21772",
"CVE-2025-21773",
"CVE-2025-21774",
"CVE-2025-21775",
"CVE-2025-21776",
"CVE-2025-21777",
"CVE-2025-21778",
"CVE-2025-21779",
"CVE-2025-21780",
"CVE-2025-21781",
"CVE-2025-21782",
"CVE-2025-21783",
"CVE-2025-21784",
"CVE-2025-21785",
"CVE-2025-21786",
"CVE-2025-21787",
"CVE-2025-21788",
"CVE-2025-21789",
"CVE-2025-21790",
"CVE-2025-21791",
"CVE-2025-21792",
"CVE-2025-21793",
"CVE-2025-21794",
"CVE-2025-21795",
"CVE-2025-21796",
"CVE-2025-21798",
"CVE-2025-21799",
"CVE-2025-21800",
"CVE-2025-21801",
"CVE-2025-21802",
"CVE-2025-21803",
"CVE-2025-21804",
"CVE-2025-21805",
"CVE-2025-21806",
"CVE-2025-21808",
"CVE-2025-21809",
"CVE-2025-21810",
"CVE-2025-21811",
"CVE-2025-21812",
"CVE-2025-21813",
"CVE-2025-21814",
"CVE-2025-21815",
"CVE-2025-21816",
"CVE-2025-21819",
"CVE-2025-21820",
"CVE-2025-21821",
"CVE-2025-21823",
"CVE-2025-21824",
"CVE-2025-21825",
"CVE-2025-21826",
"CVE-2025-21827",
"CVE-2025-21828",
"CVE-2025-21829",
"CVE-2025-21830",
"CVE-2025-21831",
"CVE-2025-21832",
"CVE-2025-21834",
"CVE-2025-21835",
"CVE-2025-21836",
"CVE-2025-21838",
"CVE-2025-21839",
"CVE-2025-21841",
"CVE-2025-21842",
"CVE-2025-21844",
"CVE-2025-21845",
"CVE-2025-21846",
"CVE-2025-21847",
"CVE-2025-21848",
"CVE-2025-21849",
"CVE-2025-21851",
"CVE-2025-21852",
"CVE-2025-21853",
"CVE-2025-21854",
"CVE-2025-21856",
"CVE-2025-21857",
"CVE-2025-21858",
"CVE-2025-21859",
"CVE-2025-21861",
"CVE-2025-21862",
"CVE-2025-21863",
"CVE-2025-21864",
"CVE-2025-21865",
"CVE-2025-21866",
"CVE-2025-21867",
"CVE-2025-21868",
"CVE-2025-21869",
"CVE-2025-21870",
"CVE-2025-21871",
"CVE-2025-21872",
"CVE-2025-21873",
"CVE-2025-21874",
"CVE-2025-21875",
"CVE-2025-21876",
"CVE-2025-21877",
"CVE-2025-21878",
"CVE-2025-21880",
"CVE-2025-21881",
"CVE-2025-21883",
"CVE-2025-21885",
"CVE-2025-21886",
"CVE-2025-21887",
"CVE-2025-21888",
"CVE-2025-21889",
"CVE-2025-21890",
"CVE-2025-21891",
"CVE-2025-21892",
"CVE-2025-21893",
"CVE-2025-21894",
"CVE-2025-21895",
"CVE-2025-21897",
"CVE-2025-21898",
"CVE-2025-21899",
"CVE-2025-21900",
"CVE-2025-21901",
"CVE-2025-21902",
"CVE-2025-21903",
"CVE-2025-21904",
"CVE-2025-21905",
"CVE-2025-21906",
"CVE-2025-21907",
"CVE-2025-21908",
"CVE-2025-21909",
"CVE-2025-21910",
"CVE-2025-21911",
"CVE-2025-21912",
"CVE-2025-21913",
"CVE-2025-21914",
"CVE-2025-21915",
"CVE-2025-21916",
"CVE-2025-21917",
"CVE-2025-21918",
"CVE-2025-21919",
"CVE-2025-21920",
"CVE-2025-21921",
"CVE-2025-21922",
"CVE-2025-21923",
"CVE-2025-21924",
"CVE-2025-21925",
"CVE-2025-21926",
"CVE-2025-21927",
"CVE-2025-21928",
"CVE-2025-21929",
"CVE-2025-21930",
"CVE-2025-21931",
"CVE-2025-21932",
"CVE-2025-21934",
"CVE-2025-21935",
"CVE-2025-21936",
"CVE-2025-21937",
"CVE-2025-21938",
"CVE-2025-21940",
"CVE-2025-21941",
"CVE-2025-21943",
"CVE-2025-21944",
"CVE-2025-21945",
"CVE-2025-21946",
"CVE-2025-21947",
"CVE-2025-21948",
"CVE-2025-21950",
"CVE-2025-21951",
"CVE-2025-21954",
"CVE-2025-21955",
"CVE-2025-21956",
"CVE-2025-21957",
"CVE-2025-21958",
"CVE-2025-21959",
"CVE-2025-21960",
"CVE-2025-21961",
"CVE-2025-21962",
"CVE-2025-21963",
"CVE-2025-21964",
"CVE-2025-21965",
"CVE-2025-21966",
"CVE-2025-21967",
"CVE-2025-21968",
"CVE-2025-21969",
"CVE-2025-21970",
"CVE-2025-21971",
"CVE-2025-21972",
"CVE-2025-21973",
"CVE-2025-21974",
"CVE-2025-21975",
"CVE-2025-21976",
"CVE-2025-21977",
"CVE-2025-21978",
"CVE-2025-21979",
"CVE-2025-21980",
"CVE-2025-21981",
"CVE-2025-21982",
"CVE-2025-21983",
"CVE-2025-21984",
"CVE-2025-21985",
"CVE-2025-21986",
"CVE-2025-21987",
"CVE-2025-21989",
"CVE-2025-21990",
"CVE-2025-21991",
"CVE-2025-21992",
"CVE-2025-21993",
"CVE-2025-21994",
"CVE-2025-21995",
"CVE-2025-21996",
"CVE-2025-21997",
"CVE-2025-21998",
"CVE-2025-21999",
"CVE-2025-22000",
"CVE-2025-22001",
"CVE-2025-22002",
"CVE-2025-22003",
"CVE-2025-22004",
"CVE-2025-22005",
"CVE-2025-22006",
"CVE-2025-22007",
"CVE-2025-22008",
"CVE-2025-22009",
"CVE-2025-22010",
"CVE-2025-22011",
"CVE-2025-22013",
"CVE-2025-22014",
"CVE-2025-22015",
"CVE-2025-22016",
"CVE-2025-22017",
"CVE-2025-22018",
"CVE-2025-22019",
"CVE-2025-22020",
"CVE-2025-22021",
"CVE-2025-22022",
"CVE-2025-22023",
"CVE-2025-22024",
"CVE-2025-22025",
"CVE-2025-22026",
"CVE-2025-22027",
"CVE-2025-22028",
"CVE-2025-22030",
"CVE-2025-22032",
"CVE-2025-22033",
"CVE-2025-22034",
"CVE-2025-22035",
"CVE-2025-22036",
"CVE-2025-22037",
"CVE-2025-22038",
"CVE-2025-22039",
"CVE-2025-22040",
"CVE-2025-22041",
"CVE-2025-22042",
"CVE-2025-22043",
"CVE-2025-22044",
"CVE-2025-22045",
"CVE-2025-22046",
"CVE-2025-22047",
"CVE-2025-22049",
"CVE-2025-22050",
"CVE-2025-22053",
"CVE-2025-22054",
"CVE-2025-22055",
"CVE-2025-22056",
"CVE-2025-22057",
"CVE-2025-22058",
"CVE-2025-22059",
"CVE-2025-22060",
"CVE-2025-22062",
"CVE-2025-22063",
"CVE-2025-22064",
"CVE-2025-22065",
"CVE-2025-22066",
"CVE-2025-22067",
"CVE-2025-22068",
"CVE-2025-22070",
"CVE-2025-22071",
"CVE-2025-22072",
"CVE-2025-22073",
"CVE-2025-22074",
"CVE-2025-22075",
"CVE-2025-22076",
"CVE-2025-22077",
"CVE-2025-22078",
"CVE-2025-22079",
"CVE-2025-22080",
"CVE-2025-22081",
"CVE-2025-22082",
"CVE-2025-22083",
"CVE-2025-22084",
"CVE-2025-22085",
"CVE-2025-22086",
"CVE-2025-22087",
"CVE-2025-22088",
"CVE-2025-22089",
"CVE-2025-22090",
"CVE-2025-22091",
"CVE-2025-22093",
"CVE-2025-22095",
"CVE-2025-22097",
"CVE-2025-22102",
"CVE-2025-22120",
"CVE-2025-22122",
"CVE-2025-22123",
"CVE-2025-22126",
"CVE-2025-23134",
"CVE-2025-23136",
"CVE-2025-23138",
"CVE-2025-23140",
"CVE-2025-23141",
"CVE-2025-23142",
"CVE-2025-23144",
"CVE-2025-23145",
"CVE-2025-23146",
"CVE-2025-23147",
"CVE-2025-23148",
"CVE-2025-23149",
"CVE-2025-23150",
"CVE-2025-23151",
"CVE-2025-23154",
"CVE-2025-23156",
"CVE-2025-23157",
"CVE-2025-23158",
"CVE-2025-23159",
"CVE-2025-23160",
"CVE-2025-23163",
"CVE-2025-37738",
"CVE-2025-37739",
"CVE-2025-37740",
"CVE-2025-37741",
"CVE-2025-37742",
"CVE-2025-37744",
"CVE-2025-37745",
"CVE-2025-37748",
"CVE-2025-37749",
"CVE-2025-37750",
"CVE-2025-37752",
"CVE-2025-37754",
"CVE-2025-37755",
"CVE-2025-37756",
"CVE-2025-37757",
"CVE-2025-37758",
"CVE-2025-37759",
"CVE-2025-37760",
"CVE-2025-37761",
"CVE-2025-37763",
"CVE-2025-37764",
"CVE-2025-37765",
"CVE-2025-37766",
"CVE-2025-37767",
"CVE-2025-37768",
"CVE-2025-37769",
"CVE-2025-37770",
"CVE-2025-37771",
"CVE-2025-37772",
"CVE-2025-37773",
"CVE-2025-37774",
"CVE-2025-37775",
"CVE-2025-37776",
"CVE-2025-37777",
"CVE-2025-37778",
"CVE-2025-37780",
"CVE-2025-37781",
"CVE-2025-37784",
"CVE-2025-37785",
"CVE-2025-37786",
"CVE-2025-37787",
"CVE-2025-37788",
"CVE-2025-37789",
"CVE-2025-37790",
"CVE-2025-37791",
"CVE-2025-37792",
"CVE-2025-37793",
"CVE-2025-37794",
"CVE-2025-37796",
"CVE-2025-37797",
"CVE-2025-37798",
"CVE-2025-37799",
"CVE-2025-37800",
"CVE-2025-37801",
"CVE-2025-37805",
"CVE-2025-37806",
"CVE-2025-37807",
"CVE-2025-37808",
"CVE-2025-37809",
"CVE-2025-37810",
"CVE-2025-37811",
"CVE-2025-37812",
"CVE-2025-37813",
"CVE-2025-37814",
"CVE-2025-37815",
"CVE-2025-37816",
"CVE-2025-37817",
"CVE-2025-37818",
"CVE-2025-37819",
"CVE-2025-37820",
"CVE-2025-37821",
"CVE-2025-37822",
"CVE-2025-37823",
"CVE-2025-37824",
"CVE-2025-37826",
"CVE-2025-37827",
"CVE-2025-37828",
"CVE-2025-37829",
"CVE-2025-37830",
"CVE-2025-37831",
"CVE-2025-37833",
"CVE-2025-37834",
"CVE-2025-37836",
"CVE-2025-37837",
"CVE-2025-37838",
"CVE-2025-37839",
"CVE-2025-37840",
"CVE-2025-37841",
"CVE-2025-37843",
"CVE-2025-37844",
"CVE-2025-37845",
"CVE-2025-37846",
"CVE-2025-37847",
"CVE-2025-37848",
"CVE-2025-37849",
"CVE-2025-37850",
"CVE-2025-37852",
"CVE-2025-37853",
"CVE-2025-37854",
"CVE-2025-37856",
"CVE-2025-37857",
"CVE-2025-37858",
"CVE-2025-37859",
"CVE-2025-37861",
"CVE-2025-37862",
"CVE-2025-37863",
"CVE-2025-37864",
"CVE-2025-37865",
"CVE-2025-37866",
"CVE-2025-37867",
"CVE-2025-37868",
"CVE-2025-37869",
"CVE-2025-37870",
"CVE-2025-37871",
"CVE-2025-37872",
"CVE-2025-37873",
"CVE-2025-37874",
"CVE-2025-37875",
"CVE-2025-37876",
"CVE-2025-37877",
"CVE-2025-37878",
"CVE-2025-37879",
"CVE-2025-37880",
"CVE-2025-37881",
"CVE-2025-37882",
"CVE-2025-37883",
"CVE-2025-37884",
"CVE-2025-37885",
"CVE-2025-37886",
"CVE-2025-37887",
"CVE-2025-37888",
"CVE-2025-37889",
"CVE-2025-37890",
"CVE-2025-37891",
"CVE-2025-37892",
"CVE-2025-37893",
"CVE-2025-37894",
"CVE-2025-37895",
"CVE-2025-37897",
"CVE-2025-37899",
"CVE-2025-37900",
"CVE-2025-37901",
"CVE-2025-37903",
"CVE-2025-37905",
"CVE-2025-37907",
"CVE-2025-37908",
"CVE-2025-37909",
"CVE-2025-37910",
"CVE-2025-37911",
"CVE-2025-37912",
"CVE-2025-37913",
"CVE-2025-37914",
"CVE-2025-37915",
"CVE-2025-37916",
"CVE-2025-37917",
"CVE-2025-37918",
"CVE-2025-37919",
"CVE-2025-37920",
"CVE-2025-37921",
"CVE-2025-37922",
"CVE-2025-37923",
"CVE-2025-37924",
"CVE-2025-37926",
"CVE-2025-37927",
"CVE-2025-37928",
"CVE-2025-37929",
"CVE-2025-37930",
"CVE-2025-37931",
"CVE-2025-37932",
"CVE-2025-37933",
"CVE-2025-37934",
"CVE-2025-37935",
"CVE-2025-37936",
"CVE-2025-37937",
"CVE-2025-37938",
"CVE-2025-37940",
"CVE-2025-37941",
"CVE-2025-37942",
"CVE-2025-37943",
"CVE-2025-37944",
"CVE-2025-37945",
"CVE-2025-37946",
"CVE-2025-37947",
"CVE-2025-37948",
"CVE-2025-37949",
"CVE-2025-37951",
"CVE-2025-37952",
"CVE-2025-37953",
"CVE-2025-37954",
"CVE-2025-37955",
"CVE-2025-37956",
"CVE-2025-37957",
"CVE-2025-37958",
"CVE-2025-37959",
"CVE-2025-37960",
"CVE-2025-37961",
"CVE-2025-37962",
"CVE-2025-37963",
"CVE-2025-37964",
"CVE-2025-37965",
"CVE-2025-37967",
"CVE-2025-37968",
"CVE-2025-37969",
"CVE-2025-37970",
"CVE-2025-37971",
"CVE-2025-37972",
"CVE-2025-37973",
"CVE-2025-37974",
"CVE-2025-37975",
"CVE-2025-37978",
"CVE-2025-37979",
"CVE-2025-37980",
"CVE-2025-37982",
"CVE-2025-37983",
"CVE-2025-37985",
"CVE-2025-37986",
"CVE-2025-37987",
"CVE-2025-37988",
"CVE-2025-37989",
"CVE-2025-37990",
"CVE-2025-37991",
"CVE-2025-37992",
"CVE-2025-37993",
"CVE-2025-37994",
"CVE-2025-37995",
"CVE-2025-37997",
"CVE-2025-37998",
"CVE-2025-37999",
"CVE-2025-38000",
"CVE-2025-38001",
"CVE-2025-38003",
"CVE-2025-38004",
"CVE-2025-38005",
"CVE-2025-38007",
"CVE-2025-38008",
"CVE-2025-38009",
"CVE-2025-38010",
"CVE-2025-38011",
"CVE-2025-38012",
"CVE-2025-38013",
"CVE-2025-38014",
"CVE-2025-38015",
"CVE-2025-38016",
"CVE-2025-38018",
"CVE-2025-38019",
"CVE-2025-38020",
"CVE-2025-38022",
"CVE-2025-38023",
"CVE-2025-38024",
"CVE-2025-38027",
"CVE-2025-38031",
"CVE-2025-38033",
"CVE-2025-38034",
"CVE-2025-38035",
"CVE-2025-38037",
"CVE-2025-38038",
"CVE-2025-38039",
"CVE-2025-38040",
"CVE-2025-38043",
"CVE-2025-38044",
"CVE-2025-38045",
"CVE-2025-38047",
"CVE-2025-38048",
"CVE-2025-38049",
"CVE-2025-38051",
"CVE-2025-38052",
"CVE-2025-38053",
"CVE-2025-38054",
"CVE-2025-38055",
"CVE-2025-38056",
"CVE-2025-38057",
"CVE-2025-38058",
"CVE-2025-38059",
"CVE-2025-38060",
"CVE-2025-38061",
"CVE-2025-38062",
"CVE-2025-38063",
"CVE-2025-38065",
"CVE-2025-38066",
"CVE-2025-38068",
"CVE-2025-38069",
"CVE-2025-38071",
"CVE-2025-38072",
"CVE-2025-38073",
"CVE-2025-38074",
"CVE-2025-38075",
"CVE-2025-38077",
"CVE-2025-38078",
"CVE-2025-38079",
"CVE-2025-38080",
"CVE-2025-38081",
"CVE-2025-38082",
"CVE-2025-38089",
"CVE-2025-38152",
"CVE-2025-38240",
"CVE-2025-38479",
"CVE-2025-38575",
"CVE-2025-38637",
"CVE-2025-39688",
"CVE-2025-39728",
"CVE-2025-39735",
"CVE-2025-39778",
"CVE-2025-39989",
"CVE-2025-40114"
],
"cvss": 0.0,
"database_specific": {
"severity": "IMPORTANT"
},
"description": "[6.12.0-101.33.4.3.el10uek]\n- Revert 'Add normal counters' (Boris Ostrovsky) [Orabug: 38171405]\n\n[6.12.0-101.33.4.2.el10uek]\n- sunrpc: handle SVC_GARBAGE during svc auth processing as auth error (Jeff Layton) [Orabug: 38178286] {CVE-2025-38089}\n- mm: memcontrol: remove memcg from LRU on release instead of offline (Harry Yoo) [Orabug: 38162790]\n- Revert 'SUNRPC: Don't allow waiting for exiting tasks' (Harshvardhan Jha) [Orabug: 38175263]\n- ipv6: replace ipcm6_init calls with ipcm6_init_sk (Willem de Bruijn) [Orabug: 38175246]\n- ipv6: remove leftover ip6 cookie initializer (Willem de Bruijn) [Orabug: 38175246]\n\n[6.12.0-101.33.4.1.el10uek]\n- Add Zen34 clients (Borislav Petkov (AMD)) [Orabug: 38023239] {CVE-2024-36350} {CVE-2024-36357}\n- x86/process: Move the buffer clearing before MONITOR (Kim Phillips) [Orabug: 38023239] {CVE-2024-36350} {CVE-2024-36357}\n- Add normal counters (Borislav Petkov (AMD)) [Orabug: 38023239] {CVE-2024-36350} {CVE-2024-36357}\n- KVM: SVM: Advertize TSA CPUID bits to guests (Borislav Petkov (AMD)) [Orabug: 38023239] {CVE-2024-36350} {CVE-2024-36357}\n- x86/bugs: Add a Transient Scheduler Attacks mitigation (Borislav Petkov (AMD)) [Orabug: 38023239] {CVE-2024-36350} {CVE-2024-36357}\n- x86/bugs: Rename MDS machinery to something more generic (Borislav Petkov (AMD)) [Orabug: 38023239] {CVE-2024-36350} {CVE-2024-36357}\n\n[6.12.0-101.33.4.el10uek]\n- rds: ib: Add cm_id generation scheme in order to detect new ones (Hakon Bugge) [Orabug: 37617972]\n- uek-rpm: Enable the FWCTL PDS and CXL support in UEK8 (Qing Huang) [Orabug: 38006732]\n- cxl/feature: Update out_len in set feature failure case (Li Ming) [Orabug: 38006732]\n- cxl: Fix devm host device for CXL fwctl initialization (Dave Jiang) [Orabug: 38006732]\n- fwctl/cxl: Fix uuid_t usage in uapi (Dan Williams) [Orabug: 38006732]\n- pds_fwctl: add Documentation entries (Shannon Nelson) [Orabug: 38006732]\n- pds_fwctl: add rpc and query support (Brett Creeley) [Orabug: 38006732]\n- pds_fwctl: initial driver framework (Shannon Nelson) [Orabug: 38006732]\n- pds_core: add new fwctl auxiliary_device (Shannon Nelson) [Orabug: 38006732]\n- cxl: Fixup kdoc issues for include/cxl/features.h (Dave Jiang) [Orabug: 38006732]\n- fwctl/cxl: Add documentation to FWCTL CXL (Dave Jiang) [Orabug: 38006732]\n- cxl/test: Add Set Feature support to cxl_test (Dave Jiang) [Orabug: 38006732]\n- cxl/test: Add Get Feature support to cxl_test (Dave Jiang) [Orabug: 38006732]\n- cxl: Add support to handle user feature commands for set feature (Dave Jiang) [Orabug: 38006732]\n- cxl: Add support to handle user feature commands for get feature (Dave Jiang) [Orabug: 38006732]\n- cxl: Add support for fwctl RPC command to enable CXL feature commands (Dave Jiang) [Orabug: 38006732]\n- cxl: Move cxl feature command structs to user header (Dave Jiang) [Orabug: 38006732]\n- cxl: Add FWCTL support to CXL (Dave Jiang) [Orabug: 38006732]\n- cxl: Setup exclusive CXL features that are reserved for the kernel (Dave Jiang) [Orabug: 38006732]\n- cxl/mbox: Add SET_FEATURE mailbox command (Shiju Jose) [Orabug: 38006732]\n- cxl/mbox: Add GET_FEATURE mailbox command (Shiju Jose) [Orabug: 38006732]\n- cxl/test: Add Get Supported Features mailbox command support (Dave Jiang) [Orabug: 38006732]\n- cxl: Add Get Supported Features command for kernel usage (Dave Jiang) [Orabug: 38006732]\n- cxl: Enumerate feature commands (Dave Jiang) [Orabug: 38006732]\n- cxl: Refactor user ioctl command path from mds to mailbox (Dave Jiang) [Orabug: 38006732]\n- vhost-scsi: Fix log flooding with target does not exist errors (Mike Christie) [Orabug: 38053075]\n- vhost-scsi: Change def inline_sg_cnt and max_io_vqs for exadata (Mike Christie) [Orabug: 38053233]\n- sched/numa: add tracepoint that tracks the skipping of numa balancing due to cpuset memory pinning (Libo Chen) [Orabug: 38070168]\n- sched/numa: skip VMA scanning on memory pinned to one NUMA node via cpuset.mems (Libo Chen) [Orabug: 38070168]\n- uek-rpm: Enable CONFIG_SERIAL_RP2 as m (Samasth Norway Ananda) [Orabug: 38091733]\n- serial: update the rp2 driver code (Samasth Norway Ananda) [Orabug: 38091733]\n\n[6.12.0-101.33.3.el10uek]\n- mm: do not write protect COW mappings when preserving across exec (Anthony Yznaga) [Orabug: 38029049]\n- mm: hold the source mmap write lock when copying PTEs (Anthony Yznaga) [Orabug: 38029049]\n- Enable EROFS modules and related config options (Harshit Mogalapalli) [Orabug: 38042713]\n\n[6.12.0-101.33.2.el10uek]\n- net: mana: Add support for Multi Vports on Bare metal (Haiyang Zhang) [Orabug: 38052741]\n- tools: hv: Enable debug logs for hv_kvp_daemon (Shradha Gupta) [Orabug: 38052759]\n- LTS version: v6.12.33 (Jack Vogel)\n- Revert 'drm/amd/display: more liberal vmin/vmax update for freesync' (Aurabindo Pillai)\n- dt-bindings: phy: imx8mq-usb: fix fsl,phy-tx-vboost-level-microvolt property (Xu Yang)\n- dt-bindings: usb: cypress,hx3: Add support for all variants (Lukasz Czechowski)\n- thunderbolt: Do not double dequeue a configuration request (Sergey Senozhatsky)\n- usb: usbtmc: Fix timeout value in get_stb (Dave Penkler)\n- serial: jsm: fix NPE during jsm_uart_port_init (Dustin Lundquist)\n- Bluetooth: hci_qca: move the SoC type check to the right place (Bartosz Golaszewski)\n- usb: typec: ucsi: fix Clang -Wsign-conversion warning (Qasim Ijaz)\n- USB: serial: pl2303: add new chip PL2303GC-Q20 and PL2303GT-2AB (Charles Yeh)\n- usb: storage: Ignore UAS driver for SanDisk 3.2 Gen2 storage device (Hongyu Xie)\n- usb: quirks: Add NO_LPM quirk for SanDisk Extreme 55AE (Jiayi Li)\n- Revert 'cpufreq: tegra186: Share policy per cluster' (Jonathan Hunter)\n- block: fix adding folio to bio (Ming Lei) [Orabug: 37844657] {CVE-2025-22122}\n- PCI/ASPM: Disable L1 before disabling L1 PM Substates (Ajay Agarwal)\n- accel/ivpu: Update power island delays (Karol Wachowski)\n- accel/ivpu: Add initial Panther Lake support (Maciej Falkowski)\n- rtc: Fix offset calculation for .start_secs 0 (Alexandre Mergnat)\n- rtc: Make rtc_time64_to_tm() support dates before 1970 (Alexandre Mergnat)\n- Documentation: ACPI: Use all-string data node references (Sakari Ailus)\n- acpi-cpufreq: Fix nominal_freq units to KHz in get_max_boost_ratio() (Gautham R. Shenoy)\n- pinctrl: armada-37xx: set GPIO output value before setting direction (Gabor Juhos)\n- pinctrl: armada-37xx: use correct OUTPUT_VAL register for GPIOs 31 (Gabor Juhos)\n- f2fs: fix to avoid accessing uninitialized curseg (Chao Yu) [Orabug: 37844644] {CVE-2025-22123}\n- tracing: Fix compilation warning on arm32 (Pan Taixi)\n- LTS version: v6.12.32 (Jack Vogel)\n- ksmbd: use list_first_entry_or_null for opinfo_get_list() (Namjae Jeon)\n- net: ethernet: ti: am65-cpsw: Lower random mac address error print to info (Nishanth Menon)\n- platform/x86: thinkpad_acpi: Ignore battery threshold change event notification (Mark Pearson)\n- ALSA: hda/realtek - restore auto-mute mode for Dell Chrome platform (Kailang Yang)\n- platform/x86: fujitsu-laptop: Support Lifebook S2110 hotkeys (Valtteri Koskivuori)\n- NFS: Avoid flushing data while holding directory locks in nfs_rename() (Trond Myklebust)\n- char: tpm: tpm-buf: Add sanity check fallback in read helpers (Purva Yeshi)\n- drm/xe: Save the gt pointer in lrc and drop the tile (Umesh Nerlige Ramappa)\n- drm/xe/xe2hpg: Add Wa_22021007897 (Aradhya Bhatia)\n- nvme-pci: add NVME_QUIRK_NO_DEEPEST_PS quirk for SOLIDIGM P44 Pro (Ilya Guterman)\n- spi: spi-sun4i: fix early activation (Alessandro Grassi)\n- phy: phy-rockchip-samsung-hdptx: Fix PHY PLL output 50.25MHz error (Algea Cao)\n- phy: starfive: jh7110-usb: Fix USB 2.0 host occasional detection failure (Hal Feng)\n- drm/amd/display: check stream id dml21 wrapper to get plane_id (Aurabindo Pillai)\n- drm/amd/display: fix link_set_dpms_off multi-display MST corner case (George Shen)\n- gpio: virtuser: fix potential out-of-bound write (Markus Burri) [Orabug: 38095181] {CVE-2025-38082}\n- um: let 'make clean' properly clean underlying SUBARCH as well (Masahiro Yamada)\n- platform/x86: thinkpad_acpi: Support also NEC Lavie X1475JAS (John Chau)\n- nfs: don't share pNFS DS connections between net namespaces (Jeff Layton)\n- HID: quirks: Add ADATA XPG alpha wireless mouse support (Milton Barrera)\n- dmaengine: idxd: cdev: Fix uninitialized use of sva in idxd_cdev_open (Purva Yeshi)\n- coredump: hand a pidfd to the usermode coredump helper (Christian Brauner)\n- coredump: fix error handling for replace_fd() (Christian Brauner)\n- perf/arm-cmn: Add CMN S3 ACPI binding (Robin Murphy)\n- perf/arm-cmn: Initialise cmn-cpu earlier (Robin Murphy)\n- perf/arm-cmn: Fix REQ2/SNP2 mixup (Robin Murphy)\n- net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (Pedro Tammela) [Orabug: 38049363] {CVE-2025-38001}\n- arm64: dts: ti: k3-j784s4-j742s2-main-common: Fix length of serdes_ln_ctrl (Siddharth Vadapalli)\n- arm64: dts: ti: k3-j722s-main: Disable 'serdes_wiz0' and 'serdes_wiz1' (Siddharth Vadapalli)\n- arm64: dts: ti: k3-j722s-evm: Enable 'serdes_wiz0' and 'serdes_wiz1' (Siddharth Vadapalli)\n- arm64: dts: ti: k3-j721e-sk: Add requiried voltage supplies for IMX219 (Yemike Abhilash Chandra)\n- arm64: dts: ti: k3-j721e-sk: Remove clock-names property from IMX219 overlay (Yemike Abhilash Chandra)\n- arm64: dts: ti: k3-j721e-sk: Add DT nodes for power regulators (Yemike Abhilash Chandra)\n- arm64: dts: ti: k3-am68-sk: Fix regulator hierarchy (Yemike Abhilash Chandra)\n- arm64: dts: ti: k3-am65-main: Add missing taps to sdhci0 (Judith Mendez)\n- arm64: dts: ti: k3-am62x: Rename I2C switch to I2C mux in OV5640 overlay (Yemike Abhilash Chandra)\n- arm64: dts: ti: k3-am62x: Rename I2C switch to I2C mux in IMX219 overlay (Yemike Abhilash Chandra)\n- arm64: dts: ti: k3-am62x: Remove clock-names property from IMX219 overlay (Yemike Abhilash Chandra)\n- arm64: dts: ti: k3-am62p-j722s-common-main: Set eMMC clock parent to default (Judith Mendez)\n- arm64: dts: ti: k3-am62a-main: Set eMMC clock parent to default (Judith Mendez)\n- arm64: dts: ti: k3-am62-main: Set eMMC clock parent to default (Judith Mendez)\n- arm64: dts: qcom: x1e80100: Fix video thermal zone (Stephan Gerhold)\n- arm64: dts: qcom: x1e80100-yoga-slim7x: mark l12b and l15b always-on (Johan Hovold)\n- arm64: dts: qcom: x1e80100-qcp: mark l12b and l15b always-on (Johan Hovold)\n- arm64: dts: qcom: x1e80100-qcp: Fix vreg_l2j_1p2 voltage (Stephan Gerhold)\n- arm64: dts: qcom: x1e80100-lenovo-yoga-slim7x: Fix vreg_l2j_1p2 voltage (Stephan Gerhold)\n- arm64: dts: qcom: x1e80100-asus-vivobook-s15: Fix vreg_l2j_1p2 voltage (Stephan Gerhold)\n- arm64: dts: qcom: sm8650: Add missing properties for cryptobam (Stephan Gerhold)\n- arm64: dts: qcom: sm8550: Add missing properties for cryptobam (Stephan Gerhold)\n- arm64: dts: qcom: sm8450: Add missing properties for cryptobam (Stephan Gerhold)\n- arm64: dts: qcom: sm8350: Fix typo in pil_camera_mem node (Alok Tiwari)\n- arm64: dts: qcom: sa8775p: Remove cdsp compute-cb@10 (Karthik Sanagavarapu)\n- arm64: dts: qcom: sa8775p: Remove extra entries from the iommus property (Ling Xu)\n- arm64: dts: qcom: ipq9574: Add missing properties for cryptobam (Stephan Gerhold)\n- can: kvaser_pciefd: Force IRQ edge in case of nested IRQ (Axel Forsman)\n- RDMA/bnxt_re: Remove unusable nq variable (Leon Romanovsky) [Orabug: 37822348]\n- RDMA/bnxt_re: Fix budget handling of notification queue (Kashyap Desai) [Orabug: 37822348]\n- bnxt_en: Add FW trace coredump segments to the coredump (Shruti Parab) [Orabug: 37822348]\n- bnxt_en: Add a new ethtool -W dump flag (Michael Chan) [Orabug: 37822348]\n- bnxt_en: Add 2 parameters to bnxt_fill_coredump_seg_hdr() (Shruti Parab) [Orabug: 37822348]\n- bnxt_en: Add functions to copy host context memory (Sreekanth Reddy) [Orabug: 37822348]\n- bnxt_en: Do not free FW log context memory (Hongguang Gao) [Orabug: 37822348]\n- bnxt_en: Manage the FW trace context memory (Shruti Parab) [Orabug: 37822348]\n- bnxt_en: Allocate backing store memory for FW trace logs (Shruti Parab) [Orabug: 37822348]\n- bnxt_en: Add a 'force' parameter to bnxt_free_ctx_mem() (Hongguang Gao) [Orabug: 37822348]\n- bnxt_en: Refactor bnxt_free_ctx_mem() (Hongguang Gao) [Orabug: 37822348]\n- bnxt_en: Add mem_valid bit to struct bnxt_ctx_mem_type (Shruti Parab) [Orabug: 37822348]\n- bnxt_en: refactor bnxt_alloc_rx_rings() to call bnxt_alloc_rx_agg_bmap() (David Wei) [Orabug: 37822348]\n- bnxt_en: ethtool: Support unset l4proto on ip4/ip6 ntuple rules (Daniel Xu) [Orabug: 37822348]\n- bnxt_en: ethtool: Remove ip4/ip6 ntuple support for IPPROTO_RAW (Daniel Xu) [Orabug: 37822348]\n- bnxt_en: use irq_update_affinity_hint() (Mohammad Heib) [Orabug: 37822348]\n- bnxt_en: add unlocked version of bnxt_refclk_read (Vadim Fedorenko) [Orabug: 37822348]\n- bnxt_en: replace PTP spinlock with seqlock (Vadim Fedorenko) [Orabug: 37822348]\n- bnxt_en: cache only 24 bits of hw counter (Vadim Fedorenko) [Orabug: 37822348]\n- bnxt_en: Update firmware interface spec to 1.10.3.85 (Michael Chan) [Orabug: 37822348]\n- bnxt_en: Skip reading PXP registers during ethtool -d if unsupported (Michael Chan) [Orabug: 37822348]\n- bnxt_en: Skip MAC loopback selftest if it is unsupported by FW (Michael Chan) [Orabug: 37822348]\n- bnxt_en: Skip PHY loopback ethtool selftest if unsupported by FW (Michael Chan) [Orabug: 37822348]\n- bnxt_en: Do not allow ethtool -m on an untrusted VF (Michael Chan) [Orabug: 37822348]\n- RDMA/bnxt_re: Fix reporting maximum SRQs on P7 chips (Preethi G) [Orabug: 37822348]\n- RDMA/bnxt_re: Fix allocation of QP table (Kashyap Desai) [Orabug: 37822348]\n- RDMA/bnxt_re: Remove deliver net device event (Yuyu Li) [Orabug: 37822348]\n- RDMA/bnxt_re: Remove unnecessary goto in bnxt_re_netdev_event (Kalesh Ap) [Orabug: 37822348]\n- RDMA/bnxt_re: Remove extra new line in bnxt_re_netdev_event (Kalesh Ap) [Orabug: 37822348]\n- RDMA/bnxt_re: Optimize error handling in bnxt_re_probe (Kalesh Ap) [Orabug: 37822348]\n- RDMA/bnxt_re: Fix an issue in bnxt_re_async_notifier (Kalesh Ap) [Orabug: 37822348]\n- RDMA/bnxt_re: Pass the context for ulp_irq_stop (Kalesh Ap) [Orabug: 37822348]\n- RDMA/bnxt_re: Add support to handle DCB_CONFIG_CHANGE event (Kalesh Ap) [Orabug: 37822348]\n- RDMA/bnxt_re: Query firmware defaults of CC params during probe (Kalesh Ap) [Orabug: 37822348]\n- RDMA/bnxt_re: Add Async event handling support (Kalesh Ap) [Orabug: 37822348]\n- RDMA/bnxt_re: Remove unnecessary header file inclusion (Kalesh Ap) [Orabug: 37822348]\n- RDMA/bnxt_re: Eliminate need for some forward declarations (Kalesh Ap) [Orabug: 37822348]\n- bnxt_en: Add ULP call to notify async events (Michael Chan) [Orabug: 37822348]\n- RDMA/bnxt_re: Fix issue in the unload path (Kalesh Ap) [Orabug: 37822348]\n- RDMA/bnxt_re: Fix setting mandatory attributes for modify_qp (Damodharam Ammepalli) [Orabug: 37822348]\n- RDMA/bnxt_re: Don't fail destroy QP and cleanup debugfs earlier (Kalesh Ap) [Orabug: 37822348]\n- RDMA/bnxt_re: Use the default mode of congestion control (Kalesh Ap) [Orabug: 37822348]\n- RDMA/bnxt_re: Support different traffic class (Chandramohan Akula) [Orabug: 37822348]\n- RDMA/bnxt_re: Refurbish CQ to NQ hash calculation (Kalesh Ap) [Orabug: 37822348]\n- RDMA/bnxt_re: Enhance RoCE SRIOV resource configuration design (Bhargava Chenna Marreddy) [Orabug: 37822348]\n- bnxt_en: Add support for RoCE sriov configuration (Vikas Gupta) [Orabug: 37822348]\n- RDMA/bnxt_re: Add debugfs hook in the driver (Kalesh Ap) [Orabug: 37822348]\n- RDMA/bnxt_re: Support raw data query for each resources (Kashyap Desai) [Orabug: 37822348]\n- RDMA/bnxt_re: Add support for querying HW contexts (Kashyap Desai) [Orabug: 37822348]\n- RDMA/bnxt_re: Support driver specific data collection using rdma tool (Kashyap Desai) [Orabug: 37822348]\n- RDMA/bnxt_re: Fix access flags for MR and QP modify (Hongguang Gao) [Orabug: 37822348]\n- RDMA/bnxt_re: Add support for CQ rx coalescing (Chandramohan Akula) [Orabug: 37822348]\n- RDMA/bnxt_re: Add support for optimized modify QP (Kalesh Ap) [Orabug: 37822348]\n- mm/memcontrol: Fix LRU reparenting logic when !MGLRU (Kamalesh Babulal) [Orabug: 37920452]\n- mm: multi-gen LRU: skip rotation of offlined memcgs (Harry Yoo) [Orabug: 37997501]\n- mm: lru: move VM_WARN_ON_ONCE_FOLIO before MGLRU functions (Harry Yoo) [Orabug: 37997580]\n- mm: thp: replace folio_memcg() with folio_memcg_charged() (Muchun Song) [Orabug: 37997580]\n- mm: zswap: prevent lruvec release in zswap_folio_swapin() (Muchun Song) [Orabug: 37997580]\n- mm: workingset: prevent lruvec release in workingset_refault() (Muchun Song) [Orabug: 37997580]\n- mm: page_io: prevent memory cgroup release in page_io module (Muchun Song) [Orabug: 37997580]\n- mm: workingset: prevent memory cgroup release in lru_gen_eviction() (Muchun Song) [Orabug: 37997580]\n- writeback: prevent memory cgroup release in writeback module (Muchun Song) [Orabug: 37997580]\n- mm: memcontrol: protect lruvec critical section with the RCU read lock (Harry Yoo) [Orabug: 37997580]\n- mm: vmscan: disable IRQ before __mod_lruvec_state() (Harry Yoo) [Orabug: 37997618]\n- mm: multi-gen LRU: fix two warnings in evict_folios() (Harry Yoo) [Orabug: 37997618]\n- mm: multi-gen LRU: update lrugen-nr_pages during lruvec reparenting (Harry Yoo) [Orabug: 37997618]\n- ocfs2: fix the issue with discontiguous allocation in the global_bitmap (Heming Zhao) [Orabug: 38041352]\n- Reapply 'ocfs2: fix sparse warnings' (Gautham Ananthakrishna) [Orabug: 38041352]\n- Reapply 'ocfs2: speed up chain-list searching' (Gautham Ananthakrishna) [Orabug: 38041352]\n- Reapply 'ocfs2: adjust enabling place for la window' (Gautham Ananthakrishna) [Orabug: 38041352]\n- Reapply 'ocfs2: improve write IO performance when fragmentation is high' (Gautham Ananthakrishna) [Orabug: 38041352]\n\n[6.12.0-101.31.1.el10uek]\n- LTS version: v6.12.31 (Jack Vogel)\n- drm/gem: Internally test import_attach for imported objects (Thomas Zimmermann)\n- x86/mm/init: Handle the special case of device private pages in add_pages(), to not increase max_pfn and trigger dma_addressing_limited() bounce buffers bounce buffers (Balbir Singh)\n- i3c: master: svc: Fix implicit fallthrough in svc_i3c_master_ibi_work() (Nathan Chancellor)\n- pinctrl: tegra: Fix off by one in tegra_pinctrl_get_group() (Dan Carpenter)\n- watchdog: aspeed: fix 64-bit division (Arnd Bergmann)\n- drm/amdkfd: Correct F8_MODE for gfx950 (Amber Lin)\n- serial: sh-sci: Save and restore more registers (Geert Uytterhoeven)\n- bpf: abort verification if env-cur_state-loop_entry != NULL (Eduard Zingerman)\n- drm/amd/display: Exit idle optimizations before accessing PHY (Ovidiu Bunea)\n- kbuild: Properly disable -Wunterminated-string-initialization for clang (Nathan Chancellor)\n- Fix mis-uses of 'cc-option' for warning disablement (Linus Torvalds)\n- gcc-15: disable '-Wunterminated-string-initialization' entirely for now (Linus Torvalds)\n- gcc-15: make 'unterminated string initialization' just a warning (Linus Torvalds)\n- err.h: move IOMEM_ERR_PTR() to err.h (Raag Jadav)\n- spi: spi-fsl-dspi: Reset SR flags before sending a new message (Larisa Grigore)\n- spi: spi-fsl-dspi: Halt the module after a new message transfer (Bogdan-Gabriel Roman)\n- spi: spi-fsl-dspi: restrict register range for regmap access (Larisa Grigore)\n- spi: use container_of_cont() for to_spi_device() (Greg Kroah-Hartman)\n- platform/x86: think-lmi: Fix attribute name usage for non-compliant items (Mark Pearson)\n- ksmbd: fix stream write failure (Namjae Jeon)\n- Revert 'arm64: dts: allwinner: h6: Use RSB for AXP805 PMIC connection' (Jernej Skrabec)\n- Bluetooth: btmtksdio: Do close if SDIO card removed without close (Chris Lu)\n- Bluetooth: btmtksdio: Check function enabled before doing close (Chris Lu)\n- nilfs2: fix deadlock warnings caused by lock dependency in init_nilfs() (Ryusuke Konishi)\n- mm: mmap: map MAP_STACK to VM_NOHUGEPAGE only if THP is enabled (Ignacio Moreno Gonzalez)\n- mm/page_alloc.c: avoid infinite retries caused by cpuset race (Tianyang Zhang)\n- memcg: always call cond_resched() after fn() (Breno Leitao)\n- highmem: add folio_test_partial_kmap() (Matthew Wilcox)\n- Input: xpad - add more controllers (Vicki Pfau)\n- Revert 'drm/amd: Keep display off while going into S4' (Mario Limonciello)\n- smb: client: Reset all search buffer pointers when releasing buffer (Zhaolong Wang)\n- arm64: dts: marvell: uDPU: define pinctrl state for alarm LEDs (Gabor Juhos)\n- smb: client: Fix use-after-free in cifs_fill_dirent (Zhaolong Wang) [Orabug: 38094970] {CVE-2025-38051}\n- drm/edid: fixed the bug that hdr metadata was not reset (Feijuan Li)\n- thermal: intel: x86_pkg_temp_thermal: Fix bogus trip temperature (Zhang Rui)\n- platform/x86: dell-wmi-sysman: Avoid buffer overflow in current_password_store() (Vladimir Moskovkin) [Orabug: 38095141] {CVE-2025-38077}\n- pmdomain: core: Fix error checking in genpd_dev_pm_attach_by_id() (Dan Carpenter)\n- pmdomain: renesas: rcar: Remove obsolete nullify checks (Geert Uytterhoeven)\n- vmxnet3: update MTU after device quiesce (Ronak Doshi)\n- net: dsa: microchip: linearize skb for tail-tagging switches (Jakob Unterwurzacher)\n- can: kvaser_pciefd: Fix echo_skb race (Axel Forsman)\n- can: kvaser_pciefd: Continue parsing DMA buf after dropped RX (Axel Forsman)\n- llc: fix data loss when reading from a socket in llc_ui_recvmsg() (Gavrilov Ilia)\n- ALSA: hda/realtek: Add quirk for Lenovo Yoga Pro 7 14ASP10 (Ed Burcher)\n- ALSA: pcm: Fix race of buffer access at PCM OSS layer (Takashi Iwai) [Orabug: 38095145] {CVE-2025-38078}\n- ASoC: SOF: ipc4-pcm: Delay reporting is only supported for playback direction (Peter Ujfalusi)\n- ASoc: SOF: topology: connect DAI to a single DAI link (Kai Vehmanen)\n- ASoC: SOF: Intel: hda-bus: Use PIO mode on ACE2+ platforms (Peter Ujfalusi)\n- ASoC: SOF: ipc4-control: Use SOF_CTRL_CMD_BINARY as numid for bytes_ext (Peter Ujfalusi)\n- can: bcm: add missing rcu read protection for procfs content (Oliver Hartkopp) [Orabug: 38049369] {CVE-2025-38003}\n- can: bcm: add locking for bcm_op runtime updates (Oliver Hartkopp) [Orabug: 38049374] {CVE-2025-38004}\n- can: slcan: allow reception of short error messages (Carlos Sanchez)\n- padata: do not leak refcount in reorder_work (Dominik Grzegorzek) [Orabug: 38094842] {CVE-2025-38031}\n- crypto: algif_hash - fix double free in hash_accept (Ivan Pravdin) [Orabug: 38095153] {CVE-2025-38079}\n- clk: s2mps11: initialise clk_hw_onecell_data::num before accessing ::hws[] in probe() (Andre Draszik)\n- octeontx2-af: Fix APR entry mapping based on APR_LMT_CFG (Geetha Sowjanya)\n- octeontx2-af: Set LMT_ENA bit for APR table entries (Subbaraya Sundeep)\n- net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done (Wang Liang) [Orabug: 38094978] {CVE-2025-38052}\n- octeontx2-pf: Add AF_XDP non-zero copy support (Suman Ghosh)\n- sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (Cong Wang) [Orabug: 38049357] {CVE-2025-38000}\n- idpf: fix idpf_vport_splitq_napi_poll() (Eric Dumazet)\n- io_uring: fix overflow resched cqe reordering (Pavel Begunkov)\n- net: lan743x: Restore SGMII CTRL register on resume (Thangaraj Samynathan)\n- net: dwmac-sun8i: Use parsed internal PHY address instead of 1 (Paul Kocialkowski)\n- pinctrl: qcom: switch to devm_register_sys_off_handler() (Dmitry Baryshkov)\n- loop: don't require -write_iter for writable files in loop_configure (Christoph Hellwig)\n- idpf: fix null-ptr-deref in idpf_features_check (Pavan Kumar Linga) [Orabug: 38094982] {CVE-2025-38053}\n- ice: Fix LACP bonds without SRIOV environment (Dave Ertman)\n- ice: fix vf-num_mac count with port representors (Jacob Keller)\n- bridge: netfilter: Fix forwarding of fragmented packets (Ido Schimmel)\n- ptp: ocp: Limit signal/freq counts in summary output functions (Sagi Maimon) [Orabug: 38094984] {CVE-2025-38054}\n- Bluetooth: btusb: use skb_pull to avoid unsafe access in QCA dump handling (En-Wei Wu)\n- Bluetooth: L2CAP: Fix not checking l2cap_chan security level (Luiz Augusto von Dentz)\n- perf/x86/intel: Fix segfault with PEBS-via-PT with sample_freq (Adrian Hunter) [Orabug: 38094988] {CVE-2025-38055}\n- irqchip/riscv-imsic: Start local sync timer on correct CPU (Andrew Bresticker)\n- ASoC: SOF: Intel: hda: Fix UAF when reloading module (Tavian Barnes) [Orabug: 38094991] {CVE-2025-38056}\n- devres: Introduce devm_kmemdup_array() (Raag Jadav)\n- driver core: Split devres APIs to device/devres.h (Andy Shevchenko)\n- dmaengine: fsl-edma: Fix return code for unhandled interrupts (Stefan Wahren)\n- dmaengine: idxd: Fix -poll() return value (Dave Jiang)\n- xfrm: Sanitize marks before insert (Paul Chaignon)\n- clk: sunxi-ng: d1: Add missing divider for MMC mod clocks (Andre Przywara)\n- remoteproc: qcom_wcnss: Fix on platforms without fallback regulators (Matti Lehtimaki)\n- kernel/fork: only call untrack_pfn_clear() on VMAs duplicated for fork() (David Hildenbrand)\n- x86/sev: Fix operator precedence in GHCB_MSR_VMPL_REQ_LEVEL macro (Seongman Lee)\n- dmaengine: idxd: Fix allowing write() from different address spaces (Vinicius Costa Gomes)\n- xfrm: Fix UDP GRO handling for some corner cases (Tobias Brunner)\n- espintcp: remove encap socket caching to avoid reference leak (Sabrina Dubroca)\n- espintcp: fix skb leaks (Sabrina Dubroca) [Orabug: 38094993] {CVE-2025-38057}\n- soundwire: bus: Fix race on the creation of the IRQ domain (Charles Keepax)\n- __legitimize_mnt(): check for MNT_SYNC_UMOUNT should be under mount_lock (Al Viro) [Orabug: 38095000] {CVE-2025-38058}\n- drm/amd/display: Call FP Protect Before Mode Programming/Mode Support (Austin Zheng)\n- xenbus: Allow PVH dom0 a non-local xenstore (Jason Andryuk)\n- x86/Kconfig: make CFI_AUTO_DEFAULT depend on !RUST or Rust = 1.88 (Pawel Anikiel) [Orabug: 38094847] {CVE-2025-38033}\n- wifi: iwlwifi: add support for Killer on MTL (Johannes Berg)\n- block: only update request sector if needed (Johannes Thumshirn)\n- tools: ynl-gen: validate 0 len strings from kernel (David Wei)\n- btrfs: avoid NULL pointer dereference if no valid csum tree (Qu Wenruo) [Orabug: 38095010] {CVE-2025-38059}\n- btrfs: handle empty eb-folios in num_extent_folios() (Boris Burkov)\n- btrfs: correct the order of prelim_ref arguments in btrfs__prelim_ref (Goldwyn Rodrigues) [Orabug: 38094856] {CVE-2025-38034}\n- btrfs: compression: adjust cb-compressed_folios allocation type (Kees Cook)\n- ASoC: intel/sdw_utils: Add volume limit to cs42l43 speakers (Stefan Binding)\n- cifs: Fix changing times and read-only attr over SMB1 smb_set_file_info() function (Pali Rohar)\n- cifs: Fix and improve cifs_query_path_info() and cifs_query_file_info() (Pali Rohar)\n- io_uring/fdinfo: annotate racy sq/cq head/tail reads (Jens Axboe)\n- nvmet-tcp: don't restore null sk_state_change (Alistair Francis) [Orabug: 38094863] {CVE-2025-38035}\n- ALSA: usb-audio: Fix duplicated name in MIDI substream names (Takashi Iwai)\n- nvme-pci: add quirks for WDC Blue SN550 15b7:5009 (Guan Wentao)\n- nvme-pci: add quirks for device 126f:1001 (Guan Wentao)\n- ALSA: hda/realtek: Add quirk for HP Spectre x360 15-df1xxx (Takashi Iwai)\n- ASoC: Intel: bytcr_rt5640: Add DMI quirk for Acer Aspire SW3-013 (Takashi Iwai)\n- ASoC: cs42l43: Disable headphone clamps during type detection (Charles Keepax)\n- platform/x86: ideapad-laptop: add support for some new buttons (Gasper Nemgar)\n- platform/x86: asus-wmi: Disable OOBE state after resume from hibernation (Pavel Nikulin)\n- platform/x86/intel: hid: Add Pantherlake support (Saranya Gopal)\n- smb: server: smb2pdu: check return value of xa_store() (Salah Triki)\n- pinctrl: meson: define the pull up/down resistor value as 60 kOhm (Martin Blumenstingl)\n- book3s64/radix: Fix compile errors when CONFIG_ARCH_WANT_OPTIMIZE_DAX_VMEMMAP=n (Ritesh Harjani)\n- ASoC: imx-card: Adjust over allocation of memory in imx_card_parse_of() (Chenyuan Yang)\n- drm: Add valid clones check (Jessica Zhang)\n- drm/panel-edp: Add Starry 116KHD024006 (Douglas Anderson)\n- drm/buddy: fix issue that force_merge cannot free all roots (Lin Cao)\n- drm/atomic: clarify the rules around drm_atomic_state-allow_modeset (Simona Vetter)\n- drm/xe: Reject BO eviction if BO is bound to current VM (Oak Zeng)\n- drm/xe/sa: Always call drm_suballoc_manager_fini() (Michal Wajdeczko)\n- wifi: rtw89: coex: Separated Wi-Fi connecting event from Wi-Fi scan event (Ching-Te Ku)\n- drm/xe: Do not attempt to bootstrap VF in execlists mode (Maarten Lankhorst)\n- drm/xe: Move suballocator init to after display init (Maarten Lankhorst)\n- wifi: ath11k: Use dma_alloc_noncoherent for rx_tid buffer allocation (P Praneesh)\n- drm/nouveau: fix the broken marco GSP_MSG_MAX_SIZE (Zhi Wang)\n- drm: bridge: adv7511: fill stream capabilities (Olivier Moysan)\n- wifi: ath12k: Fix end offset bit definition in monitor ring descriptor (P Praneesh)\n- wifi: ath12k: Fetch regdb.bin file from board-2.bin (Aaradhana Sahu)\n- wifi: ath9k: return by of_get_mac_address (Rosen Penev)\n- drm/xe/pf: Reset GuC VF config when unprovisioning critical resource (Michal Wajdeczko)\n- accel/qaic: Mask out SR-IOV PCI resources (Youssef Samir)\n- wifi: ath12k: fix ath12k_hal_tx_cmd_ext_desc_setup() info1 override (Nicolas Escande)\n- regulator: ad5398: Add device tree support (Isaac Scott)\n- spi: zynqmp-gqspi: Always acknowledge interrupts (Sean Anderson)\n- wifi: rtw89: add wiphy_lock() to work that isn't held wiphy_lock() yet (Ping-Ke Shih)\n- wifi: rtw88: Don't use static local variable in rtw8822b_set_tx_power_index_by_rate (Bitterblue Smith)\n- wifi: rtl8xxxu: retry firmware download on error (Soeren Moch)\n- clk: renesas: rzg2l-cpg: Refactor Runtime PM clock validation (Lad Prabhakar)\n- perf/amd/ibs: Fix -config to sample period calculation for OP PMU (Ravi Bangoria)\n- perf/amd/ibs: Fix perf_ibs_op.cnt_mask for CurCnt (Ravi Bangoria)\n- firmware: arm_scmi: Relax duplicate name constraint across protocol ids (Sudeep Holla)\n- bpftool: Fix readlink usage in get_fd_type (Viktor Malik)\n- bpf: Use kallsyms to find the function name of a struct_ops's stub function (Martin Kafai Lau)\n- drm/ast: Find VBIOS mode from regular display size (Thomas Zimmermann)\n- dm vdo: use a short static string for thread name prefix (Matthew Sakai)\n- dm vdo indexer: prevent unterminated string warning (Chung Chung)\n- irqchip/riscv-aplic: Add support for hart indexes (Vladimir Kondratiev)\n- ASoC: rt722-sdca: Add some missing readable registers (Charles Keepax)\n- ASoC: codecs: pcm3168a: Allow for 24-bit in provider mode (Cezary Rojewski)\n- arm64: zynqmp: add clock-output-names property in clock nodes (Naman Trivedi Manojbhai)\n- HID: usbkbd: Fix the bit shift number for LED_KANA (Junan)\n- wifi: ath12k: Avoid napi_sync() before napi_enable() (Avula Sri Charan)\n- scsi: st: Restore some drive settings after reset (Kai Makisara)\n- net/mana: fix warning in the writer of client oob (Konstantin Taranov)\n- drm/xe/relay: Don't use GFP_KERNEL for new transactions (Michal Wajdeczko)\n- ice: count combined queues using Rx/Tx count (Michal Swiatkowski)\n- perf: Avoid the read if the count is already updated (Peter Zijlstra)\n- rcu: fix header guard for rcu_all_qs() (Ankur Arora)\n- rcu: handle unstable rdp in rcu_read_unlock_strict() (Ankur Arora)\n- rcu: handle quiescent states for PREEMPT_RCU=n, PREEMPT_COUNT=y (Ankur Arora)\n- ice: treat dyn_allowed only as suggestion (Michal Swiatkowski)\n- ice: init flow director before RDMA (Michal Swiatkowski)\n- bridge: mdb: Allow replace of a host-joined group (Petr Machata)\n- net: flush_backlog() small changes (Eric Dumazet)\n- r8169: don't scan PHY addresses 0 (Heiner Kallweit)\n- ipv4: ip_gre: Fix set but not used warning in ipgre_err() if IPv4-only (Geert Uytterhoeven)\n- vxlan: Annotate FDB data races (Ido Schimmel) [Orabug: 38094879] {CVE-2025-38037}\n- cpufreq: amd-pstate: Remove unnecessary driver_lock in set_boost (Dhananjay Ugwekar) [Orabug: 38094888] {CVE-2025-38038}\n- tools: ynl-gen: don't output external constants (Jakub Kicinski)\n- eth: fbnic: set IFF_UNICAST_FLT to avoid enabling promiscuous mode when adding unicast addrs (Alexander Duyck)\n- drm/rockchip: vop2: Improve display modes handling on RK3588 HDMI0 (Cristian Ciocaltea)\n- media: qcom: camss: Add default case in vfe_src_pad_code (Depeng Shao)\n- media: qcom: camss: csid: Only add TPG v4l2 ctrl if TPG hardware is available (Depeng Shao)\n- f2fs: introduce f2fs_base_attr for global sysfs entries (Jaegeuk Kim)\n- hwmon: (xgene-hwmon) use appropriate type for the latency value (Andrey Vatoropin)\n- tools/power turbostat: Clustered Uncore MHz counters should honor show/hide options (Len Brown)\n- net: page_pool: avoid false positive warning if NAPI was never added (Jakub Kicinski)\n- clk: qcom: camcc-sm8250: Use clk_rcg2_shared_ops for some RCGs (Jordan Crouse)\n- wifi: rtw89: call power_on ahead before selecting firmware (Ping-Ke Shih)\n- wifi: rtw89: fw: validate multi-firmware header before accessing (Ping-Ke Shih)\n- wifi: rtw89: fw: validate multi-firmware header before getting its size (Ping-Ke Shih)\n- wifi: rtw89: coex: Assign value over than 0 to avoid firmware timer hang (Ching-Te Ku)\n- wifi: rtw88: Fix __rtw_download_firmware() for RTL8814AU (Bitterblue Smith)\n- wifi: rtw88: Fix download_firmware_validate() for RTL8814AU (Bitterblue Smith)\n- ext4: remove writable userspace mappings before truncating page cache (Zhang Yi)\n- ext4: don't write back data before punch hole in nojournal mode (Zhang Yi)\n- leds: trigger: netdev: Configure LED blink interval for HW offload (Marek Vasut)\n- pstore: Change kmsg_bytes storage size to u32 (Kees Cook)\n- iio: adc: ad7944: don't use storagebits for sizing (David Lechner)\n- r8152: add vendor/device ID pair for Dell Alienware AW1022z (Aleksander Jan Bajkowski)\n- ip: fib_rules: Fetch net from fib_rule in fib[46]_rule_configure(). (Kuniyuki Iwashima)\n- arch/powerpc/perf: Check the instruction type before creating sample with perf_mem_data_src (Athira Rajeev)\n- powerpc/pseries/iommu: create DDW for devices with DMA mask less than 64-bits (Gaurav Batra)\n- powerpc/pseries/iommu: memory notifier incorrectly adds TCEs for pmemory (Gaurav Batra)\n- net: fec: Refactor MAC reset to function (Csokas Bence)\n- wifi: mac80211: set ieee80211_prep_tx_info::link_id upon Auth Rx (Emmanuel Grumbach)\n- wifi: mac80211: remove misplaced drv_mgd_complete_tx() call (Johannes Berg)\n- wifi: mac80211: don't unconditionally call drv_mgd_complete_tx() (Johannes Berg)\n- wifi: iwlwifi: don't warn during reprobe (Miri Korenblit)\n- wifi: iwlwifi: use correct IMR dump variable (Johannes Berg)\n- mptcp: pm: userspace: flags: clearer msg if no remote addr (Matthieu Baerts)\n- wifi: ath12k: fix the ampdu id fetch in the HAL_RX_MPDU_START TLV (P Praneesh)\n- xfrm: prevent high SEQ input in non-ESN mode (Leon Romanovsky)\n- drm/v3d: Add clock handling (Stefan Wahren)\n- net/mlx5e: reduce the max log mpwrq sz for ECPF and reps (William Tu)\n- net/mlx5e: reduce rep rxq depth to 256 for ECPF (William Tu)\n- net/mlx5e: set the tx_queue_len for pfifo_fast (William Tu)\n- net/mlx5: Extend Ethtool loopback selftest to support non-linear SKB (Alexei Lazar)\n- net/mlx5: XDP, Enable TX side XDP multi-buffer support (Alexei Lazar)\n- scsi: target: spc: Fix loop traversal in spc_rsoc_get_descr() (Chaohai Chen)\n- drm/amd/display/dm: drop hw_support check in amdgpu_dm_i2c_xfer() (Alex Deucher)\n- drm/amdgpu: enlarge the VBIOS binary size limit (Morris Zhang)\n- drm/amdgpu: Use active umc info from discovery (Lijo Lazar)\n- drm/amd/display: Populate register address for dentist for dcn401 (Dillon Varone)\n- drm/amd/display: Use Nominal vBlank If Provided Instead Of Capping It (Austin Zheng)\n- drm/amd/display: Increase block_sequence array size (Joshua Aberback) [Orabug: 38095164] {CVE-2025-38080}\n- drm/amd/display: Initial psr_version with correct setting (Tom Chung)\n- drm/amd/display: Update CR AUX RD interval interpretation (George Shen)\n- Revert 'drm/amd/display: Exit idle optimizations before attempt to access PHY' (Brandon Syu)\n- drm/amd/display: Support multiple options during psr entry. (Martin Tsai)\n- drm/amd/pm: Skip P2S load for SMU v13.0.12 (Asad Kamal)\n- drm/amdgpu: reset psp-cmd to NULL after releasing the buffer (Jiang Liu)\n- drm/amd/display: Don't try AUX transactions on disconnected link (Ilya Bakoulin)\n- drm/amd/display: pass calculated dram_speed_mts to dml2 (Charlene Liu)\n- drm/amdgpu: Set snoop bit for SDMA for MI series (Harish Kasiviswanathan)\n- drm/amdkfd: fix missing L2 cache info in topology (Eric Huang)\n- drm/amdgpu/mes11: fix set_hw_resources_1 calculation (Alex Deucher)\n- net: stmmac: dwmac-loongson: Set correct {tx,rx}_fifo_size (Huacai Chen)\n- soundwire: cadence_master: set frame shape and divider based on actual clk freq (Bard Liao)\n- soundwire: amd: change the soundwire wake enable/disable sequence (Vijendar Mukunda)\n- phy: exynos5-usbdrd: fix EDS distribution tuning (gs101) (Andre Draszik)\n- phy: core: don't require set_mode() callback for phy_get_mode() to work (Dmitry Baryshkov)\n- phy: phy-rockchip-samsung-hdptx: Swap the definitions of LCPLL_REF and ROPLL_REF (Damon Ding)\n- pinctrl: renesas: rzg2l: Add suspend/resume support for pull up/down (Claudiu Beznea)\n- serial: sh-sci: Update the suspend/resume support (Claudiu Beznea)\n- sched: Reduce the default slice to avoid tasks getting an extra tick (Zihan Zhou)\n- x86/traps: Cleanup and robustify decode_bug() (Peter Zijlstra)\n- x86/ibt: Handle FineIBT in handle_cfi_failure() (Peter Zijlstra)\n- drm/xe/debugfs: Add missing xe_pm_runtime_put in wedge_mode_set (Shuicheng Lin)\n- drm/xe/debugfs: fixed the return value of wedged_mode_set (Xin Wang)\n- clk: qcom: clk-alpha-pll: Do not use random stack value for recalc rate (Krzysztof Kozlowski)\n- clk: qcom: ipq5018: allow it to be bulid on arm32 (Karl Chan)\n- drm/xe: Fix xe_tile_init_noalloc() error propagation (Lucas De Marchi)\n- drm/xe: Stop ignoring errors from xe_ttm_stolen_mgr_init() (Lucas De Marchi)\n- net/mlx4_core: Avoid impossible mlx4_db_alloc() order value (Kees Cook)\n- media: v4l: Memset argument to 0 before calling get_mbus_config pad op (Sakari Ailus)\n- media: i2c: imx219: Correct the minimum vblanking value (David Plowman)\n- kunit: tool: Use qboot on QEMU x86_64 (Brendan Jackman)\n- smack: Revert 'smackfs: Added check catlen' (Konstantin Andreev)\n- smack: recognize ipv4 CIPSO w/o categories (Konstantin Andreev)\n- pinctrl: devicetree: do not goto err when probing hogs in pinctrl_dt_to_map (Valentin Caron)\n- ASoC: soc-dai: check return value at snd_soc_dai_set_tdm_slot() (Kuninori Morimoto)\n- ASoC: tas2764: Power up/down amp on mute ops (Hector Martin)\n- ASoC: tas2764: Mark SW_RESET as volatile (Hector Martin)\n- ASoC: tas2764: Add reg defaults for TAS2764_INT_CLK_CFG (Hector Martin)\n- ASoC: ops: Enforce platform maximum on initial value (Martin Poviser)\n- firmware: xilinx: Dont send linux address to get fpga config get status (Siva Durga Prasad Paladugu)\n- firmware: arm_ffa: Handle the presence of host partition in the partition info (Sudeep Holla)\n- firmware: arm_ffa: Reject higher major version as incompatible (Sudeep Holla)\n- net/mlx5: Apply rate-limiting to high temperature warning (Shahar Shitrit)\n- net/mlx5: Modify LSB bitmask in temperature event to include only the first bit (Shahar Shitrit)\n- media: test-drivers: vivid: don't call schedule in loop (Hans Verkuil)\n- irqchip/riscv-imsic: Set irq_set_affinity() for IMSIC base (Andrew Jones)\n- hrtimers: Replace hrtimer_clock_to_base_table with switch-case (Andy Shevchenko)\n- vxlan: Join / leave MC group after remote changes (Petr Machata)\n- ACPI: HED: Always initialize before evged (Xiaofei Tan)\n- PCI: Fix old_size lower bound in calculate_iosize() too (Ilpo Jarvinen)\n- eth: mlx4: don't try to complete XDP frames in netpoll (Jakub Kicinski)\n- bpf: copy_verifier_state() should copy 'loop_entry' field (Eduard Zingerman) [Orabug: 38095018] {CVE-2025-38060}\n- bpf: don't do clean_live_states when state-loop_entry-branches 0 (Eduard Zingerman)\n- can: c_can: Use of_property_present() to test existence of DT property (Krzysztof Kozlowski)\n- pmdomain: imx: gpcv2: use proper helper for property detection (Ahmad Fatoum)\n- RDMA/core: Fix best page size finding when it can cross SG entries (Michael Margolin)\n- serial: mctrl_gpio: split disable_ms into sync and no_sync APIs (Alexis Lothore) [Orabug: 38094901] {CVE-2025-38040}\n- drm/amd/display: Don't treat wb connector as physical in create_validate_stream_for_sink (Harry Wentland)\n- Revert 'drm/amd/display: Request HW cursor on DCN3.2 with SubVP' (Leo Zeng)\n- drm/amd/display: Read LTTPR ALPM caps during link cap retrieval (George Shen)\n- drm/amd/display: Fix BT2020 YCbCr limited/full range input (Ilya Bakoulin)\n- drm/amd/display: Guard against setting dispclk low when active (Nicholas Kazlauskas)\n- drm/amd/display: Add support for disconnected eDP streams (Harry Vanzylldejong)\n- drm/amd/pm: Fetch current power limit from PMFW (Lijo Lazar)\n- irqchip/riscv-imsic: Separate next and previous pointers in IMSIC vector (Anup Patel)\n- eeprom: ee1004: Check chip before probing (Eddie James)\n- mfd: axp20x: AXP717: Add AXP717_TS_PIN_CFG to writeable regs (Chris Morgan)\n- i3c: master: svc: Flush FIFO before sending Dynamic Address Assignment(DAA) (Frank Li)\n- EDAC/ie31200: work around false positive build warning (Arnd Bergmann)\n- power: supply: axp20x_battery: Update temp sensor for AXP717 from device tree (Chris Morgan)\n- net: pktgen: fix access outside of user given buffer in pktgen_thread_write() (Peter Seiderer) [Orabug: 38095024] {CVE-2025-38061}\n- wifi: rtw89: 8922a: fix incorrect STA-ID in EHT MU PPDU (Kuan-Chung Chen)\n- wifi: rtw89: fw: add blacklist to avoid obsolete secure firmware (Ping-Ke Shih)\n- wifi: rtw89: fw: get sb_sel_ver via get_unaligned_le32() (Ping-Ke Shih)\n- wifi: rtw89: fw: propagate error code from rtw89_h2c_tx() (Ping-Ke Shih)\n- wifi: rtw88: Fix rtw_desc_to_mcsrate() to handle MCS16-31 (Bitterblue Smith)\n- wifi: rtw88: Fix rtw_init_ht_cap() for RTL8814AU (Bitterblue Smith)\n- wifi: rtw88: Fix rtw_init_vht_cap() for RTL8814AU (Bitterblue Smith)\n- PCI: epf-mhi: Update device ID for SA8775P (Mrinmay Sarkar)\n- clocksource: mips-gic-timer: Enable counter when CPUs start (Paul Burton)\n- MIPS: pm-cps: Use per-CPU variables as per-CPU, not per-core (Paul Burton)\n- genirq/msi: Store the IOMMU IOVA directly in msi_desc instead of iommu_cookie (Jason Gunthorpe) [Orabug: 38095031] {CVE-2025-38062}\n- x86/locking: Use ALT_OUTPUT_SP() for percpu_{,try_}cmpxchg{64,128}_op() (Uros Bizjak)\n- drm/amdgpu: remove all KFD fences from the BO on release (Christian Konig)\n- MIPS: Use arch specific syscall name match function (Bibo Mao)\n- drm/xe/oa: Ensure that polled read returns latest data (Umesh Nerlige Ramappa)\n- net: ipv6: Init tunnel link-netns before registering dev (Xiao Liang)\n- crypto: skcipher - Zap type in crypto_alloc_sync_skcipher (Herbert Xu)\n- crypto: ahash - Set default reqsize from ahash_alg (Herbert Xu)\n- x86/kaslr: Reduce KASLR entropy on most x86 systems (Balbir Singh)\n- net/mlx5: Change POOL_NEXT_SIZE define value and make it global (Patrisious Haddad)\n- scsi: scsi_debug: First fixes for tapes (Kai Makisara)\n- dm: fix unconditional IO throttle caused by REQ_PREFLUSH (Jinliang Zheng) [Orabug: 38095038] {CVE-2025-38063}\n- libbpf: Fix out-of-bound read (Nandakumar Edamana)\n- loop: check in LO_FLAGS_DIRECT_IO in loop_default_blocksize (Christoph Hellwig)\n- net/mlx5e: Add correct match to check IPSec syndromes for switchdev mode (Jianbo Liu)\n- media: tc358746: improve calculation of the D-PHY timing registers (Matthias Fend)\n- media: adv7180: Disable test-pattern control on adv7180 (Niklas Soderlund)\n- cpuidle: menu: Avoid discarding useful information (Rafael J. Wysocki)\n- vdpa/mlx5: Fix mlx5_vdpa_get_config() endianness on big-endian machines (Konstantin Shkolnyy)\n- x86/nmi: Add an emergency handler in nmi_desc use it in nmi_shootdown_cpus() (Waiman Long)\n- ASoC: mediatek: mt8188: Add reference for dmic clocks (Nicolas F R A Prado)\n- ASoC: mediatek: mt8188: Treat DMIC_GAINx_CUR as non-volatile (Nicolas F R A Prado)\n- drm/amd/display: Fix mismatch type comparison (Navid Assadian)\n- drm/amd/display: fix dcn4x init failed (Charlene Liu)\n- drm/amd/display: handle max_downscale_src_width fail check (Yihan Zhu)\n- x86/build: Fix broken copy command in genimage.sh when making isoimage (Nir Lichtman)\n- Octeontx2-af: RPM: Register driver with PCI subsys IDs (Hariprasad Kelam)\n- bpf: Search and add kfuncs in struct_ops prologue and epilogue (Amery Hung)\n- soc: ti: k3-socinfo: Do not use syscon helper to build regmap (Andrew Davis)\n- wifi: ath12k: Improve BSS discovery with hidden SSID in 6 GHz band (Ramasamy Kaliappan)\n- bonding: report duplicate MAC address in all situations (Hangbin Liu)\n- net: xgene-v2: remove incorrect ACPI_PTR annotation (Arnd Bergmann)\n- net: ethernet: mtk_ppe_offload: Allow QinQ, double ETH_P_8021Q only (Eric Woudstra)\n- leds: pwm-multicolor: Add check for fwnode_property_read_u32 (Yuanjun Gong)\n- drm/xe: xe_gen_wa_oob: replace program_invocation_short_name (Daniel Gomez)\n- drm/amdkfd: KFD release_work possible circular locking (Philip Yang)\n- pinctrl: sophgo: avoid to modify untouched bit when setting cv1800 pinconf (Inochi Amaoto)\n- selftests/net: have gro.sh -t return a correct exit code (Kevin Krakauer)\n- net/mlx5: Avoid report two health errors on same syndrome (Moshe Shemesh)\n- drm/xe/pf: Create a link between PF and VF devices (K V P Satyanarayana)\n- drm/xe/vf: Retry sending MMIO request to GUC on timeout error (K V P Satyanarayana)\n- firmware: arm_ffa: Set dma_mask for ffa devices (Viresh Kumar) [Orabug: 38094925] {CVE-2025-38043}\n- PCI: brcmstb: Add a softdep to MIP MSI-X driver (Stanimir Varbanov)\n- PCI: brcmstb: Expand inbound window size up to 64GB (Stanimir Varbanov)\n- wifi: ath12k: Report proper tx completion status to mac80211 (Vinith Kumar R)\n- soc: apple: rtkit: Implement OSLog buffers properly (Hector Martin)\n- soc: apple: rtkit: Use high prio work queue (Janne Grunau)\n- perf: arm_pmuv3: Call kvm_vcpu_pmu_resync_el0() before enabling counters (Rob Herring)\n- fpga: altera-cvp: Increase credit timeout (Kuhanh Murugasen Krishnan)\n- drm/mediatek: mtk_dpi: Add checks for reg_h_fre_con existence (AngeloGioacchino Del Regno)\n- ARM: at91: pm: fix at91_suspend_finish for ZQ calibration (Li Bin)\n- hwmon: (gpio-fan) Add missing mutex locks (Alexander Stein)\n- x86/bugs: Make spectre user default depend on MITIGATION_SPECTRE_V2 (Breno Leitao)\n- clk: imx8mp: inform CCF of maximum frequency of clocks (Ahmad Fatoum)\n- media: uvcvideo: Handle uvc menu translation inside uvc_get_le_value (Ricardo Ribalda)\n- media: uvcvideo: Add sanity check to uvc_ioctl_xu_ctrl_map (Ricardo Ribalda)\n- ublk: complete command synchronously on error (Caleb Sander)\n- block: mark bounce buffering as incompatible with integrity (Christoph Hellwig)\n- drm/rockchip: vop2: Add uv swap for cluster window (Andy Yan)\n- ipv4: fib: Move fib_valid_key_len() to rtm_to_fib_config(). (Kuniyuki Iwashima)\n- scsi: logging: Fix scsi_logging_level bounds (Nicolas Bouchinet)\n- ALSA: hda/realtek: Enable PC beep passthrough for HP EliteBook 855 G7 (Maciej S. Szmigiero)\n- perf/hw_breakpoint: Return EOPNOTSUPP for unsupported breakpoint type (Saket Kumar Bhaskar)\n- net: pktgen: fix mpls maximum labels list parsing (Peter Seiderer)\n- media: imx335: Set vblank immediately (Paul Elder)\n- iommufd: Disallow allocating nested parent domain with fault ID (Yi Liu)\n- ublk: enforce ublks_max only for unprivileged devices (Uday Shankar)\n- dpll: Add an assertion to check freq_supported_num (Jiasheng Jiang)\n- net: phy: nxp-c45-tja11xx: add match_phy_device to TJA1103/TJA1104 (Andrei Botila)\n- net: ethernet: ti: cpsw_new: populate netdev of_node (Alexander Sverdlin)\n- rcu: Fix get_state_synchronize_rcu_full() GP-start detection (Paul E. McKenney)\n- pinctrl: bcm281xx: Use 'unsigned int' instead of bare 'unsigned' (Artur Weber)\n- media: cx231xx: set device_caps for 417 (Hans Verkuil) [Orabug: 38094934] {CVE-2025-38044}\n- perf/core: Clean up perf_try_init_event() (Peter Zijlstra)\n- drm/amd/display: Request HW cursor on DCN3.2 with SubVP (Aric Cyr)\n- drm/amd/display: Fix p-state type when p-state is unsupported (Dillon Varone)\n- drm/amd/display: Fix DMUB reset sequence for DCN401 (Dillon Varone)\n- drm/amd/display: Skip checking FRL_MODE bit for PCON BW determination (George Shen)\n- drm/amd/display: Ensure DMCUB idle before reset on DCN31/DCN35 (Nicholas Kazlauskas)\n- drm/amdgpu: Do not program AGP BAR regs under SRIOV in gfxhub_v1_0.c (Victor Lu)\n- remoteproc: qcom_wcnss: Handle platforms with only single power domain (Matti Lehtimaki)\n- blk-throttle: don't take carryover for prioritized processing of metadata (Ming Lei)\n- net: phylink: use pl-link_interface in phylink_expects_phy() (Choong Yong Liang)\n- drm/gem: Test for imported GEM buffers with helper (Thomas Zimmermann)\n- orangefs: Do not truncate file size (Matthew Wilcox) [Orabug: 38095056] {CVE-2025-38065}\n- soc: mediatek: mtk-mutex: Add DPI1 SOF/EOF to MT8188 mutex tables (AngeloGioacchino Del Regno)\n- dm cache: prevent BUG_ON by blocking retries on failed device resumes (Ming-Hung Tsai) [Orabug: 38095063] {CVE-2025-38066}\n- usb: xhci: set page size to the xHCI-supported size (Niklas Neronin)\n- media: c8sectpfe: Call of_node_put(i2c_bus) only once in c8sectpfe_probe() (Markus Elfring)\n- ARM: tegra: Switch DSI-B clock parent to PLLD on Tegra114 (Svyatoslav Ryhel)\n- soc: samsung: include linux/array_size.h where needed (Arnd Bergmann)\n- drm/xe: Retry BO allocation (Matthew Brost)\n- drm/xe: Nuke VM's mapping upon close (Matthew Brost)\n- ieee802154: ca8210: Use proper setters and getters for bitwise types (Andy Shevchenko)\n- rtc: ds1307: stop disabling alarms on probe (Alexandre Belloni)\n- tcp: bring back NUMA dispersion in inet_ehash_locks_alloc() (Eric Dumazet)\n- ALSA: seq: Improve data consistency at polling (Takashi Iwai)\n- powerpc/prom_init: Fixup missing #size-cells on PowerBook6,7 (Andreas Schwab)\n- arm64: tegra: Resize aperture for the IGX PCIe C5 slot (Jonathan Hunter)\n- arm64: tegra: p2597: Fix gpio for vdd-1v8-dis regulator (Diogo Ivo)\n- drm/amdgpu: Fix missing drain retry fault the last entry (Emily Deng)\n- drm/amdkfd: Set per-process flags only once cik/vi (Harish Kasiviswanathan)\n- drm/amdkfd: Set per-process flags only once for gfx9/10/11/12 (Harish Kasiviswanathan)\n- crypto: mxs-dcp - Only set OTP_KEY bit for OTP key (Sven Schwermer)\n- crypto: lzo - Fix compression buffer overrun (Herbert Xu) [Orabug: 38095079] {CVE-2025-38068}\n- misc: pci_endpoint_test: Give disabled BARs a distinct error code (Niklas Cassel)\n- PCI: endpoint: pci-epf-test: Fix double free that causes kernel to oops (Christian Bruel) [Orabug: 38095087] {CVE-2025-38069}\n- watchdog: aspeed: Update bootstatus handling (Chin-Ting Kuo)\n- cpufreq: tegra186: Share policy per cluster (Aaron Kling)\n- iommu/amd/pgtbl_v2: Improve error handling (Vasant Hegde)\n- coresight-etb10: change etb_drvdata spinlock's type to raw_spinlock_t (Levi Yun)\n- badblocks: Fix a nonsense WARN_ON() which checks whether a u64 variable 0 (Coly Li)\n- ASoC: qcom: sm8250: explicitly set format in sm8250_be_hw_params_fixup() (Alexey Klimov)\n- auxdisplay: charlcd: Partially revert 'Move hwidth and bwidth to struct hd44780_common' (Andy Shevchenko)\n- gfs2: Check for empty queue in run_queue (Andreas Gruenbacher)\n- drm/amd/display: Fix incorrect DPCD configs while Replay/PSR switch (Leon Huang)\n- drm/amd/display: not abort link train when bw is low (Peichen Huang)\n- drm/amd/display: calculate the remain segments for all pipes (Zhikai Zhai)\n- drm/amd/display: remove minimum Dispclk and apply oem panel timing. (Charlene Liu)\n- ipv6: save dontfrag in cork (Willem de Bruijn)\n- wifi: cfg80211: allow IR in 20 MHz configurations (Anjaneyulu)\n- wifi: mac80211_hwsim: Fix MLD address translation (Ilan Peer)\n- wifi: mac80211: fix warning on disconnect during failed ML reconf (Johannes Berg)\n- wifi: iwlwifi: fix the ECKV UEFI variable name (Emmanuel Grumbach)\n- wifi: iwlwifi: mark Br device not integrated (Johannes Berg)\n- wifi: iwlwifi: fix debug actions order (Johannes Berg) [Orabug: 38094942] {CVE-2025-38045}\n- wifi: iwlwifi: w/a FW SMPS mode selection (Daniel Gabay)\n- wifi: iwlwifi: don't warn when if there is a FW error (Miri Korenblit)\n- printk: Check CON_SUSPEND when unblanking a console (Marcos Paulo de Souza)\n- iommu: Keep dev-iommu state consistent (Robin Murphy)\n- hwmon: (dell-smm) Increment the number of fans (Kurt Borja)\n- wifi: iwlwifi: mvm: fix setting the TK when associated (Avraham Stern)\n- usb: xhci: Don't change the status of stalled TDs on failed Stop EP (Michal Pecio)\n- mmc: sdhci: Disable SD card clock before changing parameters (Erick Shepherd)\n- mmc: dw_mmc: add exynos7870 DW MMC support (Kaustabh Chakraborty)\n- arm64/mm: Check PUD_TYPE_TABLE in pud_bad() (Ryan Roberts)\n- arm64/mm: Check pmd_table() in pmd_trans_huge() (Ryan Roberts)\n- phy: rockchip: usbdp: Only verify link rates/lanes/voltage when the corresponding set flags are set (Andy Yan)\n- PNP: Expand length of fixup id string (Kees Cook)\n- netfilter: conntrack: Bound nf_conntrack sysctl writes (Nicolas Bouchinet)\n- wifi: rtw89: set force HE TB mode when connecting to 11ax AP (Dian-Syuan Yang)\n- timer_list: Don't use %pK through printk() (Thomas Weissschuh)\n- net: hsr: Fix PRP duplicate detection (Jaakko Karrenpalo)\n- net: stmmac: dwmac-rk: Validate GRF and peripheral GRF during probe (Jonas Karlman)\n- posix-timers: Ensure that timer initialization is fully visible (Thomas Gleixner)\n- posix-timers: Add cond_resched() to posix_timer_add() search loop (Eric Dumazet)\n- RDMA/uverbs: Propagate errors from rdma_lookup_get_uobject() (Maher Sanalla)\n- ext4: do not convert the unwritten extents if data writeback fails (Baokun Li)\n- ext4: reject the 'data_err=abort' option in nojournal mode (Baokun Li)\n- clk: qcom: lpassaudiocc-sc7280: Add support for LPASS resets for QCM6490 (Taniya Das)\n- ASoC: sun4i-codec: support hp-det-gpios property (Ryan Walklin)\n- drm/amdgpu: Update SRIOV video codec caps (David Rosca)\n- drm/amdgpu/gfx11: don't read registers in mqd init (Alex Deucher)\n- drm/amdgpu/gfx12: don't read registers in mqd init (Alex Deucher)\n- mfd: tps65219: Remove TPS65219_REG_TI_DEV_ID check (Shree Ramamoorthy)\n- pinctrl-tegra: Restore SFSEL bit when freeing pins (Prathamesh Shete)\n- xen: Add support for XenServer 6.1 platform device (Frediano Ziglio)\n- net/smc: use the correct ndev to find pnetid by pnetid table (Guangguan Wang)\n- dm: restrict dm device size to 2^63-512 bytes (Mikulas Patocka)\n- crypto: octeontx2 - suppress auth failure screaming due to negative tests (Shashank Gupta)\n- kconfig: do not clear SYMBOL_VALID when reading include/config/auto.conf (Masahiro Yamada)\n- kbuild: fix argument parsing in scripts/config (Seyediman Seyedarab)\n- bpf: Allow pre-ordering for bpf cgroup progs (Yonghong Song)\n- ASoC: mediatek: mt6359: Add stub for mt6359_accdet_enable_jack_detect (Nicolas F R A Prado)\n- ASoC: pcm6240: Drop bogus code handling IRQ as GPIO (Linus Walleij)\n- spi: spi-mux: Fix coverity issue, unchecked return value (Sergio Perez Gonzalez)\n- erofs: initialize decompression early (Gao Xiang)\n- thunderbolt: Do not add non-active NVM if NVM upgrade is disabled for retimer (Mika Westerberg)\n- objtool: Fix error handling inconsistencies in check() (Josh Poimboeuf)\n- rtc: rv3032: fix EERD location (Alexandre Belloni)\n- tcp: reorganize tcp_in_ack_event() and tcp_count_delivered() (Ilpo Jarvinen)\n- jbd2: do not try to recover wiped journal (Jan Kara)\n- PCI: dwc: Use resource start as ioremap() input in dw_pcie_pme_turn_off() (Frank Li)\n- bpf: Return prog btf_id without capable check (Mykyta Yatsenko)\n- vfio/pci: Handle INTx IRQ_NOTCONNECTED (Alex Williamson)\n- scsi: st: ERASE does not change tape location (Kai Makisara)\n- scsi: st: Tighten the page format heuristics with MODE SELECT (Kai Makisara)\n- hypfs_create_cpu_files(): add missing check for hypfs_mkdir() failure (Al Viro)\n- ext4: reorder capability check last (Christian Gottsche)\n- riscv: Call secondary mmu notifier when flushing the tlb (Alexandre Ghiti)\n- bnxt_en: Query FW parameters when the CAPS_CHANGE bit is set (Shantiprasad Shettar)\n- wifi: mwifiex: Fix HT40 bandwidth issue. (Jeff Chen)\n- um: Update min_low_pfn to match changes in uml_reserved (Tiwei Bie)\n- um: Store full CSGSFS and SS register from mcontext (Benjamin Berg)\n- clocksource/drivers/timer-riscv: Stop stimecmp when cpu hotplug (Nick Hu)\n- dlm: make tcp still work in multi-link env (Heming Zhao)\n- s390/tlb: Use mm_has_pgste() instead of mm_alloc_pgste() (Heiko Carstens)\n- i3c: master: svc: Fix missing STOP for master request (Stanley Chu)\n- drm/amdgpu: adjust drm_firmware_drivers_only() handling (Alex Deucher)\n- drm/amd/display: Guard against setting dispclk low for dcn31x (Jing Zhou)\n- drm/amdgpu: release xcp_mgr on exit (Flora Cui)\n- blk-cgroup: improve policy registration error handling (Chen Linxuan)\n- btrfs: send: return -ENAMETOOLONG when attempting a path that is too long (Filipe Manana)\n- btrfs: get zone unusable bytes while holding lock at btrfs_reclaim_bgs_work() (Filipe Manana)\n- btrfs: fix non-empty delayed iputs list on unmount due to async workers (Filipe Manana)\n- btrfs: run btrfs_error_commit_super() early (Qu Wenruo)\n- btrfs: avoid linker error in btrfs_find_create_tree_block() (Mark Harmstone)\n- btrfs: make btrfs_discard_workfn() block_group ref explicit (Boris Burkov)\n- i2c: pxa: fix call balance of i2c-clk handling routines (Vitalii Mordan)\n- i2c: qup: Vote for interconnect bandwidth to DRAM (Stephan Gerhold)\n- x86/mm: Check return value from memblock_phys_alloc_range() (Philip Redkin) [Orabug: 38095101] {CVE-2025-38071}\n- x86/microcode: Update the Intel processor flag scan check (Sohil Mehta)\n- x86/smpboot: Fix INIT delay assignment for extended Intel Families (Sohil Mehta)\n- x86/stackprotector/64: Only export __ref_stack_chk_guard on CONFIG_SMP (Ingo Molnar)\n- x86/headers: Replace __ASSEMBLY__ with __ASSEMBLER__ in UAPI headers (Thomas Huth)\n- wifi: mt76: mt7925: fix fails to enter low power mode in suspend state (Quan Zhou)\n- wifi: mt76: mt7925: load the appropriate CLC data based on hardware type (Ming Yen Hsieh)\n- wifi: mt76: mt7996: revise TXS size (Benjamin Lin)\n- wifi: mt76: mt7996: fix SER reset trigger on WED reset (Rex Lu)\n- wifi: mt76: only mark tx-status-failed frames as ACKed on mt76x0/2 (Felix Fietkau)\n- cgroup/rstat: avoid disabling irqs for O(num_cpu) (Eric Dumazet)\n- drm/amdgpu: Skip pcie_replay_count sysfs creation for VF (Victor Skvortsov)\n- mmc: host: Wait for Vdd to settle on card power off (Erick Shepherd)\n- staging: vchiq_arm: Create keep-alive thread during probe (Stefan Wahren)\n- pidfs: improve multi-threaded exec and premature thread-group leader exit polling (Christian Brauner)\n- libnvdimm/labels: Fix divide error in nd_label_data_init() (Robert Richter) [Orabug: 38095109] {CVE-2025-38072}\n- ext4: on a remount, only log the ro or r/w state when it has changed (Nicolas Bretz)\n- xen/pci: Do not register devices with segments = 0x10000 (Roger Pau Monne)\n- PCI: vmd: Disable MSI remapping bypass under Xen (Roger Pau Monne)\n- drm/amdkfd: set precise mem ops caps to disabled for gfx 11 and 12 (Jonathan Kim)\n- drm/amdgpu/discovery: check ip_discovery fw file available (Flora Cui)\n- pNFS/flexfiles: Report ENETDOWN as a connection error (Trond Myklebust)\n- tools/build: Don't pass test log files to linker (Ian Rogers)\n- r8169: disable RTL8126 ZRX-DC timeout (Chunhao Lin)\n- PCI: dwc: ep: Ensure proper iteration over outbound map windows (Frank Li)\n- objtool: Properly disable uaccess validation (Josh Poimboeuf)\n- lockdep: Fix wait context check on softirq for PREEMPT_RT (Ryo Takakura)\n- dql: Fix dql-limit value when reset. (Jing Su)\n- Bluetooth: Disable SCO support if READ_VOICE_SETTING is unsupported/broken (Pedro Nishiyama)\n- Bluetooth: btmtksdio: Prevent enabling interrupts after IRQ handler removal (Sean Wang)\n- thermal/drivers/qoriq: Power down TMU on system suspend (Alice Guo)\n- thermal/drivers/mediatek/lvts: Start sensor interrupts disabled (Nicolas F R A Prado)\n- net: tn40xx: create swnode for mdio and aqr105 phy and add to mdiobus (Hans-Frieder Vogt)\n- net: tn40xx: add pci-id of the aqr105-based Tehuti TN4010 cards (Hans-Frieder Vogt)\n- mctp: Fix incorrect tx flow invalidation condition in mctp-i2c (Daniel Hsu)\n- ASoC: codecs: wsa883x: Correct VI sense channel mask (Krzysztof Kozlowski)\n- ASoC: codecs: wsa884x: Correct VI sense channel mask (Krzysztof Kozlowski)\n- spi-rockchip: Fix register out of bounds access (Luis de Arquer) [Orabug: 38095173] {CVE-2025-38081}\n- SUNRPC: rpcbind should never reset the port to the value '0' (Trond Myklebust)\n- SUNRPC: rpc_clnt_set_transport() must not change the autobind setting (Trond Myklebust)\n- NFSv4: Treat ENETUNREACH errors as fatal for state recovery (Trond Myklebust)\n- cifs: Fix establishing NetBIOS session for SMB2+ connection (Pali Rohar)\n- cifs: add validation check for the fields in smb_aces (Namjae Jeon)\n- cifs: Set default Netbios RFC1001 server name to hostname in UNC (Pali Rohar)\n- fbdev: core: tileblit: Implement missing margin clearing for tileblit (Zsolt Kajtar)\n- fbcon: Use correct erase colour for clearing in fbcon (Zsolt Kajtar)\n- fbdev: fsl-diu-fb: add missing device_remove_file() (Shixiong Ou)\n- riscv: Allow NOMMU kernels to access all of RAM (Samuel Holland)\n- mailbox: use error ret code of of_parse_phandle_with_args() (Tudor Ambarus)\n- mailbox: pcc: Use acpi_os_ioremap() instead of ioremap() (Sudeep Holla)\n- tpm: Convert warn to dbg in tpm2_start_auth_session() (Jonathan Mcdowell)\n- ACPI: PNP: Add Intel OC Watchdog IDs to non-PNP device list (Diogo Ivo)\n- tracing: Mark binary printing functions with __printf() attribute (Andy Shevchenko)\n- iommufd: Extend IOMMU_GET_HW_INFO to report PASID capability (Yi Liu)\n- arm64: Add support for HIP09 Spectre-BHB mitigation (Jinqian Yang)\n- SUNRPC: Don't allow waiting for exiting tasks (Trond Myklebust)\n- NFS: Don't allow waiting for exiting tasks (Trond Myklebust)\n- NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Trond Myklebust)\n- io_uring/msg: initialise msg request opcode (Pavel Begunkov)\n- exfat: call bh_read in get_block only when necessary (Sungjong Seo)\n- fuse: Return EPERM rather than ENOSYS from link() (Matt Johnston)\n- smb: client: Store original IO parameters and prevent zero IO sizes (Zhaolong Wang)\n- cifs: Fix negotiate retry functionality (Pali Rohar)\n- cifs: Fix querying and creating MF symlinks over SMB1 (Pali Rohar)\n- cifs: Add fallback for SMB2 CREATE without FILE_READ_ATTRIBUTES (Pali Rohar)\n- s390/vfio-ap: Fix no AP queue sharing allowed message written to kernel log (Tony Krowiak)\n- x86/fred: Fix system hang during S4 resume with FRED enabled (Xin Li) [Orabug: 38094951] {CVE-2025-38047}\n- kconfig: merge_config: use an empty file as initfile (Daniel Gomez)\n- samples/bpf: Fix compilation failure for samples/bpf on LoongArch Fedora (Haoran Jiang)\n- bpf: fix possible endless loop in BPF map iteration (Brandon Kammerdiener)\n- io_uring: don't duplicate flushing in io_req_post_cqe (Pavel Begunkov)\n- block: fix race between set_blocksize and read paths (Darrick J. Wong) [Orabug: 38095117] {CVE-2025-38073}\n- selftests/bpf: Mitigate sockmap_ktls disconnect_after_delete failure (Ihor Solodrai)\n- drm/amdgpu: Allow P2P access through XGMI (Felix Kuehling)\n- drm/amd/display: Enable urgent latency adjustment on DCN35 (Nicholas Susanto)\n- fs/ext4: use sleeping version of sb_find_get_block() (Davidlohr Bueso)\n- fs/jbd2: use sleeping version of __find_get_block() (Davidlohr Bueso)\n- fs/ocfs2: use sleeping version of __find_get_block() (Davidlohr Bueso)\n- fs/buffer: use sleeping version of __find_get_block() (Davidlohr Bueso)\n- fs/buffer: introduce sleeping flavors for pagecache lookups (Davidlohr Bueso)\n- fs/buffer: split locking for pagecache lookups (Davidlohr Bueso)\n- ima: process_measurement() needlessly takes inode_lock() on MAY_READ (Frederick Lawler)\n- dma-mapping: Fix warning reported for missing prototype (Balbir Singh)\n- net: enetc: refactor bulk flipping of RX buffers to separate function (Vladimir Oltean)\n- vhost_task: fix vhost_task_create() documentation (Stefano Garzarella)\n- cgroup: Fix compilation issue due to cgroup_mutex not being exported (Gao Xu)\n- dma-mapping: avoid potential unused data compilation warning (Marek Szyprowski)\n- mei: vsc: Use struct vsc_tp_packet as vsc-tp tx_buf and rx_buf type (Hans de Goede)\n- intel_th: avoid using deprecated page-mapping, index fields (Lorenzo Stoakes)\n- dma/mapping.c: dev_dbg support for dma_addressing_limited (Balbir Singh)\n- virtio_ring: Fix data race by tagging event_triggered as racy for KCSAN (Zhongqiu Han) [Orabug: 38094958] {CVE-2025-38048}\n- scsi: ufs: Introduce quirk to extend PA_HIBERN8TIME for UFS devices (Manish Pandey)\n- scsi: target: iscsi: Fix timeout on deleted connection (Dmitry Bogdanov) [Orabug: 38095134] {CVE-2025-38075}\n- nvmem: qfprom: switch to 4-byte aligned reads (Dmitry Baryshkov)\n- nvmem: core: update raw_len if the bit reading is required (Dmitry Baryshkov)\n- nvmem: core: verify cell's raw_len (Dmitry Baryshkov)\n- nvmem: core: fix bit offsets of more than one byte (Dmitry Baryshkov)\n- nvmem: rockchip-otp: add rk3576 variant data (Heiko Stuebner)\n- nvmem: rockchip-otp: Move read-offset into variant-data (Heiko Stuebner)\n- cpufreq: Add SM8650 to cpufreq-dt-platdev blocklist (Pengyu Luo)\n- phy: renesas: rcar-gen3-usb2: Assert PLL reset on PHY power off (Claudiu Beznea)\n- phy: renesas: rcar-gen3-usb2: Lock around hardware registers and driver data (Claudiu Beznea)\n- phy: renesas: rcar-gen3-usb2: Move IRQ request in probe (Claudiu Beznea)\n- i2c: designware: Fix an error handling path in i2c_dw_pci_probe() (Christophe Jaillet)\n- i2c: designware: Use temporary variable for struct device (Andy Shevchenko)\n- drm/amd/display: Defer BW-optimization-blocked DRR adjustments (John Olender)\n- drm/amd/display: Correct timing_adjust_pending flag setting. (Zhongwei)\n- drm/amd/display: Do not enable replay when vtotal update is pending. (Sung-Huai Wang)\n- drm/amd/display: Configure DTBCLK_P with OPTC only for dcn401 (Dillon Varone)\n- LTS version: v6.12.30 (Jack Vogel)\n- drm/amdgpu: fix pm notifier handling (Alex Deucher)\n- phy: tegra: xusb: remove a stray unlock (Dan Carpenter)\n- usb: typec: ucsi: displayport: Fix deadlock (Andrei Kuchynski) [Orabug: 37977018] {CVE-2025-37967}\n- drm/tiny: panel-mipi-dbi: Use drm_client_setup_with_fourcc() (Fabio Estevam)\n- drm/panel-mipi-dbi: Run DRM default client setup (Thomas Zimmermann)\n- drm/fbdev-dma: Support struct drm_driver.fbdev_probe (Thomas Zimmermann)\n- Bluetooth: btnxpuart: Fix kernel panic during FW release (Neeraj Sanjay Kale) [Orabug: 37844459] {CVE-2025-22102}\n- iio: light: opt3001: fix deadlock due to concurrent flag access (Luca Ceresoli) [Orabug: 37977026] {CVE-2025-37968}\n- accel/ivpu: Fix fw log printing (Jacek Lawrynowicz)\n- accel/ivpu: Refactor functions in ivpu_fw_log.c (Jacek Lawrynowicz)\n- accel/ivpu: Reset fw log on cold boot (Tomasz Rusinowicz)\n- accel/ivpu: Rename ivpu_log_level to fw_log_level (Jacek Lawrynowicz)\n- mm/page_alloc: fix race condition in unaccepted memory handling (Kirill A. Shutemov) [Orabug: 38094767] {CVE-2025-38008}\n- drm/xe/gsc: do not flush the GSC worker from the reset path (Daniele Ceraolo Spurio)\n- CIFS: New mount option for cifs.upcall namespace resolution (Ritvik Budhiraja)\n- dmaengine: idxd: Refactor remove call with idxd_cleanup() helper (Shuai Xue) [Orabug: 38094790] {CVE-2025-38014}\n- dmaengine: idxd: fix memory leak in error handling path of idxd_pci_probe (Shuai Xue)\n- dmaengine: idxd: fix memory leak in error handling path of idxd_alloc (Shuai Xue) [Orabug: 38094793] {CVE-2025-38015}\n- dmaengine: idxd: Add missing idxd cleanup to fix memory leak in remove call (Shuai Xue)\n- dmaengine: idxd: Add missing cleanups in cleanup internals (Shuai Xue)\n- dmaengine: idxd: Add missing cleanup for early error out in idxd_setup_internals (Shuai Xue)\n- dmaengine: idxd: fix memory leak in error handling path of idxd_setup_groups (Shuai Xue)\n- dmaengine: idxd: fix memory leak in error handling path of idxd_setup_engines (Shuai Xue)\n- dmaengine: idxd: fix memory leak in error handling path of idxd_setup_wqs (Shuai Xue)\n- dmaengine: ti: k3-udma: Use cap_mask directly from dma_device structure instead of a local copy (Yemike Abhilash Chandra)\n- dmaengine: ti: k3-udma: Add missing locking (Ronald Wahl) [Orabug: 38094756] {CVE-2025-38005}\n- mm: userfaultfd: correct dirty flags set for both present and swap pte (Barry Song)\n- net: qede: Initialize qede_ll_ops with designated initializer (Nathan Chancellor)\n- ring-buffer: Fix persistent buffer when commit page is the reader page (Steven Rostedt)\n- wifi: mt76: disable napi on driver removal (Fedor Pchelkin) [Orabug: 38094770] {CVE-2025-38009}\n- tpm: Mask TPM RC in tpm2_start_auth_session() (Jarkko Sakkinen)\n- spi: tegra114: Use value to check for invalid delays (Aaron Kling)\n- smb: client: fix memory leak during error handling for POSIX mkdir (Jethro Donaldson)\n- scsi: sd_zbc: block: Respect bio vector limits for REPORT ZONES buffer (Steve Siwinski)\n- phy: renesas: rcar-gen3-usb2: Set timing registers only once (Claudiu Beznea)\n- phy: renesas: rcar-gen3-usb2: Fix role detection on unbind/bind (Claudiu Beznea)\n- phy: Fix error handling in tegra_xusb_port_init (Ma Ke)\n- phy: tegra: xusb: Use a bitmask for UTMI pad power state tracking (Wayne Chang) [Orabug: 38094777] {CVE-2025-38010}\n- tracing: samples: Initialize trace_array_printk() with the correct function (Steven Rostedt)\n- ftrace: Fix preemption accounting for stacktrace filter command (Donglin Peng)\n- ftrace: Fix preemption accounting for stacktrace trigger command (Donglin Peng)\n- kbuild: Disable -Wdefault-const-init-unsafe (Nathan Chancellor)\n- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Michael Kelley)\n- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Michael Kelley)\n- arm64: dts: rockchip: Remove overdrive-mode OPPs from RK3588J SoC dtsi (Dragan Simic)\n- arm64: dts: amlogic: dreambox: fix missing clkc_audio node (Christian Hewitt)\n- hv_netvsc: Remove rmsg_pgcnt (Michael Kelley)\n- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Michael Kelley)\n- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Michael Kelley)\n- dma-buf: insert memory barrier before updating num_fences (Hyejeong Choi)\n- ALSA: usb-audio: Add sample rate quirk for Microdia JP001 USB Camera (Nicolas Chauvet)\n- ALSA: usb-audio: Add sample rate quirk for Audioengine D1 (Christian Heusel)\n- ALSA: es1968: Add error handling for snd_pcm_hw_constraint_pow2() (Xu Wang)\n- ACPI: PPTT: Fix processor subtable walk (Jeremy Linton)\n- gpio: pca953x: fix IRQ storm on system wake up (Emanuele Ghidoli)\n- MAINTAINERS: Update Alexey Makhalov's email address (Alexey Makhalov)\n- drm/amd/display: Avoid flooding unnecessary info messages (Wayne Lin)\n- drm/amd/display: Correct the reply value when AUX write incomplete (Wayne Lin)\n- drm/amdgpu: csa unmap use uninterruptible lock (Philip Yang) [Orabug: 38094779] {CVE-2025-38011}\n- drm/amdgpu: fix incorrect MALL size for GFX1151 (Tim Huang)\n- Revert 'drm/amd/display: Hardware cursor changes color when switched to software cursor' (Melissa Wen)\n- btrfs: add back warning for mount option commit values exceeding 300 (Kyoji Ogasawara)\n- btrfs: fix folio leak in submit_one_async_extent() (Boris Burkov)\n- btrfs: fix discard worker infinite loop after disabling discard (Filipe Manana)\n- LoongArch: uprobes: Remove redundant code about resume_era (Tiezhu Yang)\n- LoongArch: uprobes: Remove user_{en,dis}able_single_step() (Tiezhu Yang)\n- LoongArch: Fix MAX_REG_OFFSET calculation (Huacai Chen)\n- LoongArch: Save and restore CSR.CNTC for hibernation (Huacai Chen)\n- LoongArch: Move __arch_cpu_idle() to .cpuidle.text section (Huacai Chen)\n- LoongArch: Prevent cond_resched() occurring within kernel-fpu (Tianyang Zhang)\n- HID: bpf: abort dispatch if device destroyed (Rongrong) [Orabug: 38094796] {CVE-2025-38016}\n- udf: Make sure i_lenExtents is uptodate on inode eviction (Jan Kara)\n- sched_ext: bpf_iter_scx_dsq_new() should always initialize iterator (Tejun Heo) [Orabug: 38094786] {CVE-2025-38012}\n- dmaengine: Revert 'dmaengine: dmatest: Fix dmatest waiting less when interrupted' (Nathan Lynch)\n- NFSv4/pnfs: Reset the layout state after a layoutreturn (Trond Myklebust)\n- tsnep: fix timestamping with a stacked DSA driver (Gerhard Engleder)\n- net/tls: fix kernel panic when alloc_page failed (Pengtao He) [Orabug: 38094802] {CVE-2025-38018}\n- mlxsw: spectrum_router: Fix use-after-free when deleting GRE net devices (Ido Schimmel) [Orabug: 38094804] {CVE-2025-38019}\n- wifi: mac80211: Set n_channels after allocating struct cfg80211_scan_request (Kees Cook) [Orabug: 38094788] {CVE-2025-38013}\n- octeontx2-pf: Do not reallocate all ntuple filters (Subbaraya Sundeep)\n- octeontx2-af: Fix CGX Receive counters (Hariprasad Kelam)\n- net: ethernet: mtk_eth_soc: fix typo for declaration MT7988 ESW capability (Bc-Bocun Chen)\n- octeontx2-pf: macsec: Fix incorrect max transmit size in TX secy (Subbaraya Sundeep)\n- netlink: specs: tc: all actions are indexed arrays (Jakub Kicinski)\n- netlink: specs: tc: fix a couple of attribute names (Jakub Kicinski)\n- drm/xe: Save CTX_TIMESTAMP mmio value instead of LRC value (Umesh Nerlige Ramappa)\n- regulator: max20086: fix invalid memory access (Cosmin Tanislav) [Orabug: 38094833] {CVE-2025-38027}\n- qlcnic: fix memory leak in qlcnic_sriov_channel_cfg_cmd() (Abdun Nihaal)\n- net/mlx5e: Disable MACsec offload for uplink representor profile (Carolina Jubran) [Orabug: 38094808] {CVE-2025-38020}\n- vsock/test: Fix occasional failure in SIOCOUTQ tests (Konstantin Shkolnyy)\n- net: dsa: b53: prevent standalone from trying to forward to other ports (Jonas Gorski)\n- ALSA: sh: SND_AICA should depend on SH_DMA_API (Geert Uytterhoeven)\n- nvme-pci: acquire cq_poll_lock in nvme_poll_irqdisable (Keith Busch)\n- nvme-pci: make nvme_pci_npages_prp() __always_inline (Kees Cook)\n- net: dsa: sja1105: discard incoming frames in BR_STATE_LISTENING (Vladimir Oltean)\n- net: cadence: macb: Fix a possible deadlock in macb_halt_tx. (Mathieu Othacehe)\n- ALSA: ump: Fix a typo of snd_ump_stream_msg_device_info (Takashi Iwai)\n- ALSA: seq: Fix delivery of UMP events to group ports (Takashi Iwai)\n- net: mctp: Ensure keys maintain only one ref to corresponding dev (Andrew Jeffery)\n- tests/ncdevmem: Fix double-free of queue array (Cosmin Ratiu)\n- selftests: ncdevmem: Switch to AF_INET6 (Stanislav Fomichev)\n- selftests: ncdevmem: Make client_ip optional (Stanislav Fomichev)\n- selftests: ncdevmem: Unify error handling (Stanislav Fomichev)\n- selftests: ncdevmem: Separate out dmabuf provider (Stanislav Fomichev)\n- selftests: ncdevmem: Redirect all non-payload output to stderr (Stanislav Fomichev)\n- net: mctp: Don't access ifa_index when missing (Matt Johnston)\n- mctp: no longer rely on net-dev_index_head[] (Eric Dumazet)\n- tools/net/ynl: ethtool: fix crash when Hardware Clock info is missing (Hangbin Liu)\n- net_sched: Flush gso_skb list too during -change() (Cong Wang) [Orabug: 37998128] {CVE-2025-37992}\n- Bluetooth: MGMT: Fix MGMT_OP_ADD_DEVICE invalid device flags (Luiz Augusto von Dentz)\n- RDMA/core: Fix 'KASAN: slab-use-after-free Read in ib_register_device' problem (Zhu Yanjun) [Orabug: 38094813] {CVE-2025-38022}\n- spi: loopback-test: Do not split 1024-byte hexdumps (Geert Uytterhoeven)\n- nfs: handle failure of nfs_get_lock_context in unlock path (Li Lingfeng) [Orabug: 38094818] {CVE-2025-38023}\n- HID: uclogic: Add NULL check in uclogic_input_configured() (Henry Martin) [Orabug: 38094764] {CVE-2025-38007}\n- HID: thrustmaster: fix memory leak in thrustmaster_interrupts() (Qasim Ijaz)\n- RDMA/rxe: Fix slab-use-after-free Read in rxe_queue_cleanup bug (Zhu Yanjun) [Orabug: 38094827] {CVE-2025-38024}\n- virtio_net: ensure netdev_tx_reset_queue is called on bind xsk for tx (Koichiro Den)\n- virtio_ring: add a func argument 'recycle_done' to virtqueue_reset() (Koichiro Den)\n- iio: chemical: sps30: use aligned_s64 for timestamp (David Lechner)\n- iio: adc: ad7768-1: Fix insufficient alignment of timestamp. (Jonathan Cameron)\n- xhci: dbc: Avoid event polling busyloop if pending rx transfers are inactive. (Mathias Nyman)\n- xhci: dbc: Improve performance by removing delay in transfer event polling. (Mathias Nyman)\n- Revert 'drm/amd: Stop evicting resources on APUs in suspend' (Alex Deucher)\n- drm/amd: Add Suspend/Hibernate notification callback support (Mario Limonciello)\n- iio: pressure: mprls0025pa: use aligned_s64 for timestamp (David Lechner)\n- iio: chemical: pms7003: use aligned_s64 for timestamp (David Lechner)\n- iio: adc: ad7266: Fix potential timestamp alignment issue. (Jonathan Cameron)\n- KVM: x86/mmu: Prevent installing hugepages when mem attributes are changing (Sean Christopherson)\n- KVM: Add member to struct kvm_gfn_range to indicate private/shared (Isaku Yamahata)\n- uio_hv_generic: Fix sysfs creation path for ring buffer (Naman Jain)\n- tpm: tis: Double the timeout B to 4s (Michal Suchanek)\n- tracing: probes: Fix a possible race in trace_probe_log APIs (Masami Hiramatsu)\n- cgroup/cpuset: Extend kthread_is_per_cpu() check to all PF_NO_SETAFFINITY tasks (Waiman Long)\n- arm64: dts: imx8mp-var-som: Fix LDO5 shutdown causing SD card timeout (Himanshu Bhavani)\n- platform/x86: asus-wmi: Fix wlan_ctrl_by_user detection (Hans de Goede)\n- platform/x86/amd/pmc: Declare quirk_spurious_8042 for MECHREVO Wujie 14XA (GX4HRXL) (Runhua He)\n- binfmt_elf: Move brk for static PIE even if ASLR disabled (Kees Cook)\n- riscv: dts: sophgo: fix DMA data-width configuration for CV18xx (Ze Huang)\n- drivers/platform/x86/amd: pmf: Check for invalid Smart PC Policies (Mario Limonciello)\n- drivers/platform/x86/amd: pmf: Check for invalid sideloaded Smart PC Policies (Mario Limonciello)\n- fs/xattr.c: fix simple_xattr_list to always include security.* xattrs (Stephen Smalley)\n- arm64: dts: rockchip: Assign RT5616 MCLK rate on rk3588-friendlyelec-cm3588 (Tom Vincent)\n- LTS version: v6.12.29 (Jack Vogel)\n- arm64: proton-pack: Add new CPUs 'k' values for branch mitigation (James Morse)\n- arm64: bpf: Only mitigate cBPF programs loaded by unprivileged users (James Morse) [Orabug: 37977004] {CVE-2025-37963}\n- arm64: bpf: Add BHB mitigation to the epilogue for cBPF programs (James Morse) [Orabug: 37976926] {CVE-2025-37948}\n- arm64: proton-pack: Expose whether the branchy loop k value (James Morse)\n- arm64: proton-pack: Expose whether the platform is mitigated by firmware (James Morse)\n- arm64: insn: Add support for encoding DSB (James Morse)\n- mm: page_alloc: speed up fallbacks in rmqueue_bulk() (Johannes Weiner)\n- mm: page_alloc: don't steal single pages from biggest buddy (Johannes Weiner)\n- Bluetooth: btmtk: Remove the resetting step before downloading the fw (Hao Qin)\n- Bluetooth: btmtk: Remove resetting mt7921 before downloading the fw (Hao Qin)\n- io_uring: always arm linked timeouts prior to issue (Jens Axboe)\n- rust: clean Rust 1.88.0's clippy::uninlined_format_args lint (Miguel Ojeda)\n- rust: allow Rust 1.87.0's clippy::ptr_eq lint (Miguel Ojeda)\n- Revert 'um: work around sched_yield not yielding in time-travel mode' (Christian Lamparter)\n- do_umount(): add missing barrier before refcount checks in sync case (Al Viro)\n- io_uring/sqpoll: Increase task_work submission batch size (Gabriel Krisman Bertazi)\n- drm/xe/tests/mocs: Hold XE_FORCEWAKE_ALL for LNCF regs (Tejas Upadhyay)\n- drm/xe/tests/mocs: Update xe_force_wake_get() return handling (Himal Prasad Ghimiray)\n- riscv: misaligned: enable IRQs while handling misaligned accesses (Clement Leger)\n- riscv: misaligned: factorize trap handling (Clement Leger)\n- nvme: unblock ctrl state transition for firmware update (Daniel Wagner)\n- drm/panel: simple: Update timings for AUO G101EVN010 (Kevin Baker)\n- loop: Add sanity check for read/write_iter (Lizhi Xu)\n- loop: factor out a loop_assign_backing_file helper (Christoph Hellwig)\n- loop: refactor queue limits updates (Christoph Hellwig)\n- loop: Fix ABBA locking race (Ogawa Hirofumi)\n- loop: Simplify discard granularity calc (John Garry)\n- loop: Use bdev limit helpers for configuring discard (John Garry)\n- riscv: misaligned: Add handling for ZCB instructions (Nylon Chen)\n- MIPS: Fix MAX_REG_OFFSET (Thorsten Blum)\n- iio: adc: dln2: Use aligned_s64 for timestamp (Jonathan Cameron)\n- iio: accel: adxl355: Make timestamp 64-bit aligned using aligned_s64 (Jonathan Cameron)\n- types: Complement the aligned types with signed 64-bit one (Andy Shevchenko)\n- iio: temp: maxim-thermocouple: Fix potential lack of DMA safe buffer. (Jonathan Cameron)\n- iio: accel: adxl367: fix setting odr for activity time update (Lothar Rubusch)\n- usb: usbtmc: Fix erroneous generic_read ioctl return (Dave Penkler)\n- usb: usbtmc: Fix erroneous wait_srq ioctl return (Dave Penkler)\n- usb: usbtmc: Fix erroneous get_stb ioctl error returns (Dave Penkler)\n- USB: usbtmc: use interruptible sleep in usbtmc_read (Oliver Neukum)\n- usb: typec: ucsi: displayport: Fix NULL pointer access (Andrei Kuchynski) [Orabug: 38015126] {CVE-2025-37994}\n- usb: typec: tcpm: delay SNK_TRY_WAIT_DEBOUNCE to SRC_TRYWAIT transition (Rd Babiera)\n- usb: misc: onboard_usb_dev: fix support for Cypress HX3 hubs (Lukasz Czechowski)\n- usb: host: tegra: Prevent host controller crash when OTG port is used (Jim Lin)\n- usb: gadget: Use get_status callback to set remote wakeup capability (Prashanth K)\n- usb: gadget: tegra-xudc: ACK ST_RC after clearing CTRL_RUN (Wayne Chang)\n- usb: gadget: f_ecm: Add get_status callback (Prashanth K)\n- usb: cdnsp: fix L1 resume issue for RTL_REVISION_NEW_LPM version (Pawel Laszczak)\n- usb: cdnsp: Fix issue with resuming from L1 (Pawel Laszczak)\n- usb: dwc3: gadget: Make gadget_wakeup asynchronous (Prashanth K)\n- x86/microcode: Consolidate the loader enablement checking (Borislav Petkov)\n- module: ensure that kobject_put() is safe for module type kobjects (Dmitry Antipov) [Orabug: 38015131] {CVE-2025-37995}\n- memblock: Accept allocated memory before use in memblock_double_array() (Tom Lendacky) [Orabug: 37976994] {CVE-2025-37960}\n- clocksource/i8253: Use raw_spinlock_irqsave() in clockevent_i8253_disable() (Sebastian Andrzej Siewior)\n- arm64: cpufeature: Move arm64_use_ng_mappings to the .data section to prevent wrong idmap generation (Levi Yun)\n- accel/ivpu: Increase state dump msg timeout (Jacek Lawrynowicz)\n- xenbus: Use kref to track req lifetime (Jason Andryuk) [Orabug: 37976934] {CVE-2025-37949}\n- xen: swiotlb: Use swiotlb bouncing if kmalloc allocation demands it (John Ernberg)\n- smb: client: Avoid race in open_cached_dir with lease breaks (Paul Aurich) [Orabug: 37976959] {CVE-2025-37954}\n- usb: uhci-platform: Make the clock really optional (Alexey Charkov)\n- drm/amdgpu/hdp7: use memcfg register to post the write for HDP flush (Alex Deucher)\n- drm/amdgpu/hdp6: use memcfg register to post the write for HDP flush (Alex Deucher)\n- drm/amdgpu/hdp5: use memcfg register to post the write for HDP flush (Alex Deucher)\n- drm/amdgpu/hdp5.2: use memcfg register to post the write for HDP flush (Alex Deucher)\n- drm/amdgpu/hdp4: use memcfg register to post the write for HDP flush (Alex Deucher)\n- drm/amd/display: Copy AUX read reply data whenever length 0 (Wayne Lin)\n- drm/amd/display: Fix wrong handling for AUX_DEFER case (Wayne Lin)\n- drm/amd/display: Remove incorrect checking in dmub aux handler (Wayne Lin)\n- drm/amd/display: Fix the checking condition in dmub aux handling (Wayne Lin)\n- drm/amd/display: more liberal vmin/vmax update for freesync (Aurabindo Pillai)\n- drm/amd/display: Fix invalid context error in dml helper (Roman Li) [Orabug: 37977185] {CVE-2025-37965}\n- drm/amdgpu/vcn: using separate VCN1_AON_SOC offset (Ruijing Dong)\n- drm/xe: Add page queue multiplier (Matthew Brost)\n- drm/v3d: Add job to pending list if the reset was skipped (Maira Canal) [Orabug: 37976942] {CVE-2025-37951}\n- iio: imu: st_lsm6dsx: fix possible lockup in st_lsm6dsx_read_tagged_fifo (Silvano Seva) [Orabug: 37977031] {CVE-2025-37969}\n- iio: imu: st_lsm6dsx: fix possible lockup in st_lsm6dsx_read_fifo (Silvano Seva) [Orabug: 37977037] {CVE-2025-37970}\n- iio: imu: inv_mpu6050: align buffer for timestamp (David Lechner)\n- iio: adis16201: Correct inclinometer channel resolution (Gabriel)\n- iio: adc: rockchip: Fix clock initialization sequence (Simon Xue)\n- iio: adc: ad7606: fix serial register access (Angelo Dureghello)\n- io_uring: ensure deferred completions are flushed for multishot (Jens Axboe)\n- drm/amd/display: Shift DMUB AUX reply command if necessary (Wayne Lin)\n- KVM: SVM: Forcibly leave SMM mode on SHUTDOWN interception (Mikhail Lobanov) [Orabug: 37976977] {CVE-2025-37957}\n- selftests/mm: fix a build failure on powerpc (Nysal Jan K.A.)\n- selftests/mm: compaction_test: support platform with huge mount of memory (Feng Tang)\n- mm/userfaultfd: fix uninitialized output field for -EAGAIN race (Peter Xu)\n- mm/huge_memory: fix dereferencing invalid pmd migration entry (Gavin Guo) [Orabug: 37976982] {CVE-2025-37958}\n- mm: fix folio_pte_batch() on XEN PV (Petr Vanek)\n- x86/mm: Eliminate window where TLB flushes may be inadvertently skipped (Dave Hansen) [Orabug: 37977013] {CVE-2025-37964}\n- staging: axis-fifo: Correct handling of tx_fifo_depth for size validation (Gabriel)\n- staging: axis-fifo: Remove hardware resets for user errors (Gabriel)\n- staging: bcm2835-camera: Initialise dev in v4l2_dev (Dave Stevenson) [Orabug: 37977042] {CVE-2025-37971}\n- staging: iio: adc: ad7816: Correct conditional logic for store mode (Gabriel)\n- rust: clean Rust 1.88.0's warning about clippy::disallowed_macros configuration (Miguel Ojeda)\n- objtool/rust: add one more noreturn Rust function for Rust 1.87.0 (Miguel Ojeda)\n- rust: clean Rust 1.88.0's unnecessary_transmutes lint (Miguel Ojeda)\n- Input: synaptics - enable InterTouch on TUXEDO InfinityBook Pro 14 v5 (Aditya Garg)\n- Input: synaptics - enable SMBus for HP Elitebook 850 G1 (Dmitry Torokhov)\n- Input: synaptics - enable InterTouch on Dell Precision M3800 (Aditya Garg)\n- Input: synaptics - enable InterTouch on Dynabook Portege X30L-G (Aditya Garg)\n- Input: synaptics - enable InterTouch on Dynabook Portege X30-D (Manuel Fombuena)\n- Input: xpad - fix two controller table values (Vicki Pfau)\n- Input: xpad - add support for 8BitDo Ultimate 2 Wireless Controller (Lode Willems)\n- Input: xpad - fix Share button on Xbox One controllers (Vicki Pfau)\n- Input: mtk-pmic-keys - fix possible null pointer dereference (Gary Bisson) [Orabug: 37977044] {CVE-2025-37972}\n- Input: cyttsp5 - fix power control issue on wakeup (Mikael Gonella-Bolduc)\n- Input: cyttsp5 - ensure minimum reset pulse width (Hugo Villeneuve)\n- virtio-net: fix total qstat values (Jakub Kicinski)\n- net: export a helper for adding up queue stats (Jakub Kicinski)\n- fbnic: Do not allow mailbox to toggle to ready outside fbnic_mbx_poll_tx_ready (Alexander Duyck)\n- fbnic: Pull fbnic_fw_xmit_cap_msg use out of interrupt context (Alexander Duyck)\n- fbnic: Improve responsiveness of fbnic_mbx_poll_tx_ready (Alexander Duyck)\n- fbnic: Actually flush_tx instead of stalling out (Alexander Duyck)\n- fbnic: Gate AXI read/write enabling on FW mailbox (Alexander Duyck)\n- fbnic: Fix initialization of mailbox descriptor rings (Alexander Duyck)\n- net: dsa: b53: do not set learning and unicast/multicast on up (Jonas Gorski)\n- net: dsa: b53: fix learning on VLAN unaware bridges (Jonas Gorski)\n- net: dsa: b53: fix toggling vlan_filtering (Jonas Gorski)\n- net: dsa: b53: do not program vlans when vlan filtering is off (Jonas Gorski)\n- net: dsa: b53: do not allow to configure VLAN 0 (Jonas Gorski)\n- net: dsa: b53: always rejoin default untagged VLAN on bridge leave (Jonas Gorski)\n- net: dsa: b53: fix VLAN ID for untagged vlan on bridge leave (Jonas Gorski)\n- net: dsa: b53: fix flushing old pvid VLAN on pvid change (Jonas Gorski)\n- net: dsa: b53: fix clearing PVID of a port (Jonas Gorski)\n- net: dsa: b53: keep CPU port always tagged again (Jonas Gorski)\n- net: dsa: b53: allow leaky reserved multicast (Jonas Gorski)\n- bpf: Scrub packet on bpf_redirect_peer (Paul Chaignon) [Orabug: 37976990] {CVE-2025-37959}\n- netfilter: ipset: fix region locking in hash types (Jozsef Kadlecsik) [Orabug: 38015141] {CVE-2025-37997}\n- ipvs: fix uninit-value for saddr in do_output_route4 (Julian Anastasov) [Orabug: 37976996] {CVE-2025-37961}\n- erofs: ensure the extra temporary copy is valid for shortened bvecs (Gao Xiang)\n- ice: use DSN instead of PCI BDF for ice_adapter index (Przemek Kitszel)\n- ice: Initial support for E825C hardware in ice_adapter (Sergey Temerkhanov)\n- wifi: mac80211: fix the type of status_code for negotiated TID to Link Mapping (Michael-Cy Lee)\n- can: gw: fix RCU/BH usage in cgw_create_job() (Oliver Hartkopp)\n- can: mcp251xfd: fix TDC setting for low data bit rates (Kelsey Maes)\n- can: m_can: m_can_class_allocate_dev(): initialize spin lock on device probe (Antonios Salios) [Orabug: 38015123] {CVE-2025-37993}\n- net: ethernet: mtk_eth_soc: do not reset PSE when setting FE (Frank Wunderlich)\n- net: ethernet: mtk_eth_soc: reset all TX queues on DMA free (Daniel Golle)\n- gre: Fix again IPv6 link-local address generation. (Guillaume Nault)\n- virtio-net: free xsk_buffs on error in virtnet_xsk_pool_enable() (Jakub Kicinski) [Orabug: 37976969] {CVE-2025-37955}\n- virtio_net: xsk: bind/unbind xsk for tx (Xuan Zhuo)\n- sch_htb: make htb_deactivate() idempotent (Cong Wang) [Orabug: 37977176] {CVE-2025-37953}\n- s390/entry: Fix last breaking event handling in case of stack corruption (Heiko Carstens)\n- ksmbd: fix memory leak in parse_lease_state() (Zhaolong Wang) [Orabug: 37977180] {CVE-2025-37962}\n- openvswitch: Fix unsafe attribute parsing in output_userspace() (Eelco Chaudron) [Orabug: 38015148] {CVE-2025-37998}\n- ksmbd: Fix UAF in __close_file_table_ids (Sean Heelan) [Orabug: 37976951] {CVE-2025-37952}\n- ksmbd: prevent out-of-bounds stream writes by validating *pos (Norbert Szetei) [Orabug: 37976923] {CVE-2025-37947}\n- ksmbd: prevent rename with empty string (Namjae Jeon) [Orabug: 37976972] {CVE-2025-37956}\n- can: rockchip_canfd: rkcanfd_remove(): fix order of unregistration calls (Marc Kleine-Budde)\n- can: mcp251xfd: mcp251xfd_remove(): fix order of unregistration calls (Marc Kleine-Budde)\n- s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has child VFs (Niklas Schnelle) [Orabug: 37976920] {CVE-2025-37946}\n- vfio/pci: Align huge faults to order (Alex Williamson)\n- wifi: cfg80211: fix out-of-bounds access during multi-link element defragmentation (Veerendranath Jakkam) [Orabug: 37977046] {CVE-2025-37973}\n- s390/pci: Fix missing check for zpci_create_device() error return (Niklas Schnelle) [Orabug: 37977050] {CVE-2025-37974}\n- can: mcan: m_can_class_unregister(): fix order of unregistration calls (Marc Kleine-Budde)\n- firmware: arm_scmi: Fix timeout checks on polling path (Cristian Marussi)\n- arm64: dts: imx8mm-verdin: Link reg_usdhc2_vqmmc to usdhc2 (Wojciech Dubowik)\n- Revert 'btrfs: canonicalize the device path before adding it' (Qu Wenruo)\n- fs/erofs/fileio: call erofs_onlinefolio_split() after bio_add_folio() (Max Kellermann) [Orabug: 38015155] {CVE-2025-37999}\n- dm: add missing unlock on in dm_keyslot_evict() (Dan Carpenter)\n- mm/vmscan: wake up flushers conditionally to avoid cgroup OOM (Zeng Jingxiang) [Orabug: 37480932]\n- dmaengine: idxd: Narrow the restriction on BATCH to ver. 1 only (Vinicius Costa Gomes) [Orabug: 37801355]\n- uek-rpm: build the fwctl mlx5 driver on UEK (Qing Huang) [Orabug: 37810636]\n- fwctl: Adapt upstream code for UEK8 (Mikhael Goikhman) [Orabug: 37810636]\n- mlx5: Create an auxiliary device for fwctl_mlx5 (Saeed Mahameed) [Orabug: 37810636]\n- fwctl/mlx5: Support for communicating with mlx5 fw (Saeed Mahameed) [Orabug: 37810636]\n- fwctl: Add documentation (Jason Gunthorpe) [Orabug: 37810636]\n- fwctl: FWCTL_RPC to execute a Remote Procedure Call to device firmware (Jason Gunthorpe) [Orabug: 37810636]\n- taint: Add TAINT_FWCTL (Jason Gunthorpe) [Orabug: 37810636]\n- fwctl: FWCTL_INFO to return basic information about the device (Jason Gunthorpe) [Orabug: 37810636]\n- fwctl: Basic ioctl dispatch for the character device (Jason Gunthorpe) [Orabug: 37810636]\n- fwctl: Add basic structure for a class subsystem with a cdev (Jason Gunthorpe) [Orabug: 37810636]\n- Revert 'fwctl: Add basic structure for a class subsystem with a cdev' (Qing Huang) [Orabug: 37810636]\n- Revert 'fwctl: Basic ioctl dispatch for the character device' (Qing Huang) [Orabug: 37810636]\n- Revert 'fwctl: FWCTL_INFO to return basic information about the device' (Qing Huang) [Orabug: 37810636]\n- Revert 'fwctl: FWCTL_RPC to execute a Remote Procedure Call to device firmware' (Qing Huang) [Orabug: 37810636]\n- Revert 'fwctl/mlx5: Support for communicating with mlx5 fw' (Qing Huang) [Orabug: 37810636]\n- Revert 'mlx5: Create an auxiliary device for fwctl_mlx5' (Qing Huang) [Orabug: 37810636]\n- Revert 'taint: Add TAINT_FWCTL' (Qing Huang) [Orabug: 37810636]\n- Revert 'fwctl: Adapt code for UEK-NEXT' (Qing Huang) [Orabug: 37810636]\n- Revert 'fwctl/mlx5: Add INTERNAL_DEV_RES uctx capability' (Qing Huang) [Orabug: 37810636]\n- Revert 'fwctl: Allow up to 4k devices' (Qing Huang) [Orabug: 37810636]\n- Revert 'uek-rpm: build the fwctl mlx5 driver on UEK' (Qing Huang) [Orabug: 37810636]\n- dmaengine: idxd: Change err messages to dbg (Jack Vogel) [Orabug: 37841831]\n- PCI: Add PCI_VDEVICE_SUB helper macro (Piotr Kwapulinski) [Orabug: 37889575]\n- ixgbevf: Add support for Intel(R) E610 device (Piotr Kwapulinski) [Orabug: 37889575]\n- ixgbe: Enable link management in E610 device (Piotr Kwapulinski) [Orabug: 37889575]\n- ixgbe: Clean up the E610 link management related code (Piotr Kwapulinski) [Orabug: 37889575]\n- ixgbe: Add ixgbe_x540 multiple header inclusion protection (Piotr Kwapulinski) [Orabug: 37889575]\n- ixgbe: Add support for EEPROM dump in E610 device (Piotr Kwapulinski) [Orabug: 37889575]\n- ixgbe: Add support for NVM handling in E610 device (Piotr Kwapulinski) [Orabug: 37889575]\n- ixgbe: Add link management support for E610 device (Piotr Kwapulinski) [Orabug: 37889575]\n- ixgbe: Add support for E610 device capabilities detection (Piotr Kwapulinski) [Orabug: 37889575]\n- ixgbe: Add support for E610 FW Admin Command Interface (Piotr Kwapulinski) [Orabug: 37889575]\n- uek-rpm: Move the gve kernel module from extra to kernel-uek-core (Samasth Norway Ananda) [Orabug: 37940897]\n- uek-rpm/config-aarch64: Enable BT_HCIUART_BCM for RPi Bluetooth (Vijay Kumar) [Orabug: 37961540]\n- platform/mellanox: mlxbf-pmc: Support additional PMC blocks (Shravan Kumar Ramani) [Orabug: 37964051]\n- mlxbf-bootctl: use sysfs_emit_at() in secure_boot_fuse_state_show() (David Thompson) [Orabug: 37964051,38037120] {CVE-2025-37866}\n- mlxbf-bootctl: Support sysfs entries for RTC battery status (Xiangrong Li) [Orabug: 37964051]\n- platform/mellanox: mlxbf-bootctl: use sysfs_emit() instead of sprintf() (Ai Chao) [Orabug: 37964051]\n- uek-rpm: CONFIG_PTP_1588_CLOCK_OCP enable for OCI (Vijayendra Suman) [Orabug: 37966384]\n- x86/its: Fix build errors when CONFIG_MODULES=n (Eric Biggers) [Orabug: 37970148]\n- x86/its: Use dynamic thunks for indirect branches (Peter Zijlstra) [Orabug: 37970148]\n- x86/ibt: Keep IBT disabled during alternative patching (Pawan Gupta) [Orabug: 37970148]\n- RDMA/mlx5: Fix CC counters query for MPV (Patrisious Haddad) [Orabug: 37989268]\n- amd_hsmp: Increase the SMU timeout to 500ms (Vijay Kumar) [Orabug: 38000074]",
"id": "ELSA-2025-20480",
"ovalId": "oval:com.oracle.elsa:def:202520480",
"source": "oracle_linux",
"title": "ELSA-2025-20480: Unbreakable Enterprise kernel security update (IMPORTANT)",
"url": "https://linux.oracle.com/errata/ELSA-2025-20480.html"
}