elsa-2025-20530
oracle_linux[6.12.0-102.36.5.2] - iommu/vt-d: Fix misplaced domain_attached assignment (Ban ZuoXiang) [Orabug: 38294635] [6.12.0-102.36.5.1] - net/sched: Always pass notifications when child class becomes empty (Lion Ackermann) [Orabug: 38217337] [6.12.0-102.36.5] - uek-rpm: Enable few modules related to various subsystems in UEK8U1 (Harshit Mogalapalli) [Orabug: 37846468] - uek-rpm: Enable more sound related options in UEK8U1 (Harshit Mogalapalli) [Orabug: 37846468] - uek-rpm: Enable few desktop related modules (Harshit Mogalapalli) [Orabug: 37846468] - uek-rpm: Enable few wireless modules in UEK8U1 (Harshit Mogalapalli) [Orabug: 37846468] - uek-rpm: Enable few USB related modules in UEK8U1 (Harshit Mogalapalli) [Orabug: 37846468] - uek-rpm: Add accessibility related modules to UEK8U1 (Harshit Mogalapalli) [Orabug: 37846468] - uek-rpm: intel: Enable few platform and thermal drivers (Harshit Mogalapalli) [Orabug: 37846468] - uek-rpm: Enable few config options in both Architectures (Harshit Mogalapalli) [Orabug: 37846468] - uek-rpm: Enable SOUND related config options to UEK8 (Harshit Mogalapalli) [Orabug: 37846468] - uek-rpm: Re-sort modules.yaml files as a cleanup (Harshit Mogalapalli) [Orabug: 37846468] - uek-rpm: Run savedefconfig for UEK8U1 (Harshit Mogalapalli) [Orabug: 37846468] - net/mlx5: set graceful_period to 0 to allow multiple transmission queue recovery (Praveen Kumar Kannoju) [Orabug: 38182989] [6.12.0-102.36.4] - PCI/AER: Add sysfs attributes for log ratelimits (Jon Pan-Doh) [Orabug: 38126943] - PCI/AER: Ratelimit correctable and non-fatal error logging (Jon Pan-Doh) [Orabug: 38126943] - PCI/AER: Simplify add_error_device() (Bjorn Helgaas) [Orabug: 38126943] - PCI/AER: Convert aer_get_device_error_info(), aer_print_error() to index (Bjorn Helgaas) [Orabug: 38126943] - PCI/AER: Reduce pci_print_aer() correctable error level to KERN_WARNING (Karolina Stolarek) [Orabug: 38126943] - PCI/AER: Check log level once and remember it (Karolina Stolarek) [Orabug: 38126943] - PCI/AER: Trace error event before ratelimiting (Bjorn Helgaas) [Orabug: 38126943] - PCI/AER: Update statistics before ratelimiting (Bjorn Helgaas) [Orabug: 38126943] - PCI/AER: Simplify pci_print_aer() (Bjorn Helgaas) [Orabug: 38126943] - PCI/AER: Initialize aer_err_info before using it (Bjorn Helgaas) [Orabug: 38126943] - PCI/AER: Move aer_print_source() earlier in file (Bjorn Helgaas) [Orabug: 38126943] - PCI/AER: Rename aer_print_port_info() to aer_print_source() (Jon Pan-Doh) [Orabug: 38126943] - PCI/AER: Extract bus/dev/fn in aer_print_port_info() with PCI_BUS_NUM(), etc (Bjorn Helgaas) [Orabug: 38126943] - PCI/AER: Consolidate Error Source ID logging in aer_isr_one_error_type() (Bjorn Helgaas) [Orabug: 38126943] - PCI/AER: Factor COR/UNCOR error handling out from aer_isr_one_error() (Bjorn Helgaas) [Orabug: 38126943] - PCI/AER: Descope pci_printk() to aer_printk() (Ilpo Jarvinen) [Orabug: 38126943] - md/md-bitmap: fix GPF in bitmap_get_stats() (Hakon Bugge) [Orabug: 38137957] - Revert 'net/rds: Add krefs to struct rds_connection' (Hakon Bugge) [Orabug: 38184408] - Revert 'net/rds: tracepoints for rds_conn_kref_get and put' (Hakon Bugge) [Orabug: 38184408] - sched: Change nr_uninterruptible type to unsigned long (Aruna Ramakrishna) [Orabug: 38195223] [6.12.0-102.36.3] - aarch64: increase DEFAULT_CRASH_KERNEL_LOW_SIZE for kdump for 64K kernels (Brian Maly) [Orabug: 38001657] - fs: use new field for kstat.atomic_write_unit_max_opt to avoid KABI issue (John Garry) [Orabug: 38026089] - nvme: all namespaces in a subsystem must adhere to a common atomic write size (Alan Adamson) [Orabug: 38026089] - nvme: multipath: enable BLK_FEAT_ATOMIC_WRITES for multipathing (Alan Adamson) [Orabug: 38026089] - scsi: scsi_debug: Reduce DEF_ATOMIC_WR_MAX_LENGTH (John Garry) [Orabug: 38026089] - xfs: allow sysadmins to specify a maximum atomic write limit at mount time (John Garry) [Orabug: 38026089] - xfs: update atomic write limits (John Garry) [Orabug: 38026089] - xfs: add xfs_calc_atomic_write_unit_max() (John Garry) [Orabug: 38026089] - xfs: add xfs_file_dio_write_atomic() (John Garry) [Orabug: 38026089] - xfs: commit CoW-based atomic writes atomically (John Garry) [Orabug: 38026089] - xfs: add large atomic writes checks in xfs_direct_write_iomap_begin() (John Garry) [Orabug: 38026089] - xfs: add xfs_atomic_write_cow_iomap_begin() (John Garry) [Orabug: 38026089] - xfs: refine atomic write size check in xfs_file_write_iter() (John Garry) [Orabug: 38026089] - xfs: refactor xfs_reflink_end_cow_extent() (John Garry) [Orabug: 38026089] - xfs: allow block allocator to take an alignment hint (John Garry) [Orabug: 38026089] - xfs: ignore HW which cannot atomic write a single block (Darrick J. Wong) [Orabug: 38026089] - xfs: add helpers to compute transaction reservation for finishing intent items (Darrick J. Wong) [Orabug: 38026089] - xfs: add helpers to compute log item overhead (Darrick J. Wong) [Orabug: 38026089] - xfs: separate out setting buftarg atomic writes limits (Darrick J. Wong) [Orabug: 38026089] - xfs: rename xfs_inode_can_atomicwrite() - xfs_inode_can_hw_atomic_write() (John Garry) [Orabug: 38026089] - xfs: only call xfs_setsize_buftarg once per buffer target (Darrick J. Wong) [Orabug: 38026089] - fs: add atomic write unit max opt to statx (John Garry) [Orabug: 38026089] - xfs: stop using set_blocksize (Darrick J. Wong) [Orabug: 38026089] - block: hoist block size validation code to a separate function (Darrick J. Wong) [Orabug: 38026089] - xfs: cleanup xfs_vn_getattr (Christoph Hellwig) [Orabug: 38026089] - fs: reformat the statx definition (Christoph Hellwig) [Orabug: 38026089] - dm-table: Set BLK_FEAT_ATOMIC_WRITES for target queue limits (John Garry) [Orabug: 38026089] - iomap: rework IOMAP atomic flags (John Garry) [Orabug: 38026089] - iomap: comment on atomic write checks in iomap_dio_bio_iter() (John Garry) [Orabug: 38026089] - iomap: inline iomap_dio_bio_opflags() (John Garry) [Orabug: 38026089] - iomap: Lift blocksize restriction on atomic writes (Ritesh Harjani (IBM)) [Orabug: 38026089] - iomap: Support SW-based atomic writes (John Garry) [Orabug: 38026089] - iomap: Rename IOMAP_ATOMIC - IOMAP_ATOMIC_HW (John Garry) [Orabug: 38026089] - iomap: Minor code simplification in iomap_dio_bio_iter() (John Garry) [Orabug: 38026089] - dm-mirror: Support atomic writes (John Garry) [Orabug: 38026089] - dm-io: Warn on creating multiple atomic write bios for a region (John Garry) [Orabug: 38026089] - dm-stripe: Enable atomic writes (John Garry) [Orabug: 38026089] - dm-linear: Enable atomic writes (John Garry) [Orabug: 38026089] - dm: Ensure cloned bio is same length for atomic write (John Garry) [Orabug: 38026089] - dm-table: atomic writes support (John Garry) [Orabug: 38026089] - block: Don't trim an atomic write (John Garry) [Orabug: 38026089] - block: Add common atomic writes enable flag (John Garry) [Orabug: 38026089] - block: Change blk_stack_atomic_writes_limits() unit_min check (John Garry) [Orabug: 38026089] - block: Ensure start sector is aligned for stacking atomic writes (John Garry) [Orabug: 38026089] - md/raid10: Atomic write support (John Garry) [Orabug: 38026089] - md/raid1: Atomic write support (John Garry) [Orabug: 38026089] - md/raid0: Atomic write support (John Garry) [Orabug: 38026089] - block: Support atomic writes limits for stacked devices (John Garry) [Orabug: 38026089] - block: Add extra checks in blk_validate_atomic_write_limits() (John Garry) [Orabug: 38026089] - md/raid10: Handle bio_split() errors (John Garry) [Orabug: 38026089] - md/raid1: Handle bio_split() errors (John Garry) [Orabug: 38026089] - md/raid0: Handle bio_split() errors (John Garry) [Orabug: 38026089] - block: Handle bio_split() errors in bio_submit_split() (John Garry) [Orabug: 38026089] - block: Error an attempt to split an atomic write in bio_split() (John Garry) [Orabug: 38026089] - block: Rework bio_split() return value (John Garry) [Orabug: 38026089] - ext4: Do not fallback to buffered-io for DIO atomic write (Ritesh Harjani (IBM)) [Orabug: 38026089] - ext4: Support setting FMODE_CAN_ATOMIC_WRITE (Ritesh Harjani (IBM)) [Orabug: 38026089] - ext4: Check for atomic writes support in write iter (Ritesh Harjani (IBM)) [Orabug: 38026089] - ext4: Add statx support for atomic writes (Ritesh Harjani (IBM)) [Orabug: 38026089] - xfs: Support setting FMODE_CAN_ATOMIC_WRITE (John Garry) [Orabug: 38026089] - xfs: Validate atomic writes (John Garry) [Orabug: 38026089] - xfs: Support atomic write for statx (John Garry) [Orabug: 38026089] - fs: iomap: Atomic write support (John Garry) [Orabug: 38026089] - fs: Export generic_atomic_write_valid() (John Garry) [Orabug: 38026089] - block: Add bdev atomic write limits helpers (John Garry) [Orabug: 38026089] - Revert 'SUNRPC: Don't allow waiting for exiting tasks' (Harshvardhan Jha) [Orabug: 38162684] - Revert 'Add normal counters' (Boris Ostrovsky) [Orabug: 38184971] [6.12.0-102.36.2] - LTS version: v6.12.36 (Jack Vogel) - spi: fsl-qspi: Fix double cleanup in probe error path (Kevin Hao) - btrfs: fix use-after-free on inode when scanning root during em shrinking (Sasha Levin) - btrfs: zoned: fix extent range end unlock in cow_file_range() (Naohiro Aota) - spi: fsl-qspi: use devm function instead of driver remove (Han Xu) - net: stmmac: Fix accessing freed irq affinity_hint (Qingfang Deng) - drm/amdkfd: Fix instruction hazard in gfx12 trap handler (Jay Cornwall) - drm/amdkfd: remove gfx 12 trap handler page size cap (Jonathan Kim) - ALSA: hda/realtek: Bass speaker fixup for ASUS UM5606KA (Andres Traumann) - arm64: dts: rockchip: Add avdd HDMI supplies to RockPro64 board dtsi (Dragan Simic) - riscv/atomic: Do proper sign extension also for unsigned in arch_cmpxchg (Sasha Levin) - btrfs: do regular iput instead of delayed iput during extent map shrinking (Filipe Manana) - btrfs: make the extent map shrinker run asynchronously as a work queue job (Filipe Manana) - btrfs: skip inodes without loaded extent maps when shrinking extent maps (Filipe Manana) - drm/fbdev-dma: Add shadow buffering for deferred I/O (Thomas Zimmermann) - drm/msm/dp: account for widebus and yuv420 during mode validation (Sasha Levin) - usb: typec: tcpm: PSSourceOffTimer timeout in PR_Swap enters ERROR_RECOVERY (Sasha Levin) - drm/xe: Carve out wopcm portion from the stolen memory (Sasha Levin) - iio: dac: ad3552r-common: fix ad3541/2r ranges (Angelo Dureghello) - iio: dac: ad3552r: extract common code (no changes in behavior intended) (Angelo Dureghello) - iio: dac: ad3552r: changes to use FIELD_PREP (Angelo Dureghello) - btrfs: do proper folio cleanup when cow_file_range() failed (Qu Wenruo) - net: phy: realtek: add RTL8125D-internal PHY (Heiner Kallweit) - net: phy: realtek: merge the drivers for internal NBase-T PHY's (Heiner Kallweit) - r8169: add support for RTL8125D (Heiner Kallweit) - mm/vma: reset VMA iterator on commit_merge() OOM failure (Lorenzo Stoakes) - io_uring/kbuf: flag partial buffer mappings (Jens Axboe) - io_uring/net: mark iov as dynamically allocated even for single segments (Jens Axboe) - io_uring/net: always use current transfer count for buffer put (Jens Axboe) - io_uring/net: only consider msg_inq if larger than 1 (Jens Axboe) - io_uring/net: only retry recv bundle for a full transfer (Jens Axboe) - io_uring/net: improve recv bundles (Jens Axboe) - io_uring/rsrc: don't rely on user vaddr alignment (Pavel Begunkov) - io_uring/rsrc: fix folio unpinning (Pavel Begunkov) - io_uring: fix potential page leak in io_sqe_buffer_register() (Penglei Jiang) - net: libwx: fix Tx L4 checksum (Jiawen Wu) - x86/pkeys: Simplify PKRU update in signal frame (Chang S. Bae) - x86/fpu: Refactor xfeature bitmask update code for sigframe XSAVE (Chang S. Bae) - media: uvcvideo: Rollback non processed entities on error (Ricardo Ribalda) - drm/amd/display: Fix mpv playback corruption on weston (Alex Hung) - drm/amdgpu: switch job hw_fence to amdgpu_fence (Alex Deucher) - drm/amdgpu: Fix SDMA UTC_L1 handling during start/stop sequences (Jesse Zhang) - drm/i915/dsi: Fix off by one in BXT_MIPI_TRANS_VTOTAL (Ville Syrjala) - drm/xe: Fix early wedge on GuC load failure (Daniele Ceraolo Spurio) - drm/xe: Fix taking invalid lock on wedge (Lucas De Marchi) - drm/xe: Fix memset on iomem (Lucas De Marchi) - drm/amd/display: Check dce_hwseq before dereferencing it (Alex Hung) - drm/amdgpu: Add kicker device detection (Frank Min) - drm/amd/display: Fix RMCM programming seq errors (Yihan Zhu) - drm/xe/guc_submit: add back fix (Matthew Auld) - drm/xe/sched: stop re-submitting signalled jobs (Matthew Auld) - drm/xe/vm: move rebind_work init earlier (Matthew Auld) - drm/amd/display: Correct non-OLED pre_T11_delay. (Zhongwei Zhang) - drm/amdgpu: amdgpu_vram_mgr_new(): Clamp lpfn to total vram (John Olender) - drm/amd/display: Add null pointer check for get_first_active_display() (Wentao Liang) - drm/bridge: cdns-dsi: Wait for Clk and Data Lanes to be ready (Aradhya Bhatia) - drm/bridge: cdns-dsi: Check return value when getting default PHY config (Aradhya Bhatia) - drm/bridge: cdns-dsi: Fix connecting to next bridge (Aradhya Bhatia) - drm/bridge: cdns-dsi: Fix phy de-init and flag it so (Aradhya Bhatia) - drm/bridge: cdns-dsi: Fix the clock variable for mode_valid() (Aradhya Bhatia) - drm/amdkfd: Fix race in GWS queue scheduling (Jay Cornwall) - drm/msm/gpu: Fix crash when throttling GPU immediately during boot (Stephan Gerhold) - drm/udl: Unregister device before cleaning up on disconnect (Thomas Zimmermann) - drm/tegra: Fix a possible null pointer dereference (Qiu-ji Chen) - drm/tegra: Assign plane type before registration (Thierry Reding) - drm/etnaviv: Protect the scheduler's pending list with its lock (Maira Canal) - drm/cirrus-qemu: Fix pitch programming (Thomas Zimmermann) - drm/ast: Fix comment on modeset lock (Thomas Zimmermann) - scsi: ufs: core: Fix clk scaling to be conditional in reset and restore (anvithdosapati) - scsi: megaraid_sas: Fix invalid node index (Chen Yu) - HID: wacom: fix kobject reference count leak (Qasim Ijaz) - HID: wacom: fix memory leak on sysfs attribute creation failure (Qasim Ijaz) - HID: wacom: fix memory leak on kobject creation failure (Qasim Ijaz) - HID: lenovo: Restrict F7/9/11 mode to compact keyboards only (Iusico Maxim) - f2fs: fix to zero post-eof page (Chao Yu) - mm/gup: revert 'mm: gup: fix infinite loop within __get_longterm_locked' (David Hildenbrand) - maple_tree: fix MA_STATE_PREALLOC flag in mas_preallocate() (Liam R. Howlett) - net: libwx: fix the creation of page_pool (Jiawen Wu) - spi: spi-cadence-quadspi: Fix pm runtime unbalance (Khairul Anuar Romli) - btrfs: update superblock's device bytes_used when dropping chunk (Mark Harmstone) - btrfs: fix a race between renames and directory logging (Filipe Manana) - dm-raid: fix variable in journal device check (Heinz Mauelshagen) - Bluetooth: L2CAP: Fix L2CAP MTU negotiation (Frederic Danis) - serial: imx: Restore original RXTL for console to fix data loss (Fabio Estevam) - serial: core: restore of_node information in sysfs (Aidan Stewart) - dt-bindings: serial: 8250: Make clocks and clock-frequency exclusive (Yao Zi) - staging: rtl8723bs: Avoid memset() in aes_cipher() and aes_decipher() (Nathan Chancellor) - x86/traps: Initialize DR6 by writing its architectural reset value (Xin Li (Intel)) - EDAC/amd64: Fix size calculation for Non-Power-of-Two DIMMs (Avadhut Naik) - cifs: Fix reading into an ITER_FOLIOQ from the smbdirect code (David Howells) - cifs: Fix the smbd_response slab to allow usercopy (David Howells) - smb: client: make use of common smbdirect_socket_parameters (Stefan Metzmacher) - smb: smbdirect: introduce smbdirect_socket_parameters (Stefan Metzmacher) - smb: client: make use of common smbdirect_socket (Stefan Metzmacher) - smb: smbdirect: add smbdirect_socket.h (Stefan Metzmacher) - smb: smbdirect: add smbdirect.h with public structures (Stefan Metzmacher) - smb: client: make use of common smbdirect_pdu.h (Stefan Metzmacher) - smb: smbdirect: add smbdirect_pdu.h with protocol definitions (Stefan Metzmacher) - smb: client: fix potential deadlock when reconnecting channels (Paulo Alcantara) - drm/xe: Process deferred GGTT node removals on device unwind (Michal Wajdeczko) - drm/bridge: ti-sn65dsi86: Add HPD for DisplayPort connector type (Jayesh Choudhary) - drm/bridge: ti-sn65dsi86: make use of debugfs_init callback (Wolfram Sang) - drm/i915: fix build error some more (Arnd Bergmann) - drm/amd: Adjust output for discovery error handling (Mario Limonciello) - drm/amdgpu/discovery: optionally use fw based ip discovery (Alex Deucher) - net: selftests: fix TCP packet checksum (Jakub Kicinski) - ALSA: hda/realtek: Fix built-in mic on ASUS VivoBook X507UAR (Salvatore Bonaccorso) - atm: Release atm_dev_mutex after removing procfs in atm_dev_deregister(). (Kuniyuki Iwashima) - netlink: specs: tc: replace underscores with dashes in names (Jakub Kicinski) - net: enetc: Correct endianness handling in _enetc_rd_reg64 (Simon Horman) - libbpf: Fix possible use-after-free for externs (Adin Scannell) - um: ubd: Add missing error check in start_io_thread() (Tiwei Bie) - bnxt: properly flush XDP redirect lists (Yan Zhai) - vsock/uapi: fix linux/vm_sockets.h userspace compilation errors (Stefano Garzarella) - wifi: mac80211: finish link init before RCU publish (Johannes Berg) - wifi: mac80211: Create separate links for VLAN interfaces (Muna Sinada) - wifi: mac80211: Add link iteration macro for link data (Muna Sinada) - af_unix: Don't set -ECONNRESET for consumed OOB skb. (Kuniyuki Iwashima) - wifi: mac80211: fix beacon interval calculation overflow (Lachlan Hodges) - ethernet: ionic: Fix DMA mapping tests (Thomas Fourier) - libbpf: Fix null pointer dereference in btf_dump__free on allocation failure (Yuan Chen) - attach_recursive_mnt(): do not lock the covering tree when sliding something under it (Al Viro) - ALSA: usb-audio: Fix out-of-bounds read in snd_usb_get_audioformat_uac3() (Youngjun Lee) - Bluetooth: hci_core: Fix use-after-free in vhci_flush() (Kuniyuki Iwashima) - atm: clip: prevent NULL deref in clip_push() (Eric Dumazet) - HID: wacom: fix crash in wacom_aes_battery_handler() (Thomas Zeitlhofer) - drm/xe/display: Add check for alloc_ordered_workqueue() (Haoxiang Li) - Revert 'riscv: misaligned: fix sleeping function called during misaligned access handling' (Nam Cao) - Revert 'riscv: Define TASK_SIZE_MAX for __access_ok()' (Nam Cao) - lib/group_cpus: fix NULL pointer dereference from group_cpus_evenly() (Yu Kuai) - fs/proc/task_mmu: fix PAGE_IS_PFNZERO detection for the huge zero folio (David Hildenbrand) - s390/pkey: Prevent overflow in size calculation for memdup_user() (Fedor Pchelkin) - ASoC: amd: yc: Add DMI quirk for Lenovo IdeaPad Slim 5 15 (Oliver Schramm) - mm/damon/sysfs-schemes: free old damon_sysfs_scheme_filter-memcg_path on write (SeongJae Park) - smb: client: remove from TP_printk statements (Stefan Metzmacher) - ata: ahci: Use correct DMI identifier for ASUSPRO-D840SA LPM quirk (Niklas Cassel) - i2c: robotfuzz-osif: disable zero-length read messages (Wolfram Sang) - i2c: tiny-usb: disable zero-length read messages (Wolfram Sang) - af_unix: Don't leave consecutive consumed OOB skbs. (Kuniyuki Iwashima) - accel/ivpu: Trigger device recovery on engine reset/resume failure (Karol Wachowski) - accel/ivpu: Add debugfs interface for setting HWS priority bands (Karol Wachowski) - accel/ivpu: Separate DB ID and CMDQ ID allocations from CMDQ allocation (Karol Wachowski) - accel/ivpu: Make command queue ID allocated on XArray (Karol Wachowski) - accel/ivpu: Remove copy engine support (Andrzej Kacprowski) - accel/ivpu: Do not fail on cmdq if failed to allocate preemption buffers (Karol Wachowski) - PCI: apple: Set only available ports up (Janne Grunau) - PCI: apple: Use helper function for_each_child_of_node_scoped() (Zhang Zekun) - f2fs: don't over-report free space or inodes in statvfs (Chao Yu) - ASoC: codecs: wcd9335: Fix missing free of regulator supplies (Krzysztof Kozlowski) - ASoC: codec: wcd9335: Convert to GPIO descriptors (Peng Fan) - jfs: validate AG parameters in dbMount() to prevent crashes (Vasiliy Kovalev) - fs/jfs: consolidate sanity checking in dbMount (Dave Kleikamp) - btrfs: fix qgroup reservation leak on failure to allocate ordered extent (Filipe Manana) - btrfs: use unsigned types for constants defined as bit shifts (David Sterba) - btrfs: factor out nocow ordered extent and extent map generation into a helper (Qu Wenruo) - Revert 'drm/i915/gem: Allow EXEC_CAPTURE on recoverable contexts on DG1' (Joonas Lahtinen) - drm/i915/gem: Allow EXEC_CAPTURE on recoverable contexts on DG1 (Ville Syrjala) - btrfs: handle csum tree error with rescue=ibadroots correctly (Qu Wenruo) - ovl: Check for NULL d_inode() in ovl_dentry_upper() (Kees Cook) - scsi: ufs: core: Don't perform UFS clkscaling during host async scan (Ziqi Chen) - ceph: fix possible integer overflow in ceph_zero_objects() (Dmitry Kandybka) - ASoC: rt1320: fix speaker noise when volume bar is 100% (Shuming Fan) - ALSA: usb-audio: Add a quirk for Lenovo Thinkpad Thunderbolt 3 dock (Mario Limonciello) - ALSA: hda: Add new pci id for AMD GPU display HD audio controller (Vijendar Mukunda) - ALSA: hda: Ignore unsol events for cards being shut down (Cezary Rojewski) - riscv: add a data fence for CMODX in the kernel mode (Andy Chiu) - usb: typec: mux: do not return on EOPNOTSUPP in {mux, switch}_set (Michael Grzeschik) - usb: typec: displayport: Receive DP Status Update NAK request exit dp altmode (Jos Wang) - usb: gadget: f_hid: wake up readers on disable/unbind (Peter Korsgaard) - usb: cdc-wdm: avoid setting WDM_READ for ZLP-s (Robert Hodaszi) - usb: Add checks for snprintf() calls in usb_alloc_dev() (Andy Shevchenko) - usb: common: usb-conn-gpio: use a unique name for usb connector device (Chance Yang) - tty: serial: uartlite: register uart driver in init (Jakub Lewalski) - usb: potential integer overflow in usbg_make_tpg() (Chen Yufeng) - misc: tps6594-pfsm: Add NULL pointer check in tps6594_pfsm_probe() (Chenyuan Yang) - iio: adc: ad_sigma_delta: Fix use of uninitialized status_pos (Purva Yeshi) - usb: dwc2: also exit clock_gating when stopping udc while suspended (Michael Grzeschik) - coresight: Only check bottom two claim bits (James Clark) - 8250: microchip: pci1xxxx: Add PCIe Hot reset disable support for Rev C0 and later devices (Rengarajan S) - um: use proper care when taking mmap lock during segfault (Benjamin Berg) - um: Add cmpxchg8b_emu and checksum functions to asm-prototypes.h (Sami Tolvanen) - iio: pressure: zpa2326: Use aligned_s64 for the timestamp (Jonathan Cameron) - drm/scheduler: signal scheduled fence when kill job (Lin.Cao) - drm/amdgpu: seq64 memory unmap uses uninterruptible lock (Philip Yang) - bcache: fix NULL pointer in cache_set_flush() (Linggang Zeng) - amd/amdkfd: fix a kfd_process ref leak (Yifan Zhang) - md/md-bitmap: fix dm-raid max_write_behind setting (Yu Kuai) - nvme-tcp: sanitize request list handling (Hannes Reinecke) - nvme-tcp: fix I/O stalls on congested sockets (Hannes Reinecke) - PCI: imx6: Add workaround for errata ERR051624 (Richard Zhu) - PCI: apple: Fix missing OF node reference in apple_pcie_setup_port (Hector Martin) - PCI: dwc: Make link training more robust by setting PORT_LOGIC_LINK_WIDTH to one lane (Wenbin Yao) - dmaengine: xilinx_dma: Set dma_device directions (Thomas Gessler) - dmaengine: idxd: Check availability of workqueue allocated by idxd wq driver before using (Yi Sun) - rust: arm: fix unknown (to Clang) argument '-mno-fdpic' (Rudraksha Gupta) - rust: module: place cleanup_module() in .exit.text section (FUJITA Tomonori) - ksmbd: provide zero as a unique ID to the Mac client (Namjae Jeon) - ksmbd: allow a filename to contain special characters on SMB3.1.1 posix extension (Namjae Jeon) - hwmon: (pmbus/max34440) Fix support for max34451 (Alexis Czezar Torreno) - NFSv4: xattr handlers should check for absent nfs filehandles (Scott Mayhew) - cxl/region: Add a dev_err() on missing target list entries (Robert Richter) - fuse: fix race between concurrent setattrs from multiple nodes (Guang Yuan Wu) - leds: multicolor: Fix intensity setting while SW blinking (Sven Schwermer) - dm vdo indexer: don't read request structure after enqueuing (Matthew Sakai) - sunrpc: don't immediately retransmit on seqno miss (Nikhil Jha) - mfd: max14577: Fix wakeup source leaks on device unbind (Krzysztof Kozlowski) - mailbox: Not protect module_put with spin_lock_irqsave (Peng Fan) - NFSv4.2: fix setattr caching of TIME_[MODIFY|ACCESS]_SET when timestamps are delegated (Sagi Grimberg) - NFSv4.2: fix listxattr to return selinux security label (Olga Kornievskaia) - NFSv4: Always set NLINK even if the server doesn't support it (Han Young) - cifs: Fix encoding of SMB1 Session Setup NTLMSSP Request in non-UNICODE mode (Pali Rohar) - cifs: Fix cifs_query_path_info() for Windows NT servers (Pali Rohar) - cifs: Correctly set SMB1 SessionKey field in Session Setup Request (Pali Rohar) - LTS version: v6.12.35 (Jack Vogel) - bpftool: Fix cgroup command to only show cgroup bpf programs (Martin KaFai Lau) - cifs: Remove duplicate fattr-cf_dtype assignment from wsl_to_fattr() function (Pali Rohar) - gpio: mlxbf3: only get IRQ for device instance 0 (David Thompson) - perf test: Directory file descriptor leak (Ian Rogers) - perf evsel: Missed close() when probing hybrid core PMUs (Ian Rogers) - gpio: pca953x: fix wrong error probe return value (Sascha Hauer) - RISC-V: KVM: Don't treat SBI HFENCE calls as NOPs (Anup Patel) - RISC-V: KVM: Fix the size parameter check in SBI SFENCE calls (Anup Patel) - scsi: elx: efct: Fix memory leak in efct_hw_parse_filter() (Vitaliy Shevtsov) - arm64/ptrace: Fix stack-out-of-bounds read in regs_get_kernel_stack_nth() (Tengda Wu) - perf/core: Fix WARN in perf_cgroup_switch() (Luo Gengkun) - perf: Fix cgroup state vs ERROR (Peter Zijlstra) - perf: Fix sample vs do_exit() (Peter Zijlstra) - s390/pci: Fix __pcilg_mio_inuser() inline assembly (Heiko Carstens) - smb: client: fix max_sge overflow in smb_extract_folioq_to_rdma() (Stefan Metzmacher) - smb: client: fix first command failure during re-negotiation (zhangjian) - serial: sh-sci: Increment the runtime usage counter for the earlycon device (Claudiu Beznea) - serial: sh-sci: Clean sci_ports[0] after at earlycon exit (Claudiu Beznea) - smb: Log an error when close_all_cached_dirs fails (Paul Aurich) - dt-bindings: i2c: nvidia,tegra20-i2c: Specify the required properties (Akhil R) - EDAC/amd64: Correct number of UMCs for family 19h models 70h-7fh (Avadhut Naik) - net: atm: fix /proc/net/atm/lec handling (Eric Dumazet) - net: atm: add lec_mutex (Eric Dumazet) - mlxbf_gige: return EPROBE_DEFER if PHY IRQ is not available (David Thompson) - calipso: Fix null-ptr-deref in calipso_req_{set,del}attr(). (Kuniyuki Iwashima) - drm/xe/bmg: Update Wa_16023588340 (Vinay Belgaumkar) - drm/xe/gt: Update handling of xe_force_wake_get return (Himal Prasad Ghimiray) - drm/xe: Wire up device shutdown handler (Maarten Lankhorst) - ublk: santizize the arguments from userspace when adding a device (Ronnie Sahlberg) - net: lan743x: fix potential out-of-bounds write in lan743x_ptp_io_event_clock_get() (Alexey Kodanev) - eth: fbnic: avoid double free when failing to DMA-map FW msg (Jakub Kicinski) - tcp: fix passive TFO socket having invalid NAPI ID (David Wei) - tipc: fix null-ptr-deref when acquiring remote ip of ethernet bearer (Haixia Qu) - tcp: fix tcp_packet_delayed() for tcp_is_non_sack_preventing_reopen() behavior (Neal Cardwell) - atm: atmtcp: Free invalid length skb in atmtcp_c_send(). (Kuniyuki Iwashima) - mpls: Use rcu_dereference_rtnl() in mpls_route_input_rcu(). (Kuniyuki Iwashima) - wifi: carl9170: do not ping device which has failed to load firmware (Dmitry Antipov) - ptp: allow reading of currently dialed frequency to succeed on free-running clocks (Vladimir Oltean) - ptp: fix breakage after ptp_vclock_in_use() rework (Vladimir Oltean) - bnxt_en: Update MRU and RSS table of RSS contexts on queue reset (Pavan Chebbi) - bnxt_en: Add a helper function to configure MRU and RSS (Pavan Chebbi) - eth: bnxt: fix out-of-range access of vnic_info array (Taehee Yoo) - bnxt_en: Fix double invocation of bnxt_ulp_stop()/bnxt_ulp_start() (Kalesh AP) - net: netmem: fix skb_ensure_writable with unreadable skbs (Mina Almasry) - ksmbd: add free_transport ops in ksmbd connection (Namjae Jeon) - workqueue: Initialize wq_isolated_cpumask in workqueue_init_early() (Chuyi Zhou) - e1000e: set fixed clock frequency indication for Nahum 11 and Nahum 13 (Vitaly Lifshits) - ice: fix eswitch code memory leak in reset scenario (Grzegorz Nitka) - net: ice: Perform accurate aRFS flow match (Krishna Kumar) - io_uring/sqpoll: don't put task_struct on tctx setup failure (Jens Axboe) - aoe: clean device rq_list in aoedev_downdev() (Justin Sanders) - pldmfw: Select CRC32 when PLDMFW is selected (Simon Horman) - hwmon: (ltc4282) avoid repeated register write (Nuno Sa) - hwmon: (occ) fix unaligned accesses (Arnd Bergmann) - hwmon: (occ) Rework attribute registration for stack usage (Arnd Bergmann) - drm/i915/pmu: Fix build error with GCOV and AutoFDO enabled (Tzung-Bi Shih) - drm/nouveau/bl: increase buffer size to avoid truncate warning (Jacob Keller) - ionic: Prevent driver/fw getting out of sync on devcmd(s) (Brett Creeley) - drm/ssd130x: fix ssd132x_clear_screen() columns (John Keeping) - drm/msm/a7xx: Call CP_RESET_CONTEXT_STATE (Connor Abbott) - drm/msm: Fix CP_RESET_CONTEXT_STATE bitfield names (Connor Abbott) - drm/msm/dsi/dsi_phy_10nm: Fix missing initial VCO rate (Krzysztof Kozlowski) - drm/msm/disp: Correct porch timing for SDM845 (James A. MacInnes) - smb: fix secondary channel creation issue with kerberos by populating hostname when adding channels (Bharath SM) - ipv6: replace ipcm6_init calls with ipcm6_init_sk (Willem de Bruijn) - ipv6: remove leftover ip6 cookie initializer (Willem de Bruijn) - x86/tools: Drop duplicate unlikely() definition in insn_decoder_test.c (Nathan Chancellor) - Kunit to check the longest symbol length (Sergio Gonzalez Collado) - drm/v3d: Avoid NULL pointer dereference in v3d_job_update_stats() (Maira Canal) - nfsd: use threads array as-is in netlink interface (Jeff Layton) - erofs: remove unused trace event erofs_destroy_inode (Gao Xiang) - bpf: Fix L4 csum update on IPv6 in CHECKSUM_COMPLETE (Paul Chaignon) - net: Fix checksum update for ILA adj-transport (Paul Chaignon) - rust: compile libcore with edition 2024 for 1.87+ (Gary Guo) - kbuild: rust: add rustc-min-version support function (Miguel Ojeda) - drm/amdgpu: read back register after written for VCN v4.0.5 (David (Ming Qiang) Wu) - mm/hugetlb: unshare page tables during VMA split, not before (Jann Horn) - iio: accel: fxls8962af: Fix temperature calculation (Sean Nyekjaer) - ALSA: hda/realtek: Add quirk for Asus GU605C (Richard Fitzgerald) - ALSA: hda/realtek: Fix built-in mic on ASUS VivoBook X513EA (Chris Chiu) - ALSA: hda/realtek: enable headset mic on Latitude 5420 Rugged (Jonathan Lane) - ALSA: hda/realtek - Add mute LED support for HP Victus 16-s1xxx and HP Victus 15-fa1xxx (Edip Hazuri) - ALSA: hda/intel: Add Thinkpad E15 to PM deny list (Takashi Iwai) - ALSA: usb-audio: Rename ALSA kcontrol PCM and PCM1 for the KTMicro sound card (wangdicheng) - arm64: Restrict pagetable teardown to avoid false warning (Dev Jain) - wifi: cfg80211: init wiphy_work before allocating rfkill fails (Edward Adam Davis) - wifi: ath12k: Clear affinity hint before calling ath12k_pci_free_irq() in error path (Manivannan Sadhasivam) - Input: sparcspkr - avoid unannotated fall-through (WangYuli) - cpufreq/amd-pstate: Add missing NULL ptr check in amd_pstate_update (Dhananjay Ugwekar) - wifi: rtw89: phy: add dummy C2H event handler for report of TAS power (Ping-Ke Shih) - atm: Revert atm_account_tx() if copy_from_iter_full() fails. (Kuniyuki Iwashima) - sched_ext, sched/core: Don't call scx_group_set_weight() prematurely from sched_create_group() (Tejun Heo) - platform/x86/intel-uncore-freq: Fail module load when plat_info is NULL (Srinivas Pandruvada) - selinux: fix selinux_xfrm_alloc_user() to set correct ctx_len (Stephen Smalley) - platform/x86: ideapad-laptop: use usleep_range() for EC polling (Rong Zhang) - ksmbd: fix null pointer dereference in destroy_previous_session (Namjae Jeon) - selftests/x86: Add a test to detect infinite SIGTRAP handler loop (Xin Li (Intel)) - x86/virt/tdx: Avoid indirect calls to TDX assembly functions (Kai Huang) - udmabuf: use sgtable-based scatterlist wrappers (Marek Szyprowski) - mm: close theoretical race where stale TLB entries could linger (Ryan Roberts) - net: clear the dst when changing skb protocol (Jakub Kicinski) - net_sched: sch_sfq: reject invalid perturb period (Eric Dumazet) - nvme: always punt polled uring_cmd end_io work to task_work (Jens Axboe) - scsi: s390: zfcp: Ensure synchronous unit_add (Peter Oberparleiter) - scsi: storvsc: Increase the timeouts to storvsc_timeout (Dexuan Cui) - smb: improve directory cache reuse for readdir operations (Bharath SM) - cifs: do not disable interface polling on failure (Shyam Prasad N) - cifs: serialize other channels when query server interfaces is pending (Shyam Prasad N) - cifs: deal with the channel loading lag while picking channels (Shyam Prasad N) - jffs2: check jffs2_prealloc_raw_node_refs() result in few other places (Fedor Pchelkin) - jffs2: check that raw node were preallocated before writing summary (Artem Sadovnikov) - LoongArch: Fix panic caused by NULL-PMD in huge_pte_offset() (Tianyang Zhang) - LoongArch: Avoid using / as 'mask' for csrxchg (Huacai Chen) - LoongArch: vDSO: Correctly use asm parameters in syscall wrappers (Thomas Weissschuh) - platform/loongarch: laptop: Add backlight power control support (Yao Zi) - platform/loongarch: laptop: Unregister generic_sub_drivers on exit (Yao Zi) - platform/loongarch: laptop: Get brightness setting from EC on probe (Yao Zi) - drivers/rapidio/rio_cm.c: prevent possible heap overwrite (Andrew Morton) - io_uring: fix task leak issue in io_wq_create() (Penglei Jiang) - io_uring/kbuf: don't truncate end buffer for multiple buffer peeks (Jens Axboe) - powerpc/eeh: Fix missing PE bridge reconfiguration during VFIO EEH recovery (Narayana Murty N) - powerpc/vdso: Fix build of VDSO32 with pcrel (Christophe Leroy) - platform/x86: dell_rbu: Stop overwriting data buffer (Stuart Hayes) - platform/x86: dell_rbu: Fix list usage (Stuart Hayes) - platform/x86/amd: pmf: Prevent amd_pmf_tee_deinit() from running twice (Mario Limonciello) - platform/x86/amd: pmc: Clear metrics table at start of cycle (Mario Limonciello) - fs/xattr.c: fix simple_xattr_list() (Stephen Smalley) - Revert 'bus: ti-sysc: Probe for l4_wkup and l4_cfg interconnect devices first' (Alexander Sverdlin) - tee: Prevent size calculation wraparound on 32-bit kernels (Jann Horn) - ARM: OMAP2+: Fix l4ls clk domain handling in STANDBY (Sukrut Bellary) - bus: fsl-mc: increase MC_CMD_COMPLETION_TIMEOUT_MS value (Laurentiu Tudor) - watchdog: da9052_wdt: respect TWDMIN (Marcus Folkesson) - fbcon: Make sure modelist not set on unregistered console (Kees Cook) - net/mlx5: HWS, Harden IP version definer checks (Vlad Dogaru) - wifi: ath12k: Pass correct values of center freq1 and center freq2 for 160 MHz (Suraj P Kizhakkethil) - wifi: ath12k: fix incorrect CE addresses (Balamurugan S) - wifi: ath12k: fix link valid field initialization in the monitor Rx (Hari Chandrakanthan) - wifi: ath11k: determine PM policy based on machine model (Baochen Qiang) - octeontx2-pf: Add error log forcn10k_map_unmap_rq_policer() (Wentao Liang) - net: ethernet: cortina: Use TOE/TSO on all TCP (Linus Walleij) - bpf, sockmap: Fix data lost during EAGAIN retries (Jiayuan Chen) - f2fs: fix to set atomic write status more clear (Chao Yu) - usbnet: asix AX88772: leave the carrier control to phylink (Krzysztof Halasa) - ice: fix check for existing switch rule (Mateusz Pacuszka) - RDMA/hns: initialize db in update_srq_db() (Chen Linxuan) - ixgbe: Fix unreachable retry logic in combined and byte I2C write functions (Rand Deeb) - i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Kyungwook Boo) - sock: Correct error checking condition for (assign|release)_proto_idx() (Zijun Hu) - scsi: lpfc: Use memcpy() for BIOS version (Daniel Wagner) - wifi: ath12k: fix failed to set mhi state error during reboot with hardware grouping (Aditya Kumar Singh) - pinctrl: mcp23s08: Reset all pins to input at probe (Mike Looijmans) - isofs: fix Y2038 and Y2156 issues in Rock Ridge TF entry (Jonas 'Sortie' Termansen) - software node: Correct a OOB check in software_node_get_reference_args() (Zijun Hu) - net: ethernet: ti: am65-cpsw: handle -EPROBE_DEFER (Michael Walle) - wifi: ath12k: using msdu end descriptor to check for rx multicast packets (Sarika Sharma) - bnxt_en: Remove unused field 'ref_count' in struct bnxt_ulp (Kalesh AP) - vxlan: Do not treat dst cache initialization errors as fatal (Ido Schimmel) - net: bridge: mcast: re-implement br_multicast_{enable, disable}_port functions (Yong Wang) - net: bridge: mcast: update multicast contex when vlan state is changed (Yong Wang) - wifi: iwlwifi: Add missing MODULE_FIRMWARE for Qu-c0-jf-b0 (Victor Gonzalo) - Revert 'mac80211: Dynamically set CoDel parameters per station' (Toke Hoiland-Jorgensen) - wifi: mac80211: VLAN traffic in multicast path (Muna Sinada) - bpf: Use proper type to calculate bpf_raw_tp_null_args.mask index (Shung-Hsi Yu) - net/mlx5: HWS, Fix IP version decision (Vlad Dogaru) - netdevsim: Mark NAPI ID on skb in nsim_rcv (Joe Damato) - wifi: mac80211_hwsim: Prevent tsf from setting if beacon is disabled (Edward Adam Davis) - wifi: rtw89: 8922a: fix TX fail with wrong VCO setting (Kuan-Chung Chen) - wifi: iwlwifi: pcie: make sure to lock rxq-read (Miri Korenblit) - iommu/amd: Ensure GA log notifier callbacks finish running before module unload (Sean Christopherson) - scsi: smartpqi: Add new PCI IDs (David Strahan) - scsi: lpfc: Fix lpfc_check_sli_ndlp() handling for GEN_REQUEST64 commands (Justin Tee) - libbpf: Add identical pointer detection to btf_dedup_is_equiv() (Alan Maguire) - netfilter: nft_set_pipapo: clamp maximum map bucket size to INT_MAX (Pablo Neira Ayuso) - f2fs: fix to bail out in get_new_segment() (Chao Yu) - wifi: iwlwifi: mvm: fix beacon CCK flag (Johannes Berg) - hid-asus: check ROG Ally MCU version and warn (Luke D. Jones) - clk: rockchip: rk3036: mark ddrphy as critical (Heiko Stuebner) - wifi: mac80211: do not offer a mesh path if forwarding is disabled (Benjamin Berg) - wireless: purelifi: plfxlc: fix memory leak in plfxlc_usb_wreq_asyn() (Salah Triki) - net: vertexcom: mse102x: Return code for mse102x_rx_pkt_spi (Stefan Wahren) - net: mlx4: add SOF_TIMESTAMPING_TX_SOFTWARE flag when getting ts info (Jason Xing) - pinctrl: armada-37xx: propagate error from armada_37xx_gpio_get() (Gabor Juhos) - libbpf: Check bpf_map_skeleton link for NULL (Mykyta Yatsenko) - pinctrl: armada-37xx: propagate error from armada_37xx_pmx_gpio_set_direction() (Gabor Juhos) - net: stmmac: generate software timestamp just before the doorbell (Jason Xing) - bpf: Pass the same orig_call value to trampoline functions (Ilya Leoshkevich) - pinctrl: armada-37xx: propagate error from armada_37xx_gpio_get_direction() (Gabor Juhos) - pinctrl: armada-37xx: propagate error from armada_37xx_pmx_set_by_name() (Gabor Juhos) - net: atlantic: generate software timestamp just before the doorbell (Jason Xing) - xfrm: validate assignment of maximal possible SEQ number (Leon Romanovsky) - net: page_pool: Don't recycle into cache on PREEMPT_RT (Sebastian Andrzej Siewior) - ipv4/route: Use this_cpu_inc() for stats on PREEMPT_RT (Sebastian Andrzej Siewior) - x86/sgx: Prevent attempts to reclaim poisoned pages (Andrew Zaborowski) - tcp: add receive queue awareness in tcp_rcv_space_adjust() (Eric Dumazet) - tcp: fix initial tp-rcvq_space.space value for passive TS enabled flows (Eric Dumazet) - tcp: remove zero TCP TS samples for autotuning (Eric Dumazet) - tcp: always seek for minimal rtt in tcp_rcv_rtt_update() (Eric Dumazet) - wifi: rtw89: leave idle mode when setting WEP encryption for AP mode (Dian-Syuan Yang) - iommu/amd: Allow matching ACPI HID devices without matching UIDs (Mario Limonciello) - wifi: ath11k: Fix QMI memory reuse logic (Muhammad Usama Anjum) - wifi: ath12k: fix a possible dead lock caused by ab-base_lock (Baochen Qiang) - wifi: ath12k: fix macro definition HAL_RX_MSDU_PKT_LENGTH_GET (Kang Yang) - net: dlink: add synchronization for stats update (Moon Yeounsu) - clk: qcom: gcc-x1e80100: Set FORCE MEM CORE for UFS clocks (Taniya Das) - i2c: npcm: Add clock toggle recovery (Tali Perry) - i2c: tegra: check msg length in SMBUS block read (Akhil R) - cpufreq: scmi: Skip SCMI devices that aren't used by the CPUs (Mike Tipton) - libbpf/btf: Fix string handling to support multi-split BTF (Alan Maguire) - sctp: Do not wake readers in __sctp_write_space() (Petr Malat) - wifi: mac80211: validate SCAN_FLAG_AP in scan request during MLO (Aditya Kumar Singh) - wifi: mt76: mt7925: introduce thermal protection (Leon Yen) - wifi: mt76: mt7921: add 160 MHz AP for mt7922 device (Samuel Williams) - wifi: mt76: mt76x2: Add support for LiteOn WN4516R,WN4519R (Henk Vergonet) - Bluetooth: btusb: Add new VID/PID 13d3/3630 for MT7925 (Jiande Lu) - emulex/benet: correct command version selection in be_cmd_get_stats() (Alok Tiwari) - wifi: mt76: mt7996: drop fragments with multicast or broadcast RA (Benjamin Lin) - i2c: designware: Invoke runtime suspend on quick slave re-registration (Tan En De) - Bluetooth: btusb: Add new VID/PID 13d3/3584 for MT7922 (Liwei Sun) - bpf: Check rcu_read_lock_trace_held() in bpf_map_lookup_percpu_elem() (Hou Tao) - f2fs: use vmalloc instead of kvmalloc in .init_{,de}compress_ctx (Chao Yu) - tipc: use kfree_sensitive() for aead cleanup (Zilin Guan) - net: lan743x: Modify the EEPROM and OTP size for PCI1xxxx devices (Rengarajan S) - net: macb: Check return value of dma_set_mask_and_coherent() (Sergio Perez Gonzalez) - ACPI: battery: negate current when discharging (Peter Marheine) - power: supply: max17040: adjust thermal channel scaling (Svyatoslav Ryhel) - PM: runtime: fix denying of auto suspend in pm_suspend_timer_fn() (Charan Teja Kalla) - gpiolib: of: Add polarity quirk for s5m8767 (Peng Fan) - Make 'cc-option' work correctly for the -Wno-xyzzy pattern (Linus Torvalds) - ASoC: tegra210_ahub: Add check to of_device_get_match_data() (Yuanjun Gong) - platform-msi: Add msi_remove_device_irq_domain() in platform_device_msi_free_irqs_all() (Frank Li) - ACPICA: utilities: Fix overflow check in vsnprintf() (gldrk) - pmdomain: core: Reset genpd-states to avoid freeing invalid data (Ulf Hansson) - power: supply: bq27xxx: Retrieve again when busy (Jerry Lv) - ALSA: hda: cs35l41: Fix swapped l/r audio channels for Acer Helios laptops (Stefan Binding) - ACPICA: Apply pack(1) to union aml_resource (Tamir Duberstein) - ACPICA: fix acpi parse and parseext cache leaks (Seunghun Han) - ACPI: Add missing prototype for non CONFIG_SUSPEND/CONFIG_X86 case (Mario Limonciello) - ACPI: bus: Bail out if acpi_kobj registration fails (Armin Wolf) - ASoC: intel/sdw_utils: Assign initial value in asoc_sdw_rt_amp_spk_rtd_init() (I Hsin Cheng) - ASoC: tas2770: Power cycle amp on ISENSE/VSENSE change (Hector Martin) - ACPICA: Avoid sequence overread in call to strncmp() (Ahmed Salem) - mmc: Add quirk to disable DDR50 tuning (Erick Shepherd) - power: supply: collie: Fix wakeup source leaks on device unbind (Krzysztof Kozlowski) - clocksource: Fix the CPUs' choice in the watchdog per CPU verification (Guilherme G. Piccoli) - ASoC: amd: yc: Add quirk for Lenovo Yoga Pro 7 14ASP9 (Talhah Peerbhai) - ACPICA: fix acpi operand cache leak in dswstate.c (Seunghun Han) - iio: adc: ad7606_spi: fix reg write value mask (David Lechner) - iio: adc: ti-ads1298: Kconfig: add kfifo dependency to fix module build (Arthur-Prince) - iio: adc: ad7944: mask high bits on direct read (David Lechner) - iio: imu: inv_icm42600: Fix temperature calculation (Sean Nyekjaer) - mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (Jann Horn) - dummycon: Trigger redraw when switching consoles with deferred takeover (Thomas Zimmermann) - accel/ivpu: Fix warning in ivpu_gem_bo_free() (Jacek Lawrynowicz) - accel/ivpu: Use dma_resv_lock() instead of a custom mutex (Jacek Lawrynowicz) - accel/ivpu: Use firmware names from upstream repo (Jacek Lawrynowicz) - accel/ivpu: Improve buffer object logging (Jacek Lawrynowicz) - iio: accel: fxls8962af: Fix temperature scan element sign (Sean Nyekjaer) - PCI: dw-rockchip: Fix PHY function call sequence in rockchip_pcie_phy_deinit() (Diederik de Haas) - PCI: dw-rockchip: Remove PCIE_L0S_ENTRY check from rockchip_pcie_link_up() (Shawn Lin) - PCI: Fix lock symmetry in pci_slot_unlock() (Ilpo Jarvinen) - PCI: Add ACS quirk for Loongson PCIe (Huacai Chen) - PCI: dwc: ep: Correct PBA offset in .set_msix() callback (Niklas Cassel) - PCI: cadence-ep: Correct PBA offset in .set_msix() callback (Niklas Cassel) - uio_hv_generic: Align ring size to system page (Long Li) - uio_hv_generic: Use correct size for interrupt and monitor pages (Long Li) - Drivers: hv: Allocate interrupt and monitor pages aligned to system page boundary (Long Li) - smb: client: add NULL check in automount_fullpath (Ruben Devos) - cifs: dns resolution is needed only for primary channel (Shyam Prasad N) - cifs: update dstaddr whenever channel iface is updated (Shyam Prasad N) - cifs: reset connections for all channels when reconnect requested (Shyam Prasad N) - remoteproc: k3-m4: Don't assert reset in detach routine (Beleswar Padhi) - remoteproc: core: Release rproc-clean_table after rproc_attach() fails (Xiaolei Wang) - remoteproc: core: Cleanup acquired resources when rproc_handle_resources() fails in rproc_attach() (Xiaolei Wang) - regulator: max14577: Add error check for max14577_read_reg() (Wentao Liang) - ovl: Fix nested backing file paths (Andre Almeida) - mips: Add -std= flag specified in KBUILD_CFLAGS to vdso CFLAGS (Khem Raj) - staging: iio: ad5933: Correct settling cycles encoding per datasheet (Gabriel Shahrouzi) - pwm: axi-pwmgen: fix missing separate external clock (David Lechner) - video: screen_info: Relocate framebuffers behind PCI bridges (Thomas Zimmermann) - sysfb: Fix screen_info type check for VGA (Thomas Zimmermann) - KVM: s390: rename PROT_NONE to PROT_TYPE_DUMMY (Lorenzo Stoakes) - net: ch9200: fix uninitialised access during mii_nway_restart (Qasim Ijaz) - phy: fsl-imx8mq-usb: fix phy_tx_vboost_level_from_property() (Xu Yang) - dm: lock limits when reading them (Mikulas Patocka) - ftrace: Fix UAF when lookup kallsym after ftrace disabled (Ye Bin) - mtd: rawnand: qcom: Fix read len for onfi param page (Md Sadre Alam) - dm-verity: fix a memory leak if some arguments are specified multiple times (Mikulas Patocka) - dm-mirror: fix a tiny race condition (Mikulas Patocka) - KVM: VMX: Flush shadow VMCS on emergency reboot (Chao Gao) - KVM: SVM: Clear current_vmcb during vCPU free for all *possible* CPUs (Yosry Ahmed) - mtd: nand: sunxi: Add randomizer configuration before randomizer enable (Wentao Liang) - mtd: rawnand: sunxi: Add randomizer configuration in sunxi_nfc_hw_ecc_write_chunk (Wentao Liang) - firmware: arm_scmi: Ensure that the message-id supports fastchannel (Sibi Sankar) - configfs-tsm-report: Fix NULL dereference of tsm_ops (Dan Williams) - soc: qcom: pmic_glink_altmode: fix spurious DP hotplug events (Johan Hovold) - mm: fix ratelimit_pages update error in dirty_ratio_handler() (Jinliang Zheng) - RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (Shin'ichiro Kawasaki) - watchdog: fix watchdog may detect false positive of softlockup (Luo Gengkun) - ipc: fix to protect IPCS lookups using RCU (Jeongjun Park) - clk: meson-g12a: add missing fclk_div2 to spicc (Da Xue) - parisc: fix building with gcc-15 (Arnd Bergmann) - vgacon: Add check for vc_origin address range in vgacon_scroll() (GONG Ruiqi) - parisc/unaligned: Fix hex output to show 8 hex chars (Helge Deller) - fbdev: Fix fb_set_var to prevent null-ptr-deref in fb_videomode_to_var (Murad Masimov) - EDAC/altera: Use correct write width with the INTTEST register (Niravkumar L Rabara) - fbdev: Fix do_register_framebuffer to prevent null-ptr-deref in fb_videomode_to_var (Murad Masimov) - iommu/vt-d: Restore context entry setup order for aliased devices (Lu Baolu) - net: ftgmac100: select FIXED_PHY (Heiner Kallweit) - net/sched: fix use-after-free in taprio_dev_notifier (Hyunwoo Kim) - NFC: nci: uart: Set tty-disc_data only in success path (Krzysztof Kozlowski) - hwmon: (ftsteutates) Fix TOCTOU race in fts_read() (Gui-Dong Han) - f2fs: fix to do sanity check on sit_bitmap_size (Chao Yu) - f2fs: prevent kernel warning due to negative i_nlink from corrupted image (Jaegeuk Kim) - f2fs: fix to do sanity check on ino and xnid (Chao Yu) - Input: gpio-keys - fix possible concurrent access in gpio_keys_irq_timer() (Gatien Chevallier) - Input: ims-pcu - check record size in ims_pcu_flash_firmware() (Dan Carpenter) - ext4: only dirty folios when data journaling regular files (Brian Foster) - ext4: ensure i_size is smaller than maxbytes (Zhang Yi) - ext4: factor out ext4_get_maxbytes() (Zhang Yi) - ext4: fix calculation of credits for extent tree modification (Jan Kara) - ext4: inline: fix len overflow in ext4_prepare_inline_data (Thadeu Lima de Souza Cascardo) - bus: fsl-mc: fix GET/SET_TAILDROP command ids (Wan Junjie) - bus: fsl-mc: do not add a device-link for the UAPI used DPMCP device (Ioana Ciornei) - ata: ahci: Disallow LPM for Asus B550-F motherboard (Mikko Korhonen) - ata: ahci: Disallow LPM for ASUSPRO-D840SA motherboard (Niklas Cassel) - ata: pata_via: Force PIO for ATAPI devices on VT6415/VT6330 (Tasos Sahanidis) - bus: firewall: Fix missing static inline annotations for stubs (Krzysztof Kozlowski) - cgroup,freezer: fix incomplete freezing when attaching tasks (Chen Ridong) - ceph: set superblock s_magic for IMA fsmagic matching (Dennis Marttinen) - ceph: avoid kernel BUG for encrypted inode with unaligned file size (Viacheslav Dubeyko) - can: tcan4x5x: fix power regulator retrieval during probe (Brett Werling) - can: kvaser_pciefd: refine error prone echo_skb_max handling logic (Fedor Pchelkin) - bus: mhi: host: Fix conflict between power_up and SYSERR (Jeff Hugo) - bus: mhi: ep: Update read pointer only after buffer is written (Sumit Kumar) - block: Clear BIO_EMULATES_ZONE_APPEND flag on BIO completion (Damien Le Moal) - ASoC: codecs: wcd937x: Drop unused buck_supply (Krzysztof Kozlowski) - ASoC: codecs: wcd9375: Fix double free of regulator supplies (Krzysztof Kozlowski) - ARM: omap: pmic-cpcap: do not mess around without CPCAP or OMAP4 (Andreas Kemnade) - ARM: 9447/1: arm/memremap: fix arch_memremap_can_ram_remap() (Ross Stutterheim) - arm64/mm: Close theoretical race where stale TLB entry remains valid (Ryan Roberts) - media: uvcvideo: Fix deferred probing error (Ricardo Ribalda) - media: uvcvideo: Send control events for partial succeeds (Ricardo Ribalda) - media: uvcvideo: Return the number of processed controls (Ricardo Ribalda) - media: imx-jpeg: Cleanup after an allocation error (Ming Qian) - media: imx-jpeg: Reset slot data pointers when freed (Ming Qian) - media: imx-jpeg: Move mxc_jpeg_free_slot_data() ahead (Ming Qian) - media: imx-jpeg: Drop the first error frames (Ming Qian) - media: vivid: Change the siize of the composing (Denis Arefev) - media: vidtv: Terminating the subsequent process of initialization failure (Edward Adam Davis) - media: videobuf2: use sgtable-based scatterlist wrappers (Marek Szyprowski) - media: venus: Fix probe error handling (Loic Poulain) - media: v4l2-dev: fix error handling in __video_register_device() (Ma Ke) - media: omap3isp: use sgtable-based scatterlist wrappers (Marek Szyprowski) - media: mediatek: vcodec: Correct vsi_core framebuffer size (Fei Shao) - media: ipu6: Remove workaround for Meteor Lake ES2 (Hao Yao) - media: intel/ipu6: Fix dma mask for non-secure mode (Stanislaw Gruszka) - media: imagination: fix a potential memory leak in e5010_probe() (Haoxiang Li) - media: i2c: imx335: Fix frame size enumeration (Kieran Bingham) - media: gspca: Add error handling for stv06xx_read_sensor() (Wentao Liang) - media: davinci: vpif: Fix memory leak in probe error path (Dmitry Nikiforov) - media: cxusb: no longer judge rbuf when the write fails (Edward Adam Davis) - media: ccs-pll: Check for too high VT PLL multiplier in dual PLL case (Sakari Ailus) - media: ccs-pll: Correct the upper limit of maximum op_pre_pll_clk_div (Sakari Ailus) - media: ccs-pll: Start OP pre-PLL multiplier search from correct value (Sakari Ailus) - media: ov2740: Move pm-runtime cleanup on probe-errors to proper place (Hans de Goede) - media: ccs-pll: Start VT pre-PLL multiplier search from correct value (Sakari Ailus) - media: i2c: ds90ub913: Fix returned fmt from .set_fmt() (Tomi Valkeinen) - media: nxp: imx8-isi: better handle the m2m usage_count (Laurentiu Palcu) - media: imx335: Use correct register width for HNUM (Umang Jain) - media: ov5675: suppress probe deferral errors (Johan Hovold) - media: ov8856: suppress probe deferral errors (Johan Hovold) - wifi: rtlwifi: disable ASPM for RTL8723BE with subsystem ID 11ad:1723 (Mingcong Bai) - wifi: rtw88: usb: Reduce control message timeout to 500 ms (Bitterblue Smith) - svcrdma: Unregister the device if svc_rdma_accept() fails (Chuck Lever) - jbd2: fix data-race and null-ptr-deref in jbd2_journal_dirty_metadata() (Jeongjun Park) - wifi: ath12k: fix ring-buffer corruption (Johan Hovold) - fs/nfs/read: fix double-unlock bug in nfs_return_empty_folio() (Max Kellermann) - NFSv4: Don't check for OPEN feature support in v4.1 (Scott Mayhew) - SUNRPC: Prevent hang on NFS mount with xprtsec=[m]tls (Chuck Lever) - nfsd: Initialize ssc before laundromat_work to prevent NULL dereference (Li Lingfeng) - nfsd: nfsd4_spo_must_allow() must check this is a v4 compound request (NeilBrown) - NFSD: Implement FATTR4_CLONE_BLKSIZE attribute (Chuck Lever) - NFSD: fix race between nfsd registration and exports_proc (Maninder Singh) - NFSD: unregister filesystem in case genl_register_family() fails (Maninder Singh) - wifi: ath11k: fix ring-buffer corruption (Johan Hovold) - wifi: rtw88: usb: Upload the firmware in bigger chunks (Bitterblue Smith) - wifi: ath11k: fix rx completion meta data corruption (Johan Hovold) - wifi: mt76: mt7925: fix host interrupt register initialization (Michael Lo) - wifi: p54: prevent buffer-overflow in p54_rx_eeprom_readback() (Christian Lamparter) - net/mlx5: Add error handling in mlx5_query_nic_vport_node_guid() (Wentao Liang) - net/mlx5_core: Add error handling inmlx5_query_nic_vport_qkey_viol_cntr() (Wentao Liang) - regulator: max20086: Change enable gpio to optional (Joao Paulo Goncalves) - regulator: max20086: Fix MAX200086 chip id (Joao Paulo Goncalves) - s390/pci: Serialize device addition and removal (Niklas Schnelle) - s390/pci: Allow re-add of a reserved but not yet removed device (Niklas Schnelle) - s390/pci: Prevent self deletion in disable_slot() (Niklas Schnelle) - s390/pci: Remove redundant bus removal and disable from zpci_release_device() (Niklas Schnelle) - powerpc/pseries/msi: Avoid reading PCI device registers in reduced power states (Gautam Menghani) - io_uring/kbuf: account ring io_buffer_list memory (Pavel Begunkov) - io_uring: account drain memory to cgroup (Pavel Begunkov) - ASoC: amd: sof_amd_sdw: Fix unlikely uninitialized variable use in create_sdw_dailinks() (Vijendar Mukunda) - ASoC: meson: meson-card-utils: use of_property_present() for DT parsing (Martin Blumenstingl) - ASoC: qcom: sdm845: Add error handling in sdm845_slim_snd_hw_params() (Wentao Liang) - crypto: qat - add shutdown handler to qat_dh895xcc (Giovanni Cabiddu) - crypto: qat - add shutdown handler to qat_c62x (Giovanni Cabiddu) - crypto: qat - add shutdown handler to qat_4xxx (Giovanni Cabiddu) - crypto: qat - add shutdown handler to qat_420xx (Giovanni Cabiddu) - crypto: qat - add shutdown handler to qat_c3xxx (Giovanni Cabiddu) - gfs2: move msleep to sleepable context (Alexander Aring) - crypto: marvell/cesa - Do not chain submitted requests (Herbert Xu) - configfs: Do not override creating attribute file failure in populate_attrs() (Zijun Hu) - LTS version: v6.12.34 (Jack Vogel) - thermal/drivers/mediatek/lvts: Remove unused lvts_debugfs_exit (Arnd Bergmann) - drm/meson: Use 1000ULL when operating with mode-clock (I Hsin Cheng) - gfs2: Don't clear sb-s_fs_info in gfs2_sys_fs_add (Andrew Price) - overflow: Introduce __DEFINE_FLEX for having no initializer (Kees Cook) - net: usb: aqc111: debug info before sanitation (Oliver Neukum) - usb: misc: onboard_usb_dev: fix build warning for CONFIG_USB_ONBOARD_DEV_USB5744=n (Arnd Bergmann) - regulator: dt-bindings: mt6357: Drop fixed compatible requirement (Nicolas F. R. A. Prado) - calipso: unlock rcu before returning -EAFNOSUPPORT (Eric Dumazet) - x86/fred/signal: Prevent immediate repeat of single step trap on return from SIGTRAP handler (Xin Li (Intel)) - x86/iopl: Cure TIF_IO_BITMAP inconsistencies (Thomas Gleixner) - xen/arm: call uaccess_ttbr0_enable for dm_op hypercall (Stefano Stabellini) - xfs: don't assume perags are initialised when trimming AGs (Dave Chinner) - ring-buffer: Move cpus_read_lock() outside of buffer-mutex (Steven Rostedt) - ring-buffer: Fix buffer locking in ring_buffer_subbuf_order_set() (Dmitry Antipov) - ring-buffer: Do not trigger WARN_ON() due to a commit_overrun (Steven Rostedt) - 9p: Add a migrate_folio method (Matthew Wilcox (Oracle)) - usb: typec: tcpm: move tcpm_queue_vdm_unlocked to asynchronous work (RD Babiera) - usb: typec: tcpm/tcpci_maxim: Fix bounds check in process_rx() (Amit Sunil Dhamne) - usb: Flush altsetting 0 endpoints before reinitializating them after reset. (Mathias Nyman) - usb: cdnsp: Fix issue with detecting USB 3.2 speed (Pawel Laszczak) - usb: cdnsp: Fix issue with detecting command completion event (Pawel Laszczak) - usb: misc: onboard_usb_dev: Fix usb5744 initialization sequence (Jonathan Stroud) - tty: serial: 8250_omap: fix TX with DMA for am33xx (Jiri Slaby (SUSE)) - VMCI: fix race between vmci_host_setup_notify and vmci_ctx_unset_notify (Wupeng Ma) - usb: usbtmc: Fix read_stb function and get_stb ioctl (Dave Penkler) - nvmem: zynqmp_nvmem: unbreak driver after cleanup (Peter Korsgaard) - posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (Oleg Nesterov) - HID: usbhid: Eliminate recurrent out-of-bounds bug in usbhid_parse() (Terry Junge) - ALSA: usb-audio: Add implicit feedback quirk for RODE AI-1 (David Heimann) - Revert 'wifi: mwifiex: Fix HT40 bandwidth issue.' (Francesco Dolcini) - tools/resolve_btfids: Fix build when cross compiling kernel with clang. (Suleiman Souhlal) - objtool/rust: relax slice condition to cover more noreturn Rust functions (Miguel Ojeda) - block: Fix bvec_set_folio() for very large folios (Matthew Wilcox (Oracle)) - bio: Fix bio_first_folio() for SPARSEMEM without VMEMMAP (Matthew Wilcox (Oracle)) - io_uring: consistently use rcu semantics with sqpoll thread (Keith Busch) - block: don't use submit_bio_noacct_nocheck in blk_zone_wplug_bio_work (Christoph Hellwig) - io_uring: fix use-after-free of sq-thread in __io_uring_show_fdinfo() (Penglei Jiang) - block: use q-elevator with -elevator_lock held in elv_iosched_show() (Ming Lei) - perf: Ensure bpf_perf_link path is properly serialized (Peter Zijlstra) - nvmet-fcloop: access fcpreq only when holding reqlock (Daniel Wagner) - btrfs: exit after state split error at set_extent_bit() (Filipe Manana) - gfs2: pass through holder from the VFS for freeze/thaw (Christian Brauner) - fs/filesystems: Fix potential unsigned integer underflow in fs_name() (Zijun Hu) - btrfs: exit after state insertion failure at btrfs_convert_extent_bit() (Filipe Manana) - net: drv: netdevsim: don't napi_complete() from netpoll (Jakub Kicinski) - net_sched: ets: fix a race in ets_qdisc_change() (Eric Dumazet) - net_sched: tbf: fix a race in tbf_change() (Eric Dumazet) - net_sched: red: fix a race in __red_change() (Eric Dumazet) - net_sched: prio: fix a race in prio_tune() (Eric Dumazet) - net/mlx5e: Fix leak of Geneve TLV option object (Jianbo Liu) - net/mlx5: HWS, fix missing ip_version handling in definer (Yevgeny Kliteynik) - net/mlx5: Fix return value when searching for existing flow group (Patrisious Haddad) - net/mlx5: Fix ECVF vports unload on shutdown flow (Amir Tzin) - net/mlx5: Ensure fw pages are always allocated on same NUMA (Moshe Shemesh) - Bluetooth: MGMT: Fix sparse errors (Luiz Augusto von Dentz) - Bluetooth: eir: Fix possible crashes on eir_create_adv_data (Luiz Augusto von Dentz) - Bluetooth: hci_sync: Fix broadcast/PA when using an existing instance (Luiz Augusto von Dentz) - Bluetooth: Fix NULL pointer deference on eir_get_service_data (Luiz Augusto von Dentz) - net/mdiobus: Fix potential out-of-bounds clause 45 read/write access (Jakub Raczynski) - net/mdiobus: Fix potential out-of-bounds read/write access (Jakub Raczynski) - macsec: MACsec SCI assignment for ES = 0 (Carlos Fernandez) - net: Fix TOCTOU issue in sk_is_readable() (Michal Luczaj) - ACPI: CPPC: Fix NULL pointer dereference when nosmp is used (Yunhui Cui) - i40e: retry VFLR handling if there is ongoing VF reset (Robert Malz) - i40e: return false from i40e_reset_vf if reset is in progress (Robert Malz) - drm/meson: fix more rounding issues with 59.94Hz modes (Martin Blumenstingl) - drm/meson: use vclk_freq instead of pixel_freq in debug print (Martin Blumenstingl) - drm/meson: fix debug log statement when setting the HDMI clocks (Martin Blumenstingl) - drm/meson: use unsigned long long / Hz for frequency types (Martin Blumenstingl) - powerpc/vas: Return -EINVAL if the offset is non-zero in mmap() (Haren Myneni) - powerpc/powernv/memtrace: Fix out of bounds issue in memtrace mmap (Ritesh Harjani (IBM)) - net_sched: sch_sfq: fix a potential crash on gso_skb handling (Eric Dumazet) - scsi: iscsi: Fix incorrect error path labels for flashnode operations (Alok Tiwari) - pinctrl: qcom: pinctrl-qcm2290: Add missing pins (Wojciech Slenska) - spi: omap2-mcspi: Disable multi-mode when the previous message kept CS asserted (Felix Piedallu) - spi: omap2-mcspi: Disable multi mode when CS should be kept asserted after message (Felix Piedallu) - regulator: max20086: Fix refcount leak in max20086_parse_regulators_dt() (Dan Carpenter) - wifi: ath12k: fix GCC_GCC_PCIE_HOT_RST definition for WCN7850 (Baochen Qiang) - wifi: ath12k: refactor ath12k_hw_regs structure (P Praneesh) - wifi: ath11k: validate ath11k_crypto_mode on top of ath11k_core_qmi_firmware_ready (Rodrigo Gobbi) - wifi: ath11k: move some firmware stats related functions outside of debugfs (Baochen Qiang) - wifi: ath11k: don't wait when there is no vdev started (Baochen Qiang) - wifi: ath11k: don't use static variables in ath11k_debugfs_fw_stats_process() (Baochen Qiang) - wifi: ath11k: avoid burning CPU in ath11k_debugfs_fw_stats_request() (Baochen Qiang) - wifi: ath11k: convert timeouts to secs_to_jiffies() (Easwar Hariharan) - ath10k: snoc: fix unbalanced IRQ enable in crash recovery (Caleb Connolly) - ptp: remove ptp-n_vclocks check logic in ptp_vclock_in_use() (Jeongjun Park) - net: dsa: b53: fix untagged traffic sent via cpu tagged with VID 0 (Jonas Gorski) - Bluetooth: MGMT: Protect mgmt_pending list with its own lock (Luiz Augusto von Dentz) - Bluetooth: MGMT: Remove unused mgmt_pending_find_data (Dr. David Alan Gilbert) - Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete (Luiz Augusto von Dentz) - Bluetooth: btintel_pcie: Reduce driver buffer posting to prevent race condition (Chandrashekar Devegowda) - Bluetooth: btintel_pcie: Increase the tx and rx descriptor count (Chandrashekar Devegowda) - Bluetooth: btintel_pcie: Fix driver not posting maximum rx buffers (Kiran K) - Bluetooth: hci_core: fix list_for_each_entry_rcu usage (Pauli Virtanen) - scsi: core: ufs: Fix a hang in the error handler (Sanjeev Yadav) - serial: sh-sci: Move runtime PM enable to sci_probe_single() (Claudiu Beznea) - dt-bindings: pwm: adi,axi-pwmgen: Fix clocks (David Lechner) - dt-bindings: pwm: Correct indentation and style in DTS example (Krzysztof Kozlowski) - dt-bindings: pwm: adi,axi-pwmgen: Increase #pwm-cells to 3 (Uwe Kleine-Konig) - pinctrl: samsung: add gs101 specific eint suspend/resume callbacks (Peter Griffin) - pinctrl: samsung: add dedicated SoC eint suspend/resume callbacks (Peter Griffin) - pinctrl: samsung: refactor drvdata suspend resume callbacks (Peter Griffin) - arm64: dts: qcom: x1e80100: Add GPU cooling (Stephan Gerhold) - arm64: dts: qcom: x1e80100: Apply consistent critical thermal shutdown (Stephan Gerhold) - mmc: sdhci-of-dwcmshc: add PD workaround on RK3576 (Nicolas Frattaroli) - pmdomain: core: Introduce dev_pm_genpd_rpm_always_on() (Ulf Hansson) - Input: synaptics-rmi - fix crash with unsupported versions of F34 (Dmitry Torokhov) - ALSA: hda/realtek: Add support for HP Agusta using CS35L41 HDA (Stefan Binding) - ALSA: hda/realtek - Add new HP ZBook laptop with micmute led fixup (Chris Chiu) - ALSA: hda/realtek - Support mute led function for HP platform (Kailang Yang) - ALSA: hda/realtek: Add support for various HP Laptops using CS35L41 HDA (Stefan Binding) - ALSA: hda/realtek: fix micmute LEDs on HP Laptops with ALC3247 (Chris Chiu) - ALSA: hda/realtek: fix micmute LEDs on HP Laptops with ALC3315 (Chris Chiu) - tools/power turbostat: Fix AMD package-energy reporting (Gautham R. Shenoy) - do_change_type(): refuse to operate on unmounted/not ours mounts (Al Viro) - fix propagation graph breakage by MOVE_MOUNT_SET_GROUP move_mount(2) (Al Viro) - path_overmount(): avoid false negatives (Al Viro) - iov_iter: use iov_offset for length calculation in iov_iter_aligned_bvec (Nitesh Shetty) - ASoC: ti: omap-hdmi: Re-add dai_link-platform to fix card init (Yuuki NAGAO) - ASoC: Intel: avs: Verify content returned by parse_int_array() (Cezary Rojewski) - ASoC: Intel: avs: Fix deadlock when the failing IPC is SET_D0IX (Cezary Rojewski) - ASoC: codecs: hda: Fix RPM usage count underflow (Cezary Rojewski) - scsi: ufs: qcom: Prevent calling phy_exit() before phy_init() (Nitin Rawat) - riscv: misaligned: fix sleeping function called during misaligned access handling (Nylon Chen) - seg6: Fix validation of nexthop addresses (Ido Schimmel) - wireguard: device: enable threaded NAPI (Mirco Barone) - net: wwan: mhi_wwan_mbim: use correct mux_id for multiplexing (Daniele Palmas) - wifi: cfg80211/mac80211: correctly parse S1G beacon optional elements (Lachlan Hodges) - net: dsa: b53: do not touch DLL_IQQD on bcm53115 (Jonas Gorski) - net: dsa: b53: allow RGMII for bcm63xx RGMII ports (Jonas Gorski) - net: dsa: b53: do not enable RGMII delay on bcm63xx (Jonas Gorski) - net: ti: icssg-prueth: Fix swapped TX stats for MII interfaces. (Meghana Malladi) - netfilter: nf_nat: also check reverse tuple to obtain clashing entry (Florian Westphal) - netfilter: nf_set_pipapo_avx2: fix initial map fill (Florian Westphal) - drm/panel-simple: fix the warnings for the Evervision VGG644804 (Michael Walle) - gve: add missing NULL check for gve_alloc_pending_packet() in TX DQO (Alok Tiwari) - nvme: fix command limits status code (Keith Busch) - PM: sleep: Fix power.is_suspended cleanup for direct-complete devices (Rafael J. Wysocki) - selftests: net: build net/lib dependency in all target (Bui Quang Minh) - vmxnet3: correctly report gso type for UDP tunnels (Ronak Doshi) - net: wwan: t7xx: Fix napi rx poll issue (Jinjian Song) - net: fix udp gso skb_segment after pull from frag_list (Shiming Cheng) - drm/i915/guc: Handle race condition where wakeref count drops below 0 (Jesus Narvaez) - drm/i915/psr: Fix using wrong mask in REG_FIELD_PREP (Jouni Hogander) - drm/i915/guc: Check if expecting reply before decrementing outstanding_submission_g2h (Jesus Narvaez) - net: stmmac: make sure that ptp_rate is not 0 before configuring EST (Alexis Lothore) - net: stmmac: make sure that ptp_rate is not 0 before configuring timestamping (Alexis Lothore) - net: dsa: tag_brcm: legacy: fix pskb_may_pull length (Alvaro Fernandez Rojas) - idpf: avoid mailbox timeout delays during reset (Emil Tantilov) - idpf: fix a race in txq wakeup (Brian Vazquez) - ice: fix rebuilding the Tx scheduler tree for large queue counts (Michal Kubiak) - ice: create new Tx scheduler nodes for new queues only (Michal Kubiak) - ice: fix Tx scheduler error handling in XDP callback (Michal Kubiak) - Bluetooth: L2CAP: Fix not responding with L2CAP_CR_LE_ENCRYPTION (Luiz Augusto von Dentz) - spi: bcm63xx-hsspi: fix shared reset (Alvaro Fernandez Rojas) - spi: bcm63xx-spi: fix shared reset (Alvaro Fernandez Rojas) - net: lan966x: Make sure to insert the vlan tags also in host mode (Horatiu Vultur) - net/mlx4_en: Prevent potential integer overflow calculating Hz (Dan Carpenter) - driver: net: ethernet: mtk_star_emac: fix suspend/resume issue (Yanqing Wang) - net: tipc: fix refcount warning in tipc_aead_encrypt (Charalampos Mitrodimas) - gve: Fix RX_BUFFERS_POSTED stat to report per-queue fill_cnt (Alok Tiwari) - net: stmmac: platform: guarantee uniqueness of bus_id (Quentin Schulz) - page_pool: Fix use-after-free in page_pool_recycle_in_ring (Dong Chenchen) - Fix sock_exceed_buf_limit not being triggered in __sk_mem_raise_allocated (Tengteng Yang) - drm/xe: Make xe_gt_freq part of the Documentation (Rodrigo Vivi) - loop: add file_start_write() and file_end_write() (Ming Lei) - USB: typec: fix const issue in typec_match() (Greg Kroah-Hartman) - USB: gadget: udc: fix const issue in gadget_match_driver() (Greg Kroah-Hartman) - iio: adc: mcp3911: fix device dependent mappings for conversion result registers (Marcus Folkesson) - iio: adc: PAC1934: fix typo in documentation link (Marius Cristea) - mei: vsc: Cast tx_buf to (__be32 *) when passed to cpu_to_be32_array() (Hans de Goede) - vt: remove VT_RESIZE and VT_RESIZEX from vt_compat_ioctl() (Nicolas Pitre) - coresight: prevent deactivate active config while enabling the config (Yeoreum Yun) - fpga: fix potential null pointer deref in fpga_mgr_test_img_load_sgt() (Qasim Ijaz) - counter: interrupt-cnt: Protect enable/disable OPs with mutex (Alexander Sverdlin) - coresight: catu: Introduce refcount and spinlock for enabling/disabling (Yabin Cui) - coresight: Fixes device's owner field for registered using coresight_init_driver() (Junhao He) - MIPS: Loongson64: Add missing '#interrupt-cells' for loongson64c_ls7a (WangYuli) - usb: acpi: Prevent null pointer dereference in usb_acpi_add_usb4_devlink() (Chenyuan Yang) - iio: adc: ad7124: Fix 3dB filter frequency reading (Uwe Kleine-Konig) - iio: filter: admv8818: Support frequencies = 2^32 (Brian Pellegrino) - iio: filter: admv8818: fix range calculation (Sam Winchenbach) - iio: filter: admv8818: fix integer overflow (Sam Winchenbach) - iio: filter: admv8818: fix band 4, state 15 (Sam Winchenbach) - thunderbolt: Fix a logic error in wake on connect (Mario Limonciello) - serial: Fix potential null-ptr-deref in mlb_usio_probe() (Henry Martin) - usb: renesas_usbhs: Reorder clock handling and power management in probe (Lad Prabhakar) - PCI: endpoint: Retain fixed-size BAR size as well as aligned size (Jerome Brunet) - rtc: loongson: Add missing alarm notifications for ACPI RTC events (Liu Dalin) - PCI/DPC: Log Error Source ID only when valid (Bjorn Helgaas) - PCI/DPC: Initialize aer_err_info before using it (Bjorn Helgaas) - PCI/ACPI: Fix allocated memory release on error in pci_acpi_scan_root() (Zhe Qiao) - dmaengine: ti: Add NULL check in udma_probe() (Henry Martin) - phy: qcom-qmp-usb: Fix an NULL vs IS_ERR() bug (Chenyuan Yang) - PCI: apple: Use gpiod_set_value_cansleep in probe flow (Hector Martin) - PCI: cadence: Fix runtime atomic count underflow (Hans Zhang) - PCI: rcar-gen4: set ep BAR4 fixed size (Jerome Brunet) - PCI: Print the actual delay time in pci_bridge_wait_for_secondary_bus() (Wilfred Mallawa) - phy: rockchip: samsung-hdptx: Do no set rk_hdptx_phy-rate in case of errors (Cristian Ciocaltea) - phy: rockchip: samsung-hdptx: Fix clock ratio setup (Cristian Ciocaltea) - rtc: sh: assign correct interrupts with DT (Wolfram Sang) - rust: alloc: add missing invariant in Vec::set_len() (Danilo Krummrich) - cifs: Fix validation of SMB1 query reparse point response (Pali Rohar) - perf callchain: Always populate the addr_location map when adding IP (Ian Rogers) - perf trace: Set errpid to false for rseq and set_robust_list (Anubhav Shelat) - nfs: ignore SB_RDONLY when remounting nfs (Li Lingfeng) - nfs: clear SB_RDONLY before getting superblock (Li Lingfeng) - perf trace: Always print return value for syscalls returning a pid (Anubhav Shelat) - perf record: Fix incorrect --user-regs comments (Dapeng Mi) - perf symbol: Fix use-after-free in filename__read_build_id (Ian Rogers) - mailbox: mtk-cmdq: Refine GCE_GCTL_VALUE setting (Jason-JH Lin) - mailbox: imx: Fix TXDB_V2 sending (Peng Fan) - perf tests switch-tracking: Fix timestamp comparison (Leo Yan) - mfd: stmpe-spi: Correct the name used in MODULE_DEVICE_TABLE (Alexey Gladkov) - mfd: exynos-lpass: Avoid calling exynos_lpass_disable() twice in exynos_lpass_remove() (Christophe JAILLET) - mfd: exynos-lpass: Fix an error handling path in exynos_lpass_probe() (Christophe JAILLET) - rpmsg: qcom_smd: Fix uninitialized return variable in __qcom_smd_send() (Dan Carpenter) - remoteproc: k3-dsp: Drop check performed in k3_dsp_rproc_{mbox_callback/kick} (Siddharth Vadapalli) - remoteproc: k3-r5: Drop check performed in k3_r5_rproc_{mbox_callback/kick} (Siddharth Vadapalli) - remoteproc: qcom_wcnss_iris: Add missing put_device() on error in probe (Dan Carpenter) - perf scripts python: exported-sql-viewer.py: Fix pattern matching with Python 3 (Adrian Hunter) - perf intel-pt: Fix PEBS-via-PT data_src (Adrian Hunter) - perf tests: Fix 'perf report' tests installation (Michael Petlan) - perf trace: Fix leaks of 'struct thread' in set_filter_loop_pids() (Namhyung Kim) - dm-flakey: make corrupting read bios work (Benjamin Marzinski) - dm-flakey: error all IOs when num_features is absent (Benjamin Marzinski) - dm: fix dm_blk_report_zones (Benjamin Marzinski) - perf symbol-minimal: Fix double free in filename__read_build_id (Ian Rogers) - hwmon: (asus-ec-sensors) check sensor index in read_string() (Alexei Safin) - mtd: nand: ecc-mxic: Fix use of uninitialized variable ret (Mikhail Arkhipov) - x86/irq: Ensure initial PIR loads are performed exactly once (Sean Christopherson) - backlight: pm8941: Add NULL check in wled_configure() (Henry Martin) - dm: free table mempools if not used in __bind (Benjamin Marzinski) - dm: don't change md if dm_table_set_restrictions() fails (Benjamin Marzinski) - perf ui browser hists: Set actions-thread before calling do_zoom_thread() (Arnaldo Carvalho de Melo) - perf build: Warn when libdebuginfod devel files are not available (Arnaldo Carvalho de Melo) - randstruct: gcc-plugin: Fix attribute addition (Kees Cook) - randstruct: gcc-plugin: Remove bogus void member (Kees Cook) - fbdev: core: fbcvt: avoid division by 0 in fb_cvt_hperiod() (Sergey Shtylyov) - soc: aspeed: Add NULL check in aspeed_lpc_enable_snoop() (Henry Martin) - soc: aspeed: lpc: Fix impossible judgment condition (Su Hui) - ARM: aspeed: Don't select SRAM (Joel Stanley) - arm64: dts: mt6359: Rename RTC node to match binding expectations (Julien Massot) - arm64: dts: renesas: white-hawk-ard-audio: Fix TPU0 groups (Thuan Nguyen) - arm64: dts: qcom: qcm2290: fix (some) of QUP interconnects (Dmitry Baryshkov) - arm64: dts: rockchip: disable unrouted USB controllers and PHY on RK3399 Puma with Haikou (Quentin Schulz) - arm64: defconfig: mediatek: enable PHY drivers (Vignesh Raman) - ARM: dts: qcom: apq8064: move replicator out of soc node (Dmitry Baryshkov) - ARM: dts: qcom: apq8064 merge hw splinlock into corresponding syscon device (Dmitry Baryshkov) - ARM: dts: qcom: apq8064: add missing clocks to the timer node (Dmitry Baryshkov) - dt-bindings: vendor-prefixes: Add Liontron name (Andre Przywara) - bus: fsl-mc: fix double-free on mc_dev (Ioana Ciornei) - nilfs2: do not propagate ENOENT error from nilfs_btree_propagate() (Ryusuke Konishi) - nilfs2: add pointer check for nilfs_direct_propagate() (Wentao Liang) - Squashfs: check return result of sb_min_blocksize (Phillip Lougher) - soc: qcom: smp2p: Fix fallback to qcom,ipc parse (Barnabas Czeman) - arm64: dts: ti: k3-j721e-common-proc-board: Enable OSPI1 on J721E (Prasanth Babu Mantena) - arm64: tegra: Add uartd serial alias for Jetson TX1 module (Aaron Kling) - arm64: tegra: Drop remaining serial clock-names and reset-names (Aaron Kling) - arm64: dts: rockchip: Update eMMC for NanoPi R5 series (Peter Robinson) - arm64: dts: rockchip: Add vcc-supply to SPI flash on rk3566-rock3c (Peter Robinson) - arm64: dts: qcom: sda660-ifc6560: Fix dt-validate warning (Alexey Minnekhanov) - arm64: dts: qcom: sdm660-lavender: Add missing USB phy supply (Alexey Minnekhanov) - arm64: dts: mt6359: Add missing 'compatible' property to regulators node (Julien Massot) - arm64: dts: mediatek: mt6357: Drop regulator-fixed compatibles (Nicolas F. R. A. Prado) - arm64: dts: imx8mn-beacon: Set SAI5 MCLK direction to output for HDMI audio (Adam Ford) - arm64: dts: imx8mm-beacon: Set SAI5 MCLK direction to output for HDMI audio (Adam Ford) - arm64: dts: imx8mp-beacon: Fix RTC capacitive load (Adam Ford) - arm64: dts: imx8mn-beacon: Fix RTC capacitive load (Adam Ford) - arm64: dts: imx8mm-beacon: Fix RTC capacitive load (Adam Ford) - arm64: dts: mt8183: Add port node to mt8183.dtsi (Pin-yen Lin) - arm64: dts: qcom: sdm660-xiaomi-lavender: Add missing SD card detect GPIO (Alexey Minnekhanov) - arm64: dts: mediatek: mt8195: Reparent vdec1/2 and venc1 power domains (AngeloGioacchino Del Regno) - ARM: dts: at91: at91sam9263: fix NAND chip selects (Wolfram Sang) - ARM: dts: at91: usb_a9263: fix GPIO for Dataflash chip select (Wolfram Sang) - arm64: dts: rockchip: Move SHMEM memory to reserved memory on rk3588 (Chukun Pan) - arm64: dts: qcom: ipq9574: Fix USB vdd info (Varadarajan Narayanan) - arm64: dts: qcom: sc8280xp-x13s: Drop duplicate DMIC supplies (Stephan Gerhold) - arm64: dts: qcom: sm8250: Fix CPU7 opp table (Xilin Wu) - arm64: dts: qcom: sm8350: Reenable crypto cryptobam (Luca Weiss) - arm64: dts: qcom: sdm845-starqltechn: remove excess reserved gpios (Dzmitry Sankouski) - arm64: dts: qcom: sdm845-starqltechn: refactor node order (Dzmitry Sankouski) - arm64: dts: qcom: sdm845-starqltechn: fix usb regulator mistake (Dzmitry Sankouski) - arm64: dts: qcom: sdm845-starqltechn: remove wifi (Dzmitry Sankouski) - arm64: dts: qcom: x1e80100-romulus: Keep L12B and L15B always on (Konrad Dybcio) - arm64: dts: qcom: sm8650: add missing cpu-cfg interconnect path in the mdss node (Neil Armstrong) - arm64: dts: qcom: sm8650: setup gpu thermal with higher temperatures (Neil Armstrong) - arm64: dts: qcom: x1e80100: Mark usb_2 as dma-coherent (Mark Kettenis) - f2fs: fix to correct check conditions in f2fs_cross_rename (Zhiguo Niu) - f2fs: use d_inode(dentry) cleanup dentry-d_inode (Zhiguo Niu) - net: phy: mscc: Stop clearing the the UDPv4 checksum for L2 frames (Horatiu Vultur) - net: openvswitch: Fix the dead loop of MPLS parse (Faicker Mo) - calipso: Don't call calipso functions for AF_INET sk. (Kuniyuki Iwashima) - octeontx2-pf: QOS: Refactor TC_HTB_LEAF_DEL_LAST callback (Hariprasad Kelam) - octeontx2-pf: QOS: Perform cache sync on send queue teardown (Hariprasad Kelam) - net: phy: mscc: Fix memory leak when using one step timestamping (Horatiu Vultur) - net: lan743x: Fix PHY reset handling during initialization and WOL (Thangaraj Samynathan) - net: lan743x: rename lan743x_reset_phy to lan743x_hw_reset_phy (Thangaraj Samynathan) - net: phy: fix up const issues in to_mdio_device() and to_phy_device() (Greg Kroah-Hartman) - net: phy: clear phydev-devlink when the link is deleted (Wei Fang) - bpf: Avoid __bpf_prog_ret0_warn when jit fails (KaFai Wan) - net: xilinx: axienet: Fix Tx skb circular buffer occupancy check in dmaengine xmit (Suraj Gupta) - net: lan966x: Fix 1-step timestamping over ipv4 or ipv6 (Horatiu Vultur) - RDMA/cma: Fix hang when cma_netevent_callback fails to queue_work (Jack Morgenstein) - vsock/virtio: fix rx_bytes accounting for stream sockets (Stefano Garzarella) - net: usb: aqc111: fix error handling of usbnet read calls (Nikita Zhandarovich) - RISC-V: KVM: lock the correct mp_state during reset (Radim Krcmar) - netfilter: nft_tunnel: fix geneve_opt dump (Fernando Fernandez Mancera) - netfilter: nf_tables: nft_fib: consistent l3mdev handling (Florian Westphal) - bpf, sockmap: Avoid using sk_socket after free when sending (Jiayuan Chen) - Bluetooth: btintel: Check dsbr size from EFI variable (Kees Cook) - Bluetooth: MGMT: iterate over mesh commands in mgmt_mesh_foreach() (Dmitry Antipov) - vfio/type1: Fix error unwind in migration dirty bitmap allocation (Li RongQing) - netfilter: nf_tables: nft_fib_ipv6: fix VRF ipv4/ipv6 result discrepancy (Florian Westphal) - netfilter: xtables: support arpt_mark and ipv6 optstrip for iptables-nft only builds (Florian Westphal) - bpf: Revert 'bpf: remove unnecessary rcu_read_{lock,unlock}() in multi-uprobe attach logic' (Di Shen) - wifi: mt76: mt7996: fix RX buffer size of MCU event (Shayne Chen) - wifi: mt76: mt7996: set EHT max ampdu length capability (Peter Chiu) - wifi: mt76: mt7925: ensure all MCU commands wait for response (Michael Lo) - wifi: mt76: mt7925: refine the sniffer commnad (Ming Yen Hsieh) - wifi: mt76: mt7925: prevent multiple scan commands (Ming Yen Hsieh) - wifi: mt76: mt7915: Fix null-ptr-deref in mt7915_mmio_wed_init() (Henry Martin) - wifi: mt76: mt7996: Fix null-ptr-deref in mt7996_mmio_wed_init() (Henry Martin) - Bluetooth: ISO: Fix not using SID from adv report (Luiz Augusto von Dentz) - kernfs: Relax constraint in draining guard (Michal Koutny) - scsi: ufs: mcq: Delete ufshcd_release_scsi_cmd() in ufshcd_mcq_abort() (ping.gao) - wifi: ath9k_htc: Abort software beacon handling if disabled (Toke Hoiland-Jorgensen) - hisi_acc_vfio_pci: bugfix live migration function without VF device driver (Longfang Liu) - hisi_acc_vfio_pci: add eq and aeq interruption restore (Longfang Liu) - hisi_acc_vfio_pci: fix XQE dma address error (Longfang Liu) - wifi: ath12k: fix memory leak in ath12k_service_ready_ext_event (Rajat Soni) - iommu: remove duplicate selection of DMAR_TABLE (Rolf Eike Beer) - wifi: rtw89: fix firmware scan delay unit for WiFi 6 chips (Chin-Yen Lee) - wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (Alexey Kodanev) - wifi: rtw89: pci: enlarge retry times of RX tag to 1000 (Ping-Ke Shih) - s390/bpf: Store backchain even for leaf progs (Ilya Leoshkevich) - clk: qcom: gcc-msm8939: Fix mclk0 mclk1 for 24 MHz (Vincent Knecht) - dt-bindings: soc: fsl,qman-fqd: Fix reserved-memory.yaml reference (Rob Herring (Arm)) - bpf: Fix WARN() in get_bpf_raw_tp_regs (Tao Chen) - pinctrl: at91: Fix possible out-of-boundary access (Andy Shevchenko) - libbpf: Use proper errno value in nlattr (Anton Protopopov) - ktls, sockmap: Fix missing uncharge operation (Jiayuan Chen) - of: unittest: Unlock on error in unittest_data_add() (Dan Carpenter) - tracing: Fix error handling in event_trigger_parse() (Miaoqian Lin) - tracing: Rename event_trigger_alloc() to trigger_data_alloc() (Steven Rostedt) - selftests/bpf: Fix caps for __xlated/jited_unpriv (Luis Gerhorst) - efi/libstub: Describe missing 'out' parameter in efi_load_initrd (Hans Zhang) - wifi: iwlfiwi: mvm: Fix the rate reporting (Ilan Peer) - clk: bcm: rpi: Add NULL check in raspberrypi_clk_register() (Henry Martin) - bpftool: Fix regression of 'bpftool cgroup tree' EINVAL on older kernels (YiFei Zhu) - clk: qcom: gpucc-sm6350: Add *_wait_val values for GDSCs (Luca Weiss) - clk: qcom: gcc-sm6350: Add *_wait_val values for GDSCs (Luca Weiss) - clk: qcom: dispcc-sm6350: Add *_wait_val values for GDSCs (Luca Weiss) - clk: qcom: camcc-sm6350: Add *_wait_val values for GDSCs (Luca Weiss) - tracing: Move histogram trigger variables from stack to per CPU structure (Steven Rostedt) - bpf: Fix uninitialized values in BPF_{CORE,PROBE}_READ (Anton Protopopov) - RDMA/mlx5: Fix error flow upon firmware failure for RQ destruction (Patrisious Haddad) - netfilter: nft_set_pipapo: prevent overflow in lookup table allocation (Pablo Neira Ayuso) - netfilter: nft_quota: match correctly when the quota just depleted (Zhongqiu Duan) - netfilter: bridge: Move specific fragmented packet to slow_path instead of dropping it (Huajian Yang) - bpf: Allow XDP dev-bound programs to perform XDP_REDIRECT into maps (Lorenzo Bianconi) - libbpf: Use proper errno value in linker (Anton Protopopov) - scsi: smartpqi: Fix smp_processor_id() call trace for preemptible kernels (Yi Zhang) - f2fs: fix to detect gcing page in f2fs_is_cp_guaranteed() (Chao Yu) - f2fs: clean up w/ fscrypt_is_bounce_page() (Chao Yu) - bonding: assign random address if device address is same as bond (Hangbin Liu) - iommu: Protect against overflow in iommu_pgsize() (Jason Gunthorpe) - Use thread-safe function pointer in libbpf_print (Jonathan Wiepert) - libbpf: Remove sample_period init in perf_buffer (Tao Chen) - libbpf: Fix event name too long error (Feng Yang) - scsi: hisi_sas: Call I_T_nexus after soft reset for SATA disk (Yihang Li) - RDMA/hns: Include hnae3.h in hns_roce_hw_v2.h (Junxian Huang) - wifi: ath12k: fix node corruption in ar-arvifs list (Maharaja Kennadyrajan) - wifi: ath12k: Fix the QoS control field offset to build QoS header (Ramasamy Kaliappan) - wifi: ath12k: Add MSDU length validation for TKIP MIC error (P Praneesh) - wifi: ath12k: fix invalid access to memory (Sarika Sharma) - wifi: rtw88: do not ignore hardware read error during DPK (Dmitry Antipov) - wifi: rtw88: sdio: call rtw_sdio_indicate_tx_status unconditionally (Zhen XIN) - wifi: rtw88: sdio: map mgmt frames to queue TX_DESC_QSEL_MGMT (Zhen XIN) - xfrm: Use xdo.dev instead of xdo.real_dev (Cosmin Ratiu) - net/mlx5: Avoid using xso.real_dev unnecessarily (Cosmin Ratiu) - libbpf: Fix buffer overflow in bpf_object__init_prog (Viktor Malik) - net: ncsi: Fix GCPS 64-bit member variables (Hari Kalavakunta) - page_pool: Track DMA-mapped pages and unmap them when destroying the pool (Toke Hoiland-Jorgensen) - page_pool: Move pp_magic check into helper functions (Toke Hoiland-Jorgensen) - f2fs: fix to do sanity check on sbi-total_valid_block_count (Chao Yu) - f2fs: prevent the current section from being selected as a victim during GC (yohan.joung) - f2fs: clean up unnecessary indentation (Jaegeuk Kim) - wifi: ath12k: Fix buffer overflow in debugfs (Dan Carpenter) - wifi: ath12k: Fix WMI tag for EHT rate in peer assoc (Ramya Gnanasekar) - wifi: ath12k: fix cleanup path after mhi init (Raj Kumar Bhagat) - f2fs: zone: fix to avoid inconsistence in between SIT and SSA (Chao Yu) - bpf, sockmap: Fix panic when calling skb_linearize (Jiayuan Chen) - bpf, sockmap: fix duplicated data transmission (Jiayuan Chen) - bpf: fix ktls panic with sockmap (Jiayuan Chen) - selftests/bpf: Fix bpf_nf selftest failure (Saket Kumar Bhaskar) - bpf: Check link_create.flags parameter for multi_kprobe (Tao Chen) - IB/cm: use rwlock for MAD agent lock (Jacob Moroni) - wifi: ath12k: Fix invalid memory access while forming 802.11 header (P Praneesh) - wifi: ath12k: Fix memory leak during vdev_id mismatch (P Praneesh) - wifi: ath11k: fix node corruption in ar-arvifs list (Stone Zhang) - xen/x86: fix initial memory balloon target (Roger Pau Monne) - svcrdma: Reduce the number of rdma_rw contexts per-QP (Chuck Lever) - media: verisilicon: Free post processor buffers on error (Detlev Casanova) - drm/mediatek: mtk_drm_drv: Unbind secondary mmsys components on err (AngeloGioacchino Del Regno) - drm/mediatek: Fix kobject put for component sub-drivers (AngeloGioacchino Del Regno) - drm/mediatek: mtk_drm_drv: Fix kobject put for mtk_mutex device ptr (AngeloGioacchino Del Regno) - drm/msm/a6xx: Disable rgb565_predicator on Adreno 7c3 (Konrad Dybcio) - selftests/seccomp: fix negative_ENOSYS tracer tests on arm32 (Terry Tritton) - perf/amlogic: Replace smp_processor_id() with raw_smp_processor_id() in meson_ddr_pmu_create() (Anand Moon) - scsi: qedf: Use designated initializer for struct qed_fcoe_cb_ops (Kees Cook) - overflow: Fix direct struct member initialization in _DEFINE_FLEX() (Gustavo A. R. Silva) - arm64/fpsimd: Do not discard modified SVE state (Mark Rutland) - firmware: SDEI: Allow sdei initialization without ACPI_APEI_GHES (Huang Yiwei) - drm/tegra: rgb: Fix the unbound reference count (Biju Das) - drm/vkms: Adjust vkms_state-active_planes allocation type (Kees Cook) - drm: rcar-du: Fix memory leak in rcar_du_vsps_init() (Biju Das) - drm/msm/dpu: enable SmartDMA on SC8180X (Dmitry Baryshkov) - drm/msm/dpu: enable SmartDMA on SM8150 (Dmitry Baryshkov) - selftests/seccomp: fix syscall_restart test for arm compat (Neill Kapron) - arm64/fpsimd: Avoid warning when sve_to_fpsimd() is unused (Mark Rutland) - arm64: Support ARM64_VA_BITS=52 when setting ARCH_MMAP_RND_BITS_MAX (Kornel Duleba) - firmware: psci: Fix refcount leak in psci_dt_init (Miaoqian Lin) - m68k: mac: Fix macintosh_config for Mac II (Finn Thain) - watchdog: exar: Shorten identity name to fit correctly (Kees Cook) - kunit/usercopy: Disable u64 test on 32-bit SPARC (Thomas Weissschuh) - fs/ntfs3: Add missing direct_IO in ntfs_aops_cmpr (Lizhi Xu) - fs/ntfs3: handle hdr_first_de() return value (Andrey Vatoropin) - drm/bridge: lt9611uxc: Fix an error handling path in lt9611uxc_probe() (Christophe JAILLET) - drm/panel: samsung-sofef00: Drop s6e3fc2x01 support (Casey Connolly) - perf: arm-ni: Fix missing platform_set_drvdata() (Hongbo Yao) - perf: arm-ni: Unregister PMUs on probe failure (Hongbo Yao) - drm/panthor: Update panthor_mmu::irq::mask when needed (Boris Brezillon) - drm/panthor: Fix GPU_COHERENCY_ACE[_LITE] definitions (Boris Brezillon) - arm64/fpsimd: Fix merging of FPSIMD state during signal return (Mark Rutland) - arm64/fpsimd: Reset FPMR upon exec() (Mark Rutland) - arm64/fpsimd: Avoid clobbering kernel FPSIMD state with SMSTOP (Mark Rutland) - arm64/fpsimd: Don't corrupt FPMR when streaming mode changes (Mark Brown) - arm64/fpsimd: Discard stale CPU state when handling SME traps (Mark Brown) - arm64/fpsimd: Avoid RES0 bits in the SME trap handler (Mark Rutland) - media: rkvdec: Fix frame size enumeration (Jonas Karlman) - drm/amd/pp: Fix potential NULL pointer dereference in atomctrl_initialize_mc_reg_table (Charles Han) - drm/vc4: tests: Use return instead of assert (Maxime Ripard) - drm/xe/d3cold: Set power state to D3Cold during s2idle/s3 (Badal Nilawar) - drm/vmwgfx: Fix dumb buffer leak (Ian Forbes) - drm/vmwgfx: Add error path for xa_store in vmw_bo_add_detached_resource (Keisuke Nishimura) - drm/vmwgfx: Add seqno waiter for sync_files (Ian Forbes) - ALSA: core: fix up bus match const issues. (Greg Kroah-Hartman) - ASoC: apple: mca: Constrain channels according to TDM mask (Martin Poviser) - spi: sh-msiof: Fix maximum DMA transfer size (Geert Uytterhoeven) - ACPI: OSI: Stop advertising support for '3.0 _SCP Extensions' (Armin Wolf) - thermal/drivers/mediatek/lvts: Fix debugfs unregister on failure (AngeloGioacchino Del Regno) - PM: sleep: Print PM debug messages during hibernation (Rafael J. Wysocki) - x86/mtrr: Check if fixed-range MTRRs exist in mtrr_save_fixed_ranges() (Jiaqing Zhao) - ACPI: resource: fix a typo for MECHREVO in irq1_edge_low_force_override[] (Mingcong Bai) - PM: wakeup: Delete space in the end of string shown by pm_show_wakelocks() (Zijun Hu) - ASoC: SOF: amd: add missing acp descriptor field (Vijendar Mukunda) - ASoC: SOF: ipc4-pcm: Adjust pipeline_list-pipelines allocation type (Kees Cook) - PM: EM: Fix potential division-by-zero error in em_compute_costs() (Yaxiong Tian) - power: reset: at91-reset: Optimize at91_reset() (Alexander Shiyan) - spi: tegra210-quad: modify chip select (CS) deactivation (Vishwaroop A) - spi: tegra210-quad: remove redundant error handling code (Vishwaroop A) - spi: tegra210-quad: Fix X1_X2_X4 encoding and support x4 transfers (Vishwaroop A) - EDAC/{skx_common,i10nm}: Fix the loss of saved RRL for HBM pseudo channel 0 (Qiuxu Zhuo) - EDAC/skx_common: Fix general protection fault (Qiuxu Zhuo) - ASoC: mediatek: mt8195: Set ETDM1/2 IN/OUT to COMP_DUMMY() (Julien Massot) - ASoC: tas2764: Enable main IRQs (Hector Martin) - ACPICA: exserial: don't forget to handle FFixedHW opregions for reading (Daniil Tatianin) - crypto: api - Redo lookup on EEXIST (Herbert Xu) - kunit: Fix wrong parameter to kunit_deactivate_static_stub() (Tzung-Bi Shih) - crypto: sun8i-ce - move fallback ahash_request to the end of the struct (Ovidiu Panait) - crypto: xts - Only add ecb if it is not already there (Herbert Xu) - crypto: lrw - Only add ecb if it is not already there (Herbert Xu) - rcu/cpu_stall_cputime: fix the hardirq count for x86 architecture (Yongliang Gao) - btrfs: fix invalid data space release when truncating block in NOCOW mode (Filipe Manana) - btrfs: scrub: fix a wrong error type when metadata bytenr mismatches (Qu Wenruo) - btrfs: scrub: update device stats when an error is detected (Qu Wenruo) - powerpc/pseries/iommu: Fix kmemleak in TCE table userspace view (Gaurav Batra) - erofs: avoid using multiple devices with different type (Sheng Yong) - erofs: fix file handle encoding for 64-bit NIDs (Hongbo Li) - crypto: marvell/cesa - Avoid empty transfer descriptor (Herbert Xu) - crypto: marvell/cesa - Handle zero-length skcipher requests (Herbert Xu) - kselftest: cpufreq: Get rid of double suspend in rtcwake case (Nicolas F. R. A. Prado) - brd: fix discard end sector (Yu Kuai) - brd: fix aligned_sector from brd_do_discard() (Yu Kuai) - x86/insn: Fix opcode map (!REX2) superscript tags (Masami Hiramatsu (Google)) - x86/cpu: Sanitize CPUID(0x80000000) output (Ahmed S. Darwish) - crypto: sun8i-ce - undo runtime PM changes during driver removal (Ovidiu Panait) - x86/microcode/AMD: Do not return error when microcode update is not necessary (Annie Li) - sched/core: Tweak wait_task_inactive() to force dequeue sched_delayed tasks (John Stultz) - powerpc/crash: Fix non-smp kexec preparation (Eddie James) - powerpc: do not build ppc_save_regs.o always (Jiri Slaby (SUSE)) - crypto: sun8i-ss - do not use sg_dma_len before calling DMA functions (Corentin Labbe) - crypto: sun8i-ce-cipher - fix error handling in sun8i_ce_cipher_prepare() (Ovidiu Panait) - perf/core: Fix broken throttling when max_samples_per_tick=1 (Qing Wang) - gfs2: gfs2_create_inode error handling fix (Andreas Gruenbacher) - gfs2: replace sd_aspace with sd_inode (Andreas Gruenbacher) - perf/x86/amd/uncore: Prevent UMC counters from saturating (Sandipan Das) - perf/x86/amd/uncore: Remove unused 'struct amd_uncore_ctx::node' member (Sandipan Das) - sched: Fix trace_sched_switch(.prev_state) (Peter Zijlstra) - crypto: sun8i-ce-hash - fix error handling in sun8i_ce_hash_run() (Ovidiu Panait) - x86/idle: Remove MFENCEs for X86_BUG_CLFLUSH_MONITOR in mwait_idle_with_hints() and prefer_mwait_c1_over_halt() (Andrew Cooper) - tools/x86/kcpuid: Fix error handling (Ahmed S. Darwish) - uek-rpm: Set USBIP_VHCI_NR_HCS to 4 in UEK8U1 (Harshit Mogalapalli) [Orabug: 38012102] - mptcp: disable by default (Harshvardhan Jha) [Orabug: 38035668] - sunrpc: handle SVC_GARBAGE during svc auth processing as auth error (Jeff Layton) [Orabug: 38137447] {CVE-2025-38089} - x86/sev/docs: Document the SNP Reverse Map Table (RMP) (Tom Lendacky) [Orabug: 38149216] - x86/sev: Add full support for a segmented RMP table (Tom Lendacky) [Orabug: 38149216] - x86/sev: Treat the contiguous RMP table as a single RMP segment (Tom Lendacky) [Orabug: 38149216] - x86/sev: Map only the RMP table entries instead of the full RMP range (Tom Lendacky) [Orabug: 38149216] - x86/sev: Move the SNP probe routine out of the way (Tom Lendacky) [Orabug: 38149216] - x86/sev: Require the RMPREAD instruction after Zen4 (Tom Lendacky) [Orabug: 38149216] - x86/sev: Add support for the RMPREAD instruction (Tom Lendacky) [Orabug: 38149216] - x86/sev: Prepare for using the RMPREAD instruction to access the RMP (Tom Lendacky) [Orabug: 38149216] - rds: Fix array index out of bounds in rds_message_purge() (Harshit Mogalapalli) [Orabug: 38158033] - Add Zen34 clients (Borislav Petkov (AMD)) [Orabug: 38172252] {CVE-2024-36350} {CVE-2024-36357} - x86/process: Move the buffer clearing before MONITOR (Kim Phillips) [Orabug: 38172252] {CVE-2024-36350} {CVE-2024-36357} - Add normal counters (Borislav Petkov (AMD)) [Orabug: 38172252] {CVE-2024-36350} {CVE-2024-36357} - KVM: SVM: Advertize TSA CPUID bits to guests (Borislav Petkov (AMD)) [Orabug: 38172252] {CVE-2024-36350} {CVE-2024-36357} - x86/bugs: Add a Transient Scheduler Attacks mitigation (Borislav Petkov (AMD)) [Orabug: 38172252] {CVE-2024-36350} {CVE-2024-36357} - x86/bugs: Rename MDS machinery to something more generic (Borislav Petkov (AMD)) [Orabug: 38172252] {CVE-2024-36350} {CVE-2024-36357}
- Published
- unknown
- Last Modified
- unknown
CVSS details not available.
No product information available.
No references available.
No linked vulnerabilities found.
{
"cves": [
"CVE-2012-3430",
"CVE-2015-6937",
"CVE-2016-5244",
"CVE-2018-12928",
"CVE-2018-5332",
"CVE-2018-5333",
"CVE-2018-7492",
"CVE-2019-11815",
"CVE-2021-3695",
"CVE-2021-3696",
"CVE-2021-3697",
"CVE-2021-45095",
"CVE-2022-21385",
"CVE-2022-28733",
"CVE-2022-28734",
"CVE-2022-28735",
"CVE-2022-28736",
"CVE-2023-22024",
"CVE-2023-3159",
"CVE-2024-28956",
"CVE-2024-36350",
"CVE-2024-36357",
"CVE-2024-39282",
"CVE-2024-41090",
"CVE-2024-41091",
"CVE-2024-41149",
"CVE-2024-41932",
"CVE-2024-41935",
"CVE-2024-43098",
"CVE-2024-45828",
"CVE-2024-46896",
"CVE-2024-47141",
"CVE-2024-47143",
"CVE-2024-47408",
"CVE-2024-47794",
"CVE-2024-47809",
"CVE-2024-48873",
"CVE-2024-48875",
"CVE-2024-48876",
"CVE-2024-48881",
"CVE-2024-49568",
"CVE-2024-49569",
"CVE-2024-49570",
"CVE-2024-49571",
"CVE-2024-49573",
"CVE-2024-50051",
"CVE-2024-51729",
"CVE-2024-52319",
"CVE-2024-52332",
"CVE-2024-52559",
"CVE-2024-53103",
"CVE-2024-53104",
"CVE-2024-53141",
"CVE-2024-53142",
"CVE-2024-53143",
"CVE-2024-53145",
"CVE-2024-53146",
"CVE-2024-53147",
"CVE-2024-53148",
"CVE-2024-53149",
"CVE-2024-53150",
"CVE-2024-53151",
"CVE-2024-53152",
"CVE-2024-53153",
"CVE-2024-53154",
"CVE-2024-53155",
"CVE-2024-53156",
"CVE-2024-53157",
"CVE-2024-53158",
"CVE-2024-53160",
"CVE-2024-53161",
"CVE-2024-53162",
"CVE-2024-53163",
"CVE-2024-53164",
"CVE-2024-53165",
"CVE-2024-53166",
"CVE-2024-53167",
"CVE-2024-53168",
"CVE-2024-53169",
"CVE-2024-53170",
"CVE-2024-53171",
"CVE-2024-53172",
"CVE-2024-53173",
"CVE-2024-53174",
"CVE-2024-53175",
"CVE-2024-53176",
"CVE-2024-53177",
"CVE-2024-53178",
"CVE-2024-53179",
"CVE-2024-53180",
"CVE-2024-53181",
"CVE-2024-53182",
"CVE-2024-53183",
"CVE-2024-53184",
"CVE-2024-53185",
"CVE-2024-53186",
"CVE-2024-53187",
"CVE-2024-53188",
"CVE-2024-53189",
"CVE-2024-53190",
"CVE-2024-53191",
"CVE-2024-53192",
"CVE-2024-53193",
"CVE-2024-53194",
"CVE-2024-53195",
"CVE-2024-53197",
"CVE-2024-53198",
"CVE-2024-53199",
"CVE-2024-53200",
"CVE-2024-53201",
"CVE-2024-53202",
"CVE-2024-53203",
"CVE-2024-53204",
"CVE-2024-53205",
"CVE-2024-53206",
"CVE-2024-53207",
"CVE-2024-53208",
"CVE-2024-53209",
"CVE-2024-53210",
"CVE-2024-53211",
"CVE-2024-53212",
"CVE-2024-53213",
"CVE-2024-53214",
"CVE-2024-53215",
"CVE-2024-53216",
"CVE-2024-53217",
"CVE-2024-53218",
"CVE-2024-53219",
"CVE-2024-53220",
"CVE-2024-53221",
"CVE-2024-53222",
"CVE-2024-53223",
"CVE-2024-53224",
"CVE-2024-53225",
"CVE-2024-53226",
"CVE-2024-53227",
"CVE-2024-53228",
"CVE-2024-53229",
"CVE-2024-53230",
"CVE-2024-53231",
"CVE-2024-53232",
"CVE-2024-53233",
"CVE-2024-53234",
"CVE-2024-53235",
"CVE-2024-53236",
"CVE-2024-53237",
"CVE-2024-53238",
"CVE-2024-53239",
"CVE-2024-53240",
"CVE-2024-53241",
"CVE-2024-53680",
"CVE-2024-53681",
"CVE-2024-53682",
"CVE-2024-53685",
"CVE-2024-53687",
"CVE-2024-53690",
"CVE-2024-54031",
"CVE-2024-54191",
"CVE-2024-54193",
"CVE-2024-54455",
"CVE-2024-54456",
"CVE-2024-54458",
"CVE-2024-54460",
"CVE-2024-54683",
"CVE-2024-55639",
"CVE-2024-55641",
"CVE-2024-55642",
"CVE-2024-55881",
"CVE-2024-55916",
"CVE-2024-56368",
"CVE-2024-56369",
"CVE-2024-56372",
"CVE-2024-56531",
"CVE-2024-56532",
"CVE-2024-56533",
"CVE-2024-56534",
"CVE-2024-56535",
"CVE-2024-56536",
"CVE-2024-56537",
"CVE-2024-56538",
"CVE-2024-56539",
"CVE-2024-56540",
"CVE-2024-56541",
"CVE-2024-56542",
"CVE-2024-56543",
"CVE-2024-56544",
"CVE-2024-56545",
"CVE-2024-56546",
"CVE-2024-56547",
"CVE-2024-56549",
"CVE-2024-56550",
"CVE-2024-56551",
"CVE-2024-56552",
"CVE-2024-56553",
"CVE-2024-56554",
"CVE-2024-56555",
"CVE-2024-56556",
"CVE-2024-56557",
"CVE-2024-56558",
"CVE-2024-56559",
"CVE-2024-56560",
"CVE-2024-56561",
"CVE-2024-56562",
"CVE-2024-56563",
"CVE-2024-56564",
"CVE-2024-56565",
"CVE-2024-56566",
"CVE-2024-56567",
"CVE-2024-56568",
"CVE-2024-56569",
"CVE-2024-56570",
"CVE-2024-56572",
"CVE-2024-56573",
"CVE-2024-56574",
"CVE-2024-56575",
"CVE-2024-56576",
"CVE-2024-56577",
"CVE-2024-56578",
"CVE-2024-56579",
"CVE-2024-56580",
"CVE-2024-56581",
"CVE-2024-56582",
"CVE-2024-56583",
"CVE-2024-56584",
"CVE-2024-56585",
"CVE-2024-56586",
"CVE-2024-56587",
"CVE-2024-56588",
"CVE-2024-56589",
"CVE-2024-56590",
"CVE-2024-56591",
"CVE-2024-56592",
"CVE-2024-56593",
"CVE-2024-56594",
"CVE-2024-56595",
"CVE-2024-56596",
"CVE-2024-56597",
"CVE-2024-56598",
"CVE-2024-56599",
"CVE-2024-56600",
"CVE-2024-56601",
"CVE-2024-56602",
"CVE-2024-56603",
"CVE-2024-56604",
"CVE-2024-56605",
"CVE-2024-56606",
"CVE-2024-56607",
"CVE-2024-56608",
"CVE-2024-56609",
"CVE-2024-56610",
"CVE-2024-56611",
"CVE-2024-56612",
"CVE-2024-56613",
"CVE-2024-56614",
"CVE-2024-56615",
"CVE-2024-56616",
"CVE-2024-56617",
"CVE-2024-56618",
"CVE-2024-56619",
"CVE-2024-56620",
"CVE-2024-56621",
"CVE-2024-56622",
"CVE-2024-56623",
"CVE-2024-56624",
"CVE-2024-56625",
"CVE-2024-56626",
"CVE-2024-56627",
"CVE-2024-56628",
"CVE-2024-56629",
"CVE-2024-56630",
"CVE-2024-56631",
"CVE-2024-56632",
"CVE-2024-56633",
"CVE-2024-56634",
"CVE-2024-56635",
"CVE-2024-56636",
"CVE-2024-56637",
"CVE-2024-56638",
"CVE-2024-56639",
"CVE-2024-56640",
"CVE-2024-56641",
"CVE-2024-56642",
"CVE-2024-56643",
"CVE-2024-56644",
"CVE-2024-56645",
"CVE-2024-56646",
"CVE-2024-56647",
"CVE-2024-56648",
"CVE-2024-56649",
"CVE-2024-56650",
"CVE-2024-56651",
"CVE-2024-56652",
"CVE-2024-56653",
"CVE-2024-56654",
"CVE-2024-56655",
"CVE-2024-56656",
"CVE-2024-56657",
"CVE-2024-56658",
"CVE-2024-56659",
"CVE-2024-56660",
"CVE-2024-56661",
"CVE-2024-56662",
"CVE-2024-56663",
"CVE-2024-56664",
"CVE-2024-56665",
"CVE-2024-56666",
"CVE-2024-56667",
"CVE-2024-56668",
"CVE-2024-56669",
"CVE-2024-56670",
"CVE-2024-56671",
"CVE-2024-56672",
"CVE-2024-56673",
"CVE-2024-56674",
"CVE-2024-56675",
"CVE-2024-56676",
"CVE-2024-56677",
"CVE-2024-56678",
"CVE-2024-56679",
"CVE-2024-56680",
"CVE-2024-56681",
"CVE-2024-56682",
"CVE-2024-56683",
"CVE-2024-56684",
"CVE-2024-56685",
"CVE-2024-56687",
"CVE-2024-56688",
"CVE-2024-56690",
"CVE-2024-56691",
"CVE-2024-56692",
"CVE-2024-56693",
"CVE-2024-56694",
"CVE-2024-56695",
"CVE-2024-56696",
"CVE-2024-56697",
"CVE-2024-56698",
"CVE-2024-56699",
"CVE-2024-56700",
"CVE-2024-56701",
"CVE-2024-56702",
"CVE-2024-56703",
"CVE-2024-56704",
"CVE-2024-56705",
"CVE-2024-56706",
"CVE-2024-56707",
"CVE-2024-56708",
"CVE-2024-56709",
"CVE-2024-56710",
"CVE-2024-56711",
"CVE-2024-56712",
"CVE-2024-56713",
"CVE-2024-56714",
"CVE-2024-56715",
"CVE-2024-56716",
"CVE-2024-56717",
"CVE-2024-56718",
"CVE-2024-56719",
"CVE-2024-56720",
"CVE-2024-56721",
"CVE-2024-56722",
"CVE-2024-56723",
"CVE-2024-56724",
"CVE-2024-56725",
"CVE-2024-56726",
"CVE-2024-56727",
"CVE-2024-56728",
"CVE-2024-56729",
"CVE-2024-56730",
"CVE-2024-56739",
"CVE-2024-56740",
"CVE-2024-56742",
"CVE-2024-56743",
"CVE-2024-56744",
"CVE-2024-56745",
"CVE-2024-56746",
"CVE-2024-56747",
"CVE-2024-56748",
"CVE-2024-56749",
"CVE-2024-56750",
"CVE-2024-56751",
"CVE-2024-56752",
"CVE-2024-56753",
"CVE-2024-56754",
"CVE-2024-56755",
"CVE-2024-56756",
"CVE-2024-56757",
"CVE-2024-56758",
"CVE-2024-56759",
"CVE-2024-56760",
"CVE-2024-56761",
"CVE-2024-56763",
"CVE-2024-56764",
"CVE-2024-56765",
"CVE-2024-56766",
"CVE-2024-56767",
"CVE-2024-56768",
"CVE-2024-56769",
"CVE-2024-56770",
"CVE-2024-56771",
"CVE-2024-56772",
"CVE-2024-56773",
"CVE-2024-56774",
"CVE-2024-56775",
"CVE-2024-56776",
"CVE-2024-56777",
"CVE-2024-56778",
"CVE-2024-56779",
"CVE-2024-56780",
"CVE-2024-56781",
"CVE-2024-56782",
"CVE-2024-56783",
"CVE-2024-56784",
"CVE-2024-56785",
"CVE-2024-56787",
"CVE-2024-56788",
"CVE-2024-57791",
"CVE-2024-57792",
"CVE-2024-57793",
"CVE-2024-57795",
"CVE-2024-57798",
"CVE-2024-57799",
"CVE-2024-57800",
"CVE-2024-57801",
"CVE-2024-57802",
"CVE-2024-57804",
"CVE-2024-57805",
"CVE-2024-57806",
"CVE-2024-57807",
"CVE-2024-57809",
"CVE-2024-57834",
"CVE-2024-57838",
"CVE-2024-57839",
"CVE-2024-57841",
"CVE-2024-57843",
"CVE-2024-57844",
"CVE-2024-57849",
"CVE-2024-57850",
"CVE-2024-57852",
"CVE-2024-57857",
"CVE-2024-57872",
"CVE-2024-57874",
"CVE-2024-57875",
"CVE-2024-57876",
"CVE-2024-57877",
"CVE-2024-57878",
"CVE-2024-57879",
"CVE-2024-57880",
"CVE-2024-57881",
"CVE-2024-57882",
"CVE-2024-57883",
"CVE-2024-57884",
"CVE-2024-57885",
"CVE-2024-57886",
"CVE-2024-57887",
"CVE-2024-57888",
"CVE-2024-57889",
"CVE-2024-57890",
"CVE-2024-57891",
"CVE-2024-57892",
"CVE-2024-57893",
"CVE-2024-57895",
"CVE-2024-57896",
"CVE-2024-57897",
"CVE-2024-57898",
"CVE-2024-57899",
"CVE-2024-57900",
"CVE-2024-57901",
"CVE-2024-57902",
"CVE-2024-57903",
"CVE-2024-57904",
"CVE-2024-57905",
"CVE-2024-57906",
"CVE-2024-57907",
"CVE-2024-57908",
"CVE-2024-57909",
"CVE-2024-57910",
"CVE-2024-57911",
"CVE-2024-57912",
"CVE-2024-57913",
"CVE-2024-57914",
"CVE-2024-57916",
"CVE-2024-57917",
"CVE-2024-57918",
"CVE-2024-57919",
"CVE-2024-57921",
"CVE-2024-57922",
"CVE-2024-57923",
"CVE-2024-57924",
"CVE-2024-57925",
"CVE-2024-57926",
"CVE-2024-57927",
"CVE-2024-57928",
"CVE-2024-57929",
"CVE-2024-57930",
"CVE-2024-57931",
"CVE-2024-57932",
"CVE-2024-57933",
"CVE-2024-57934",
"CVE-2024-57935",
"CVE-2024-57936",
"CVE-2024-57938",
"CVE-2024-57939",
"CVE-2024-57940",
"CVE-2024-57941",
"CVE-2024-57942",
"CVE-2024-57943",
"CVE-2024-57944",
"CVE-2024-57945",
"CVE-2024-57946",
"CVE-2024-57948",
"CVE-2024-57950",
"CVE-2024-57951",
"CVE-2024-57952",
"CVE-2024-57953",
"CVE-2024-57973",
"CVE-2024-57974",
"CVE-2024-57975",
"CVE-2024-57977",
"CVE-2024-57978",
"CVE-2024-57979",
"CVE-2024-57980",
"CVE-2024-57981",
"CVE-2024-57982",
"CVE-2024-57984",
"CVE-2024-57985",
"CVE-2024-57986",
"CVE-2024-57987",
"CVE-2024-57988",
"CVE-2024-57989",
"CVE-2024-57990",
"CVE-2024-57991",
"CVE-2024-57993",
"CVE-2024-57994",
"CVE-2024-57996",
"CVE-2024-57997",
"CVE-2024-57998",
"CVE-2024-57999",
"CVE-2024-58001",
"CVE-2024-58002",
"CVE-2024-58003",
"CVE-2024-58004",
"CVE-2024-58005",
"CVE-2024-58006",
"CVE-2024-58007",
"CVE-2024-58008",
"CVE-2024-58009",
"CVE-2024-58010",
"CVE-2024-58011",
"CVE-2024-58012",
"CVE-2024-58013",
"CVE-2024-58014",
"CVE-2024-58016",
"CVE-2024-58017",
"CVE-2024-58018",
"CVE-2024-58019",
"CVE-2024-58020",
"CVE-2024-58021",
"CVE-2024-58034",
"CVE-2024-58042",
"CVE-2024-58051",
"CVE-2024-58052",
"CVE-2024-58053",
"CVE-2024-58054",
"CVE-2024-58055",
"CVE-2024-58056",
"CVE-2024-58057",
"CVE-2024-58058",
"CVE-2024-58060",
"CVE-2024-58061",
"CVE-2024-58062",
"CVE-2024-58063",
"CVE-2024-58064",
"CVE-2024-58068",
"CVE-2024-58069",
"CVE-2024-58070",
"CVE-2024-58071",
"CVE-2024-58072",
"CVE-2024-58075",
"CVE-2024-58076",
"CVE-2024-58077",
"CVE-2024-58078",
"CVE-2024-58079",
"CVE-2024-58080",
"CVE-2024-58081",
"CVE-2024-58082",
"CVE-2024-58083",
"CVE-2024-58084",
"CVE-2024-58086",
"CVE-2024-58087",
"CVE-2024-58088",
"CVE-2024-58089",
"CVE-2024-58090",
"CVE-2024-58092",
"CVE-2024-58093",
"CVE-2024-58098",
"CVE-2024-58100",
"CVE-2024-58237",
"CVE-2025-21629",
"CVE-2025-21631",
"CVE-2025-21632",
"CVE-2025-21634",
"CVE-2025-21636",
"CVE-2025-21637",
"CVE-2025-21638",
"CVE-2025-21639",
"CVE-2025-21640",
"CVE-2025-21641",
"CVE-2025-21642",
"CVE-2025-21643",
"CVE-2025-21644",
"CVE-2025-21645",
"CVE-2025-21646",
"CVE-2025-21647",
"CVE-2025-21648",
"CVE-2025-21649",
"CVE-2025-21650",
"CVE-2025-21652",
"CVE-2025-21653",
"CVE-2025-21654",
"CVE-2025-21655",
"CVE-2025-21656",
"CVE-2025-21657",
"CVE-2025-21658",
"CVE-2025-21659",
"CVE-2025-21660",
"CVE-2025-21661",
"CVE-2025-21662",
"CVE-2025-21663",
"CVE-2025-21664",
"CVE-2025-21665",
"CVE-2025-21666",
"CVE-2025-21667",
"CVE-2025-21668",
"CVE-2025-21669",
"CVE-2025-21670",
"CVE-2025-21671",
"CVE-2025-21672",
"CVE-2025-21673",
"CVE-2025-21674",
"CVE-2025-21675",
"CVE-2025-21676",
"CVE-2025-21678",
"CVE-2025-21679",
"CVE-2025-21680",
"CVE-2025-21681",
"CVE-2025-21682",
"CVE-2025-21683",
"CVE-2025-21684",
"CVE-2025-21685",
"CVE-2025-21687",
"CVE-2025-21688",
"CVE-2025-21689",
"CVE-2025-21690",
"CVE-2025-21691",
"CVE-2025-21692",
"CVE-2025-21693",
"CVE-2025-21694",
"CVE-2025-21695",
"CVE-2025-21696",
"CVE-2025-21697",
"CVE-2025-21699",
"CVE-2025-21700",
"CVE-2025-21701",
"CVE-2025-21702",
"CVE-2025-21703",
"CVE-2025-21704",
"CVE-2025-21705",
"CVE-2025-21706",
"CVE-2025-21707",
"CVE-2025-21708",
"CVE-2025-21710",
"CVE-2025-21711",
"CVE-2025-21712",
"CVE-2025-21714",
"CVE-2025-21715",
"CVE-2025-21716",
"CVE-2025-21718",
"CVE-2025-21719",
"CVE-2025-21720",
"CVE-2025-21721",
"CVE-2025-21722",
"CVE-2025-21723",
"CVE-2025-21724",
"CVE-2025-21725",
"CVE-2025-21726",
"CVE-2025-21727",
"CVE-2025-21728",
"CVE-2025-21729",
"CVE-2025-21730",
"CVE-2025-21731",
"CVE-2025-21732",
"CVE-2025-21733",
"CVE-2025-21734",
"CVE-2025-21735",
"CVE-2025-21736",
"CVE-2025-21737",
"CVE-2025-21738",
"CVE-2025-21739",
"CVE-2025-21741",
"CVE-2025-21742",
"CVE-2025-21743",
"CVE-2025-21744",
"CVE-2025-21745",
"CVE-2025-21746",
"CVE-2025-21748",
"CVE-2025-21749",
"CVE-2025-21750",
"CVE-2025-21753",
"CVE-2025-21754",
"CVE-2025-21756",
"CVE-2025-21758",
"CVE-2025-21759",
"CVE-2025-21760",
"CVE-2025-21761",
"CVE-2025-21762",
"CVE-2025-21763",
"CVE-2025-21764",
"CVE-2025-21765",
"CVE-2025-21766",
"CVE-2025-21767",
"CVE-2025-21768",
"CVE-2025-21770",
"CVE-2025-21771",
"CVE-2025-21772",
"CVE-2025-21773",
"CVE-2025-21774",
"CVE-2025-21775",
"CVE-2025-21776",
"CVE-2025-21777",
"CVE-2025-21778",
"CVE-2025-21779",
"CVE-2025-21780",
"CVE-2025-21781",
"CVE-2025-21782",
"CVE-2025-21783",
"CVE-2025-21784",
"CVE-2025-21785",
"CVE-2025-21786",
"CVE-2025-21787",
"CVE-2025-21788",
"CVE-2025-21789",
"CVE-2025-21790",
"CVE-2025-21791",
"CVE-2025-21792",
"CVE-2025-21793",
"CVE-2025-21794",
"CVE-2025-21795",
"CVE-2025-21796",
"CVE-2025-21798",
"CVE-2025-21799",
"CVE-2025-21800",
"CVE-2025-21801",
"CVE-2025-21802",
"CVE-2025-21803",
"CVE-2025-21804",
"CVE-2025-21805",
"CVE-2025-21806",
"CVE-2025-21808",
"CVE-2025-21809",
"CVE-2025-21810",
"CVE-2025-21811",
"CVE-2025-21812",
"CVE-2025-21813",
"CVE-2025-21814",
"CVE-2025-21815",
"CVE-2025-21816",
"CVE-2025-21819",
"CVE-2025-21820",
"CVE-2025-21821",
"CVE-2025-21823",
"CVE-2025-21824",
"CVE-2025-21825",
"CVE-2025-21826",
"CVE-2025-21827",
"CVE-2025-21828",
"CVE-2025-21829",
"CVE-2025-21830",
"CVE-2025-21831",
"CVE-2025-21832",
"CVE-2025-21834",
"CVE-2025-21835",
"CVE-2025-21836",
"CVE-2025-21838",
"CVE-2025-21839",
"CVE-2025-21841",
"CVE-2025-21842",
"CVE-2025-21844",
"CVE-2025-21845",
"CVE-2025-21846",
"CVE-2025-21847",
"CVE-2025-21848",
"CVE-2025-21849",
"CVE-2025-21851",
"CVE-2025-21852",
"CVE-2025-21853",
"CVE-2025-21854",
"CVE-2025-21856",
"CVE-2025-21857",
"CVE-2025-21858",
"CVE-2025-21859",
"CVE-2025-21861",
"CVE-2025-21862",
"CVE-2025-21863",
"CVE-2025-21864",
"CVE-2025-21865",
"CVE-2025-21866",
"CVE-2025-21867",
"CVE-2025-21868",
"CVE-2025-21869",
"CVE-2025-21870",
"CVE-2025-21871",
"CVE-2025-21872",
"CVE-2025-21873",
"CVE-2025-21874",
"CVE-2025-21875",
"CVE-2025-21876",
"CVE-2025-21877",
"CVE-2025-21878",
"CVE-2025-21880",
"CVE-2025-21881",
"CVE-2025-21883",
"CVE-2025-21885",
"CVE-2025-21886",
"CVE-2025-21887",
"CVE-2025-21888",
"CVE-2025-21889",
"CVE-2025-21890",
"CVE-2025-21891",
"CVE-2025-21892",
"CVE-2025-21893",
"CVE-2025-21894",
"CVE-2025-21895",
"CVE-2025-21897",
"CVE-2025-21898",
"CVE-2025-21899",
"CVE-2025-21900",
"CVE-2025-21901",
"CVE-2025-21902",
"CVE-2025-21903",
"CVE-2025-21904",
"CVE-2025-21905",
"CVE-2025-21906",
"CVE-2025-21907",
"CVE-2025-21908",
"CVE-2025-21909",
"CVE-2025-21910",
"CVE-2025-21911",
"CVE-2025-21912",
"CVE-2025-21913",
"CVE-2025-21914",
"CVE-2025-21915",
"CVE-2025-21916",
"CVE-2025-21917",
"CVE-2025-21918",
"CVE-2025-21919",
"CVE-2025-21920",
"CVE-2025-21921",
"CVE-2025-21922",
"CVE-2025-21923",
"CVE-2025-21924",
"CVE-2025-21925",
"CVE-2025-21926",
"CVE-2025-21927",
"CVE-2025-21928",
"CVE-2025-21929",
"CVE-2025-21930",
"CVE-2025-21931",
"CVE-2025-21932",
"CVE-2025-21934",
"CVE-2025-21935",
"CVE-2025-21936",
"CVE-2025-21937",
"CVE-2025-21938",
"CVE-2025-21940",
"CVE-2025-21941",
"CVE-2025-21943",
"CVE-2025-21944",
"CVE-2025-21945",
"CVE-2025-21946",
"CVE-2025-21947",
"CVE-2025-21948",
"CVE-2025-21950",
"CVE-2025-21951",
"CVE-2025-21954",
"CVE-2025-21955",
"CVE-2025-21956",
"CVE-2025-21957",
"CVE-2025-21958",
"CVE-2025-21959",
"CVE-2025-21960",
"CVE-2025-21961",
"CVE-2025-21962",
"CVE-2025-21963",
"CVE-2025-21964",
"CVE-2025-21965",
"CVE-2025-21966",
"CVE-2025-21967",
"CVE-2025-21968",
"CVE-2025-21969",
"CVE-2025-21970",
"CVE-2025-21971",
"CVE-2025-21972",
"CVE-2025-21973",
"CVE-2025-21974",
"CVE-2025-21975",
"CVE-2025-21976",
"CVE-2025-21977",
"CVE-2025-21978",
"CVE-2025-21979",
"CVE-2025-21980",
"CVE-2025-21981",
"CVE-2025-21982",
"CVE-2025-21983",
"CVE-2025-21984",
"CVE-2025-21985",
"CVE-2025-21986",
"CVE-2025-21987",
"CVE-2025-21989",
"CVE-2025-21990",
"CVE-2025-21991",
"CVE-2025-21992",
"CVE-2025-21993",
"CVE-2025-21994",
"CVE-2025-21995",
"CVE-2025-21996",
"CVE-2025-21997",
"CVE-2025-21998",
"CVE-2025-21999",
"CVE-2025-22000",
"CVE-2025-22001",
"CVE-2025-22002",
"CVE-2025-22003",
"CVE-2025-22004",
"CVE-2025-22005",
"CVE-2025-22006",
"CVE-2025-22007",
"CVE-2025-22008",
"CVE-2025-22009",
"CVE-2025-22010",
"CVE-2025-22011",
"CVE-2025-22013",
"CVE-2025-22014",
"CVE-2025-22015",
"CVE-2025-22016",
"CVE-2025-22017",
"CVE-2025-22018",
"CVE-2025-22019",
"CVE-2025-22020",
"CVE-2025-22021",
"CVE-2025-22022",
"CVE-2025-22023",
"CVE-2025-22024",
"CVE-2025-22025",
"CVE-2025-22026",
"CVE-2025-22027",
"CVE-2025-22028",
"CVE-2025-22030",
"CVE-2025-22032",
"CVE-2025-22033",
"CVE-2025-22034",
"CVE-2025-22035",
"CVE-2025-22036",
"CVE-2025-22037",
"CVE-2025-22038",
"CVE-2025-22039",
"CVE-2025-22040",
"CVE-2025-22041",
"CVE-2025-22042",
"CVE-2025-22043",
"CVE-2025-22044",
"CVE-2025-22045",
"CVE-2025-22046",
"CVE-2025-22047",
"CVE-2025-22049",
"CVE-2025-22050",
"CVE-2025-22053",
"CVE-2025-22054",
"CVE-2025-22055",
"CVE-2025-22056",
"CVE-2025-22057",
"CVE-2025-22058",
"CVE-2025-22059",
"CVE-2025-22060",
"CVE-2025-22062",
"CVE-2025-22063",
"CVE-2025-22064",
"CVE-2025-22065",
"CVE-2025-22066",
"CVE-2025-22067",
"CVE-2025-22068",
"CVE-2025-22070",
"CVE-2025-22071",
"CVE-2025-22072",
"CVE-2025-22073",
"CVE-2025-22074",
"CVE-2025-22075",
"CVE-2025-22076",
"CVE-2025-22077",
"CVE-2025-22078",
"CVE-2025-22079",
"CVE-2025-22080",
"CVE-2025-22081",
"CVE-2025-22082",
"CVE-2025-22083",
"CVE-2025-22084",
"CVE-2025-22085",
"CVE-2025-22086",
"CVE-2025-22087",
"CVE-2025-22088",
"CVE-2025-22089",
"CVE-2025-22090",
"CVE-2025-22091",
"CVE-2025-22093",
"CVE-2025-22095",
"CVE-2025-22097",
"CVE-2025-22102",
"CVE-2025-22120",
"CVE-2025-22122",
"CVE-2025-22123",
"CVE-2025-22126",
"CVE-2025-23134",
"CVE-2025-23136",
"CVE-2025-23138",
"CVE-2025-23140",
"CVE-2025-23141",
"CVE-2025-23142",
"CVE-2025-23144",
"CVE-2025-23145",
"CVE-2025-23146",
"CVE-2025-23147",
"CVE-2025-23148",
"CVE-2025-23149",
"CVE-2025-23150",
"CVE-2025-23151",
"CVE-2025-23154",
"CVE-2025-23156",
"CVE-2025-23157",
"CVE-2025-23158",
"CVE-2025-23159",
"CVE-2025-23160",
"CVE-2025-23163",
"CVE-2025-37738",
"CVE-2025-37739",
"CVE-2025-37740",
"CVE-2025-37741",
"CVE-2025-37742",
"CVE-2025-37744",
"CVE-2025-37745",
"CVE-2025-37748",
"CVE-2025-37749",
"CVE-2025-37750",
"CVE-2025-37752",
"CVE-2025-37754",
"CVE-2025-37755",
"CVE-2025-37756",
"CVE-2025-37757",
"CVE-2025-37758",
"CVE-2025-37759",
"CVE-2025-37760",
"CVE-2025-37761",
"CVE-2025-37763",
"CVE-2025-37764",
"CVE-2025-37765",
"CVE-2025-37766",
"CVE-2025-37767",
"CVE-2025-37768",
"CVE-2025-37769",
"CVE-2025-37770",
"CVE-2025-37771",
"CVE-2025-37772",
"CVE-2025-37773",
"CVE-2025-37774",
"CVE-2025-37775",
"CVE-2025-37776",
"CVE-2025-37777",
"CVE-2025-37778",
"CVE-2025-37780",
"CVE-2025-37781",
"CVE-2025-37784",
"CVE-2025-37785",
"CVE-2025-37786",
"CVE-2025-37787",
"CVE-2025-37788",
"CVE-2025-37789",
"CVE-2025-37790",
"CVE-2025-37791",
"CVE-2025-37792",
"CVE-2025-37793",
"CVE-2025-37794",
"CVE-2025-37796",
"CVE-2025-37797",
"CVE-2025-37798",
"CVE-2025-37799",
"CVE-2025-37800",
"CVE-2025-37801",
"CVE-2025-37805",
"CVE-2025-37806",
"CVE-2025-37807",
"CVE-2025-37808",
"CVE-2025-37809",
"CVE-2025-37810",
"CVE-2025-37811",
"CVE-2025-37812",
"CVE-2025-37813",
"CVE-2025-37814",
"CVE-2025-37815",
"CVE-2025-37816",
"CVE-2025-37817",
"CVE-2025-37818",
"CVE-2025-37819",
"CVE-2025-37820",
"CVE-2025-37821",
"CVE-2025-37822",
"CVE-2025-37823",
"CVE-2025-37824",
"CVE-2025-37826",
"CVE-2025-37827",
"CVE-2025-37828",
"CVE-2025-37829",
"CVE-2025-37830",
"CVE-2025-37831",
"CVE-2025-37833",
"CVE-2025-37834",
"CVE-2025-37836",
"CVE-2025-37837",
"CVE-2025-37838",
"CVE-2025-37839",
"CVE-2025-37840",
"CVE-2025-37841",
"CVE-2025-37843",
"CVE-2025-37844",
"CVE-2025-37845",
"CVE-2025-37846",
"CVE-2025-37847",
"CVE-2025-37848",
"CVE-2025-37849",
"CVE-2025-37850",
"CVE-2025-37852",
"CVE-2025-37853",
"CVE-2025-37854",
"CVE-2025-37856",
"CVE-2025-37857",
"CVE-2025-37858",
"CVE-2025-37859",
"CVE-2025-37861",
"CVE-2025-37862",
"CVE-2025-37863",
"CVE-2025-37864",
"CVE-2025-37865",
"CVE-2025-37866",
"CVE-2025-37867",
"CVE-2025-37868",
"CVE-2025-37869",
"CVE-2025-37870",
"CVE-2025-37871",
"CVE-2025-37872",
"CVE-2025-37873",
"CVE-2025-37874",
"CVE-2025-37875",
"CVE-2025-37876",
"CVE-2025-37877",
"CVE-2025-37878",
"CVE-2025-37879",
"CVE-2025-37880",
"CVE-2025-37881",
"CVE-2025-37882",
"CVE-2025-37883",
"CVE-2025-37884",
"CVE-2025-37885",
"CVE-2025-37886",
"CVE-2025-37887",
"CVE-2025-37888",
"CVE-2025-37889",
"CVE-2025-37890",
"CVE-2025-37891",
"CVE-2025-37892",
"CVE-2025-37893",
"CVE-2025-37894",
"CVE-2025-37895",
"CVE-2025-37897",
"CVE-2025-37899",
"CVE-2025-37900",
"CVE-2025-37901",
"CVE-2025-37903",
"CVE-2025-37905",
"CVE-2025-37907",
"CVE-2025-37908",
"CVE-2025-37909",
"CVE-2025-37910",
"CVE-2025-37911",
"CVE-2025-37912",
"CVE-2025-37913",
"CVE-2025-37914",
"CVE-2025-37915",
"CVE-2025-37916",
"CVE-2025-37917",
"CVE-2025-37918",
"CVE-2025-37919",
"CVE-2025-37920",
"CVE-2025-37921",
"CVE-2025-37922",
"CVE-2025-37923",
"CVE-2025-37924",
"CVE-2025-37926",
"CVE-2025-37927",
"CVE-2025-37928",
"CVE-2025-37929",
"CVE-2025-37930",
"CVE-2025-37931",
"CVE-2025-37932",
"CVE-2025-37933",
"CVE-2025-37934",
"CVE-2025-37935",
"CVE-2025-37936",
"CVE-2025-37937",
"CVE-2025-37938",
"CVE-2025-37940",
"CVE-2025-37941",
"CVE-2025-37942",
"CVE-2025-37943",
"CVE-2025-37944",
"CVE-2025-37945",
"CVE-2025-37946",
"CVE-2025-37947",
"CVE-2025-37948",
"CVE-2025-37949",
"CVE-2025-37951",
"CVE-2025-37952",
"CVE-2025-37953",
"CVE-2025-37954",
"CVE-2025-37955",
"CVE-2025-37956",
"CVE-2025-37957",
"CVE-2025-37958",
"CVE-2025-37959",
"CVE-2025-37960",
"CVE-2025-37961",
"CVE-2025-37962",
"CVE-2025-37963",
"CVE-2025-37964",
"CVE-2025-37965",
"CVE-2025-37967",
"CVE-2025-37968",
"CVE-2025-37969",
"CVE-2025-37970",
"CVE-2025-37971",
"CVE-2025-37972",
"CVE-2025-37973",
"CVE-2025-37974",
"CVE-2025-37975",
"CVE-2025-37978",
"CVE-2025-37979",
"CVE-2025-37980",
"CVE-2025-37982",
"CVE-2025-37983",
"CVE-2025-37985",
"CVE-2025-37986",
"CVE-2025-37987",
"CVE-2025-37988",
"CVE-2025-37989",
"CVE-2025-37990",
"CVE-2025-37991",
"CVE-2025-37992",
"CVE-2025-37993",
"CVE-2025-37994",
"CVE-2025-37995",
"CVE-2025-37997",
"CVE-2025-37998",
"CVE-2025-37999",
"CVE-2025-38000",
"CVE-2025-38001",
"CVE-2025-38003",
"CVE-2025-38004",
"CVE-2025-38005",
"CVE-2025-38007",
"CVE-2025-38008",
"CVE-2025-38009",
"CVE-2025-38010",
"CVE-2025-38011",
"CVE-2025-38012",
"CVE-2025-38013",
"CVE-2025-38014",
"CVE-2025-38015",
"CVE-2025-38016",
"CVE-2025-38018",
"CVE-2025-38019",
"CVE-2025-38020",
"CVE-2025-38022",
"CVE-2025-38023",
"CVE-2025-38024",
"CVE-2025-38027",
"CVE-2025-38031",
"CVE-2025-38033",
"CVE-2025-38034",
"CVE-2025-38035",
"CVE-2025-38037",
"CVE-2025-38038",
"CVE-2025-38039",
"CVE-2025-38040",
"CVE-2025-38043",
"CVE-2025-38044",
"CVE-2025-38045",
"CVE-2025-38047",
"CVE-2025-38048",
"CVE-2025-38049",
"CVE-2025-38051",
"CVE-2025-38052",
"CVE-2025-38053",
"CVE-2025-38054",
"CVE-2025-38055",
"CVE-2025-38056",
"CVE-2025-38057",
"CVE-2025-38058",
"CVE-2025-38059",
"CVE-2025-38060",
"CVE-2025-38061",
"CVE-2025-38062",
"CVE-2025-38063",
"CVE-2025-38065",
"CVE-2025-38066",
"CVE-2025-38068",
"CVE-2025-38069",
"CVE-2025-38071",
"CVE-2025-38072",
"CVE-2025-38073",
"CVE-2025-38074",
"CVE-2025-38075",
"CVE-2025-38077",
"CVE-2025-38078",
"CVE-2025-38079",
"CVE-2025-38080",
"CVE-2025-38081",
"CVE-2025-38082",
"CVE-2025-38089",
"CVE-2025-38152",
"CVE-2025-38240",
"CVE-2025-38479",
"CVE-2025-38575",
"CVE-2025-38637",
"CVE-2025-39688",
"CVE-2025-39728",
"CVE-2025-39735",
"CVE-2025-39778",
"CVE-2025-39989",
"CVE-2025-40114"
],
"cvss": 0.0,
"database_specific": {
"severity": "IMPORTANT"
},
"description": "[6.12.0-102.36.5.2]\n- iommu/vt-d: Fix misplaced domain_attached assignment (Ban ZuoXiang) [Orabug: 38294635]\n\n[6.12.0-102.36.5.1]\n- net/sched: Always pass notifications when child class becomes empty (Lion Ackermann) [Orabug: 38217337]\n\n[6.12.0-102.36.5]\n- uek-rpm: Enable few modules related to various subsystems in UEK8U1 (Harshit Mogalapalli) [Orabug: 37846468]\n- uek-rpm: Enable more sound related options in UEK8U1 (Harshit Mogalapalli) [Orabug: 37846468]\n- uek-rpm: Enable few desktop related modules (Harshit Mogalapalli) [Orabug: 37846468]\n- uek-rpm: Enable few wireless modules in UEK8U1 (Harshit Mogalapalli) [Orabug: 37846468]\n- uek-rpm: Enable few USB related modules in UEK8U1 (Harshit Mogalapalli) [Orabug: 37846468]\n- uek-rpm: Add accessibility related modules to UEK8U1 (Harshit Mogalapalli) [Orabug: 37846468]\n- uek-rpm: intel: Enable few platform and thermal drivers (Harshit Mogalapalli) [Orabug: 37846468]\n- uek-rpm: Enable few config options in both Architectures (Harshit Mogalapalli) [Orabug: 37846468]\n- uek-rpm: Enable SOUND related config options to UEK8 (Harshit Mogalapalli) [Orabug: 37846468]\n- uek-rpm: Re-sort modules.yaml files as a cleanup (Harshit Mogalapalli) [Orabug: 37846468]\n- uek-rpm: Run savedefconfig for UEK8U1 (Harshit Mogalapalli) [Orabug: 37846468]\n- net/mlx5: set graceful_period to 0 to allow multiple transmission queue recovery (Praveen Kumar Kannoju) [Orabug: 38182989]\n\n[6.12.0-102.36.4]\n- PCI/AER: Add sysfs attributes for log ratelimits (Jon Pan-Doh) [Orabug: 38126943]\n- PCI/AER: Ratelimit correctable and non-fatal error logging (Jon Pan-Doh) [Orabug: 38126943]\n- PCI/AER: Simplify add_error_device() (Bjorn Helgaas) [Orabug: 38126943]\n- PCI/AER: Convert aer_get_device_error_info(), aer_print_error() to index (Bjorn Helgaas) [Orabug: 38126943]\n- PCI/AER: Reduce pci_print_aer() correctable error level to KERN_WARNING (Karolina Stolarek) [Orabug: 38126943]\n- PCI/AER: Check log level once and remember it (Karolina Stolarek) [Orabug: 38126943]\n- PCI/AER: Trace error event before ratelimiting (Bjorn Helgaas) [Orabug: 38126943]\n- PCI/AER: Update statistics before ratelimiting (Bjorn Helgaas) [Orabug: 38126943]\n- PCI/AER: Simplify pci_print_aer() (Bjorn Helgaas) [Orabug: 38126943]\n- PCI/AER: Initialize aer_err_info before using it (Bjorn Helgaas) [Orabug: 38126943]\n- PCI/AER: Move aer_print_source() earlier in file (Bjorn Helgaas) [Orabug: 38126943]\n- PCI/AER: Rename aer_print_port_info() to aer_print_source() (Jon Pan-Doh) [Orabug: 38126943]\n- PCI/AER: Extract bus/dev/fn in aer_print_port_info() with PCI_BUS_NUM(), etc (Bjorn Helgaas) [Orabug: 38126943]\n- PCI/AER: Consolidate Error Source ID logging in aer_isr_one_error_type() (Bjorn Helgaas) [Orabug: 38126943]\n- PCI/AER: Factor COR/UNCOR error handling out from aer_isr_one_error() (Bjorn Helgaas) [Orabug: 38126943]\n- PCI/AER: Descope pci_printk() to aer_printk() (Ilpo Jarvinen) [Orabug: 38126943]\n- md/md-bitmap: fix GPF in bitmap_get_stats() (Hakon Bugge) [Orabug: 38137957]\n- Revert 'net/rds: Add krefs to struct rds_connection' (Hakon Bugge) [Orabug: 38184408]\n- Revert 'net/rds: tracepoints for rds_conn_kref_get and put' (Hakon Bugge) [Orabug: 38184408]\n- sched: Change nr_uninterruptible type to unsigned long (Aruna Ramakrishna) [Orabug: 38195223]\n\n[6.12.0-102.36.3]\n- aarch64: increase DEFAULT_CRASH_KERNEL_LOW_SIZE for kdump for 64K kernels (Brian Maly) [Orabug: 38001657]\n- fs: use new field for kstat.atomic_write_unit_max_opt to avoid KABI issue (John Garry) [Orabug: 38026089]\n- nvme: all namespaces in a subsystem must adhere to a common atomic write size (Alan Adamson) [Orabug: 38026089]\n- nvme: multipath: enable BLK_FEAT_ATOMIC_WRITES for multipathing (Alan Adamson) [Orabug: 38026089]\n- scsi: scsi_debug: Reduce DEF_ATOMIC_WR_MAX_LENGTH (John Garry) [Orabug: 38026089]\n- xfs: allow sysadmins to specify a maximum atomic write limit at mount time (John Garry) [Orabug: 38026089]\n- xfs: update atomic write limits (John Garry) [Orabug: 38026089]\n- xfs: add xfs_calc_atomic_write_unit_max() (John Garry) [Orabug: 38026089]\n- xfs: add xfs_file_dio_write_atomic() (John Garry) [Orabug: 38026089]\n- xfs: commit CoW-based atomic writes atomically (John Garry) [Orabug: 38026089]\n- xfs: add large atomic writes checks in xfs_direct_write_iomap_begin() (John Garry) [Orabug: 38026089]\n- xfs: add xfs_atomic_write_cow_iomap_begin() (John Garry) [Orabug: 38026089]\n- xfs: refine atomic write size check in xfs_file_write_iter() (John Garry) [Orabug: 38026089]\n- xfs: refactor xfs_reflink_end_cow_extent() (John Garry) [Orabug: 38026089]\n- xfs: allow block allocator to take an alignment hint (John Garry) [Orabug: 38026089]\n- xfs: ignore HW which cannot atomic write a single block (Darrick J. Wong) [Orabug: 38026089]\n- xfs: add helpers to compute transaction reservation for finishing intent items (Darrick J. Wong) [Orabug: 38026089]\n- xfs: add helpers to compute log item overhead (Darrick J. Wong) [Orabug: 38026089]\n- xfs: separate out setting buftarg atomic writes limits (Darrick J. Wong) [Orabug: 38026089]\n- xfs: rename xfs_inode_can_atomicwrite() - xfs_inode_can_hw_atomic_write() (John Garry) [Orabug: 38026089]\n- xfs: only call xfs_setsize_buftarg once per buffer target (Darrick J. Wong) [Orabug: 38026089]\n- fs: add atomic write unit max opt to statx (John Garry) [Orabug: 38026089]\n- xfs: stop using set_blocksize (Darrick J. Wong) [Orabug: 38026089]\n- block: hoist block size validation code to a separate function (Darrick J. Wong) [Orabug: 38026089]\n- xfs: cleanup xfs_vn_getattr (Christoph Hellwig) [Orabug: 38026089]\n- fs: reformat the statx definition (Christoph Hellwig) [Orabug: 38026089]\n- dm-table: Set BLK_FEAT_ATOMIC_WRITES for target queue limits (John Garry) [Orabug: 38026089]\n- iomap: rework IOMAP atomic flags (John Garry) [Orabug: 38026089]\n- iomap: comment on atomic write checks in iomap_dio_bio_iter() (John Garry) [Orabug: 38026089]\n- iomap: inline iomap_dio_bio_opflags() (John Garry) [Orabug: 38026089]\n- iomap: Lift blocksize restriction on atomic writes (Ritesh Harjani (IBM)) [Orabug: 38026089]\n- iomap: Support SW-based atomic writes (John Garry) [Orabug: 38026089]\n- iomap: Rename IOMAP_ATOMIC - IOMAP_ATOMIC_HW (John Garry) [Orabug: 38026089]\n- iomap: Minor code simplification in iomap_dio_bio_iter() (John Garry) [Orabug: 38026089]\n- dm-mirror: Support atomic writes (John Garry) [Orabug: 38026089]\n- dm-io: Warn on creating multiple atomic write bios for a region (John Garry) [Orabug: 38026089]\n- dm-stripe: Enable atomic writes (John Garry) [Orabug: 38026089]\n- dm-linear: Enable atomic writes (John Garry) [Orabug: 38026089]\n- dm: Ensure cloned bio is same length for atomic write (John Garry) [Orabug: 38026089]\n- dm-table: atomic writes support (John Garry) [Orabug: 38026089]\n- block: Don't trim an atomic write (John Garry) [Orabug: 38026089]\n- block: Add common atomic writes enable flag (John Garry) [Orabug: 38026089]\n- block: Change blk_stack_atomic_writes_limits() unit_min check (John Garry) [Orabug: 38026089]\n- block: Ensure start sector is aligned for stacking atomic writes (John Garry) [Orabug: 38026089]\n- md/raid10: Atomic write support (John Garry) [Orabug: 38026089]\n- md/raid1: Atomic write support (John Garry) [Orabug: 38026089]\n- md/raid0: Atomic write support (John Garry) [Orabug: 38026089]\n- block: Support atomic writes limits for stacked devices (John Garry) [Orabug: 38026089]\n- block: Add extra checks in blk_validate_atomic_write_limits() (John Garry) [Orabug: 38026089]\n- md/raid10: Handle bio_split() errors (John Garry) [Orabug: 38026089]\n- md/raid1: Handle bio_split() errors (John Garry) [Orabug: 38026089]\n- md/raid0: Handle bio_split() errors (John Garry) [Orabug: 38026089]\n- block: Handle bio_split() errors in bio_submit_split() (John Garry) [Orabug: 38026089]\n- block: Error an attempt to split an atomic write in bio_split() (John Garry) [Orabug: 38026089]\n- block: Rework bio_split() return value (John Garry) [Orabug: 38026089]\n- ext4: Do not fallback to buffered-io for DIO atomic write (Ritesh Harjani (IBM)) [Orabug: 38026089]\n- ext4: Support setting FMODE_CAN_ATOMIC_WRITE (Ritesh Harjani (IBM)) [Orabug: 38026089]\n- ext4: Check for atomic writes support in write iter (Ritesh Harjani (IBM)) [Orabug: 38026089]\n- ext4: Add statx support for atomic writes (Ritesh Harjani (IBM)) [Orabug: 38026089]\n- xfs: Support setting FMODE_CAN_ATOMIC_WRITE (John Garry) [Orabug: 38026089]\n- xfs: Validate atomic writes (John Garry) [Orabug: 38026089]\n- xfs: Support atomic write for statx (John Garry) [Orabug: 38026089]\n- fs: iomap: Atomic write support (John Garry) [Orabug: 38026089]\n- fs: Export generic_atomic_write_valid() (John Garry) [Orabug: 38026089]\n- block: Add bdev atomic write limits helpers (John Garry) [Orabug: 38026089]\n- Revert 'SUNRPC: Don't allow waiting for exiting tasks' (Harshvardhan Jha) [Orabug: 38162684]\n- Revert 'Add normal counters' (Boris Ostrovsky) [Orabug: 38184971]\n\n[6.12.0-102.36.2]\n- LTS version: v6.12.36 (Jack Vogel)\n- spi: fsl-qspi: Fix double cleanup in probe error path (Kevin Hao)\n- btrfs: fix use-after-free on inode when scanning root during em shrinking (Sasha Levin)\n- btrfs: zoned: fix extent range end unlock in cow_file_range() (Naohiro Aota)\n- spi: fsl-qspi: use devm function instead of driver remove (Han Xu)\n- net: stmmac: Fix accessing freed irq affinity_hint (Qingfang Deng)\n- drm/amdkfd: Fix instruction hazard in gfx12 trap handler (Jay Cornwall)\n- drm/amdkfd: remove gfx 12 trap handler page size cap (Jonathan Kim)\n- ALSA: hda/realtek: Bass speaker fixup for ASUS UM5606KA (Andres Traumann)\n- arm64: dts: rockchip: Add avdd HDMI supplies to RockPro64 board dtsi (Dragan Simic)\n- riscv/atomic: Do proper sign extension also for unsigned in arch_cmpxchg (Sasha Levin)\n- btrfs: do regular iput instead of delayed iput during extent map shrinking (Filipe Manana)\n- btrfs: make the extent map shrinker run asynchronously as a work queue job (Filipe Manana)\n- btrfs: skip inodes without loaded extent maps when shrinking extent maps (Filipe Manana)\n- drm/fbdev-dma: Add shadow buffering for deferred I/O (Thomas Zimmermann)\n- drm/msm/dp: account for widebus and yuv420 during mode validation (Sasha Levin)\n- usb: typec: tcpm: PSSourceOffTimer timeout in PR_Swap enters ERROR_RECOVERY (Sasha Levin)\n- drm/xe: Carve out wopcm portion from the stolen memory (Sasha Levin)\n- iio: dac: ad3552r-common: fix ad3541/2r ranges (Angelo Dureghello)\n- iio: dac: ad3552r: extract common code (no changes in behavior intended) (Angelo Dureghello)\n- iio: dac: ad3552r: changes to use FIELD_PREP (Angelo Dureghello)\n- btrfs: do proper folio cleanup when cow_file_range() failed (Qu Wenruo)\n- net: phy: realtek: add RTL8125D-internal PHY (Heiner Kallweit)\n- net: phy: realtek: merge the drivers for internal NBase-T PHY's (Heiner Kallweit)\n- r8169: add support for RTL8125D (Heiner Kallweit)\n- mm/vma: reset VMA iterator on commit_merge() OOM failure (Lorenzo Stoakes)\n- io_uring/kbuf: flag partial buffer mappings (Jens Axboe)\n- io_uring/net: mark iov as dynamically allocated even for single segments (Jens Axboe)\n- io_uring/net: always use current transfer count for buffer put (Jens Axboe)\n- io_uring/net: only consider msg_inq if larger than 1 (Jens Axboe)\n- io_uring/net: only retry recv bundle for a full transfer (Jens Axboe)\n- io_uring/net: improve recv bundles (Jens Axboe)\n- io_uring/rsrc: don't rely on user vaddr alignment (Pavel Begunkov)\n- io_uring/rsrc: fix folio unpinning (Pavel Begunkov)\n- io_uring: fix potential page leak in io_sqe_buffer_register() (Penglei Jiang)\n- net: libwx: fix Tx L4 checksum (Jiawen Wu)\n- x86/pkeys: Simplify PKRU update in signal frame (Chang S. Bae)\n- x86/fpu: Refactor xfeature bitmask update code for sigframe XSAVE (Chang S. Bae)\n- media: uvcvideo: Rollback non processed entities on error (Ricardo Ribalda)\n- drm/amd/display: Fix mpv playback corruption on weston (Alex Hung)\n- drm/amdgpu: switch job hw_fence to amdgpu_fence (Alex Deucher)\n- drm/amdgpu: Fix SDMA UTC_L1 handling during start/stop sequences (Jesse Zhang)\n- drm/i915/dsi: Fix off by one in BXT_MIPI_TRANS_VTOTAL (Ville Syrjala)\n- drm/xe: Fix early wedge on GuC load failure (Daniele Ceraolo Spurio)\n- drm/xe: Fix taking invalid lock on wedge (Lucas De Marchi)\n- drm/xe: Fix memset on iomem (Lucas De Marchi)\n- drm/amd/display: Check dce_hwseq before dereferencing it (Alex Hung)\n- drm/amdgpu: Add kicker device detection (Frank Min)\n- drm/amd/display: Fix RMCM programming seq errors (Yihan Zhu)\n- drm/xe/guc_submit: add back fix (Matthew Auld)\n- drm/xe/sched: stop re-submitting signalled jobs (Matthew Auld)\n- drm/xe/vm: move rebind_work init earlier (Matthew Auld)\n- drm/amd/display: Correct non-OLED pre_T11_delay. (Zhongwei Zhang)\n- drm/amdgpu: amdgpu_vram_mgr_new(): Clamp lpfn to total vram (John Olender)\n- drm/amd/display: Add null pointer check for get_first_active_display() (Wentao Liang)\n- drm/bridge: cdns-dsi: Wait for Clk and Data Lanes to be ready (Aradhya Bhatia)\n- drm/bridge: cdns-dsi: Check return value when getting default PHY config (Aradhya Bhatia)\n- drm/bridge: cdns-dsi: Fix connecting to next bridge (Aradhya Bhatia)\n- drm/bridge: cdns-dsi: Fix phy de-init and flag it so (Aradhya Bhatia)\n- drm/bridge: cdns-dsi: Fix the clock variable for mode_valid() (Aradhya Bhatia)\n- drm/amdkfd: Fix race in GWS queue scheduling (Jay Cornwall)\n- drm/msm/gpu: Fix crash when throttling GPU immediately during boot (Stephan Gerhold)\n- drm/udl: Unregister device before cleaning up on disconnect (Thomas Zimmermann)\n- drm/tegra: Fix a possible null pointer dereference (Qiu-ji Chen)\n- drm/tegra: Assign plane type before registration (Thierry Reding)\n- drm/etnaviv: Protect the scheduler's pending list with its lock (Maira Canal)\n- drm/cirrus-qemu: Fix pitch programming (Thomas Zimmermann)\n- drm/ast: Fix comment on modeset lock (Thomas Zimmermann)\n- scsi: ufs: core: Fix clk scaling to be conditional in reset and restore (anvithdosapati)\n- scsi: megaraid_sas: Fix invalid node index (Chen Yu)\n- HID: wacom: fix kobject reference count leak (Qasim Ijaz)\n- HID: wacom: fix memory leak on sysfs attribute creation failure (Qasim Ijaz)\n- HID: wacom: fix memory leak on kobject creation failure (Qasim Ijaz)\n- HID: lenovo: Restrict F7/9/11 mode to compact keyboards only (Iusico Maxim)\n- f2fs: fix to zero post-eof page (Chao Yu)\n- mm/gup: revert 'mm: gup: fix infinite loop within __get_longterm_locked' (David Hildenbrand)\n- maple_tree: fix MA_STATE_PREALLOC flag in mas_preallocate() (Liam R. Howlett)\n- net: libwx: fix the creation of page_pool (Jiawen Wu)\n- spi: spi-cadence-quadspi: Fix pm runtime unbalance (Khairul Anuar Romli)\n- btrfs: update superblock's device bytes_used when dropping chunk (Mark Harmstone)\n- btrfs: fix a race between renames and directory logging (Filipe Manana)\n- dm-raid: fix variable in journal device check (Heinz Mauelshagen)\n- Bluetooth: L2CAP: Fix L2CAP MTU negotiation (Frederic Danis)\n- serial: imx: Restore original RXTL for console to fix data loss (Fabio Estevam)\n- serial: core: restore of_node information in sysfs (Aidan Stewart)\n- dt-bindings: serial: 8250: Make clocks and clock-frequency exclusive (Yao Zi)\n- staging: rtl8723bs: Avoid memset() in aes_cipher() and aes_decipher() (Nathan Chancellor)\n- x86/traps: Initialize DR6 by writing its architectural reset value (Xin Li (Intel))\n- EDAC/amd64: Fix size calculation for Non-Power-of-Two DIMMs (Avadhut Naik)\n- cifs: Fix reading into an ITER_FOLIOQ from the smbdirect code (David Howells)\n- cifs: Fix the smbd_response slab to allow usercopy (David Howells)\n- smb: client: make use of common smbdirect_socket_parameters (Stefan Metzmacher)\n- smb: smbdirect: introduce smbdirect_socket_parameters (Stefan Metzmacher)\n- smb: client: make use of common smbdirect_socket (Stefan Metzmacher)\n- smb: smbdirect: add smbdirect_socket.h (Stefan Metzmacher)\n- smb: smbdirect: add smbdirect.h with public structures (Stefan Metzmacher)\n- smb: client: make use of common smbdirect_pdu.h (Stefan Metzmacher)\n- smb: smbdirect: add smbdirect_pdu.h with protocol definitions (Stefan Metzmacher)\n- smb: client: fix potential deadlock when reconnecting channels (Paulo Alcantara)\n- drm/xe: Process deferred GGTT node removals on device unwind (Michal Wajdeczko)\n- drm/bridge: ti-sn65dsi86: Add HPD for DisplayPort connector type (Jayesh Choudhary)\n- drm/bridge: ti-sn65dsi86: make use of debugfs_init callback (Wolfram Sang)\n- drm/i915: fix build error some more (Arnd Bergmann)\n- drm/amd: Adjust output for discovery error handling (Mario Limonciello)\n- drm/amdgpu/discovery: optionally use fw based ip discovery (Alex Deucher)\n- net: selftests: fix TCP packet checksum (Jakub Kicinski)\n- ALSA: hda/realtek: Fix built-in mic on ASUS VivoBook X507UAR (Salvatore Bonaccorso)\n- atm: Release atm_dev_mutex after removing procfs in atm_dev_deregister(). (Kuniyuki Iwashima)\n- netlink: specs: tc: replace underscores with dashes in names (Jakub Kicinski)\n- net: enetc: Correct endianness handling in _enetc_rd_reg64 (Simon Horman)\n- libbpf: Fix possible use-after-free for externs (Adin Scannell)\n- um: ubd: Add missing error check in start_io_thread() (Tiwei Bie)\n- bnxt: properly flush XDP redirect lists (Yan Zhai)\n- vsock/uapi: fix linux/vm_sockets.h userspace compilation errors (Stefano Garzarella)\n- wifi: mac80211: finish link init before RCU publish (Johannes Berg)\n- wifi: mac80211: Create separate links for VLAN interfaces (Muna Sinada)\n- wifi: mac80211: Add link iteration macro for link data (Muna Sinada)\n- af_unix: Don't set -ECONNRESET for consumed OOB skb. (Kuniyuki Iwashima)\n- wifi: mac80211: fix beacon interval calculation overflow (Lachlan Hodges)\n- ethernet: ionic: Fix DMA mapping tests (Thomas Fourier)\n- libbpf: Fix null pointer dereference in btf_dump__free on allocation failure (Yuan Chen)\n- attach_recursive_mnt(): do not lock the covering tree when sliding something under it (Al Viro)\n- ALSA: usb-audio: Fix out-of-bounds read in snd_usb_get_audioformat_uac3() (Youngjun Lee)\n- Bluetooth: hci_core: Fix use-after-free in vhci_flush() (Kuniyuki Iwashima)\n- atm: clip: prevent NULL deref in clip_push() (Eric Dumazet)\n- HID: wacom: fix crash in wacom_aes_battery_handler() (Thomas Zeitlhofer)\n- drm/xe/display: Add check for alloc_ordered_workqueue() (Haoxiang Li)\n- Revert 'riscv: misaligned: fix sleeping function called during misaligned access handling' (Nam Cao)\n- Revert 'riscv: Define TASK_SIZE_MAX for __access_ok()' (Nam Cao)\n- lib/group_cpus: fix NULL pointer dereference from group_cpus_evenly() (Yu Kuai)\n- fs/proc/task_mmu: fix PAGE_IS_PFNZERO detection for the huge zero folio (David Hildenbrand)\n- s390/pkey: Prevent overflow in size calculation for memdup_user() (Fedor Pchelkin)\n- ASoC: amd: yc: Add DMI quirk for Lenovo IdeaPad Slim 5 15 (Oliver Schramm)\n- mm/damon/sysfs-schemes: free old damon_sysfs_scheme_filter-memcg_path on write (SeongJae Park)\n- smb: client: remove \t from TP_printk statements (Stefan Metzmacher)\n- ata: ahci: Use correct DMI identifier for ASUSPRO-D840SA LPM quirk (Niklas Cassel)\n- i2c: robotfuzz-osif: disable zero-length read messages (Wolfram Sang)\n- i2c: tiny-usb: disable zero-length read messages (Wolfram Sang)\n- af_unix: Don't leave consecutive consumed OOB skbs. (Kuniyuki Iwashima)\n- accel/ivpu: Trigger device recovery on engine reset/resume failure (Karol Wachowski)\n- accel/ivpu: Add debugfs interface for setting HWS priority bands (Karol Wachowski)\n- accel/ivpu: Separate DB ID and CMDQ ID allocations from CMDQ allocation (Karol Wachowski)\n- accel/ivpu: Make command queue ID allocated on XArray (Karol Wachowski)\n- accel/ivpu: Remove copy engine support (Andrzej Kacprowski)\n- accel/ivpu: Do not fail on cmdq if failed to allocate preemption buffers (Karol Wachowski)\n- PCI: apple: Set only available ports up (Janne Grunau)\n- PCI: apple: Use helper function for_each_child_of_node_scoped() (Zhang Zekun)\n- f2fs: don't over-report free space or inodes in statvfs (Chao Yu)\n- ASoC: codecs: wcd9335: Fix missing free of regulator supplies (Krzysztof Kozlowski)\n- ASoC: codec: wcd9335: Convert to GPIO descriptors (Peng Fan)\n- jfs: validate AG parameters in dbMount() to prevent crashes (Vasiliy Kovalev)\n- fs/jfs: consolidate sanity checking in dbMount (Dave Kleikamp)\n- btrfs: fix qgroup reservation leak on failure to allocate ordered extent (Filipe Manana)\n- btrfs: use unsigned types for constants defined as bit shifts (David Sterba)\n- btrfs: factor out nocow ordered extent and extent map generation into a helper (Qu Wenruo)\n- Revert 'drm/i915/gem: Allow EXEC_CAPTURE on recoverable contexts on DG1' (Joonas Lahtinen)\n- drm/i915/gem: Allow EXEC_CAPTURE on recoverable contexts on DG1 (Ville Syrjala)\n- btrfs: handle csum tree error with rescue=ibadroots correctly (Qu Wenruo)\n- ovl: Check for NULL d_inode() in ovl_dentry_upper() (Kees Cook)\n- scsi: ufs: core: Don't perform UFS clkscaling during host async scan (Ziqi Chen)\n- ceph: fix possible integer overflow in ceph_zero_objects() (Dmitry Kandybka)\n- ASoC: rt1320: fix speaker noise when volume bar is 100% (Shuming Fan)\n- ALSA: usb-audio: Add a quirk for Lenovo Thinkpad Thunderbolt 3 dock (Mario Limonciello)\n- ALSA: hda: Add new pci id for AMD GPU display HD audio controller (Vijendar Mukunda)\n- ALSA: hda: Ignore unsol events for cards being shut down (Cezary Rojewski)\n- riscv: add a data fence for CMODX in the kernel mode (Andy Chiu)\n- usb: typec: mux: do not return on EOPNOTSUPP in {mux, switch}_set (Michael Grzeschik)\n- usb: typec: displayport: Receive DP Status Update NAK request exit dp altmode (Jos Wang)\n- usb: gadget: f_hid: wake up readers on disable/unbind (Peter Korsgaard)\n- usb: cdc-wdm: avoid setting WDM_READ for ZLP-s (Robert Hodaszi)\n- usb: Add checks for snprintf() calls in usb_alloc_dev() (Andy Shevchenko)\n- usb: common: usb-conn-gpio: use a unique name for usb connector device (Chance Yang)\n- tty: serial: uartlite: register uart driver in init (Jakub Lewalski)\n- usb: potential integer overflow in usbg_make_tpg() (Chen Yufeng)\n- misc: tps6594-pfsm: Add NULL pointer check in tps6594_pfsm_probe() (Chenyuan Yang)\n- iio: adc: ad_sigma_delta: Fix use of uninitialized status_pos (Purva Yeshi)\n- usb: dwc2: also exit clock_gating when stopping udc while suspended (Michael Grzeschik)\n- coresight: Only check bottom two claim bits (James Clark)\n- 8250: microchip: pci1xxxx: Add PCIe Hot reset disable support for Rev C0 and later devices (Rengarajan S)\n- um: use proper care when taking mmap lock during segfault (Benjamin Berg)\n- um: Add cmpxchg8b_emu and checksum functions to asm-prototypes.h (Sami Tolvanen)\n- iio: pressure: zpa2326: Use aligned_s64 for the timestamp (Jonathan Cameron)\n- drm/scheduler: signal scheduled fence when kill job (Lin.Cao)\n- drm/amdgpu: seq64 memory unmap uses uninterruptible lock (Philip Yang)\n- bcache: fix NULL pointer in cache_set_flush() (Linggang Zeng)\n- amd/amdkfd: fix a kfd_process ref leak (Yifan Zhang)\n- md/md-bitmap: fix dm-raid max_write_behind setting (Yu Kuai)\n- nvme-tcp: sanitize request list handling (Hannes Reinecke)\n- nvme-tcp: fix I/O stalls on congested sockets (Hannes Reinecke)\n- PCI: imx6: Add workaround for errata ERR051624 (Richard Zhu)\n- PCI: apple: Fix missing OF node reference in apple_pcie_setup_port (Hector Martin)\n- PCI: dwc: Make link training more robust by setting PORT_LOGIC_LINK_WIDTH to one lane (Wenbin Yao)\n- dmaengine: xilinx_dma: Set dma_device directions (Thomas Gessler)\n- dmaengine: idxd: Check availability of workqueue allocated by idxd wq driver before using (Yi Sun)\n- rust: arm: fix unknown (to Clang) argument '-mno-fdpic' (Rudraksha Gupta)\n- rust: module: place cleanup_module() in .exit.text section (FUJITA Tomonori)\n- ksmbd: provide zero as a unique ID to the Mac client (Namjae Jeon)\n- ksmbd: allow a filename to contain special characters on SMB3.1.1 posix extension (Namjae Jeon)\n- hwmon: (pmbus/max34440) Fix support for max34451 (Alexis Czezar Torreno)\n- NFSv4: xattr handlers should check for absent nfs filehandles (Scott Mayhew)\n- cxl/region: Add a dev_err() on missing target list entries (Robert Richter)\n- fuse: fix race between concurrent setattrs from multiple nodes (Guang Yuan Wu)\n- leds: multicolor: Fix intensity setting while SW blinking (Sven Schwermer)\n- dm vdo indexer: don't read request structure after enqueuing (Matthew Sakai)\n- sunrpc: don't immediately retransmit on seqno miss (Nikhil Jha)\n- mfd: max14577: Fix wakeup source leaks on device unbind (Krzysztof Kozlowski)\n- mailbox: Not protect module_put with spin_lock_irqsave (Peng Fan)\n- NFSv4.2: fix setattr caching of TIME_[MODIFY|ACCESS]_SET when timestamps are delegated (Sagi Grimberg)\n- NFSv4.2: fix listxattr to return selinux security label (Olga Kornievskaia)\n- NFSv4: Always set NLINK even if the server doesn't support it (Han Young)\n- cifs: Fix encoding of SMB1 Session Setup NTLMSSP Request in non-UNICODE mode (Pali Rohar)\n- cifs: Fix cifs_query_path_info() for Windows NT servers (Pali Rohar)\n- cifs: Correctly set SMB1 SessionKey field in Session Setup Request (Pali Rohar)\n- LTS version: v6.12.35 (Jack Vogel)\n- bpftool: Fix cgroup command to only show cgroup bpf programs (Martin KaFai Lau)\n- cifs: Remove duplicate fattr-cf_dtype assignment from wsl_to_fattr() function (Pali Rohar)\n- gpio: mlxbf3: only get IRQ for device instance 0 (David Thompson)\n- perf test: Directory file descriptor leak (Ian Rogers)\n- perf evsel: Missed close() when probing hybrid core PMUs (Ian Rogers)\n- gpio: pca953x: fix wrong error probe return value (Sascha Hauer)\n- RISC-V: KVM: Don't treat SBI HFENCE calls as NOPs (Anup Patel)\n- RISC-V: KVM: Fix the size parameter check in SBI SFENCE calls (Anup Patel)\n- scsi: elx: efct: Fix memory leak in efct_hw_parse_filter() (Vitaliy Shevtsov)\n- arm64/ptrace: Fix stack-out-of-bounds read in regs_get_kernel_stack_nth() (Tengda Wu)\n- perf/core: Fix WARN in perf_cgroup_switch() (Luo Gengkun)\n- perf: Fix cgroup state vs ERROR (Peter Zijlstra)\n- perf: Fix sample vs do_exit() (Peter Zijlstra)\n- s390/pci: Fix __pcilg_mio_inuser() inline assembly (Heiko Carstens)\n- smb: client: fix max_sge overflow in smb_extract_folioq_to_rdma() (Stefan Metzmacher)\n- smb: client: fix first command failure during re-negotiation (zhangjian)\n- serial: sh-sci: Increment the runtime usage counter for the earlycon device (Claudiu Beznea)\n- serial: sh-sci: Clean sci_ports[0] after at earlycon exit (Claudiu Beznea)\n- smb: Log an error when close_all_cached_dirs fails (Paul Aurich)\n- dt-bindings: i2c: nvidia,tegra20-i2c: Specify the required properties (Akhil R)\n- EDAC/amd64: Correct number of UMCs for family 19h models 70h-7fh (Avadhut Naik)\n- net: atm: fix /proc/net/atm/lec handling (Eric Dumazet)\n- net: atm: add lec_mutex (Eric Dumazet)\n- mlxbf_gige: return EPROBE_DEFER if PHY IRQ is not available (David Thompson)\n- calipso: Fix null-ptr-deref in calipso_req_{set,del}attr(). (Kuniyuki Iwashima)\n- drm/xe/bmg: Update Wa_16023588340 (Vinay Belgaumkar)\n- drm/xe/gt: Update handling of xe_force_wake_get return (Himal Prasad Ghimiray)\n- drm/xe: Wire up device shutdown handler (Maarten Lankhorst)\n- ublk: santizize the arguments from userspace when adding a device (Ronnie Sahlberg)\n- net: lan743x: fix potential out-of-bounds write in lan743x_ptp_io_event_clock_get() (Alexey Kodanev)\n- eth: fbnic: avoid double free when failing to DMA-map FW msg (Jakub Kicinski)\n- tcp: fix passive TFO socket having invalid NAPI ID (David Wei)\n- tipc: fix null-ptr-deref when acquiring remote ip of ethernet bearer (Haixia Qu)\n- tcp: fix tcp_packet_delayed() for tcp_is_non_sack_preventing_reopen() behavior (Neal Cardwell)\n- atm: atmtcp: Free invalid length skb in atmtcp_c_send(). (Kuniyuki Iwashima)\n- mpls: Use rcu_dereference_rtnl() in mpls_route_input_rcu(). (Kuniyuki Iwashima)\n- wifi: carl9170: do not ping device which has failed to load firmware (Dmitry Antipov)\n- ptp: allow reading of currently dialed frequency to succeed on free-running clocks (Vladimir Oltean)\n- ptp: fix breakage after ptp_vclock_in_use() rework (Vladimir Oltean)\n- bnxt_en: Update MRU and RSS table of RSS contexts on queue reset (Pavan Chebbi)\n- bnxt_en: Add a helper function to configure MRU and RSS (Pavan Chebbi)\n- eth: bnxt: fix out-of-range access of vnic_info array (Taehee Yoo)\n- bnxt_en: Fix double invocation of bnxt_ulp_stop()/bnxt_ulp_start() (Kalesh AP)\n- net: netmem: fix skb_ensure_writable with unreadable skbs (Mina Almasry)\n- ksmbd: add free_transport ops in ksmbd connection (Namjae Jeon)\n- workqueue: Initialize wq_isolated_cpumask in workqueue_init_early() (Chuyi Zhou)\n- e1000e: set fixed clock frequency indication for Nahum 11 and Nahum 13 (Vitaly Lifshits)\n- ice: fix eswitch code memory leak in reset scenario (Grzegorz Nitka)\n- net: ice: Perform accurate aRFS flow match (Krishna Kumar)\n- io_uring/sqpoll: don't put task_struct on tctx setup failure (Jens Axboe)\n- aoe: clean device rq_list in aoedev_downdev() (Justin Sanders)\n- pldmfw: Select CRC32 when PLDMFW is selected (Simon Horman)\n- hwmon: (ltc4282) avoid repeated register write (Nuno Sa)\n- hwmon: (occ) fix unaligned accesses (Arnd Bergmann)\n- hwmon: (occ) Rework attribute registration for stack usage (Arnd Bergmann)\n- drm/i915/pmu: Fix build error with GCOV and AutoFDO enabled (Tzung-Bi Shih)\n- drm/nouveau/bl: increase buffer size to avoid truncate warning (Jacob Keller)\n- ionic: Prevent driver/fw getting out of sync on devcmd(s) (Brett Creeley)\n- drm/ssd130x: fix ssd132x_clear_screen() columns (John Keeping)\n- drm/msm/a7xx: Call CP_RESET_CONTEXT_STATE (Connor Abbott)\n- drm/msm: Fix CP_RESET_CONTEXT_STATE bitfield names (Connor Abbott)\n- drm/msm/dsi/dsi_phy_10nm: Fix missing initial VCO rate (Krzysztof Kozlowski)\n- drm/msm/disp: Correct porch timing for SDM845 (James A. MacInnes)\n- smb: fix secondary channel creation issue with kerberos by populating hostname when adding channels (Bharath SM)\n- ipv6: replace ipcm6_init calls with ipcm6_init_sk (Willem de Bruijn)\n- ipv6: remove leftover ip6 cookie initializer (Willem de Bruijn)\n- x86/tools: Drop duplicate unlikely() definition in insn_decoder_test.c (Nathan Chancellor)\n- Kunit to check the longest symbol length (Sergio Gonzalez Collado)\n- drm/v3d: Avoid NULL pointer dereference in v3d_job_update_stats() (Maira Canal)\n- nfsd: use threads array as-is in netlink interface (Jeff Layton)\n- erofs: remove unused trace event erofs_destroy_inode (Gao Xiang)\n- bpf: Fix L4 csum update on IPv6 in CHECKSUM_COMPLETE (Paul Chaignon)\n- net: Fix checksum update for ILA adj-transport (Paul Chaignon)\n- rust: compile libcore with edition 2024 for 1.87+ (Gary Guo)\n- kbuild: rust: add rustc-min-version support function (Miguel Ojeda)\n- drm/amdgpu: read back register after written for VCN v4.0.5 (David (Ming Qiang) Wu)\n- mm/hugetlb: unshare page tables during VMA split, not before (Jann Horn)\n- iio: accel: fxls8962af: Fix temperature calculation (Sean Nyekjaer)\n- ALSA: hda/realtek: Add quirk for Asus GU605C (Richard Fitzgerald)\n- ALSA: hda/realtek: Fix built-in mic on ASUS VivoBook X513EA (Chris Chiu)\n- ALSA: hda/realtek: enable headset mic on Latitude 5420 Rugged (Jonathan Lane)\n- ALSA: hda/realtek - Add mute LED support for HP Victus 16-s1xxx and HP Victus 15-fa1xxx (Edip Hazuri)\n- ALSA: hda/intel: Add Thinkpad E15 to PM deny list (Takashi Iwai)\n- ALSA: usb-audio: Rename ALSA kcontrol PCM and PCM1 for the KTMicro sound card (wangdicheng)\n- arm64: Restrict pagetable teardown to avoid false warning (Dev Jain)\n- wifi: cfg80211: init wiphy_work before allocating rfkill fails (Edward Adam Davis)\n- wifi: ath12k: Clear affinity hint before calling ath12k_pci_free_irq() in error path (Manivannan Sadhasivam)\n- Input: sparcspkr - avoid unannotated fall-through (WangYuli)\n- cpufreq/amd-pstate: Add missing NULL ptr check in amd_pstate_update (Dhananjay Ugwekar)\n- wifi: rtw89: phy: add dummy C2H event handler for report of TAS power (Ping-Ke Shih)\n- atm: Revert atm_account_tx() if copy_from_iter_full() fails. (Kuniyuki Iwashima)\n- sched_ext, sched/core: Don't call scx_group_set_weight() prematurely from sched_create_group() (Tejun Heo)\n- platform/x86/intel-uncore-freq: Fail module load when plat_info is NULL (Srinivas Pandruvada)\n- selinux: fix selinux_xfrm_alloc_user() to set correct ctx_len (Stephen Smalley)\n- platform/x86: ideapad-laptop: use usleep_range() for EC polling (Rong Zhang)\n- ksmbd: fix null pointer dereference in destroy_previous_session (Namjae Jeon)\n- selftests/x86: Add a test to detect infinite SIGTRAP handler loop (Xin Li (Intel))\n- x86/virt/tdx: Avoid indirect calls to TDX assembly functions (Kai Huang)\n- udmabuf: use sgtable-based scatterlist wrappers (Marek Szyprowski)\n- mm: close theoretical race where stale TLB entries could linger (Ryan Roberts)\n- net: clear the dst when changing skb protocol (Jakub Kicinski)\n- net_sched: sch_sfq: reject invalid perturb period (Eric Dumazet)\n- nvme: always punt polled uring_cmd end_io work to task_work (Jens Axboe)\n- scsi: s390: zfcp: Ensure synchronous unit_add (Peter Oberparleiter)\n- scsi: storvsc: Increase the timeouts to storvsc_timeout (Dexuan Cui)\n- smb: improve directory cache reuse for readdir operations (Bharath SM)\n- cifs: do not disable interface polling on failure (Shyam Prasad N)\n- cifs: serialize other channels when query server interfaces is pending (Shyam Prasad N)\n- cifs: deal with the channel loading lag while picking channels (Shyam Prasad N)\n- jffs2: check jffs2_prealloc_raw_node_refs() result in few other places (Fedor Pchelkin)\n- jffs2: check that raw node were preallocated before writing summary (Artem Sadovnikov)\n- LoongArch: Fix panic caused by NULL-PMD in huge_pte_offset() (Tianyang Zhang)\n- LoongArch: Avoid using / as 'mask' for csrxchg (Huacai Chen)\n- LoongArch: vDSO: Correctly use asm parameters in syscall wrappers (Thomas Weissschuh)\n- platform/loongarch: laptop: Add backlight power control support (Yao Zi)\n- platform/loongarch: laptop: Unregister generic_sub_drivers on exit (Yao Zi)\n- platform/loongarch: laptop: Get brightness setting from EC on probe (Yao Zi)\n- drivers/rapidio/rio_cm.c: prevent possible heap overwrite (Andrew Morton)\n- io_uring: fix task leak issue in io_wq_create() (Penglei Jiang)\n- io_uring/kbuf: don't truncate end buffer for multiple buffer peeks (Jens Axboe)\n- powerpc/eeh: Fix missing PE bridge reconfiguration during VFIO EEH recovery (Narayana Murty N)\n- powerpc/vdso: Fix build of VDSO32 with pcrel (Christophe Leroy)\n- platform/x86: dell_rbu: Stop overwriting data buffer (Stuart Hayes)\n- platform/x86: dell_rbu: Fix list usage (Stuart Hayes)\n- platform/x86/amd: pmf: Prevent amd_pmf_tee_deinit() from running twice (Mario Limonciello)\n- platform/x86/amd: pmc: Clear metrics table at start of cycle (Mario Limonciello)\n- fs/xattr.c: fix simple_xattr_list() (Stephen Smalley)\n- Revert 'bus: ti-sysc: Probe for l4_wkup and l4_cfg interconnect devices first' (Alexander Sverdlin)\n- tee: Prevent size calculation wraparound on 32-bit kernels (Jann Horn)\n- ARM: OMAP2+: Fix l4ls clk domain handling in STANDBY (Sukrut Bellary)\n- bus: fsl-mc: increase MC_CMD_COMPLETION_TIMEOUT_MS value (Laurentiu Tudor)\n- watchdog: da9052_wdt: respect TWDMIN (Marcus Folkesson)\n- fbcon: Make sure modelist not set on unregistered console (Kees Cook)\n- net/mlx5: HWS, Harden IP version definer checks (Vlad Dogaru)\n- wifi: ath12k: Pass correct values of center freq1 and center freq2 for 160 MHz (Suraj P Kizhakkethil)\n- wifi: ath12k: fix incorrect CE addresses (Balamurugan S)\n- wifi: ath12k: fix link valid field initialization in the monitor Rx (Hari Chandrakanthan)\n- wifi: ath11k: determine PM policy based on machine model (Baochen Qiang)\n- octeontx2-pf: Add error log forcn10k_map_unmap_rq_policer() (Wentao Liang)\n- net: ethernet: cortina: Use TOE/TSO on all TCP (Linus Walleij)\n- bpf, sockmap: Fix data lost during EAGAIN retries (Jiayuan Chen)\n- f2fs: fix to set atomic write status more clear (Chao Yu)\n- usbnet: asix AX88772: leave the carrier control to phylink (Krzysztof Halasa)\n- ice: fix check for existing switch rule (Mateusz Pacuszka)\n- RDMA/hns: initialize db in update_srq_db() (Chen Linxuan)\n- ixgbe: Fix unreachable retry logic in combined and byte I2C write functions (Rand Deeb)\n- i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Kyungwook Boo)\n- sock: Correct error checking condition for (assign|release)_proto_idx() (Zijun Hu)\n- scsi: lpfc: Use memcpy() for BIOS version (Daniel Wagner)\n- wifi: ath12k: fix failed to set mhi state error during reboot with hardware grouping (Aditya Kumar Singh)\n- pinctrl: mcp23s08: Reset all pins to input at probe (Mike Looijmans)\n- isofs: fix Y2038 and Y2156 issues in Rock Ridge TF entry (Jonas 'Sortie' Termansen)\n- software node: Correct a OOB check in software_node_get_reference_args() (Zijun Hu)\n- net: ethernet: ti: am65-cpsw: handle -EPROBE_DEFER (Michael Walle)\n- wifi: ath12k: using msdu end descriptor to check for rx multicast packets (Sarika Sharma)\n- bnxt_en: Remove unused field 'ref_count' in struct bnxt_ulp (Kalesh AP)\n- vxlan: Do not treat dst cache initialization errors as fatal (Ido Schimmel)\n- net: bridge: mcast: re-implement br_multicast_{enable, disable}_port functions (Yong Wang)\n- net: bridge: mcast: update multicast contex when vlan state is changed (Yong Wang)\n- wifi: iwlwifi: Add missing MODULE_FIRMWARE for Qu-c0-jf-b0 (Victor Gonzalo)\n- Revert 'mac80211: Dynamically set CoDel parameters per station' (Toke Hoiland-Jorgensen)\n- wifi: mac80211: VLAN traffic in multicast path (Muna Sinada)\n- bpf: Use proper type to calculate bpf_raw_tp_null_args.mask index (Shung-Hsi Yu)\n- net/mlx5: HWS, Fix IP version decision (Vlad Dogaru)\n- netdevsim: Mark NAPI ID on skb in nsim_rcv (Joe Damato)\n- wifi: mac80211_hwsim: Prevent tsf from setting if beacon is disabled (Edward Adam Davis)\n- wifi: rtw89: 8922a: fix TX fail with wrong VCO setting (Kuan-Chung Chen)\n- wifi: iwlwifi: pcie: make sure to lock rxq-read (Miri Korenblit)\n- iommu/amd: Ensure GA log notifier callbacks finish running before module unload (Sean Christopherson)\n- scsi: smartpqi: Add new PCI IDs (David Strahan)\n- scsi: lpfc: Fix lpfc_check_sli_ndlp() handling for GEN_REQUEST64 commands (Justin Tee)\n- libbpf: Add identical pointer detection to btf_dedup_is_equiv() (Alan Maguire)\n- netfilter: nft_set_pipapo: clamp maximum map bucket size to INT_MAX (Pablo Neira Ayuso)\n- f2fs: fix to bail out in get_new_segment() (Chao Yu)\n- wifi: iwlwifi: mvm: fix beacon CCK flag (Johannes Berg)\n- hid-asus: check ROG Ally MCU version and warn (Luke D. Jones)\n- clk: rockchip: rk3036: mark ddrphy as critical (Heiko Stuebner)\n- wifi: mac80211: do not offer a mesh path if forwarding is disabled (Benjamin Berg)\n- wireless: purelifi: plfxlc: fix memory leak in plfxlc_usb_wreq_asyn() (Salah Triki)\n- net: vertexcom: mse102x: Return code for mse102x_rx_pkt_spi (Stefan Wahren)\n- net: mlx4: add SOF_TIMESTAMPING_TX_SOFTWARE flag when getting ts info (Jason Xing)\n- pinctrl: armada-37xx: propagate error from armada_37xx_gpio_get() (Gabor Juhos)\n- libbpf: Check bpf_map_skeleton link for NULL (Mykyta Yatsenko)\n- pinctrl: armada-37xx: propagate error from armada_37xx_pmx_gpio_set_direction() (Gabor Juhos)\n- net: stmmac: generate software timestamp just before the doorbell (Jason Xing)\n- bpf: Pass the same orig_call value to trampoline functions (Ilya Leoshkevich)\n- pinctrl: armada-37xx: propagate error from armada_37xx_gpio_get_direction() (Gabor Juhos)\n- pinctrl: armada-37xx: propagate error from armada_37xx_pmx_set_by_name() (Gabor Juhos)\n- net: atlantic: generate software timestamp just before the doorbell (Jason Xing)\n- xfrm: validate assignment of maximal possible SEQ number (Leon Romanovsky)\n- net: page_pool: Don't recycle into cache on PREEMPT_RT (Sebastian Andrzej Siewior)\n- ipv4/route: Use this_cpu_inc() for stats on PREEMPT_RT (Sebastian Andrzej Siewior)\n- x86/sgx: Prevent attempts to reclaim poisoned pages (Andrew Zaborowski)\n- tcp: add receive queue awareness in tcp_rcv_space_adjust() (Eric Dumazet)\n- tcp: fix initial tp-rcvq_space.space value for passive TS enabled flows (Eric Dumazet)\n- tcp: remove zero TCP TS samples for autotuning (Eric Dumazet)\n- tcp: always seek for minimal rtt in tcp_rcv_rtt_update() (Eric Dumazet)\n- wifi: rtw89: leave idle mode when setting WEP encryption for AP mode (Dian-Syuan Yang)\n- iommu/amd: Allow matching ACPI HID devices without matching UIDs (Mario Limonciello)\n- wifi: ath11k: Fix QMI memory reuse logic (Muhammad Usama Anjum)\n- wifi: ath12k: fix a possible dead lock caused by ab-base_lock (Baochen Qiang)\n- wifi: ath12k: fix macro definition HAL_RX_MSDU_PKT_LENGTH_GET (Kang Yang)\n- net: dlink: add synchronization for stats update (Moon Yeounsu)\n- clk: qcom: gcc-x1e80100: Set FORCE MEM CORE for UFS clocks (Taniya Das)\n- i2c: npcm: Add clock toggle recovery (Tali Perry)\n- i2c: tegra: check msg length in SMBUS block read (Akhil R)\n- cpufreq: scmi: Skip SCMI devices that aren't used by the CPUs (Mike Tipton)\n- libbpf/btf: Fix string handling to support multi-split BTF (Alan Maguire)\n- sctp: Do not wake readers in __sctp_write_space() (Petr Malat)\n- wifi: mac80211: validate SCAN_FLAG_AP in scan request during MLO (Aditya Kumar Singh)\n- wifi: mt76: mt7925: introduce thermal protection (Leon Yen)\n- wifi: mt76: mt7921: add 160 MHz AP for mt7922 device (Samuel Williams)\n- wifi: mt76: mt76x2: Add support for LiteOn WN4516R,WN4519R (Henk Vergonet)\n- Bluetooth: btusb: Add new VID/PID 13d3/3630 for MT7925 (Jiande Lu)\n- emulex/benet: correct command version selection in be_cmd_get_stats() (Alok Tiwari)\n- wifi: mt76: mt7996: drop fragments with multicast or broadcast RA (Benjamin Lin)\n- i2c: designware: Invoke runtime suspend on quick slave re-registration (Tan En De)\n- Bluetooth: btusb: Add new VID/PID 13d3/3584 for MT7922 (Liwei Sun)\n- bpf: Check rcu_read_lock_trace_held() in bpf_map_lookup_percpu_elem() (Hou Tao)\n- f2fs: use vmalloc instead of kvmalloc in .init_{,de}compress_ctx (Chao Yu)\n- tipc: use kfree_sensitive() for aead cleanup (Zilin Guan)\n- net: lan743x: Modify the EEPROM and OTP size for PCI1xxxx devices (Rengarajan S)\n- net: macb: Check return value of dma_set_mask_and_coherent() (Sergio Perez Gonzalez)\n- ACPI: battery: negate current when discharging (Peter Marheine)\n- power: supply: max17040: adjust thermal channel scaling (Svyatoslav Ryhel)\n- PM: runtime: fix denying of auto suspend in pm_suspend_timer_fn() (Charan Teja Kalla)\n- gpiolib: of: Add polarity quirk for s5m8767 (Peng Fan)\n- Make 'cc-option' work correctly for the -Wno-xyzzy pattern (Linus Torvalds)\n- ASoC: tegra210_ahub: Add check to of_device_get_match_data() (Yuanjun Gong)\n- platform-msi: Add msi_remove_device_irq_domain() in platform_device_msi_free_irqs_all() (Frank Li)\n- ACPICA: utilities: Fix overflow check in vsnprintf() (gldrk)\n- pmdomain: core: Reset genpd-states to avoid freeing invalid data (Ulf Hansson)\n- power: supply: bq27xxx: Retrieve again when busy (Jerry Lv)\n- ALSA: hda: cs35l41: Fix swapped l/r audio channels for Acer Helios laptops (Stefan Binding)\n- ACPICA: Apply pack(1) to union aml_resource (Tamir Duberstein)\n- ACPICA: fix acpi parse and parseext cache leaks (Seunghun Han)\n- ACPI: Add missing prototype for non CONFIG_SUSPEND/CONFIG_X86 case (Mario Limonciello)\n- ACPI: bus: Bail out if acpi_kobj registration fails (Armin Wolf)\n- ASoC: intel/sdw_utils: Assign initial value in asoc_sdw_rt_amp_spk_rtd_init() (I Hsin Cheng)\n- ASoC: tas2770: Power cycle amp on ISENSE/VSENSE change (Hector Martin)\n- ACPICA: Avoid sequence overread in call to strncmp() (Ahmed Salem)\n- mmc: Add quirk to disable DDR50 tuning (Erick Shepherd)\n- power: supply: collie: Fix wakeup source leaks on device unbind (Krzysztof Kozlowski)\n- clocksource: Fix the CPUs' choice in the watchdog per CPU verification (Guilherme G. Piccoli)\n- ASoC: amd: yc: Add quirk for Lenovo Yoga Pro 7 14ASP9 (Talhah Peerbhai)\n- ACPICA: fix acpi operand cache leak in dswstate.c (Seunghun Han)\n- iio: adc: ad7606_spi: fix reg write value mask (David Lechner)\n- iio: adc: ti-ads1298: Kconfig: add kfifo dependency to fix module build (Arthur-Prince)\n- iio: adc: ad7944: mask high bits on direct read (David Lechner)\n- iio: imu: inv_icm42600: Fix temperature calculation (Sean Nyekjaer)\n- mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (Jann Horn)\n- dummycon: Trigger redraw when switching consoles with deferred takeover (Thomas Zimmermann)\n- accel/ivpu: Fix warning in ivpu_gem_bo_free() (Jacek Lawrynowicz)\n- accel/ivpu: Use dma_resv_lock() instead of a custom mutex (Jacek Lawrynowicz)\n- accel/ivpu: Use firmware names from upstream repo (Jacek Lawrynowicz)\n- accel/ivpu: Improve buffer object logging (Jacek Lawrynowicz)\n- iio: accel: fxls8962af: Fix temperature scan element sign (Sean Nyekjaer)\n- PCI: dw-rockchip: Fix PHY function call sequence in rockchip_pcie_phy_deinit() (Diederik de Haas)\n- PCI: dw-rockchip: Remove PCIE_L0S_ENTRY check from rockchip_pcie_link_up() (Shawn Lin)\n- PCI: Fix lock symmetry in pci_slot_unlock() (Ilpo Jarvinen)\n- PCI: Add ACS quirk for Loongson PCIe (Huacai Chen)\n- PCI: dwc: ep: Correct PBA offset in .set_msix() callback (Niklas Cassel)\n- PCI: cadence-ep: Correct PBA offset in .set_msix() callback (Niklas Cassel)\n- uio_hv_generic: Align ring size to system page (Long Li)\n- uio_hv_generic: Use correct size for interrupt and monitor pages (Long Li)\n- Drivers: hv: Allocate interrupt and monitor pages aligned to system page boundary (Long Li)\n- smb: client: add NULL check in automount_fullpath (Ruben Devos)\n- cifs: dns resolution is needed only for primary channel (Shyam Prasad N)\n- cifs: update dstaddr whenever channel iface is updated (Shyam Prasad N)\n- cifs: reset connections for all channels when reconnect requested (Shyam Prasad N)\n- remoteproc: k3-m4: Don't assert reset in detach routine (Beleswar Padhi)\n- remoteproc: core: Release rproc-clean_table after rproc_attach() fails (Xiaolei Wang)\n- remoteproc: core: Cleanup acquired resources when rproc_handle_resources() fails in rproc_attach() (Xiaolei Wang)\n- regulator: max14577: Add error check for max14577_read_reg() (Wentao Liang)\n- ovl: Fix nested backing file paths (Andre Almeida)\n- mips: Add -std= flag specified in KBUILD_CFLAGS to vdso CFLAGS (Khem Raj)\n- staging: iio: ad5933: Correct settling cycles encoding per datasheet (Gabriel Shahrouzi)\n- pwm: axi-pwmgen: fix missing separate external clock (David Lechner)\n- video: screen_info: Relocate framebuffers behind PCI bridges (Thomas Zimmermann)\n- sysfb: Fix screen_info type check for VGA (Thomas Zimmermann)\n- KVM: s390: rename PROT_NONE to PROT_TYPE_DUMMY (Lorenzo Stoakes)\n- net: ch9200: fix uninitialised access during mii_nway_restart (Qasim Ijaz)\n- phy: fsl-imx8mq-usb: fix phy_tx_vboost_level_from_property() (Xu Yang)\n- dm: lock limits when reading them (Mikulas Patocka)\n- ftrace: Fix UAF when lookup kallsym after ftrace disabled (Ye Bin)\n- mtd: rawnand: qcom: Fix read len for onfi param page (Md Sadre Alam)\n- dm-verity: fix a memory leak if some arguments are specified multiple times (Mikulas Patocka)\n- dm-mirror: fix a tiny race condition (Mikulas Patocka)\n- KVM: VMX: Flush shadow VMCS on emergency reboot (Chao Gao)\n- KVM: SVM: Clear current_vmcb during vCPU free for all *possible* CPUs (Yosry Ahmed)\n- mtd: nand: sunxi: Add randomizer configuration before randomizer enable (Wentao Liang)\n- mtd: rawnand: sunxi: Add randomizer configuration in sunxi_nfc_hw_ecc_write_chunk (Wentao Liang)\n- firmware: arm_scmi: Ensure that the message-id supports fastchannel (Sibi Sankar)\n- configfs-tsm-report: Fix NULL dereference of tsm_ops (Dan Williams)\n- soc: qcom: pmic_glink_altmode: fix spurious DP hotplug events (Johan Hovold)\n- mm: fix ratelimit_pages update error in dirty_ratio_handler() (Jinliang Zheng)\n- RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (Shin'ichiro Kawasaki)\n- watchdog: fix watchdog may detect false positive of softlockup (Luo Gengkun)\n- ipc: fix to protect IPCS lookups using RCU (Jeongjun Park)\n- clk: meson-g12a: add missing fclk_div2 to spicc (Da Xue)\n- parisc: fix building with gcc-15 (Arnd Bergmann)\n- vgacon: Add check for vc_origin address range in vgacon_scroll() (GONG Ruiqi)\n- parisc/unaligned: Fix hex output to show 8 hex chars (Helge Deller)\n- fbdev: Fix fb_set_var to prevent null-ptr-deref in fb_videomode_to_var (Murad Masimov)\n- EDAC/altera: Use correct write width with the INTTEST register (Niravkumar L Rabara)\n- fbdev: Fix do_register_framebuffer to prevent null-ptr-deref in fb_videomode_to_var (Murad Masimov)\n- iommu/vt-d: Restore context entry setup order for aliased devices (Lu Baolu)\n- net: ftgmac100: select FIXED_PHY (Heiner Kallweit)\n- net/sched: fix use-after-free in taprio_dev_notifier (Hyunwoo Kim)\n- NFC: nci: uart: Set tty-disc_data only in success path (Krzysztof Kozlowski)\n- hwmon: (ftsteutates) Fix TOCTOU race in fts_read() (Gui-Dong Han)\n- f2fs: fix to do sanity check on sit_bitmap_size (Chao Yu)\n- f2fs: prevent kernel warning due to negative i_nlink from corrupted image (Jaegeuk Kim)\n- f2fs: fix to do sanity check on ino and xnid (Chao Yu)\n- Input: gpio-keys - fix possible concurrent access in gpio_keys_irq_timer() (Gatien Chevallier)\n- Input: ims-pcu - check record size in ims_pcu_flash_firmware() (Dan Carpenter)\n- ext4: only dirty folios when data journaling regular files (Brian Foster)\n- ext4: ensure i_size is smaller than maxbytes (Zhang Yi)\n- ext4: factor out ext4_get_maxbytes() (Zhang Yi)\n- ext4: fix calculation of credits for extent tree modification (Jan Kara)\n- ext4: inline: fix len overflow in ext4_prepare_inline_data (Thadeu Lima de Souza Cascardo)\n- bus: fsl-mc: fix GET/SET_TAILDROP command ids (Wan Junjie)\n- bus: fsl-mc: do not add a device-link for the UAPI used DPMCP device (Ioana Ciornei)\n- ata: ahci: Disallow LPM for Asus B550-F motherboard (Mikko Korhonen)\n- ata: ahci: Disallow LPM for ASUSPRO-D840SA motherboard (Niklas Cassel)\n- ata: pata_via: Force PIO for ATAPI devices on VT6415/VT6330 (Tasos Sahanidis)\n- bus: firewall: Fix missing static inline annotations for stubs (Krzysztof Kozlowski)\n- cgroup,freezer: fix incomplete freezing when attaching tasks (Chen Ridong)\n- ceph: set superblock s_magic for IMA fsmagic matching (Dennis Marttinen)\n- ceph: avoid kernel BUG for encrypted inode with unaligned file size (Viacheslav Dubeyko)\n- can: tcan4x5x: fix power regulator retrieval during probe (Brett Werling)\n- can: kvaser_pciefd: refine error prone echo_skb_max handling logic (Fedor Pchelkin)\n- bus: mhi: host: Fix conflict between power_up and SYSERR (Jeff Hugo)\n- bus: mhi: ep: Update read pointer only after buffer is written (Sumit Kumar)\n- block: Clear BIO_EMULATES_ZONE_APPEND flag on BIO completion (Damien Le Moal)\n- ASoC: codecs: wcd937x: Drop unused buck_supply (Krzysztof Kozlowski)\n- ASoC: codecs: wcd9375: Fix double free of regulator supplies (Krzysztof Kozlowski)\n- ARM: omap: pmic-cpcap: do not mess around without CPCAP or OMAP4 (Andreas Kemnade)\n- ARM: 9447/1: arm/memremap: fix arch_memremap_can_ram_remap() (Ross Stutterheim)\n- arm64/mm: Close theoretical race where stale TLB entry remains valid (Ryan Roberts)\n- media: uvcvideo: Fix deferred probing error (Ricardo Ribalda)\n- media: uvcvideo: Send control events for partial succeeds (Ricardo Ribalda)\n- media: uvcvideo: Return the number of processed controls (Ricardo Ribalda)\n- media: imx-jpeg: Cleanup after an allocation error (Ming Qian)\n- media: imx-jpeg: Reset slot data pointers when freed (Ming Qian)\n- media: imx-jpeg: Move mxc_jpeg_free_slot_data() ahead (Ming Qian)\n- media: imx-jpeg: Drop the first error frames (Ming Qian)\n- media: vivid: Change the siize of the composing (Denis Arefev)\n- media: vidtv: Terminating the subsequent process of initialization failure (Edward Adam Davis)\n- media: videobuf2: use sgtable-based scatterlist wrappers (Marek Szyprowski)\n- media: venus: Fix probe error handling (Loic Poulain)\n- media: v4l2-dev: fix error handling in __video_register_device() (Ma Ke)\n- media: omap3isp: use sgtable-based scatterlist wrappers (Marek Szyprowski)\n- media: mediatek: vcodec: Correct vsi_core framebuffer size (Fei Shao)\n- media: ipu6: Remove workaround for Meteor Lake ES2 (Hao Yao)\n- media: intel/ipu6: Fix dma mask for non-secure mode (Stanislaw Gruszka)\n- media: imagination: fix a potential memory leak in e5010_probe() (Haoxiang Li)\n- media: i2c: imx335: Fix frame size enumeration (Kieran Bingham)\n- media: gspca: Add error handling for stv06xx_read_sensor() (Wentao Liang)\n- media: davinci: vpif: Fix memory leak in probe error path (Dmitry Nikiforov)\n- media: cxusb: no longer judge rbuf when the write fails (Edward Adam Davis)\n- media: ccs-pll: Check for too high VT PLL multiplier in dual PLL case (Sakari Ailus)\n- media: ccs-pll: Correct the upper limit of maximum op_pre_pll_clk_div (Sakari Ailus)\n- media: ccs-pll: Start OP pre-PLL multiplier search from correct value (Sakari Ailus)\n- media: ov2740: Move pm-runtime cleanup on probe-errors to proper place (Hans de Goede)\n- media: ccs-pll: Start VT pre-PLL multiplier search from correct value (Sakari Ailus)\n- media: i2c: ds90ub913: Fix returned fmt from .set_fmt() (Tomi Valkeinen)\n- media: nxp: imx8-isi: better handle the m2m usage_count (Laurentiu Palcu)\n- media: imx335: Use correct register width for HNUM (Umang Jain)\n- media: ov5675: suppress probe deferral errors (Johan Hovold)\n- media: ov8856: suppress probe deferral errors (Johan Hovold)\n- wifi: rtlwifi: disable ASPM for RTL8723BE with subsystem ID 11ad:1723 (Mingcong Bai)\n- wifi: rtw88: usb: Reduce control message timeout to 500 ms (Bitterblue Smith)\n- svcrdma: Unregister the device if svc_rdma_accept() fails (Chuck Lever)\n- jbd2: fix data-race and null-ptr-deref in jbd2_journal_dirty_metadata() (Jeongjun Park)\n- wifi: ath12k: fix ring-buffer corruption (Johan Hovold)\n- fs/nfs/read: fix double-unlock bug in nfs_return_empty_folio() (Max Kellermann)\n- NFSv4: Don't check for OPEN feature support in v4.1 (Scott Mayhew)\n- SUNRPC: Prevent hang on NFS mount with xprtsec=[m]tls (Chuck Lever)\n- nfsd: Initialize ssc before laundromat_work to prevent NULL dereference (Li Lingfeng)\n- nfsd: nfsd4_spo_must_allow() must check this is a v4 compound request (NeilBrown)\n- NFSD: Implement FATTR4_CLONE_BLKSIZE attribute (Chuck Lever)\n- NFSD: fix race between nfsd registration and exports_proc (Maninder Singh)\n- NFSD: unregister filesystem in case genl_register_family() fails (Maninder Singh)\n- wifi: ath11k: fix ring-buffer corruption (Johan Hovold)\n- wifi: rtw88: usb: Upload the firmware in bigger chunks (Bitterblue Smith)\n- wifi: ath11k: fix rx completion meta data corruption (Johan Hovold)\n- wifi: mt76: mt7925: fix host interrupt register initialization (Michael Lo)\n- wifi: p54: prevent buffer-overflow in p54_rx_eeprom_readback() (Christian Lamparter)\n- net/mlx5: Add error handling in mlx5_query_nic_vport_node_guid() (Wentao Liang)\n- net/mlx5_core: Add error handling inmlx5_query_nic_vport_qkey_viol_cntr() (Wentao Liang)\n- regulator: max20086: Change enable gpio to optional (Joao Paulo Goncalves)\n- regulator: max20086: Fix MAX200086 chip id (Joao Paulo Goncalves)\n- s390/pci: Serialize device addition and removal (Niklas Schnelle)\n- s390/pci: Allow re-add of a reserved but not yet removed device (Niklas Schnelle)\n- s390/pci: Prevent self deletion in disable_slot() (Niklas Schnelle)\n- s390/pci: Remove redundant bus removal and disable from zpci_release_device() (Niklas Schnelle)\n- powerpc/pseries/msi: Avoid reading PCI device registers in reduced power states (Gautam Menghani)\n- io_uring/kbuf: account ring io_buffer_list memory (Pavel Begunkov)\n- io_uring: account drain memory to cgroup (Pavel Begunkov)\n- ASoC: amd: sof_amd_sdw: Fix unlikely uninitialized variable use in create_sdw_dailinks() (Vijendar Mukunda)\n- ASoC: meson: meson-card-utils: use of_property_present() for DT parsing (Martin Blumenstingl)\n- ASoC: qcom: sdm845: Add error handling in sdm845_slim_snd_hw_params() (Wentao Liang)\n- crypto: qat - add shutdown handler to qat_dh895xcc (Giovanni Cabiddu)\n- crypto: qat - add shutdown handler to qat_c62x (Giovanni Cabiddu)\n- crypto: qat - add shutdown handler to qat_4xxx (Giovanni Cabiddu)\n- crypto: qat - add shutdown handler to qat_420xx (Giovanni Cabiddu)\n- crypto: qat - add shutdown handler to qat_c3xxx (Giovanni Cabiddu)\n- gfs2: move msleep to sleepable context (Alexander Aring)\n- crypto: marvell/cesa - Do not chain submitted requests (Herbert Xu)\n- configfs: Do not override creating attribute file failure in populate_attrs() (Zijun Hu)\n- LTS version: v6.12.34 (Jack Vogel)\n- thermal/drivers/mediatek/lvts: Remove unused lvts_debugfs_exit (Arnd Bergmann)\n- drm/meson: Use 1000ULL when operating with mode-clock (I Hsin Cheng)\n- gfs2: Don't clear sb-s_fs_info in gfs2_sys_fs_add (Andrew Price)\n- overflow: Introduce __DEFINE_FLEX for having no initializer (Kees Cook)\n- net: usb: aqc111: debug info before sanitation (Oliver Neukum)\n- usb: misc: onboard_usb_dev: fix build warning for CONFIG_USB_ONBOARD_DEV_USB5744=n (Arnd Bergmann)\n- regulator: dt-bindings: mt6357: Drop fixed compatible requirement (Nicolas F. R. A. Prado)\n- calipso: unlock rcu before returning -EAFNOSUPPORT (Eric Dumazet)\n- x86/fred/signal: Prevent immediate repeat of single step trap on return from SIGTRAP handler (Xin Li (Intel))\n- x86/iopl: Cure TIF_IO_BITMAP inconsistencies (Thomas Gleixner)\n- xen/arm: call uaccess_ttbr0_enable for dm_op hypercall (Stefano Stabellini)\n- xfs: don't assume perags are initialised when trimming AGs (Dave Chinner)\n- ring-buffer: Move cpus_read_lock() outside of buffer-mutex (Steven Rostedt)\n- ring-buffer: Fix buffer locking in ring_buffer_subbuf_order_set() (Dmitry Antipov)\n- ring-buffer: Do not trigger WARN_ON() due to a commit_overrun (Steven Rostedt)\n- 9p: Add a migrate_folio method (Matthew Wilcox (Oracle))\n- usb: typec: tcpm: move tcpm_queue_vdm_unlocked to asynchronous work (RD Babiera)\n- usb: typec: tcpm/tcpci_maxim: Fix bounds check in process_rx() (Amit Sunil Dhamne)\n- usb: Flush altsetting 0 endpoints before reinitializating them after reset. (Mathias Nyman)\n- usb: cdnsp: Fix issue with detecting USB 3.2 speed (Pawel Laszczak)\n- usb: cdnsp: Fix issue with detecting command completion event (Pawel Laszczak)\n- usb: misc: onboard_usb_dev: Fix usb5744 initialization sequence (Jonathan Stroud)\n- tty: serial: 8250_omap: fix TX with DMA for am33xx (Jiri Slaby (SUSE))\n- VMCI: fix race between vmci_host_setup_notify and vmci_ctx_unset_notify (Wupeng Ma)\n- usb: usbtmc: Fix read_stb function and get_stb ioctl (Dave Penkler)\n- nvmem: zynqmp_nvmem: unbreak driver after cleanup (Peter Korsgaard)\n- posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (Oleg Nesterov)\n- HID: usbhid: Eliminate recurrent out-of-bounds bug in usbhid_parse() (Terry Junge)\n- ALSA: usb-audio: Add implicit feedback quirk for RODE AI-1 (David Heimann)\n- Revert 'wifi: mwifiex: Fix HT40 bandwidth issue.' (Francesco Dolcini)\n- tools/resolve_btfids: Fix build when cross compiling kernel with clang. (Suleiman Souhlal)\n- objtool/rust: relax slice condition to cover more noreturn Rust functions (Miguel Ojeda)\n- block: Fix bvec_set_folio() for very large folios (Matthew Wilcox (Oracle))\n- bio: Fix bio_first_folio() for SPARSEMEM without VMEMMAP (Matthew Wilcox (Oracle))\n- io_uring: consistently use rcu semantics with sqpoll thread (Keith Busch)\n- block: don't use submit_bio_noacct_nocheck in blk_zone_wplug_bio_work (Christoph Hellwig)\n- io_uring: fix use-after-free of sq-thread in __io_uring_show_fdinfo() (Penglei Jiang)\n- block: use q-elevator with -elevator_lock held in elv_iosched_show() (Ming Lei)\n- perf: Ensure bpf_perf_link path is properly serialized (Peter Zijlstra)\n- nvmet-fcloop: access fcpreq only when holding reqlock (Daniel Wagner)\n- btrfs: exit after state split error at set_extent_bit() (Filipe Manana)\n- gfs2: pass through holder from the VFS for freeze/thaw (Christian Brauner)\n- fs/filesystems: Fix potential unsigned integer underflow in fs_name() (Zijun Hu)\n- btrfs: exit after state insertion failure at btrfs_convert_extent_bit() (Filipe Manana)\n- net: drv: netdevsim: don't napi_complete() from netpoll (Jakub Kicinski)\n- net_sched: ets: fix a race in ets_qdisc_change() (Eric Dumazet)\n- net_sched: tbf: fix a race in tbf_change() (Eric Dumazet)\n- net_sched: red: fix a race in __red_change() (Eric Dumazet)\n- net_sched: prio: fix a race in prio_tune() (Eric Dumazet)\n- net/mlx5e: Fix leak of Geneve TLV option object (Jianbo Liu)\n- net/mlx5: HWS, fix missing ip_version handling in definer (Yevgeny Kliteynik)\n- net/mlx5: Fix return value when searching for existing flow group (Patrisious Haddad)\n- net/mlx5: Fix ECVF vports unload on shutdown flow (Amir Tzin)\n- net/mlx5: Ensure fw pages are always allocated on same NUMA (Moshe Shemesh)\n- Bluetooth: MGMT: Fix sparse errors (Luiz Augusto von Dentz)\n- Bluetooth: eir: Fix possible crashes on eir_create_adv_data (Luiz Augusto von Dentz)\n- Bluetooth: hci_sync: Fix broadcast/PA when using an existing instance (Luiz Augusto von Dentz)\n- Bluetooth: Fix NULL pointer deference on eir_get_service_data (Luiz Augusto von Dentz)\n- net/mdiobus: Fix potential out-of-bounds clause 45 read/write access (Jakub Raczynski)\n- net/mdiobus: Fix potential out-of-bounds read/write access (Jakub Raczynski)\n- macsec: MACsec SCI assignment for ES = 0 (Carlos Fernandez)\n- net: Fix TOCTOU issue in sk_is_readable() (Michal Luczaj)\n- ACPI: CPPC: Fix NULL pointer dereference when nosmp is used (Yunhui Cui)\n- i40e: retry VFLR handling if there is ongoing VF reset (Robert Malz)\n- i40e: return false from i40e_reset_vf if reset is in progress (Robert Malz)\n- drm/meson: fix more rounding issues with 59.94Hz modes (Martin Blumenstingl)\n- drm/meson: use vclk_freq instead of pixel_freq in debug print (Martin Blumenstingl)\n- drm/meson: fix debug log statement when setting the HDMI clocks (Martin Blumenstingl)\n- drm/meson: use unsigned long long / Hz for frequency types (Martin Blumenstingl)\n- powerpc/vas: Return -EINVAL if the offset is non-zero in mmap() (Haren Myneni)\n- powerpc/powernv/memtrace: Fix out of bounds issue in memtrace mmap (Ritesh Harjani (IBM))\n- net_sched: sch_sfq: fix a potential crash on gso_skb handling (Eric Dumazet)\n- scsi: iscsi: Fix incorrect error path labels for flashnode operations (Alok Tiwari)\n- pinctrl: qcom: pinctrl-qcm2290: Add missing pins (Wojciech Slenska)\n- spi: omap2-mcspi: Disable multi-mode when the previous message kept CS asserted (Felix Piedallu)\n- spi: omap2-mcspi: Disable multi mode when CS should be kept asserted after message (Felix Piedallu)\n- regulator: max20086: Fix refcount leak in max20086_parse_regulators_dt() (Dan Carpenter)\n- wifi: ath12k: fix GCC_GCC_PCIE_HOT_RST definition for WCN7850 (Baochen Qiang)\n- wifi: ath12k: refactor ath12k_hw_regs structure (P Praneesh)\n- wifi: ath11k: validate ath11k_crypto_mode on top of ath11k_core_qmi_firmware_ready (Rodrigo Gobbi)\n- wifi: ath11k: move some firmware stats related functions outside of debugfs (Baochen Qiang)\n- wifi: ath11k: don't wait when there is no vdev started (Baochen Qiang)\n- wifi: ath11k: don't use static variables in ath11k_debugfs_fw_stats_process() (Baochen Qiang)\n- wifi: ath11k: avoid burning CPU in ath11k_debugfs_fw_stats_request() (Baochen Qiang)\n- wifi: ath11k: convert timeouts to secs_to_jiffies() (Easwar Hariharan)\n- ath10k: snoc: fix unbalanced IRQ enable in crash recovery (Caleb Connolly)\n- ptp: remove ptp-n_vclocks check logic in ptp_vclock_in_use() (Jeongjun Park)\n- net: dsa: b53: fix untagged traffic sent via cpu tagged with VID 0 (Jonas Gorski)\n- Bluetooth: MGMT: Protect mgmt_pending list with its own lock (Luiz Augusto von Dentz)\n- Bluetooth: MGMT: Remove unused mgmt_pending_find_data (Dr. David Alan Gilbert)\n- Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete (Luiz Augusto von Dentz)\n- Bluetooth: btintel_pcie: Reduce driver buffer posting to prevent race condition (Chandrashekar Devegowda)\n- Bluetooth: btintel_pcie: Increase the tx and rx descriptor count (Chandrashekar Devegowda)\n- Bluetooth: btintel_pcie: Fix driver not posting maximum rx buffers (Kiran K)\n- Bluetooth: hci_core: fix list_for_each_entry_rcu usage (Pauli Virtanen)\n- scsi: core: ufs: Fix a hang in the error handler (Sanjeev Yadav)\n- serial: sh-sci: Move runtime PM enable to sci_probe_single() (Claudiu Beznea)\n- dt-bindings: pwm: adi,axi-pwmgen: Fix clocks (David Lechner)\n- dt-bindings: pwm: Correct indentation and style in DTS example (Krzysztof Kozlowski)\n- dt-bindings: pwm: adi,axi-pwmgen: Increase #pwm-cells to 3 (Uwe Kleine-Konig)\n- pinctrl: samsung: add gs101 specific eint suspend/resume callbacks (Peter Griffin)\n- pinctrl: samsung: add dedicated SoC eint suspend/resume callbacks (Peter Griffin)\n- pinctrl: samsung: refactor drvdata suspend resume callbacks (Peter Griffin)\n- arm64: dts: qcom: x1e80100: Add GPU cooling (Stephan Gerhold)\n- arm64: dts: qcom: x1e80100: Apply consistent critical thermal shutdown (Stephan Gerhold)\n- mmc: sdhci-of-dwcmshc: add PD workaround on RK3576 (Nicolas Frattaroli)\n- pmdomain: core: Introduce dev_pm_genpd_rpm_always_on() (Ulf Hansson)\n- Input: synaptics-rmi - fix crash with unsupported versions of F34 (Dmitry Torokhov)\n- ALSA: hda/realtek: Add support for HP Agusta using CS35L41 HDA (Stefan Binding)\n- ALSA: hda/realtek - Add new HP ZBook laptop with micmute led fixup (Chris Chiu)\n- ALSA: hda/realtek - Support mute led function for HP platform (Kailang Yang)\n- ALSA: hda/realtek: Add support for various HP Laptops using CS35L41 HDA (Stefan Binding)\n- ALSA: hda/realtek: fix micmute LEDs on HP Laptops with ALC3247 (Chris Chiu)\n- ALSA: hda/realtek: fix micmute LEDs on HP Laptops with ALC3315 (Chris Chiu)\n- tools/power turbostat: Fix AMD package-energy reporting (Gautham R. Shenoy)\n- do_change_type(): refuse to operate on unmounted/not ours mounts (Al Viro)\n- fix propagation graph breakage by MOVE_MOUNT_SET_GROUP move_mount(2) (Al Viro)\n- path_overmount(): avoid false negatives (Al Viro)\n- iov_iter: use iov_offset for length calculation in iov_iter_aligned_bvec (Nitesh Shetty)\n- ASoC: ti: omap-hdmi: Re-add dai_link-platform to fix card init (Yuuki NAGAO)\n- ASoC: Intel: avs: Verify content returned by parse_int_array() (Cezary Rojewski)\n- ASoC: Intel: avs: Fix deadlock when the failing IPC is SET_D0IX (Cezary Rojewski)\n- ASoC: codecs: hda: Fix RPM usage count underflow (Cezary Rojewski)\n- scsi: ufs: qcom: Prevent calling phy_exit() before phy_init() (Nitin Rawat)\n- riscv: misaligned: fix sleeping function called during misaligned access handling (Nylon Chen)\n- seg6: Fix validation of nexthop addresses (Ido Schimmel)\n- wireguard: device: enable threaded NAPI (Mirco Barone)\n- net: wwan: mhi_wwan_mbim: use correct mux_id for multiplexing (Daniele Palmas)\n- wifi: cfg80211/mac80211: correctly parse S1G beacon optional elements (Lachlan Hodges)\n- net: dsa: b53: do not touch DLL_IQQD on bcm53115 (Jonas Gorski)\n- net: dsa: b53: allow RGMII for bcm63xx RGMII ports (Jonas Gorski)\n- net: dsa: b53: do not enable RGMII delay on bcm63xx (Jonas Gorski)\n- net: ti: icssg-prueth: Fix swapped TX stats for MII interfaces. (Meghana Malladi)\n- netfilter: nf_nat: also check reverse tuple to obtain clashing entry (Florian Westphal)\n- netfilter: nf_set_pipapo_avx2: fix initial map fill (Florian Westphal)\n- drm/panel-simple: fix the warnings for the Evervision VGG644804 (Michael Walle)\n- gve: add missing NULL check for gve_alloc_pending_packet() in TX DQO (Alok Tiwari)\n- nvme: fix command limits status code (Keith Busch)\n- PM: sleep: Fix power.is_suspended cleanup for direct-complete devices (Rafael J. Wysocki)\n- selftests: net: build net/lib dependency in all target (Bui Quang Minh)\n- vmxnet3: correctly report gso type for UDP tunnels (Ronak Doshi)\n- net: wwan: t7xx: Fix napi rx poll issue (Jinjian Song)\n- net: fix udp gso skb_segment after pull from frag_list (Shiming Cheng)\n- drm/i915/guc: Handle race condition where wakeref count drops below 0 (Jesus Narvaez)\n- drm/i915/psr: Fix using wrong mask in REG_FIELD_PREP (Jouni Hogander)\n- drm/i915/guc: Check if expecting reply before decrementing outstanding_submission_g2h (Jesus Narvaez)\n- net: stmmac: make sure that ptp_rate is not 0 before configuring EST (Alexis Lothore)\n- net: stmmac: make sure that ptp_rate is not 0 before configuring timestamping (Alexis Lothore)\n- net: dsa: tag_brcm: legacy: fix pskb_may_pull length (Alvaro Fernandez Rojas)\n- idpf: avoid mailbox timeout delays during reset (Emil Tantilov)\n- idpf: fix a race in txq wakeup (Brian Vazquez)\n- ice: fix rebuilding the Tx scheduler tree for large queue counts (Michal Kubiak)\n- ice: create new Tx scheduler nodes for new queues only (Michal Kubiak)\n- ice: fix Tx scheduler error handling in XDP callback (Michal Kubiak)\n- Bluetooth: L2CAP: Fix not responding with L2CAP_CR_LE_ENCRYPTION (Luiz Augusto von Dentz)\n- spi: bcm63xx-hsspi: fix shared reset (Alvaro Fernandez Rojas)\n- spi: bcm63xx-spi: fix shared reset (Alvaro Fernandez Rojas)\n- net: lan966x: Make sure to insert the vlan tags also in host mode (Horatiu Vultur)\n- net/mlx4_en: Prevent potential integer overflow calculating Hz (Dan Carpenter)\n- driver: net: ethernet: mtk_star_emac: fix suspend/resume issue (Yanqing Wang)\n- net: tipc: fix refcount warning in tipc_aead_encrypt (Charalampos Mitrodimas)\n- gve: Fix RX_BUFFERS_POSTED stat to report per-queue fill_cnt (Alok Tiwari)\n- net: stmmac: platform: guarantee uniqueness of bus_id (Quentin Schulz)\n- page_pool: Fix use-after-free in page_pool_recycle_in_ring (Dong Chenchen)\n- Fix sock_exceed_buf_limit not being triggered in __sk_mem_raise_allocated (Tengteng Yang)\n- drm/xe: Make xe_gt_freq part of the Documentation (Rodrigo Vivi)\n- loop: add file_start_write() and file_end_write() (Ming Lei)\n- USB: typec: fix const issue in typec_match() (Greg Kroah-Hartman)\n- USB: gadget: udc: fix const issue in gadget_match_driver() (Greg Kroah-Hartman)\n- iio: adc: mcp3911: fix device dependent mappings for conversion result registers (Marcus Folkesson)\n- iio: adc: PAC1934: fix typo in documentation link (Marius Cristea)\n- mei: vsc: Cast tx_buf to (__be32 *) when passed to cpu_to_be32_array() (Hans de Goede)\n- vt: remove VT_RESIZE and VT_RESIZEX from vt_compat_ioctl() (Nicolas Pitre)\n- coresight: prevent deactivate active config while enabling the config (Yeoreum Yun)\n- fpga: fix potential null pointer deref in fpga_mgr_test_img_load_sgt() (Qasim Ijaz)\n- counter: interrupt-cnt: Protect enable/disable OPs with mutex (Alexander Sverdlin)\n- coresight: catu: Introduce refcount and spinlock for enabling/disabling (Yabin Cui)\n- coresight: Fixes device's owner field for registered using coresight_init_driver() (Junhao He)\n- MIPS: Loongson64: Add missing '#interrupt-cells' for loongson64c_ls7a (WangYuli)\n- usb: acpi: Prevent null pointer dereference in usb_acpi_add_usb4_devlink() (Chenyuan Yang)\n- iio: adc: ad7124: Fix 3dB filter frequency reading (Uwe Kleine-Konig)\n- iio: filter: admv8818: Support frequencies = 2^32 (Brian Pellegrino)\n- iio: filter: admv8818: fix range calculation (Sam Winchenbach)\n- iio: filter: admv8818: fix integer overflow (Sam Winchenbach)\n- iio: filter: admv8818: fix band 4, state 15 (Sam Winchenbach)\n- thunderbolt: Fix a logic error in wake on connect (Mario Limonciello)\n- serial: Fix potential null-ptr-deref in mlb_usio_probe() (Henry Martin)\n- usb: renesas_usbhs: Reorder clock handling and power management in probe (Lad Prabhakar)\n- PCI: endpoint: Retain fixed-size BAR size as well as aligned size (Jerome Brunet)\n- rtc: loongson: Add missing alarm notifications for ACPI RTC events (Liu Dalin)\n- PCI/DPC: Log Error Source ID only when valid (Bjorn Helgaas)\n- PCI/DPC: Initialize aer_err_info before using it (Bjorn Helgaas)\n- PCI/ACPI: Fix allocated memory release on error in pci_acpi_scan_root() (Zhe Qiao)\n- dmaengine: ti: Add NULL check in udma_probe() (Henry Martin)\n- phy: qcom-qmp-usb: Fix an NULL vs IS_ERR() bug (Chenyuan Yang)\n- PCI: apple: Use gpiod_set_value_cansleep in probe flow (Hector Martin)\n- PCI: cadence: Fix runtime atomic count underflow (Hans Zhang)\n- PCI: rcar-gen4: set ep BAR4 fixed size (Jerome Brunet)\n- PCI: Print the actual delay time in pci_bridge_wait_for_secondary_bus() (Wilfred Mallawa)\n- phy: rockchip: samsung-hdptx: Do no set rk_hdptx_phy-rate in case of errors (Cristian Ciocaltea)\n- phy: rockchip: samsung-hdptx: Fix clock ratio setup (Cristian Ciocaltea)\n- rtc: sh: assign correct interrupts with DT (Wolfram Sang)\n- rust: alloc: add missing invariant in Vec::set_len() (Danilo Krummrich)\n- cifs: Fix validation of SMB1 query reparse point response (Pali Rohar)\n- perf callchain: Always populate the addr_location map when adding IP (Ian Rogers)\n- perf trace: Set errpid to false for rseq and set_robust_list (Anubhav Shelat)\n- nfs: ignore SB_RDONLY when remounting nfs (Li Lingfeng)\n- nfs: clear SB_RDONLY before getting superblock (Li Lingfeng)\n- perf trace: Always print return value for syscalls returning a pid (Anubhav Shelat)\n- perf record: Fix incorrect --user-regs comments (Dapeng Mi)\n- perf symbol: Fix use-after-free in filename__read_build_id (Ian Rogers)\n- mailbox: mtk-cmdq: Refine GCE_GCTL_VALUE setting (Jason-JH Lin)\n- mailbox: imx: Fix TXDB_V2 sending (Peng Fan)\n- perf tests switch-tracking: Fix timestamp comparison (Leo Yan)\n- mfd: stmpe-spi: Correct the name used in MODULE_DEVICE_TABLE (Alexey Gladkov)\n- mfd: exynos-lpass: Avoid calling exynos_lpass_disable() twice in exynos_lpass_remove() (Christophe JAILLET)\n- mfd: exynos-lpass: Fix an error handling path in exynos_lpass_probe() (Christophe JAILLET)\n- rpmsg: qcom_smd: Fix uninitialized return variable in __qcom_smd_send() (Dan Carpenter)\n- remoteproc: k3-dsp: Drop check performed in k3_dsp_rproc_{mbox_callback/kick} (Siddharth Vadapalli)\n- remoteproc: k3-r5: Drop check performed in k3_r5_rproc_{mbox_callback/kick} (Siddharth Vadapalli)\n- remoteproc: qcom_wcnss_iris: Add missing put_device() on error in probe (Dan Carpenter)\n- perf scripts python: exported-sql-viewer.py: Fix pattern matching with Python 3 (Adrian Hunter)\n- perf intel-pt: Fix PEBS-via-PT data_src (Adrian Hunter)\n- perf tests: Fix 'perf report' tests installation (Michael Petlan)\n- perf trace: Fix leaks of 'struct thread' in set_filter_loop_pids() (Namhyung Kim)\n- dm-flakey: make corrupting read bios work (Benjamin Marzinski)\n- dm-flakey: error all IOs when num_features is absent (Benjamin Marzinski)\n- dm: fix dm_blk_report_zones (Benjamin Marzinski)\n- perf symbol-minimal: Fix double free in filename__read_build_id (Ian Rogers)\n- hwmon: (asus-ec-sensors) check sensor index in read_string() (Alexei Safin)\n- mtd: nand: ecc-mxic: Fix use of uninitialized variable ret (Mikhail Arkhipov)\n- x86/irq: Ensure initial PIR loads are performed exactly once (Sean Christopherson)\n- backlight: pm8941: Add NULL check in wled_configure() (Henry Martin)\n- dm: free table mempools if not used in __bind (Benjamin Marzinski)\n- dm: don't change md if dm_table_set_restrictions() fails (Benjamin Marzinski)\n- perf ui browser hists: Set actions-thread before calling do_zoom_thread() (Arnaldo Carvalho de Melo)\n- perf build: Warn when libdebuginfod devel files are not available (Arnaldo Carvalho de Melo)\n- randstruct: gcc-plugin: Fix attribute addition (Kees Cook)\n- randstruct: gcc-plugin: Remove bogus void member (Kees Cook)\n- fbdev: core: fbcvt: avoid division by 0 in fb_cvt_hperiod() (Sergey Shtylyov)\n- soc: aspeed: Add NULL check in aspeed_lpc_enable_snoop() (Henry Martin)\n- soc: aspeed: lpc: Fix impossible judgment condition (Su Hui)\n- ARM: aspeed: Don't select SRAM (Joel Stanley)\n- arm64: dts: mt6359: Rename RTC node to match binding expectations (Julien Massot)\n- arm64: dts: renesas: white-hawk-ard-audio: Fix TPU0 groups (Thuan Nguyen)\n- arm64: dts: qcom: qcm2290: fix (some) of QUP interconnects (Dmitry Baryshkov)\n- arm64: dts: rockchip: disable unrouted USB controllers and PHY on RK3399 Puma with Haikou (Quentin Schulz)\n- arm64: defconfig: mediatek: enable PHY drivers (Vignesh Raman)\n- ARM: dts: qcom: apq8064: move replicator out of soc node (Dmitry Baryshkov)\n- ARM: dts: qcom: apq8064 merge hw splinlock into corresponding syscon device (Dmitry Baryshkov)\n- ARM: dts: qcom: apq8064: add missing clocks to the timer node (Dmitry Baryshkov)\n- dt-bindings: vendor-prefixes: Add Liontron name (Andre Przywara)\n- bus: fsl-mc: fix double-free on mc_dev (Ioana Ciornei)\n- nilfs2: do not propagate ENOENT error from nilfs_btree_propagate() (Ryusuke Konishi)\n- nilfs2: add pointer check for nilfs_direct_propagate() (Wentao Liang)\n- Squashfs: check return result of sb_min_blocksize (Phillip Lougher)\n- soc: qcom: smp2p: Fix fallback to qcom,ipc parse (Barnabas Czeman)\n- arm64: dts: ti: k3-j721e-common-proc-board: Enable OSPI1 on J721E (Prasanth Babu Mantena)\n- arm64: tegra: Add uartd serial alias for Jetson TX1 module (Aaron Kling)\n- arm64: tegra: Drop remaining serial clock-names and reset-names (Aaron Kling)\n- arm64: dts: rockchip: Update eMMC for NanoPi R5 series (Peter Robinson)\n- arm64: dts: rockchip: Add vcc-supply to SPI flash on rk3566-rock3c (Peter Robinson)\n- arm64: dts: qcom: sda660-ifc6560: Fix dt-validate warning (Alexey Minnekhanov)\n- arm64: dts: qcom: sdm660-lavender: Add missing USB phy supply (Alexey Minnekhanov)\n- arm64: dts: mt6359: Add missing 'compatible' property to regulators node (Julien Massot)\n- arm64: dts: mediatek: mt6357: Drop regulator-fixed compatibles (Nicolas F. R. A. Prado)\n- arm64: dts: imx8mn-beacon: Set SAI5 MCLK direction to output for HDMI audio (Adam Ford)\n- arm64: dts: imx8mm-beacon: Set SAI5 MCLK direction to output for HDMI audio (Adam Ford)\n- arm64: dts: imx8mp-beacon: Fix RTC capacitive load (Adam Ford)\n- arm64: dts: imx8mn-beacon: Fix RTC capacitive load (Adam Ford)\n- arm64: dts: imx8mm-beacon: Fix RTC capacitive load (Adam Ford)\n- arm64: dts: mt8183: Add port node to mt8183.dtsi (Pin-yen Lin)\n- arm64: dts: qcom: sdm660-xiaomi-lavender: Add missing SD card detect GPIO (Alexey Minnekhanov)\n- arm64: dts: mediatek: mt8195: Reparent vdec1/2 and venc1 power domains (AngeloGioacchino Del Regno)\n- ARM: dts: at91: at91sam9263: fix NAND chip selects (Wolfram Sang)\n- ARM: dts: at91: usb_a9263: fix GPIO for Dataflash chip select (Wolfram Sang)\n- arm64: dts: rockchip: Move SHMEM memory to reserved memory on rk3588 (Chukun Pan)\n- arm64: dts: qcom: ipq9574: Fix USB vdd info (Varadarajan Narayanan)\n- arm64: dts: qcom: sc8280xp-x13s: Drop duplicate DMIC supplies (Stephan Gerhold)\n- arm64: dts: qcom: sm8250: Fix CPU7 opp table (Xilin Wu)\n- arm64: dts: qcom: sm8350: Reenable crypto cryptobam (Luca Weiss)\n- arm64: dts: qcom: sdm845-starqltechn: remove excess reserved gpios (Dzmitry Sankouski)\n- arm64: dts: qcom: sdm845-starqltechn: refactor node order (Dzmitry Sankouski)\n- arm64: dts: qcom: sdm845-starqltechn: fix usb regulator mistake (Dzmitry Sankouski)\n- arm64: dts: qcom: sdm845-starqltechn: remove wifi (Dzmitry Sankouski)\n- arm64: dts: qcom: x1e80100-romulus: Keep L12B and L15B always on (Konrad Dybcio)\n- arm64: dts: qcom: sm8650: add missing cpu-cfg interconnect path in the mdss node (Neil Armstrong)\n- arm64: dts: qcom: sm8650: setup gpu thermal with higher temperatures (Neil Armstrong)\n- arm64: dts: qcom: x1e80100: Mark usb_2 as dma-coherent (Mark Kettenis)\n- f2fs: fix to correct check conditions in f2fs_cross_rename (Zhiguo Niu)\n- f2fs: use d_inode(dentry) cleanup dentry-d_inode (Zhiguo Niu)\n- net: phy: mscc: Stop clearing the the UDPv4 checksum for L2 frames (Horatiu Vultur)\n- net: openvswitch: Fix the dead loop of MPLS parse (Faicker Mo)\n- calipso: Don't call calipso functions for AF_INET sk. (Kuniyuki Iwashima)\n- octeontx2-pf: QOS: Refactor TC_HTB_LEAF_DEL_LAST callback (Hariprasad Kelam)\n- octeontx2-pf: QOS: Perform cache sync on send queue teardown (Hariprasad Kelam)\n- net: phy: mscc: Fix memory leak when using one step timestamping (Horatiu Vultur)\n- net: lan743x: Fix PHY reset handling during initialization and WOL (Thangaraj Samynathan)\n- net: lan743x: rename lan743x_reset_phy to lan743x_hw_reset_phy (Thangaraj Samynathan)\n- net: phy: fix up const issues in to_mdio_device() and to_phy_device() (Greg Kroah-Hartman)\n- net: phy: clear phydev-devlink when the link is deleted (Wei Fang)\n- bpf: Avoid __bpf_prog_ret0_warn when jit fails (KaFai Wan)\n- net: xilinx: axienet: Fix Tx skb circular buffer occupancy check in dmaengine xmit (Suraj Gupta)\n- net: lan966x: Fix 1-step timestamping over ipv4 or ipv6 (Horatiu Vultur)\n- RDMA/cma: Fix hang when cma_netevent_callback fails to queue_work (Jack Morgenstein)\n- vsock/virtio: fix rx_bytes accounting for stream sockets (Stefano Garzarella)\n- net: usb: aqc111: fix error handling of usbnet read calls (Nikita Zhandarovich)\n- RISC-V: KVM: lock the correct mp_state during reset (Radim Krcmar)\n- netfilter: nft_tunnel: fix geneve_opt dump (Fernando Fernandez Mancera)\n- netfilter: nf_tables: nft_fib: consistent l3mdev handling (Florian Westphal)\n- bpf, sockmap: Avoid using sk_socket after free when sending (Jiayuan Chen)\n- Bluetooth: btintel: Check dsbr size from EFI variable (Kees Cook)\n- Bluetooth: MGMT: iterate over mesh commands in mgmt_mesh_foreach() (Dmitry Antipov)\n- vfio/type1: Fix error unwind in migration dirty bitmap allocation (Li RongQing)\n- netfilter: nf_tables: nft_fib_ipv6: fix VRF ipv4/ipv6 result discrepancy (Florian Westphal)\n- netfilter: xtables: support arpt_mark and ipv6 optstrip for iptables-nft only builds (Florian Westphal)\n- bpf: Revert 'bpf: remove unnecessary rcu_read_{lock,unlock}() in multi-uprobe attach logic' (Di Shen)\n- wifi: mt76: mt7996: fix RX buffer size of MCU event (Shayne Chen)\n- wifi: mt76: mt7996: set EHT max ampdu length capability (Peter Chiu)\n- wifi: mt76: mt7925: ensure all MCU commands wait for response (Michael Lo)\n- wifi: mt76: mt7925: refine the sniffer commnad (Ming Yen Hsieh)\n- wifi: mt76: mt7925: prevent multiple scan commands (Ming Yen Hsieh)\n- wifi: mt76: mt7915: Fix null-ptr-deref in mt7915_mmio_wed_init() (Henry Martin)\n- wifi: mt76: mt7996: Fix null-ptr-deref in mt7996_mmio_wed_init() (Henry Martin)\n- Bluetooth: ISO: Fix not using SID from adv report (Luiz Augusto von Dentz)\n- kernfs: Relax constraint in draining guard (Michal Koutny)\n- scsi: ufs: mcq: Delete ufshcd_release_scsi_cmd() in ufshcd_mcq_abort() (ping.gao)\n- wifi: ath9k_htc: Abort software beacon handling if disabled (Toke Hoiland-Jorgensen)\n- hisi_acc_vfio_pci: bugfix live migration function without VF device driver (Longfang Liu)\n- hisi_acc_vfio_pci: add eq and aeq interruption restore (Longfang Liu)\n- hisi_acc_vfio_pci: fix XQE dma address error (Longfang Liu)\n- wifi: ath12k: fix memory leak in ath12k_service_ready_ext_event (Rajat Soni)\n- iommu: remove duplicate selection of DMAR_TABLE (Rolf Eike Beer)\n- wifi: rtw89: fix firmware scan delay unit for WiFi 6 chips (Chin-Yen Lee)\n- wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (Alexey Kodanev)\n- wifi: rtw89: pci: enlarge retry times of RX tag to 1000 (Ping-Ke Shih)\n- s390/bpf: Store backchain even for leaf progs (Ilya Leoshkevich)\n- clk: qcom: gcc-msm8939: Fix mclk0 mclk1 for 24 MHz (Vincent Knecht)\n- dt-bindings: soc: fsl,qman-fqd: Fix reserved-memory.yaml reference (Rob Herring (Arm))\n- bpf: Fix WARN() in get_bpf_raw_tp_regs (Tao Chen)\n- pinctrl: at91: Fix possible out-of-boundary access (Andy Shevchenko)\n- libbpf: Use proper errno value in nlattr (Anton Protopopov)\n- ktls, sockmap: Fix missing uncharge operation (Jiayuan Chen)\n- of: unittest: Unlock on error in unittest_data_add() (Dan Carpenter)\n- tracing: Fix error handling in event_trigger_parse() (Miaoqian Lin)\n- tracing: Rename event_trigger_alloc() to trigger_data_alloc() (Steven Rostedt)\n- selftests/bpf: Fix caps for __xlated/jited_unpriv (Luis Gerhorst)\n- efi/libstub: Describe missing 'out' parameter in efi_load_initrd (Hans Zhang)\n- wifi: iwlfiwi: mvm: Fix the rate reporting (Ilan Peer)\n- clk: bcm: rpi: Add NULL check in raspberrypi_clk_register() (Henry Martin)\n- bpftool: Fix regression of 'bpftool cgroup tree' EINVAL on older kernels (YiFei Zhu)\n- clk: qcom: gpucc-sm6350: Add *_wait_val values for GDSCs (Luca Weiss)\n- clk: qcom: gcc-sm6350: Add *_wait_val values for GDSCs (Luca Weiss)\n- clk: qcom: dispcc-sm6350: Add *_wait_val values for GDSCs (Luca Weiss)\n- clk: qcom: camcc-sm6350: Add *_wait_val values for GDSCs (Luca Weiss)\n- tracing: Move histogram trigger variables from stack to per CPU structure (Steven Rostedt)\n- bpf: Fix uninitialized values in BPF_{CORE,PROBE}_READ (Anton Protopopov)\n- RDMA/mlx5: Fix error flow upon firmware failure for RQ destruction (Patrisious Haddad)\n- netfilter: nft_set_pipapo: prevent overflow in lookup table allocation (Pablo Neira Ayuso)\n- netfilter: nft_quota: match correctly when the quota just depleted (Zhongqiu Duan)\n- netfilter: bridge: Move specific fragmented packet to slow_path instead of dropping it (Huajian Yang)\n- bpf: Allow XDP dev-bound programs to perform XDP_REDIRECT into maps (Lorenzo Bianconi)\n- libbpf: Use proper errno value in linker (Anton Protopopov)\n- scsi: smartpqi: Fix smp_processor_id() call trace for preemptible kernels (Yi Zhang)\n- f2fs: fix to detect gcing page in f2fs_is_cp_guaranteed() (Chao Yu)\n- f2fs: clean up w/ fscrypt_is_bounce_page() (Chao Yu)\n- bonding: assign random address if device address is same as bond (Hangbin Liu)\n- iommu: Protect against overflow in iommu_pgsize() (Jason Gunthorpe)\n- Use thread-safe function pointer in libbpf_print (Jonathan Wiepert)\n- libbpf: Remove sample_period init in perf_buffer (Tao Chen)\n- libbpf: Fix event name too long error (Feng Yang)\n- scsi: hisi_sas: Call I_T_nexus after soft reset for SATA disk (Yihang Li)\n- RDMA/hns: Include hnae3.h in hns_roce_hw_v2.h (Junxian Huang)\n- wifi: ath12k: fix node corruption in ar-arvifs list (Maharaja Kennadyrajan)\n- wifi: ath12k: Fix the QoS control field offset to build QoS header (Ramasamy Kaliappan)\n- wifi: ath12k: Add MSDU length validation for TKIP MIC error (P Praneesh)\n- wifi: ath12k: fix invalid access to memory (Sarika Sharma)\n- wifi: rtw88: do not ignore hardware read error during DPK (Dmitry Antipov)\n- wifi: rtw88: sdio: call rtw_sdio_indicate_tx_status unconditionally (Zhen XIN)\n- wifi: rtw88: sdio: map mgmt frames to queue TX_DESC_QSEL_MGMT (Zhen XIN)\n- xfrm: Use xdo.dev instead of xdo.real_dev (Cosmin Ratiu)\n- net/mlx5: Avoid using xso.real_dev unnecessarily (Cosmin Ratiu)\n- libbpf: Fix buffer overflow in bpf_object__init_prog (Viktor Malik)\n- net: ncsi: Fix GCPS 64-bit member variables (Hari Kalavakunta)\n- page_pool: Track DMA-mapped pages and unmap them when destroying the pool (Toke Hoiland-Jorgensen)\n- page_pool: Move pp_magic check into helper functions (Toke Hoiland-Jorgensen)\n- f2fs: fix to do sanity check on sbi-total_valid_block_count (Chao Yu)\n- f2fs: prevent the current section from being selected as a victim during GC (yohan.joung)\n- f2fs: clean up unnecessary indentation (Jaegeuk Kim)\n- wifi: ath12k: Fix buffer overflow in debugfs (Dan Carpenter)\n- wifi: ath12k: Fix WMI tag for EHT rate in peer assoc (Ramya Gnanasekar)\n- wifi: ath12k: fix cleanup path after mhi init (Raj Kumar Bhagat)\n- f2fs: zone: fix to avoid inconsistence in between SIT and SSA (Chao Yu)\n- bpf, sockmap: Fix panic when calling skb_linearize (Jiayuan Chen)\n- bpf, sockmap: fix duplicated data transmission (Jiayuan Chen)\n- bpf: fix ktls panic with sockmap (Jiayuan Chen)\n- selftests/bpf: Fix bpf_nf selftest failure (Saket Kumar Bhaskar)\n- bpf: Check link_create.flags parameter for multi_kprobe (Tao Chen)\n- IB/cm: use rwlock for MAD agent lock (Jacob Moroni)\n- wifi: ath12k: Fix invalid memory access while forming 802.11 header (P Praneesh)\n- wifi: ath12k: Fix memory leak during vdev_id mismatch (P Praneesh)\n- wifi: ath11k: fix node corruption in ar-arvifs list (Stone Zhang)\n- xen/x86: fix initial memory balloon target (Roger Pau Monne)\n- svcrdma: Reduce the number of rdma_rw contexts per-QP (Chuck Lever)\n- media: verisilicon: Free post processor buffers on error (Detlev Casanova)\n- drm/mediatek: mtk_drm_drv: Unbind secondary mmsys components on err (AngeloGioacchino Del Regno)\n- drm/mediatek: Fix kobject put for component sub-drivers (AngeloGioacchino Del Regno)\n- drm/mediatek: mtk_drm_drv: Fix kobject put for mtk_mutex device ptr (AngeloGioacchino Del Regno)\n- drm/msm/a6xx: Disable rgb565_predicator on Adreno 7c3 (Konrad Dybcio)\n- selftests/seccomp: fix negative_ENOSYS tracer tests on arm32 (Terry Tritton)\n- perf/amlogic: Replace smp_processor_id() with raw_smp_processor_id() in meson_ddr_pmu_create() (Anand Moon)\n- scsi: qedf: Use designated initializer for struct qed_fcoe_cb_ops (Kees Cook)\n- overflow: Fix direct struct member initialization in _DEFINE_FLEX() (Gustavo A. R. Silva)\n- arm64/fpsimd: Do not discard modified SVE state (Mark Rutland)\n- firmware: SDEI: Allow sdei initialization without ACPI_APEI_GHES (Huang Yiwei)\n- drm/tegra: rgb: Fix the unbound reference count (Biju Das)\n- drm/vkms: Adjust vkms_state-active_planes allocation type (Kees Cook)\n- drm: rcar-du: Fix memory leak in rcar_du_vsps_init() (Biju Das)\n- drm/msm/dpu: enable SmartDMA on SC8180X (Dmitry Baryshkov)\n- drm/msm/dpu: enable SmartDMA on SM8150 (Dmitry Baryshkov)\n- selftests/seccomp: fix syscall_restart test for arm compat (Neill Kapron)\n- arm64/fpsimd: Avoid warning when sve_to_fpsimd() is unused (Mark Rutland)\n- arm64: Support ARM64_VA_BITS=52 when setting ARCH_MMAP_RND_BITS_MAX (Kornel Duleba)\n- firmware: psci: Fix refcount leak in psci_dt_init (Miaoqian Lin)\n- m68k: mac: Fix macintosh_config for Mac II (Finn Thain)\n- watchdog: exar: Shorten identity name to fit correctly (Kees Cook)\n- kunit/usercopy: Disable u64 test on 32-bit SPARC (Thomas Weissschuh)\n- fs/ntfs3: Add missing direct_IO in ntfs_aops_cmpr (Lizhi Xu)\n- fs/ntfs3: handle hdr_first_de() return value (Andrey Vatoropin)\n- drm/bridge: lt9611uxc: Fix an error handling path in lt9611uxc_probe() (Christophe JAILLET)\n- drm/panel: samsung-sofef00: Drop s6e3fc2x01 support (Casey Connolly)\n- perf: arm-ni: Fix missing platform_set_drvdata() (Hongbo Yao)\n- perf: arm-ni: Unregister PMUs on probe failure (Hongbo Yao)\n- drm/panthor: Update panthor_mmu::irq::mask when needed (Boris Brezillon)\n- drm/panthor: Fix GPU_COHERENCY_ACE[_LITE] definitions (Boris Brezillon)\n- arm64/fpsimd: Fix merging of FPSIMD state during signal return (Mark Rutland)\n- arm64/fpsimd: Reset FPMR upon exec() (Mark Rutland)\n- arm64/fpsimd: Avoid clobbering kernel FPSIMD state with SMSTOP (Mark Rutland)\n- arm64/fpsimd: Don't corrupt FPMR when streaming mode changes (Mark Brown)\n- arm64/fpsimd: Discard stale CPU state when handling SME traps (Mark Brown)\n- arm64/fpsimd: Avoid RES0 bits in the SME trap handler (Mark Rutland)\n- media: rkvdec: Fix frame size enumeration (Jonas Karlman)\n- drm/amd/pp: Fix potential NULL pointer dereference in atomctrl_initialize_mc_reg_table (Charles Han)\n- drm/vc4: tests: Use return instead of assert (Maxime Ripard)\n- drm/xe/d3cold: Set power state to D3Cold during s2idle/s3 (Badal Nilawar)\n- drm/vmwgfx: Fix dumb buffer leak (Ian Forbes)\n- drm/vmwgfx: Add error path for xa_store in vmw_bo_add_detached_resource (Keisuke Nishimura)\n- drm/vmwgfx: Add seqno waiter for sync_files (Ian Forbes)\n- ALSA: core: fix up bus match const issues. (Greg Kroah-Hartman)\n- ASoC: apple: mca: Constrain channels according to TDM mask (Martin Poviser)\n- spi: sh-msiof: Fix maximum DMA transfer size (Geert Uytterhoeven)\n- ACPI: OSI: Stop advertising support for '3.0 _SCP Extensions' (Armin Wolf)\n- thermal/drivers/mediatek/lvts: Fix debugfs unregister on failure (AngeloGioacchino Del Regno)\n- PM: sleep: Print PM debug messages during hibernation (Rafael J. Wysocki)\n- x86/mtrr: Check if fixed-range MTRRs exist in mtrr_save_fixed_ranges() (Jiaqing Zhao)\n- ACPI: resource: fix a typo for MECHREVO in irq1_edge_low_force_override[] (Mingcong Bai)\n- PM: wakeup: Delete space in the end of string shown by pm_show_wakelocks() (Zijun Hu)\n- ASoC: SOF: amd: add missing acp descriptor field (Vijendar Mukunda)\n- ASoC: SOF: ipc4-pcm: Adjust pipeline_list-pipelines allocation type (Kees Cook)\n- PM: EM: Fix potential division-by-zero error in em_compute_costs() (Yaxiong Tian)\n- power: reset: at91-reset: Optimize at91_reset() (Alexander Shiyan)\n- spi: tegra210-quad: modify chip select (CS) deactivation (Vishwaroop A)\n- spi: tegra210-quad: remove redundant error handling code (Vishwaroop A)\n- spi: tegra210-quad: Fix X1_X2_X4 encoding and support x4 transfers (Vishwaroop A)\n- EDAC/{skx_common,i10nm}: Fix the loss of saved RRL for HBM pseudo channel 0 (Qiuxu Zhuo)\n- EDAC/skx_common: Fix general protection fault (Qiuxu Zhuo)\n- ASoC: mediatek: mt8195: Set ETDM1/2 IN/OUT to COMP_DUMMY() (Julien Massot)\n- ASoC: tas2764: Enable main IRQs (Hector Martin)\n- ACPICA: exserial: don't forget to handle FFixedHW opregions for reading (Daniil Tatianin)\n- crypto: api - Redo lookup on EEXIST (Herbert Xu)\n- kunit: Fix wrong parameter to kunit_deactivate_static_stub() (Tzung-Bi Shih)\n- crypto: sun8i-ce - move fallback ahash_request to the end of the struct (Ovidiu Panait)\n- crypto: xts - Only add ecb if it is not already there (Herbert Xu)\n- crypto: lrw - Only add ecb if it is not already there (Herbert Xu)\n- rcu/cpu_stall_cputime: fix the hardirq count for x86 architecture (Yongliang Gao)\n- btrfs: fix invalid data space release when truncating block in NOCOW mode (Filipe Manana)\n- btrfs: scrub: fix a wrong error type when metadata bytenr mismatches (Qu Wenruo)\n- btrfs: scrub: update device stats when an error is detected (Qu Wenruo)\n- powerpc/pseries/iommu: Fix kmemleak in TCE table userspace view (Gaurav Batra)\n- erofs: avoid using multiple devices with different type (Sheng Yong)\n- erofs: fix file handle encoding for 64-bit NIDs (Hongbo Li)\n- crypto: marvell/cesa - Avoid empty transfer descriptor (Herbert Xu)\n- crypto: marvell/cesa - Handle zero-length skcipher requests (Herbert Xu)\n- kselftest: cpufreq: Get rid of double suspend in rtcwake case (Nicolas F. R. A. Prado)\n- brd: fix discard end sector (Yu Kuai)\n- brd: fix aligned_sector from brd_do_discard() (Yu Kuai)\n- x86/insn: Fix opcode map (!REX2) superscript tags (Masami Hiramatsu (Google))\n- x86/cpu: Sanitize CPUID(0x80000000) output (Ahmed S. Darwish)\n- crypto: sun8i-ce - undo runtime PM changes during driver removal (Ovidiu Panait)\n- x86/microcode/AMD: Do not return error when microcode update is not necessary (Annie Li)\n- sched/core: Tweak wait_task_inactive() to force dequeue sched_delayed tasks (John Stultz)\n- powerpc/crash: Fix non-smp kexec preparation (Eddie James)\n- powerpc: do not build ppc_save_regs.o always (Jiri Slaby (SUSE))\n- crypto: sun8i-ss - do not use sg_dma_len before calling DMA functions (Corentin Labbe)\n- crypto: sun8i-ce-cipher - fix error handling in sun8i_ce_cipher_prepare() (Ovidiu Panait)\n- perf/core: Fix broken throttling when max_samples_per_tick=1 (Qing Wang)\n- gfs2: gfs2_create_inode error handling fix (Andreas Gruenbacher)\n- gfs2: replace sd_aspace with sd_inode (Andreas Gruenbacher)\n- perf/x86/amd/uncore: Prevent UMC counters from saturating (Sandipan Das)\n- perf/x86/amd/uncore: Remove unused 'struct amd_uncore_ctx::node' member (Sandipan Das)\n- sched: Fix trace_sched_switch(.prev_state) (Peter Zijlstra)\n- crypto: sun8i-ce-hash - fix error handling in sun8i_ce_hash_run() (Ovidiu Panait)\n- x86/idle: Remove MFENCEs for X86_BUG_CLFLUSH_MONITOR in mwait_idle_with_hints() and prefer_mwait_c1_over_halt() (Andrew Cooper)\n- tools/x86/kcpuid: Fix error handling (Ahmed S. Darwish)\n- uek-rpm: Set USBIP_VHCI_NR_HCS to 4 in UEK8U1 (Harshit Mogalapalli) [Orabug: 38012102]\n- mptcp: disable by default (Harshvardhan Jha) [Orabug: 38035668]\n- sunrpc: handle SVC_GARBAGE during svc auth processing as auth error (Jeff Layton) [Orabug: 38137447] {CVE-2025-38089}\n- x86/sev/docs: Document the SNP Reverse Map Table (RMP) (Tom Lendacky) [Orabug: 38149216]\n- x86/sev: Add full support for a segmented RMP table (Tom Lendacky) [Orabug: 38149216]\n- x86/sev: Treat the contiguous RMP table as a single RMP segment (Tom Lendacky) [Orabug: 38149216]\n- x86/sev: Map only the RMP table entries instead of the full RMP range (Tom Lendacky) [Orabug: 38149216]\n- x86/sev: Move the SNP probe routine out of the way (Tom Lendacky) [Orabug: 38149216]\n- x86/sev: Require the RMPREAD instruction after Zen4 (Tom Lendacky) [Orabug: 38149216]\n- x86/sev: Add support for the RMPREAD instruction (Tom Lendacky) [Orabug: 38149216]\n- x86/sev: Prepare for using the RMPREAD instruction to access the RMP (Tom Lendacky) [Orabug: 38149216]\n- rds: Fix array index out of bounds in rds_message_purge() (Harshit Mogalapalli) [Orabug: 38158033]\n- Add Zen34 clients (Borislav Petkov (AMD)) [Orabug: 38172252] {CVE-2024-36350} {CVE-2024-36357}\n- x86/process: Move the buffer clearing before MONITOR (Kim Phillips) [Orabug: 38172252] {CVE-2024-36350} {CVE-2024-36357}\n- Add normal counters (Borislav Petkov (AMD)) [Orabug: 38172252] {CVE-2024-36350} {CVE-2024-36357}\n- KVM: SVM: Advertize TSA CPUID bits to guests (Borislav Petkov (AMD)) [Orabug: 38172252] {CVE-2024-36350} {CVE-2024-36357}\n- x86/bugs: Add a Transient Scheduler Attacks mitigation (Borislav Petkov (AMD)) [Orabug: 38172252] {CVE-2024-36350} {CVE-2024-36357}\n- x86/bugs: Rename MDS machinery to something more generic (Borislav Petkov (AMD)) [Orabug: 38172252] {CVE-2024-36350} {CVE-2024-36357}",
"id": "ELSA-2025-20530",
"ovalId": "oval:com.oracle.elsa:def:202520530",
"source": "oracle_linux",
"title": "ELSA-2025-20530: Unbreakable Enterprise kernel security update (IMPORTANT)",
"url": "https://linux.oracle.com/errata/ELSA-2025-20530.html"
}