# changelog

author: Harshit Mogalapalli <harshit.m.mogalapalli@oracle.com> [6.12.0-204.92.4.1.el10uek]
changelog:
  - net: skbuff: fix missing zerocopy reference in pskb_carve helpers (Minh Nguyen)  [Orabug: 39656679]  {CVE-2026-52943}
  - md: fix array_state=clear sysfs deadlock (Yu Kuai)  [Orabug: 39656688]
  - md: fix return value of mddev_trylock (Xiao Ni)  [Orabug: 39656688]
  - md: avoid repeated calls to del_gendisk (Xiao Ni)  [Orabug: 39656688]
  - md: delete mddev kobj before deleting gendisk kobj (Xiao Ni)  [Orabug: 39656688]
  - md: add legacy_async_del_gendisk mode (Xiao Ni)  [Orabug: 39656688]
  - md: fix create on open mddev lifetime regression (Yu Kuai)  [Orabug: 39656688]
  - md: Don't clear MD_CLOSING until mddev is freed (Xiao Ni)  [Orabug: 39656688]
  - md: call del_gendisk in control path (Xiao Ni)  [Orabug: 39656688]


author: Harshit Mogalapalli <harshit.m.mogalapalli@oracle.com> [6.12.0-204.92.4.2.el10uek]
changelog:
  - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini)  [Orabug: 39673880]  
  - net/sched: fix pedit partial COW leading to page cache corruption (Rajat Gupta)   {CVE-2026-46331} 
  - net_sched: act_pedit: use RCU in tcf_pedit_dump() (Eric Dumazet)  [Orabug: 39668752]  
  - eventpoll: fix ep_remove struct eventpoll / struct file UAF (Christian Brauner)  [Orabug: 39668743]  {CVE-2026-46242} 
  - eventpoll: move epi_fget() up (Christian Brauner)  [Orabug: 39668743]  
  - eventpoll: rename ep_remove_safe() back to ep_remove() (Christian Brauner)  [Orabug: 39668743]  
  - eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Christian Brauner)  [Orabug: 39668743]  
  - eventpoll: kill __ep_remove() (Christian Brauner)  [Orabug: 39668743]  
  - eventpoll: split __ep_remove() (Christian Brauner)  [Orabug: 39668743]  
  - eventpoll: use hlist_is_singular_node() in __ep_remove() (Christian Brauner)  [Orabug: 39668743]


author: Harshit Mogalapalli <harshit.m.mogalapalli@oracle.com> [6.12.0-204.92.4.2.el10uek]
changelog:
  - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini)  [Orabug: 39673880]
  - net/sched: fix pedit partial COW leading to page cache corruption (Rajat Gupta)   {CVE-2026-46331}
  - net_sched: act_pedit: use RCU in tcf_pedit_dump() (Eric Dumazet)  [Orabug: 39668752]
  - eventpoll: fix ep_remove struct eventpoll / struct file UAF (Christian Brauner)  [Orabug: 39668743]  {CVE-2026-46242}
  - eventpoll: move epi_fget() up (Christian Brauner)  [Orabug: 39668743]
  - eventpoll: rename ep_remove_safe() back to ep_remove() (Christian Brauner)  [Orabug: 39668743]
  - eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Christian Brauner)  [Orabug: 39668743]
  - eventpoll: kill __ep_remove() (Christian Brauner)  [Orabug: 39668743]
  - eventpoll: split __ep_remove() (Christian Brauner)  [Orabug: 39668743]
  - eventpoll: use hlist_is_singular_node() in __ep_remove() (Christian Brauner)  [Orabug: 39668743]


author: Sherry Yang <sherry.yang@oracle.com> [6.12.0-204.92.4.3.el10uek]
changelog:
  - xfrm: hold dev ref until after transport_finish NF_HOOK (Qi Tang)  [Orabug: 39727259]  {CVE-2026-31663}
  - xfrm: hold device only for the asynchronous decryption (Jianbo Liu)  [Orabug: 39727259]
  - KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (Hyunwoo Kim)  [Orabug: 39727258]  {CVE-2026-46316}
  - ipv6: account for fraggap on the paged allocation path (Wongi Lee)  [Orabug: 39727239]  {CVE-2026-53362}


author: Sherry Yang <sherry.yang@oracle.com> [6.12.0-204.92.4.3.el10uek]
changelog:
  - xfrm: hold dev ref until after transport_finish NF_HOOK (Qi Tang)  [Orabug: 39727259]  {CVE-2026-31663} 
  - xfrm: hold device only for the asynchronous decryption (Jianbo Liu)  [Orabug: 39727259]  
  - KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (Hyunwoo Kim)  [Orabug: 39727258]  {CVE-2026-46316} 
  - ipv6: account for fraggap on the paged allocation path (Wongi Lee)  [Orabug: 39727239]  {CVE-2026-53362}


author: Harshit Mogalapalli <harshit.m.mogalapalli@oracle.com> [6.12.0-204.92.4.4.el10uek]
changelog:
  - Revert "arm64: acpi: Enable ACPI CCEL support" (Will Deacon)  [Orabug: 39772225]
  - virtio_pci: fix vq info pointer lookup via wrong index (Ammar Faizi)  [Orabug: 39772224]


author: Sherry Yang <sherry.yang@oracle.com> [6.12.0-204.92.4.4.2.el10uek]
changelog:
  - net: tap: set skb->dev before parsing virtio net header in tap_get_user_xdp() (Dongli Zhang)  [Orabug: 39819149]
  - net: openvswitch: reject oversized nested action attrs (Asim Viladi Oglu Manizada)  [Orabug: 39819142]  {CVE-2026-64531}


author: Vijayendra Suman <vijayendra.suman@oracle.com> [6.12.0-204.92.4.4.3.el10uek]
changelog:
  - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Sean Christopherson)  [Orabug: 39832878]  {CVE-2026-64561} 
  - x86/bugs: Make Safe-RET robust against interrupt injection (Borislav Petkov (AMD))  [Orabug: 39832867]  {CVE-2026-68480}


author: Harshit Mogalapalli <harshit.m.mogalapalli@oracle.com> [6.12.0-204.92.4.4.el10uek]
changelog:
  - Revert "arm64: acpi: Enable ACPI CCEL support" (Will Deacon)  [Orabug: 39772225]  
  - virtio_pci: fix vq info pointer lookup via wrong index (Ammar Faizi)  [Orabug: 39772224]


author: Sherry Yang <sherry.yang@oracle.com> [6.12.0-204.87.2.el10uek]
changelog:
  - Reapply "x86/kexec: add a sanity check on previous kernel's ima kexec buffer" (Harshit Mogalapalli) [Orabug: 39419018]
  - net: skbuff: propagate shared-frag marker through frag-transfer helpers (Hyunwoo Kim) [Orabug: 39368826,39441323] {CVE-2026-43503,CVE-2026-46300}
  - net: skbuff: preserve shared-frag marker during coalescing (William Bowling) [Orabug: 39368826] {CVE-2026-46300}
  - LTS version: v6.12.87 (Sherry Yang)
  - LTS version: v6.12.86 (Sherry Yang)
  - netfilter: reject zero shift in nft_bitwise (Kai Ma) [Orabug: 39452464] {CVE-2026-46101}
  - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Andrea Mayer) [Orabug: 39452457] {CVE-2026-46099}
  - ALSA: caiaq: fix usb_dev refcount leak on probe failure (Deepanshu Kartikey) [Orabug: 39452739] {CVE-2026-46048}
  - drm/amdgpu: fix zero-size GDS range init on RDNA4 (Arjan van de Ven) [Orabug: 39524541] {CVE-2026-46276}
  - ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Greg Kroah-Hartman) [Orabug: 39426003] {CVE-2026-43501}
  - ALSA: caiaq: Don't abort when no input device is available (Takashi Iwai)
  - ALSA: caiaq: Fix potentially leftover ep1_in_urb at error path (Takashi Iwai)
  - net: bonding: fix use-after-free in bond_xmit_broadcast() (Xiang Mei) [Orabug: 39205989,39556377] {CVE-2026-31419}
  - crypto: authencesn - reject short ahash digests during instance creation (Yucheng Lu) [Orabug: 39452231] {CVE-2026-46033}
  - mm: prevent droppable mappings from being locked (Anthony Yznaga)
  - spi: fix resource leaks on device setup failure (Johan Hovold) [Orabug: 39452400] {CVE-2026-46083}
  - net: qrtr: ns: Limit the total number of nodes (Manivannan Sadhasivam) [Orabug: 39452123] {CVE-2026-46003}
  - net: mctp: fix don't require received header reserved bits to be zero (Yuanzhaoming)
  - net: bridge: use a stable FDB dst snapshot in RCU readers (Zhengchuan Liang) [Orabug: 39452411] {CVE-2026-46086}
  - net: qrtr: ns: Limit the maximum number of lookups (Manivannan Sadhasivam) [Orabug: 39452207] {CVE-2026-46026}
  - net: qrtr: ns: Limit the maximum server registration per node (Manivannan Sadhasivam) [Orabug: 39410851] {CVE-2026-43491}
  - iio: frequency: admv1013: fix NULL pointer dereference on str (Antoniu Miclaus)
  - iio: frequency: admv1013: add dev variable (Antoniu Miclaus)
  - block: relax pgmap check in bio_add_page for compatible zone device pages (Naman Jain)
  - RDMA/mana_ib: Disable RX steering on RSS QP destroy (Long Li) [Orabug: 39452406] {CVE-2026-46084}
  - media: rc: igorplugusb: heed coherency rules (Oliver Neukum) [Orabug: 39452432] {CVE-2026-46091}
  - ALSA: aoa: Skip devices with no codecs in i2sbus_resume() (Thorsten Blum)
  - media: rc: ttusbir: respect DMA coherency rules (Oliver Neukum)
  - mm/zsmalloc: copy KMSAN metadata in zs_page_migrate() (Shigeru Yoshida)
  - ALSA: aoa: i2sbus: clear stale prepared state (Cássio Gabriel)
  - ALSA: aoa: Use guard() for mutex locks (Takashi Iwai)
  - mm: migrate: requeue destination folio on deferred split queue (Usama Arif)
  - mm/migrate: move movable_ops page handling out of move_to_new_folio() (David Hildenbrand)
  - mm/migrate: factor out movable_ops page handling into migrate_movable_ops_page() (David Hildenbrand)
  - wifi: mwifiex: fix use-after-free in mwifiex_adapter_cleanup() (Daniel Hodges) [Orabug: 39452343] {CVE-2026-46069}
  - wifi: mt76: mt792x: fix mt7925u USB WFSYS reset handling (Sean Wang)
  - wifi: mt76: mt792x: describe USB WFSYS reset with a descriptor (Sean Wang)
  - thermal: core: Fix thermal zone governor cleanup issues (Rafael J. Wysocki) [Orabug: 39452186] {CVE-2026-46021}
  - ksmbd: reset rcount per connection in ksmbd_conn_wait_idle_sess_id() (Daemyung Kang)
  - ksmbd: replace connection list with hash table (Namjae Jeon)
  - ksmbd: use msleep instaed of schedule_timeout_interruptible() (Namjae Jeon)
  - f2fs: fix to do sanity check on dcc->discard_cmd_cnt conditionally (Chao Yu)
  - lib: test_hmm: evict device pages on file close to avoid use-after-free (Alistair Popple)
  - f2fs: fix UAF caused by decrementing sbi->nr_pages[] in f2fs_write_end_io() (Yongpeng Yang)
  - smb: client: validate the whole DACL before rewriting it in cifsacl (Michael Bommarito) [Orabug: 39300611] {CVE-2026-31709}
  - seg6: fix seg6 lwtunnel output redirect for L2 reduced encap mode (Andrea Mayer)
  - scsi: sd: fix missing put_disk() when device_add(&disk_dev) fails (Yang Xiuwei) [Orabug: 39452100] {CVE-2026-45997}
  - rtmutex: Use waiter::task instead of current in remove_waiter() (Keenan Dong) [Orabug: 39425998,39556379] {CVE-2026-43499}
  - ntfs3: fix integer overflow in run_unpack() volume boundary check (Tobi Gaertner)
  - ntfs3: add buffer boundary checks to run_unpack() (Tobi Gaertner)
  - ktest: Fix the month in the name of the failure directory (Steven Rostedt)
  - ceph: only d_add() negative dentries when they are unhashed (Max Kellermann) [Orabug: 39452291] {CVE-2026-46052}
  - dm mirror: fix integer overflow in create_dirty_log() (Junrui Luo) [Orabug: 39452196] {CVE-2026-46023}
  - crypto: nx - Fix packed layout in struct nx842_crypto_header (Gustavo A R Silva)
  - crypto: atmel-sha204a - Fix uninitialized data access on OTP read error (Thorsten Blum)
  - crypto: atmel-sha204a - Fix potential UAF and memory leak in remove path (Thorsten Blum)
  - crypto: atmel-sha204a - Fix error codes in OTP reads (Thorsten Blum)
  - crypto: atmel-tdes - fix DMA sync direction (Thorsten Blum)
  - crypto: ccree - fix a memory leak in cc_mac_digest() (Haoxiang Li)
  - crypto: hisilicon - Fix dma_unmap_single() direction (Thomas Fourier)
  - crypto: atmel-ecc - Release client on allocation failure (Thorsten Blum)
  - crypto: atmel-aes - Fix 3-page memory leak in atmel_aes_buff_cleanup (Thorsten Blum)
  - crypto: arm64/aes - Fix 32-bit aes_mac_update() arg treated as 64-bit (Eric Biggers)
  - can: ucan: fix devres lifetime (Johan Hovold)
  - bus: mhi: host: pci_generic: Switch to async power up to avoid boot delays (Qiang Yu)
  - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (Shuvam Pandey) [Orabug: 39452304] {CVE-2026-46056}
  - apparmor: use target task's context in apparmor_getprocattr() (Cengiz Can)
  - mfd: core: Preserve OF node when ACPI handle is present (Brian Mak)
  - taskstats: set version in TGID exit notifications (Yiyang Chen)
  - tcp: call sk_data_ready() after listener migration (Zhenzhong Wu) [Orabug: 39452159] {CVE-2026-46015}
  - wifi: rtl8xxxu: fix potential use of uninitialized value (Yi Cong)
  - x86/cpu: Disable FRED when PTI is forced on (Dave Hansen)
  - inotify: fix watch count leak when fsnotify_add_inode_mark_locked() fails (Chia-Ming Chang) [Orabug: 39452250] {CVE-2026-46040}
  - HID: apple: ensure the keyboard backlight is off if suspending (Aditya Garg)
  - check-uapi: link into shared objects (Arnd Bergmann)
  - md/raid5: validate payload size before accessing journal metadata (Junrui Luo) [Orabug: 39452349] {CVE-2026-46070}
  - md/raid5: fix soft lockup in retry_aligned_read() (Chia-Ming Chang) [Orabug: 39452287] {CVE-2026-46051}
  - amdgpu/jpeg: fix deepsleep register for jpeg 5_0_0 and 5_0_2 (David (Ming Qiang) Wu)
  - mtd: spi-nor: sst: Fix write enable before AAI sequence (Sanjaikumar V S)
  - ext4: fix missing brelse() in ext4_xattr_inode_dec_ref_all() (Sohei Koyama) [Orabug: 39452269] {CVE-2026-46046}
  - ext4: fix bounds check in check_xattrs() to prevent out-of-bounds access (Deepanshu Kartikey) [Orabug: 39452442] {CVE-2026-46094}
  - perf annotate: Use jump__delete when freeing LoongArch jumps (Rong Bao)
  - io_uring/poll: fix multishot recv missing EOF on wakeup race (Jens Axboe) {CVE-2026-23473}
  - KVM: nSVM: Always intercept VMMCALL when L2 is active (Sean Christopherson)
  - KVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L1 (Kevin Cheng) [Orabug: 39452372] {CVE-2026-46076}
  - KVM: nSVM: Add missing consistency check for nCR3 validity (Yosry Ahmed)
  - KVM: nSVM: Add missing consistency check for EFER, CR0, CR4, and CS (Yosry Ahmed)
  - KVM: nSVM: Clear tracking of L1->L2 NMI and soft IRQ on nested #VMEXIT (Yosry Ahmed)
  - KVM: nSVM: Clear EVENTINJ fields in vmcb12 on nested #VMEXIT (Yosry Ahmed)
  - KVM: nSVM: Clear GIF on nested #VMEXIT(INVALID) (Yosry Ahmed)
  - KVM: nSVM: Always inject a #GP if mapping VMCB12 fails on nested VMRUN (Yosry Ahmed)
  - KVM: nSVM: Use vcpu->arch.cr2 when updating vmcb12 on nested #VMEXIT (Yosry Ahmed)
  - KVM: nSVM: Ensure AVIC is inhibited when restoring a vCPU to guest mode (Yosry Ahmed)
  - KVM: SVM: Explicitly mark vmcb01 dirty after modifying VMCB intercepts (Sean Christopherson)
  - KVM: SVM: Inject #UD for INVLPGA if EFER.SVME=0 (Kevin Cheng) [Orabug: 39452394] {CVE-2026-46082}
  - KVM: nSVM: Sync interrupt shadow to cached vmcb12 after VMRUN of L2 (Yosry Ahmed) [Orabug: 39452061] {CVE-2026-45987}
  - KVM: nSVM: Sync NextRIP to cached vmcb12 after VMRUN of L2 (Yosry Ahmed)
  - KVM: nSVM: Mark all of vmcb02 dirty when restoring nested state (Yosry Ahmed)
  - KVM: x86: Defer non-architectural deliver of exception payload to userspace read (Sean Christopherson)
  - userfaultfd: allow registration of ranges below mmap_min_addr (Denis M. Karpov)
  - mm/damon/core: use time_in_range_open() for damos quota window start (Seongjae Park)
  - rtc: ntxec: fix OF node reference imbalance (Johan Hovold)
  - tpm: tpm_tis: stop transmit if retries are exhausted (Jacqueline Wong)
  - tpm: tpm_tis: add error logging for data transfer (Jacqueline Wong)
  - tpm: Use kfree_sensitive() to free auth session in tpm_dev_release() (Gunnar Kudrjavets) [Orabug: 39524558] {CVE-2026-46283}
  - tpm: Fix auth session leak in tpm2_get_random() error path (Gunnar Kudrjavets)
  - pwm: imx-tpm: Count the number of enabled channels in probe (Viorel Suman)
  - crypto: talitos - rename first/last to first_desc/last_desc (Paul Louvel)
  - crypto: talitos - fix SEC1 32k ahash request limitation (Paul Louvel)
  - firmware: google: framebuffer: Do not unregister platform device (Thomas Zimmermann)
  - xfs: fix a resource leak in xfs_alloc_buftarg() (Haoxiang Li) [Orabug: 39452131] {CVE-2026-46005}
  - arm64: dts: ti: am62-verdin: Enable pullup for eMMC data pins (Francesco Dolcini)
  - mmc: sdhci-of-dwcmshc: Disable clock before DLL configuration (Shawn Lin)
  - mmc: block: use single block write in retry (Bin Liu)
  - randomize_kstack: Maintain kstack_offset per task (Ryan Roberts)
  - hwmon: (pt5161l) Fix bugs in pt5161l_read_block_data() (Sanman Pradhan)
  - power: supply: axp288_charger: Do not cancel work before initializing it (Krzysztof Kozlowski)
  - LoongArch: Show CPU vulnerabilites correctly (Huacai Chen)
  - tpm: avoid -Wunused-but-set-variable (Arnd Bergmann)
  - extract-cert: Wrap key_pass with '#ifdef USE_PKCS11_ENGINE' (Nathan Chancellor)
  - libceph: Prevent potential null-ptr-deref in ceph_handle_auth_reply() (Raphael Zimmer) [Orabug: 39452201] {CVE-2026-46024}
  - ipv4: icmp: validate reply type before using icmp_pointers (Ruide Cao) [Orabug: 39452243] {CVE-2026-46037}
  - RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (Hkbinbin) [Orabug: 39452259] {CVE-2026-46043}
  - drm/arcpgu: fix device node leak (Luca Ceresoli)
  - net: ks8851: Avoid excess softirq scheduling (Marek Vasut)
  - netconsole: avoid out-of-bounds access on empty string in trim_newline() (Breno Leitao)
  - net: ks8851: Reinstate disabling of BHs around IRQ handler (Marek Vasut)
  - net/smc: avoid early lgr access in smc_clc_wait_msg (Ruijie Li)
  - net: txgbe: fix firmware version check (Jiawen Wu)
  - net: qrtr: ns: Free the node during ctrl_cmd_bye() (Manivannan Sadhasivam) [Orabug: 39452246] {CVE-2026-46038}
  - arm64: dts: marvell: uDPU: add ethernet aliases (Robert Marko)
  - tools/accounting: handle truncated taskstats netlink messages (Yiyang Chen)
  - rxrpc: Fix rxkad crypto unalignment handling (David Howells) [Orabug: 39452728] {CVE-2026-46085}
  - rxrpc: Fix memory leaks in rxkad_verify_response() (David Howells)
  - iio: adc: ad7768-1: fix one-shot mode data acquisition (Jonathan Santos)
  - ALSA: pcmtest: Fix resource leaks in module init error paths (Cássio Gabriel)
  - ALSA: pcmtest: fix reference leak on failed device registration (Guangshuo Li)
  - ALSA: 6fire: Fix input volume change detection (Cássio Gabriel)
  - ALSA: caiaq: Handle probe errors properly (Takashi Iwai) [Orabug: 39452126] {CVE-2026-46004}
  - ALSA: caiaq: Fix control_put() result and cache rollback (Cássio Gabriel)
  - ALSA: core: Fix potential data race at fasync handling (Takashi Iwai)
  - io_uring/poll: ensure EPOLL_ONESHOT is propagated for EPOLL_URING_WAKE (Jens Axboe)
  - io_uring/poll: fix signed comparison in io_poll_get_ownership() (Longxuan Yu) [Orabug: 39619350] {CVE-2026-52933}
  - iio: adc: ti-ads7950: use iio_push_to_buffers_with_ts_unaligned() (David Lechner)
  - io_uring/timeout: check unused sqe fields (Pavel Begunkov)
  - block: fix zone write plugs refcount handling in disk_zone_wplug_schedule_bio_work() (Damien Le Moal)
  - rbd: fix null-ptr-deref when device_add_disk() fails (Dawei Feng) [Orabug: 39452385] {CVE-2026-46079}
  - selftests/landlock: Fix format warning for __u64 in net_test (Mickaël Salaün)
  - selftests/mqueue: Fix incorrectly named file (Simon Liebold)
  - sched: Use u64 for bandwidth ratio calculations (Joseph Salisbury)
  - remoteproc: xlnx: Only access buffer information if IPI is buffered (Ben Levinsky)
  - parisc: _llseek syscall is only available for 32-bit userspace (Helge Deller)
  - nvme: respect NVME_QUIRK_DISABLE_WRITE_ZEROES when wzsl is set (Robert Beckett)
  - nvme-pci: add NVME_QUIRK_DISABLE_WRITE_ZEROES for Kingston OM3SGP4 (Robert Beckett)
  - mtd: docg3: fix use-after-free in docg3_release() (James Kim)
  - mfd: stpmic1: Attempt system shutdown twice in case PMIC is confused (Marek Vasut)
  - md/raid10: fix deadlock with check operation and nowait requests (Josh Hunt) [Orabug: 39452284] {CVE-2026-46050}
  - jbd2: fix deadlock in jbd2_journal_cancel_revoke() (Zhang Yi) [Orabug: 39452318] {CVE-2026-46061}
  - erofs: fix the out-of-bounds nameoff handling for trailing dirents (Gao Xiang) [Orabug: 39452380] {CVE-2026-46078}
  - ALSA: seq_oss: return full count for successful SEQ_FULLSIZE writes (Cássio Gabriel)
  - ALSA: ctxfi: Add fallback to default RSR for S/PDIF (Harin Lee) [Orabug: 39452280] {CVE-2026-46049}
  - ALSA: aoa: i2sbus: fix OF node lifetime handling (Cássio Gabriel)
  - ext2: reject inodes with zero i_nlink and valid mode in ext2_iget() (Vasiliy Kovalev) [Orabug: 39452119] {CVE-2026-46002}
  - net: qrtr: ns: Fix use-after-free in driver remove() (Manivannan Sadhasivam) [Orabug: 39452274] {CVE-2026-46047}
  - media: i2c: imx219: Check return value of devm_gpiod_get_optional() in imx219_probe() (Chen Ni)
  - lib/ts_kmp: fix integer overflow in pattern length calculation (Josh Law)
  - PCI: epf-mhi: Return 0, not remaining timeout, when eDMA ops complete (Daniel Hodges)
  - Revert "ALSA: usb: Increase volume range that triggers a warning" (Rongrong)
  - PCI: endpoint: pci-epf-ntb: Remove duplicate resource teardown (Koichiro Den)
  - crypto: atmel-sha204a - Fix OTP sysfs read and error handling (Thorsten Blum)
  - media: mtk-jpeg: fix use-after-free in release path due to uncancelled work (Fan Wu)
  - net: strparser: fix skb_head leak in strp_abort_strp() (Luxiao Xu) [Orabug: 39452468] {CVE-2026-46102}
  - net: caif: clear client service pointer on teardown (Zhengchuan Liang)
  - ALSA: control: Validate buf_len before strnlen() in snd_ctl_elem_init_enum_names() (Ziqing Chen) [Orabug: 39452416] {CVE-2026-46088}
  - media: amphion: Fix race between m2m job_abort and device_run (Ming Qian)
  - hwmon: (powerz) Fix missing usb_kill_urb() on signal interrupt (Sanman Pradhan)
  - of: unittest: fix use-after-free in testdrv_probe() (Xu Wang)
  - of: unittest: fix use-after-free in of_unittest_changeset() (Xu Wang)
  - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Herbert Xu) [Orabug: 39410863] {CVE-2026-43493}
  - mm/memory_hotplug: fix hwpoisoned large folio handling in do_migrate_range() (Tu Jinjiang)
  - spi: ch341: fix memory leaks on probe failures (Johan Hovold)
  - spi: imx: fix use-after-free on unbind (Johan Hovold)
  - um: drivers: call kernel_strrchr() explicitly in cow_user.c (Michael Bommarito)
  - vfio/cdx: Fix NULL pointer dereference in interrupt trigger path (Prasanna Kumar T S M)
  - vfio/cdx: Serialize VFIO_DEVICE_SET_IRQS with a per-device mutex (Alex Williamson)
  - wifi: rtw88: check for PCI upstream bridge existence (Fedor Pchelkin) [Orabug: 39452437] {CVE-2026-46092}
  - zram: do not forget to endio for partial discard requests (Sergey Senozhatsky) [Orabug: 39452420] {CVE-2026-46089}
  - ocfs2: split transactions in dio completion to avoid credit exhaustion (Heming Zhao) [Orabug: 39452388] {CVE-2026-46080}
  - device property: Make modifications of fwnode "flags" thread safe (Douglas Anderson)
  - drm/amdgpu: Limit BO list entry count to prevent resource exhaustion (Jesse Zhang) [Orabug: 39167551] {CVE-2026-23468}
  - drm/amdgpu: Use vmemdup_array_user in amdgpu_bo_create_list_entry_array (Tvrtko Ursulin)
  - rust: init: fix `clippy::undocumented_unsafe_blocks` warnings (Miguel Ojeda)
  - padata: Remove comment for reorder_work (Herbert Xu)
  - padata: Fix pd UAF once and for all (Herbert Xu) [Orabug: 38335055] {CVE-2025-38584}
  - arm64/mm: Enable batched TLB flush in unmap_hotplug_range() (Anshuman Khandual)
  - firmware: google: framebuffer: Do not mark framebuffer as busy (Thomas Zimmermann)
  - kbuild: rust: allow `clippy::uninlined_format_args` (Miguel Ojeda)
  - drm/nouveau: fix nvkm_device leak on aperture removal failure (David Carlier) [Orabug: 39531688] {CVE-2026-52904}
  - ibmasm: fix heap over-read in ibmasm_send_i2o_message() (Tyllis Xu)
  - ibmasm: fix OOB reads in command_file_write due to missing size checks (Tyllis Xu)
  - misc: ibmasm: fix OOB MMIO read in ibmasm_handle_mouse_interrupt() (Tyllis Xu)
  - greybus: gb-beagleplay: fix sleep in atomic context in hdlc_tx_frames() (Weigang He)
  - greybus: gb-beagleplay: bound bootloader receive buffering (Pengpeng Hou)
  - leds: qcom-lpg: Check for array overflow when selecting the high resolution (Greg Kroah-Hartman)
  - drm/nouveau: fix u32 overflow in pushbuf reloc bounds check (Greg Kroah-Hartman) [Orabug: 39452133] {CVE-2026-46006}
  - LoongArch: Add spectre boundry for syscall dispatch table (Greg Kroah-Hartman)
  - ALSA: usb-audio: Evaluate packsize caps at the right place (Takashi Iwai)
  - usb: chipidea: core: allow ci_irq_handler() handle both ID and VBUS change (Xu Yang)
  - usb: chipidea: otg: not wait vbus drop if use role_switch (Xu Yang)
  - usb: xhci: Make usb_host_endpoint.hcpriv survive endpoint_disable() (Michał Pecio)
  - ALSA: usb-audio: Fix Audio Advantage Micro II SPDIF switch (Cássio Gabriel)
  - ALSA: usb-audio: Avoid false E-MU sample-rate notifications (Cássio Gabriel)
  - ALSA: usb-audio: stop parsing UAC2 rates at MAX_NR_RATES (Cássio Gabriel) [Orabug: 39452170] {CVE-2026-46018}
  - LTS version: v6.12.85 (Sherry Yang)
  - Buffer overflow in drivers/xen/sys-hypervisor.c (Juergen Gross) [Orabug: 39305898] {CVE-2026-31786}
  - xen/privcmd: fix double free via VMA splitting (Juergen Gross) [Orabug: 39305908] {CVE-2026-31787}
  - LTS version: v6.12.84 (Sherry Yang)
  - rxrpc: Fix missing validation of ticket length in non-XDR key preparsing (Anderson Nascimento) [Orabug: 39300563] {CVE-2026-31696}
  - crypto: ccp: Don't attempt to copy ID to userspace if PSP command failed (Sean Christopherson) [Orabug: 39300567] {CVE-2026-31697}
  - crypto: ccp: Don't attempt to copy PDH cert to userspace if PSP command failed (Sean Christopherson) [Orabug: 39300571] {CVE-2026-31698}
  - crypto: ccp: Don't attempt to copy CSR to userspace if PSP command failed (Sean Christopherson) [Orabug: 39300575] {CVE-2026-31699}
  - net/packet: fix TOCTOU race on mmap'd vnet_hdr in tpacket_snd() (Bingquan Chen) [Orabug: 39300580] {CVE-2026-31700}
  - ALSA: caiaq: take a reference on the USB device in create_card() (Berk Cem Goksel) [Orabug: 39300586] {CVE-2026-31701}
  - ALSA: usb-audio: apply quirk for MOONDROP JU Jiu (Cryolitia Pukngae)
  - f2fs: fix use-after-free of sbi in f2fs_compress_write_end_io() (George Saad)
  - ksmbd: use check_add_overflow() to prevent u16 DACL size overflow (Tristan Madani)
  - ksmbd: fix out-of-bounds write in smb2_get_ea() EA alignment (Tristan Madani)
  - ksmbd: validate num_aces and harden ACE walk in smb_inherit_dacl() (Michael Bommarito)
  - ksmbd: validate response sizes in ipc_validate_msg() (Michael Bommarito)
  - smb: client: fix OOB read in smb2_ioctl_query_info QUERY_INFO path (Michael Bommarito) [Orabug: 39300607] {CVE-2026-31708}
  - smb: client: require a full NFS mode SID before reading mode bits (Michael Bommarito) [Orabug: 39343707] {CVE-2026-43350}
  - smb: server: fix max_connections off-by-one in tcp accept path (Daemyung Kang)
  - smb: server: fix active_num_conn leak on transport allocation failure (Michael Bommarito)
  - ksmbd: require minimum ACE size in smb_check_perm_dacl() (Michael Bommarito)
  - fuse: quiet down complaints in fuse_conn_limit_write (Darrick J. Wong)
  - fuse: Check for large folio with SPLICE_F_MOVE (Bernd Schubert)
  - fuse: reject oversized dirents in page cache (Samuel Page) [Orabug: 39300556] {CVE-2026-31694}
  - f2fs: fix to avoid memory leak in f2fs_rename() (Chao Yu)
  - fs/ntfs3: validate rec->used in journal-replay file record check (Greg Kroah-Hartman)
  - scripts/dtc: Remove unused dts_version in dtc-lexer.l (Nathan Chancellor)
  - ksmbd: fix use-after-free in __ksmbd_close_fd() via durable scavenger (Namjae Jeon)
  - mm/pagewalk: fix race between concurrent split and refault (Max Boone) [Orabug: 39250782] {CVE-2026-31456}
  - scripts: generate_rust_analyzer.py: define scripts (Tamir Duberstein)
  - drm/amdgpu: replace PASID IDR with XArray (Mikhail Gavrilov)
  - net: ethernet: mtk_eth_soc: initialize PPE per-tag-layer MTU registers (Daniel Golle)
  - rust: warn on bindgen < 0.69.5 and libclang >= 19.1 (Miguel Ojeda)
  - wifi: mac80211: always free skb on ieee80211_tx_prepare_skb() failure (Felix Fietkau) [Orabug: 39167472] {CVE-2026-23444}
  - ima: do not copy measurement list to kdump kernel (Steven Chen)
  - ima: verify if the segment size has changed (Steven Chen)
  - PCI: endpoint: pci-epf-vntb: Remove duplicate resource teardown (Koichiro Den)
  - mm/userfaultfd: fix hugetlb fault mutex hash calculation (Jianhui Zhou) [Orabug: 39273453] {CVE-2026-31575}
  - LTS version: v6.12.83 (Sherry Yang)
  - ipv6: add NULL checks for idev in SRv6 paths (Heminhong) [Orabug: 39167467] {CVE-2026-23442}
  - PCI: Fix placement of pci_save_state() in pci_bus_add_device() (Lukas Wunner)
  - rxrpc: Fix key quota calculation for multitoken keys (David Howells)
  - ocfs2: fix out-of-bounds write in ocfs2_write_end_inline (Joseph Qi) [Orabug: 39331090] {CVE-2026-43075}
  - ocfs2: validate inline data i_size during inode read (Deepanshu Kartikey) [Orabug: 39331097] {CVE-2026-43076}
  - ocfs2: add inline inode consistency check to ocfs2_validate_inode_block() (Dmitry Antipov)
  - media: hackrf: fix to not free memory after the device is registered in hackrf_probe() (Jeongjun Park)
  - media: vidtv: fix pass-by-value structs causing MSAN warnings (Abd-Alrhman Masalkhi)
  - nilfs2: fix NULL i_assoc_inode dereference in nilfs_mdt_save_to_shadow_map (Deepanshu Kartikey)
  - media: as102: fix to not free memory after the device is registered in as102_usb_probe() (Jeongjun Park) [Orabug: 39273467] {CVE-2026-31578}
  - bcache: fix cached_dev.sb_bio use-after-free and crash (Mingzhe Zou) [Orabug: 39273481] {CVE-2026-31580}
  - ALSA: 6fire: fix use-after-free on disconnect (Berk Cem Goksel) [Orabug: 39273486] {CVE-2026-31581}
  - hwmon: (powerz) Fix use-after-free on USB disconnect (Sanman Pradhan)
  - media: em28xx: fix use-after-free in em28xx_v4l2_open() (Abhishek Kumar) [Orabug: 39273493] {CVE-2026-31583}
  - media: mediatek: vcodec: fix use-after-free in encoder release path (Fan Wu)
  - media: vidtv: fix nfeeds state corruption on start_streaming failure (Ruslan Valiyev)
  - mm: blk-cgroup: fix use-after-free in cgwb_release_workfn() (Breno Leitao) [Orabug: 39273507] {CVE-2026-31586}
  - mm/kasan: fix double free for kasan pXds (Ritesh Harjani)
  - ASoC: qcom: q6apm: move component registration to unmanaged version (Srinivas Kandagatla)
  - KVM: x86: Use scratch field in MMIO fragment to hold small write values (Sean Christopherson) [Orabug: 39273521] {CVE-2026-31588}
  - x86-64/arm64/powerpc: clean up and rename __copy_from_user_flushcache (Linus Torvalds)
  - x86: rename and clean up __copy_from_user_inatomic_nocache() (Linus Torvalds)
  - x86-64: rename misleadingly named '__copy_user_nocache()' function (Linus Torvalds) [Orabug: 39323162] {CVE-2026-43073}
  - checkpatch: add support for Assisted-by tag (Sasha Levin)
  - KVM: x86: Use __DECLARE_FLEX_ARRAY() for UAPI structures with VLAs (David Woodhouse)
  - KVM: Remove subtle "struct kvm_stats_desc" pseudo-overlay (Sean Christopherson)
  - kernel: be more careful about dup_mmap() failures and uprobe registering (Liam R. Howlett) [Orabug: 37649817] {CVE-2025-21709}
  - net: sched: fix TCF_LAYER_TRANSPORT handling in tcf_get_base_ptr() (Eric Dumazet)
  - gpiolib: fix race condition for gdev->srcu (Paweł Narewski) [Orabug: 38887677] {CVE-2026-22986}
  - gpiolib: unify two loops initializing GPIO descriptors (Bartosz Golaszewski)
  - KVM: SEV: Drop WARN on large size for KVM_MEMORY_ENCRYPT_REG_REGION (Sean Christopherson) [Orabug: 39273529] {CVE-2026-31590}
  - KVM: SEV: Disallow LAUNCH_FINISH if vCPUs are actively being created (Sean Christopherson)
  - KVM: SEV: Reject attempts to sync VMSA of an already-launched/encrypted vCPU (Sean Christopherson) [Orabug: 39273553] {CVE-2026-31593}
  - PCI: endpoint: pci-epf-vntb: Stop cmd_handler work in epf_ntb_epc_cleanup (Koichiro Den)
  - ocfs2: handle invalid dinode in ocfs2_group_extend (Zhengyuan Huang) [Orabug: 39273569] {CVE-2026-31596}
  - ocfs2: fix use-after-free in ocfs2_fault() when VM_FAULT_RETRY (Tejas Bharambe) [Orabug: 39273578] {CVE-2026-31597}
  - ocfs2: fix possible deadlock between unlink and dio_end_io_write (Joseph Qi) [Orabug: 39273586] {CVE-2026-31598}
  - media: vidtv: fix NULL pointer dereference in vidtv_channel_pmt_match_sections (Ruslan Valiyev)
  - dcache: Limit the minimal number of bucket to two (Zhihao Cheng) [Orabug: 39323133] {CVE-2026-43071}
  - ALSA: ctxfi: Limit PTP to a single page (Harin Lee) [Orabug: 39273608] {CVE-2026-31602}
  - Docs/admin-guide/mm/damon/reclaim: warn commit_inputs vs param updates race (Seongjae Park)
  - USB: serial: option: add Telit Cinterion FN990A MBIM composition (Fabio Porcedda)
  - staging: sm750fb: fix division by zero in ps_to_hz() (Junrui Luo)
  - wifi: rtw88: fix device leak on probe failure (Johan Hovold) [Orabug: 39273620] {CVE-2026-31604}
  - scripts: generate_rust_analyzer.py: avoid FD leak (Tamir Duberstein)
  - fbdev: udlfb: avoid divide-by-zero on FBIOPUT_VSCREENINFO (Greg Kroah-Hartman)
  - usb: port: add delay after usb_hub_set_port_power() (Xu Yang)
  - usb: gadget: f_hid: don't call cdev_init while cdev in use (Michael Zimmermann)
  - USB: cdc-acm: Add quirks for Yoga Book 9 14IAH10 INGENIC touchscreen (Dave Carey)
  - usb: storage: Expand range of matched versions for VL817 quirks entry (Daniel Brát)
  - usbip: validate number_of_packets in usbip_pack_ret_submit() (Nathan Rebello) [Orabug: 39273631] {CVE-2026-31607}
  - ksmbd: fix mechToken leak when SPNEGO decode fails after token alloc (Greg Kroah-Hartman)
  - ksmbd: require 3 sub-authorities before reading sub_auth[2] (Greg Kroah-Hartman)
  - ksmbd: validate EaNameLength in smb2_get_ea() (Greg Kroah-Hartman)
  - smb: client: fix off-by-8 bounds check in check_wsl_eas() (Greg Kroah-Hartman) [Orabug: 39273654] {CVE-2026-31614}
  - usb: gadget: renesas_usb3: validate endpoint index in standard request handlers (Greg Kroah-Hartman)
  - usb: gadget: f_phonet: fix skb frags[] overflow in pn_rx_complete() (Greg Kroah-Hartman)
  - usb: gadget: f_ncm: validate minimum block_len in ncm_unwrap_ntb() (Greg Kroah-Hartman)
  - fbdev: tdfxfb: avoid divide-by-zero on FBIOPUT_VSCREENINFO (Greg Kroah-Hartman)
  - ALSA: fireworks: bound device-supplied status before string array lookup (Greg Kroah-Hartman)
  - drm/vc4: platform_get_irq_byname() returns an int (Greg Kroah-Hartman) [Orabug: 39323149] {CVE-2026-43072}
  - NFC: digital: Bounds check NFC-A cascade depth in SDD response handler (Greg Kroah-Hartman)
  - net: usb: cdc-phonet: fix skb frags[] overflow in rx_complete() (Greg Kroah-Hartman)
  - HID: core: clamp report_size in s32ton() to avoid undefined shift (Greg Kroah-Hartman) [Orabug: 39273696] {CVE-2026-31624}
  - HID: alps: fix NULL pointer dereference in alps_raw_event() (Greg Kroah-Hartman) [Orabug: 39273704] {CVE-2026-31625}
  - staging: rtl8723bs: initialize le_tmp64 in rtw_BIP_verify() (Lin Yu Chen)
  - i2c: s3c24xx: check the size of the SMBUS message before using it (Greg Kroah-Hartman)
  - can: raw: fix ro->uniq use-after-free in raw_rcv() (Samuel Page) [Orabug: 39273446] {CVE-2026-31532}
  - nfc: llcp: add missing return after LLCP_CLOSED checks (Junxi Qian)
  - idpf: fix PREEMPT_RT raw/bh spinlock nesting for async VC handling (Emil Tantilov) [Orabug: 39262348] {CVE-2026-31647}
  - ALSA: usb-audio: Improve Focusrite sample rate filtering (Geoffrey D. Bennett)
  - thermal: core: Address thermal zone removal races with resume (Rafael J. Wysocki) [Orabug: 39300675] {CVE-2026-31731}
  - thermal: core: Mark thermal zones as exiting before unregistration (Rafael J. Wysocki)
  - netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [Orabug: 39171449] {CVE-2026-31407}
  - crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [Orabug: 39331103] {CVE-2026-43077}
  - perf/x86/intel/uncore: Skip discovery table for offline dies (Zide Chen) [Orabug: 39331114] {CVE-2026-43079}
  - crypto: af_alg - limit RX SG extraction by receive buffer budget (Douya Le) [Orabug: 39263372] {CVE-2026-31677}
  - gpio: tegra: fix irq_release_resources calling enable instead of disable (Samasth Norway Ananda)
  - l2tp: Drop large packets with UDP encap (Alice Mikityanska) [Orabug: 39331124] {CVE-2026-43080}
  - net: ipa: fix event ring index not programmed for IPA v5.0+ (Alexander Koskovich)
  - net: ipa: fix GENERIC_CMD register field masks for IPA v5.0+ (Alexander Koskovich)
  - af_unix: read UNIX_DIAG_VFS data under unix_state_lock (Jiexun Wang) [Orabug: 39263355] {CVE-2026-31673}
  - net: txgbe: leave space for null terminators on property_entry (Fabio Baltieri)
  - netfilter: ip6t_eui64: reject invalid MAC header for all packets (Zhengchuan Liang) [Orabug: 39263405] {CVE-2026-31685}
  - netfilter: xt_multiport: validate range encoding in checkentry (Ao Zhou) [Orabug: 39263387] {CVE-2026-31681}
  - netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Xiang Mei) [Orabug: 39331144] {CVE-2026-43085}
  - ipvs: fix NULL deref in ip_vs_add_service error path (Weiming Shi) [Orabug: 39331151] {CVE-2026-43086}
  - selftests: net: bridge_vlan_mcast: wait for h1 before querier check (Daniel Golle)
  - xfrm_user: fix info leak in build_mapping() (Greg Kroah-Hartman) [Orabug: 39331162] {CVE-2026-43089}
  - xfrm: fix refcount leak in xfrm_migrate_policy_find (Kotlyarov Mihail) [Orabug: 39331168] {CVE-2026-43090}
  - xfrm: Wait for RCU readers during policy netns exit (Steffen Klassert) [Orabug: 39331170] {CVE-2026-43091}
  - xsk: validate MTU against usable frame size on bind (Maciej Fijalkowski) [Orabug: 39331178] {CVE-2026-43092}
  - xsk: fix XDP_UMEM_SG_FLAG issues (Maciej Fijalkowski)
  - xsk: respect tailroom for ZC setups (Maciej Fijalkowski)
  - xsk: tighten UMEM headroom validation to account for tailroom and min frame (Maciej Fijalkowski) [Orabug: 39331180] {CVE-2026-43093}
  - e1000: check return value of e1000_read_eeprom (Agalakov Daniil)
  - ixgbevf: add missing negotiate_features op to Hyper-V ops table (Michal Schmidt) [Orabug: 39331185] {CVE-2026-43094}
  - tracing/probe: reject non-closed empty immediate strings (Pengpeng Hou)
  - dt-bindings: net: Fix Tegra234 MGBE PTP clock (Jonathan Hunter)
  - net: stmmac: Fix PTP ref clock for Tegra234 (Jonathan Hunter)
  - nfc: s3fwrn5: allocate rx skb before consuming bytes (Pengpeng Hou)
  - net: increase IP_TUNNEL_RECURSION_LIMIT to 5 (Chris J Arges)
  - ipv4: icmp: fix null-ptr-deref in icmp_build_probe() (Yiqi Sun) [Orabug: 39331197] {CVE-2026-43099}
  - ipv4: nexthop: allocate skb dynamically in rtm_get_nexthop() (Fernando Fernandez Mancera) [Orabug: 39257881] {CVE-2026-31531}
  - ipv4: nexthop: avoid duplicate NHA_HW_STATS_ENABLE on nexthop group dump (Fernando Fernandez Mancera)
  - net: lapbether: handle NETDEV_PRE_TYPE_CHANGE (Eric Dumazet)
  - net: sched: act_csum: validate nested VLAN headers (Ruide Cao) [Orabug: 39263400] {CVE-2026-31684}
  - eventpoll: defer struct eventpoll free to RCU grace period (Nicholas Carlini) [Orabug: 39331087,39556391] {CVE-2026-43074}
  - drm/vc4: Protect madv read in vc4_gem_object_mmap() with madv_lock (Maíra Canal)
  - drm/vc4: Fix a memory leak in hang state error path (Maíra Canal) [Orabug: 39331211] {CVE-2026-43104}
  - drm/vc4: Fix memory leak of BO array in hang state (Maíra Canal) [Orabug: 39331215] {CVE-2026-43105}
  - drm/vc4: Release runtime PM reference after binding V3D (Maíra Canal)
  - xfrm: account XFRMA_IF_ID in aevent size calculation (Keenan Dong) [Orabug: 39331223] {CVE-2026-43107}
  - HID: amd_sfh: don't log error when device discovery fails with -EOPNOTSUPP (Maximilian Pezzullo)
  - PCI: hv: Set default NUMA node to 0 for devices without affinity info (Long Li)
  - tools/power/turbostat: Fix microcode patch level output for AMD/Hygon (Serhii Pievniev)
  - soc: qcom: pd-mapper: Fix element length in servreg_loc_pfr_req_ei (Mukesh Ojha)
  - arm64: dts: imx93-tqma9352: improve eMMC pad configuration (Markus Niebel)
  - arm64: dts: imx93-9x9-qsb: change usdhc tuning step for eMMC and SD (Luke Wang)
  - arm64: dts: imx8mq: Set the correct gpu_ahb clock frequency (Sebastian Krzyszkowiak)
  - arm64: dts: qcom: hamoa/x1: fix idle exit latency (Daniel J Blueman)
  - soc: aspeed: socinfo: Mask table entries for accurate SoC ID matching (Potin Lai)
  - ASoC: stm32_sai: fix incorrect BCLK polarity for DSP_A/B, LEFT_J (Tomasz Merta)
  - net: sfp: add quirks for Hisense and HSGQ GPON ONT SFP modules (John Pavlick)
  - wifi: brcmfmac: validate bsscfg indices in IF events (Pengpeng Hou) [Orabug: 39331236] {CVE-2026-43110}
  - ata: ahci: force 32-bit DMA for JMicron JMB582/JMB585 (Arthur Husband)
  - HID: roccat: fix use-after-free in roccat_report_event (Benoît Sevens) [Orabug: 39331243] {CVE-2026-43111}
  - ALSA: hda/realtek: Add quirk for Lenovo Yoga Pro 7 14IAH10 (Songxiebing)
  - HID: quirks: add HID_QUIRK_ALWAYS_POLL for 8BitDo Pro 3 (Leo Vriska)
  - platform/x86/amd: pmc: Add Thinkpad L14 Gen3 to quirk_s2idle_bug (Mario Limonciello)
  - pinctrl: intel: Fix the revision for new features (1kOhm PD, HW debouncer) (Andy Shevchenko)
  - ALSA: hda/realtek: Add quirk for Lenovo Yoga Pro 7 14IMH9 (Alexander Savenko)
  - ASoC: amd: yc: Add DMI entry for HP Laptop 15-fc0xxx (Gilson Marquato Júnior)
  - fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (Fredric Cover) [Orabug: 39331248] {CVE-2026-43112}
  - ALSA: usb-audio: Fix quirk flags for NeuralDSP Quad Cortex (Phil Willoughby)
  - ALSA: hda/realtek: Add quirk for Samsung Book2 Pro 360 (NP950QED) (Takashi Iwai)
  - ASoC: soc-core: call missing INIT_LIST_HEAD() for card_aux_list (Kuninori Morimoto)
  - wifi: wl1251: validate packet IDs before indexing tx_frames (Pengpeng Hou) [Orabug: 39331253] {CVE-2026-43113}
  - ALSA: hda/realtek: add quirk for Framework F111:000F (Dustin L. Howett)
  - netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [Orabug: 39331262] {CVE-2026-43114}
  - drm/amdgpu: Handle GPU page faults correctly on non-4K page systems (Donet Tom)
  - ALSA: hda/realtek: Add mute LED quirk for HP Pavilion 15-eg0xxx (César Montoya)
  - btrfs: tracepoints: get correct superblock from dentry in event btrfs_sync_file() (Goldwyn Rodrigues) [Orabug: 39331279] {CVE-2026-43117}
  - platform/x86: asus-nb-wmi: add DMI quirk for ASUS ROG Flow Z13-KJP GZ302EAC (Matthew Schwartz)
  - can: mcp251x: add error handling for power enable in open and resume (Wenyuan Li)
  - ASoC: SOF: topology: reject invalid vendor array size in token parser (Cássio Gabriel)
  - ASoC: amd: yc: Add DMI quirk for Thin A15 B7VF (Zhang Heng)
  - Bluetooth: hci_sync: annotate data-races around hdev->req_status (Cen Zhang) [Orabug: 39331291] {CVE-2026-43119}
  - ALSA: asihpi: avoid write overflow check warning (Arnd Bergmann)
  - media: rkvdec: reduce stack usage in rkvdec_init_v4l2_vp9_count_tbl() (Arnd Bergmann)
  - ALSA: hda/realtek: Add quirk for ASUS ROG Flow Z13-KJP GZ302EAC (Matthew Schwartz)
  - ALSA: hda/realtek: Add HP ENVY Laptop 13-ba0xxx quirk (Andrii Kovalchuk)
  - ASoC: amd: yc: Add DMI quirk for ASUS EXPERTBOOK BM1403CDA (Vee Satayamas)
  - RDMA/irdma: Fix double free related to rereg_user_mr (Jacob Moroni) [Orabug: 39331295] {CVE-2026-43120}
  - LTS version: v6.12.82 (Sherry Yang)
  - ALSA: hda/hdmi: Add quirk for TUXEDO IBS14G6 (Aaron Erhardt)
  - net: skb: fix cross-cache free of KFENCE-allocated skb head (Jiayuan Chen) [Orabug: 39238726] {CVE-2026-31429}
  - rxrpc: Fix missing error checks for rxkad encryption/decryption failure (David Howells)
  - rxrpc: Fix key/keyring checks in setsockopt(RXRPC_SECURITY_KEY/KEYRING) (David Howells)
  - rxrpc: fix reference count leak in rxrpc_server_keyring() (Luxiao Xu) [Orabug: 39262320] {CVE-2026-31634}
  - rxrpc: reject undecryptable rxkad response tickets (Yuqi Xu)
  - rxrpc: Only put the call ref if one was acquired (Douya Le) [Orabug: 39262331] {CVE-2026-31638}
  - rxrpc: Fix key reference count leak from call->key (Anderson Nascimento) [Orabug: 39262333] {CVE-2026-31639}
  - rxrpc: Fix call removal to use RCU safe deletion (David Howells) [Orabug: 39262337] {CVE-2026-31642}
  - rxrpc: Fix anonymous key handling (David Howells)
  - net: lan966x: fix use-after-free and leak in lan966x_fdma_reload() (David Carlier)
  - net: lan966x: fix page pool leak in error paths (David Carlier)
  - net: lan966x: fix page_pool error handling in lan966x_fdma_rx_alloc_page_pool() (David Carlier)
  - idpf: set the payload size before calling the async handler (Emil Tantilov)
  - idpf: improve locking around idpf_vc_xn_push_free() (Emil Tantilov)
  - mm: filemap: fix nr_pages calculation overflow in filemap_map_pages() (Baolin Wang) [Orabug: 39262350] {CVE-2026-31648}
  - net: stmmac: fix integer underflow in chain mode (Tyllis Xu) [Orabug: 39262352] {CVE-2026-31649}
  - net: qualcomm: qca_uart: report the consumed byte on RX skb allocation failure (Pengpeng Hou)
  - mmc: vub300: fix NULL-deref on disconnect (Johan Hovold) [Orabug: 39262358] {CVE-2026-31651}
  - pmdomain: imx8mp-blk-ctrl: Keep the NOC_HDCP clock enabled (Jacky Bai)
  - net/mlx5: Update the list of the PCI supported devices (Michael Guralnik)
  - drm/i915/psr: Do not use pipe_src as borders for SU area (Jouni Högander)
  - drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat (Sebastian Brzezinka) [Orabug: 39262370] {CVE-2026-31656}
  - batman-adv: hold claim backbone gateways by reference (Haoze Xie) [Orabug: 39262373,39556388] {CVE-2026-31657}
  - net: altera-tse: fix skb leak on DMA mapping error in tse_start_xmit() (David Carlier) [Orabug: 39262377] {CVE-2026-31658}
  - net/tls: fix use-after-free in -EBUSY error path of tls_do_encryption (M A Ramdhan) [Orabug: 39257890,39556386] {CVE-2026-31533}
  - EDAC/mc: Fix error path ordering in edac_mc_alloc() (Borislav Petkov) [Orabug: 39273747] {CVE-2026-31689}
  - X.509: Fix out-of-bounds access when parsing extensions (Lukas Wunner) [Orabug: 39238730] {CVE-2026-31430}
  - batman-adv: reject oversized global TT response buffers (Ruide Cao) [Orabug: 39262381] {CVE-2026-31659}
  - nfc: pn533: allocate rx skb before consuming bytes (Pengpeng Hou)
  - arm64: dts: hisilicon: hi3798cv200: Add missing dma-ranges (Shawn Guo)
  - arm64: dts: hisilicon: poplar: Correct PCIe reset GPIO polarity (Shawn Guo)
  - arm64: dts: imx8mq-librem5: Bump BUCK1 suspend voltage up to 0.85V (Sebastian Krzyszkowiak)
  - Revert "arm64: dts: imx8mq-librem5: Set the DVS voltages lower" (Sebastian Krzyszkowiak)
  - platform/x86/intel-uncore-freq: Handle autonomous UFS status bit (Srinivas Pandruvada)
  - wifi: brcmsmac: Fix dma_free_coherent() size (Thomas Fourier) [Orabug: 39262389] {CVE-2026-31661}
  - tipc: fix bc_ackers underflow on duplicate GRP_ACK_MSG (Oleh Konko) [Orabug: 39262393] {CVE-2026-31662}
  - xfrm: clear trailing padding in build_polexpire() (Yasuaki Torimaru) [Orabug: 39262401] {CVE-2026-31664}
  - workqueue: Add pool_workqueue to pending_pwqs list when unplugging multiple inactive works (Matthew Brost)
  - netfilter: nft_ct: fix use-after-free in timeout object destroy (Tuan Do) [Orabug: 39262406] {CVE-2026-31665}
  - LoongArch: Handle percpu handler address for ORC unwinder (Tiezhu Yang)
  - LoongArch: Remove unnecessary checks for ORC unwinder (Tiezhu Yang)
  - net: annotate data-races around sk->sk_{data_ready,write_space} (Eric Dumazet) [Orabug: 39130795] {CVE-2026-23302}
  - Revert "mptcp: add needs_id for netlink appending addr" (Matthieu Baerts)
  - sched_ext: Fix stale direct dispatch state in ddsp_dsq_id (Andrea Righi) [Orabug: 39300679] {CVE-2026-31733}
  - misc: fastrpc: check qcom_scm_assign_mem() return in rpmsg_probe (Xingjing Deng)
  - arm64: dts: renesas: white-hawk-cpu-common: Add pin control for DSI-eDP IRQ (Geert Uytterhoeven)
  - nfc: nci: complete pending data exchange on device close (Jakub Kicinski)
  - blktrace: fix __this_cpu_read/write in preemptible context (Chaitanya Kulkarni) [Orabug: 39131032] {CVE-2026-23374}
  - btrfs: fix incorrect return value after changing leaf in lookup_extent_data_ref() (Robbie Ko) [Orabug: 39262410] {CVE-2026-31666}
  - btrfs: remove pointless out labels from extent-tree.c (Filipe Manana)
  - btrfs: remove unused flag EXTENT_BUFFER_CORRUPT (Daniel Vacek)
  - btrfs: remove unused flag EXTENT_BUFFER_READAHEAD (Daniel Vacek)
  - btrfs: split waiting from read_extent_buffer_pages(), drop parameter wait (David Sterba)
  - btrfs: remove unused define WAIT_PAGE_LOCK for extent io (David Sterba)
  - btrfs: make wait_on_extent_buffer_writeback() static inline (David Sterba)
  - ASoC: simple-card-utils: Don't use __free(device_node) at graph_util_parse_dai() (Kuninori Morimoto) [Orabug: 39489163] {CVE-2025-39930}
  - MIPS: mm: Rewrite TLB uniquification for the hidden bit feature (Maciej W. Rozycki)
  - MIPS: mm: Suppress TLB uniquification on EHINV hardware (Maciej W. Rozycki)
  - MIPS: Always record SEGBITS in cpu_data.vmbits (Maciej W. Rozycki)
  - Input: uinput - take event lock when submitting FF request "event" (Dmitry Torokhov)
  - Input: uinput - fix circular locking dependency with ff-core (Mikhail Gavrilov) [Orabug: 39262412] {CVE-2026-31667}
  - seg6: separate dst_cache for input and output paths in seg6 lwtunnel (Andrea Mayer) [Orabug: 39262416] {CVE-2026-31668}
  - mptcp: fix slab-use-after-free in __inet_lookup_established (Jiayuan Chen) [Orabug: 39262421,39556381] {CVE-2026-31669}
  - net: rfkill: prevent unlimited numbers of rfkill events from being created (Greg Kroah-Hartman) [Orabug: 39262424] {CVE-2026-31670}
  - xfrm_user: fix info leak in build_report() (Greg Kroah-Hartman) [Orabug: 39262428] {CVE-2026-31671}
  - wifi: rt2x00usb: fix devres lifetime (Johan Hovold) [Orabug: 39262432] {CVE-2026-31672}
  - usb: typec: ucsi: skip connector validation before init (Nathan Rebello)
  - lib/crypto: chacha: Zeroize permuted_state before it leaves scope (Eric Biggers) [Orabug: 39343666] {CVE-2026-43336}
  - LTS version: v6.12.81 (Sherry Yang)
  - selftests/bpf: test refining u32/s32 bounds when ranges cross min/max boundary (Eduard Zingerman)
  - bpf: Fix u32/s32 bounds when ranges cross min/max boundary (Eduard Zingerman)
  - bpf: Add third round of bounds deduction (Paul Chaignon)
  - selftests/bpf: Test invariants on JSLT crossing sign (Paul Chaignon)
  - selftests/bpf: Test cross-sign 64bits range refinement (Paul Chaignon)
  - bpf: Improve bounds when s64 crosses sign boundary (Paul Chaignon)
  - drm/amd/display: Correct logic check error for fastboot (Charlene Liu)
  - drm/amd: Disable ASPM on SI (Timur Kristóf)
  - drm/amd/display: Disable scaling on DCE6 for now (Timur Kristóf)
  - drm/amd/display: Adjust DCE 8-10 clock, don't overclock by 15% (Timur Kristóf)
  - drm/amd/display: Fix DCE 6.0 and 6.4 PLL programming. (Timur Kristóf)
  - drm/amd/display: Keep PLL0 running on DCE 6.0 and 6.4 (Timur Kristóf)
  - drm/amd/display: Disable fastboot on DCE 6 too (Timur Kristóf)
  - drm/amd/amdgpu: disable ASPM in some situations (Kenneth Feng)
  - drm/amd/amdgpu: decouple ASPM with pcie dpm (Kenneth Feng)
  - x86/CPU/AMD: Add additional fixed RDSEED microcode revisions (Mario Limonciello)
  - MPTCP: fix lock class name family in pm_nl_create_listen_socket (Li Xiasong)
  - s390/cpum_sf: Cap sampling rate to prevent lsctl exception (Thomas Richter)
  - s390/perf_cpum_sf: Convert to use try_cmpxchg128() (Heiko Carstens)
  - ext4: publish jinode after initialization (Li Chen) [Orabug: 39250748] {CVE-2026-31450}
  - drm/amd/pm: disable OD_FAN_CURVE if temp or pwm range invalid for smu v13 (Yang Wang)
  - mm/memory: fix PMD/PUD checks in follow_pfnmap_start() (David Hildenbrand)
  - mm: replace READ_ONCE() with standard page table accessors (Anshuman Khandual)
  - mm/huge_memory: fix folio isn't locked in softleaf_to_folio() (Tu Jinjiang) [Orabug: 39250812] {CVE-2026-31466}
  - x86/fred: Fix early boot failures on SEV-ES/SNP guests (Nikunj A Dadhania)
  - scsi: target: tcm_loop: Drain commands in target_reset handler (Josef Bacik) [Orabug: 39300989] {CVE-2026-43054}
  - net: mana: fix use-after-free in add_adev() error path (Guangshuo Li) [Orabug: 39302308] {CVE-2026-43056}
  - net: correctly handle tunneled traffic on IPV6_CSUM GSO fallback (Willem de Bruijn) [Orabug: 39302311] {CVE-2026-43057}
  - spi: cadence-qspi: Fix exec_mem_op error handling (Emanuele Ghidoli)
  - wifi: virt_wifi: remove SET_NETDEV_DEV to avoid use-after-free (Alexander Popov)
  - usb: gadget: f_uac1_legacy: validate control request size (Taegu Ha)
  - usb: gadget: f_hid: move list and spinlock inits from bind to alloc (Michael Zimmermann)
  - usb: gadget: f_rndis: Fix net_device lifecycle with device_move (Kuen-Han Tsai)
  - usb: gadget: f_subset: Fix net_device lifecycle with device_move (Kuen-Han Tsai)
  - usb: gadget: f_eem: Fix net_device lifecycle with device_move (Kuen-Han Tsai)
  - usb: gadget: f_ecm: Fix net_device lifecycle with device_move (Kuen-Han Tsai)
  - usb: gadget: f_rndis: Protect RNDIS options with mutex (Kuen-Han Tsai)
  - usb: gadget: f_subset: Fix unbalanced refcnt in geth_free (Kuen-Han Tsai)
  - usb: gadget: uvc: fix NULL pointer dereference during unbind race (Jimmy Hu)
  - usb: gadget: u_ether: Fix NULL pointer deref in eth_get_drvinfo (Kuen-Han Tsai)
  - usb: gadget: u_ether: Fix race between gether_disconnect and eth_stop (Kuen-Han Tsai)
  - btrfs: do not free data reservation in fallback from inline due to -ENOSPC (Filipe Manana) [Orabug: 39103088] {CVE-2025-71269}
  - btrfs: fix the qgroup data free range for inline data extents (Qu Wenruo)
  - ice: Fix memory leak in ice_set_ringparam() (Zilin Guan) [Orabug: 39131082] {CVE-2026-23389}
  - usb: typec: ucsi: validate connector number in ucsi_notify_common() (Nathan Rebello) [Orabug: 39300670] {CVE-2026-31729}
  - usb: gadget: dummy_hcd: fix premature URB completion when ZLP follows partial transfer (Sebastian Urban)
  - USB: dummy-hcd: Fix interrupt synchronization error (Alan Stern)
  - USB: dummy-hcd: Fix locking/synchronization error (Alan Stern)
  - thunderbolt: Fix property read in nhi_wake_supported() (Konrad Dybcio)
  - misc: fastrpc: possible double-free of cctx->remote_heap (Xingjing Deng)
  - thermal: core: Fix thermal zone device registration error path (Rafael J. Wysocki) [Orabug: 39343655] {CVE-2026-43332}
  - gpio: mxc: map Both Edge pad wakeup to Rising Edge (Shenwei Wang)
  - cpufreq: governor: fix double free in cpufreq_dbs_governor_init() error path (Guangshuo Li) [Orabug: 39343644] {CVE-2026-43328}
  - net: ethernet: mtk_ppe: avoid NULL deref when gmac0 is disabled (Sven Eckelmann)
  - net: ftgmac100: fix ring allocation unwind on open failure (Yufan Chen)
  - vxlan: validate ND option lengths in vxlan_na_create (Ao Zhou) [Orabug: 39300689] {CVE-2026-31738}
  - crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Eric Biggers)
  - counter: rz-mtu3-cnt: do not use struct rz_mtu3_channel's dev member (Cosmin Tanislav)
  - counter: rz-mtu3-cnt: prevent counter from being toggled multiple times (Cosmin Tanislav)
  - netfilter: ipset: drop logically empty buckets in mtype_del (Yifan Wu) [Orabug: 39205984] {CVE-2026-31418}
  - nvmem: zynqmp_nvmem: Fix buffer size in DMA and memcpy (Ivan Vera)
  - nvmem: imx: assign nvmem_cell_info::raw_len (Christian Eggers)
  - dt-bindings: connector: add pd-disable dependency (Xu Yang)
  - firmware: microchip: fail auto-update probe if no flash found (Conor Dooley)
  - comedi: me4000: Fix potential overrun of firmware buffer (Ian Abbott)
  - comedi: me_daq: Fix potential overrun of firmware buffer (Ian Abbott)
  - comedi: ni_atmio16d: Fix invalid clean-up after failed attach (Ian Abbott)
  - comedi: Reinit dev->spinlock between attachments to low-level drivers (Ian Abbott)
  - comedi: dt2815: add hardware detection to prevent crash (Deepanshu Kartikey)
  - cdc-acm: new quirk for EPSON HMD (Oliver Neukum)
  - bridge: br_nd_send: validate ND option lengths (Ao Zhou) [Orabug: 39300723] {CVE-2026-31752}
  - Revert "LoongArch/orc: Use RCU in all users of __module_address()." (Sasha Levin)
  - Revert "LoongArch: Remove unnecessary checks for ORC unwinder" (Sasha Levin)
  - Revert "LoongArch: Handle percpu handler address for ORC unwinder" (Sasha Levin)
  - usb: cdns3: gadget: fix state inconsistency on gadget init failure (Yongchao Wu)
  - usb: cdns3: gadget: fix NULL pointer dereference in ep_queue (Yongchao Wu)
  - usb: core: phy: avoid double use of 'usb3-phy' (Gabor Juhos)
  - usb: dwc2: gadget: Fix spin_lock/unlock mismatch in dwc2_hsotg_udc_stop() (Juneho Choi)
  - usb: ehci-brcm: fix sleep during atomic (Justin Chen)
  - usb: usbtmc: Flush anchored URBs in usbtmc_release (Heitor Alves de Siqueira) [Orabug: 39300741] {CVE-2026-31758}
  - usb: ulpi: fix double free in ulpi_register_interface() error path (Guangshuo Li) [Orabug: 39300745] {CVE-2026-31759}
  - usb: quirks: add DELAY_INIT quirk for another Silicon Motion flash drive (Miao Li)
  - iio: gyro: mpu3050: Fix out-of-sequence free_irq() (Ethan Tidmore)
  - iio: gyro: mpu3050: Move iio_device_register() to correct location (Ethan Tidmore) [Orabug: 39300750] {CVE-2026-31761}
  - iio: gyro: mpu3050: Fix irq resource leak (Ethan Tidmore) [Orabug: 39300755] {CVE-2026-31762}
  - iio: gyro: mpu3050: Fix incorrect free_irq() variable (Ethan Tidmore) [Orabug: 39300760] {CVE-2026-31763}
  - iio: imu: st_lsm6dsx: Set FIFO ODR for accelerometer and gyroscope only (Francesco Lavra)
  - iio: imu: bmi160: Remove potential undefined behavior in bmi160_config_pin() (Josh Poimboeuf)
  - iio: light: vcnl4035: fix scan buffer on big-endian (David Lechner)
  - iio: dac: ad5770r: fix error return in ad5770r_read_raw() (Antoniu Miclaus)
  - iio: accel: adxl380: fix FIFO watermark bit 8 always written as 0 (Antoniu Miclaus)
  - iio: accel: fix ADXL355 temperature signature value (Valek Andrej)
  - iio: adc: aspeed: clear reference voltage bits before configuring vref (Billy Tsai)
  - Input: xpad - add support for Razer Wolverine V3 Pro (Zoltan Illes)
  - Input: xpad - add support for BETOP BTP-KP50B/C controller's wireless mode (Shengyu Qu)
  - Input: bcm5974 - recover from failed mode switch (Liam Mitchell)
  - Input: i8042 - add TUXEDO InfinityBook Max 16 Gen10 AMD to i8042 quirk table (Christoffer Sandberg)
  - Input: synaptics-rmi4 - fix a locking bug in an error path (Bart Van Assche)
  - USB: core: add NO_LPM quirk for Razer Kiyo Pro webcam (Jp Hein)
  - USB: serial: option: add support for Rolling Wireless RW135R-GL (Wanquan Zhong)
  - USB: serial: io_edgeport: add support for Blackbox IC135A (Frej Drejhammar)
  - drm/amdgpu/pm: drop SMU driver if version not matched messages (Alex Deucher)
  - drm/amdgpu: Change AMDGPU_VA_RESERVED_TRAP_SIZE to 64KB (Donet Tom) [Orabug: 39300766] {CVE-2026-31765}
  - drm/i915/dp: Use crtc_state->enhanced_framing properly on ivb/hsw CPU eDP (Ville Syrjälä)
  - drm/i915/dsi: Don't do DSC horizontal timing adjustments in command mode (Ville Syrjälä) [Orabug: 39300769] {CVE-2026-31767}
  - drm/ast: dp501: Fix initialization of SCU2C (Thomas Zimmermann)
  - iio: adc: ti-ads1119: Replace IRQF_ONESHOT with IRQF_NO_THREAD (Felix Gu)
  - iio: adc: ti-ads1119: Reinit completion before wait_for_completion_timeout() (Felix Gu)
  - iio: adc: ti-ads1119: Fix unbalanced pm reference count in ds1119_single_conversion() (Felix Gu)
  - iio: adc: ti-adc161s626: use DMA-safe memory for spi_read() (David Lechner)
  - iio: adc: ti-adc161s626: fix buffer read on big-endian (David Lechner)
  - drm/amdgpu: fix the idr allocation flags (Prike Liang)
  - mips: mm: Allocate tlb_vpn array atomically (Stefan Wiehler)
  - hwmon: (occ) Fix division by zero in occ_show_power_1() (Sanman Pradhan)
  - MIPS: Fix the GCC version check for `__multi3' workaround (Maciej W. Rozycki)
  - MIPS: SiByte: Bring back cache initialisation (Maciej W. Rozycki)
  - ksmbd: fix OOB write in QUERY_INFO for compound requests (Asim Viladi Oglu Manizada)
  - Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (Hkbinbin) [Orabug: 39300788] {CVE-2026-31772}
  - Bluetooth: SMP: force responder MITM requirements before building the pairing response (Oleh Konko) [Orabug: 39343661] {CVE-2026-43334}
  - Bluetooth: SMP: derive legacy responder STK authentication from MITM state (Oleh Konko) [Orabug: 39300792] {CVE-2026-31773}
  - io_uring/net: fix slab-out-of-bounds read in io_bundle_nbufs() (Junxi Qian) [Orabug: 39300796] {CVE-2026-31774}
  - ALSA: ctxfi: Fix missing SPDIFI1 index handling (Takashi Iwai) [Orabug: 39300799] {CVE-2026-31776}
  - ALSA: caiaq: fix stack out-of-bounds read in init_card (Berk Cem Goksel) [Orabug: 39300807] {CVE-2026-31778}
  - USB: serial: option: add MeiG Smart SRM825WN (Ernestas Kulik)
  - wifi: iwlwifi: mvm: fix potential out-of-bounds read in iwl_mvm_nd_match_info_handler() (Alexey Velichayshiy) [Orabug: 39300811] {CVE-2026-31779}
  - wifi: wilc1000: fix u8 overflow in SSID scan buffer size calculation (Yasuaki Torimaru)
  - drm/ioc32: stop speculation on the drm_compat_ioctl path (Greg Kroah-Hartman) [Orabug: 39300819] {CVE-2026-31781}
  - riscv: kgdb: fix several debug register assignment bugs (Paul Walmsley)
  - sched/fair: Fix zero_vruntime tracking fix (Peter Zijlstra) [Orabug: 39489313] {CVE-2026-43323}
  - sched/fair: Use protect_slice() instead of direct comparison (Vincent Guittot)
  - mips: ralink: update CPU clock index (Shiji Yang)
  - hwmon: (occ) Fix missing newline in occ_show_extended() (Sanman Pradhan)
  - hwmon: (tps53679) Fix device ID comparison and printing in tps53676_identify() (Sanman Pradhan)
  - dt-bindings: gpio: fix microchip #interrupt-cells (Jamie Gibbons)
  - hwmon: (ltc4286) Add missing MODULE_IMPORT_NS("PMBUS") (Sanman Pradhan)
  - hwmon: (pxe1610) Check return value of page-select write in probe (Sanman Pradhan)
  - accel/qaic: Handle DBC deactivation if the owner went away (Youssef Samir)
  - iio: imu: bno055: fix BNO055_SCAN_CH_COUNT off by one (David Lechner)
  - Revert "drm: Fix use-after-free on framebuffers and property blobs when calling drm_dev_unplug" (Maarten Lankhorst)
  - bpf: reject direct access to nullable PTR_TO_BUF pointers (Qi Tang) [Orabug: 39343658] {CVE-2026-43333}
  - ipv6: avoid overflows in ip6_datagram_send_ctl() (Eric Dumazet) [Orabug: 39205970] {CVE-2026-31415}
  - net: hsr: fix VLAN add unwind on slave errors (Luka Gejak)
  - net/sched: cls_flow: fix NULL pointer dereference on shared blocks (Xiang Mei) [Orabug: 39206002] {CVE-2026-31422}
  - net/sched: cls_fw: fix NULL pointer dereference on shared blocks (Xiang Mei) [Orabug: 39205998] {CVE-2026-31421}
  - net/x25: Fix overflow when accumulating packets (Martin Schiller)
  - net/x25: Fix potential double free of skb (Martin Schiller)
  - bnxt_en: Restore default stat ctxs for ULP when resource is available (Pavan Chebbi)
  - net/mlx5: Fix switchdev mode rollback in case of failure (Saeed Mahameed) [Orabug: 39300842] {CVE-2026-43012}
  - net/mlx5: Avoid "No data available" when FW version queries fail (Saeed Mahameed)
  - net/mlx5: lag: Check for LAG device before creating debugfs (Shay Drory) [Orabug: 39300845] {CVE-2026-43013}
  - net: macb: properly unregister fixed rate clocks (Fedor Pchelkin) [Orabug: 39300848] {CVE-2026-43014}
  - net: macb: fix clk handling on PCI glue driver removal (Fedor Pchelkin) [Orabug: 39300852] {CVE-2026-43015}
  - net/sched: sch_netem: fix out-of-bounds access in packet corruption (Yucheng Lu) [Orabug: 39263363] {CVE-2026-31675}
  - bpf: sockmap: Fix use-after-free of sk->sk_socket in sk_psock_verdict_data_ready(). (Kuniyuki Iwashima) [Orabug: 39300856] {CVE-2026-43016}
  - Bluetooth: MGMT: validate mesh send advertising payload length (Keenan Dong) [Orabug: 39300859] {CVE-2026-43017}
  - Bluetooth: hci_event: fix potential UAF in hci_le_remote_conn_param_req_evt (Pauli Virtanen) [Orabug: 39300861] {CVE-2026-43018}
  - Bluetooth: hci_conn: fix potential UAF in set_cig_params_sync (Pauli Virtanen) [Orabug: 39300863] {CVE-2026-43019}
  - Bluetooth: MGMT: validate LTK enc_size on load (Keenan Dong) [Orabug: 39300865] {CVE-2026-43020}
  - Bluetooth: SCO: fix race conditions in sco_sock_connect() (Cen Zhang) [Orabug: 39300878] {CVE-2026-43023}
  - Bluetooth: hci_sync: call destroy in hci_cmd_sync_run if immediate (Pauli Virtanen)
  - netfilter: nf_tables: reject immediate NF_QUEUE verdict (Pablo Neira Ayuso) [Orabug: 39300880] {CVE-2026-43024}
  - netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Pablo Neira Ayuso) [Orabug: 39206016] {CVE-2026-31424}
  - netfilter: ctnetlink: ignore explicit helper on new expectations (Pablo Neira Ayuso) [Orabug: 39300884] {CVE-2026-43025}
  - netfilter: nf_conntrack_expect: store netns and zone in expectation (Pablo Neira Ayuso)
  - netfilter: nf_conntrack_expect: use expect->helper (Pablo Neira Ayuso) [Orabug: 39205964] {CVE-2026-31414}
  - netfilter: nf_conntrack_expect: honor expectation helper field (Pablo Neira Ayuso)
  - netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Qi Tang) [Orabug: 39300888] {CVE-2026-43026}
  - netfilter: nf_conntrack_helper: pass helper to expect cleanup (Qi Tang) [Orabug: 39300892] {CVE-2026-43027}
  - netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal)
  - netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [Orabug: 39300896] {CVE-2026-43028}
  - netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [Orabug: 39205975] {CVE-2026-31416}
  - netfilter: flowtable: strictly check for maximum number of actions (Pablo Neira Ayuso) [Orabug: 39343648] {CVE-2026-43329}
  - net: ipv6: flowlabel: defer exclusive option free until RCU teardown (Zhengchuan Liang) [Orabug: 39263383] {CVE-2026-31680}
  - bpf: Fix regsafe() for pointers to packet (Alexei Starovoitov) [Orabug: 39300902] {CVE-2026-43030}
  - net: xilinx: axienet: Correct BD length masks to match AXIDMA IP spec (Suraj Gupta)
  - NFC: pn533: bound the UART receive buffer (Pengpeng Hou)
  - net: sched: cls_api: fix tc_chain_fill_node to initialize tcm_info to zero to prevent an info-leak (Yochai Eisenrich) [Orabug: 39300916] {CVE-2026-43035}
  - net: use skb_header_pointer() for TCPv4 GSO frag_off check (Guoyu Su) [Orabug: 39300920] {CVE-2026-43036}
  - net: introduce mangleid_features (Paolo Abeni)
  - net: airoha: Add missing cleanup bits in airoha_qdma_cleanup_rx_queue() (Lorenzo Bianconi)
  - ipv6: prevent possible UaF in addrconf_permanent_addr() (Paolo Abeni) [Orabug: 39343676] {CVE-2026-43339}
  - ASoC: ep93xx: Fix unchecked clk_prepare_enable() and add rollback on failure (Jihed Chaibi)
  - net: enetc: check whether the RSS algorithm is Toeplitz (Wei Fang)
  - net: sfp: Fix Ubiquiti U-Fiber Instant SFP module on mvneta (Marek Behún)
  - net/sched: sch_hfsc: fix divide-by-zero in rtsc_min() (Xiang Mei) [Orabug: 39206010] {CVE-2026-31423}
  - bridge: br_nd_send: linearize skb before parsing ND options (Ao Zhou) [Orabug: 39263392] {CVE-2026-31682}
  - eth: fbnic: Account for page fragments when updating BDQ tail (Dimitri Daskalakis)
  - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Eric Dumazet) [Orabug: 39300924,39556341] {CVE-2026-43037}
  - ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() (Eric Dumazet) [Orabug: 39300928] {CVE-2026-43038}
  - tg3: Fix race for querying speed/duplex (Thomas Bogendoerfer)
  - net/ipv6: ioam6: prevent schema length wraparound in trace fill (Pengpeng Hou) [Orabug: 39343684] {CVE-2026-43341}
  - net: ipv6: ndisc: fix ndisc_ra_useropt to initialize nduseropt_padX fields to zero to prevent an info-leak (Yochai Eisenrich) [Orabug: 39300933] {CVE-2026-43040}
  - net: qrtr: replace qrtr_tx_flow radix_tree with xarray to fix memory leak (Jiayuan Chen) [Orabug: 39300937] {CVE-2026-43041}
  - net: fec: fix the PTP periodic output sysfs interface (Csaba Buday)
  - crypto: af-alg - fix NULL pointer dereference in scatterwalk (Norbert Szetei) [Orabug: 39300945] {CVE-2026-43043}
  - crypto: caam - fix overflow on long hmac keys (Horia Geantă)
  - crypto: caam - fix DMA corruption on long hmac keys (Horia Geantă)
  - wifi: ath11k: Pass the correct value of each TID during a stop AMPDU session (Reshma Immaculate Rajkumar)
  - dt-bindings: auxdisplay: ht16k33: Use unevaluatedProperties to fix common property warning (Frank Li)
  - spi: geni-qcom: Check DMA interrupts early in ISR (Praveen Talari)
  - btrfs: reject root items with drop_progress and zero drop_level (Zhengyuan Huang) [Orabug: 39300957] {CVE-2026-43046}
  - i2c: tegra: Don't mark devices with pins as IRQ safe (Mikko Perttunen)
  - btrfs: reserve enough transaction items for qgroup ioctls (Filipe Manana) [Orabug: 39343672] {CVE-2026-43338}
  - HID: multitouch: Check to ensure report responses match the request (Lee Jones) [Orabug: 39300961] {CVE-2026-43047}
  - HID: logitech-hidpp: Prevent use-after-free on force feedback initialisation failure (Lee Jones) [Orabug: 39300969] {CVE-2026-43049}
  - objtool: Fix Clang jump table detection (Josh Poimboeuf)
  - tg3: replace placeholder MAC address with device property (Paul Sage)
  - btrfs: don't take device_list_mutex when querying zone info (Johannes Thumshirn)
  - atm: lec: fix use-after-free in sock_def_readable() (Deepanshu Kartikey) [Orabug: 39300973] {CVE-2026-43050}
  - HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (Benoît Sevens) [Orabug: 39300977] {CVE-2026-43051}
  - wifi: mac80211: check tdls flag in ieee80211_tdls_oper (Deepanshu Kartikey) [Orabug: 39300981] {CVE-2026-43052}
  - HID: logitech-hidpp: Enable MX Master 4 over bluetooth (Adrian Freund)
  - arm64/scs: Fix handling of advance_loc4 (Pepper Gray)
  - io_uring/kbuf: propagate BUF_MORE through early buffer commit path (Jens Axboe)
  - io_uring/kbuf: fix missing BUF_MORE for incremental buffers at EOF (Jens Axboe)
  - io_uring/kbuf: use WRITE_ONCE() for userspace-shared buffer ring fields (Joanne Koong)
  - io_uring/kbuf: use READ_ONCE() for userspace-mapped memory (Caleb Sander)
  - io_uring/kbuf: always use READ_ONCE() to read ring provided buffer lengths (Jens Axboe) [Orabug: 38440272] {CVE-2025-39816}
  - io_uring/kbuf: enable bundles for incrementally consumed buffers (Jens Axboe)
  - io_uring/rw: check for NULL io_br_sel when putting a buffer (Jens Axboe)
  - io_uring/net: correct type for min_not_zero() cast (Jens Axboe)
  - io_uring: remove async/poll related provided buffer recycles (Jens Axboe)
  - io_uring/kbuf: switch to storing struct io_buffer_list locally (Jens Axboe)
  - io_uring/net: use struct io_br_sel->val as the send finish value (Jens Axboe)
  - io_uring/net: use struct io_br_sel->val as the recv finish value (Jens Axboe)
  - io_uring/kbuf: use struct io_br_sel for multiple buffers picking (Jens Axboe)
  - io_uring/kbuf: introduce struct io_br_sel (Jens Axboe)
  - io_uring/kbuf: pass in struct io_buffer_list to commit/recycle helpers (Jens Axboe)
  - io_uring/net: clarify io_recv_buf_select() return value (Jens Axboe)
  - io_uring/net: don't use io_net_kbuf_recyle() for non-provided cases (Jens Axboe)
  - io_uring/kbuf: drop 'issue_flags' from io_put_kbuf(s)() arguments (Jens Axboe)
  - io_uring/kbuf: uninline __io_put_kbufs (Pavel Begunkov)
  - io_uring/kbuf: introduce io_kbuf_drop_legacy() (Pavel Begunkov)
  - io_uring/kbuf: open code __io_put_kbuf() (Pavel Begunkov)
  - io_uring/kbuf: remove legacy kbuf caching (Pavel Begunkov)
  - io_uring/kbuf: simplify __io_put_kbuf (Pavel Begunkov)
  - io_uring/kbuf: remove legacy kbuf kmem cache (Pavel Begunkov)
  - io_uring/kbuf: remove legacy kbuf bulk allocation (Pavel Begunkov)
  - LTS version: v6.12.80 (Sherry Yang)
  - idpf: nullify pointers after they are freed (Li Li)
  - net: bcmasp: Fix network filter wake for asp-3.0 (Justin Chen)
  - net: bcmasp: Restore programming of TX map vector register (Florian Fainelli)
  - dmaengine: idxd: Fix leaking event log memory (Vinicius Costa Gomes) [Orabug: 39250715] {CVE-2026-31440}
  - futex: Require sys_futex_requeue() to have identical flags (Peter Zijlstra) [Orabug: 39262271] {CVE-2026-31554}
  - xen/privcmd: unregister xenstore notifier on module exit (Guohan Zhao)
  - btrfs: fix lost error when running device stats on multiple devices fs (Filipe Manana)
  - btrfs: fix leak of kobject name for sub-group space_info (Shin'Ichiro Kawasaki) [Orabug: 39250698] {CVE-2026-31434}
  - btrfs: fix super block offset in error message in btrfs_validate_super() (Mark Harmstone)
  - dmaengine: xilinx_dma: Fix reset related timeout with two-channel AXIDMA (Tomi Valkeinen)
  - dmaengine: xilinx: xilinx_dma: Fix unmasked residue subtraction (Marek Vasut)
  - dmaengine: xilinx: xilinx_dma: Fix residue calculation for cyclic DMA (Marek Vasut)
  - dmaengine: xilinx: xilinx_dma: Fix dma_device directions (Marek Vasut)
  - dmaengine: idxd: fix possible wrong descriptor completion in llist_abort_desc() (Tuo Li) [Orabug: 39250704] {CVE-2026-31436}
  - netfs: Fix kernel BUG in netfs_limit_iter() for ITER_KVEC iterators (Deepanshu Kartikey) [Orabug: 39250710] {CVE-2026-31438}
  - dmaengine: xilinx: xdma: Fix regmap init error handling (Alexander Stein)
  - dmaengine: dw-edma: Fix multiple times setting of the CYCLE_STATE and CYCLE_BIT bits for HDMA. (Luo Haowen)
  - phy: ti: j721e-wiz: Fix device node reference leak in wiz_get_lane_phy_types() (Felix Gu)
  - dmaengine: idxd: Fix freeing the allocated ida too late (Vinicius Costa Gomes)
  - dmaengine: idxd: Fix memory leak when a wq is reset (Vinicius Costa Gomes) [Orabug: 39250719] {CVE-2026-31441}
  - dmaengine: idxd: Fix not releasing workqueue on .release() (Vinicius Costa Gomes) [Orabug: 39323059] {CVE-2026-43064}
  - ASoC: ak4458: Convert to RUNTIME_PM_OPS() & co (Takashi Iwai)
  - idpf: Fix RSS LUT NULL ptr issue after soft reset (Sreedevi Joshi) [Orabug: 38887699] {CVE-2026-22993}
  - idpf: Fix RSS LUT NULL pointer crash on early ethtool operations (Sreedevi Joshi) [Orabug: 38887675] {CVE-2026-22985}
  - idpf: detach and close netdevs while handling a reset (Emil Tantilov) [Orabug: 38887666] {CVE-2026-22981}
  - idpf: check error for register_netdev() on init (Emil Tantilov) [Orabug: 37844511] {CVE-2025-22116}
  - ice: Fix PTP NULL pointer dereference during VSI rebuild (Aaron Ma) [Orabug: 38970514] {CVE-2026-23210}
  - landlock: Fix handling of disconnected directories (Mickaël Salaün) [Orabug: 38798915] {CVE-2025-68736}
  - landlock: Optimize file path walks and prepare for audit support (Mickaël Salaün)
  - net: add proper RCU protection to /proc/net/ptype (Eric Dumazet) [Orabug: 39103146] {CVE-2026-23255}
  - virt: tdx-guest: Fix handling of host controlled 'quote' buffer length (Zubin Mithra) [Orabug: 39250829] {CVE-2026-31470}
  - xfs: avoid dereferencing log items after push callbacks (Yuto Ohnuki) [Orabug: 39250765] {CVE-2026-31453}
  - ovl: make fsync after metadata copy-up opt-in mount option (Fei Lv)
  - ovl: Use str_on_off() helper in ovl_show_options() (Thorsten Blum)
  - rust: pin-init: internal: init: document load-bearing fact of field accessors (Benno Lossin)
  - rust: pin-init: add references to previously initialized fields (Benno Lossin)
  - mm/damon/sysfs: check contexts->nr before accessing contexts_arr[0] (Josh Law) [Orabug: 39250786] {CVE-2026-31458}
  - media: nxp: imx8-isi: Fix streaming cleanup on release (Richard Leitner)
  - LoongArch: vDSO: Emit GNU_EH_FRAME correctly (Xi Ruoyao)
  - drm/xe: always keep track of remap prev/next (Matthew Auld) [Orabug: 39250860] {CVE-2026-31479}
  - tracing: Fix potential deadlock in cpu hotplug with osnoise (Luo Haiyang) [Orabug: 39250862] {CVE-2026-31480}
  - tracing: Switch trace_osnoise.c code over to use guard() and __free() (Steven Rostedt)
  - ksmbd: fix use-after-free and NULL deref in smb_grant_oplock() (Werner Kasselman)
  - powerpc64/bpf: do not increment tailcall count when prog is NULL (Hari Bathini)
  - arm64: dts: imx8mn-tqma8mqnl: fix LDO5 power off (Markus Niebel)
  - ext4: always drain queued discard work in ext4_mb_release() (Theodore Ts'O) [Orabug: 39323070] {CVE-2026-43065}
  - ext4: fix iloc.bh leak in ext4_fc_replay_inode() error paths (Baokun Li) [Orabug: 39323077] {CVE-2026-43066}
  - ext4: handle wraparound when searching for blocks for indirect mapped blocks (Theodore Ts'O) [Orabug: 39489306] {CVE-2026-43067}
  - ext4: fix the might_sleep() warnings in kvfree() (Zqiang)
  - ext4: fix use-after-free in update_super_work when racing with umount (Jiayuan Chen) [Orabug: 39250726] {CVE-2026-31446}
  - ext4: reject mount if bigalloc with s_first_data_block != 0 (Helen Koike) [Orabug: 39250729] {CVE-2026-31447}
  - ext4: avoid allocate block from corrupted group in ext4_mb_find_by_goal() (Ye Bin) [Orabug: 39323085] {CVE-2026-43068}
  - ext4: avoid infinite loops caused by residual data (Edward Adam Davis) [Orabug: 39250734] {CVE-2026-31448}
  - ext4: validate p_idx bounds in ext4_ext_correct_indexes (Tejas Bharambe) [Orabug: 39250743] {CVE-2026-31449}
  - ext4: replace BUG_ON with proper error handling in ext4_read_inline_folio (Yuto Ohnuki) [Orabug: 39250756] {CVE-2026-31451}
  - ext4: make recently_deleted() properly work with lazy itable initialization (Jan Kara)
  - ext4: fix fsync(2) for nojournal mode (Jan Kara)
  - ext4: fix stale xarray tags after writeback (Jan Kara)
  - ext4: convert inline data to extents when truncate exceeds inline size (Deepanshu Kartikey) [Orabug: 39250761] {CVE-2026-31452}
  - ext4: fix journal credit check when setting fscrypt context (Simon Weber)
  - xfs: remove file_path tracepoint data (Darrick J. Wong)
  - xfs: don't irele after failing to iget in xfs_attri_recover_work (Darrick J. Wong) [Orabug: 39323047] {CVE-2026-43063}
  - xfs: fix ri_total validation in xlog_recover_attri_commit_pass2 (Long Li)
  - xfs: scrub: unlock dquot before early return in quota scrub (Hongao) [Orabug: 39262277] {CVE-2026-31556}
  - xfs: save ailp before dropping the AIL lock in push callbacks (Yuto Ohnuki) [Orabug: 39250774] {CVE-2026-31454}
  - xfs: stop reclaim before pushing AIL during unmount (Yuto Ohnuki) [Orabug: 39250777] {CVE-2026-31455}
  - LoongArch: KVM: Make kvm_get_vcpu_by_cpuid() more robust (Huacai Chen)
  - LoongArch: Workaround LS2K/LS7A GPU DMA hang bug (Huacai Chen)
  - LoongArch: Fix missing NULL checks for kstrdup() (Lijun)
  - drm/i915/dp_tunnel: Fix error handling when clearing stream BW in atomic state (Imre Deak)
  - drm/amdgpu: prevent immediate PASID reuse case (Eric Huang) [Orabug: 39250796] {CVE-2026-31462}
  - dmaengine: sh: rz-dmac: Move CHCTRL updates under spinlock (Claudiu Beznea)
  - dmaengine: sh: rz-dmac: Protect the driver specific lists (Claudiu Beznea)
  - dmaengine: fsl-edma: fix channel parameter config for fixed channel requests (Joy Zou)
  - futex: Clear stale exiting pointer in futex_lock_pi() retry path (Davidlohr Bueso) [Orabug: 39262273] {CVE-2026-31555}
  - irqchip/qcom-mpm: Add missing mailbox TX done acknowledgment (Jassi Brar)
  - jbd2: gracefully abort on checkpointing state corruptions (Milos Nikic)
  - net: macb: Use dev_consume_skb_any() to free TX SKBs (Kevin Hao) [Orabug: 39262293] {CVE-2026-31563}
  - net: macb: Protect access to net_device::ip_ptr with RCU lock (Kevin Hao)
  - net: macb: Move devm_{free,request}_irq() out of spin lock area (Kevin Hao)
  - scsi: ses: Handle positive SCSI error from ses_recv_diag() (Greg Kroah-Hartman)
  - scsi: ibmvfc: Fix OOB access in ibmvfc_discover_targets_done() (Tyllis Xu)
  - ovl: fix wrong detection of 32bit inode numbers (Amir Goldstein)
  - phy: qcom: qmp-ufs: Fix SM8650 PCS table for Gear 4 (Abel Vesa)
  - x86/cpu: Remove X86_CR4_FRED from the CR4 pinned bits mask (Borislav Petkov) [Orabug: 39262289] {CVE-2026-31561}
  - x86/cpu: Enable FSGSBASE early in cpu_init_exception_handling() (Nikunj A Dadhania)
  - alarmtimer: Fix argument order in alarm_timer_forward() (Zhan Xusheng)
  - erofs: add GFP_NOIO in the bio completion if needed (Jiucheng Xu) [Orabug: 39250817] {CVE-2026-31467}
  - virtio_net: Fix UAF on dst_ops when IFF_XMIT_DST_RELEASE is cleared and napi_tx is false (Xietangxin) [Orabug: 39250824] {CVE-2026-31469}
  - media: mc, v4l2: serialize REINIT and REQBUFS with req_queue_mutex (Yuchan Nam) [Orabug: 39250836] {CVE-2026-31473}
  - hwmon: (peci/cputemp) Fix off-by-one in cputemp_is_visible() (Sanman Pradhan)
  - hwmon: (peci/cputemp) Fix crit_hyst returning delta instead of absolute temperature (Sanman Pradhan)
  - hwmon: (pmbus/isl68137) Add mutex protection for AVS enable sysfs attributes (Sanman Pradhan)
  - KVM: arm64: Discard PC update state on vcpu reset (Marc Zyngier)
  - platform/x86: ISST: Correct locked bit width (Srinivas Pandruvada)
  - cpufreq: conservative: Reset requested_freq on limits change (Viresh Kumar)
  - can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (Oliver Hartkopp) [Orabug: 39250840] {CVE-2026-31474}
  - can: gw: fix OOB heap access in cgw_csum_crc8_rel() (Ali Norouzi) [Orabug: 39262306] {CVE-2026-31570}
  - ALSA: firewire-lib: fix uninitialized local variable (Alexey Nepomnyashih)
  - ksmbd: do not expire session on binding failure (Hyunwoo Kim)
  - ksmbd: fix memory leaks and NULL deref in smb2_lock() (Werner Kasselman)
  - ksmbd: fix potencial OOB in get_file_all_info() for compound requests (Namjae Jeon)
  - ksmbd: replace hardcoded hdr2_len with offsetof() in smb2_calc_max_out_buf_len() (Namjae Jeon)
  - s390/entry: Scrub r12 register on kernel entry (Vasily Gorbik)
  - s390/barrier: Make array_index_mask_nospec() __always_inline (Vasily Gorbik)
  - s390/syscalls: Add spectre boundary for syscall dispatch table (Greg Kroah-Hartman)
  - spi: spi-fsl-lpspi: fix teardown order issue (UAF) (Marc Kleine-Budde)
  - ASoC: adau1372: Fix clock leak on PLL lock failure (Jihed Chaibi)
  - ASoC: adau1372: Fix unchecked clk_prepare_enable() return value (Jihed Chaibi)
  - sysctl: fix uninitialized variable in proc_do_large_bitmap (Marc Buerg)
  - hwmon: (pmbus) Introduce the concept of "write-only" attributes (Guenter Roeck)
  - hwmon: (pmbus) Mark lowest/average/highest/rated attributes as read-only (Guenter Roeck)
  - hwmon: (pmbus/core) Fix various coding style issues (Guenter Roeck)
  - hwmon: (adm1177) fix sysfs ABI violation and current unit conversion (Sanman Pradhan)
  - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (Srinivasan Shanmugam) [Orabug: 39262299] {CVE-2026-31566}
  - ACPI: EC: clean up handlers on probe failure in acpi_ec_setup() (Weiming Shi) [Orabug: 39206026] {CVE-2026-31426}
  - spi: use generic driver_override infrastructure (Danilo Krummrich) [Orabug: 39250884] {CVE-2026-31487}
  - spi: Group CS related fields in struct spi_device (Andy Shevchenko)
  - drm/amd/display: Do not skip unrelated mode changes in DSC validation (Yussuf Khalil) [Orabug: 39250888] {CVE-2026-31488}
  - spi: meson-spicc: Fix double-put in remove path (Felix Gu) [Orabug: 39250890] {CVE-2026-31489}
  - ASoC: Intel: catpt: Fix the device initialization (Cezary Rojewski)
  - spi: sn-f-ospi: Fix resource leak in f_ospi_probe() (Felix Gu)
  - PM: hibernate: Drain trailing zero pages on userspace restore (Alberto Garcia)
  - drm/i915/gmbus: fix spurious timeout on 512-byte burst reads (Samasth Norway Ananda)
  - x86/efi: efi_unmap_boot_services: fix calculation of ranges_to_free size (Mike Rapoport)
  - scsi: scsi_transport_sas: Fix the maximum channel scanning issue (Yihang Li)
  - RDMA/irdma: Return EINVAL for invalid arp index error (Tatyana Nikolova)
  - RDMA/irdma: Fix deadlock during netdev reset with active connections (Anil Samal) [Orabug: 39262296] {CVE-2026-31565}
  - RDMA/irdma: Remove reset check from irdma_modify_qp_to_err() (Tatyana Nikolova)
  - RDMA/irdma: Clean up unnecessary dereference of event->cm_node (Ivan Barrera)
  - RDMA/irdma: Remove a NOP wait_event() in irdma_modify_qp_roce() (Tatyana Nikolova)
  - RDMA/irdma: Update ibqp state to error if QP is already in error state (Tatyana Nikolova)
  - RDMA/irdma: Initialize free_qp completion before using it (Jacob Moroni) [Orabug: 39250897] {CVE-2026-31492}
  - RDMA/rw: Fall back to direct SGE on MR pool exhaustion (Chuck Lever)
  - ALSA: hda/realtek: Sequence GPIO2 on Star Labs StarFighter (Sean Rhodes)
  - regmap: Synchronize cache for the page selector (Andy Shevchenko)
  - net: macb: use the current queue number for stats (Paolo Valerio) [Orabug: 39250905] {CVE-2026-31494}
  - netfilter: ctnetlink: use netlink policy range checks (David Carlier) [Orabug: 39250911] {CVE-2026-31495}
  - netfilter: nf_conntrack_sip: fix use of uninitialized rtp_addr in process_sdp (Weiming Shi) [Orabug: 39206029] {CVE-2026-31427}
  - netfilter: nf_conntrack_expect: skip expectations in other netns via proc (Pablo Neira Ayuso) [Orabug: 39250915] {CVE-2026-31496}
  - netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Ao Zhou) [Orabug: 39263359] {CVE-2026-31674}
  - netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Weiming Shi) [Orabug: 39206033] {CVE-2026-31428}
  - tls: Purge async_hold in tls_decrypt_async_wait() (Chuck Lever) [Orabug: 39164144] {CVE-2026-23414}
  - Bluetooth: btusb: clamp SCO altsetting table indices (Pengpeng Hou) [Orabug: 39250921] {CVE-2026-31497}
  - Bluetooth: L2CAP: Fix ERTM re-init and zero pdu_len infinite loop (Hyunwoo Kim) [Orabug: 39250925] {CVE-2026-31498}
  - Bluetooth: btintel: serialize btintel_hw_error() with hci_req_sync_lock (Cen Zhang) [Orabug: 39250931] {CVE-2026-31500}
  - Bluetooth: L2CAP: Fix send LE flow credits in ACL link (Zhang Chen)
  - dma-mapping: add missing `inline` for `dma_free_attrs` (Miguel Ojeda)
  - net: lan743x: fix duplex configuration in mac_link_up (Thangaraj Samynathan)
  - net: enetc: fix the output issue of 'ethtool --show-ring' (Wei Fang)
  - udp: Fix wildcard bind conflict check when using hash2 (Martin Kafai Lau) [Orabug: 39250946] {CVE-2026-31503}
  - tcp: optimize inet_use_bhash2_on_bind() (Eric Dumazet)
  - net: fix fanout UAF in packet_release() via NETDEV_UP race (Yochai Eisenrich) [Orabug: 39250951,39556380] {CVE-2026-31504}
  - ipv6: Don't remove permanent routes with exceptions from tb6_gc_hlist. (Kuniyuki Iwashima)
  - ipv6: Remove permanent routes from tb6_gc_hlist when all exceptions expire. (Kuniyuki Iwashima)
  - iavf: fix out-of-bounds writes in iavf_get_ethtool_stats() (Kohei Enju) [Orabug: 39250955] {CVE-2026-31505}
  - ice: use ice_update_eth_stats() for representor stats (Petr Oros)
  - ice: fix inverted ready check for VF representors (Petr Oros)
  - platform/x86: intel-hid: disable wakeup_mode during hibernation (David Mcfarland)
  - platform/olpc: olpc-xo175-ec: Fix overflow error message to print inlen (Alok Tiwari)
  - net: bcmasp: fix double disable of clk (Justin Chen)
  - net: bcmasp: Add support for asp-v3.0 (Justin Chen)
  - net: bcmasp: fix double free of WoL irq (Justin Chen) [Orabug: 39250960] {CVE-2026-31506}
  - net: bcmasp: streamline early exit in probe (Justin Chen)
  - net: bcmasp: Remove support for asp-v2.0 (Justin Chen)
  - net: bcm: asp2: convert to phylib managed EEE (Russell King)
  - net: bcm: asp2: remove tx_lpi_enabled (Russell King)
  - net: bcm: asp2: fix LPI timer handling (Russell King)
  - rtnetlink: count IFLA_INFO_SLAVE_KIND in if_nlmsg_size (Sabrina Dubroca)
  - net/smc: fix double-free of smc_spd_priv when tee() duplicates splice pipe buffer (Qi Tang)
  - openvswitch: validate MPLS set/set_masked payload length (Ao Zhou) [Orabug: 39263380] {CVE-2026-31679}
  - openvswitch: defer tunnel netdev_put to RCU release (Ao Zhou) [Orabug: 39263376] {CVE-2026-31678}
  - net: openvswitch: Avoid releasing netdev before teardown completes (Toke Høiland-Jørgensen) [Orabug: 39251167] {CVE-2026-31508}
  - nfc: nci: fix circular locking dependency in nci_close_device (Jakub Kicinski)
  - ionic: fix persistent MAC address override on PF (Mohammad Heib)
  - pinctrl: mediatek: common: Fix probe failure for devices without EINT (Luca Leonardo Scorcia)
  - Bluetooth: L2CAP: Fix null-ptr-deref on l2cap_sock_ready_cb (Helen Koike) [Orabug: 39250972] {CVE-2026-31510}
  - Bluetooth: hci_ll: Fix firmware leak on error path (Anas Iqbal) [Orabug: 39323106] {CVE-2026-43069}
  - Bluetooth: MGMT: Fix dangling pointer on mgmt_add_adv_patterns_monitor_complete (Luiz Augusto von Dentz) [Orabug: 39250978] {CVE-2026-31511}
  - Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (Hyunwoo Kim) [Orabug: 39171453] {CVE-2026-31408}
  - Bluetooth: L2CAP: Validate PDU length before reading SDU length in l2cap_ecred_data_rcv() (Hyunwoo Kim) [Orabug: 39250981] {CVE-2026-31512}
  - can: statistics: add missing atomic access in hot path (Oliver Hartkopp)
  - dma: swiotlb: add KMSAN annotations to swiotlb_bounce() (Shigeru Yoshida)
  - af_key: validate families in pfkey_send_migrate() (Eric Dumazet) [Orabug: 39250996] {CVE-2026-31515}
  - xfrm: prevent policy_hthresh.work from racing with netns teardown (Minwoo Ra) [Orabug: 39251000] {CVE-2026-31516}
  - xfrm: Fix work re-schedule after cancel in xfrm_nat_keepalive_net_fini() (Hyunwoo Kim) [Orabug: 39171446] {CVE-2026-31406}
  - esp: fix skb leak with espintcp and async crypto (Sabrina Dubroca) [Orabug: 39251008] {CVE-2026-31518}
  - xfrm: Fix the usage of skb->sk (Steffen Klassert)
  - xfrm: call xdo_dev_state_delete during state update (Sabrina Dubroca)
  - xfrm: fix the condition on x->pcpu_num in xfrm_sa_len (Sabrina Dubroca)
  - xfrm: add missing extack for XFRMA_SA_PCPU in add_acquire and allocspi (Sabrina Dubroca)
  - i3c: master: dw-i3c: Fix missing of_node for virtual I2C adapter (Peter Yin)
  - ALSA: hda/realtek: add quirk for ASUS UM6702RC (Zhang Heng)
  - spi: intel-pci: Add support for Nova Lake mobile SPI flash (Alan Borzeszkowski)
  - usb: core: new quirk to handle devices with zero configurations (Jie Deng)
  - drm/amdgpu: fix gpu idle power consumption issue for gfx v12 (Yang Wang)
  - nvmet: move async event work off nvmet-wq (Chaitanya Kulkarni) [Orabug: 39262279] {CVE-2026-31557}
  - objtool: Handle Clang RSP musical chairs (Josh Poimboeuf)
  - ALSA: hda/realtek: Add headset jack quirk for Thinkpad X390 (Uzair Mughal)
  - ALSA: hda/realtek: add HP Laptop 14s-dr5xxx mute LED quirk (Liucheng Lu)
  - btrfs: set BTRFS_ROOT_ORPHAN_CLEANUP during subvol create (Boris Burkov) [Orabug: 39251012] {CVE-2026-31519}
  - sched_ext: Use WRITE_ONCE() for the write side of dsq->seq update (Zhidao Su)
  - HID: apple: avoid memory leak in apple_report_fixup() (Günther Noack) [Orabug: 39251018] {CVE-2026-31520}
  - drm/ttm/tests: Fix build failure on PREEMPT_RT (Maarten Lankhorst)
  - ALSA: hda/senary: Ensure EAPD is enabled during init (Wangdicheng)
  - dma-buf: Include ioctl.h in UAPI header (Isaac J. Manjarres)
  - ASoC: fsl_easrc: Fix event generation in fsl_easrc_iec958_put_bits() (Mark Brown)
  - scsi: devinfo: Add BLIST_SKIP_IO_HINTS for Iomega ZIP (Florian Fuchs)
  - scsi: mpi3mr: Clear reset history on ready and recheck state after timeout (Ranjan Kumar)
  - ASoC: fsl_easrc: Fix event generation in fsl_easrc_iec958_set_reg() (Mark Brown)
  - module: Fix kernel panic when a symbol st_shndx is out of bounds (Ihor Solodrai) [Orabug: 39251025] {CVE-2026-31521}
  - HID: asus: add xg mobile 2023 external hardware support (Denis Benato)
  - HID: mcp2221: cancel last I2C command on read error (Romain Sioen)
  - kbuild: install-extmod-build: Package resolve_btfids if necessary (Thomas Weißschuh)
  - net: usb: r8152: add TRENDnet TUC-ET2G (Valentin Spreckels)
  - HID: apple: Add EPOMAKER TH87 to the non-apple keyboards list (Takashi Iwai)
  - HID: magicmouse: avoid memory leak in magicmouse_report_fixup() (Günther Noack) [Orabug: 39251031] {CVE-2026-31522}
  - HID: magicmouse: fix battery reporting for Apple Magic Trackpad 2 (Julius Lehmann)
  - nvme-pci: ensure we're polling a polled queue (Keith Busch) [Orabug: 39251037] {CVE-2026-31523}
  - platform/x86: touchscreen_dmi: Add quirk for y-inverted Goodix touchscreen on SUPI S10 (Hans de Goede)
  - platform/x86: intel-hid: Enable 5-button array on ThinkPad X1 Fold 16 Gen 1 (Leif Skunberg)
  - nvme-fabrics: use kfree_sensitive() for DHCHAP secrets (Daniel Hodges)
  - nvme-pci: cap queue creation to used queues (Keith Busch)
  - platform/x86: intel-hid: Add Dell 14 Plus 2-in-1 to dmi_vgbs_allow_list (Peter Metz)
  - HID: asus: avoid memory leak in asus_report_fixup() (Günther Noack) [Orabug: 39251044] {CVE-2026-31524}
  - bpf: Fix undefined behavior in interpreter sdiv/smod for INT_MIN (Jenny Guanni Qu) [Orabug: 39251049] {CVE-2026-31525}
  - bpf: Release module BTF IDR before module unload (Kumar Kartikeya Dwivedi)
  - driver core: platform: use generic driver_override infrastructure (Danilo Krummrich) [Orabug: 39251055] {CVE-2026-31527}
  - driver core: generalize driver_override in struct device (Danilo Krummrich)
  - sh: platform_early: remove pdev->driver_override check (Danilo Krummrich)
  - hwmon: axi-fan: don't use driver_override as IRQ name (Danilo Krummrich)
  - cxl/hdm: Avoid incorrect DVSEC fallback when HDM decoders are enabled (Smita Koralahalli)
  - perf: Make sure to use pmu_ctx->pmu for groups (Peter Zijlstra) [Orabug: 39251060] {CVE-2026-31528}
  - bpf: Fix constant blinding for PROBE_MEM32 stores (Sachin Kumar) [Orabug: 39164149] {CVE-2026-23417}
  - cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Alison Schofield) [Orabug: 39251064] {CVE-2026-31530}
  - LTS version: v6.12.79 (Sherry Yang)
  - Revert "LoongArch: Add machine_kexec_mask_interrupts() implementation" (Huacai Chen)
  - LTS version: v6.12.78 (Sherry Yang)
  - xen/privcmd: add boot control for restricted usage in domU (Juergen Gross)
  - xen/privcmd: restrict usage in unprivileged domU (Juergen Gross) [Orabug: 39142871] {CVE-2026-31788}
  - perf/x86/intel: Add missing branch counters constraint apply (Dapeng Mi)
  - hwmon: (max6639) Fix pulses-per-revolution implementation (Guenter Roeck)
  - tools/bootconfig: fix fd leak in load_xbc_file() on fstat failure (Josh Law)
  - lib/bootconfig: check xbc_init_node() return in override path (Josh Law)
  - fs/tests: exec: Remove bad test vector (Kees Cook)
  - drm/i915/gt: Check set_default_submission() before deferencing (Rahul Bukte) [Orabug: 39262234] {CVE-2026-31540}
  - ksmbd: fix use-after-free in durable v2 replay of active file handles (Hyunwoo Kim)
  - ksmbd: fix use-after-free of share_conf in compound request (Hyunwoo Kim)
  - drm/amd: fix dcn 2.01 check (Andy Nguyen)
  - drm/amd/display: Fix DisplayID not-found handling in parse_edid_displayid_vrr() (Srinivasan Shanmugam)
  - mtd: rawnand: brcmnand: skip DMA during panic write (Kamal Dasu)
  - mtd: rawnand: serialize lock/unlock against other NAND operations (Kamal Dasu) [Orabug: 39167445] {CVE-2026-23434}
  - mm/shmem, swap: avoid redundant Xarray lookup during swapin (Kairui Song)
  - mm/shmem, swap: improve cached mTHP handling and fix potential hang (Kairui Song)
  - mm: shmem: avoid unpaired folio_unlock() in shmem_swapin_folio() (Kemeng Shi)
  - mm: shmem: fix potential data corruption during shmem swapin (Baolin Wang)
  - mtd: spi-nor: core: avoid odd length/address writes in 8D-8D-8D mode (Pratyush Yadav)
  - mtd: spi-nor: core: avoid odd length/address reads on 8D-8D-8D mode (Pratyush Yadav)
  - x86/platform/uv: Handle deconfigured sockets (Kyle Meyer) [Orabug: 39262240] {CVE-2026-31542}
  - ring-buffer: Fix to update per-subbuf entries of persistent ring buffer (Masami Hiramatsu)
  - i2c: pxa: defer reset on Armada 3700 when recovery is used (Gabor Juhos)
  - i2c: fsi: Fix a potential leak in fsi_i2c_probe() (Christophe Jaillet)
  - i2c: cp2615: fix serial string NULL-deref at probe (Johan Hovold)
  - USB: serial: f81232: fix incomplete serial port generation (Ji-Ze Hong)
  - drm/i915/psr: Compute PSR entry_setup_frames into intel_crtc_state (Jouni Högander)
  - hwmon: (pmbus/isl68137) Fix unchecked return value and use sysfs_emit() (Sanman Pradhan)
  - hwmon: (pmbus/mp2975) Add error check for pmbus_read_word_data() return value (Sanman Pradhan)
  - icmp: fix NULL pointer dereference in icmp_tag_validation() (Weiming Shi) [Orabug: 39136286] {CVE-2026-23398}
  - net: dsa: bcm_sf2: fix missing clk_disable_unprepare() in error paths (Anas Iqbal)
  - net: mvpp2: guard flow control update with global_tx_fc in buffer switching (Muhammad Hammad Ijaz) [Orabug: 39167454] {CVE-2026-23438}
  - nfnetlink_osf: validate individual option lengths in fingerprints (Weiming Shi) [Orabug: 39136282] {CVE-2026-23397}
  - netfilter: nf_tables: release flowtable after rcu grace period on error (Pablo Neira Ayuso) [Orabug: 39131092] {CVE-2026-23392}
  - netfilter: bpf: defer hook memory release until rcu readers are done (Florian Westphal) [Orabug: 39164139] {CVE-2026-23412}
  - net: bonding: fix NULL deref in bond_debug_rlb_hash_show (Xiang Mei) [Orabug: 39262249] {CVE-2026-31546}
  - udp_tunnel: fix NULL deref caused by udp_sock_create6 when CONFIG_IPV6=n (Xiang Mei) [Orabug: 39167457] {CVE-2026-23439}
  - net/mlx5e: Fix race condition during IPSec ESN update (Jianbo Liu) [Orabug: 39167461] {CVE-2026-23440}
  - net/mlx5e: Prevent concurrent access to IPSec ASO context (Jianbo Liu) [Orabug: 39167464] {CVE-2026-23441}
  - net/mlx5: qos: Restrict RTNL area to avoid a lock cycle (Cosmin Ratiu)
  - net: macb: fix uninitialized rx_fs_lock (Fedor Pchelkin)
  - wifi: mac80211: fix NULL deref in mesh_matches_local() (Xiang Mei) [Orabug: 39136278] {CVE-2026-23396}
  - iavf: fix VLAN filter lost on add/delete race (Petr Oros)
  - igc: fix page fault in XDP TX timestamps handling (Zdenek Bouska) [Orabug: 39167476] {CVE-2026-23445}
  - igc: fix missing update of skb->tail in igc_xmit_frame() (Kohei Enju)
  - net: usb: aqc111: Do not perform PM inside suspend callback (Nikola Z. Ivanov)
  - clsact: Fix use-after-free in init/destroy rollback asymmetry (Daniel Borkmann) [Orabug: 39164141] {CVE-2026-23413}
  - net: usb: cdc_ncm: add ndpoffset to NDP32 nframes bounds check (Tobi Gaertner) [Orabug: 39167482] {CVE-2026-23447}
  - net: usb: cdc_ncm: add ndpoffset to NDP16 nframes bounds check (Tobi Gaertner) [Orabug: 39167487] {CVE-2026-23448}
  - net: airoha: Remove airoha_dev_stop() in airoha_remove() (Lorenzo Bianconi)
  - net: airoha: Read completion queue data in airoha_qdma_tx_napi_poll() (Lorenzo Bianconi)
  - net: airoha: fix PSE memory configuration in airoha_fe_pse_ports_init() (Lorenzo Bianconi)
  - net: airoha: read default PSE reserved pages value before updating (Lorenzo Bianconi)
  - net/sched: teql: Fix double-free in teql_master_xmit (Jamal Hadi Salim) [Orabug: 39167491] {CVE-2026-23449}
  - net/smc: fix NULL dereference and UAF in smc_tcp_syn_recv_sock() (Jiayuan Chen)
  - PM: runtime: Fix a race condition related to device removal (Bart Van Assche) [Orabug: 39167500] {CVE-2026-23452}
  - sched: idle: Consolidate the handling of two special cases (Rafael J. Wysocki)
  - net: mana: fix use-after-free in mana_hwc_destroy_channel() by reordering teardown (Dipayaan Roy) [Orabug: 39167505] {CVE-2026-23454}
  - net: bcmgenet: increase WoL poll timeout (Justin Chen)
  - netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (Jenny Guanni Qu) [Orabug: 39167509] {CVE-2026-23455}
  - netfilter: xt_time: use unsigned int for monthday bit shift (Jenny Guanni Qu)
  - netfilter: xt_CT: drop pending enqueued packets on template removal (Pablo Neira Ayuso) [Orabug: 39131088] {CVE-2026-23391}
  - netfilter: nft_ct: drop pending enqueued packets on removal (Pablo Neira Ayuso) [Orabug: 39322991] {CVE-2026-43060}
  - nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Pablo Neira Ayuso) [Orabug: 39139839] {CVE-2026-23399}
  - netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Jenny Guanni Qu) [Orabug: 39167513] {CVE-2026-23456}
  - netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Lukas Johannes Möller) [Orabug: 39167517] {CVE-2026-23457}
  - netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Hyunwoo Kim) [Orabug: 39167521] {CVE-2026-23458}
  - netfilter: ctnetlink: remove refcounting in expectation dumpers (Florian Westphal) [Orabug: 38423445] {CVE-2025-39764}
  - mpls: add missing unregister_netdevice_notifier to mpls_init (Sabrina Dubroca)
  - net/rose: fix NULL pointer dereference in rose_transmit_link on reconnect (Jiayuan Chen)
  - bridge: cfm: Fix race condition in peer_mep deletion (Hyunwoo Kim)
  - Bluetooth: qca: fix ROM version reading on WCN3998 chips (Dmitry Baryshkov)
  - Bluetooth: L2CAP: Fix use-after-free in l2cap_unregister_user (Shaurya Rane) [Orabug: 39167531] {CVE-2026-23461}
  - Bluetooth: HIDP: Fix possible UAF (Luiz Augusto von Dentz) [Orabug: 39167533] {CVE-2026-23462}
  - Bluetooth: MGMT: Fix list corruption and UAF in command complete handlers (Wang Tao) [Orabug: 39322983] {CVE-2026-43059}
  - Bluetooth: hci_sync: Fix hci_le_create_conn_sync (Michael Grzeschik)
  - Bluetooth: ISO: Fix defer tests being unstable (Luiz Augusto von Dentz)
  - Bluetooth: SMP: make SM/PER/KDU/BI-04-C happy (Christian Eggers)
  - Bluetooth: LE L2CAP: Disconnect if sum of payload sizes exceed SDU (Christian Eggers)
  - Bluetooth: LE L2CAP: Disconnect if received packet's SDU exceeds IMTU (Christian Eggers)
  - firmware: arm_scpi: Fix device_node reference leak in probe path (Felix Gu)
  - firmware: arm_ffa: Remove vm_id argument in ffa_rxtx_unmap() (Levi Yun)
  - arm64: dts: renesas: r9a09g057: Remove wdt{0,2,3} nodes (Fabrizio Castro)
  - arm64: dts: renesas: r9a09g057: Add RTC node (Ovidiu Panait)
  - wifi: cfg80211: cancel pmsr_free_wk in cfg80211_pmsr_wdev_down (Peddolla Harshavardhan Reddy) [Orabug: 39262255] {CVE-2026-31548}
  - wifi: mac80211: Fix static_branch_dec() underflow for aql_disable. (Kuniyuki Iwashima) [Orabug: 39262266] {CVE-2026-31551}
  - soc: fsl: cpm1: qmc: Fix error check for devm_ioremap_resource() in qmc_qe_init_resources() (Chen Ni)
  - soc: fsl: qbman: fix race condition in qman_destroy_fq (Richard Genoud)
  - cache: ax45mp: Fix device node reference leak in ax45mp_cache_init() (Felix Gu)
  - cache: starfive: fix device node leak in starlink_cache_init() (Felix Gu)
  - soc: microchip: mpfs: Fix memory leak in mpfs_sys_controller_probe() (Zilin Guan)
  - btrfs: tree-checker: fix misleading root drop_level error message (Zhengyuan Huang)
  - btrfs: log new dentries when logging parent dir of a conflicting inode (Filipe Manana) [Orabug: 39167544] {CVE-2026-23465}
  - ata: libata-scsi: report correct sense field pointer in ata_scsiop_maint_in() (Damien Le Moal)
  - ata: libata-scsi: Return residual for emulated SCSI commands (Damien Le Moal)
  - Bluetooth: L2CAP: Fix accepting multiple L2CAP_ECRED_CONN_REQ (Luiz Augusto von Dentz) [Orabug: 39131104] {CVE-2026-23395}
  - drm/xe: Open-code GGTT MMIO access protection (Matthew Brost)
  - drm/xe/oa: Allow reading after disabling OA stream (Ashutosh Dixit)
  - drm/amdgpu: apply state adjust rules to some additional HAINAN vairants (Alex Deucher)
  - drm/radeon: apply state adjust rules to some additional HAINAN vairants (Alex Deucher)
  - drm/imagination: Fix deadlock in soft reset sequence (Alessio Belle)
  - drm/amdgpu/mmhub4.1.0: add bounds checking for cid (Alex Deucher)
  - drm/amdgpu/mmhub3.0: add bounds checking for cid (Alex Deucher)
  - drm/amdgpu/mmhub3.0.2: add bounds checking for cid (Alex Deucher)
  - drm/amdgpu/mmhub3.0.1: add bounds checking for cid (Alex Deucher)
  - drm/amdgpu/mmhub2.3: add bounds checking for cid (Alex Deucher)
  - drm/amdgpu/mmhub2.0: add bounds checking for cid (Alex Deucher)
  - drm/amdgpu/gmc9.0: add bounds checking for cid (Alex Deucher)
  - drm/amd/display: Wrap dcn32_override_min_req_memclk() in DC_FP_{START, END} (Xi Ruoyao)
  - drm: Fix use-after-free on framebuffers and property blobs when calling drm_dev_unplug (Maarten Lankhorst)
  - io_uring/kbuf: propagate BUF_MORE through early buffer commit path (Jens Axboe)
  - serial: uartlite: fix PM runtime usage count underflow on probe (Maciej Andrzejewski Iceye)
  - serial: 8250: Add late synchronize_irq() to shutdown to handle DW UART BUSY (Ilpo Järvinen)
  - serial: 8250: Fix TX deadlock when using DMA (Raul E Rangel) [Orabug: 39323000] {CVE-2026-43061}
  - serial: 8250_pci: add support for the AX99100 (Martin Roukala)
  - iommu/vt-d: Fix intel iommu iotlb sync hardlockup and retry (Guanghui Feng)
  - mtd: Avoid boot crash in RedBoot partition table parser (Finn Thain) [Orabug: 39167570] {CVE-2026-23474}
  - mtd: rawnand: cadence: Fix error check for dma_alloc_coherent() in cadence_nand_init() (Chen Ni)
  - mtd: rawnand: pl353: make sure optimal timings are applied (Olivier Sobrie)
  - spi: fix statistics allocation (Johan Hovold) [Orabug: 39167574] {CVE-2026-23475}
  - spi: fix use-after-free on controller registration failure (Johan Hovold) [Orabug: 39167576] {CVE-2026-31389}
  - pmdomain: bcm: bcm2835-power: Increase ASB control timeout (Maíra Canal) [Orabug: 39262262] {CVE-2026-31550}
  - mmc: sdhci: fix timing selection for 1-bit bus width (Luke Wang)
  - mmc: sdhci-pci-gli: fix GL9750 DMA write corruption (Matthew Schwartz)
  - ata: libata-core: disable LPM on ADATA SU680 SSD (Damien Le Moal)
  - batman-adv: avoid OGM aggregation when skb tailroom is insufficient (Ao Zhou) [Orabug: 39263396] {CVE-2026-31683}
  - btrfs: fix transaction abort when snapshotting received subvolumes (Filipe Manana) [Orabug: 39343743] {CVE-2026-43361}
  - kprobes: Remove unneeded warnings from __arm_kprobe_ftrace() (Masami Hiramatsu)
  - kprobes: Remove unneeded goto (Masami Hiramatsu)
  - powerpc64/bpf: fix kfunc call support (Hari Bathini)
  - powerpc64/bpf: Fold bpf_jit_emit_func_call_hlp() into bpf_jit_emit_func_call_rel() (Naveen N Rao)
  - s390/zcrypt: Enable AUTOSEL_DOM for CCA serialnr sysfs attribute (Harald Freudenberger)
  - drm/i915/psr: Write DSC parameters on Selective Update in ET mode (Jouni Högander)
  - drm/i915/dsc: Add helper for writing DSC Selective Update ET parameters (Jouni Högander)
  - drm/i915/dsc: Add Selective Update register definitions (Jouni Högander)
  - ksmbd: use volume UUID in FS_OBJECT_ID_INFORMATION (Namjae Jeon)
  - ksmbd: unset conn->binding on failed binding request (Namjae Jeon)
  - smb: client: fix krb5 mount with username option (Paulo Alcantara) [Orabug: 39167586] {CVE-2026-31392}
  - Bluetooth: L2CAP: Validate L2CAP_INFO_RSP payload length before access (Lukas Johannes Möller) [Orabug: 39167590] {CVE-2026-31393}
  - Bluetooth: L2CAP: Fix type confusion in l2cap_ecred_reconf_rsp() (Lukas Johannes Möller) [Orabug: 39323031] {CVE-2026-43062}
  - mac80211: fix crash in ieee80211_chan_bw_change for AP_VLAN stations (Felix Fietkau) [Orabug: 39167595] {CVE-2026-31394}
  - parisc: Flush correct cache in cacheflush() syscall (Helge Deller)
  - net: macb: fix use-after-free access to PTP clock (Fedor Pchelkin) [Orabug: 39167599] {CVE-2026-31396}
  - NFC: nxp-nci: allow GPIOs to sleep (Ian Ray)
  - LoongArch: Give more information if kmem access failed (Tiezhu Yang)
  - nvdimm/bus: Fix potential use after free in asynchronous initialization (Ira Weiny) [Orabug: 39167605] {CVE-2026-31399}
  - sunrpc: fix cache_request leak in cache_release (Jeff Layton) [Orabug: 39167609] {CVE-2026-31400}
  - HID: bpf: prevent buffer overflow in hid_hw_request (Benjamin Tissoires)
  - selftests/hid: fix compilation when bpf_wq and hid_device are not exported (Benjamin Tissoires)
  - NFSD: Hold net reference for the lifetime of /proc/fs/nfs/exports fd (Chuck Lever) [Orabug: 39167619] {CVE-2026-31403}
  - drm/amdgpu: Add basic validation for RAS header (Lijo Lazar) [Orabug: 38254044] {CVE-2025-38426}
  - drm/amd/pm: Use pm_display_cfg in legacy DPM (v2) (Timur Kristóf)
  - drm/amd/display: Add pixel_clock to amd_pp_display_configuration (Timur Kristóf)
  - drm/i915/psr: Repeat Selective Update area alignment (Jouni Högander)
  - drm/i915/alpm: ALPM disable fixes (Jouni Högander)
  - s390/xor: Fix xor_xc_2() inline assembly constraints (Heiko Carstens)
  - s390/stackleak: Fix __stackleak_poison() inline assembly constraint (Heiko Carstens)
  - sched/fair: Fix zero_vruntime tracking (Peter Zijlstra)
  - sched_ext: Remove redundant css_put() in scx_cgroup_init() (Cheng-Yang Chou) [Orabug: 39343945] {CVE-2026-43438}
  - mm: thp: deny THP for files on anonymous inodes (Deepanshu Kartikey) [Orabug: 39131037] {CVE-2026-23375}
  - erofs: fix inline data read failure for ztailpacking pclusters (Gao Xiang) [Orabug: 39451908] {CVE-2026-45943}
  - xfs: get rid of the xchk_xfile_*_descr calls (Darrick J. Wong) [Orabug: 39103135] {CVE-2026-23252}
  - binfmt_misc: restore write access before closing files opened by open_exec() (Zilin Guan) [Orabug: 38773484] {CVE-2025-68239}
  - net: dsa: properly keep track of conduit reference (Vladimir Oltean) [Orabug: 38887610] {CVE-2025-71152}
  - dmaengine: mmp_pdma: Fix race condition in mmp_pdma_residue() (Guodong Xu)
  - blk-throttle: fix access race during throttle policy activation (Han Guangjiang) [Orabug: 38649132] {CVE-2025-40147}
  - f2fs: fix to avoid migrating empty section (Chao Yu)
  - f2fs: compress: fix UAF of f2fs_inode_info in f2fs_free_dic (Zhiguo Niu)
  - f2fs: compress: change the first parameter of page_array_{alloc,free} to sbi (Zhiguo Niu)
  - net: stmmac: remove support for lpi_intr_o (Russell King)
  - mptcp: pm: in-kernel: always set ID as avail when rm endp (Matthieu Baerts) [Orabug: 39331851] {CVE-2026-43252}
  - platform/x86/amd/pmc: Add support for Van Gogh SoC (Antheas Kapenekakis) [Orabug: 38792613] {CVE-2025-68334}
  - x86/uprobes: Fix XOL allocation failure for 32-bit tasks (Oleg Nesterov)
  - io_uring/uring_cmd: fix too strict requirement on ioctl (Asbjoern Sloth Toennesen)
  - tracing: Add recursion protection in kernel stack trace recording (Steven Rostedt) [Orabug: 38970274] {CVE-2026-23138}
  - ice: fix devlink reload call trace (Paul Greenwalt) [Orabug: 38931107] {CVE-2026-23104}
  - btrfs: do not strictly require dirty metadata threshold for metadata writepages (Qu Wenruo) [Orabug: 38970327] {CVE-2026-23157}
  - rxrpc: Fix recvmsg() unconditional requeue (David Howells)
  - dm-verity: disable recursive forward error correction (Mikulas Patocka) [Orabug: 38887636] {CVE-2025-71161}
  - drm/xe/sync: Cleanup partially initialized sync on parse failure (Shuicheng Lin) [Orabug: 39343830] {CVE-2026-43395}
  - xfs: fix integer overflow in bmap intent sort comparator (Long Li)
  - crypto: atmel-sha204a - Fix OOM ->tfm_count leak (Thorsten Blum)
  - cifs: open files should not hold ref on superblock (Shyam Prasad N)
  - drm/bridge: ti-sn65dsi83: halve horizontal syncs for dual LVDS output (Luca Ceresoli)
  - ksmbd: Don't log keys in SMB3 signing and encryption key generation (Thorsten Blum)
  - KVM: x86: Introduce KVM_X86_QUIRK_VMCS12_ALLOW_FREEZE_IN_SMM (Jim Mattson)
  - KVM: nVMX: Add consistency checks for CR0.WP and CR4.CET (Chao Gao)
  - fgraph: Fix thresh_return clear per-task notrace (Shengming Hu)
  - iomap: reject delalloc mappings during writeback (Darrick J. Wong)
  - sched_ext: Fix starvation of scx_enable() under fair-class saturation (Tejun Heo) [Orabug: 39343824] {CVE-2026-43392}
  - sched_ext: Disable preemption between scx_claim_exit() and kicking helper work (Tejun Heo) [Orabug: 39386852] {CVE-2026-43482}
  - nsfs: tighten permission checks for ns iteration ioctls (Christian Brauner) [Orabug: 39343840] {CVE-2026-43403}
  - mm/kfence: fix KASAN hardware tag faults during late enablement (Alexander Potapenko)
  - mm/page_alloc: forward the gfp flags from alloc_contig_range() to post_alloc_hook() (David Hildenbrand)
  - mm/page_alloc: sort out the alloc_contig_range() gfp flags mess (David Hildenbrand)
  - mm/page_alloc: move set_page_refcounted() to callers of post_alloc_hook() (Matthew Wilcox)
  - mmc: dw_mmc-rockchip: Fix runtime PM support for internal phase support (Shawn Lin)
  - mmc: dw_mmc-rockchip: Add memory clock auto-gating support (Shawn Lin)
  - mmc: dw_mmc-rockchip: use modern PM macros (Jisheng Zhang)
  - KVM: SVM: Set/clear CR8 write interception when AVIC is (de)activated (Sean Christopherson) [Orabug: 39386854] {CVE-2026-43483}
  - KVM: SVM: Add a helper to look up the max physical ID for AVIC (Naveen N Rao)
  - KVM: SVM: Limit AVIC physical max index based on configured max_vcpu_ids (Naveen N Rao)
  - usb: gadget: f_tcm: Fix NULL pointer dereferences in nexus handling (Jiasheng Jiang)
  - usb: gadget: f_ncm: Fix net_device lifecycle with device_move (Kuen-Han Tsai)
  - cleanup: Provide retain_and_null_ptr() (Thomas Gleixner)
  - can: gs_usb: gs_can_open(): always configure bitrates before starting device (Marc Kleine-Budde)
  - xfs: Fix error pointer dereference (Ethan Tidmore)
  - net/sched: act_gate: snapshot parameters with RCU on replace (Paul Moses) [Orabug: 39103117] {CVE-2026-23245}
  - selftests: mptcp: join: check RM_ADDR not sent over same subflow (Matthieu Baerts)
  - selftests: mptcp: add a check for 'add_addr_accepted' (Gang Yan)
  - drm/amd/display: Use GFP_ATOMIC in dc_create_stream_for_sink (Natalie Vock)
  - mptcp: pm: avoid sending RM_ADDR over same subflow (Matthieu Baerts)
  - mptcp: pm: in-kernel: always mark signal+subflow endp as used (Matthieu Baerts) [Orabug: 39130868] {CVE-2026-23321}
  - perf/x86/intel/uncore: Add per-scheduler IMC CAS count events (Zide Chen)
  - perf/x86/intel/uncore: Support more units on Granite Rapids (Kan Liang)
  - wifi: libertas: fix use-after-free in lbs_free_adapter() (Daniel Hodges) [Orabug: 39130708] {CVE-2026-23281}
  - platform/x86: hp-bioscfg: Support allocations of larger data (Mario Limonciello)
  - x86/sev: Allow IBPB-on-Entry feature for SNP guests (Kim Phillips)
  - net: phy: register phy led_triggers during probe to avoid AB-BA deadlock (Andrew Lunn) [Orabug: 39131008] {CVE-2026-23368}
  - gve: fix incorrect buffer cleanup in gve_tx_clean_pending_packets for QPL (Ankit Garg) [Orabug: 39131072] {CVE-2026-23386}
  - spi: cadence-quadspi: Implement refcount to handle unbind during busy (Khairul Anuar Romli)
  - ksmbd: call ksmbd_vfs_kern_path_end_removing() on some error paths (Fedor Pchelkin)
  - smb: client: Compare MACs in constant time (Eric Biggers)
  - ksmbd: Compare MACs in constant time (Eric Biggers)
  - net/tcp-md5: Fix MAC comparison to be constant-time (Eric Biggers) [Orabug: 39343805] {CVE-2026-43383}
  - drm/bridge: ti-sn65dsi86: Add support for DisplayPort mode with HPD (John Ripple)
  - i3c: mipi-i3c-hci: Add missing TID field to no-op command descriptor (Adrian Hunter)
  - i3c: mipi-i3c-hci: Restart DMA ring correctly after dequeue abort (Adrian Hunter)
  - i3c: mipi-i3c-hci: Use ETIMEDOUT instead of ETIME for timeout errors (Adrian Hunter)
  - iio: proximity: hx9023s: Protect against division by zero in set_samp_freq (Yasin Lee)
  - iio: imu: inv_icm42600: fix odr switch when turning buffer off (Jean-Baptiste Maneyrol)
  - iio: imu: inv_icm42600: fix odr switch to the same value (Jean-Baptiste Maneyrol)
  - iio: gyro: mpu3050-i2c: fix pm_runtime error handling (Antoniu Miclaus)
  - iio: gyro: mpu3050-core: fix pm_runtime error handling (Antoniu Miclaus) [Orabug: 39343731] {CVE-2026-43357}
  - iio: buffer: Fix wait_queue not being removed (Nuno Sa)
  - iio: chemical: bme680: Fix measurement wait duration calculation (Chris Spencer)
  - iio: potentiometer: mcp4131: fix double application of wiper shift (Lukas Schmid)
  - iio: chemical: sps30_i2c: fix buffer size in sps30_i2c_read_meas() (Antoniu Miclaus)
  - iio: chemical: sps30_serial: fix buffer size in sps30_serial_read_meas() (Antoniu Miclaus)
  - iio: frequency: adf4377: Fix duplicated soft reset mask (Seungju Cheon)
  - iio: dac: ds4424: reject -128 RAW value (Oleksij Rempel)
  - btrfs: abort transaction on failure to update root in the received subvol ioctl (Filipe Manana)
  - btrfs: fix transaction abort on set received ioctl due to item overflow (Filipe Manana) [Orabug: 39343736] {CVE-2026-43359}
  - btrfs: fix transaction abort on file creation due to name hash collision (Filipe Manana) [Orabug: 39343740] {CVE-2026-43360}
  - smb: client: fix iface port assignment in parse_server_interfaces (Henrique Carvalho)
  - smb: client: fix in-place encryption corruption in SMB2_write() (Bharath Sm) [Orabug: 39343749] {CVE-2026-43362}
  - smb: client: fix atomic open with O_DIRECT & O_SYNC (Paulo Alcantara)
  - lib/bootconfig: check bounds before writing in __xbc_open_brace() (Josh Law)
  - lib/bootconfig: fix snprintf truncation check in xbc_node_compose_key_after() (Josh Law)
  - x86/apic: Disable x2apic on resume if the kernel expects so (Shashank Balaji) [Orabug: 39343755] {CVE-2026-43363}
  - lib/bootconfig: fix off-by-one in xbc_verify_tree() unclosed brace error (Josh Law)
  - s390/dasd: Copy detected format information to secondary device (Stefan Haberland)
  - s390/dasd: Move quiesce state with pprc swap (Stefan Haberland)
  - xfs: ensure dquot item is deleted from AIL only after log shutdown (Long Li)
  - xfs: fix undersized l_iclog_roundoff values (Darrick J. Wong) [Orabug: 39343760] {CVE-2026-43365}
  - xfs: fix returned valued from xfs_defer_can_append (Carlos Maiolino)
  - cifs: make default value of retrans as zero (Shyam Prasad N)
  - tracing: Fix trace_buf_size= cmdline parameter with sizes >= 2G (Calvin Owens)
  - tracing: Fix enabling multiple events on the kernel command line and bootconfig (Andrei-Alexandru Tachici)
  - drm/msm: Fix dma_free_attrs() buffer size (Thomas Fourier)
  - drm/i915: Fix potential overflow of shmem scatterlist length (Janusz Krzysztofik) [Orabug: 39343766] {CVE-2026-43368}
  - drm/bridge: ti-sn65dsi83: fix CHA_DSI_CLK_RANGE rounding (Luca Ceresoli)
  - drm/amd: Set num IP blocks to 0 if discovery fails (Mario Limonciello)
  - drm/amdgpu: Fix use-after-free race in VM acquire (Alysa Liu) [Orabug: 39343769] {CVE-2026-43370}
  - drm/amd/pm: remove invalid gpu_metrics.energy_accumulator on smu v13.0.x (Yang Wang)
  - net: dsa: microchip: Fix error path in PTP IRQ setup (Bastien Curutchet)
  - net: ethernet: arc: emac: quiesce interrupts before requesting IRQ (Fan Wu)
  - net: ncsi: fix skb leak in error paths (Jian Zhang)
  - net: nexthop: fix percpu use-after-free in remove_nh_grp_entry (Mehul Rao) [Orabug: 39343780] {CVE-2026-43374}
  - ksmbd: fix use-after-free by using call_rcu() for oplock_info (Namjae Jeon)
  - smb: server: fix use-after-free in smb2_open() (Marios Makassikis)
  - ksmbd: fix use-after-free in smb_lazy_parent_lease_break_close() (Namjae Jeon)
  - drm/amd/display: Fallback to boot snapshot for dispclk (Dillon Varone)
  - ata: libata-core: Disable LPM on ST1000DM010-2EP102 (Maximilian Pezzullo) [Orabug: 39386866] {CVE-2026-43487}
  - pmdomain: bcm: bcm2835-power: Fix broken reset status read (Maíra Canal)
  - parisc: Check kernel mapping earlier at bootup (Helge Deller)
  - parisc: Fix initial page table creation for boot (Helge Deller)
  - hwmon: (pmbus/q54sj108a2) fix stack overflow in debugfs read (Sanman Pradhan)
  - arm64: mm: Add PTE_DIRTY back to PAGE_KERNEL* to fix kexec/hibernation (Catalin Marinas)
  - nouveau/dpcd: return EBUSY for aux xfer if the device is asleep (Dave Airlie) [Orabug: 39343796] {CVE-2026-43381}
  - parisc: Increase initial mapping to 64 MB with KALLSYMS (Helge Deller)
  - batman-adv: Avoid double-rtnl_lock ELP metric worker (Sven Eckelmann) [Orabug: 39343801] {CVE-2026-43382}
  - net/tcp-ao: Fix MAC comparison to be constant-time (Eric Biggers)
  - tracing: Fix syscall events activation by ensuring refcount hits zero (Huiwen He)
  - ice: fix retry for AQ command 0x06EE (Jakub Staniszewski)
  - net: mana: Ring doorbell at 4 CQ wraparounds (Long Li)
  - media: dvb-net: fix OOB access in ULE extension header tables (Ariel Silver) [Orabug: 39171441] {CVE-2026-31405}
  - staging: rtl8723bs: fix potential out-of-bounds read in rtw_restruct_wmm_ie (Luka Gejak)
  - staging: rtl8723bs: properly validate the data in rtw_get_ie_ex() (Greg Kroah-Hartman)
  - ixgbevf: fix link setup issue (Jedrzej Jagielski)
  - ice: reintroduce retry mechanism for indirect AQ (Jakub Staniszewski)
  - btrfs: fix chunk map leak in btrfs_map_block() after btrfs_chunk_map_num_copies() (Mark Harmstone) [Orabug: 39343826] {CVE-2026-43393}
  - irqchip/gic-v3-its: Limit number of per-device MSIs to the range the ITS supports (Marc Zyngier)
  - device property: Allow secondary lookup in fwnode_get_next_child_node() (Andy Shevchenko)
  - nfsd: Fix cred ref leak in nfsd_nl_listener_set_doit(). (Kuniyuki Iwashima) [Orabug: 39343828] {CVE-2026-43394}
  - s390/pfault: Fix virtual vs physical address confusion (Alexander Gordeev)
  - drm/bridge: ti-sn65dsi86: Enable HPD polling if IRQ is not used (Franz Schnyder)
  - drm/bridge: samsung-dsim: Fix memory leak in error path (Osama Abdelkader) [Orabug: 39343833] {CVE-2026-43397}
  - drm/amd: Disable MES LR compute W/A (Mario Limonciello)
  - Revert "tcpm: allow looking for role_sw device in the main node" (Xu Yang)
  - Fix CC_HAS_ASM_GOTO_OUTPUT on non-x86 architectures (Linus Torvalds)
  - kbuild: Disable CC_HAS_ASM_GOTO_OUTPUT on clang < 17 (Thomas Gleixner)
  - scsi: hisi_sas: Fix NULL pointer exception during user_scan() (Xingui Yang) [Orabug: 39343866] {CVE-2026-43413}
  - scsi: hisi_sas: Use macro instead of magic number (Yihang Li)
  - scsi: hisi_sas: Add time interval between two H2D FIS following soft reset spec (Xingui Yang)
  - scsi: ufs: core: Fix SError in ufshcd_rtc_work() during UFS suspend (Wangshuaiwei) [Orabug: 39343873] {CVE-2026-43415}
  - i3c: dw-i3c-master: Set SIR_REJECT in DAT on device attach and reattach (Adrian Ng Ho Yin)
  - time/jiffies: Mark jiffies_64_to_clock_t() notrace (Steven Rostedt)
  - ceph: fix memory leaks in ceph_mdsc_build_path() (Max Kellermann) [Orabug: 39343881] {CVE-2026-43419}
  - ceph: fix i_nlink underrun during async unlink (Max Kellermann) [Orabug: 39343883] {CVE-2026-43420}
  - libceph: admit message frames only in CEPH_CON_S_OPEN state (Ilya Dryomov)
  - libceph: Use u32 for non-negative values in ceph_monmap_decode() (Raphael Zimmer) [Orabug: 39343843] {CVE-2026-43405}
  - libceph: prevent potential out-of-bounds reads in process_message_header() (Ilya Dryomov) [Orabug: 39343846] {CVE-2026-43406}
  - libceph: reject preamble if control segment is empty (Ilya Dryomov)
  - libceph: Fix potential out-of-bounds access in ceph_handle_auth_reply() (Raphael Zimmer) [Orabug: 39343849] {CVE-2026-43407}
  - ceph: add a bunch of missing ceph_path_info initializers (Max Kellermann) [Orabug: 39343853] {CVE-2026-43408}
  - kprobes: avoid crash when rmmod/insmod after ftrace killed (Masami Hiramatsu) [Orabug: 39343855] {CVE-2026-43409}
  - tipc: fix divide-by-zero in tipc_sk_filter_connect() (Mehul Rao) [Orabug: 39343860] {CVE-2026-43411}
  - ASoC: qcom: qdsp6: Fix q6apm remove ordering during ADSP stop and start (Ravi Hothi)
  - mmc: core: Avoid bitfield RMW for claim/retune flags (Penghe Geng) [Orabug: 39386858] {CVE-2026-43484}
  - mm/kfence: disable KFENCE upon KASAN HW tags enablement (Alexander Potapenko)
  - mmc: mmci: Fix device_node reference leak in of_get_dml_pipe_index() (Felix Gu)
  - mm/tracing: rss_stat: ensure curr is false from kthread context (Kalesh Singh)
  - rust: kbuild: allow `unused_features` (Miguel Ojeda)
  - usb: image: mdc800: kill download URB on timeout (Ziyi Guo) [Orabug: 39343896] {CVE-2026-43425}
  - usb: mdc800: handle signal and read racing (Oliver Neukum)
  - usb: renesas_usbhs: fix use-after-free in ISR during device removal (Fan Wu)
  - usb: class: cdc-wdm: fix reordering issue in read code path (Oliver Neukum) [Orabug: 39343905] {CVE-2026-43427}
  - USB: core: Limit the length of unkillable synchronous timeouts (Alan Stern) [Orabug: 39343910] {CVE-2026-43428}
  - USB: usbtmc: Use usb_bulk_msg_killable() with user-specified timeouts (Alan Stern) [Orabug: 39343916] {CVE-2026-43429}
  - USB: usbcore: Introduce usb_bulk_msg_killable() (Alan Stern)
  - usb: typec: altmode/displayport: set displayport signaling rate in configure message (Rd Babiera)
  - usb: roles: get usb role switch from parent only for usb-b-connector (Xu Yang)
  - usb: cdc-acm: Restore CAP_BRK functionnality to CH343 (Marc Zyngier)
  - usb: core: don't power off roothub PHYs if phy_set_mode() fails (Gabor Juhos)
  - usb: misc: uss720: properly clean up reference in uss720_probe() (Greg Kroah-Hartman)
  - usb: dwc3: pci: add support for the Intel Nova Lake -H (Krogerus Heikki)
  - usb: yurex: fix race in probe (Oliver Neukum) [Orabug: 39343920] {CVE-2026-43430}
  - usb: xhci: Prevent interrupt storm on host controller error (HCE) (Dayu Jiang) [Orabug: 39386868] {CVE-2026-43488}
  - usb: xhci: Fix memory leak in xhci_disable_slot() (Zilin Guan) [Orabug: 39343929] {CVE-2026-43432}
  - USB: ezcap401 needs USB_QUIRK_NO_BOS to function on 10gbs usb speed (Vyacheslav Vahnenko)
  - usb/core/quirks: Add Huawei ME906S-device to wakeup quirk (Christoffer Sandberg)
  - USB: add QUIRK_NO_BOS for video capture several devices (A1Rm4X)
  - KVM: SVM: Initialize AVIC VMCB fields if AVIC is enabled with in-kernel APIC (Sean Christopherson)
  - ASoC: amd: yc: Add DMI quirk for ASUS EXPERTBOOK PM1503CDA (Zhang Heng)
  - ata: libata-core: Add BRIDGE_OK quirk for QEMU drives (Pedro Falcato)
  - net: usb: lan78xx: skip LTM configuration for LAN7850 (Oleksij Rempel)
  - net: usb: lan78xx: fix TX byte statistics for small packets (Oleksij Rempel)
  - net: usb: lan78xx: fix silent drop of packets with checksum errors (Oleksij Rempel)
  - ALSA: usb-audio: Check endpoint numbers at parsing Scarlett2 mixer interfaces (Takashi Iwai) [Orabug: 39343938] {CVE-2026-43436}
  - ALSA: pcm: fix use-after-free on linked stream runtime in snd_pcm_drain() (Mehul Rao) [Orabug: 39343941] {CVE-2026-43437}
  - cgroup: fix race between task migration and iteration (Qingye Zhao) [Orabug: 39343947] {CVE-2026-43439}
  - usb: gadget: f_mass_storage: Fix potential integer overflow in check_command_size_in_blocks() (Seungjin Bae)
  - iio: imu: inv-mpu9150: fix irq ack preventing irq storms (Andreas Kemnade)
  - net: prevent NULL deref in ip[6]tunnel_xmit() (Eric Dumazet)
  - octeontx2-af: devlink: fix NIX RAS reporter to use RAS interrupt status (Alok Tiwari)
  - octeontx2-af: devlink: fix NIX RAS reporter recovery condition (Alok Tiwari)
  - net: dsa: realtek: Fix LED group port bit for non-zero LED group (Marek Behún)
  - net: bonding: Fix nd_tbl NULL dereference when IPv6 is disabled (Ricardo B. Marlière) [Orabug: 39343952] {CVE-2026-43441}
  - drm/amdkfd: Unreserve bo if queue update failed (Philip Yang) [Orabug: 39343958] {CVE-2026-43444}
  - ASoC: detect empty DMI strings (Casey Connolly)
  - ASoC: amd: acp3x-rt5682-max9836: Add missing error check for clock acquisition (Chen Ni)
  - ACPI: OSL: fix __iomem type on return from acpi_os_map_generic_address() (Ben Dooks)
  - net: bcmgenet: fix broken EEE by converting to phylib-managed state (Nicolai Buchwitz)
  - e1000/e1000e: Fix leak in DMA error cleanup (Matt Vollrath) [Orabug: 39343960] {CVE-2026-43445}
  - i40e: fix src IP mask checks and memcpy argument names in cloud filter (Alok Tiwari)
  - nvme-pci: Fix race bug in nvme_poll_irqdisable() (Sungwoo Kim) [Orabug: 39343966] {CVE-2026-43448}
  - nvme-pci: Fix slab-out-of-bounds in nvme_dbbuf_set (Sungwoo Kim) [Orabug: 39343971] {CVE-2026-43449}
  - perf ftrace: Fix hashmap__new() error checking (Chen Ni)
  - regulator: pca9450: Correct interrupt type (Peng Fan)
  - perf annotate: Fix hashmap__new() error checking (Chen Ni)
  - netfilter: xt_IDLETIMER: reject rev0 reuse of ALARM timer labels (Yuan Tan) [Orabug: 39110655] {CVE-2026-23274}
  - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (Hyunwoo Kim) [Orabug: 39343975] {CVE-2026-43450}
  - netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Hyunwoo Kim) [Orabug: 39343979] {CVE-2026-43451}
  - netfilter: x_tables: guard option walkers against 1-byte tail reads (David Dull) [Orabug: 39343983] {CVE-2026-43452}
  - netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Jenny Guanni Qu) [Orabug: 39343987] {CVE-2026-43453}
  - net: add xmit recursion limit to tunnel xmit functions (Weiming Shi) [Orabug: 39110659] {CVE-2026-23276}
  - xdp: register system page pool as an XDP memory model (Toke Høiland-Jørgensen)
  - xdp: allow attaching already registered memory model to xdp_rxq_info (Alexander Lobakin)
  - amd-xgbe: prevent CRC errors during RX adaptation with AN disabled (Raju Rangoju)
  - amd-xgbe: fix link status handling in xgbe_rx_adaptation (Raju Rangoju)
  - mctp: route: hold key->lock in mctp_flow_prepare_output() (Chengfeng Ye)
  - bonding: fix type confusion in bond_setup_by_slave() (Jiayuan Chen) [Orabug: 39343993] {CVE-2026-43456}
  - bonding: use common function to compute the features (Hangbin Liu)
  - net: add a common function to compute features for upper devices (Hangbin Liu)
  - bonding: Correctly support GSO ESP offload (Cosmin Ratiu)
  - bonding: add ESP offload features when slaves support (Jianbo Liu)
  - can: hi311x: hi3110_open(): add check for hi3110_power_enable() return value (Wenyuan Li)
  - mctp: i2c: fix skb memory leak in receive path (Haiyue Wang)
  - bnxt_en: Fix RSS table size check when changing ethtool channels (Pavan Chebbi)
  - serial: caif: hold tty->link reference in ldisc_open and ser_release (Shuangpeng Bai)
  - net: sfp: improve Huawei MA5671a fixup (Álvaro Fernández Rojas)
  - ASoC: simple-card-utils: fix graph_util_is_ports0() for DT overlays (Sen Wang)
  - ASoC: simple-card-utils: use __free(device_node) for device node (Kuninori Morimoto)
  - ASoC: soc-core: flush delayed work before removing DAIs and widgets (Matteo Cotifava) [Orabug: 39344003] {CVE-2026-43459}
  - ASoC: soc-core: drop delayed_work_pending() check before flush (Matteo Cotifava)
  - drm/sitronix/st7586: fix bad pixel data due to byte swap (David Lechner)
  - net/sched: teql: fix NULL pointer dereference in iptunnel_xmit on TEQL slave xmit (Weiming Shi) [Orabug: 39110665] {CVE-2026-23277}
  - net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Gal Pressman) [Orabug: 39344016] {CVE-2026-43466}
  - net/mlx5: Fix deadlock between devlink lock and esw->wq (Cosmin Ratiu) [Orabug: 39344022] {CVE-2026-43468}
  - net/mlx5: Query to see if host PF is disabled (Daniel Jurgens)
  - net/mlx5: IFC updates for disabled host PF (Daniel Jurgens)
  - bonding: handle BOND_LINK_FAIL, BOND_LINK_BACK as valid link states (Hangbin Liu)
  - drm/amd/pm: add missing od setting PP_OD_FEATURE_ZERO_FAN_BIT for smu v14 (Yang Wang)
  - drm/msm/dsi: fix pclk rate calculation for bonded dsi (Pengyu Luo)
  - net: dsa: realtek: rtl8365mb: remove ifOutDiscards from rx_packets (Mieczyslaw Nalewaj)
  - perf disasm: Fix off-by-one bug in outside check (Peter Collingbourne)
  - workqueue: Use POOL_BH instead of WQ_BH when checking pool flags (Breno Leitao)
  - btrfs: hold space_info->lock when clearing periodic reclaim ready (Sun Yangkai)
  - xprtrdma: Decrement re_receiving on the early exit paths (Eric Badger) [Orabug: 39344025] {CVE-2026-43469}
  - drm/msm/dsi: fix hdisplay calculation when programming dsi registers (Pengyu Luo)
  - nfs: return EISDIR on nfs3_proc_create if d_alias is a dir (Roberto Bergantinos Corpas) [Orabug: 39344029] {CVE-2026-43470}
  - smb/server: Fix another refcount leak in smb2_open() (Guenter Roeck)
  - powerpc: 83xx: km83xx: Fix keymile vendor prefix (Jonathan Neuschäfer)
  - remoteproc: sysmon: Correct subsys_name_len type in QMI request (Bjorn Andersson)
  - powerpc/crash: adjust the elfcorehdr size (Sourabh Jain)
  - powerpc/kexec/core: use big-endian types for crash variables (Sourabh Jain)
  - kexec: Include kernel-end even without crashkernel (Ben Collins)
  - kexec: Consolidate machine_kexec_mask_interrupts() implementation (Eliav Farber)
  - powerpc/uaccess: Fix inline assembly for clang build on PPC32 (Christophe Leroy)
  - ALSA: usb-audio: Check max frame size for implicit feedback mode, too (Takashi Iwai)
  - drm/amdgpu/vcn5: Add SMU dpm interface type (Sguttula)
  - ALSA: usb-audio: Avoid implicit feedback mode on DIYINHK USB Audio 2.0 (Takashi Iwai)
  - scsi: ufs: core: Fix shift out of bounds when MAXQ=32 (Wangshuaiwei)
  - scsi: ufs: core: Fix possible NULL pointer dereference in ufshcd_add_command_trace() (Peter Wang) [Orabug: 39344031] {CVE-2026-43471}
  - ASoC: cs42l43: Report insert for exotic peripherals (Charles Keepax)
  - ASoC: amd: yc: Add ASUS EXPERTBOOK BM1503CDA to quirk table (Azamat Almazbek Uulu)
  - scsi: ses: Fix devices attaching to different hosts (Tomas Henzl)
  - ACPI: OSI: Add DMI quirk for Acer Aspire One D255 (Sofia Schneider)
  - wifi: mac80211: set default WMM parameters on all links (Ramanathan Choodamani)
  - unshare: fix unshare_fs() handling (Al Viro) [Orabug: 39344033] {CVE-2026-43472}
  - ALSA: hda/realtek: Fix speaker pop on Star Labs StarFighter (Sean Rhodes)
  - scsi: mpi3mr: Add NULL checks when resetting request and reply queues (Ranjan Kumar) [Orabug: 39344037] {CVE-2026-43473}
  - ACPI: PM: Save NVS memory on Lenovo G70-35 (Piotr Mazek)
  - scsi: storvsc: Fix scheduling while atomic on PREEMPT_RT (Jan Kiszka) [Orabug: 39344042] {CVE-2026-43475}
  - LTS version: v6.12.77 (Sherry Yang)
  - ata: libata-eh: Fix detection of deferred qc timeouts (Guenter Roeck)
  - ata: libata: cancel pending work after clearing deferred_qc (Niklas Cassel) [Orabug: 39489316] {CVE-2026-23355}
  - ata: libata-eh: correctly handle deferred qc timeouts (Damien Le Moal)
  - ata: libata-core: fix cancellation of a port deferred qc work (Damien Le Moal)
  - ext4: fix potential null deref in ext4_mb_init() (Baokun Li) [Orabug: 39489166] {CVE-2025-40119}
  - apparmor: fix race between freeing data and fs accessing it (John Johansen)
  - apparmor: fix race on rawdata dereference (John Johansen)
  - apparmor: fix differential encoding verification (John Johansen)
  - apparmor: fix unprivileged local user can do privileged policy management (John Johansen)
  - apparmor: Fix double free of ns_name in aa_replace_profiles() (John Johansen)
  - apparmor: fix missing bounds check on DEFAULT table in verify_dfa() (Massimiliano Pellizzer)
  - apparmor: fix side-effect bug in match_char() macro usage (Massimiliano Pellizzer)
  - apparmor: fix: limit the number of levels of policy namespaces (John Johansen)
  - apparmor: replace recursive profile removal with iterative approach (Massimiliano Pellizzer)
  - apparmor: fix memory leak in verify_header (Massimiliano Pellizzer)
  - apparmor: validate DFA start states are in bounds in unpack_pdb (Massimiliano Pellizzer)
  - selftest/arm64: Fix sve2p1_sigill() to hwcap test (Yifan Wu)
  - xdp: produce a warning when calculated tailroom is negative (Larysa Zaremba) [Orabug: 39130928] {CVE-2026-23343}
  - i40e: use xdp.frame_sz as XDP RxQ info frag_size (Larysa Zaremba)
  - i40e: fix registering XDP RxQ info (Larysa Zaremba)
  - xsk: introduce helper to determine rxq->frag_size (Larysa Zaremba)
  - xdp: use modulo operation to calculate XDP frag tailroom (Larysa Zaremba)
  - net/sched: act_ife: Fix metalist update behavior (Jamal Hadi Salim)
  - net: ipv6: fix panic when IPv4 route references loopback IPv6 nexthop (Jiayuan Chen) [Orabug: 39130788] {CVE-2026-23300}
  - net: vxlan: fix nd_tbl NULL dereference when IPv6 is disabled (Fernando Fernandez Mancera) [Orabug: 39130766] {CVE-2026-23293}
  - selftests/harness: order TEST_F and XFAIL_ADD constructors (Sun Jian)
  - kselftest/harness: Use helper to avoid zero-size memset warning (Wake Liu)
  - net: ethernet: mtk_eth_soc: Reset prog ptr to old_prog in case of error in mtk_xdp_setup() (Lorenzo Bianconi)
  - netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [Orabug: 39130948] {CVE-2026-23351}
  - net: stmmac: Fix error handling in VLAN add and delete paths (Ovidiu Panait)
  - nfc: rawsock: cancel tx_work before socket teardown (Jakub Kicinski)
  - nfc: nci: clear NCI_DATA_EXCHANGE before calling completion callback (Jakub Kicinski)
  - nfc: nci: free skb on nci_transceive early error paths (Jakub Kicinski)
  - net_sched: sch_fq: clear q->band_pkt_count[] in fq_reset() (Eric Dumazet)
  - net: nfc: nci: Fix zero-length proprietary notifications (Ian Ray)
  - net: sched: avoid qdisc_reset_all_tx_gt() vs dequeue race for lockless qdiscs (Koichiro Den) [Orabug: 39130922] {CVE-2026-23340}
  - hwmon: (max6639) fix inverted polarity (Olivier Sobrie)
  - hwmon: (max6639) : Configure based on DT property (Naresh Solanki)
  - nvme: fix memory allocation in nvme_pr_read_keys() (Sungwoo Kim) [Orabug: 39103115] {CVE-2026-23244}
  - nvme: reject invalid pr_read_keys() num_keys values (Stefan Hajnoczi)
  - drm/xe/reg_sr: Fix leak on xa_store failure (Shuicheng Lin)
  - i2c: i801: Revert "i2c: i801: replace acpi_lock with I2C bus lock" (Charles Haithcock) [Orabug: 39131012] {CVE-2026-23369}
  - drm/sched: Fix kernel-doc warning for drm_sched_job_done() (Kernel Test Robot)
  - amd-xgbe: fix sleep while atomic on suspend/resume (Raju Rangoju)
  - net: ipv4: fix ARM64 alignment fault in multipath hash seed (Yung Chih Su) [Orabug: 39130846] {CVE-2026-23316}
  - ipv6: fix NULL pointer deref in ip6_rt_get_dev_rcu() (Jakub Kicinski) [Orabug: 39130806] {CVE-2026-23304}
  - smb/client: fix buffer size for smb311_posix_qinfo in SMB311_posix_query_info() (Zhangguodong)
  - smb/client: fix buffer size for smb311_posix_qinfo in smb2_compound_op() (Zhangguodong)
  - bpf: Fix a UAF issue in bpf_trampoline_link_cgroup_shim (Lang Xu) [Orabug: 39130859] {CVE-2026-23319}
  - iavf: fix netdev->max_mtu to respect actual hardware limit (Kohei Enju)
  - xen/acpi-processor: fix _CST detection using undersized evaluation buffer (David Thomson)
  - indirect_call_wrapper: do not reevaluate function pointer (Eric Dumazet)
  - wifi: mt76: Fix possible oob access in mt76_connac2_mac_write_txwi_80211() (Lorenzo Bianconi) [Orabug: 39130843] {CVE-2026-23315}
  - wifi: mt76: mt7925: Fix possible oob access in mt7925_mac_write_txwi_80211() (Lorenzo Bianconi)
  - wifi: mt76: mt7996: Fix possible oob access in mt7996_mac_write_txwi_80211() (Lorenzo Bianconi)
  - wifi: wlcore: Fix a locking bug (Bart Van Assche) [Orabug: 39167424] {CVE-2026-23420}
  - wifi: cw1200: Fix locking in error paths (Bart Van Assche)
  - octeon_ep_vf: avoid compiler and IQ/OQ reordering (Vimlesh Kumar)
  - octeon_ep_vf: Relocate counter updates before NAPI (Vimlesh Kumar)
  - octeon_ep: avoid compiler and IQ/OQ reordering (Vimlesh Kumar)
  - octeon_ep: Relocate counter updates before NAPI (Vimlesh Kumar)
  - bpf/bonding: reject vlan+srcmac xmit_hash_policy change when XDP is loaded (Jiayuan Chen) [Orabug: 39130827] {CVE-2026-23310}
  - net: dsa: realtek: rtl8365mb: fix rtl8365mb_phy_ocp_write return value (Mieczyslaw Nalewaj)
  - kunit: tool: copy caller args in run_kernel to prevent mutation (Shuvam Pandey)
  - rust: kunit: fix warning when !CONFIG_PRINTK (Alexandre Courbot)
  - drm/xe: Do not preempt fence signaling CS instructions (Matthew Brost)
  - wifi: rsi: Don't default to -EOPNOTSUPP in rsi_mac80211_config (Sebastian Krzyszkowiak) [Orabug: 39131029] {CVE-2026-23373}
  - can: mcp251x: fix deadlock in error path of mcp251x_open (Alban Bedel) [Orabug: 39130970] {CVE-2026-23357}
  - can: bcm: fix locking for bcm_op runtime updates (Oliver Hartkopp) [Orabug: 39131186] {CVE-2026-23362}
  - amd-xgbe: fix MAC_TCR_SS register width for 2.5G and 10M speeds (Raju Rangoju)
  - net: ti: icssg-prueth: Fix ping failure after offload mode setup when link speed is not 1G (Md Danish Anwar)
  - atm: lec: fix null-ptr-deref in lec_arp_clear_vccs (Jiayuan Chen) [Orabug: 39130725] {CVE-2026-23286}
  - xsk: Fix zero-copy AF_XDP fragment drop (Nikhil P. Rao)
  - xsk: Fix fragment node deletion to prevent buffer leak (Nikhil P. Rao) [Orabug: 39489168] {CVE-2026-23326}
  - xsk: s/free_list_node/list_node/ (Maciej Fijalkowski)
  - xsk: Get rid of xdp_buff_xsk::xskb_list_node (Maciej Fijalkowski)
  - net: ethernet: ti: am65-cpsw-nuss/cpsw-ale: Fix multicast entry handling in ALE table (Chintan Vankar)
  - drm/solomon: Fix page start when updating rectangle in page addressing mode (Francesco Lavra)
  - e1000e: clear DPG_EN after reset to avoid autonomous power-gating (Vitaly Lifshits)
  - i40e: Fix preempt count leak in napi poll tracepoint (Thomas Gleixner) [Orabug: 39130838] {CVE-2026-23313}
  - idpf: change IRQ naming to match netdev and ethtool queue numbering (Brian Vazquez)
  - hwmon: (it87) Check the it87_lock() return value (Bart Van Assche)
  - pinctrl: cirrus: cs42l43: Fix double-put in cs42l43_pin_probe() (Felix Gu)
  - HID: multitouch: new class MT_CLS_EGALAX_P80H84 (Ian Ray)
  - HID: multitouch: add quirks for Lenovo Yoga Book 9i (Brian Howard)
  - platform/x86: thinkpad_acpi: Fix errors reading battery thresholds (Jonathan Teh)
  - pinctrl: equilibrium: fix warning trace on load (Florian Eckert)
  - pinctrl: equilibrium: rename irq_chip function callbacks (Florian Eckert)
  - hwmon: (aht10) Fix initialization commands for AHT20 (Hao Yu)
  - hwmon: (aht10) Add support for dht20 (Akhilesh Patil)
  - nvme: fix admin queue leak on controller reset (Ming Lei) [Orabug: 39131191] {CVE-2026-23360}
  - ACPI: APEI: GHES: Disable KASAN instrumentation when compile testing with clang < 18 (Nathan Chancellor)
  - btrfs: always fallback to buffered write if the inode requires checksum (Qu Wenruo)
  - net: stmmac: dwmac-loongson: Set clk_csr_i to 100-150MHz (Huacai Chen)
  - ARM: clean up the memset64() C wrapper (Thomas Weißschuh)
  - xattr: switch to CLASS(fd) (Al Viro) [Orabug: 39073878] {CVE-2024-14027}
  - selftests: mptcp: join: check removing signal+subflow endp (Matthieu Baerts)
  - selftests: mptcp: more stable simult_flows tests (Paolo Abeni)
  - smb: client: Don't log plaintext credentials in cifs_set_cifscreds (Thorsten Blum) [Orabug: 39130800] {CVE-2026-23303}
  - smb: client: fix broken multichannel with krb5+signing (Paulo Alcantara)
  - smb: client: fix cifs_pick_channel when channels are equally loaded (Henrique Carvalho)
  - drbd: fix null-pointer dereference on local read error (Christoph Böhmwalder) [Orabug: 39130720] {CVE-2026-23285}
  - drbd: fix "LOGIC BUG" in drbd_al_begin_io_nonblock() (Lars Ellenberg) [Orabug: 39130964] {CVE-2026-23356}
  - Squashfs: check metadata block offset is within range (Phillip Lougher) [Orabug: 39131078] {CVE-2026-23388}
  - scsi: target: Fix recursive locking in __configfs_open_file() (Prithvi Tambewagh) [Orabug: 39130762] {CVE-2026-23292}
  - tracing: Fix WARN_ON in tracing_buffers_mmap_close (Qing Wang) [Orabug: 39131052] {CVE-2026-23380}
  - nfsd: Fix cred ref leak in nfsd_nl_threads_set_doit(). (Kuniyuki Iwashima) [Orabug: 39130777] {CVE-2026-23297}
  - net/sched: ets: fix divide by zero in the offload path (Davide Caratti) [Orabug: 39131048] {CVE-2026-23379}
  - RDMA/irdma: Fix kernel stack leak in irdma_create_user_ah() (Jason Gunthorpe) [Orabug: 39130901] {CVE-2026-23335}
  - IB/mthca: Add missed mthca_unmap_user_db() for mthca_create_srq() (Jason Gunthorpe) [Orabug: 39130741] {CVE-2026-23289}
  - wifi: mac80211: fix NULL pointer dereference in mesh_rx_csa_frame() (Vahagn Vardanian) [Orabug: 39130699] {CVE-2026-23279}
  - wifi: mac80211: bounds-check link_id in ieee80211_ml_reconfiguration (Ariel Silver) [Orabug: 39103120] {CVE-2026-23246}
  - wifi: cfg80211: cancel rfkill_block work in wiphy_unregister() (Daniil Dulov) [Orabug: 39130904] {CVE-2026-23336}
  - wifi: radiotap: reject radiotap with unknown bits (Johannes Berg) [Orabug: 39131004] {CVE-2026-23367}
  - ALSA: usb-audio: Use correct version for UAC3 header validation (Jun Seo) [Orabug: 39130853] {CVE-2026-23318}
  - platform/x86: dell-wmi: Add audio/mic mute key codes (Kurt Borja)
  - platform/x86: dell-wmi-sysman: Don't hex dump plaintext password data (Thorsten Blum) [Orabug: 39131015] {CVE-2026-23370}
  - x86/efi: defer freeing of boot services memory (Mike Rapoport) [Orabug: 39130952] {CVE-2026-23352}
  - HID: Add HID_CLAIMED_INPUT guards in raw_event callbacks missing them (Greg Kroah-Hartman) [Orabug: 39131060] {CVE-2026-23382}
  - can: usb: f81604: handle bulk write errors properly (Greg Kroah-Hartman)
  - can: usb: f81604: handle short interrupt urb messages properly (Greg Kroah-Hartman)
  - can: usb: etas_es58x: correctly anchor the urb in the read bulk callback (Greg Kroah-Hartman)
  - can: ucan: Fix infinite loop from zero-length messages (Greg Kroah-Hartman)
  - can: usb: f81604: correctly anchor the urb in the read bulk callback (Greg Kroah-Hartman)
  - can: ems_usb: ems_usb_read_bulk_callback(): check the proper length of a message (Greg Kroah-Hartman) [Orabug: 39130814] {CVE-2026-23307}
  - net: usb: pegasus: validate USB endpoints (Greg Kroah-Hartman) [Orabug: 39130748] {CVE-2026-23290}
  - net: usb: kalmia: validate USB endpoints (Greg Kroah-Hartman) [Orabug: 39130996] {CVE-2026-23365}
  - net: usb: kaweth: validate USB endpoints (Greg Kroah-Hartman) [Orabug: 39130831] {CVE-2026-23312}
  - nfc: pn533: properly drop the usb interface reference on disconnect (Greg Kroah-Hartman)
  - media: dvb-core: fix wrong reinitialization of ringbuffer on reopen (Jens Axboe) [Orabug: 39103137] {CVE-2026-23253}
  - namespace: fix proc mount iteration (Christian Brauner)
  - eventpoll: Fix integer overflow in ep_loop_check_proc() (Jann Horn)
  - net: arcnet: com20020-pci: fix support for 2.5Mbit cards (Ethan Nelson-Moore)
  - ALSA: hda/conexant: Fix headphone jack handling on Acer Swift SF314 (Takashi Iwai)
  - ALSA: hda/realtek: Add quirk for Samsung Galaxy Book3 Pro 360 (NP965QFG) (Lewis Mason)
  - ALSA: hda/realtek: Add quirk for Gigabyte G5 KF5 (2023) (Eric Naim)
  - LoongArch: Remove some extern variables in source files (Tiezhu Yang)
  - LoongArch: Handle percpu handler address for ORC unwinder (Tiezhu Yang)
  - LoongArch: Remove unnecessary checks for ORC unwinder (Tiezhu Yang)
  - LoongArch/orc: Use RCU in all users of __module_address(). (Sebastian Andrzej Siewior)
  - ksmbd: add chann_lock to protect ksmbd_chann_list xarray (Namjae Jeon)
  - ksmbd: check return value of xa_store() in krb5_authenticate (Namjae Jeon)
  - hwmon: (max16065) Use READ/WRITE_ONCE to avoid compiler optimization induced race (Gui-Dong Han)
  - ALSA: hda/conexant: Add quirk for HP ZBook Studio G4 (Takashi Iwai)
  - drm/amd: Fix hang on amdgpu unload by using pci_dev_is_disconnected() (Mario Limonciello)
  - usb: cdns3: fix role switching during resume (Thomas Richard)
  - usb: cdns3: call cdns_power_is_lost() only once in cdns_resume() (Théo Lebrun)
  - usb: cdns3: remove redundant if branch (Hongyu Xie)
  - btrfs: zoned: fixup last alloc pointer after extent removal for RAID0/10 (Naohiro Aota)
  - btrfs: define the AUTO_KFREE/AUTO_KVFREE helper macros (Miquel Sabaté Solà)
  - btrfs: zoned: fix stripe width calculation (Naohiro Aota)
  - btrfs: zoned: fixup last alloc pointer after extent removal for DUP (Naohiro Aota)
  - btrfs: zoned: fixup last alloc pointer after extent removal for RAID1 (Naohiro Aota)
  - btrfs: zoned: fix alloc_offset calculation for partly conventional block groups (Johannes Thumshirn)
  - btrfs: fix periodic reclaim condition (Sun Yangkai)
  - btrfs: fix reclaimed bytes accounting after automatic block group reclaim (Filipe Manana)
  - btrfs: get used bytes while holding lock at btrfs_reclaim_bgs_work() (Filipe Manana)
  - btrfs: drop unused parameter fs_info from do_reclaim_sweep() (David Sterba)
  - uprobes: Fix incorrect lockdep condition in filter_chain() (Breno Leitao)
  - uprobes: switch to RCU Tasks Trace flavor for better performance (Andrii Nakryiko)
  - drm/exynos: vidi: use ctx->lock to protect struct vidi_context member variables related to memory alloc/free (Jeongjun Park)
  - drm/exynos/vidi: Remove redundant error handling in vidi_get_modes() (Xu Wang)
  - drm/exynos: vidi: fix to avoid directly dereferencing user pointer (Jeongjun Park)
  - ima: kexec: define functions to copy IMA log at soft boot (Steven Chen)
  - kexec: define functions to map and unmap segments (Steven Chen)
  - ima: define and call ima_alloc_kexec_file_buf() (Steven Chen)
  - ima: rename variable the seq_file "file" to "ima_kexec_file" (Steven Chen)
  - ima: kexec: silence RCU list traversal warning (Breno Leitao)
  - clk: tegra: tegra124-emc: fix device leak on set_rate() (Johan Hovold)
  - arm64: dts: rockchip: Fix rk3588 PCIe range mappings (Shawn Lin)
  - arm64: dts: rockchip: Fix rk356x PCIe range mappings (Shawn Lin)
  - iommu/vt-d: Skip dev-iotlb flush for inaccessible PCIe device without scalable mode (Jinhui Guo) [Orabug: 39331474] {CVE-2026-43161}
  - Input: synaptics_i2c - guard polling restart in resume (Minseong Kim)
  - Input: synaptics_i2c - replace use of system_wq with system_dfl_wq (Marco Crivellari)
  - workqueue: Add system_percpu_wq and system_dfl_wq (Marco Crivellari)
  - ext4: always allocate blocks only from groups inode can use (Jan Kara)
  - ext4: implement linear-like traversal across order xarrays (Baokun Li)
  - ext4: refactor choose group to scan group (Baokun Li)
  - ext4: convert free groups order lists to xarrays (Baokun Li)
  - ext4: factor out ext4_mb_scan_group() (Baokun Li)
  - ext4: factor out ext4_mb_might_prefetch() (Baokun Li)
  - ext4: factor out __ext4_mb_scan_group() (Baokun Li)
  - ext4: add ext4_try_lock_group() to skip busy groups (Baokun Li)
  - mailbox: Prevent out-of-bounds access in fw_mbox_index_xlate() (Joonwon Kang) [Orabug: 39331965] {CVE-2026-43281}
  - mailbox: Allow controller specific mapping using fwnode (Anup Patel)
  - mailbox: Use guard/scoped_guard for con_mutex (Peng Fan)
  - mailbox: Use dev_err when there is error (Peng Fan)
  - mailbox: remove unused header files (Tudor Ambarus)
  - mailbox: sort headers alphabetically (Tudor Ambarus)
  - mailbox: don't protect of_parse_phandle_with_args with con_mutex (Tudor Ambarus)
  - ext4: don't set EXT4_GET_BLOCKS_CONVERT when splitting before submitting I/O (Zhang Yi) [Orabug: 39452050] {CVE-2026-45985}
  - ext4: correct the comments place for EXT4_EXT_MAY_ZEROOUT (Yangerkun)
  - drm/tegra: dsi: fix device leak on probe (Johan Hovold)
  - ata: libata-scsi: avoid Non-NCQ command starvation (Damien Le Moal) [Orabug: 39451561] {CVE-2026-45855}
  - ata: libata: Introduce ata_port_eh_scheduled() (Damien Le Moal)
  - ata: libata: Remove ATA_DFLAG_ZAC device flag (Damien Le Moal)
  - ata: libata-scsi: Remove struct ata_scsi_args (Damien Le Moal)
  - ata: libata-scsi: Document all VPD page inquiry actors (Damien Le Moal)
  - ata: libata-scsi: Refactor ata_scsiop_maint_in() (Damien Le Moal)
  - ata: libata-scsi: Refactor ata_scsiop_read_cap() (Damien Le Moal)
  - ata: libata-scsi: Refactor ata_scsi_simulate() (Damien Le Moal)
  - KVM: x86: Ignore -EBUSY when checking nested events from vcpu_block() (Sean Christopherson) [Orabug: 39331893] {CVE-2026-43265}
  - media: dw9714: Fix powerup sequence (Ricardo Ribalda)
  - media: dw9714: add support for powerdown pin (Matthias Fend)
  - media: dw9714: move power sequences to dedicated functions (Matthias Fend)
  - media: tegra-video: Fix memory leak in __tegra_channel_try_format() (Zilin Guan)
  - PCI: Use resource_set_range() that correctly sets ->end (Ilpo Järvinen)
  - resource: Add resource set range and size helpers (Ilpo Järvinen)
  - Revert "PCI: qcom: Don't wait for link if we can detect Link Up" (Niklas Cassel)
  - PCI: qcom: Don't wait for link if we can detect Link Up (Krishna Chaitanya Chundru)
  - Revert "PCI: dw-rockchip: Don't wait for link since we can detect Link Up" (Niklas Cassel)
  - PCI: dw-rockchip: Don't wait for link since we can detect Link Up (Niklas Cassel)
  - memory: mtk-smi: fix device leak on larb probe (Johan Hovold)
  - memory: mtk-smi: fix device leaks on common probe (Johan Hovold)
  - x86/acpi/boot: Correct acpi_is_processor_usable() check again (Yazen Ghannam)
  - PCI: Correct PCI_CAP_EXP_ENDPOINT_SIZEOF_V2 value (Bjorn Helgaas)
  - bpf: Fix stack-out-of-bounds write in devmap (Kohei Enju) [Orabug: 39130977] {CVE-2026-23359}
  - bpf, arm64: Force 8-byte alignment for JIT buffer to prevent atomic tearing (Fuad Tabba) [Orabug: 39131066] {CVE-2026-23383}
  - btrfs: fix compat mask in error messages in btrfs_check_features() (Mark Harmstone)
  - btrfs: print correct subvol num if active swapfile prevents deletion (Mark Harmstone)
  - btrfs: fix warning in scrub_verify_one_metadata() (Mark Harmstone)
  - btrfs: fix objectid value in error message in check_extent_data_ref() (Mark Harmstone)
  - btrfs: fix incorrect key offset in error message in check_dev_extent_item() (Mark Harmstone)
  - ALSA: hda: cs35l56: Fix signedness error in cs35l56_hda_posture_put() (Richard Fitzgerald)
  - ALSA: pci: hda: use snd_kcontrol_chip() (Kuninori Morimoto)
  - drm/amdgpu: Fix locking bugs in error paths (Bart Van Assche)
  - drm/amdgpu: Replace kzalloc + copy_from_user with memdup_user (Thorsten Blum)
  - drm/amdgpu: Unlock a mutex before destroying it (Bart Van Assche)
  - PCI: dwc: ep: Flush MSI-X write before unmapping its ATU entry (Niklas Cassel)
  - PCI: dwc: ep: Use align addr function for dw_pcie_ep_raise_{msi,msix}_irq() (Niklas Cassel)
  - PCI: dwc: endpoint: Implement the pci_epc_ops::align_addr() operation (Damien Le Moal)
  - PCI: endpoint: Introduce pci_epc_mem_map()/unmap() (Damien Le Moal)
  - PCI: endpoint: Introduce pci_epc_function_is_valid() (Damien Le Moal)
  - s390/vtime: Fix virtual timer forwarding (Heiko Carstens)
  - s390/idle: Fix cpu idle exit cpu time accounting (Heiko Carstens)
  - perf: Fix __perf_event_overflow() vs perf_remove_from_context() race (Peter Zijlstra) [Orabug: 39110643] {CVE-2026-23271}
  - ALSA: usb-audio: Use inclusive terms (Takashi Iwai)
  - ALSA: usb-audio: Cap the packet size pre-calculations (Takashi Iwai)
  - scsi: ufs: core: Move link recovery for hibern8 exit failure to wl_resume (Peter Wang)
  - cgroup/cpuset: Fix incorrect use of cpuset_update_tasks_cpumask() in update_cpumasks_hier() (Waiman Long)
  - rseq: Clarify rseq registration rseq_size bound check comment (Mathieu Desnoyers)
  - x86/fred: Correct speculative safety in fred_extint() (Andrew Cooper) [Orabug: 39130960] {CVE-2026-23354}
  - ALSA: usb-audio: Remove VALIDATE_RATES quirk for Focusrite devices (Geoffrey D. Bennett)
  - ALSA: scarlett2: Fix DSP filter control array handling (Geoffrey D. Bennett)
  - ALSA: scarlett2: Fix redeclaration of loop variable (Geoffrey D. Bennett)
  - scsi: pm8001: Fix use-after-free in pm8001_queue_command() (Salomon Dushimirimana) [Orabug: 39130811] {CVE-2026-23306}
  - scsi: lpfc: Properly set WC for DPP mapping (Mathias Krause)
  - irqchip/sifive-plic: Fix frozen interrupt due to affinity setting (Nam Cao)
  - KVM: arm64: Hide S1POE from guests when not supported by the host (Fuad Tabba)
  - drm/logicvc: Fix device node reference leak in logicvc_drm_config_parse() (Felix Gu)
  - drm/vmwgfx: Return the correct value in vmw_translate_ptr functions (Ian Forbes) [Orabug: 39130850] {CVE-2026-23317}
  - drm/vmwgfx: Fix invalid kref_put callback in vmw_bo_dirty_release (Brad Spengler)


author: Sherry Yang <sherry.yang@oracle.com> [6.12.0-204.87.3.el10uek]
changelog:
  - btrfs: tracepoints: fix sleep while in atomic context in btrfs_sync_file() (Filipe Manana)
  - cifs: Fix busy dentry used after unmounting (Zhihao Cheng)
  - smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (Henrique Carvalho)
  - net/mlx5e: Trigger neighbor resolution for unresolved destinations (Jianbo Liu)
  - net/mlx5e: Use ip6_dst_lookup instead of ipv6_dst_lookup_flow for MAC init (Jianbo Liu)
  - x86/fgraph: Fix return_to_handler regs.rsp value (Jiri Olsa)
  - tracing: Fix the bug where bpf_get_stackid returns -EFAULT on the ARM64 (Feng Yang)
  - iommu/vt-d: Draining PRQ in sva unbind path when FPD bit set (Lu Baolu)
  - ksmbd: fix SID memory leak in set_posix_acl_entries_dacl() on overflow (Ferry Meng)
  - arm64: Kconfig: Remove selecting replaced HAVE_FUNCTION_GRAPH_RETVAL (Lukas Bulwahn)
  - riscv: fgraph: Fix stack layout to match __arch_ftrace_regs argument of ftrace_return_to_handler (Pu Lehui)
  - riscv: fgraph: Select HAVE_FUNCTION_GRAPH_TRACER depends on HAVE_DYNAMIC_FTRACE_WITH_ARGS (Pu Lehui)
  - ata: libata-scsi: do not needlessly defer commands when using PMP with FBS (Niklas Cassel)
  - ata: libata-scsi: do not use the deferred QC feature on PMPs with CBS (Niklas Cassel)
  - ata: libata-scsi: do not use the deferred QC feature for ATA_DEFER_PORT (Niklas Cassel)
  - ata: libata-scsi: improve readability of ata_scsi_qc_issue() (Niklas Cassel)
  - ata: libata-scsi: fix requeue of deferred ATA PASS-THROUGH commands (Igor Pylypiv)
  - mtd: parsers: ofpart: call of_node_get() for dedicated subpartitions (Cosmin Tanislav)
  - arm64/scs: Fix potential sign extension issue of advance_loc4 (Guan Wentao)
  - net: airoha: Add missing RX_CPU_IDX() configuration in airoha_qdma_cleanup_rx_queue() (Lorenzo Bianconi)
  - net: airoha: Implement BQL support (Lorenzo Bianconi)
  - Bluetooth: L2CAP: Fix printing wrong information if SDU length exceeds MTU (Luiz Augusto von Dentz)
  - drm/msm/dsi: fix hdisplay calculation for CMD mode panel (Pengyu Luo)
  - drm/msm/dsi: fix bits_per_pclk (Pengyu Luo)
  - drm/msm/dsi: add the missing parameter description (Pengyu Luo)
  - ALSA: core: Serialize deferred fasync state checks (Cássio Gabriel)
  - ALSA: misc: Use guard() for spin locks (Takashi Iwai)
  - drm/i915/psr: Init variable to avoid early exit from et alignment loop (Jouni Högander)
  - LoongArch: Fix potential ADE in loongson_gpu_fixup_dma_hang() (Guan Wentao)
  - gtp: disable BH before calling udp_tunnel_xmit_skb() (David Carlier)
  - openvswitch: vport: fix self-deadlock on release of tunnel ports (Ilya Maximets) [Orabug: 39460846] {CVE-2026-46165}
  - LoongArch: Fix SYM_SIGFUNC_START definition for 32BIT (Huacai Chen)
  - iommu/amd: serialize sequence allocation under concurrent TLB invalidations (Ankit Soni) [Orabug: 39339248] {CVE-2026-43220}
  - iommu/amd: Use atomic64_inc_return() in iommu.c (Uros Bizjak)
  - usb: ulpi: fix memory leak on ulpi_register() error paths (Felix Gu) [Orabug: 39460845] {CVE-2026-46109}
  - ACPI: CPPC: Fix related_cpus inconsistency during CPU hotplug (Jinjie Ruan)
  - scsi: target: iscsi: Validate CHAP_R length before base64 decode (Alexandru Hossu) [Orabug: 39445550]
  - scsi: fcoe: Reject FIP descriptors with zero fip_dlen in CVL walker (Michael Bommarito) [Orabug: 39445550]
  - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (Michael Bommarito) [Orabug: 39445550]
  - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Michael Bommarito) [Orabug: 39445550]
  - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Michael Bommarito) [Orabug: 39445550]
  - arm64: io: Fix ioremap_encrypted() argument type (Vijay Kumar) [Orabug: 39387242]
  - uek-rpm/config-aarch64: Enable Vera firmware and memory attribute support (Vijay Kumar) [Orabug: 39387242]
  - NVIDIA: VR: SAUCE: arm64: Add workaround to convert MT_NORMAL_NC to Device-nGnRE (Shanker Donthineni) [Orabug: 39387242]
  - NVIDIA: VR: SAUCE: firmware: smccc: lfa: fix work item re-initialization race (Nirmoy Das) [Orabug: 39387242]
  - NVIDIA: VR: SAUCE: firmware: smccc: lfa: handle LFA_BUSY and improve SMC retry pacing (Vedashree Vidwans) [Orabug: 39387242]
  - NVIDIA: VR: CCA: SAUCE: arm_pmu: Provide a mechanism for disabling the physical IRQ (Steven Price) [Orabug: 39387242]
  - NVIDIA: VR: SAUCE: firmware: smccc: register as platform driver (Vedashree Vidwans) [Orabug: 39387242]
  - NVIDIA: VR: SAUCE: firmware: smccc: add timeout, touch wdt (Vedashree Vidwans) [Orabug: 39387242]
  - NVIDIA: VR: SAUCE: firmware: smccc: add support for Live Firmware Activation (LFA) (Salman Nabi) [Orabug: 39387242]
  - NVIDIA: VR: SAUCE: iommu/arm-smmu-v3: Allow ATS to be always on (Nicolin Chen) [Orabug: 39387242]
  - NVIDIA: VR: SAUCE: PCI: Allow ATS to be always on for non-CXL NVIDIA GPUs (Nicolin Chen) [Orabug: 39387242]
  - NVIDIA: VR: SAUCE: PCI: Allow ATS to be always on for CXL.cache capable devices (Nicolin Chen) [Orabug: 39387242]
  - NVIDIA: VR: SAUCE: soc/tegra: pmc: Add PMC support for Tegra410 (Kartik) [Orabug: 39387242]
  - soc/tegra: pmc: Add Tegra264 support (Thierry Reding) [Orabug: 39387242]
  - NVIDIA: VR: SAUCE: soc/tegra: misc: Use SMCCC to get chipid (Kartik) [Orabug: 39387242]
  - tun: free page on build_skb failure in tun_xdp_one() (Weiming Shi) [Orabug: 39429137,39531644] {CVE-2026-46322}
  - tap: free page on error paths in tap_get_user_xdp() (Weiming Shi) [Orabug: 39429137,39531633] {CVE-2026-46320}
  - tun: free page on short-frame rejection in tun_xdp_one() (Weiming Shi) [Orabug: 39429137,39531639] {CVE-2026-46321}
  - uek-rpm: disable kABI size checks in debug configs (Saeed Mirzamohammadi) [Orabug: 39442662]
  - smb: client: reject userspace cifs.spnego descriptions (Asim Viladi Oglu Manizada) [Orabug: 39463671,39476931] {CVE-2026-46243}


author: Sherry Yang <sherry.yang@oracle.com> [6.12.0-204.92.4.el10uek]
changelog:
  - arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Rutland) [Orabug: 39548792,39674326] {CVE-2025-10263,CVE-2026-53354}
  - arm64: tlb: Add ARM64_WORKAROUND_REPEAT_TLBI_SYNC (Mark Rutland) [Orabug: 39548792] {CVE-2025-10263}
  - arm64: tlb: allow XZR argument to TLBI ops (Mark Rutland) [Orabug: 39548792] {CVE-2025-10263}
  - arm64: cputype: Add C1-Premium definitions (Mark Rutland) [Orabug: 39548792] {CVE-2025-10263}
  - arm64: cputype: Add C1-Ultra definitions (Mark Rutland) [Orabug: 39548792] {CVE-2025-10263}
  - net/rds: Make "rds_send_xmit" fairer (Gerd Rausch) [Orabug: 38144694]
  - net/rds: Schedule rds_send_worker if there's more work to do (Gerd Rausch) [Orabug: 38144694]
  - Revert "rds: Change return code from rds_send_xmit() when lock is taken" (Gerd Rausch) [Orabug: 38144694]
  - vfio/type1: optimize vfio_unpin_pages_remote() (Li Zhe) [Orabug: 39058056]
  - vfio/type1: introduce a new member has_rsvd for struct vfio_dma (Li Zhe) [Orabug: 39058056]
  - vfio/type1: batch vfio_find_vpfn() in function vfio_unpin_pages_remote() (Li Zhe) [Orabug: 39058056]
  - vfio/type1: optimize vfio_pin_pages_remote() (Li Zhe) [Orabug: 39058056]
  - mm: introduce num_pages_contiguous() (Li Zhe) [Orabug: 39058056]
  - vfio/type1: Use mapping page mask for pfnmaps (Alex Williamson) [Orabug: 39058056]
  - mm: Provide address mask in struct follow_pfnmap_args (Alex Williamson) [Orabug: 39058056]
  - vfio/type1: Use consistent types for page counts (Alex Williamson) [Orabug: 39058056]
  - vfio/type1: Use vfio_batch for vaddr_get_pfns() (Alex Williamson) [Orabug: 39058056]
  - vfio/type1: Convert all vaddr_get_pfns() callers to use vfio_batch (Alex Williamson) [Orabug: 39058056]
  - vfio/type1: Catch zero from pin_user_pages_remote() (Alex Williamson) [Orabug: 39058056]
  - rds: Drop rds conn in connect worker if not in down state. (Rohit Nair) [Orabug: 39179362]
  - mmc: dwcmshc_bf3_hw_reset: Log eMMC reset calls (Satyansh Shukla) [Orabug: 39341694]
  - net: lan743x: rename chip_rev to fpga_rev (Thangaraj Samynathan) [Orabug: 39369482]
  - net: lan743x: fix SGMII detection on PCI1xxxx B0+ during warm reset (Thangaraj Samynathan) [Orabug: 39369482]
  - net: microchip: lan743x: add ethtool nway_reset support (Nicolai Buchwitz) [Orabug: 39369482]
  - net: lan743x: implement ndo_hwtstamp_get() (Vladimir Oltean) [Orabug: 39369482]
  - net: lan743x: convert to ndo_hwtstamp_set() (Vladimir Oltean) [Orabug: 39369482]
  - net: lan743x: use netdev in lan743x_phylink_mac_link_down() (Russell King) [Orabug: 39369482]
  - net/rds: Add parentheses around conditional operator (Gerd Rausch) [Orabug: 39399490]
  - uek-rpm: avoid final module link in early FIPS symvers pass (Sherry Yang) [Orabug: 39454846]
  - net/ethernet/pensando: Add out-of-tree network drivers (Joseph Dobosenski) [Orabug: 39479413]
  - ima: kexec: move IMA log copy from kexec load to execute (Steven Chen) [Orabug: 39517375]
  - ima: kexec: skip IMA segment validation after kexec soft reboot (Steven Chen) [Orabug: 39517375]
  - rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (David Howells)
  - rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (David Howells)
  - drm/amd/pm/si: Disregard vblank time when no displays are connected (Timur Kristóf)
  - USB: serial: option: add missing RSVD(5) flag for Rolling RW135R-GL (Wanquan Zhong)
  - ksmbd: OOB read regression in smb_check_perm_dacl() ACE-walk loops (Ali Ganiyev)
  - USB: cdc-acm: Fix bit overlap and move quirk definitions to header (Guan Wentao)
  - media: rc: igorplugusb: fix control request setup packet (Henri A)
  - media: rc: ttusbir: fix inverted error logic (Oliver Neukum)
  - media: rc: fix race between unregister and urb/irq callbacks (Sean Young)
  - nfc: nxp-nci: i2c: use rising-edge IRQ on ACPI systems (Carl Lee)
  - bcache: fix uninitialized closure object (Mingzhe Zou)
  - xfrm: move policy_bydst RCU sync from per-netns .exit to .pre_exit (Usama Arif)
  - net/sched: cls_fw: fix NULL dereference of "old" filters before change() (Davide Caratti) [Orabug: 39622010] {CVE-2026-53080}
  - LTS version: v6.12.92 (Saeed Mirzamohammadi)
  - security/keys: fix missed RCU read section on lookup (Linus Torvalds)
  - landlock: Fix TCP handling of short AF_UNSPEC addresses (Matthieu Buffet)
  - LoongArch: kprobes: Fix handling of fatal unrecoverable recursions (Tiezhu Yang)
  - net: gro: don't merge zcopy skbs (Sabrina Dubroca) [Orabug: 39531651] {CVE-2026-46323}
  - pds_core: ensure null-termination for firmware version strings (Nikhil P. Rao)
  - net: mana: validate rx_req_idx to prevent out-of-bounds array access (Aditya Garg)
  - octeontx2-af: npc: Fix allmulticast skip logic for LBK and SDP VFs (Ratheesh Kannoth)
  - drm/xe/oa: Fix exec_queue leak on width check in stream open (Shuicheng Lin)
  - ASoC: cs35l56: Fix flushing of IRQ work in cs35l56_sdw_remove() (Richard Fitzgerald)
  - gpio: cdev: check if uAPI v2 config attributes are correctly zeroed (Bartosz Golaszewski)
  - gpiolib: cdev: use !mem_is_zero() instead of memchr_inv(s, 0, n) (Andy Shevchenko)
  - bpf, skmsg: fix verdict sk_data_ready racing with ktls rx (Xingwang Xiang)
  - net: ag71xx: check error for platform_get_irq (Rosen Penev)
  - Bluetooth: btmtk: fix urb->setup_packet leak in error paths (Jiajia Liu)
  - tracing: Avoid NULL return from hist_field_name() on truncation (David Carlier)
  - ALSA: seq: Serialize UMP output teardown with event_input (Zhang Cen)
  - wifi: mac80211: fix MLE defragmentation (Johannes Berg)
  - pds_core: fix debugfs_lookup dentry leak and error handling (Nikhil P. Rao)
  - pds_core: fix error handling in pdsc_devcmd_wait (Nikhil P. Rao)
  - bridge: mcast: Fix a possible use-after-free when removing a bridge port (Ido Schimmel)
  - net: bridge: Flush multicast groups when snooping is disabled (Petr Machata)
  - RDMA/rtrs: Fix use-after-free in path file creation cleanup (Guangshuo Li)
  - platform/x86: intel-vbtn: Check ACPI_HANDLE() against NULL (Rafael J. Wysocki)
  - platform/x86: intel-hid: Check ACPI_HANDLE() against NULL (Rafael J. Wysocki)
  - platform/x86: hp_accel: Check ACPI_COMPANION() against NULL (Rafael J. Wysocki)
  - platform/x86: adv_swbutton: Check ACPI_HANDLE() against NULL (Rafael J. Wysocki)
  - platform/surface: aggregator_registry: omit battery & AC nodes on Surface Laptop 7 (Oliver White)
  - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (Erni Sri Satya Vennela)
  - net: dsa: mt7530: preserve VLAN tags on trapped link-local frames (Daniel Golle)
  - net: dsa: mt7530: fix FDB entries not aging out with short timeout (Daniel Golle)
  - kbuild: pacman-pkg: make "rc" releases adhere to pacman versioning scheme (Viktor Jägersküpper)
  - drm/i915/dp: Fix readback for target_rr in Adaptive Sync SDP (Ankit Nautiyal)
  - ice: ptp: serialize E825 PHY timer start with PTP lock (Grzegorz Nitka)
  - wifi: ath11k: fix peer resolution on rx path when peer_id=0 (Matthew Leach)
  - drm/xe/pf: Fix CFI failure in debugfs access (Mohanram Meenakshisundaram)
  - drm/xe/vf: Fix signature of print functions (Michal Wajdeczko)
  - drm/xe/gsc: Fix double-free of managed BO in error path (Shuicheng Lin)
  - drm/msm/snapshot: fix dumping of the unaligned regions (Dmitry Baryshkov)
  - spi: mtk-snfi: Fix resource leak in mtk_snand_read_page_cache() (Felix Gu)
  - btrfs: fix squota accounting during enable generation (Boris Burkov)
  - io_uring/net: punt IORING_OP_BIND async if it needs file create (Jens Axboe)
  - ALSA: scarlett2: Add missing error check when initialise Autogain Status (Robertus Diawan Chris)
  - scsi: sd: Fix return code handling in sd_spinup_disk() (Mike Christie)
  - net/mlx5: Do not restore destination-less TC rules (Jeroen Massar)
  - tls: Preserve sk_err across recvmsg() when data has been copied (Chuck Lever)
  - x86/xen: Fix xen_e820_swap_entry_with_ram() (Juergen Gross)
  - net: phy: DP83TC811: add reading of abilities (Sven Schuchmann)
  - net: tls: prevent chain-after-chain in plain text SG (Jakub Kicinski)
  - net: tls: fix off-by-one in sg_chain entry count for wrapped sk_msg ring (Jakub Kicinski)
  - net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (Xiang Mei)
  - powerpc/time: Remove redundant preempt_disable|enable() calls from arch_irq_work_raise() (Sayali Patil)
  - drm/msm: Fix iommu_map_sgtable() return value check and avoid WARN (Mikko Perttunen)
  - drm/msm/dsi: don't dump registers past the mapped region (Dmitry Baryshkov)
  - ethtool: fix ethnl_bitmap32_not_zero() bit interval semantics (Chenguang Zhao)
  - net/smc: avoid NULL deref of conn->lnk in smc_msg_event tracepoint (Xiang Mei)
  - accel/qaic: Add overflow check to remap_pfn_range during mmap (Zack Mckevitt)
  - block: bio-integrity: Fix null-ptr-deref in bio_integrity_map_user() (Sungwoo Kim)
  - blk-integrity: enable p2p source and destination (Keith Busch)
  - blk-integrity: use simpler alignment check (Keith Busch)
  - block: drop direction param from bio_integrity_copy_user() (Caleb Sander)
  - HID: quirks: really enable the intended work around for appledisplay (Lukas Bulwahn)
  - block: recompute nr_integrity_segments in blk_insert_cloned_request (Casey Chen)
  - block: don't overwrite bip_vcnt in bio_integrity_copy_user() (David Carlier)
  - wifi: ath10k: skip WMI and beacon transmission when device is wedged (Kang Yang)
  - wifi: ath11k: fix error path leak in ath11k_tm_cmd_wmi_ftm() (Nicolas Escande)
  - wifi: ath11k: fix error path leaks in some WMI WOW calls (Nicolas Escande)
  - net: ethernet: cs89x0: remove stale CONFIG_MACH_MX31ADS reference (Ethan Nelson-Moore)
  - net: ethernet: cortina: Carry over frag counter (Linus Walleij)
  - net: ethernet: cortina: Drop half-assembled SKB (Andreas Haarmann-Thiemann)
  - net: ethernet: cortina: Make RX SKB per-port (Linus Walleij)
  - netfs: Fix folio->private handling in netfs_perform_write() (David Howells)
  - netfs: Remove unnecessary references to pages (Matthew Wilcox)
  - netfs: Fix a few minor bugs in netfs_page_mkwrite() (Matthew Wilcox)
  - netfs: Fix partial invalidation of streaming-write folio (David Howells)
  - netfs: Fix early put of sink folio in netfs_read_gaps() (David Howells)
  - netfs: Fix write streaming disablement if fd open O_RDWR (David Howells)
  - netfs: Fix potential deadlock in write-through mode (David Howells)
  - netfs: Fix streaming write being overwritten (David Howells)
  - netfs: Defer the emission of trace_netfs_folio() (David Howells)
  - netfs: Fix netfs_invalidate_folio() to clear dirty bit if all changes gone (David Howells)
  - netfs: Fix overrun check in netfs_extract_user_iter() (David Howells)
  - netfs: fix VM_BUG_ON_FOLIO() issue in netfs_write_begin() call (Viacheslav Dubeyko)
  - powerpc: fix dead default for GUEST_STATE_BUFFER_TEST (Julian Braha)
  - tcp: Fix out-of-bounds access for twsk in tcp_ao_established_key(). (Kuniyuki Iwashima)
  - zonefs: handle integer overflow in zonefs_fname_to_fno (Johannes Thumshirn)
  - irq_work: Fix use-after-free in irq_work_single() on PREEMPT_RT (Jiayuan Chen)
  - nsfs: fix wrong error code returned for pidns ioctls (Zhihao Cheng)
  - ublk: reject max_sectors smaller than PAGE_SECTORS in parameter validation (Ming Lei)
  - irqchip/ath79-cpu: Remove unused function (Rosen Penev)
  - NFSD: Fix infinite loop in layout state revocation (Chuck Lever)
  - phy: marvell: mvebu-a3700-utmi: fix incorrect USB2_PHY_CTRL register access (Gabor Juhos)
  - net: lan966x: avoid unregistering netdev on register failure (Myeonghun Pak)
  - ice: fix locking in ice_dcb_rebuild() (Bart Van Assche)
  - ice: fix setting RSS VSI hash for E830 (Marcin Szycik)
  - tcp: Fix imbalanced icsk_accept_queue count. (Kuniyuki Iwashima)
  - test_kprobes: clear kprobes between test runs (Martin Kaiser)
  - kprobes: skip non-symbol addresses in kprobe_add_ksym_blacklist() (Jianpeng Chang)
  - netfilter: x_tables: unregister the templates first (Florian Westphal)
  - ALSA: hda: cs35l41: Put ACPI device on missing physical node (Shuhao Fu)
  - ALSA: hda: cs35l56: Put ACPI device after setting companion (Shuhao Fu)
  - ARM: integrator: Fix early initialization (Guenter Roeck)
  - firmware: arm_ffa: Fix sched-recv callback partition lookup (Sudeep Holla)
  - firmware: arm_ffa: Align RxTx buffer size before mapping (Sudeep Holla)
  - pinctrl: qcom: Fix wakeirq map by removing disconnected irqs for sm8150 (Maulik Shah)
  - kunit: config: KUNIT_DEBUGFS should depend on DEBUG_FS (David Gow)
  - kunit: config: Enable KUNIT_DEBUGFS by default (David Gow)
  - riscv: mm: Fixup no5lvl failure when vaddr is invalid (Guo Ren)
  - firmware: arm_ffa: Unregister bus notifier on teardown for FF-A v1.0 (Sudeep Holla)
  - firmware: arm_ffa: Allow multiple UUIDs per partition to register SRI callback (Sudeep Holla)
  - firmware: arm_ffa: Remove unnecessary declaration of ffa_partitions_cleanup() (Sudeep Holla)
  - firmware: arm_ffa: Unregister the FF-A devices when cleaning up the partitions (Sudeep Holla)
  - firmware: arm_ffa: Refactor addition of partition information into XArray (Viresh Kumar)
  - firmware: arm_ffa: Fix per-vcpu self notifications handling in workqueue (Sudeep Holla)
  - firmware: arm_ffa: Skip free_pages on RX buffer alloc failure (Sudeep Holla)
  - firmware: arm_ffa: Check for NULL FF-A ID table while driver registration (Sudeep Holla)
  - HID: uclogic: Fix regression of input name assignment (Takashi Iwai)
  - pinctrl: renesas: rzg2l: Fix incorrect PUPD register offset for high pins during suspend/resume (Biju Das)
  - ARM: dts: renesas: rskrza1: Drop superfluous cells (Marek Vasut)
  - ARM: dts: renesas: genmai: Drop superfluous cells (Marek Vasut)
  - hwmon: (pmbus/adm1266) reject short block-read responses in the GPIO accessors (Abdurrahman Hussain)
  - hwmon: (pmbus/adm1266) register the nvmem device after pmbus_do_probe() (Abdurrahman Hussain)
  - hwmon: (pmbus/adm1266) register the gpio_chip after pmbus_do_probe() (Abdurrahman Hussain)
  - hwmon: (pmbus/adm1266) don't clobber GPIO bits before PDIO read in get_multiple (Abdurrahman Hussain)
  - hwmon: (pmbus/adm1266) cap PDIO scan in get_multiple at ADM1266_PDIO_NR (Abdurrahman Hussain)
  - hwmon: (pmbus/adm1266) bounce blackbox records through a protocol-sized buffer (Abdurrahman Hussain)
  - hwmon: (pmbus/adm1266) include PEC byte in pmbus_block_xfer read buffer (Abdurrahman Hussain)
  - hwmon: (pmbus/adm1266) reject implausible blackbox record_count (Abdurrahman Hussain)
  - hwmon: (pmbus/adm1266) seed timestamp from the real-time clock (Abdurrahman Hussain)
  - batman-adv: tt: fix negative tt_buff_len (Sven Eckelmann)
  - batman-adv: tt: fix negative last_changeset_len (Sven Eckelmann)
  - batman-adv: tp_meter: fix race condition in send error reporting (Sven Eckelmann)
  - batman-adv: tp_meter: fix tp_vars reference leak in receiver shutdown (Sven Eckelmann)
  - batman-adv: tp_meter: avoid use of uninit sender vars (Sven Eckelmann) [Orabug: 39619345] {CVE-2026-52931}
  - batman-adv: bla: fix report_work leak on backbone_gw purge (Sven Eckelmann)
  - batman-adv: frag: disallow unicast fragment in fragment (Sven Eckelmann) [Orabug: 39619273] {CVE-2026-52916}
  - batman-adv: fix tp_meter counter underflow during shutdown (Luxiao Xu) [Orabug: 39619286] {CVE-2026-52919}
  - batman-adv: fix fragment reassembly length accounting (Ruide Cao) [Orabug: 39619265] {CVE-2026-52914}
  - batman-adv: dat: handle forward allocation error (Sven Eckelmann)
  - batman-adv: clear current gateway during teardown (Ruijie Li) [Orabug: 39619322] {CVE-2026-52926}
  - batman-adv: mcast: fix use-after-free in orig_node RCU release (Sven Eckelmann)
  - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (Harry Wentland)
  - drm/amd/display: Validate GPIO pin LUT table size before iterating (Harry Wentland)
  - drm/amd/display: Fix integer overflow in bios_get_image() (Harry Wentland)
  - drm/bridge: megachips: remove bridge when irq request fails (Osama Abdelkader)
  - drm/bridge: it66121: acquire reset GPIO in probe (Julien Chauveau)
  - drm/amdgpu/vpe: Force collaborate sync after TRAP (Alan Liu)
  - drm/virtio: use uninterruptible resv lock for plane updates (Deepanshu Kartikey)
  - device property: set fwnode->secondary to NULL in fwnode_init() (Bartosz Golaszewski)
  - LoongArch: Remove unused code to avoid build warning (Huacai Chen)
  - RDMA/siw: Reject MPA FPDU length underflow before signed receive math (Michael Bommarito)
  - spi: ti-qspi: fix use-after-free after DMA setup failure (Johan Hovold)
  - spi: sprd: fix error pointer deref after DMA setup failure (Johan Hovold)
  - spi: ep93xx: fix error pointer deref after DMA setup failure (Johan Hovold)
  - scsi: isci: Fix use-after-free in device removal path (Michael Bommarito)
  - phy: tegra: xusb: Fix per-pad high-speed termination calibration (Wayne Chang)
  - spi: qup: fix error pointer deref after DMA setup failure (Johan Hovold)
  - drm/bridge: chipone-icn6211: use devm_drm_bridge_add in i2c probe (Osama Abdelkader)
  - riscv: kvm: return SBI_ERR_FAILURE for pmu_snapshot_set_shmem() when OOM (Osama Abdelkader)
  - KVM: arm64: vgic: Free private_irqs when init fails after allocation (Michael Bommarito)
  - KVM: arm64: vgic-its: Reject restored DTE with out-of-range num_eventid_bits (Michael Bommarito)
  - arm64: probes: Handle probes on hinted conditional branch instructions (Vladimir Murzin)
  - tracing: Do not call map->ops->elt_free() if elt_alloc() fails (Masami Hiramatsu)
  - wifi: mac80211: consume only present negotiated TTLM maps (Michael Bommarito)
  - af_unix: Fix UAF read of tail->len in unix_stream_data_wait() (Jann Horn)
  - wifi: cfg80211: advance loop vars in cfg80211_merge_profile() (John Walker)
  - ice: restore PTP Rx timestamp config after ethtool set-channels (Grzegorz Nitka)
  - ice: fix setting promisc mode while adding VID filter (Marcin Szycik)
  - octeontx2-af: CGX: add bounds check to cgx_speed_mbps index (Sam Daly)
  - lsm: hold cred_guard_mutex for lsm_set_self_attr() (Stephen Smalley)
  - rbd: eliminate a race in lock_dwork draining on unmap (Ilya Dryomov)
  - ixgbevf: fix use-after-free in VEPA multicast source pruning (Michael Bommarito)
  - ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (Michael Bommarito)
  - wifi: ath11k: clear shared SRNG pointer state on restart (Kyle Farnung)
  - vsock/virtio: reset connection on receiving queue overflow (Stefano Garzarella)
  - vsock/vmci: fix UAF when peer resets connection during handshake (Minh Nguyen)
  - ipv6: ioam: add NULL check for idev in ipv6_hop_ioam() (Justin Iurman)
  - ring-buffer: Fix reporting of missed events in iterator (Steven Rostedt)
  - qed: fix double free in qed_cxt_tables_alloc() (Dawei Feng)
  - l2tp: use list_del_rcu in l2tp_session_unhash (Michael Bommarito)
  - fs/ntfs3: handle attr_set_size() errors when truncating files (Konstantin Komarov)
  - cgroup/cpuset: Reset DL migration state on can_attach() failure (Zhangguopeng)
  - sched_ext: Avoid UAF in scx_root_enable_workfn() init failure path (Tejun Heo)
  - sched_ext: Fix missing warning in scx_set_task_state() default case (Samuele Mariotti)
  - netfilter: nft_inner: Fix IPv6 inner_thoff desync (Yizhou Zhao) [Orabug: 39489532] {CVE-2026-46244}
  - netfilter: ipset: stop hash:* range iteration at end (Nan Li) [Orabug: 39619298] {CVE-2026-52921}
  - netfilter: nf_queue: hold bridge skb->dev while queued (Haoze Xie) [Orabug: 39619254] {CVE-2026-52912}
  - netfilter: ip6t_hbh: reject oversized option lists (Zhengchuan Liang) [Orabug: 39619269] {CVE-2026-52915}
  - net: pse-pd: fix sign on -ENOENT check in of_load_pse_pis() (Jonas Jelonek)
  - net: ifb: report ethtool stats over num_tx_queues (Michael Bommarito)
  - net: bcmgenet: keep RBUF EEE/PM disabled (Nicolai Buchwitz)
  - phonet/pep: disable BH around forwarded sk_receive_skb() (Zijing Yin)
  - Bluetooth: serialize accept_q access (Jiexun Wang) [Orabug: 39619282] {CVE-2026-52918}
  - Bluetooth: MGMT: validate Add Extended Advertising Data length (Michael Bommarito)
  - Bluetooth: L2CAP: ecred_reconfigure: send packed pdu, not stack pointer (Michael Bommarito)
  - Bluetooth: hci_uart: fix UAFs and race conditions in close and init paths (Mingyu Wang) [Orabug: 39523053] {CVE-2026-46275}
  - Bluetooth: bnep: Fix UAF read of dev->name (Jann Horn)
  - Bluetooth: ISO: drop ISO_END frames received without prior ISO_START (David Carlier)
  - Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del() (Safa Karakuş) [Orabug: 39681269] {CVE-2026-53357}
  - net: wwan: iosm: fix potential memory leaks in ipc_imem_init() (Abdun Nihaal)
  - selftests/mm: run_vmtests.sh: fix destructive tests invocation (Luiz Capitulino)
  - mm/memory_hotplug: fix memory block reference leak on remove (Muchun Song)
  - ipv6: ioam: refresh hdr pointer before ioam6_event() (Justin Iurman)
  - drivers/base/memory: fix memory block reference leak in poison accounting (Muchun Song)
  - io_uring/waitid: clear waitid info before copying it to userspace (Heechan Kang) [Orabug: 39531618] {CVE-2026-46315}
  - efi: Allocate runtime workqueue before ACPI init (Ard Biesheuvel)
  - ALSA: asihpi: Fix potential OOB array access at reading cache (Takashi Iwai)
  - ALSA: pcm: Don't setup bogus iov_iter for silencing (Takashi Iwai)
  - ALSA: ua101: Reject too-short USB descriptors (Cássio Gabriel)
  - hwmon: (pmbus/adm1266) widen blackbox-info buffer to I2C_SMBUS_BLOCK_MAX (Abdurrahman Hussain)
  - smb/server: promote S_DEL_ON_CLS to S_DEL_PENDING when close (Chenxiaosong)
  - smb: client: use data_len for SMB2 READ encrypted folioq copy (Jeremy Erazo)
  - smb: client: require net admin for CIFS SWN netlink (Michael Bommarito)
  - ksmbd: validate SID in parent security descriptor during ACL inheritance (Junyi Liu)
  - ksmbd: fix null pointer dereference in compare_guid_key() (Jeremy Laratro)
  - mm/damon/sysfs-schemes: call missing mem_cgroup_iter_break() (Seongjae Park)
  - sysfs: don't remove existing directory on update failure (Greg Kroah-Hartman)
  - hwmon: (pmbus/core) Protect regulator operations with mutex (Guenter Roeck) [Orabug: 39250878] {CVE-2026-31486}
  - Revert "ice: Remove jumbo_remove step from TX path" (Sasha Levin)
  - Revert "ice: fix double-free of tx_buf skb" (Sasha Levin)
  - perf parse-events: Expose/rename config_term_name (Ian Rogers)
  - drm/imagination: Synchronize interrupts before suspending the GPU (Alessio Belle)
  - af_unix: Give up GC if MSG_PEEK intervened. (Kuniyuki Iwashima) [Orabug: 39131100] {CVE-2026-23394}
  - ksmbd: close durable scavenger races against m_fp_list lookups (Daemyung Kang)
  - Revert "x86/vdso: Fix output operand size of RDPID" (Sasha Levin)
  - spi: spi-dw-dma: fix print error log when wait finish transaction (Vladimir Yakovlev)
  - bridge: mrp: reject zero test interval to avoid OOM panic (Xiang Mei)
  - Revert "perf tool_pmu: Factor tool events into their own PMU" (Sasha Levin)
  - Revert "perf python: Add parse_events function" (Sasha Levin)
  - Revert "perf tool_pmu: Fix aggregation on duration_time" (Sasha Levin)
  - Revert "perf cgroup: Update metric leader in evlist__expand_cgroup" (Sasha Levin)
  - s390/debug: Reject zero-length input before trimming a newline (Pengpeng Hou)
  - drm/xe/hdcp: Add NULL check for media_gt in intel_hdcp_gsc_check_status() (Gustavo Sousa) [Orabug: 39460652] {CVE-2026-46216}
  - ksmbd: validate owner of durable handle on reconnect (Namjae Jeon)
  - mptcp: pm: ADD_ADDR rtx: free sk if last (Matthieu Baerts) [Orabug: 39460460] {CVE-2026-46170}
  - mptcp: pm: ADD_ADDR rtx: always decrease sk refcount (Matthieu Baerts) [Orabug: 39460400] {CVE-2026-46158}
  - mptcp: pm: ADD_ADDR rtx: allow ID 0 (Matthieu Baerts)
  - mptcp: sync the msk->sndbuf at accept() time (Gang Yan)
  - LTS version: v6.12.91 (Saeed Mirzamohammadi)
  - netfs: Fix potential uninitialised var in netfs_extract_user_iter() (David Howells)
  - mptcp: pm: ADD_ADDR rtx: resched blocked ADD_ADDR quicker (Matthieu Baerts)
  - mptcp: pm: ADD_ADDR rtx: fix potential data-race (Matthieu Baerts) [Orabug: 39460319] {CVE-2026-46137}
  - mptcp: pm: kernel: correctly retransmit ADD_ADDR ID 0 (Matthieu Baerts)
  - spi: sifive: fix controller deregistration (Johan Hovold)
  - spi: sifive: Simplify clock handling with devm_clk_get_enabled() (Pei Xiao)
  - f2fs: fix false alarm of lockdep on cp_global_sem lock (Chao Yu)
  - f2fs: fix incorrect file address mapping when inline inode is unwritten (Yongpeng Yang)
  - mptcp: fix rx timestamp corruption on fastopen (Paolo Abeni)
  - mptcp: drop __mptcp_fastopen_gen_msk_ackseq() (Paolo Abeni)
  - mptcp: pm: prio: skip closed subflows (Matthieu Baerts)
  - sched_ext: Guard scx_dsq_move() against NULL kit->dsq after failed iter_new (Tejun Heo)
  - RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (Jason Gunthorpe)
  - btrfs: do not mark inode incompressible after inline attempt fails (Qu Wenruo)
  - smb: client: Use FullSessionKey for AES-256 encryption key derivation (Piyush Sachdeva)
  - btrfs: fix missing last_unlink_trans update when removing a directory (Filipe Manana) [Orabug: 39460409] {CVE-2026-46160}
  - btrfs: use btrfs inodes in btrfs_rmdir() to avoid so much usage of BTRFS_I() (Filipe Manana)
  - btrfs: use inode already stored in local variable at btrfs_rmdir() (Filipe Manana)
  - drm/v3d: Reject empty multisync extension to prevent infinite loop (Ashutosh Desai)
  - eventfs: Use list_add_tail_rcu() for SRCU-protected children list (David Carlier)
  - iommufd: Fix return value of iommufd_fault_fops_write() (Zhenzhong Duan)
  - drm/gma500/oaktrail_lvds: fix i2c adapter leaks on init (Johan Hovold)
  - drm/gma500/oaktrail_lvds: fix hang on init failure (Johan Hovold) [Orabug: 39653188] {CVE-2026-53279}
  - drm/gma500/oaktrail_hdmi: fix i2c adapter leak on setup (Johan Hovold)
  - drm/xe/dma-buf: handle empty bo and UAF races (Matthew Auld) [Orabug: 39621574] {CVE-2026-52951}
  - drm/panfrost: Fix wait_bo ioctl leaking positive return from dma_resv_wait_timeout() (Gyeyoung Baek)
  - drm/i915: skip __i915_request_skip() for already signaled requests (Sebastian Brzezinka)
  - iommu/vt-d: Disable DMAR for Intel Q35 IGFX (Naval Alcalá)
  - libceph: handle rbtree insertion error in decode_choose_args() (Raphael Zimmer) [Orabug: 39621579] {CVE-2026-52954}
  - libceph: Fix potential out-of-bounds access in crush_decode() (Raphael Zimmer) [Orabug: 39621583] {CVE-2026-52955}
  - libceph: Fix potential null-ptr-deref in decode_choose_args() (Raphael Zimmer) [Orabug: 39621591] {CVE-2026-52957}
  - libceph: Fix potential out-of-bounds access in osdmap_decode() (Raphael Zimmer) [Orabug: 39621595] {CVE-2026-52958}
  - irqchip/riscv-imsic: Clear interrupt move state during CPU offlining (Yong-Xuan Wang)
  - netfs: fix error handling in netfs_extract_user_iter() (Paulo Alcantara)
  - powerpc/warp: Fix error handling in pika_dtm_thread (Ma Ke)
  - io-wq: check that the predecessor is hashed in io_wq_remove_pending() (Nicholas Carlini) [Orabug: 39523049] {CVE-2026-46274}
  - ceph: fix BUG_ON in __ceph_build_xattrs_blob() due to stale blob size (Viacheslav Dubeyko) [Orabug: 39621606] {CVE-2026-52961}
  - ceph: fix a buffer leak in __ceph_setxattr() (Viacheslav Dubeyko) [Orabug: 39621608] {CVE-2026-52962}
  - ALSA: usb-audio: Bound MIDI endpoint descriptor scans (Cássio Gabriel) [Orabug: 39621612] {CVE-2026-52963}
  - ALSA: usb-audio: Bound MIDI 2.0 endpoint descriptor scans (Cássio Gabriel) [Orabug: 39621616] {CVE-2026-52964}
  - drm/i915/dp: Fix VSC dynamic range signaling for RGB formats (Chaitanya Kumar Borah)
  - drm/loongson: Use managed KMS polling (Myeonghun Pak)
  - smb/client: fix possible infinite loop and oob read in symlink_data() (Ye Bin) [Orabug: 39621621] {CVE-2026-52967}
  - Bluetooth: btmtk: accept too short WMT FUNC_CTRL events (Pauli Virtanen)
  - netfilter: nf_tables: unconditionally bump set->nelems before insertion (Pablo Neira Ayuso) [Orabug: 39110649,39562729] {CVE-2026-23272}
  - KVM: x86: Fix Xen hypercall tracepoint argument assignment (Maqiang)
  - KVM: s390: pci: fix GAIT table indexing due to double-scaling pointer arithmetic (Junrui Luo)
  - KVM: Reject wrapped offset in kvm_reset_dirty_gfn() (Aaron Sacks) [Orabug: 39621627] {CVE-2026-52969}
  - audit: enforce AUDIT_LOCKED for AUDIT_TRIM and AUDIT_MAKE_EQUIV (Sergio Correia)
  - net: atlantic: preserve PCI wake-from-D3 on shutdown when WOL enabled (Zoran Ilievski)
  - netfilter: nft_ct: fix missing expect put in obj eval (Li Xiasong) [Orabug: 39621631] {CVE-2026-52970}
  - Revert "ACPI: CPPC: Adjust debug messages in amd_set_max_freq_ratio() to warn" (Mario Limonciello)
  - audit: fix incorrect inheritable capability in CAPSET records (Sergio Correia) [Orabug: 39653208] {CVE-2026-53287}
  - netfilter: nf_conntrack_sip: get helper before allocating expectation (Li Xiasong)
  - workqueue: Fix wq->cpu_pwq leak in alloc_and_link_pwqs() WQ_UNBOUND path (Breno Leitao)
  - i40e: Cleanup PTP pins on probe failure (Matt Vollrath)
  - crypto: af_alg - Cap AEAD AD length to 0x80000000 (Herbert Xu) [Orabug: 39655981] {CVE-2026-52972}
  - page_pool: fix incorrect mp_ops error handling (Mina Almasry)
  - netpoll: pass buffer size to egress_dev() to avoid MAC truncation (Breno Leitao)
  - netpoll: Extract IPv6 address retrieval function (Breno Leitao)
  - net/sched: sch_pie: annotate more data-races in pie_dump_stats() (Eric Dumazet)
  - perf tool_pmu: Fix aggregation on duration_time (Ian Rogers)
  - iommu/amd: Put list_add/del(dev_data) back under the domain->lock (Jason Gunthorpe)
  - iommu/amd: Reorder attach device code (Vasant Hegde)
  - net: bcmgenet: fix leaking free_bds (Justin Chen) [Orabug: 39622040] {CVE-2026-53087}
  - net: bcmgenet: Initialize u64 stats seq counter (Ryo Takakura)
  - PCI: Initialize temporary device in new_id_store() (Samiullah Khawaja)
  - ntfs: ->d_compare() must not block (Al Viro)
  - LoongArch: KVM: Compile switch.S directly into the kernel (Xianglai Li)
  - smb: client: fix OOB reads parsing symlink error response (Greg Kroah-Hartman) [Orabug: 39273652] {CVE-2026-31613}
  - smb: client: correctly handle ErrorContextData as a flexible array (Liang Jie)
  - arm64: Reserve an extra page for early kernel mapping (Zhaoyang Huang)
  - net/sched: cls_flower: revert unintended changes (Paolo Abeni)
  - sfc: fix error code in efx_devlink_info_running_versions() (Dan Carpenter)
  - net: tls: fix strparser anchor skb leak on offload RX setup failure (Jakub Kicinski) [Orabug: 39621641] {CVE-2026-52974}
  - ice: fix NULL pointer dereference in ice_reset_all_vfs() (Petr Oros) [Orabug: 39653214] {CVE-2026-53289}
  - iavf: add VIRTCHNL_OP_ADD_VLAN to success completion handler (Petr Oros)
  - iavf: wait for PF confirmation before removing VLAN filters (Petr Oros)
  - iavf: stop removing VLAN filters from PF on interface down (Petr Oros)
  - iavf: rename IAVF_VLAN_IS_NEW to IAVF_VLAN_ADDING (Petr Oros)
  - page_pool: fix memory-provider leak in page_pool_create_percpu() error path (Hasan Basbunar)
  - net: page_pool: create hooks for custom memory providers (Pavel Begunkov)
  - page_pool: Set `dma_sync` to false for devmem memory provider (Samiullah Khawaja)
  - drm/xe/gsc: Fix BO leak on error in query_compatibility_version() (Shuicheng Lin)
  - drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (Shuicheng Lin) [Orabug: 39621650] {CVE-2026-52976}
  - drm/xe/debugfs: Correct printing of register whitelist ranges (Matt Roper)
  - drm/amd/display: Read EDID from VBIOS embedded panel info (Timur Kristóf)
  - drm/amd/display: Allow DCE link encoder without AUX registers (Timur Kristóf)
  - futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Sebastian Andrzej Siewior) [Orabug: 39621654] {CVE-2026-52977}
  - ALSA: hda: cs35l56: Fix uninitialized value in cs35l56_hda_read_acpi() (Richard Fitzgerald)
  - ALSA: hda/conexant: Fix missing error check for jack detection (Wangdicheng) [Orabug: 39653219] {CVE-2026-53291}
  - ALSA: hda/conexant: Renaming the codec with device ID 0x1f86 and 0x1f87 (Wangdicheng)
  - netconsole: propagate device name truncation in dev_name_store() (Breno Leitao)
  - net/sched: sch_cake: annotate data-races in cake_dump_stats() (V) (Eric Dumazet)
  - bareudp: fix NULL pointer dereference in bareudp_fill_metadata_dst() (Weiming Shi) [Orabug: 39451516] {CVE-2026-45846}
  - sctp: discard stale INIT after handshake completion (Xin Long)
  - netfilter: skip recording stale or retransmitted INIT (Xin Long)
  - ASoC: codecs: ab8500: Fix casting of private data (Christian A. Ehrhardt)
  - drm/amdgpu/jpeg: set no_user_fence for JPEG v5.0.0 ring (Yinjie Yao)
  - drm/amdgpu/jpeg: set no_user_fence for JPEG v4.0.5 ring (Yinjie Yao)
  - drm/amdgpu/jpeg: set no_user_fence for JPEG v4.0.3 ring (Yinjie Yao)
  - drm/amdgpu/jpeg: set no_user_fence for JPEG v4.0 ring (Yinjie Yao)
  - drm/amdgpu/jpeg: set no_user_fence for JPEG v3.0 ring (Yinjie Yao)
  - drm/amdgpu/jpeg: set no_user_fence for JPEG v2.5 ring (Yinjie Yao)
  - drm/amdgpu/jpeg: set no_user_fence for JPEG v2.0 ring (Yinjie Yao)
  - drm/amdgpu/vcn: set no_user_fence for VCN v5.0.0 enc ring (Yinjie Yao)
  - drm/amdgpu/vcn: set no_user_fence for VCN v4.0.5 enc ring (Yinjie Yao)
  - drm/amdgpu/vcn: set no_user_fence for VCN v4.0.3 enc ring (Yinjie Yao)
  - drm/amdgpu/vcn: set no_user_fence for VCN v3.0 enc/dec rings (Yinjie Yao)
  - drm/amdgpu/vcn: set no_user_fence for VCN v2.5 enc/dec rings (Yinjie Yao)
  - drm/amdgpu/vcn: set no_user_fence for VCN v2.0 enc/dec rings (Yinjie Yao)
  - net: phy: dp83869: fix setting CLK_O_SEL field. (Heiko Schocher)
  - net: mctp i2c: check length before marking flow active (William A. Kennington III)
  - sched/fair: Clear rel_deadline when initializing forked entities (Zicheng Qu) [Orabug: 39621662] {CVE-2026-52980}
  - ALSA: usb-audio: Fix potential leak of pd at parsing UAC3 streams (Takashi Iwai)
  - netpoll: fix IPv6 local-address corruption (Breno Leitao)
  - netpoll: extract IPv4 address retrieval into helper function (Breno Leitao)
  - netpoll: Extract carrier wait function (Breno Leitao)
  - netconsole: allow selection of egress interface via MAC address (Uday Shankar)
  - net, treewide: define and use MAC_ADDR_STR_LEN (Uday Shankar)
  - tcp: make probe0 timer handle expired user timeout (Altan Hacigumus)
  - neigh: let neigh_xmit take skb ownership (Florian Westphal) [Orabug: 39621665] {CVE-2026-52981}
  - net/sched: taprio: fix NULL pointer dereference in class dump (Weiming Shi) [Orabug: 39451513] {CVE-2026-45845}
  - NFC: trf7970a: Ignore antenna noise when checking for RF field (Paul Geurts)
  - net: usb: rtl8150: free skb on usb_submit_urb() failure in xmit (Dandan Zhang)
  - net: usb: rtl8150: fix use-after-free in rtl8150_start_xmit() (Jun Zhan) [Orabug: 39621669] {CVE-2026-52982}
  - vrf: Fix a potential NPD when removing a port from a VRF (Ido Schimmel) [Orabug: 39619317] {CVE-2026-52925}
  - net/sched: sch_fq_pie: annotate data-races in fq_pie_dump_stats() (Eric Dumazet)
  - net/sched: sch_choke: annotate data-races in choke_dump_stats() (Eric Dumazet)
  - net/sched: netem: check for negative latency and jitter (Stephen Hemminger)
  - net/sched: netem: fix slot delay calculation overflow (Stephen Hemminger)
  - net/sched: netem: validate slot configuration (Stephen Hemminger)
  - net/sched: netem: only reseed PRNG when seed is explicitly provided (Stephen Hemminger)
  - net/sched: netem: fix queue limit check to include reordered packets (Stephen Hemminger) [Orabug: 39621676] {CVE-2026-52984}
  - net/sched: netem: fix probability gaps in 4-state loss model (Stephen Hemminger)
  - netdevsim: zero initialize struct iphdr in dummy sk_buff (Nikola Z. Ivanov) [Orabug: 39621680] {CVE-2026-52985}
  - cdrom, scsi: sr: propagate read-only status to block layer via set_disk_ro() (Daan De Meyer)
  - drm/sysfb: ofdrm: fix PCI device reference leaks (Yuho Choi)
  - spi: rockchip: Read ISR, not IMR, to detect cs-inactive IRQ (John Madieu)
  - ASoC: amd: acp: Add DMI quirk for Valve Steam Deck OLED (Guilherme G. Piccoli)
  - netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [Orabug: 39621684] {CVE-2026-52986}
  - netfilter: xt_policy: fix strict mode inbound policy matching (Jiexun Wang) [Orabug: 39619292] {CVE-2026-52920}
  - drm/amdgpu/gfx6: Support harvested SI chips with disabled TCCs (v2) (Timur Kristóf)
  - drm/amdgpu/uvd3.1: Don't validate the firmware when already validated (Timur Kristóf)
  - drm/amdgpu: fix spelling typos (Alexandre Demers)
  - drm/amdgpu: fix AMDGPU_INFO_READ_MMR_REG (Christian König) [Orabug: 39653227] {CVE-2026-53293}
  - drm/amdgpu/gmc: Fix AMDGPU_GART_PLACEMENT_LOW to not overlap with VRAM (Timur Kristóf)
  - nvme-pci: fix missed admin queue sq doorbell write (Keith Busch)
  - netfilter: arp_tables: fix IEEE1394 ARP payload parsing (Pablo Neira Ayuso) [Orabug: 39451505] {CVE-2026-45844}
  - nvmet-tcp: propagate nvmet_tcp_build_pdu_iovec() errors to its callers (Maurizio Lombardi) [Orabug: 39622228] {CVE-2026-52989}
  - tracing: branch: Fix inverted check on stat tracer registration (Breno Leitao)
  - cgroup: Increment nr_dying_subsys_* from rmdir context (Petr Malat)
  - btrfs: fix double-decrement of bytes_may_use in submit_one_async_extent() (Mark Harmstone)
  - fsnotify: fix inode reference leak in fsnotify_recalc_mask() (Amir Goldstein) [Orabug: 39621693] {CVE-2026-52990}
  - mailbox: mailbox-test: make data_ready a per-instance variable (Wolfram Sang)
  - mailbox: mailbox-test: initialize struct earlier (Wolfram Sang)
  - mailbox: mailbox-test: don't free the reused channel (Wolfram Sang)
  - mailbox: add sanity check for channel array (Wolfram Sang) [Orabug: 39653233] {CVE-2026-53295}
  - cgroup/rdma: fix integer overflow in rdmacg_try_charge() (Tao Cui)
  - mailbox: mailbox-test: free channels on probe error (Wolfram Sang)
  - mailbox: mtk-cmdq: Fix CURR and END addr for task insert case (Jason-JH Lin)
  - fbdev: offb: fix PCI device reference leak on probe failure (Yuho Choi)
  - kbuild: builddeb - avoid recompiles for non-cross-compiles (Mathias Krause)
  - rtc: abx80x: Disable alarm feature if no interrupt attached (Anthony Pighin)
  - fs/adfs: validate nzones in adfs_validate_bblk() (Bae Yeonju)
  - vhost_net: fix sleeping with preempt-disabled in vhost_net_busy_poll() (Kohei Enju)
  - tipc: fix double-free in tipc_buf_append() (Lee Jones) [Orabug: 39621706] {CVE-2026-52993}
  - nfp: fix swapped arguments in nfp_encode_basic_qdr() calls (Alexey Kodanev)
  - virtio_net: sync rss_trailer.max_tx_vq on queue_pairs change via VQ_PAIRS_SET (Brett Creeley)
  - virtio_net: Use new RSS config structs (Akihiko Odaki)
  - virtio_net: Fix endian with virtio_net_ctrl_rss (Akihiko Odaki)
  - virtio_net: Split struct virtio_net_rss_config (Akihiko Odaki)
  - net: airoha: Move ndesc initialization at end of airoha_qdma_init_rx_queue() (Lorenzo Bianconi)
  - net: dsa: realtek: rtl8365mb: fix mode mask calculation (Mieczyslaw Nalewaj)
  - net/sched: sch_sfb: annotate data-races in sfb_dump_stats() (Eric Dumazet)
  - net/sched: sch_red: annotate data-races in red_dump_stats() (Eric Dumazet)
  - net/sched: sch_fq_codel: remove data-races from fq_codel_dump_stats() (Eric Dumazet)
  - net/sched: sch_pie: annotate data-races in pie_dump_stats() (Eric Dumazet)
  - net_sched: sch_hhf: annotate data-races in hhf_dump_stats() (Eric Dumazet)
  - ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jacob Keller)
  - ice: fix timestamp interrupt configuration for E825C (Grzegorz Nitka)
  - ksmbd: scope conn->binding slowpath to bound sessions only (Hyunwoo Kim)
  - ksmbd: fix durable fd leak on ClientGUID mismatch in durable v2 open (Daemyung Kang)
  - ksmbd: destroy async_ida in ksmbd_conn_free() (Daemyung Kang)
  - ksmbd: destroy tree_conn_ida in ksmbd_session_destroy() (Daemyung Kang)
  - pwm: atmel-tcb: Cache clock rates and mark chip as atomic (Sangyun Kim)
  - arm64: dts: meson-gxl-p230: fix ethernet PHY interrupt number (Yan Jun)
  - slip: bound decode() reads against the compressed packet length (Weiming Shi) [Orabug: 39451499] {CVE-2026-45843}
  - slip: reject VJ receive packets on instances with no rstate array (Weiming Shi) [Orabug: 39451492] {CVE-2026-45842}
  - netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Fernando Fernandez Mancera) [Orabug: 39621723] {CVE-2026-52998}
  - netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Fernando Fernandez Mancera) [Orabug: 39621729] {CVE-2026-52999}
  - ipvs: fix MTU check for GSO packets in tunnel mode (Yingnan Zhang)
  - netfilter: xtables: restrict several matches to inet family (Pablo Neira Ayuso) [Orabug: 39621739] {CVE-2026-53001}
  - netfilter: conntrack: remove sprintf usage (Florian Westphal) [Orabug: 39621745] {CVE-2026-53002}
  - netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Xiang Mei) [Orabug: 39451484] {CVE-2026-45841}
  - netfilter: nft_osf: restrict it to ipv4 (Pablo Neira Ayuso)
  - openvswitch: cap upcall PID array size and pre-size vport replies (Weiming Shi) [Orabug: 39451478] {CVE-2026-45840}
  - net/mlx5: Fix HCA caps leak on notifier init failure (Prathamesh Deshpande)
  - pppoe: drop PFC frames (Qingfang Deng) [Orabug: 39621750] {CVE-2026-53003}
  - sctp: fix OOB write to userspace in sctp_getsockopt_peer_auth_chunks (Michael Bommarito) [Orabug: 39621756] {CVE-2026-53004}
  - ipv6: fix possible UAF in icmpv6_rcv() (Eric Dumazet) [Orabug: 39621763] {CVE-2026-53006}
  - e1000e: Unroll PTP in probe error handling (Matt Vollrath)
  - i40e: don't advertise IFF_SUPP_NOFCS (Kohei Enju)
  - ice: fix ICE_AQ_LINK_SPEED_M for 200G (Paul Greenwalt)
  - ice: fix double-free of tx_buf skb (Michal Schmidt) [Orabug: 39621771] {CVE-2026-53009}
  - ice: Remove jumbo_remove step from TX path (Alice Mikityanska)
  - ice: update PCS latency settings for E825 10G/25Gb modes (Grzegorz Nitka)
  - tcp: annotate data-races around tp->plb_rehash (Eric Dumazet)
  - tcp: annotate data-races around (tp->write_seq - tp->snd_nxt) (Eric Dumazet)
  - tcp: annotate data-races around tp->dsack_dups (Eric Dumazet)
  - tcp: annotate data-races around tp->bytes_retrans (Eric Dumazet)
  - tcp: annotate data-races around tp->bytes_sent (Eric Dumazet)
  - tcp: add data-race annotations for TCP_NLA_SNDQ_SIZE (Eric Dumazet)
  - tcp: add data-race annotations around tp->data_segs_out and tp->total_retrans (Eric Dumazet)
  - net/sched: taprio: fix use-after-free in advance_sched() on schedule switch (Vinicius Costa Gomes) [Orabug: 39621779] {CVE-2026-53011}
  - nexthop: fix IPv6 route referencing IPv4 nexthop (Jiayuan Chen) [Orabug: 39621783] {CVE-2026-53012}
  - net/sched: sch_cake: fix NAT destination port not being updated in cake_update_flowkeys (Dudu Lu)
  - macvlan: fix macvlan_get_size() not reserving space for IFLA_MACVLAN_BC_CUTOFF (Dudu Lu) [Orabug: 39621787] {CVE-2026-53013}
  - net/sched: act_mirred: fix wrong device for mac_header_xmit check in tcf_blockcast_redir (Dudu Lu) [Orabug: 39621789] {CVE-2026-53014}
  - arm64: dts: marvell: armada-37xx: use 'usb2-phy' in USB3 controller's phy-names (Gabor Juhos)
  - arm64: dts: imx8mm-tqma8mqml: Correct PAD settings for PMIC_nINT (Peng Fan)
  - arm64: dts: imx8mn-tqma8mqnl: Correct PAD settings for PMIC_nINT (Peng Fan)
  - arm64: dts: imx8mm-emtop-som: Correct PAD settings for PMIC_nINT (Peng Fan)
  - PCMCIA: Fix garbled log messages for KERN_CONT (René Rebe)
  - arm64: dts: imx8mp-data-modul-edm-sbc: Correct PAD settings for PMIC_nINT (Peng Fan)
  - arm64: dts: imx8mp-dhcom-som: Correct PAD settings for PMIC_nINT (Peng Fan)
  - arm64: dts: imx8mp-icore-mx8mp: Correct PAD settings for PMIC_nINT (Peng Fan)
  - arm64: dts: imx8mp-navqp: Correct PAD settings for PMIC_nINT (Peng Fan)
  - arm64: dts: imx8mp-debix-som-a: Correct PAD settings for PMIC_nINT (Peng Fan)
  - arm64: dts: imx8mp-debix-model-a: Correct PAD settings for PMIC_nINT (Peng Fan)
  - erofs: unify lcn as u64 for 32-bit platforms (Gao Xiang) [Orabug: 39621791] {CVE-2026-53015}
  - erofs: avoid infinite loops due to corrupted subpage compact indexes (Gao Xiang)
  - erofs: do sanity check on m->type in z_erofs_load_compact_lcluster() (Chao Yu)
  - erofs: add encoded extent on-disk definition (Gao Xiang)
  - crypto: ccp - copy IV using skcipher ivsize (Paul Moses) [Orabug: 39621795] {CVE-2026-53016}
  - crypto: sa2ul - Fix AEAD fallback algorithm names (T Pratham)
  - drm/i915/wm: Verify the correct plane DDB entry (Ville Syrjälä)
  - drm/i915: Relocate the SKL wm sanitation code (Ville Syrjälä)
  - f2fs: protect extension_list reading with sb_lock in f2fs_sbi_show() (Yongpeng Yang)
  - clk: visconti: pll: initialize clk_init_data to zero (Brian Masney)
  - clk: qcom: gcc-x1e80100: Keep GCC USB QTB clock always ON (Jagadeesh Kona)
  - lib/hexdump: print_hex_dump_bytes() calls print_hex_dump_debug() (Geert Uytterhoeven)
  - clk: qcom: dispcc-sc7180: Add missing MDSS resets (Konrad Dybcio)
  - dt-bindings: clock: qcom,dispcc-sc7180: Define MDSS resets (Konrad Dybcio)
  - clk: xgene: Fix mapping leak in xgene_pllclk_init() (Geert Uytterhoeven)
  - clk: qoriq: avoid format string warning (Arnd Bergmann)
  - x86/um: fix vDSO installation (Thomas Weißschuh)
  - x86/um/vdso: Drop VDSO64-y from Makefile (Thomas Weißschuh)
  - clk: imx8mq: Correct the CSI PHY sels (Sebastian Krzyszkowiak)
  - clk: imx: imx6q: Fix device node reference leak in of_assigned_ldb_sels() (Felix Gu)
  - clk: imx: imx6q: Fix device node reference leak in pll6_bypassed() (Felix Gu)
  - clk: qcom: dispcc-sm8250: Enable parents for pixel clocks (Val Packett)
  - clk: qcom: dispcc-sm8250: Use shared ops on the mdss vsync clk (Val Packett)
  - clk: qcom: gcc-sc8180x: Use retention for PCIe power domains (Val Packett)
  - clk: qcom: gcc-sc8180x: Use retention for USB power domains (Val Packett)
  - clk: qcom: gcc-sc8180x: Add missing GDSCs (Val Packett)
  - dt-bindings: clock: qcom,gcc-sc8180x: Add missing GDSCs (Val Packett)
  - scsi: target: core: Fix integer overflow in UNMAP bounds check (Junrui Luo) [Orabug: 39621810] {CVE-2026-53021}
  - clk: qcom: dispcc-sm4450: Fix DSI byte clock rate setting (Konrad Dybcio)
  - clk: qcom: dispcc-sc8280xp: remove CLK_SET_RATE_PARENT from byte_div_clk_src dividers (White Lewis)
  - scsi: sg: Resolve soft lockup issue when opening /dev/sgX (Yangerkun) [Orabug: 39653260] {CVE-2026-53304}
  - scsi: sg: Fix sysctl sg-big-buff register during sg_init() (Yangerkun)
  - clk: qcom: dispcc-sm8450: use RCG2 ops for DPTX1 AUX clock source (Dmitry Baryshkov)
  - RDMA/core: Prefer NLA_NUL_STRING (Florian Westphal)
  - platform/x86: dell-wmi-sysman: bound enumeration string aggregation (Pengpeng Hou) [Orabug: 39621814] {CVE-2026-53022}
  - platform/x86: dell_rbu: avoid uninit value usage in packet_size_write() (Fedor Pchelkin)
  - fs/ntfs3: terminate the cached volume label after UTF-8 conversion (Pengpeng Hou)
  - tty: serial: ip22zilog: Fix section mispatch warning (Thomas Bogendoerfer)
  - platform/x86: asus-wmi: fix screenpad brightness range (Denis Benato)
  - platform/x86: asus-wmi: adjust screenpad power/brightness handling (Denis Benato)
  - nfs/blocklayout: Fix compilation error (`make W=1`) in bl_write_pagelist() (Andy Shevchenko)
  - mfd: mc13xxx-core: Fix memory leak in mc13xxx_add_subdevice_pdata() (Abdun Nihaal)
  - platform/x86: panasonic-laptop: Fix OPTD notifier registration and cleanup (Rafael J. Wysocki)
  - tty: hvc_iucv: fix off-by-one in number of supported devices (Randy Dunlap)
  - leds: lgm-sso: Remove duplicate assignments for priv->mmap (Chen Ni)
  - platform/surface: surfacepro3_button: Drop wakeup source on remove (Rafael J. Wysocki)
  - backlight: sky81452-backlight: Check return value of devm_gpiod_get_optional() in sky81452_bl_parse_dt() (Chen Ni)
  - i3c: mipi-i3c-hci: fix IBI payload length calculation for final status (Billy Tsai)
  - i3c: dw: Fix memory leak in dw_i3c_master_i3c_xfers() (Felix Gu)
  - i3c: master: dw-i3c: Fix missing reset assertion in remove() callback (Felix Gu)
  - reset: Add devres helpers to request pre-deasserted reset controls (Philipp Zabel)
  - reset: replace boolean parameters with flags parameter (Philipp Zabel)
  - perf util: Kill die() prototype, dead for a long time (Arnaldo Carvalho de Melo)
  - perf maps: Fix copy_from that can break sorted by name order (Ian Rogers)
  - perf cgroup: Update metric leader in evlist__expand_cgroup (Ian Rogers)
  - perf python: Add parse_events function (Ian Rogers)
  - perf tool_pmu: Factor tool events into their own PMU (Ian Rogers)
  - perf evsel: Add alternate_hw_config and use in evsel__match (Ian Rogers)
  - ipmi: ssif_bmc: change log level to dbg in irq callback (Jian Zhang)
  - ipmi: ssif_bmc: fix message desynchronization after truncated response (Jian Zhang)
  - ipmi: ssif_bmc: fix missing check for copy_to_user() partial failure (Jian Zhang)
  - perf expr: Return -EINVAL for syntax error in expr__find_ids() (Leo Yan)
  - perf tools: Fix module symbol resolution for non-zero .text sh_addr (Chuck Lever)
  - perf stat: Fix opt->value type for parse_cache_level (Ian Rogers)
  - perf lock: Fix option value type in parse_max_stack (Ian Rogers)
  - pinctrl: renesas: rzg2l: Fix save/restore of {IOLH,IEN,PUPD,SMT} registers (Biju Das)
  - pinctrl: abx500: Fix type of 'argument' variable (Yu-Chun Lin)
  - pinctrl: realtek: Fix function signature for config argument (Yu-Chun Lin)
  - perf: tools: cs-etm: Fix print issue for Coresight debug in ETE/TRBE trace (Mike Leach)
  - perf branch: Avoid incrementing NULL (Ian Rogers)
  - pinctrl: cy8c95x0: Avoid returning positive values to user space (Andy Shevchenko)
  - pinctrl: cy8c95x0: Unify messages with help of dev_err_probe() (Andy Shevchenko)
  - pinctrl: cy8c95x0: remove duplicate error message (Andy Shevchenko)
  - pinctrl: pinctrl-pic32: Fix resource leak (Ethan Tidmore)
  - bpf, arm32: Reject BPF-to-BPF calls and callbacks in the JIT (Puranjay Mohan)
  - bpf: Validate node_id in arena_alloc_pages() (Puranjay Mohan) [Orabug: 39621837] {CVE-2026-53031}
  - bpf: allow UTF-8 literals in bpf_bprintf_prepare() (Yihan Ding)
  - bpf: Fix NULL deref in map_kptr_match_type for scalar regs (Mykyta Yatsenko) [Orabug: 39621839] {CVE-2026-53032}
  - bpf: Fix precedence bug in convert_bpf_ld_abs alignment check (Daniel Borkmann)
  - bpf, sockmap: Take state lock for af_unix iter (Michal Luczaj) [Orabug: 39621841] {CVE-2026-53033}
  - bpf, sockmap: Fix af_unix null-ptr-deref in proto update (Michal Luczaj) [Orabug: 39621845] {CVE-2026-53034}
  - bpf, sockmap: Fix af_unix iter deadlock (Michal Luczaj) [Orabug: 39621848] {CVE-2026-53035}
  - bpf, arm64: Fix off-by-one in check_imm signed range check (Daniel Borkmann) [Orabug: 39621851] {CVE-2026-53036}
  - ext4: fix possible null-ptr-deref in mbt_kunit_exit() (Ye Bin)
  - HID: usbhid: fix deadlock in hid_post_reset() (Oliver Neukum) [Orabug: 39621856] {CVE-2026-53037}
  - mtd: rawnand: sunxi: fix sunxi_nfc_hw_ecc_read_extra_oob (Richard Genoud)
  - cxl/pci: Check memdev driver binding status in cxl_reset_done() (Li Ming)
  - mtd: parsers: ofpart: call of_node_put() only in ofpart_fail path (Cosmin Tanislav)
  - mtd: spi-nor: swp: check SR_TB flag when getting tb_mask (Shiji Yang)
  - mtd: spi-nor: update spi_nor_fixups::post_sfdp() documentation (Jonas Gorski)
  - mtd: spi-nor: sfdp: introduce smpt_map_id fixup hook (Takahiro Kuwano)
  - mtd: spi-nor: sfdp: introduce smpt_read_dummy fixup hook (Takahiro Kuwano)
  - mtd: spi-nor: core: correct the op.dummy.nbytes when check read operations (Haibo Chen)
  - dt-bindings: interrupt-controller: arm,gic-v3: Fix EPPI range (Geert Uytterhoeven)
  - ima_fs: Correctly create securityfs files for unsupported hash algos (Dmitry Safonov) [Orabug: 39621861] {CVE-2026-53038}
  - ima_fs: get rid of lookup-by-dentry stuff (Al Viro)
  - ima_fs: don't bother with removal of files in directory we'll be removing (Al Viro)
  - mtd: physmap_of_gemini: Fix disabled pinctrl state check (Chen Ni)
  - HID: asus: do not abort probe when not necessary (Denis Benato)
  - HID: asus: make asus_resume adhere to linux kernel coding standards (Denis Benato)
  - ima: check return value of crypto_shash_final() in boot aggregate (Daniel Hodges)
  - remoteproc: xlnx: Fix sram property parsing (Tim Michals)
  - hte: tegra194: remove Kconfig dependency on Tegra194 SoC (Francesco Lavra)
  - tracing: Rebuild full_name on each hist_field_name() call (Pengpeng Hou)
  - soundwire: cadence: Clear message complete before signaling waiting thread (Richard Fitzgerald)
  - dmaengine: mxs-dma: Fix missing return value from of_dma_controller_register() (Frank Li)
  - soundwire: bus: demote UNATTACHED state warnings to dev_dbg() (Cole Leavitt)
  - dmaengine: dw-axi-dmac: Remove unnecessary return statement from void function (Khairul Anuar Romli)
  - ocfs2: validate group add input before caching (Zhengyuan Huang) [Orabug: 39621863] {CVE-2026-53039}
  - ocfs2: validate bg_bits during freefrag scan (Zhengyuan Huang) [Orabug: 39621867] {CVE-2026-53040}
  - ocfs2: fix listxattr handling when the buffer is full (Zhengyuan Huang) [Orabug: 39621871] {CVE-2026-53041}
  - firmware: arm_ffa: Use the correct buffer size during RXTX_MAP (Sebastian Ene)
  - ARM: dts: imx27-eukrea: replace interrupts with interrupts-extended (Frank Li)
  - arm64/xor: fix conflicting attributes for xor_block_template (Christoph Hellwig)
  - ARM: OMAP1: Fix DEBUG_LL and earlyprintk on OMAP16XX (Aaro Koskinen)
  - arm64: dts: qcom: sm8250: Add missing CPU7 3.09GHz OPP (Alexander Koskovich)
  - soc: qcom: aoss: compare against normalized cooling state (Alok Tiwari)
  - soc: qcom: llcc: fix v1 SB syndrome register offset (Alok Tiwari)
  - ocfs2/dlm: fix off-by-one in dlm_match_regions() region comparison (Junrui Luo) [Orabug: 39653273] {CVE-2026-53309}
  - ocfs2/dlm: validate qr_numregions in dlm_match_regions() (Junrui Luo) [Orabug: 39621877] {CVE-2026-53043}
  - unshare: fix nsproxy leak in ksys_unshare() on set_cred_ucounts() failure (Michal Grzedzicki)
  - soc/tegra: cbb: Set ERD on resume for err interrupt (Sumit Gupta)
  - arm64: dts: imx8qxp-mek: switch Type-C connector power-role to dual (Xu Yang)
  - arm64: dts: imx8qm-mek: switch Type-C connector power-role to dual (Xu Yang)
  - arm64: dts: lx2160a: complete pinmux for rcwsr12 configuration word (Josua Mayer)
  - arm64: dts: lx2160a: change zeros to hexadecimal in pinmux nodes (Josua Mayer)
  - arm64: dts: lx2160a: add sda gpio references for i2c bus recovery (Josua Mayer)
  - arm64: dts: lx2160a: rename pinmux nodes for readability (Josua Mayer)
  - arm64: dts: lx2160a: remove duplicate pinmux nodes (Josua Mayer)
  - arm64: dts: lx2160a: change i2c0 (iic1) pinmux mask to one bit (Josua Mayer)
  - arm64: dts: freescale: imx8mp-tqma8mpql-mba8mp-ras314: fix UART1 RTS/CTS muxing (Nora Schiffer)
  - arm64: dts: ti: k3-am62-verdin: Fix SPI_1 GPIO CS pinctrl label (Francesco Dolcini)
  - arm64: dts: ti: k3-am62-lp-sk: Enable internal pulls for MMC0 data pins (Judith Mendez)
  - arm64: dts: ti: k3-am62p5-sk: Disable MMC1 internal pulls on data pins (Judith Mendez)
  - arm64: dts: qcom: sdm845-xiaomi-beryllium: Mark l1a regulator as powered during boot (David Heidelberger)
  - arm64: dts: qcom: sm7225-fairphone-fp4: Fix conflicting bias pinctrl (Luca Weiss)
  - arm64: dts: qcom: sm8650: Enable UHS-I SDR50 and SDR104 SD card modes (Vladimir Zapolskiy)
  - arm64: dts: qcom: sm8550: Enable UHS-I SDR50 and SDR104 SD card modes (Vladimir Zapolskiy)
  - arm64: dts: qcom: sm8450: Enable UHS-I SDR50 and SDR104 SD card modes (Vladimir Zapolskiy)
  - arm64: dts: qcom: sm8650: Fix xo clock supply of SD host controller (Vladimir Zapolskiy)
  - arm64: dts: qcom: sm8550: Fix xo clock supply of platform SD host controller (Vladimir Zapolskiy)
  - arm64: dts: qcom: sm8650: Fix GIC_ITS range length (Konrad Dybcio)
  - arm64: dts: qcom: sm8550: Fix GIC_ITS range length (Konrad Dybcio)
  - arm64: dts: qcom: sm8450: Fix GIC_ITS range length (Konrad Dybcio)
  - bus: rifsc: fix RIF configuration check for peripherals (Gatien Chevallier)
  - soc: qcom: ocmem: return -EPROBE_DEFER is ocmem is not available (Dmitry Baryshkov)
  - soc: qcom: ocmem: register reasons for probe deferrals (Dmitry Baryshkov)
  - soc: qcom: ocmem: make the core clock optional (Dmitry Baryshkov)
  - arm64: dts: rockchip: Correct Joystick Axes on Gameforce Ace (Chris Morgan)
  - arm64: dts: rockchip: Correct Fan Supply for Gameforce Ace (Chris Morgan)
  - arm64: dts: rockchip: Fix Bluetooth stability on LCKFB TaiShan Pi (Ming Wang)
  - arm64: dts: qcom: msm8953-xiaomi-daisy: fix backlight (Barnabás Czémán)
  - arm64: dts: qcom: msm8953-xiaomi-vince: correct wled ovp value (Barnabás Czémán)
  - arm64: dts: mediatek: mt7986a: Fix gpio-ranges pin count (Akari Tsuyukusa)
  - arm64: dts: mediatek: mt7981b: Fix gpio-ranges pin count (Akari Tsuyukusa)
  - arm64: dts: mediatek: mt6795: Fix gpio-ranges pin count (Akari Tsuyukusa)
  - iommufd: vfio compatibility extension check for noiommu mode (Jacob Pan)
  - arm64: dts: imx8mp-evk: Enable pull select bit for PCIe regulator GPIO (M.2 W_DISABLE1) (Sherry Sun)
  - arm64: dts: rockchip: Make Jaguar PCIe-refclk pin use pull-up config (Heiko Stuebner)
  - arm64: dts: imx8-apalis: Fix LEDs name collision (Francesco Dolcini)
  - memory: tegra30-emc: Fix dll_change check (Mikko Perttunen)
  - memory: tegra124-emc: Fix dll_change check (Mikko Perttunen)
  - ARM: dts: mediatek: mt7623: fix efuse fallback compatible (Rafał Miłecki)
  - arm64: dts: mediatek: mt8365: Describe infracfg-nao as a pure syscon (Nícolas F R A Prado)
  - ksmbd: fix use-after-free from async crypto on Qualcomm crypto engine (Joshua Klinesmith)
  - efi/capsule-loader: fix incorrect sizeof in phys array reallocation (Thomas Huth) [Orabug: 39621892] {CVE-2026-53047}
  - gfs2: prevent NULL pointer dereference during unmount (Andreas Gruenbacher) [Orabug: 39621896] {CVE-2026-53048}
  - gfs2: add some missing log locking (Andreas Gruenbacher) [Orabug: 39621899] {CVE-2026-53049}
  - quota: Fix race of dquot_scan_active() with quota deactivation (Jan Kara) [Orabug: 39621903] {CVE-2026-53050}
  - ktest: Run POST_KTEST hooks on failure and cancellation (Ricardo B. Marlière)
  - ktest: Honor empty per-test option overrides (Ricardo B. Marlière)
  - ktest: Avoid undef warning when WARNINGS_FILE is unset (Ricardo B. Marlière)
  - fanotify: call fanotify_events_supported() before path_permission() and security_path_notify() (Ondrej Mosnacek)
  - fdget(), trivial conversions (Al Viro)
  - net/socket.c: switch to CLASS(fd) (Al Viro)
  - gfs2: Call unlock_new_inode before d_instantiate (Andreas Gruenbacher)
  - ALSA: hda/realtek - fixed speaker no sound update (Kailang Yang)
  - crypto: jitterentropy - replace long-held spinlock with mutex (Haixin Xu) [Orabug: 39619365] {CVE-2026-52936}
  - dm cache: fix missing return in invalidate_committed's error path (Ming-Hung Tsai)
  - ALSA: sc6000: Keep the programmed board state in card-private data (Cássio Gabriel)
  - spi: mtk-snfi: unregister ECC engine on probe failure and remove() callback (Pei Xiao)
  - PCI: tegra194: Fix CBB timeout caused by DBI access before core power-on (Manikanta Maddireddy)
  - PCI: dwc: Apply ECRC workaround to DesignWare 5.00a as well (Manikanta Maddireddy)
  - PCI: tegra194: Use DWC IP core version (Manikanta Maddireddy)
  - PCI: tegra194: Free up Endpoint resources during remove() (Vidya Sagar)
  - PCI: tegra194: Allow system suspend when the Endpoint link is not up (Vidya Sagar)
  - PCI: tegra194: Set LTR message request before PCIe link up in Endpoint mode (Vidya Sagar)
  - PCI: tegra194: Disable direct speed change for Endpoint mode (Vidya Sagar)
  - PCI: tegra194: Use devm_gpiod_get_optional() to parse "nvidia,refclk-select" (Vidya Sagar)
  - PCI: tegra194: Disable PERST# IRQ only in Endpoint mode (Manikanta Maddireddy)
  - PCI: tegra194: Don't force the device into the D0 state before L2 (Vidya Sagar)
  - PCI: tegra194: Rename 'root_bus' to 'root_port_bus' in tegra_pcie_downstream_dev_to_D0() (Manivannan Sadhasivam)
  - PCI: tegra194: Disable LTSSM after transition to Detect on surprise link down (Manikanta Maddireddy)
  - PCI: tegra194: Increase LTSSM poll time on surprise link down (Manikanta Maddireddy)
  - PCI: tegra194: Fix polling delay for L2 state (Vidya Sagar)
  - PCI/NPEM: Set LED_HW_PLUGGABLE for hotplug-capable ports (Richard Cheng)
  - ASoC: SOF: compress: return the configured codec from get_params (Cássio Gabriel)
  - ALSA: scarlett2: Add missing sentinel initializer field (Panagiotis Petrakopoulos)
  - selftest: memcg: skip memcg_sock test if address family not supported (Waiman Long)
  - Documentation: fix a hugetlbfs reservation statement (Jane Chu)
  - selftests/mm: skip migration tests if NUMA is unavailable (Anishmulay)
  - PCI: mediatek-gen3: Prevent leaking IRQ domains when IRQ not found (Chen-Yu Tsai)
  - PCI: Enable AtomicOps only if Root Port supports them (Gerd Bayer)
  - ASoC: rsnd: Fix potential out-of-bounds access of component_dais[] (Denis Rastyogin)
  - crypto: qat - use swab32 macro (Giovanni Cabiddu)
  - crypto: qat - fix type mismatch in RAS sysfs show functions (Giovanni Cabiddu)
  - crypto: qat - disable 420xx AE cluster when lead engine is fused off (Ahsan Atta)
  - crypto: qat - disable 4xxx AE cluster when lead engine is fused off (Ahsan Atta)
  - crypto: qat - introduce fuse array (Suman Kumar Chakraborty)
  - ASoC: qcom: qdsp6: topology: check widget type before accessing data (Srinivas Kandagatla)
  - iommu/amd: Fix clone_alias() to use the original device's devid (Vasant Hegde) [Orabug: 39621911] {CVE-2026-53053}
  - iommu/amd: Convert dev_data lock from spinlock to mutex (Vasant Hegde)
  - iommu/amd: Rearrange attach device code (Vasant Hegde)
  - iommu/amd: Reduce domain lock scope in attach device path (Vasant Hegde)
  - iommu/amd: Do not detach devices in domain free path (Vasant Hegde)
  - iommu/amd: xarray to track protection_domain->iommu list (Vasant Hegde)
  - iommu/amd: Remove protection_domain.dev_cnt variable (Vasant Hegde)
  - ASoC: fsl_easrc: Change the type for iec958 channel status controls (Shengjiu Wang)
  - ASoC: fsl_easrc: Fix value type in fsl_easrc_iec958_get_bits() (Shengjiu Wang)
  - ASoC: fsl_easrc: Check the variable range in fsl_easrc_iec958_put_bits() (Shengjiu Wang)
  - ASoC: fsl_xcvr: Fix event generation in fsl_xcvr_mode_put() (Shengjiu Wang)
  - ASoC: fsl_xcvr: Fix event generation in fsl_xcvr_arc_mode_put() (Shengjiu Wang)
  - ASoC: fsl_micfil: Fix event generation in micfil_quality_set() (Shengjiu Wang)
  - ASoC: fsl_micfil: Fix event generation in micfil_put_dc_remover_state() (Shengjiu Wang)
  - ASoC: fsl_micfil: Fix event generation in hwvad_put_init_mode() (Shengjiu Wang)
  - ASoC: fsl_micfil: Fix event generation in hwvad_put_enable() (Shengjiu Wang)
  - ASoC: fsl_micfil: Add access property for "VAD Detected" (Shengjiu Wang)
  - PM: domains: De-constify fields in struct dev_pm_domain_attach_data (Dmitry Baryshkov)
  - pmdomain: imx: scu-pd: Fix device_node reference leak during ->probe() (Felix Gu)
  - pmdomain: ti: omap_prm: Fix a reference leak on device node (Felix Gu)
  - drm/msm/a6xx: Use barriers while updating HFI Q headers (Akhil P Oommen)
  - drm/msm/a6xx: Fix dumping A650+ debugbus blocks (Connor Abbott)
  - drm/msm/shrinker: Fix can_block() logic (Rob Clark)
  - drm/msm/a6xx: Fix HLSQ register dumping (Rob Clark)
  - ASoC: SOF: Intel: hda: Place check before dereference (Ethan Tidmore)
  - ALSA: hda/realtek: fix code style (ERROR: else should follow close brace '}') (Huanglei)
  - hwmon: (aspeed-g6-pwm-tach): remove redundant driver remove callback (Billy Tsai)
  - hwmon: Switch back to struct platform_driver::remove() (Uwe Kleine-König)
  - drm/amdgpu/uvd4.2: Don't initialize UVD 4.2 when DPM is disabled (Timur Kristóf)
  - drm/amdgpu: update the handle ptr in early_init (Sunil Khatri)
  - drm/amdgpu: update the handle ptr in dump_ip_state (Sunil Khatri)
  - drm/amdgpu: add amdgpu_device reference in ip block (Sunil Khatri)
  - drm/amd/pm/smu7: Add SCLK cap for quirky Hawaii board (Timur Kristóf)
  - drm/amd/pm/ci: Fill DW8 fields from SMC (Timur Kristóf)
  - drm/amd/pm/ci: Clear EnabledForActivity field for memory levels (Timur Kristóf)
  - drm/amd/pm/ci: Fix powertune defaults for Hawaii 0x67B0 (Timur Kristóf)
  - drm/amd/pm/smu7: Fix SMU7 voltage dependency on display clock (Timur Kristóf)
  - drm/amd/pm/ci: Disable MCLK DPM on problematic CI ASICs (Timur Kristóf)
  - drm/amd/pm/ci: Use highest MCLK on CI when MCLK DPM is disabled (Timur Kristóf)
  - ALSA: core: Validate compress device numbers without dynamic minors (Cássio Gabriel)
  - PCI: qcom: Advertise Hotplug Slot Capability with no Command Completion support (Krishna Chaitanya Chundru)
  - drm/panel: simple: Correct G190EAN01 prepare timing (Sebastian Reichel)
  - drm/panel: sharp-ls043t1le01: make use of prepare_prev_first (Dmitry Baryshkov)
  - drm/msm/dsi: rename MSM8998 DSI version from V2_2_0 to V2_0_0 (Alexander Koskovich)
  - drm/msm/dpu: fix mismatch between power and frequency (Yuanjie Yang) [Orabug: 39621917] {CVE-2026-53056}
  - iommu/tegra241-cmdqv: Set supports_cmd op in tegra241_vcmdq_hw_init() (Nicolin Chen)
  - drm/imagination: Switch reset_reason fields from enum to u32 (Alexandru Dadu)
  - spi: hisi-kunpeng: prevent infinite while() loop in hisi_spi_flush_fifo (Pei Xiao)
  - drm/amdgpu/gfx11: look at the right prop for gfx queue priority (Alex Deucher)
  - drm/amdgpu/gfx10: look at the right prop for gfx queue priority (Alex Deucher)
  - PCI: dwc: rcar-gen4: Change EPC BAR alignment to 4K as per the documentation (Koichiro Den)
  - padata: Remove cpu online check from cpu add and removal (Chuyi Zhou)
  - crypto: atmel-aes - guard unregister on error in atmel_aes_register_algs (Thorsten Blum)
  - crypto: atmel - Use unregister_{aeads,ahashes,skciphers} (Thorsten Blum)
  - crypto: tegra - Disable softirqs before finalizing request (Herbert Xu)
  - crypto: tegra - Reserve keyslots to allocate dynamically (Akhil R)
  - crypto: tegra - Transfer HASH init function to crypto engine (Akhil R)
  - crypto: tegra - finalize crypto req on error (Akhil R)
  - fbdev: matroxfb: Mark variable with __maybe_unused to avoid W=1 build break (Andy Shevchenko)
  - dm init: ensure device probing has finished in dm-mod.waitfor= (Guillaume Gonnet)
  - drm/amdgpu: Add default case in DVI mode validation (Srinivasan Shanmugam)
  - drm/sun4i: Fix resource leaks (Ethan Tidmore)
  - drm/v3d: Handle error from drm_sched_entity_init() (Maíra Canal)
  - selftests/sched_ext: Add missing error check for exit__load() (David Carlier)
  - media: i2c: og01a1b: Fix V4L2 subdevice data initialization on probe (Vladimir Zapolskiy)
  - media: i2c: og01a1b: Replace client->dev usage (Laurent Pinchart)
  - spi: fsl-qspi: Use reinit_completion() for repeated operations (Felix Gu)
  - spi: nxp-fspi: Use reinit_completion() for repeated operations (Felix Gu)
  - spi: spi-nxp-fspi: enable runtime pm for fspi (Haibo Chen)
  - drm/bridge: cadence: cdns-mhdp8546-core: Handle HDCP state in bridge atomic check (Harikrishna Shenoy)
  - drm/bridge: cadence: cdns-mhdp8546-core: Add mode_valid hook to drm_bridge_funcs (Jayesh Choudhary)
  - drm/bridge: cadence: cdns-mhdp8546-core: Set the mhdp connector earlier in atomic_enable() (Jayesh Choudhary)
  - dm log: fix out-of-bounds write due to region_count overflow (Junrui Luo) [Orabug: 39621923] {CVE-2026-53059}
  - dm cache metadata: fix memory leak on metadata abort retry (Ming-Hung Tsai) [Orabug: 39621928] {CVE-2026-53060}
  - PCI: dwc: Perform cleanup in the error path of dw_pcie_resume_noirq() (Manivannan Sadhasivam)
  - PCI: dwc: Invoke post_init in dw_pcie_resume_noirq() (Richard Zhu)
  - PCI: dwc: ep: Fix MSI-X Table Size configuration in dw_pcie_ep_set_msix() (Aksh Garg)
  - PCI: endpoint: Align pci_epc_set_msix(), pci_epc_ops::set_msix() nr_irqs encoding (Niklas Cassel)
  - platform/chrome: chromeos_tbmc: Drop wakeup source on remove (Rafael J. Wysocki)
  - dm cache: fix dirty mapping checking in passthrough mode switching (Ming-Hung Tsai) [Orabug: 39621932] {CVE-2026-53061}
  - dm cache: support shrinking the origin device (Ming-Hung Tsai)
  - dm cache: fix concurrent write failure in passthrough mode (Ming-Hung Tsai)
  - dm cache policy smq: fix missing locks in invalidating cache blocks (Ming-Hung Tsai) [Orabug: 39621936] {CVE-2026-53062}
  - dm cache: fix write hang in passthrough mode (Ming-Hung Tsai) [Orabug: 39621941] {CVE-2026-53063}
  - dm cache: fix write path cache coherency in passthrough mode (Ming-Hung Tsai)
  - dm cache: fix null-deref with concurrent writes in passthrough mode (Ming-Hung Tsai) [Orabug: 39621945] {CVE-2026-53064}
  - ASoC: sti: use managed regmap_field allocations (Sander Vanheule)
  - ASoC: sti: Return errors from regmap_field_alloc() (Sander Vanheule)
  - drm/sun4i: backend: fix error pointer dereference (Ethan Tidmore)
  - ASoC: soc-compress: use function to clear symmetric params (Kuninori Morimoto)
  - ASoC: add symmetric_ prefix for dai->rate/channels/sample_bits (Kuninori Morimoto)
  - ASoC: SOF: ipc3: Use standard dev_dbg API (Daniel Baluta)
  - drm/komeda: fix integer overflow in AFBC framebuffer size check (Alexander Konyukhov)
  - net, bpf: fix null-ptr-deref in xdp_master_redirect() for down master (Jiayuan Chen) [Orabug: 39621965] {CVE-2026-53069}
  - sctp: fix missing encap_port propagation for GSO fragments (Xin Long)
  - tcp: Don't set treq->req_usec_ts in cookie_tcp_reqsk_init(). (Kuniyuki Iwashima)
  - udp: Force compute_score to always inline (Gabriel Krisman Bertazi)
  - ipv6: udp: fix typos in comments (Alok Tiwari)
  - ipv4: udp: fix typos in comments (Alok Tiwari)
  - net: phy: qcom: at803x: Use the correct bit to disable extended next page (Maxime Chevallier)
  - Bluetooth: SCO: check for codecs->num_codecs == 1 before assigning to sco_pi(sk)->codec (Stefan Metzmacher)
  - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (Dudu Lu) [Orabug: 39621972] {CVE-2026-53071}
  - Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER (Pauli Virtanen) [Orabug: 39621975] {CVE-2026-53072}
  - Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (Jonathan Rissanen) [Orabug: 39621979] {CVE-2026-53073}
  - bpf: reject short IPv4/IPv6 inputs in bpf_prog_test_run_skb (Sun Jian) [Orabug: 39621983] {CVE-2026-53074}
  - net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Gal Pressman) [Orabug: 38290328]
  - net/mlx5e: Fix features not applied during netdev registration (Gal Pressman)
  - net: phy: fix a return path in get_phy_c45_ids() (Charles Perry)
  - dt-bindings: net: dsa: nxp,sja1105: make spi-cpol optional for sja1110 (Josua Mayer)
  - net: ipa: Fix decoding EV_PER_EE for IPA v5.0+ (Luca Weiss)
  - net: ipa: Fix programming of QTIME_TIMESTAMP_CFG (Luca Weiss)
  - ppp: require CAP_NET_ADMIN in target netns for unattached ioctls (Taegu Ha) [Orabug: 39621986] {CVE-2026-53075}
  - bpf: Fix OOB in pcpu_init_value (Lang Xu) [Orabug: 39621991] {CVE-2026-53076}
  - bpf: Allow instructions with arena source and non-arena dest registers (Emil Tsalapatis)
  - selftests: netfilter: nft_tproxy.sh: adjust to socat changes (Florian Westphal)
  - net/sched: act_ct: Only release RCU read lock after ct_ft (Jamal Hadi Salim) [Orabug: 39531629] {CVE-2026-46319}
  - selftests/bpf: fix __jited_unpriv tag name (Eduard Zingerman)
  - bpf: Enforce regsafe base id consistency for BPF_ADD_CONST scalars (Daniel Borkmann) [Orabug: 39622016] {CVE-2026-53081}
  - bpf: Relax scalar id equivalence for state pruning (Puranjay Mohan)
  - net: hamradio: 6pack: fix uninit-value in sixpack_receive_buf (Mashiro Chen)
  - bpf: Fix RCU stall in bpf_fd_array_map_clear() (Sechang Lim) [Orabug: 39622026] {CVE-2026-53083}
  - bpf: return VMA snapshot from task_vma iterator (Puranjay Mohan) [Orabug: 39622030] {CVE-2026-53084}
  - bpf: switch task_vma iterator from mmap_lock to per-VMA locks (Puranjay Mohan)
  - bpf: fix mm lifecycle in open-coded task_vma iterator (Puranjay Mohan) [Orabug: 39622033] {CVE-2026-53085}
  - netfilter: nft_fwd_netdev: check ttl/hl before forwarding (Florian Westphal)
  - netfilter: xt_socket: enable defrag after all other checks (Florian Westphal)
  - eth: fbnic: Use wake instead of start (Mohsin Bashir)
  - net: bcmgenet: fix racing timeout handler (Justin Chen) [Orabug: 39622036] {CVE-2026-53086}
  - net: bcmgenet: switch to use 64bit statistics (Zak Kemble)
  - net: bcmgenet: support reclaiming unsent Tx packets (Doug Berger)
  - net: bcmgenet: move DESC_INDEX flow to ring 0 (Doug Berger)
  - net: bcmgenet: add bcmgenet_has_* helpers (Doug Berger)
  - net: bcmgenet: fix off-by-one in bcmgenet_put_txcb (Justin Chen) [Orabug: 39622042] {CVE-2026-53088}
  - arm64: kexec: Remove duplicate allocation for trans_pgd (Wang Wensheng)
  - ACPI: AGDI: fix missing newline in error message (Haoyu Lu)
  - wifi: ath10k: fix station lookup failure during disconnect (Baochen Qiang)
  - bpf: reject negative CO-RE accessor indices in bpf_core_parse_spec() (Weiming Shi) [Orabug: 39451469] {CVE-2026-45839}
  - bpf: Drop task_to_inode and inet_conn_established from lsm sleepable hooks (Jiayuan Chen)
  - wifi: mac80211: handle VHT EXT NSS in ieee80211_determine_our_sta_mode() (Nicolas Escande)
  - wifi: brcmfmac: Fix error pointer dereference (Ethan Tidmore) [Orabug: 39622060] {CVE-2026-53093}
  - bpf: Fix stale offload->prog pointer after constant blinding (Mingtao Huang) [Orabug: 39622064] {CVE-2026-53094}
  - bpf: fix end-of-list detection in cgroup_storage_get_next_key() (Weiming Shi) [Orabug: 39451461] {CVE-2026-45838}
  - macvlan: annotate data-races around port->bc_queue_len_used (Eric Dumazet)
  - selftests/powerpc: Suppress -Wmaybe-uninitialized with GCC 15 (Amit Machhiwal)
  - powerpc/crash: Update backup region offset in elfcorehdr on memory hotplug (Sourabh Jain)
  - powerpc/crash: fix backup region offset update to elfcorehdr (Sourabh Jain)
  - r8152: fix incorrect register write to USB_UPHY_XTAL (Chih Kai Hsu)
  - wifi: rtw89: phy: fix uninitialized variable access in rtw89_phy_cfo_set_crystal_cap() (Alexey Velichayshiy)
  - bpf,arc_jit: Fix missing newline in pr_err messages (Haoyu Lu)
  - bpf: Fix variable length stack write over spilled pointers (Alexei Starovoitov)
  - bpf: Use RCU-safe iteration in dev_map_redirect_multi() SKB path (David Carlier) [Orabug: 39622068] {CVE-2026-53096}
  - wifi: mt76: mt7921: fix 6GHz regulatory update on connection (Michael Lo)
  - wifi: mt76: mt7996: fix use-after-free bugs in mt7996_mac_dump_work() (Duoming Zhou)
  - wifi: mt76: mt7915: fix use-after-free bugs in mt7915_mac_dump_work() (Duoming Zhou) [Orabug: 39622074] {CVE-2026-53098}
  - wifi: mt76: mt7996: fix struct mt7996_mcu_uni_event (Stanleyyp Wang)
  - arm64: cpufeature: Make PMUVer and PerfMon unsigned (James Clark)
  - wifi: mt76: mt7921: Place upper limit on station AID (Rory Little) [Orabug: 39653289] {CVE-2026-53317}
  - wifi: mt76: mt7996: fix FCS error flag check in RX descriptor (Alok Tiwari)
  - wifi: mt76: mt7925: prevent NULL vif dereference in mt7925_mac_write_txwi (Ming Yen Hsieh) [Orabug: 39622090] {CVE-2026-53105}
  - wifi: mt76: mt7925: prevent NULL pointer dereference in mt7925_tx_check_aggr() (Ming Yen Hsieh) [Orabug: 39653293] {CVE-2026-53318}
  - wifi: mt76: mt7915: fix use_cts_prot support (Ryder Lee)
  - wifi: mt76: mt7615: fix use_cts_prot support (Ryder Lee)
  - wifi: mt76: mt7925: Fix incorrect MLO mode in firmware control (Leon Yen)
  - wifi: mt76: mt7921: Reset ampdu_state state in case of failure in mt76_connac2_tx_check_aggr() (Sean Wang)
  - module: Fix freeing of charp module parameters when CONFIG_SYSFS=n (Petr Pavlu)
  - params: Replace __modinit with __init_or_module (Petr Pavlu)
  - s390/bpf: Zero-extend bpf prog return values and kfunc arguments (Ilya Leoshkevich)
  - dpaa2: compile dpaa2 even CONFIG_FSL_DPAA2_ETH=n (Cai Xinchen)
  - dpaa2: add independent dependencies for FSL_DPAA2_SWITCH (Cai Xinchen)
  - bpf: test_run: Fix the null pointer dereference issue in bpf_lwt_xmit_push_encap (Feng Yang) [Orabug: 39622104] {CVE-2026-53111}
  - wifi: rtlwifi: pci: fix possible use-after-free caused by unfinished irq_prepare_bcn_tasklet (Duoming Zhou) [Orabug: 39622108] {CVE-2026-53112}
  - wifi: mwifiex: Fix memory leak in mwifiex_11n_aggregate_pkt() (Zilin Guan)
  - firmware: dmi: Correct an indexing error in dmi.h (Mario Limonciello)
  - locking: Fix rwlock support in <linux/spinlock_up.h> (Bart Van Assche)
  - sparc64: vdso: Link with -z noexecstack (Thomas Weißschuh)
  - sparc/vdso: Always reject undefined references during linking (Thomas Weißschuh)
  - hrtimer: Reduce trace noise in hrtimer_start() (Thomas Gleixner)
  - hrtimer: Avoid pointless reprogramming in __hrtimer_start_range_ns() (Peter Zijlstra)
  - hrtimers: Update the return type of enqueue_hrtimer() (Richard Clark)
  - irqchip/irq-pic32-evic: Address warning related to wrong printf() formatter (Brian Masney)
  - bus: fsl-mc: use generic driver_override infrastructure (Danilo Krummrich) [Orabug: 39622115] {CVE-2026-53115}
  - s390/cio: use generic driver_override infrastructure (Danilo Krummrich)
  - platform/wmi: use generic driver_override infrastructure (Danilo Krummrich) [Orabug: 39622131] {CVE-2026-53119}
  - PCI: use generic driver_override infrastructure (Danilo Krummrich) [Orabug: 39622134] {CVE-2026-53120}
  - soundwire: debugfs: initialize firmware_file to empty string (Gui-Dong Han)
  - debugfs: fix placement of EXPORT_SYMBOL_GPL for debugfs_create_str() (Gui-Dong Han)
  - debugfs: check for NULL pointer in debugfs_create_str() (Gui-Dong Han)
  - thermal/drivers/spear: Fix error condition for reading st,thermal-flags (Gopi Krishna Menon)
  - devres: fix missing node debug info in devm_krealloc() (Danilo Krummrich)
  - ACPI: x86: cmos_rtc: Improve coordination with ACPI TAD driver (Rafael J. Wysocki)
  - ACPI: x86: cmos_rtc: Clean up address space handler driver (Rafael J. Wysocki)
  - btrfs: fix deadlock between reflink and transaction commit when using flushoncommit (Filipe Manana) [Orabug: 39622141] {CVE-2026-53122}
  - btrfs: pass struct btrfs_inode to clone_copy_inline_extent() (David Sterba)
  - md: wake raid456 reshape waiters before suspend (Yu Kuai) [Orabug: 39622146] {CVE-2026-53123}
  - pstore/ram: fix resource leak when ioremap() fails (Cole Leavitt)
  - blk-cgroup: fix disk reference leak in blkcg_maybe_throttle_current() (Jackie Liu) [Orabug: 39622152] {CVE-2026-53126}
  - nilfs2: reject zero bd_oblocknr in nilfs_ioctl_mark_blocks_dirty() (Deepanshu Kartikey)
  - loop: fix partition scan race between udev and loop_reread_partitions() (Daan De Meyer)
  - drbd: Balance RCU calls in drbd_adm_dump_devices() (Bart Van Assche) [Orabug: 39622157] {CVE-2026-53128}
  - md/raid1: fix the comparing region of interval tree (Xiao Ni)
  - fs/mbcache: cancel shrink work before destroying the cache (Hyungjung Joo) [Orabug: 39622163] {CVE-2026-53129}
  - fs/omfs: reject s_sys_blocksize smaller than OMFS_DIR_START (Hyungjung Joo)
  - blk-cgroup: wait for blkcg cleanup before initializing new disk (Ming Lei)
  - io_uring/kbuf: use mem_is_zero() (Pavel Begunkov)
  - LTS version: v6.12.90 (Saeed Mirzamohammadi)
  - drm/amdgpu/vcn4: Avoid overflow on msg bound check (Benjamin Cheng)
  - drm/amdgpu/vcn3: Avoid overflow on msg bound check (Benjamin Cheng)
  - vsock/virtio: fix accept queue count leak on transport mismatch (Dudu Lu) [Orabug: 39460644] {CVE-2026-46214}
  - vsock/virtio: fix empty payload in tap skb for non-linear buffers (Stefano Garzarella) [Orabug: 39460618] {CVE-2026-46207}
  - vsock/virtio: fix length and offset in tap skb for split packets (Stefano Garzarella)
  - vsock: fix buffer size clamping order (Norbert Szetei) [Orabug: 39460716] {CVE-2026-46234}
  - batman-adv: tp_meter: fix tp_num leak on kmalloc failure (Sven Eckelmann)
  - batman-adv: stop tp_meter sessions during mesh teardown (Jiexun Wang) [Orabug: 39460621] {CVE-2026-46208}
  - tracing/probes: Limit size of event probe to 3K (Steven Rostedt)
  - btrfs: fix btrfs_ioctl_space_info() slot_count TOCTOU which can lead to info-leak (Yochai Eisenrich) [Orabug: 39460404] {CVE-2026-46159}
  - btrfs: fix double free in create_space_info_sub_group() error path (Guangshuo Li) [Orabug: 39460430] {CVE-2026-46164}
  - btrfs: remove fs_info argument from btrfs_sysfs_add_space_info_type() (Filipe Manana)
  - Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_get_sndtimeo_cb() (Siwei Zhang) [Orabug: 39445784] {CVE-2026-45836}
  - io_uring/kbuf: support min length left for incremental buffers (Martin Michaelis)
  - bonding: fix use-after-free due to enslave fail after slave array update (Nikolay Aleksandrov) [Orabug: 38970391] {CVE-2026-23171}
  - rust: allow `clippy::collapsible_if` globally (Miguel Ojeda)
  - rust: allow `clippy::collapsible_match` globally (Miguel Ojeda)
  - mm/damon/reclaim: detect and use fresh enabled and kdamond_pid values (Seongjae Park)
  - mm/damon/lru_sort: detect and use fresh enabled and kdamond_pid values (Seongjae Park)
  - mm/damon/core: implement damon_kdamond_pid() (Seongjae Park)
  - mm/damon/core: disallow time-quota setting zero esz (Seongjae Park)
  - rust: pin-init: fix incorrect accessor reference lifetime (Gary Guo)
  - fbcon: Avoid OOB font access if console rotation fails (Thomas Zimmermann) [Orabug: 39460547] {CVE-2026-46191}
  - tracefs: Fix default permissions not being applied on initial mount (David Carlier)
  - block: fix zone write plug removal (Damien Le Moal)
  - block: reorganize struct blk_zone_wplug (Damien Le Moal)
  - block: cleanup blkdev_report_zones() (Damien Le Moal)
  - mm/hugetlb_cma: round up per_node before logging it (Sang-Heon Jeon)
  - spi: uniphier: fix controller deregistration (Johan Hovold)
  - spi: uniphier: Simplify clock handling with devm_clk_get_enabled() (Pei Xiao)
  - spi: tegra114: fix controller deregistration (Johan Hovold)
  - spi: tegra20-sflash: fix controller deregistration (Johan Hovold)
  - spi: zynq-qspi: fix controller deregistration (Johan Hovold)
  - spi: zynq-qspi: Simplify clock handling with devm_clk_get_enabled() (Pei Xiao)
  - Bluetooth: hci_conn: fix potential UAF in create_big_sync (David Carlier) [Orabug: 39460210] {CVE-2026-46111}
  - ALSA: seq: Fix UMP group 16 filtering (Cássio Gabriel)
  - ALSA: seq: Notify client and port info changes (Takashi Iwai)
  - ALSA: hda: cs35l56: Propagate ASP TX source control errors (Cássio Gabriel)
  - usb: dwc3: Move GUID programming after PHY initialization (Selvarasu Ganesan)
  - usb: typec: tcpm: reset internal port states on soft reset AMS (Amit Sunil Dhamne)
  - batman-adv: bla: put backbone reference on failed claim hash insert (Sven Eckelmann) [Orabug: 39460705] {CVE-2026-46231}
  - batman-adv: bla: only purge non-released claims (Sven Eckelmann) [Orabug: 39460712] {CVE-2026-46233}
  - batman-adv: bla: prevent use-after-free when deleting claims (Sven Eckelmann) [Orabug: 39460639] {CVE-2026-46212}
  - batman-adv: stop caching unowned originator pointers in BAT IV (Jiexun Wang) [Orabug: 39460732] {CVE-2026-46238}
  - batman-adv: reject new tp_meter sessions during teardown (Jiexun Wang) [Orabug: 39460613] {CVE-2026-46206}
  - batman-adv: fix integer overflow on buff_pos (Lyes Bourennani) [Orabug: 39460578] {CVE-2026-46198}
  - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (Ben Morris) [Orabug: 39460687] {CVE-2026-46227}
  - arm64: dts: ti: k3-am62a7-sk: Fix pin name in comment from M19 to N22 (Siddharth Vadapalli)
  - drm/amdgpu/pm: align Hawaii mclk workaround with radeon (Alex Deucher)
  - drm/amdgpu/pm: add missing revision check for CI (Alex Deucher)
  - drm/amdgpu/sdma4: replace BUG_ON with WARN_ON in fence emission (John B. Moore) [Orabug: 39460666] {CVE-2026-46220}
  - drm/amdkfd: Make all TLB-flushes heavy-weight (Felix Kuehling)
  - drm/panel: boe-tv101wum-nl6: restore MODE_LPM after sending disable cmds (Icenowy Zheng)
  - drm/amdgpu/gfx9: drop unnecessary 64-bit fence flag check in KIQ (John B. Moore)
  - drm/panel: himax-hx83102: restore MODE_LPM after sending disable cmds (Icenowy Zheng)
  - drm/exynos: remove bridge when component_add fails (Osama Abdelkader)
  - drm/amdgpu: zero-initialize GART table on allocation (Philip Yang)
  - drm/radeon: add missing revision check for CI (Alex Deucher)
  - drm/xe/bo: Fix bo leak on unaligned size validation in xe_bo_init_locked() (Shuicheng Lin)
  - drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Shuicheng Lin) [Orabug: 39460594] {CVE-2026-46201}
  - drm/xe/bo: Fix bo leak on GGTT flag validation in xe_bo_init_locked() (Shuicheng Lin)
  - drm/amdkfd: validate SVM ioctl nattr against buffer size (Alysa Liu) [Orabug: 39460571] {CVE-2026-46197}
  - drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (Ashutosh Desai) [Orabug: 39460626] {CVE-2026-46209}
  - drm/amd/display: Change dither policy for 10 bpc output back to dithering (Mario Kleiner)
  - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (Benjamin Cheng) [Orabug: 39460701] {CVE-2026-46230}
  - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (Benjamin Cheng) [Orabug: 39460585] {CVE-2026-46199}
  - drm/amdgpu/vce: Prevent partial address patches (Benjamin Cheng)
  - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (Benjamin Cheng) [Orabug: 39460601] {CVE-2026-46204}
  - drm/amdgpu: Add bounds checking to ib_{get,set}_value (Benjamin Cheng) [Orabug: 39460656] {CVE-2026-46218}
  - drm/amdkfd: Add upper bound check for num_of_nodes (Alysa Liu)
  - drm/amd/pm: fix incorrect FeatureCtrlMask setting on smu v14.0.x (Yang Wang)
  - drm/amdgpu: gate VM CPU HDP flush on reset lock (Chenglei Xie)
  - drm/amdgpu: Use SMUIO 15.0.0 offsets for TSC upper and lower count. (Kanala Ramalingeswara Reddy)
  - drm/amdkfd: Clear VRAM on allocation to prevent stale data exposure (Amir Shetaia) [Orabug: 39460696] {CVE-2026-46229}
  - drm/msm/gem: fix error handling in msm_ioctl_gem_info_get_metadata() (Yasuaki Torimaru) [Orabug: 39460635] {CVE-2026-46211}
  - spi: cadence: fix unclocked access on unbind (Johan Hovold)
  - spi: cadence: fix controller deregistration (Johan Hovold)
  - spi: mpc52xx: fix use-after-free on unbind (Johan Hovold)
  - spi: mpc52xx: fix controller deregistration (Johan Hovold)
  - spi: mpc52xx: fix use-after-free on registration failure (Johan Hovold)
  - spi: orion: fix clock imbalance on registration failure (Johan Hovold)
  - spi: orion: fix runtime pm leak on unbind (Johan Hovold)
  - spi: orion: fix controller deregistration (Johan Hovold)
  - spi: mxic: fix controller deregistration (Johan Hovold)
  - spi: imx: fix runtime pm leak on probe deferral (Johan Hovold)
  - spi: img-spfi: fix controller deregistration (Johan Hovold)
  - spi: rspi: fix controller deregistration (Johan Hovold)
  - spi: sprd: fix controller deregistration (Johan Hovold)
  - spi: pic32-sqi: fix controller deregistration (Johan Hovold)
  - spi: npcm-pspi: fix controller deregistration (Johan Hovold)
  - spi: coldfire-qspi: fix controller deregistration (Johan Hovold)
  - spi: bcmbca-hsspi: fix controller deregistration (Johan Hovold)
  - spi: fsl: fix controller deregistration (Johan Hovold)
  - spi: sh-hspi: fix controller deregistration (Johan Hovold)
  - spi: pl022: fix controller deregistration (Johan Hovold)
  - spi: mtk-nor: fix controller deregistration (Johan Hovold)
  - spi: pic32: fix controller deregistration (Johan Hovold)
  - spi: omap2-mcspi: fix controller deregistration (Johan Hovold)
  - spi: fsl-espi: fix controller deregistration (Johan Hovold)
  - spi: s3c64xx: fix controller deregistration (Johan Hovold)
  - spi: dln2: fix controller deregistration (Johan Hovold)
  - spi: mxs: fix controller deregistration (Johan Hovold)
  - media: omap3isp: drop the use count of v4l2 pipeline (Haoxiang Li)
  - media: i2c: ov08d10: fix image vertical start setting (Matthias Fend)
  - media: staging: imx: request mbus_config in csi_start (Michael Tretter)
  - media: i2c: imx412: Assert reset GPIO during probe (Wenmeng Liu)
  - media: dib8000: avoid division by 0 in dib8000_set_dds() (Sergey Shtylyov)
  - media: pci: zoran: fix potential memory leak in zoran_probe() (Abdun Nihaal)
  - vsock/virtio: fix MSG_PEEK ignoring skb offset when calculating bytes to copy (Luigi Leonardi)
  - platform/x86: hp-wmi: Ignore backlight and FnLock events (Krishna Chomal)
  - spi: aspeed-smc: fix controller deregistration (Johan Hovold)
  - media: saa7164: add ioremap return checks and cleanups (Wang Jun) [Orabug: 39460720] {CVE-2026-46235}
  - spi: at91-usart: fix controller deregistration (Johan Hovold)
  - spi: qup: fix controller deregistration (Johan Hovold)
  - spi: meson-spicc: fix controller deregistration (Johan Hovold)
  - spi: lantiq-ssc: fix controller deregistration (Johan Hovold)
  - regulator: bd9571mwv: fix OF node reference imbalance (Johan Hovold)
  - regulator: act8945a: fix OF node reference imbalance (Johan Hovold)
  - media: i2c: imx283: Fix hang when going from large to small resolution (Jai Luthra)
  - media: intel/ipu6: fix error pointer dereference (Ethan Tidmore) [Orabug: 39524633] {CVE-2026-46313}
  - media: videobuf2: Set vma_flags in vb2_dma_sg_mmap (Janne Grunau) [Orabug: 39524629] {CVE-2026-46312}
  - regulator: rk808: fix OF node reference imbalance (Johan Hovold)
  - media: i2c: imx283: Enter full standby when stopping streaming (Jai Luthra)
  - media: rc: streamzap: Error handling in probe (Oliver Neukum)
  - media: rc: xbox_remote: heed DMA restrictions (Oliver Neukum)
  - regulator: max77650: fix OF node reference imbalance (Johan Hovold)
  - spi: st-ssc4: fix controller deregistration (Johan Hovold)
  - regulator: mt6357: fix OF node reference imbalance (Johan Hovold)
  - staging: media: atomisp: Disallow all private IOCTLs (Sakari Ailus)
  - arm64: dts: lx2160a-cex7/lx2162a-sr-som: fix usd-cd & gpio pinmux (Josua Mayer)
  - spi: atmel: fix controller deregistration (Johan Hovold)
  - spi: bcm63xx: fix controller deregistration (Johan Hovold)
  - media: chips-media: wave5: add missing spinlock protection for handle_dynamic_resolution_change() (Ziyi Guo)
  - media: chips-media: wave5: add missing spinlock protection for send_eos_event() (Ziyi Guo)
  - media: chips-media: wave5: fix a potential memory leak in wave5_vdi_init() (Haoxiang Li)
  - media: i2c: ov8856: free control handler on error in ov8856_init_controls() (Alexander Koskovich)
  - media: nxp: imx8-isi: Reduce minimum queued buffers from 2 to 0 (Guoniu Zhou)
  - media: uvcvideo: Enable VB2_DMABUF for metadata stream (Ricardo Ribalda)
  - HID: playstation: Clamp num_touch_reports (T.J. Mercier)
  - LTS version: v6.12.89 (Saeed Mirzamohammadi)
  - LTS version: v6.12.88 (Saeed Mirzamohammadi)
  - ksmbd: validate inherited ACE SID length (Shota Zaizen)
  - KVM: arm64: Wake-up from WFI when iqrchip is in userspace (Marc Zyngier)
  - tracepoint: balance regfunc() on func_add() failure in tracepoint_add_func() (David Carlier) [Orabug: 39460567] {CVE-2026-46196}
  - wifi: mt76: mt7925: fix incorrect TLV length in CLC command (Quan Zhou)
  - net: stmmac: Prevent NULL deref when RX memory exhausted (Sam Edwards) [Orabug: 39460207] {CVE-2026-46110}
  - net: stmmac: rename STMMAC_GET_ENTRY() -> STMMAC_NEXT_ENTRY() (Russell King)
  - net: stmmac: avoid shadowing global buf_sz (Russell King)
  - ALSA: aloop: Fix peer runtime UAF during format-change stop (Cássio Gabriel) [Orabug: 39452423] {CVE-2026-46090}
  - crypto: caam - guard HMAC key hex dumps in hash_digest_key (Thorsten Blum)
  - printk: add print_hex_dump_devel() (Thorsten Blum)
  - erofs: fix unsigned underflow in z_erofs_lz4_handle_overlap() (Junrui Luo) [Orabug: 39452109] {CVE-2026-45999}
  - erofs: tidy up z_erofs_lz4_handle_overlap() (Gao Xiang)
  - erofs: move {in,out}pages into struct z_erofs_decompress_req (Gao Xiang)
  - crypto: nx - fix bounce buffer leaks in nx842_crypto_{alloc,free}_ctx (Thorsten Blum)
  - hfsplus: fix held lock freed on hfsplus_fill_super() (Zilin Guan)
  - hfsplus: fix uninit-value by validating catalog record size (Deepanshu Kartikey)
  - mtd: spinand: winbond: Declare the QE bit on W25NxxJW (Miquel Raynal)
  - udf: fix partition descriptor append bookkeeping (Seohyeon Maeng) [Orabug: 39452077] {CVE-2026-45991}
  - mmc: core: Optimize time for secure erase/trim for some Kingston eMMCs (Luke Wang)
  - octeon_ep_vf: add NULL check for napi_build_skb() (David Carlier) [Orabug: 39460536] {CVE-2026-46188}
  - hwmon: (powerz) Avoid cacheline sharing for DMA buffer (Thomas Weißschuh)
  - dma-mapping: add __dma_from_device_group_begin()/end() (Michael S. Tsirkin)
  - dma-mapping: drop unneeded includes from dma-mapping.h (Christoph Hellwig)
  - fs: prepare for adding LSM blob to backing_file (Amir Goldstein)
  - fbdev: defio: Disconnect deferred I/O from the lifetime of struct fb_info (Thomas Zimmermann) [Orabug: 39452331] {CVE-2026-46065}
  - bpf: Fix use-after-free in arena_vm_close on fork (Alexei Starovoitov) [Orabug: 39451458] {CVE-2026-45837}
  - LoongArch: Use per-root-bridge PCIH flag to skip mem resource fixup (Huacai Chen)
  - LoongArch: KVM: Use kvm_set_pte() in kvm_flush_pte() (Tao Cui)
  - LoongArch: KVM: Move unconditional delay into timer clear scenery (Bibo Mao)
  - LoongArch: KVM: Fix HW timer interrupt lost when inject interrupt by software (Bibo Mao)
  - LoongArch: KVM: Fix "unreliable stack" for kvm_exc_entry (Xianglai Li)
  - LoongArch: KVM: Cap KVM_CAP_NR_VCPUS by KVM_CAP_MAX_VCPUS (Maqiang)
  - KVM: arm64: Fix initialisation order in __pkvm_init_finalise() (Quentin Perret)
  - KVM: arm64: vgic: Fix IIDR revision field extracted from wrong value (David Woodhouse)
  - f2fs: fix uninitialized kobject put in f2fs_init_sysfs() (Guangshuo Li)
  - f2fs: fix node_cnt race between extent node destroy and writeback (Yongpeng Yang)
  - f2fs: fix incorrect multidevice info in trace_f2fs_map_blocks() (Yongpeng Yang)
  - f2fs: fix fiemap boundary handling when read extent cache is incomplete (Yongpeng Yang)
  - f2fs: add READ_ONCE() for i_blocks in f2fs_update_inode() (Cen Zhang)
  - mptcp: fix scheduling with atomic in timestamp sockopt (Gang Yan) [Orabug: 39460449] {CVE-2026-46168}
  - mptcp: sockopt: set timestamp flags on subflow socket, not msk (Gang Yan)
  - mptcp: use MPTCP_RST_EMPTCP for ACK HMAC validation failure (Shardul Bankar)
  - mptcp: use MPJoinSynAckHMacFailure for SynAck HMAC failure (Shardul Bankar)
  - mptcp: fastclose msk when linger time is 0 (Matthieu Baerts)
  - selftests: mptcp: pm: restrict 'unknown' check to pm_nl_ctl (Matthieu Baerts)
  - selftests: mptcp: check output: catch cmd errors (Matthieu Baerts)
  - RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (Jason Gunthorpe) [Orabug: 39460539] {CVE-2026-46189}
  - RDMA/rxe: Reject unknown opcodes before ICRC processing (Michael Bommarito) [Orabug: 39460302] {CVE-2026-46133}
  - RDMA/rxe: Reject non-8-byte ATOMIC_WRITE payloads (Michael Bommarito) [Orabug: 39460228] {CVE-2026-46114}
  - RDMA/ocrdma: Don't NULL deref uctx on errors in ocrdma_copy_pd_uresp() (Jason Gunthorpe) [Orabug: 39460276] {CVE-2026-46127}
  - RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (Junrui Luo) [Orabug: 39460484] {CVE-2026-46176}
  - RDMA/mlx4: Fix resource leak on error in mlx4_ib_create_srq() (Jason Gunthorpe) [Orabug: 39460495] {CVE-2026-46178}
  - RDMA/mana: Validate rx_hash_key_len (Jason Gunthorpe)
  - RDMA/mana: Fix mana_destroy_wq_obj() cleanup in mana_ib_create_qp_rss() (Jason Gunthorpe)
  - RDMA/mana: Fix error unwind in mana_ib_create_qp_rss() (Jason Gunthorpe)
  - power: supply: max17042: avoid overflow when determining health (André Draszik)
  - PCI/ASPM: Fix pci_clear_and_set_config_dword() usage (Lukas Wunner)
  - PCI/AER: Stop ruling out unbound devices as error source (Lukas Wunner)
  - PCI/AER: Clear only error bits in PCIe Device Status (Shuai Xue)
  - PCI: Update saved_config_space upon resource assignment (Lukas Wunner)
  - mm/damon/sysfs-schemes: protect memcg_path kfree() with damon_sysfs_lock (Seongjae Park) [Orabug: 39460252] {CVE-2026-46121}
  - KVM: x86: check for nEPT/nNPT in slow flush hypercalls (Paolo Bonzini) [Orabug: 39460292] {CVE-2026-46131}
  - smb: client: validate dacloffset before building DACL pointers (Michael Bommarito) [Orabug: 39460562] {CVE-2026-46195}
  - smb: client: use kzalloc to zero-initialize security descriptor buffer (Bjoern Doebel) [Orabug: 39460324] {CVE-2026-46139}
  - smb/client: fix out-of-bounds read in symlink_data() (Zisen Ye) [Orabug: 39460524] {CVE-2026-46185}
  - smb/client: fix out-of-bounds read in smb2_compound_op() (Zisen Ye) [Orabug: 39460391] {CVE-2026-46155}
  - s390/debug: Reject zero-length input in debug_input_flush_fn() (Vasily Gorbik)
  - RDMA/hns: Fix unlocked call to hns_roce_qp_remove() (Jason Gunthorpe)
  - pmdomain: core: Fix detach procedure for virtual devices in genpd (Ulf Hansson) [Orabug: 39524578] {CVE-2026-46292}
  - nvmet: avoid recursive nvmet-wq flush in nvmet_ctrl_free (Chaitanya Kulkarni) [Orabug: 39524612] {CVE-2026-46304}
  - nvmet-tcp: fix race between ICReq handling and queue teardown (Chaitanya Kulkarni) [Orabug: 39460309] {CVE-2026-46135}
  - nvme-apple: drop invalid put of admin queue reference count (Fedor Pchelkin)
  - md/raid10: fix divide-by-zero in setup_geo() with zero far_copies (Junrui Luo) [Orabug: 39460414] {CVE-2026-46161}
  - libceph: Fix slab-out-of-bounds access in auth message processing (Raphael Zimmer) [Orabug: 39460243] {CVE-2026-46119}
  - lib/scatterlist: fix temp buffer in extract_user_to_sg() (Christian A. Ehrhardt)
  - lib/scatterlist: fix length calculations in extract_kvec_to_sg (Christian A. Ehrhardt) [Orabug: 39524571] {CVE-2026-46289}
  - lib/crypto: mpi: Fix integer underflow in mpi_read_raw_from_sgl() (Lukas Wunner) [Orabug: 39410855] {CVE-2026-43492}
  - iommu/arm-smmu-v3: Add a missing dma_wmb() for hitless STE update (Nicolin Chen)
  - isofs: validate block number from NFS file handle in isofs_export_iget (Michael Bommarito) [Orabug: 39460264] {CVE-2026-46124}
  - isofs: validate Rock Ridge CE continuation extent against volume size (Michael Bommarito) [Orabug: 39524608] {CVE-2026-46303}
  - dm-verity-fec: correctly reject too-small hash devices (Eric Biggers)
  - dm-verity-fec: correctly reject too-small FEC devices (Eric Biggers)
  - eventfs: Hold eventfs_mutex and SRCU when remount walks events (David Carlier) [Orabug: 39460191] {CVE-2026-46106}
  - dm: fix a buffer overflow in ioctl processing (Mikulas Patocka) [Orabug: 39524584] {CVE-2026-46294}
  - dm: don't report warning when doing deferred remove (Mikulas Patocka)
  - dm-thin: fix metadata refcount underflow (Mikulas Patocka) [Orabug: 39460194] {CVE-2026-46107}
  - btrfs: fix double free in create_space_info() error path (Guangshuo Li) [Orabug: 39460843] {CVE-2026-46129}
  - ASoC: qcom: q6apm: remove child devices when apm is removed (Srinivas Kandagatla)
  - ASoC: qcom: q6apm-lpass-dai: Fix multiple graph opens (Srinivas Kandagatla)
  - ASoC: qcom: q6apm-dai: reset queue ptr on trigger stop (Srinivas Kandagatla)
  - ASoC: Intel: bytcr_wm5102: Fix MCLK leak on platform_clock_control error (Cássio Gabriel)
  - ASoC: fsl_easrc: fix comment typo (Joseph Salisbury)
  - ASoC: amd: yc: Add HP OMEN Gaming Laptop 16-ap0xxx product line in quirk table (Tommaso Soncin)
  - cpuidle: powerpc: avoid double clear when breaking snooze (Shrikanth Hegde)
  - clk: microchip: mpfs-ccc: fix out of bounds access during output registration (Conor Dooley)
  - clk: imx: imx8-acm: fix flags for acm clocks (Stefan Eichenberger)
  - spi: topcliff-pch: fix use-after-free on unbind (Johan Hovold)
  - spi: topcliff-pch: fix controller deregistration (Johan Hovold)
  - thermal/drivers/sprd: Fix raw temperature clamping in sprd_thm_rawdata_to_temp (Thorsten Blum)
  - thermal/drivers/sprd: Fix temperature clamping in sprd_thm_temp_to_rawdata (Thorsten Blum)
  - thermal: core: Free thermal zone ID later during removal (Rafael J. Wysocki)
  - udf: reject descriptors with oversized CRC length (Michael Bommarito)
  - spi: microchip-core-qspi: fix controller deregistration (Johan Hovold)
  - ice: fix double free in ice_sf_eth_activate() error path (Guangshuo Li) [Orabug: 39460420] {CVE-2026-46162}
  - ibmveth: Disable GSO for packets with small MSS (Mingming Cao)
  - hv_sock: fix ARM64 support (Hamza Mahfooz)
  - gpio: of: clear OF_POPULATED on hog nodes in remove path (Bartosz Golaszewski)
  - extcon: ptn5150: handle pending IRQ events during system resume (Xu Yang)
  - cifs: change_conf needs to be called for session setup (Shyam Prasad N)
  - cifs: abort open_cached_dir if we don't request leases (Shyam Prasad N)
  - block: add pgmap check to biovec_phys_mergeable (Naman Jain) [Orabug: 39460230] {CVE-2026-46115}
  - af_unix: Reject SIOCATMARK on non-stream sockets (Jiexun Wang) [Orabug: 39619333] {CVE-2026-52928}
  - hwmon: (corsair-psu) Close HID device on probe errors (Myeonghun Pak)
  - clk: rk808: fix OF node reference imbalance (Johan Hovold)
  - hwmon: (ltc2992) Fix u32 overflow in power read path (Sanman Pradhan)
  - hwmon: (ltc2992) Clamp threshold writes to hardware range (Sanman Pradhan)
  - parisc: Fix IRQ leak in LASI driver (Hongling Zeng)
  - net: wwan: t7xx: validate port_count against message length in t7xx_port_enum_msg_handler (Pavitra Jha) [Orabug: 39425984] {CVE-2026-43495}
  - ip6_gre: Use cached t->net in ip6erspan_changelink(). (Maoyi Xie) [Orabug: 39460247] {CVE-2026-46120}
  - net: libwx: fix VF illegal register access (Jiawen Wu)
  - sound: ua101: fix division by zero at probe (Seungju Cheon) [Orabug: 39460518] {CVE-2026-46184}
  - net: rtnetlink: zero ifla_vf_broadcast to avoid stack infoleak in rtnl_fill_vfinfo (Kai Aizen) [Orabug: 39460296] {CVE-2026-46132}
  - mtd: spi-nor: debugfs: fix out-of-bounds read in spi_nor_params_show() (Tudor Ambarus) [Orabug: 39460544] {CVE-2026-46190}
  - KVM: arm64: Fix kvm_vcpu_initialized() macro parameter (Fuad Tabba)
  - fanotify: fix false positive on permission events (Miklos Szeredi) [Orabug: 39460373] {CVE-2026-46150}
  - staging: vme_user: fix root device leak on init failure (Johan Hovold)
  - spi: s3c64xx: fix NULL-deref on driver unbind (Johan Hovold) [Orabug: 39524591] {CVE-2026-46296}
  - spi: zynqmp-gqspi: fix controller deregistration (Johan Hovold)
  - spi: sun6i: fix controller deregistration (Johan Hovold)
  - spi: ti-qspi: fix controller deregistration (Johan Hovold)
  - spi: sun4i: fix controller deregistration (Johan Hovold)
  - spi: syncuacer: fix controller deregistration (Johan Hovold)
  - Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_state_change_cb() (Siwei Zhang) [Orabug: 39445771] {CVE-2026-45834}
  - Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_new_connection_cb() (Siwei Zhang) [Orabug: 39445780] {CVE-2026-45835}
  - Bluetooth: hci_event: Fix OOB read and infinite loop in hci_le_create_big_complete_evt (Luiz Augusto von Dentz) [Orabug: 39460322] {CVE-2026-46138}
  - Bluetooth: btmtk: validate WMT event SKB length before struct access (Tristan Madani)
  - Bluetooth: virtio_bt: validate rx pkt_type header length (Michael Bommarito)
  - Bluetooth: virtio_bt: clamp rx length before skb_put (Michael Bommarito)
  - LoongArch: KVM: Fix missing EMULATE_FAIL in kvm_emu_mmio_read() (Tao Cui)
  - selinux: prune /sys/fs/selinux/disable (Stephen Smalley)
  - selinux: shrink critical section in sel_write_load() (Stephen Smalley)
  - selinux: don't reserve xattr slot when we won't fill it (David Windsor)
  - xfrm: ah: account for ESN high bits in async callbacks (Michael Bommarito) [Orabug: 39460552] {CVE-2026-46193}
  - ipv6: xfrm6: release dst on error in xfrm6_rcv_encap() (Yilin Zhu) [Orabug: 39460467] {CVE-2026-46172}
  - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Michal Kosiorek) [Orabug: 39460233,39556375] {CVE-2026-46116}
  - xfrm: provide message size for XFRM_MSG_MAPPING (Ruijie Li)
  - powerpc/kdump: fix KASAN sanitization flag for core_$(BITS).o (Sourabh Jain)
  - ALSA: firewire-tascam: Do not drop unread control events (Cássio Gabriel)
  - ALSA: pcm: oss: Fix data race at accessing runtime.oss.trigger (Takashi Iwai)
  - USB: serial: option: add Telit Cinterion LE910Cx compositions (Fabio Porcedda)
  - USB: omap_udc: DMA: Don't enable burst 4 mode (Aaro Koskinen)
  - ALSA: usb-audio: Fix UAC3 cluster descriptor size check (Cássio Gabriel)
  - ALSA: usb-audio: Avoid potential endless loop in convert_chmap_v3() (Takashi Iwai) [Orabug: 39460351] {CVE-2026-46146}
  - ALSA: usb-audio: midi2: Restart output URBs on resume (Cássio Gabriel)
  - usb: usblp: fix uninitialized heap leak via LPGETSTATUS ioctl (Greg Kroah-Hartman) [Orabug: 39460437] {CVE-2026-46167}
  - usb: usblp: fix heap leak in IEEE 1284 device ID via short response (Greg Kroah-Hartman) [Orabug: 39460377] {CVE-2026-46151}
  - wifi: brcmfmac: Fix potential use-after-free issue when stopping watchdog task (Marek Szyprowski) [Orabug: 39460502] {CVE-2026-46180}
  - wifi: b43: enforce bounds check on firmware key index in b43_rx() (Tristan Madani) [Orabug: 39460255] {CVE-2026-46122}
  - wifi: mac80211: remove station if connection prep fails (Johannes Berg) [Orabug: 39460269] {CVE-2026-46125}
  - wifi: ath5k: do not access array OOB (Jiri Slaby) [Orabug: 39524621] {CVE-2026-46307}
  - wifi: mac80211: use safe list iteration in radar detect work (Benjamin Berg) [Orabug: 39460433] {CVE-2026-46166}
  - wifi: rsi: fix kthread lifetime race between self-exit and external-stop (Jeongjun Park) [Orabug: 39460531] {CVE-2026-46187}
  - wifi: mac80211: drop stray 'static' from fast-RX rx_result (Catherine) [Orabug: 39460382] {CVE-2026-46152}
  - wifi: b43legacy: enforce bounds check on firmware key index in RX path (Tristan Madani) [Orabug: 39460423] {CVE-2026-46163}
  - wifi: mt76: mt7921: fix ROC abort flow interruption in mt7921_roc_work (Quan Zhou)
  - wifi: mt76: mt7921: fix a potential clc buffer length underflow (Leon Yen) [Orabug: 39460316] {CVE-2026-46136}
  - wifi: mt76: mt7925: fix incorrect length field in txpower command (Ming Yen Hsieh)
  - wifi: mt76: mt7925: fix AMPDU state handling in mt7925_tx_check_aggr (Quan Zhou)
  - exit: prevent preemption of oopsing TASK_DEAD task (Jann Horn) [Orabug: 39460472] {CVE-2026-46173}
  - Bluetooth: L2CAP: Fix deadlock in l2cap_conn_del() (Hyunwoo Kim) [Orabug: 39250929] {CVE-2026-31499}
  - net/sched: sch_red: Replace direct dequeue call with peek and qdisc_dequeue_peeked (Jamal Hadi Salim) [Orabug: 39425986] {CVE-2026-43496}
  - KVM: SVM: check validity of VMCB controls when returning from SMM (Paolo Bonzini)
  - net: af_key: zero aligned sockaddr tail in PF_KEY exports (Zhengchuan Liang) [Orabug: 39331154] {CVE-2026-43088}
  - net: txgbe: fix RTNL assertion warning when remove module (Jiawen Wu)
  - flow_dissector: do not dissect PPPoE PFC frames (Qingfang Deng) [Orabug: 39524618] {CVE-2026-46306}
  - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (Sean Christopherson) [Orabug: 39460220] {CVE-2026-46113}
  - x86/shstk: Prevent deadlock during shstk sigreturn (Rick Edgecombe) [Orabug: 39452323] {CVE-2026-46063}
  - x86: shadow stacks: proper error handling for mmap lock (Linus Torvalds) [Orabug: 39331231] {CVE-2026-43109}
  - mm: convert mm_lock_seq to a proper seqcount (Suren Baghdasaryan)
  - ksmbd: rewrite stop_sessions() with restartable iteration (Daemyung Kang)
  - spi: rockchip: fix controller deregistration (Johan Hovold)
  - ASoC: SOF: Don't allow pointer operations on unconfigured streams (Mark Brown)
  - iommufd: Fix a race with concurrent allocation and unmap (Sina Hassani)
  - ACPI: video: force native backlight on HP OMEN 16 (8A44) (Shivam Kalra)
  - ACPI: video: Add backlight=native quirk for Dell OptiPlex 7770 AIO (Jan Schär)
  - ACPI: scan: Use acpi_dev_put() in object add error paths (Guangshuo Li)
  - fbdev: udlfb: add vm_ops to dlfb_ops_mmap to prevent use-after-free (Rajat Gupta)
  - ipmi:si: Return state to normal if message allocation fails (Corey Minyard) [Orabug: 39460201] {CVE-2026-46108}
  - ipmi: Check event message buffer response for bad data (Corey Minyard) [Orabug: 39460283] {CVE-2026-46128}
  - ipmi: Add limits to event and receive message requests (Corey Minyard) [Orabug: 39460489] {CVE-2026-46177}
  - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (Greg Kroah-Hartman) [Orabug: 39460366] {CVE-2026-46149}


author: Harshit Mogalapalli <harshit.m.mogalapalli@oracle.com> [6.12.0-205.92.1.el10uek]
changelog:
  - uek-rpm: generate symtypes during early FIPS module build (Saeed Mirzamohammadi) [Orabug: 39576442]
  - net/rds: Wait for rdma_cm_event background work to finish (Gerd Rausch) [Orabug: 38111998]
  - Revert "rds: ib: Add cm_id generation scheme in order to detect new ones" (Sharath Srinivasan) [Orabug: 39084664]
  - uek-rpm: Enable MLXREG_DPU module (Alexandre Chartre) [Orabug: 38667152]
  - net/mlx5: Fix crash when moving to switchdev mode (Patrisious Haddad) [Orabug: 38667152,39344020] {CVE-2026-43467}
  - net/mlx5: Fix double unregister of HCA_PORTS component (Gerd Bayer) [Orabug: 38667152,39590860] {CVE-2025-68790}
  - net/mlx5: Fix IPsec cleanup over MPV device (Patrisious Haddad) [Orabug: 38667152,38730559] {CVE-2025-40238}
  - net/mlx5: HWS, Fix uninitialized variables in mlx5hws_pat_calc_nop error flow (Lama Kayal) [Orabug: 38667152]
  - net/mlx5: HWS, prevent rehash from filling up the queues (Yevgeny Kliteynik) [Orabug: 38667152]
  - net/mlx5: HWS, fix complex rules rehash error flow (Yevgeny Kliteynik) [Orabug: 38667152,39590850] {CVE-2025-39768}
  - net/mlx5: HWS, fix simple rules rehash error flow (Yevgeny Kliteynik) [Orabug: 38667152]
  - net/mlx5: HWS, Rearrange to prevent forward declaration (Yevgeny Kliteynik) [Orabug: 38667152]
  - net/mlx5: HWS, Track matcher sizes individually (Vlad Dogaru) [Orabug: 38667152]
  - net/mlx5: HWS, Decouple matcher RX and TX sizes (Vlad Dogaru) [Orabug: 38667152]
  - net/mlx5: HWS, Create STEs directly from matcher (Vlad Dogaru) [Orabug: 38667152]
  - net/mlx5: HWS, Export rule skip logic (Vlad Dogaru) [Orabug: 38667152]
  - net/mlx5: Refactor devcom to return NULL on failure (Patrisious Haddad) [Orabug: 38667152]
  - net/mlx5: Add net namespace support to devcom (Shay Drory) [Orabug: 38667152]
  - net/mlx5: Lag, move devcom registration to LAG layer (Shay Drory) [Orabug: 38667152]
  - net/mlx5: Refactor devcom to use match attributes (Shay Drory) [Orabug: 38667152]
  - platform/mellanox: Fix spelling and comment clarity in Mellanox drivers (Alok Tiwari) [Orabug: 38667152]
  - net/mlx5: HWS, Add error checking to hws_bwc_rule_complex_hash_node_get() (Dan Carpenter) [Orabug: 38667152]
  - RDMA/mlx5: reduce stack usage in mlx5_ib_ufile_hw_cleanup (Arnd Bergmann) [Orabug: 38667152]
  - net/mlx5: HWS, make sure the uplink is the last destination (Vlad Dogaru) [Orabug: 38667152]
  - net/mlx5: HWS, Init mutex on the correct path (Vlad Dogaru) [Orabug: 38667152]
  - mlxsw: core_thermal: Constify struct thermal_zone_device_ops (Christophe Jaillet) [Orabug: 38667152]
  - net/mlx5: HWS, Fix an error code in mlx5hws_bwc_rule_create_complex() (Dan Carpenter) [Orabug: 38667152]
  - net/mlx5e: Allow setting MAC address of representors (Mark Bloch) [Orabug: 38667152]
  - RDMA/mlx5: Avoid flexible array warning (Leon Romanovsky) [Orabug: 38667152]
  - i2c: mlxbf: avoid 64-bit division (Arnd Bergmann) [Orabug: 38667152]
  - i2c-mlxbf: Improve I2C bus timing configuration (Chris Babroski) [Orabug: 38667152]
  - i2c-mlxbf: Add repeated start condition support (Chris Babroski) [Orabug: 38667152]
  - net/mlx5e: Don't drop RTNL during firmware flash (Cosmin Ratiu) [Orabug: 38667152]
  - net/mlx5: HWS, handle modify header actions dependency (Yevgeny Kliteynik) [Orabug: 38667152]
  - net/mlx5: HWS, fix typo - 'nope' to 'nop' (Yevgeny Kliteynik) [Orabug: 38667152]
  - net/mlx5: HWS, register reformat actions with fw (Vlad Dogaru) [Orabug: 38667152]
  - net/mlx5: SWS, fix reformat id error handling (Vlad Dogaru) [Orabug: 38667152]
  - selftests: net: validate team flags propagation (Stanislav Fomichev) [Orabug: 38667152]
  - vfio/mlx5: Enable the DMA link API (Leon Romanovsky) [Orabug: 38667152]
  - vfio/mlx5: Rewrite create mkey flow to allow better code reuse (Leon Romanovsky) [Orabug: 38667152]
  - vfio/mlx5: Explicitly use number of pages instead of allocated length (Leon Romanovsky) [Orabug: 38667152]
  - i2c: mlxbf: Use str_read_write() helper (Fengwei) [Orabug: 38667152]
  - RDMA/mlx5: Add support for 200Gbps per lane speeds (Patrisious Haddad) [Orabug: 38667152]
  - net/mlx5: Use to_delayed_work() (Chen Ni) [Orabug: 38667152]
  - net: mlxsw: convert to ndo_hwtstamp_get() and ndo_hwtstamp_set() (Vladimir Oltean) [Orabug: 38667152]
  - net/mlx5: HWS, dump bad completion details (Yevgeny Kliteynik) [Orabug: 38667152]
  - net/mlx5: HWS, rework rehash loop (Yevgeny Kliteynik) [Orabug: 38667152]
  - net/mlx5: HWS, fix redundant extension of action templates (Yevgeny Kliteynik) [Orabug: 38667152]
  - net/mlx5: HWS, fix counting of rules in the matcher (Yevgeny Kliteynik) [Orabug: 38667152]
  - net/mlx5: HWS, force rehash when rule insertion failed (Yevgeny Kliteynik) [Orabug: 38667152]
  - net/mlx5: HWS, support complex matchers (Yevgeny Kliteynik) [Orabug: 38667152]
  - net/mlx5: HWS, introduce isolated matchers (Yevgeny Kliteynik) [Orabug: 38667152]
  - net/mlx5: HWS, expose polling function in header file (Yevgeny Kliteynik) [Orabug: 38667152]
  - net/mlx5: HWS, add definer function to get field name str (Yevgeny Kliteynik) [Orabug: 38667152]
  - net/mlx5: HWS, expose function mlx5hws_table_ft_set_next_ft in header (Yevgeny Kliteynik) [Orabug: 38667152]
  - net/mlx5: support software TX timestamp (Stanislav Fomichev) [Orabug: 38667152]
  - RDMA/core: Convert UMEM ODP DMA mapping to caching IOVA and page linkage (Leon Romanovsky) [Orabug: 38667152]
  - RDMA/umem: Store ODP access mask information in PFN (Leon Romanovsky) [Orabug: 38667152]
  - platform/mellanox: mlxreg-dpu: Fix smatch warnings (Vadim Pasternak) [Orabug: 38667152]
  - platform: mellanox: nvsw-sn2200: Fix .items in nvsw_sn2201_busbar_hotplug (Nathan Chancellor) [Orabug: 38667152]
  - platform: mellanox: nvsw-sn2200: Add support for new system flavour (Vadim Pasternak) [Orabug: 38667152]
  - platform: mellanox: mlx-platform: Add support for new Nvidia system (Vadim Pasternak) [Orabug: 38667152]
  - platform: mellanox: Cosmetic changes to improve code style (Vadim Pasternak) [Orabug: 38667152]
  - platform: mellanox: Introduce support of Nvidia smart switch (Vadim Pasternak) [Orabug: 38667152]
  - platform/mellanox: mlxreg-dpu: Add initial support for Nvidia DPU (Vadim Pasternak) [Orabug: 38667152]
  - net/mlx4_core: Adjust allocation type for buddy->bits (Kees Cook) [Orabug: 38667152]
  - net/mlx5: HWS, Disallow matcher IP version mixing (Vlad Dogaru) [Orabug: 38667152]
  - net/mlx5: Fix spelling mistakes in mlx5_core_dbg message and comments (Colin Ian King) [Orabug: 38667152]
  - net/mlx5e: ethtool: Fix formatting of ptp_rq0_csum_complete_tail_slow (Kees Cook) [Orabug: 38667152]
  - bonding: Fix multiple long standing offload races (Cosmin Ratiu) [Orabug: 38667152]
  - xfrm: Add explicit dev to .xdo_dev_state_{add,delete,free} (Cosmin Ratiu) [Orabug: 38667152]
  - xfrm: Remove unneeded device check from validate_xmit_xfrm (Cosmin Ratiu) [Orabug: 38667152]
  - xfrm: Use xdo.dev instead of xdo.real_dev (Cosmin Ratiu) [Orabug: 38667152]
  - net: ptp: introduce .supported_perout_flags to ptp_clock_info (Jacob Keller) [Orabug: 38667152]
  - net: ptp: introduce .supported_extts_flags to ptp_clock_info (Jacob Keller) [Orabug: 38667152]
  - igb: reject invalid external timestamp requests for 82580-based HW (Jacob Keller) [Orabug: 38667152]
  - platform/mellanox: Rename field to improve code readability (Vadim Pasternak) [Orabug: 38667152]
  - net/mlx5: HWS, Export action STE tables to debugfs (Vlad Dogaru) [Orabug: 38667152]
  - net/mlx5: HWS, Free unused action STE tables (Vlad Dogaru) [Orabug: 38667152]
  - net/mlx5: HWS, Cleanup matcher action STE table (Vlad Dogaru) [Orabug: 38667152]
  - net/mlx5: HWS, Use the new action STE pool (Vlad Dogaru) [Orabug: 38667152]
  - net/mlx5: HWS, Implement action STE pool (Vlad Dogaru) [Orabug: 38667152]
  - net/mlx5: HWS, Fix pool size optimization (Vlad Dogaru) [Orabug: 38667152]
  - net/mlx5: HWS, Add fullness tracking to pool (Vlad Dogaru) [Orabug: 38667152]
  - net/mlx5: HWS, Cleanup after pool refactoring (Vlad Dogaru) [Orabug: 38667152]
  - net/mlx5: HWS, Refactor pool implementation (Vlad Dogaru) [Orabug: 38667152]
  - net/mlx5: HWS, Make pool single resource (Vlad Dogaru) [Orabug: 38667152]
  - net/mlx5: HWS, Remove unused element array (Vlad Dogaru) [Orabug: 38667152]
  - net/mlx5: HWS, Fix matcher action template attach (Vlad Dogaru) [Orabug: 38667152]
  - RDMA: Replace msecs_to_jiffies with secs_to_jiffies for timeout (Peng Jiang) [Orabug: 38667152]
  - RDMA/mlx5: convert timeouts to secs_to_jiffies() (Easwar Hariharan) [Orabug: 38667152]
  - gve: remove xdp_xsk_done and xdp_xsk_wakeup statistics (Joshua Washington) [Orabug: 38667152]
  - net: lan743x: reject unsupported external timestamp requests (Jacob Keller) [Orabug: 38667152]
  - renesas: reject PTP_STRICT_FLAGS as unsupported (Jacob Keller) [Orabug: 38667152]
  - eth: bnxt: remove most dependencies on RTNL (Stanislav Fomichev) [Orabug: 38667152]
  - dma-mapping: remove an outdated comment from dma-map-ops.h (Sui Jingfeng) [Orabug: 38667152]
  - Revert "RDMA/core: Silence oversized kvmalloc() warning" (Mikhael Goikhman) [Orabug: 38667152]
  - eth: bnxt: fix deadlock when xdp is attached or detached (Taehee Yoo) [Orabug: 38667152]
  - xdp: create locked/unlocked instances of xdp redirect target setters (Joshua Washington) [Orabug: 38667152]
  - gve: introduce config-based allocation for XDP (Joshua Washington) [Orabug: 38667152]
  - gve: Add RSS cache for non RSS device option scenario (Ziwei Xiao) [Orabug: 38667152]
  - virtio_pci: drop kernel.h (Michael S. Tsirkin) [Orabug: 38667152]
  - dma-direct: Fix missing sg_dma_len assignment in P2PDMA bus mappings (Pranjal Shrivastava) [Orabug: 38667152]
  - macsec: sync features on RTM_NEWLINK (Stanislav Fomichev) [Orabug: 38667152,39590858] {CVE-2025-39874}
  - net: dev_ioctl: take ops lock in hwtstamp lower paths (Carolina Jubran) [Orabug: 38667152,39590854] {CVE-2025-39908}
  - hamradio: ignore ops-locked netdevs (Stanislav Fomichev) [Orabug: 38667152]
  - net: lapbether: ignore ops-locked netdevs (Stanislav Fomichev) [Orabug: 38667152]
  - macsec: set IFF_UNICAST_FLT priv flag (Stanislav Fomichev) [Orabug: 38667152]
  - team: replace team lock with rtnl lock (Stanislav Fomichev) [Orabug: 38667152,39590857] {CVE-2025-39733}
  - net: prevent a NULL deref in rtnl_create_link() (Eric Dumazet) [Orabug: 38667152,39590851] {CVE-2025-38271}
  - hv_netvsc: fix potential deadlock in netvsc_vf_setxdp() (Saurabh Singh Sengar) [Orabug: 38667152]
  - virtio-pci: Fix result size returned for the admin command completion (Israel Rukshin) [Orabug: 38667152,39590859] {CVE-2025-38314}
  - af_packet: move notifier's packet_dev_mc out of rcu critical section (Stanislav Fomichev) [Orabug: 38667152]
  - team: grab team lock during team_change_rx_flags (Stanislav Fomichev) [Orabug: 38667152]
  - net: devmem: fix kernel panic when netlink socket close after module unload (Taehee Yoo) [Orabug: 38667152]
  - net: Lock lower level devices when updating features (Cosmin Ratiu) [Orabug: 38667152]
  - net: add missing instance lock to dev_set_promiscuity (Stanislav Fomichev) [Orabug: 38667152]
  - net: Lock netdevices during dev_shutdown (Cosmin Ratiu) [Orabug: 38667152]
  - net: fix the missing unlock for detached devices (Jakub Kicinski) [Orabug: 38667152]
  - virtio_pci: Use self group type for cap commands (Daniel Jurgens) [Orabug: 38667152]
  - net: don't try to ops lock uninitialized devs (Jakub Kicinski) [Orabug: 38667152]
  - net: don't mix device locking in dev_close_many() calls (Jakub Kicinski) [Orabug: 38667152]
  - bonding: hold ops lock around get_link (Stanislav Fomichev) [Orabug: 38667152]
  - rtnetlink: Fix bad unlock balance in do_setlink(). (Kuniyuki Iwashima) [Orabug: 38667152]
  - bpf: add missing ops lock around dev_xdp_attach_link (Stanislav Fomichev) [Orabug: 38667152]
  - eth: gve: add missing netdev locks on reset and shutdown paths (Jakub Kicinski) [Orabug: 38667152]
  - net: fix use-after-free in the netdev_nl_sock_priv_destroy() (Taehee Yoo) [Orabug: 38667152]
  - net: lapbether: use netdev_lockdep_set_classes() helper (Eric Dumazet) [Orabug: 38667152]
  - net: move replay logic to tc_modify_qdisc (Stanislav Fomichev) [Orabug: 38667152]
  - hamradio: use netdev_lockdep_set_classes() helper (Eric Dumazet) [Orabug: 38667152]
  - bpf: fix a possible NULL deref in bpf_map_offload_map_alloc() (Eric Dumazet) [Orabug: 38667152]
  - net: Prevent use after free in netif_napi_set_irq_locked() (Dan Carpenter) [Orabug: 38667152]
  - iavf: fix circular lock dependency with netdev_lock (Jacob Keller) [Orabug: 38667152]
  - s390/qeth: move netif_napi_add_tx() and napi_enable() from under BH (Alexandra Winter) [Orabug: 38667152]
  - iavf: Fix a locking bug in an error path (Bart Van Assche) [Orabug: 38667152]
  - wifi: mt76: move napi_enable() from under BH (Jakub Kicinski) [Orabug: 38667152]
  - eth: via-rhine: fix calling napi_enable() in atomic context (Jakub Kicinski) [Orabug: 38667152]
  - eth: niu: fix calling napi_enable() in atomic context (Jakub Kicinski) [Orabug: 38667152]
  - eth: 8139too: fix calling napi_enable() in atomic context (Jakub Kicinski) [Orabug: 38667152]
  - net: mvneta: fix locking in mvneta_cpu_online() (Harshit Mogalapalli) [Orabug: 38667152]
  - net: destroy dev->lock later in free_netdev() (Eric Dumazet) [Orabug: 38667152]
  - rtnetlink: fix rtnl_dump_ifinfo() error path (Eric Dumazet) [Orabug: 38667152]
  - rtnetlink: Fix an error handling path in rtnl_newlink() (Christophe Jaillet) [Orabug: 38667152]
  - xdp: double protect netdev->xdp_flags with netdev->lock (Jakub Kicinski) [Orabug: 38667152]
  - netdev: add "ops compat locking" helpers (Jakub Kicinski) [Orabug: 38667152]
  - net: designate XSK pool pointers in queues as "ops protected" (Jakub Kicinski) [Orabug: 38667152]
  - net: avoid potential race between netdev_get_by_index_lock() and netns switch (Jakub Kicinski) [Orabug: 38667152]
  - net: hold instance lock during NETDEV_REGISTER/UP (Stanislav Fomichev) [Orabug: 38667152]
  - net: switch to netif_disable_lro in inetdev_init (Stanislav Fomichev) [Orabug: 38667152]
  - net: protect rxq->mp_params with the instance lock (Jakub Kicinski) [Orabug: 38667152]
  - net: designate queue -> napi linking as "ops protected" (Jakub Kicinski) [Orabug: 38667152]
  - net: designate queue counts as "double ops protected" by instance lock (Jakub Kicinski) [Orabug: 38667152]
  - net: explain "protection types" for the instance lock (Jakub Kicinski) [Orabug: 38667152]
  - net: constify dev pointer in misc instance lock helpers (Jakub Kicinski) [Orabug: 38667152]
  - net: remove netif_set_real_num_rx_queues() helper for when SYSFS=n (Jakub Kicinski) [Orabug: 38667152]
  - net: bubble up taking netdev instance lock to callers of net_devmem_unbind_dmabuf() (Jakub Kicinski) [Orabug: 38667152]
  - net: reorder dev_addr_sem lock (Stanislav Fomichev) [Orabug: 38667152]
  - Revert "net: replace dev_addr_sem with netdev instance lock" (Stanislav Fomichev) [Orabug: 38667152]
  - net: drop rtnl_lock for queue_mgmt operations (Stanislav Fomichev) [Orabug: 38667152]
  - net: add granular lock for the netdev netlink socket (Stanislav Fomichev) [Orabug: 38667152]
  - net: create netdev_nl_sock to wrap bindings list (Stanislav Fomichev) [Orabug: 38667152]
  - net: add helpers for setting a memory provider on an rx queue (David Wei) [Orabug: 38667152]
  - net: page_pool: add memory provider helpers (Pavel Begunkov) [Orabug: 38667152]
  - net: prepare for non devmem TCP memory providers (Pavel Begunkov) [Orabug: 38667152]
  - net: page_pool: add a mp hook to unregister_netdevice* (Pavel Begunkov) [Orabug: 38667152]
  - net: page_pool: add callback for mp info printing (Pavel Begunkov) [Orabug: 38667152]
  - netdev: add io_uring memory provider info (David Wei) [Orabug: 38667152]
  - net: generalise net_iov chunk owners (Pavel Begunkov) [Orabug: 38667152]
  - net: prefix devmem specific helpers (Pavel Begunkov) [Orabug: 38667152]
  - page_pool: disable sync for cpu for dmabuf memory provider (Mina Almasry) [Orabug: 38667152]
  - net: page_pool: create page_pool_alloc_netmem (Mina Almasry) [Orabug: 38667152]
  - net: page_pool: rename page_pool_alloc_netmem to *_netmems (Mina Almasry) [Orabug: 38667152]
  - net: move misc netdev_lock flavors to a separate header (Jakub Kicinski) [Orabug: 38667152]
  - net: add option to request netdev instance lock (Stanislav Fomichev) [Orabug: 38667152]
  - net: replace dev_addr_sem with netdev instance lock (Stanislav Fomichev) [Orabug: 38667152]
  - net: hold netdev instance lock during ndo_bpf (Stanislav Fomichev) [Orabug: 38667152]
  - net: disallow setup single buffer XDP when tcp-data-split is enabled. (Taehee Yoo) [Orabug: 38667152]
  - net: ethtool: add hds_config member in ethtool_netdev_state (Taehee Yoo) [Orabug: 38667152]
  - net: hold netdev instance lock during sysfs operations (Stanislav Fomichev) [Orabug: 38667152]
  - net: hold netdev instance lock during ioctl operations (Stanislav Fomichev) [Orabug: 38667152]
  - net: hold netdev instance lock during rtnetlink operations (Stanislav Fomichev) [Orabug: 38667152]
  - net: hold netdev instance lock during queue operations (Stanislav Fomichev) [Orabug: 38667152]
  - net: move aRFS rmap management and CPU affinity to core (Ahmed Zaki) [Orabug: 38667152]
  - net: warn if NAPI instance wasn't shut down (Jakub Kicinski) [Orabug: 38667152]
  - net: protect napi->irq with netdev_lock() (Jakub Kicinski) [Orabug: 38667152]
  - bnxt: Add support for persistent NAPI config (Joe Damato) [Orabug: 38667152]
  - gve: Map NAPI instances to queues (Joe Damato) [Orabug: 38667152]
  - gve: Map IRQs to NAPI instances (Joe Damato) [Orabug: 38667152]
  - net: devmem: don't call queue stop / start when the interface is down (Jakub Kicinski) [Orabug: 38667152]
  - net: refactor netdev_rx_queue_restart() to use local qops (Jakub Kicinski) [Orabug: 38667152]
  - net: hold netdev instance lock during qdisc ndo_setup_tc (Stanislav Fomichev) [Orabug: 38667152]
  - net: sched: wrap doit/dumpit methods (Stanislav Fomichev) [Orabug: 38667152]
  - net: hold netdev instance lock during nft ndo_setup_tc (Stanislav Fomichev) [Orabug: 38667152]
  - net: hold netdev instance lock during ndo_open/ndo_stop (Stanislav Fomichev) [Orabug: 38667152]
  - net: plumb extack in __dev_change_net_namespace() (Nicolas Dichtel) [Orabug: 38667152]
  - net: advertise netns_immutable property via netlink (Nicolas Dichtel) [Orabug: 38667152]
  - net: protect threaded status of NAPI with netdev_lock() (Jakub Kicinski) [Orabug: 38667152]
  - net: protect NAPI enablement with netdev_lock() (Jakub Kicinski) [Orabug: 38667152]
  - net: protect netdev->napi_list with netdev_lock() (Jakub Kicinski) [Orabug: 38667152]
  - net: make sure we retain NAPI ordering on netdev->napi_list (Jakub Kicinski) [Orabug: 38667152]
  - net: add netdev->up protected by netdev_lock() (Jakub Kicinski) [Orabug: 38667152]
  - net: add helpers for lookup and walking netdevs under netdev_lock() (Jakub Kicinski) [Orabug: 38667152]
  - net: warn during dump if NAPI list is not sorted (Jakub Kicinski) [Orabug: 38667152]
  - net: make netdev_lock() protect netdev->reg_state (Jakub Kicinski) [Orabug: 38667152]
  - net: add netdev_lock() / netdev_unlock() helpers (Jakub Kicinski) [Orabug: 38667152]
  - eth: iavf: extend the netdev_lock usage (Jakub Kicinski) [Orabug: 38667152]
  - net: cleanup init_dummy_netdev_core() (Jakub Kicinski) [Orabug: 38667152]
  - net: remove init_dummy_netdev() (Jakub Kicinski) [Orabug: 38667152]
  - rtnetlink: Protect struct rtnl_af_ops with SRCU. (Kuniyuki Iwashima) [Orabug: 38667152]
  - rtnetlink: Return int from rtnl_af_register(). (Kuniyuki Iwashima) [Orabug: 38667152]
  - rtnetlink: Call rtnl_link_get_net_capable() in do_setlink(). (Kuniyuki Iwashima) [Orabug: 38667152]
  - rtnetlink: Clean up rtnl_setlink(). (Kuniyuki Iwashima) [Orabug: 38667152]
  - rtnetlink: Clean up rtnl_dellink(). (Kuniyuki Iwashima) [Orabug: 38667152]
  - rtnetlink: Fetch IFLA_LINK_NETNSID in rtnl_newlink(). (Kuniyuki Iwashima) [Orabug: 38667152]
  - rtnetlink: Call rtnl_link_get_net_capable() in rtnl_newlink(). (Kuniyuki Iwashima) [Orabug: 38667152]
  - rtnetlink: Protect struct rtnl_link_ops with SRCU. (Kuniyuki Iwashima) [Orabug: 38667152]
  - rtnetlink: Move ops->validate to rtnl_newlink(). (Kuniyuki Iwashima) [Orabug: 38667152]
  - rtnetlink: Move rtnl_link_ops_get() and retry to rtnl_newlink(). (Kuniyuki Iwashima) [Orabug: 38667152]
  - rtnetlink: Move simple validation from __rtnl_newlink() to rtnl_newlink(). (Kuniyuki Iwashima) [Orabug: 38667152]
  - rtnetlink: Factorise do_setlink() path from __rtnl_newlink(). (Kuniyuki Iwashima) [Orabug: 38667152]
  - rtnetlink: Call validate_linkmsg() in do_setlink(). (Kuniyuki Iwashima) [Orabug: 38667152]
  - rtnetlink: Allocate linkinfo[] as struct rtnl_newlink_tbs. (Kuniyuki Iwashima) [Orabug: 38667152]
  - iavf: add support to exchange qos capabilities (Sudheer Mogilappagari) [Orabug: 38667152]
  - testing: net-drv: add basic shaper test (Paolo Abeni) [Orabug: 38667152]
  - iavf: Add net_shaper_ops support (Sudheer Mogilappagari) [Orabug: 38667152]
  - mm/hmm: provide generic DMA managing logic (Leon Romanovsky) [Orabug: 38667152]
  - mm/hmm: let users to tag specific PFN with DMA mapped bit (Leon Romanovsky) [Orabug: 38667152]
  - docs: core-api: document the IOVA-based API (Christoph Hellwig) [Orabug: 38667152]
  - dma-mapping: add a dma_need_unmap helper (Christoph Hellwig) [Orabug: 38667152]
  - dma-mapping: Implement link/unlink ranges API (Leon Romanovsky) [Orabug: 38667152]
  - iommu/dma: Factor out a iommu_dma_map_swiotlb helper (Christoph Hellwig) [Orabug: 38667152]
  - dma-mapping: Provide an interface to allow allocate IOVA (Leon Romanovsky) [Orabug: 38667152]
  - iommu: add kernel-doc for iommu_unmap_fast (Leon Romanovsky) [Orabug: 38667152]
  - iommu: generalize the batched sync after map interface (Christoph Hellwig) [Orabug: 38667152]
  - dma-mapping: move the PCI P2PDMA mapping helpers to pci-p2pdma.h (Christoph Hellwig) [Orabug: 38667152]
  - PCI/P2PDMA: Refactor the p2pdma mapping helpers (Christoph Hellwig) [Orabug: 38667152]
  - net: ethtool: Adjust exactly ETH_GSTRING_LEN-long stats to use memcpy (Kees Cook) [Orabug: 38667152]
  - compiler_types: Introduce __nonstring_array (Kees Cook) [Orabug: 38667152]
  - net: freescale: use ethtool string helpers (Rosen Penev) [Orabug: 38667152]
  - vfio/pci: drop nth_page() usage within SG entry (David Hildenbrand) [Orabug: 38667152]
  - mm: alloc_pages_bulk: rename API (Luiz Capitulino) [Orabug: 38667152]
  - mm: alloc_pages_bulk_noprof: drop page_list argument (Luiz Capitulino) [Orabug: 38667152]
  - vfio/virtio: Add PRE_COPY support for live migration (Yishai Hadas) [Orabug: 38667152]
  - vfio/virtio: Add support for the basic live migration functionality (Yishai Hadas) [Orabug: 38667152]
  - virtio-pci: Introduce APIs to execute device parts admin commands (Yishai Hadas) [Orabug: 38667152]
  - virtio: Manage device and driver capabilities via the admin commands (Yishai Hadas) [Orabug: 38667152]
  - virtio: Extend the admin command to include the result size (Yishai Hadas) [Orabug: 38667152]
  - virtio_pci: Introduce device parts access commands (Yishai Hadas) [Orabug: 38667152]


author: Harshit Mogalapalli <harshit.m.mogalapalli@oracle.com> [6.12.0-205.92.2.el10uek]
changelog:
  - bnxt_en: bring back rtnl lock in bnxt_shutdown (Stanislav Fomichev) [Orabug: 39589466]
  - eth: bnxt: add missing netdev lock management to bnxt_dl_reload_up (Stanislav Fomichev) [Orabug: 39589466]
  - eth: bnxt: request unconditional ops lock (Stanislav Fomichev) [Orabug: 39589466]
  - eth: bnxt: switch to netif_close (Stanislav Fomichev) [Orabug: 39589466]
  - md: fix array_state=clear sysfs deadlock (Yu Kuai) [Orabug: 39190489,39668924] {CVE-2026-53125}
  - md: fix return value of mddev_trylock (Xiao Ni) [Orabug: 39190489]
  - md: avoid repeated calls to del_gendisk (Xiao Ni) [Orabug: 39190489,39668918] {CVE-2025-68373}
  - md: delete mddev kobj before deleting gendisk kobj (Xiao Ni) [Orabug: 39190489]
  - md: add legacy_async_del_gendisk mode (Xiao Ni) [Orabug: 39190489]
  - md: fix create on open mddev lifetime regression (Yu Kuai) [Orabug: 39190489]
  - md: Don't clear MD_CLOSING until mddev is freed (Xiao Ni) [Orabug: 39190489]
  - md: call del_gendisk in control path (Xiao Ni) [Orabug: 39190489]
  - net: skbuff: fix missing zerocopy reference in pskb_carve helpers (Minh Nguyen) [Orabug: 39619387,39639984,39656679] {CVE-2026-52943}


author: Harshit Mogalapalli <harshit.m.mogalapalli@oracle.com> [6.12.0-205.92.3.el10uek]
changelog:
  - soc/pensando/bsm: add read-only access to A35 BSM from N1 (Hiren Mehta) [Orabug: 39710757]
  - uek-rpm: update Salina emb4 drivers (Joseph Dobosenski) [Orabug: 39692334]
  - Enable psci on UEK8 emb4 platform (Joseph Dobosenski) [Orabug: 39692334]
  - arm64: amd: add dtb Makefile entries and Pensando defconfigs (Brad Larson) [Orabug: 39692334]
  - arm64: dts: amd: add Salina SoC and boards (Brad Larson) [Orabug: 39692334]
  - arm64: dts: amd: add Elba, Giglio and Deschutes boards (Brad Larson) [Orabug: 39692334]
  - perf: arm-cmn: enable CMN PMU on AMD Pensando Salina (Brad Larson) [Orabug: 39692334]
  - net: mctp-i2c: fix dynamic debug logging (Brad Larson) [Orabug: 39692334]
  - hwmon: pmbus: add LTC3888 and TPS53659 support (Brad Larson) [Orabug: 39692334]
  - mmc: sdhci-cadence: add AMD Pensando bounce buffer and HS400-ES support (Brad Larson) [Orabug: 39692334]
  - spi: add AMD Pensando CPLD SPI multiplexer and Salina dw support (Brad Larson) [Orabug: 39692334]
  - spi: cadence-quadspi: fix indirect write timeout on AMD Pensando (Brad Larson) [Orabug: 39692334]
  - i2c: add AMD Pensando CPLD RD1173 SPI-to-I2C driver (Brad Larson) [Orabug: 39692334]
  - i2c: designware: add AMD Pensando support (Brad Larson) [Orabug: 39692334]
  - uio: add AMD Pensando UIO drivers (Brad Larson) [Orabug: 39692334]
  - rtc: add AMD Pensando ELBA CPLD RTC (Brad Larson) [Orabug: 39692334]
  - reset: add AMD Pensando ELBASR reset controller (Brad Larson) [Orabug: 39692334]
  - mfd: add AMD Pensando ELBASR CPLD (Brad Larson) [Orabug: 39692334]
  - EDAC: add AMD Pensando Elba and Salina memory controllers (Brad Larson) [Orabug: 39692334]
  - irqchip: add AMD Pensando SoC interrupt controller (Brad Larson) [Orabug: 39692334]
  - soc: pensando: add AMD Pensando SoC service drivers (Brad Larson) [Orabug: 39692334]
  - arm64: traps: report AMD Pensando async SError as SIGBUS (Brad Larson) [Orabug: 39692334]
  - dt-bindings: add AMD Pensando Elba, Giglio and Salina SoCs (Brad Larson) [Orabug: 39692334]
  - Revert "mmc: sdhci-cadence: Support ADMA with bounce buffers" (Joseph Dobosenski) [Orabug: 39692334]
  - Revert "hwmon: (pmbus/ltc2978) Add support for ltc3888" (Joseph Dobosenski) [Orabug: 39692334]
  - Revert "hwmon: (pmbus/tps53679) Add support for tps53659" (Joseph Dobosenski) [Orabug: 39692334]
  - Revert "i2c: rd1173: Add Lattice SPI to I2C bus driver" (Joseph Dobosenski) [Orabug: 39692334]
  - Revert "arm64: dts: Add AMD Pensando SoC support" (Joseph Dobosenski) [Orabug: 39692334]
  - Revert "soc/pensando: Add AMD Pensando SoC drivers" (Joseph Dobosenski) [Orabug: 39692334]
  - Revert "arm64: defconfig: Add AMD Pensando defconfig" (Joseph Dobosenski) [Orabug: 39692334]
  - Revert "arm64: Add AMD Pensando UIO support" (Joseph Dobosenski) [Orabug: 39692334]
  - Revert "irqchip/pensando: Add AMD Pensando IRQ driver" (Joseph Dobosenski) [Orabug: 39692334]
  - Revert "mtd: spi-nor: winbond: Add support for W25Q02NW" (Joseph Dobosenski) [Orabug: 39692334]
  - Revert "EDAC/elba: Add AMD Pensando Elba/Giglio SoC EDAC driver" (Joseph Dobosenski) [Orabug: 39692334]
  - Revert "mfd: Add AMD Pensando system controller" (Joseph Dobosenski) [Orabug: 39692334]
  - Revert "rtc: elbacpld: Support RTC in AMD Pensando system controller" (Joseph Dobosenski) [Orabug: 39692334]
  - Revert "spi: dw-mmio: Add AMD Pensando Salina SoC support" (Joseph Dobosenski) [Orabug: 39692334]
  - Revert "arm64: Enable platform SError handler" (Joseph Dobosenski) [Orabug: 39692334]
  - Revert "perf/arm-cmn: Enable AMD Pensando Salina SoC CMN PMU driver" (Joseph Dobosenski) [Orabug: 39692334]
  - Revert "i2c: designware: Support stuck SDA line recovery" (Joseph Dobosenski) [Orabug: 39692334]
  - Revert "mmc: core: Use HPI to interrupt lengthy cache flush (#495)" (Joseph Dobosenski) [Orabug: 39692334]
  - Revert "irqchip/pensando: Fix partial of_iomap() leak on error (#505)" (Joseph Dobosenski) [Orabug: 39692334]
  - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [Orabug: 39673856,39686459] {CVE-2026-53359}
  - Revert "net/rds: poll eq during user-reset" (Praveen Kumar Kannoju) [Orabug: 39659418]
  - net/rds: expand kref coverage to rds_notifier->n_conn (Sharath Srinivasan) [Orabug: 39652107]
  - net/rds: fix crash by expanding kref coverage to rds_incoming.i_conn (Sharath Srinivasan) [Orabug: 39652107]
  - net/mlx5: Fix EQ IRQ affinity notifier debug messages uek8 (Praveen Kumar Kannoju) [Orabug: 39594873]
  - netfs: Fix read-gaps to remove netfs_folio from filled folio (David Howells) [Orabug: 39580474]
  - net/sched: fix pedit partial COW leading to page cache corruption (Rajat Gupta) [Orabug: 39567285,39668752] {CVE-2026-46331}
  - net_sched: act_pedit: use RCU in tcf_pedit_dump() (Eric Dumazet) [Orabug: 39567285] {CVE-2026-46331}
  - uek: kabi: update x86_64/aarch64 kABI files for new symbols (Saeed Mirzamohammadi) [Orabug: 39531375]
  - tracing/events: Expand global buffer for in-kernel event enables (Manjunath Patil) [Orabug: 39480767]
  - eventpoll: fix ep_remove struct eventpoll / struct file UAF (Christian Brauner) [Orabug: 39466882] {CVE-2026-46242}
  - eventpoll: move epi_fget() up (Christian Brauner) [Orabug: 39466882] {CVE-2026-46242}
  - eventpoll: rename ep_remove_safe() back to ep_remove() (Christian Brauner) [Orabug: 39466882] {CVE-2026-46242}
  - eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Christian Brauner) [Orabug: 39466882] {CVE-2026-46242}
  - eventpoll: kill __ep_remove() (Christian Brauner) [Orabug: 39466882] {CVE-2026-46242}
  - eventpoll: split __ep_remove() (Christian Brauner) [Orabug: 39466882] {CVE-2026-46242}
  - eventpoll: use hlist_is_singular_node() in __ep_remove() (Christian Brauner) [Orabug: 39466882] {CVE-2026-46242}
  - mm/truncate: make partial truncation folio split aware of min_order (Jane Chu) [Orabug: 39215509]
  - mm/memory-failure: improve large block size folio handling (Jane Chu) [Orabug: 39215509]
  - mm/huge_memory: add split_huge_page_to_order() (Jane Chu) [Orabug: 39215509]
  - fs/kernfs: raise sb->maxbytes to MAX_LFS_FILESIZE (Jane Chu) [Orabug: 39209761]


author: Sherry Yang <sherry.yang@oracle.com> [6.12.0-205.92.4.el10uek]
changelog:
  - f2fs: fix incorrect FI_NO_EXTENT handling in __destroy_extent_node() (Yongpeng Yang)
  - ALSA: PCM: Fix wait queue list corruption in snd_pcm_drain() on linked streams (Ji'an Zhou)
  - MIPS: smp: report dying CPU to RCU in stop_this_cpu() (Jonas Jelonek)
  - LoongArch: Report dying CPU to RCU in stop_this_cpu() (Huacai Chen)
  - Revert "net: bonding: fix use-after-free in bond_xmit_broadcast()" (Kevin Berry)
  - block: fix handling of dead zone write plugs (Damien Le Moal)
  - Bluetooth: MGMT: Fix backward compatibility with userspace (Luiz Augusto von Dentz)
  - Revert "PCI: qcom: Advertise Hotplug Slot Capability with no Command Completion support" (Sasha Levin)
  - apparmor: fix use-after-free in rawdata dedup loop (Ruslan Valiyev)
  - mmc: dw_mmc-rockchip: Add missing private data for very old controllers (Heiko Stuebner)
  - sctp: disable BH before calling udp_tunnel_xmit_skb() (Xin Long)
  - net: ipv6: Make udp_tunnel6_xmit_skb() void (Petr Machata)
  - dm cache policy smq: check allocation under invalidate lock (Guangshuo Li)
  - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Davidlohr Bueso)
  - locking/mutex: Remove wakeups from under mutex::wait_lock (Peter Zijlstra)
  - ksmbd: fix out-of-bounds read in smb_check_perm_dacl() (Hem Parekh)
  - ipv4: account for fraggap on the paged allocation path (Wongi Lee)  [Orabug: 39738617]
  - inet: add indirect call wrapper for getfrag() calls (Eric Dumazet)  [Orabug: 39738617]
  - net/mlx5: Add vhca_id_type support to IPsec alias creation (Patrisious Haddad)  [Orabug: 39653091]
  - net/mlx5: Add vhca_id_type bit to alias context (Patrisious Haddad)  [Orabug: 39653091]
  - scripts/sorttable: Fix endianness handling in build-time mcount sort (Vasily Gorbik)  [Orabug: 39489132]
  - scripts/sorttable: Allow matches to functions before function entry (Steven Rostedt)  [Orabug: 39489132]
  - scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Steven Rostedt)  [Orabug: 39489132]
  - ftrace: Check against is_kernel_text() instead of kaslr_offset() (Steven Rostedt)  [Orabug: 39489132]
  - ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Steven Rostedt)  [Orabug: 39489132]
  - ftrace: Do not over-allocate ftrace memory (Guenter Roeck)  [Orabug: 39489132]
  - ftrace: Have ftrace pages output reflect freed pages (Steven Rostedt)  [Orabug: 39489132]
  - ftrace: Update the mcount_loc check of skipped entries (Steven Rostedt)  [Orabug: 39489132]
  - scripts/sorttable: Zero out weak functions in mcount_loc table (Steven Rostedt)  [Orabug: 39489132]
  - scripts/sorttable: Always use an array for the mcount_loc sorting (Steven Rostedt)  [Orabug: 39489132]
  - scripts/sorttable: Have mcount rela sort use direct values (Steven Rostedt)  [Orabug: 39489132]
  - arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Steven Rostedt)  [Orabug: 39489132]
  - scripts/sorttable: Use a structure of function pointers for elf helpers (Steven Rostedt)  [Orabug: 39489132]
  - scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Steven Rostedt)  [Orabug: 39489132]
  - scripts/sorttable: Move code from sorttable.h into sorttable.c (Steven Rostedt)  [Orabug: 39489132]
  - scripts/sorttable: Use uint64_t for mcount sorting (Steven Rostedt)  [Orabug: 39489132]
  - scripts/sorttable: Add helper functions for Elf_Sym (Steven Rostedt)  [Orabug: 39489132]
  - scripts/sorttable: Add helper functions for Elf_Shdr (Steven Rostedt)  [Orabug: 39489132]
  - scripts/sorttable: Add helper functions for Elf_Ehdr (Steven Rostedt)  [Orabug: 39489132]
  - scripts/sorttable: Convert Elf_Sym MACRO over to a union (Steven Rostedt)  [Orabug: 39489132]
  - scripts/sorttable: Replace Elf_Shdr Macro with a union (Steven Rostedt)  [Orabug: 39489132]
  - scripts/sorttable: Convert Elf_Ehdr to union (Steven Rostedt)  [Orabug: 39489132]
  - scripts/sorttable: Make compare_extable() into two functions (Steven Rostedt)  [Orabug: 39489132]
  - scripts/sorttable: Have the ORC code use the _r() functions to read (Steven Rostedt)  [Orabug: 39489132]
  - scripts/sorttable: Remove unneeded Elf_Rel (Steven Rostedt)  [Orabug: 39489132]
  - scripts/sorttable: Remove unused write functions (Steven Rostedt)  [Orabug: 39489132]
  - scripts/sorttable: Remove unused macro defines (Steven Rostedt)  [Orabug: 39489132]
  - xfrm: hold dev ref until after transport_finish NF_HOOK (Qi Tang)  [Orabug: 39262397]  {CVE-2026-31663}
  - xfrm: hold device only for the asynchronous decryption (Jianbo Liu)  [Orabug: 39262397]
  - KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (Hyunwoo Kim)  [Orabug: 39531622]  {CVE-2026-46316}
  - fs/binfmt_elf: validate reserved VA ELF notes (Jianfeng Wang)  [Orabug: 39681042]
  - mm: enforce resource limits for reserved VA mappings (Jianfeng Wang)  [Orabug: 39681042]
  - ipv6: account for fraggap on the paged allocation path (Wongi Lee)  [Orabug: 39686467]  {CVE-2026-53362}
  - xen/ovmapi: terminate values passed to xenbus_write (Joe Jin)  [Orabug: 39726311]
  - xen/ovmapi: free queued events on release (Joe Jin)  [Orabug: 39726311]
  - xen/ovmapi: prevent duplicate app registration (Joe Jin)  [Orabug: 39726311]
  - xen/ovmapi: avoid raw user pointer access in get_next_event (Joe Jin)  [Orabug: 39726311]
  - xen/ovmapi: reject oversized posted event payloads (Joe Jin)  [Orabug: 39726311]


author: Sherry Yang <sherry.yang@oracle.com> [6.12.0-205.92.4.1.el10uek]
changelog:
  - net: openvswitch: reject oversized nested action attrs (Asim Viladi Oglu Manizada)  [Orabug: 39816011]  {CVE-2026-64531}
  - Revert "arm64: acpi: Enable ACPI CCEL support" (Will Deacon)  [Orabug: 39812699]
  - virtio_pci: fix vq info pointer lookup via wrong index (Ammar Faizi)  [Orabug: 39812697]
  - xfs: resample the data fork mapping after cycling ILOCK (Darrick J. Wong)  [Orabug: 39812085]


author: Sherry Yang <sherry.yang@oracle.com> [6.12.0-205.92.4.2.el10uek]
changelog:
  - net: tap: set skb->dev before parsing virtio net header in tap_get_user_xdp() (Dongli Zhang)  [Orabug: 39844842]  
  - x86/bugs: Make Safe-RET robust against interrupt injection (Borislav Petkov (AMD))  [Orabug: 39844812]  {CVE-2026-68480} 
  - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Sean Christopherson)  [Orabug: 39844799]  {CVE-2026-64561}


author: LUCI Bot <rhythm.m.mahajan@oracle.com> [6.15.0-0.20250618.el10uek]
changelog:
  - net: mana: Add support for Multi Vports on Bare metal (Haiyang Zhang)  [Orabug: 38064157]
  - tools: hv: Enable debug logs for hv_kvp_daemon (Shradha Gupta)  [Orabug: 38064155]
  - amd_hsmp: Increase the SMU timeout to 500ms (Vijay Kumar)  [Orabug: 38000066]
  - RDMA/mlx5: Fix CC counters query for MPV (Patrisious Haddad)  [Orabug: 37989267]
  - certs: Add new Oracle Linux Driver Signing (key 1) certificate (Sherry Yang)  [Orabug: 37967552]
  - platform/mellanox: mlxbf-pmc: Support additional PMC blocks (Shravan Kumar Ramani)  [Orabug: 37964050]
  - KVM: SEV: Add KVM_SEV_SNP_ENABLE_REQ_CERTS command (Michael Roth)  [Orabug: 37893925]
  - KVM: Introduce KVM_EXIT_SNP_REQ_CERTS for SNP certificate-fetching (Michael Roth)  [Orabug: 37893925]
  - aarch64: increase DEFAULT_CRASH_KERNEL_LOW_SIZE for kdump (Brian Maly)  [Orabug: 37891215]
  - Revert "x86/simplefb: simplefb was broken on UEFI mode Oracle and HP system, skip VIDEO_TYPE_EFI" (Harshit Mogalapalli)  [Orabug: 37860405]
  - uek-rpm: Replace legacy FBDEV drivers with simpledrm and fbdev emulation layer (Harshit Mogalapalli)  [Orabug: 37860405]
  - block: prevent calls to should_fail_bio() optimized by gcc (Prasad Singamsetty)  [Orabug: 37787698]
  - Special case SHM_HUGETLB allocation using mlock ulimit (Prakash Sangappa)  [Orabug: 37704622]
  - Scheduler extension change under Oracle Extensions and change enum value (Prakash Sangappa)  [Orabug: 37654694]
  - kallsyms: Export kallsyms_lookup_name (Boris Ostrovsky)  [Orabug: 37653703]
  - dyndbg: export ddebug_add_module/ddebug_remove_module (Julian Pidancet)  [Orabug: 37628702]
  - kallsyms: add module_kallsyms_on_each_symbol_locked (Julian Pidancet)  [Orabug: 37628702]
  - kallsyms: export module_kallsyms_on_each_symbol (Julian Pidancet)  [Orabug: 37628702]
  - UEK8 kABI padding addition for arch/x86/include/asm/processor.h (Thomas Tai)  [Orabug: 37622935]
  - Revert "selftests/net: add zerocopy support for PF_RDS test case" (Samasth Norway Ananda)  [Orabug: 37598315]
  - Sched: Add scheduler stat for cpu time slice extension (Prakash Sangappa)  [Orabug: 37582998]
  - Sched: Scheduler time slice extension (Prakash Sangappa)  [Orabug: 37582998]
  - uek-misc: Move AVIC selective enablement check to SVM module (Alejandro Jimenez)  [Orabug: 37544590]
  - uek-misc: Define a prefix for uek module messages (Alejandro Jimenez)  [Orabug: 37459409]
  - uek-misc: Clear the AVIC capability on platforms with known errata (Alejandro Jimenez)  [Orabug: 37459409]
  - uek-misc: Add identification for OCI platform (Alejandro Jimenez)  [Orabug: 37459409]
  - x86/PCI: Export find_cap() to be used in early PCI code (Rayan Dasoriya)  [Orabug: 37383446]
  - x86/quirks: Scan all busses for early PCI quirks (Rayan Dasoriya)  [Orabug: 37383446]
  - x86/quirks: Add parameter to clear MSIs early on boot (Rayan Dasoriya)  [Orabug: 37383446]
  - uek: kabi: Introduce APIs to hide/fake inclusion of headers (Saeed Mirzamohammadi)  [Orabug: 37144802]
  - IB/mlx5: Fix mlx5_ib_get_vector_irqn() after dynamic IRQ allocation change (Gerd Rausch)  [Orabug: 37071641]
  - arch: video: handle device NULL check (Ankur Arora)  [Orabug: 37004167]
  - KVM/x86: Do not clear SIPI while in SMM (Boris Ostrovsky)  [Orabug: 36955049]
  - net/mlx5e: drop shorter ethernet frames (Manjunath Patil)  [Orabug: 36879156] [Orabug: 36879126]  {CVE-2024-41090} {CVE-2024-41091} {CVE-2024-41090} {CVE-2024-41091}
  - pci: add hotplug patch support for SOLIDIGM Aura10 AIC 0x025e:0x0b60 (Alan Adamson)  [Orabug: 36797601]
  - PCI: pciehp: Add Solidigm NVMe to spurious DLLSC quirk (Alan Adamson)  [Orabug: 36797601]
  - PCI: pciehp: Add quirk to handle spurious DLLSC on a x4x4 SSD (Alan Adamson)  [Orabug: 36797601]
  - x86/bhi: Do not enable unnecessary BHI mitigation in OCI and Exadata VMs (Alexandre Chartre)  [Orabug: 36672493]
  - uek: kabi: Enable the size checks and fix broken APIs (Saeed Mirzamohammadi)  [Orabug: 36545481]
  - uek: kabi: Introduce new APIs to check for size (Saeed Mirzamohammadi)  [Orabug: 36545481]
  - uek-rpm: Enable cluster scheduling domain level in aarch64 kconfig files (Libo Chen)  [Orabug: 36473544]
  - arm64/uek-misc: add a new boot parameter uek=cls to turn on CLS at boot time (Libo Chen)  [Orabug: 36473544]
  - sched/numa: Adds simple prctl for setting task's preferred node affinity. (chris hyser)  [Orabug: 36446412] [Orabug: 36446412] [Orabug: 36446412]
  - sched/numa: Adds ability to over-ride a task's numa_preferred_nid. (chris hyser)  [Orabug: 36446412] [Orabug: 36446412] [Orabug: 36446412]
  - arm64: Minimize tlb flush due to vttbr writes on AmpereOne (Ganapatrao Kulkarni)  [Orabug: 36349787]
  - uek: kabi: Add two new exported kABI symbols for ACFS and EDV (Saeed Mirzamohammadi)  [Orabug: 36303819]
  - KSPLICE: make sure the stack is zeroed. (Gregory Herrero)  [Orabug: 36155233]
  - Revert "ocfs2: ocfs2 crash due to invalid h_next_leaf_blk value in extent block" (Gautham Ananthakrishna)  [Orabug: 36128249]
  - audit: Re-apply special optimizations (Håkon Bugge)  [Orabug: 36100150]
  - Revert "audit: Apply special optimizations" (Håkon Bugge)  [Orabug: 36100150]
  - hwmon: (opbmc) E6/AST2600 platform enabled (Jan Zdarek)  [Orabug: 36067105]
  - audit: Apply special optimizations (Håkon Bugge)  [Orabug: 36038141]
  - audit: Vary struct audit_entry alignment (Håkon Bugge)  [Orabug: 36038141]
  - net/mlx5: E-Switch, Protect unloading driver while adding rules (Chris Mi)  [Orabug: 35811872]
  - arm64: tools: cpucaps: add spare members (Mihai Carabas)  [Orabug: 35732996]
  - uek_kabi: Add UEK_KABI_DEPRECATE_ENUM (Sherry Yang)  [Orabug: 35466488]
  - Revert "vfio/type1: exclude mdevs from VFIO_UPDATE_VADDR" (Anthony Yznaga)  [Orabug: 35370252]
  - Revert "vfio/type1: revert "block on invalid vaddr"" (Anthony Yznaga)  [Orabug: 35370252]
  - Revert "vfio/type1: revert "implement notify callback"" (Anthony Yznaga)  [Orabug: 35370252]
  - Revert "vfio: revert "iommu driver notify callback"" (Anthony Yznaga)  [Orabug: 35370252]
  - debugfs: allow access blktrace trace files in lockdown mode (Junxiao Bi)  [Orabug: 35275016]
  - mm, compaction: Skip all non-migratable pages during scan (Khalid Aziz)  [Orabug: 35261880]
  - nvme-pci: add NVME_QUIRK_BOGUS_NID for Samsung PM1733a (Saeed Mirzamohammadi)  [Orabug: 35170638]
  - nvme-pci: add NVME_QUIRK_BOGUS_NID for Samsung PM173X (Saeed Mirzamohammadi)  [Orabug: 35166414]
  - ACPI: processor: idle: Disable ACPI C-state probing for xen hvm guest (Joe Jin)  [Orabug: 35132016]
  - iommu/amd: Disable AVIC on certain systems BIOS (Joao Martins)  [Orabug: 35018577]
  - IB/core: Make GID table entry (gid_idx) available immediately (Konrad Rzeszutek Wilk)  [Orabug: 34997647]
  - runtime revert of virtio_net: Stripe queue affinities across cores. (Konrad Rzeszutek Wilk)  [Orabug: 34944782]
  - IB/mlx5: Add a signature check to received EQEs and CQEs (Rohit Nair)
  - RDMA/uverbs: restrack shared PDs (Sharath Srinivasan)  [Orabug: 34812519]
  - x86: Ignore iommu=off for AMD cpus (Dave Kleikamp)  [Orabug: 34779071]
  - Feature: Add cmdline param sched_uek=[preempt,wakeidle] (Libo Chen)  [Orabug: 34775543]
  - iommu/vt-d: set default value of INTEL_IOMMU_FLOPPY_WA to n (Harshit Mogalapalli)  [Orabug: 34724808]
  - audit: annotate branch direction for audit_in_mask() (Ankur Arora)  [Orabug: 34544781]
  - Revert "KVM: x86: Print error code in exception injection tracepoint iff valid" (Sherry Yang)  [Orabug: 34539457]
  - uek-rpm: Enable IMA_APPRAISE_SB_BOOTPARAM (Eric Snowberg)  [Orabug: 34505310]
  - integrity: Allow ima_appraise bootparam to be set when SB is enabled (Eric Snowberg)  [Orabug: 34505310]
  - ocfs2: ocfs2 crash due to invalid h_next_leaf_blk value in extent block (Gautham Ananthakrishna)  [Orabug: 34393593]
  - arm64: add kernel config option to lock down when in Secure Boot mode (Linn Crosetto)  [Orabug: 34304810]
  - lockdown: Run in lockdown integrity mode when SB is enabled. (Eric Snowberg)  [Orabug: 34304810]
  - efi: Add an EFI_SECURE_BOOT flag to indicate secure boot mode (David Howells)  [Orabug: 34304810]
  - net/mlx4: Increase num_srq in low_mem_profile (Dave Kleikamp)  [Orabug: 34161492]
  - kvm/x86: Inherit userspace's core scheduling cookie (Boris Ostrovsky)  [Orabug: 34152329]
  - sched: Add interface for copying core scheduling cookie between two tasks (Boris Ostrovsky)  [Orabug: 34152329]
  - misc/uek: Add uek=oci boot option (Boris Ostrovsky)  [Orabug: 34152329]
  - add kernel param to pre-allocate NICs (Somasundaram Krishnasamy)  [Orabug: 30962711] [Orabug: 34074776]
  - selftests: add define for F_SEAL_FUTURE_WRITE (Larry Bassel)  [Orabug: 33891077]
  - Revert "selftests/net: reap zerocopy completions passed up as ancillary data." (William Kucharski)  [Orabug: 33863259] [Orabug: 33863259]
  - sched: Put vcpu preemption idle check into a SCHED_FEAT. (chris hyser)  [Orabug: 33753125] [Orabug: 33753125] [Orabug: 33753125]
  - net/mlx5: Initialize nvec based on "num_possible_cpus()" (Gerd Rausch)  [Orabug: 33450667]
  - net/mlx5: E-Switch, change VFs default admin state to auto in switchdev (Maor Dickman)  [Orabug: 33447083] [Orabug: 33447083]
  - arm64: Kconfig: enable MADV_DOEXEC functionality (Anthony Yznaga)  [Orabug: 33428539]
  - video: fbdev: cirrusfb: check pixclock to avoid divide by zero (George Kennedy)  [Orabug: 33427957]
  - net: bonding: add new option arp_allslaves for arp_ip_target (Venkat Venkatsubra)  [Orabug: 33352736]
  - xen-acpi-processor: fix coordination type mismatch (Elena Ufimtseva)  [Orabug: 33298423]
  - x86/efi: EFI stub DRTM launch support for Secure Launch (Ross Philipson)  [Orabug: 33297039]
  - x86: Secure Launch late initcall platform module (Daniel P. Smith)  [Orabug: 33297039]
  - tpm: Add sysfs interface to allow setting and querying the default locality (Ross Philipson)  [Orabug: 33297039]
  - tpm: Add ability to set the default locality the TPM chip uses (Ross Philipson)  [Orabug: 33297039]
  - tpm: Make locality requests return consistent values (Daniel P. Smith)  [Orabug: 33297039]
  - tpm: Ensure tpm is in known state at startup (Daniel P. Smith)  [Orabug: 33297039]
  - tpm: Protect against locality counter underflow (Daniel P. Smith)  [Orabug: 33297039]
  - x86/reboot: Secure Launch SEXIT support on reboot paths (Ross Philipson)  [Orabug: 33297039]
  - kexec: Secure Launch kexec SEXIT support (Ross Philipson)  [Orabug: 33297039]
  - x86: Secure Launch SMP bringup support (Ross Philipson)  [Orabug: 33297039]
  - x86: Secure Launch kernel late boot stub (Ross Philipson)  [Orabug: 33297039]
  - x86: Secure Launch kernel early boot stub (Ross Philipson)  [Orabug: 33297039]
  - x86/boot: Place TXT MLE header in the kernel_info section (Ross Philipson)  [Orabug: 33297039]
  - x86/msr: Add variable MTRR base/mask and x2apic ID registers (Ross Philipson)  [Orabug: 33297039]
  - x86: Add early SHA-256 support for Secure Launch early measurements (Daniel P. Smith)  [Orabug: 33297039]
  - x86: Add early SHA-1 support for Secure Launch early measurements (Daniel P. Smith)  [Orabug: 33297039]
  - x86: Secure Launch main header file (Ross Philipson)  [Orabug: 33297039]
  - x86: Secure Launch Resource Table header file (Ross Philipson)  [Orabug: 33297039]
  - x86: Secure Launch Kconfig (Ross Philipson)  [Orabug: 33297039]
  - Documentation/x86: Secure Launch kernel documentation (Daniel P. Smith)  [Orabug: 33297039]
  - IMA: Import key for IMA (Konrad Rzeszutek Wilk)  [Orabug: 33215027]
  - A/A Bonding: Add support for user-space "Resilient RDMAIP" (Gerd Rausch)  [Orabug: 33150457] [Orabug: 33150452] [Orabug: 33150452] [Orabug: 33150452]
  - x86/amd: Disable IBS on Rome processors due to erratum 1215 (Boris Ostrovsky)  [Orabug: 32817178]
  - PCI: hotplug: Add module parameter to allow user control of LEDs (Thomas Tai)  [Orabug: 32556978]
  - hwmon: Add a new Oracle Pilot BMC driver (Eric Snowberg)  [Orabug: 32422656]
  - mm: use padata for copying page ranges in vma_dup() (Anthony Yznaga)  [Orabug: 32387875]
  - mm: avoid heavy swap lock contention when unmapping with padata (Anthony Yznaga)  [Orabug: 32387875]
  - mm: parallelize unmap_page_range() for some large VMAs (Anthony Yznaga)  [Orabug: 32387875]
  - exec, elf: use already allocated notes data in reserve_va_range() (Anthony Yznaga)  [Orabug: 32387875]
  - mm: madv_doexec_flag sysctl (Steve Sistare)  [Orabug: 32387875]
  - mm: introduce MADV_DOEXEC (Steve Sistare)  [Orabug: 32387875]
  - mm: hold the source mmap write lock when copying PTEs (Anthony Yznaga)  [Orabug: 32387875]
  - exec, elf: require opt-in for accepting preserved mem (Anthony Yznaga)  [Orabug: 32387875]
  - mm: introduce VM_EXEC_KEEP (Steve Sistare)  [Orabug: 32387875]
  - mm: fail exec if stack expansion will overlap another vma (Anthony Yznaga)  [Orabug: 32387875]
  - mm: do not assume only the stack vma exists in setup_arg_pages() (Anthony Yznaga)  [Orabug: 32387875]
  - partitions/efi: Enable no warning option for the GPT warnings related to alternative header (Saeed Mirzamohammadi)  [Orabug: 32302134]
  - dm crypt: Allow unaligned bio buffer lengths for skcipher devices (Sudhakar Panneerselvam)  [Orabug: 32197587]
  - IB/mlx4: disable CQ time stamping (aru kolappan)  [Orabug: 33660399] [Orabug: 32055628]
  - kbuild: Convert stack frame size larger than warning to error. (Somasundaram Krishnasamy)  [Orabug: 31992034]
  - vfio/type1: ease mmap_lock writer contention by caching locked_vm (Daniel Jordan)  [Orabug: 31771399]
  - vfio/type1: parallelize vfio_pin_map_dma() (Daniel Jordan)  [Orabug: 31771399]
  - vfio/type1: refactor dma map removal (Daniel Jordan)  [Orabug: 31771399]
  - vfio/type1: pass mm to vfio_pin_pages_remote() (Daniel Jordan)  [Orabug: 31771399]
  - padata: add undo support (Daniel Jordan)  [Orabug: 31771399]
  - padata, lockdep: detect deadlocks between main and helper threads (Daniel Jordan)  [Orabug: 31771399]
  - padata: return first error code from a multithreaded job (Daniel Jordan)  [Orabug: 31771399]
  - padata: remove __init from multithreading functions (Daniel Jordan)  [Orabug: 31771399]
  - xen/ovmapi: Build OVM guest messaging driver (Jonah Palmer)  [Orabug: 30809043]
  - xen/ovmapi: whitelist more caches (Boris Ostrovsky)  [Orabug: 30809043]
  - xen/ovmapi: whitelist name_cache for usercopy (Jacob Wen)  [Orabug: 30809043]
  - xen/ovmapi: Port ovmapi drivers from uek5 to uek6 (Boris Ostrovsky)  [Orabug: 30809043]
  - KEYS: Increase system_extra_certificate size to 8192 bytes (Stephen Brennan)  [Orabug: 30329032]
  - KEYS: Insert incompressible bytes to reserve space in bzImage (Mehmet Kayaalp)  [Orabug: 30329032]
  - KEYS: Support for inserting a certificate into x86 bzImage (Mehmet Kayaalp)  [Orabug: 30329032]
  - KEYS: Add ELF class-independent certificate insertion support (Mehmet Kayaalp)  [Orabug: 30329032]
  - KEYS: Print insert-sys-cert information to stdout instead of stderr (Mehmet Kayaalp)  [Orabug: 30329032]
  - x86/kABI: Increase sizes of feature/bug arrays in case we need more CPU bits. (Konrad Rzeszutek Wilk)  [Orabug: 30318342]
  - mm: Allow userspace to reserve VA range for use by userspace only (Anthony Yznaga)  [Orabug: 30135230]
  - iscsi: scsi_transport_iscsi: modify detected conn err to KERN_ERR (Joe Jin)  [Orabug: 30023361]
  - ksplice: clear randomized kernel stack offset upon entering the freezer (Julian Pidancet)  [Orabug: 29961704]
  - ksplice: Force unwinding the stack of TASK_FREEZABLE tasks. (Julian Pidancet)  [Orabug: 29961704]
  - vmlinux.lds: account for .init.bss.* .init.data.* sections when building with -fdata-sections. (Quentin Casasnovas)  [Orabug: 29961704] [Orabug: 29961704]
  - ksplice: Enable CONFIG_KSPLICE. (Alex Thorlton)  [Orabug: 29961704] [Orabug: 29961704] [Orabug: 29961704] [Orabug: 29961704]
  - ksplice: use -fno-reorder-functions -fno-section-anchors (Vegard Nossum)  [Orabug: 29961704] [Orabug: 29961704] [Orabug: 29961704] [Orabug: 29961704]
  - ksplice: fixup for -ffunction-sections -fdata-sections (Vegard Nossum)  [Orabug: 29961704] [Orabug: 29961704] [Orabug: 29961704] [Orabug: 29961704] [Orabug: 29961704]
  - ksplice: Disable ksplice KBUILD_CFLAGS for KVM nVHE on aarch64. (Victor Erminpour)  [Orabug: 29961704] [Orabug: 29961704] [Orabug: 29961704] [Orabug: 29961704]
  - ksplice: aarch64 use ksplice friendly KBUILD_CFLAGS (Tom Saeger)  [Orabug: 27649476] [Orabug: 29961704] [Orabug: 29961704] [Orabug: 29961704] [Orabug: 29961704]
  - ksplice: add sysctls for determining Ksplice features. (Victor Erminpour)  [Orabug: 26537364] [Orabug: 29961704] [Orabug: 29961704] [Orabug: 29961704] [Orabug: 29961704] [Orabug: 29961704] [Orabug: 29961704]
  - ksplice: clear the stack before going in the freezer. (Victor Erminpour)  [Orabug: 29961704] [Orabug: 29961704] [Orabug: 29961704] [Orabug: 29961704] [Orabug: 29961704] [Orabug: 29961704] [Orabug: 29961704]
  - ksplice: Provide an interface to freeze tasks (Victor Erminpour)  [Orabug: 29961704] [Orabug: 29961704] [Orabug: 29961704] [Orabug: 29961704] [Orabug: 29961704] [Orabug: 29961704]
  - mISDN: Add __exit declaration for module exit function (Somasundaram Krishnasamy)  [Orabug: 29903374]
  - net: enable RPS on vlan devices (Allen Pais)  [Orabug: 29751757]
  - x86/simplefb: simplefb was broken on UEFI mode Oracle and HP system, skip VIDEO_TYPE_EFI (Ethan Zhao)  [Orabug: 29746425]
  - ocfs2: make 'buffered' as the default coherency option (Wengang Wang)  [Orabug: 29745551]
  - perf tools: add --sym-lookup arg to enable symbol lookup in hugepage shm segment (Mike Kravetz)  [Orabug: 29745533]
  - kvm: fix possible spectre gadgets in arch/x86/kvm/hyperv.h (Darren Kenny)  [Orabug: 29719693]
  - kvm: fix possible spectre gadgets in arch/x86/kvm/hyperv.c (Darren Kenny)  [Orabug: 29719693]
  - kvm: fix possible spectre gadgets in arch/x86/kvm/lapic.c (Darren Kenny)  [Orabug: 29719693]
  - kvm: fix possible spectre gadgets in arch/x86/kvm/mmu/mmu.c (Darren Kenny)  [Orabug: 29719693]
  - kvm: fix possible spectre gadgets in virt/kvm/irqchip.c (Darren Kenny)  [Orabug: 29719693]
  - ocfs2: Suppress the error message from being printed in ocfs2_rename (Xiaowei.Hu)  [Orabug: 29708624]
  - kernel: VirtBox workaround for dynamically allocated text (Mike Kravetz)  [Orabug: 29708488]
  - revert commit ff8fb335221e2c446b0d4cbea26be371fd2feb64 (Shuning Zhang)  [Orabug: 29708297]
  - ocfs2: fix a performance issue with synced buffer io (Ryan Ding)
  - ocfs2: call ocfs2_abort when journal abort (Ryan Ding)  [Orabug: 29708259]
  - ocfs2: Tighten free bit calculation in the global bitmap (Sunil Mushran)  [Orabug: 29708168]
  - arm64: do not place BUG() file name in generic section (Rob Gardner)  [Orabug: 29708067]
  - dm crypt: add middle-endian variant of plain64 IV (Konrad Rzeszutek Wilk)  [Orabug: 29689986]
  - arm64: Extend erratum 27456 workaround to ThunderX 83xx (Allen Pais)  [Orabug: 29538492]
  - Ignore hot plug events when force powering off a device (James Puthukattukaran)  [Orabug: 35015760]
  - Adding a new sysfs entry point -- forcepower -- to /sys/bus/pci/slots/X. (James Puthukattukaran)  [Orabug: 34719457]
  - fs/dcache: remove sentinel from negative dentry sysctl (Stephen Brennan)  [Orabug: 37063072]
  - fs/dcache: allow fractional values in fs.negative-dentry-limit (Gautham Ananthakrishna)  [Orabug: 37063072]
  - fs/dcache: remove global pool for negative dentry percpu counters (Gautham Ananthakrishna)  [Orabug: 33468829]
  - fs/dcache: enforce a hard limit on the negative dentry count (Gautham Ananthakrishna)  [Orabug: 33468829]
  - fs/dcache: Estimate the number of negative dentries to prune per filesystem (Gautham Ananthakrishna)  [Orabug: 33468829]
  - fs/dcache: change name and granularity of negative dentry sysctl parameter (Gautham Ananthakrishna)  [Orabug: 33468829]
  - fs/dcache: schedule only one instance of negative dentry shrinker (Gautham Ananthakrishna)  [Orabug: 33468829]
  - fs/dcache: correct the usage of static_key for negative dentry (Gautham Ananthakrishna)  [Orabug: 33468829]
  - fs/dcache: Spread negative dentry pruning across multiple CPUs (Waiman Long)  [Orabug: 33468829]
  - fs/dcache: Enable automatic pruning of negative dentries (Waiman Long)  [Orabug: 33468829]
  - fs/dcache: Add sysctl parameter neg-dentry-pc as a soft limit on negative dentries (Waiman Long)  [Orabug: 33468829]
  - mlx5_core: set module param expose_pf_phys_port_name to true (Sharath Srinivasan)  [Orabug: 34018148]
  - net/mlx5: Implement Oracle-only solution for mlx device names (Mikhael Goikhman)  [Orabug: 33382152] [Orabug: 33382152] [Orabug: 33382152] [Orabug: 33382152]
  - x86/clear_page: add alternative for clear_page_clzero() (Ankur Arora)  [Orabug: 33580789]
  - x86/asm: add clzero based page clearing (Ankur Arora)  [Orabug: 33580789]
  - x86/cpu/amd: enable X86_FEATURE_NT_GOOD on all AMD Zen models (Ankur Arora)  [Orabug: 33580789]
  - x86/cpu/intel: enable X86_FEATURE_NT_GOOD on Intel Icelakex (Ankur Arora)  [Orabug: 32124427]
  - x86/cpu/intel: enable X86_FEATURE_NT_GOOD on Intel Broadwellx (Ankur Arora)  [Orabug: 32124427]
  - mm, clear_huge_page: use clear_page_uncached() for gigantic pages (Ankur Arora)  [Orabug: 32124427]
  - x86/clear_page: add clear_page_uncached() (Ankur Arora)  [Orabug: 32124427]
  - x86/asm: add clear_page_nt() (Ankur Arora)  [Orabug: 32124427]
  - perf bench: add memset_movnti() (Ankur Arora)  [Orabug: 32124427]
  - x86/asm: add memset_movnti() (Ankur Arora)  [Orabug: 32124427]
  - x86/cpuid: add X86_FEATURE_NT_GOOD (Ankur Arora)  [Orabug: 32124427]
  - parfait: Speculative Side Channel defect groups in lib/hexdump.c (Anjali Kulkarni)  [Orabug: 30092081]
  - Parfait fixes for defects found by parfait-tools (Anjali Kulkarni)  [Orabug: 29962202]
  - uek-rpm: Fix kernel upgrade conflicts for debuginfo rpm (Samasth Norway Ananda)  [Orabug: 37459962]
  - ctf: work around binutils bug in ctf_link_add_cu_mapping() (Nick Alcock)  [Orabug: 29891866]
  - module.builtin.ranges: enable by default (Kris Van Hees)  [Orabug: 29891866]
  - uek-rpm: CTF for OL9 (Nick Alcock)  [Orabug: 29891866]
  - uek-rpm: CTF for OL8 (Nick Alcock)  [Orabug: 29891866]
  - ctf: generate CTF information for the kernel (Nick Alcock)  [Orabug: 29891866]
  - ocfs2/trivial: Limit unaligned aio+dio write messages to once per day (Sunil Mushran)  [Orabug: 29708240]
  - ocfs2/trivial: Print message indicating unaligned aio+dio write (Sunil Mushran)  [Orabug: 29708202]
  - RDMA/rxe: Update default value of RXE_MAX_PDN (Rao Shoaib)  [Orabug: 33676596] [Orabug: 33676540] [Orabug: 33676540]
  - RDMA/rxe: ipc_bench fails with SoftRoCE plus shpd (Rao Shoaib)  [Orabug: 32716141] [Orabug: 32716152]
  - RDMA/rxe: Enhance Soft Roce to support Oracle proprietary shared PD extension (Rao Shoaib)  [Orabug: 31094524] [Orabug: 33672862] [Orabug: 31094522] [Orabug: 31094522] [Orabug: 31094522] [Orabug: 31094522] [Orabug: 31094522] [Orabug: 31094522]
  - mstflint_access: Update driver code to v4.20.1-1 from Github (Qing Huang)  [Orabug: 34286133]
  - mstflint_access: Enable the mstflint_access module (Aron Silverton)  [Orabug: 30997871] [Orabug: 33186470]
  - mstflint_access: Update driver code to v4.18.0-1 from Github (Sharath Srinivasan)  [Orabug: 33186470]
  - mstflint_access: Update driver code to v4.17.0-1 from Github (Sharath Srinivasan)  [Orabug: 33186470]
  - mstflint_access: Update driver code to v4.15.0-1 from Github (Itay Avraham)  [Orabug: 31682337] [Orabug: 31682212]
  - uek-rpm: Add mstflint_access module to the core list (Thomas Tai)  [Orabug: 37346912]
  - uek-rpm/ol8/config-aarch64-emb3: Enable CONFIG_ARM_SDE_INTERFACE (Thomas Tai)  [Orabug: 37346912]
  - mstflint_access: Add support for secure boot access to Mellanox HCAs (Adham Masarwah)  [Orabug: 30997871] [Orabug: 30997914] [Orabug: 30997914] [Orabug: 30997914] [Orabug: 30997914]
  - Revert "crypto: rsa - flag instantiations as FIPS compliant" (Saeed Mirzamohammadi)  [Orabug: 35054662]
  - crypto: allow ECDH and ECDSA algorithms in FIPS (Saeed Mirzamohammadi)  [Orabug: 35230217]
  - uek-rpm: make CRYPTO_ECDSA builtin (Saeed Mirzamohammadi)  [Orabug: 35230217]
  - crypto: drbg - oversampling of Jitter RNG (Saeed Mirzamohammadi)  [Orabug: 35141695]
  - crypto: panic on PCT failure for dh and ecdh (Saeed Mirzamohammadi)  [Orabug: 34979491]
  - crypto: seqiv - flag instantiations as FIPS compliant (Vladis Dronov)  [Orabug: 34711432]
  - crypto: rsa - flag instantiations as FIPS compliant (Saeed Mirzamohammadi)  [Orabug: 34711432]
  - crypto: ecdh - implement FIPS PCT (Nicolai Stange)  [Orabug: 34711432]
  - crypto: dh - implement FIPS PCT (Nicolai Stange)  [Orabug: 34711432]
  - crypto: ecdh - disallow plain "ecdh" usage in FIPS mode (Saeed Mirzamohammadi)  [Orabug: 34711432]
  - random: Fix incorrect type for 'rc' variable (Harshit Mogalapalli)  [Orabug: 34596781]
  - random: Add FIPS 140-3 entropy requirements (Saeed Mirzamohammadi)  [Orabug: 34584657]
  - random: wire /dev/random with a DRBG instance (Saeed Mirzamohammadi)  [Orabug: 32387719]
  - RDS: use pin_user_pages_fast() (Stephen Brennan)  [Orabug: 37955782]
  - RDS: avoid using offlined CPU during reconnect (Arumugam Kolappan)  [Orabug: 37800556]
  - RDS: avoid queueing delayed work on an offlined cpu (Praveen Kumar Kannoju)  [Orabug: 37260584] [Orabug: 37551310]
  - rds: Tear down the copy-from-user cache before destroying rds_wq (Håkon Bugge)  [Orabug: 37716900]
  - rds: ib: Fix NULL ptr deref in rds_ib_cq_follow_affinity (Håkon Bugge)  [Orabug: 37747824]
  - rds: ib: Fix racy send affinity work cancellation (Håkon Bugge)  [Orabug: 37607467]
  - rds: ib: Do not attempt to insert RDMA exthdr twice (Håkon Bugge)  [Orabug: 37721760]
  - rds: ib: Make traffic_class visible to user-space (Håkon Bugge)  [Orabug: 37617863]
  - rds: ib: Remove incorrect update of the path record sl and qos_class fields (Håkon Bugge)  [Orabug: 37617863]
  - rds/ib: avoid scq/rcq polling during rds connection shutdown (Arumugam Kolappan)  [Orabug: 37092561]
  - rds: Make sure transmit path and connection tear-down does not run concurrently (Håkon Bugge)  [Orabug: 36441942]
  - rds: ib: Avoid sleeping function inside RCU region by using sampled values instead (Håkon Bugge)  [Orabug: 37586088]
  - Partial revert "rds: Add inc/frag cache statistics" (Hans Westgaard Ry)  [Orabug: 37142993]
  - rds: ib: Avoid UAF on RDS Socket's rs_trans_lock (Håkon Bugge)  [Orabug: 37475724]
  - rds: ib: Fix blocked processes related to race in rds_rdma_free_dev_rs_worker() (Håkon Bugge)  [Orabug: 37475724]
  - rds: ib: Fix deterministic UAF in rds_rdma_free_dev_rs_worker() (Håkon Bugge)  [Orabug: 37475724]
  - rds: recv_payload_bad_checksum was not 0 after running rds-stress on UEK6 (William Kucharski)  [Orabug: 36502459]
  - rds: If RDS Checksums are enabled for RDMA RDS operations, the extension headers will overflow causing incorrect operation (William Kucharski)  [Orabug: 36532148]
  - rds: rds_message_alloc() needlessly zeroes m_used_sgs (William Kucharski)  [Orabug: 36535156]
  - rds: tracepoint in rds_receive_csum_err() prints pointless information (William Kucharski)  [Orabug: 36546109]
  - rds: rds_inc_init() should initialize the inc->i_conn_path field (William Kucharski)  [Orabug: 36531678]
  - rds: Race condition in adding RDS payload checksum extension header may result in RDS header corruption (William Kucharski)  [Orabug: 36532128]
  - rds: UEK-Next version of RDS Checksum needs to incorporate upstream fix "net: Fix from address in memcpy_to_iter_csum()" (William Kucharski)  [Orabug: 36536249]
  - rds: Do not invoke the transport's recv_path() while in atomic context (Håkon Bugge)  [Orabug: 37253797]
  - rds: ib: Avoid reuse of IB MRs when cleaning is in progress (Håkon Bugge)  [Orabug: 37219559]
  - rds/ib: Count memory consumed by rds_page_frag (Hans Westgaard Ry)  [Orabug: 37142034]
  - rds: Support rds-pings with payload (Håkon Bugge)  [Orabug: 37154107]
  - WARNING in rds_ib_dev_free (William Kucharski)  [Orabug: 36797059]
  - rds/ib: decrement ib_rx_total_incs after releasing associated cache (Arumugam Kolappan)  [Orabug: 36760265]
  - rds/rdma: Send info to userspace, even if connnection is down. (Juan Garcia)  [Orabug: 36529560]
  - rds/rdma: Clear rds_info_socket before use (Juan Garcia)  [Orabug: 36613123]
  - rds/rdma: Track rds_message in send, retrans and recv queue (Juan Garcia)  [Orabug: 36529581]
  - net/rds: Make send+receive IRQ assignments visible to user-space (Gerd Rausch)  [Orabug: 36727019]
  - RDS/IB: Add counter to measure when RDS_IB_RX_LIMIT is reached (Hans Westgaard Ry)  [Orabug: 36697762]
  - net/rds: mod reconnect delay on sendmsg() (Sharath Srinivasan)  [Orabug: 36531126]
  - net/rds: Extend exponential backoff for rds reconnects (Sharath Srinivasan)  [Orabug: 36531126]
  - net/rds: Get RDS statistics for each possible CPU (Anand Khoje)  [Orabug: 34161199]
  - RDS/IB: Remove incorrect clearing of RDS_IB_CQ_ERR in rds_ib_conn_path_shutdown_final() (Hans Westgaard Ry)  [Orabug: 36610477]
  - net/rds: Change "rns_sock_lock" back to a mutex (Greg Jumper)  [Orabug: 35938832]
  - rds: Add garbage collection for receive ready cache (Hans Westgaard Ry)  [Orabug: 35976832]
  - Revert "Revert "net/rds: Restrict use of RDS/IB to the initial network namespace"" (Greg Jumper)  [Orabug: 35921135] [Orabug: 35921135]
  - Revert "Revert "net/rds: Use per-namespace loopback connection lists"" (Greg Jumper)  [Orabug: 35921135] [Orabug: 35921135]
  - Revert "Revert "net/rds: Use per-namespace connection lists in "rds_tcp""" (Greg Jumper)  [Orabug: 35921135] [Orabug: 35921135]
  - Revert "Revert "net/rds: Track "rds_tcp" module statistics per network namespace"" (Greg Jumper)  [Orabug: 35921135] [Orabug: 35921135]
  - Revert "Revert "net/rds: Track "rds" module statistics per network namespace"" (Greg Jumper)  [Orabug: 35921135] [Orabug: 35921135]
  - Revert "Revert "net/rds: Monitor socket congestion per network namespace"" (Greg Jumper)  [Orabug: 35921135] [Orabug: 35921135]
  - Revert "Revert "net/rds: Use per-namespace connection hash tables"" (Greg Jumper)  [Orabug: 35921135] [Orabug: 35921135]
  - Revert "Revert "net/rds: Use per-namespace bind hash tables"" (Greg Jumper)  [Orabug: 35921135] [Orabug: 35921135]
  - Revert "Revert "net/rds: Add basic support for network namespaces"" (Greg Jumper)  [Orabug: 35921135] [Orabug: 35921135]
  - Revert "Revert "net/rds: Change c_net field to possible_net_t"" (Greg Jumper)  [Orabug: 35921135] [Orabug: 35921135]
  - net: rds: use maybe_get_net() when acquiring refcount on TCP sockets (Tetsuo Handa)  [Orabug: 34695505]
  - net: rds: acquire refcount on TCP sockets (Tetsuo Handa)  [Orabug: 34695505]
  - rds: Optimize rds_cfu_cache_do_gc (Hans Westgaard Ry)  [Orabug: 36186683]
  - rds: Optimize rds_percpu_caches garbage-collection (Hans Westgaard Ry)  [Orabug: 36186683]
  - rds: Add lfstack_pop_all (Hans Westgaard Ry)  [Orabug: 36186683]
  - rds/rdma: Fix congestion value for userspace consumption (Juan Garcia)  [Orabug: 36264649]
  - rds: Include transport protocol name in rds-info -k output (Juan Garcia)  [Orabug: 36264649]
  - rds/ib: Disable WARN_ON() when system is going down (Hans Westgaard Ry)  [Orabug: 36394499]
  - rds/rdma: print connection up/down time while dropping/connecting (Juan Garcia)  [Orabug: 36264671]
  - rds: ib: Use fastreg QP if conn is down and handle FRWR CQE timeout (Håkon Bugge)  [Orabug: 36236540] [Orabug: 36236540]
  - rds: ib: Tear down QP when FRWR WRs fails (Håkon Bugge)  [Orabug: 36236540]
  - rds: ib: Poll fastreg CQ before destroying (Håkon Bugge)  [Orabug: 36236540]
  - rds: Fix WARN_ON in rds_ib_destroy_mr_pool() (Hans Westgaard Ry)  [Orabug: 36261838]
  - Fix null ptr in rds_tcp_recv_path (Allison Henderson)  [Orabug: 36350478]
  - net/rds: print PPID/COMM of process doing user reset on RDS connection (Juan Garcia)  [Orabug: 36248458]
  - net/rds: Supporting SIOCOUTQ to read pending sends (Devesh Sharma)  [Orabug: 35595992]
  - rds: Add count for ready receive cache (Hans Westgaard Ry)  [Orabug: 36108119]
  - rds: Handle pages in use when purging an RDS Message (Håkon Bugge)  [Orabug: 36054373]
  - rds: ib: Consolidate per-cpu free list for siblings (Håkon Bugge)  [Orabug: 35904651]
  - rds: ib: Make sure per-cpu recv cache structure is cache-line aligned (Håkon Bugge)  [Orabug: 35904651]
  - rds: Remove RDS FMR Code (William Kucharski)  [Orabug: 35445340] [Orabug: 35445340]
  - rds: ib: Make changes to fr_state global visible (Håkon Bugge)  [Orabug: 35893888]
  - net/rds: Fix improper locking of "rs_recv_lock" (Greg Jumper)  [Orabug: 35849143]
  - rds: bcopy payload checksums may be calculated incorrectly leading to erroneous diagnostic results (William Kucharski)  [Orabug: 36060761]
  - net/rds: Always cancel heartbeat worker thread during conn destroy (Sharath Srinivasan)  [Orabug: 35954530]
  - net/rds: Use proper peer port number even when not connected (Greg Jumper)  [Orabug: 35896264]
  - rds: Put back pages on the CPU that allocated them (Håkon Bugge)  [Orabug: 35768362] [Orabug: 35768362]
  - rds: Provision to allow all trace points at module load time (Arumugam Kolappan)  [Orabug: 35916076]
  - rds/ib: Preserve dest qp num in the connect request (Arumugam Kolappan)  [Orabug: 35926163]
  - net/rds: report pending-messages count in RDS_INQ response (Devesh Sharma)  [Orabug: 35596049]
  - rds: Add proper refcnt when an RDS MR references an RDS Socket (Håkon Bugge)  [Orabug: 35836948]
  - Revert "net/rds: Change c_net field to possible_net_t" (Greg Jumper)  [Orabug: 35811116]
  - Revert "net/rds: Add basic support for network namespaces" (Greg Jumper)  [Orabug: 35811116]
  - Revert "net/rds: Use per-namespace bind hash tables" (Greg Jumper)  [Orabug: 35811116]
  - Revert "net/rds: Use per-namespace connection hash tables" (Greg Jumper)  [Orabug: 35811116]
  - Revert "net/rds: Monitor socket congestion per network namespace" (Greg Jumper)  [Orabug: 35811116] [Orabug: 35811116]
  - Revert "net/rds: Track "rds" module statistics per network namespace" (Greg Jumper)  [Orabug: 35811116] [Orabug: 35811116]
  - Revert "net/rds: Track "rds_tcp" module statistics per network namespace" (Greg Jumper)  [Orabug: 35811116]
  - Revert "net/rds: Use per-namespace connection lists in "rds_tcp"" (Greg Jumper)  [Orabug: 35811116]
  - Revert "net/rds: Use per-namespace loopback connection lists" (Greg Jumper)  [Orabug: 35811116]
  - Revert "net/rds: Restrict use of RDS/IB to the initial network namespace" (Greg Jumper)  [Orabug: 35811116]
  - rds/ib: Fix lfstack routines (Hans Westgaard Ry)  [Orabug: 35836155]
  - rds: lb: Initialize t_type for loop-back transport to avoid ambiguity (Håkon Bugge)  [Orabug: 35704658]
  - rds: ib: Tune ring_mid_permille on BM machines (Håkon Bugge)  [Orabug: 35349755]
  - rds: ib: Make ring_{low,mid} parametrizable (Håkon Bugge)  [Orabug: 35349755] [Orabug: 35349755]
  - rds: ib: Attempt to refill recv when send lock is busy (Håkon Bugge)  [Orabug: 35349755] [Orabug: 35349755]
  - net/rds: Add rds_ib_ring_mid() (Ankur Arora)  [Orabug: 35349755]
  - rds: Avoid priority inversion whilst queuing recv worker (Håkon Bugge)  [Orabug: 35349755]
  - net/rds: dont expose kernel address to usercopy (Devesh Sharma)  [Orabug: 35648586]
  - net/rds: Perform pre-rdma_accept address sanity checks (Gerd Rausch)  [Orabug: 35663491] [Orabug: 35663491]
  - net/rds: Restrict use of RDS/IB to the initial network namespace (Greg Jumper)  [Orabug: 29822296]
  - net/rds: Use per-namespace loopback connection lists (Greg Jumper)  [Orabug: 29822296]
  - net/rds: Use per-namespace connection lists in "rds_tcp" (Ka-Cheong Poon)  [Orabug: 29822296]
  - net/rds: Track "rds_tcp" module statistics per network namespace (Mark Haywood)  [Orabug: 29822296]
  - net/rds: Track "rds" module statistics per network namespace (Rao Shoaib)  [Orabug: 29822296]
  - net/rds: Monitor socket congestion per network namespace (Mark Haywood)  [Orabug: 29822296] [Orabug: 29822296]
  - net/rds: Use per-namespace connection hash tables (Mark Haywood)  [Orabug: 29822296] [Orabug: 29822296]
  - net/rds: Use per-namespace bind hash tables (Mark Haywood)  [Orabug: 29822296]
  - net/rds: Add basic support for network namespaces (Mark Haywood)  [Orabug: 29822296]
  - net/rds: Change c_net field to possible_net_t (Mark Haywood)  [Orabug: 29822296]
  - RDS/RDMA: No need to set rdma permissions on fastreg QP (Devesh Sharma)  [Orabug: 34908960]
  - net/rds: Introduce RDS-INQ feature to RDS protocol (Devesh Sharma)  [Orabug: 34576976]
  - net/rds: Avoid calling pci_irq_vector() when system goes down (Gerd Rausch)  [Orabug: 35048871]
  - rds: Fix lack of reentrancy for connection reset with dst addr zero (Håkon Bugge)  [Orabug: 35713694]  {CVE-2023-22024}
  - net/rds: Avoid unpin_user_pages_dirty_lock() in tasklets (Gerd Rausch)  [Orabug: 35766142]
  - rds: Remove gratuitous include of time.h from rds.h (Mark Haywood)  [Orabug: 35693132]
  - net/rds: Allow MSG_NOSIGNAL in sendmsg (Gerd Rausch)  [Orabug: 35637601]
  - net/rds: Fix endless rds_send_xmit() loop if cp_index > 0 (Gerd Rausch)  [Orabug: 35510148]
  - rds/ib: Fix ib_rx_total_frags while freeing frags (Praveen Kumar Kannoju)  [Orabug: 35465978]
  - net/rds: Ignore rds_send_hb()'s return value (Sharath Srinivasan)  [Orabug: 35435707]
  - net/rds: Use monotonic ktime_get_seconds() in rds_hb_worker() (Sharath Srinivasan)  [Orabug: 35435707]
  - net/rds: Fix race in rds_hb_worker() when reading cp->cp_hb_start (Sharath Srinivasan)  [Orabug: 35435707]
  - net/rds: Fix "hb timeout" race by setting cp_hb_start before rds_send_hb() (Sharath Srinivasan)  [Orabug: 35435707]
  - rds: Add time_spent and payload info for send_cqe handler (Rohit Nair)  [Orabug: 35302532]
  - net/rds: Fix copy&paste error (Gerd Rausch)  [Orabug: 35416671]
  - Revert "rds: ib: Fix non-parenthetical mutex/semaphore use" (Håkon Bugge)  [Orabug: 35377395]
  - rds: Fix incorrect error pointer reference (William Kucharski)  [Orabug: 35240782]
  - net/rds: use appropriate return code while dropping a connection (Praveen Kumar Kannoju)  [Orabug: 34759519]
  - net/rds: Adding TCP stats for TCP keepalive timeout (Nagappan Ramasamy Palaniappan)  [Orabug: 35185295]
  - rds: slight code cleanup of RDS checksum code (William Kucharski)  [Orabug: 35262448] [Orabug: 35262448] [Orabug: 35262448]
  - net/rds: use appropriate reason while dropping a connection (Praveen Kumar Kannoju)  [Orabug: 34759416]
  - Revert "add NETFILTER suppport" (Gerd Rausch)  [Orabug: 34849746]
  - net/rds: Check that "tc->t_rtn" has been assigned already (Gerd Rausch)  [Orabug: 35236332]
  - rds/ib: Fix the softlock-up in RDS cache GC worker (Arumugam Kolappan)  [Orabug: 35146759]
  - uek-rds: Add csum to protect bcopy payload end-to-end (William Kucharski)  [Orabug: 33579925] [Orabug: 33579925] [Orabug: 33579925] [Orabug: 33579925]
  - net/rds: Flip the default value of "rds_wq_strictly_ordered" (Gerd Rausch)  [Orabug: 35197633]
  - net/rds: serialize up+down-work to relax strict ordering (Gerd Rausch)  [Orabug: 35074104]
  - rds: ib: Fix non-parenthetical mutex/semaphore use (Håkon Bugge)  [Orabug: 35151328]
  - rds: ib: Destroy fastreg resources correctly (Håkon Bugge)  [Orabug: 35131952]
  - rds: ib: Use one-bit booleans in struct rds_ib_device and keep them adjacent (Håkon Bugge)  [Orabug: 35140489]
  - RDMA/addr: Refresh neighbour entries upon rdma_resolve_addr() (Gerd Rausch)  [Orabug: 35059483]
  - net/rds: Go back to alloc_ordered_workqueue() (Gerd Rausch)  [Orabug: 35032839] [Orabug: 35032839]
  - net/rds: Delegate fan-out to a background worker (Gerd Rausch)  [Orabug: 35032606]
  - net/rds: Split send & receive vectors again (Gerd Rausch)  [Orabug: 33532457]
  - drivers: base: cacheinfo: export symbol "get_cpu_cacheinfo" (Gerd Rausch)  [Orabug: 33532457]
  - IB/mlx4: Implement backend callback for "ib_get_vector_irqn" (Gerd Rausch)  [Orabug: 33509431]
  - net/rds: Bring tasklets back for better latency (Gerd Rausch)  [Orabug: 33440592]
  - net/rds: Throttle check for CQ CPU affinity (Gerd Rausch)  [Orabug: 33440592]
  - net/rds: Follow the observed CQ CPU affinity (Gerd Rausch)  [Orabug: 33440592]
  - net/rds: Add "preferred_cpu" option to "rds_rdma.ko" (Gerd Rausch)  [Orabug: 33440592]
  - net/mlx5: Add new verb "ib_get_vector_irqn" (Gerd Rausch)  [Orabug: 33440592]
  - net/rds: Use the preferred_cpu in rds_queue_{,delayed}_work (Gerd Rausch)  [Orabug: 33440592]
  - net/rds: Make workers use the designated CPU (Gerd Rausch)  [Orabug: 33440592] [Orabug: 33440592]
  - net/rds: Put more CPU cores to work (Gerd Rausch)  [Orabug: 33440592]
  - net/rds: Get rid of tasklets (Gerd Rausch)  [Orabug: 33440592]
  - net/rds: Use the same vector for send & receive (Gerd Rausch)  [Orabug: 33440592] [Orabug: 33440592]
  - net/rds: Allocate rds_ib_{incoming,frag}_slab on HCA NUMA nodeid (Gerd Rausch)  [Orabug: 33440592]
  - net/rds: Allocate pages on HCA NUMA nodeid (Gerd Rausch)  [Orabug: 33440592]
  - net/rds: Do not RESET_ALT_CONN if conn drops with DR_IB_DISCONNECTED_EVENT (Sharath Srinivasan)  [Orabug: 34864407]
  - rds: ib: Keep IB MRs on clean_list unless we are tearing down the pool (Håkon Bugge)  [Orabug: 33196170]
  - rds: ib: Add FRWR related statistics counters (Håkon Bugge)  [Orabug: 33196170]
  - rds: ib: Make sure messages that errors out also get unmapped (Håkon Bugge)  [Orabug: 35015597]
  - net/rds: Fill in rds_exthdr_size gaps (Gerd Rausch)  [Orabug: 34979165]
  - net/rds: Trigger rds_send_hs_ping() more than once (Gerd Rausch)  [Orabug: 34607841]
  - Revert "RDS: TCP: Track peer's connection generation number" (Gerd Rausch)  [Orabug: 34514631]
  - net/rds: Use the first lane until RDS_EXTHDR_NPATHS arrives (Gerd Rausch)  [Orabug: 34314501]
  - net/rds: Kick-start TCP receiver after accept (Gerd Rausch)  [Orabug: 34600814]
  - net/rds: rds_tcp_conn_path_shutdown must not discard messages (Gerd Rausch)  [Orabug: 34560699]
  - net/rds: Encode cp_index in TCP source port (Gerd Rausch)  [Orabug: 34556035]
  - rds: ib: Avoid tear-down of caches unless already initialized (Håkon Bugge)  [Orabug: 34831784]
  - Revert "rds: ib: Enable FC by default" (Håkon Bugge)  [Orabug: 34964348]
  - rds: ib: Fix leaked MRs during kexec (Håkon Bugge)  [Orabug: 34892081]
  - rds: ib: Remove unnecessary call to rds_ib_ring_unalloc (Håkon Bugge)  [Orabug: 34768817]
  - rds: ib: Remove unnecessary i_flowctl term from conditions (Håkon Bugge)  [Orabug: 34768817]
  - rds: ib: Remove unnesesarry variable initialization (Håkon Bugge)  [Orabug: 34768817]
  - rds: ib: Make sure receives are posted before connection is up (Håkon Bugge)  [Orabug: 34768817]
  - rds: ib: Fix the Retry counter dependency on RNR NAK Retry counter (Håkon Bugge)  [Orabug: 34768817]
  - rds: Deduct one credit on the passive side (Håkon Bugge)  [Orabug: 34768817]
  - rds: Use all eight bits for credit updates (Håkon Bugge)  [Orabug: 34768817]
  - RDS/IB: Fix the misplaced counter update rdma dto path (Devesh Sharma)  [Orabug: 34844138]
  - rds: ib: Enable FC by default (Håkon Bugge)  [Orabug: 33930632]
  - net/rds: Quiesce heartbeat worker in rds_conn_path_destroy() (Sharath Srinivasan)  [Orabug: 32540203]
  - net/rds: Add support for tracing RDS heartbeats (Sharath Srinivasan)  [Orabug: 32540203]
  - net/rds: Enable RDS heartbeat by default (Sharath Srinivasan)  [Orabug: 32540203]
  - rds: ib: Fix incorrect error handling during QP creation (Håkon Bugge)  [Orabug: 34857201]
  - rds: Remove the cp_rdsinfo_pending flag (Håkon Bugge)  [Orabug: 34649023]
  - rds: ib: Fix cleanup of rds_ib_cache_gc_worker (Håkon Bugge)  [Orabug: 34806050]
  - uapi: Fix [rs]cq_vector data types in rds[6]_info_rdma_connection (Mark Haywood)  [Orabug: 34734344]
  - uapi: Fix congested flag type in rds[6]_info_socket (Mark Haywood)  [Orabug: 34734344]
  - net/rds: drop rs_transport module reference count on error (Gerd Rausch)  [Orabug: 34496107]
  - net/rds: rds_tcp_accept_one ought to not discard messages (Gerd Rausch)  [Orabug: 34485138] [Orabug: 34485138]
  - RDS/IB Fix allocation warning (Hans Westgaard Ry)  [Orabug: 33792831]
  - net/rds: Send congestion map updates only via path zero (Anand Khoje)  [Orabug: 34167509]
  - Revert "RDS/IB: Fix RDS IB SRQ implementation and tune it" (Hans Westgaard Ry)  [Orabug: 34662613] [Orabug: 34662613] [Orabug: 34662613]
  - rds: cong: Make rds_cong_wait an array to reduce lock contention (Håkon Bugge)  [Orabug: 34574092]
  - rds: cong: Make rs_cong_notify and rs_cong_mask atomic64_t (Håkon Bugge)  [Orabug: 34574092]
  - rds: ib: Fix lfstack to acquire visibility to list head (Håkon Bugge)  [Orabug: 34483327]
  - rds: ib: Add preemption control when using per-cpu variables (Håkon Bugge)  [Orabug: 33847652]
  - rds: copy_from_user only once per rds_sendmsg system call (Hans Westgaard Ry)  [Orabug: 34522570]  {CVE-2022-21385}
  - Revert "net/rds: Connect TCP backends deterministically" (Gerd Rausch)  [Orabug: 34476557]
  - rds/ib: handle posted ACK during connection shutdown (Rohit Nair)  [Orabug: 34465806]
  - rds/ib: reap tx completions during connection shutdown (Rohit Nair)  [Orabug: 34465806]
  - rds/rdma: destroy CQs during user initiated rds connection resets (Rohit Nair)  [Orabug: 34414233]
  - net/rds: Connect TCP backends deterministically (Gerd Rausch)  [Orabug: 32422417]
  - rds: ib: Simplify ib_ring and use atomic ops (Håkon Bugge)  [Orabug: 34137460]
  - net/rds : Adding support to print SCQ and RCQ completion vectors in rds-info. (Anand Khoje)  [Orabug: 34077223]
  - rds/rdma: correctly assign the dest qp num in rds ib connection (Rohit Nair)  [Orabug: 34429467]
  - net/rds: Fix a NULL dereference in rds_tcp_accept_one() (Harshit Mogalapalli)  [Orabug: 34371883]
  - RDS/IB: Fix RDS IB SRQ implementation and tune it (Hans Westgaard Ry)  [Orabug: 28388725]
  - RDS/IB: Introduce bit_flag routines with memory-barrier for bit flags (Hans Westgaard Ry)  [Orabug: 28388725]
  - rds: ib: Qualify RNR Retry Timer check with firmware version (Freddy Carrillo)  [Orabug: 34330921] [Orabug: 34330920]
  - net/rds: Fix "use-after-free" warning (Gerd Rausch)  [Orabug: 34237786]
  - rds: Include congested flag in rds_sock struct. (Rohit Nair)  [Orabug: 34261488]
  - net/rds: No shortcut out of RDS_CONN_ERROR (Gerd Rausch)  [Orabug: 34039068]
  - net/rds: Don't force state RDS_CONN_RESETTING (Gerd Rausch)  [Orabug: 34039068]
  - net/rds: Preserve essential connection state flags (Gerd Rausch)  [Orabug: 34039068]
  - net/rds: Delayed DR_SOCK_CANCEL (Gerd Rausch)  [Orabug: 34088080] [Orabug: 34088080]
  - rds: ib: INFO: trying to register non-static key during rmmod (Freddy Carrillo)  [Orabug: 34106049]
  - rds: ib: Initialize SG table properly (Håkon Bugge)  [Orabug: 34031876]
  - rds: Fix incorrect initialization order (Håkon Bugge)  [Orabug: 33923370]
  - net/rds: Fix math on error code (Freddy Carrillo)  [Orabug: 33974711]
  - net/rds: Use "unpin_user_page" as "pin_user_pages" counterpart (Gerd Rausch)  [Orabug: 33974872]
  - rds: ib: Fix racy credit tracepoints (Håkon Bugge)  [Orabug: 33975590]
  - rds/ib: Resize CQ if send-/recv-ring-size are changed (Håkon Bugge)  [Orabug: 33940493] [Orabug: 33940493]
  - rds: ib: Incorporate the stat counter "ib_rdma_flush_mr_pool_avoided" in the structure "rds_ib_stat_names" (Praveen Kumar Kannoju)  [Orabug: 33742434]
  - rds/ib: Kernel change to extend rds-info functionality (Rohit Nair)  [Orabug: 33821336]
  - rds: ib: Make selection of completion_vector QoS aware (Håkon Bugge)  [Orabug: 33845916]
  - rds: ib: Reduce the contention caused by the asynchronous workers to flush the mr pool (Praveen Kumar Kannoju)  [Orabug: 33619952]
  - net/rds: RDS connection shutdown stuck after CQ access violation error (aru kolappan)  [Orabug: 33585475] [Orabug: 33585506]
  - net/rds: Fix memory leak in __rds_conn_create() on alloc_ordered_workqueue fail (Freddy Carrillo)  [Orabug: 33821538]
  - net/rds: Don't pummel the subnet-manager (Gerd Rausch)  [Orabug: 33656818] [Orabug: 33589564]
  - rds/ib: Use both iova and key in free_mr socket call (aru kolappan)  [Orabug: 33652502] [Orabug: 33652501]
  - RDS/IB: Fix error when trying to unallocate ring buffers (Hans Westgaard Ry)  [Orabug: 33668686] [Orabug: 33620349]
  - rds: ib: Ack seq not always received in monotonic increasing order (Håkon Bugge)  [Orabug: 33640441] [Orabug: 33620418]
  - uek-rpm: Enable RDS for LUCI again (Greg Jumper)  [Orabug: 34850622]
  - net/rds: Remove the ctl_table sentinels (Gerd Rausch)  [Orabug: 36936368]
  - net/rds: Make ctl_table argument const (Gerd Rausch)  [Orabug: 36936312]
  - net/rds: Use proto_accept_arg (Gerd Rausch)  [Orabug: 36701561]
  - net/rds: Replace calls to strlcpy() by strscpy() (Gerd Rausch)  [Orabug: 36304966]
  - net/rds: Fix -Wmissing-prototypes warnings/errors (Gerd Rausch)  [Orabug: 36304668]
  - net/rds: Update to register_net_sysctl_sz (Joel Granados)  [Orabug: 35915288]
  - rds/ib: Replace cmpxchg_double with try_cmpxchg128 (Hans Westgaard Ry)  [Orabug: 35629243]
  - net/rds: Use skb_frag_fill_page_desc() (Gerd Rausch)  [Orabug: 35623423]
  - net/rds: Fix rds_tcp debug messages mentioning sendpage (Gerd Rausch)  [Orabug: 35622246]
  - rds: Use sendmsg(MSG_SPLICE_PAGES) rather than sendpage (David Howells)  [Orabug: 35622246]
  - net/rds: Remove unsupported and deprecated sendpage callback (Gerd Rausch)  [Orabug: 35622246]
  - net/rds: Drop the 'vmas' argument from pin_user_pages() (Gerd Rausch)  [Orabug: 35622156]
  - net/rds: Fix compilation issues after change to net/skbuff.h (Greg Jumper)  [Orabug: 35261884]
  - RDS/IB: Substitute prandom_u32() with get_random_u32() (Hans Westgaard Ry)  [Orabug: 34786308]
  - net/rds: Switch to the Linux-5.15 API (Gerd Rausch)  [Orabug: 33590097] [Orabug: 33590087]
  - net/rds: Fix format string in alloc_ordered_workqueue (Gerd Rausch)  [Orabug: 33590097] [Orabug: 33590087]
  - net/rds: dma_map_sg is entitled to merge entries (Gerd Rausch)  [Orabug: 33590097] [Orabug: 33590087]
  - Revert "net/rds: Allocate pages on HCA NUMA nodeid" (Gerd Rausch)  [Orabug: 33590962] [Orabug: 33590097] [Orabug: 33590087]
  - Revert "net/rds: Allocate rds_ib_{incoming,frag}_slab on HCA NUMA nodeid" (Gerd Rausch)  [Orabug: 33590962] [Orabug: 33590097] [Orabug: 33590087]
  - Revert "net/rds: Use the same vector for send & receive" (Gerd Rausch)  [Orabug: 33590962] [Orabug: 33590097] [Orabug: 33590087] [Orabug: 33590087]
  - Revert "net/rds: Get rid of tasklets" (Gerd Rausch)  [Orabug: 33590962] [Orabug: 33590097] [Orabug: 33590087]
  - Revert "net/rds: Put more CPU cores to work" (Gerd Rausch)  [Orabug: 33590962] [Orabug: 33590097] [Orabug: 33590087]
  - Revert "net/rds: Make workers use the designated CPU" (Gerd Rausch)  [Orabug: 33590962] [Orabug: 33590097] [Orabug: 33590087]
  - Revert "net/rds: Use the preferred_cpu in rds_queue_{,delayed}_work" (Gerd Rausch)  [Orabug: 33590962] [Orabug: 33590097] [Orabug: 33590087]
  - Revert "net/rds: Add "preferred_cpu" option to "rds_rdma.ko"" (Gerd Rausch)  [Orabug: 33590962] [Orabug: 33590097] [Orabug: 33590087]
  - Revert "net/rds: Follow the observed CQ CPU affinity" (Gerd Rausch)  [Orabug: 33590962] [Orabug: 33590097] [Orabug: 33590087]
  - Revert "net/rds: Throttle check for CQ CPU affinity" (Gerd Rausch)  [Orabug: 33590962] [Orabug: 33590097] [Orabug: 33590087]
  - Revert "net/rds: Bring tasklets back for better latency" (Gerd Rausch)  [Orabug: 33590962] [Orabug: 33590097] [Orabug: 33590087]
  - rds: ib: Fix bug when comp_vector is IB_CQ_FORCE_ZERO_CV (Håkon Bugge)  [Orabug: 33538397] [Orabug: 33590097] [Orabug: 33590087]
  - RDS: Remove obsolete flag (Hans Westgaard Ry)  [Orabug: 33516781] [Orabug: 33590097] [Orabug: 33590087]
  - rds: Fix leak in rds_init (Håkon Bugge)  [Orabug: 33488609] [Orabug: 33590097] [Orabug: 33590087]
  - rds: Include pid in the rds_sock structs. (Rohit Nair)  [Orabug: 33481151] [Orabug: 33590097] [Orabug: 33590087]
  - net/rds: Re-factor rds_user_conn_paths_drop (Freddy Carrillo)  [Orabug: 33441254] [Orabug: 33590097] [Orabug: 33590087]
  - RDS-IB: Add garbage-collection to cache (Hans Westgaard Ry)  [Orabug: 33426206] [Orabug: 33590097] [Orabug: 33590087]
  - RDS-IB: Fix cachehit statistics (Hans Westgaard Ry)  [Orabug: 33426206] [Orabug: 33590097] [Orabug: 33590087]
  - RDS-IB: Fix cache-allocation statistics (Hans Westgaard Ry)  [Orabug: 33426206] [Orabug: 33590097] [Orabug: 33590087]
  - net/rds: Bring tasklets back for better latency (Gerd Rausch)  [Orabug: 33440594] [Orabug: 33590097] [Orabug: 33590087]
  - net/rds: Throttle check for CQ CPU affinity (Gerd Rausch)  [Orabug: 33440594] [Orabug: 33590097] [Orabug: 33590087]
  - net/rds: Follow the observed CQ CPU affinity (Gerd Rausch)  [Orabug: 33440594] [Orabug: 33590097] [Orabug: 33590087]
  - net/rds: Add "preferred_cpu" option to "rds_rdma.ko" (Gerd Rausch)  [Orabug: 33440594] [Orabug: 33590097] [Orabug: 33590087]
  - net/rds: Use the preferred_cpu in rds_queue_{,delayed}_work (Gerd Rausch)  [Orabug: 33440594] [Orabug: 33590097] [Orabug: 33590087]
  - net/rds: Make workers use the designated CPU (Gerd Rausch)  [Orabug: 33440594] [Orabug: 33590097] [Orabug: 33590087]
  - net/rds: Put more CPU cores to work (Gerd Rausch)  [Orabug: 33440594] [Orabug: 33590097] [Orabug: 33590087]
  - net/rds: Get rid of tasklets (Gerd Rausch)  [Orabug: 33440594] [Orabug: 33590097] [Orabug: 33590087]
  - net/rds: Use the same vector for send & receive (Gerd Rausch)  [Orabug: 33440594] [Orabug: 33590097] [Orabug: 33590087] [Orabug: 33590087]
  - net/rds: Allocate rds_ib_{incoming,frag}_slab on HCA NUMA nodeid (Gerd Rausch)  [Orabug: 33440594] [Orabug: 33590097] [Orabug: 33590087]
  - net/rds: Allocate pages on HCA NUMA nodeid (Gerd Rausch)  [Orabug: 33440594] [Orabug: 33590097] [Orabug: 33590087]
  - rds/ib: handle rds uncongested notifications in worker (Manjunath Patil)  [Orabug: 33467788] [Orabug: 33590097] [Orabug: 33590087]
  - net/rds: "no error" is no error (Gerd Rausch)  [Orabug: 33252277] [Orabug: 33590097] [Orabug: 33590087]
  - rds: ib: Set SEND_SIGNALED on the last WR posted (Håkon Bugge)  [Orabug: 33331710] [Orabug: 33590097] [Orabug: 33590087]
  - rds: fix statistics counters and check for memory leak (Hans Westgaard Ry)  [Orabug: 31372378] [Orabug: 33590097] [Orabug: 33590087]
  - rds_rdma: add missing rds_ib_cm_handle_connect tracepoint (Alan Maguire)  [Orabug: 33243559] [Orabug: 33590097] [Orabug: 33590087]
  - net/rds: Fix refcount issue that could allow it to go negative (William Kucharski)  [Orabug: 33107244] [Orabug: 33590097] [Orabug: 33590087]
  - rds: Congestion tracepoints should be enabled by default (Greg Jumper)  [Orabug: 33145660] [Orabug: 33590097] [Orabug: 33590087]
  - Clean up W=1 warnings in RDS (Victor Mora)  [Orabug: 33047866] [Orabug: 33590097] [Orabug: 33590087]
  - rds: ib: Mitigate intermittent incorrect RNR NAK Retry Timer modification (Håkon Bugge)  [Orabug: 33001035] [Orabug: 33590097] [Orabug: 33590087]
  - rds: ib: Remove two ib_modify_qp() calls (Håkon Bugge)  [Orabug: 33002746] [Orabug: 33590097] [Orabug: 33590087]
  - net/rds: Passive connections always yield (Gerd Rausch)  [Orabug: 32925129] [Orabug: 33590097] [Orabug: 33590087]
  - net/rds: Prevent the cm_id from being pulled right under our feet (Gerd Rausch)  [Orabug: 32908883] [Orabug: 33590097] [Orabug: 33590087]
  - rds: Change return code from rds_send_xmit() when lock is taken (Håkon Bugge)  [Orabug: 32852360] [Orabug: 33590097] [Orabug: 33590087]
  - rds: Fix unintended fall-through in rds_send_worker (Håkon Bugge)  [Orabug: 32852360] [Orabug: 33590097] [Orabug: 33590087]
  - Revert "rds: ib: Remove two ib_modify_qp() calls" (Sharath Srinivasan)  [Orabug: 32715565] [Orabug: 33590097] [Orabug: 33590087]
  - net/rds: Missing RDS/RDMA private data in response to connection request (Ka-Cheong Poon)  [Orabug: 32388404] [Orabug: 33590097] [Orabug: 33590087]
  - net/rds: In rds_send_xmit() use sg_next() to get the next sg entry (Sharath Srinivasan)  [Orabug: 32441607] [Orabug: 33590097] [Orabug: 33590087]
  - uapi: Fix linux/rds.h userspace compilation issues (Ka-Cheong Poon)  [Orabug: 32967640] [Orabug: 33590097] [Orabug: 33590087]
  - uapi: Fix linux/rds.h userspace compilation errors. (Vinson Lee)  [Orabug: 32967640] [Orabug: 33590097] [Orabug: 33590087]
  - uapi: fix linux/rds.h userspace compilation error (Dmitry V. Levin)  [Orabug: 32967640] [Orabug: 33590097] [Orabug: 33590087]
  - uapi: fix linux/rds.h userspace compilation errors (Dmitry V. Levin)  [Orabug: 32967640] [Orabug: 33590097] [Orabug: 33590087]
  - net/rds: Reject error code change (Ka-Cheong Poon)  [Orabug: 32565540] [Orabug: 33590097] [Orabug: 33590087]
  - net/rds: Incorrect RDS protocol version fall back (Ka-Cheong Poon)  [Orabug: 32376160] [Orabug: 33590097] [Orabug: 33590087]
  - net/rds: WARNING in rds_conn_drop (Ka-Cheong Poon)  [Orabug: 32481704] [Orabug: 33590097] [Orabug: 33590087]
  - rds: ib: Remove two ib_modify_qp() calls (Håkon Bugge)  [Orabug: 32519914] [Orabug: 33590097] [Orabug: 33590087]
  - net/rds: Remove flag WQ_MEM_RECLAIM from rid_dev_wq (Ka-Cheong Poon)  [Orabug: 32535998] [Orabug: 33590097] [Orabug: 33590087]
  - net/rds: Need to check shutdown progress in rds_conn_path_destroy() (Ka-Cheong Poon)  [Orabug: 32535998] [Orabug: 33590097] [Orabug: 33590087]
  - rds: Bug in rds_tcp_tune() prevents rds_tcp_rcvbuf tunable from working properly (William Kucharski)  [Orabug: 32646490] [Orabug: 33590097] [Orabug: 33590087]
  - rds: ib: move statistics counting from caller to callee in rds_ib_recv_refill (Håkon Bugge)  [Orabug: 32738049] [Orabug: 33590097] [Orabug: 33590087]
  - net/rds: Only increment rdma_resolve_route timeout on error (Gerd Rausch)  [Orabug: 32373816] [Orabug: 33590097] [Orabug: 33590087]
  - net/rds: Don't block workqueues "cma_wq" and "cm.wq" (Gerd Rausch)  [Orabug: 32373816] [Orabug: 33590097] [Orabug: 33590087]
  - net/rds: Leave the neighbor cache alone (Gerd Rausch)  [Orabug: 32373816] [Orabug: 33590097] [Orabug: 33590087]
  - net/rds: Give each connection its own workqueue (Gerd Rausch)  [Orabug: 32373816] [Orabug: 33590097] [Orabug: 33590087]
  - net/rds: Disassociate ic and cm_id before rdma_destroy_id (Gerd Rausch)  [Orabug: 32373816] [Orabug: 33590097] [Orabug: 33590087]
  - Revert "rds: ib: Implement proper cm_id compare" (Gerd Rausch)  [Orabug: 32373816] [Orabug: 33590097] [Orabug: 33590087]
  - net/rds: Add a rdma_cm watchdog timer (Gerd Rausch)  [Orabug: 32373816] [Orabug: 33590097] [Orabug: 33590087]
  - Revert "RDS: IB: fix panic with handlers running post teardown" (Gerd Rausch)  [Orabug: 32373816] [Orabug: 33590097] [Orabug: 33590087]
  - net/rds: Release all resources allocated by "rds_ib_setup_qp" (Gerd Rausch)  [Orabug: 32373816] [Orabug: 33590097] [Orabug: 33590087]
  - net/rds: Don't sleep inside worker threads (Gerd Rausch)  [Orabug: 32373816] [Orabug: 33590097] [Orabug: 33590087]
  - net/rds: Fix a few race conditions (Gerd Rausch)  [Orabug: 32373816] [Orabug: 33590097] [Orabug: 33590087]
  - net/rds: Execute "rdma_destroy_id" in the background (Gerd Rausch)  [Orabug: 32373816] [Orabug: 33590097] [Orabug: 33590087]
  - net/rds: Delay reconnects from passive side by 3 seconds (Gerd Rausch)  [Orabug: 32373816] [Orabug: 33590097] [Orabug: 33590087]
  - net/rds: Drop connections when peers perform failover (Gerd Rausch)  [Orabug: 32373816] [Orabug: 33590097] [Orabug: 33590087]
  - net/rds: Yield to incoming connection requests (Gerd Rausch)  [Orabug: 32373816] [Orabug: 33590097] [Orabug: 33590087]
  - net/rds: Remove stale comments about random backoff (Gerd Rausch)  [Orabug: 32373816] [Orabug: 33590097] [Orabug: 33590087]
  - Revert "rds/ib: reap tx completions during connection shutdown" (Manjunath Patil)  [Orabug: 33220434] [Orabug: 33590097] [Orabug: 33590087]
  - Revert "rds/ib: handle posted ACK during connection shutdown" (Manjunath Patil)  [Orabug: 33220434] [Orabug: 33590097] [Orabug: 33590087]
  - Revert "rds/ib: recover rds connection from interrupt loss scenario" (Manjunath Patil)  [Orabug: 33220434] [Orabug: 33590097] [Orabug: 33590087]
  - Revert "rds/ib: move rds_ib_clear_irq_miss() to .h file" (Manjunath Patil)  [Orabug: 33220434] [Orabug: 33590097] [Orabug: 33590087]
  - rds/ib: quarantine STALE mr before dereg (Manjunath Patil)  [Orabug: 33150447] [Orabug: 33590097] [Orabug: 33590087]
  - rds/ib: update mr incarnation after forming inv wr (Manjunath Patil)  [Orabug: 33177348] [Orabug: 33590097] [Orabug: 33590087]
  - rds/ib: avoid dereg of mr in frwr_clean (Manjunath Patil)  [Orabug: 33150427] [Orabug: 33590097] [Orabug: 33590087]
  - rds: ib: Increase entropy of RDMA IOVAs (Håkon Bugge)  [Orabug: 33104687] [Orabug: 33590097] [Orabug: 33590087]
  - rds: Check for illegal flags when creating an MR (Håkon Bugge)  [Orabug: 33144338] [Orabug: 33590097] [Orabug: 33590087]
  - net: rds: fix memory leak in rds_recvmsg (Pavel Skripkin)  [Orabug: 33590097] [Orabug: 33590087]
  - rds/ib: move rds_ib_clear_irq_miss() to .h file (Manjunath Patil)  [Orabug: 33044344] [Orabug: 33590097] [Orabug: 33590087]
  - rds/ib: recover rds connection from interrupt loss scenario (Manjunath Patil)  [Orabug: 32974199] [Orabug: 33590097] [Orabug: 33590087]
  - rds/ib: handle posted ACK during connection shutdown (Manjunath Patil)  [Orabug: 32863585] [Orabug: 33590097] [Orabug: 33590087]
  - rds/ib: reap tx completions during connection shutdown (Manjunath Patil)  [Orabug: 32863585] [Orabug: 33590097] [Orabug: 33590087]
  - net/rds: restrict iovecs length for RDS_CMSG_RDMA_ARGS (Sabyrzhan Tasbolatov)  [Orabug: 33590097] [Orabug: 33590087]
  - RDS tcp loopback connection can hang (Rao Shoaib)  [Orabug: 32926879] [Orabug: 33590097] [Orabug: 33590087]
  - rds: rds_drop_egress events should be enabled as part of RDS_RTD_SND (Alan Maguire)  [Orabug: 32587016] [Orabug: 33590097] [Orabug: 33590087]
  - rds: use dedicated rds_send_lock_contention tracepoint instead of drop (Alan Maguire)  [Orabug: 32587016] [Orabug: 33590097] [Orabug: 33590087]
  - rds: ensure saddr/daddr for tracepoints is not NULL (Alan Maguire)  [Orabug: 32580940] [Orabug: 33590097] [Orabug: 33590087]
  - net/rds: increase 1MB MR pool size for RDS (Manjunath Patil)  [Orabug: 33590097] [Orabug: 33590087]
  - rds: tracepoints incorrectly reporting valid rds ping as drop (Alan Maguire)  [Orabug: 32490004] [Orabug: 33590097] [Orabug: 33590087]
  - rds: tracepoint-related KASAN: use-after-free Read in rds_send_xmit (Alan Maguire)  [Orabug: 32490030] [Orabug: 33590097] [Orabug: 33590087]
  - rds: CONFIG_RDS_DEBUG + tracepoints breaks rds build (Alan Maguire)  [Orabug: 32442487] [Orabug: 33590097] [Orabug: 33590087]
  - rds: avoid crash on IB conn path shutdown prepare (Alan Maguire)  [Orabug: 32466763] [Orabug: 33590097] [Orabug: 33590087]
  - Revert "rds: Deregister all FRWR mr with free_mr" (aru kolappan)  [Orabug: 32426609] [Orabug: 33590097] [Orabug: 33590087]
  - net/rds: Fix gfp_t parameter (Hans Westgaard Ry)  [Orabug: 32372157] [Orabug: 33590097] [Orabug: 33590087]
  - rds: fix out-of-tree build broken by tracepoints (Alan Maguire)  [Orabug: 32180857] [Orabug: 33590097] [Orabug: 33590087]
  - net/rds: rds_ib_remove_one() accesses freed memory (Ka-Cheong Poon)  [Orabug: 31973422] [Orabug: 33590097] [Orabug: 33590087]
  - rds: send tracepoints broken during merging of code review feedback (Alan Maguire)  [Orabug: 32118211] [Orabug: 33590097] [Orabug: 33590087]
  - rds: rds header pointer should be in same location across send/receive tps (Alan Maguire)  [Orabug: 32118211] [Orabug: 33590097] [Orabug: 33590087]
  - rds/ib: Fix: (rds: Deregister all FRWR mr with free_mr) (Manjunath Patil)  [Orabug: 32113531] [Orabug: 33590097] [Orabug: 33590087]
  - net/rds: Force ARP flush upon RDMA_CM_EVENT_ADDR_CHANGE (Gerd Rausch)  [Orabug: 32095958] [Orabug: 33590097] [Orabug: 33590087]
  - net/rds Check for NULL rds_ibdev in rds_ib_rx() only if rds_ib_srq_enabled (Sharath Srinivasan)  [Orabug: 32113841] [Orabug: 33590097] [Orabug: 33590087]
  - rds: uapi header should not use u[8,64] (Alan Maguire)  [Orabug: 27200806] [Orabug: 33590097] [Orabug: 33590087]
  - rds: add congestion tracepoints for congestion seen/cleared (Alan Maguire)  [Orabug: 27200806] [Orabug: 33590097] [Orabug: 33590087]
  - rds: tcp transport-specific tracepoints (Alan Maguire)  [Orabug: 27200806] [Orabug: 33590097] [Orabug: 33590087]
  - rds: add rds_mr-related tracepoints (Alan Maguire)  [Orabug: 27200806] [Orabug: 33590097] [Orabug: 33590087]
  - rds: remove rds real-time debugging (rds_rtd) framework (Alan Maguire)  [Orabug: 27200806] [Orabug: 33590097] [Orabug: 33590087]
  - rds: add more info and err tracepoints (Alan Maguire)  [Orabug: 27200806] [Orabug: 33590097] [Orabug: 33590087]
  - rds: add tracepoints for work queue events (Alan Maguire)  [Orabug: 27200806] [Orabug: 33590097] [Orabug: 33590087]
  - rds: add IB flow control tracepoints (Alan Maguire)  [Orabug: 27200806] [Orabug: 33590097] [Orabug: 33590087]
  - rds: add tracepoint for RDS IB errors, info (Alan Maguire)  [Orabug: 27200806] [Orabug: 33590097] [Orabug: 33590087]
  - rds: add tracepoints for RDS send (completion), outbound drop (Alan Maguire)  [Orabug: 27200806] [Orabug: 33590097] [Orabug: 33590087]
  - rds: add tracepoints for RDS receive, inbound drop (Alan Maguire)  [Orabug: 27200806] [Orabug: 33590097] [Orabug: 33590087]
  - rds: add tracepoint for RDS connection state change (error) (Alan Maguire)  [Orabug: 27200806] [Orabug: 33590097] [Orabug: 33590087]
  - rds: provide inline function to retrieve qp numbers (Alan Maguire)  [Orabug: 27200806] [Orabug: 33590097] [Orabug: 33590087]
  - rds: retrieve netns inode number from rds socket for tracing purposes (Alan Maguire)  [Orabug: 27200806] [Orabug: 33590097] [Orabug: 33590087]
  - rds: retrieve cgroup ptr from rds socket for tracing purposes (Alan Maguire)  [Orabug: 27200806] [Orabug: 33590097] [Orabug: 33590087]
  - net/rds: Refactor sendmsg ancillary data processing (Ka-Cheong Poon)  [Orabug: 31979196] [Orabug: 33590097] [Orabug: 33590087]
  - rds: Force ordering of {set,clear}_bit operating on m_flags (Håkon Bugge)  [Orabug: 31505749] [Orabug: 33590097] [Orabug: 33590087]
  - rds: Do not send canceled operations to the transport layer (Håkon Bugge)  [Orabug: 31505749] [Orabug: 33590097] [Orabug: 33590087]
  - rds: Introduce rds_conn_to_path helper (Håkon Bugge)  [Orabug: 31505749] [Orabug: 33590097] [Orabug: 33590087]
  - Revert "RDS: Drop the connection as part of cancel to avoid hangs" (Håkon Bugge)  [Orabug: 31505749] [Orabug: 33590097] [Orabug: 33590087]
  - Revert "rds: fix warning in rds_send_drop_to()" (Håkon Bugge)  [Orabug: 31505749] [Orabug: 33590097] [Orabug: 33590087]
  - Revert "rds: Use correct conn when dropping connections due to cancel" (Håkon Bugge)  [Orabug: 31505749] [Orabug: 33590097] [Orabug: 33590087]
  - Revert "rds: prevent use-after-free of rds conn in rds_send_drop_to()" (Håkon Bugge)  [Orabug: 31505749] [Orabug: 33590097] [Orabug: 33590087]
  - Revert "rds: Use bitmap to designate dropped connections" (Håkon Bugge)  [Orabug: 31505749] [Orabug: 33590097] [Orabug: 33590087]
  - Revert "UEK6 compiler warning for /net/rds/send.c" (Håkon Bugge)  [Orabug: 31505749] [Orabug: 33590097] [Orabug: 33590087]
  - rds: Restore MR use-once semantics (Håkon Bugge)  [Orabug: 31990092] [Orabug: 33590097] [Orabug: 33590087]
  - rds: Fix incorrect cmsg status and use-after-free (Håkon Bugge)  [Orabug: 32003078] [Orabug: 33590097] [Orabug: 33590087]
  - rds/tcp: Enhance stats maintained by rds (Rao Shoaib)  [Orabug: 31933713] [Orabug: 33590097] [Orabug: 33590087]
  - net/rds: Extract dest qp num for displaying in rds-info (Praveen Kumar Kannoju)  [Orabug: 31880139] [Orabug: 33590097] [Orabug: 33590087]
  - net/rds: Incorrect pointer used in rds_getname() (Ka-Cheong Poon)  [Orabug: 31755710] [Orabug: 33590097] [Orabug: 33590087]
  - rds: Test parameter in rds_ib_recv_cache_put (Hans Westgaard Ry)  [Orabug: 31737036] [Orabug: 33590097] [Orabug: 33590087]
  - net/rds: Incorrect WARN_ON() (Ka-Cheong Poon)  [Orabug: 31718013] [Orabug: 33590097] [Orabug: 33590087]
  - rds: ib: Revert "net/rds: Avoid stalled connection due to CM REQ retries" (Håkon Bugge)  [Orabug: 31648137] [Orabug: 33590097] [Orabug: 33590087]
  - rds: Clear reconnect pending bit (Håkon Bugge)  [Orabug: 31648137] [Orabug: 33590097] [Orabug: 33590087]
  - rds: Deregister all FRWR mr with free_mr (Hans Westgaard Ry)  [Orabug: 31472999] [Orabug: 33590097] [Orabug: 33590087]
  - rds/ib: Make i_{recv,send}_hdrs non-contigious (Hans Westgaard Ry)  [Orabug: 31648238] [Orabug: 33590097] [Orabug: 33590087]
  - rds: Fix potential use after free in rds_ib_inc_free (Hans Westgaard Ry)  [Orabug: 31504051] [Orabug: 33590097] [Orabug: 33590087]
  - net/rds: NULL pointer de-reference in rds_ib_add_one() (Ka-Cheong Poon)  [Orabug: 31481207] [Orabug: 33590097] [Orabug: 33590087]
  - Revert "RDS: add module parameter to allow module unload or not" (Ka-Cheong Poon)  [Orabug: 25962452] [Orabug: 33590097] [Orabug: 33590087]
  - net/rds: Remove unused link detection code (Ka-Cheong Poon)  [Orabug: 25962452] [Orabug: 33590097] [Orabug: 33590087]
  - net/rds: Change module initialization sequence in case of failure (Ka-Cheong Poon)  [Orabug: 25962452] [Orabug: 33590097] [Orabug: 33590087]
  - net/rds: Incorrect fastreg_wrs accounting (Ka-Cheong Poon)  [Orabug: 25962452] [Orabug: 33590097] [Orabug: 33590087]
  - net/rds: c_base_conn->last_flush_ms updated after freed (Ka-Cheong Poon)  [Orabug: 25962452] [Orabug: 33590097] [Orabug: 33590087]
  - net/rds: Spread out the rds_rdma module shutdown work (Ka-Cheong Poon)  [Orabug: 25962452] [Orabug: 33590097] [Orabug: 33590087]
  - net/rds: Each RDS transport should keep its own connection count (Ka-Cheong Poon)  [Orabug: 25962452] [Orabug: 33590097] [Orabug: 33590087]
  - net/rds: Clean up ib_nodev_conns list handling (Ka-Cheong Poon)  [Orabug: 25962452] [Orabug: 33590097] [Orabug: 33590087]
  - net/rds: Use a device's own workqueue to process device related work (Ka-Cheong Poon)  [Orabug: 25962452] [Orabug: 33590097] [Orabug: 33590087]
  - net/rds: SRQ delayed work should be cancelled (Ka-Cheong Poon)  [Orabug: 25962452] [Orabug: 33590097] [Orabug: 33590087]
  - net/rds: Device resource is not released when a conn is shutdown (Ka-Cheong Poon)  [Orabug: 25962452] [Orabug: 33590097] [Orabug: 33590087]
  - net/rds: Add sychronization between socket close and device removal (Ka-Cheong Poon)  [Orabug: 25962452] [Orabug: 33590097] [Orabug: 33590087]
  - net/rds: The fast registration work queue is not destroyed (Ka-Cheong Poon)  [Orabug: 25962452] [Orabug: 33590097] [Orabug: 33590087]
  - net/rds: Incorrect rds_conn_hash table check (Ka-Cheong Poon)  [Orabug: 25962452] [Orabug: 33590097] [Orabug: 33590087]
  - net/rds: Add macro to loop through the rds_conn_hash_table (Ka-Cheong Poon)  [Orabug: 25962452] [Orabug: 33590097] [Orabug: 33590087]
  - Fix up three build warnings in the UEK6 Master tree (Jack Vogel)  [Orabug: 31469792] [Orabug: 33590097] [Orabug: 33590087]
  - net/rds: suppress memory allocation failure reports (Manjunath Patil)  [Orabug: 31398436] [Orabug: 33590097] [Orabug: 33590087]
  - rds: ib: Fix dysfunctional long address resolve timeout (Håkon Bugge)  [Orabug: 31302703] [Orabug: 33590097] [Orabug: 33590087]
  - rds: Fix use-after-free in rds_ib_free_caches (Hans Westgaard Ry)  [Orabug: 31200767] [Orabug: 33590097] [Orabug: 33590087]
  - net/rds: Fix MR reference counting problem (Ka-Cheong Poon)  [Orabug: 31112398] [Orabug: 33590097] [Orabug: 33590087]
  - net/rds: Replace struct rds_mr's r_refcount with struct kref (Ka-Cheong Poon)  [Orabug: 31112398] [Orabug: 33590097] [Orabug: 33590087]
  - rds: Add debugfs for inc/frag cache statistics (Hans Westgaard Ry)  [Orabug: 29114075] [Orabug: 33590097] [Orabug: 33590087]
  - rds: Add inc/frag cache statistics (Hans Westgaard Ry)  [Orabug: 29114075] [Orabug: 33590097] [Orabug: 33590087]
  - rds: Control the CPU (de)allocating fragments (Hans Westgaard Ry)  [Orabug: 29114075] [Orabug: 33590097] [Orabug: 33590087]
  - rds: Change caching strategy for receive buffers (Hans Westgaard Ry)  [Orabug: 29114075] [Orabug: 33590097] [Orabug: 33590087]
  - rds: Add lockfree stack routines (Hans Westgaard Ry)  [Orabug: 29114075] [Orabug: 33590097] [Orabug: 33590087]
  - UEK6 compiler warning for /net/rds/ib.c (Sharath Srinivasan)  [Orabug: 31077633] [Orabug: 33590097] [Orabug: 33590087]
  - UEK6 compiler warning for /net/rds/send.c (Sharath Srinivasan)  [Orabug: 31077633] [Orabug: 33590097] [Orabug: 33590087]
  - rds: transport module should be auto loaded when transport is set (Rao Shoaib)  [Orabug: 30872996] [Orabug: 33590097] [Orabug: 33590087]
  - rds: If one path needs re-connection, check all and re-connect (Rao Shoaib)  [Orabug: 30892450] [Orabug: 33590097] [Orabug: 33590087]
  - rds: Avoid qp overflow when posting invalidate/register mr with frwr (Hans Westgaard Ry)  [Orabug: 30888672] [Orabug: 33590097] [Orabug: 33590087]
  - rds: Use bitmap to designate dropped connections (Håkon Bugge)  [Orabug: 30868396] [Orabug: 33590097] [Orabug: 33590087]
  - rds: Avoid flushing MRs in rds_rdma_drop_keys (aru kolappan)  [Orabug: 30681064] [Orabug: 33590097] [Orabug: 33590087]
  - rds: prevent use-after-free of rds conn in rds_send_drop_to() (Sharath Srinivasan)  [Orabug: 30847730] [Orabug: 33590097] [Orabug: 33590087]
  - rds: unlock rs_snd_lock before calling rhashtable_insert_fast (aru kolappan)  [Orabug: 30849456] [Orabug: 33590097] [Orabug: 33590087]
  - rds: fix an infoleak in rds_inc_info_copy (Kangjie Lu)  [Orabug: 30816909] [Orabug: 33590097] [Orabug: 33590087]  {CVE-2016-5244}
  - Revert "net/rds: Use DMA memory pool allocation for rds_header" (Ka-Cheong Poon)  [Orabug: 30687619] [Orabug: 30820081] [Orabug: 33590097] [Orabug: 33590087]
  - rds: Handle unsupported rdma request to fs dax memory (Hans Westgaard Ry)  [Orabug: 30731395] [Orabug: 30820081] [Orabug: 33590097] [Orabug: 33590087]
  - rds: Protect __rds_send_complete() with correct lock (Håkon Bugge)  [Orabug: 30694458] [Orabug: 30820081] [Orabug: 33590097] [Orabug: 33590087]
  - Revert "net/rds: Should use rds_rtd_ptr() to trace pointer value" (John Donnelly)  [Orabug: 30653262] [Orabug: 30820081] [Orabug: 33590097] [Orabug: 33590087]
  - Revert "net/rds: Reduce RDS headers de-allocation time" (John Donnelly)  [Orabug: 30653262] [Orabug: 30820081] [Orabug: 33590097] [Orabug: 33590087]
  - Revert "net/rds: Recycle RDS headers to speed up connection fail over" (John Donnelly)  [Orabug: 30653262] [Orabug: 30820081] [Orabug: 33590097] [Orabug: 33590087]
  - RDS: Check cmsg_len before dereferencing CMSG_DATA (Avinash Repaka)  [Orabug: 29784387] [Orabug: 30820081] [Orabug: 33590097] [Orabug: 33590087]
  - net/rds: Recycle RDS headers to speed up connection fail over (Ka-Cheong Poon)  [Orabug: 30434704] [Orabug: 30820081] [Orabug: 33590097] [Orabug: 33590087]
  - net/rds: Reduce RDS headers de-allocation time (Ka-Cheong Poon)  [Orabug: 30434704] [Orabug: 30820081] [Orabug: 33590097] [Orabug: 33590087]
  - net/rds: Should use rds_rtd_ptr() to trace pointer value (Ka-Cheong Poon)  [Orabug: 30434704] [Orabug: 30820081] [Orabug: 33590097] [Orabug: 33590087]
  - rds: Disable heartbeat by default (Håkon Bugge)  [Orabug: 30580048] [Orabug: 30820081] [Orabug: 33590097] [Orabug: 33590087]
  - rds:ib: Set RoCE ACK timeout before resolving route (Dag Moxnes)  [Orabug: 30556591] [Orabug: 30820081] [Orabug: 33590097] [Orabug: 33590087]
  - rds: ib: update WR sizes when bringing up connection (Dag Moxnes)  [Orabug: 30532304] [Orabug: 30820081] [Orabug: 33590097] [Orabug: 33590087]
  - rds: ib: __flush_neigh_conn error messages in syslog during failover/failback (Dag Moxnes)  [Orabug: 30478312] [Orabug: 30820081] [Orabug: 33590097] [Orabug: 33590087]
  - rds: Cancel pending connections on connection request (Dag Moxnes)  [Orabug: 30473443] [Orabug: 30820081] [Orabug: 33590097] [Orabug: 33590087]
  - rds: ib: need to flush neighbor cache for local peer connections on failover (Dag Moxnes)  [Orabug: 30417190] [Orabug: 30820081] [Orabug: 33590097] [Orabug: 33590087]
  - rds: Rename rds_send_ping to rds_send_hs_ping (Håkon Bugge)  [Orabug: 30418039] [Orabug: 33590097] [Orabug: 33590087]
  - rds: Use {READ,WRITE}_ONCE for heartbeat start and state (Håkon Bugge)  [Orabug: 30418039] [Orabug: 33590097] [Orabug: 33590087]
  - rds: Change heartbeat params from module params to sysctl (Håkon Bugge)  [Orabug: 30418039] [Orabug: 33590097] [Orabug: 33590087]
  - rds: Fix and augment probe counters (Håkon Bugge)  [Orabug: 30418039] [Orabug: 33590097] [Orabug: 33590087]
  - rds: Introduce heartbeat interval (Håkon Bugge)  [Orabug: 30418039] [Orabug: 33590097] [Orabug: 33590087]
  - rds: Fix heartbeat (Håkon Bugge)  [Orabug: 30418039] [Orabug: 33590097] [Orabug: 33590087]
  - rds: ib: Improve neighbor cache flush throttling (Dag Moxnes)  [Orabug: 30000214] [Orabug: 30820081] [Orabug: 33590097] [Orabug: 33590087]
  - rds: send: Fix dead code in rds_sendmsg (Gustavo A. R. Silva)  [Orabug: 30416950] [Orabug: 30820081] [Orabug: 33590097] [Orabug: 33590087]
  - rds: fix uninteneded increase of rds_rdma:pool->max_items_soft (Manjunath Patil)  [Orabug: 30250514] [Orabug: 30820081] [Orabug: 33590097] [Orabug: 33590087]
  - rds: add ibmr to busy_list in flush code path (Manjunath Patil)  [Orabug: 30319088] [Orabug: 30820081] [Orabug: 33590097] [Orabug: 33590087]
  - rds: Use correct conn when dropping connections due to cancel (Håkon Bugge)  [Orabug: 30316049] [Orabug: 30820081] [Orabug: 33590097] [Orabug: 33590087]
  - rds: ib: Optimize rds_ib_laddr_check (Håkon Bugge)  [Orabug: 30321972] [Orabug: 30820081] [Orabug: 33590097] [Orabug: 33590087]
  - net/rds: Switch to the Linux-5.4 API (Gerd Rausch)  [Orabug: 30777130] [Orabug: 33590097] [Orabug: 33590087]
  - net/rds: Check laddr_check before calling it (Ka-Cheong Poon)  [Orabug: 30313955] [Orabug: 33590097] [Orabug: 33590087]
  - net/rds: Use DMA memory pool allocation for rds_header (Ka-Cheong Poon)  [Orabug: 28388601] [Orabug: 33590097] [Orabug: 33590087]
  - RDS: validate the requested traces user input against max supported (William Kucharski)  [Orabug: 29037000] [Orabug: 33590097] [Orabug: 33590087]
  - net/rds: Incorrect work request accouting (Ka-Cheong Poon)  [Orabug: 30298907] [Orabug: 33590097] [Orabug: 33590087]
  - net/rds: An rds_sock is added too early to the hash table (Ka-Cheong Poon)  [Orabug: 30277828] [Orabug: 33590097] [Orabug: 33590087]
  - rds: Bring loop-back peer down as well (Håkon Bugge)  [Orabug: 30271685] [Orabug: 33590097] [Orabug: 33590087]
  - rds: ib: Avoid connect retry on loopback connections (Håkon Bugge)  [Orabug: 30271685] [Orabug: 33590097] [Orabug: 33590087]
  - net/rds: Fix info leak in rds6_inc_info_copy() (Ka-Cheong Poon)  [Orabug: 30255644] [Orabug: 33590097] [Orabug: 33590087]
  - rds: RDS/TCP does not initiate a connection (Ka-Cheong Poon)  [Orabug: 30158088] [Orabug: 33590097] [Orabug: 33590087]
  - rds: remove dead code (William Kucharski)  [Orabug: 29951256] [Orabug: 33590097] [Orabug: 33590087]
  - net/rds: Check address length before reading address family (Tetsuo Handa)  [Orabug: 30199770] [Orabug: 33590097] [Orabug: 33590087]
  - rds: RDS does not flush IPv6 neighbor cache (Ka-Cheong Poon)  [Orabug: 28220027] [Orabug: 33590097] [Orabug: 33590087]
  - rds: rds_ib_conn_alloc() calls kzallloc() with wrong flag (Ka-Cheong Poon)  [Orabug: 28416722] [Orabug: 33590097] [Orabug: 33590087]
  - rds: ib: Qualify CM REQ duplicate detection with connection being up (Håkon Bugge)  [Orabug: 30056604] [Orabug: 33590097] [Orabug: 33590087]
  - rds: Further prioritize local loop-back connections (Håkon Bugge)  [Orabug: 30056604] [Orabug: 33590097] [Orabug: 33590087]
  - rds: Fix initial zero delay when queuing re-connect work (Håkon Bugge)  [Orabug: 30056604] [Orabug: 33590097] [Orabug: 33590087]
  - rds: Re-introduce separate work-queue for local connections (Håkon Bugge)  [Orabug: 30056604] [Orabug: 33590097] [Orabug: 33590087]
  - rds: Not all huge pages are released after app shutdown (Ka-Cheong Poon)  [Orabug: 29890749] [Orabug: 33590097] [Orabug: 33590087]
  - rds: Get rid of "wait_clean_list_grace" and add locking (Ka-Cheong Poon)  [Orabug: 30066226] [Orabug: 33590097] [Orabug: 33590087]
  - rds: ib: Set local ack timeout directly (Håkon Bugge)  [Orabug: 29931097] [Orabug: 33590097] [Orabug: 33590087]
  - rds: Re-factor and avoid superfluous queuing of shutdown work (Håkon Bugge)  [Orabug: 29919578] [Orabug: 33590097] [Orabug: 33590087]
  - rds: ib: Flush ARP cache when connection attempt is rejected (Håkon Bugge)  [Orabug: 29971040] [Orabug: 33590097] [Orabug: 33590087]
  - rds: ib: Fix incorrect setting of cp_reconnect_racing (Håkon Bugge)  [Orabug: 29882416] [Orabug: 33590097] [Orabug: 33590087]
  - rds: Re-factor and avoid superfluous queuing of reconnect work (Håkon Bugge)  [Orabug: 29882649] [Orabug: 33590097] [Orabug: 33590087]
  - rds: ib: Correct the cm_id compare commit (Håkon Bugge)  [Orabug: 29960424] [Orabug: 33590097] [Orabug: 33590087]
  - rds: Increase entropy in hashing (Håkon Bugge)  [Orabug: 29778019] [Orabug: 33590097] [Orabug: 33590087]
  - net: rds: fix rds recv memory leak (Zhu Yanjun)  [Orabug: 30025201] [Orabug: 33590097] [Orabug: 33590087]
  - rds: ib: Resurrect the CQs instead of delete+create (Håkon Bugge)  [Orabug: 29758839] [Orabug: 33590097] [Orabug: 33590087]
  - rds: Avoid queuing superfluous send and recv work (Håkon Bugge)  [Orabug: 29764668] [Orabug: 33590097] [Orabug: 33590087]
  - net/rds: changed module parameter rds_qos_threshold_action to be writable (Qing Huang)  [Orabug: 29873102] [Orabug: 33590097] [Orabug: 33590087]
  - net/rds: fixed an error in parsing module parameter string rds_qos_threshold (Qing Huang)  [Orabug: 29951336] [Orabug: 33590097] [Orabug: 33590087]
  - rds: ib: Fix dereference of conn when NULL and cleanup thereof (Håkon Bugge)  [Orabug: 29765337] [Orabug: 33590097] [Orabug: 33590087]
  - net: rds: force to destroy connection if t_sock is NULL in rds_tcp_kill_sock(). (Mao Wenan)  [Orabug: 29760503] [Orabug: 33590097] [Orabug: 33590087]  {CVE-2019-11815}
  - rds: Introduce a pool of worker threads for connection management (Håkon Bugge)  [Orabug: 29629971] [Orabug: 33590097] [Orabug: 33590087]
  - rds: Use rds_conn_path cp_wq when applicable (Håkon Bugge)  [Orabug: 29629971] [Orabug: 33590097] [Orabug: 33590087]
  - rds: ib: Implement proper cm_id compare (Håkon Bugge)  [Orabug: 29629971] [Orabug: 33590097] [Orabug: 33590087]
  - Revert "net/rds: prevent RDS connections using stale ARP entries" (Håkon Bugge)  [Orabug: 29629971] [Orabug: 33590097] [Orabug: 33590087]
  - rds: ib: Flush ARP cache when needed (Håkon Bugge)  [Orabug: 29629971] [Orabug: 33590097] [Orabug: 33590087]
  - rds: Add simple heuristics to determine connect delay (Håkon Bugge)  [Orabug: 29629971] [Orabug: 33590097] [Orabug: 33590087]
  - rds: Fix one-sided connect (Håkon Bugge)  [Orabug: 29629971] [Orabug: 33590097] [Orabug: 33590087]
  - rds: Consolidate and align ftrace related to connection management (Håkon Bugge)  [Orabug: 29629971] [Orabug: 33590097] [Orabug: 33590087]
  - rds: Incorrect locking in rds_tcp_conn_path_shutdown() (Ka-Cheong Poon)  [Orabug: 29493617] [Orabug: 33590097] [Orabug: 33590087]
  - rds: Add per namespace RDS/TCP accept work queue (Ka-Cheong Poon)  [Orabug: 29493617] [Orabug: 33590097] [Orabug: 33590087]
  - rds: Add per peer RDS socket send buffer (Ka-Cheong Poon)  [Orabug: 28314151] [Orabug: 33590097] [Orabug: 33590087]
  - net/rds: Whitelist rdma_cookie and rx_tstamp for usercopy (Dag Moxnes)  [Orabug: 29550910] [Orabug: 33590097] [Orabug: 33590087]
  - rds: update correct congestion map for loopback transport (Mukesh Kacker)  [Orabug: 29431284] [Orabug: 33590097] [Orabug: 33590087]
  - rds: congestion updates can be missed when kernel low on memory (Mukesh Kacker)  [Orabug: 29200872] [Orabug: 33590097] [Orabug: 33590087]
  - net/rds: WARNING: at net/rds/recv.c:222 rds_recv_hs_exthdrs+0xf8/0x1e0 (Venkat Venkatsubra)  [Orabug: 29235017] [Orabug: 33590097] [Orabug: 33590087]
  - net: rds: fix excess initialization of the recv SGEs (Zhu Yanjun)  [Orabug: 29004497] [Orabug: 33590097] [Orabug: 33590087]
  - net/rds: ib: Fix endless RNR Retries caused by memory allocation failures (Venkat Venkatsubra)  [Orabug: 29222749] [Orabug: 33590097] [Orabug: 33590087]
  - net/rds: RDS connection does not reconnect after CQ access violation error (Venkat Venkatsubra)  [Orabug: 29180452] [Orabug: 33590097] [Orabug: 33590087]
  - rds: ib: Use a delay when reconnecting to the very same IP address (Håkon Bugge)  [Orabug: 29161384] [Orabug: 33590097] [Orabug: 33590087]
  - net: rds: fix rds_ib_sysctl_max_recv_allocation error (Zhu Yanjun)  [Orabug: 29003168] [Orabug: 33590097] [Orabug: 33590087]
  - RDS: Heap OOB write in rds_message_alloc_sgs() (Mohamed Ghannam)  [Orabug: 28972461] [Orabug: 33590097] [Orabug: 33590087]
  - RDS: null pointer dereference in rds_atomic_free_op (Mohamed Ghannam)  [Orabug: 28020561] [Orabug: 33590097] [Orabug: 33590087]  {CVE-2018-5333}
  - rds: crash at rds_ib_inc_copy_to_user+104 due to NULL ptr reference (Venkat Venkatsubra)  [Orabug: 28748008] [Orabug: 33590097] [Orabug: 33590087]
  - net/rds: Fix endless RNR situation (Venkat Venkatsubra)  [Orabug: 28856912] [Orabug: 33590097] [Orabug: 33590087]
  - rds: Incorrect rds-info send and retransmission message output (Ka-Cheong Poon)  [Orabug: 28898827] [Orabug: 33590097] [Orabug: 33590087]
  - rds: MPRDS messages delivered out of order (Ka-Cheong Poon)  [Orabug: 28838065] [Orabug: 33590097] [Orabug: 33590087]
  - rds: RDS (tcp) hangs on sendto() to unresponding address (Ka-Cheong Poon)  [Orabug: 28720880] [Orabug: 33590097] [Orabug: 33590087]
  - rds: tcp: remove register_netdevice_notifier infrastructure. (Ka-Cheong Poon)  [Orabug: 28737841] [Orabug: 33590097] [Orabug: 33590087]
  - net: rds: Use address family to designate IPv4 or IPv6 addresses (Håkon Bugge)  [Orabug: 28720018] [Orabug: 33590097] [Orabug: 33590087]
  - net: rds: Fix blank at eol in af_rds.c (Håkon Bugge)  [Orabug: 28720018] [Orabug: 33590097] [Orabug: 33590087]
  - net/rds: Fix call to sleeping function in a non-sleeping context (Håkon Bugge)  [Orabug: 28642686] [Orabug: 33590097] [Orabug: 33590087]
  - net/rds: make the source code clean (Zhu Yanjun)  [Orabug: 28289486] [Orabug: 33590097] [Orabug: 33590087]
  - net/rds: Use rdma_read_gids to get connection SGID/DGID in IPv6 (Zhu Yanjun)  [Orabug: 28289486] [Orabug: 33590097] [Orabug: 33590087]
  - net/rds: Use rdma_read_gids to read connection GIDs (Parav Pandit)  [Orabug: 28289486] [Orabug: 33590097] [Orabug: 33590087]
  - rds: CVE-2018-7492: Fix NULL pointer dereference in __rds_rdma_map (Håkon Bugge)  [Orabug: 28565415] [Orabug: 33590097] [Orabug: 33590087]  {CVE-2018-7492}
  - rds: Remove RDS dependency on IPv6 (Ka-Cheong Poon)  [Orabug: 28466876] [Orabug: 33590097] [Orabug: 33590087]
  - rds: Allow non-link local and link local communication (Ka-Cheong Poon)  [Orabug: 28398845] [Orabug: 33590097] [Orabug: 33590087]
  - rds: Allow IPv4-mapped IPv6 address to be used (Ka-Cheong Poon)  [Orabug: 27744573] [Orabug: 33590097] [Orabug: 33590087]
  - rds: Remove VLA, fix incorrect cast, missing static usage warnings (Ka-Cheong Poon)  [Orabug: 28452068] [Orabug: 33590097] [Orabug: 33590087]
  - net/rds: Fix kernel panic caused by a race between setup/teardown (Hans Westgaard Ry)  [Orabug: 28216828] [Orabug: 33590097] [Orabug: 33590087]
  - RDS: Add 1MB message size limit (Avinash Repaka)  [Orabug: 25578394] [Orabug: 33590097] [Orabug: 33590087]
  - RDS: IB: Use newer API for fast registration (Avinash Repaka)  [Orabug: 27509034] [Orabug: 33590097] [Orabug: 33590087]
  - rds: tcp: cancel all worker threads before shutting down socket (Sowmini Varadhan)  [Orabug: 28298233] [Orabug: 33590097] [Orabug: 33590087]
  - net/rds: Implement ARP flushing correctly (Håkon Bugge)  [Orabug: 28219823] [Orabug: 33590097] [Orabug: 33590087]
  - rds: Avoid compiler warning in ib_send.c (Knut Omang)  [Orabug: 28227497] [Orabug: 33590097] [Orabug: 33590087]
  - rds: signedness bug (Dan Carpenter)  [Orabug: 28312881] [Orabug: 33590097] [Orabug: 33590087]
  - net/rds: Fix incorrect bigger vs. smaller IP address check (Håkon Bugge)  [Orabug: 28222366] [Orabug: 33590097] [Orabug: 33590087]
  - rds: tcp: compute m_ack_seq as offset from ->write_seq (Sowmini Varadhan)  [Orabug: 27438741] [Orabug: 33590097] [Orabug: 33590087]
  - net/rds: prevent RDS connections using stale ARP entries (Wei Lin Guay)  [Orabug: 27626296] [Orabug: 33590097] [Orabug: 33590087]
  - net/rds: Avoid stalled connection due to CM REQ retries (Wei Lin Guay)  [Orabug: 25521901] [Orabug: 33590097] [Orabug: 33590087]
  - net/rds: use one sided reconnection during a race (Wei Lin Guay)  [Orabug: 25521901] [Orabug: 33590097] [Orabug: 33590087]
  - Revert "Revert "net/rds: Revert "RDS: add reconnect retry scheme for stalled" (Håkon Bugge)  [Orabug: 25521901] [Orabug: 33590097] [Orabug: 33590087]
  - rds_ib_exits() should free the rds_ib_inet_socket kernel socket (Sudhakar Dindukurti)  [Orabug: 27884217] [Orabug: 33590097] [Orabug: 33590087]
  - net/rds: ib: Release correct number of frags (Håkon Bugge)  [Orabug: 27902555] [Orabug: 33590097] [Orabug: 33590087]
  - Remove unused active bonding and iwarp code (Sudhakar Dindukurti)  [Orabug: 27905986] [Orabug: 33590097] [Orabug: 33590087]
  - rds: Node crashes when trace buffer is opened (Ka-Cheong Poon)  [Orabug: 27708872] [Orabug: 33590097] [Orabug: 33590087]
  - rds: MP-RDS may use an invalid c_path (Ka-Cheong Poon)  [Orabug: 27822369] [Orabug: 33590097] [Orabug: 33590087]
  - Remove Active Bonding code from RDS (Sudhakar Dindukurti)  [Orabug: 27718710] [Orabug: 33590097] [Orabug: 33590087]
  - rds: Fail to set up RDS connection to a link local address peer over RoCE (Ka-Cheong Poon)  [Orabug: 27766063] [Orabug: 33590097] [Orabug: 33590087]
  - RDS: IB: Fix cleanup during unregistering client (Avinash Repaka)  [Orabug: 27758801] [Orabug: 33590097] [Orabug: 33590087]
  - net/rds: Avoid copy overhead if send buff is full (Gerd Rausch)  [Orabug: 27542098] [Orabug: 33590097] [Orabug: 33590087]
  - RDS: net: Switch from dma_device to dev.parent (Bart Van Assche)  [Orabug: 27495806] [Orabug: 33590097] [Orabug: 33590087]
  - RDS: IB: Fix the address attributes for proxy qp (Avinash Repaka)  [Orabug: 26875519] [Orabug: 33590097] [Orabug: 33590087]
  - RDS: IB: Fix null pointer issue (Guanglei Li)  [Orabug: 27530931] [Orabug: 33590097] [Orabug: 33590087]
  - RDS: IB: Post invalidation & registration WRs together (Avinash Repaka)  [Orabug: 27602183] [Orabug: 33590097] [Orabug: 33590087]
  - Revert "RDS: don't commit to queue till transport connection is up" (Santosh Shilimkar)  [Orabug: 33590097] [Orabug: 33590087]
  - rds: Un-connected socket sendmsg() with a NULL destination does not fail (Ka-Cheong Poon)  [Orabug: 27454306] [Orabug: 33590097] [Orabug: 33590087]
  - rds: Calling getsockname() on unbounded socket generates seg fault (Ka-Cheong Poon)  [Orabug: 27454280] [Orabug: 33590097] [Orabug: 33590087]
  - rds: Second bind() can overwrite the first bind() (Ka-Cheong Poon)  [Orabug: 27454254] [Orabug: 33590097] [Orabug: 33590087]
  - net/rds: Assign the correct service level (Wei Lin Guay)  [Orabug: 27607211] [Orabug: 33590097] [Orabug: 33590087]
  - rds: Incorrect reference counting in TCP socket creation (Ka-Cheong Poon)  [Orabug: 27493581] [Orabug: 33590097] [Orabug: 33590087]
  - {IB/{core,ipoib},net/rds}: IPv6 support for ACL (Ka-Cheong Poon)  [Orabug: 25410192] [Orabug: 27487515] [Orabug: 33590097] [Orabug: 33590087]
  - RDS: IB: Include ethernet devices during initialization of active bonding (Avinash Repaka)  [Orabug: 26096238] [Orabug: 33590097] [Orabug: 33590087]
  - RDS: IB: Remove gid from rds_ib_port array (Avinash Repaka)  [Orabug: 26096238] [Orabug: 33590097] [Orabug: 33590087]
  - rds: System panic if RDS netfilter is enabled and RDS/TCP is used (Ka-Cheong Poon)  [Orabug: 26950401] [Orabug: 27487537] [Orabug: 33590097] [Orabug: 33590087]
  - rds: IB active bonding IPv6 changes (Ka-Cheong Poon)  [Orabug: 25410192] [Orabug: 27487535] [Orabug: 33590097] [Orabug: 33590087]
  - rds: Enable RDS IPv6 support (Ka-Cheong Poon)  [Orabug: 25410192] [Orabug: 27487532] [Orabug: 33590097] [Orabug: 33590087]
  - rds: Changed IP address internal representation to struct in6_addr (Ka-Cheong Poon)  [Orabug: 25410192] [Orabug: 27487531] [Orabug: 33590097] [Orabug: 33590087]
  - rds: C-style nits (Ka-Cheong Poon)  [Orabug: 25410192] [Orabug: 27487530] [Orabug: 33590097] [Orabug: 33590087]
  - rds: Fix inaccurate accounting of unsignaled wrs in rds_ib_xmit_rdma (Håkon Bugge)  [Orabug: 27090772] [Orabug: 27487529] [Orabug: 33590097] [Orabug: 33590087]
  - rds: Fix inaccurate accounting of unsignaled wrs (Håkon Bugge)  [Orabug: 27090772] [Orabug: 27487528] [Orabug: 33590097] [Orabug: 33590087]
  - rds: Proper init/exit declaration for module init/exit function (Ka-Cheong Poon)  [Orabug: 27013833] [Orabug: 27487527] [Orabug: 33590097] [Orabug: 33590087]
  - rds: Remove .exit from struct rds_transport (Ka-Cheong Poon)  [Orabug: 27013833] [Orabug: 27487526] [Orabug: 33590097] [Orabug: 33590087]
  - net/rds: Fix incorrect error handling (Håkon Bugge)  [Orabug: 27339257] [Orabug: 33590097] [Orabug: 33590087]
  - net/rds: use multiple sge than buddy allocation in congestion code (Wei Lin Guay)  [Orabug: 27339270] [Orabug: 33590097] [Orabug: 33590087]
  - Revert "RDS: fix the sg allocation based on actual message size" (Wei Lin Guay)  [Orabug: 27339270] [Orabug: 33590097] [Orabug: 33590087]
  - Revert "RDS: avoid large pages for sg allocation for TCP transport" (Wei Lin Guay)  [Orabug: 27339270] [Orabug: 33590097] [Orabug: 33590087]
  - Revert "net/rds: Reduce memory footprint in rds_sendmsg" (Wei Lin Guay)  [Orabug: 27339270] [Orabug: 33590097] [Orabug: 33590087]
  - net/rds: reduce memory footprint during ib_post_recv in IB transport (Wei Lin Guay)  [Orabug: 27339270] [Orabug: 33590097] [Orabug: 33590087]
  - net/rds: reduce memory footprint during rds_sendmsg with IB transport (Wei Lin Guay)  [Orabug: 27339270] [Orabug: 33590097] [Orabug: 33590087]
  - net/rds: set the rds_ib_init_frag based on supported sge (Wei Lin Guay)  [Orabug: 27339270] [Orabug: 33590097] [Orabug: 33590087]
  - Revert "net/rds: make copy_page_from_iter and copy_page_to_iter stay within page boundaries (WORKAROUND!)" (Håkon Bugge)  [Orabug: 27339270] [Orabug: 33590097] [Orabug: 33590087]
  - net/rds: make copy_page_from_iter and copy_page_to_iter stay within page boundaries (WORKAROUND!) (Gerd Rausch)  [Orabug: 27222215] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - net/rds: Fixing INIT2RTR_QP(0x503), syndrome (0x1796e4) (IB_AH_GRH present) issue. (Wei Lin Guay)  [Orabug: 27383162] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - net/rds: Fix order of intitialization in rds_ib_add_one. (Gerd Rausch)  [Orabug: 27195622] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - rds: RDS diagnostics when connections are stuck in Receiver Not Ready state. (hui.han)  [Orabug: 26522310] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - RDS: IB: Change the proxy qp's path_mtu to IB_MTU_256 (Avinash Repaka)  [Orabug: 26864694] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - rds: Fix non-atomic operation on shared flag variable (Håkon Bugge)  [Orabug: 26842076] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - rds: Fix incorrect statistics counting (Håkon Bugge)  [Orabug: 26847583] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - RDS: IB: Add proxy qp to support FRWR through RDS_GET_MR (Avinash Repaka)  [Orabug: 25669255] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - RDS: Add support for fast registration work request (Avinash Repaka)  [Orabug: 22145384] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - Revert "RDS: base connection dependency needed for rolling downgrade from version 4.1 to 3.1"" (Wei Lin Guay)  [Orabug: 26124147] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - Revert "RDS: Ensure non-zero SL uses correct path before lane 0 connection is dropped" (Wei Lin Guay)  [Orabug: 26124147] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - Revert "rds: make sure base connection is up on both sides" (Wei Lin Guay)  [Orabug: 26124147] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - net/rds: remove the RDS specific path record caching (Wei Lin Guay)  [Orabug: 26124147] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - Revert "net/rds: Revert "RDS: add reconnect retry scheme for stalled connections"" (Wei Lin Guay)  [Orabug: 26497333] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - Revert "net/rds: prioritize the base connection establishment" (Wei Lin Guay)  [Orabug: 26497333] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - Revert "net/rds: determine active/passive connection with IP addresses" (Wei Lin Guay)  [Orabug: 26497333] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - Revert "net/rds: use different workqueue for base_conn" (Wei Lin Guay)  [Orabug: 26497333] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - rds: reduce memory footprint for RDS when transport is RDMA (Ka-Cheong Poon)  [Orabug: 26412003] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - RDS: IB: Destroy rdma_cm_id when unloading module (Avinash Repaka)  [Orabug: 26089296] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - RDS: IB: Destroy aux_wq if rds_ib_init() fails (Avinash Repaka)  [Orabug: 26732887] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - rds: Reintroduce statistics counting (Håkon Bugge)  [Orabug: 26717115] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - rds: Make sure updates to cp_send_gen can be observed (Håkon Bugge)  [Orabug: 26519030] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - rds: tcp: use sock_create_lite() to create the accept socket (Sowmini Varadhan)  [Orabug: 26477756] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - rds: tcp: set linger to 1 when unloading a rds-tcp (Sowmini Varadhan)  [Orabug: 26477841] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - rds: tcp: send handshake ping-probe from passive endpoint (Sowmini Varadhan)  [Orabug: 26477841] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - net/rds: Replace printk in TX path with stat variable (Yuval Shaia)  [Orabug: 26402653] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - net/rds: Add mutex exclusion for vector_load (Håkon Bugge)  [Orabug: 26406492] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - RDS: Print failed rdma op details if failure is remote access (Rama Nichanamatlu)  [Orabug: 26277933] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - RDS: When RDS socket is closed, print unreleased MR's (Rama Nichanamatlu)  [Orabug: 26276427] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - net/rds: Reduce memory footprint in rds_sendmsg (Wei Lin Guay)  [Orabug: 26151323] [Orabug: 26350949] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - net/rds: Fix minor linker warnings (Babu Moger)  [Orabug: 25393132] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - net/rds: prioritize the base connection establishment (Wei Lin Guay)  [Orabug: 25521901] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - net/rds: determine active/passive connection with IP addresses (Wei Lin Guay)  [Orabug: 25521901] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - net/rds: use different workqueue for base_conn (Wei Lin Guay)  [Orabug: 25521901] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - net/rds: Revert "RDS: add reconnect retry scheme for stalled connections" (Wei Lin Guay)  [Orabug: 25521901] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - rds: tcp: Set linger when rejecting an incoming conn in rds_tcp_accept_one (Sowmini Varadhan)  [Orabug: 26289770] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - rds: tcp: various endian-ness fixes (Sowmini Varadhan)  [Orabug: 26289770] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - rds: tcp: remove cp_outgoing (Sowmini Varadhan)  [Orabug: 26289770] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - rds: tcp: Sequence teardown of listen and acceptor sockets to avoid races (Sowmini Varadhan)  [Orabug: 26289770] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - rds: tcp: Reorder initialization sequence in rds_tcp_init to avoid races (Sowmini Varadhan)  [Orabug: 26289770] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - rds: tcp: Take explicit refcounts on struct net (Sowmini Varadhan)  [Orabug: 26289770] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - rds: tcp: fix memory leak in TIME_WAIT sockets (Sowmini Varadhan)  [Orabug: 26250066] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - rds: tcp: canonical connection order for all paths with index > 0 (Sowmini Varadhan)  [Orabug: 26241322] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - rds: tcp: allow progress of rds_conn_shutdown if the rds_connection is marked ERROR by an intervening FIN (Sowmini Varadhan)  [Orabug: 26241322] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - Backport multipath RDS from upstream to UEK4 (Sowmini Varadhan)  [Orabug: 26241322] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - RDS/IB: active bonding port state fix for intfs added late (Mukesh Kacker)  [Orabug: 26081079] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - RDS/IB: 4KB receive buffers get posted by mistake on 16KB frag connections. (Venkat Venkatsubra)  [Orabug: 25920916] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - Revert "RDS: Make message size limit compliant with spec" (Avinash Repaka)  [Orabug: 25472193] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - RDS: ActiveBonding: Make its own thread for active active (Santosh Shilimkar)  [Orabug: 25026643] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - RDS: correct condition check in reconnect_timeout() (Ajaykumar Hotchandani)  [Orabug: 25026643] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - RDS: ActiveBonding: Create a cluster sync point for failback (Santosh Shilimkar)  [Orabug: 25026643] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - RDS: don't commit to queue till transport connection is up (Santosh Shilimkar)  [Orabug: 25393611] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - RDS: restrict socket connection reset to CAP_NET_ADMIN (Santosh Shilimkar)  [Orabug: 25393611] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - rds: fix warning in rds_send_drop_to() (Ajaykumar Hotchandani)  [Orabug: 25116517] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - RDS: Make message size limit compliant with spec (Avinash Repaka)  [Orabug: 24455231] [Orabug: 22303625] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - RDS: rds debug messages are enabled by default (shamir rabinovitch)  [Orabug: 24956522] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - net/rds: Fix new sparse warning (David Ahern)  [Orabug: 24817685] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - net/rds: fix unaligned memory access (shamir rabinovitch)  [Orabug: 24817685] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - RDS: IB: fix panic with handlers running post teardown (Santosh Shilimkar)  [Orabug: 24460805] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - RDS: Drop the connection as part of cancel to avoid hangs (Avinash Repaka)  [Orabug: 22506032] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - RDS: add reconnect retry scheme for stalled connections (Santosh Shilimkar)  [Orabug: 22347191] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - RDS: restore the exponential back-off scheme (Santosh Shilimkar)  [Orabug: 22347191] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - RDS: avoid duplicate connection drop for self loopback (Santosh Shilimkar)  [Orabug: 22347191] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - RDS: don't modify conn state directly in rds_connect_complete (Santosh Shilimkar)  [Orabug: 22347191] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - RDS: IB: log associates connection details for setup failures (Santosh Shilimkar)  [Orabug: 22347191] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - RDS: IB: suppress log prints for FLUSH_ERR/RETRY_EXC (Santosh Shilimkar)  [Orabug: 24663803] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - RDS: use c_wq for all activities on a connection (Santosh Shilimkar)  [Orabug: 22347191] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - RDS: IB: Avoid double reject on ACL failures (Santosh Shilimkar)  [Orabug: 22347191] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - RDS: make the rds_{local_}wq part of rds_connection (Santosh Shilimkar)  [Orabug: 22347191] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - RDS: make rds_conn_drop() take reason argument (Santosh Shilimkar)  [Orabug: 22347191] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - RDS: IB: Remove unused PATH migration event code (Santosh Shilimkar)  [Orabug: 22347191] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - RDS: IB: remove delayed queuing of address change (Santosh Shilimkar)  [Orabug: 22347191] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - RDS: IB: use address change event for failover/failback (Santosh Shilimkar)  [Orabug: 22347191] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - RDS: IB: drop workaround for loopback connection hangs (Santosh Shilimkar)  [Orabug: 22347191] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - Revert "RDS: IB: skip rx/tx work when destroying connection" (Santosh Shilimkar)  [Orabug: 24746103] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - RDS: IB: set default frag size to 16K (Santosh Shilimkar)  [Orabug: 24656820] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - rds: avoid call to flush_mrs() in specific condition (Ajaykumar Hotchandani)  [Orabug: 24656750] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - RDS: IB: skip rx/tx work when destroying connection (Wengang Wang)  [Orabug: 24395789] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - RDS: TCP: rds_tcp_accept_one() should transition socket from RESETTING to UP (Sowmini Varadhan)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - RDS: TCP: fix race windows in send-path quiescence by rds_tcp_accept_one() (Sowmini Varadhan)  [Orabug: 23542064] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - RDS: TCP: Retransmit half-sent datagrams when switching sockets in rds_tcp_reset_callbacks (Sowmini Varadhan)  [Orabug: 23542064] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - RDS: TCP: Add/use rds_tcp_reset_callbacks to reset tcp socket safely (Sowmini Varadhan)  [Orabug: 23542064] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - RDS: TCP: Avoid rds connection churn from rogue SYNs (Sowmini Varadhan)  [Orabug: 23542064] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - RDS: TCP: rds_tcp_accept_worker() must exit gracefully when terminating rds-tcp (Sowmini Varadhan)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - RDS: TCP: Remove kfreed tcp conn from list (Sowmini Varadhan)  [Orabug: 23542064] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - RDS: IB: Add MOS note details to link local(HAIP) address print (Santosh Shilimkar)  [Orabug: 23027670] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - {IB/{core,ipoib},net/{mlx4,rds}}: Mark unload_allowed as __initdata variable (Yuval Shaia)  [Orabug: 23501273] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - net/rds: Skip packet filtering if interface does not support ACL (Yuval Shaia)  [Orabug: 23541567] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - RDS: Fix the rds_conn_destroy panic due to pending messages (Bang Nguyen)  [Orabug: 23222944] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - RDS: add handshaking for ACL violation detection at passive (Ajaykumar Hotchandani)  [Orabug: 23222944] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - RDS: IB: enforce IP anti-spoofing based on ACLs (Santosh Shilimkar)  [Orabug: 23222944] [Orabug: 27300453] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - RDS: Add acl fields to the rds_connection (Santosh Shilimkar)  [Orabug: 23222944] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - RDS: IB: invoke connection destruction in worker (Ajaykumar Hotchandani)  [Orabug: 23222944] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - RDS: Add reset all conns for a source address to CONN_RESET (Santosh Shilimkar)  [Orabug: 23222944] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - RDS: IB: change rds_ib_active_bonding_excl_ips to only RFC3927 space (Todd Vierling)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - RDS: avoid large pages for sg allocation for TCP transport (Santosh Shilimkar)  [Orabug: 23635336] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - {IBCM/IPoIB/MLX4/RDS}: Temporary backout Exasecure change (Santosh Shilimkar)  [Orabug: 23634771] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - RDS/IB: Fix crash in SRQ initialization (Ajaykumar Hotchandani)  [Orabug: 23523586] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - RDS: Remove the link-local restriction as a stop gap measure (Santosh Shilimkar)  [Orabug: 2360905] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - RDS: IB: restore the vector spreading for the CQs (Santosh Shilimkar)  [Orabug: 23550561] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - RDS: Fix the rds_conn_destroy panic due to pending messages (Bang Nguyen)  [Orabug: 23222944] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - RDS: add handshaking for ACL violation detection at passive (Ajaykumar Hotchandani)  [Orabug: 23222944] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - RDS: IB: enforce IP anti-spoofing for UUID context (Santosh Shilimkar)  [Orabug: 23222944] [Orabug: 27300453] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - RDS: IB: invoke connection destruction in worker (Ajaykumar Hotchandani)  [Orabug: 23222944] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - RDS: message filtering based on UUID (Bang Nguyen)  [Orabug: 23222944] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - RDS: Add UUID socket option (Santosh Shilimkar)  [Orabug: 23222944] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - RDS: Add reset all conns for a source address to CONN_RESET (Santosh Shilimkar)  [Orabug: 23222944] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - RDS: Drop stale iWARP support (Santosh Shilimkar)  [Orabug: 23027670] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - RDS: IB: drop discontinued IB CQ_VECTOR support (Santosh Shilimkar)  [Orabug: 23027670] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - RDS: IB: Drop unused and broken APM support (Santosh Shilimkar)  [Orabug: 23027670] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - RDS: IB: Make use of ARPOP_REQUEST instead of ARPOP_REPLY in bonding code (Santosh Shilimkar)  [Orabug: 23094704] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - RDS: IB: don't use the link-local address for ib transport (Santosh Shilimkar)  [Orabug: 23027670] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - RDS: IB: rebuild receive caches when needed (Santosh Shilimkar)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - OFED: indicate consistent vendor error (Ajaykumar Hotchandani)  [Orabug: 22381117] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - RDS: Change number based conn-drop reasons to enum (Avinash Repaka)  [Orabug: 23294707] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - RDS: Move rds_rtd definitions from rds_rt_debug files to common files (Avinash Repaka)  [Orabug: 23294707] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - RDS: Change the default value of rds_rt_debug_bitmap modparam to 0x488B (Avinash Repaka)  [Orabug: 23294707] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - RDS: Replace rds_rtd printk with trace_printk (Avinash Repaka)  [Orabug: 23294707] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - RDS: IB: Print vendor error in recv completion error message (Avinash Repaka)  [Orabug: 23294707] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - rds: schedule local connection activity in proper workqueue (Ajaykumar Hotchandani)  [Orabug: 23223537] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - net/rds: Use max_mr from HCA caps than max_fmr (Yuval Shaia)  [Orabug: 23223564] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - RDS: IB: disable ib_cache purging to avoid memory leak in reconnect path (Santosh Shilimkar)  [Orabug: 23275911] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - RDS: IB: avoid bit fields for i_frag_pages (Wengang Wang)  [Orabug: 23275911] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - RDS: TCP: Synchronize accept() and connect() paths on t_conn_lock. (Sowmini Varadhan)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - RDS:TCP: Synchronize rds_tcp_accept_one with rds_send_xmit when resetting t_sock (Sowmini Varadhan)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - RDS: TCP: Call pskb_extract() helper function (Sowmini Varadhan)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - RDS: support individual receive trace reporting (Santosh Shilimkar)  [Orabug: 23215779] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - Revert "RDS: Make message size limit compliant with spec" (Chuck Anderson)  [Orabug: 22661521] [Orabug: 23217242] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - RDS: TCP: Remove unused constant (Sowmini Varadhan)  [Orabug: 22993275] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - RDS: TCP: Add sysctl tunables for sndbuf/rcvbuf on rds-tcp socket (Sowmini Varadhan)  [Orabug: 22993275] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - RDS: Make message size limit compliant with spec (Avinash Repaka)  [Orabug: 22661521] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - RDS: add flow control info to rds_info_rdma_connection (Wei Lin Guay)  [Orabug: 22306628] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - RDS: update IB flow control algorithm (Wei Lin Guay)  [Orabug: 22306628] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - RDS: Add flow control in runtime debugging (Wei Lin Guay)  [Orabug: 22306628] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - RDS: fix IB transport flow control (Wei Lin Guay)  [Orabug: 22306628] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - Avoid redundant call to rds_bind_lookup() in recv path. (Sowmini Varadhan)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - RDS: TOS fixes in failure paths when RDS-TCP and RDS-RDMA are run together (Sowmini Varadhan)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - rds: rds-stress show all zeros after few minutes (shamir rabinovitch)  [Orabug: 23045970] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - RDS: IB: Run rds_fmr_flush WQ closer to ib_device (Wei Lin Guay)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - RDS: IB: support larger frag size up to 16KB (Santosh Shilimkar)  [Orabug: 21894138] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - RDS: IB: add frag size to per connection info (Santosh Shilimkar)  [Orabug: 21894138] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - RDS: IB: log the endpoint rds connection role (Santosh Shilimkar)  [Orabug: 21894138] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - RDS: IB: purge receive frag cache on connection shutdown (Santosh Shilimkar)  [Orabug: 21894138] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - RDS: IB: use i_frag_sz for cache stat updates (Santosh Shilimkar)  [Orabug: 21894138] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - RDS: IB: scale rds_ib_allocation based on fragment size (Santosh Shilimkar)  [Orabug: 21894138] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - RDS: IB: make fragment size (RDS_FRAG_SIZE) dynamic (Santosh Shilimkar)  [Orabug: 21894138] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - RDS: log the IP address as well on bind failure (Santosh Shilimkar)  [Orabug: 21894138] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - RDS: fix the sg allocation based on actual message size (Wei Lin Guay)  [Orabug: 21894138] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - RDS: make congestion code independent of PAGE_SIZE (Santosh Shilimkar)  [Orabug: 21894138] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - RDS: Back out OoO send status fix since it causes the regression (Santosh Shilimkar)  [Orabug: 21894138] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - RDS/IB: VRPC DELAY / OSS RECONNECT CAUSES 5 MINUTE STALL ON PORT FAILURE (Venkat Venkatsubra)  [Orabug: 22847528] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - rds: add infrastructure to find more details for reconnect failure (Ajaykumar Hotchandani)  [Orabug: 22631108] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - rds: find connection drop reason (Ajaykumar Hotchandani)  [Orabug: 22631108] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - RDS: Add interface for receive MSG latency trace (Santosh Shilimkar)  [Orabug: 22630180] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - RDS-TCP: Recover correctly from pskb_pull()/pksb_trim() failure in rds_tcp_data_recv (Sowmini Varadhan)  [Orabug: 22623837] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - RDS: establish connection for legitimate remote RDMA message (Santosh Shilimkar)  [Orabug: 22139696] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - rds: remove the _reuse_ rds ib pool statistics (Wengang Wang)  [Orabug: 22124214] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - RDS: Add support for per socket SO_TIMESTAMP for incoming messages (Santosh Shilimkar)  [Orabug: 22190837] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - RDS: Fix out-of-order RDS_CMSG_RDMA_SEND_STATUS (Wei Lin Guay)  [Orabug: 22126982] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - net/rds: start rdma listening after ib/iw initialization is done (Qing Huang)  [Orabug: 21684447] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - RDS-TCP: Reset tcp callbacks if re-using an outgoing socket in rds_tcp_accept_one() (Sowmini Varadhan)  [Orabug: 22012202] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - RDS: Invoke ->laddr_check() in rds_bind() for explicitly bound transports. (Sowmini Varadhan)  [Orabug: 22012202] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - RDS: rds_conn_lookup() should factor in the struct net for a match (Sowmini Varadhan)  [Orabug: 22012202] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - RDS: Use a single TCP socket for both send and receive. (Sowmini Varadhan)  [Orabug: 22012202] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - RDS-TCP: Do not bloat sndbuf/rcvbuf in rds_tcp_tune (Sowmini Varadhan)  [Orabug: 22012202] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - RDS-TCP: Set up MSG_MORE and MSG_SENDPAGE_NOTLAST as appropriate in rds_tcp_ (Sowmini Varadhan)  [Orabug: 22012202] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - Revert "rds_rdma: rds_sendmsg should return EAGAIN if connection not setup" (Rama Nichanamatlu)  [Orabug: 21664735] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - rds: make sure base connection is up on both sides (Ajaykumar Hotchandani)  [Orabug: 21675157] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - rds_ib/iw: fixed big endianness conversion issue for dp->dp_ack_seq (Qing Huang)  [Orabug: 21684819] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - RDS: fix race condition when sending a message on unbound socket. (Quentin Casasnovas)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - RDS: verify the underlying transport exists before creating a connection (Sasha Levin)  [Orabug: 22010933] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - RDS: fix race condition when sending a message on unbound socket. (Quentin Casasnovas)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - RDS: make send_batch_count tunable effective (Santosh Shilimkar)  [Orabug: 22010933] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - RDS: make use of kfree_rcu() and avoid the call_rcu() chain (Santosh Shilimkar)  [Orabug: 22010933] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - RDS: verify the underlying transport exists before creating a connection (Sasha Levin)  [Orabug: 22010933] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - RDS/IB: print string constants in more places (Zach Brown)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - ib/rds: runtime debuggability enhancement (Qing Huang)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - RDS: Handle RDMA_CM_EVENT_TIMEWAIT_EXIT event. (Venkat Venkatsubra)  [Orabug: 21675221] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - rds: fix an integer overflow test in rds_info_getsockopt() (Dan Carpenter)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - RDS: change spin_lock to spin_lock_bh (Wengang Wang)  [Orabug: 21795851] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - rds: add busy_list only when fmr allocated successfully (Wengang Wang)  [Orabug: 21795840] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - rds: free ib_device related resource (Wengang Wang)  [Orabug: 21795824] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - rds: srq initialization and cleanup (Wengang Wang)  [Orabug: 21795815] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - IB/rds_rdma: unloading of ofed stack causes page fault panic (Rama Nichanamatlu)  [Orabug: 20861212] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - RDS-TCP: Support multiple RDS-TCP listen endpoints, one per netns. (Sowmini Varadhan)  [Orabug: 21437445] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - RDS-TCP: Make RDS-TCP work correctly when it is set up in a netns other than init_net (Sowmini Varadhan)  [Orabug: 21437445] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - rds: print vendor error on error induced disconnect/re-connect (Wengang Wang)  [Orabug: 21527137] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - rds: re-entry of rds_ib_xmit/rds_iw_xmit (Wengang Wang)  [Orabug: 21324078] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - rds_rdma: rds_sendmsg should return EAGAIN if connection not setup (Wengang Wang)  [Orabug: 21551474] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - rds_rdma: allocate FMR according to max_item_soft (Wengang Wang)  [Orabug: 21551548] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - rds_rdma: do not dealloc fmrs in the pool under use (Wengang Wang)  [Orabug: 21551548] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - rds: set fmr pool dirty_count correctly (Wengang Wang)  [Orabug: 21551548] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - rds: rds_ib_device.refcount overflow (Wengang Wang)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - Add getsockopt support for SO_RDS_TRANSPORT (Sowmini Varadhan)  [Orabug: 21061146] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - Add setsockopt support for SO_RDS_TRANSPORT (Sowmini Varadhan)  [Orabug: 21061146] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - Declare SO_RDS_TRANSPORT and RDS_TRANS_* constants in uapi/linux/rds.h (Sowmini Varadhan)  [Orabug: 21061146] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - RDS-TCP: only initiate reconnect attempt on outgoing TCP socket. (Sowmini Varadhan)  [Orabug: 20930687] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - RDS-TCP: Always create a new rds_sock for an incoming connection. (Sowmini Varadhan)  [Orabug: 20930687] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - rds: directly include header for vmalloc/vfree in ib_recv.c (Mukesh Kacker)  [Orabug: 21059667] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - rds: return EMSGSIZE for oversize requests before processing/queueing (Mukesh Kacker)  [Orabug: 20971222] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - net: rds: use correct size for max unacked packets and bytes (Sasha Levin)  [Orabug: 20585918] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - RDS/IP: RDS takes 10 seconds to plumb the second IP back (Mukesh Kacker)  [Orabug: 20231857] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - RDS/IB: Tune failover-on-reboot scheduling (Mukesh Kacker)  [Orabug: 20063740] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - RDS: mark netdev UP for intfs added post module load (Mukesh Kacker)  [Orabug: 20130536] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - RDS: Enable use of user named pkey devices (Mukesh Kacker)  [Orabug: 19064704] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - rds: fix list corruption and tx hang when netfilter is used (shamir rabinovitch)  [Orabug: 18963548] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - RDS: move more queing for loopback connections to separate queue (Mukesh Kacker)  [Orabug: 18977932] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - RDS: add module parameter to allow module unload or not (Wengang Wang)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - rds: fix NULL pointer dereference panic during rds module unload (Rama Nichanamatlu)  [Orabug: 18952475] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - RDS:active bonding: disable failover across HCAs(failover groups) (Mukesh Kacker)  [Orabug: 19430773] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - RDS/IB: active bonding - failover down interfaces on reboot. (Mukesh Kacker)  [Orabug: 18697678] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - RDS/IB: Remove dangling rcu_read_unlock() and other cleanups (Mukesh Kacker)  [Orabug: 18995395] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - rds: new extension header: rdma bytes (Shamir Rabinovitch)  [Orabug: 18468180] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - RDS: Ensure non-zero SL uses correct path before lane 0 connection is dropped (Ajaykumar Hotchandani)  [Orabug: 19133664] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - rds: Lost locking in loop connection freeing (Pavel Emelyanov)  [Orabug: 19265200] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - RDS: active bonding - failover/failback only to matching pkey (Mukesh Kacker)  [Orabug: 18681364] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - RDS: active bonding - ports may not failback if all ports go down (Mukesh Kacker)  [Orabug: 18875563] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - RDS: Use rds_local_wq for loopback connections in rds_conn_connect_if_down() (Chien-Hua Yen)  [Orabug: 18892380] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - RDS: add workqueue for local loopback connections (Chien-Hua Yen)  [Orabug: 18892366] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - RDS: SA query optimization (Bang Nguyen)  [Orabug: 18801977] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - RDS: Remove cond_resched() in RX tasklet (Bang Nguyen)  [Orabug: 18801937] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - RDS: Replace queue_work() by cond_resched() in the tasklet to breakup RX stream (Bang Nguyen)  [Orabug: 18801931] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - RDS: looping to reap cq recv queue in rds_conn_shutdown (Chien-Hua Yen)  [Orabug: 18501034] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - rds: Fix regression in dynamic active bonding configuration (Bang Nguyen)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - rds/rdma_cm: send RDMA_CM_EVENT_ADDR_CHANGE event for active bonding (Bang Nguyen)  [Orabug: 18421516] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - RDS: Idle QoS connections during remote peer reboot causing application brownout (Chien-Hua Yen)  [Orabug: 18443194] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - rds: dynamic active bonding configuration (Bang Nguyen)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - RDS: Fix slowdown when doing massively parallel workload (Bang Nguyen)  [Orabug: 18362838] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - RDS: active bonding needs to set brcast and mask for its primary interface (Chien-Hua Yen)  [Orabug: 18479088] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - RDS: bind hash table size increase, add per-bucket rw lock (Bang Nguyen)  [Orabug: 18071861] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - RDMA CM: Add reason code for IB_CM_REJ_CONSUMER_DEFINED (Bang Nguyen)  [Orabug: 17484682] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - RDS: protocol negotiation fails during reconnect (Bang Nguyen)  [Orabug: 17375389] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - RDS: double free rdma_cm_id (Bang Nguyen)  [Orabug: 17192816] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - RDS: ActiveBonding IP exclusion filter (Bang Nguyen)  [Orabug: 17075950] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - RDS: Reconnect stalls for 15s (Bang Nguyen)  [Orabug: 17277974] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - RDS: Reconnect causes panic at completion phase (Bang Nguyen)  [Orabug: 17213597] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - RDS: added stats to track and display receive side memory usage (Venkat Venkatsubra)  [Orabug: 17045536] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - RDS: RDS reconnect stalls (Bang Nguyen)  [Orabug: 1731355] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - RDS: disable IP failover if device removed (Bang Nguyen)  [Orabug: 17206167] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - RDS: Fix a bug in QoS protocol negotiation (Bang Nguyen)  [Orabug: 17079972] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - RDS: alias failover is not working properly (Bang Nguyen)  [Orabug: 17177994] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - add NETFILTER suppport (Ahmed Abbas)  [Orabug: 17082619] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - RDS: Local address resolution may be delayed after IP has moved. RDS to update local ARP cache directly to speed it up. (Bang Nguyen)  [Orabug: 16979994] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - RDS: restore two-sided reconnect with the lower IP node having a constant 100 ms backoff. (Bang Nguyen)  [Orabug: 16710287] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - rds: set correct msg_namelen (Weiping Pan)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - RDS: IP config needs to be updated when network/rdma service restarted. (Bang Nguyen)  [Orabug: 16963884] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - RDS: check for valid rdma id before initiating connection (Bang Nguyen)  [Orabug: 16857341] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - RDS: reduce slab memory usage (Bang Nguyen)  [Orabug: 16935507] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - RDS: Move connection along with IP when failing over/back. (Bang Nguyen)  [Orabug: 16916648] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - RDS: Rename HAIP parameters to Active Bonding (Bang Nguyen)  [Orabug: 16810395] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - rds shouldn't release fmr when ib_device was already released. (Zheng Li)  [Orabug: 16605377] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - rds remove dev race. (Zheng Li)  [Orabug: 16605377] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - reinit ip_config when service rdma restart. (Zheng Li)  [Orabug: 16605377] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - rds: limit the size allocated by rds_message_alloc() (Cong Wang)  [Orabug: 16837486] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - RDS: Fixes to improve throughput performance (Bang Nguyen)  [Orabug: 16571410] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - RDS: fix rds-ping spinlock recursion (jeff.liu)  [Orabug: 16223050] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - rds: Congestion flag does not get cleared causing the connection to hang (Bang Nguyen)  [Orabug: 16424692] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - Add SIOCRDSGETTOS to get the current TOS for the socket (Bang Nguyen)  [Orabug: 16397197] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - Changes to connect/TOS interface (Bang Nguyen)  [Orabug: 16397197] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - rds: this resolved crash while removing rds_rdma module. orabug: 16268201 (Bang Nguyen)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - rds: scheduling while atomic on failover orabug: 16275095 (Bang Nguyen)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - rds: unregister IB event handler on shutdown (Bang Nguyen)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - rds: HAIP support child interface (Bang Nguyen)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - RDS HAIP misc fixes (Bang Nguyen)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - Ignore failover groups if HAIP is disabled (Bang Nguyen)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - RDS: RDS rolling upgrade (Saeed Mahameed)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - RDS: Fixes warning while rds-info. spin_lock_irqsave() is changed to spin_lock_bh(). (Ajaykumar Hotchandani)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - rds: UNDO reverts done for rebase code to compile with Linux 4.1 APIs (Mukesh Kacker)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - rds: port to UEK4, Linux-3.18* (Ajaykumar Hotchandani)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - rds: disable APM support (Ajaykumar Hotchandani)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - rds: disable cq balance (Ajaykumar Hotchandani)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - rds: move linux/rds.h to uapi/linux/rds.h (Ajaykumar Hotchandani)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - RDS: Kconfig and Makefile changes (Ajaykumar Hotchandani)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - RDS merge for UEK2 (Bang Nguyen)  [Orabug: 15997083] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - rds: Misc Async Send fixes (Bang Nguyen)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - rds: call unregister_netdevice_notifier for rds_ib_nb in rds_ib_exit (Saeed Mahameed)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - rds: flush and destroy workqueue rds_aux_wq and fix creation order. (Saeed Mahameed)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - rds : fix compilation warning (Saeed Mahameed)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - rds: port the code to uek2 (Dotan Barak)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - rds: CQ balance (Bang Nguyen)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - rds: HAIP across HCAs (Bang Nguyen)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - rds: Misc HAIP fixes (Bang Nguyen)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - rds: off by one fixes (Dotan Barak)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - rds: Add Automatic Path Migration support (Dotan Barak)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - rds: fix error flow handling (Dotan Barak)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - net/rds: prevent memory leak in case of error flow (Dotan Barak)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - rds: fixed kernel oops in case of error flow (Dotan Barak)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - RDS: fixed compilation warnings (Dotan Barak)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - RDS SRQ optional (Bang Nguyen)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - RDS Async send support revised (Bang Nguyen)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - RDS Asynchronous Send support (Bang Nguyen)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - RDS: cleanup checkpatch errors (Bang Nguyen)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - RDS Quality Of Service (Bang Nguyen)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - RDS: Use IB_CQ_NEXT_COMP instead of IB_CQ_SOLICITED for TX CQ (Bang Nguyen)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - RDS: make sure rds_send_xmit doesn't loop forever (Chris Mason)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - RDS: issue warning if re-connect stalling for more than 1 min. (Bang Nguyen)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - RDS: don't test ring_empty or ring_low without locks held (Chris Mason)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - RDS: don't use RCU for the bind hash table (Chris Mason)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - RDS: avoid double destory of cm_id when rdms_resolve_route fails (Venkat Venkatsubra)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - RDS: make sure rds_send_drop_to properly takes the m_rs_lock (Chris Mason)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - RDS: kick krdsd to send congestion map updates (Chris Mason)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - RDS: add debuging code around sock_hold and sock_put. (Chris Mason)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - RDS: Don't destroy the rdma id until after we're dong using it (Chris Mason)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - RDS: adjust BUG()s for irqs disabled. (Chris Mason)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - rds: make sure we don't deref a null cm_id->device during address checks (Chris Mason)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - RDS: don't use GFP_ATOMIC for sk_alloc in rds_create (Chris Mason)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - RDS: Make sure we do a signaled send at least once per large send (Chris Mason)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - RDS: Fix an rcu race with rds_bin_lookup (Tina Yang)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - RDS: Fix RDS_MSG_MAPPED usage. (Chris Mason)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - RDS: add a sock_destruct callback with debugging (Chris Mason)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - RDS: add a sock_destruct callback with debugging (Tina Yang)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - RDS: limit the number of times we loop in rds_send_xmit (Chris Mason)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - RDS Make sure we check for congestion updates during rds_send_xmit (Chris Mason)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - Make sure to kick rds_send_xmit for both LL_SEND_FULL and for the congestion map updates. (Chris Mason)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - RDS: make sure we post recv buffers (Chris Mason)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - RDS: don't trust the LL_SEND_FULL bit (Chris Mason)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - RDS: give up on half formed connections after 15s (Chris Mason)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - rds_send_xmit is called uner a spinlock, lets not do a cond_resched() (Chris Mason)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - RDS: make sure not to loop forever inside rds_send_xmit (Chris Mason)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - rds: check for excessive looping in rds_send_xmit (Andy Grover)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - rds: don't update ipaddress tables if the address hasn't changed (Chris Mason)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - change ib default retry to 1 (Andy Grover)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - This patch adds the modparam to rds.ko. (Andy Grover)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - RDS: only use passive connections when addresses match (Zach Brown)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - RDS: destroy the ib state that generates call back earlier during shutdown (Chris Mason)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - RDS: check access on pages before doing copy_to_user (Chris Mason)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - RDS/IB: always free recv frag as we free its ring entry (Zach Brown)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - RDS/IB: Quiet warnings when leaking frags (Andy Grover)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - Fix loopback connection reference counts (Zach Brown)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - RDS: cancel connection work structs as we shut down (Zach Brown)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - RDS: don't call rds_conn_shutdown() from rds_conn_destroy() (Zach Brown)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - RDS: have sockets get transport module references (Zach Brown)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - RDS: remove old rs_transport comment (Zach Brown)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - RDS: lock rds_conn_count decrement in rds_conn_destroy() (Zach Brown)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - Use CQ_NEXT_COMP for recv completions (Andy Grover)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - RDS/IB: protect the list of IB devices (Zach Brown)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - RDS/IB: print IB event strings as well as their number (Zach Brown)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - RDS: flush the FMR pool less often. (Chris Mason)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - RDS: make sure the ring is really full before we return with ENOMEM (Chris Mason)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - RDS: use different cq handlers for send and recv (Andy Grover)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - RDS/IB: track signaled sends (Zach Brown)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - RDS: remove __init and __exit annotation (Zach Brown)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - RDS: fix races and other problems with rmmod and device removal (Zach Brown)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - RDS: properly init the sg table in our frags (Chris Mason)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - RDS: add support for atomic messages over the wire (Andy Grover)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - RDS: Fix BUG_ONs to not fire when in a tasklet (Andy Grover)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - RDS: Enable per-cpu workqueue threads (Tina Yang)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - RDS: Do not call set_page_dirty() with irqs off (Andy Grover)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - RDS: Properly unmap when getting a remote access error (Sherman Pun)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - RDS: only put sockets that have seen congestion on the poll_waitq (Andy Grover)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - RDS: Fix locking in rds_send_drop_to() (Tina Yang)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - RDS: Turn down alarming reconnect messages (Andy Grover)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - RDS: Workaround for in-use MRs on close causing crash (Andy Grover)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - RDS: Fix send locking issue (Tina Yang)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - RDS: Fix congestion issues for loopback (Andy Grover)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - RDS/TCP: Wait to wake thread when write space available (Andy Grover)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - RDS: use IB_CQ_VECTOR_LEAST_ATTACHED for cq's (Andy Grover)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - RDS: sendmsg() should check sndtimeo, not rcvtimeo (Andy Grover)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - RDS: Do not BUG() on error returned from ib_post_send (Andy Grover)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - RDS: Re-add pf/sol access via sysctl (Andy Grover)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - RDS/IB+IW: Move recv processing to a tasklet (Andy Grover)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - RDS: Do not send congestion updates to loopback connections (Andy Grover)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - RDS: Fix panic on unload (Andy Grover)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - RDS: Fix potential race around rds_i[bw]_allocation (Andy Grover)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - RDS: Add GET_MR_FOR_DEST sockopt (Andy Grover)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - RDS: Add a debug message suggesting to load transport modules (Andy Grover)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - RDS: Track transports via an array, not a list (Andy Grover)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - RDS: Modularize RDMA and TCP transports (Andy Grover)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - RDS: Export symbols from core RDS (Andy Grover)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - RDS: Re-add TCP transport to RDS (Andy Grover)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - RDS/IB: Drop connection when a fatal QP event is received (Andy Grover)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - RDS/IB: Disable flow control in sysctl and explain why (Andy Grover)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - RDS/IB: Move tx/rx ring init and refill to later (Andy Grover)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - RDS: Don't set c_version in __rds_conn_create() (Andy Grover)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - RDS/IB: Rename byte_len to data_len to enhance readability (Andy Grover)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - RDS/RDMA: Fix cut-n-paste errors in printks in rdma_transport.c (Andy Grover)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - RDS/IB: Fix printk to indicate remote IP, not local (Andy Grover)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - RDS/IB: Handle connections using RDS 3.0 wire protocol (Andy Grover)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - RDS/IB: Improve RDS protocol version checking (Andy Grover)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - RDS: Set retry_count to 2 and make modifiable via modparam (Andy Grover)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - RDS: Refactor end of __conn_create for readability (Andy Grover)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - RDS/IB: Always use PAGE_SIZE for FMR page size (Andy Grover)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - RDS: Fix completion notifications on blocking sockets (Andy Grover)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - FRV: Fix the section attribute on UP DECLARE_PER_CPU() (David Howells)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - net/rds Make RDS compile with 4.14 APIs & drop iWarp (Gerd Rausch)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]
  - RDMA: Flip the meaning of "-1" and "0" in ibv_create_cq / ib_create_cq (Gerd Rausch)  [Orabug: 37081626]
  - net/mlx4: fix non-determinism when comp_vector is zero (Håkon Bugge)  [Orabug: 33679626] [Orabug: 33615757] [Orabug: 35938971]
  - net/mlx5: fix non-determinism when comp_vector is zero (Håkon Bugge)  [Orabug: 33679626] [Orabug: 33615757] [Orabug: 35938971]
  - IB/core: Introduce IB_CQ_FORCE_ZERO_CV (Håkon Bugge)  [Orabug: 33679626] [Orabug: 33615757] [Orabug: 35938971]
  - IB/mlx5: Disable BME for unbound devices too (Håkon Bugge)  [Orabug: 34395360]
  - RDMA/cma: Relax device check in cma_match_net_dev() (Håkon Bugge)  [Orabug: 30809928] [Orabug: 33286666]
  - ib/core: Adding match_net_dev_ignore_port workaround. (Gerd Rausch)  [Orabug: 28167460] [Orabug: 33234884] [Orabug: 33286664]
  - net/mlx4_core: simplify UEK style profile initialization (Qing Huang)  [Orabug: 31621194] [Orabug: 31621204]
  - mlx4_core: Extend num_mtt in dev caps to avoid overflow. (Majd Dibbiny)  [Orabug: 27510485] [Orabug: 31621040] [Orabug: 31621043]
  - mlx4_core: Disable P_Key Violation Traps (Håkon Bugge)  [Orabug: 28860987] [Orabug: 31621035] [Orabug: 31621038]
  - net/mlx4_core: print firmware version during driver loading (Qing Huang)  [Orabug: 28597387] [Orabug: 31621027] [Orabug: 31621034]
  - net/mlx4_core: Use round robin scheme to avoid stale caches (Santosh Shilimkar)  [Orabug: 25730857] [Orabug: 27510465] [Orabug: 31621025] [Orabug: 31621026]
  - net/mlx4_core: panic the system on unrecoverable errors (Santosh Shilimkar)  [Orabug: 25873690] [Orabug: 27510466] [Orabug: 31621022] [Orabug: 31621024] [Orabug: 31621024]
  - mlx4_core: Add func name to common error strings to locate uniquely (Mukesh Kacker)  [Orabug: 25440329] [Orabug: 27510467] [Orabug: 31621018] [Orabug: 31621020]
  - net/mlx4_core: Disallow creation of RAW QPs on a VF (Eli Cohen)  [Orabug: 257846022] [Orabug: 27510549] [Orabug: 31621016] [Orabug: 31621017]
  - ib/mlx4: add msi-x allocation kernel msg logging (Qing Huang)  [Orabug: 25307234] [Orabug: 23479018] [Orabug: 27510468] [Orabug: 31621014] [Orabug: 31621015]
  - mlx4_core/ib: set the IB port MTU to 2K (Or Gerlitz)  [Orabug: 24946479] [Orabug: 27510469] [Orabug: 31621012] [Orabug: 31621013]
  - IB/mlx4: Scatter CQs to different EQs (Majd Dibbiny)  [Orabug: 24705943] [Orabug: 27510470] [Orabug: 31621003] [Orabug: 31621006] [Orabug: 31621006]
  - mlx4_core: allow unprivileged VFs read physical port counters (Mukesh Kacker)  [Orabug: 24656803] [Orabug: 27510471] [Orabug: 31621000] [Orabug: 31621002]
  - offload ib subnet manager port and node get info query handling. (Rama Nichanamatlu)  [Orabug: 23750258] [Orabug: 27510472] [Orabug: 31620997] [Orabug: 31620999]
  - mlx4: indicate memory resource exhaustion (Ajaykumar Hotchandani)  [Orabug: 21549767] [Orabug: 27510478] [Orabug: 31620994] [Orabug: 31620995]
  - mlx4_core: disable mlx4_QP_ATTACH calls from guests if master is doing flow steering. (Jack Morgenstein)  [Orabug: 27510491] [Orabug: 31620989] [Orabug: 31620990]
  - mlx4_core: change resource quotas to enable supporting upstream-kernel guests (Jack Morgenstein)  [Orabug: 27510492] [Orabug: 31620985] [Orabug: 31620988]
  - mlx4_core: print more info when command times out (Jack Morgenstein)  [Orabug: 27510493] [Orabug: 31620978] [Orabug: 31620980]
  - mlx4_core: move out label to the right place (Eugenia Emantayev)  [Orabug: 27510494] [Orabug: 31620974] [Orabug: 31620977]
  - mlx4_core: set device to use extended counters (Yishai Hadas)  [Orabug: 27510496] [Orabug: 31620970] [Orabug: 31620971] [Orabug: 31620971]
  - net/mlx4_core: add sanity check when creating bitmap structure (Dotan Barak)  [Orabug: 27510503] [Orabug: 31620966] [Orabug: 31620969]
  - mlx4: Handle memory region deregistration failure (Shani Michaeli)  [Orabug: 27510464] [Orabug: 31620961] [Orabug: 31620963] [Orabug: 31620963]
  - IB/mlx4: Do not generate random node_guid for VFs (Yuval Shaia)  [Orabug: 22145330] [Orabug: 27510511] [Orabug: 31620959] [Orabug: 31620960]
  - IB/mlx4: Check port_num before using it in mlx4_ib_port_link_layer (Moshe Lazer)  [Orabug: 27510514] [Orabug: 31620957] [Orabug: 31620958]
  - mlx4_core: Error message on mtt allocation failure (Marcel Apfelbaum)  [Orabug: 27510506] [Orabug: 31620954] [Orabug: 31620955]
  - IB/ipoib: CSUM support in connected mode (Yuval Shaia)  [Orabug: 20559068] [Orabug: 27487353] [Orabug: 30833821] [Orabug: 30833822]
  - IB/mlx5: Disable BME on panic (Håkon Bugge)  [Orabug: 31556128] [Orabug: 31556129] [Orabug: 31556129] [Orabug: 31556129] [Orabug: 31556129] [Orabug: 31556129]
  - IB/mlx5: Implement clear counters (Parav Pandit)  [Orabug: 26761264] [Orabug: 31556125] [Orabug: 31556127] [Orabug: 31556127]
  - IB/mlx5: Set VHCA port in sniffer flow (Daniel Jurgens)  [Orabug: 26875158] [Orabug: 31556123] [Orabug: 31556124]
  - net/mlx5: Enable 1M QPs for UEK (Erez Alfasi)  [Orabug: 28985637] [Orabug: 31556121] [Orabug: 31556122]
  - {IB,net}/mlx5: Spread IB CQs more evenly over EQs (Parav Pandit)  [Orabug: 26790181] [Orabug: 31556116] [Orabug: 31556117] [Orabug: 31556117]
  - rdma_cm: Add debug functions using pr_debug() (Saeed Mahameed)  [Orabug: 27358307] [Orabug: 31555473] [Orabug: 31555475]
  - RDMA/cma: Make CM response timeout and # CM retries configurable (Håkon Bugge)  [Orabug: 29876868] [Orabug: 31555471] [Orabug: 31555472] [Orabug: 31555472]
  - rdma_cm: garbage-collection thread for rdma_destroy_id() (Saeed Mahameed)  [Orabug: 27358294] [Orabug: 31555468] [Orabug: 31555470] [Orabug: 31555470]
  - rdma_cm/cma: Cache broadcast domain record. (Erez Shitrit)  [Orabug: 27358309] [Orabug: 31555464] [Orabug: 31555465] [Orabug: 31555465]
  - RDMA CM: Avoid possible SEGV during connection shutdown (Bang Nguyen)  [Orabug: 16750726] [Orabug: 27358296] [Orabug: 31555461] [Orabug: 31555462]
  - ib_core: supporting 64b counters using PMA_COUNTERS_EXT mad (Sudhakar Dindukurti)  [Orabug: 27635081] [Orabug: 30833668] [Orabug: 30833670]
  - IB/core: Implement clear counters (Parav Pandit)  [Orabug: 26761264] [Orabug: 31555458] [Orabug: 31555459] [Orabug: 31555459] [Orabug: 31555459]
  - ipoib: rfe- enable pkey and device name decoupling (Mukesh Kacker)  [Orabug: 19064704] [Orabug: 27383465] [Orabug: 30833819] [Orabug: 30833820] [Orabug: 30833820] [Orabug: 30833820]
  - rds/rdma_cm: send RDMA_CM_EVENT_ADDR_CHANGE event for active bonding (Bang Nguyen)  [Orabug: 18421516] [Orabug: 27358298] [Orabug: 30833716] [Orabug: 30833717]
  - IB/cma: Introduce tos mapping configuration option (Parav Pandit)  [Orabug: 26761224] [Orabug: 30833614] [Orabug: 30833615]
  - IB/Shared PD support from Oracle (Eli Cohen)  [Orabug: 21496696] [Orabug: 27358304] [Orabug: 30833764] [Orabug: 30833765] [Orabug: 30833765] [Orabug: 30833765] [Orabug: 30833765]
  - IB/core: Introducing /sys/class/infiniband_verbs/uek_abi_version (Gerd Rausch)  [Orabug: 27959252] [Orabug: 30833443] [Orabug: 30833580] [Orabug: 30833580]
  - net/rds: Rewind RDS to 8cbd9606a636 in order to rebase UEK commits on top of it (Gerd Rausch)  [Orabug: 33590087]
  - uek-rpm: Fix if statement in modpost to allow 'external_module' support (Victor Erminpour)  [Orabug: 37500892]
  - uek-misc: Add uek_runs_in_kvm (Håkon Bugge)  [Orabug: 35049221]
  - uek-misc: Initial version (Konrad Rzeszutek Wilk)  [Orabug: 35049221]
  - Enable EROFS modules and related config options (Harshit Mogalapalli)  [Orabug: 38045627]
  - uek-rpm: Run savedefconfig for 6.15 config changes (Samasth Norway Ananda)  [Orabug: 38044072]
  - uek-rpm: handle placement of modules in 6.15 modules (Samasth Norway Ananda)  [Orabug: 38044072]
  - uek-rpm: Enable the FWCTL PDS and CXL support in UEK (Qing Huang)  [Orabug: 38033678]
  - uek-rpm: enable CONFIG_USB_SERIAL_XR as m (Samasth Norway Ananda)  [Orabug: 38011711]
  - uek-rpm: CONFIG_PTP_1588_CLOCK_OCP enable for OCI (Vijayendra Suman)  [Orabug: 37966383]
  - uek-rpm/config-aarch64: Enable BT_HCIUART_BCM for RPi Bluetooth (Vijay Kumar)  [Orabug: 37961543]
  - uek-rpm: Add crc16.ko to modules-core for x86_64 (Harshit Mogalapalli)  [Orabug: 37916545]
  - uek-rpm: Move irqbypass to core, now that it is a module (Harshit Mogalapalli)  [Orabug: 37902602]
  - uek-rpm: Move vmxnet3 to module-core in UEK8 (Harshit Mogalapalli)  [Orabug: 37901153]
  - uek-rpm: Enable SECURITY_DMESG_RESTRICT in UEK8 (Harshit Mogalapalli)  [Orabug: 37867044]
  - uek-rpm/kernel-uek.spec: Set DEFAULTKERNEL correctly during %postun (Vijay Kumar)  [Orabug: 37834853]
  - uek-rpm: build the fwctl mlx5 driver on UEK (Qing Huang)  [Orabug: 37810622]
  - uek-rpm: Move the gve kernel module from extra to kernel-uek-core (Samasth Norway Ananda)  [Orabug: 37641842]
  - uek-rpm: Enable gcov build (Sherry Yang)  [Orabug: 36937234]
  - uek: kabi: Update check-kabi script to the latest version (Saeed Mirzamohammadi)  [Orabug: 35641429]
  - uek: kabi: include uek_kabi header file (Saeed Mirzamohammadi)  [Orabug: 35641429]
  - certs: append OL ksplice signing key (Mark Nicholson)  [Orabug: 35455153]
  - certs: create certs/ol_signing_keys.pem from the OLkmod key (Mark Nicholson)  [Orabug: 35455153]
  - uek-rpm: Add old OL keys to the default .blacklist keyring (Eric Snowberg)  [Orabug: 31961009]
  - Linux 6.15 (LUCI Bot)
  - uek-rpm: Enable Intel In Field Scan as a module in UEK8 (Harshit Mogalapalli)  [Orabug: 37781826]
  - uek-rpm: Run savedefconfig for 6.14 config changes (Samasth Norway Ananda)  [Orabug: 37771583]
  - uek-rpm: enable Dell related configs (Samasth Norway Ananda)  [Orabug: 37771583]
  - uek-rpm: handle placement of modules in 6.14 modules (Samasth Norway Ananda)  [Orabug: 37771583]
  - uek-rpm: enable config CONFIG_CRYPTO_CRCT10DIF (Samasth Norway Ananda)  [Orabug: 37771583]
  - uek-rpm: switch to new secureboot certificates and upgrade shim (Samasth Norway Ananda)  [Orabug: 37763999]
  - uek-rpm: install the perf exec dir (Stephen Brennan)  [Orabug: 37757732]
  - uek-rpm: update firmware dependency to latest .38 version (Samasth Norway Ananda)  [Orabug: 37752344]
  - uek-rpm: use find instead of ls for removing modules (Harshit Mogalapalli)  [Orabug: 37744602]
  - uek-rpm: Fix depmod warnings with wireless modules in aarch64 (Harshit Mogalapalli)  [Orabug: 37708793]
  - uek-rpm: make depmod checks more stricter in UEK8 (Harshit Mogalapalli)  [Orabug: 37708793]
  - uek-rpm: Move few very old wireless drivers to deprecated. (Harshit Mogalapalli)  [Orabug: 37708793]
  - uek-rpm: Move DVB drivers and media tuners to deprecated (Harshit Mogalapalli)  [Orabug: 37708793]
  - uek-rpm: Move these modules from modules-desktop to modules (Harshit Mogalapalli)  [Orabug: 37708793]
  - uek-rpm: Move few useful usb modules back to modules (Harshit Mogalapalli)  [Orabug: 37708793]
  - uek-rpm: Move few modules back to kernel-uek-modules-extra (Harshit Mogalapalli)  [Orabug: 37708793]
  - uek-rpm: Move few extra-netfilter modules back to core (Harshit Mogalapalli)  [Orabug: 37708793]
  - uek-rpm: Set CONFIG_IP6_NF_IPTABLES for ol10/ol9/ol8 container kernels (Jonah Palmer)  [Orabug: 37702952]
  - uek-rpm: Disable INFINIBAND_BNXT_RE (Sherry Yang)  [Orabug: 37681250]
  - uek-rpm: Enable CONFIG_MICROSOFT_MANA as a module in aarch64 (Vijayendra Suman)  [Orabug: 37649316]
  - uek-rpm: Move br_netfilter and ebtable_broute to core modules list (Harshit Mogalapalli)  [Orabug: 37621713]
  - uek-rpm: Refactor the code for removing modules from the list (Harshit Mogalapalli)  [Orabug: 37605353]
  - uek-rpm: Simplify the unzipsed macro in the spec file. (Harshit Mogalapalli)  [Orabug: 37605353]
  - uek-rpm: Remove unused filter-arch.sh scripts from UEK source (Harshit Mogalapalli)  [Orabug: 37605353]
  - Refine rpm conflicts field about shim for OL10 (Yifei Liu)  [Orabug: 37577456]
  - uek-rpm: Add crc32c_generic to modules-core as its used by iscsi_tcp.ko (Harshit Mogalapalli)
  - uek-rpm: Remove team module build from OL10 (Joseph Salisbury)  [Orabug: 37535491]
  - uek-rpm: Disable emb3 builds for OL8 LUCI (Harshit Mogalapalli)  [Orabug: 37529071]
  - uek-rpm: set DEFAULTKERNEL to UEK-NEXT upon installation on OL10 (Harshvardhan Jha)  [Orabug: 37522478]
  - uek-rpm: Delete the elXX field in the kernel-uek.spec file (Yifei Liu)  [Orabug: 37518904]
  - uek-rpm: Enable MXC4005 and place it in -modules-desktop (Harshit Mogalapalli)  [Orabug: 37517553]
  - uek-rpm: Run savedefconfig for 6.13 config changes (Harshit Mogalapalli)  [Orabug: 37499470]
  - uek-rpm: Enable PCIE_THERMAL and PCIE_TPH options in LUCI (Harshit Mogalapalli)  [Orabug: 37499470]
  - uek-rpm: Enable FUNCTION_GRAPH_RETADDR in LUCI (Harshit Mogalapalli)  [Orabug: 37499470]
  - uek-rpm: Enable VIRTIO_VFIO_PCI as a module in ARM as well (Harshit Mogalapalli)  [Orabug: 37499470]
  - uek-rpm: Enable ARM_SMMU_V3_IOMMUFD in LUCI for aarch64 (Harshit Mogalapalli)  [Orabug: 37499470]
  - uek-rpm: Disable NET_VENDOR_HISILICON in x86_64 (Harshit Mogalapalli)  [Orabug: 37499470]
  - OL8: uek-rpm: ol8 specific fixes (Harshit Mogalapalli)  [Orabug: 37499470]
  - uek-rpm: handle placement of modules in 6.13 modules (Harshit Mogalapalli)  [Orabug: 37499470]
  - uek-rpm: Remove few modules from modules list (Harshit Mogalapalli)  [Orabug: 37499470]
  - uek-rpm: Remove lib80211 modules as they are removed upstream (Harshit Mogalapalli)  [Orabug: 37499470]
  - uek-rpm: Enable xhci-pci-renesas and add it to core (Harshit Mogalapalli)  [Orabug: 37489944]
  - xfs: enable online repair for aarch64 (Darrick J. Wong)  [Orabug: 37474975]
  - uek-rpm: Enable CONFIG_FIPS_SIGNATURE_SELFTEST for all archs (Saeed Mirzamohammadi)  [Orabug: 37459895]
  - uek-rpm: set DEFAULTKERNEL to other installed uek if possible (Sherry Yang)  [Orabug: 37455023]
  - uek-rpm: Move smd-rpm to -modules rpm (Harshit Mogalapalli)  [Orabug: 37436593]
  - uek-rpm: Move few sound related modules to modules-desktop from modules (Harshit Mogalapalli)  [Orabug: 37436593]
  - uek-rpm: Move w1_ds278* to -modules-desktop from extras (Harshit Mogalapalli)  [Orabug: 37436593]
  - uek-rpm: Move snd-sof-pci-intel-ptl to -modules-desktop (Harshit Mogalapalli)  [Orabug: 37436593]
  - uek-rpm: Move few iio related modules to -modules-desktop (Harshit Mogalapalli)  [Orabug: 37436593]
  - uek-rpm: Move few cdc related modules to -modules-usb (Harshit Mogalapalli)  [Orabug: 37436593]
  - uek-rpm: Move few regmap-soundwire related modules to -modules-desktop (Harshit Mogalapalli)  [Orabug: 37436593]
  - uek-rpm: Move brcmfmac derived modules to -modules-wireless (Harshit Mogalapalli)  [Orabug: 37436593]
  - uek-rpm: Move nuoveau module to -modules-desktop (Harshit Mogalapalli)  [Orabug: 37436593]
  - uek-rpm: Move btintel.ko to -modules-desktop (Harshit Mogalapalli)  [Orabug: 37436593]
  - uek-rpm: Move few modules to -modules rpm (Harshit Mogalapalli)  [Orabug: 37436593]
  - uek-rpm: Move few modules to core which are needed by other core modules (Harshit Mogalapalli)  [Orabug: 37436593]
  - uek-rpm: Fix depmod checks in all stages of checking (Harshit Mogalapalli)  [Orabug: 37436593]
  - uek-rpm: xt_CHECKSUM module is needed to create guest using virt install (Harshit Mogalapalli)  [Orabug: 37427694]
  - uek-rpm: Move cdrom to core-x86_64 package (Harshit Mogalapalli)  [Orabug: 37427694]
  - uek-rpm: Move xt_nat module to core (Harshvardhan Jha)  [Orabug: 37427694]
  - uek-rpm: Move few xtable related modules to core (Harshit Mogalapalli)  [Orabug: 37427694]
  - uek-rpm: Make modules packaging errors non-fatal for now (Harshit Mogalapalli)  [Orabug: 37387204]
  - uek-rpm: add modules.packages file to contain rpm-module name mapping (Harshit Mogalapalli)  [Orabug: 37387204]
  - uek-rpm: add kernel version to denylist path (Vegard Nossum)  [Orabug: 37387204]
  - uek-rpm: rename blacklist -> denylist (Vegard Nossum)  [Orabug: 37387204]
  - uek-rpm: put denylists in individual subpackages (Vegard Nossum)  [Orabug: 37387204]
  - uek-rpm: move some deprecated SCSI drivers from -modules to -modules-extra (Vegard Nossum)  [Orabug: 37387204]
  - uek-rpm: move other USB drivers to -modules-usb (Vegard Nossum)  [Orabug: 37387204]
  - uek-rpm: move other desktop-related drivers to -modules-desktop (Vegard Nossum)  [Orabug: 37387204]
  - uek-rpm: move graphics drivers to -modules-desktop (Vegard Nossum)  [Orabug: 37387204]
  - uek-rpm: move other input device drivers to -modules-desktop (Vegard Nossum)  [Orabug: 37387204]
  - uek-rpm: move HID drivers to -modules-desktop (Vegard Nossum)  [Orabug: 37387204]
  - uek-rpm: move IIO drivers to -modules-desktop (Vegard Nossum)  [Orabug: 37387204]
  - uek-rpm: move tablet drivers to -modules-desktop (Vegard Nossum)  [Orabug: 37387204]
  - uek-rpm: move touchscreen drivers to -modules-desktop (Vegard Nossum)  [Orabug: 37387204]
  - uek-rpm: move laptop drivers to -modules-desktop (Vegard Nossum)  [Orabug: 37387204]
  - uek-rpm: move joystick drivers to -modules-desktop (Vegard Nossum)  [Orabug: 37387204]
  - uek-rpm: move other media drivers to -modules-desktop (Vegard Nossum)  [Orabug: 37387204]
  - uek-rpm: move remote control drivers to -modules-desktop (Vegard Nossum)  [Orabug: 37387204]
  - uek-rpm: move video drivers to -modules-desktop (Vegard Nossum)  [Orabug: 37387204]
  - uek-rpm: move DVB drivers to -modules-desktop (Vegard Nossum)  [Orabug: 37387204]
  - uek-rpm: move webcam drivers to -modules-desktop (Vegard Nossum)  [Orabug: 37387204]
  - uek-rpm: move mmc drivers to -modules-desktop (Vegard Nossum)  [Orabug: 37387204]
  - uek-rpm: move bluetooth drivers to -modules-desktop (Vegard Nossum)  [Orabug: 37387204]
  - uek-rpm: move sound drivers to -modules-desktop (Vegard Nossum)  [Orabug: 37387204]
  - uek-rpm: move wireless modules to -modules-wireless (Vegard Nossum)  [Orabug: 37387204]
  - uek-rpm: move some less commonly used netfilter modules to -modules-extra-netfilter (Vegard Nossum)  [Orabug: 37387204]
  - uek-rpm: move some unusual network schedulers from -modules-core to -modules-extra (Vegard Nossum)  [Orabug: 37387204]
  - uek-rpm: move some deprecated modules to -modules-deprecated (Vegard Nossum)  [Orabug: 37387204]
  - uek-rpm: move gnss module to -modules (Vegard Nossum)  [Orabug: 37387204]
  - uek-rpm: move Oracle ECP wifi modules from -modules-core to -modules (Vegard Nossum)  [Orabug: 37387204]
  - uek-rpm: move supported SCSI drivers to -modules-core (Vegard Nossum)  [Orabug: 37387204]
  - uek-rpm: move VMWare modules to -modules-core (Vegard Nossum)  [Orabug: 37387204]
  - uek-rpm: move HyperV modules to -modules-core (Vegard Nossum)  [Orabug: 37387204]
  - uek-rpm: move sch_netem to -modules-core (Vegard Nossum)  [Orabug: 37387204]
  - uek-rpm: create new packages (Vegard Nossum)  [Orabug: 37387204]
  - uek-rpm: add new script for splitting modules into subpackages (Vegard Nossum)  [Orabug: 37387204]
  - uek-rpm: pass modules subpackage name to %kernel_modules_extra_* (Vegard Nossum)  [Orabug: 37387204]
  - uek-rpm: simplify %kernel_*_package macros (Vegard Nossum)  [Orabug: 37387204]
  - uek-rpm: simplify %kernel_variant_package (Vegard Nossum)  [Orabug: 37387204]
  - uek-rpm: enable CONFIG_FORCEDETH in debug kernels (Harshit Mogalapalli)  [Orabug: 37387204]
  - ol9: perf: repair build to match upstream (Mark Nicholson)  [Orabug: 37372174]
  - ol10: perf: repair build to match upstream (Mark Nicholson)  [Orabug: 37372174]
  - uek-rpm: Enable new config options for Ampere (Dave Kleikamp)  [Orabug: 37356469]
  - uek-rpm: Build fixes for v6.13-rc2 (Rhythm Mahajan)  [Orabug: 37343243]
  - uek-rpm: Don't overwrite auto.conf with .config (Victor Erminpour)  [Orabug: 34644500]
  - uek-rpm: Replace check for CONFIG_STACK_VALIDATION with CONFIG_OBJTOOL (Victor Erminpour)  [Orabug: 34644500]
  - uek-rpm/config-x86_64: Enable AMD_HSMP's Platform and ACPI driver configs (Vijay Kumar)  [Orabug: 37413587]
  - bpftool: leverage bpftool bootstrap to generate base header (Mark Nicholson)  [Orabug: 37331768]
  - uek-rpm: Run savedefconfig for LUCI 6.12 snapshot (Harshit Mogalapalli)  [Orabug: 37288145]
  - uek-rpm: Enable VIDEO_INTEL_IPU6 on LUCI (Harshit Mogalapalli)  [Orabug: 37288145]
  - uek-rpm: Enable SND_SOC_INTEL_AVS in LUCI (Harshit Mogalapalli)  [Orabug: 37288145]
  - uek-rpm: Enable CONFIG_CPUSETS_V1 in LUCI (Harshit Mogalapalli)  [Orabug: 37288145]
  - uek-rpm: Enable few options in LUCI (Harshit Mogalapalli)  [Orabug: 37288145]
  - uek-rpm: Enable SERIAL_8250_PCI1XXXX in LUCI (Harshit Mogalapalli)  [Orabug: 37288145]
  - uek-rpm: Enable BUILTIN_MODULE_RANGES in LUCI (Harshit Mogalapalli)  [Orabug: 37288145]
  - uek-rpm: Enable CONFIG_I2C_DESIGNWARE_CORE as module back in LUCI (Harshit Mogalapalli)  [Orabug: 37288145]
  - uek-rpm: x86_64: Enable MITIGATION_SLS in LUCI (Harshit Mogalapalli)  [Orabug: 37288145]
  - uek-rpm: Enable TMPFS_QUOTA in LUCI (Harshit Mogalapalli)  [Orabug: 37288145]
  - gcc-14: upgrading ol8 to use gcc-toolset-14 (Mark Nicholson)  [Orabug: 37284777]
  - gcc-14: upgrading ol9 to use gcc-toolset-14 (Mark Nicholson)  [Orabug: 37284777]
  - uek-rpm: Enable DEBUG_CGROUP_REF in debug kernels. (Harshit Mogalapalli)  [Orabug: 37272366]
  - uek-rpm: Enable PDS_VDPA in LUCI (Harshit Mogalapalli)  [Orabug: 37240069]
  - uek-rpm: x86_64: Enable I8K in LUCI (Harshit Mogalapalli)  [Orabug: 37238809]
  - uek-rpm: aarch64: Enable some video related options in LUCI (Harshit Mogalapalli)  [Orabug: 37238809]
  - uek-rpm: aarch64: Enable FB_MODE_HELPERS on aarch64 (Harshit Mogalapalli)  [Orabug: 37238809]
  - uek-rpm: aarch64: Enable FEALNX driver back in LUCI for arm (Harshit Mogalapalli)  [Orabug: 37238809]
  - uek-rpm: Enable DVB_BUDGET_CORE in LUCI (Harshit Mogalapalli)  [Orabug: 37238809]
  - uek-rpm: move deflate.ko to core list (Harshit Mogalapalli)  [Orabug: 37238728]
  - uek-rpm: aarch64: Enable ARM64_ERRATUM_* in LUCI back (Harshit Mogalapalli)  [Orabug: 37236197]
  - uek-rpm: aarch64: Enable NVIDIA_CORESIGHT_PMU_ARCH_SYSTEM_PMU in LUCI (Harshit Mogalapalli)  [Orabug: 37235320]
  - uek-rpm: Enable VIDEO_STK1160 in LUCI (Harshit Mogalapalli)  [Orabug: 37235295]
  - uek-rpm: Enable PINCTRL_AMD in LUCI (Harshit Mogalapalli)  [Orabug: 37235280]
  - uek-rpm: x86_64: Enable few INTEL_PMT_* modules in LUCI (Harshit Mogalapalli)  [Orabug: 37232599]
  - uek-rpm: x86_64: Enable AMD_HSMP in LUCI (Harshit Mogalapalli)  [Orabug: 37231523]
  - uek-rpm: x86_64: Enable SND_SOC_SOF_HDA_LINK in LUCI (Harshit Mogalapalli)  [Orabug: 37231190]
  - uek-rpm: Enable PDS_CORE and PDS_VFIO_PCI  in LUCI (Harshit Mogalapalli)  [Orabug: 37229734]
  - uek-rpm: Enable few kerberos related options in LUCI (Harshit Mogalapalli)  [Orabug: 37229685]
  - uek-rpm: x86_64: Enable INTEL_IDXD_SVM in LUCI (Harshit Mogalapalli)  [Orabug: 37229612]
  - uek-rpm: Enable NVMe KTLS with CONFIG_NVME_TCP_TLS and CONFIG_NVME_TARGET_TCP_TLS (Alan Adamson)  [Orabug: 37213870]
  - Build fixes for 6.12 LUCI rc4 (Rhythm Mahajan)  [Orabug: 37208813]
  - spec: Set CONFIG_CRYPTO_FIPS_NAME for standard & embedded kernels (Jonah Palmer)  [Orabug: 37169723]
  - spec: Set CONFIG_CRYPTO_FIPS_NAME for container kernels (Jonah Palmer)  [Orabug: 37169723]
  - spec: Add agnostic UEK release macros for UEK-NEXT (Jonah Palmer)  [Orabug: 37169723]
  - uek-rpm: Add CONFIG_CRYPTO_FIPS_NAME for ol8 Bluefield 3 smartnic embedded kernels (Jonah Palmer)  [Orabug: 37169723]
  - uek-rpm: Add CONFIG_CRYPTO_FIPS_NAME for ol8/ol9 standard kernels (Jonah Palmer)  [Orabug: 37169723]
  - uek-rpm: Add CONFIG_CRYPTO_FIPS_NAME for ol8/ol9 container kernels (Jonah Palmer)  [Orabug: 37169723]
  - uek-rpm: Add TUI support to perf tool (Rhythm Mahajan)  [Orabug: 37042414]
  - uek-rpm: Allow multiple debuginfo package installation (Samasth Norway Ananda)  [Orabug: 36707546]
  - uek-rpm: Remove requirement of runtime package for ol 10 (Rhythm Mahajan)  [Orabug: 37274195]
  - uek-rpm: cleanup ol9 spec rpmlint issues (Mark Nicholson)  [Orabug: 37274195]
  - uek-rpm: cleanup ol10 spec rpmlint issues (Mark Nicholson)  [Orabug: 37274195]
  - uek-rpm: updating spec versions to 6.12 (Mark Nicholson)  [Orabug: 37274195]
  - ol9-spec: remove unused infrastructure for vanilla kernels (Mark Nicholson)
  - ol10-spec: remove unused infrastructure for vanilla kernels (Mark Nicholson)  [Orabug: 37274195]
  - uek-rpm: configuring the update-el files for ol10 (Mark Nicholson)  [Orabug: 37274195]
  - uek-rpm: upgrading aarch64 locklist templates for ol10 (Mark Nicholson)  [Orabug: 37274195]
  - uek-rpm: support newer rpmbuild build tool in ol10 (Mark Nicholson)  [Orabug: 37274195]
  - uek-rpm: baseline configuration code for oracle-linux 10 (Mark Nicholson)  [Orabug: 37274195]
  - uek-rpm: enable CONFIG_SCHED_CLASS_EXT (sched_ext) (Vegard Nossum)  [Orabug: 37173639]
  - uek-rpm: Enable config for Mediatek mt7915E wireless driver (Saeed Mirzamohammadi)  [Orabug: 37127678]
  - uek-rpm: Set CONFIG_DM_VERITY_VERIFY_ROOTHASH_SIG_PLATFORM_KEYRING to y (Harshvardhan Jha)  [Orabug: 37088382]
  - uek-rpm: Set CONFIG_FS_DAX to y (Harshvardhan Jha)  [Orabug: 37088382]
  - uek-rpm: Set CONFIG_COMPRESSED_INSTALL to y (Harshvardhan Jha)  [Orabug: 37088382]
  - uek-rpm: Set CONFIG_NET_VENDOR_META to n (Harshvardhan Jha)  [Orabug: 37088382]
  - uek-rpm: Set CONFIG_MEMCG_V1 to y (Harshvardhan Jha)  [Orabug: 37088382]
  - uek-rpm: Set CONFIG_VIRTIO_MEM to y (Harshvardhan Jha)  [Orabug: 37088382]
  - uek-rpm: Set CONFIG_NVME_TARGET_DEBUGFS to y (Harshvardhan Jha)  [Orabug: 37088382]
  - uek-rpm: Run savedefconfig for 6.11 config changes (Harshit Mogalapalli)  [Orabug: 37088012]
  - uek-rpm: Config changes to support Grace Hopper (Dave Kleikamp)  [Orabug: 37034286]
  - uek-rpm: Enable CONFIG_BLK_DEV_DRBD (Vijayendra Suman)  [Orabug: 36930372]
  - uek-rpm: Add skx_edac_common.ko to core list (Rhythm Mahajan)  [Orabug: 36929492]
  - uek-rpm: Remove dimlib from emb3 as well (Rhythm Mahajan)  [Orabug: 36929492]
  - uek-rpm: Make some adjustments due to upstream 6.11 MW changes (Rhythm Mahajan)  [Orabug: 36929492]
  - uek-rpm: Enable QAT_VFIO_PCI in LUCI (Harshit Mogalapalli)  [Orabug: 36875856]
  - uek-rpm: Save the savedefconfig formatted configs in LUCI source (Harshit Mogalapalli)  [Orabug: 36875856]
  - uek-rpm: Enable CONFIG_SOFTLOCKUP_DETECTOR_INTR_STORM in LUCI (Harshit Mogalapalli)  [Orabug: 36875856]
  - uek-rpm: Enable CONFIG_X86_POSTED_MSI in LUCI (Harshit Mogalapalli)  [Orabug: 36875856]
  - uek-rpm: Enable KVM_INTEL_PROVE_VE in LUCI (Harshit Mogalapalli)  [Orabug: 36875856]
  - uek-rpm: Move ieee802154.ko out of extras, it is in core already (Harshit Mogalapalli)  [Orabug: 36867781]
  - uek-rpm: Enable CONFIG_GNSS for GNSS receiver support (Harshvardhan Jha)  [Orabug: 36845904]
  - uek-rpm: Disable DRM_QXL in LUCI (Harshit Mogalapalli)  [Orabug: 36720659]
  - uek-container: Add advanced routing options (Boris Ostrovsky)  [Orabug: 36691278]
  - uek-rpm: Move ecc,ecdh_generic back to core for aarch64 arch (Harshit Mogalapalli)  [Orabug: 36688999]
  - uek-rpm: Add few modules to core for build LUCI kernel (Harshit Mogalapalli)  [Orabug: 36688999]
  - uek-rpm: Remove builtin options(ecc and ecdh_generic) from core list files. (Harshit Mogalapalli)  [Orabug: 36688999]
  - uek-rpm: re-enable HP_WMI and HP_ACCEL (Stephen Brennan)  [Orabug: 36632745]
  - uek-rpm: Run savedefconfig and format configs in LUCI for 6.9 (Harshit Mogalapalli)  [Orabug: 36609858]
  - uek-rpm: Enable CXL_PMU in LUCI (Harshit Mogalapalli)  [Orabug: 36609858]
  - uek-rpm: Enable NVGRACE_GPU_VFIO_PCI in LUCI (Harshit Mogalapalli)  [Orabug: 36609858]
  - uek-rpm: Enable X86_FRED in LUCI (Harshit Mogalapalli)  [Orabug: 36609858]
  - uek-rpm: Enable CRYPTO_DEV_IAA_CRYPTO in LUCI (Harshit Mogalapalli)  [Orabug: 36609858]
  - uek-rpm: Enable INTEL_TPMI related options in LUCI (Harshit Mogalapalli)  [Orabug: 36609858]
  - uek-rpm: Enable AMD_PMF in LUCI (Harshit Mogalapalli)  [Orabug: 36609858]
  - uek-rpm: Enable CONFIG_IDPF in LUCI (Harshit Mogalapalli)  [Orabug: 36609858]
  - uek-rpm: fix conflict when installing multiple kernel-uek-debuginfo (Samasth Norway Ananda)  [Orabug: 36550463]
  - uek-rpm: Bluefield 3: Add missing mtd_blkdev module (Thomas Tai)  [Orabug: 36534874]
  - uek-rpm: Allow multiple UEK next kernels to be installed (Harshit Mogalapalli)  [Orabug: 36510392]
  - uek-rpm: correctly set DEFAULTKERNEL after removal of uek kernels (Rhythm Mahajan)  [Orabug: 36492961]
  - uek-rpm: Cleanup /lib/modules (Brian Maly)  [Orabug: 36492671]
  - uek-rpm: Fix error on cleanup of weak modules (Brian Maly)  [Orabug: 36492671]
  - uek-rpm: correctly set DEFAULTKERNEL in /etc/sysconfig/kernel (Rhythm Mahajan)  [Orabug: 36492487]
  - uek-rpm: Replace gcc-toolset-13 with required components (Samasth Norway Ananda)  [Orabug: 36488466]
  - Enable CONFIG_HARDLOCKUP_DETECTOR and CONFIG_BOOTPARAM_HARDLOCKUP_PANIC for aarch64 (Yifei Liu)  [Orabug: 36468456]
  - uek-rpm: Remove irqbypass.ko from core list on x86_64 (Harshit Mogalapalli)  [Orabug: 36459425]
  - uek-rpm: do not set XFS_ONLINE_SCRUB_STATS config (Samasth Norway Ananda)  [Orabug: 36400324]
  - uek-rpm: Checkin savedefconfig for 6.8 LUCI config update (Harshit Mogalapalli)  [Orabug: 36440188]
  - uek-rpm: Enable KVM_SW_PROTECTED_VM in LUCI (Harshit Mogalapalli)  [Orabug: 36440188]
  - uek-rpm: Enable CRYPTO_DEV_QAT_420XX driver in LUCI (Harshit Mogalapalli)  [Orabug: 36440188]
  - uek-rpm: Enable VIRTIO_VFIO_PCI as module in modules-core package (Harshit Mogalapalli)  [Orabug: 36440188]
  - uek-rpm: Enable CONFIG_VFIO_DEBUGFS in LUCI (Harshit Mogalapalli)  [Orabug: 36440188]
  - uek-rpm: Enable IMA_KEYRINGS_PERMIT_SIGNED_BY_BUILTIN_OR_SECONDARY (Rhythm Mahajan)  [Orabug: 36426018]
  - uek-rpm: Enable RANDOMIZE_KSTACK_OFFSET_DEFAULT in LUCI (Harshit Mogalapalli)  [Orabug: 36392787]
  - uek-rpm: Bluefield 3: enable lockdown mode for secure boot (Dave Kleikamp)  [Orabug: 36379358]
  - uek-rpm: Fix debug module conflict by defining new variant variable for installonlypkg (Samasth Norway Ananda)  [Orabug: 36370647]
  - uek-rpm: Enable multiple kernel-uek-debuginfo package installation (Samasth Norway Ananda)  [Orabug: 36329426]
  - uek-rpm: Don't build docs anymore for OL8 in LUCI (Harshit Mogalapalli)  [Orabug: 36266922]
  - uek-rpm: spec: Add python3-pyyaml as a build requirement (Harshit Mogalapalli)  [Orabug: 36266922]
  - uek-rpm: Place code modules in right place to fix build 6.8 (Harshit Mogalapalli)  [Orabug: 36261532]
  - uek-rpm: Disable MCORE2 in container kernel configs (Harshit Mogalapalli)  [Orabug: 36238801]
  - uek-rpm: aarch64: Build arm_cspmu module (Dave Kleikamp)  [Orabug: 36227029]
  - uek-rpm: Disable NFS_V2 and NFS_UDP_SUPPORT in LUCI (Harshit Mogalapalli)  [Orabug: 36225921]
  - uek-rpm: Make few builtin options to modules back -- hardening (Harshit Mogalapalli)  [Orabug: 36209212]
  - uek-container: strip symbols from vmlinux (Boris Ostrovsky)  [Orabug: 36170817]
  - spec: upgrading to use gcc-toolset-13 (Mark Nicholson)  [Orabug: 36132145]
  - uek-rpm: set minimal libdnf version and fix use of installonlypkgs (Samasth Norway Ananda)  [Orabug: 36119458]
  - uek-rpm: Update the toolchain for OL9 (Jack Vogel)  [Orabug: 36106999]
  - uek-rpm: Fix posttrans scriptlet errors (Somasundaram Krishnasamy)  [Orabug: 36096223]
  - uek-rpm: Enable CONFIG_IPV6_SEG6_BPF in LUCI (Harshit Mogalapalli)  [Orabug: 36070376]
  - uek-rpm: Format configs with savedefconfig for 6.7 LUCI release. (Harshit Mogalapalli)  [Orabug: 36211839]
  - uek-rpm: Enable NVME_HOST_AUTH in LUCI (Harshit Mogalapalli)  [Orabug: 36181719]
  - uek-rpm: Enable INTEL_TDX_HOST in LUCI (Harshit Mogalapalli)  [Orabug: 36181719]
  - uek-rpm: Enable NET_KIT in LUCI (Harshit Mogalapalli)  [Orabug: 36181719]
  - uek-rpm: Enable KEXEC in LUCI (Harshit Mogalapalli)  [Orabug: 36181719]
  - uek-rpm: Enable MAC80211_DEBUGFS in LUCI (Harshit Mogalapalli)  [Orabug: 36181719]
  - uek-rpm: Remove nvme-common.ko from the core list in LUCI (Harshit Mogalapalli)  [Orabug: 36099306]
  - uek-rpm: Need to identify the kernel-luci* packages as install only. (Darren Kenny)  [Orabug: 36008539]
  - uek-rpm: Do not build tools rpm for aarch64 64k builds (Somasundaram Krishnasamy)  [Orabug: 35974388]
  - uek-rpm: Move kernel tools binary to seperate rpm (Somasundaram Krishnasamy)  [Orabug: 35974388]
  - uek-rpm: Move modules from kernel-uek-core to kernel-uek-modules-core (Vijayendra Suman)  [Orabug: 35637050]
  - uek-rpm: Enable CONFIG_USBIP_VHCI_HCD and CONFIG_USBIP_HOST in LUCI (Harshit Mogalapalli)  [Orabug: 35995539]
  - uek-rpm: Format configs to use savedefconfig 6.6 LUCI (Harshit Mogalapalli)  [Orabug: 35976384]
  - uek-rpm : Move kernel/fs/nls/nls_ucs2_utils.ko to extras. (Harshit Mogalapalli)  [Orabug: 35976384]
  - uek-rpm: Enable CONFIG_BUG_ON_DATA_CORRUPTION in LUCI (Harshit Mogalapalli)  [Orabug: 35976384]
  - uek-rpm: Enable CONFIG_KVM_PROVE_MMU in LUCI (Harshit Mogalapalli)  [Orabug: 35976384]
  - uek-rpm: Enable CONFIG_X86_USER_SHADOW_STACK in LUCI (Harshit Mogalapalli)  [Orabug: 35976384]
  - uek-rpm: Enable CONFIG_VFIO_DEVICE_CDEV in LUCI (Harshit Mogalapalli)  [Orabug: 35976384]
  - uek-rpm: Enable CONFIG_SWIOTLB_DYNAMIC in LUCI (Harshit Mogalapalli)  [Orabug: 35976384]
  - uek-rpm: Enable CONFIG_RANDOM_KMALLOC_CACHES in LUCI (Harshit Mogalapalli)  [Orabug: 35976384]
  - uek-rpm: Enable CONFIG_DMA_NUMA_CMA in LUCI (Harshit Mogalapalli)  [Orabug: 35976384]
  - uek-rpm: Update SPEC file version number and add requirements for production builds (Darren Kenny)  [Orabug: 35856265]
  - uek-rpm: Enable Microsoft recommended Hyper-V flags for ARM (Harshvardhan Jha)  [Orabug: 35827810]
  - net/mlx5: enable the kernel build options to support new features (Qing Huang)  [Orabug: 35811810] [Orabug: 35811810]
  - uek-rpm: Disable CONFIG_STAGING drivers in LUCI (Harshit Mogalapalli)  [Orabug: 35795350]
  - uek-rpm: Enable CFG80211_WEXT in LUCI (Harshit Mogalapalli)  [Orabug: 35795350]
  - uek-rpm: Enable CRYPTO_MICHAEL_MIC in LUCI (Harshit Mogalapalli)  [Orabug: 35795350]
  - uek-rpm: Enable CFG80211 in LUCI (Harshit Mogalapalli)  [Orabug: 35795350]
  - uek-rpm: Removing pre scriptlet to not allow firmware downgrade (Samasth Norway Ananda)  [Orabug: 35756461]
  - uek-rpm: Enable Hyper-V for OL8 and OL9 ARM (Harshvardhan Jha)  [Orabug: 35736415]
  - uek-rpm: Update kernel's linux-firmware dependency to 20230516-999.26.git6c9e0ed5. (Somasundaram Krishnasamy)  [Orabug: 35722366]
  - cpufreq: amd-pstate: Enable amd-pstate (Henry Willard)  [Orabug: 35702537]
  - uek-rpm/aarch64: Enable CONFIG_I2C_MUX_PINCTRL for RPi (Vijay Kumar)  [Orabug: 35683507]
  - uek-rpm: Update kernel's linux-firmware dependency. (Somasundaram Krishnasamy)  [Orabug: 35678691]
  - uek-rpm: Enable CONFIG_NVME_AUTH and CONFIG_NVME_TARGET_AUTH (Alan Adamson)  [Orabug: 35677584]
  - uek-rpm: move sch_fq_codel module to be built-in (Samasth Norway Ananda)  [Orabug: 35673113]
  - uek-rpm: Build embedded kernel for Bluefield 3 smartnic (Dave Kleikamp)  [Orabug: 35672483]
  - uek-rpm: Disable kernel support for CONFIG_FIREWIRE in OL8 and OL9 for LUCI (Yifei Liu)  [Orabug: 35650963]  {CVE-2023-3159}
  - uek-rpm: aarch64: Enable direct booting with nvdimm (Liam Merwick)  [Orabug: 35635621]
  - uek-rpm: Enable CONFIG_KFENCE (Joe Jin)  [Orabug: 34125437]
  - uek-rpm/aarch64: Enable CONFIG_ARM_RASPBERRYPI_CPUFREQ for RPi (Vijay Kumar)  [Orabug: 33833293]
  - uek-rpm: Remove mii.ko from core list as it is builtin for aarch64 OL8/9 (Vijayendra Suman)  [Orabug: 35872400]
  - uek-rpm: Add nls_ucs2_utils module required by cifs in core list (Vijayendra Suman)  [Orabug: 35867956]
  - uek-rpm: Cleanup config to use savedefconfig format LUCI 6.5 (Harshit Mogalapalli)  [Orabug: 35822479]
  - uek-rpm: Enable CONFIG_AUTOFS_FS in LUCI (Harshit Mogalapalli)  [Orabug: 35822479]
  - uek-rpm: extras: Move meson_dw_mipi_dsi to extras rpm (Harshit Mogalapalli)  [Orabug: 35794685]
  - uek-rpm: Enable CONFIG_FUNCTION_GRAPH_RETVAL in LUCI (Harshit Mogalapalli)  [Orabug: 35794685]
  - rpmbuild: fixed missing _kernel_cc macros to allow alternate compilers (Mark Nicholson)  [Orabug: 35641994]
  - uek-rpm: Remove unbuilt modules from core list (Vijayendra Suman)  [Orabug: 35636404]
  - uek-rpm: savedefconfig for ol9/x86_64 (Mark Nicholson)  [Orabug: 35641970]
  - uek-rpm: savedefconfig for ol9/aarch64 (Mark Nicholson)  [Orabug: 35641970]
  - uek-rpm: savedefconfig for ol8/x86_64 (Mark Nicholson)  [Orabug: 35641970]
  - uek-rpm: savedefconfig for ol8/aarch64 (Mark Nicholson)  [Orabug: 35641970]
  - uek-rpm: updating to more reliable architecture identification (Mark Nicholson)  [Orabug: 35641977]
  - uek-rpm: aarch64: Disable 64k container kernel build (Liam Merwick)  [Orabug: 35555035]
  - uek-rpm: Enable ADDRESS_MASKING in x86_64 (Harshit Mogalapalli)  [Orabug: 35493002]
  - uek-rpm: "make olddefconfig" for version 6.4.0 (arm64) (Harshit Mogalapalli)  [Orabug: 35493002]
  - uek-rpm: "make olddefconfig" for version 6.4.0 (arm64) (Harshit Mogalapalli)  [Orabug: 35493002]
  - uek-rpm: "make olddefconfig" for version 6.4.0 (x86_64) (Harshit Mogalapalli)  [Orabug: 35493002]
  - uek-rpm: "make olddefconfig" for version 6.4.0 (x86_64) (Harshit Mogalapalli)  [Orabug: 35493002]
  - uek-rpm: Move mlx5-vfio-pci to core rpm (Samasth Norway Ananda)  [Orabug: 35485091]
  - uek-rpm: Change the build tool versions to the latest (Vijayendra Suman)  [Orabug: 35378764]
  - uek-rpm: Remove unused CONFIG_NF_TABLES_SET from container config (Liam Merwick)  [Orabug: 35533257]
  - uek-rpm: ol8: Enable aarch64 build of kernel-uek-container (Liam Merwick)  [Orabug: 35533257]
  - uek-rpm: ol8: Enable aarch64 build of kernel-uek-container (Liam Merwick)  [Orabug: 35533257]
  - uek-rpm: ol9: aarch64: Add kernel-uek-container config file (Liam Merwick)  [Orabug: 35533257]
  - uek-rpm: ol8: aarch64: Add kernel-uek-container config file (Liam Merwick)  [Orabug: 35533257]
  - Revert "uek-rpm: Make kernel to depend on latest libdnf version" (Somasundaram Krishnasamy)  [Orabug: 35458788]
  - uek-rpm: Install dtb files under /lib/modules (Dave Kleikamp)  [Orabug: 35338876]
  - uek: kabi: Add with_kabichk flag to control kABI checking (Saeed Mirzamohammadi)  [Orabug: 35295016]
  - uek-rpm: arm64: ol9: Update configuration for 6.3.0 (Somasundaram Krishnasamy)  [Orabug: 35257475]
  - uek-rpm: arm64: ol8: Update configuration for 6.3.0 (Somasundaram Krishnasamy)  [Orabug: 35257475]
  - uek-rpm: x86_64: ol9: Update configuration for 6.3.0 (Somasundaram Krishnasamy)  [Orabug: 35257475]
  - uek-rpm: x86_64: ol8: Update configuration for 6.3.0 (Somasundaram Krishnasamy)  [Orabug: 35257475]
  - uek-rpm: mod-extra: Remove mt7921e.ko from extras list (Harshit Mogalapalli)  [Orabug: 35243028]
  - uek-rpm: Enable RFC7919 config for aarch64 (Saeed Mirzamohammadi)  [Orabug: 35229732]
  - uek-rpm: Add ena.ko to core rpm (Somasundaram Krishnasamy)  [Orabug: 35225380]
  - uek-container: Enable CONFIG_NF_* and CONFIG_NFT_* to support nftables (Liam Merwick)  [Orabug: 35219678]
  - uek-rpm: Update linux-firmware dependency (Somasundaram Krishnasamy)  [Orabug: 35213422]
  - uek-rpm: x86_64-container enable CONFIG_SLS (Maciej S. Szmigiero)  [Orabug: 35107880]
  - uek-rpm: Enable RFC7919 config (Saeed Mirzamohammadi)  [Orabug: 35084298]
  - uek-rpm: aarch64 enable DETECT_HUNG_TASK (Tom Saeger)  [Orabug: 35080436]
  - uek-rpm: config-x86-64*: Disable CONFIG_AMD_MEM_ENCRYPT_ACTIVE_BY_DEFAULT (Alejandro Jimenez)  [Orabug: 35064808]
  - uek-rpm: aarch64: ol8: Update configuration for 6.2.0 (make olddefconfig for version 6.2.0) (Somasundaram Krishnasamy)  [Orabug: 34971591]
  - uek-rpm: aarch64: ol9: Update configuration for 6.2.0 (make olddefconfig for version 6.2.0) (Somasundaram Krishnasamy)  [Orabug: 34971591]
  - uek-rpm: x86_64: ol8: Update configuration for 6.2.0 (make olddefconfig for version 6.2.0) (Somasundaram Krishnasamy)  [Orabug: 34971591]
  - uek-rpm: x86_64: ol9: Update configuration for 6.2.0 (make olddefconfig for version 6.2.0) (Somasundaram Krishnasamy)  [Orabug: 34971591]
  - uek-rpm: Enable HP watchdog for aarch64 (Saeed Mirzamohammadi)  [Orabug: 34910557]
  - uek-rpm: Add ptp_kvm.ko to core rpm (Somasundaram Krishnasamy)  [Orabug: 34901463]
  - uek-rpm: Disable Promise SuperTrak EX series storage controllers (Somasundaram Krishnasamy)  [Orabug: 34889277]
  - uek-rpm: ol8: Choose right annobin plugin for UEK build (Somasundaram Krishnasamy)  [Orabug: 34873886]
  - uek-rpm: Enable CONFIG_HP_ILO for aarch64 (Saeed Mirzamohammadi)  [Orabug: 34873808]
  - Add SecureBoot signing for aarch64 arch (Sherry Yang)  [Orabug: 34869431]
  - uek-rpm: aarch64: enable ACPI_AGDI (Mihai Carabas)  [Orabug: 34833166]
  - uek-rpm: kernel-uek.spec: make -modules-extra depend on -modules (Todd Vierling)  [Orabug: 34820551]
  - uek-rpm: Set CONFIG_SECURITY_SELINUX_CHECKREQPROT_VALUE=0 (Victor Erminpour)  [Orabug: 34765425]
  - uek-rpm: Add Documentation to kernel-uek-devel (Somasundaram Krishnasamy)  [Orabug: 34753071]
  - uek: kabi: enable aarch64 kABI checking (Saeed Mirzamohammadi)  [Orabug: 34342321]
  - uek-rpm: config: Enable CONFIG_KEY_NOTIFICATIONS option (Somasundaram Krishnasamy)  [Orabug: 33959358]
  - uek-rpm: remove mstflint_access modules from core list (Vijayendra Suman)  [Orabug: 35484714]
  - uek-rpm: relocate cifs modules from core list (Vijayendra Suman)  [Orabug: 35477693]
  - uek-rpm: Enable CONFIG_NET_SCH_MQPRIO_LIB and add sch_mqprio_lib in core (Vijayendra Suman)  [Orabug: 35245010]
  - uek-rpm: Remove ipt_CLUSTERIP and cls_rsvp modules from core.list (LUCI Bot)  [Orabug: 35245010]
  - uek-rpm: Remove vfio_virqfd modulues from core (Vijayendra Suman)  [Orabug: 35031039]
  - uek-rpm: drop OL9 CONFIG_INFINIBAND_RDMAIP_NOTIFY (Vijayendra Suman)  [Orabug: 34428972]
  - uek-rpm: drop ctf on OL9 (Victor Erminpour)  [Orabug: 34116108]
  - uek-rpm: drop ctf on OL8 (Victor Erminpour)  [Orabug: 34116108]
  - uek-rpm: Increase CONFIG_FRAME_WARN to 4096 (Victor Erminpour)  [Orabug: 34048847]
  - uek-rpm: Disable CONFIG_USB_NET_RNDIS_WLAN (Rhythm Mahajan)  [Orabug: 35067038]
  - uek-rpm: Add new modules to core rpm (Somasundaram Krishnasamy)  [Orabug: 35063941]
  - uek-container: Re-enable OL8 builds (Liam Merwick)  [Orabug: 35054539]
  - uek-container: Drop unnecessary setting of CONFIG_DEBUG_SECTION_MISMATCH (Liam Merwick)  [Orabug: 35054539]
  - uek-container: Pass binutils workaround via EXTRA_CFLAGS (Liam Merwick)  [Orabug: 35054539]
  - uek-rpm: ol8: add spec file changes to disable container kernel build (Vijayendra Suman)  [Orabug: 35047765]
  - uek-rpm: Remove nft_objref modulues from core (Vijayendra Suman)  [Orabug: 35031035]
  - uek-rpm: Add nft_reject* modules to core rpm. (Somasundaram Krishnasamy)  [Orabug: 34970059]
  - uek-rpm: [act|cls]_bpf should be part of core (Alan Maguire)  [Orabug: 34551621]
  - uek-rpm: ol9: Disable CONFIG_IR_MCEUSB from LUCI OL9. (Harshit Mogalapalli)  [Orabug: 34843627]
  - uek-rpm: core: Move few modules which are recently enabled to core. (Harshit Mogalapalli)  [Orabug: 34853373]
  - uek-rpm: mod-extra: Move modules which are recently enabled to extras (Harshit Mogalapalli)  [Orabug: 34853373]
  - uek-rpm: Enable CONFIG_INTEGRITY_MACHINE_KEYRING for x86_64 (Victor Erminpour)  [Orabug: 34812613]
  - uek-rpm: Enable CONFIG_LRU_GEN (Victor Erminpour)  [Orabug: 34812613]
  - uek-rpm: Update configuration for v6.1.0 (aarch64 make olddefconfig) (Victor Erminpour)  [Orabug: 34812613]
  - uek-rpm: Update configuration for v6.1.0 (x86_64 make olddefconfig) (Victor Erminpour)  [Orabug: 34812613]
  - uek-rpm: Enable CONFIG_ARCH_BCM for aarch64 (Victor Erminpour)  [Orabug: 34812613]
  - uek-container: Enable CONFIG_IA32_EMULATION (Liam Merwick)  [Orabug: 34909770]
  - uek-rpm: Disable CONFIG_SND_PCM_OSS for OL8 and OL9 (Harshit Mogalapalli)  [Orabug: 34654130]
  - uek-container: ol9: Update config with that generated by 'make olddefconfig' (Liam Merwick)  [Orabug: 34850972]
  - uek-container: ol8: Update config with that generated by 'make olddefconfig' (Liam Merwick)  [Orabug: 34850972]
  - uek-rpm: Explicitly enable CONFIG_XEN_OVMAPI (Liam Merwick)  [Orabug: 34850972]
  - uek-container: Fix x86_64 PVH ELF note with binutils >= 2.36 (Liam Merwick)  [Orabug: 34850972]
  - uek-rpm: ol9: Add spec file changes to build container kernel (Liam Merwick)  [Orabug: 34850972]
  - uek-rpm: ol8: Add spec file changes to build container kernel (Liam Merwick)  [Orabug: 34850972]
  - uek-rpm: ol9: x86_64: Add kernel-uek-container config file (Liam Merwick)  [Orabug: 34850972]
  - uek-rpm: ol8: x86_64: Add kernel-uek-container config file (Liam Merwick)  [Orabug: 34850972]
  - uek-rpm: core.list: add VirtualBox guest drivers to core package (Todd Vierling)  [Orabug: 34820540]
  - uek-rpm: Disable few config options that we enabled previously. (Harshit Mogalapalli)  [Orabug: 34803319]
  - RHCK 9.1 builtin option change to module for UEK7u1 (Vijayendra Suman)  [Orabug: 34712359]
  - uek-rpm: Enable modules in LUCI to match RHCK9.1 - 34776356 (Harshit Mogalapalli)  [Orabug: 34776356]
  - uek-rpm: Enable CONFIG options in LUCI to match RHCK9.1 (Harshit Mogalapalli)  [Orabug: 34712508]
  - uek-rpm: ol9: disable CONFIG_MISDN and dependent drivers on OL9/LUCI (Harshit Mogalapalli)  [Orabug: 34757699]
  - uek-rpm: add aarch64 to list of vdso arches (Tom Saeger)  [Orabug: 34716201]
  - uek-rpm: Update configuration for v6.0.0 (aarch64 make olddefconfig) (Victor Erminpour)  [Orabug: 34571931]
  - uek-rpm: Update configuration for v6.0.0 (x86_64 make olddefconfig) (Victor Erminpour)  [Orabug: 34571931]
  - uek-rpm: Install kernel-rpm-macros as build dependency (Somasundaram Krishnasamy)  [Orabug: 34550488]
  - uek-rpm: Move the file kernel-$KernelVer-kabideps to RPM_BUILD_ROOT (Somasundaram Krishnasamy)  [Orabug: 34701290]
  - uek-rpm: Enable sound subsystem CONFIG options in LUCI to match RHCK9.1 (Harshit Mogalapalli)  [Orabug: 34694853]
  - crypto: fips - make proc files report fips module name and version (Saeed Mirzamohammadi)  [Orabug: 34669137]
  - uek-rpm: config-x86_64*: enable more LPSS bus options for hardware support (Todd Vierling)  [Orabug: 34576188]
  - uek-rpm: Disable floppy related configs (Saeed Mirzamohammadi)  [Orabug: 34635293]
  - uek-rpm: Set CONFIG_FRAME_WARN=4096 for OL9 (Victor Erminpour)  [Orabug: 34595190]
  - uek-rpm: Enable CONFIG_EFI_SECRET=m (Victor Erminpour)  [Orabug: 34335750]
  - uek-rpm: Enable CONFIG_EFI_COCO_SECRET (Victor Erminpour)  [Orabug: 34335750]
  - uek-rpm: Enable CONFIG_FW_UPLOAD (Victor Erminpour)  [Orabug: 34335750]
  - uek-rpm: Enable CONFIG_MICROCODE_LATE_LOADING (Victor Erminpour)  [Orabug: 34335750]
  - uek-rpm: Enable CONFIG_PERF_EVENTS_AMD_BRS (Victor Erminpour)  [Orabug: 34335750]
  - uek-rpm: Enable CONFIG_INTEL_TDX_GUEST (Victor Erminpour)  [Orabug: 34335750]
  - uek-rpm: Enable CONFIG_FIPS_SIGNATURE_SELFTEST (Victor Erminpour)  [Orabug: 34335750]
  - uek-rpm: Disable CONFIG_PAGE_POOL_STATS for aarch64 (Victor Erminpour)  [Orabug: 34335750]
  - uek-rpm: Enable CONFIG_CRYPTO_SM3=m (Victor Erminpour)  [Orabug: 34335750]
  - uek-rpm: Enable CONFIG_HUGETLB_PAGE_OPTIMIZE_VMEMMAP_DEFAULT_ON=y (Victor Erminpour)  [Orabug: 34335750]
  - uek-rpm: Enable CONFIG_DRM_VMWGFX=m and CONFIG_DRM_VMWGFX_FBCON=y for Ol9.aarch64 (Victor Erminpour)  [Orabug: 34335750]
  - uek-rpm: Enable CONFIG_FW_LOADER_PAGED_BUF for OL9.aarch64 (Victor Erminpour)  [Orabug: 34335750]
  - uek-rpm: Enable CONFIG_MAPPING_DIRTY_HELPERS for OL9 (Victor Erminpour)  [Orabug: 34335750]
  - uek-rpm: Enable CONFIG_ARM64_ERRATUM_2077057 for OL8 (Victor Erminpour)  [Orabug: 34335750]
  - uek-rpm: Disable CONFIG_DEBUG_PREEMPT for OL9 (Victor Erminpour)  [Orabug: 34335750]
  - uek-rpm: Enable CONFIG_MODULE_ALLOW_BTF_MISMATCH for OL9 (Victor Erminpour)  [Orabug: 34335750]
  - uek-rpm: Enable CONFIG_LRU_CACHE=m for OL9 (Victor Erminpour)  [Orabug: 34335750]
  - uek-rpm: Enable CONFIG_INIT_STACK_ALL_ZERO for OL9 (Victor Erminpour)  [Orabug: 34335750]
  - uek-rpm: Enable CONFIG_KEY_NOTIFICATIONS for OL9 (Victor Erminpour)  [Orabug: 34335750]
  - uek-rpm: Enable CONFIG_PSTORE_BLK for OL9 (Victor Erminpour)  [Orabug: 34335750]
  - uek-rpm: Disable CONFIG_BLK_DEV_DRBD and CONFIG_DRBD_FAULT_INJECTION (Victor Erminpour)  [Orabug: 34335750]
  - uek-rpm: Update configuration for v5.19.1 (aarch64 make olddefconfig) (Victor Erminpour)  [Orabug: 34335750]
  - uek-rpm: Update configuration for v5.19.1 (x86_64 make olddefconfig) (Victor Erminpour)  [Orabug: 34335750]
  - uek-rpm: Set CONFIG_VSOCKETS=m and CONFIG_VSOCKETS_DIAG=m (Victor Erminpour)  [Orabug: 34501175]
  - Enable CONFIG_DEBUG_KMEMLEAK for the arm64 debug kernel (Dave Kleikamp)  [Orabug: 34436545]
  - bpf: enable kprobe-based function return value override (Alan Maguire)  [Orabug: 34410366]
  - uek-rpm: Enable CONFIG_NITRO_ENCLAVES for OL9 (Victor Erminpour)  [Orabug: 33691600]
  - uek-rpm: Enable CONFIG_DAMON_PADDR for OL9 (Victor Erminpour)  [Orabug: 33691603]
  - uek-rpm: Enable prerequisites for Secure Boot support (Eric Snowberg)  [Orabug: 34201183]
  - uek-rpm: Enable CONFIG_READ_ONLY_THP_FOR_FS (Victor Erminpour)  [Orabug: 33825498]
  - uek-rpm: Remove RDS and rdmaip_notify modules from core.list (Victor Erminpour)  [Orabug: 34280374]
  - Revert "uek-rpm: Add crashkernel.default file" (John Donnelly)  [Orabug: 34280071]
  - uek-rpm: New shim versions and secureboot certs (Jack Vogel)  [Orabug: 34219929]  {CVE-2021-3695} {CVE-2021-3696} {CVE-2021-3697} {CVE-2022-28733} {CVE-2022-28734} {CVE-2022-28735} {CVE-2022-28736}
  - uek-rpm: Enable CONFIG_MLX5_VFIO_PCI (Victor Erminpour)  [Orabug: 34082547]
  - uek-rpm: Enable CONFIG_DAMON_SYSFS (Victor Erminpour)  [Orabug: 34082547]
  - uek-rpm: Enable CONFIG_SLS (Victor Erminpour)  [Orabug: 34082547]
  - uek-rpm: Enable CONFIG_X86_KERNEL_IBT (Victor Erminpour)  [Orabug: 34082547]
  - uek-rpm: Update configuration for v5.18 (aarch64 make olddefconfig) (Victor Erminpour)  [Orabug: 34082547]
  - uek-rpm: Update configuration for v5.18 (x86_64 make olddefconfig) (Victor Erminpour)  [Orabug: 34082547]
  - uek-rpm: Add modules to core rpm to allow kselftest rtnetlink tests pass (Somasundaram Krishnasamy)  [Orabug: 34252625]
  - uek-rpm: Enable dependencies needed by CONFIG_SND_SOC_INTEL_HDA_DSP_COMMON (Brian Maly)  [Orabug: 34187248]
  - uek-rpm: Enable CONFIG_SQUASHFS_ZSTD to support zstd compression (Harshit Mogalapalli)  [Orabug: 34209812]
  - uek-rpm: Added squashfs module to core rpm for kdump (Vijayendra Suman)  [Orabug: 34202155]
  - uek-rpm: Enable prerequisites for Secure Boot support (Eric Snowberg)  [Orabug: 34201183]
  - uek-rpm: Modify options for CONFIG_VSOCKETS_DIAG=y (Victor Erminpour)  [Orabug: 34077319]
  - uek-rpm: Modify options for CONFIG_TIPC_DIAG=y (Victor Erminpour)  [Orabug: 34077319]
  - uek-rpm: Modify options for CONFIG_INET_SCTP_DIAG=y (Victor Erminpour)  [Orabug: 34077319]
  - uek-rpm: Enable CONFIG_MPTCP (Victor Erminpour)  [Orabug: 34077319]
  - uek-rpm: Set CONFIG_*_DIAG options as built-ins to match RHCK9 (Victor Erminpour)  [Orabug: 33993286]
  - uek-rpm: Enable CONFIG_DEBUG_WX for x86_64 debug kernel (Victor Erminpour)  [Orabug: 33993286]
  - uek-rpm: Enable CONFIG_TMPFS_INODE64 (Victor Erminpour)  [Orabug: 33993286]
  - uek-rpm: Enable CONFIG_CXL_MEM (Victor Erminpour)  [Orabug: 33993286]
  - uek-rpm: Enable CONFIG_CMA_SYSFS (Victor Erminpour)  [Orabug: 33993286]
  - uek-rpm: Enable Platform related options from RHCK9 (Victor Erminpour)  [Orabug: 33993286]
  - uek-rpm: Enable DM_VERITY_VERIFY_ROOTHASH_SIG and DM_VERITY_FEC (Victor Erminpour)  [Orabug: 33993286]
  - uek-rpm: Enable Crypto related options from RHCK9 (Victor Erminpour)  [Orabug: 33993286]
  - uek-rpm: Enable CONFIG_CAN_* options from RHCK9 (Victor Erminpour)  [Orabug: 33993286]
  - uek-rpm: Enable CONFIG_NET_SCH_* options from RHCK9 (Victor Erminpour)  [Orabug: 33993286]
  - uek-rpm: Enable CONFIG_NF_FLOW_TABLE (Victor Erminpour)  [Orabug: 33993286]
  - uek-rpm: Enable missing Netfilter options from RHCK9 (Victor Erminpour)  [Orabug: 33993286]
  - uek-rpm: Enable CONFIG_CGROUP_MISC and CONFIG_BLK_CGROUP_FC_APPID (Victor Erminpour)  [Orabug: 33993286]
  - uek-rpm: Enable CONFIG_INTEL_IDXD_PERFMON (Victor Erminpour)  [Orabug: 33993286]
  - uek-rpm: Enable CONFIG_RTW88_8723DE and CONFIG_RTW88_8821CE (Victor Erminpour)  [Orabug: 33993286]
  - uek-rpm: Enable CONFIG_FS_VERITY (Victor Erminpour)  [Orabug: 34096985]
  - uek-rpm: Sync packaging changes with UEK7. (Somasundaram Krishnasamy)  [Orabug: 34171277]
  - uek-rpm: Update UEK7 kernel versions (Somasundaram Krishnasamy)  [Orabug: 34171277]
  - uek-rpm: Add crashkernel.default file (John Donnelly)  [Orabug: 33806596]
  - uek-rpm: configs: enable 9P_FS for x86_64 (Todd Vierling)  [Orabug: 34145664]
  - uek-rpm: ol9: Use kabi tool from $RPM_SOURCE_DIR (Stephen Brennan)  [Orabug: 33735021]
  - uek-rpm: Add placeholder dummy Symtypes (Stephen Brennan)  [Orabug: 33735021]
  - uek-rpm: ol9: Add more kABI diagnostics (Stephen Brennan)  [Orabug: 33735021]
  - uek-rpm: ol9: Enable creation of Symtypes files (Stephen Brennan)  [Orabug: 33735021]
  - uek-rpm: Rearrange modules due to depmod errors (Victor Erminpour)  [Orabug: 33735021]
  - uek-rpm: OL9: unset CONFIG_NFS_DISABLE_UDP_SUPPORT (Calum Mackay)  [Orabug: 33735021]
  - uek-rpm: aarch64: Do not build bpf and perf tools for aarch64 64k page enabled kernels. (Somasundaram Krishnasamy)  [Orabug: 33735021]
  - uek-rpm: Change the shim string in the ol9 spec (Jack Vogel)  [Orabug: 33735021]
  - uek-rpm: Adjust rpm modules list (Somasundaram Krishnasamy)  [Orabug: 33735021]
  - uek-rpm: Remove nano rpm source files. (Somasundaram Krishnasamy)  [Orabug: 33735021]
  - uek-rpm: Update DEFAULTKERNEL properly when RHCK/UEK6/UEK7 co-exist. (Somasundaram Krishnasamy)  [Orabug: 33735021]
  - uek-rpm: Restructure UEK7 packaging (Somasundaram Krishnasamy)  [Orabug: 33735021]
  - uek-rpm: remove headers_check (Somasundaram Krishnasamy)  [Orabug: 33735021]
  - uek-rpm: Make build verbosity configurable. (Somasundaram Krishnasamy)  [Orabug: 33735021]
  - uek-rpm: Cleanup spec file (Somasundaram Krishnasamy)  [Orabug: 33735021]
  - uek-rpm: enable VIRTIO_PCI_LIB_LEGACY config (Si-Wei Liu)  [Orabug: 33735021]
  - uek-rpm: Enable zonefs (Larry Bassel)  [Orabug: 33735021]
  - uek-rpm: Enable CONFIG_WATCH_QUEUE (Victor Erminpour)  [Orabug: 33735021]
  - uek-rpm: Enable CONFIG_INTEGRITY_MACHINE_KEYRING (Eric Snowberg)  [Orabug: 33735021]
  - uek-rpm: Enable CONFIG_READ_ONLY_THP_FOR_FS (Victor Erminpour)  [Orabug: 33735021]
  - uek-rpm: Enable support for loading compressed firmware files in OL9 (Somasundaram Krishnasamy)  [Orabug: 33735021]
  - net/mlx5: Enable mlx5 IPsec build options on OL8/OL9 (Qing Huang)  [Orabug: 33735021]
  - uek-rpm: Change aarch64 page size to 4k (Dave Kleikamp)  [Orabug: 33735021]
  - Disable DRBD (Distributed Replicated Block Device) in UEK7 for OL9 (Sherry Yang)  [Orabug: 33735021]
  - uek-rpm/ol/config-aarch64: Enable CONFIG_ARM_RASPBERRYPI_CPUFREQ for RPi (Vijay Kumar)  [Orabug: 33735021]
  - uek-rpm: Disable CONFIG_PHONET (Victor Erminpour)  [Orabug: 33735021]
  - uek-rpm: Enable CONFIG_INTEL_IDXD (Victor Erminpour)  [Orabug: 33735021]
  - uek-rpm: Enable CONFIG_DM_DUST (Victor Erminpour)  [Orabug: 33735021]
  - uek-rpm: Disable CONFIG_RT_GROUP_SCHED (Victor Erminpour)  [Orabug: 33735021]
  - uek-rpm: Disable CONFIG_HID_WIIMOTE (Victor Erminpour)  [Orabug: 33735021]
  - uek-rpm: Disable CONFIG_HID_TIVO (Victor Erminpour)  [Orabug: 33735021]
  - uek-rpm: Disable CONFIG_DVB_FIREDTV (Victor Erminpour)  [Orabug: 33735021]
  - uek-rpm: set CONFIG_CRYPTO_DEV_QAT_4XXX=m (Sherry Yang)  [Orabug: 33735021]
  - A/A Bonding: Add support for user-space "Resilient RDMAIP" (Gerd Rausch)  [Orabug: 33150457] [Orabug: 33731403] [Orabug: 33735021]
  - uek-rpm: configs: disable CONFIG_USB_GADGET (aloktiw)  [Orabug: 33735021]
  - uek-rpm: add binutils-devel to ol9 spec file, remove wrapping, no firmware ver. (Jack Vogel)  [Orabug: 33735021]
  - uek-rpm: Add rpm build environment for OL9 (Somasundaram Krishnasamy)  [Orabug: 33735021]
  - uek-rpm: Enable CONFIG_NVME_VERBOSE_ERRORS (Alan Adamson)  [Orabug: 34087752]
  - uek-rpm: Separate x86_64 kABI checking for OL8/9 (Saeed Mirzamohammadi)  [Orabug: 34045453]
  - uek-rpm: Update configuration for v5.17 (aarch64 make olddefconfig) (Victor Erminpour)  [Orabug: 33813350]
  - uek-rpm: Update configuration for v5.17 (x86_64 make olddefconfig) (Victor Erminpour)  [Orabug: 33813350]
  - uek-rpm: Enable CONFIG_INIT_STACK_ALL_ZERO (Victor Erminpour)  [Orabug: 33627775]
  - uek-rpm: ol8: Use kabi tool from $RPM_SOURCE_DIR (Stephen Brennan)  [Orabug: 33931937]
  - uek-rpm: enable CONFIG_MODULE_ALLOW_BTF_MISMATCH (Alan Maguire)  [Orabug: 33921774]
  - uek-rpm: Enable CONFIG_DRM_VMWGFX and CONFIG_DRM_VMWGFX_FBCON for aarch64 (Victor Erminpour)  [Orabug: 33969198]
  - uek-rpm: Add placeholder dummy Symtypes (Stephen Brennan)  [Orabug: 33871939]
  - uek-rpm: ol8: Add more kABI diagnostics (Stephen Brennan)  [Orabug: 33871939]
  - uek-rpm: ol8: Enable creation of Symtypes files (Stephen Brennan)  [Orabug: 33871939]
  - uek-rpm: Add kabi tool and documentation (Stephen Brennan)  [Orabug: 33871939]
  - uek-rpm: Disable CONFIG_DEBUG_PREEMPT (Victor Erminpour)  [Orabug: 33867602]
  - uek-rpm: Enable CONFIG_WATCH_QUEUE (Victor Erminpour)  [Orabug: 33867476]
  - uek-rpm: Enable zonefs (Larry Bassel)  [Orabug: 33871868]
  - uek-rpm: Change aarch64 page size to 4k (Dave Kleikamp)  [Orabug: 33835878]
  - uek-rpm: Enable CONFIG_PSTORE_BLK (Victor Erminpour)  [Orabug: 33691597]
  - uek-rpm: Enable CONFIG_NITRO_ENCLAVES (Victor Erminpour)  [Orabug: 33691600]
  - uek-rpm: Enable CONFIG_DAMON_PADDR (Victor Erminpour)  [Orabug: 33691603]
  - uek-rpm: Update configuration for v5.16 (aarch64 make olddefconfig) (Victor Erminpour)  [Orabug: 33652838]
  - uek-rpm: Update configuration for v5.16 (x86_64 make olddefconfig) (Victor Erminpour)  [Orabug: 33652838]
  - uek-rpm: Disable CONFIG_HID_TIVO (Victor Erminpour)  [Orabug: 33780090]
  - uek-rpm: Disable CONFIG_HID_WIIMOTE (Victor Erminpour)  [Orabug: 33780073]
  - uek-rpm: Enable CONFIG_INTEL_IDXD (Victor Erminpour)  [Orabug: 33780059]
  - uek-rpm: Disable CONFIG_RT_GROUP_SCHED (Victor Erminpour)  [Orabug: 33726302]
  - uek-rpm: Enable CONFIG_DM_DUST (Victor Erminpour)  [Orabug: 33691674]
  - uek-rpm: Disable CONFIG_PHONET (Victor Erminpour)  [Orabug: 33780028]  {CVE-2021-45095}
  - spec: drop CONFIG_DTRACE (Nick Alcock)  [Orabug: 33647367]
  - uek-rpm: drop with_dtrace (Nick Alcock)  [Orabug: 33647367]
  - uek-rpm: configs: disable CONFIG_USB_GADGET (aloktiw)  [Orabug: 33664132]
  - uek-rpm: Build $MakeTarget and modules together (Dave Kleikamp)  [Orabug: 33471404]
  - uek-rpm: set CONFIG_BPF_UNPRIV_DEFAULT_OFF=y (Alan Maguire)  [Orabug: 33670202]
  - uek-rpm: Enable CONFIG_PRINTK_INDEX=y (Victor Erminpour)  [Orabug: 33627763]
  - uek-rpm: Enable CONFIG_WQ_WATCHDOG=y (Victor Erminpour)  [Orabug: 33627763]
  - uek-rpm: Enable CONFIG_CSD_LOCK_WAIT_DEBUG=y (Victor Erminpour)  [Orabug: 33627763]
  - uek-rpm: Enable CONFIG_HUGETLB_PAGE_FREE_VMEMMAP_DEFAULT_ON for x86_64 (Victor Erminpour)  [Orabug: 33596834]
  - uek-rpm: Increase CONFIG_CMA_AREAS from 7 to 19 (Victor Erminpour)  [Orabug: 33605721]
  - uek-rpm: Enable CONFIG_ZERO_CALL_USED_REGS=y for v5.15 (Victor Erminpour)  [Orabug: 33589982]
  - uek-rpm: Disable CONFIG_DEV_DAX_PMEM_COMPAT for v5.15 (Victor Erminpour)  [Orabug: 33591084]
  - uek-rpm: Enable CONFIG_FAULT_INJECTION and CONFIG_FAIL_FUNCTION in debug kernel (Victor Erminpour)  [Orabug: 33584803]
  - uek-rpm: Enable CONFIG_INTEL_PMT_* to match OL8.5 RHCK (Victor Erminpour)  [Orabug: 33596485]
  - uek-rpm: Enable CONFIG_UV_SYSFS=m to match OL8.5 RHCK (Victor Erminpour)  [Orabug: 33596485]
  - uek-rpm: Enable CONFIG_SND_SOC_* related options to match OL8.5 RHCK (Victor Erminpour)  [Orabug: 33596485]
  - uek-rpm: Enable CONFIG_STM=m to match OL8.5 RHCK (Victor Erminpour)  [Orabug: 33596485]
  - uek-rpm: Enable CONFIG_ATH11K=m to match OL8.5 RHCK (Victor Erminpour)  [Orabug: 33596485]
  - uek-rpm: Enable CONFIG_DM_MULTIPATH_IOA=m to match OL8.5 RHCK (Victor Erminpour)  [Orabug: 33596485]
  - uek-rpm: Enable CONFIG_QRTR=m to match OL8.5 RHCK (Victor Erminpour)  [Orabug: 33596485]
  - uek-rpm: Enable CONFIG_MHI_BUS=m to match OL8.5 RHCK (Victor Erminpour)  [Orabug: 33596485]
  - uek-rpm: Enable CONFIG_ACPI_FPDT=y to match OL8.5 RHCK (Victor Erminpour)  [Orabug: 33596485]
  - uek-rpm: Set CONFIG_CRYPTO_XXHASH=y for v5.15 (Victor Erminpour)  [Orabug: 33466553]
  - uek-rpm: Enable CONFIG_DRM_I915_WERROR=y for v5.15 (Victor Erminpour)  [Orabug: 33381559]
  - uek-rpm: Enable CONFIG_DAMON=y for v5.15 (Victor Erminpour)  [Orabug: 33381559]
  - uek-rpm: Disable FRAMEBUFFER_CONSOLE_DEFERRED_TAKEOVER for v5.15 (aarch64 only) (Victor Erminpour)  [Orabug: 33381559]
  - uek-rpm: Enable CONFIG_MLX5_MPFS=y for v5.15 (Victor Erminpour)  [Orabug: 33381559]
  - uek-rpm: Enable CONFIG_DEBUG_INFO_DWARF4=y for v5.15 (Victor Erminpour)  [Orabug: 33381559]
  - uek-rpm: Enable CONFIG_UNWINDER_ORC=y for v5.15 (x86_64 only) (Victor Erminpour)  [Orabug: 33381559]
  - uek-rpm: Enable CONFIG_VDPA_USER=m for v5.15 (Victor Erminpour)  [Orabug: 33381559]
  - uek-rpm: Enable CONFIG_WERROR=y for v5.15 (Victor Erminpour)  [Orabug: 33381559]
  - uek-rpm: Enable CONFIG_DMA_RESTRICTED_POOL=y for v5.15 (aarch64 only) (Victor Erminpour)  [Orabug: 33381559]
  - uek-rpm: Update configuration for v5.15.0 (aarch64 make olddefconfig) (Victor Erminpour)  [Orabug: 33381559]
  - uek-rpm: Update configuration for v5.15.0 (x86_64 make olddefconfig) (Victor Erminpour)  [Orabug: 33381559]
  - uek-rpm: Move LUCI to GCC 11 toolchain (Victor Erminpour)  [Orabug: 33564964]
  - uek-rpm: Modify bpftool-debuginfo to use correct OL8.5 RPM macro (Victor Erminpour)  [Orabug: 33564964]
  - uek-rpm: Move LUCI to OL-8.5 auto-build chroot (Victor Erminpour)  [Orabug: 33564964]
  - uek-rpm: enable CONFIG_TEST_BPF for debug kernels (Alan Maguire)  [Orabug: 33551736]
  - uek-rpm: Move LUCI to OL-8.4 build chroot (Victor Erminpour)  [Orabug: 33473840]
  - bpf: ensure module BTF is available in kernel modules (Alan Maguire)  [Orabug: 33344690]
  - uek-rpm: Enable CONFIG_TIMERLAT_TRACER=y for v5.14 (Victor Erminpour)  [Orabug: 33122956]
  - uek-rpm: Enable CONFIG_OSNOISE_TRACER=y for v5.14 (Victor Erminpour)  [Orabug: 33122956]
  - uek-rpm: Enable CONFIG_VIRTIO_IOMMU=y for v5.14 (Victor Erminpour)  [Orabug: 33122956]
  - uek-rpm: Enable CONFIG_SCHED_CORE=y for v5.14 (Victor Erminpour)  [Orabug: 33122956]
  - uek-rpm: Enable CONFIG_INFINIBAND_IRDMA=m for v5.14 (Victor Erminpour)  [Orabug: 33122956]
  - uek-rpm: Enable CONFIG_WIRELESS_HOTKEY=m for v5.14 on x86_64 (Victor Erminpour)  [Orabug: 33122956]
  - uek-rpm: Update configuration for v5.14 (x86_64 make olddefconfig) (Victor Erminpour)  [Orabug: 33122956]
  - uek-rpm: Update configuration for v5.14 (aarch64 make olddefconfig) (Victor Erminpour)  [Orabug: 33122956]
  - uek-rpm: Delete the 'uek-rpm/ol7' directory (Victor Erminpour)  [Orabug: 33348395]
  - uek-rpm: Set DEFAULTKERNEL in /etc/sysconfig/kernel correctly (Dave Kleikamp)  [Orabug: 33323692]
  - uek-rpm: Don't recompute build-ids for kernel-uek-debuginfo (Somasundaram Krishnasamy)  [Orabug: 33271717]
  - uek-rpm: mark /etc/ld.so.conf.d/ files as %config (Stephen Brennan)  [Orabug: 33186979]
  - uek-rpm: Enable CONFIG_KVM_WERROR=y (Liam Merwick)  [Orabug: 33027178]
  - uek-rpm: Enable Microsoft Azure Network Adapter (MANA) (John Donnelly)  [Orabug: 32906994]
  - Modify the UEK6 version of RDS for the LUCI kernel (William Kucharski)  [Orabug: 32080993]
  - uek-rpm: Developer requested config options for v5.13 aarch64 (Victor Erminpour)  [Orabug: 32958782]
  - uek-rpm: Developer requested config options for v5.13 x86_64 (Victor Erminpour)  [Orabug: 32958782]
  - Update configuration for v5.13 (aarch64 make olddefconfig) (Victor Erminpour)  [Orabug: 32958782]
  - Update configuration for v5.13 (x86_64 make olddefconfig) (Victor Erminpour)  [Orabug: 32958782]
  - uek-rpm: Add new mpi3mr driver to config (John Donnelly)  [Orabug: 33021154]
  - bpf: provide BPF Type Format (BTF) info for kernel (Alan Maguire)  [Orabug: 33005621]
  - uek-rpm: Enable CONFIG_KVM_WERROR=y (Liam Merwick)  [Orabug: 33027178]
  - uek-rpm: enable nvme target passthru mode (Alan Adamson)  [Orabug: 33011016]
  - uek-rpm: Enable Microsoft Azure Network Adapter (MANA) (John Donnelly)  [Orabug: 32906994]
  - Modify the UEK6 version of RDS for the LUCI kernel (William Kucharski)  [Orabug: 32080993]
  - uek-rpm: Remove reference to bpf-helpers in specfile. (Victor Erminpour)
  - uek-rpm: Update missing configs as compared to OL8.4 RHCK (Saeed Mirzamohammadi)  [Orabug: 32869194]
  - uek-rpm: Remove hwcap directive and /etc/ld.so.conf.d/*.conf file (Victor Erminpour)  [Orabug: 32843813]
  - uek-rpm: Developer requested config options for v5.12 (Victor Erminpour)  [Orabug: 32770971]
  - uek-rpm: Put back options that were removed from v5.12 (Victor Erminpour)  [Orabug: 32770971]
  - uek-rpm: Update configuration for v5.12 (aarch64 make olddefconfig) (Victor Erminpour)  [Orabug: 32770971]
  - uek-rpm: Update configuration for v5.12 (x86_64 make olddefconfig) (Victor Erminpour)  [Orabug: 32770971]
  - Modify the UEK6 version of RDS for the LUCI kernel (William Kucharski)  [Orabug: 32080993]
  - uek-rpm: Update SecureBoot Digicert 2021 certificates (Jack Vogel)  [Orabug: 32532661]
  - uek-rpm: add opbmc to nano-kernel (Eric Snowberg)  [Orabug: 32555643]
  - uek-rpm: Update configuration for v5.11 (Additional requests) (Victor Erminpour)  [Orabug: 32468111]
  - uek-rpm: Update configuration for v5.11 (aarch64 make olddefconfig) (Victor Erminpour)  [Orabug: 32468111]
  - uek-rpm: Update configuration for v5.11 (x86_64 make olddefconfig) (Victor Erminpour)  [Orabug: 32468111]
  - Modify the UEK6 version of RDS for the LUCI kernel (William Kucharski)  [Orabug: 32080993]
  - uek-rpm: Enable CONFIG_ACPI_DPTF and re-enable CONFIG_DPTF_POWER (Victor Erminpour)  [Orabug: 31368028]
  - uek-rpm: "make olddefconfig" for version 5.10.0 (arm64) (Victor Erminpour)  [Orabug: 31368028]
  - uek-rpm: "make olddefconfig" for version 5.10.0 (x86_64) (Victor Erminpour)  [Orabug: 31368028]
  - Modify the UEK6 version of RDS for the LUCI kernel (William Kucharski)  [Orabug: 32080993]
  - uek-rpm: disable CONFIG_DEBUG_VM_PGTABLE for aarch64 (Thomas Tai)  [Orabug: 31814210]
  - luci: fix kernel-uek.spec to reboot a LUCI kernel (Larry Bassel)  [Orabug: 31735472]
  - uek-rpm: Add OL7 RPM BuildRequires dependency on python3 (Victor Erminpour)  [Orabug: 30595825]
  - luci: Rename uek-tools to luci-tools (Victor Erminpour)  [Orabug: 30251916]
  - luci: Rename LUCI RPMs to 'kernel-luci' (Victor Erminpour)  [Orabug: 30148149]
  - luci: Disable kABI check. (Victor Erminpour)
  - uek-rpm: Add nvme-tcp and nvme-rdma to ol7 and ol8 nano kernels (Alan Adamson)  [Orabug: 32230382]
  - uek-rpm: enable VDPA subsystem and drivers (Si-Wei Liu)  [Orabug: 32121107]
  - uek-rpm: aarch64: enable CONFIG_ACPI_APEI_EINJ (Dave Kleikamp)  [Orabug: 32182617]
  - arm64:uek/config: Enable ZONE_DMA config (Vijay Kumar)  [Orabug: 32195245]
  - uek-rpm: Enable Intel Speed Select Technology interface support (Somasundaram Krishnasamy)  [Orabug: 32161424]
  - uek-rpm: aarch64: increase CONFIG_NODES_SHIFT from 3 to 6 (Dave Kleikamp)  [Orabug: 32112538]
  - uek-rpm: Add mce-inject.ko path in OL8 nano kernel modules list (Saeed Mirzamohammadi)  [Orabug: 32073053]
  - uek-rpm: Configure wireguard to be delivered in RPMs as a module (William Kucharski)  [Orabug: 32013736]
  - uek-rpm: Fix integer test for 4k page size module signing (Dave Kleikamp)  [Orabug: 32041516]
  - uek-rpm: Create initramfs at postinstall stage also. (Somasundaram Krishnasamy)  [Orabug: 31358096]
  - uek-rpm/kernel-uek.spec: Sign modules for 4k kernel (Vijay Kumar)  [Orabug: 31954922]
  - uek-rpm: Add old OL keys to the default .blacklist keyring (Eric Snowberg)  [Orabug: 31961114]
  - uek-rpm: Update secure boot UEK signing certificates (Brian Maly)  [Orabug: 31807687]
  - uek-rpm: Fix kernel-ueknano depmod warnings vhost_iotlb regmap-i2c (Vijayendra Suman)  [Orabug: 31938861]
  - uek-rpm: Add ovmapi.ko to uek6 nano_modules (Joe Jin)  [Orabug: 31922751]
  - uek-rpm: config: Enable OVM API (Joe Jin)  [Orabug: 31922751]
  - uek-rpm: streamline 4konly build (Dave Kleikamp)  [Orabug: 31907994]
  - uek-rpm: ol8: config-aarch64: add *_MEMORY_HOTPLUG (Mihai Carabas)  [Orabug: 31848210]
  - rename kABI whitelists to lockedlists (Dan Duval)  [Orabug: 31783145]
  - uek-rpm: Enable CONFIG_EDAC_I10NM (Thomas Tai)  [Orabug: 31644938]
  - uek-rpm: Enable AMD TEE driver (Dave Kleikamp)  [Orabug: 31687958]
  - Enable config option CONFIG_NFSD_V4_2_INTER_SSC (Dai Ngo)  [Orabug: 31535968]
  - certs: Remove Oracle cert compiled into the kernel (Eric Snowberg)  [Orabug: 31555581]
  - Revert "uek-rpm: Move grub boot menu update to posttrans stage." (Somasundaram Krishnasamy)  [Orabug: 31358096]
  - uek-rpm: update kABI lists for new symbols (Dan Duval)  [Orabug: 31512147]
  - uek-rpm: Disable secureboot signing for OL7 aarch64 (Somasundaram Krishnasamy)  [Orabug: 31645595]
  - uek-rpm: Enable perf and bpf build for ol7/ol8 (Vijayendra Suman)  [Orabug: 31642461]
  - ktask: send to /dev/null (Daniel Jordan)  [Orabug: 31600516]
  - uek-rpm: disable CONFIG_CRYPTO_DEV_CAVIUM_ZIP (Dave Kleikamp)  [Orabug: 31667366]
  - uek-rpm: drivers: enable VMD PCIe controller (Todd Vierling)  [Orabug: 30647040]
  - uek-rpm: aarch64: Streamline building 4K pages size kernel (Dave Kleikamp)  [Orabug: 31500686]
  - KEYS: Increase system_extra_certificate size to 8192 bytes (Stephen Brennan)  [Orabug: 31596962]
  - vhost: Select CONFIG_VHOST_MENU by default (Boris Ostrovsky)  [Orabug: 31555511]
  - uek-rpm: Enable CONFIG_PCIE_DPC and CONFIG_PCIE_EDR (Thomas Tai)  [Orabug: 31180903]
  - uek-rpm: Enable EFI_{FAKE_MEMMAP,SOFT_RESERVE} and DEV_DAX_HMEM (Joao Martins)  [Orabug: 31518826]
  - aarch64: Enable thermal config for RPi4 (Vijay Kumar)  [Orabug: 31504894]
  - uek-rpm: Increase CONFIG_NODES_SHIFT from 2 to 3 (Dave Kleikamp)  [Orabug: 31422294]
  - uek-rpm: update aarch64 configs for Ampere eMAG2 (Dave Kleikamp)  [Orabug: 31422294]
  - uek-rpm: disable CONFIG_IP_PNP (Anjali Kulkarni)  [Orabug: 31386505]
  - uek-rpm: Enable CONFIG_NVME_HWMON for OL8 (Alan Adamson)  [Orabug: 31373787]
  - uek-rpm: Move grub boot menu update to posttrans stage. (Somasundaram Krishnasamy)  [Orabug: 31358096]
  - jbd2: disable CONFIG_JBD2_DEBUG (Junxiao Bi)  [Orabug: 31264691]
  - uek-rpm: turbostat fix in v5.4.31 requires libcap-devel (Jack Vogel)
  - uek-rpm: Add installonlypkgs option to allow install of multiple versions (Somasundaram Krishnasamy)  [Orabug: 31038350]
  - uek-rpm: update kABI data in UEK6 Master branch (Dan Duval)  [Orabug: 30498825]
  - uek-rpm: Set DEFAULTKERNEL to right value when uninstalling kernel-uek (Somasundaram Krishnasamy)  [Orabug: 31029299]
  - enable kABI checking in UEK6 build (Dan Duval)  [Orabug: 30498825]
  - spec: require a newer binutils for better aarch64 CTF support (Nick Alcock)  [Orabug: 31003216]
  - uek-rpm: require CTF-capable binutils and GCC for CTF generation (Nick Alcock)  [Orabug: 31003216]
  - uek-rpm: Make title string of boot load spec generic (Somasundaram Krishnasamy)  [Orabug: 31025059]
  - uek-rpm: Revert "uek-rpm: Disable CONFIG_RT_GROUP_SCHED" (chris hyser)  [Orabug: 31025875]
  - uek-rpm: Make sure perf builds against libnuma and add run-time dependency (Dave Kleikamp)  [Orabug: 30896574]
  - uek-rpm: Add missing modules to kernel-ueknano rpm. (Somasundaram Krishnasamy)  [Orabug: 30949434]
  - mstflint_access: Enable the mstflint_access module (Aron Silverton)  [Orabug: 30997871]
  - config-aarch64: Disable ZONE_DMA to fix crashkernel dma_atomic_pool_init failure (Thomas Tai)  [Orabug: 31010223]
  - adjust check_kabi tool to accommodate symbol namespaces (Dan Duval)  [Orabug: 31014554]
  - uek-rpm: Fix kernel-uek-doc build on OL8 (Victor Erminpour)  [Orabug: 30519151]
  - uek-rpm: Enable Diffie-Hellman key exchange feature (Somasundaram Krishnasamy)  [Orabug: 30387221]
  - uek-rpm: Fix issue in /etc/sysconfig/kernel getting wrongly updated (Vijayendra Suman)  [Orabug: 30954352]
  - uek-rpm: Enable CONFIG_GENERIC_IRQ_DEBUGFS (Joe Jin)  [Orabug: 30959541]
  - uek-rpm: Disable CONFIG_RT_GROUP_SCHED (Tom Hromatka)  [Orabug: 30998384]
  - add workaround for truncation of Module.symvers file (Dan Duval)  [Orabug: 30776585]
  - uek-rpm: Rename kernel-uek-4k package to kernel-uek4k (Victor Erminpour)  [Orabug: 30902925]
  - uek-rpm: Disable CONFIG_LIQUIDIO for UEK6 (Victor Erminpour)  [Orabug: 30896502]
  - uek-rpm: Fix kernel-ueknano depmod warnings (Somasundaram Krishnasamy)  [Orabug: 30932300]
  - uek6/ol7/config: Enable pcie_brcmstb driver (Vijay Kumar)  [Orabug: 30646006]
  - uek6/ol8/config: Enable pcie_brcmstb driver (Vijay Kumar)  [Orabug: 30646006]
  - printk: Default console logging level reset to 7 (Jack Vogel)  [Orabug: 30870801]
  - uek-rpm: Run "make olddefconfig" against uek6/master (v5.4.17) (Victor Erminpour)  [Orabug: 30859936]
  - uek-rpm: Set CRYPTO_CRC32C_INTEL as a built-in driver (Victor Erminpour)  [Orabug: 30833761]
  - uek-rpm: Enable missing config options in UEK6 from UEK-5-U2 (Victor Erminpour)  [Orabug: 30822133]
  - uek-rpm: config: Add support for resilient_rdmaip kernel module in ol8 (William Kucharski)  [Orabug: 30777254]
  - uek-rpm: config: Add support for resilient_rdmaip new kernel module (Sudhakar Dindukurti)  [Orabug: 27718686] [Orabug: 30777254]
  - uek-rpm: kernel-uek-tools requires python3 (Liam Merwick)  [Orabug: 30222594]
  - uek-rpm: x86 enable CONFIG_IMA_APPRAISE_MODSIG (Eric Snowberg)  [Orabug: 30816770]
  - uek-rpm: Run "make olddefconfig" against uek6/master (v5.4.14) (Victor Erminpour)  [Orabug: 30838776]
  - uek-rpm: Enable exFAT in UEK6 (Victor Erminpour)  [Orabug: 30827952]
  - uek-rpm: Enable AF_XDP support in UEK6 (Victor Erminpour)  [Orabug: 30776996]
  - uek-rpm: Set UEK6 base kernel version to 5.4 in the RPM specfile (Victor Erminpour)  [Orabug: 30777117]
  - provide symbol files for kABI checking for UEK6 (Dan Duval)  [Orabug: 30690110]
  - uek-rpm: Update linux-firmware dependency to latest. (Somasundaram Krishnasamy)  [Orabug: 30729912]
  - uek-rpm: Enable config options from RHCK-8.1 in UEK6 (Victor Erminpour)  [Orabug: 30809710]
  - uek-rpm: Enable CONFIG_HMM_MIRROR for x86_64 (Jack Vogel)  [Orabug: 30782109]
  - Update the UEK6 firmware version in OL7 and OL8 spec files (Jack Vogel)  [Orabug: 30762100]
  - uek-rpm: Set security hardening options for all (Victor Erminpour)  [Orabug: 30670367]
  - uek-rpm: Set security hardening options for aarch64 (Victor Erminpour)  [Orabug: 30670367]
  - uek-rpm: Set security hardening options for x86_64 (Victor Erminpour)  [Orabug: 30670367]
  - config: don't set CONFIG_DMA_FENCE_TRACE (Boris Ostrovsky)  [Orabug: 30657067]
  - printk: Default console logging level should be set to 4 (Boris Ostrovsky)  [Orabug: 30657067]
  - uek-rpm: aarch64 config enable RETPOLINE OL8 (Henry Willard)  [Orabug: 30297793]
  - uek-rpm: Run "make olddefconfig" against uek6/master (Victor Erminpour)  [Orabug: 30596470]
  - uek-rpm: Enable kTLS offload for for MLX5 (Victor Erminpour)  [Orabug: 30630366]
  - uek-rpm: Enable CONFIG_CPU_IDLE_GOV_HALTPOLL (Victor Erminpour)  [Orabug: 30614031]
  - uek-rpm: Enable DTrace required config options (Victor Erminpour)  [Orabug: 30619618]
  - uek-rpm: UEK6 config option requests from John Haxby (Victor Erminpour)  [Orabug: 30596031]
  - uek-rpm: UEK6 config option requests from Martin Petersen (Victor Erminpour)  [Orabug: 30596031]
  - uek-rpm: RHCK config options for UEK6 (Victor Erminpour)  [Orabug: 30540922]
  - uek-rpm: Add CONFIG_CRYPTO_CFB for FIPS (Jack Vogel)  [Orabug: 30158461]
  - uek-rpm: Enable CONFIG_KEXEC_SIG (Victor Erminpour)  [Orabug: 30488668]
  - uek-rpm: Enable CONFIG_FW_CFG_SYSFS and CONFIG_FW_CFG_SYSFS_CMDLINE (Victor Erminpour)  [Orabug: 30619488]
  - uek-rpm: Enable CONFIG_X86_5LEVEL (Victor Erminpour)  [Orabug: 30155946]
  - uek-rpm: Disable CONFIG_SCHED_AUTOGROUP (Victor Erminpour)  [Orabug: 30596055]
  - uek-rpm: Carry forward previous UEK5 config options. (Victor Erminpour)  [Orabug: 30595946]
  - uek-rpm: Turn off CONFIG_DEBUG_WX for Arm production kernels. (John Donnelly)  [Orabug: 30193143]
  - uek6: Temporarily disable KABI check (Jack Vogel)
  - crypto: Enable CONFIG_CRYPTO_OFB for fips mode (Jack Vogel)
  - uek-rpm: Reenable with_dtrace in both OL spec files. (Jack Vogel)
  - Enable CONFIG_DM_WRITECACHE in UEK6 (Jack Vogel)  [Orabug: 30421025]
  - Update the build versioning files. (Jack Vogel)  [Orabug: 30487822]
  - uek-rpm: Update config files with "make olddefconfig" (Victor Erminpour)  [Orabug: 30507302]
  - uek-rpm: Enable lockdown LSM (Eric Snowberg)  [Orabug: 30431425]
  - uek-rpm: Set to old style build_id generation to avoid rpm install conflicts. (Somasundaram Krishnasamy)  [Orabug: 30435996]
  - uek-rpm: enable CONFIG_INTEGRITY_PLATFORM_KEYRING (Eric Snowberg)  [Orabug: 30434806]
  - uek-rpm: Fix rpm warnings on OL8 (Somasundaram Krishnasamy)  [Orabug: 30346507]
  - uek-rpm: Disable PCMCIA (Eric Snowberg)  [Orabug: 30318827]
  - uek6: enable XFS online scrub code (Darrick J. Wong)  [Orabug: 30195940]
  - uek-rpm: Remove kernel-uek-tools RPMs for OL8 (Victor Erminpour)  [Orabug: 30205292]
  - uek-rpm: Add changes for kernel-uek-doc build support. (Victor Erminpour)  [Orabug: 30381773]
  - uek-rpm: Update summary to Oracle UEK Release 6 from 5 (Victor Erminpour)  [Orabug: 30310967]
  - uek-rpm: Re-enable NF_TABLES config options (Victor Erminpour)  [Orabug: 30326867]
  - uek-rpm: Fix kabitool Module.symvers parse error (Victor Erminpour)  [Orabug: 30341561]
  - uek-rpm: Update OL8 spec to latest firmware revision (Jack Vogel)  [Orabug: 30299029]
  - uek-rpm: Generate bls.conf file and copy UEFI CA cert (Victor Erminpour)  [Orabug: 30275817]
  - uek-rpm: Package vmlinuz and .vmlinuz.hmac in /lib/modules/ (Victor Erminpour)  [Orabug: 30269735]
  - uek-rpm: kernel-uek RPM specfile cleanup (Victor Erminpour)  [Orabug: 30199979]
  - uek-rpm: RPM debuginfo improvements for OL8 (Victor Erminpour)  [Orabug: 30199979]
  - uek-rpm: Fix bug in OL8 kernel RPM scriptlets (Victor Erminpour)  [Orabug: 30179076]
  - uek-rpm: Disable CONFIG_ARM_SMMU_DISABLE_BYPASS_BY_DEFAULT (Victor Erminpour)  [Orabug: 30179070]
  - uek-rpm: Call find instead of cp and don't copy .tmp_versions (Victor Erminpour)  [Orabug: 30116866]
  - uek-rpm: Add rsync as a 'BuildRequires' in RPM specfile (Victor Erminpour)  [Orabug: 30068210]
  - uek-rpm: Enable CONFIG_NF_TABLES_NETDEV=y (Victor Erminpour)  [Orabug: 29897273]
  - config-aarch64: change CONFIG_HZ and CONFIG_FRAME_WARN (Thomas Tai)  [Orabug: 28894138]
  - kernel-uek.spec: defuse a memory bomb in xargs (Lukáš Lipinský)  [Orabug: 30344582]
  - kernel-uek.spec: defuse a memory bomb in xargs (Lukáš Lipinský)  [Orabug: 30057188]
  - config-aarch64: enable CONFIG_MPLS_IPTUNNEL and CONFIG_BPF_JIT_ALWAYS_ON (Thomas Tai)  [Orabug: 29493120] [Orabug: 29409143]
  - Revert "AMD: Change CONFIG_EDAC_DECODE_MCE to built-in" (George Kennedy)  [Orabug: 30080594]
  - config-aarch64: enable ISCSI_IBFT (Thomas Tai)  [Orabug: 29456913]
  - uek-rpm: Update firmware prerequisites to 20190627-999.2.git7ae3a09d. (John Donnelly)  [Orabug: 30043163]
  - uek-rpm: Update UEK5 config files with "make olddefconfig" (Victor Erminpour)  [Orabug: 30038078]
  - uek-rpm/ol7/nano_modules fix (Jane Chu)  [Orabug: 29959677]
  - AMD: Change CONFIG_EDAC_DECODE_MCE to built-in (George Kennedy)  [Orabug: 29922372]
  - config: enable PSI (Tom Hromatka)  [Orabug: 29896477]
  - uek-rpm: Fix mce-inject.ko path in nano kernel modules list (Somasundaram Krishnasamy)  [Orabug: 29667299]
  - uek-rpm: update list of removed files, generated by depmod on install stage (Alexander Burmashev)  [Orabug: 29383638]
  - uek-rpm: replace i40evf.ko with iavf.ko in nano_modules. (John Donnelly)  [Orabug: 29421946]
  - uek-rpm: aarch64 config enable RETPOLINE (Tom Saeger)  [Orabug: 28867144]
  - add symbols to kABI whitelist (Dan Duval)  [Orabug: 29261848]
  - uek-rpm: Remove hardcoded 'kernel_git_commit' macro from specfile (Victor Erminpour)  [Orabug: 29357441]
  - uek-rpm: Add perf packages back to ol7-aarch64 (Victor Erminpour)  [Orabug: 29343605]
  - uek-rpm: Remove perf RPMs (Victor Erminpour)  [Orabug: 29325581]
  - uek-rpm: Remove oracle-armtoolset-1 for OL8 (Victor Erminpour)  [Orabug: 29325581]
  - uek-rpm: use multi-threaded xz compression for rpms (Alexander Burmashev)  [Orabug: 29201054]
  - uek-rpm: optimize find-requires usage (Alexander Burmashev)  [Orabug: 29201054]
  - find-debuginfo.sh: backport parallel files procession (Alexander Burmashev)  [Orabug: 29201054]
  - uek-rpm: Port to OL8 (Victor Erminpour)  [Orabug: 29287050]
  - uek-rpm: Change RPM variant from 4k-debug to 4kdebug (Victor Erminpour)  [Orabug: 29287050]
  - uek-rpm: Copy uek-rpm/ol7/ directory to uek-rpm/ol8/ (Victor Erminpour)  [Orabug: 29287050]
  - Add the Intel ICE driver to UEK5 configuration (Jack Vogel)  [Orabug: 29293770]
  - Add Configuration option for Intel IGC driver to UEK5 (Jack Vogel)  [Orabug: 29294226]
  - uek-rpm: Enable device-mapper era driver (Dave Aldridge)  [Orabug: 29245896]
  - uek-rpm: Enable Ext2 extended attributes (Dave Aldridge)  [Orabug: 29252939]
  - uek-rpm: Update x86_64 config options (Victor Erminpour)  [Orabug: 28700595]
  - uek-rpm: Enable Cavium ThunderX coprocessors and AES_TI crypto (Victor Erminpour)  [Orabug: 29186152]
  - uek-rpm: Enable ena driver (Somasundaram Krishnasamy)  [Orabug: 29162519]
  - ctf: explicitly specify the sizes of structures and unions (Nick Alcock)  [Orabug: 29054989]
  - uek-rpm: remove obsolete CTF-related find-debuginfo hack (Nick Alcock)  [Orabug: 29043023]
  - ktask: multithread CPU-intensive kernel work (Daniel Jordan)  [Orabug: 25577642]
  - uek-rpm: build in vfio and vfio_iommu_type1 modules (Daniel Jordan)  [Orabug: 25577642]
  - config-aarch64-debug: Match kernel config between aarch64 and config_x86_64 (Thomas Tai)  [Orabug: 28312743]
  - config-aarch64: Match kernel config between aarch64 and config_x86_64 (Thomas Tai)  [Orabug: 28312743]
  - [PATCH UEK5 v3] dtrace: add DTRACEACT_PCAP for packet capture for later pcap_dump() (Alan Maguire)  [Orabug: 28975818]
  - uek-rpm: Allow blacklisting of kernel modules in initramfs during nano-kernel build (Somasundaram Krishnasamy)  [Orabug: 28925565]
  - uek-rpm: aarch64: enable CONFIG_GPIO_THUNDERX (Henry Willard)  [Orabug: 28932941]
  - uek-rpm: Enable read IMA policy (Eric Snowberg)  [Orabug: 28702669]
  - arm64: disable /dev/port on 64 bit ARM (Eric Saint-Etienne)  [Orabug: 28320013]
  - config: disable xfs online scrub in uek5 (Darrick J. Wong)  [Orabug: 28874134]
  - config-aarch64-debug: Match kernel config between aarch64 and config_x86_64 (Thomas Tai)  [Orabug: 28312743]  {CVE-2018-12928}
  - config-aarch64: Match kernel config between aarch64 and config_x86_64 (Thomas Tai)  [Orabug: 28312743]  {CVE-2018-12928}
  - uek-rpm: Run 'make olddefconfig' to get latest x86 config values (Victor Erminpour)  [Orabug: 28763256]
  - uek-rpm: Remove module rpcrdma.ko (NFSoRDMA) from nano_modules (Somasundaram Krishnasamy)  [Orabug: 28850263]
  - config: enable BNXT_HWMON (Brian Maly)  [Orabug: 28797053]
  - uek-rpm: aarch64 some XGENE drivers must be be modules (Tom Saeger)  [Orabug: 28549351]
  - uek-rpm: enable DTrace FBT for aarch64 (Kris Van Hees)  [Orabug: 28707614]
  - uek-rpm: enable DTrace SDT for aarch64 (Kris Van Hees)  [Orabug: 28707604]
  - uek-rpm: Disable deprecated CONFIG_ACPI_PROCFS_POWER (Victor Erminpour)  [Orabug: 28630247]
  - uek-rpm: support both 4k and 64k page size for aarch64 (Allen Pais)  [Orabug: 28526023]
  - uek-rpm: Disable F2FS in the UEK5 config (Victor Erminpour)  [Orabug: 28570381]
  - uek-rpm: Enable MPLS suppoprt (Victor Erminpour)  [Orabug: 28367674]
  - dtrace: increment dtrace-kernel-headers revision to 1.1.0 (Vincent Lim)  [Orabug: 28241736]
  - uek-rpm: aarch64: enable building SHA3 algorithms (Henry Willard)  [Orabug: 28486461]
  - mstflint: add mstflint secure boot access kernel support (Qing Huang)  [Orabug: 27416559]
  - uek-rpm: Enable perf stripped binary (Victor Erminpour)  [Orabug: 28469286]
  - uek-rpm: Show UEK Release Number in RPM summary (Victor Erminpour)  [Orabug: 28468593]
  - uek-rpm: aarch64 Set CONFIG_BPF_STREAM_PARSER (Henry Willard)  [Orabug: 27653372]
  - aarch64: remove duplicate dtb in kernel rpm (Eric Saint-Etienne)  [Orabug: 28216582]
  - uek-rpm: Enable net_failover.ko in nano_modules file (Victor Erminpour)  [Orabug: 28390028]
  - uek-rpm: config: Disable CONFIG_SECURITY_DMESG_RESTRICT (Victor Erminpour)  [Orabug: 28372959]
  - uek-rpm: Enable ovmapi.ko in nano_modules file (Victor Erminpour)  [Orabug: 28144761]
  - aarch64: fix device mapper multipathing (Eric Saint-Etienne)  [Orabug: 27893211]
  - uek-rpm: config-debug: Turn off torture testing by default (Knut Omang)  [Orabug: 27746166]
  - rpi: MMC fails to find DMA channel and falls back to PIO (Vijay Kumar)  [Orabug: 28159727]
  - uek-rpm: aarch64 Disable CONFIG_NET_VRF (Victor Erminpour)  [Orabug: 28158146]
  - uek-rpm: config: disable CONFIG_DEBUG_VM on aarch64 (Henry Willard)  [Orabug: 28104208]
  - uek-rpm: Enable kernel-uek-headers build. (Victor Erminpour)  [Orabug: 28110910]
  - arm64: add support for crashkernel=auto (Dave Kleikamp)  [Orabug: 28095909]
  - uek-rpm: aarch64 sync NVME config with x86 (Tom Saeger)  [Orabug: 28096294]
  - uek-rpm: aarch64 make olddefconfig latest stable (Tom Saeger)  [Orabug: 28084270]
  - uek-rpm: aarch64 make olddefconfig usercopy whitelist (Tom Saeger)  [Orabug: 28084248]
  - uek-rpm: aarch64 set default cpu governor to PERFORMANCE (Tom Saeger)  [Orabug: 27952402]
  - uek-rpm: Disable CONFIG_NET_VRF (Victor Erminpour)  [Orabug: 27801112]
  - uek-rpm: Enable CONFIG_QED_OOO option in UEK5 (Victor Erminpour)  [Orabug: 27774819]
  - uek-rpm: aarch64 use 64K pagesize (Tom Saeger)  [Orabug: 28057643]
  - add new checksum files for kABI; re-enable kABI checking (Dan Duval)  [Orabug: 27199028]
  - uek-rpm: aarch64 build using oracle-armtoolset (Tom Saeger)  [Orabug: 28022143]
  - uek-rpm: aarch64 make TORTURE modules debug only (Tom Saeger)  [Orabug: 28032744]
  - uek-rpm: aarch64 enable QLOGIC modules (Tom Saeger)  [Orabug: 28021280]
  - uek-rpm: aarch64 disable HARDENED_USERCOPY (Tom Saeger)  [Orabug: 27996695]
  - uek-rpm: aarch64 disable modules that panic kernel (Tom Saeger)  [Orabug: 27999744]
  - uek-rpm: aarch64 make olddefconfig for ARM SDEI (Tom Saeger)  [Orabug: 28022735]
  - uek-rpm: Add kernel/drivers/crypto/ccp/ccp.ko to nano modules list (Liam Merwick)  [Orabug: 27854232]
  - uek-rpm: Run 'make olddefconfig' for UEK5 v4.14.35 (Victor Erminpour)  [Orabug: 27981731]
  - uek-rpm: Enable silently dropped options from UEK4 (Victor Erminpour)  [Orabug: 27834007]
  - uek-rpm: Remove deprecated config options from UEK5 (Victor Erminpour)  [Orabug: 27981766]
  - uek-rpm: enable building SHA3 algorithms (Khalid Aziz)  [Orabug: 28001020]
  - initial kABI whitelists for UEK5 (Dan Duval)  [Orabug: 27199028]
  - uek-rpm: Update linux-firmware dependency to latest (Somasundaram Krishnasamy)  [Orabug: 27989702]
  - uek-rpm: Turn on intel iommu/vt-d (Tushar Dave)  [Orabug: 27747905]
  - kernel.spec: add requires system-release for OL7 (Brian Maly)  [Orabug: 27964285]
  - uek-rpm: aarch64 add arm64 defconfig platforms (Tom Saeger)  [Orabug: 27573165]
  - uek-rpm: aarch64 disable nct hwmon modules (Tom Saeger)  [Orabug: 27866965]
  - uek-rpm: aarch64 olddefconfig update to 4.14.35 (Tom Saeger)  [Orabug: 27933685]
  - uek-rpm: aarch64 remove perl dependency from perf (Tom Saeger)  [Orabug: 27704937]
  - config: enable fasttrap provider for arm64 (Kris Van Hees)  [Orabug: 27847920]
  - uek-rpm: Enable build of kernel-uek-doc rpm (Somasundaram Krishnasamy)  [Orabug: 27845100]
  - uek-rpm: Enable options from RHCK-7.5 missing in UEK5 (Victor Erminpour)  [Orabug: 27866120]
  - uek-rpm: Enable CONFIG_EDAC_SKX and CONFIG_RAS_CEC (Victor Erminpour)  [Orabug: 27824333]
  - uek-rpm: Set base_sublevel to 35 (Somasundaram Krishnasamy)  [Orabug: 27911742]
  - uek-rpm: aarch64 set CMA_SIZE_MBYTES to 0 (Tom Saeger)  [Orabug: 27854630]
  - uek-rpm: aarch64 enable resilient_rdmaip module (Tom Saeger)  [Orabug: 27854808]
  - uek-rpm: aarch64 add PANIC_ON_OOPS (Tom Saeger)  [Orabug: 27847484]
  - uek-rpm: RPM install scripts doesn't supply grub2 with a DT despite it is requested (Petr Benes)  [Orabug: 27802749]
  - uek-rpm: remove virtio-gpu from nanokernel modules (Jim Quigley)  [Orabug: 27829972]
  - uek-rpm: aarch64 olddefconfig update to 4.14.32 (Tom Saeger)  [Orabug: 27824121]
  - uek-rpm: aarch64 config enable NUMA (Tom Saeger)  [Orabug: 27570228]
  - uek-rpm: config: Add support for resilient_rdmaip new kernel module (Sudhakar Dindukurti)  [Orabug: 27718686]
  - uek-rpm: config: Enable ARM64_SVE for aarch64 (Jim Quigley)  [Orabug: 27821643]
  - uek-rpm: Include tools/objtool/objtool in kernel-uek-devel (Somasundaram Krishnasamy)  [Orabug: 27799902]
  - uek-rpm: config: Enable DRM_VIRTIO_GPU for x-86_64. (Jim Quigley)  [Orabug: 27815399]
  - uek-rpm/kernel-uek.spec: Add module.lds in uek5 devel rpm (Vijay Kumar)  [Orabug: 27613639]
  - uek-rpm: Enable CONFIG_SCHEDSTATS in UEK5 config file (Victor Erminpour)  [Orabug: 27774280]
  - uek-rpm: Enable config options from UEK5 review (Victor Erminpour)  [Orabug: 27741375]
  - uek-rpm: Set base_sublevel to 32 (Somasundaram Krishnasamy)  [Orabug: 27792024]
  - uek-rpm: deliver kvm_stat on x86_64 via kernel-uek-tools (Liam Merwick)  [Orabug: 27566074]
  - uek-rpm: config: Run "make olddefconfig" against v4.14.28 for x86_64 (Victor Erminpour)  [Orabug: 27656430]
  - uek-rpm: config: Enable OL7U5 RHCK options for UEK5 (Victor Erminpour)  [Orabug: 27622705]
  - uek-rpm: config: Enable CONFIG_DMA_CMA and CONFIG_CMA_SIZE_MBYTES=0 (Victor Erminpour)  [Orabug: 25917090]
  - uek-rpm: config: Enable KASLR in UEK5 (Victor Erminpour)  [Orabug: 27741231]
  - uek-rpm: config: Enable CONFIG_X86_MCELOG_LEGACY=y (Victor Erminpour)  [Orabug: 27684921]
  - uek-rpm: config: Enable XFRM_OFFLOAD and ESP_OFFLOAD config options (Victor Erminpour)  [Orabug: 27741365]
  - uek-rpm: config: Enable CONFIG_KVM_DEBUG_FS in UEK5 debug kernel (Victor Erminpour)  [Orabug: 27741246]
  - uek-rpm: config: Enable CONFIG_F2FS_FS in UEK5 (Victor Erminpour)  [Orabug: 27739286]
  - uek-rpm: config: Enable qat_c62x and qat_c62xvf modules (Victor Erminpour)  [Orabug: 27725149]
  - uek-rpm: config: Disable CONFIG_SECURITY_LOADPIN (Victor Erminpour)  [Orabug: 27703796]
  - uek-rpm: update dtrace-kernel-headers to 1.0.0 (Tomas Jedlicka)  [Orabug: 27752578]
  - uek-rpm: enable BNX* drivers for aarch64 (Allen Pais)  [Orabug: 27717735]
  - uek-rpm: config aarch64 add RPi3 support (Tom Saeger)  [Orabug: 27574522]
  - uek-rpm/config-aarch64: Unset CONFIG_MODULE_SIG_FORCE in kernel config (Vijay Kumar)  [Orabug: 27620376]
  - uek-rpm/config-aarch64: Enable default sysrq in kernel config (Vijay Kumar)  [Orabug: 27080659]
  - uek-rpm: Bump libdtrace-ctf dependency to 0.8.0. (Todd Vierling)  [Orabug: 27741711]
  - uek-rpm: Set base_sublevel to 30 (Somasundaram Krishnasamy)  [Orabug: 27752925]
  - uek-rpm: Update nano modules list (Somasundaram Krishnasamy)  [Orabug: 27706743]
  - uek-rpm: Set base_sublevel to 28 (Somasundaram Krishnasamy)  [Orabug: 27717309]
  - uek-rpm: aarch64 build kernel-tools, perf packages (Tom Saeger)  [Orabug: 27639751]
  - uek-rpm: aarch64 add cpupower files needed by kernel-tools (Tom Saeger)  [Orabug: 27639751]
  - uek-rpm: aarch64 install perf with kernel-uek (Tom Saeger)  [Orabug: 27639751]
  - uek-rpm: config: Enable ext4 file system encryption (Victor Erminpour)  [Orabug: 27635263]
  - uek-rpm: UEK5 config file Review (Victor Erminpour)  [Orabug: 27649939]
  - uek-rpm: Remove config-sparc file (Victor Erminpour)  [Orabug: 27649916]
  - uek-rpm: config: Enable IPVLAN support (Victor Erminpour)  [Orabug: 27633248]
  - uek-rpm: config: Enable vfio_mdev VFIO mediated device module (Victor Erminpour)  [Orabug: 27583169]
  - uek-rpm: config: Enable Intel RDT (Victor Erminpour)  [Orabug: 27581283]
  - uek-rpm: Set base_sublevel to 26 (Somasundaram Krishnasamy)  [Orabug: 27678165]
  - uek-rpm: config aarch64 enable kpti and bp harden (Tom Saeger)  [Orabug: 27657714]
  - uek-rpm: Remove unneeded modules from kernel-ueknano (Somasundaram Krishnasamy)  [Orabug: 27663420]
  - uek-rpm: config aarch64 enable Mellanox hardware (Tom Saeger)  [Orabug: 27657528]
  - uek-rpm: Set base_sublevel to 24 (Somasundaram Krishnasamy)  [Orabug: 27639261]
  - uek-rpm: config: enable XFS Realtime subvolume support by default (Shan Hai)  [Orabug: 27548835]
  - uek-rpm: aarch64 provide kernel-uname-r metadata (Tom Saeger)  [Orabug: 27540755]
  - modsign: aarch64 Add key for module signing (Tom Saeger)  [Orabug: 27448208]
  - uek-rpm: Set base_sublevel to 23 (Somasundaram Krishnasamy)  [Orabug: 27601642]
  - uek-rpm: Update nano modules list (Somasundaram Krishnasamy)  [Orabug: 27532347]
  - uek-rpm: Set base_sublevel to 20 (Somasundaram Krishnasamy)  [Orabug: 27586336]
  - uek-rpm: enable USERFAULTFD in debug kernel (Mike Kravetz)  [Orabug: 27574106]
  - uek-rpm: Set base_sublevel to 19 (Somasundaram Krishnasamy)  [Orabug: 27396439]
  - uek-rpm: aarch64 enable available DTrace options (Tom Saeger)  [Orabug: 27485993]
  - uek-rpm: Update to latest linux-firmware version (Somasundaram Krishnasamy)  [Orabug: 27523859]
  - uek-rpm: enable LOCK_DOWN_IN_EFI_SECURE_BOOT (Eric Snowberg)  [Orabug: 27193819]
  - uek-rpm: Enable CONFIG_MODULE_SIG_ALL (Eric Snowberg)  [Orabug: 27193819]
  - uek-rpm: enable CONFIG_LOCK_DOWN_KERNEL (Eric Snowberg)  [Orabug: 27193819]
  - uek-rpm: enable CONFIG_LOAD_UEFI_KEYS. (Eric Snowberg)  [Orabug: 27193819]
  - uek-rpm: enable EFI_SIGNATURE_LIST_PARSER (Eric Snowberg)  [Orabug: 27193819]
  - uek-rpm: enable CONFIG_SECONDARY_TRUSTED_KEYRING (Eric Snowberg)  [Orabug: 27193819]
  - uek-rpm: Enable RDS_ACL in UEK5 (Aron Silverton)  [Orabug: 27503146]
  - uek-rpm: aarch64 enable OCFS2_FS (Tom Saeger)  [Orabug: 27525109]
  - uek-rpm: Add support for QLogic 41000 Series Converged Network Adapters (Somasundaram Krishnasamy)  [Orabug: 27426190]
  - uek-rpm: Enable KPTI and Retpoline config options in UEK5 (Victor Erminpour)  [Orabug: 27487028]
  - uek-rpm: Enable Yama LSM in UEK5 (Victor Erminpour)  [Orabug: 27486963]
  - uek-rpm: Enable config support for NVMe over Fabrics (NVMe-oF) (Victor Erminpour)  [Orabug: 27449641]
  - uek-rpm: Enable support for iWarp QLogic QEDR in UEK5 (Victor Erminpour)  [Orabug: 27448989]
  - uek-rpm: Enable config support for iWARP Intel i40iw (Victor Erminpour)  [Orabug: 27448941]
  - uek-rpm: Enable config options for Heterogeneous Memory Management (HMM) (Victor Erminpour)  [Orabug: 27110778]
  - uek-rpm: Enable eBPF related configs in UEK5 (Victor Erminpour)  [Orabug: 27416748]
  - uek-rpm: Use olddefconfig instead of oldnoconfig (Somasundaram Krishnasamy)  [Orabug: 27283275]
  - uek-rpm: aarch64 RPMs need Provides 'kernel' (Tom Saeger)  [Orabug: 27516320]
  - uek-rpm: aarch64 needs kernel-headers by default (Tom Saeger)  [Orabug: 27495792]
  - uek-rpm: Update kernel-ueknano modules list (Somasundaram Krishnasamy)  [Orabug: 27494605]
  - uek-rpm: require CC=gcc7 on aarch64 (Tom Saeger)  [Orabug: 27438232]
  - uek-rpm: add _kernel_cc to kernel-uek.spec (Tom Saeger)  [Orabug: 27438232]
  - uek-rpm: config: enable numa balancing on by default (Henry Willard)  [Orabug: 27464647]
  - uek-rpm: Do not create kernel-uek-base rpm (Somasundaram Krishnasamy)  [Orabug: 27364632]
  - uek-rpm: enable CONFIG_PREEMPT_VOLUNTARY (Vincent Lim)  [Orabug: 27456269]
  - uek-rpm: Enable SoftRoCE related configuration in UEK5 (Victor Erminpour)  [Orabug: 27449119]
  - uek-rpm: Do not build kernel-uek-headers by default. (Somasundaram Krishnasamy)  [Orabug: 27363133]
  - ctf: enable in debugging kernels (Nick Alcock)  [Orabug: 27266231]
  - uek-rpm: build env files for aarch64 (Tom Saeger)  [Orabug: 27437589]
  - uek-rpm: enable debug builds on aarch64 (Tom Saeger)  [Orabug: 27433384]
  - uek-rpm: configs: Enabel Oracle HXGE and ASM driver (Allen Pais)  [Orabug: 27199116]
  - fm10k: Add driver to the kernel config for UEK4 (Allen Pais)  [Orabug: 27199008]
  - uek-rpm: config: Enable OVM API (Allen Pais)  [Orabug: 27199003]
  - uek-rpm: config: sxge/sxgevf: enable driver (Allen Pais)  [Orabug: 27199004]
  - uek-rpm: enable CONFIG_KSPLICE. (Allen Pais)  [Orabug: 27199009]
  - x86: add support for crashkernel=auto (Brian Maly)  [Orabug: 27234070]
  - modsign: Add key for module signing (Eric Snowberg)  [Orabug: 27199070]
  - uek-rpm: Add Mellanox drivers neeeded for Exadata to base_modules (Victor Erminpour)  [Orabug: 27300509]
  - uek-rpm: Enable Mellanox hardware kernel config options for UEK5. (Victor Erminpour)  [Orabug: 27300509]
  - uek-rpm: Disable CONFIG_DMA_CMA in UEK5 kernel config (Victor Erminpour)  [Orabug: 27201411]
  - uek-rpm: Enable CONFIG_IMA_DEFAULT_HASH=sha256 (Victor Erminpour)  [Orabug: 27186234]
  - uek-rpm: Enable CGROUP config in the UEK5 kernel (Victor Erminpour)  [Orabug: 25974804]
  - uek-rpm: Kernel config settings needed to support TCP-BBR (Victor Erminpour)  [Orabug: 27110608]
  - uek-rpm: enable and configure PMEM/DAX for UEK (Victor Erminpour)  [Orabug: 27201433]
  - uek-rpm: enable DTrace. (Nick Alcock)  [Orabug: 27124490]
  - uek-rpm: emit vmlinux.ctfa into -base package. (Nick Alcock)  [Orabug: 27124490]
  - uek-rpm: set CONFIG_DTRACE depending on the value of with_dtrace (Nick Alcock)  [Orabug: 27124490]
  - uek-rpm: Add signing options for aarch64 (Tom Saeger)  [Orabug: 27255646]
  - uek-rpm: add aarch64 config files (Allen Pais)  [Orabug: 27255646]
  - uek-rpm: add support for aarch64 (Allen Pais)  [Orabug: 27255646]
  - config: CONFIG_FRAME_POINTER_UNWINDER is CONFIG_UNWINDER_FRAME_POINTER in 4.14.8 (Kris Van Hees)  [Orabug: 27419674]
  - uek-rpm: create base config files for UEK5 (Victor Erminpour)  [Orabug: 26942304]
  - uek-rpm: Enable signed modules (Dhaval Giani)  [Orabug: 27162491]
  - uek-rpm: Downgrade linux-firmware version (Dhaval Giani)  [Orabug: 27162498]
  - uek-rpm: define base_sublevel as 14 after pull of mainline stable 4.14.14 (Chuck Anderson)  [Orabug: 26942304]
  - uek-rpm: Temporarily disable doc build (Chuck Anderson)  [Orabug: 26942304]
  - uek-rpm: Add build dependencies to avoid build errors (Somasundaram Krishnasamy)  [Orabug: 26942304]
  - uek-rpm: Add RPM build environment for UEK5 (Somasundaram Krishnasamy)  [Orabug: 26942304]
  - Linux 6.15 (Linus Torvalds)
  - Disable FOP_DONTCACHE for now due to bugs (Linus Torvalds)
  - mailmap: add Jarkko's employer email address (Linus Torvalds)
  - mailmap: add Jarkko's employer email address (Jarkko Sakkinen)
  - mm: fix copy_vma() error handling for hugetlb mappings (Ricardo Cañuelo Navarro)
  - memcg: always call cond_resched() after fn() (Breno Leitao)
  - mm/hugetlb: fix kernel NULL pointer dereference when replacing free hugetlb folios (Ge Yang)
  - mm: vmalloc: only zero-init on vrealloc shrink (Kees Cook)
  - mm: vmalloc: actually use the in-place vrealloc region (Kees Cook)
  - alloc_tag: allocate percpu counters for module tags dynamically (Suren Baghdasaryan)
  - module: release codetag section when module load fails (David Wang)
  - mm/cma: make detection of highmem_start more robust (Mike Rapoport (Microsoft))
  - MAINTAINERS: add mm memory policy section (Lorenzo Stoakes)
  - MAINTAINERS: add mm ksm section (Lorenzo Stoakes)
  - kasan: avoid sleepable page allocation from atomic context (Alexander Gordeev)
  - highmem: add folio_test_partial_kmap() (Matthew Wilcox (Oracle))
  - MAINTAINERS: add hung-task detector section (Lance Yang)
  - taskstats: fix struct taskstats breaks backward compatibility since version 15 (Wang Yaxin)
  - mm/truncate: fix out-of-bounds when doing a right-aligned split (Zhang Yi)
  - MAINTAINERS: add mm reclaim section (Lorenzo Stoakes)
  - MAINTAINERS: update page allocator section (Lorenzo Stoakes)
  - mm: fix VM_UFFD_MINOR == VM_SHADOW_STACK on USERFAULTFD=y && ARM64_GCS=y (Florent Revest)
  - mm: mmap: map MAP_STACK to VM_NOHUGEPAGE only if THP is enabled (Ignacio Moreno Gonzalez)
  - MAINTAINERS: add myself as vmalloc co-maintainer (Uladzislau Rezki (Sony))
  - mm/page_alloc.c: avoid infinite retries caused by cpuset race (Tianyang Zhang)
  - platform/x86/intel/pmc: Fix Arrow Lake U/H NPU PCI ID (Linus Torvalds)
  - Input: synaptics-rmi - fix crash with unsupported versions of F34 (Dmitry Torokhov)
  - Input: xpad - add more controllers (Vicki Pfau)
  - platform/x86/intel/pmc: Fix Arrow Lake U/H NPU PCI ID (Linus Torvalds)
  - spi: spi-fsl-dspi: Reset SR flags before sending a new message (Larisa Grigore)
  - spi: spi-fsl-dspi: Halt the module after a new message transfer (Bogdan-Gabriel Roman)
  - spi: spi-fsl-dspi: restrict register range for regmap access (Larisa Grigore)
  - spi: use container_of_cont() for to_spi_device() (Greg Kroah-Hartman)
  - platform/x86/intel/pmc: Fix Arrow Lake U/H NPU PCI ID (Linus Torvalds)
  - iommu: Skip PASID validation for devices without PASID capability (Tushar Dave)
  - platform/x86/intel/pmc: Fix Arrow Lake U/H NPU PCI ID (Linus Torvalds)
  - drm/xe/ptl: Update the PTL pci id table (Dave Airlie)
  - drm/xe/ptl: Update the PTL pci id table (Matt Atwood)
  - drm/xe: Use xe_mmio_read32() to read mtcfg register (Shuicheng Lin)
  - drm/xe/mocs: Check if all domains awake (Tejas Upadhyay)
  - Revert "drm/amd: Keep display off while going into S4" (Dave Airlie)
  - Revert "drm/amd: Keep display off while going into S4" (Mario Limonciello)
  - drm/edid: fixed the bug that hdr metadata was not reset (Dave Airlie)
  - drm/edid: fixed the bug that hdr metadata was not reset (feijuan.li)
  - platform/x86/intel/pmc: Fix Arrow Lake U/H NPU PCI ID (Linus Torvalds)
  - thermal: intel: x86_pkg_temp_thermal: Fix bogus trip temperature (Zhang Rui)
  - platform/x86/intel/pmc: Fix Arrow Lake U/H NPU PCI ID (Linus Torvalds)
  - ksmbd: use list_first_entry_or_null for opinfo_get_list() (Namjae Jeon)
  - ksmbd: fix rename failure (Namjae Jeon)
  - ksmbd: fix stream write failure (Namjae Jeon)
  - platform/x86/intel/pmc: Fix Arrow Lake U/H NPU PCI ID (Linus Torvalds)
  - arm64: defconfig: Ensure CRYPTO_CHACHA20_NEON is selected (Arnd Bergmann)
  - arm64: dts: marvell: uDPU: define pinctrl state for alarm LEDs (Gabor Juhos)
  - arm64: defconfig: Ensure CRYPTO_CHACHA20_NEON is selected (Arnd Bergmann)
  - Revert "arm64: dts: allwinner: h6: Use RSB for AXP805 PMIC connection" (Jernej Skrabec)
  - arm64: defconfig: Ensure CRYPTO_CHACHA20_NEON is selected (Fabio Estevam)
  - arm64: dts: amazon: Fix simple-bus node name schema warnings (Arnd Bergmann)
  - soc: samsung: usi: prevent wrong bits inversion during unconfiguring (Ivaylo Ivanov)
  - firmware: exynos-acpm: check saved RX before bailing out on empty RX queue (Tudor Ambarus)
  - platform/x86/intel/pmc: Fix Arrow Lake U/H NPU PCI ID (Linus Torvalds)
  - platform/x86/intel/pmc: Fix Arrow Lake U/H NPU PCI ID (Todd Brandt)
  - platform/x86: think-lmi: Fix attribute name usage for non-compliant items (Mark Pearson)
  - platform/x86: thinkpad_acpi: Ignore battery threshold change event notification (Mark Pearson)
  - platform/x86: dell-wmi-sysman: Avoid buffer overflow in current_password_store() (Vladimir Moskovkin)
  - platform/x86: fujitsu-laptop: Support Lifebook S2110 hotkeys (Valtteri Koskivuori)
  - octeontx2-af: Fix APR entry mapping based on APR_LMT_CFG (Linus Torvalds)
  - fs/buffer: optimize discard_buffer() (Christian Brauner)
  - fs/buffer: optimize discard_buffer() (Davidlohr Bueso)
  - fs/buffer: remove superfluous statements (Davidlohr Bueso)
  - fs/buffer: avoid redundant lookup in getblk slowpath (Davidlohr Bueso)
  - fs/buffer: use sleeping lookup in __getblk_slowpath() (Davidlohr Bueso)
  - octeontx2-af: Fix APR entry mapping based on APR_LMT_CFG (Linus Torvalds)
  - bcachefs: Check for casefolded dirents in non casefolded dirs (Kent Overstreet)
  - bcachefs: Fix bch2_dirent_create_snapshot() for casefolding (Kent Overstreet)
  - bcachefs: Fix casefold opt via xattr interface (Kent Overstreet)
  - bcachefs: mkwrite() now only dirties one page (Kent Overstreet)
  - bcachefs: fix extent_has_stripe_ptr() (Kent Overstreet)
  - bcachefs: Fix bch2_btree_path_traverse_cached() when paths realloced (Kent Overstreet)
  - octeontx2-af: Fix APR entry mapping based on APR_LMT_CFG (Linus Torvalds)
  - pmdomain: core: Fix error checking in genpd_dev_pm_attach_by_id() (Dan Carpenter)
  - pmdomain: renesas: rcar: Remove obsolete nullify checks (Geert Uytterhoeven)
  - octeontx2-af: Fix APR entry mapping based on APR_LMT_CFG (Linus Torvalds)
  - mmc: sdhci_am654: Add SDHCI_QUIRK2_SUPPRESS_V1P8_ENA quirk to am62 compatible (Judith Mendez)
  - mmc: sdhci-of-dwcmshc: add PD workaround on RK3576 (Nicolas Frattaroli)
  - octeontx2-af: Fix APR entry mapping based on APR_LMT_CFG (Linus Torvalds)
  - nvme: avoid creating multipath sysfs group under namespace path devices (Jens Axboe)
  - nvme: avoid creating multipath sysfs group under namespace path devices (Nilay Shroff)
  - loop: don't require ->write_iter for writable files in loop_configure (Christoph Hellwig)
  - octeontx2-af: Fix APR entry mapping based on APR_LMT_CFG (Linus Torvalds)
  - io_uring/net: only retry recv bundle for a full transfer (Jens Axboe)
  - io_uring: fix overflow resched cqe reordering (Pavel Begunkov)
  - io_uring/cmd: axe duplicate io_uring_cmd_import_fixed_vec() declaration (Caleb Sander Mateos)
  - octeontx2-af: Fix APR entry mapping based on APR_LMT_CFG (Linus Torvalds)
  - smb: client: Reset all search buffer pointers when releasing buffer (Wang Zhaolong)
  - smb: client: Fix use-after-free in cifs_fill_dirent (Wang Zhaolong)
  - octeontx2-af: Fix APR entry mapping based on APR_LMT_CFG (Linus Torvalds)
  - octeontx2-af: Fix APR entry mapping based on APR_LMT_CFG (Paolo Abeni)
  - can: slcan: allow reception of short error messages (Carlos Sanchez)
  - can: kvaser_pciefd: Continue parsing DMA buf after dropped RX (Marc Kleine-Budde)
  - can: kvaser_pciefd: Continue parsing DMA buf after dropped RX (Axel Forsman)
  - can: kvaser_pciefd: Fix echo_skb race (Axel Forsman)
  - can: kvaser_pciefd: Force IRQ edge in case of nested IRQ (Axel Forsman)
  - octeontx2-af: Fix APR entry mapping based on APR_LMT_CFG (Paolo Abeni)
  - octeontx2-af: Fix APR entry mapping based on APR_LMT_CFG (Geetha sowjanya)
  - octeontx2-af: Set LMT_ENA bit for APR table entries (Subbaraya Sundeep)
  - net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done (Paolo Abeni)
  - xfrm: Sanitize marks before insert (Paul Chaignon)
  - xfrm: ipcomp: fix truesize computation on receive (Sabrina Dubroca)
  - xfrm: Fix UDP GRO handling for some corner cases (Tobias Brunner)
  - espintcp: remove encap socket caching to avoid reference leak (Sabrina Dubroca)
  - espintcp: fix skb leaks (Sabrina Dubroca)
  - net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done (Wang Liang)
  - octeontx2-pf: Avoid adding dcbnl_ops for LBK and SDP vf (Suman Ghosh)
  - selftests/tc-testing: Add an HFSC qlen accounting test (Paolo Abeni)
  - selftests/tc-testing: Add an HFSC qlen accounting test (Cong Wang)
  - sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (Cong Wang)
  - idpf: fix idpf_vport_splitq_napi_poll() (Eric Dumazet)
  - net: hibmcge: fix wrong ndo.open() after reset fail issue. (Jakub Kicinski)
  - net: hibmcge: fix wrong ndo.open() after reset fail issue. (Jijie Shao)
  - net: hibmcge: fix incorrect statistics update issue (Jijie Shao)
  - xsk: Bring back busy polling support in XDP_COPY (Samiullah Khawaja)
  - net: lan743x: Restore SGMII CTRL register on resume (Thangaraj Samynathan)
  - bnxt_en: Fix netdev locking in ULP IRQ functions (Michael Chan)
  - MAINTAINERS: Drop myself to reviewer for ravb driver (Paul Barker)
  - net: dwmac-sun8i: Use parsed internal PHY address instead of 1 (Paul Kocialkowski)
  - net: ethernet: ti: am65-cpsw: Lower random mac address error print to info (Jakub Kicinski)
  - idpf: fix null-ptr-deref in idpf_features_check (Pavan Kumar Linga)
  - ice: Fix LACP bonds without SRIOV environment (Dave Ertman)
  - ice: fix vf->num_mac count with port representors (Jacob Keller)
  - net: ethernet: ti: am65-cpsw: Lower random mac address error print to info (Nishanth Menon)
  - can: bcm: add missing rcu read protection for procfs content (Paolo Abeni)
  - can: bcm: add missing rcu read protection for procfs content (Marc Kleine-Budde)
  - can: bcm: add missing rcu read protection for procfs content (Oliver Hartkopp)
  - can: bcm: add locking for bcm_op runtime updates (Oliver Hartkopp)
  - dt-bindings: can: microchip,mcp2510: Fix $id path (Rob Herring (Arm))
  - llc: fix data loss when reading from a socket in llc_ui_recvmsg() (Ilia Gavrilov)
  - mr: consolidate the ipmr_can_free_table() checks. (Paolo Abeni)
  - net: airoha: Fix page recycling in airoha_qdma_rx_process() (Lorenzo Bianconi)
  - vmxnet3: update MTU after device quiesce (Ronak Doshi)
  - bridge: netfilter: Fix forwarding of fragmented packets (Ido Schimmel)
  - net: dsa: microchip: linearize skb for tail-tagging switches (Jakob Unterwurzacher)
  - team: grab team lock during team_change_rx_flags (Stanislav Fomichev)
  - ptp: ocp: Limit signal/freq counts in summary output functions (Sagi Maimon)
  - Bluetooth: btusb: use skb_pull to avoid unsafe access in QCA dump handling (Jakub Kicinski)
  - Bluetooth: btusb: use skb_pull to avoid unsafe access in QCA dump handling (En-Wei Wu)
  - Bluetooth: L2CAP: Fix not checking l2cap_chan security level (Luiz Augusto von Dentz)
  - pinctrl: qcom: switch to devm_register_sys_off_handler() (Linus Torvalds)
  - pinctrl: qcom: switch to devm_register_sys_off_handler() (Dmitry Baryshkov)
  - gpiolib: don't crash on enabling GPIO HOG pins (Dmitry Baryshkov)
  - orangefs: adjust counting code to recover from 665575cf (Linus Torvalds)
  - ALSA: hda/realtek - Add new HP ZBook laptop with micmute led fixup (Chris Chiu)
  - ALSA: hda/realtek: Add support for HP Agusta using CS35L41 HDA (Stefan Binding)
  - ALSA: hda/realtek: Add quirk for Lenovo Yoga Pro 7 14ASP10 (Ed Burcher)
  - ALSA: hda/realtek - restore auto-mute mode for Dell Chrome platform (Takashi Iwai)
  - ASoC: SOF: Intel: hda: Fix UAF when reloading module (Tavian Barnes)
  - ASoc: SOF: topology: connect DAI to a single DAI link (Kai Vehmanen)
  - ASoC: SOF: Intel: hda-bus: Use PIO mode on ACE2+ platforms (Peter Ujfalusi)
  - ASoC: SOF: ipc4-pcm: Delay reporting is only supported for playback direction (Peter Ujfalusi)
  - ASoC: SOF: ipc4-control: Use SOF_CTRL_CMD_BINARY as numid for bytes_ext (Peter Ujfalusi)
  - ASoC: mediatek: mt8188-mt6359: Depend on MT6359_ACCDET set or disabled (Nícolas F. R. A. Prado)
  - ASoC: mediatek: mt8188-mt6359: select CONFIG_SND_SOC_MT6359_ACCDET (Arnd Bergmann)
  - ALSA: hda/realtek - restore auto-mute mode for Dell Chrome platform (Kailang Yang)
  - ALSA: pcm: Fix race of buffer access at PCM OSS layer (Takashi Iwai)
  - orangefs: adjust counting code to recover from 665575cf (Linus Torvalds)
  - clk: sunxi-ng: d1: Add missing divider for MMC mod clocks (Stephen Boyd)
  - clk: sunxi-ng: d1: Add missing divider for MMC mod clocks (Andre Przywara)
  - clk: sunxi-ng: fix order of arguments in clock macro (Andre Przywara)
  - clk: s2mps11: initialise clk_hw_onecell_data::num before accessing ::hws[] in probe() (André Draszik)
  - clk: rockchip: rk3576: define clk_otp_phy_g (Stephen Boyd)
  - clk: rockchip: rk3576: define clk_otp_phy_g (Heiko Stuebner)
  - orangefs: adjust counting code to recover from 665575cf (Linus Torvalds)
  - remoteproc: qcom_wcnss: Fix on platforms without fallback regulators (Matti Lehtimäki)
  - orangefs: adjust counting code to recover from 665575cf (Linus Torvalds)
  - crypto: algif_hash - fix double free in hash_accept (Ivan Pravdin)
  - padata: do not leak refcount in reorder_work (Dominik Grzegorzek)
  - orangefs: adjust counting code to recover from 665575cf (Linus Torvalds)
  - orangefs: adjust counting code to recover from 665575cf (Mike Marshall)
  - Linux 6.15-rc7 (Linus Torvalds)


