# changelog

author: Jack Vogel <jack.vogel@oracle.com> [5.15.0-2.52.2.el9uek]
changelog:
  - PCI: pciehp: Add quirk to handle spurious DLLSC on a x4x4 SSD (Thomas Tai)  [Orabug: 34358322]  
  - net/mlx5: E-Switch, change VFs default admin state to auto in switchdev (Maor Dickman)  [Orabug: 34477072]  
  - xen/manage: Use orderly_reboot() to reboot (Ross Lagerwall)  [Orabug: 34480751]  
  - net_sched: cls_route: remove from list when handle is 0 (Thadeu Lima de Souza Cascardo)  [Orabug: 34484536]  {CVE-2022-2588}


author: Jack Vogel <jack.vogel@oracle.com> [5.15.0-2.52.3.el9uek]
changelog:
  - posix-cpu-timers: Cleanup CPU timers before freeing them during exec (Thadeu Lima de Souza Cascardo)  [Orabug: 34495548]  {CVE-2022-2585} 
  - fix race between exit_itimers() and /proc/pid/timers (Oleg Nesterov)  [Orabug: 34495548]  
  - rds: ib: Add preemption control when using per-cpu variables (Håkon Bugge)  [Orabug: 34505120]  
  - ocfs2: fix handle refcount leak in two exception handling paths (Chenyuan Mi)  [Orabug: 34436530]  
  - netfilter: nf_tables: do not allow RULE_ID to refer to another chain (Thadeu Lima de Souza Cascardo)  [Orabug: 34495566]  {CVE-2022-2586} 
  - netfilter: nf_tables: do not allow CHAIN_ID to refer to another table (Thadeu Lima de Souza Cascardo)  [Orabug: 34495566]  {CVE-2022-2586} 
  - netfilter: nf_tables: do not allow SET_ID to refer to another table (Thadeu Lima de Souza Cascardo)  [Orabug: 34495566]  {CVE-2022-2586} 
  - rds: copy_from_user only once per rds_sendmsg system call (Hans Westgaard Ry)  [Orabug: 34510687]  {CVE-2022-21385} 
  - kernfs: Replace global kernfs_open_file_mutex with hashed mutexes. (Imran Khan)  [Orabug: 34476940]  
  - kernfs: Introduce interface to access global kernfs_open_file_mutex. (Imran Khan)  [Orabug: 34476940]  
  - kernfs: make ->attr.open RCU protected. (Imran Khan)  [Orabug: 34476940]  
  - kernfs: Rename kernfs_put_open_node to kernfs_unlink_open_file. (Imran Khan)  [Orabug: 34476940]  
  - kernfs: Remove reference counting for kernfs_open_node. (Imran Khan)  [Orabug: 34476940]  
  - Revert "net/rds: Connect TCP backends deterministically" (Gerd Rausch)  [Orabug: 34476561]  
  - rds/ib: handle posted ACK during connection shutdown (Rohit Nair)  [Orabug: 34465808]  
  - rds/ib: reap tx completions during connection shutdown (Rohit Nair)  [Orabug: 34465808]  
  - uek-rpm: Set CONFIG_VSOCKETS=m and CONFIG_VSOCKETS_DIAG=m (Victor Erminpour)  [Orabug: 34461322]  
  - scsi: target: Fix WRITE_SAME No Data Buffer crash (Mike Christie)  [Orabug: 34419970]  {CVE-2022-21546} 
  - rds/rdma: destroy CQs during user initiated rds connection resets (Rohit Nair)  [Orabug: 34414238]


author: Jack Vogel <jack.vogel@oracle.com> [5.15.0-3.52.1.el9uek]
changelog:
  - rds: ib: Fix lfstack to acquire visibility to list head (Håkon Bugge)  [Orabug: 34522536]  
  - locking/atomic: Make test_and_*_bit() ordered on failure (Hector Martin)  [Orabug: 34520178]  
  - intel_idle: make SPR C1 and C1E be independent (Artem Bityutskiy)  [Orabug: 34510397]  
  - intel_idle: Add AlderLake support (Zhang Rui)  [Orabug: 34510397]  
  - intel_idle: Fix SPR C6 optimization (Artem Bityutskiy)  [Orabug: 34510397]  
  - intel_idle: Fix the 'preferred_cstates' module parameter (Artem Bityutskiy)  [Orabug: 34510397]  
  - cpuidle: intel_idle: Drop redundant backslash at line end (Rafael J. Wysocki)  [Orabug: 34510397]  
  - mlx4: Subscribe to PXM notifier (Konrad Rzeszutek Wilk)  [Orabug: 27206634] [Orabug: 34509446]  
  - xen/pci: Add PXM node notifier for PXM (NUMA) changes. (Konrad Rzeszutek Wilk)  [Orabug: 27206634] [Orabug: 34509446]  
  - xen/pcifront: Walk the PCI bus after XenStore notification (Konrad Rzeszutek Wilk)  [Orabug: 27206634] [Orabug: 34509446]  
  - xen-pcifront/hvm: Slurp up "pxm" entry and set NUMA node on PCIe device. (V5) (Konrad Rzeszutek Wilk)  [Orabug: 34509446]  
  - scsi: core: Fix warning in scsi_alloc_sgtables() (Jason Yan)  [Orabug: 33857787]


author: Jack Vogel <jack.vogel@oracle.com> [5.15.0-3.60.2.el9uek]
changelog:
  - LTS version: v5.15.60 (Jack Vogel)   
  - x86/speculation: Add LFENCE to RSB fill sequence (Pawan Gupta)   
  - x86/speculation: Add RSB VM Exit protections (Daniel Sneddon)   
  - macintosh/adb: fix oob read in do_adb_query() function (Ning Qiang)   
  - Bluetooth: btusb: Add Realtek RTL8852C support ID 0x13D3:0x3586 (Hilda Wu)   
  - Bluetooth: btusb: Add Realtek RTL8852C support ID 0x13D3:0x3587 (Hilda Wu)   
  - Bluetooth: btusb: Add Realtek RTL8852C support ID 0x0CB8:0xC558 (Hilda Wu)   
  - Bluetooth: btusb: Add Realtek RTL8852C support ID 0x04C5:0x1675 (Hilda Wu)   
  - Bluetooth: btusb: Add Realtek RTL8852C support ID 0x04CA:0x4007 (Hilda Wu)   
  - Bluetooth: btusb: Add support of IMC Networks PID 0x3568 (Aaron Ma)   
  - dt-bindings: bluetooth: broadcom: Add BCM4349B1 DT binding (Ahmad Fatoum)   
  - Bluetooth: hci_bcm: Add DT compatible for CYW55572 (Hakan Jansson)   
  - Bluetooth: hci_bcm: Add BCM4349B1 variant (Ahmad Fatoum)   
  - btrfs: zoned: fix critical section of relocation inode writeback (Naohiro Aota)   
  - btrfs: zoned: prevent allocation from previous data relocation BG (Naohiro Aota)   
  - arm64: set UXN on swapper page tables (Peter Collingbourne)   
  - KVM: x86/svm: add __GFP_ACCOUNT to __sev_dbg_{en,de}crypt_user() (Mingwei Zhang)   
  - selftests: KVM: Handle compiler optimizations in ucall (Raghavendra Rao Ananta)   
  - tools/kvm_stat: fix display of error when multiple processes are found (Dmitry Klochkov)   
  - KVM: selftests: Make hyperv_clock selftest more stable (Vitaly Kuznetsov)   
  - KVM: x86: do not set st->preempted when going back to user space (Paolo Bonzini)   
  - KVM: x86: do not report a vCPU as preempted outside instruction boundaries (Paolo Bonzini) [Orabug: 34571000] {CVE-2022-39189}
  - crypto: arm64/poly1305 - fix a read out-of-bound (GUO Zihua)   
  - ACPI: APEI: Better fix to avoid spamming the console with old error logs (Tony Luck)   
  - ACPI: video: Shortening quirk list by identifying Clevo by board_name only (Werner Sembach)   
  - ACPI: video: Force backlight native for some TongFang devices (Werner Sembach)   
  - tools/vm/slabinfo: Handle files in debugfs (Stéphane Graber)   
  - block: fix default IO priority handling again (Jan Kara)   
  - selftests/bpf: Check dst_port only on the client socket (Jakub Sitnicki)   
  - selftests/bpf: Extend verifier and bpf_sock tests for dst_port loads (Jakub Sitnicki)   
  - x86/speculation: Make all RETbleed mitigations 64-bit only (Ben Hutchings)   
  - LTS version: v5.15.59 (Jack Vogel)   
  - x86/bugs: Do not enable IBPB at firmware entry when IBPB is not available (Thadeu Lima de Souza Cascardo)   
  - docs/kernel-parameters: Update descriptions for "mitigations=" param with retbleed (Eiichi Tsukata)   
  - EDAC/ghes: Set the DIMM label unconditionally (Toshi Kani)   
  - ARM: 9216/1: Fix MAX_DMA_ADDRESS overflow (Florian Fainelli)   
  - page_alloc: fix invalid watermark check on a negative value (Jaewon Kim)   
  - mm/hmm: fault non-owner device private entries (Ralph Campbell)   
  - ARM: crypto: comment out gcc warning that breaks clang builds (Greg Kroah-Hartman)   
  - sctp: leave the err path free in sctp_stream_init to sctp_stream_free (Xin Long)   
  - sfc: disable softirqs for ptp TX (Alejandro Lucero)   
  - perf symbol: Correct address for bss symbols (Leo Yan)   
  - virtio-net: fix the race between refill work and close (Jason Wang)   
  - netfilter: nf_queue: do not allow packet truncation below transport header offset (Florian Westphal)   
  - octeontx2-pf: cn10k: Fix egress ratelimit configuration (Sunil Goutham)   
  - sctp: fix sleep in atomic context bug in timer handlers (Duoming Zhou)   
  - i40e: Fix interface init with MSI interrupts (no MSI-X) (Michal Maloszewski)   
  - ipv4: Fix data-races around sysctl_fib_notify_on_flag_change. (Kuniyuki Iwashima)   
  - tcp: Fix data-races around sysctl_tcp_reflect_tos. (Kuniyuki Iwashima)   
  - tcp: Fix a data-race around sysctl_tcp_comp_sack_nr. (Kuniyuki Iwashima)   
  - tcp: Fix a data-race around sysctl_tcp_comp_sack_slack_ns. (Kuniyuki Iwashima)   
  - tcp: Fix a data-race around sysctl_tcp_comp_sack_delay_ns. (Kuniyuki Iwashima)   
  - net: Fix data-races around sysctl_[rw]mem(_offset)?. (Kuniyuki Iwashima)   
  - tcp: Fix data-races around sk_pacing_rate. (Kuniyuki Iwashima)   
  - net: mld: fix reference count leak in mld_{query | report}_work() (Taehee Yoo)   
  - net: macsec: fix potential resource leak in macsec_add_rxsa() and macsec_add_txsa() (Jianglei Nie)   
  - macsec: always read MACSEC_SA_ATTR_PN as a u64 (Sabrina Dubroca)   
  - macsec: limit replay window size with XPN (Sabrina Dubroca)   
  - macsec: fix error message in macsec_add_rxsa and _txsa (Sabrina Dubroca)   
  - macsec: fix NULL deref in macsec_add_rxsa (Sabrina Dubroca)   
  - Documentation: fix sctp_wmem in ip-sysctl.rst (Xin Long)   
  - tcp: Fix a data-race around sysctl_tcp_invalid_ratelimit. (Kuniyuki Iwashima)   
  - tcp: Fix a data-race around sysctl_tcp_autocorking. (Kuniyuki Iwashima)   
  - tcp: Fix a data-race around sysctl_tcp_min_rtt_wlen. (Kuniyuki Iwashima)   
  - tcp: Fix a data-race around sysctl_tcp_min_tso_segs. (Kuniyuki Iwashima)   
  - net: sungem_phy: Add of_node_put() for reference returned by of_get_parent() (Liang He)   
  - net: pcs: xpcs: propagate xpcs_read error to xpcs_get_state_c37_sgmii (Vladimir Oltean)   
  - igmp: Fix data-races around sysctl_igmp_qrv. (Kuniyuki Iwashima)   
  - net/tls: Remove the context from the list in tls_device_down (Maxim Mikityanskiy)   
  - ipv6/addrconf: fix a null-ptr-deref bug for ip6_ptr (Ziyang Xuan)   
  - net: ping6: Fix memleak in ipv6_renew_options(). (Kuniyuki Iwashima)   
  - scsi: mpt3sas: Stop fw fault watchdog work item during system shutdown (David Jeffery)   
  - tcp: Fix a data-race around sysctl_tcp_challenge_ack_limit. (Kuniyuki Iwashima)   
  - tcp: Fix a data-race around sysctl_tcp_limit_output_bytes. (Kuniyuki Iwashima)   
  - tcp: Fix data-races around sysctl_tcp_moderate_rcvbuf. (Kuniyuki Iwashima)   
  - octeontx2-pf: Fix UDP/TCP src and dst port tc filters (Subbaraya Sundeep)   
  - Revert "tcp: change pingpong threshold to 3" (Wei Wang)   
  - scsi: ufs: host: Hold reference returned by of_parse_phandle() (Liang He)   
  - ice: do not setup vlan for loopback VSI (Maciej Fijalkowski)   
  - ice: check (DD | EOF) bits on Rx descriptor rather than (EOP | RS) (Maciej Fijalkowski)   
  - tcp: Fix data-races around sysctl_tcp_no_ssthresh_metrics_save. (Kuniyuki Iwashima)   
  - tcp: Fix a data-race around sysctl_tcp_nometrics_save. (Kuniyuki Iwashima)   
  - tcp: Fix a data-race around sysctl_tcp_frto. (Kuniyuki Iwashima)   
  - tcp: Fix a data-race around sysctl_tcp_adv_win_scale. (Kuniyuki Iwashima)   
  - tcp: Fix a data-race around sysctl_tcp_app_win. (Kuniyuki Iwashima)   
  - tcp: Fix data-races around sysctl_tcp_dsack. (Kuniyuki Iwashima)   
  - watch_queue: Fix missing locking in add_watch_to_object() (Linus Torvalds)   
  - watch_queue: Fix missing rcu annotation (David Howells)   
  - drm/simpledrm: Fix return type of simpledrm_simple_display_pipe_mode_valid() (Nathan Chancellor)   
  - nouveau/svm: Fix to migrate all requested pages (Alistair Popple)   
  - s390/archrandom: prevent CPACF trng invocations in interrupt context (Harald Freudenberger)   
  - asm-generic: remove a broken and needless ifdef conditional (Lukas Bulwahn)   
  - hugetlb: fix memoryleak in hugetlb_mcopy_atomic_pte (Miaohe Lin)   
  - mm: fix page leak with multiple threads mapping the same page (Josef Bacik)   
  - secretmem: fix unhandled fault in truncate (Mike Rapoport)   
  - fs: sendfile handles O_NONBLOCK of out_fd (Andrei Vagin)   
  - ntfs: fix use-after-free in ntfs_ucsncmp() (ChenXiaoSong)   
  - Bluetooth: L2CAP: Fix use-after-free caused by l2cap_chan_put (Luiz Augusto von Dentz)   
  - LTS version: v5.15.58 (Jack Vogel)   
  - drm/amd/display: Fix wrong format specifier in amdgpu_dm.c (Hayden Goodfellow)   
  - x86/entry_32: Fix segment exceptions (Peter Zijlstra)   
  - drm/amdgpu: Off by one in dm_dmub_outbox1_low_irq() (Dan Carpenter)   
  - x86: drop bogus "cc" clobber from __try_cmpxchg_user_asm() (Jan Beulich)   
  - KVM: x86: fix typo in __try_cmpxchg_user causing non-atomicness (Maxim Levitsky)   
  - x86/extable: Prefer local labels in .set directives (Nick Desaulniers)   
  - drm/amd/display: invalid parameter check in dmub_hpd_callback (José Expósito)   
  - drm/amd/display: Don't lock connection_mutex for DMUB HPD (Nicholas Kazlauskas)   
  - watch-queue: remove spurious double semicolon (Linus Torvalds)   
  - net: usb: ax88179_178a needs FLAG_SEND_ZLP (Jose Alonso)   
  - tty: use new tty_insert_flip_string_and_push_buffer() in pty_write() (Jiri Slaby)   
  - tty: extract tty_flip_buffer_commit() from tty_flip_buffer_push() (Jiri Slaby)   
  - tty: drop tty_schedule_flip() (Jiri Slaby)   
  - tty: the rest, stop using tty_schedule_flip() (Jiri Slaby)   
  - tty: drivers/tty/, stop using tty_schedule_flip() (Jiri Slaby)   
  - watchqueue: make sure to serialize 'wqueue->defunct' properly (Linus Torvalds)   
  - drm/amd/display: Fix surface optimization regression on Carrizo (Nicholas Kazlauskas)   
  - drm/amd/display: Optimize bandwidth on following fast update (Nicholas Kazlauskas)   
  - drm/amd/display: Reset DMCUB before HW init (Nicholas Kazlauskas)   
  - exfat: use updated exfat_chain directly during renaming (Sungjong Seo)   
  - Bluetooth: Fix bt_skb_sendmmsg not allocating partial chunks (Luiz Augusto von Dentz)   
  - Bluetooth: SCO: Fix sco_send_frame returning skb->len (Luiz Augusto von Dentz)   
  - Bluetooth: Fix passing NULL to PTR_ERR (Luiz Augusto von Dentz)   
  - Bluetooth: RFCOMM: Replace use of memcpy_from_msg with bt_skb_sendmmsg (Luiz Augusto von Dentz)   
  - Bluetooth: SCO: Replace use of memcpy_from_msg with bt_skb_sendmsg (Luiz Augusto von Dentz)   
  - Bluetooth: Add bt_skb_sendmmsg helper (Luiz Augusto von Dentz)   
  - Bluetooth: Add bt_skb_sendmsg helper (Luiz Augusto von Dentz)   
  - um: virtio_uml: Fix broken device handling in time-travel (Johannes Berg)   
  - um: virtio_uml: Allow probing from devicetree (Vincent Whitchurch)   
  - tracing: Fix return value of trace_pid_write() (Wonhyuk Yang)   
  - tracing: Place trace_pid_list logic into abstract functions (Steven Rostedt (VMware))   
  - tracing: Have event format check not flag %p* on __get_dynamic_array() (Steven Rostedt (Google))   
  - exfat: fix referencing wrong parent directory information after renaming (Yuezhang Mo)   
  - crypto: qat - re-enable registration of algorithms (Giovanni Cabiddu)   
  - crypto: qat - add param check for DH (Giovanni Cabiddu)   
  - crypto: qat - add param check for RSA (Giovanni Cabiddu)   
  - crypto: qat - remove dma_free_coherent() for DH (Giovanni Cabiddu)   
  - crypto: qat - remove dma_free_coherent() for RSA (Giovanni Cabiddu)   
  - crypto: qat - fix memory leak in RSA (Giovanni Cabiddu)   
  - crypto: qat - add backlog mechanism (Giovanni Cabiddu)   
  - crypto: qat - refactor submission logic (Giovanni Cabiddu)   
  - crypto: qat - use pre-allocated buffers in datapath (Giovanni Cabiddu)   
  - crypto: qat - set to zero DH parameters before free (Giovanni Cabiddu)   
  - iwlwifi: fw: uefi: add missing include guards (Johannes Berg)   
  - mt76: fix use-after-free by removing a non-RCU wcid pointer (Felix Fietkau)   
  - xhci: Set HCD flag to defer primary roothub registration (Kishon Vijay Abraham I)   
  - xhci: dbc: Rename xhci_dbc_init and xhci_dbc_exit (Mathias Nyman)   
  - xhci: dbc: create and remove dbc structure in dbgtty driver. (Mathias Nyman)   
  - xhci: dbc: refactor xhci_dbc_init() (Mathias Nyman)   
  - KVM: x86: Use __try_cmpxchg_user() to emulate atomic accesses (Sean Christopherson)   
  - x86/extable: Extend extable functionality (Peter Zijlstra)   
  - x86/entry_32: Remove .fixup usage (Peter Zijlstra)   
  - bitfield.h: Fix "type of reg too small for mask" test (Peter Zijlstra)   
  - x86/extable: Provide EX_TYPE_DEFAULT_MCE_SAFE and EX_TYPE_FAULT_MCE_SAFE (Thomas Gleixner)   
  - x86/extable: Rework the exception table mechanics (Thomas Gleixner)   
  - x86/mce: Deduplicate exception handling (Thomas Gleixner)   
  - x86/extable: Get rid of redundant macros (Thomas Gleixner)   
  - x86/extable: Tidy up redundant handler functions (Thomas Gleixner)   
  - x86/uaccess: Implement macros for CMPXCHG on user addresses (Peter Zijlstra)   
  - dlm: fix pending remove if msg allocation fails (Alexander Aring)   
  - sched/deadline: Fix BUG_ON condition for deboosted tasks (Juri Lelli)   
  - bpf: Make sure mac_header was set before using it (Eric Dumazet)   
  - mm/mempolicy: fix uninit-value in mpol_rebind_policy() (Wang Cheng)   
  - KVM: Don't null dereference ops->destroy (Alexey Kardashevskiy)   
  - spi: bcm2835: bcm2835_spi_handle_err(): fix NULL pointer deref for non DMA transfers (Marc Kleine-Budde)   
  - KVM: selftests: Fix target thread to be migrated in rseq_test (Gavin Shan)   
  - gpio: gpio-xilinx: Fix integer overflow (Srinivas Neeli)   
  - tcp: Fix data-races around sysctl_tcp_max_reordering. (Kuniyuki Iwashima)   
  - tcp: Fix a data-race around sysctl_tcp_abort_on_overflow. (Kuniyuki Iwashima)   
  - tcp: Fix a data-race around sysctl_tcp_rfc1337. (Kuniyuki Iwashima)   
  - tcp: Fix a data-race around sysctl_tcp_stdurg. (Kuniyuki Iwashima)   
  - tcp: Fix a data-race around sysctl_tcp_retrans_collapse. (Kuniyuki Iwashima)   
  - tcp: Fix data-races around sysctl_tcp_slow_start_after_idle. (Kuniyuki Iwashima)   
  - tcp: Fix a data-race around sysctl_tcp_thin_linear_timeouts. (Kuniyuki Iwashima)   
  - tcp: Fix data-races around sysctl_tcp_recovery. (Kuniyuki Iwashima)   
  - tcp: Fix a data-race around sysctl_tcp_early_retrans. (Kuniyuki Iwashima)   
  - tcp: Fix data-races around sysctl knobs related to SYN option. (Kuniyuki Iwashima)   
  - udp: Fix a data-race around sysctl_udp_l3mdev_accept. (Kuniyuki Iwashima)   
  - ip: Fix data-races around sysctl_ip_prot_sock. (Kuniyuki Iwashima)   
  - ipv4: Fix data-races around sysctl_fib_multipath_hash_fields. (Kuniyuki Iwashima)   
  - ipv4: Fix data-races around sysctl_fib_multipath_hash_policy. (Kuniyuki Iwashima)   
  - ipv4: Fix a data-race around sysctl_fib_multipath_use_neigh. (Kuniyuki Iwashima)   
  - drm/imx/dcss: Add missing of_node_put() in fail path (Liang He)   
  - net: dsa: vitesse-vsc73xx: silent spi_device_id warnings (Oleksij Rempel)   
  - net: dsa: sja1105: silent spi_device_id warnings (Oleksij Rempel)   
  - be2net: Fix buffer overflow in be_get_module_eeprom (Hristo Venev)   
  - gpio: pca953x: use the correct register address when regcache sync during init (Haibo Chen)   
  - gpio: pca953x: use the correct range when do regmap sync (Haibo Chen)   
  - gpio: pca953x: only use single read/write for No AI mode (Haibo Chen)   
  - net: stmmac: remove redunctant disable xPCS EEE call (Wong Vee Khee)   
  - ixgbe: Add locking to prevent panic when setting sriov_numvfs to zero (Piotr Skajewski)   
  - i40e: Fix erroneous adapter reinitialization during recovery process (Dawid Lukwinski)   
  - pinctrl: armada-37xx: use raw spinlocks for regmap to avoid invalid wait context (Vladimir Oltean)   
  - pinctrl: armada-37xx: Convert to use dev_err_probe() (Andy Shevchenko)   
  - pinctrl: armada-37xx: Make use of the devm_platform_ioremap_resource() (Andy Shevchenko)   
  - pinctrl: armada-37xx: Use temporary variable for struct device (Andy Shevchenko)   
  - iavf: Fix handling of dummy receive descriptors (Przemyslaw Patynowski)   
  - tcp: Fix data-races around sysctl_tcp_fastopen_blackhole_timeout. (Kuniyuki Iwashima)   
  - tcp: Fix data-races around sysctl_tcp_fastopen. (Kuniyuki Iwashima)   
  - tcp: Fix data-races around sysctl_max_syn_backlog. (Kuniyuki Iwashima)   
  - tcp: Fix a data-race around sysctl_tcp_tw_reuse. (Kuniyuki Iwashima)   
  - tcp: Fix a data-race around sysctl_tcp_notsent_lowat. (Kuniyuki Iwashima)   
  - tcp: Fix data-races around some timeout sysctl knobs. (Kuniyuki Iwashima)   
  - tcp: Fix data-races around sysctl_tcp_reordering. (Kuniyuki Iwashima)   
  - tcp: Fix data-races around sysctl_tcp_migrate_req. (Kuniyuki Iwashima)   
  - tcp: Fix data-races around sysctl_tcp_syncookies. (Kuniyuki Iwashima)   
  - tcp: Fix data-races around sysctl_tcp_syn(ack)?_retries. (Kuniyuki Iwashima)   
  - tcp: Fix data-races around keepalive sysctl knobs. (Kuniyuki Iwashima)   
  - igmp: Fix data-races around sysctl_igmp_max_msf. (Kuniyuki Iwashima)   
  - igmp: Fix a data-race around sysctl_igmp_max_memberships. (Kuniyuki Iwashima)   
  - igmp: Fix data-races around sysctl_igmp_llm_reports. (Kuniyuki Iwashima)   
  - net/tls: Fix race in TLS device down flow (Tariq Toukan)   
  - net: stmmac: fix dma queue left shift overflow issue (Junxiao Chang)   
  - perf tests: Fix Convert perf time to TSC test for hybrid (Adrian Hunter)   
  - i2c: cadence: Change large transfer count reset logic to be unconditional (Robert Hancock)   
  - i2c: mlxcpld: Fix register setting for 400KHz frequency (Vadim Pasternak)   
  - net: ipv4: use kfree_skb_reason() in ip_rcv_finish_core() (Menglong Dong)   
  - net: ipv4: use kfree_skb_reason() in ip_rcv_core() (Menglong Dong)   
  - net: netfilter: use kfree_drop_reason() for NF_DROP (Menglong Dong)   
  - net: skb_drop_reason: add document for drop reasons (Menglong Dong)   
  - net: socket: rename SKB_DROP_REASON_SOCKET_FILTER (Menglong Dong)   
  - net: skb: use kfree_skb_reason() in __udp4_lib_rcv() (Menglong Dong)   
  - net: skb: use kfree_skb_reason() in tcp_v4_rcv() (Menglong Dong)   
  - net: skb: introduce kfree_skb_reason() (Menglong Dong)   
  - net: dsa: microchip: ksz_common: Fix refcount leak bug (Liang He)   
  - mtd: rawnand: gpmi: Set WAIT_FOR_READY timeout based on program/erase times (Sascha Hauer)   
  - mtd: rawnand: gpmi: validate controller clock rate (Dario Binacchi)   
  - net: stmmac: fix unbalanced ptp clock issue in suspend/resume flow (Biao Huang)   
  - net: stmmac: fix pm runtime issue in stmmac_dvr_remove() (Biao Huang)   
  - tcp: Fix a data-race around sysctl_tcp_probe_interval. (Kuniyuki Iwashima)   
  - tcp: Fix a data-race around sysctl_tcp_probe_threshold. (Kuniyuki Iwashima)   
  - tcp: Fix a data-race around sysctl_tcp_mtu_probe_floor. (Kuniyuki Iwashima)   
  - tcp: Fix data-races around sysctl_tcp_min_snd_mss. (Kuniyuki Iwashima)   
  - tcp: Fix data-races around sysctl_tcp_base_mss. (Kuniyuki Iwashima)   
  - tcp: Fix data-races around sysctl_tcp_mtu_probing. (Kuniyuki Iwashima)   
  - tcp: Fix data-races around sysctl_tcp_l3mdev_accept. (Kuniyuki Iwashima)   
  - tcp: sk->sk_bound_dev_if once in inet_request_bound_dev_if() (Eric Dumazet)   
  - tcp/dccp: Fix a data-race around sysctl_tcp_fwmark_accept. (Kuniyuki Iwashima)   
  - ip: Fix a data-race around sysctl_fwmark_reflect. (Kuniyuki Iwashima)   
  - ip: Fix a data-race around sysctl_ip_autobind_reuse. (Kuniyuki Iwashima)   
  - ip: Fix data-races around sysctl_ip_nonlocal_bind. (Kuniyuki Iwashima)   
  - ip: Fix data-races around sysctl_ip_fwd_update_priority. (Kuniyuki Iwashima)   
  - ip: Fix data-races around sysctl_ip_fwd_use_pmtu. (Kuniyuki Iwashima)   
  - ip: Fix data-races around sysctl_ip_no_pmtu_disc. (Kuniyuki Iwashima)   
  - igc: Reinstate IGC_REMOVED logic and implement it properly (Lennert Buytenhek)   
  - Revert "e1000e: Fix possible HW unit hang after an s0ix exit" (Sasha Neftin)   
  - e1000e: Enable GPT clock before sending message to CSME (Sasha Neftin)   
  - nvme: fix block device naming collision (Israel Rukshin)   
  - nvme: check for duplicate identifiers earlier (Christoph Hellwig)   
  - scsi: ufs: core: Drop loglevel of WriteBoost message (Bjorn Andersson)   
  - scsi: megaraid: Clear READ queue map's nr_queues (Ming Lei)   
  - drm/amd/display: Ignore First MST Sideband Message Return Error (Fangzhi Zuo)   
  - drm/amdgpu/display: add quirk handling for stutter mode (Alex Deucher)   
  - drm/amd/display: Fork thread to offload work of hpd_rx_irq (Wayne Lin)   
  - drm/amd/display: Add option to defer works of hpd_rx_irq (Wayne Lin)   
  - drm/amd/display: Support for DMUB HPD interrupt handling (Jude Shih)   
  - tcp: Fix data-races around sysctl_tcp_ecn. (Kuniyuki Iwashima)   
  - sysctl: move some boundary constants from sysctl.c to sysctl_vals (Xiaoming Ni)   
  - mm/pagealloc: sysctl: change watermark_scale_factor max limit to 30% (Suren Baghdasaryan)   
  - net: tun: split run_ebpf_filter() and pskb_trim() into different "if statement" (Dongli Zhang)   
  - ipv4/tcp: do not use per netns ctl sockets (Eric Dumazet)   
  - perf/core: Fix data race between perf_event_set_output() and perf_mmap_close() (Peter Zijlstra)   
  - pinctrl: ralink: Check for null return of devm_kcalloc (William Dean)   
  - pinctrl: ralink: rename pinctrl-rt2880 to pinctrl-ralink (Arınç ÜNAL)   
  - pinctrl: ralink: rename MT7628(an) functions to MT76X8 (Arınç ÜNAL)   
  - RDMA/irdma: Fix sleep from invalid context BUG (Mustafa Ismail)   
  - RDMA/irdma: Do not advertise 1GB page size for x722 (Mustafa Ismail)   
  - power/reset: arm-versatile: Fix refcount leak in versatile_reboot_probe (Miaoqian Lin)   
  - xfrm: xfrm_policy: fix a possible double xfrm_pols_put() in xfrm_bundle_lookup() (Hangyu Hua)   
  - ip: Fix data-races around sysctl_ip_default_ttl. (Kuniyuki Iwashima)   
  - r8152: fix a WOL issue (Hayes Wang)   
  - xfs: fix perag reference leak on iteration race with growfs (Brian Foster)   
  - xfs: terminate perag iteration reliably on agcount (Brian Foster)   
  - xfs: rename the next_agno perag iteration variable (Brian Foster)   
  - xfs: fold perag loop iteration logic into helper function (Brian Foster)   
  - xfs: fix maxlevels comparisons in the btree staging code (Darrick J. Wong)   
  - mt76: mt7921: Fix the error handling path of mt7921_pci_probe() (Christophe JAILLET)   
  - mt76: mt7921e: fix possible probe failure after reboot (Sean Wang)   
  - mt76: mt7921: use physical addr to unify register access (Sean Wang)   
  - Revert "mt76: mt7921e: fix possible probe failure after reboot" (Sean Wang)   
  - Revert "mt76: mt7921: Fix the error handling path of mt7921_pci_probe()" (Sean Wang)   
  - batman-adv: Use netif_rx_any_context() any. (Sebastian Andrzej Siewior)   
  - serial: mvebu-uart: correctly report configured baudrate value (Pali Rohár)   
  - PCI: hv: Fix interrupt mapping for multi-MSI (Jeffrey Hugo)   
  - PCI: hv: Reuse existing IRTE allocation in compose_msi_msg() (Jeffrey Hugo)   
  - PCI: hv: Fix hv_arch_irq_unmask() for multi-MSI (Jeffrey Hugo)   
  - PCI: hv: Fix multi-MSI to allow more than one MSI vector (Jeffrey Hugo)   
  - Revert "selftest/vm: verify mmap addr in mremap_test" (Oleksandr Tymoshenko)   
  - Revert "selftest/vm: verify remap destination address in mremap_test" (Oleksandr Tymoshenko)   
  - bus: mhi: host: pci_generic: add Telit FN990 (Daniele Palmas)   
  - bus: mhi: host: pci_generic: add Telit FN980 v1 hardware revision (Daniele Palmas)   
  - drm/ttm: fix locking in vmap/vunmap TTM GEM helpers (Christian König)   
  - mlxsw: spectrum_router: Fix IPv4 nexthop gateway indication (Ido Schimmel)   
  - riscv: add as-options for modules with assembly compontents (Ben Dooks)   
  - pinctrl: stm32: fix optional IRQ support to gpios (Fabien Dessenne)   
  - LTS version: v5.15.57 (Jack Vogel)   
  - x86: Use -mindirect-branch-cs-prefix for RETPOLINE builds (Peter Zijlstra)   
  - um: Add missing apply_returns() (Peter Zijlstra)   
  - x86/asm/32: Fix ANNOTATE_UNRET_SAFE use on 32-bit (Jiri Slaby)   
  - x86/xen: Fix initialisation in hypercall_page after rethunk (Ben Hutchings)   
  - x86/static_call: Serialize __static_call_fixup() properly (Thomas Gleixner)   
  - x86/speculation: Disable RRSBA behavior (Pawan Gupta)   
  - x86/kexec: Disable RET on kexec (Konrad Rzeszutek Wilk)   
  - x86/bugs: Do not enable IBPB-on-entry when IBPB is not supported (Thadeu Lima de Souza Cascardo)   
  - x86/entry: Move PUSH_AND_CLEAR_REGS() back into error_entry (Peter Zijlstra)   
  - x86/bugs: Add Cannon lake to RETBleed affected CPU list (Pawan Gupta)   
  - x86/retbleed: Add fine grained Kconfig knobs (Peter Zijlstra)   
  - objtool: Re-add UNWIND_HINT_{SAVE_RESTORE} (Josh Poimboeuf)   
  - objtool: Add entry UNRET validation (Peter Zijlstra)   
  - x86/xen: Add UNTRAIN_RET (Peter Zijlstra)   
  - intel_idle: Disable IBRS during long idle (Peter Zijlstra)   
  - x86: Add magic AMD return-thunk (Peter Zijlstra)   
  - x86/entry: Avoid very early RET (Peter Zijlstra)   
  - x86/ftrace: Use alternative RET encoding (Peter Zijlstra)   
  - objtool: skip non-text sections when adding return-thunk sites (Thadeu Lima de Souza Cascardo)   
  - bpf,x86: Respect X86_FEATURE_RETPOLINE* (Peter Zijlstra)   
  - bpf,x86: Simplify computing label offsets (Peter Zijlstra)   
  - x86/alternative: Add debug prints to apply_retpolines() (Peter Zijlstra)   
  - x86/alternative: Try inline spectre_v2=retpoline,amd (Peter Zijlstra)   
  - x86/alternative: Handle Jcc __x86_indirect_thunk_
  eg (Peter Zijlstra)   
  - x86/alternative: Implement .retpoline_sites support (Peter Zijlstra)   
  - x86/retpoline: Create a retpoline thunk array (Peter Zijlstra)   
  - x86/retpoline: Move the retpoline thunk declarations to nospec-branch.h (Peter Zijlstra)   
  - x86/asm: Fixup odd GEN-for-each-reg.h usage (Peter Zijlstra)   
  - x86/asm: Fix register order (Peter Zijlstra)   
  - x86/retpoline: Remove unused replacement symbols (Peter Zijlstra)   
  - objtool: Introduce CFI hash (Peter Zijlstra)   
  - objtool,x86: Replace alternatives with .retpoline_sites (Peter Zijlstra)   
  - objtool: Shrink struct instruction (Peter Zijlstra)   
  - objtool: Explicitly avoid self modifying code in .altinstr_replacement (Peter Zijlstra)   
  - objtool: Fix SLS validation for kcov tail-call replacement (Peter Zijlstra)   
  - objtool: Classify symbols (Peter Zijlstra)   
  - x86/entry: Don't call error_entry() for XENPV (Lai Jiangshan)   
  - x86/entry: Move PUSH_AND_CLEAR_REGS out of error_entry() (Lai Jiangshan)   
  - x86/entry: Switch the stack after error_entry() returns (Lai Jiangshan)   
  - x86/traps: Use pt_regs directly in fixup_bad_iret() (Lai Jiangshan)   
  - LTS version: v5.15.56 (Jack Vogel)   
  - drm/aperture: Run fbdev removal before internal helpers (Thomas Zimmermann)   
  - x86/pat: Fix x86_has_pat_wp() (Juergen Gross)   
  - serial: 8250: Fix PM usage_count for console handover (Ilpo Järvinen)   
  - serial: pl011: UPSTAT_AUTORTS requires .throttle/unthrottle (Ilpo Järvinen)   
  - serial: stm32: Clear prev values before setting RTS delays (Ilpo Järvinen)   
  - serial: 8250: fix return error code in serial8250_request_std_resource() (Yi Yang)   
  - vt: fix memory overlapping when deleting chars in the buffer (Yangxi Xiang)   
  - tty: serial: samsung_tty: set dma burst_size to 1 (Chanho Park)   
  - usb: dwc3: gadget: Fix event pending check (Thinh Nguyen)   
  - usb: typec: add missing uevent when partner support PD (Linyu Yuan)   
  - USB: serial: ftdi_sio: add Belimo device ids (Lucien Buchmann)   
  - signal handling: don't use BUG_ON() for debugging (Linus Torvalds)   
  - nvme-pci: phison e16 has bogus namespace ids (Keith Busch)   
  - ALSA: usb-audio: Add quirk for Fiero SC-01 (fw v1.0.0) (Egor Vorontsov)   
  - ALSA: usb-audio: Add quirk for Fiero SC-01 (Egor Vorontsov)   
  - ALSA: usb-audio: Add quirks for MacroSilicon MS2100/MS2106 devices (John Veness)   
  - Revert "can: xilinx_can: Limit CANFD brp to 2" (Srinivas Neeli)   
  - ARM: dts: stm32: use the correct clock source for CEC on stm32mp151 (Gabriel Fernandez)   
  - soc: ixp4xx/npe: Fix unused match warning (Linus Walleij)   
  - x86: Clear .brk area at early boot (Juergen Gross)   
  - irqchip: or1k-pic: Undefine mask_ack for level triggered hardware (Stafford Horne)   
  - ASoC: madera: Fix event generation for rate controls (Charles Keepax)   
  - ASoC: madera: Fix event generation for OUT1 demux (Charles Keepax)   
  - ASoC: cs47l15: Fix event generation for low power mux control (Charles Keepax)   
  - ASoC: dapm: Initialise kcontrol data for mux/demux controls (Charles Keepax)   
  - ASoC: rt711-sdca: fix kernel NULL pointer dereference when IO error (Shuming Fan)   
  - ASoC: wm5110: Fix DRE control (Charles Keepax)   
  - ASoC: Intel: bytcr_wm5102: Fix GPIO related probe-ordering problem (Hans de Goede)   
  - ASoC: wcd938x: Fix event generation for some controls (Mark Brown)   
  - ASoC: SOF: Intel: hda-loader: Clarify the cl_dsp_init() flow (Peter Ujfalusi)   
  - ASoC: codecs: rt700/rt711/rt711-sdca: initialize workqueues in probe (Pierre-Louis Bossart)   
  - ASoC: rt7*-sdw: harden jack_detect_handler (Pierre-Louis Bossart)   
  - ASoC: rt711: fix calibrate mutex initialization (Pierre-Louis Bossart)   
  - ASoC: Intel: sof_sdw: handle errors on card registration (Pierre-Louis Bossart)   
  - ASoC: rt711-sdca-sdw: fix calibrate mutex initialization (Pierre-Louis Bossart)   
  - ASoC: Realtek/Maxim SoundWire codecs: disable pm_runtime on remove (Pierre-Louis Bossart)   
  - pinctrl: aspeed: Fix potential NULL dereference in aspeed_pinmux_set_mux() (Haowen Bai)   
  - ASoC: ops: Fix off by one in range control validation (Mark Brown)   
  - net: sfp: fix memory leak in sfp_probe() (Jianglei Nie)   
  - nvme: fix regression when disconnect a recovering ctrl (Ruozhu Li)   
  - nvme-tcp: always fail a request when sending it failed (Sagi Grimberg)   
  - NFC: nxp-nci: don't print header length mismatch on i2c error (Michael Walle)   
  - net: tipc: fix possible refcount leak in tipc_sk_create() (Hangyu Hua)   
  - fbdev: Disable sysfb device registration when removing conflicting FBs (Javier Martinez Canillas)   
  - firmware: sysfb: Add sysfb_disable() helper function (Javier Martinez Canillas)   
  - firmware: sysfb: Make sysfb_create_simplefb() return a pdev pointer (Javier Martinez Canillas)   
  - platform/x86: hp-wmi: Ignore Sanitization Mode event (Kai-Heng Feng)   
  - cpufreq: pmac32-cpufreq: Fix refcount leak bug (Liang He)   
  - scsi: hisi_sas: Limit max hw sectors for v3 HW (John Garry)   
  - netfilter: br_netfilter: do not skip all hooks with 0 priority (Florian Westphal)   
  - virtio_mmio: Restore guest page size on resume (Stephan Gerhold)   
  - virtio_mmio: Add missing PM calls to freeze/restore (Stephan Gerhold)   
  - vduse: Tie vduse mgmtdev and its device (Parav Pandit)   
  - vdpa/mlx5: Initialize CVQ vringh only once (Eli Cohen)   
  - powerpc/xive/spapr: correct bitmap allocation size (Nathan Lynch)   
  - ksmbd: use SOCK_NONBLOCK type for kernel_accept() (Namjae Jeon)   
  - btrfs: zoned: fix a leaked bioc in read_zone_info (Christoph Hellwig)   
  - btrfs: rename btrfs_bio to btrfs_io_context (Qu Wenruo)   
  - mm: sysctl: fix missing numa_stat when !CONFIG_HUGETLB_PAGE (Muchun Song)   
  - ACPI: video: Fix acpi_video_handles_brightness_key_presses() (Hans de Goede)   
  - net/tls: Check for errors in tls_device_init (Tariq Toukan)   
  - KVM: x86: Fully initialize 'struct kvm_lapic_irq' in kvm_pv_kick_cpu_op() (Vitaly Kuznetsov)   
  - net: atlantic: remove aq_nic_deinit() when resume (Chia-Lin Kao (AceLan))   
  - net: atlantic: remove deep parameter on suspend/resume functions (Chia-Lin Kao (AceLan))   
  - sfc: fix kernel panic when creating VF (Íñigo Huguet)   
  - seg6: bpf: fix skb checksum in bpf_push_seg6_encap() (Andrea Mayer)   
  - seg6: fix skb checksum in SRv6 End.B6 and End.B6.Encaps behaviors (Andrea Mayer)   
  - seg6: fix skb checksum evaluation in SRH encapsulation/insertion (Andrea Mayer)   
  - ceph: switch netfs read ops to use rreq->inode instead of rreq->mapping->host (Jeff Layton)   
  - sfc: fix use after free when disabling sriov (Íñigo Huguet)   
  - drm/amd/pm: Prevent divide by zero (Yefim Barashkin)   
  - drm/amd/display: Only use depth 36 bpp linebuffers on DCN display engines. (Mario Kleiner)   
  - ima: Fix potential memory leak in ima_init_crypto() (Jianglei Nie)   
  - ima: force signature verification when CONFIG_KEXEC_SIG is configured (Coiby Xu)   
  - net: stmmac: fix leaks in probe (Dan Carpenter)   
  - net: ftgmac100: Hold reference returned by of_get_child_by_name() (Liang He)   
  - nexthop: Fix data-races around nexthop_compat_mode. (Kuniyuki Iwashima)   
  - ipv4: Fix data-races around sysctl_ip_dynaddr. (Kuniyuki Iwashima)   
  - tcp: Fix a data-race around sysctl_tcp_ecn_fallback. (Kuniyuki Iwashima)   
  - raw: Fix a data-race around sysctl_raw_l3mdev_accept. (Kuniyuki Iwashima)   
  - icmp: Fix a data-race around sysctl_icmp_ratemask. (Kuniyuki Iwashima)   
  - icmp: Fix a data-race around sysctl_icmp_ratelimit. (Kuniyuki Iwashima)   
  - icmp: Fix a data-race around sysctl_icmp_errors_use_inbound_ifaddr. (Kuniyuki Iwashima)   
  - icmp: Fix a data-race around sysctl_icmp_ignore_bogus_error_responses. (Kuniyuki Iwashima)   
  - icmp: Fix data-races around sysctl_icmp_echo_enable_probe. (Kuniyuki Iwashima)   
  - sysctl: Fix data-races in proc_dointvec_ms_jiffies(). (Kuniyuki Iwashima)   
  - sysctl: Fix data-races in proc_dou8vec_minmax(). (Kuniyuki Iwashima)   
  - bnxt_en: Fix bnxt_refclk_read() (Pavan Chebbi)   
  - bnxt_en: Fix bnxt_reinit_after_abort() code path (Michael Chan)   
  - drm/i915: Require the vm mutex for i915_vma_bind() (Thomas Hellström)   
  - drm/i915/uc: correctly track uc_fw init failure (Daniele Ceraolo Spurio)   
  - drm/i915/gt: Serialize TLB invalidates with GT resets (Chris Wilson)   
  - drm/i915/gt: Serialize GRDOM access between multiple engine resets (Chris Wilson)   
  - drm/i915/dg2: Add Wa_22011100796 (Bruce Chang)   
  - drm/i915/selftests: fix a couple IS_ERR() vs NULL tests (Dan Carpenter)   
  - tracing: Fix sleeping while atomic in kdb ftdump (Douglas Anderson)   
  - lockd: fix nlm_close_files (Jeff Layton)   
  - lockd: set fl_owner when unlocking files (Jeff Layton)   
  - xen/gntdev: Ignore failure to unmap INVALID_GRANT_HANDLE (Demi Marie Obenour)   
  - drm/i915/gvt: IS_ERR() vs NULL bug in intel_gvt_update_reg_whitelist() (Dan Carpenter)   
  - netfilter: nf_tables: replace BUG_ON by element length check (Pablo Neira Ayuso)   
  - netfilter: nf_log: incorrect offset to network header (Pablo Neira Ayuso)   
  - arm64: dts: broadcom: bcm4908: Fix cpu node for smp boot (William Zhang)   
  - arm64: dts: broadcom: bcm4908: Fix timer node for BCM4906 SoC (William Zhang)   
  - ARM: dts: sunxi: Fix SPI NOR campatible on Orange Pi Zero (Michal Suchanek)   
  - ARM: dts: at91: sama5d2: Fix typo in i2s1 node (Ryan Wanner)   
  - ipv4: Fix a data-race around sysctl_fib_sync_mem. (Kuniyuki Iwashima)   
  - icmp: Fix data-races around sysctl. (Kuniyuki Iwashima)   
  - cipso: Fix data-races around sysctl. (Kuniyuki Iwashima)   
  - net: Fix data-races around sysctl_mem. (Kuniyuki Iwashima)   
  - inetpeer: Fix data-races around sysctl. (Kuniyuki Iwashima)   
  - tcp: Fix a data-race around sysctl_tcp_max_orphans. (Kuniyuki Iwashima)   
  - sysctl: Fix data races in proc_dointvec_jiffies(). (Kuniyuki Iwashima)   
  - sysctl: Fix data races in proc_doulongvec_minmax(). (Kuniyuki Iwashima)   
  - sysctl: Fix data races in proc_douintvec_minmax(). (Kuniyuki Iwashima)   
  - sysctl: Fix data races in proc_dointvec_minmax(). (Kuniyuki Iwashima)   
  - sysctl: Fix data races in proc_douintvec(). (Kuniyuki Iwashima)   
  - sysctl: Fix data races in proc_dointvec(). (Kuniyuki Iwashima)   
  - net: ethernet: ti: am65-cpsw: Fix devlink port register sequence (Siddharth Vadapalli)   
  - net: stmmac: dwc-qos: Disable split header for Tegra194 (Jon Hunter)   
  - ASoC: Intel: Skylake: Correct the handling of fmt_config flexible array (Peter Ujfalusi)   
  - ASoC: Intel: Skylake: Correct the ssp rate discovery in skl_get_ssp_clks() (Peter Ujfalusi)   
  - ASoC: tas2764: Fix amp gain register offset & default (Hector Martin)   
  - ASoC: tas2764: Correct playback volume range (Hector Martin)   
  - ASoC: tas2764: Fix and extend FSYNC polarity handling (Martin Povišer)   
  - ASoC: tas2764: Add post reset delays (Martin Povišer)   
  - ASoC: sgtl5000: Fix noise on shutdown/remove (Francesco Dolcini)   
  - ima: Fix a potential integer overflow in ima_appraise_measurement (Huaxin Lu)   
  - drm/i915: fix a possible refcount leak in intel_dp_add_mst_connector() (Hangyu Hua)   
  - net/mlx5e: Ring the TX doorbell on DMA errors (Maxim Mikityanskiy)   
  - net/mlx5e: Fix capability check for updating vnic env counters (Gal Pressman)   
  - net/mlx5e: Fix enabling sriov while tc nic rules are offloaded (Paul Blakey)   
  - net/mlx5e: kTLS, Fix build time constant test in RX (Tariq Toukan)   
  - net/mlx5e: kTLS, Fix build time constant test in TX (Tariq Toukan)   
  - ARM: 9210/1: Mark the FDT_FIXED sections as shareable (Zhen Lei)   
  - ARM: 9209/1: Spectre-BHB: avoid pr_info() every time a CPU comes out of idle (Ard Biesheuvel)   
  - spi: amd: Limit max transfer and message size (Cristian Ciocaltea)   
  - ARM: dts: imx6qdl-ts7970: Fix ngpio typo and count (Kris Bahnsen)   
  - reset: Fix devm bulk optional exclusive control getter (Serge Semin)   
  - xfs: drop async cache flushes from CIL commits. (Dave Chinner)   
  - xfs: don't include bnobt blocks when reserving free block pool (Darrick J. Wong)   
  - Revert "evm: Fix memleak in init_desc" (Xiu Jianfeng)   
  - sh: convert nommu io{re,un}map() to static inline functions (Geert Uytterhoeven)   
  - nilfs2: fix incorrect masking of permission flags for symlinks (Ryusuke Konishi)   
  - fs/remap: constrain dedupe of EOF blocks (Dave Chinner)   
  - drm/panfrost: Fix shrinker list corruption by madvise IOCTL (Dmitry Osipenko)   
  - drm/panfrost: Put mapping instead of shmem obj on panfrost_mmu_map_fault_addr() error (Dmitry Osipenko)   
  - btrfs: return -EAGAIN for NOWAIT dio reads/writes on compressed and inline extents (Filipe Manana)   
  - cgroup: Use separate src/dst nodes when preloading css_sets for migration (Tejun Heo)   
  - wifi: mac80211: fix queue selection for mesh/OCB interfaces (Felix Fietkau)   
  - ARM: 9214/1: alignment: advance IT state after emulating Thumb instruction (Ard Biesheuvel)   
  - ARM: 9213/1: Print message about disabled Spectre workarounds only once (Dmitry Osipenko)   
  - ip: fix dflt addr selection for connected nexthop (Nicolas Dichtel)   
  - net: sock: tracing: Fix sock_exceed_buf_limit not to dereference stale pointer (Steven Rostedt (Google))   
  - tracing/histograms: Fix memory leak problem (Zheng Yejian)   
  - mm: split huge PUD on wp_huge_pud fallback (Gowans, James)   
  - mm: userfaultfd: fix UFFDIO_CONTINUE on fallocated shmem pages (Axel Rasmussen)   
  - xen/netback: avoid entering xenvif_rx_next_skb() with an empty rx queue (Juergen Gross)   
  - ALSA: hda/realtek - Enable the headset-mic on a Xiaomi's laptop (Meng Tang)   
  - ALSA: hda/realtek - Fix headset mic problem for a HP machine with alc221 (Meng Tang)   
  - ALSA: hda/realtek: fix mute/micmute LEDs for HP machines (Jeremy Szu)   
  - ALSA: hda/realtek - Fix headset mic problem for a HP machine with alc671 (Meng Tang)   
  - ALSA: hda/realtek: Fix headset mic for Acer SF313-51 (Meng Tang)   
  - ALSA: hda/conexant: Apply quirk for another HP ProDesk 600 G3 model (Meng Tang)   
  - ALSA: hda - Add fixup for Dell Latitidue E5430 (Meng Tang)   
  - LTS version: v5.15.55 (Jack Vogel)   
  - Revert "mtd: rawnand: gpmi: Fix setting busy timeout setting" (Greg Kroah-Hartman)   
  - LTS version: v5.15.54 (Jack Vogel)   
  - selftests/net: fix section name when using xdp_dummy.o (Hangbin Liu)   
  - dmaengine: idxd: force wq context cleanup on device disable path (Dave Jiang)   
  - dmaengine: ti: Add missing put_device in ti_dra7_xbar_route_allocate (Miaoqian Lin)   
  - dmaengine: qcom: bam_dma: fix runtime PM underflow (Caleb Connolly)   
  - dmaengine: ti: Fix refcount leak in ti_dra7_xbar_route_allocate (Miaoqian Lin)   
  - dmaengine: at_xdma: handle errors of at_xdmac_alloc_desc() correctly (Michael Walle)   
  - dmaengine: lgm: Fix an error handling path in intel_ldma_probe() (Christophe JAILLET)   
  - dmaengine: pl330: Fix lockdep warning about non-static key (Dmitry Osipenko)   
  - ida: don't use BUG_ON() for debugging (Linus Torvalds)   
  - dt-bindings: dma: allwinner,sun50i-a64-dma: Fix min/max typo (Samuel Holland)   
  - Revert "serial: 8250_mtk: Make sure to select the right FEATURE_SEL" (AngeloGioacchino Del Regno)   
  - Revert "mm/memory-failure.c: fix race with changing page compound again" (Naoya Horiguchi)   
  - misc: rtsx_usb: set return value in rsp_buf alloc err path (Shuah Khan)   
  - misc: rtsx_usb: use separate command and response buffers (Shuah Khan)   
  - misc: rtsx_usb: fix use of dma mapped buffer for usb bulk transfer (Shuah Khan)   
  - dmaengine: imx-sdma: Allow imx8m for imx7 FW revs (Peter Robinson)   
  - i2c: cadence: Unregister the clk notifier in error path (Satish Nagireddy)   
  - r8169: fix accessing unset transport header (Heiner Kallweit)   
  - selftests: forwarding: fix error message in learning_test (Vladimir Oltean)   
  - selftests: forwarding: fix learning_test when h1 supports IFF_UNICAST_FLT (Vladimir Oltean)   
  - selftests: forwarding: fix flood_unicast_test when h2 supports IFF_UNICAST_FLT (Vladimir Oltean)   
  - ibmvnic: Properly dispose of all skbs during a failover. (Rick Lindsley)   
  - ARM: dts: stm32: add missing usbh clock and fix clk order on stm32mp15 (Fabrice Gasnier)   
  - ARM: dts: stm32: use usbphyc ck_usbo_48m as USBH OHCI clock on stm32mp151 (Amelie Delaunay)   
  - i40e: Fix VF's MAC Address change on VM (Norbert Zulinski)   
  - i40e: Fix dropped jumbo frames statistics (Lukasz Cieplicki)   
  - i2c: piix4: Fix a memory leak in the EFCH MMIO support (Jean Delvare)   
  - xsk: Clear page contiguity bit when unmapping pool (Ivan Malov)   
  - ARM: at91: fix soc detection for SAM9X60 SiPs (Mihai Sain)   
  - ARM: dts: at91: sama5d2_icp: fix eeprom compatibles (Eugen Hristev)   
  - ARM: dts: at91: sam9x60ek: fix eeprom compatible and size (Eugen Hristev)   
  - ARM: at91: pm: use proper compatibles for sama7g5's rtc and rtt (Claudiu Beznea)   
  - ARM: at91: pm: use proper compatibles for sam9x60's rtc and rtt (Claudiu Beznea)   
  - ARM: at91: pm: use proper compatible for sama5d2's rtc (Claudiu Beznea)   
  - arm64: dts: qcom: msm8992-*: Fix vdd_lvs1_2-supply typo (Stephan Gerhold)   
  - pinctrl: sunxi: sunxi_pconf_set: use correct offset (Andrei Lalaev)   
  - arm64: dts: imx8mp-phyboard-pollux-rdk: correct i2c2 & mmc settings (Peng Fan)   
  - arm64: dts: imx8mp-phyboard-pollux-rdk: correct eqos pad settings (Peng Fan)   
  - arm64: dts: imx8mp-phyboard-pollux-rdk: correct uart pad settings (Peng Fan)   
  - arm64: dts: imx8mp-evk: correct I2C3 pad settings (Peng Fan)   
  - arm64: dts: imx8mp-evk: correct I2C1 pad settings (Peng Fan)   
  - arm64: dts: imx8mp-evk: correct eqos pad settings (Peng Fan)   
  - arm64: dts: imx8mp-evk: correct vbus pad settings (Peng Fan)   
  - arm64: dts: imx8mp-evk: correct gpio-led pad settings (Peng Fan)   
  - arm64: dts: imx8mp-evk: correct the uart2 pinctl value (Sherry Sun)   
  - arm64: dts: imx8mp-evk: correct mmc pad settings (Peng Fan)   
  - ARM: mxs_defconfig: Enable the framebuffer (Fabio Estevam)   
  - arm64: dts: qcom: sdm845: use dispcc AHB clock for mdss node (Dmitry Baryshkov)   
  - arm64: dts: qcom: msm8994: Fix CPU6/7 reg values (Konrad Dybcio)   
  - ASoC: codecs: rt700/rt711/rt711-sdca: resume bus/codec in .set_jack_detect (Pierre-Louis Bossart)   
  - ASoC: rt711-sdca: Add endianness flag in snd_soc_component_driver (Charles Keepax)   
  - ASoC: rt711: Add endianness flag in snd_soc_component_driver (Charles Keepax)   
  - pinctrl: sunxi: a83t: Fix NAND function name for some pins (Samuel Holland)   
  - ARM: meson: Fix refcount leak in meson_smp_prepare_cpus (Miaoqian Lin)   
  - tty: n_gsm: fix encoding of command/response bit (daniel.starke@siemens.com)   
  - btrfs: fix use of uninitialized variable at rm device ioctl (Tom Rix)   
  - virtio-blk: modify the value type of num in virtio_queue_rq() (Ye Guojin)   
  - btrfs: fix error pointer dereference in btrfs_ioctl_rm_dev_v2() (Dan Carpenter)   
  - Revert "serial: sc16is7xx: Clear RS485 bits in the shutdown" (Hui Wang)   
  - can: kvaser_usb: kvaser_usb_leaf: fix bittiming limits (Jimmy Assarsson)   
  - can: kvaser_usb: kvaser_usb_leaf: fix CAN clock frequency regression (Jimmy Assarsson)   
  - can: kvaser_usb: replace run-time checks with struct kvaser_usb_driver_info (Jimmy Assarsson)   
  - net: dsa: qca8k: reset cpu port on MTU change (Christian Marangi)   
  - powerpc/powernv: delay rng platform device creation until later in boot (Jason A. Donenfeld)   
  - video: of_display_timing.h: include errno.h (Hsin-Yi Wang)   
  - memregion: Fix memregion_free() fallback definition (Dan Williams)   
  - PM: runtime: Redefine pm_runtime_release_supplier() (Rafael J. Wysocki)   
  - fbcon: Prevent that screen size is smaller than font size (Helge Deller)   
  - fbcon: Disallow setting font bigger than screen size (Helge Deller)   
  - fbmem: Check virtual screen sizes in fb_set_var() (Helge Deller)   
  - fbdev: fbmem: Fix logo center image dx issue (Guiling Deng)   
  - iommu/vt-d: Fix PCI bus rescan device hot add (Yian Chen)   
  - module: fix [e_shstrndx].sh_size=0 OOB access (Alexey Dobriyan)   
  - module: change to print useful messages from elf_validity_check() (Shuah Khan)   
  - dt-bindings: soc: qcom: smd-rpm: Fix missing MSM8936 compatible (Bryan O'Donoghue)   
  - dt-bindings: soc: qcom: smd-rpm: Add compatible for MSM8953 SoC (Vladimir Lypak)   
  - rxrpc: Fix locking issue (David Howells)   
  - irqchip/gic-v3: Refactor ISB + EOIR at ack time (Mark Rutland)   
  - irqchip/gic-v3: Ensure pseudo-NMIs have an ISB between ack and handling (Mark Rutland)   
  - io_uring: avoid io-wq -EAGAIN looping for !IOPOLL (Pavel Begunkov)   
  - Bluetooth: btmtksdio: fix use-after-free at btmtksdio_recv_event (Sean Wang)   
  - Bluetooth: protect le accept and resolv lists with hdev->lock (Niels Dossche)   
  - drm/mediatek: Add vblank register/unregister callback functions (Rex-BC Chen)   
  - drm/mediatek: Add cmdq_handle in mtk_crtc (Chun-Kuang Hu)   
  - drm/mediatek: Detect CMDQ execution timeout (Chun-Kuang Hu)   
  - drm/mediatek: Remove the pointer of struct cmdq_client (Chun-Kuang Hu)   
  - drm/mediatek: Use mailbox rx_callback instead of cmdq_task_cb (Chun-Kuang Hu)   
  - drm/i915: Fix a race between vma / object destruction and unbinding (Thomas Hellström)   
  - drm/amdgpu: vi: disable ASPM on Intel Alder Lake based systems (Richard Gong)   
  - drm/amd: Refactor `amdgpu_aspm` to be evaluated per device (Mario Limonciello)   
  - tty: n_gsm: fix invalid gsmtty_write_room() result (Daniel Starke)   
  - serial: 8250_mtk: Make sure to select the right FEATURE_SEL (AngeloGioacchino Del Regno)   
  - tty: n_gsm: fix sometimes uninitialized warning in gsm_dlci_modem_output() (Daniel Starke)   
  - tty: n_gsm: fix invalid use of MSC in advanced option (Daniel Starke)   
  - mm/hwpoison: fix race between hugetlb free/demotion and memory_failure_hugetlb() (Naoya Horiguchi)   
  - mm/memory-failure.c: fix race with changing page compound again (Miaohe Lin)   
  - mm/hwpoison: avoid the impact of hwpoison_filter() return value on mce handler (luofei)   
  - mm/hwpoison: mf_mutex for soft offline and unpoison (Naoya Horiguchi)   
  - KVM: Initialize debugfs_dentry when a VM is created to avoid NULL deref (Sean Christopherson)   
  - btrfs: zoned: use dedicated lock for data relocation (Naohiro Aota)   
  - btrfs: zoned: encapsulate inode locking for zoned relocation (Johannes Thumshirn)   
  - tty: n_gsm: fix missing update of modem controls after DLCI open (Daniel Starke)   
  - ALSA: usb-audio: add mapping for MSI MAG X570S Torpedo MAX. (Maurizio Avogadro)   
  - ALSA: usb-audio: add mapping for MSI MPG X570S Carbon Max Wifi. (Johannes Schickel)   
  - tty: n_gsm: fix frame reception handling (Daniel Starke)   
  - tty: n_gsm: Save dlci address open status when config requester (Zhenguo Zhao)   
  - tty: n_gsm: Modify CR,PF bit when config requester (Zhenguo Zhao)   
  - KVM: Don't create VM debugfs files outside of the VM directory (Oliver Upton)   
  - drm/amd/vcn: fix an error msg on vcn 3.0 (tiancyin)   
  - ASoC: rt5682: fix an incorrect NULL check on list iterator (Xiaomeng Tong)   
  - ASoC: rt5682: move clk related code to rt5682_i2c_probe (Jack Yu)   
  - uapi/linux/stddef.h: Add include guards (Tadeusz Struk)   
  - stddef: Introduce DECLARE_FLEX_ARRAY() helper (Kees Cook)   
  - bus: mhi: Fix pm_state conversion to string (Paul Davey)   
  - bus: mhi: core: Use correctly sized arguments for bit field (Kees Cook)   
  - serial: sc16is7xx: Clear RS485 bits in the shutdown (Hui Wang)   
  - powerpc/tm: Fix more userspace r13 corruption (Nicholas Piggin)   
  - powerpc: flexible GPR range save/restore macros (Nicholas Piggin)   
  - powerpc/32: Don't use lmw/stmw for saving/restoring non volatile regs (Christophe Leroy)   
  - scsi: qla2xxx: Fix loss of NVMe namespaces after driver reload test (Arun Easi)   
  - KVM: s390x: fix SCK locking (Claudio Imbrenda)   
  - btrfs: don't access possibly stale fs_info data in device_list_add (Dongliang Mu)   
  - KVM: use __vcalloc for very large allocations (Paolo Bonzini)   
  - mm: vmalloc: introduce array allocation functions (Paolo Bonzini)   
  - Compiler Attributes: add __alloc_size() for better bounds checking (Kees Cook)   
  - mtd: spi-nor: Skip erase logic when SPI_NOR_NO_ERASE is set (Tudor Ambarus)   
  - batman-adv: Use netif_rx(). (Sebastian Andrzej Siewior)   
  - iio: accel: mma8452: use the correct logic to get mma8452_data (Haibo Chen)   
  - riscv/mm: Add XIP_FIXUP for riscv_pfn_base (Palmer Dabbelt)   
  - NFSD: COMMIT operations must not return NFS?ERR_INVAL (Chuck Lever)   
  - NFSD: De-duplicate net_generic(nf->nf_net, nfsd_net_id) (Chuck Lever)   
  - drm/amd/display: Fix by adding FPU protection for dcn30_internal_validate_bw (CHANDAN VURDIGERE NATARAJ)   
  - drm/amd/display: Set min dcfclk if pipe count is 0 (Michael Strauss)   
  - drbd: fix an invalid memory access caused by incorrect use of list iterator (Xiaomeng Tong)   
  - drbd: Fix double free problem in drbd_create_device (Wu Bo)   
  - drbd: add error handling support for add_disk() (Luis Chamberlain)   
  - btrfs: remove device item and update super block in the same transaction (Qu Wenruo)   
  - btrfs: use btrfs_get_dev_args_from_path in dev removal ioctls (Josef Bacik)   
  - btrfs: add a btrfs_get_dev_args_from_path helper (Josef Bacik)   
  - btrfs: handle device lookup with btrfs_dev_lookup_args (Josef Bacik)   
  - vdpa/mlx5: Avoid processing works if workqueue was destroyed (Eli Cohen)   
  - gfs2: Fix gfs2_file_buffered_write endless loop workaround (Andreas Gruenbacher)   
  - scsi: qla2xxx: Fix crash during module load unload test (Arun Easi)   
  - scsi: qla2xxx: edif: Replace list_for_each_safe with list_for_each_entry_safe (Quinn Tran)   
  - scsi: qla2xxx: Fix laggy FC remote port session recovery (Quinn Tran)   
  - scsi: qla2xxx: Move heartbeat handling from DPC thread to workqueue (Manish Rangankar)   
  - KVM: x86/mmu: Use common TDP MMU zap helper for MMU notifier unmap hook (Sean Christopherson)   
  - KVM: x86/mmu: Use yield-safe TDP MMU root iter in MMU notifier unmapping (Sean Christopherson)   
  - clk: renesas: r9a07g044: Update multiplier and divider values for PLL2/3 (Lad Prabhakar)   
  - cxl/port: Hold port reference until decoder release (Dan Williams)   
  - mt76: mt7921: do not always disable fw runtime-pm (Lorenzo Bianconi)   
  - mt76: mt76_connac: fix MCU_CE_CMD_SET_ROC definition error (Sean Wang)   
  - media: davinci: vpif: fix use-after-free on driver unbind (Johan Hovold)   
  - media: omap3isp: Use struct_group() for memcpy() region (Kees Cook)   
  - stddef: Introduce struct_group() helper macro (Kees Cook)   
  - block: fix rq-qos breakage from skipping rq_qos_done_bio() (Tejun Heo)   
  - block: only mark bio as tracked if it really is tracked (Jens Axboe)   
  - block: use bdev_get_queue() in bio.c (Pavel Begunkov)   
  - io_uring: ensure that fsnotify is always called (Jens Axboe)   
  - virtio-blk: avoid preallocating big SGL for data (Max Gurtovoy)   
  - ibmvnic: Allow queueing resets during probe (Sukadev Bhattiprolu)   
  - ibmvnic: clear fop when retrying probe (Sukadev Bhattiprolu)   
  - ibmvnic: init init_done_rc earlier (Sukadev Bhattiprolu)   
  - s390/setup: preserve memory at OLDMEM_BASE and OLDMEM_SIZE (Alexander Egorenkov)   
  - s390/setup: use physical pointers for memblock_reserve() (Alexander Gordeev)   
  - s390/boot: allocate amode31 section in decompressor (Alexander Gordeev)   
  - netfilter: nft_payload: don't allow th access for fragments (Florian Westphal)   
  - netfilter: nft_payload: support for inner header matching / mangling (Pablo Neira Ayuso)   
  - netfilter: nf_tables: convert pktinfo->tprot_set to flags field (Pablo Neira Ayuso)   
  - ASoC: rt5682: Fix deadlock on resume (Peter Ujfalusi)   
  - ASoC: rt5682: Re-detect the combo jack after resuming (Derek Fang)   
  - ASoC: rt5682: Avoid the unexpected IRQ event during going to suspend (Derek Fang)   
  - net/mlx5e: TC, Reject rules with forward and drop actions (Roi Dayan)   
  - net/mlx5e: TC, Reject rules with drop and modify hdr action (Roi Dayan)   
  - net/mlx5e: Split actions_match_supported() into a sub function (Roi Dayan)   
  - net/mlx5e: Check action fwd/drop flag exists also for nic flows (Roi Dayan)   
  - RISC-V: defconfigs: Set CONFIG_FB=y, for FB console (Palmer Dabbelt)   
  - riscv: defconfig: enable DRM_NOUVEAU (Heinrich Schuchardt)   
  - bpf, arm64: Use emit_addr_mov_i64() for BPF_PSEUDO_FUNC (Hou Tao)   
  - bpf: Stop caching subprog index in the bpf_pseudo_func insn (Martin KaFai Lau)   
  - mt76: mt7921: fix a possible race enabling/disabling runtime-pm (Lorenzo Bianconi)   
  - mt76: mt7921: introduce mt7921_mcu_set_beacon_filter utility routine (Lorenzo Bianconi)   
  - mt76: mt7921: get rid of mt7921_mac_set_beacon_filter (Lorenzo Bianconi)   
  - platform/x86: wmi: Fix driver->notify() vs ->probe() race (Hans de Goede)   
  - platform/x86: wmi: Replace read_takes_no_args with a flags field (Hans de Goede)   
  - platform/x86: wmi: introduce helper to convert driver to WMI driver (Barnabás Pőcze)   
  - qed: Improve the stack space of filter_config() (Shai Malin)   
  - ath11k: add hw_param for wakeup_mhi (Seevalamuthu Mariappan)   
  - memory: renesas-rpc-if: Avoid unaligned bus access for HyperFlash (Andrew Gabbasov)   
  - media: ir_toy: prevent device from hanging during transmit (Sean Young)   
  - PCI: pciehp: Ignore Link Down/Up caused by error-induced Hot Reset (Lukas Wunner)   
  - PCI/portdrv: Rename pm_iter() to pcie_port_device_iter() (Lukas Wunner)   
  - drm/i915: Replace the unconditional clflush with drm_clflush_virt_range() (Ville Syrjälä)   
  - drm/i915/gt: Register the migrate contexts with their engines (Thomas Hellström)   
  - drm/i915: Disable bonding on gen12+ platforms (Matthew Brost)   
  - btrfs: fix deadlock between chunk allocation and chunk btree modifications (Filipe Manana)   
  - dma-buf/poll: Get a file reference for outstanding fence callbacks (Michel Dänzer)   
  - Input: goodix - try not to touch the reset-pin on x86/ACPI devices (Hans de Goede)   
  - Input: goodix - refactor reset handling (Hans de Goede)   
  - Input: goodix - add a goodix.h header file (Hans de Goede)   
  - Input: goodix - change goodix_i2c_write() len parameter type to int (Hans de Goede)   
  - Input: cpcap-pwrbutton - handle errors from platform_get_irq() (Tang Bin)   
  - btrfs: fix warning when freeing leaf after subvolume creation failure (Filipe Manana)   
  - btrfs: fix invalid delayed ref after subvolume creation failure (Filipe Manana)   
  - btrfs: add additional parameters to btrfs_init_tree_ref/btrfs_init_data_ref (Nikolay Borisov)   
  - btrfs: rename btrfs_alloc_chunk to btrfs_create_chunk (Nikolay Borisov)   
  - netfilter: nft_set_pipapo: release elements in clone from abort path (Pablo Neira Ayuso)   
  - net: rose: fix UAF bug caused by rose_t0timer_expiry (Duoming Zhou)   
  - usbnet: fix memory leak in error case (Oliver Neukum)   
  - bpf: Fix insufficient bounds propagation from adjust_scalar_min_max_vals (Daniel Borkmann)   
  - bpf: Fix incorrect verifier simulation around jmp32's jeq/jne (Daniel Borkmann)   
  - can: mcp251xfd: mcp251xfd_regmap_crc_read(): update workaround broken CRC on TBC register (Thomas Kopp)   
  - can: mcp251xfd: mcp251xfd_regmap_crc_read(): improve workaround handling for mcp2517fd (Thomas Kopp)   
  - can: m_can: m_can_{read_fifo,echo_tx_event}(): shift timestamp to full 32 bits (Marc Kleine-Budde)   
  - can: m_can: m_can_chip_config(): actually enable internal timestamping (Marc Kleine-Budde)   
  - can: gs_usb: gs_usb_open/close(): fix memory leak (Rhett Aultman)   
  - can: grcan: grcan_probe(): remove extra of_node_get() (Liang He)   
  - can: bcm: use call_rcu() instead of costly synchronize_rcu() (Oliver Hartkopp)   
  - ALSA: cs46xx: Fix missing snd_card_free() call at probe error (Takashi Iwai)   
  - ALSA: hda/realtek: Add quirk for Clevo L140PU (Tim Crawford)   
  - ALSA: usb-audio: Workarounds for Behringer UMC 204/404 HD (Takashi Iwai)   
  - Revert "selftests/bpf: Add test for bpf_timer overwriting crash" (Po-Hsu Lin)   
  - mm/filemap: fix UAF in find_lock_entries (Liu Shixin)   
  - mm/slub: add missing TID updates on slab deactivation (Jann Horn)   
  - LTS version: v5.15.53 (Jack Vogel)   
  - hwmon: (ibmaem) don't call platform_device_del() if platform_device_add() fails (Yang Yingliang)   
  - hwmon: (occ) Prevent power cap command overwriting poll response (Eddie James)   
  - hwmon: (occ) Remove sequence numbering and checksum calculation (Eddie James)   
  - drm/fourcc: fix integer type usage in uapi header (Carlos Llamas)   
  - platform/x86: panasonic-laptop: filter out duplicate volume up/down/mute keypresses (Hans de Goede)   
  - platform/x86: panasonic-laptop: don't report duplicate brightness key-presses (Hans de Goede)   
  - platform/x86: panasonic-laptop: revert "Resolve hotkey double trigger bug" (Hans de Goede)   
  - platform/x86: panasonic-laptop: sort includes alphabetically (Hans de Goede)   
  - platform/x86: panasonic-laptop: de-obfuscate button codes (Stefan Seyfried)   
  - drivers: cpufreq: Add missing of_node_put() in qoriq-cpufreq.c (Liang He)   
  - drm/msm/gem: Fix error return on fence id alloc fail (Rob Clark)   
  - drm/i915/gem: add missing else (katrinzhou)   
  - net: fix IFF_TX_SKB_NO_LINEAR definition (Dan Carpenter)   
  - fsi: occ: Force sequence numbering per OCC (Eddie James)   
  - clocksource/drivers/ixp4xx: remove EXPORT_SYMBOL_GPL from ixp4xx_timer_setup() (Greg Kroah-Hartman)   
  - net: usb: qmi_wwan: add Telit 0x1070 composition (Daniele Palmas)   
  - xen/arm: Fix race in RB-tree based P2M accounting (Oleksandr Tyshchenko)   
  - xen-netfront: restore __skb_queue_tail() positioning in xennet_get_responses() (Jan Beulich)   
  - xen/blkfront: force data bouncing when backend is untrusted (Roger Pau Monne)   
  - xen/netfront: force data bouncing when backend is untrusted (Roger Pau Monne)   
  - xen/netfront: fix leaking data in shared pages (Roger Pau Monne)   
  - xen/blkfront: fix leaking data in shared pages (Roger Pau Monne)   
  - selftests/rseq: Change type of rseq_offset to ptrdiff_t (Mathieu Desnoyers)   
  - selftests/rseq: x86-32: use %gs segment selector for accessing rseq thread area (Mathieu Desnoyers)   
  - selftests/rseq: x86-64: use %fs segment selector for accessing rseq thread area (Mathieu Desnoyers)   
  - selftests/rseq: Fix: work-around asm goto compiler bugs (Mathieu Desnoyers)   
  - selftests/rseq: Remove arm/mips asm goto compiler work-around (Mathieu Desnoyers)   
  - selftests/rseq: Fix warnings about #if checks of undefined tokens (Mathieu Desnoyers)   
  - selftests/rseq: Fix ppc32 offsets by using long rather than off_t (Mathieu Desnoyers)   
  - selftests/rseq: Fix ppc32 missing instruction selection "u" and "x" for load/store (Mathieu Desnoyers)   
  - selftests/rseq: Fix ppc32: wrong rseq_cs 32-bit field pointer on big endian (Mathieu Desnoyers)   
  - selftests/rseq: Uplift rseq selftests for compatibility with glibc-2.35 (Mathieu Desnoyers)   
  - selftests/rseq: Introduce thread pointer getters (Mathieu Desnoyers)   
  - selftests/rseq: Introduce rseq_get_abi() helper (Mathieu Desnoyers)   
  - selftests/rseq: Remove volatile from __rseq_abi (Mathieu Desnoyers)   
  - selftests/rseq: Remove useless assignment to cpu variable (Mathieu Desnoyers)   
  - selftests/rseq: introduce own copy of rseq uapi header (Mathieu Desnoyers)   
  - selftests/rseq: remove ARRAY_SIZE define from individual tests (Shuah Khan)   
  - selftests/bpf: Add test_verifier support to fixup kfunc call insns (Kumar Kartikeya Dwivedi)   
  - tcp: add a missing nf_reset_ct() in 3WHS handling (Eric Dumazet)   
  - MAINTAINERS: add Leah as xfs maintainer for 5.15.y (Leah Rumancik)   
  - net: tun: avoid disabling NAPI twice (Jakub Kicinski)   
  - mlxsw: spectrum_router: Fix rollback in tunnel next hop init (Petr Machata)   
  - ipv6: fix lockdep splat in in6_dump_addrs() (Eric Dumazet)   
  - ipv6/sit: fix ipip6_tunnel_get_prl return value (katrinzhou)   
  - tunnels: do not assume mac header is set in skb_tunnel_check_pmtu() (Eric Dumazet)   
  - ACPI: video: Change how we determine if brightness key-presses are handled (Hans de Goede)   
  - io_uring: ensure that send/sendmsg and recv/recvmsg check sqe->ioprio (Jens Axboe)   
  - epic100: fix use after free on rmmod (Tong Zhang)   
  - tipc: move bc link creation back to tipc_node_create (Xin Long)   
  - NFC: nxp-nci: Don't issue a zero length i2c_master_read() (Michael Walle)   
  - nfc: nfcmrvl: Fix irq_of_parse_and_map() return value (Krzysztof Kozlowski)   
  - powerpc/memhotplug: Add add_pages override for PPC (Aneesh Kumar K.V)   
  - net: bonding: fix use-after-free after 802.3ad slave unbind (Yevhen Orlov)   
  - net: phy: ax88772a: fix lost pause advertisement configuration (Oleksij Rempel)   
  - net: bonding: fix possible NULL deref in rlb code (Eric Dumazet)   
  - net: asix: fix "can't send until first packet is send" issue (Oleksij Rempel)   
  - net/sched: act_api: Notify user space if any actions were flushed before error (Victor Nogueira)   
  - net/dsa/hirschmann: Add missing of_node_get() in hellcreek_led_setup() (Liang He)   
  - netfilter: nft_dynset: restore set element counter when failing to update (Pablo Neira Ayuso)   
  - s390: remove unneeded 'select BUILD_BIN2C' (Masahiro Yamada)   
  - vdpa/mlx5: Update Control VQ callback information (Eli Cohen)   
  - PM / devfreq: exynos-ppmu: Fix refcount leak in of_get_devfreq_events (Miaoqian Lin)   
  - caif_virtio: fix race between virtio_device_ready() and ndo_open() (Jason Wang)   
  - vfs: fix copy_file_range() regression in cross-fs copies (Amir Goldstein)   
  - NFSD: restore EINVAL error translation in nfsd_commit() (Alexey Khoroshilov)   
  - net: ipv6: unexport __init-annotated seg6_hmac_net_init() (YueHaibing)   
  - selftests: mptcp: more stable diag tests (Paolo Abeni)   
  - usbnet: fix memory allocation in helpers (Oliver Neukum)   
  - net: usb: asix: do not force pause frames support (Oleksij Rempel)   
  - linux/dim: Fix divide by 0 in RDMA DIM (Tao Liu)   
  - RDMA/cm: Fix memory leak in ib_cm_insert_listen (Miaoqian Lin)   
  - RDMA/qedr: Fix reporting QP timeout attribute (Kamal Heib)   
  - net: dp83822: disable rx error interrupt (Enguerrand de Ribaucourt)   
  - net: dp83822: disable false carrier interrupt (Enguerrand de Ribaucourt)   
  - net: tun: stop NAPI when detaching queues (Jakub Kicinski)   
  - net: tun: unlink NAPI from device on destruction (Jakub Kicinski)   
  - net: dsa: bcm_sf2: force pause link settings (Doug Berger)   
  - selftests/net: pass ipv6_args to udpgso_bench's IPv6 TCP test (Dimitris Michailidis)   
  - virtio-net: fix race between ndo_open() and virtio_device_ready() (Jason Wang)   
  - net: usb: ax88179_178a: Fix packet receiving (Jose Alonso)   
  - net: rose: fix UAF bugs caused by timer handler (Duoming Zhou)   
  - SUNRPC: Fix READ_PLUS crasher (Chuck Lever)   
  - s390/archrandom: simplify back to earlier design and initialize earlier (Jason A. Donenfeld)   
  - dm raid: fix KASAN warning in raid5_add_disks (Mikulas Patocka)   
  - dm raid: fix accesses beyond end of raid member array (Heinz Mauelshagen)   
  - powerpc/bpf: Fix use of user_pt_regs in uapi (Naveen N. Rao)   
  - powerpc/book3e: Fix PUD allocation size in map_kernel_page() (Christophe Leroy)   
  - powerpc/prom_init: Fix kernel config grep (Liam Howlett)   
  - nvdimm: Fix badblocks clear off-by-one error (Chris Ye)   
  - nvme-pci: add NVME_QUIRK_BOGUS_NID for ADATA IM2P33F8ABR1 (Lamarque Vieira Souza)   
  - nvme-pci: add NVME_QUIRK_BOGUS_NID for ADATA XPG SX6000LNP (AKA SPECTRIX S40G) (Pablo Greco)   
  - net: phy: Don't trigger state machine while in suspend (Lukas Wunner)   
  - ipv6: take care of disable_policy when restoring routes (Nicolas Dichtel)   
  - ksmbd: use vfs_llseek instead of dereferencing NULL (Jason A. Donenfeld)   
  - ksmbd: check invalid FileOffset and BeyondFinalZero in FSCTL_ZERO_DATA (Namjae Jeon)   
  - ksmbd: set the range of bytes to zero without extending file size in FSCTL_ZERO_DATA (Namjae Jeon)   
  - drm/amdgpu: To flush tlb for MMHUB of RAVEN series (Ruili Ji)   
  - Revert "drm/amdgpu/display: set vblank_disable_immediate for DC" (Alex Deucher)   
  - cpufreq:cppc_cpufreq: prevent crash on reading freqdomain_cpus (chris hyser)  [Orabug: 34327463]  
  - vmcoreinfo: add kallsyms_num_syms symbol (Stephen Brennan)  [Orabug: 34475877]  
  - vmcoreinfo: include kallsyms symbols (Stephen Brennan)  [Orabug: 34475877]  
  - kallsyms: move declarations to internal header (Stephen Brennan)  [Orabug: 34475877]  
  - Revert "KVM: x86: Print error code in exception injection tracepoint iff valid" (Sherry Yang)  [Orabug: 34539458]  
  - uek-rpm: Enable IMA_APPRAISE_SB_BOOTPARAM (Eric Snowberg)  [Orabug: 34549007]  
  - integrity: Allow ima_appraise bootparam to be set when SB is enabled (Eric Snowberg)  [Orabug: 34549007]  
  - net/mlx5: E-Switch, change VFs default admin state to auto in switchdev (Maor Dickman)  [Orabug: 34533007]  
  - Revert "net/mlx5: E-Switch, change VFs default admin state to auto in switchdev" (Devesh Sharma)  [Orabug: 34532946]  
  - uek-rpm: Install kernel-rpm-macros as build dependency (Somasundaram Krishnasamy)  [Orabug: 34529696]


author: Jack Vogel <jack.vogel@oracle.com> [5.15.0-3.60.3.el9uek]
changelog:
  - audit: annotate branch direction for audit_in_mask() (Ankur Arora)  [Orabug: 34544783]  
  - audit: cache ctx->major in audit_filter_syscall() (Ankur Arora)  [Orabug: 34544783]


author: Jack Vogel <jack.vogel@oracle.com> [5.15.0-3.60.4.el9uek]
changelog:
  - netfilter: ebtables: reject blobs that don't provide all entry points (Florian Westphal)  [Orabug: 34513977]  
  - uek-rpm: Disable CONFIG_CRYPTO_STREEBOG (Victor Erminpour)  [Orabug: 34538054]  
  - uek-rpm: Disable CONFIG_CRYPTO_SM3 (Victor Erminpour)  [Orabug: 34538054]  
  - uek-rpm: Disable CONFIG_CRYPTO_SM4 (Victor Erminpour)  [Orabug: 34538054]  
  - af_key: Do not call xfrm_probe_algs in parallel (Herbert Xu)  [Orabug: 34566751]  {CVE-2022-3028} 
  - cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all() (Tetsuo Handa)  [Orabug: 34567776]  
  - cgroup: Fix threadgroup_rwsem <-> cpus_read_lock() deadlock (Tejun Heo)  [Orabug: 34567776]


author: Jack Vogel <jack.vogel@oracle.com> [5.15.0-3.60.5.el9uek]
changelog:
  - hwmon: (opbmc) Add support for AST2600 based Pilot (Jan Zdarek)  [Orabug: 34605427]  
  - random: Fix incorrect type for 'rc' variable (Harshit Mogalapalli)  [Orabug: 34596909]


author: Jack Vogel <jack.vogel@oracle.com> [5.15.0-3.60.5.1.el9uek]
changelog:
  - fs: remove no_llseek (Jason A. Donenfeld)  [Orabug: 34721465]  
  - vfio: do not set FMODE_LSEEK flag (Jason A. Donenfeld)  [Orabug: 34721465]  
  - dma-buf: remove useless FMODE_LSEEK flag (Jason A. Donenfeld)  [Orabug: 34721465]  
  - fs: do not compare against ->llseek (Jason A. Donenfeld)  [Orabug: 34721465]  
  - fs: clear or set FMODE_LSEEK based on llseek function (Jason A. Donenfeld)  [Orabug: 34721465]


author: Vijayendra Suman <vijayendra.suman@oracle.com> [5.15.0-302.167.4.el9uek]
changelog:
  - LTS version: v5.15.167 (Vijayendra Suman)
  - udp: fix receiving fraglist GSO packets (Felix Fietkau)
  - memcg: protect concurrent access to mem_cgroup_idr (Shakeel Butt) [Orabug: 36993003] {CVE-2024-43892}
  - btrfs: fix race between direct IO write and fsync when using same fd (Filipe Manana) [Orabug: 37195092] {CVE-2024-46734}
  - net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket (Daniel Borkmann)
  - x86/mm: Fix PTI for i386 some more (Thomas Gleixner)
  - net: drop bad gso csum_start and offset in virtio_net_hdr (Willem de Bruijn) [Orabug: 37195028] {CVE-2024-43897}
  - gso: fix dodgy bit handling for GSO_UDP_L4 (Yan Zhai)
  - net: change maximum number of UDP segments to 128 (Yuri Benditovich)
  - net: more strict VIRTIO_NET_HDR_GSO_UDP_L4 validation (Willem de Bruijn)
  - gpio: rockchip: fix OF node leak in probe() (Krzysztof Kozlowski)
  - drm/i915/fence: Mark debug_fence_free() with __maybe_unused (Andy Shevchenko)
  - drm/i915/fence: Mark debug_fence_init_onstack() with __maybe_unused (Andy Shevchenko)
  - ASoC: sunxi: sun4i-i2s: fix LRCLK polarity in i2s mode (Matteo Martelli)
  - nvmet-tcp: fix kernel crash if commands allocation fails (Maurizio Lombardi) [Orabug: 37074464] {CVE-2024-46737}
  - arm64: acpi: Harden get_cpu_for_acpi_id() against missing CPU entry (Jonathan Cameron) [Orabug: 37116411] {CVE-2024-46822}
  - arm64: acpi: Move get_cpu_for_acpi_id() to a header (James Morse)
  - ACPI: processor: Fix memory leaks in error paths of processor_add() (Jonathan Cameron)
  - ACPI: processor: Return an error if acpi_processor_get_info() fails in processor_add() (Jonathan Cameron)
  - workqueue: Improve scalability of workqueue watchdog touch (Nicholas Piggin) [Orabug: 37116487] {CVE-2024-46839}
  - workqueue: wq_watchdog_touch is always called with valid CPU (Nicholas Piggin)
  - nilfs2: protect references to superblock parameters exposed in sysfs (Ryusuke Konishi) [Orabug: 37074676] {CVE-2024-46780}
  - nilfs2: replace snprintf in show functions with sysfs_emit (Qing Wang)
  - ksmbd: Unlock on in ksmbd_tcp_set_interfaces() (Dan Carpenter)
  - ksmbd: unset the binding mark of a reused connection (Namjae Jeon) [Orabug: 37074716] {CVE-2024-46795}
  - perf/aux: Fix AUX buffer serialization (Peter Zijlstra) [Orabug: 37070802] {CVE-2024-46713}
  - uprobes: Use kzalloc to allocate xol area (Sven Schnelle)
  - clocksource/drivers/timer-of: Remove percpu irq related code (Daniel Lezcano)
  - clocksource/drivers/imx-tpm: Fix next event not taking effect sometime (Jacky Bai)
  - clocksource/drivers/imx-tpm: Fix return -ETIME when delta exceeds INT_MAX (Jacky Bai)
  - Drivers: hv: vmbus: Fix rescind handling in uio_hv_generic (Naman Jain)
  - uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind (Saurabh Sengar) [Orabug: 37074472] {CVE-2024-46739}
  - nvmem: Fix return type of devm_nvmem_device_get() in kerneldoc (Geert Uytterhoeven)
  - binder: fix UAF caused by offsets overwrite (Carlos Llamas) [Orabug: 37074476] {CVE-2024-46740}
  - usb: dwc3: core: update LC timer as per USB Spec V3.2 (Faisal Hassan)
  - iio: adc: ad7124: fix chip ID mismatch (Dumitru Ceclan)
  - iio: adc: ad7124: fix config comparison (Dumitru Ceclan)
  - iio: fix scale application in iio_convert_raw_to_processed_unlocked (Matteo Martelli)
  - iio: buffer-dmaengine: fix releasing dma channel on error (David Lechner)
  - staging: iio: frequency: ad9834: Validate frequency parameter value (Aleksandr Mishin) [Orabug: 37159727] {CVE-2024-47663}
  - cifs: Check the lease context if we actually got a lease (Ronnie Sahlberg)
  - NFSv4: Add missing rescheduling points in nfs_client_return_marked_delegations (Trond Myklebust)
  - ata: pata_macio: Use WARN instead of BUG (Michael Ellerman)
  - MIPS: cevt-r4k: Don't call get_c0_compare_int if timer irq is installed (Jiaxun Yang) [Orabug: 37116454] {CVE-2024-46832}
  - lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc() (Kent Overstreet) [Orabug: 37159756] {CVE-2024-47668}
  - of/irq: Prevent device address out-of-bounds read in interrupt map walk (Stefan Wiehler) [Orabug: 37074487] {CVE-2024-46743}
  - Squashfs: sanity check symbolic link size (Phillip Lougher) [Orabug: 37074494] {CVE-2024-46744}
  - usbnet: ipheth: race between ipheth_close and error handling (Oliver Neukum)
  - Input: uinput - reject requests with unreasonable number of slots (Dmitry Torokhov) [Orabug: 37074502] {CVE-2024-46745}
  - HID: amd_sfh: free driver_data after destroying hid device (Olivier Sobrie) [Orabug: 37074507] {CVE-2024-46746}
  - HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup (Camila Alvarez) [Orabug: 37074512] {CVE-2024-46747}
  - s390/vmlinux.lds.S: Move ro_after_init section behind rodata section (Heiko Carstens)
  - btrfs: initialize location to fix -Wmaybe-uninitialized in btrfs_lookup_dentry() (David Sterba)
  - kselftests: dmabuf-heaps: Ensure the driver name is null-terminated (Zenghui Yu)
  - i3c: mipi-i3c-hci: Error out instead on BUG_ON() in IBI DMA setup (Jarkko Nikula) [Orabug: 37159737] {CVE-2024-47665}
  - net: dpaa: avoid on-stack arrays of NR_CPUS elements (Vladimir Oltean)
  - PCI: Add missing bridge lock to pci_bus_lock() (Dan Williams) [Orabug: 37074530] {CVE-2024-46750}
  - riscv: set trap vector earlier (yang.zhang)
  - btrfs: replace BUG_ON() with error handling at update_ref_for_cow() (Filipe Manana) [Orabug: 37074542] {CVE-2024-46752}
  - btrfs: clean up our handling of refs == 0 in snapshot delete (Josef Bacik) [Orabug: 37116493] {CVE-2024-46840}
  - btrfs: replace BUG_ON with ASSERT in walk_down_proc() (Josef Bacik)
  - fs/ntfs3: Check more cases when directory is corrupted (Konstantin Komarov)
  - smp: Add missing destroy_work_on_stack() call in smp_call_on_cpu() (Zqiang)
  - wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id() (Sascha Hauer) [Orabug: 37074560] {CVE-2024-46755}
  - dma-mapping: benchmark: Don't starve others when doing the test (Yicong Yang)
  - ext4: fix possible tid_t sequence overflows (Luis Henriques (SUSE))
  - drm/amdgpu: Set no_hw_access when VF request full GPU fails (Yifan Zha)
  - libbpf: Add NULL checks to bpf_object__{prev_map,next_map} (Andreas Ziegler)
  - hwmon: (w83627ehf) Fix underflows seen when writing limit attributes (Guenter Roeck) [Orabug: 37074565] {CVE-2024-46756}
  - hwmon: (nct6775-core) Fix underflows seen when writing limit attributes (Guenter Roeck) [Orabug: 37074570] {CVE-2024-46757}
  - hwmon: (lm95234) Fix underflows seen when writing limit attributes (Guenter Roeck) [Orabug: 37074578] {CVE-2024-46758}
  - hwmon: (adc128d818) Fix underflows seen when writing limit attributes (Guenter Roeck) [Orabug: 37074583] {CVE-2024-46759}
  - pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv (Krishna Kumar) [Orabug: 37074594] {CVE-2024-46761}
  - devres: Initialize an uninitialized struct member (Zijun Hu)
  - um: line: always fill *error_out in setup_one_line() (Johannes Berg) [Orabug: 37116517] {CVE-2024-46844}
  - cgroup: Protect css->cgroup write under css_set_lock (Waiman Long)
  - iommu/vt-d: Handle volatile descriptor status read (Jacob Pan)
  - dm init: Handle minors larger than 255 (Benjamin Marzinski)
  - ASoC: topology: Properly initialize soc_enum values (Amadeusz Sławiński)
  - net: dsa: vsc73xx: fix possible subblocks range of CAPT block (Pawel Dembicki)
  - net: bridge: br_fdb_external_learn_add(): always set EXT_LEARN (Jonas Gorski)
  - fou: Fix null-ptr-deref in GRO. (Kuniyuki Iwashima) [Orabug: 37074606] {CVE-2024-46763}
  - gro: remove rcu_read_lock/rcu_read_unlock from gro_complete handlers (Eric Dumazet)
  - gro: remove rcu_read_lock/rcu_read_unlock from gro_receive handlers (Eric Dumazet)
  - bareudp: Fix device stats updates. (Guillaume Nault)
  - usbnet: modern method to get random MAC (Oliver Neukum)
  - net: usb: don't write directly to netdev->dev_addr (Jakub Kicinski)
  - ice: check ICE_VSI_DOWN under rtnl_lock when preparing for reset (Larysa Zaremba)
  - igc: Unlock on error in igc_io_resume() (Dan Carpenter)
  - tcp_bpf: fix return value of tcp_bpf_sendmsg() (Cong Wang) [Orabug: 37074692] {CVE-2024-46783}
  - platform/x86: dell-smbios: Fix error path in dell_smbios_init() (Aleksandr Mishin)
  - igb: Fix not clearing TimeSync interrupts for 82580 (Daiwei Li)
  - can: m_can: Release irq on error in m_can_open (Simon Horman)
  - can: bcm: Remove proc entry when dev is unregistered. (Kuniyuki Iwashima) [Orabug: 37074624] {CVE-2024-46771}
  - drm/amdgpu: check for LINEAR_ALIGNED correctly in check_tiling_flags_gfx6 (Marek Olšák)
  - pcmcia: Use resource_size function on resource object (Jules Irenge)
  - media: qcom: camss: Add check for v4l2_fwnode_endpoint_parse (Chen Ni)
  - PCI: keystone: Add workaround for Errata #i2037 (AM65x SR 1.0) (Kishon Vijay Abraham I) [Orabug: 37159749] {CVE-2024-47667}
  - media: vivid: don't set HDMI TX controls if there are no HDMI outputs (Hans Verkuil)
  - drm/amd/display: Check HDCP returned status (Alex Hung)
  - usb: uas: set host status byte on data completion error (Shantanu Goel)
  - wifi: brcmsmac: advertise MFP_CAPABLE to enable WPA3 (Arend van Spriel)
  - leds: spi-byte: Call of_node_put() on error path (Andy Shevchenko)
  - media: vivid: fix wrong sizeimage value for mplane (Hans Verkuil)
  - udf: Avoid excessive partition lengths (Jan Kara) [Orabug: 37074664] {CVE-2024-46777}
  - netfilter: nf_conncount: fix wrong variable type (Yunjian Wang)
  - iommu: sun50i: clear bypass register (Jernej Skrabec)
  - af_unix: Remove put_pid()/put_cred() in copy_peercred(). (Kuniyuki Iwashima)
  - irqchip/armada-370-xp: Do not allow mapping IRQ 0 and 1 (Pali Rohár)
  - smack: unix sockets: fix accept()ed socket label (Konstantin Andreev)
  - ALSA: hda: Add input value sanity checks to HDMI channel map controls (Takashi Iwai)
  - mptcp: pm: send ACK on an active subflow (Matthieu Baerts (NGI0))
  - mptcp: pr_debug: add missing
   at the end (Matthieu Baerts (NGI0))
  - mptcp: pm: skip connecting to already established sf (Matthieu Baerts (NGI0))
  - mptcp: pm: do not remove already closed subflows (Matthieu Baerts (NGI0))
  - mptcp: pm: ADD_ADDR 0 is not a new address (Matthieu Baerts (NGI0))
  - mptcp: close subflow when receiving TCP+FIN (Matthieu Baerts (NGI0))
  - mptcp: avoid duplicated SUB_CLOSED events (Matthieu Baerts (NGI0))
  - mptcp: pm: avoid possible UaF when selecting endp (Matthieu Baerts (NGI0))
  - mptcp: constify a bunch of of helpers (Paolo Abeni)
  - mptcp: pm: fullmesh: select the right ID later (Matthieu Baerts (NGI0))
  - mptcp: pm: check add_addr_accept_max before accepting new ADD_ADDR (Matthieu Baerts (NGI0))
  - mptcp: pm: only decrement add_addr_accepted for MPJ req (Matthieu Baerts (NGI0))
  - mptcp: pm: re-using ID of unused flushed subflows (Matthieu Baerts (NGI0))
  - nilfs2: fix state management in error path of log writing function (Ryusuke Konishi) [Orabug: 37159764] {CVE-2024-47669}
  - nilfs2: fix missing cleanup on rollforward recovery error (Ryusuke Konishi) [Orabug: 37074683] {CVE-2024-46781}
  - sched: sch_cake: fix bulk flow accounting logic for host fairness (Toke Høiland-Jørgensen) [Orabug: 37116442] {CVE-2024-46828}
  - ila: call nf_unregister_net_hooks() sooner (Eric Dumazet) [Orabug: 37074688] {CVE-2024-46782}
  - tracing: Avoid possible softlockup in tracing_iter_reset() (Zheng Yejian)
  - can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open (Simon Arlott) [Orabug: 37074711] {CVE-2024-46791}
  - clk: qcom: clk-alpha-pll: Fix the trion pll postdiv set rate API (Satya Priya Kakitapalli)
  - clk: qcom: clk-alpha-pll: Fix the pll post div mask (Satya Priya Kakitapalli)
  - fuse: use unsigned type for getxattr/listxattr size truncation (Jann Horn)
  - fuse: update stats for pages in dropped aux writeback list (Joanne Koong)
  - mmc: cqhci: Fix checking of CQHCI_HALT state (Seunghwan Baek)
  - mmc: sdhci-of-aspeed: fix module autoloading (Liao Chen)
  - mmc: dw_mmc: Fix IDMAC operation with pages bigger than 4K (Sam Protsenko)
  - Bluetooth: MGMT: Ignore keys being loaded with invalid type (Luiz Augusto von Dentz)
  - Revert "Bluetooth: MGMT/SMP: Fix address type when using SMP over BREDR/LE" (Luiz Augusto von Dentz)
  - nvme-pci: Add sleep quirk for Samsung 990 Evo (Georg Gottleuber)
  - rtmutex: Drop rt_mutex::wait_lock before scheduling (Roland Xu) [Orabug: 37116445] {CVE-2024-46829}
  - irqchip/gic-v2m: Fix refcount leak in gicv2m_of_init() (Ma Ke)
  - ata: libata: Fix memory leak for error path in ata_host_alloc() (Zheng Qixing)
  - ALSA: hda/realtek: Support mute LED on HP Laptop 14-dq2xxx (Maximilien Perreault)
  - ALSA: hda/realtek: add patch for internal mic in Lenovo V145 (Terry Cheong)
  - ALSA: hda/conexant: Add pincfg quirk to enable top speakers on Sirius devices (Christoffer Sandberg)
  - KVM: SVM: Don't advertise Bus Lock Detect to guest if SVM support is missing (Ravi Bangoria)
  - KVM: SVM: fix emulation of msr reads/writes of MSR_FS_BASE and MSR_GS_BASE (Maxim Levitsky)
  - ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object (robelin) [Orabug: 37074721] {CVE-2024-46798}
  - sch/netem: fix use after free in netem_dequeue (Stephen Hemminger) [Orabug: 37074725] {CVE-2024-46800}
  - i2c: Use IS_REACHABLE() for substituting empty ACPI functions (Richard Fitzgerald)
  - ext4: handle redirtying in ext4_bio_write_page() (Jan Kara)
  - udf: Limit file size to 4TB (Jan Kara)
  - ext4: reject casefold inode flag without casefold feature (Eric Biggers)
  - rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow (Nikita Kiryushin) [Orabug: 36753533] {CVE-2024-38577}
  - virtio_net: Fix napi_skb_cache_put warning (Breno Leitao) [Orabug: 36964473] {CVE-2024-43835}
  - drm/amd/pm: Fix the null pointer dereference for vega10_hwmgr (Bob Zhou) [Orabug: 36993065] {CVE-2024-43905}
  - media: uvcvideo: Enforce alignment of frame and interval (Ricardo Ribalda)
  - drm/amd/display: Skip wbscl_set_scaler_filter if filter is null (Alex Hung) [Orabug: 37073031] {CVE-2024-46714}
  - block: remove the blk_flush_integrity call in blk_integrity_unregister (Christoph Hellwig)
  - wifi: cfg80211: make hash table duplicates more survivable (Johannes Berg)
  - drm/bridge: tc358767: Check if fully initialized before signalling HPD event via IRQ (Marek Vasut) [Orabug: 37116336] {CVE-2024-46810}
  - drm/meson: plane: Add error handling (Haoran Liu)
  - smack: tcp: ipv4, fix incorrect labeling (Casey Schaufler)
  - usb: typec: ucsi: Fix null pointer dereference in trace (Abhishek Pandit-Subedi) [Orabug: 37073064] {CVE-2024-46719}
  - usbip: Don't submit special requests twice (Simon Holesch)
  - rcu/nocb: Remove buggy bypass lock contention mitigation (Frederic Weisbecker)
  - ionic: fix potential irq name truncation (Shannon Nelson)
  - RDMA/efa: Properly handle unexpected AQ completions (Michael Margolin)
  - hwspinlock: Introduce hwspin_lock_bust() (Richard Maina)
  - PCI: al: Check IORESOURCE_BUS existence during probe (Aleksandr Mishin)
  - cpufreq: scmi: Avoid overflow of target_freq in fast switch (Jagadeesh Kona)
  - wifi: iwlwifi: remove fw_running op (Shahar S Matityahu)
  - drm/amdgpu: update type of buf size to u32 for eeprom functions (Tao Zhou)
  - drm/amd/pm: check negtive return for table entries (Jesse Zhang)
  - drm/amdgpu: the warning dereferencing obj for nbio_v7_4 (Jesse Zhang) [Orabug: 37116393] {CVE-2024-46819}
  - drm/amd/pm: check specific index for aldebaran (Jesse Zhang)
  - drm/amdgpu: fix the waring dereferencing hive (Jesse Zhang) [Orabug: 37116300] {CVE-2024-46805}
  - drm/amdgpu/pm: Check input value for CUSTOM profile mode setting on legacy SOCs (Ma Jun)
  - apparmor: fix possible NULL pointer dereference (Leesoo Ahn) [Orabug: 37073077] {CVE-2024-46721}
  - drm/amdkfd: Reconcile the definition and use of oem_id in struct kfd_topology_device (Michael Chen)
  - drm/amdgpu: fix mc_data out-of-bounds read warning (Tim Huang) [Orabug: 37073082] {CVE-2024-46722}
  - drm/amdgpu: fix ucode out-of-bounds read warning (Tim Huang) [Orabug: 37073087] {CVE-2024-46723}
  - drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number (Ma Jun) [Orabug: 37073093] {CVE-2024-46724}
  - drm/amdgpu: Fix out-of-bounds write warning (Ma Jun) [Orabug: 37073098] {CVE-2024-46725}
  - drm/amdgpu/pm: Fix uninitialized variable agc_btc_response (Ma Jun)
  - drm/amdgpu/pm: Fix uninitialized variable warning for smu10 (Ma Jun)
  - drm/amd/amdgpu: Check tbo resource pointer (Asad Kamal) [Orabug: 37116315] {CVE-2024-46807}
  - drm/amd/display: Fix Coverity INTEGER_OVERFLOW within dal_gpio_service_create (Hersen Wu)
  - drm/amd/display: Check msg_id before processing transcation (Alex Hung) [Orabug: 37116360] {CVE-2024-46814}
  - drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[] (Alex Hung) [Orabug: 37116365] {CVE-2024-46815}
  - drm/amd/display: Add array index check for hdcp ddc access (Hersen Wu) [Orabug: 37116295] {CVE-2024-46804}
  - drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6 (Hersen Wu) [Orabug: 37116375] {CVE-2024-46817}
  - drm/amd/display: Check gpio_id before used as array index (Alex Hung) [Orabug: 37116384] {CVE-2024-46818}
  - drm/amdgpu: avoid reading vf2pf info size from FB (Zhigang Luo)
  - drm/amd/pm: fix uninitialized variable warnings for vega10_hwmgr (Tim Huang)
  - drm/amdgpu: fix uninitialized scalar variable warning (Tim Huang)
  - drm/amd/pm: fix the Out-of-bounds read warning (Jesse Zhang) [Orabug: 37073129] {CVE-2024-46731}
  - drm/amd/pm: fix warning using uninitialized value of max_vid_step (Jesse Zhang)
  - drm/amd/pm: fix uninitialized variable warning for smu8_hwmgr (Tim Huang)
  - drm/amdgpu/pm: Check the return value of smum_send_msg_to_smc (Ma Jun)
  - drm/amdgpu: fix overflowed array index read warning (Tim Huang)
  - drm/amd/display: Assign linear_pitch_alignment even for VM (Alvin Lee) [Orabug: 37073135] {CVE-2024-46732}
  - drm/amdgpu: Fix uninitialized variable warning in amdgpu_afmt_acr (Ma Jun)
  - net: usb: qmi_wwan: add MeiG Smart SRM825L (ZHANG Yuntian)
  - dma-debug: avoid deadlock between dma debug vs printk and netconsole (Rik van Riel)
  - i2c: Fix conditional for substituting empty ACPI functions (Richard Fitzgerald)
  - ALSA: hda/conexant: Mute speakers at suspend / shutdown (Takashi Iwai)
  - ALSA: hda/generic: Add a helper to mute speakers at suspend/shutdown (Takashi Iwai)
  - drm: panel-orientation-quirks: Add quirk for OrangePi Neo (Philip Mueller)
  - LTS version: v5.15.166 (Vijayendra Suman)
  - apparmor: fix policy_unpack_test on big endian systems (Guenter Roeck)
  - scsi: aacraid: Fix double-free on probe failure (Ben Hutchings) [Orabug: 37070699] {CVE-2024-46673}
  - igc: Fix qbv tx latency by setting gtxoffset (Faizal Rahim)
  - igc: Fix reset adapter logics when tx mode change (Faizal Rahim)
  - phy: zynqmp: Enable reference clock correctly (Sean Anderson)
  - usb: cdnsp: fix for Link TRB with TC (Pawel Laszczak)
  - usb: cdnsp: fix incorrect index in cdnsp_get_hw_deq function (Pawel Laszczak)
  - usb: core: sysfs: Unmerge @usb3_hardware_lpm_attr_group in remove_power_attributes() (Zijun Hu)
  - usb: dwc3: st: add missing depopulate in probe error path (Krzysztof Kozlowski)
  - usb: dwc3: st: fix probed platform device ref count on probe error path (Krzysztof Kozlowski) [Orabug: 37070704] {CVE-2024-46674}
  - usb: dwc3: core: Prevent USB core invalid event buffer address access (Selvarasu Ganesan) [Orabug: 37070709] {CVE-2024-46675}
  - usb: dwc3: omap: add missing depopulate in probe error path (Krzysztof Kozlowski)
  - USB: serial: option: add MeiG Smart SRM825L (ZHANG Yuntian)
  - cdc-acm: Add DISABLE_ECHO quirk for GE HealthCare UI Controller (Ian Ray)
  - soc: qcom: cmd-db: Map shared memory as WC, not WB (Volodymyr Babchuk)
  - nfc: pn533: Add poll mod list filling check (Aleksandr Mishin) [Orabug: 37070716] {CVE-2024-46676}
  - net: busy-poll: use ktime_get_ns() instead of local_clock() (Eric Dumazet)
  - gtp: fix a potential NULL pointer dereference (Cong Wang) [Orabug: 37070721] {CVE-2024-46677}
  - ethtool: check device is present when getting link settings (Jamie Bainbridge) [Orabug: 37070727] {CVE-2024-46679}
  - dmaengine: dw: Add memory bus width verification (Serge Semin)
  - dmaengine: dw: Add peripheral bus width verification (Serge Semin)
  - phy: xilinx: phy-zynqmp: Fix SGMII linkup failure on resume (Piyush Mehta)
  - phy: xilinx: phy-zynqmp: dynamic clock support for power-save (Piyush Mehta)
  - phy: xilinx: add runtime PM support (Piyush Mehta)
  - PM: runtime: Add DEFINE_RUNTIME_DEV_PM_OPS() macro (Paul Cercueil)
  - PM: core: Add EXPORT[_GPL]_SIMPLE_DEV_PM_OPS macros (Paul Cercueil)
  - PM: core: Remove DEFINE_UNIVERSAL_DEV_PM_OPS() macro (Paul Cercueil)
  - soundwire: stream: fix programming slave ports for non-continous port maps (Krzysztof Kozlowski)
  - cgroup/cpuset: Prevent UAF in proc_cpuset_show() (Chen Ridong) [Orabug: 36964509] {CVE-2024-43853}
  - ata: libata-core: Fix null pointer dereference on error (Niklas Cassel) [Orabug: 36897456] {CVE-2024-41098}
  - drm/amdkfd: don't allow mapping the MMIO HDP page with large pages (Alex Deucher) [Orabug: 36867630] {CVE-2024-41011}
  - Revert "MIPS: Loongson64: reset: Prioritise firmware service" (Greg Kroah-Hartman)
  - mptcp: sched: check both backup in retrans (Matthieu Baerts (NGI0))
  - net: mana: Fix race of mana_hwc_post_rx_wqe and new hwc response (Haiyang Zhang)
  - wifi: mwifiex: duplicate static structs used in driver instances (Sascha Hauer)
  - pinctrl: single: fix potential NULL dereference in pcs_get_function() (Ma Ke) [Orabug: 37070743] {CVE-2024-46685}
  - pinctrl: rockchip: correct RK3328 iomux width flag for GPIO2-B pins (Huang-Huang Bao)
  - btrfs: run delayed iputs when flushing delalloc (Josef Bacik)
  - drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc (Jesse Zhang) [Orabug: 36898008] {CVE-2024-42228}
  - tools: move alignment-related macros to new <linux/align.h> (Alexander Lobakin)
  - Input: MT - limit max slots (Tetsuo Handa) [Orabug: 37029136] {CVE-2024-45008}
  - Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO (Lee, Chun-Yi) [Orabug: 35358656] {CVE-2023-31083}
  - mm/numa: no task_numa_fault() call if PTE is changed (Zi Yan)
  - mm/numa: no task_numa_fault() call if PMD is changed (Zi Yan)
  - ALSA: timer: Relax start tick time check for slave timer elements (Takashi Iwai)
  - hwmon: (ltc2992) Fix memory leak in ltc2992_parse_dt() (Javier Carrasco)
  - Revert "drm/amd/display: Validate hw_points_num before using it" (Alex Hung)
  - mmc: dw_mmc: allow biu and ciu clocks to defer (Ben Whitten)
  - KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3 (Marc Zyngier) [Orabug: 37070792] {CVE-2024-46707}
  - cxgb4: add forgotten u64 ivlan cast before shift (Nikolay Kuratov)
  - HID: microsoft: Add rumble support to latest xbox controllers (Siarhei Vishniakou)
  - HID: wacom: Defer calculation of resolution until resolution_code is known (Jason Gerecke)
  - MIPS: Loongson64: Set timer mode in cpu-probe (Jiaxun Yang)
  - scsi: core: Fix the return value of scsi_logical_block_count() (Chaotian Jing)
  - Bluetooth: MGMT: Add error handling to pair_device() (Griffin Kroah-Hartman) [Orabug: 36992975] {CVE-2024-43884}
  - mmc: mmc_test: Fix NULL dereference on allocation failure (Dan Carpenter) [Orabug: 37070690] {CVE-2024-45028}
  - drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails (Dmitry Baryshkov) [Orabug: 37029059] {CVE-2024-44982}
  - drm/msm/dp: reset the link phy params before link training (Abhinav Kumar)
  - drm/msm/dpu: don't play tricks with debug macros (Dmitry Baryshkov)
  - net: xilinx: axienet: Fix dangling multicast addresses (Sean Anderson)
  - net: xilinx: axienet: Always disable promiscuous mode (Sean Anderson)
  - netfilter: flowtable: validate vlan header (Pablo Neira Ayuso) [Orabug: 37029063] {CVE-2024-44983}
  - ipv6: prevent possible UAF in ip6_xmit() (Eric Dumazet) [Orabug: 37029066] {CVE-2024-44985}
  - ipv6: fix possible UAF in ip6_finish_output2() (Eric Dumazet) [Orabug: 37029068] {CVE-2024-44986}
  - ipv6: prevent UAF in ip6_send_skb() (Eric Dumazet) [Orabug: 37029075] {CVE-2024-44987}
  - netem: fix return value if duplicate enqueue fails (Stephen Hemminger) [Orabug: 37070659] {CVE-2024-45016}
  - net: dsa: mv88e6xxx: Fix out-of-bound access (Joseph Huang) [Orabug: 37029081] {CVE-2024-44988}
  - net: dsa: mv88e6xxx: replace ATU violation prints with trace points (Vladimir Oltean)
  - net: dsa: mv88e6xxx: read FID when handling ATU violations (Hans J. Schultz)
  - dpaa2-switch: Fix error checking in dpaa2_switch_seed_bp() (Dan Carpenter)
  - ice: fix ICE_LAST_OFFSET formula (Maciej Fijalkowski)
  - bonding: fix xfrm state handling when clearing active slave (Nikolay Aleksandrov)
  - bonding: fix xfrm real_dev null pointer dereference (Nikolay Aleksandrov) [Orabug: 37029084] {CVE-2024-44989}
  - bonding: fix null pointer deref in bond_ipsec_offload_ok (Nikolay Aleksandrov) [Orabug: 37029087] {CVE-2024-44990}
  - bonding: fix bond_ipsec_offload_ok return type (Nikolay Aleksandrov)
  - ip6_tunnel: Fix broken GRO (Thomas Bogendoerfer)
  - netfilter: nft_counter: Synchronize nft_counter_reset() against reader. (Sebastian Andrzej Siewior)
  - netfilter: nft_counter: Disable BH in nft_counter_offload_stats(). (Sebastian Andrzej Siewior)
  - kcm: Serialise kcm_sendmsg() for the same socket. (Kuniyuki Iwashima) [Orabug: 37013760] {CVE-2024-44946}
  - tc-testing: don't access non-existent variable on exception (Simon Horman)
  - Bluetooth: SMP: Fix assumption of Central always being Initiator (Luiz Augusto von Dentz)
  - Bluetooth: hci_core: Fix LE quote calculation (Luiz Augusto von Dentz)
  - platform/surface: aggregator: Fix warning when controller is destroyed in probe (Maximilian Luz)
  - net: mana: Fix doorbell out of order violation and avoid unnecessary doorbell rings (Long Li)
  - dm suspend: return -ERESTARTSYS instead of -EINTR (Mikulas Patocka)
  - media: solo6x10: replace max(a, min(b, c)) by clamp(b, a, c) (Aurelien Jarno)
  - nfsd: make svc_stat per-network namespace instead of global (Josef Bacik)
  - nfsd: remove nfsd_stats, make th_cnt a global counter (Josef Bacik)
  - nfsd: make all of the nfsd stats per-network namespace (Josef Bacik)
  - nfsd: expose /proc/net/sunrpc/nfsd in net namespaces (Josef Bacik)
  - nfsd: rename NFSD_NET_* to NFSD_STATS_* (Josef Bacik)
  - sunrpc: use the struct net as the svc proc private (Josef Bacik)
  - sunrpc: remove ->pg_stats from svc_program (Josef Bacik)
  - sunrpc: pass in the sv_stats struct through svc_create_pooled (Josef Bacik)
  - nfsd: stop setting ->pg_stats for unused stats (Josef Bacik)
  - sunrpc: don't change ->sv_stats if it doesn't exist (Josef Bacik)
  - NFSD: Fix frame size warning in svc_export_parse() (Chuck Lever)
  - NFSD: Rewrite synopsis of nfsd_percpu_counters_init() (Chuck Lever)
  - NFSD: Refactor the duplicate reply cache shrinker (Chuck Lever)
  - NFSD: Replace nfsd_prune_bucket() (Chuck Lever)
  - NFSD: Rename nfsd_reply_cache_alloc() (Chuck Lever)
  - NFSD: Refactor nfsd_reply_cache_free_locked() (Chuck Lever)
  - nfsd: move init of percpu reply_cache_stats counters back to nfsd_init_net (Jeff Layton)
  - nfsd: move reply cache initialization into nfsd startup (Jeff Layton)
  - block: use "unsigned long" for blk_validate_block_size(). (Tetsuo Handa)
  - gtp: pull network headers in gtp_dev_xmit() (Eric Dumazet) [Orabug: 37029110] {CVE-2024-44999}
  - hrtimer: Prevent queuing of hrtimer without a function callback (Phil Chang)
  - nvmet-rdma: fix possible bad dereference when freeing rsps (Sagi Grimberg)
  - ext4: set the type of max_zeroout to unsigned int to avoid overflow (Baokun Li)
  - irqchip/gic-v3-its: Remove BUG_ON in its_vpe_irq_domain_alloc (Guanrui Huang)
  - usb: dwc3: core: Skip setting event buffers for host only controllers (Krishna Kurapati)
  - platform/x86: lg-laptop: fix %s null argument warning (Gergo Koteles)
  - clocksource: Make watchdog and suspend-timing multiplication overflow safe (Adrian Hunter)
  - s390/iucv: fix receive buffer virtual vs physical address confusion (Alexander Gordeev)
  - openrisc: Call setup_memory() earlier in the init sequence (Oreoluwa Babatunde)
  - NFS: avoid infinite loop in pnfs_update_layout. (NeilBrown)
  - nvmet-tcp: do not continue for invalid icreq (Hannes Reinecke)
  - net: hns3: add checking for vf id of mailbox (Jian Shen)
  - Bluetooth: bnep: Fix out-of-bound access (Luiz Augusto von Dentz)
  - usb: gadget: fsl: Increase size of name buffer for endpoints (Uwe Kleine-König)
  - f2fs: fix to do sanity check in update_sit_entry (Zhiguo Niu)
  - btrfs: delete pointless BUG_ON check on quota root in btrfs_qgroup_account_extent() (David Sterba)
  - btrfs: change BUG_ON to assertion in tree_move_down() (David Sterba)
  - btrfs: send: handle unexpected data in header buffer in begin_cmd() (David Sterba)
  - btrfs: handle invalid root reference found in may_destroy_subvol() (David Sterba)
  - btrfs: change BUG_ON to assertion when checking for delayed_node root (David Sterba)
  - powerpc/boot: Only free if realloc() succeeds (Michael Ellerman)
  - powerpc/boot: Handle allocation failure in simple_realloc() (Li zeming)
  - parisc: Use irq_enter_rcu() to fix warning at kernel/context_tracking.c:367 (Helge Deller)
  - memory: stm32-fmc2-ebi: check regmap_read return value (Christophe Kerello)
  - x86: Increase brk randomness entropy for 64-bit systems (Kees Cook)
  - md: clean up invalid BUG_ON in md_ioctl (Li Nan)
  - netlink: hold nlk->cb_mutex longer in __netlink_dump_start() (Eric Dumazet)
  - clocksource/drivers/arm_global_timer: Guard against division by zero (Martin Blumenstingl)
  - virtiofs: forbid newlines in tags (Stefan Hajnoczi)
  - drm/lima: set gp bus_stop bit before hard reset (Erico Nunes)
  - net/sun3_82586: Avoid reading past buffer in debug output (Kees Cook)
  - media: drivers/media/dvb-core: copy user arrays safely (Philipp Stanner)
  - fs: binfmt_elf_efpic: don't use missing interpreter's properties (Max Filippov)
  - media: pci: cx23885: check cx23885_vdev_init() return (Hans Verkuil)
  - quota: Remove BUG_ON from dqget() (Jan Kara)
  - fuse: fix UAF in rcu pathwalks (Al Viro)
  - afs: fix __afs_break_callback() / afs_drop_open_mmap() race (Al Viro)
  - ext4: do not trim the group with corrupted block bitmap (Baokun Li)
  - nvmet-trace: avoid dereferencing pointer too early (Daniel Wagner)
  - powerpc/xics: Check return value of kasprintf in icp_native_map_one_cpu (Kunwu Chan)
  - memory: tegra: Skip SID programming if SID registers aren't set (Ashish Mhetre)
  - arm64: Fix KASAN random tag seed initialization (Samuel Holland)
  - hwmon: (ltc2992) Avoid division by zero (Antoniu Miclaus)
  - IB/hfi1: Fix potential deadlock on &irq_src_lock and &dd->uctxt_lock (Chengfeng Ye)
  - wifi: iwlwifi: fw: Fix debugfs command sending (Mukesh Sisodiya)
  - wifi: iwlwifi: abort scan when rfkill on but device enabled (Miri Korenblit)
  - gfs2: setattr_chown: Add missing initialization (Andreas Gruenbacher)
  - scsi: spi: Fix sshdr use (Mike Christie)
  - media: qcom: venus: fix incorrect return value (Hans Verkuil)
  - binfmt_misc: cleanup on filesystem umount (Christian Brauner)
  - staging: ks7010: disable bh on tx_dev_lock (Chengfeng Ye)
  - drm/amd/display: Validate hw_points_num before using it (Alex Hung)
  - staging: iio: resolver: ad2s1210: fix use before initialization (David Lechner)
  - media: radio-isa: use dev_name to fill in bus_info (Hans Verkuil)
  - i3c: mipi-i3c-hci: Do not unmap region not mapped for transfer (Jarkko Nikula)
  - i3c: mipi-i3c-hci: Remove BUG() when Ring Abort request times out (Jarkko Nikula)
  - s390/smp,mcck: fix early IPI handling (Heiko Carstens)
  - RDMA/rtrs: Fix the problem of variable not initialized fully (Zhu Yanjun)
  - i2c: riic: avoid potential division by zero (Wolfram Sang)
  - wifi: cw1200: Avoid processing an invalid TIM IE (Jeff Johnson)
  - wifi: mac80211: fix BA session teardown race (Johannes Berg)
  - wifi: cfg80211: check wiphy mutex is held for wdev mutex (Johannes Berg)
  - ssb: Fix division by zero issue in ssb_calc_clock_rate (Rand Deeb)
  - ALSA: hda/realtek: Fix noise from speakers on Lenovo IdeaPad 3 15IAU7 (Parsa Poorshikhian)
  - net: hns3: fix a deadlock problem when config TC during resetting (Jie Wang) [Orabug: 37029097] {CVE-2024-44995}
  - net: hns3: fix wrong use of semaphore up (Jie Wang)
  - netfilter: nf_queue: drop packets with cloned unconfirmed conntracks (Florian Westphal)
  - netfilter: flowtable: initialise extack before use (Donald Hunter) [Orabug: 37070666] {CVE-2024-45018}
  - netfilter: allow ipv6 fragments to arrive on different devices (Tom Hughes)
  - mptcp: correct MPTCP_SUBFLOW_ATTR_SSN_OFFSET reserved size (Eugene Syromiatnikov)
  - mlxbf_gige: disable RX filters until RX path initialized (David Thompson)
  - net: dsa: vsc73xx: check busy flag in MDIO operations (Pawel Dembicki)
  - net: dsa: vsc73xx: use read_poll_timeout instead delay loop (Pawel Dembicki)
  - net: dsa: vsc73xx: pass value in phy_write operation (Pawel Dembicki)
  - net: axienet: Fix register defines comment description (Radhey Shyam Pandey)
  - atm: idt77252: prevent use after free in dequeue_rx() (Dan Carpenter) [Orabug: 37029103] {CVE-2024-44998}
  - net/mlx5e: Correctly report errors for ethtool rx flows (Cosmin Ratiu)
  - igc: Fix packet still tx after gate close by reducing i226 MAC retry buffer (Faizal Rahim)
  - igc: remove I226 Qbv BaseTime restriction (Muhammad Husaini Zulkifli)
  - igc: Correct the launchtime offset (Muhammad Husaini Zulkifli)
  - s390/uv: Panic for set and remove shared access UVC errors (Claudio Imbrenda)
  - drm/amdgpu/jpeg2: properly set atomics vmid field (Alex Deucher)
  - memcg_write_event_control(): fix a user-triggerable oops (Al Viro) [Orabug: 37070671] {CVE-2024-45021}
  - drm/amdgpu: Actually check flags for all context ops. (Bas Nieuwenhuizen)
  - btrfs: tree-checker: add dev extent item checks (Qu Wenruo)
  - selinux: fix potential counting error in avc_add_xperms_decision() (Zhen Lei)
  - fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE (Al Viro) [Orabug: 37070679] {CVE-2024-45025}
  - bitmap: introduce generic optimized bitmap_size() (Alexander Lobakin)
  - btrfs: rename bitmap_set_bits() -> btrfs_bitmap_set_bits() (Alexander Lobakin)
  - s390/cio: rename bitmap_size() -> idset_bitmap_size() (Alexander Lobakin)
  - fs/ntfs3: add prefix to bitmap_size() and use BITS_TO_U64() (Alexander Lobakin)
  - vfs: Don't evict inode under the inode lru traversing context (Zhihao Cheng) [Orabug: 37029118] {CVE-2024-45003}
  - dm persistent data: fix memory allocation failure (Mikulas Patocka)
  - dm resume: don't return EINVAL when signalled (Khazhismel Kumykov)
  - arm64: ACPI: NUMA: initialize all values of acpi_early_node_map to NUMA_NO_NODE (Haibo Xu)
  - s390/dasd: fix error recovery leading to data corruption on ESE devices (Stefan Haberland) [Orabug: 37070686] {CVE-2024-45026}
  - thunderbolt: Mark XDomain as unplugged when router is removed (Mika Westerberg) [Orabug: 37070774] {CVE-2024-46702}
  - xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration (Mathias Nyman) [Orabug: 37029124] {CVE-2024-45006}
  - ALSA: usb-audio: Support Yamaha P-125 quirk entry (Juan José Arboleda)
  - ALSA: usb-audio: Add delay quirk for VIVO USB-C-XE710 HEADSET (Lianqin Hu)
  - char: xillybus: Check USB endpoints when probing device (Eli Billauer) [Orabug: 37070649] {CVE-2024-45011}
  - char: xillybus: Refine workqueue handling (Eli Billauer)
  - char: xillybus: Don't destroy workqueue from work item running on it (Eli Billauer) [Orabug: 37029128] {CVE-2024-45007}
  - fuse: Initialize beyond-EOF page contents before setting uptodate (Jann Horn) [Orabug: 37017950] {CVE-2024-44947}
  - LTS version: v5.15.165 (Vijayendra Suman)
  - Revert "ata: libata-scsi: Honor the D_SENSE bit for CK_COND=1 and no error" (Niklas Cassel)
  - media: Revert "media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()" (Sean Young)
  - ARM: dts: imx6qdl-kontron-samx6i: fix phy-mode (Michael Walle)
  - wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values (Eric Dumazet) [Orabug: 36897690] {CVE-2024-42114}
  - binfmt_flat: Fix corruption when not offsetting data start (Kees Cook) [Orabug: 37029015] {CVE-2024-44966}
  - usb: gadget: u_audio: Check return codes from usb_ep_enable and config_ep_by_speed. (Chris Wulff)
  - nvme/pci: Add APST quirk for Lenovo N60z laptop (WangYuli)
  - exec: Fix ToCToU between perm check and set-uid/gid usage (Kees Cook) [Orabug: 36984016] {CVE-2024-43882}
  - arm64: cpufeature: Fix the visibility of compat hwcaps (Amit Daniel Kachhap)
  - arm64: dts: qcom: msm8996: correct #clock-cells for QMP PHY nodes (Dmitry Baryshkov)
  - powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt. (Mahesh Salgaonkar) [Orabug: 36897773] {CVE-2024-42126}
  - drm/i915/gem: Fix Virtual Memory mapping boundaries calculation (Andi Shyti) [Orabug: 36953968] {CVE-2024-42259}
  - mptcp: fully established after ADD_ADDR echo on MPJ (Matthieu Baerts (NGI0))
  - wifi: mac80211: check basic rates validity (Johannes Berg)
  - PCI: dwc: Restore MSI Receiver mask during resume (Jisheng Zhang)
  - net: stmmac: Enable mac_managed_pm phylink config (Shenwei Wang)
  - netfilter: nf_tables: prefer nft_chain_validate (Florian Westphal) [Orabug: 36896845] {CVE-2024-41042}
  - netfilter: nf_tables: allow clone callbacks to sleep (Florian Westphal)
  - netfilter: nf_tables: bail out if stateful expression provides no .clone (Pablo Neira Ayuso)
  - netfilter: nf_tables: set element extended ACK reporting support (Pablo Neira Ayuso)
  - tls: fix race between tx work scheduling and socket close (Jakub Kicinski) [Orabug: 36529710] {CVE-2024-26585}
  - PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal (Lukas Wunner) [Orabug: 36964228] {CVE-2024-42302}
  - btrfs: fix double inode unlock for direct IO sync writes (Filipe Manana) [Orabug: 37195039] {CVE-2024-43885}
  - xfs: fix log recovery buffer allocation for the legacy h_size fixup (Christoph Hellwig) [Orabug: 36809257] {CVE-2024-39472}
  - btrfs: fix corruption after buffer fault in during direct IO append write (Filipe Manana)
  - selftests: mptcp: join: check backup support in signal endp (Matthieu Baerts (NGI0))
  - selftests: mptcp: join: validate backup in MPJ (Matthieu Baerts (NGI0))
  - mptcp: pm: fix backup support in signal endpoints (Matthieu Baerts (NGI0))
  - mptcp: export local_address (Geliang Tang)
  - mptcp: pm: only set request_bkup flag when sending MP_PRIO (Matthieu Baerts (NGI0))
  - mptcp: fix bad RCVPRUNED mib accounting (Paolo Abeni)
  - mptcp: mib: count MPJ with backup flag (Matthieu Baerts (NGI0))
  - mptcp: fix NL PM announced address accounting (Paolo Abeni)
  - mptcp: distinguish rcv vs sent backup flag in requests (Matthieu Baerts (NGI0))
  - mptcp: sched: check both directions for backup (Matthieu Baerts (NGI0))
  - drm/mgag200: Set DDC timeout in milliseconds (Thomas Zimmermann)
  - drm/bridge: analogix_dp: properly handle zero sized AUX transactions (Lucas Stach)
  - sched/smt: Fix unbalance sched_smt_present dec/inc (Yang Yingliang) [Orabug: 37028981] {CVE-2024-44958}
  - sched/smt: Introduce sched_smt_present_inc/dec() helper (Yang Yingliang)
  - x86/mtrr: Check if fixed MTRRs exist before saving them (Andi Kleen) [Orabug: 37028935] {CVE-2024-44948}
  - padata: Fix possible divide-by-0 panic in padata_mt_helper() (Waiman Long) [Orabug: 36992992] {CVE-2024-43889}
  - tracing: Fix overflow in get_free_elt() (Tze-nan Wu) [Orabug: 36992997] {CVE-2024-43890}
  - power: supply: axp288_charger: Round constant_charge_voltage writes down (Hans de Goede)
  - power: supply: axp288_charger: Fix constant_charge_voltage writes (Hans de Goede)
  - genirq/irqdesc: Honor caller provided affinity in alloc_desc() (Shay Drory)
  - irqchip/xilinx: Fix shift out of bounds (Radhey Shyam Pandey)
  - kcov: properly check for softirq context (Andrey Konovalov)
  - serial: core: check uartclk for zero to avoid divide by zero (George Kennedy) [Orabug: 36993008] {CVE-2024-43893}
  - timekeeping: Fix bogus clock_was_set() invocation in do_adjtimex() (Thomas Gleixner)
  - ntp: Safeguard against time_constant overflow (Justin Stitt)
  - irqchip/meson-gpio: Convert meson_gpio_irq_controller::lock to 'raw_spinlock_t' (Arseniy Krasnov)
  - irqchip/meson-gpio: support more than 8 channels gpio irq (Qianggui Song)
  - clocksource: Fix brown-bag boolean thinko in cs_watchdog_read() (Paul E. McKenney)
  - clocksource: Scale the watchdog read retries automatically (Feng Tang)
  - torture: Enable clocksource watchdog with "tsc=watchdog" (Paul E. McKenney)
  - clocksource: Reduce the default clocksource_watchdog() retries to 2 (Waiman Long)
  - ntp: Clamp maxerror and esterror to operating range (Justin Stitt)
  - vhost-vdpa: switch to use vmf_insert_pfn() in the fault handler (Jason Wang)
  - tick/broadcast: Move per CPU pointer access into the atomic section (Thomas Gleixner) [Orabug: 37195086] {CVE-2024-44968}
  - scsi: ufs: core: Fix hba->last_dme_cmd_tstamp timestamp updating logic (Vamshi Gajjela)
  - scsi: mpi3mr: Avoid IOMMU page faults on REPORT ZONES (Damien Le Moal)
  - usb: gadget: u_serial: Set start_delayed during suspend (Prashanth K)
  - usb: gadget: core: Check for unset descriptor (Chris Wulff) [Orabug: 37028987] {CVE-2024-44960}
  - USB: serial: debug: do not echo input by default (Marek Marczykowski-Górecki)
  - usb: vhci-hcd: Do not drop references before new references are gained (Oliver Neukum) [Orabug: 36992970] {CVE-2024-43883}
  - ALSA: hda/hdmi: Yet more pin fix for HP EliteDesk 800 G4 (Takashi Iwai)
  - ALSA: hda: Add HP MP9 G4 Retail System AMS to force connect list (Steven 'Steve' Kendall)
  - ALSA: line6: Fix racy access to midibuf (Takashi Iwai) [Orabug: 37028956] {CVE-2024-44954}
  - drm/client: fix null pointer dereference in drm_client_modeset_probe (Ma Ke) [Orabug: 36993013] {CVE-2024-43894}
  - ALSA: usb-audio: Re-add ScratchAmp quirk entries (Takashi Iwai)
  - spi: spi-fsl-lpspi: Fix scldiv calculation (Stefan Wahren)
  - kprobes: Fix to check symbol prefixes correctly (Masami Hiramatsu (Google))
  - bpf: kprobe: remove unused declaring of bpf_kprobe_override (Menglong Dong)
  - i2c: smbus: Send alert notifications to all devices if source not found (Guenter Roeck)
  - spi: spidev: Add missing spi_device_id for bh2228fv (Geert Uytterhoeven)
  - ASoC: codecs: wsa881x: Correct Soundwire ports mask (Krzysztof Kozlowski)
  - ASoC: codecs: wcd938x-sdw: Correct Soundwire ports mask (Krzysztof Kozlowski)
  - i2c: smbus: Improve handling of stuck alerts (Guenter Roeck)
  - arm64: cputype: Add Cortex-A725 definitions (Mark Rutland)
  - arm64: cputype: Add Cortex-X1C definitions (Mark Rutland)
  - arm64: cputype: Add Cortex-X925 definitions (Mark Rutland)
  - arm64: cputype: Add Cortex-A720 definitions (Mark Rutland)
  - arm64: cputype: Add Cortex-X3 definitions (Mark Rutland)
  - arm64: cputype: Add Neoverse-V3 definitions (Mark Rutland)
  - arm64: cputype: Add Cortex-X4 definitions (Mark Rutland)
  - arm64: barrier: Restore spec_bar() macro (Mark Rutland)
  - arm64: Add Neoverse-V2 part (Besar Wicaksono)
  - arm64: cpufeature: Force HWCAP to be based on the sysreg visible to user-space (James Morse)
  - ext4: fix wrong unit use in ext4_mb_find_by_goal (Kemeng Shi)
  - sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime (Zheng Zucheng)
  - scsi: mpt3sas: Avoid IOMMU page faults on REPORT ZONES (Damien Le Moal)
  - profiling: remove profile=sleep support (Tetsuo Handa)
  - SUNRPC: Fix a race to wake a sync task (Benjamin Coddington)
  - s390/sclp: Prevent release of buffer in I/O (Peter Oberparleiter) [Orabug: 37029019] {CVE-2024-44969}
  - jbd2: avoid memleak in jbd2_journal_write_metadata_buffer (Kemeng Shi)
  - ext4: fix uninitialized variable in ext4_inlinedir_to_tree (Xiaxi Shen)
  - media: uvcvideo: Fix the bandwdith quirk on USB 3.x (Michal Pecio)
  - media: uvcvideo: Ignore empty TS packets (Ricardo Ribalda)
  - drm/amd/display: Add null checker before passing variables (Alex Hung) [Orabug: 36993047] {CVE-2024-43902}
  - drm/amdgpu/pm: Fix the null pointer dereference in apply_state_adjust_rules (Ma Jun) [Orabug: 36993077] {CVE-2024-43907}
  - drm/amdgpu: Fix the null pointer dereference to ras_manager (Ma Jun) [Orabug: 36993083] {CVE-2024-43908}
  - drm/amdgpu/pm: Fix the null pointer dereference for smu7 (Ma Jun) [Orabug: 36993089] {CVE-2024-43909}
  - btrfs: fix bitmap leak when loading free space cache on duplicate entry (Filipe Manana)
  - wifi: nl80211: don't give key data to userspace (Johannes Berg)
  - udf: prevent integer overflow in udf_bitmap_free_blocks() (Roman Smirnov)
  - PCI: Add Edimax Vendor ID to pci_ids.h (FUJITA Tomonori)
  - selftests/bpf: Fix send_signal test with nested CONFIG_PARAVIRT (Yonghong Song)
  - ACPI: SBS: manage alarm sysfs attribute through psy core (Thomas Weißschuh)
  - ACPI: battery: create alarm sysfs attribute atomically (Thomas Weißschuh)
  - clocksource/drivers/sh_cmt: Address race condition for clock events (Niklas Söderlund)
  - md/raid5: avoid BUG_ON() while continue reshape after reassembling (Yu Kuai) [Orabug: 36993126] {CVE-2024-43914}
  - md: do not delete safemode_timer in mddev_suspend (Li Nan)
  - rcutorture: Fix rcu_torture_fwd_cb_cr() data race (Paul E. McKenney)
  - net: fec: Stop PPS on driver remove (Csókás, Bence)
  - l2tp: fix lockdep splat (James Chapman)
  - net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register() (Joe Hattori) [Orabug: 37029031] {CVE-2024-44971}
  - Bluetooth: l2cap: always unlock channel in l2cap_conless_channel() (Dmitry Antipov)
  - net: linkwatch: use system_unbound_wq (Eric Dumazet)
  - net: bridge: mcast: wait for previous gc cycles when removing port (Nikolay Aleksandrov) [Orabug: 36993143] {CVE-2024-44934}
  - net: usb: qmi_wwan: fix memory leak for not ip packets (Daniele Palmas) [Orabug: 36983958] {CVE-2024-43861}
  - sctp: Fix null-ptr-deref in reuseport_add_sock(). (Kuniyuki Iwashima) [Orabug: 36993146] {CVE-2024-44935}
  - sctp: move hlist_node and hashent out of sctp_ep_common (Xin Long)
  - x86/mm: Fix pti_clone_entry_text() for i386 (Peter Zijlstra)
  - x86/mm: Fix pti_clone_pgtable() alignment assumption (Peter Zijlstra) [Orabug: 37029011] {CVE-2024-44965}
  - irqchip/mbigen: Fix mbigen node address layout (Yipeng Zou)
  - netfilter: ipset: Add list flush to cancel_gc (Alexander Maltsev)
  - mptcp: fix duplicate data handling (Paolo Abeni)
  - r8169: don't increment tx_dropped in case of NETDEV_TX_BUSY (Heiner Kallweit)
  - net: usb: sr9700: fix uninitialized variable use in sr_mdio_read (Ma Ke)
  - drm/vmwgfx: Fix a deadlock in dma buf fence polling (Zack Rusin) [Orabug: 36983964] {CVE-2024-43863}
  - Revert "ALSA: firewire-lib: operate for period elapse event in process context" (Edmund Raile)
  - Revert "ALSA: firewire-lib: obsolete workqueue for period update" (Edmund Raile)
  - ALSA: hda/realtek: Add quirk for Acer Aspire E5-574G (Mavroudis Chatzilazaridis)
  - ALSA: usb-audio: Correct surround channels in UAC1 channel map (Takashi Iwai)
  - protect the fetch of ->fd[fd] in do_dup2() from mispredictions (Al Viro) [Orabug: 36963807] {CVE-2024-42265}
  - HID: wacom: Modify pen IDs (Tatsunosuke Tobita)
  - platform/chrome: cros_ec_proto: Lock device when updating MKBP version (Patryk Duda)
  - power: supply: bq24190_charger: replace deprecated strncpy with strscpy (Justin Stitt)
  - riscv/mm: Add handling for VM_FAULT_SIGSEGV in mm_fault_error() (Zhe Qiao) [Orabug: 36963814] {CVE-2024-42267}
  - ipv6: fix ndisc_is_useropt() handling for PIO (Maciej Żenczykowski)
  - net/mlx5e: Add a check for the return value from mlx5_port_set_eth_ptys (Shahar Shitrit)
  - net: mvpp2: Don't re-use loop iterator (Dan Carpenter)
  - net/iucv: fix use after free in iucv_sock_close() (Alexandra Winter) [Orabug: 36964005] {CVE-2024-42271}
  - rtnetlink: Don't ignore IFLA_TARGET_NETNSID when ifname is specified in rtnl_dellink(). (Kuniyuki Iwashima)
  - rtnetlink: enable alt_ifname for setlink/newlink (Florent Fourcot)
  - ALSA: hda: conexant: Fix headset auto detect fail in the polling mode (songxiebing)
  - drm/vmwgfx: Fix overlay when using Screen Targets (Ian Forbes)
  - drm/nouveau: prime: fix refcount underflow (Danilo Krummrich) [Orabug: 36983978] {CVE-2024-43867}
  - MIPS: dts: loongson: Fix ls2k1000-rtc interrupt (Jiaxun Yang)
  - MIPS: dts: loongson: Fix liointc IRQ polarity (Jiaxun Yang)
  - MIPS: Loongson64: DTS: Fix PCIe port nodes for ls7a (Jiaxun Yang)
  - MIPS: Loongson64: DTS: Add RTC support to Loongson-2K1000 (Binbin Zhou)
  - remoteproc: imx_rproc: Fix refcount mistake in imx_rproc_addr_init (Aleksandr Mishin)
  - drm/dp_mst: Fix all mstb marked as not probed after suspend/resume (Wayne Lin)
  - irqchip/imx-irqsteer: Handle runtime power management correctly (Shenwei Wang) [Orabug: 36964084] {CVE-2024-42290}
  - irqchip/imx-irqsteer: Add runtime PM support (Lucas Stach)
  - irqchip/imx-irqsteer: Constify irq_chip struct (Lucas Stach)
  - irqdomain: Fixed unbalanced fwnode get and put (Herve Codina)
  - leds: triggers: Flush pending brightness before activating trigger (Thomas Weißschuh)
  - leds: trigger: Call synchronize_rcu() before calling trig->activate() (Hans de Goede)
  - leds: trigger: Store brightness set by led_trigger_event() (Heiner Kallweit)
  - leds: trigger: Remove unused function led_trigger_rename_static() (Heiner Kallweit)
  - leds: trigger: use RCU to protect the led_cdevs list (Johannes Berg)
  - drivers: soc: xilinx: check return status of get_api_version() (Jay Buddhabhatti)
  - soc: xilinx: move PM_INIT_FINALIZE to zynqmp_pm_domains driver (Michael Tretter)
  - ext4: check the extent status again before inserting delalloc block (Zhang Yi)
  - ext4: factor out a common helper to query extent map (Zhang Yi)
  - ext4: convert to exclusive lock while inserting delalloc extents (Zhang Yi)
  - ext4: refactor ext4_da_map_blocks() (Zhang Yi)
  - ext4: make ext4_es_insert_extent() return void (Baokun Li)
  - sysctl: always initialize i_uid/i_gid (Thomas Weißschuh) [Orabug: 36964269] {CVE-2024-42312}
  - arm64: dts: qcom: ipq8074: Disable SS instance in Parkmode for USB (Krishna Kurapati)
  - arm64: dts: qcom: msm8998: Disable SS instance in Parkmode for USB (Krishna Kurapati)
  - arm64: dts: qcom: msm8998: switch USB QMP PHY to new style of bindings (Dmitry Baryshkov)
  - arm64: dts: qcom: msm8998: drop USB PHY clock index (Johan Hovold)
  - arm64: dts: qcom: msm8996: Move '#clock-cells' to QMP PHY child node (Shawn Guo)
  - powerpc/configs: Update defconfig with now user-visible CONFIG_FSL_IFC (Esben Haabendal)
  - fs: don't allow non-init s_user_ns for filesystems without FS_USERNS_MOUNT (Seth Forshee (DigitalOcean))
  - nvme-pci: add missing condition check for existence of mapped data (Leon Romanovsky) [Orabug: 36964021] {CVE-2024-42276}
  - nvme: separate command prep and issue (Jens Axboe)
  - nvme: split command copy into a helper (Jens Axboe)
  - iommu: sprd: Avoid NULL deref in sprd_iommu_hw_en (Artem Chernyshev) [Orabug: 36964025] {CVE-2024-42277}
  - ceph: fix incorrect kmalloc size of pagevec mempool (ethanwu)
  - ASoC: Intel: use soc_intel_is_byt_cr() only when IOSF_MBI is reachable (Pierre-Louis Bossart)
  - spi: spidev: add correct compatible for Rohm BH2228FV (Conor Dooley)
  - spi: spidev: order compatibles alphabetically (Krzysztof Kozlowski)
  - spidev: Add Silicon Labs EM3581 device compatible (Vincent Tremblay)
  - spi: spidev: Replace OF specific code by device property API (Andy Shevchenko)
  - spi: spidev: Replace ACPI specific code by device_get_match_data() (Andy Shevchenko)
  - spi: spidev: Make probe to fail early if a spidev compatible is used (Javier Martinez Canillas)
  - lirc: rc_dev_get_from_fd(): fix file leak (Al Viro)
  - powerpc: fix a file leak in kvm_vcpu_ioctl_enable_cap() (Al Viro)
  - apparmor: Fix null pointer deref when receiving skb during sock creation (Xiao Liang)
  - mISDN: Fix a use after free in hfcmulti_tx() (Dan Carpenter) [Orabug: 36964031] {CVE-2024-42280}
  - bpf: Fix a segment issue when downgrading gso_size (Fred Li) [Orabug: 36964037] {CVE-2024-42281}
  - net: nexthop: Initialize all fields in dumped nexthops (Petr Machata) [Orabug: 36964043] {CVE-2024-42283}
  - net: stmmac: Correct byte order of perfect_match (Simon Horman)
  - tipc: Return non-zero value from tipc_udp_addr2str() on error (Shigeru Yoshida) [Orabug: 36964046] {CVE-2024-42284}
  - netfilter: nft_set_pipapo_avx2: disable softinterrupts (Florian Westphal)
  - net: bonding: correctly annotate RCU in bond_should_notify_peers() (Johannes Berg)
  - ipv4: Fix incorrect source address in Record Route option (Ido Schimmel)
  - MIPS: SMP-CPS: Fix address for GCR_ACCESS register for CM3 and later (Gregory CLEMENT)
  - bpf, events: Use prog to emit ksymbol event for main program (Hou Tao)
  - dma: fix call order in dmam_free_coherent (Lance Richardson) [Orabug: 36964522] {CVE-2024-43856}
  - libbpf: Fix no-args func prototype BTF dumping syntax (Andrii Nakryiko)
  - um: time-travel: fix signal blocking race/hang (Johannes Berg)
  - um: time-travel: fix time-travel-start option (Johannes Berg)
  - phy: cadence-torrent: Check return value on register read (Ma Ke)
  - dmaengine: ti: k3-udma: Fix BCHAN count with UHC and HC channels (Vignesh Raghavendra)
  - jfs: Fix array-index-out-of-bounds in diFree (Jeongjun Park) [Orabug: 36964529] {CVE-2024-43858}
  - kdb: address -Wformat-security warnings (Arnd Bergmann)
  - kernel: rerun task_work while freezing in get_signal() (Pavel Begunkov)
  - io_uring/io-wq: limit retrying worker initialisation (Pavel Begunkov)
  - nilfs2: handle inconsistent state in nilfs_btnode_create_block() (Ryusuke Konishi) [Orabug: 36964202] {CVE-2024-42295}
  - Bluetooth: btusb: Add Realtek RTL8852BE support ID 0x13d3:0x3591 (WangYuli)
  - Bluetooth: btusb: Add RTL8852BE device 0489:e125 to device tables (Hilda Wu)
  - rbd: don't assume RBD_LOCK_STATE_LOCKED for exclusive mappings (Ilya Dryomov)
  - rbd: rename RBD_LOCK_STATE_RELEASING and releasing_wait (Ilya Dryomov)
  - drm/panfrost: Mark simple_ondemand governor as softdep (Dragan Simic)
  - MIPS: Loongson64: Test register availability before use (Jiaxun Yang)
  - MIPS: Loongson64: reset: Prioritise firmware service (Jiaxun Yang)
  - MIPS: Loongson64: Remove memory node for builtin-dtb (Jiaxun Yang)
  - MIPS: Loongson64: env: Hook up Loongsson-2K (Jiaxun Yang)
  - MIPS: dts: loongson: Fix GMAC phy node (Jiaxun Yang)
  - MIPS: ip30: ip30-console: Add missing include (Jiaxun Yang)
  - remoteproc: imx_rproc: Skip over memory region when node value is NULL (Aleksandr Mishin) [Orabug: 36964536] {CVE-2024-43860}
  - remoteproc: stm32_rproc: Fix mailbox interrupts queuing (Gwenael Treuveur)
  - rbd: don't assume rbd_is_lock_owner() for exclusive mappings (Ilya Dryomov)
  - selftests/sigaltstack: Fix ppc64 GCC build (Michael Ellerman)
  - RDMA/iwcm: Fix a use-after-free related to destroying CM IDs (Bart Van Assche) [Orabug: 36964053] {CVE-2024-42285}
  - platform: mips: cpu_hwmon: Disable driver on unsupported hardware (Jiaxun Yang)
  - watchdog/perf: properly initialize the turbo mode timestamp and rearm counter (Thomas Gleixner)
  - rtc: isl1208: Fix return value of nvmem callbacks (Joy Chakraborty)
  - drm/i915/dp: Reset intel_dp->link_trained before retraining the link (Imre Deak)
  - drm/amdgpu/sdma5.2: Update wptr registers as well as doorbell (Alex Deucher)
  - drm/i915/gt: Do not consider preemption during execlists_dequeue for gen8 (Nitin Gote)
  - perf/x86/intel/pt: Fix a topa_entry base address calculation (Adrian Hunter)
  - perf/x86/intel/pt: Fix topa_entry base length (Marco Cavenati)
  - perf/x86/intel/uncore: Fix the bits of the CHA extended umask for SPR (Kan Liang)
  - perf: Fix event leak upon exit (Frederic Weisbecker) [Orabug: 36983986] {CVE-2024-43870}
  - rtc: cmos: Fix return value of nvmem callbacks (Joy Chakraborty)
  - mm/numa_balancing: teach mpol_to_str about the balancing mode (Tvrtko Ursulin)
  - devres: Fix memory leakage caused by driver API devm_free_percpu() (Zijun Hu) [Orabug: 36983990] {CVE-2024-43871}
  - devres: Fix devm_krealloc() wasting memory (Zijun Hu)
  - gve: Fix an edge case for TSO skb validity check (Bailey Forrest)
  - kobject_uevent: Fix OOB access within zap_modalias_env() (Zijun Hu) [Orabug: 37203371] {CVE-2024-42292}
  - kbuild: Fix '-S -c' in x86 stack protector scripts (Nathan Chancellor)
  - decompress_bunzip2: fix rare decompression failure (Ross Lagerwall)
  - ubi: eba: properly rollback inside self_check_eba (Fedor Pchelkin)
  - clk: davinci: da8xx-cfgchip: Initialize clk_init_data before use (Bastien Curutchet)
  - fs/ntfs3: Update log->page_{mask,bits} if log->page_size changed (Huacai Chen) [Orabug: 36964218] {CVE-2024-42299}
  - dev/parport: fix the array out-of-bounds risk (tuhaowen) [Orabug: 36964222] {CVE-2024-42301}
  - binder: fix hang of unregistered readers (Carlos Llamas)
  - PCI: rockchip: Use GPIOD_OUT_LOW flag while requesting ep_gpio (Manivannan Sadhasivam)
  - PCI: dw-rockchip: Fix initial PERST# GPIO value (Niklas Cassel)
  - PCI: hv: Return zero, not garbage, when reading PCI_INTERRUPT_PIN (Wei Liu)
  - hwrng: amd - Convert PCIBIOS_* return codes to errnos (Ilpo Järvinen)
  - tools/memory-model: Fix bug in lock.cat (Alan Stern)
  - ALSA: usb-audio: Add a quirk for Sonix HD USB Camera (wangdicheng)
  - ALSA: usb-audio: Move HD Webcam quirk to the right place (Takashi Iwai)
  - ALSA: usb-audio: Fix microphone sound on HD webcam. (wangdicheng)
  - KVM: VMX: Split out the non-virtualization part of vmx_interrupt_blocked() (Sean Christopherson)
  - media: uvcvideo: Fix integer overflow calculating timestamp (Ricardo Ribalda)
  - jbd2: make jbd2_journal_get_max_txn_bufs() internal (Jan Kara)
  - leds: ss4200: Convert PCIBIOS_* return codes to errnos (Ilpo Järvinen)
  - wifi: mwifiex: Fix interface type change (Rafael Beims)
  - selftests/landlock: Add cred_transfer test (Mickaël Salaün)
  - io_uring: tighten task exit cancellations (Pavel Begunkov)
  - ext4: make sure the first directory block is not a hole (Baokun Li) [Orabug: 36964231] {CVE-2024-42304}
  - ext4: check dot and dotdot of dx_root before making dir indexed (Baokun Li) [Orabug: 36964236] {CVE-2024-42305}
  - m68k: amiga: Turn off Warp1260 interrupts during boot (Paolo Pisati)
  - udf: Avoid using corrupted block bitmap buffer (Jan Kara) [Orabug: 36964241] {CVE-2024-42306}
  - task_work: Introduce task_work_cancel() again (Frederic Weisbecker)
  - task_work: s/task_work_cancel()/task_work_cancel_func()/ (Frederic Weisbecker)
  - apparmor: use kvfree_sensitive to free data->data (Fedor Pchelkin)
  - sched/fair: Use all little CPUs for CPU-bound workloads (Pierre Gondois)
  - drm/amd/display: Check for NULL pointer (Sung Joon Kim) [Orabug: 36964246] {CVE-2024-42308}
  - drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes (Ma Ke) [Orabug: 36964252] {CVE-2024-42309}
  - drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes (Ma Ke) [Orabug: 36964258] {CVE-2024-42310}
  - ext2: Verify bitmap and itable block numbers before using them (Jan Kara)
  - hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode() (Chao Yu) [Orabug: 36964264] {CVE-2024-42311}
  - ata: libata-scsi: Honor the D_SENSE bit for CK_COND=1 and no error (Igor Pylypiv)
  - media: venus: fix use after free in vdec_close (Dikshita Agarwal) [Orabug: 36964274] {CVE-2024-42313}
  - char: tpm: Fix possible memory leak in tpm_bios_measurements_open() (Joe Hattori)
  - fuse: verify {g,u}id mount options correctly (Eric Sandeen)
  - sched/fair: set_load_weight() must also call reweight_task() for SCHED_IDLE tasks (Tejun Heo)
  - ipv6: take care of scope when choosing the src addr (Nicolas Dichtel)
  - af_packet: Handle outgoing VLAN packets without hardware offloading (Chengen Du)
  - net: netconsole: Disable target before netpoll cleanup (Breno Leitao)
  - tick/broadcast: Make takeover of broadcast hrtimer reliable (Yu Liao)
  - dt-bindings: thermal: correct thermal zone node name limit (Krzysztof Kozlowski)
  - mm: mmap_lock: replace get_memcg_path_buf() with on-stack buffer (Tetsuo Handa)
  - mm/hugetlb: fix possible recursive locking detected warning (Miaohe Lin)
  - landlock: Don't lose track of restrictions on cred_transfer (Jann Horn) [Orabug: 36964283] {CVE-2024-42318}
  - fs/ntfs3: Missed error return (Konstantin Komarov)
  - rtc: interface: Add RTC offset to alarm after fix-up (Csókás, Bence)
  - nilfs2: avoid undefined behavior in nilfs_cnt32_ge macro (Ryusuke Konishi)
  - fs/proc/task_mmu: indicate PM_FILE for PMD-mapped file THP (David Hildenbrand)
  - fs/ntfs3: Fix field-spanning write in INDEX_HDR (Konstantin Komarov)
  - fs/ntfs3: Replace inode_trylock with inode_lock (Konstantin Komarov)
  - pinctrl: freescale: mxs: Fix refcount of child (Peng Fan)
  - pinctrl: ti: ti-iodelay: fix possible memory leak when pinctrl_enable() fails (Yang Yingliang)
  - pinctrl: ti: ti-iodelay: Drop if block with always false condition (Uwe Kleine-König)
  - pinctrl: single: fix possible memory leak when pinctrl_enable() fails (Yang Yingliang)
  - pinctrl: core: fix possible memory leak when pinctrl_enable() fails (Yang Yingliang)
  - pinctrl: rockchip: update rk3308 iomux routes (Dmitry Yashin)
  - fs/ntfs3: Fix getting file type (Konstantin Komarov)
  - fs/ntfs3: Missed NI_FLAG_UPDATE_PARENT setting (Konstantin Komarov)
  - fs/ntfs3: Fix transform resident to nonresident for compressed files (Konstantin Komarov)
  - fs/ntfs3: Merge synonym COMPRESSION_UNIT and NTFS_LZNT_CUNIT (Konstantin Komarov)
  - fs/ntfs3: Use ALIGN kernel macro (Konstantin Komarov)
  - net: dsa: b53: Limit chip-wide jumbo frame config to CPU ports (Martin Willi)
  - net: dsa: mv88e6xxx: Limit chip-wide frame size config to CPU ports (Martin Willi)
  - netfilter: nf_set_pipapo: fix initial map fill (Florian Westphal)
  - netfilter: nft_set_pipapo: constify lookup fn args where possible (Florian Westphal)
  - netfilter: ctnetlink: use helper function to calculate expect ID (Pablo Neira Ayuso) [Orabug: 37013754] {CVE-2024-44944}
  - bnxt_re: Fix imm_data endianness (Jack Wang)
  - RDMA/hns: Fix insufficient extend DB for VFs. (Chengchang Tang)
  - RDMA/hns: Fix undifined behavior caused by invalid max_sge (Chengchang Tang)
  - RDMA/hns: Fix missing pagesize and alignment check in FRMR (Chengchang Tang)
  - macintosh/therm_windtunnel: fix module unload. (Nick Bowler)
  - powerpc/xmon: Fix disassembly CPU feature checks (Michael Ellerman)
  - net: missing check virtio (Denis Arefev) [Orabug: 36964424] {CVE-2024-43817}
  - vhost/vsock: always initialize seqpacket_allow (Michael S. Tsirkin) [Orabug: 36983999] {CVE-2024-43873}
  - PCI: endpoint: Clean up error handling in vpci_scan_bus() (Dan Carpenter) [Orabug: 36984004] {CVE-2024-43875}
  - Input: elan_i2c - do not leave interrupt disabled on suspend failure (Dmitry Torokhov)
  - RDMA/device: Return error earlier if port in not valid (Leon Romanovsky)
  - mtd: make mtd_test.c a separate module (Arnd Bergmann)
  - ASoC: max98088: Check for clk_prepare_enable() error (Chen Ni)
  - RDMA/rxe: Don't set BTH_ACK_MASK for UC or UD QPs (Honggang LI)
  - RDMA/mlx4: Fix truncated output warning in alias_GUID.c (Leon Romanovsky)
  - RDMA/mlx4: Fix truncated output warning in mad.c (Leon Romanovsky)
  - Input: qt1050 - handle CHIP_ID reading error (Andrei Lalaev)
  - RDMA/cache: Release GID table even if leak is detected (Leon Romanovsky)
  - RDMA/mlx5: Set mkeys for dmabuf at PAGE_SIZE (Chiara Meiohas)
  - coresight: Fix ref leak when of_coresight_parse_endpoint() fails (James Clark)
  - clk: qcom: gcc-sc7280: Update force mem core bit for UFS ICE clock (Taniya Das)
  - clk: qcom: branch: Add helper functions for setting retain bits (Konrad Dybcio)
  - PCI: Fix resource double counting on remove & rescan (Ilpo Järvinen)
  - SUNRPC: Fixup gss_status tracepoint error output (Benjamin Coddington)
  - sparc64: Fix incorrect function signature and add prototype for prom_cif_init (Andreas Larsson)
  - ext4: avoid writing unitialized memory to disk in EA inodes (Jan Kara)
  - ext4: don't track ranges in fast_commit if inode has inlined data (Luis Henriques (SUSE))
  - ext4: return early for non-eligible fast_commit track events (Ritesh Harjani)
  - NFSv4.1 another fix for EXCHGID4_FLAG_USE_PNFS_DS for DS server (Olga Kornievskaia)
  - SUNRPC: avoid soft lockup when transmitting UDP to reachable server. (NeilBrown)
  - xprtrdma: Fix rpcrdma_reqs_reset() (Chuck Lever)
  - mfd: omap-usb-tll: Use struct_size to allocate tll (Javier Carrasco)
  - mfd: rsmu: Split core code into separate module (Arnd Bergmann)
  - perf intel-pt: Fix exclude_guest setting (Adrian Hunter)
  - perf intel-pt: Fix aux_watermark calculation for 64-bit size (Adrian Hunter)
  - media: venus: flush all buffers in output plane streamoff (Dikshita Agarwal)
  - ext4: fix infinite loop when replaying fast_commit (Luis Henriques (SUSE))
  - Revert "leds: led-core: Fix refcount leak in of_led_get()" (Luca Ceresoli)
  - drm/qxl: Add check for drm_cvt_mode (Chen Ni) [Orabug: 36964455] {CVE-2024-43829}
  - drm/etnaviv: fix DMA direction handling for cached RW buffers (Lucas Stach)
  - perf report: Fix condition in sort__sym_cmp() (Namhyung Kim)
  - leds: trigger: Unregister sysfs attributes before calling deactivate() (Hans de Goede) [Orabug: 36964458] {CVE-2024-43830}
  - drm/mediatek: Add DRM_MODE_ROTATE_0 to rotation property (Hsiao Chien Sung)
  - drm/mediatek: Add missing plane settings when async update (Hsiao Chien Sung)
  - media: renesas: vsp1: Store RPF partition configuration per RPF instance (Laurent Pinchart)
  - media: renesas: vsp1: Fix _irqsave and _irq mix (Laurent Pinchart)
  - media: uvcvideo: Override default flags (Daniel Schaefer)
  - saa7134: Unchecked i2c_transfer function result fixed (Aleksandr Burakov)
  - media: i2c: Fix imx412 exposure control (Bryan O'Donoghue)
  - media: imon: Fix race getting ictx->lock (Ricardo Ribalda)
  - media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control() (Zheng Yejian)
  - drm/panel: boe-tv101wum-nl6: Check for errors on the NOP in prepare() (Douglas Anderson)
  - drm/panel: boe-tv101wum-nl6: If prepare fails, disable GPIO before regulators (Douglas Anderson)
  - drm/amdgpu: Check if NBIO funcs are NULL in amdgpu_device_baco_exit (Friedrich Vock)
  - drm/amd/pm: Fix aldebaran pcie speed reporting (Lijo Lazar)
  - xdp: fix invalid wait context of page_pool_destroy() (Taehee Yoo) [Orabug: 36964469] {CVE-2024-43834}
  - selftests: forwarding: devlink_lib: Wait for udev events after reloading (Amit Cohen)
  - bpf: Eliminate remaining "make W=1" warnings in kernel/bpf/btf.o (Alan Maguire)
  - bna: adjust 'name' buf size of bna_tcb and bna_ccb structures (Alexey Kodanev) [Orabug: 36964479] {CVE-2024-43839}
  - bpf: annotate BTF show functions with __printf (Alan Maguire)
  - selftests/bpf: Close fd in error path in drop_on_reuseport (Geliang Tang)
  - locking/rwsem: Add __always_inline annotation to __down_write_common() and inlined callers (John Stultz)
  - wifi: virt_wifi: don't use strlen() in const context (Johannes Berg)
  - gss_krb5: Fix the error handling path for crypto_sync_skcipher_setkey (Gaosheng Cui)
  - wifi: virt_wifi: avoid reporting connection success with wrong SSID (En-Wei Wu) [Orabug: 36964486] {CVE-2024-43841}
  - perf: Fix default aux_watermark calculation (Adrian Hunter)
  - perf: Prevent passing zero nr_pages to rb_alloc_aux() (Adrian Hunter)
  - perf: Fix perf_aux_size() for greater-than 32-bit size (Adrian Hunter)
  - perf/x86/intel/pt: Fix pt_topa_entry_for_page() address calculation (Adrian Hunter)
  - netfilter: nf_tables: rise cap on SELinux secmark context (Pablo Neira Ayuso)
  - libbpf: Checking the btf_type kind when fixing variable offsets (Donglin Peng)
  - net: fec: Fix FEC_ECR_EN1588 being cleared on link-down (Csókás, Bence)
  - net: fec: Refactor: #define magic constants (Csókás Bence)
  - wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he() (Baochen Qiang) [Orabug: 36984009] {CVE-2024-43879}
  - wifi: cfg80211: fix typo in cfg80211_calculate_bitrate_he() (Baochen Qiang)
  - wifi: ath11k: fix wrong handling of CCMP256 and GCMP ciphers (Baochen Qiang)
  - mlxsw: spectrum_acl: Fix ACL scale regression and firmware errors (Ido Schimmel)
  - mlxsw: spectrum_acl_erp: Fix object nesting warning (Ido Schimmel) [Orabug: 36984012] {CVE-2024-43880}
  - lib: objagg: Fix general protection fault (Ido Schimmel) [Orabug: 36964494] {CVE-2024-43846}
  - selftests/bpf: Check length of recv in test_sockmap (Geliang Tang)
  - net/smc: set rmb's SG_MAX_SINGLE_ALLOC limitation only when CONFIG_ARCH_NO_SG_CHAIN is defined (Guangguan Wang)
  - tcp: fix races in tcp_v[46]_err() (Eric Dumazet)
  - tcp: fix race in tcp_write_err() (Eric Dumazet)
  - tcp: add tcp_done_with_error() helper (Eric Dumazet)
  - tcp: annotate lockless access to sk->sk_err (Eric Dumazet)
  - tcp: annotate lockless accesses to sk->sk_err_soft (Eric Dumazet)
  - net: esp: cleanup esp_output_tail_tcp() in case of unsupported ESPINTCP (Hagar Hemdan)
  - selftests/bpf: Fix prog numbers in test_sockmap (Geliang Tang)
  - wifi: brcmsmac: LCN PHY code is used for BCM4313 2G-only device (Samasth Norway Ananda)
  - firmware: turris-mox-rwtm: Initialize completion before mailbox (Marek Behún)
  - firmware: turris-mox-rwtm: Fix checking return value of wait_for_completion_timeout() (Marek Behún)
  - firmware: turris-mox-rwtm: Do not complete if there are no waiters (Marek Behún)
  - vmlinux.lds.h: catch .bss..L* sections into BSS") (Christophe Leroy)
  - ARM: spitz: fix GPIO assignment for backlight (Dmitry Torokhov)
  - ARM: pxa: spitz: use gpio descriptors for audio (Arnd Bergmann)
  - m68k: cmpxchg: Fix return value for default case in __arch_xchg() (Thorsten Blum)
  - x86/xen: Convert comma to semicolon (Chen Ni)
  - m68k: atari: Fix TT bootup freeze / unexpected (SCU) interrupt messages (Eero Tamminen)
  - arm64: dts: amlogic: gx: correct hdmi clocks (Jerome Brunet)
  - arm64: dts: mediatek: mt8183-kukui-jacuzzi: Add ports node for anx7625 (Chen-Yu Tsai)
  - arm64: dts: mediatek: mt7622: fix "emmc" pinctrl mux (Rafał Miłecki)
  - arm64: dts: mediatek: mt8183-kukui: Drop bogus output-enable property (Chen-Yu Tsai)
  - ARM: dts: imx6qdl-kontron-samx6i: fix PCIe reset polarity (Michael Walle)
  - ARM: dts: imx6qdl-kontron-samx6i: fix SPI0 chip selects (Michael Walle)
  - ARM: dts: imx6qdl-kontron-samx6i: fix board reset (Michael Walle)
  - ARM: dts: imx6qdl-kontron-samx6i: fix PHY reset (Michael Walle)
  - ARM: dts: imx6qdl-kontron-samx6i: move phy reset into phy-node (Marco Felsch)
  - arm64: dts: rockchip: Increase VOP clk rate on RK3328 (Jonas Karlman)
  - soc: qcom: pdr: fix parsing of domains lists (Dmitry Baryshkov)
  - soc: qcom: pdr: protect locator_addr with the main mutex (Dmitry Baryshkov) [Orabug: 36964502] {CVE-2024-43849}
  - memory: fsl_ifc: Make FSL_IFC config visible and selectable (Esben Haabendal)
  - arm64: dts: qcom: msm8996: specify UFS core_clk frequencies (Dmitry Baryshkov)
  - soc: qcom: rpmh-rsc: Ensure irqs aren't disabled by rpmh_rsc_send_data() callers (Stephen Boyd)
  - arm64: dts: qcom: sm8250: add power-domain to UFS PHY (Dmitry Baryshkov)
  - arm64: dts: qcom: sm8250: switch UFS QMP PHY to new style of bindings (Dmitry Baryshkov)
  - arm64: dts: qcom: sdm845: add power-domain to UFS PHY (Dmitry Baryshkov)
  - hwmon: (max6697) Fix swapped temp{1,8} critical alarms (Guenter Roeck)
  - hwmon: (max6697) Fix underflow when writing limit attributes (Guenter Roeck)
  - drm/meson: fix canvas release in bind function (Yao Zi)
  - pwm: stm32: Always do lazy disabling (Uwe Kleine-König)
  - hwmon: (adt7475) Fix default duty on fan is disabled (Wayne Tung)
  - x86/platform/iosf_mbi: Convert PCIBIOS_* return codes to errnos (Ilpo Järvinen)
  - x86/pci/xen: Fix PCIBIOS_* return code handling (Ilpo Järvinen)
  - x86/pci/intel_mid_pci: Fix PCIBIOS_* return code handling (Ilpo Järvinen)
  - x86/of: Return consistent error type from x86_of_pci_irq_enable() (Ilpo Järvinen)
  - hfsplus: fix to avoid false alarm of circular locking (Chao Yu)
  - block: initialize integrity buffer to zero before writing it to media (Christoph Hellwig) [Orabug: 36964514] {CVE-2024-43854}
  - block: cleanup bio_integrity_prep (Jinyoung Choi)
  - block: refactor to use helper (Nitesh Shetty)
  - platform/chrome: cros_ec_debugfs: fix wrong EC message version (Tzung-Bi Shih)
  - f2fs: fix to don't dirty inode for readonly filesystem (Chao Yu) [Orabug: 36964212] {CVE-2024-42297}
  - f2fs: fix return value of f2fs_convert_inline_inode() (Chao Yu) [Orabug: 36964207] {CVE-2024-42296}
  - LTS version: v5.15.164 (Vijayendra Suman)
  - tap: add missing verification for short frame (Si-Wei Liu)   [Orabug: 36879156] {CVE-2024-41090}
  - tun: add missing verification for short frame (Dongli Zhang)   [Orabug: 36879156] {CVE-2024-41091}
  - wifi: rt2x00: use explicitly signed or unsigned types (Jason A. Donenfeld)
  - filelock: Fix fcntl/close race recovery compat path (Jann Horn) [Orabug: 36874755] {CVE-2024-41012} {CVE-2024-41020}
  - ALSA: pcm_dmaengine: Don't synchronize DMA channel when DMA is paused (Shengjiu Wang)
  - arm64: dts: qcom: sdm630: Disable SS instance in Parkmode for USB (Krishna Kurapati)
  - arm64: dts: qcom: msm8996: Disable SS instance in Parkmode for USB (Krishna Kurapati)
  - ALSA: hda/realtek: Fix the speaker output on Samsung Galaxy Book Pro 360 (Seunghun Han)
  - ALSA: hda/realtek: Enable headset mic on Positivo SU C1400 (Edson Juliano Drosdeck)
  - fs/ntfs3: Validate ff offset (lei lu) [Orabug: 36891672] {CVE-2024-41019}
  - jfs: don't walk off the end of ealist (lei lu) [Orabug: 36891666] {CVE-2024-41017}
  - ocfs2: add bounds checking to ocfs2_check_dir_entry() (lei lu) [Orabug: 36891654] {CVE-2024-41015}
  - Add gitignore file for samples/fanotify/ subdirectory (Linus Torvalds)
  - docs: Fix formatting of literal sections in fanotify docs (Gabriel Krisman Bertazi)
  - samples: Make fs-monitor depend on libc and headers (Gabriel Krisman Bertazi)
  - samples: Add fs error monitoring example (Gabriel Krisman Bertazi)
  - wifi: mac80211: disable softirqs for queued frame handling (Johannes Berg)
  - mm/damon/core: merge regions aggressively when max_nr_regions is unmet (SeongJae Park)
  - minmax: relax check to allow comparison between unsigned arguments and signed constants (David Laight)
  - minmax: allow comparisons of 'int' against 'unsigned char/short' (David Laight)
  - minmax: allow min()/max()/clamp() if the arguments have the same signedness. (David Laight)
  - minmax: fix header inclusions (Andy Shevchenko)
  - minmax: clamp more efficiently by avoiding extra comparison (Jason A. Donenfeld)
  - minmax: sanity check constant bounds when clamping (Jason A. Donenfeld)
  - tracing: Define the is_signed_type() macro once (Bart Van Assche)
  - spi: mux: set ctlr->bits_per_word_mask (David Lechner)
  - hfsplus: fix uninit-value in copy_name (Edward Adam Davis) [Orabug: 36896968] {CVE-2024-41059}
  - selftests/vDSO: fix clang build errors and warnings (John Hubbard)
  - spi: imx: Don't expect DMA for i.MX{25,35,50,51,53} cspi devices (Uwe Kleine-König)
  - riscv: stacktrace: fix usage of ftrace_graph_ret_addr() (Puranjay Mohan)
  - fs: better handle deep ancestor chains in is_subdir() (Christian Brauner)
  - drm/radeon: check bo_va->bo is non-NULL before using it (Pierre-Eric Pelloux-Prayer) [Orabug: 36896974] {CVE-2024-41060}
  - Bluetooth: hci_core: cancel all works upon hci_unregister_dev() (Tetsuo Handa) [Orabug: 36896993] {CVE-2024-41063}
  - scsi: libsas: Fix exp-attached device scan after probe failure scanned in again after probe failed (Xingui Yang)
  - powerpc/eeh: avoid possible crash when edev->pdev changes (Ganesh Goudar) [Orabug: 36897001] {CVE-2024-41064}
  - powerpc/pseries: Whitelist dtl slub object for copying to userspace (Anjali K) [Orabug: 36897008] {CVE-2024-41065}
  - net: mac802154: Fix racy device stats updates by DEV_STATS_INC() and DEV_STATS_ADD() (Yunshui Jiang)
  - net: usb: qmi_wwan: add Telit FN912 compositions (Daniele Palmas)
  - ALSA: dmaengine_pcm: terminate dmaengine before synchronize (Shengjiu Wang)
  - ALSA: hda/relatek: Enable Mute LED on HP Laptop 15-gw0xxx (Aivaz Latypov)
  - btrfs: qgroup: fix quota root leak after quota disable failure (Filipe Manana) [Orabug: 36897343] {CVE-2024-41078}
  - platform/x86: lg-laptop: Use ACPI device handle when evaluating WMAB/WMBB (Armin Wolf)
  - platform/x86: lg-laptop: Change ACPI device id (Armin Wolf)
  - platform/x86: lg-laptop: Remove LGEX0815 hotkey handling (Armin Wolf)
  - platform/x86: wireless-hotkey: Add support for LG Airplane Button (Armin Wolf)
  - s390/sclp: Fix sclp_init() cleanup on failure (Heiko Carstens) [Orabug: 36897031] {CVE-2024-41068}
  - can: kvaser_usb: fix return value for hif_usb_send_regout (Chen Ni)
  - ASoC: ti: omap-hdmi: Fix too long driver name (Primoz Fiser)
  - ASoC: ti: davinci-mcasp: Set min period size using FIFO config (Jai Luthra)
  - ALSA: dmaengine: Synchronize dma channel after drop() (Jai Luthra)
  - bytcr_rt5640 : inverse jack detect for Archos 101 cesium (Thomas GENTY)
  - Input: i8042 - add Ayaneo Kun to i8042 quirk table (Tobias Jakobi)
  - Input: elantech - fix touchpad state on resume for Lenovo N24 (Jonathan Denose)
  - mips: fix compat_sys_lseek syscall (Arnd Bergmann)
  - ALSA: hda/realtek: Add more codec ID to no shutup pins list (Kailang Yang)
  - drm/vmwgfx: Fix missing HYPERVISOR_GUEST dependency (Alexey Makhalov)
  - KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group() (Michael Ellerman) [Orabug: 36897047] {CVE-2024-41070}
  - wifi: cfg80211: wext: add extra SIOCSIWSCAN data check (Dmitry Antipov) [Orabug: 36897311] {CVE-2024-41072}
  - nvme: avoid double free special payload (Chunguang Xu) [Orabug: 36897316] {CVE-2024-41073}
  - mei: demote client disconnect warning on suspend to debug (Alexander Usyskin)
  - fs/file: fix the check in find_next_fd() (Yuntao Wang)
  - kconfig: remove wrong expr_trans_bool() (Masahiro Yamada)
  - kconfig: gconf: give a proper initial state to the Save button (Masahiro Yamada)
  - null_blk: fix validation of block size (Andreas Hindborg) [Orabug: 36897338] {CVE-2024-41077}
  - arm64: armv8_deprecated: Fix warning in isndep cpuhp starting process (Wei Li)
  - ila: block BH in ila_output() (Eric Dumazet) [Orabug: 36897359] {CVE-2024-41081}
  - net: ipv6: rpl_iptunnel: block BH in rpl_output() and rpl_input() (Eric Dumazet)
  - Input: silead - Always support 10 fingers (Hans de Goede)
  - selftests/openat2: Fix build warnings on ppc64 (Michael Ellerman)
  - wifi: mac80211: fix UBSAN noise in ieee80211_prep_hw_scan() (Dmitry Antipov)
  - wifi: iwlwifi: mvm: properly set 6 GHz channel direct probe option (Ayala Beker)
  - wifi: iwlwifi: mvm: Handle BIGTK cipher in kek_kck cmd (Yedidya Benshimol)
  - wifi: iwlwifi: mvm: d3: fix WoWLAN command version lookup (Yedidya Benshimol)
  - wifi: mac80211: handle tasklet frames before stopping (Johannes Berg)
  - wifi: mac80211: mesh: init nonpeer_pm to active by default in mesh sdata (Nicolas Escande)
  - tools/power/cpupower: Fix Pstate frequency reporting on AMD Family 1Ah CPUs (Dhananjay Ugwekar)
  - ACPI: EC: Avoid returning AE_OK on errors in address space handler (Armin Wolf)
  - ACPI: EC: Abort address space access upon error (Armin Wolf)
  - scsi: qedf: Set qed_slowpath_params to zero before use (Saurav Kashyap)
  - scsi: qedf: Wait for stag work during unload (Saurav Kashyap)
  - scsi: qedf: Don't process stag work during unload and recovery (Saurav Kashyap)
  - scsi: core: alua: I/O errors for ALUA state transitions (Martin Wilck)
  - scsi: core: Fix a use-after-free (Bart Van Assche)
  - bpf: Fix overrunning reservations in ringbuf (Daniel Borkmann) [Orabug: 36850238] {CVE-2024-41009}
  - ACPI: processor_idle: Fix invalid comparison with insertion sort for latency (Kuan-Wei Chiu)
  - ARM: 9324/1: fix get_user() broken with veneer (Masahiro Yamada)
  - filelock: Remove locks reliably when fcntl/close race is detected (Jann Horn) [Orabug: 36874755] {CVE-2024-41012} {CVE-2024-41020}
  - gcc-plugins: Rename last_stmt() for GCC 14+ (Kees Cook)


author: Vijayendra Suman <vijayendra.suman@oracle.com> [5.15.0-302.167.5.el9uek]
changelog:
  - mm/hugetlb: fix adjusting poison page flag in non-HVO scenario (Jane Chu)  [Orabug: 37182268]
  - x86/bugs: Adjust SRSO mitigation to new features (Boris Ostrovsky)  [Orabug: 37145844]
  - net/mlx5: disable the 'fast unload' feature on Exadata systems (Qing Huang)  [Orabug: 37093170]
  - NFS: remove revoked delegation from server's delegation list (Dai Ngo)  [Orabug: 36990366]
  - perf/x86/intel/uncore: Fix NULL pointer dereference issue in upi_fill_topology() (Alexander Antonov)  [Orabug: 36882937]  {CVE-2023-52450}


author: Vijayendra Suman <vijayendra.suman@oracle.com> [5.15.0-302.167.6.el9uek]
changelog:
  - ice: Add a per-VF limit on number of FDIR filters (Ahmed Zaki)  [Orabug: 36964088]  {CVE-2024-42291}
  - scsi: lpfc: Fix a possible null pointer dereference (Huai-Yuan Liu)  [Orabug: 36964437]  {CVE-2024-43821}
  - power: reset: pwr-mlxbf: support graceful shutdown (Asmaa Mnebhi)  [Orabug: 37208029]
  - gpio: mlxbf3: Support shutdown() function (Asmaa Mnebhi)  [Orabug: 37208029]
  - sdhci-of-dwcmshc: disable PM runtime in dwcmshc_remove() (Liming Sun)  [Orabug: 37208029]
  - ocfs2: reserve space for inline xattr before attaching reflink tree (Gautham Ananthakrishna)  [Orabug: 37199019] {CVE-2024-49958}
  - Revert "ocfs2: ocfs2 crash due to invalid h_next_leaf_blk value in extent block" (Gautham Ananthakrishna)  [Orabug: 37199019]


author: Vijayendra Suman <vijayendra.suman@oracle.com> [5.15.0-303.168.1.el9uek]
changelog:
  - LTS version: v5.15.168 (Vijayendra Suman)
  - net: xilinx: axienet: Schedule NAPI in two steps (Sean Anderson)
  - selftests: net: more strict check in net_helper (Paolo Abeni)
  - net: axienet: start napi before enabling Rx/Tx (Andy Chiu)
  - ext4: fix warning in ext4_dio_write_end_io() (Jan Kara)
  - netfilter: ip6t_rpfilter: Fix regression with VRF interfaces (Phil Sutter)
  - net: vrf: determine the dst using the original ifindex for multicast (Antoine Tenart)
  - net: seg6: fix seg6_lookup_any_nexthop() to handle VRFs using flowi_l3mdev (Andrea Mayer)
  - xfrm: Pass flowi_oif or l3mdev as oif to xfrm_dst_lookup (David Ahern)
  - net: geneve: add missing netlink policy and size for IFLA_GENEVE_INNER_PROTO_INHERIT (Eyal Birger)
  - block, bfq: fix uaf for accessing waker_bfqq after splitting (Yu Kuai)
  - kthread: unpark only parked kthread (Frederic Weisbecker) [Orabug: 37206395] {CVE-2024-50019}
  - nouveau/dmem: Fix vulnerability in migrate_to_ram upon copy error (Yonatan Maman) [Orabug: 37252307] {CVE-2024-50096}
  - mptcp: pm: do not remove closing subflows (Matthieu Baerts (NGI0))
  - net: dsa: lan9303: ensure chip reset and wait for READY status (Anatolij Gustschin)
  - net: Fix an unsafe loop on the list (Anastasia Kovaleva) [Orabug: 37206408] {CVE-2024-50024}
  - net: explicitly clear the sk pointer, when pf->create fails (Ignat Korchagin)
  - drm/v3d: Stop the active perfmon before being destroyed (Maíra Canal) [Orabug: 37206424] {CVE-2024-50031}
  - hid: intel-ish-hid: Fix uninitialized variable 'rv' in ish_fw_xfer_direct_dma (SurajSonawane2415)
  - usb: storage: ignore bogus device raised by JieLi BR21 USB sound chip (Icenowy Zheng)
  - usb: xhci: Fix problem with xhci resume from suspend (Jose Alberto Reguero)
  - usb: dwc3: core: Stop processing of pending events if controller is halted (Selvarasu Ganesan)
  - Revert "usb: yurex: Replace snprintf() with the safer scnprintf() variant" (Oliver Neukum)
  - HID: plantronics: Workaround for an unexcepted opposite volume key (Wade Wang)
  - resource: fix region_intersects() vs add_memory_driver_managed() (Huang Ying) [Orabug: 37200930] {CVE-2024-49878}
  - HID: amd_sfh: Switch to device-managed dmam_alloc_coherent() (Basavaraj Natikar) [Orabug: 37264222] {CVE-2024-50189}
  - hwmon: (adt7470) Add missing dependency on REGMAP_I2C (Javier Carrasco)
  - hwmon: (adm9240) Add missing dependency on REGMAP_I2C (Javier Carrasco)
  - hwmon: (tmp513) Add missing dependency on REGMAP_I2C (Guenter Roeck)
  - x86/fpu: Avoid writing LBR bit to IA32_XSS unless supported (Mitchell Levy)
  - RDMA/hns: Fix UAF for cq async event (Chengchang Tang) [Orabug: 36753395] {CVE-2024-38545}
  - slip: make slhc_remember() more robust against malicious packets (Eric Dumazet) [Orabug: 37206428] {CVE-2024-50033}
  - ppp: fix ppp_async_encode() illegal access (Eric Dumazet) [Orabug: 37206434] {CVE-2024-50035}
  - mctp: Handle error of rtnl_register_module(). (Kuniyuki Iwashima)
  - rtnetlink: Add bulk registration helpers for rtnetlink message handlers. (Kuniyuki Iwashima)
  - net: rtnetlink: add msg kind names (Nikolay Aleksandrov)
  - netfilter: fib: check correct rtable in vrf setups (Florian Westphal)
  - netfilter: rpfilter/fib: Set ->flowic_uid correctly for user namespaces. (Guillaume Nault)
  - netfilter: rpfilter/fib: Populate flowic_l3mdev field (Phil Sutter)
  - netfilter: xtables: avoid NFPROTO_UNSPEC where needed (Florian Westphal) [Orabug: 37206449] {CVE-2024-50038}
  - sctp: ensure sk_state is set to CLOSED if hashing fails in sctp_listen_start (Xin Long)
  - net: ibm: emac: mal: fix wrong goto (Rosen Penev)
  - net/sched: accept TCA_STAB only for root qdisc (Eric Dumazet) [Orabug: 37206456] {CVE-2024-50039}
  - igb: Do not bring the device up after non-fatal error (Mohamed Khalfella) [Orabug: 37206463] {CVE-2024-50040}
  - i40e: Fix macvlan leak by synchronizing access to mac_filter_hash (Aleksandr Loktionov) [Orabug: 37206468] {CVE-2024-50041}
  - ice: Fix netif_is_ice() in Safe Mode (Marcin Szycik)
  - gpio: aspeed: Use devm_clk api to manage clock source (Billy Tsai)
  - gpio: aspeed: Add the flush write to ensure the write complete. (Billy Tsai)
  - net: dsa: b53: fix jumbo frames on 10/100 ports (Jonas Gorski)
  - net: dsa: b53: allow lower MTUs on BCM5325/5365 (Jonas Gorski)
  - net: dsa: b53: fix max MTU for BCM5325/BCM5365 (Jonas Gorski)
  - net: dsa: b53: fix max MTU for 1g switches (Jonas Gorski)
  - net: dsa: b53: fix jumbo frame mtu check (Jonas Gorski)
  - thermal: intel: int340x: processor: Fix warning during module unload (Zhang Rui) [Orabug: 37252297] {CVE-2024-50093}
  - thermal: int340x: processor_thermal: Set feature mask before proc_thermal_add (Srinivas Pandruvada)
  - net: phy: bcm84881: Fix some error handling paths (Christophe JAILLET)
  - Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change (Luiz Augusto von Dentz) [Orabug: 37206473] {CVE-2024-50044}
  - netfilter: br_netfilter: fix panic with metadata_dst skb (Andy Roulin) [Orabug: 37206481] {CVE-2024-50045}
  - tcp: fix tcp_enter_recovery() to zero retrans_stamp when it's safe (Neal Cardwell)
  - tcp: fix to allow timestamp undo if no retransmits were sent (Neal Cardwell)
  - net: phy: dp83869: fix memory corruption when enabling fiber (Ingo van Lil) [Orabug: 37264220] {CVE-2024-50188}
  - NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies() (Yanjun Zhang) [Orabug: 37206486] {CVE-2024-50046}
  - SUNRPC: Fix integer overflow in decode_rc_list() (Dan Carpenter)
  - ice: fix VLAN replay after reset (Dave Ertman)
  - NFSD: Mark filecache "down" if init fails (Chuck Lever)
  - RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt (Bob Pearson)
  - fbdev: sisfb: Fix strbuf array overflow (Andrey Shumilin) [Orabug: 37264185] {CVE-2024-50180}
  - drm/amd/display: Check null pointer before dereferencing se (Alex Hung) [Orabug: 37206502] {CVE-2024-50049}
  - driver core: bus: Return -EIO instead of 0 when show/store invalid bus attribute (Zijun Hu)
  - tools/iio: Add memory allocation failure check for trigger_name (Zhu Jun)
  - virtio_pmem: Check device status before requesting flush (Philip Chen) [Orabug: 37264203] {CVE-2024-50184}
  - comedi: ni_routing: tools: Check when the file could not be opened (Ruffalo Lavoisier)
  - usb: dwc2: Adjust the timing of USB Driver Interrupt Registration in the Crashkernel Scenario (Shawn Shao)
  - usb: chipidea: udc: enable suspend interrupt after usb reset (Xu Yang)
  - clk: imx: Remove CLK_SET_PARENT_GATE for DRAM mux for i.MX7D (Peng Fan) [Orabug: 37264190] {CVE-2024-50181}
  - remoteproc: imx_rproc: Use imx specific hook for find_loaded_rsc_table (Peng Fan)
  - media: videobuf2-core: clear memory related fields in __vb2_plane_dmabuf_put() (Yunke Cao)
  - ntb: ntb_hw_switchtec: Fix use after free vulnerability in switchtec_ntb_remove due to race condition (Kaixin Wang) [Orabug: 37206539] {CVE-2024-50059}
  - PCI: Mark Creative Labs EMU20k2 INTx masking as broken (Alex Williamson)
  - i2c: i801: Use a different adapter-name for IDF adapters (Hans de Goede)
  - PCI: Add ACS quirk for Qualcomm SA8775P (Subramanian Ananthanarayanan)
  - clk: bcm: bcm53573: fix OF node leak in init (Krzysztof Kozlowski)
  - RDMA/rtrs-srv: Avoid null pointer deref during path establishment (Md Haris Iqbal) [Orabug: 37206562] {CVE-2024-50062}
  - PCI: Add function 0 DMA alias quirk for Glenfly Arise chip (WangYuli)
  - RDMA/mad: Improve handling of timed out WRs of mad agent (Saravanan Vajravel) [Orabug: 37252300] {CVE-2024-50095}
  - ktest.pl: Avoid false positives with grub2 skip regex (Daniel Jordan)
  - s390/cpum_sf: Remove WARN_ON_ONCE statements (Thomas Richter)
  - ext4: nested locking for xattr inode (Wojciech Gładysz)
  - ext4: don't set SB_RDONLY after filesystem errors (Jan Kara) [Orabug: 37264225] {CVE-2024-50191}
  - bpf, x64: Fix a jit convergence issue (Yonghong Song)
  - s390/mm: Add cond_resched() to cmm_alloc/free_pages() (Gerald Schaefer)
  - s390/facility: Disable compile time optimization for decompressor code (Heiko Carstens)
  - bpf: Check percpu map value size first (Tao Chen)
  - Input: synaptics-rmi4 - fix UAF of IRQ domain on driver removal (Mathias Krause)
  - virtio_console: fix misc probe bugs (Michael S. Tsirkin)
  - fs/ntfs3: Refactor enum_rstbl to suppress static checker (Konstantin Komarov)
  - selftests: net: Remove executable bits from library scripts (Benjamin Poirier)
  - selftests/net: synchronize udpgro tests' tx and rx connection (Lucas Karpinski)
  - selftests/net: give more time to udpgro bg processes to complete startup (Adrien Thierry)
  - tracing: Have saved_cmdlines arrays all in one allocation (Steven Rostedt (Google))
  - drm/crtc: fix uninitialized variable use even harder (Rob Clark)
  - tracing: Remove precision vsnprintf() check from print event (Steven Rostedt (Google))
  - net: ethernet: cortina: Drop TSO support (Linus Walleij)
  - unicode: Don't special case ignorable code points (Gabriel Krisman Bertazi) [Orabug: 37252273] {CVE-2024-50089}
  - ALSA: usb-audio: Fix possible NULL pointer dereference in snd_usb_pcm_has_fixed_rate() (Jaroslav Kysela) [Orabug: 36983951] {CVE-2023-52904}
  - perf report: Fix segfault when 'sym' sort key is not used (Namhyung Kim)
  - 9p: add missing locking around taking dentry fid list (Dominique Martinet) [Orabug: 36774627] {CVE-2024-39463}
  - ext4: fix inode tree inconsistency caused by ENOMEM (zhanchengbin)
  - Revert "arm64: dts: qcom: sm8250: switch UFS QMP PHY to new style of bindings" (Sumit Semwal)
  - ACPI: battery: Fix possible crash when unregistering a battery hook (Armin Wolf) [Orabug: 37206091] {CVE-2024-49955}
  - ACPI: battery: Simplify battery hook locking (Armin Wolf)
  - clk: qcom: gcc-sc8180x: Add GPLL9 support (Satya Priya Kakitapalli)
  - r8169: add tally counter fields added with RTL8125 (Heiner Kallweit) [Orabug: 37206182] {CVE-2024-49973}
  - r8169: Fix spelling mistake: "tx_underun" -> "tx_underrun" (Colin Ian King)
  - dt-bindings: clock: qcom: Add GPLL9 support on gcc-sc8180x (Satya Priya Kakitapalli)
  - dt-bindings: clock: qcom: Add missing UFS QREF clocks (Manivannan Sadhasivam)
  - media: imx335: Fix reset-gpio handling (Umang Jain)
  - media: i2c: imx335: Enable regulator supplies (Kieran Bingham)
  - drm/rockchip: vop: clear DMA stop bit on RK3066 (Val Packett)
  - drm/rockchip: support gamma control on RK3399 (Hugh Cole-Baker)
  - drm/rockchip: define gamma registers for RK3399 (Hugh Cole-Baker)
  - lib/buildid: harden build ID parsing logic (Andrii Nakryiko)
  - build-id: require program headers to be right after ELF header (Alexey Dobriyan)
  - drm/amd/display: Allow backlight to go below `AMDGPU_DM_DEFAULT_MIN_BACKLIGHT` (Mario Limonciello)
  - uprobes: fix kernel info leak via "[uprobes]" vma (Oleg Nesterov)
  - arm64: cputype: Add Neoverse-N3 definitions (Mark Rutland)
  - arm64: Add Cortex-715 CPU part definition (Anshuman Khandual)
  - ext4: dax: fix overflowing extents beyond inode size when partially writing (Zhihao Cheng) [Orabug: 37206370] {CVE-2024-50015}
  - ext4: properly sync file size update after O_SYNC direct IO (Jan Kara)
  - spi: bcm63xx: Fix missing pm_runtime_disable() (Jinjie Ruan)
  - i2c: xiic: Fix pm_runtime_set_suspended() with runtime pm enabled (Jinjie Ruan)
  - i2c: xiic: Use devm_clk_get_enabled() (Andi Shyti)
  - i2c: core: Lock address during client device instantiation (Heiner Kallweit)
  - i2c: create debugfs entry per adapter (Wolfram Sang)
  - kconfig: qconf: fix buffer overflow in debug links (Masahiro Yamada)
  - drm/amd/display: Fix system hang while resume with TBT monitor (Tom Chung) [Orabug: 37206307] {CVE-2024-50003}
  - drm/sched: Add locking to drm_sched_entity_modify_sched (Tvrtko Ursulin)
  - close_range(): fix the logics in descriptor table trimming (Al Viro)
  - tracing/timerlat: Fix a race during cpuhp processing (Wei Li) [Orabug: 37200894] {CVE-2024-49866}
  - tracing/hwlat: Fix a race during cpuhp processing (Wei Li)
  - gpio: davinci: fix lazy disable (Emanuele Ghidoli)
  - btrfs: wait for fixup workers before stopping cleaner kthread during umount (Filipe Manana) [Orabug: 37200896] {CVE-2024-49867}
  - btrfs: fix a NULL pointer dereference when failed to start a new trasacntion (Qu Wenruo) [Orabug: 37200902] {CVE-2024-49868}
  - ACPI: resource: Add Asus ExpertBook B2502CVA to irq1_level_low_skip_override[] (Hans de Goede)
  - ACPI: resource: Add Asus Vivobook X1704VAP to irq1_level_low_skip_override[] (Hans de Goede)
  - Input: adp5589-keys - fix adp5589_gpio_get_value() (Nuno Sa)
  - Input: adp5589-keys - fix NULL pointer dereference (Nuno Sa) [Orabug: 37200911] {CVE-2024-49871}
  - rtc: at91sam9: fix OF node leak in probe() error path (Krzysztof Kozlowski)
  - net: stmmac: Fix zero-division error when disabling tc cbs (KhaiWenTan) [Orabug: 37206640] {CVE-2024-49977}
  - tomoyo: fallback to realpath if symlink's pathname does not exist (Tetsuo Handa)
  - iio: magnetometer: ak8975: Fix reading for ak099xx sensors (Barnabás Czémán)
  - clk: qcom: gcc-sc8180x: Fix the sdcc2 and sdcc4 clocks freq table (Satya Priya Kakitapalli)
  - clk: qcom: gcc-sm8250: Do not turn off PCIe GDSCs during gdsc_disable() (Manivannan Sadhasivam)
  - media: venus: fix use after free bug in venus_remove due to race condition (Zheng Wang) [Orabug: 37206208] {CVE-2024-49981}
  - clk: qcom: gcc-sm8150: De-register gcc_cpuss_ahb_clk_src (Satya Priya Kakitapalli)
  - clk: qcom: clk-rpmh: Fix overflow in BCM vote (Mike Tipton)
  - media: uapi/linux/cec.h: cec_msg_set_reply_to: zero flags (Hans Verkuil)
  - media: sun4i_csi: Implement link validate for sun4i_csi subdev (Laurent Pinchart)
  - clk: qcom: dispcc-sm8250: use CLK_SET_RATE_PARENT for branch clocks (Dmitry Baryshkov)
  - clk: rockchip: fix error for unknown clocks (Sebastian Reichel)
  - aoe: fix the potential use-after-free problem in more places (Chun-Yi Lee) [Orabug: 37206641] {CVE-2024-49982}
  - NFSD: Fix NFSv4's PUTPUBFH operation (Chuck Lever)
  - nfsd: map the EBADMSG to nfserr_io to avoid warning (Li Lingfeng) [Orabug: 37200917] {CVE-2024-49875}
  - nfsd: fix delegation_blocked() to block correctly for at least 30 seconds (NeilBrown)
  - perf hist: Update hist symbol when updating maps (Matt Fleming)
  - exfat: fix memory leak in exfat_load_bitmap() (Yuezhang Mo) [Orabug: 37206359] {CVE-2024-50013}
  - riscv: define ILLEGAL_POINTER_VALUE for 64bit (Jisheng Zhang)
  - ext4: mark fc as ineligible using an handle in ext4_xattr_set() (Luis Henriques (SUSE))
  - ext4: use handle to mark fc as ineligible in __track_dentry_update() (Luis Henriques (SUSE))
  - ext4: fix fast commit inode enqueueing during a full journal commit (Luis Henriques (SUSE))
  - ext4: fix incorrect tid assumption in jbd2_journal_shrink_checkpoint_list() (Luis Henriques (SUSE))
  - ext4: fix incorrect tid assumption in ext4_wait_for_tail_page_commit() (Luis Henriques (SUSE))
  - ext4: update orig_path in ext4_find_extent() (Baokun Li) [Orabug: 37200941] {CVE-2024-49881}
  - ext4: fix double brelse() the buffer of the extents path (Baokun Li) [Orabug: 37200947] {CVE-2024-49882}
  - ext4: aovid use-after-free in ext4_ext_insert_extent() (Baokun Li) [Orabug: 37200953] {CVE-2024-49883}
  - ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free (Baokun Li) [Orabug: 37206215] {CVE-2024-49983}
  - ext4: fix incorrect tid assumption in __jbd2_log_wait_for_space() (Luis Henriques (SUSE))
  - ext4: propagate errors from ext4_find_extent() in ext4_insert_range() (Baokun Li)
  - ext4: fix slab-use-after-free in ext4_split_extent_at() (Baokun Li) [Orabug: 37200959] {CVE-2024-49884}
  - ext4: correct encrypted dentry name hash when not casefolded (yao.ly)
  - ext4: no need to continue when the number of entries is 1 (Edward Adam Davis) [Orabug: 37206145] {CVE-2024-49967}
  - ALSA: hda/realtek: Add quirk for Huawei MateBook 13 KLV-WX9 (Ai Chao)
  - ALSA: line6: add hw monitor volume control to POD HD500X (Hans P. Moller)
  - ALSA: usb-audio: Add native DSD support for Luxman D-08u (Jan Lalinsky)
  - ALSA: usb-audio: Add delay quirk for VIVO USB-C HEADSET (Lianqin Hu)
  - ALSA: core: add isascii() check to card ID generator (Jaroslav Kysela)
  - drm: Consistently use struct drm_mode_rect for FB_DAMAGE_CLIPS (Thomas Zimmermann)
  - parisc: Fix itlb miss handler for 64-bit programs (Helge Deller)
  - perf/core: Fix small negative period being ignored (Luo Gengkun)
  - power: supply: hwmon: Fix missing temp1_max_alarm attribute (Hans de Goede)
  - spi: bcm63xx: Fix module autoloading (Jinjie Ruan)
  - firmware: tegra: bpmp: Drop unused mbox_client_to_bpmp() (Krzysztof Kozlowski)
  - i2c: xiic: Wait for TX empty to avoid missed TX NAKs (Robert Hancock)
  - i2c: qcom-geni: Use IRQF_NO_AUTOEN flag in request_irq() (Jinjie Ruan)
  - i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume (Marek Vasut) [Orabug: 37206219] {CVE-2024-49985}
  - platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug (Zach Wade) [Orabug: 37200965] {CVE-2024-49886}
  - selftests: vDSO: fix vdso_config for s390 (Heiko Carstens)
  - selftests: vDSO: fix ELF hash table entry size for s390x (Jens Remus)
  - selftests/mm: fix charge_reserved_hugetlb.sh test (David Hildenbrand)
  - selftests: vDSO: fix vDSO symbols lookup for powerpc64 (Christophe Leroy)
  - selftests: vDSO: fix vdso_config for powerpc (Christophe Leroy)
  - selftests: vDSO: fix vDSO name for powerpc (Christophe Leroy)
  - selftests: breakpoints: use remaining time to check if suspend succeed (Yifei Liu)
  - spi: s3c64xx: fix timeout counters in flush_fifo (Ben Dooks)
  - spi: spi-imx: Fix pm_runtime_set_suspended() with runtime pm enabled (Jinjie Ruan)
  - usb: typec: tcpm: Check for port partner validity before consuming it (Badhri Jagan Sridharan) [Orabug: 36683242] {CVE-2024-36893}
  - blk-integrity: register sysfs attributes on struct device (Thomas Weißschuh)
  - blk-integrity: convert to struct device_attribute (Thomas Weißschuh)
  - blk-integrity: use sysfs_emit (Thomas Weißschuh)
  - ext4: fix i_data_sem unlock order in ext4_ind_migrate() (Artem Sadovnikov) [Orabug: 37206322] {CVE-2024-50006}
  - ext4: avoid use-after-free in ext4_ext_show_leaf() (Baokun Li) [Orabug: 37205705] {CVE-2024-49889}
  - ext4: ext4_search_dir should return a proper error (Thadeu Lima de Souza Cascardo)
  - of/irq: Refer to actual buffer size in of_irq_parse_one() (Geert Uytterhoeven)
  - drm/amd/pm: ensure the fw_info is not null before using it (Tim Huang) [Orabug: 37205712] {CVE-2024-49890}
  - drm/radeon/r100: Handle unknown family in r100_cp_init_microcode() (Geert Uytterhoeven)
  - scsi: aacraid: Rearrange order of struct aac_srb_unit (Kees Cook)
  - drm/printer: Allow NULL data in devcoredump printer (Matthew Brost)
  - drm/amd/display: Initialize get_bytes_per_element's default to 1 (Alex Hung) [Orabug: 37205726] {CVE-2024-49892}
  - drm/amd/display: Fix index out of bounds in DCN30 color transformation (Srinivasan Shanmugam) [Orabug: 37206158] {CVE-2024-49969} {CVE-2024-49895}
  - drm/amd/display: Fix index out of bounds in degamma hardware format translation (Srinivasan Shanmugam) [Orabug: 37205739] {CVE-2024-49894}
  - drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation (Srinivasan Shanmugam) [Orabug: 37205745] {CVE-2024-49895} {CVE-2024-49969}
  - drm/amd/display: Check stream before comparing them (Alex Hung) [Orabug: 37205751] {CVE-2024-49896}
  - platform/x86: touchscreen_dmi: add nanote-next quirk (Ckath)
  - HID: multitouch: Add support for Thinkpad X12 Gen 2 Kbd Portfolio (Vishnu Sankar)
  - drm/amdgpu: enable gfxoff quirk on HP 705G4 (Peng Liu)
  - drm/amdgpu: add raven1 gfxoff quirk (Peng Liu)
  - jfs: Fix uninit-value access of new_ea in ea_buffer (Zhao Mengmeng) [Orabug: 37205777] {CVE-2024-49900}
  - scsi: smartpqi: correct stream detection (Mahesh Rajashekhara)
  - jfs: check if leafidx greater than num leaves per dmap tree (Edward Adam Davis) [Orabug: 37205789] {CVE-2024-49902}
  - jfs: Fix uaf in dbFreeBits (Edward Adam Davis) [Orabug: 37205794] {CVE-2024-49903}
  - jfs: UBSAN: shift-out-of-bounds in dbFindBits (Remington Brasga)
  - drm/amd/display: Check null pointers before using dc->clk_mgr (Alex Hung) [Orabug: 37205820] {CVE-2024-49907}
  - ata: sata_sil: Rename sil_blacklist to sil_quirks (Damien Le Moal)
  - drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream (Srinivasan Shanmugam) [Orabug: 37205857] {CVE-2024-49913}
  - iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count (Sanjay K Kumar) [Orabug: 37206262] {CVE-2024-49993}
  - iommu/vt-d: Always reserve a domain ID for identity setup (Lu Baolu)
  - power: reset: brcmstb: Do not go into infinite loop if reset fails (Andrew Davis)
  - iommu/arm-smmu-qcom: hide last LPASS SMMU context bank from linux (Marc Gonzalez)
  - rcuscale: Provide clear error when async specified without primitives (Paul E. McKenney)
  - fbdev: pxafb: Fix possible use after free in pxafb_task() (Kaixin Wang) [Orabug: 37205935] {CVE-2024-49924}
  - x86/syscall: Avoid memcpy() for ia32 syscall_get_arguments() (Kees Cook)
  - ALSA: hdsp: Break infinite MIDI input flush loop (Takashi Iwai)
  - ALSA: asihpi: Fix potential OOB array access (Takashi Iwai) [Orabug: 37206327] {CVE-2024-50007}
  - tools/x86/kcpuid: Protect against faulty "max subleaf" values (Ahmed S. Darwish)
  - ALSA: usb-audio: Add logitech Audio profile quirk (Joshua Pius)
  - ALSA: usb-audio: Define macros for quirk table entries (Takashi Iwai)
  - x86/ioapic: Handle allocation failures gracefully (Thomas Gleixner) [Orabug: 37205954] {CVE-2024-49927}
  - ALSA: usb-audio: Add input value sanity checks for standard types (Takashi Iwai)
  - signal: Replace BUG_ON()s (Thomas Gleixner)
  - nfp: Use IRQF_NO_AUTOEN flag in request_irq() (Jinjie Ruan)
  - wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext() (Gustavo A. R. Silva) [Orabug: 37206332] {CVE-2024-50008}
  - wifi: mt76: mt7915: hold dev->mt76.mutex while disabling tx worker (Felix Fietkau)
  - proc: add config & param to block forcing mem writes (Adrian Ratiu)
  - ACPICA: iasl: handle empty connection_node (Aleksandrs Vinarskis)
  - tcp: avoid reusing FIN_WAIT2 when trying to find port in connect() process (Jason Xing)
  - net: atlantic: Avoid warning about potential string truncation (Simon Horman)
  - ipv4: Mask upper DSCP bits and ECN bits in NETLINK_FIB_LOOKUP family (Ido Schimmel)
  - ipv4: Check !in_dev earlier for ioctl(SIOCSIFADDR). (Kuniyuki Iwashima)
  - net: mvpp2: Increase size of queue_name buffer (Simon Horman)
  - tipc: guard against string buffer overrun (Simon Horman) [Orabug: 37206276] {CVE-2024-49995}
  - ACPICA: check null return of ACPI_ALLOCATE_ZEROED() in acpi_db_convert_to_package() (Pei Xiao) [Orabug: 37206122] {CVE-2024-49962}
  - ACPI: EC: Do not release locks during operation region accesses (Rafael J. Wysocki)
  - wifi: rtw88: select WANT_DEV_COREDUMP (Zong-Zhe Yang)
  - wifi: ath11k: fix array out-of-bound access in SoC stats (Karthikeyan Periyasamy) [Orabug: 37205975] {CVE-2024-49930}
  - nvme-pci: qdepth 1 quirk (Keith Busch)
  - blk_iocost: fix more out of bound shifts (Konstantin Ovsepian) [Orabug: 37205994] {CVE-2024-49933}
  - net: sched: consistently use rcu_replace_pointer() in taprio_change() (Dmitry Antipov)
  - ACPICA: Fix memory leak if acpi_ps_get_next_field() fails (Armin Wolf)
  - ACPICA: Fix memory leak if acpi_ps_get_next_namepath() fails (Armin Wolf)
  - ACPI: PAD: fix crash in exit_round_robin() (Seiji Nishikawa) [Orabug: 37206005] {CVE-2024-49935}
  - net: hisilicon: hns_mdio: fix OF node leak in probe() (Krzysztof Kozlowski)
  - net: hisilicon: hns_dsaf_mac: fix OF node leak in hns_mac_get_info() (Krzysztof Kozlowski)
  - net: hisilicon: hip04: fix OF node leak in probe() (Krzysztof Kozlowski)
  - net/xen-netback: prevent UAF in xenvif_flush_hash() (Jeongjun Park) [Orabug: 37206011] {CVE-2024-49936}
  - ice: Adjust over allocation of memory in ice_sched_add_root_node() and ice_sched_add_node() (Aleksandr Mishin)
  - wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit (Toke Høiland-Jørgensen) [Orabug: 37206028] {CVE-2024-49938}
  - wifi: ath9k: fix possible integer overflow in ath9k_get_et_stats() (Dmitry Kandybka)
  - f2fs: Require FMODE_WRITE for atomic write ioctls (Jann Horn) [Orabug: 37200793] {CVE-2024-47740}
  - ALSA: hda/conexant: Fix conflicting quirk for System76 Pangolin (Takashi Iwai)
  - ASoC: imx-card: Set card.owner to avoid a warning calltrace if SND=m (Hui Wang)
  - ALSA: hda/generic: Unconditionally prefer preferred_dacs pairs (Takashi Iwai)
  - ALSA: hda/realtek: Fix the push button function for the ALC257 (Oder Chiou)
  - ALSA: mixer_oss: Remove some incorrect kfree_const() usages (Christophe JAILLET)
  - media: usbtv: Remove useless locks in usbtv_video_free() (Benjamin Gaignard) [Orabug: 36598250] {CVE-2024-27072}
  - i2c: xiic: Try re-initialization on bus busy timeout (Robert Hancock)
  - i2c: xiic: improve error message when transfer fails to start (Marc Ferland)
  - i2c: xiic: xiic_xfer(): Fix runtime PM leak on error path (Lars-Peter Clausen)
  - i2c: xiic: Fix RX IRQ busy check (Marek Vasut)
  - i2c: xiic: Switch from waitqueue to completion (Marek Vasut)
  - i2c: xiic: Fix broken locking on tx_msg (Marek Vasut)
  - sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start (Xin Long) [Orabug: 37206050] {CVE-2024-49944}
  - ppp: do not assume bh is held in ppp_channel_bridge_input() (Eric Dumazet) [Orabug: 37206060] {CVE-2024-49946}
  - ipv4: ip_gre: Fix drops of small packets in ipgre_xmit (Anton Danilov)
  - net: stmmac: dwmac4: extend timeout for VLAN Tag register busy bit check (Shenwei Wang)
  - net: stmmac: Disable automatic FCS/Pad stripping (Kurt Kanzenbach)
  - stmmac_pci: Fix underflow size in stmmac_rx (Zekun Shen)
  - net: add more sanity checks to qdisc_pkt_len_init() (Eric Dumazet) [Orabug: 37206063] {CVE-2024-49948}
  - net: avoid potential underflow in qdisc_pkt_len_init() with UFO (Eric Dumazet) [Orabug: 37206069] {CVE-2024-49949}
  - net: ethernet: lantiq_etop: fix memory disclosure (Aleksander Jan Bajkowski) [Orabug: 37206288] {CVE-2024-49997}
  - Bluetooth: btmrvl: Use IRQF_NO_AUTOEN flag in request_irq() (Jinjie Ruan)
  - netfilter: nf_tables: prevent nf_skb_duplicated corruption (Eric Dumazet) [Orabug: 37206080] {CVE-2024-49952}
  - net: ieee802154: mcr20a: Use IRQF_NO_AUTOEN flag in request_irq() (Jinjie Ruan)
  - netfilter: uapi: NFTA_FLOWTABLE_HOOK is NLA_NESTED (Phil Sutter)
  - net/mlx5e: Fix NULL deref in mlx5e_tir_builder_alloc() (Elena Salomatkina) [Orabug: 37206298] {CVE-2024-50000}
  - net/mlx5: Added cond_resched() to crdump collection (Mohamed Khalfella)
  - net/mlx5: Fix error path in multi-packet WQE transmit (Gerd Bayer) [Orabug: 37206301] {CVE-2024-50001}
  - ieee802154: Fix build error (Jinjie Ruan)
  - ceph: remove the incorrect Fw reference check when dirtying pages (Xiubo Li) [Orabug: 37264180] {CVE-2024-50179}
  - mailbox: bcm2835: Fix timeout during suspend mode (Stefan Wahren) [Orabug: 37206129] {CVE-2024-49963}
  - mailbox: rockchip: fix a typo in module autoloading (Liao Chen)
  - static_call: Replace pointless WARN_ON() in static_call_module_notify() (Thomas Gleixner) [Orabug: 37206089] {CVE-2024-49954}
  - static_call: Handle module init failure correctly in static_call_del_module() (Thomas Gleixner) [Orabug: 37206305] {CVE-2024-50002}
  - spi: lpspi: Simplify some error message (Christophe JAILLET)
  - usb: yurex: Fix inconsistent locking bug in yurex_read() (Harshit Mogalapalli)
  - i2c: isch: Add missed 'else' (Andy Shevchenko)
  - i2c: aspeed: Update the stop sw state when the bus recovery occurs (Tommy Huang)
  - mm: only enforce minimum stack gap size if it's sensible (David Gow)
  - lockdep: fix deadlock issue between lockdep and rcu (Zhiguo Niu)
  - bpf: lsm: Set bpf_lsm_blob_sizes.lbs_task to 0 (Song Liu)
  - x86/entry: Remove unwanted instrumentation in common_interrupt() (Dmitry Vyukov)
  - x86/idtentry: Incorporate definitions/declarations of the FRED entries (Xin Li)
  - pps: add an error check in parport_attach (Ma Ke)
  - pps: remove usage of the deprecated ida_simple_xx() API (Christophe JAILLET)
  - usb: xhci: fix loss of data on Cadence xHC (Pawel Laszczak)
  - xhci: Add a quirk for writing ERST in high-low order (Daehwan Jung)
  - xhci: Preserve RsvdP bits in ERSTBA register correctly (Lukas Wunner)
  - xhci: Refactor interrupter code for initial multi interrupter support. (Mathias Nyman)
  - xhci: remove xhci_test_trb_in_td_math early development check (Mathias Nyman)
  - xhci: fix event ring segment table related masks and variables in header (Mathias Nyman)
  - USB: misc: yurex: fix race between read and write (Oliver Neukum)
  - usb: yurex: Replace snprintf() with the safer scnprintf() variant (Lee Jones)
  - soc: versatile: realview: fix soc_dev leak during device remove (Krzysztof Kozlowski)
  - soc: versatile: realview: fix memory leak during device remove (Krzysztof Kozlowski)
  - padata: use integer wrap around to prevent deadlock on seq_nr overflow (VanGiang Nguyen) [Orabug: 37200789] {CVE-2024-47739}
  - EDAC/igen6: Fix conversion of system address to physical memory address (Qiuxu Zhuo)
  - nfs: fix memory leak in error path of nfs4_do_reclaim (Li Lingfeng)
  - fs: Fix file_set_fowner LSM hook inconsistencies (Mickaël Salaün)
  - vfs: fix race between evice_inodes() and find_inode()&iput() (Julian Sun) [Orabug: 37200603] {CVE-2024-47679}
  - arm64: dts: rockchip: Correct the Pinebook Pro battery design capacity (Dragan Simic)
  - arm64: dts: rockchip: Raise Pinebook Pro's panel backlight PWM frequency (Dragan Simic)
  - hwrng: cctrng - Add missing clk_disable_unprepare in cctrng_resume (Gaosheng Cui)
  - hwrng: bcm2835 - Add missing clk_disable_unprepare in bcm2835_rng_init (Gaosheng Cui)
  - hwrng: mtk - Use devm_pm_runtime_enable (Guoqing Jiang)
  - f2fs: avoid potential int overflow in sanity_check_area_boundary() (Nikita Zhandarovich)
  - f2fs: prevent possible int overflow in dir_block_index() (Nikita Zhandarovich)
  - debugobjects: Fix conditions in fill_pool() (Zhen Lei)
  - wifi: mt76: mt7615: check devm_kasprintf() returned value (Ma Ke)
  - wifi: rtw88: 8822c: Fix reported RX band width (Bitterblue Smith)
  - perf/x86/intel/pt: Fix sampling synchronization (Adrian Hunter)
  - efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption (Ard Biesheuvel) [Orabug: 37200864] {CVE-2024-49858}
  - ACPI: resource: Add another DMI match for the TongFang GMxXGxx (Werner Sembach)
  - ACPI: sysfs: validate return type of _STR method (Thomas Weißschuh) [Orabug: 37200877] {CVE-2024-49860}
  - drbd: Add NULL check for net_conf to prevent dereference in state validation (Mikhail Lobanov)
  - drbd: Fix atomicity violation in drbd_uuid_set_bm() (Qiu-ji Chen)
  - crypto: ccp - Properly unregister /dev/sev on sev PLATFORM_STATUS failure (Pavan Kumar Paluri)
  - xhci: Set quirky xHC PCI hosts to D3 _after_ stopping and freeing them. (Mathias Nyman)
  - tty: rp2: Fix reset with non forgiving PCIe host bridges (Florian Fainelli)
  - firmware_loader: Block path traversal (Jann Horn) [Orabug: 37200801] {CVE-2024-47742}
  - bus: integrator-lm: fix OF node leak in probe() (Krzysztof Kozlowski)
  - usb: dwc2: drd: fix clock gating on USB role switch (Tomas Marek)
  - usb: cdnsp: Fix incorrect usb_request status (Pawel Laszczak)
  - USB: class: CDC-ACM: fix race between get_serial and set_serial (Oliver Neukum)
  - USB: misc: cypress_cy7c63: check for short transfer (Oliver Neukum)
  - USB: appledisplay: close race between probe and completion handler (Oliver Neukum)
  - usbnet: fix cyclical race on disconnect with work queue (Oliver Neukum)
  - scsi: mac_scsi: Disallow bus errors during PDMA send (Finn Thain)
  - scsi: mac_scsi: Refactor polling loop (Finn Thain)
  - scsi: mac_scsi: Revise printk(KERN_DEBUG ...) messages (Finn Thain)
  - drm/amd/display: Validate backlight caps are sane (Mario Limonciello)
  - drm/amd/display: Round calculated vtotal (Robin Chen)
  - Input: i8042 - add another board name for TUXEDO Stellaris Gen5 AMD line (Werner Sembach)
  - Input: i8042 - add TUXEDO Stellaris 15 Slim Gen6 AMD to i8042 quirk table (Werner Sembach)
  - Input: i8042 - add TUXEDO Stellaris 16 Gen5 AMD to i8042 quirk table (Werner Sembach)
  - Revert "media: tuners: fix error return code of hybrid_tuner_request_state()" (Roman Smirnov)
  - soc: versatile: integrator: fix OF node leak in probe() error path (Krzysztof Kozlowski)
  - ASoC: rt5682: Return devm_of_clk_add_hw_provider to transfer the error (Ma Ke)
  - PCI: xilinx-nwl: Fix off-by-one in INTx IRQ handler (Sean Anderson)
  - Remove *.orig pattern from .gitignore (Laurent Pinchart)
  - selinux,smack: don't bypass permissions check in inode_setsecctx hook (Scott Mayhew) [Orabug: 37070761] {CVE-2024-46695}
  - vfio/pci: fix potential memory leak in vfio_intx_enable() (Ye Bin) [Orabug: 36765615] {CVE-2024-38632}
  - x86/mm: Switch to new Intel CPU model defines (Tony Luck)
  - Input: goodix - use the new soc_intel_is_byt() helper (Hans de Goede)
  - drm/amd/display: Fix Synaptics Cascaded Panamera DSC Determination (Fangzhi Zuo)
  - netfilter: ctnetlink: compile ctnetlink_label_size with CONFIG_NF_CONNTRACK_EVENTS (Simon Horman)
  - netfilter: nf_tables: Keep deleted flowtable hooks until after RCU (Phil Sutter)
  - bonding: Fix unnecessary warnings and logs from bond_xdp_get_xmit_slave() (Jiwon Kim) [Orabug: 37200774] {CVE-2024-47734}
  - net: qrtr: Update packets cloning when broadcasting (Youssef Samir)
  - tcp: check skb is non-NULL in tcp_rto_delta_us() (Josh Hunt) [Orabug: 37200622] {CVE-2024-47684}
  - net: ipv6: select DST_CACHE from IPV6_RPL_LWTUNNEL (Thomas Weißschuh)
  - net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition (Kaixin Wang) [Orabug: 37200817] {CVE-2024-47747}
  - netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put() (Eric Dumazet) [Orabug: 37200629] {CVE-2024-47685}
  - net: xilinx: axienet: Fix packet counting (Sean Anderson)
  - net: axienet: Switch to 64-bit RX/TX statistics (Robert Hancock)
  - net: axienet: Use NAPI for TX completion path (Robert Hancock)
  - net: axienet: Be more careful about updating tx_bd_tail (Robert Hancock)
  - net: axienet: add coalesce timer ethtool configuration (Robert Hancock)
  - net: axienet: reduce default RX interrupt threshold to 1 (Robert Hancock)
  - net: axienet: implement NAPI and GRO receive (Robert Hancock)
  - net: axienet: don't set IRQ timer when IRQ delay not used (Robert Hancock)
  - net: axienet: Clean up DMA start/stop and error handling (Robert Hancock)
  - net: axienet: Clean up device used for DMA calls (Robert Hancock)
  - Revert "dm: requeue IO if mapping table not yet available" (Mikulas Patocka)
  - vhost_vdpa: assign irq bypass producer token correctly (Jason Wang) [Orabug: 37200820] {CVE-2024-47748}
  - vdpa: Add eventfd for the vdpa callback (Xie Yongji)
  - interconnect: qcom: sm8250: Enable sync_state (Konrad Dybcio)
  - coresight: tmc: sg: Do not leak sg_table (Suzuki K Poulose)
  - iio: adc: ad7606: fix standby gpio state to match the documentation (Guillaume Stols)
  - iio: adc: ad7606: fix oversampling gpio array (Guillaume Stols)
  - spi: spi-fsl-lpspi: Undo runtime PM changes at driver exit time (Jinjie Ruan)
  - spi: lpspi: release requested DMA channels (Alexander Stein)
  - spi: lpspi: Silence error message upon deferred probe (Alexander Stein)
  - f2fs: get rid of online repaire on corrupted directory (Chao Yu) [Orabug: 37200641] {CVE-2024-47690}
  - f2fs: clean up w/ dotdot_name (Chao Yu)
  - f2fs: introduce F2FS_IPU_HONOR_OPU_WRITE ipu policy (Chao Yu)
  - f2fs: fix to wait page writeback before setting gcing flag (Chao Yu)
  - f2fs: optimize error handling in redirty_blocks (Jack Qiu)
  - f2fs: reduce expensive checkpoint trigger frequency (Chao Yu)
  - f2fs: remove unneeded check condition in __f2fs_setxattr() (Chao Yu)
  - f2fs: fix to update i_ctime in __f2fs_setxattr() (Chao Yu)
  - f2fs: fix typo (Yonggil Song)
  - nfsd: return -EINVAL when namelen is 0 (Li Lingfeng) [Orabug: 37200649] {CVE-2024-47692}
  - nfsd: call cache_put if xdr_reserve_space returns NULL (Guoqing Jiang) [Orabug: 37200782] {CVE-2024-47737}
  - ntb_perf: Fix printk format (Max Hawking)
  - ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir() (Jinjie Ruan)
  - RDMA/irdma: fix error message in irdma_modify_qp_roce() (Vitaliy Shevtsov)
  - RDMA/cxgb4: Added NULL check for lookup_atid (Mikhail Lobanov) [Orabug: 37200823] {CVE-2024-47749}
  - riscv: Fix fp alignment bug in perf_callchain_user() (Jinjie Ruan)
  - RDMA/hns: Optimize hem allocation performance (Junxian Huang)
  - RDMA/hns: Fix VF triggering PF reset in abnormal interrupt handler (Junxian Huang)
  - RDMA/hns: Refactor the abnormal interrupt handler function (Haoyue Xu)
  - RDMA/hns: Fix the wrong type of return value of the interrupt handler (Haoyue Xu)
  - RDMA/hns: Remove unused abnormal interrupt of type RAS (Haoyue Xu)
  - RDMA/hns: Fix spin_unlock_irqrestore() called with IRQs enabled (Chengchang Tang) [Orabug: 37200776] {CVE-2024-47735}
  - RDMA/hns: Fix the overflow risk of hem_list_calc_ba_range() (wenglianfa)
  - RDMA/hns: Don't modify rq next block addr in HIP09 QPC (Junxian Huang)
  - watchdog: imx_sc_wdt: Don't disable WDT in suspend (Jonas Blixt)
  - IB/core: Fix ib_cache_setup_one error flow cleanup (Patrisious Haddad) [Orabug: 37200653] {CVE-2024-47693}
  - pinctrl: mvebu: Fix devinit_dove_pinctrl_probe function (Wang Jianzheng)
  - pinctrl: mvebu: Use devm_platform_get_and_ioremap_resource() (Yangtao Li)
  - nfsd: fix refcount leak when file is unhashed after being found (Jeff Layton)
  - nfsd: remove unneeded EEXIST error check in nfsd_do_file_acquire (Jeff Layton)
  - clk: ti: dra7-atl: Fix leak of of_nodes (David Lechner)
  - RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds (Md Haris Iqbal) [Orabug: 37200658] {CVE-2024-47695}
  - RDMA/rtrs: Reset hb_missed_cnt after receiving other traffic from peer (Jack Wang)
  - pinctrl: single: fix missing error code in pcs_probe() (Yang Yingliang)
  - RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency (Zhu Yanjun) [Orabug: 37205520] {CVE-2024-47696}
  - PCI: xilinx-nwl: Clean up clock on probe failure/removal (Sean Anderson)
  - PCI: xilinx-nwl: Fix register misspelling (Sean Anderson)
  - PCI: keystone: Fix if-statement expression in ks_pcie_quirk() (Dan Carpenter) [Orabug: 37205559] {CVE-2024-47756}
  - drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error (Junlin Li) [Orabug: 37200661] {CVE-2024-47697}
  - drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error (Junlin Li) [Orabug: 37200668] {CVE-2024-47698}
  - Input: ilitek_ts_i2c - add report id message validation (Emanuele Ghidoli)
  - Input: ilitek_ts_i2c - avoid wrong input subsystem sync (Emanuele Ghidoli)
  - clk: rockchip: Set parent rate for DCLK_VOP clock on RK3228 (Jonas Karlman)
  - remoteproc: imx_rproc: Initialize workqueue earlier (Peng Fan)
  - remoteproc: imx_rproc: Correct ddr alias for i.MX8M (Peng Fan)
  - clk: imx: imx8qxp: Parent should be initialized earlier than the clock (Peng Fan)
  - clk: imx: imx8qxp: Register dc0_bypass0_clk before disp clk (Peng Fan)
  - clk: imx: imx8mp: fix clock tree update of TF-A managed clocks (Zhipeng Wang)
  - perf time-utils: Fix 32-bit nsec parsing (Ian Rogers)
  - perf sched timehist: Fixed timestamp error when unable to confirm event sched_in time (Yang Jihong)
  - perf sched timehist: Fix missing free of session in perf_sched__timehist() (Yang Jihong)
  - perf mem: Free the allocated sort string, fixing a leak (Namhyung Kim)
  - bpf: Fix bpf_strtol and bpf_strtoul helpers for 32bit (Daniel Borkmann)
  - nilfs2: fix potential oob read in nilfs_btree_check_delete() (Ryusuke Konishi) [Orabug: 37200842] {CVE-2024-47757}
  - nilfs2: determine empty node blocks as corrupted (Ryusuke Konishi)
  - nilfs2: fix potential null-ptr-deref in nilfs_btree_insert() (Ryusuke Konishi) [Orabug: 37200675] {CVE-2024-47699}
  - ext4: avoid OOB when system.data xattr changes underneath the filesystem (Thadeu Lima de Souza Cascardo) [Orabug: 37200681] {CVE-2024-47701}
  - ext4: return error on ext4_find_inline_entry (Thadeu Lima de Souza Cascardo)
  - ext4: avoid negative min_clusters in find_group_orlov() (Kemeng Shi)
  - ext4: avoid potential buffer_head leak in __ext4_new_inode() (Kemeng Shi)
  - ext4: avoid buffer_head leak in ext4_mark_inode_used() (Kemeng Shi)
  - smackfs: Use rcu_assign_pointer() to ensure safe assignment in smk_set_cipso (Jiawei Ye)
  - ext4: clear EXT4_GROUP_INFO_WAS_TRIMMED_BIT even mount with discard (yangerkun)
  - kthread: fix task state in kthread worker if being frozen (Chen Yu)
  - xz: cleanup CRC32 edits from 2018 (Lasse Collin)
  - selftests/bpf: Fix C++ compile error from missing _Bool type (Tony Ambardar)
  - selftests/bpf: Fix error compiling test_lru_map.c (Tony Ambardar)
  - selftests/bpf: Fix errors compiling cg_storage_multi.h with musl libc (Tony Ambardar)
  - selftests/bpf: Fix compiling core_reloc.c with musl-libc (Tony Ambardar)
  - selftests/bpf: Fix compiling tcp_rtt.c with musl-libc (Tony Ambardar)
  - selftests/bpf: Fix compiling flow_dissector.c with musl-libc (Tony Ambardar)
  - selftests/bpf: Fix compiling kfree_skb.c with musl-libc (Tony Ambardar)
  - selftests/bpf: Fix missing ARRAY_SIZE() definition in bench.c (Tony Ambardar)
  - selftests/bpf: Fix error compiling bpf_iter_setsockopt.c with musl libc (Tony Ambardar)
  - selftests/bpf: Fix compile error from rlim_t in sk_storage_map.c (Tony Ambardar)
  - tpm: Clean up TPM space after command failure (Jonathan McDowell) [Orabug: 37200850] {CVE-2024-49851}
  - xen/swiotlb: add alignment check for dma buffers (Juergen Gross)
  - xen: use correct end address of kernel for conflict checking (Juergen Gross)
  - drivers:drm:exynos_drm_gsc:Fix wrong assignment in gsc_bind() (Yuesong Li)
  - drm/msm: fix %s null argument error (Sherry Yang)
  - ipmi: docs: don't advertise deprecated sysfs entries (Wolfram Sang)
  - drm/msm/a5xx: workaround early ring-buffer emptiness check (Vladimir Lypak)
  - drm/msm: Drop priv->lastctx (Rob Clark)
  - drm/msm/a5xx: fix races in preemption evaluation stage (Vladimir Lypak)
  - drm/msm/a5xx: properly clear preemption records on resume (Vladimir Lypak)
  - drm/msm/a5xx: disable preemption in submits by default (Vladimir Lypak)
  - drm/msm: Fix incorrect file name output in adreno_request_fw() (Aleksandr Mishin)
  - powerpc/8xx: Fix kernel vs user address comparison (Christophe Leroy)
  - powerpc/8xx: Fix initial memory mapping (Christophe Leroy)
  - powerpc/32: Remove 'noltlbs' kernel parameter (Christophe Leroy)
  - powerpc/32: Remove the 'nobats' kernel parameter (Christophe Leroy)
  - drm/mediatek: Use spin_lock_irqsave() for CRTC event lock (Fei Shao)
  - jfs: fix out-of-bounds in dbNextAG() and diAlloc() (Jeongjun Park) [Orabug: 37200739] {CVE-2024-47723}
  - scsi: elx: libefc: Fix potential use after free in efc_nport_vport_del() (Dan Carpenter) [Orabug: 37200855] {CVE-2024-49852}
  - drm/bridge: lontium-lt8912b: Validate mode in drm_bridge_funcs::mode_valid() (Liu Ying)
  - drm/radeon/evergreen_cs: fix int overflow errors in cs track offsets (Nikita Zhandarovich)
  - drm/rockchip: dw_hdmi: Fix reading EDID when using a forced mode (Jonas Karlman)
  - drm/rockchip: vop: Allow 4096px width scaling (Alex Bee)
  - scsi: NCR5380: Check for phase match during PDMA fixup (Finn Thain)
  - scsi: NCR5380: Add SCp members to struct NCR5380_cmd (Finn Thain)
  - drm/radeon: properly handle vbios fake edid sizing (Alex Deucher)
  - drm/radeon: Replace one-element array with flexible-array member (Paulo Miguel Almeida)
  - drm/amdgpu: properly handle vbios fake edid sizing (Alex Deucher)
  - drm/amdgpu: Replace one-element array with flexible-array member (Paulo Miguel Almeida)
  - drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func (Srinivasan Shanmugam) [Orabug: 37200736] {CVE-2024-47720}
  - drm/stm: Fix an error handling path in stm_drm_platform_probe() (Christophe JAILLET)
  - pmdomain: core: Harden inter-column space in debug summary (Geert Uytterhoeven)
  - mtd: powernv: Add check devm_kasprintf() returned value (Charles Han)
  - fbdev: hpfb: Fix an error handling path in hpfb_dio_probe() (Christophe JAILLET)
  - power: supply: max17042_battery: Fix SOC threshold calc w/ no current sense (Artur Weber)
  - power: supply: axp20x_battery: Remove design from min and max voltage (Chris Morgan)
  - hwmon: (ntc_thermistor) fix module autoloading (Yuntao Liu)
  - mtd: slram: insert break after errors in parsing the map (Mirsad Todorovac)
  - hwmon: (max16065) Fix alarm attributes (Guenter Roeck)
  - hwmon: (max16065) Remove use of i2c_match_id() (Andrew Davis)
  - i2c: Add i2c_get_match_data() (Biju Das)
  - hwmon: (max16065) Fix overflows seen when writing limits (Guenter Roeck)
  - m68k: Fix kernel_clone_args.flags in m68k_clone() (Finn Thain)
  - clocksource/drivers/qcom: Add missing iounmap() on errors in msm_dt_timer_init() (Ankit Agrawal)
  - reset: k210: fix OF node leak in probe() error path (Krzysztof Kozlowski)
  - reset: berlin: fix OF node leak in probe() error path (Krzysztof Kozlowski)
  - ARM: versatile: fix OF node leak in CPUs prepare (Krzysztof Kozlowski)
  - ARM: dts: imx7d-zii-rmu2: fix Ethernet PHY pinctrl property (Krzysztof Kozlowski)
  - ARM: dts: microchip: sam9x60: Fix rtc/rtt clocks (Alexander Dahl)
  - arm64: dts: renesas: r9a07g044: Correct GICD and GICR sizes (Lad Prabhakar)
  - spi: ppc4xx: Avoid returning 0 when failed to parse and map IRQ (Andy Shevchenko)
  - spi: ppc4xx: handle irq_of_parse_and_map() errors (Ma Ke)
  - block: fix potential invalid pointer dereference in blk_add_partition (Riyan Dhiman) [Orabug: 37200698] {CVE-2024-47705}
  - block: print symbolic error name instead of error code (Christian Heusel)
  - block, bfq: don't break merge chain in bfq_split_bfqq() (Yu Kuai)
  - block, bfq: choose the last bfqq from merge chain in bfq_setup_cooperator() (Yu Kuai)
  - block, bfq: fix possible UAF for bfqq->bic with merge chain (Yu Kuai)
  - net: tipc: avoid possible garbage value (Su Hui)
  - net: ipv6: rpl_iptunnel: Fix memory leak in rpl_input (Justin Iurman)
  - r8169: disable ALDPS per default for RTL8125 (Heiner Kallweit)
  - net: enetc: Use IRQF_NO_AUTOEN flag in request_irq() (Jinjie Ruan)
  - bareudp: Pull inner IP header on xmit. (Guillaume Nault)
  - geneve: Fix incorrect inner network header offset when innerprotoinherit is set (Gal Pressman)
  - net: geneve: support IPv4/IPv6 as inner protocol (Eyal Birger)
  - bareudp: Pull inner IP header in bareudp_udp_encap_recv(). (Guillaume Nault)
  - Bluetooth: btusb: Fix not handling ZPL/short-transfer (Luiz Augusto von Dentz)
  - can: m_can: m_can_close(): stop clocks after device has been shut down (Marc Kleine-Budde)
  - can: bcm: Clear bo->bcm_proc_read after remove_proc_entry(). (Kuniyuki Iwashima) [Orabug: 37205475] {CVE-2024-47709}
  - sock_map: Add a cond_resched() in sock_hash_free() (Eric Dumazet) [Orabug: 37200714] {CVE-2024-47710}
  - wifi: wilc1000: fix potential RCU dereference issue in wilc_parse_join_bss_param (Jiawei Ye) [Orabug: 37205501] {CVE-2024-47712}
  - wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop() (Dmitry Antipov) [Orabug: 37200719] {CVE-2024-47713}
  - wifi: cfg80211: fix two more possible UBSAN-detected off-by-one errors (Dmitry Antipov)
  - wifi: mt76: mt7915: fix rx filter setting for bfee functionality (Howard Hsu)
  - wifi: cfg80211: fix UBSAN noise in cfg80211_wext_siwscan() (Dmitry Antipov)
  - x86/sgx: Fix deadlock in SGX NUMA node search (Aaron Lu) [Orabug: 37200860] {CVE-2024-49856}
  - cpufreq: ti-cpufreq: Introduce quirks to handle syscon fails appropriately (Nishanth Menon)
  - netfilter: nf_tables: remove annotation to access set timeout while holding lock (Pablo Neira Ayuso)
  - netfilter: nf_tables: reject expiration higher than timeout (Pablo Neira Ayuso)
  - netfilter: nf_tables: reject element expiration with no timeout (Pablo Neira Ayuso)
  - netfilter: nf_tables: elements with timeout below CONFIG_HZ never expire (Pablo Neira Ayuso)
  - ACPI: CPPC: Fix MASK_VAL() usage (Clément Léger)
  - ACPI: bus: Avoid using CPPC if not supported by firmware (Rafael J. Wysocki)
  - can: j1939: use correct function name in comment (Zhang Changzhong)
  - padata: Honor the caller's alignment in case of chunk_size 0 (Kamlesh Gurudasani)
  - wifi: iwlwifi: mvm: increase the time between ranging measurements (Avraham Stern)
  - mount: handle OOM on mnt_warn_timestamp_expiry (Olaf Hering)
  - fs/namespace: fnic: Switch to use %ptTd (Andy Shevchenko)
  - mount: warn only once about timestamp range expiration (Anthony Iliopoulos)
  - fs: explicitly unregister per-superblock BDIs (Christoph Hellwig)
  - wifi: rtw88: remove CPT execution branch never used (Dmitry Kandybka)
  - net: stmmac: dwmac-loongson: Init ref and PTP clocks rate (Yanteng Si)
  - wifi: ath9k: Remove error checks when creating debugfs entries (Toke Høiland-Jørgensen)
  - wifi: ath9k: fix parameter check in ath9k_init_debug() (Minjie Du)
  - ACPI: PMIC: Remove unneeded check in tps68470_pmic_opregion_probe() (Aleksandr Mishin)
  - crypto: xor - fix template benchmarking (Helge Deller)
  - wifi: rtw88: always wait for both firmware loading attempts (Dmitry Antipov) [Orabug: 37200733] {CVE-2024-47718}
  - EDAC/synopsys: Fix error injection on Zynq UltraScale+ (Shubhrajyoti Datta)
  - EDAC/synopsys: Fix ECC status and IRQ control race condition (Serge Semin)
  - EDAC/synopsys: Re-enable the error interrupts on v3 hw (Sherry Sun)
  - EDAC/synopsys: Use the correct register to disable the error interrupt on v3 hw (Sherry Sun)
  - EDAC/synopsys: Add support for version 3 of the Synopsys EDAC DDR (Dinh Nguyen)
  - USB: usbtmc: prevent kernel-usb-infoleak (Edward Adam Davis) [Orabug: 37159777] {CVE-2024-47671}
  - USB: serial: pl2303: add device id for Macrosilicon MS3020 (Junhao Xie)
  - gpiolib: cdev: Ignore reconfiguration without direction (Kent Gibson)
  - inet: inet_defrag: prevent sk release while still in use (Florian Westphal) [Orabug: 36545059] {CVE-2024-26921}
  - gpio: prevent potential speculation leaks in gpio_device_get_desc() (Hagar Hemdan) [Orabug: 36993133] {CVE-2024-44931}
  - Revert "wifi: cfg80211: check wiphy mutex is held for wdev mutex" (Ping-Ke Shih)
  - netfilter: nf_tables: missing iterator type in lookup walk (Pablo Neira Ayuso)
  - netfilter: nft_set_pipapo: walk over current view on netlink dump (Pablo Neira Ayuso) [Orabug: 36598033] {CVE-2024-27017}
  - ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry() (Ferry Meng) [Orabug: 36891660] {CVE-2024-41016}
  - ocfs2: add bounds checking to ocfs2_xattr_find_entry() (Ferry Meng) [Orabug: 37159772] {CVE-2024-47670}
  - spi: spidev: Add missing spi_device_id for jg10309-01 (Geert Uytterhoeven)
  - x86/hyperv: Set X86_FEATURE_TSC_KNOWN_FREQ when Hyper-V provides frequency (Michael Kelley)
  - spi: bcm63xx: Enable module autoloading (Liao Chen)
  - drm: komeda: Fix an issue related to normalized zpos (hongchi.peng)
  - spi: spidev: Add an entry for elgin,jg10309-01 (Fabio Estevam)
  - ASoC: tda7419: fix module autoloading (Liao Chen)
  - ASoC: intel: fix module autoloading (Liao Chen)
  - wifi: iwlwifi: clear trans->state earlier upon error (Emmanuel Grumbach)
  - wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead (Emmanuel Grumbach) [Orabug: 37159780] {CVE-2024-47672}
  - wifi: iwlwifi: mvm: pause TCM when the firmware is stopped (Emmanuel Grumbach) [Orabug: 37159785] {CVE-2024-47673}
  - wifi: iwlwifi: mvm: fix iwl_mvm_scan_fits() calculation (Daniel Gabay)
  - wifi: iwlwifi: lower message level for FW buffer destination (Benjamin Berg)
  - net: ftgmac100: Ensure tx descriptor updates are visible (Jacky Chou)
  - microblaze: don't treat zero reserved memory regions as error (Mike Rapoport)
  - pinctrl: at91: make it work with current gpiolib (Thomas Blocher)
  - scsi: lpfc: Fix overflow build issue (Sherry Yang)
  - ALSA: hda/realtek - FIxed ALC285 headphone no sound (Kailang Yang)
  - ALSA: hda/realtek - Fixed ALC256 headphone no sound (Kailang Yang)
  - ASoC: allow module autoloading for table db1200_pids (Hongbo Li)
  - ASoC: meson: axg-card: fix 'use-after-free' (Arseniy Krasnov) [Orabug: 37116539] {CVE-2024-46849}
  - dma-buf: heaps: Fix off-by-one in CMA heap fault handler (T.J. Mercier) [Orabug: 37116545] {CVE-2024-46852}
  - soundwire: stream: Revert "soundwire: stream: fix programming slave ports for non-continous port maps" (Krzysztof Kozlowski)
  - spi: nxp-fspi: fix the KASAN report out-of-bounds bug (Han Xu) [Orabug: 37116547] {CVE-2024-46853}
  - net: dpaa: Pad packets to ETH_ZLEN (Sean Anderson) [Orabug: 37116550] {CVE-2024-46854}
  - netfilter: nft_socket: fix sk refcount leaks (Florian Westphal) [Orabug: 37116554] {CVE-2024-46855}
  - net: ftgmac100: Enable TX interrupt to avoid TX timeout (Jacky Chou)
  - fou: fix initialization of grc (Muhammad Usama Anjum) [Orabug: 37195062] {CVE-2024-46865}
  - net/mlx5: Add missing masks and QoS bit masks for scheduling elements (Carolina Jubran)
  - net/mlx5: Explicitly set scheduling element and TSAR type (Carolina Jubran)
  - net/mlx5e: Add missing link modes to ptys2ethtool_map (Shahar Shitrit)
  - igb: Always call igb_xdp_ring_update_tail() under Tx lock (Sriram Yagnaraman)
  - ice: fix accounting for filters shared by multiple VSIs (Jacob Keller)
  - hwmon: (pmbus) Conditionally clear individual status bits for pmbus rev >= 1.2 (Patryk Biel)
  - hwmon: (pmbus) Introduce and use write_byte_data callback (Mårten Lindahl)
  - selftests/bpf: Support SOCK_STREAM in unix_inet_redir_to_connected() (Michal Luczaj)
  - eeprom: digsy_mtc: Fix 93xx46 driver probe failure (Andy Shevchenko)
  - arm64: dts: rockchip: fix PMIC interrupt pin in pinctrl for ROCK Pi E (FUKAUMI Naoki)
  - fs/ntfs3: Use kvfree to free memory allocated by kvmalloc (Konstantin Komarov)
  - net: tighten bad gso csum offset check in virtio_net_hdr (Willem de Bruijn)
  - minmax: reduce min/max macro expansion in atomisp driver (Lorenzo Stoakes)
  - arm64: dts: rockchip: override BIOS_DISABLE signal via GPIO hog on RK3399 Puma (Quentin Schulz)
  - mptcp: pm: Fix uaf in __timer_delete_sync (Edward Adam Davis) [Orabug: 37116564] {CVE-2024-46858}
  - platform/x86: panasonic-laptop: Allocate 1 entry extra in the sinf array (Hans de Goede)
  - platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses (Hans de Goede) [Orabug: 37116566] {CVE-2024-46859}
  - NFS: Avoid unnecessary rescanning of the per-server delegation list (Trond Myklebust)
  - NFSv4: Fix clearing of layout segments in layoutreturn (Trond Myklebust)
  - Input: i8042 - add Fujitsu Lifebook E756 to i8042 quirk table (Takashi Iwai)
  - drm/msm/adreno: Fix error return if missing firmware-name (Rob Clark)
  - platform/surface: aggregator_registry: Add support for Surface Laptop Go 3 (Maximilian Luz)
  - scripts: kconfig: merge_config: config files: add a trailing newline (Anders Roxell)
  - HID: multitouch: Add support for GT7868Q (Dmitry Savin)
  - Input: synaptics - enable SMBus for HP Elitebook 840 G2 (Jonathan Denose)
  - Input: ads7846 - ratelimit the spi_sync error message (Marek Vasut)
  - btrfs: update target inode's ctime on unlink (Jeff Layton)
  - powerpc/mm: Fix boot warning with hugepages and CONFIG_DEBUG_VIRTUAL (Christophe Leroy)
  - net: phy: vitesse: repair vsc73xx autonegotiation (Pawel Dembicki)
  - net: ethernet: use ip_hdrlen() instead of bit shift (Moon Yeounsu)
  - usbnet: ipheth: fix carrier detection in modes 1 and 4 (Foster Snowhill)
  - ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate (Lizhi Xu) [Orabug: 37200925] {CVE-2024-49877}
  - ocfs2: fix null-ptr-deref when journal load failed. (Julian Sun) [Orabug: 37206096] {CVE-2024-49957}
  - ocfs2: remove unreasonable unlock in ocfs2_read_blocks (Lizhi Xu) [Orabug: 37206135] {CVE-2024-49965}
  - ocfs2: cancel dqi_sync_work before freeing oinfo (Joseph Qi) [Orabug: 37206140] {CVE-2024-49966}
  - ocfs2: fix uninit-value in ocfs2_get_block() (Joseph Qi)
  - ocfs2: fix the la space leak when unmounting an ocfs2 volume (Heming Zhao)
  - mm: krealloc: consider spare memory for __GFP_ZERO (Danilo Krummrich)
  - jbd2: correctly compare tids with tid_geq function in jbd2_fc_begin_commit (Kemeng Shi)
  - jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error (Baokun Li) [Orabug: 37206108] {CVE-2024-49959}
  - drm: omapdrm: Add missing check for alloc_ordered_workqueue (Ma Ke) [Orabug: 37200934] {CVE-2024-49879}
  - of/irq: Support #msi-cells=<0> in of_msi_get_domain (Andrew Jones)
  - parisc: Fix stack start for ADDR_NO_RANDOMIZE personality (Helge Deller)
  - parisc: Fix 64-bit userspace syscall path (Helge Deller)


author: Vijayendra Suman <vijayendra.suman@oracle.com> [5.15.0-303.168.2.el9uek]
changelog:
  - Revert "rds: ib: Make sure receives are posted before connection is up" (Gerd Rausch)  [Orabug: 37244182]
  - uek-rpm/ol9/config-mips64: Align MIPS64 Crypto configs with x86_64 (Vijay Kumar)  [Orabug: 37218693]
  - rds: ib: Avoid reuse of IB MRs when cleaning is in progress (Håkon Bugge)  [Orabug: 37206836]
  - spec: Set CONFIG_CRYPTO_FIPS_NAME for standard & embedded kernels (Jonah Palmer)  [Orabug: 37137136]
  - spec: Set CONFIG_CRYPTO_FIPS_NAME for container kernels (Jonah Palmer)  [Orabug: 37137136]
  - spec: Add UEK release macros for UEK7 (Jonah Palmer)  [Orabug: 37137136]
  - uek-rpm: Set CONFIG_CRYPTO_FIPS_NAME for ol9 Pensando embedded kernels (Jonah Palmer)  [Orabug: 37137136]
  - uek-rpm: Set CONFIG_CRYPTO_FIPS_NAME for ol9 T93 embedded kernels (Jonah Palmer)  [Orabug: 37137136]
  - uek-rpm: Set CONFIG_CRYPTO_FIPS_NAME for ol9 MIPS64 embedded kernels (Jonah Palmer)  [Orabug: 37137136]
  - uek-rpm: Set CONFIG_CRYPTO_FIPS_NAME for ol8 Bluefield 3 smartnic embedded kernels (Jonah Palmer)  [Orabug: 37137136]
  - uek-rpm: Set CONFIG_CRYPTO_FIPS_NAME for ol8/ol9 standard kernels (Jonah Palmer)  [Orabug: 37137136]
  - uek-rpm: Set CONFIG_CRYPTO_FIPS_NAME for ol8/ol9 container kernels (Jonah Palmer)  [Orabug: 37137136]


author: Vijayendra Suman <vijayendra.suman@oracle.com> [5.15.0-303.168.3.el9uek]
changelog:
  - ACPI: CPPC: Make rmw_lock a raw_spin_lock (Pierre Gondois) [Orabug: 37268714] {CVE-2024-50249}
  - net: usb: usbnet: fix name regression (Oliver Neukum)
  - mptcp: pm: fix UaF read in mptcp_pm_nl_rm_addr_or_subflow (Matthieu Baerts (NGI0))
  - parport: Proper fix for array out-of-bounds access (Takashi Iwai) [Orabug: 37227435] {CVE-2024-50074}
  - netfilter: xtables: fix typo causing some targets not to load on IPv6 (Pablo Neira Ayuso)
  - block, bfq: fix procress reference leakage for bfqq in merge chain (Yu Kuai)
  - ipv4: ip_tunnel: Fix suspicious RCU usage warning in ip_tunnel_init_flow() (Ido Schimmel) [Orabug: 37304697] {CVE-2024-53042}
  - usb: dwc3: core: Fix system suspend on TI AM62 platforms (Roger Quadros)
  - Revert "driver core: Fix uevent_show() vs driver detach race" (Greg Kroah-Hartman)
  - jfs: Fix sanity check in dbMount (Dave Kleikamp)
  - octeontx2-af: Fix potential integer overflows on integer shifts (Colin Ian King)
  - gtp: allow -1 to be specified as file description from userspace (Pablo Neira Ayuso)
  - scsi: lpfc: Revise lpfc_prep_embed_io routine with proper endian macro usages (Justin Tee)  [Orabug: 37070103]  {CVE-2024-43816}
  - blk-cgroup: Properly propagate the iostat update up the hierarchy (Waiman Long)  [Orabug: 37264361]
  - blk-cgroup: fix list corruption from reorder of WRITE ->lqueued (Ming Lei)  [Orabug: 37264361] {CVE-2024-38384}
  - blk-cgroup: fix list corruption from resetting io stat (Ming Lei)  [Orabug: 37264361] {CVE-2024-38663}
  - blk-cgroup: Flush stats before releasing blkcg_gq (Ming Lei)  [Orabug: 37264361]
  - blk-cgroup: Reinit blkg_iostat_set after clearing in blkcg_reset_stats() (Waiman Long)  [Orabug: 37264361]
  - blk-cgroup: don't update io stat for root cgroup (Ming Lei)  [Orabug: 37264361]
  - blk-cgroup: Optimize blkcg_rstat_flush() (Waiman Long)  [Orabug: 37264361]
  - blk-cgroup: Return -ENOMEM directly in blkcg_css_alloc() error path (Waiman Long)  [Orabug: 37264361]
  - vfio/iommu_type1: replace kfree with kvfree (Jiacheng Shi)  [Orabug: 37263362]
  - i2c: i801: Add support for Intel Birch Stream SoC (Jarkko Nikula)  [Orabug: 37249533]
  - nvme: fix deadlock between reset and scan (Bitao Hu)  [Orabug: 37244604]
  - virt: sevguest: Add TSM_REPORTS support for SNP_GET_EXT_REPORT (Dan Williams)  [Orabug: 37070016]
  - virt: sevguest: Prep for kernel internal get_ext_report() (Dan Williams)  [Orabug: 37070016]
  - configfs-tsm: Introduce a shared ABI for attestation reports (Dan Williams)  [Orabug: 37070016]
  - virt: coco: Add a coco/Makefile and coco/Kconfig (Dan Williams)  [Orabug: 37070016]
  - virt: sevguest: Fix passing a stack buffer as a scatterlist target (Dan Williams)  [Orabug: 37070016]
  - x86/sev: Change snp_guest_issue_request()'s fw_err argument (Dionna Glaze)  [Orabug: 37070016]
  - crypto: ccp - Name -1 return value as SEV_RET_NO_FW_CALL (Peter Gonda)  [Orabug: 37070016]
  - virt/coco/sev-guest: Double-buffer messages (Dionna Glaze)  [Orabug: 37070016]
  - virt/coco/sev-guest: Add throttling awareness (Dionna Glaze)  [Orabug: 37070016]
  - virt/coco/sev-guest: Convert the sw_exit_info_2 checking to a switch-case (Borislav Petkov (AMD))  [Orabug: 37070016]
  - virt/coco/sev-guest: Do some code style cleanups (Borislav Petkov (AMD))  [Orabug: 37070016]
  - virt/coco/sev-guest: Carve out the request issuing logic into a helper (Borislav Petkov (AMD))  [Orabug: 37070016]
  - virt/coco/sev-guest: Remove the disable_vmpck label in handle_guest_request() (Borislav Petkov (AMD))  [Orabug: 37070016]
  - virt/coco/sev-guest: Simplify extended guest request handling (Borislav Petkov (AMD))  [Orabug: 37070016]
  - virt/coco/sev-guest: Check SEV_SNP attribute at probe time (Borislav Petkov (AMD))  [Orabug: 37070016]
  - x86/sev: Mark snp_abort() noreturn (Borislav Petkov)  [Orabug: 37070016]
  - kbuild: Drop -Wdeclaration-after-statement (Peter Zijlstra)  [Orabug: 37070016]
  - apparmor: Free up __cleanup() name (Peter Zijlstra)  [Orabug: 37070016]
  - fwctl: Expand adaption of code for UEK7 (Liam Merwick)  [Orabug: 37070016]
  - mm/slab: Add __free() support for kvfree (Dan Williams)  [Orabug: 37070016]
  - mm: move kvmalloc-related functions to slab.h (Matthew Wilcox (Oracle))  [Orabug: 37070016]
  - x86/head/64: Switch to KERNEL_CS as soon as new GDT is installed (Tom Lendacky)  [Orabug: 37070016]
  - iommu/amd: Do not identity map v2 capable device when snp is enabled (Vasant Hegde)  [Orabug: 37070016]
  - virt: sevguest: Add CONFIG_CRYPTO dependency (Arnd Bergmann)  [Orabug: 37070016]
  - virt/sev-guest: Remove unnecessary free in init_crypto() (Rafael Mendonca)  [Orabug: 37070016]
  - virt/sev-guest: Add a MODULE_ALIAS (Cole Robinson)  [Orabug: 37070016]
  - virt/sev-guest: Return -EIO if certificate buffer is not large enough (Tom Lendacky)  [Orabug: 37070016]
  - virt/sev-guest: Prevent IV reuse in the SNP guest driver (Peter Gonda)  [Orabug: 37070016]
  - x86/compressed/64: Add identity mappings for setup_data entries (Michael Roth)  [Orabug: 37070016]
  - x86/sev: Do not try to parse for the CC blob on non-AMD hardware (Borislav Petkov (AMD))  [Orabug: 37070016]
  - x86/sev: Use the GHCB protocol when available for SNP CPUID requests (Tom Lendacky)  [Orabug: 37070016]
  - x86/boot: Fix the setup data types max limit (Borislav Petkov)  [Orabug: 37070016]
  - x86/sev: Don't use cc_platform_has() for early SEV-SNP calls (Tom Lendacky)  [Orabug: 37070016]
  - x86/sev: Fix calculation of end address based on number of pages (Tom Lendacky)  [Orabug: 37070016]
  - x86/sev: Fix kernel crash due to late update to read-only ghcb_version (Ashwin Dayanand Kamat)  [Orabug: 37070016]
  - x86/sev: Add SEV-SNP guest feature negotiation support (Nikunj A Dadhania)  [Orabug: 37070016]
  - Revert "x86/sev: Expose sev_es_ghcb_hv_call() for use by HyperV" (Borislav Petkov)  [Orabug: 37070016]
  - x86/boot: Don't propagate uninitialized boot_params->cc_blob_address (Michael Roth)  [Orabug: 37070016]
  - KVM: SVM: Only dump VMSA to klog at KERN_DEBUG level (Peter Gonda)  [Orabug: 37070016]
  - KVM: SVM: Dump Virtual Machine Save Area (VMSA) to klog (Jarkko Sakkinen)  [Orabug: 37070016]
  - KVM: SVM: Exit to userspace on ENOMEM/EFAULT GHCB errors (Sean Christopherson)  [Orabug: 37070016]
  - iommu/amd: Add support for AVIC when SNP is enabled (Suravee Suthikulpanit)  [Orabug: 37070016]
  - iommu/amd: Do not support IOMMUv2 APIs when SNP is enabled (Suravee Suthikulpanit)  [Orabug: 37070016]
  - iommu/amd: Do not support IOMMU_DOMAIN_IDENTITY after SNP is enabled (Suravee Suthikulpanit)  [Orabug: 37070016]
  - iommu/amd: Set translation valid bit only when IO page tables are in use (Suravee Suthikulpanit)  [Orabug: 37070016]
  - iommu/amd: Introduce function to check and enable SNP (Brijesh Singh)  [Orabug: 37070016]
  - iommu/amd: Globally detect SNP support (Suravee Suthikulpanit)  [Orabug: 37070016]
  - iommu/amd: Process all IVHDs before enabling IOMMU features (Suravee Suthikulpanit)  [Orabug: 37070016]
  - iommu/amd: Introduce global variable for storing common EFR and EFR2 (Suravee Suthikulpanit)  [Orabug: 37070016]
  - iommu/amd: Introduce Support for Extended Feature 2 Register (Suravee Suthikulpanit)  [Orabug: 37070016]
  - x86/sev: Remove duplicated assignment to variable info (Colin Ian King)  [Orabug: 37070016]
  - x86/sev: Fix address space sparse warning (Borislav Petkov)  [Orabug: 37070016]
  - x86/sev: Get the AP jump table address from secrets page (Brijesh Singh)  [Orabug: 37070016]
  - x86/sev: Add missing __init annotations to SEV init routines (Michael Roth)  [Orabug: 37070016]
  - crypto: ccp - Log when resetting PSP SEV state (Peter Gonda)  [Orabug: 37070016]
  - virt: sev-guest: Pass the appropriate argument type to iounmap() (Tom Lendacky)  [Orabug: 37070016]
  - virt: sevguest: Rename the sevguest dir and files to sev-guest (Tom Lendacky)  [Orabug: 37070016]
  - virt: sevguest: Change driver name to reflect generic SEV support (Tom Lendacky)  [Orabug: 37070016]
  - x86/boot: Put globals that are accessed early into the .data section (Michael Roth)  [Orabug: 37070016]
  - virt: sevguest: Fix bool function returning negative value (Haowen Bai)  [Orabug: 37070016]
  - virt: sevguest: Fix return value check in alloc_shared_pages() (Yang Yingliang)  [Orabug: 37070016]
  - x86/sev-es: Replace open-coded hlt-loop with sev_es_terminate() (Peter Gonda)  [Orabug: 37070016]
  - virt: sevguest: Add documentation for SEV-SNP CPUID Enforcement (Michael Roth)  [Orabug: 37070016]
  - virt: sevguest: Add support to get extended report (Brijesh Singh)  [Orabug: 37070016]
  - virt: sevguest: Add support to derive key (Brijesh Singh)  [Orabug: 37070016]
  - virt: Add SEV-SNP guest driver (Brijesh Singh)  [Orabug: 37070016]
  - x86/sev: Register SEV-SNP guest request platform device (Brijesh Singh)  [Orabug: 37070016]
  - x86/sev: Provide support for SNP guest request NAEs (Brijesh Singh)  [Orabug: 37070016]
  - x86/sev: Add a sev= cmdline option (Michael Roth)  [Orabug: 37070016]
  - x86/sev: Use firmware-validated CPUID for SEV-SNP guests (Michael Roth)  [Orabug: 37070016]
  - x86/sev: Add SEV-SNP feature detection/setup (Michael Roth)  [Orabug: 37070016]
  - x86/compressed/64: Add identity mapping for Confidential Computing blob (Michael Roth)  [Orabug: 37070016]
  - x86/compressed: Use firmware-validated CPUID leaves for SEV-SNP guests (Michael Roth)  [Orabug: 37070016]
  - x86/compressed: Add SEV-SNP feature detection/setup (Michael Roth)  [Orabug: 37070016]
  - x86/boot: Add a pointer to Confidential Computing blob in bootparams (Michael Roth)  [Orabug: 37070016]
  - x86/compressed/64: Add support for SEV-SNP CPUID table in #VC handlers (Michael Roth)  [Orabug: 37070016]
  - x86/sev: Move MSR-based VMGEXITs for CPUID to helper (Michael Roth)  [Orabug: 37070016]
  - KVM: x86: Move lookup of indexed CPUID leafs to helper (Michael Roth)  [Orabug: 37070016]
  - x86/boot: Add Confidential Computing type to setup_data (Brijesh Singh)  [Orabug: 37070016]
  - x86/compressed/acpi: Move EFI kexec handling into common code (Michael Roth)  [Orabug: 37070016]
  - x86/compressed/acpi: Move EFI vendor table lookup to helper (Michael Roth)  [Orabug: 37070016]
  - x86/compressed/acpi: Move EFI config table lookup to helper (Michael Roth)  [Orabug: 37070016]
  - x86/compressed/acpi: Move EFI system table lookup to helper (Michael Roth)  [Orabug: 37070016]
  - x86/head/64: Re-enable stack protection (Michael Roth)  [Orabug: 37070016]
  - x86/sev: Use SEV-SNP AP creation to start secondary CPUs (Tom Lendacky)  [Orabug: 37070016]
  - x86/sev: Remove do_early_exception() forward declarations (Borislav Petkov)  [Orabug: 37070016]
  - x86/mm: Validate memory when changing the C-bit (Brijesh Singh)  [Orabug: 37070016]
  - x86/mm/cpa: Generalize __set_memory_enc_pgtable() (Brijesh Singh)  [Orabug: 37070016]
  - x86/kernel: Validate ROM memory before accessing when SEV-SNP is active (Brijesh Singh)  [Orabug: 37070016]
  - x86/kernel: Mark the .bss..decrypted section as shared in the RMP table (Brijesh Singh)  [Orabug: 37070016]
  - x86/head64: Add missing __head annotation to sme_postprocess_startup() (Marco Bonelli)  [Orabug: 37070016]
  - x86/head64: Carve out the guest encryption postprocessing into a helper (Borislav Petkov)  [Orabug: 37070016]
  - x86/sev: Add helper for validating pages in early enc attribute changes (Brijesh Singh)  [Orabug: 37070016]
  - x86/sev: Register GHCB memory when SEV-SNP is active (Brijesh Singh)  [Orabug: 37070016]
  - x86/compressed: Register GHCB memory when SEV-SNP is active (Brijesh Singh)  [Orabug: 37070016]
  - x86/compressed: Add helper for validating pages in the decompression stage (Brijesh Singh)  [Orabug: 37070016]
  - x86/sev: Check the VMPL level (Brijesh Singh)  [Orabug: 37070016]
  - x86/sev: Add a helper for the PVALIDATE instruction (Brijesh Singh)  [Orabug: 37070016]
  - x86/sev: Check SEV-SNP features support (Brijesh Singh)  [Orabug: 37070016]
  - x86/sev: Save the negotiated GHCB version (Brijesh Singh)  [Orabug: 37070016]
  - x86/sev: Define the Linux-specific guest termination reasons (Brijesh Singh)  [Orabug: 37070016]
  - x86/mm: Extend cc_attr to include AMD SEV-SNP (Brijesh Singh)  [Orabug: 37070016]
  - x86/sev: Detect/setup SEV/SME features earlier in boot (Michael Roth)  [Orabug: 37070016]
  - x86/compressed/64: Detect/setup SEV/SME features earlier during boot (Michael Roth)  [Orabug: 37070016]
  - KVM: SVM: Update the SEV-ES save area mapping (Tom Lendacky)  [Orabug: 37070016]
  - KVM: SVM: Create a separate mapping for the GHCB save area (Tom Lendacky)  [Orabug: 37070016] [Orabug: 37070016]
  - KVM: SVM: Create a separate mapping for the SEV-ES save area (Tom Lendacky)  [Orabug: 37070016]
  - KVM: SVM: Define sev_features and VMPL field in the VMSA (Brijesh Singh)  [Orabug: 37070016]
  - x86/sev: Move common memory encryption code to mem_encrypt.c (Kirill A. Shutemov)  [Orabug: 37070016]
  - x86/sev: Rename mem_encrypt.c to mem_encrypt_amd.c (Kuppuswamy Sathyanarayanan)  [Orabug: 37070016]
  - x86/sev: Get rid of excessive use of defines (Borislav Petkov)  [Orabug: 37070016]
  - x86/sev: Shorten GHCB terminate macro names (Brijesh Singh)  [Orabug: 37070016]
  - x86/coco: Add API to handle encryption mask (Kirill A. Shutemov)  [Orabug: 37070016]
  - x86/coco: Explicitly declare type of confidential computing platform (Kirill A. Shutemov)  [Orabug: 37070016]
  - x86/hyperv: Initialize GHCB page in Isolation VM (Tianyu Lan)  [Orabug: 37070016]
  - x86/cc: Move arch/x86/{kernel/cc_platform.c => coco/core.c} (Kirill A. Shutemov)  [Orabug: 37070016]
  - x86/hyper-v: Add hyperv Isolation VM check in the cc_platform_has() (Tianyu Lan)  [Orabug: 37070016]
  - crypto: ccp - Add SEV_INIT_EX support (David Rientjes)  [Orabug: 37070016]
  - crypto: ccp - Add psp_init_on_probe module parameter (Peter Gonda)  [Orabug: 37070016]
  - crypto: ccp - Add SEV_INIT rc error logging on init (Peter Gonda)  [Orabug: 37070016]
  - KVM: SVM: Hide SEV migration lockdep goo behind CONFIG_PROVE_LOCKING (Sean Christopherson)  [Orabug: 37070016]
  - KVM: SVM: Skip VMSA init in sev_es_init_vmcb() if pointer is NULL (Sean Christopherson)  [Orabug: 37070016]
  - KVM: SEV: Init target VMCBs in sev_migrate_from (Peter Gonda)  [Orabug: 37070016]
  - KVM, SEV: Add KVM_EXIT_SHUTDOWN metadata for SEV-ES (Peter Gonda)  [Orabug: 37070016]
  - KVM: SEV: Mark nested locking of vcpu->lock (Peter Gonda)  [Orabug: 37070016]
  - KVM: SVM: Simplify and harden helper to flush SEV guest page(s) (Sean Christopherson)  [Orabug: 37070016]
  - KVM: SEV: Add cond_resched() to loop in sev_clflush_pages() (Peter Gonda)  [Orabug: 37070016]
  - KVM: SEV: Allow SEV intra-host migration of VM with mirrors (Peter Gonda)  [Orabug: 37070016]
  - KVM: SVM: improve split between svm_prepare_guest_switch and sev_es_prepare_guest_switch (Paolo Bonzini)  [Orabug: 37070016]
  - selftests: KVM: sev_migrate_tests: Add mirror command tests (Peter Gonda)  [Orabug: 37070016]
  - selftests: KVM: sev_migrate_tests: Fix sev_ioctl() (Peter Gonda)  [Orabug: 37070016]
  - selftests: KVM: sev_migrate_tests: Fix test_sev_mirror() (Peter Gonda)  [Orabug: 37070016]
  - KVM: SEV: Mark nested locking of kvm->lock (Wanpeng Li)  [Orabug: 37070016]
  - KVM: SVM: Do not terminate SEV-ES guests on GHCB validation failure (Tom Lendacky)  [Orabug: 37070016]
  - KVM: SEV: Fall back to vmalloc for SEV-ES scratch area if necessary (Sean Christopherson)  [Orabug: 37070016]
  - KVM: SEV: accept signals in sev_lock_two_vms (Paolo Bonzini)  [Orabug: 37070016]
  - KVM: SEV: do not take kvm->lock when destroying (Paolo Bonzini)  [Orabug: 37070016]
  - KVM: SEV: Prohibit migration of a VM that has mirrors (Paolo Bonzini)  [Orabug: 37070016]
  - KVM: SEV: Do COPY_ENC_CONTEXT_FROM with both VMs locked (Paolo Bonzini)  [Orabug: 37070016]
  - selftests: sev_migrate_tests: add tests for KVM_CAP_VM_COPY_ENC_CONTEXT_FROM (Paolo Bonzini)  [Orabug: 37070016]
  - KVM: SEV: move mirror status to destination of KVM_CAP_VM_MOVE_ENC_CONTEXT_FROM (Paolo Bonzini)  [Orabug: 37070016]
  - KVM: SEV: cleanup locking for KVM_CAP_VM_MOVE_ENC_CONTEXT_FROM (Paolo Bonzini)  [Orabug: 37070016]
  - KVM: SEV: do not use list_replace_init on an empty list (Paolo Bonzini)  [Orabug: 37070016]
  - selftests: sev_migrate_tests: free all VMs (Paolo Bonzini)  [Orabug: 37070016]
  - selftests: fix check for circular KVM_CAP_VM_MOVE_ENC_CONTEXT_FROM (Paolo Bonzini)  [Orabug: 37070016]
  - KVM: SEV: Fix typo in and tweak name of cmd_allowed_from_miror() (Sean Christopherson)  [Orabug: 37070016]
  - KVM: SEV: Drop a redundant setting of sev->asid during initialization (Sean Christopherson)  [Orabug: 37070016]
  - KVM: SEV: Set sev_info.active after initial checks in sev_guest_init() (Sean Christopherson)  [Orabug: 37070016]
  - KVM: SEV: unify cgroup cleanup code for svm_vm_migrate_from (Paolo Bonzini)  [Orabug: 37070016]
  - selftest: KVM: Add intra host migration tests (Peter Gonda)  [Orabug: 37070016]
  - KVM: selftests: Use pattern matching in .gitignore (Sean Christopherson)  [Orabug: 37070016]
  - selftest: KVM: Add open sev dev helper (Peter Gonda)  [Orabug: 37070016]
  - x86/kvm: Add guest support for detecting and enabling SEV Live Migration feature. (Ashish Kalra)  [Orabug: 37070016]
  - EFI: Introduce the new AMD Memory Encryption GUID. (Ashish Kalra)  [Orabug: 37070016]
  - mm: x86: Invoke hypercall when page encryption status is changed (Brijesh Singh)  [Orabug: 37070016]
  - x86/kvm: Add AMD SEV specific Hypercall3 (Brijesh Singh)  [Orabug: 37070016]
  - KVM: SEV: Add support for SEV-ES intra host migration (Peter Gonda)  [Orabug: 37070016]
  - KVM: SEV: Add support for SEV intra host migration (Peter Gonda)  [Orabug: 37070016]
  - KVM: SEV: provide helpers to charge/uncharge misc_cg (Paolo Bonzini)  [Orabug: 37070016]
  - KVM: SEV: Refactor out sev_es_state struct (Peter Gonda)  [Orabug: 37070016]
  - x86/sev: Expose sev_es_ghcb_hv_call() for use by HyperV (Tianyu Lan)  [Orabug: 37070016]
  - x86/sev: Allow #VC exceptions on the VC2 stack (Joerg Roedel)  [Orabug: 37070016]
  - KVM: generalize "bugged" VM to "dead" VM (Paolo Bonzini)  [Orabug: 37070016]
  - x86/sev: Carve out HV call's return value verification (Borislav Petkov)  [Orabug: 37070016]
  - KVM: Free new dirty bitmap if creating a new memslot fails (Sean Christopherson)  [Orabug: 37070016]
  - KVM: Fix comments that refer to the non-existent install_new_memslots() (Jun Miao)  [Orabug: 37070016]
  - KVM: x86: Retry page fault if MMU reload is pending and root has no sp (Sean Christopherson)  [Orabug: 37070016]
  - KVM: x86/mmu: Fix an sign-extension bug with mmu_seq that hangs vCPUs (Sean Christopherson)  [Orabug: 37070016]
  - KVM: Dynamically allocate "new" memslots from the get-go (Sean Christopherson)  [Orabug: 37070016]
  - KVM: Wait 'til the bitter end to initialize the "new" memslot (Sean Christopherson)  [Orabug: 37070016]
  - KVM: Optimize overlapping memslots check (Maciej S. Szmigiero)  [Orabug: 37070016]
  - KVM: Optimize gfn lookup in kvm_zap_gfn_range() (Maciej S. Szmigiero)  [Orabug: 37070016]
  - KVM: Call kvm_arch_flush_shadow_memslot() on the old slot in kvm_invalidate_memslot() (Maciej S. Szmigiero)  [Orabug: 37070016]
  - KVM: Keep memslots in tree-based structures instead of array-based ones (Maciej S. Szmigiero)  [Orabug: 37070016]
  - KVM: s390: Introduce kvm_s390_get_gfn_end() (Maciej S. Szmigiero)  [Orabug: 37070016]
  - KVM: s390: Add a routine for setting userspace CPU state (Eric Farman)  [Orabug: 37070016]
  - KVM: Use interval tree to do fast hva lookup in memslots (Maciej S. Szmigiero)  [Orabug: 37070016]
  - KVM: Resolve memslot ID via a hash table instead of via a static array (Maciej S. Szmigiero)  [Orabug: 37070016]
  - Revert "kvm: fix possible spectre gadgets in include/linux/kvm_host.h" (Liam Merwick)  [Orabug: 37070016]
  - KVM: Move WARN on invalid memslot index to update_memslots() (Maciej S. Szmigiero)  [Orabug: 37070016]
  - KVM: Integrate gfn_to_memslot_approx() into search_memslots() (Maciej S. Szmigiero)  [Orabug: 37070016]
  - KVM: x86: Use nr_memslot_pages to avoid traversing the memslots array (Maciej S. Szmigiero)  [Orabug: 37070016]
  - KVM: x86: Don't call kvm_mmu_change_mmu_pages() if the count hasn't changed (Maciej S. Szmigiero)  [Orabug: 37070016]
  - KVM: Don't make a full copy of the old memslot in __kvm_set_memory_region() (Sean Christopherson)  [Orabug: 37070016]
  - KVM: s390: Skip gfn/size sanity checks on memslot DELETE or FLAGS_ONLY (Sean Christopherson)  [Orabug: 37070016]
  - KVM: x86: Don't assume old/new memslots are non-NULL at memslot commit (Sean Christopherson)  [Orabug: 37070016]
  - KVM: Use prepare/commit hooks to handle generic memslot metadata updates (Sean Christopherson)  [Orabug: 37070016]
  - KVM: Stop passing kvm_userspace_memory_region to arch memslot hooks (Sean Christopherson)  [Orabug: 37070016]
  - KVM: x86: Use "new" memslot instead of userspace memory region (Sean Christopherson)  [Orabug: 37070016]
  - KVM: s390: Use "new" memslot instead of userspace memory region (Sean Christopherson)  [Orabug: 37070016]
  - KVM: PPC: Avoid referencing userspace memory region in memslot updates (Sean Christopherson)  [Orabug: 37070016]
  - KVM: MIPS: Drop pr_debug from memslot commit to avoid using "mem" (Sean Christopherson)  [Orabug: 37070016]
  - KVM: arm64: Use "new" memslot instead of userspace memory region (Sean Christopherson)  [Orabug: 37070016]
  - KVM: Let/force architectures to deal with arch specific memslot data (Sean Christopherson)  [Orabug: 37070016]
  - KVM: Use "new" memslot's address space ID instead of dedicated param (Sean Christopherson)  [Orabug: 37070016]
  - KVM: Resync only arch fields when slots_arch_lock gets reacquired (Maciej S. Szmigiero)  [Orabug: 37070016]
  - KVM: Open code kvm_delete_memslot() into its only caller (Sean Christopherson)  [Orabug: 37070016]
  - KVM: Require total number of memslot pages to fit in an unsigned long (Sean Christopherson)  [Orabug: 37070016]
  - KVM: x86/mmu: Extract zapping of rmaps for gfn range to separate helper (Sean Christopherson)  [Orabug: 37070016]
  - KVM: x86/mmu: Drop a redundant remote TLB flush in kvm_zap_gfn_range() (Sean Christopherson)  [Orabug: 37070016]
  - KVM: x86/mmu: Retry page fault if root is invalidated by memslot update (Sean Christopherson)  [Orabug: 37070016]
  - KVM: x86/mmu: Properly dereference rcu-protected TDP MMU sptep iterator (Sean Christopherson)  [Orabug: 37070016]
  - KVM: x86/mmu: Don't rebuild page when the page is synced and no tlb flushing is required (Hou Wenlong)  [Orabug: 37070016]
  - KVM: x86/mmu: Avoid memslot lookup in rmap_add (David Matlack)  [Orabug: 37070016]
  - KVM: MMU: pass struct kvm_page_fault to mmu_set_spte (Paolo Bonzini)  [Orabug: 37070016]
  - KVM: MMU: pass kvm_mmu_page struct to make_spte (Paolo Bonzini)  [Orabug: 37070016]
  - KVM: MMU: set ad_disabled in TDP MMU role (Paolo Bonzini)  [Orabug: 37070016]
  - KVM: MMU: remove unnecessary argument to mmu_set_spte (Paolo Bonzini)  [Orabug: 37070016]
  - KVM: MMU: clean up make_spte return value (Paolo Bonzini)  [Orabug: 37070016]
  - KVM: MMU: inline set_spte in FNAME(sync_page) (Paolo Bonzini)  [Orabug: 37070016]
  - KVM: MMU: inline set_spte in mmu_set_spte (Paolo Bonzini)  [Orabug: 37070016]
  - KVM: x86/mmu: Avoid memslot lookup in page_fault_handle_page_track (David Matlack)  [Orabug: 37070016]
  - KVM: x86/mmu: Pass the memslot around via struct kvm_page_fault (David Matlack)  [Orabug: 37070016] [Orabug: 37070016]
  - KVM: MMU: unify tdp_mmu_map_set_spte_atomic and tdp_mmu_set_spte_atomic_no_dirty_log (Paolo Bonzini)  [Orabug: 37070016]
  - KVM: MMU: mark page dirty in make_spte (Paolo Bonzini)  [Orabug: 37070016]
  - KVM: x86/mmu: Verify shadow walk doesn't terminate early in page faults (Sean Christopherson)  [Orabug: 37070016]
  - KVM: MMU: change tracepoints arguments to kvm_page_fault (Paolo Bonzini)  [Orabug: 37070016]
  - KVM: MMU: change disallowed_hugepage_adjust() arguments to kvm_page_fault (Paolo Bonzini)  [Orabug: 37070016]
  - KVM: MMU: change kvm_mmu_hugepage_adjust() arguments to kvm_page_fault (Paolo Bonzini)  [Orabug: 37070016]
  - KVM: MMU: change fast_page_fault() arguments to kvm_page_fault (Paolo Bonzini)  [Orabug: 37070016]
  - KVM: MMU: change tdp_mmu_map_handle_target_level() arguments to kvm_page_fault (Paolo Bonzini)  [Orabug: 37070016]
  - KVM: MMU: change kvm_tdp_mmu_map() arguments to kvm_page_fault (Paolo Bonzini)  [Orabug: 37070016]
  - KVM: MMU: change FNAME(fetch)() arguments to kvm_page_fault (Paolo Bonzini)  [Orabug: 37070016]
  - KVM: MMU: change __direct_map() arguments to kvm_page_fault (Paolo Bonzini)  [Orabug: 37070016]
  - KVM: MMU: change handle_abnormal_pfn() arguments to kvm_page_fault (Paolo Bonzini)  [Orabug: 37070016]
  - KVM: MMU: change kvm_faultin_pfn() arguments to kvm_page_fault (Paolo Bonzini)  [Orabug: 37070016]
  - KVM: MMU: change page_fault_handle_page_track() arguments to kvm_page_fault (Paolo Bonzini)  [Orabug: 37070016]
  - KVM: MMU: change direct_page_fault() arguments to kvm_page_fault (Paolo Bonzini)  [Orabug: 37070016]
  - KVM: MMU: change mmu->page_fault() arguments to kvm_page_fault (Paolo Bonzini)  [Orabug: 37070016]
  - KVM: MMU: Introduce struct kvm_page_fault (Paolo Bonzini)  [Orabug: 37070016]
  - KVM: MMU: pass unadulterated gpa to direct_page_fault (Paolo Bonzini)  [Orabug: 37070016]
  - KVM: X86: Don't unsync pagetables when speculative (Lai Jiangshan)  [Orabug: 37070016]
  - KVM: X86: Change kvm_sync_page() to return true when remote flush is needed (Lai Jiangshan)  [Orabug: 37070016]
  - KVM: X86: Remove kvm_mmu_flush_or_zap() (Lai Jiangshan)  [Orabug: 37070016]
  - KVM: X86: Don't flush current tlb on shadow page modification (Lai Jiangshan)  [Orabug: 37070016]
  - net: mana: Fix RX buf alloc_size alignment and atomic op panic (Haiyang Zhang)  [Orabug: 37029115]  {CVE-2024-45001}
  - net/mlx5: pretend 'fast unload' succeeded on Exadata systems (Gerd Rausch)  [Orabug: 37224000]
  - rds: Do not invoke the transport's recv_path() while in atomic context (Håkon Bugge)  [Orabug: 36368605]


author: Vijayendra Suman <vijayendra.suman@oracle.com> [5.15.0-303.171.4.el9uek]
changelog:
  - rds: recv_payload_bad_checksum was not 0 after running rds-stress on UEK6 (William Kucharski)  [Orabug: 37265126]
  - rds: If RDS Checksums are enabled for RDMA RDS operations, the extension headers will overflow causing incorrect operation (William Kucharski)  [Orabug: 37265124]
  - rds: rds_message_alloc() needlessly zeroes m_used_sgs (William Kucharski)  [Orabug: 37265122]
  - rds: tracepoint in rds_receive_csum_err() prints pointless information (William Kucharski)  [Orabug: 37265120]
  - rds: rds_inc_init() should initialize the inc->i_conn_path field (William Kucharski)  [Orabug: 37265116]
  - rds: Race condition in adding RDS payload checksum extension header may result in RDS header corruption (William Kucharski)  [Orabug: 37265114]
  - Revert "net/mlx5: disable the 'fast unload' feature on Exadata systems" (Qing Huang)  [Orabug: 37285222]
  - Revert "net/mlx5: pretend 'fast unload' succeeded on Exadata systems" (Qing Huang)  [Orabug: 37285222]
  - RDMA/mlx5: Fix Shared PD prefetch of ODP memory region (Mark Haywood)  [Orabug: 31688618] [Orabug: 37279176]
  - blk-mq: fix missing blk_account_io_done() in error path (Yu Kuai)  [Orabug: 37228086]
  - rds: Add rds stuck shutdown timeout (Rohit Nair)  [Orabug: 37214078]
  - KVM: x86: Stop compiling vmenter.S with OBJECT_FILES_NON_STANDARD (Sean Christopherson)  [Orabug: 37273739]
  - KVM: SVM: Create a stack frame in __svm_sev_es_vcpu_run() (Sean Christopherson)  [Orabug: 37273739]
  - KVM: SVM: Create a stack frame in __svm_vcpu_run() for unwinding (Sean Christopherson)  [Orabug: 37273739]
  - mm/memory-failure: pass the folio and the page to collect_procs() (Matthew Wilcox (Oracle))  [Orabug: 37270260]
  - LTS version: v5.15.171 (Vijayendra Suman)
  - mac80211: always have ieee80211_sta_restart() (Johannes Berg)
  - vt: prevent kernel-infoleak in con_font_get() (Jeongjun Park)
  - drm/i915: Fix potential context UAFs (Rob Clark)
  - Revert "drm/mipi-dsi: Set the fwnode for mipi_dsi_device" (Jason-JH.Lin)
  - mm: shmem: fix data-race in shmem_getattr() (Jeongjun Park) [Orabug: 37268580] {CVE-2024-50228}
  - wifi: iwlwifi: mvm: fix 6 GHz scan construction (Johannes Berg) [Orabug: 37304734] {CVE-2024-53055}
  - nilfs2: fix kernel bug due to missing clearing of checked flag (Ryusuke Konishi) [Orabug: 37268588] {CVE-2024-50230}
  - x86/bugs: Use code segment selector for VERW operand (Pawan Gupta) [Orabug: 37227383] {CVE-2024-50072}
  - ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow (Edward Adam Davis) [Orabug: 37268563] {CVE-2024-50218}
  - mm/page_alloc: let GFP_ATOMIC order-0 allocs access highatomic reserves (Matt Fleming) [Orabug: 37268568] {CVE-2024-50219}
  - mm/page_alloc: explicitly define how __GFP_HIGH non-blocking allocations accesses reserves (Mel Gorman)
  - mm/page_alloc: explicitly define what alloc flags deplete min reserves (Mel Gorman)
  - mm/page_alloc: explicitly record high-order atomic allocations in alloc_flags (Mel Gorman)
  - mm/page_alloc: treat RT tasks similar to __GFP_HIGH (Mel Gorman)
  - mm/page_alloc: rename ALLOC_HIGH to ALLOC_MIN_RESERVE (Mel Gorman)
  - mm/page_alloc: split out buddy removal code from rmqueue into separate helper (Mel Gorman)
  - mm/page_alloc: fix tracepoint mm_page_alloc_zone_locked() (Wonhyuk Yang)
  - mm/page_alloc: call check_new_pages() while zone spinlock is not held (Eric Dumazet)
  - riscv: Remove duplicated GET_RM (Chunyan Zhang)
  - riscv: Remove unused GENERATING_ASM_OFFSETS (Chunyan Zhang)
  - riscv: Use '%u' to format the output of 'cpu' (WangYuli)
  - riscv: efi: Set NX compat flag in PE/COFF header (Heinrich Schuchardt)
  - riscv: vdso: Prevent the compiler from inserting calls to memset() (Alexandre Ghiti)
  - nilfs2: fix potential deadlock with newly created symlinks (Ryusuke Konishi) [Orabug: 37268584] {CVE-2024-50229}
  - iio: light: veml6030: fix microlux value calculation (Javier Carrasco)
  - iio: adc: ad7124: fix division by zero in ad7124_set_channel_odr() (Zicheng Qu) [Orabug: 37268595] {CVE-2024-50232}
  - staging: iio: frequency: ad9832: fix division by zero in ad9832_calc_freqreg() (Zicheng Qu) [Orabug: 37268597] {CVE-2024-50233}
  - wifi: iwlegacy: Clear stale interrupts before resuming device (Ville Syrjälä) [Orabug: 37268602] {CVE-2024-50234}
  - wifi: ath10k: Fix memory leak in management tx (Manikanta Pubbisetty) [Orabug: 37268610] {CVE-2024-50236}
  - wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower (Felix Fietkau) [Orabug: 37268613] {CVE-2024-50237}
  - xhci: Use pm_runtime_get to prevent RPM on unsupported systems (Basavaraj Natikar)
  - xhci: Fix Link TRB DMA in command ring stopped completion event (Faisal Hassan)
  - usb: typec: fix unreleased fwnode_handle in typec_port_register_altmodes() (Javier Carrasco)
  - usb: phy: Fix API devm_usb_put_phy() can not release the phy (Zijun Hu)
  - usbip: tools: Fix detach_port() invalid port error path (Zongmin Zhou)
  - misc: sgi-gru: Don't disable preemption in GRU driver (Dimitri Sivanich)
  - net: amd: mvme147: Fix probe banner message (Daniel Palmer)
  - scsi: scsi_transport_fc: Allow setting rport state to current state (Benjamin Marzinski)
  - fs/ntfs3: Additional check in ni_clear() (Konstantin Komarov) [Orabug: 37268638] {CVE-2024-50244}
  - fs/ntfs3: Fix possible deadlock in mi_read (Konstantin Komarov) [Orabug: 37268644] {CVE-2024-50245}
  - fs/ntfs3: Fix warning possible deadlock in ntfs_set_state (Konstantin Komarov)
  - fs/ntfs3: Check if more than chunk-size bytes are written (Andrew Ballance) [Orabug: 37268655] {CVE-2024-50247}
  - firmware: arm_sdei: Fix the input parameter of cpuhp_remove_state() (Xiongfeng Wang)
  - netfilter: nft_payload: sanitize offset and length before calling skb_checksum() (Pablo Neira Ayuso) [Orabug: 37268670] {CVE-2024-50251}
  - net: skip offload for NETIF_F_IPV6_CSUM if ipv6 header contains extension (Benoît Monin)
  - netfilter: Fix use-after-free in get_info() (Dong Chenchen) [Orabug: 37268689] {CVE-2024-50257}
  - bpf: Fix out-of-bounds write in trie_get_next_key() (Byeonguk Jeong) [Orabug: 37268702] {CVE-2024-50262}
  - netdevsim: Add trailing zero to terminate the string in nsim_nexthop_bucket_activity_write() (Zichen Xie) [Orabug: 37268697] {CVE-2024-50259}
  - net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT (Pedro Tammela) [Orabug: 37304740] {CVE-2024-53057}
  - net: stmmac: TSO: Fix unbalanced DMA map/unmap for non-paged SKB data (Furong Xu) [Orabug: 37304745] {CVE-2024-53058}
  - ASoC: cs42l51: Fix some error handling paths in cs42l51_probe() (Christophe JAILLET)
  - wifi: iwlwifi: mvm: Fix response handling in iwl_mvm_send_recovery_cmd() (Daniel Gabay) [Orabug: 37304749] {CVE-2024-53059}
  - wifi: iwlwifi: mvm: disconnect station vifs if recovery failed (Emmanuel Grumbach)
  - mac80211: Add support to trigger sta disconnect on hardware restart (Youghandhar Chintala)
  - mac80211: do drv_reconfig_complete() before restarting all (Johannes Berg)
  - RDMA/bnxt_re: synchronize the qp-handle table array (Selvin Xavier)
  - RDMA/mlx5: Round max_rd_atomic/max_dest_rd_atomic up instead of down (Patrisious Haddad)
  - RDMA/cxgb4: Dump vendor specific QP details (Leon Romanovsky)
  - wifi: brcm80211: BRCM_TRACING should depend on TRACING (Geert Uytterhoeven)
  - wifi: mac80211: skip non-uploaded keys in ieee80211_iter_keys (Felix Fietkau)
  - mac80211: MAC80211_MESSAGE_TRACING should depend on TRACING (Geert Uytterhoeven)
  - cgroup: Fix potential overflow issue when checking max_depth (Xiu Jianfeng)
  - ACPI: PRM: Find EFI_MEMORY_RUNTIME block for PRM handler and context (Koba Ko) [Orabug: 37264072] {CVE-2024-50141}
  - ACPI: PRM: Change handler_addr type to void pointer (Sudeep Holla)
  - ACPI: PRM: Remove unnecessary blank lines (Aubrey Li)
  - ksmbd: fix user-after-free from session log off (Namjae Jeon) [Orabug: 37227413] {CVE-2024-50086}
  - selftests/mm: fix incorrect buffer->mirror size in hmm2 double_map test (Donet Tom)
  - LTS version: v5.15.170 (Vijayendra Suman)
  - xfrm: validate new SA's prefixlen using SA family when sel.family is unset (Sabrina Dubroca) [Orabug: 37264074] {CVE-2024-50142}
  - ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe() (Zichen Xie) [Orabug: 37252324] {CVE-2024-50103}
  - net: phy: dp83822: Fix reset pin definitions (Michel Alex)
  - serial: protect uart_port_dtr_rts() in uart_shutdown() too (Jiri Slaby (SUSE))
  - selinux: improve error checking in sel_write_load() (Paul Moore)
  - hv_netvsc: Fix VF namespace also in synthetic NIC NETDEV_REGISTER event (Haiyang Zhang)
  - xfrm: fix one more kernel-infoleak in algo dumping (Petr Vaganov) [Orabug: 37252349] {CVE-2024-50110}
  - ALSA: hda/realtek: Add subwoofer quirk for Acer Predator G9-593 (José Relvas)
  - KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory (Sean Christopherson) [Orabug: 37252372] {CVE-2024-50115}
  - openat2: explicitly return -E2BIG for (usize > PAGE_SIZE) (Aleksa Sarai)
  - nilfs2: fix kernel bug due to missing clearing of buffer delay flag (Ryusuke Konishi) [Orabug: 37252377] {CVE-2024-50116}
  - ACPI: button: Add DMI quirk for Samsung Galaxy Book2 to fix initial lid detection issue (Shubham Panwar)
  - ACPI: resource: Add LG 16T90SP to irq1_level_low_skip_override[] (Christian Heusel)
  - drm/amd: Guard against bad data for ATIF ACPI method (Mario Limonciello) [Orabug: 37252383] {CVE-2024-50117}
  - btrfs: zoned: fix zone unusable accounting for freed reserved extent (Naohiro Aota)
  - ALSA: hda/realtek: Update default depop procedure (Kailang Yang)
  - ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size() (Andrey Shumilin) [Orabug: 37264274] {CVE-2024-50205}
  - bpf,perf: Fix perf_event_detach_bpf_prog error handling (Jiri Olsa)
  - posix-clock: posix-clock: Fix unbalanced locking in pc_clock_settime() (Jinjie Ruan) [Orabug: 37320233] {CVE-2024-50210}
  - r8169: avoid unsolicited interrupts (Heiner Kallweit)
  - net: sched: fix use-after-free in taprio_change() (Dmitry Antipov) [Orabug: 37252407] {CVE-2024-50127}
  - net: wwan: fix global oob in wwan_rtnl_policy (Lin Ma) [Orabug: 37252410] {CVE-2024-50128}
  - net: dsa: mv88e6xxx: Fix error when setting port policy on mv88e6393x (Peter Rashleigh)
  - net: plip: fix break; causing plip to never transmit (Jakub Boehm)
  - be2net: fix potential memory leak in be_xmit() (Wang Hai) [Orabug: 37264143] {CVE-2024-50167}
  - net/sun3_82586: fix potential memory leak in sun3_82586_send_packet() (Wang Hai) [Orabug: 37264149] {CVE-2024-50168}
  - xfrm: respect ip protocols rules criteria when performing dst lookups (Eyal Birger)
  - xfrm: extract dst lookup parameters into a struct (Eyal Birger)
  - tracing: Consider the NULL character when validating the event length (Leo Yan) [Orabug: 37252415] {CVE-2024-50131}
  - platform/x86: dell-sysman: add support for alienware products (Crag Wang)
  - ASoC: qcom: sm8250: add qrb4210-rb2-sndcard compatible string (Alexey Klimov)
  - arm64/uprobes: change the uprobe_opcode_t typedef to fix the sparse warning (junhua huang)
  - platform/x86: dell-wmi: Ignore suspend notifications (Armin Wolf)
  - udf: fix uninit-value use in udf_get_fileshortad (Gianfranco Trad) [Orabug: 37264080] {CVE-2024-50143}
  - arm64: Force position-independent veneers (Mark Rutland)
  - ASoC: fsl_sai: Enable 'FIFO continue on error' FCONT bit (Shengjiu Wang)
  - ASoC: codecs: lpass-rx-macro: add missing CDC_RX_BCL_VBAT_RF_PROC2 to default regs values (Alexey Klimov)
  - drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLA (Hans de Goede) [Orabug: 37252420] {CVE-2024-50134}
  - exec: don't WARN for racy path_noexec check (Mateusz Guzik) [Orabug: 37206344] {CVE-2024-50010}
  - XHCI: Separate PORT and CAPs macros into dedicated file (Frank Li)
  - usb: gadget: Add function wakeup support (Elson Roy Serrao)
  - KVM: s390: gaccess: Check if guest address is in memslot (Nico Boehr)
  - KVM: s390: gaccess: Cleanup access to guest pages (Janis Schoetterl-Glausch)
  - KVM: s390: gaccess: Refactor access address range check (Janis Schoetterl-Glausch)
  - KVM: s390: gaccess: Refactor gpa and length calculation (Janis Schoetterl-Glausch)
  - arm64: probes: Fix uprobes for big-endian kernels (Mark Rutland) [Orabug: 37264236] {CVE-2024-50194}
  - arm64:uprobe fix the uprobe SWBP_INSN in big-endian (junhua huang)
  - Bluetooth: bnep: fix wild-memory-access in proto_unregister (Ye Bin) [Orabug: 37264096] {CVE-2024-50148}
  - s390: Initialize psw mask in perf_arch_fetch_caller_regs() (Heiko Carstens)
  - usb: typec: altmode should keep reference to parent (Thadeu Lima de Souza Cascardo) [Orabug: 37264102] {CVE-2024-50150}
  - smb: client: fix OOBs when building SMB2_IOCTL request (Paulo Alcantara) [Orabug: 37264107] {CVE-2024-50151}
  - scsi: target: core: Fix null-ptr-deref in target_alloc_device() (Wang Hai) [Orabug: 37264112] {CVE-2024-50153}
  - genetlink: hold RCU in genlmsg_mcast() (Eric Dumazet)
  - tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink(). (Kuniyuki Iwashima) [Orabug: 37264114] {CVE-2024-50154}
  - net: systemport: fix potential memory leak in bcm_sysport_xmit() (Wang Hai) [Orabug: 37264156] {CVE-2024-50171}
  - net: xilinx: axienet: fix potential memory leak in axienet_start_xmit() (Wang Hai)
  - net/smc: Fix searching in list of known pnetids in smc_pnet_add_pnetid (Li RongQing)
  - net: ethernet: aeroflex: fix potential memory leak in greth_start_xmit_gbit() (Wang Hai)
  - macsec: don't increment counters for an unrelated SA (Sabrina Dubroca)
  - net: usb: usbnet: fix race in probe failure (Oliver Neukum)
  - drm/msm: Allocate memory for disp snapshot with kvzalloc() (Douglas Anderson)
  - drm/msm: Avoid NULL dereference in msm_disp_state_print_regs() (Douglas Anderson) [Orabug: 37264122] {CVE-2024-50156}
  - drm/msm/dsi: fix 32-bit signed integer extension in pclk_rate calculation (Jonathan Marek)
  - RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages (Bhargava Chenna Marreddy) [Orabug: 37264280] {CVE-2024-50208}
  - RDMA/bnxt_re: Return more meaningful error (Kalesh AP)
  - ipv4: give an IPv4 dev to blackhole_netdev (Xin Long)
  - RDMA/irdma: Fix misspelling of "accept*" (Alexander Zubkov)
  - RDMA/cxgb4: Fix RDMA_CM_EVENT_UNREACHABLE error for iWARP (Anumula Murali Mohan Reddy)
  - ALSA: hda/cs8409: Fix possible NULL dereference (Murad Masimov) [Orabug: 37264129] {CVE-2024-50160}
  - ARM: dts: bcm2837-rpi-cm3-io3: Fix HDMI hpd-gpio pin (Florian Klink)
  - x86/resctrl: Avoid overflow in MB settings in bw_validate() (Martin Kletzander)
  - RDMA/bnxt_re: Add a check for memory allocation (Kalesh AP) [Orabug: 37264285] {CVE-2024-50209}
  - RDMA/bnxt_re: Fix incorrect AVID type in WQE structure (Saravanan Vajravel)
  - bpf: devmap: provide rxq after redirect (Florian Kauer) [Orabug: 37264132] {CVE-2024-50162}
  - bpf: Make sure internal and UAPI bpf_redirect flags don't overlap (Toke Høiland-Jørgensen) [Orabug: 37264134] {CVE-2024-50163}
  - LTS version: v5.15.169 (Vijayendra Suman)
  - ALSA: hda/conexant - Use cached pin control for Node 0x1d on HP EliteOne 1000 G2 (Vasiliy Kovalev)
  - powerpc/mm: Always update max/min_low_pfn in mem_topology_setup() (Aneesh Kumar K.V)
  - nilfs2: propagate directory read errors from nilfs_find_entry() (Ryusuke Konishi) [Orabug: 37264266] {CVE-2024-50202}
  - mptcp: prevent MPC handshake on port-based signal endpoints (Paolo Abeni)
  - mptcp: fallback when MPTCP opts are dropped after 1st data (Matthieu Baerts (NGI0))
  - tcp: fix mptcp DSS corruption due to large pmtu xmit (Paolo Abeni) [Orabug: 37227408] {CVE-2024-50083}
  - mptcp: handle consistently DSS corruption (Paolo Abeni) [Orabug: 37264210] {CVE-2024-50185}
  - mptcp: track and update contiguous data status (Geliang Tang)
  - irqchip/gic-v4: Don't allow a VMOVP on a dying VPE (Marc Zyngier) [Orabug: 37264231] {CVE-2024-50192}
  - pinctrl: ocelot: fix system hang on level based interrupts (Sergey Matsievskiy) [Orabug: 37264246] {CVE-2024-50196}
  - x86/entry_32: Clear CPU buffers after register restore in NMI return (Pawan Gupta) [Orabug: 37264234] {CVE-2024-50193}
  - x86/entry_32: Do not clobber user EFLAGS.ZF (Pawan Gupta)
  - x86/apic: Always explicitly disarm TSC-deadline timer (Zhang Rui)
  - x86/resctrl: Annotate get_mem_config() functions as __init (Nathan Chancellor)
  - USB: serial: option: add Telit FN920C04 MBIM compositions (Daniele Palmas)
  - USB: serial: option: add support for Quectel EG916Q-GL (Benjamin B. Frost)
  - xhci: Mitigate failed set dequeue pointer commands (Mathias Nyman)
  - xhci: Fix incorrect stream context type macro (Mathias Nyman)
  - Bluetooth: btusb: Fix regression with fake CSR controllers 0a12:0001 (Luiz Augusto von Dentz)
  - Bluetooth: Remove debugfs directory on module init failure (Aaron Thompson)
  - iio: adc: ti-ads124s08: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig (Javier Carrasco)
  - iio: proximity: mb1232: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig (Javier Carrasco)
  - iio: light: opt3001: add missing full-scale range value (Emil Gedenryd)
  - iio: light: veml6030: fix IIO device retrieval from embedded device (Javier Carrasco) [Orabug: 37264254] {CVE-2024-50198}
  - iio: light: veml6030: fix ALS sensor resolution (Javier Carrasco)
  - iio: hid-sensors: Fix an error handling path in _hid_sensor_set_report_latency() (Christophe JAILLET)
  - iio: adc: ti-ads8688: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig (Javier Carrasco)
  - iio: dac: stm32-dac-core: add missing select REGMAP_MMIO in Kconfig (Javier Carrasco)
  - iio: dac: ltc1660: add missing select REGMAP_SPI in Kconfig (Javier Carrasco)
  - iio: dac: ad5770r: add missing select REGMAP_SPI in Kconfig (Javier Carrasco)
  - drm/vmwgfx: Handle surface check failure correctly (Nikolay Kuratov)
  - drm/radeon: Fix encoder->possible_clones (Ville Syrjälä) [Orabug: 37264263] {CVE-2024-50201}
  - io_uring/sqpoll: close race on waiting for sqring entries (Jens Axboe)
  - blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race (Omar Sandoval) [Orabug: 37227403] {CVE-2024-50082}
  - x86/bugs: Do not use UNTRAIN_RET with IBPB on entry (Johannes Wikner)
  - x86/bugs: Skip RSB fill at VMEXIT (Johannes Wikner)
  - x86/entry: Have entry_ibpb() invalidate return predictions (Johannes Wikner)
  - x86/cpufeatures: Add a IBPB_NO_RET BUG flag (Johannes Wikner)
  - x86/cpufeatures: Define X86_FEATURE_AMD_IBPB_RET (Jim Mattson)
  - KVM: s390: Change virtual to physical address access in diag 0x258 handler (Michael Mueller)
  - s390/sclp_vt220: Convert newlines to CRLF instead of LFCR (Thomas Weißschuh)
  - iommu/vt-d: Fix incorrect pci_for_each_dma_alias() for non-PCI devices (Lu Baolu) [Orabug: 37252321] {CVE-2024-50101}
  - io_uring/sqpoll: do not put cpumask on stack (Felix Moessbauer)
  - io_uring/sqpoll: retain test for whether the CPU is valid (Jens Axboe)
  - io_uring/sqpoll: do not allow pinning outside of cpuset (Felix Moessbauer)
  - drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE) (Wachowski, Karol)
  - KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin() (Breno Leitao) [Orabug: 36835836] {CVE-2024-40953}
  - dm-crypt, dm-verity: disable tasklets (Mikulas Patocka)
  - wifi: mac80211: fix potential key use-after-free (Johannes Berg)
  - secretmem: disable memfd_secret() if arch cannot set direct map (Patrick Roy) [Orabug: 37264195] {CVE-2024-50182}
  - mm/swapfile: skip HugeTLB pages for unuse_vma (Liu Shixin) [Orabug: 37264256] {CVE-2024-50199}
  - fat: fix uninitialized variable (OGAWA Hirofumi)
  - irqchip/gic-v3-its: Fix VSYNC referencing an unmapped VPE on GIC v4.1 (Nianyao Tang)
  - net: macb: Avoid 20s boot delay by skipping MDIO bus registration for fixed-link PHY (Oleksij Rempel)
  - arm64: probes: Fix simulate_ldr*_literal() (Mark Rutland)
  - arm64: probes: Remove broken LDR (literal) uprobe support (Mark Rutland) [Orabug: 37252316] {CVE-2024-50099}
  - posix-clock: Fix missing timespec64 check in pc_clock_settime() (Jinjie Ruan) [Orabug: 37264241] {CVE-2024-50195}
  - net: enetc: add missing static descriptor and inline keyword (Wei Fang)
  - net: enetc: remove xdp_drops statistic from enetc_xdp_drop() (Wei Fang)
  - udf: Fix bogus checksum computation in udf_rename() (Jan Kara) [Orabug: 37320204] {CVE-2024-43845}
  - udf: Don't return bh from udf_expand_dir_adinicb() (Jan Kara)
  - udf: Handle error when expanding directory (Jan Kara)
  - udf: Remove old directory iteration code (Jan Kara)
  - udf: Convert udf_link() to new directory iteration code (Jan Kara)
  - udf: Convert udf_mkdir() to new directory iteration code (Jan Kara)
  - udf: Convert udf_add_nondir() to new directory iteration (Jan Kara)
  - udf: Implement adding of dir entries using new iteration code (Jan Kara)
  - udf: Convert udf_unlink() to new directory iteration code (Jan Kara)
  - udf: Convert udf_rmdir() to new directory iteration code (Jan Kara)
  - udf: Convert empty_dir() to new directory iteration code (Jan Kara)
  - udf: Convert udf_get_parent() to new directory iteration code (Jan Kara)
  - udf: Convert udf_lookup() to use new directory iteration code (Jan Kara)
  - udf: Convert udf_readdir() to new directory iteration (Jan Kara)
  - udf: Convert udf_rename() to new directory iteration code (Jan Kara)
  - udf: Provide function to mark entry as deleted using new directory iteration code (Jan Kara)
  - udf: Implement searching for directory entry using new iteration code (Jan Kara)
  - udf: Move udf_expand_dir_adinicb() to its callsite (Jan Kara)
  - udf: Convert udf_expand_dir_adinicb() to new directory iteration (Jan Kara)
  - udf: New directory iteration code (Jan Kara)
  - ALSA: hda/conexant - Fix audio routing for HP EliteOne 1000 G2 (Vasiliy Kovalev)


author: Brian Maly <brian.maly@oracle.com> [5.15.0-303.171.5.el9uek]
changelog:
  - intel_idle: fix ACPI _CST matching for newer Xeon platforms (Artem Bityutskiy)  [Orabug: 37249457]
  - x86: Fix CPUIDLE_FLAG_IRQ_ENABLE leaking timer reprogram (Peter Zijlstra)  [Orabug: 37249457]
  - perf/tests: Add AMX instructions to x86 instruction decoder test (Adrian Hunter)  [Orabug: 37249457]
  - x86/insn: Add AMX instructions to the x86 instruction decoder (Adrian Hunter)  [Orabug: 37249457]
  - intel_idle: add Granite Rapids Xeon support (Artem Bityutskiy)  [Orabug: 37249457]
  - cpuidle, intel_idle: Fix CPUIDLE_FLAG_IRQ_ENABLE *again* (Peter Zijlstra)  [Orabug: 37249457]
  - intel_idle: Fix false positive RCU splats due to incorrect hardirqs state (Waiman Long)  [Orabug: 37249457]
  - cpuidle,intel_idle: Fix CPUIDLE_FLAG_IRQ_ENABLE (Peter Zijlstra)  [Orabug: 37249457]
  - intel_idle: Add a new flag to initialize the AMX state (Chang S. Bae)  [Orabug: 37249457]
  - x86/fpu: Add a helper to prepare AMX state for low-power CPU idle (Chang S. Bae)  [Orabug: 37249457]
  - intel_idle: enable interrupts before C1 on Xeons (Artem Bityutskiy)  [Orabug: 37249457]


author: Vijayendra Suman <vijayendra.suman@oracle.com> [5.15.0-303.171.5.1.el9uek]
changelog:
  - sunrpc: fix a NULL deref in svc_process() when ->sv_stats doesn't exist (Calum Mackay)  [Orabug: 37346134]


author: Brian Maly <brian.maly@oracle.com> [5.15.0-303.171.5.2.el9uek]
changelog:
  - build: populate modules_thick.builtin for dirs containing only modules (Nick Alcock)  [Orabug: 37393454]  
  - x86/pkeys: Ensure updated PKRU value is XRSTOR'd (Aruna Ramakrishna)  [Orabug: 37384237]  
  - x86/pkeys: Change caller of update_pkru_in_sigframe() (Aruna Ramakrishna)  [Orabug: 37384237]  
  - Revert "ocfs2: fix the la space leak when unmounting an ocfs2 volume" (Sherry Yang)  [Orabug: 37383283]


author: Vijayendra Suman <vijayendra.suman@oracle.com> [5.15.0-308.179.3.el9uek]
changelog:
  - uek-rpm: Build Bluefield 3 kernel for OL9 (Dave Kleikamp)  [Orabug: 37763488]
  - uek-rpm: Add emb3 config and core list for OL9 (Dave Kleikamp)  [Orabug: 37763488]
  - udf: Fix directory iteration for longer tail extents (Jan Kara)  [Orabug: 37761829]
  - uek-rpm: install the perf exec dir (Stephen Brennan)  [Orabug: 37757734]
  - perf probe: Improve log for long event name failure (Leo Yan)  [Orabug: 37752593]
  - perf probe: Check group string length (Leo Yan)  [Orabug: 37752593]
  - perf probe: Use the MAX_EVENT_NAME_LEN macro (Leo Yan)  [Orabug: 37752593]
  - perf probe-event: Better error message for a too-long probe name (Dima Kogan)  [Orabug: 37752593]
  - rds: ib: Do not attempt to insert RDMA exthdr twice (Håkon Bugge)  [Orabug: 37721762]
  - x86/sev: Harden #VC instruction emulation somewhat (Borislav Petkov (AMD))  [Orabug: 37687865]  {CVE-2024-25743} {CVE-2024-25742}
  - x86/entry: Do not allow external 0x80 interrupts (Thomas Gleixner)  [Orabug: 37687865]  {CVE-2024-25743} {CVE-2024-25742}
  - x86/entry: Convert INT 0x80 emulation to IDTENTRY (Thomas Gleixner)  [Orabug: 37687865]  {CVE-2024-25743} {CVE-2024-25742}
  - x86/entry: Fixup objtool/ibt validation (Peter Zijlstra)  [Orabug: 37687865]  {CVE-2024-25743} {CVE-2024-25742}
  - x86/sev: Mark the code returning to user space as syscall gap (Lai Jiangshan)  [Orabug: 37687865]  {CVE-2024-25743} {CVE-2024-25742}
  - rds: ib: Fix racy send affinity work cancellation (Håkon Bugge)  [Orabug: 37607469]
  - sched/deadline: Fix warning in migrate_enable for boosted tasks (Wander Lairson Costa)  [Orabug: 37433838]  {CVE-2024-56583}
  - x86/coco: Disable 32-bit emulation by default on TDX and SEV (Kirill A. Shutemov)  [Orabug: 36298741]  {CVE-2024-25744}
  - x86/ia32: State that IA32 emulation is disabled (Borislav Petkov (AMD))  [Orabug: 36298741]  {CVE-2024-25744}
  - x86: Make IA32_EMULATION boot time configurable (Nikolay Borisov)  [Orabug: 36298741]  {CVE-2024-25744}
  - x86: Remove toolchain check for X32 ABI capability (Masahiro Yamada)  [Orabug: 36298741]  {CVE-2024-25744}
  - x86/entry: Make IA32 syscalls' availability depend on ia32_enabled() (Nikolay Borisov)  [Orabug: 36298741]  {CVE-2024-25744}
  - x86/elf: Make loading of 32bit processes depend on ia32_enabled() (Nikolay Borisov)  [Orabug: 36298741]  {CVE-2024-25744}
  - x86/entry: Compile entry_SYSCALL32_ignore() unconditionally (Nikolay Borisov)  [Orabug: 36298741]  {CVE-2024-25744}
  - x86/entry: Rename ignore_sysret() (Nikolay Borisov)  [Orabug: 36298741]  {CVE-2024-25744}
  - x86: Introduce ia32_enabled() (Nikolay Borisov)  [Orabug: 36298741]  {CVE-2024-25744}
  - x86: Fix misspelled Kconfig symbols (Lukas Bulwahn)  [Orabug: 36298741]  {CVE-2024-25744}


author: Brian Maly <brian.maly@oracle.com> [5.15.0-308.179.4.el9uek]
changelog:
  - Check concurrency before THP creation for file mappings in fault path (Prakash Sangappa)  [Orabug: 37608058]
  - rds: ib: Fix NULL ptr deref in rds_ib_cq_follow_affinity (Håkon Bugge)  [Orabug: 37747825]


author: Vijayendra Suman <vijayendra.suman@oracle.com> [5.15.0-308.179.5.el9uek]
changelog:
  - net: usb: usbnet: restore usb%d name exception for local mac addresses (Dominique Martinet)
  - usbnet:fix NPE during rx_complete (Ying Lu)
  - bpf: Use preempt_count() directly in bpf_send_signal_common() (Hou Tao)
  - jfs: fix slab-out-of-bounds read in ea_get() (Qasim Ijaz)
  - serial: 8250_dma: terminate correct DMA in tx_dma_flush() (John Keeping)
  - ksmbd: fix multichannel connection failure (Namjae Jeon)
  - rds: Tear down the copy-from-user cache before destroying rds_wq (Håkon Bugge)  [Orabug: 37716901]


author: Vijayendra Suman <vijayendra.suman@oracle.com> [5.15.0-308.179.6.el9uek]
changelog:
  - net: bridge: IP defragmentation failing for jumboframes (Venkat Venkatsubra)  [Orabug: 37847171]
  - uek-rpm: remove .el9 from shim version (Samasth Norway Ananda)  [Orabug: 37834731]
  - RDS: avoid using offlined CPU during reconnect (Arumugam Kolappan)  [Orabug: 37783021]
  - net/mlx5e: Rely on reqid in IPsec tunnel mode (Leon Romanovsky)  [Orabug: 37710815]
  - net/mlx5e: Fix inversion dependency warning while enabling IPsec tunnel (Leon Romanovsky)  [Orabug: 37710815]
  - net/mlx5: Clear port select structure when fail to create (Mark Zhang)  [Orabug: 37710815]
  - net/mlx5: SF, Fix add port error handling (Chris Mi)  [Orabug: 37710815]
  - net/mlx5: Fix variable not being completed when function returns (Chenguang Zhao)  [Orabug: 37710815]
  - net/mlx5e: Keep netdev when leave switchdev for devlink set legacy only (Jianbo Liu)  [Orabug: 37710815]
  - net/mlx5e: Skip restore TC rules for vport rep without loaded flag (Jianbo Liu)  [Orabug: 37710815]
  - net/mlx5e: macsec: Maintain TX SA from encoding_sa (Dragos Tatulea)  [Orabug: 37710815]
  - net/mlx5e: Remove workaround to avoid syndrome for internal port (Jianbo Liu)  [Orabug: 37710815]
  - net/mlx5e: SD, Use correct mdev to build channel param (Tariq Toukan)  [Orabug: 37710815]
  - mlxsw: spectrum_acl_flex_keys: Use correct key block on Spectrum-4 (Ido Schimmel)  [Orabug: 37710815]
  - net/mlx5e: clear xdp features on non-uplink representors (William Tu)  [Orabug: 37710815]
  - net/mlx5: Fix msix vectors to respect platform limit (Parav Pandit)  [Orabug: 37710815]
  - mlxsw: spectrum_ipip: Fix memory leak when changing remote IPv6 address (Ido Schimmel)  [Orabug: 37710815]
  - mlxsw: spectrum_ptp: Add missing verification before pushing Tx header (Amit Cohen)  [Orabug: 37710815]
  - net/mlx5e: Don't call cleanup on profile rollback failure (Cosmin Ratiu)  [Orabug: 37710815]
  - net/mlx5: Fix command bitmask initialization (Shay Drory)  [Orabug: 37710815]
  - net/mlx5: Check for invalid vector index on EQ creation (Maher Sanalla)  [Orabug: 37710815]
  - mlxsw: spectrum_acl_flex_keys: Constify struct mlxsw_afk_element_inst (Christophe JAILLET)  [Orabug: 37710815]
  - net: Fix netns for ip_tunnel_init_flow() (Xiao Liang)  [Orabug: 37710815]
  - ipv4: ip_tunnel: Unmask upper DSCP bits in ip_tunnel_xmit() (Ido Schimmel)  [Orabug: 37710815]
  - ip_tunnel: annotate data-races around t->parms.link (Eric Dumazet)  [Orabug: 37710815]
  - ipv4: ip_tunnel: Unmask upper DSCP bits in ip_md_tunnel_xmit() (Ido Schimmel)  [Orabug: 37710815]
  - ipv4: ip_tunnel: Unmask upper DSCP bits in ip_tunnel_bind_dev() (Ido Schimmel)  [Orabug: 37710815]
  - net/mlx5e: SHAMPO, Fix overflow of hd_per_wq (Dragos Tatulea)  [Orabug: 37710815]
  - net/mlx5e: SHAMPO, Increase timeout to improve latency (Dragos Tatulea)  [Orabug: 37710815]
  - net/mlx5: Verify support for scheduling element and TSAR type (Carolina Jubran)  [Orabug: 37710815]
  - net/mlx5e: Enable remove flow for hard packet limit (Jianbo Liu)  [Orabug: 37710815]
  - net/mlx5: Use set number of max EQs (Daniel Jurgens)  [Orabug: 37710815]
  - net/mlx5: IFC updates for SF max IO EQs (Daniel Jurgens)  [Orabug: 37710815]
  - net/mlx5e: Approximate IPsec per-SA payload data bytes count (Leon Romanovsky)  [Orabug: 37710815]
  - net/mlx5e: Present succeeded IPsec SA bytes and packet (Leon Romanovsky)  [Orabug: 37710815]
  - net/mlx5: Use max_num_eqs_24b capability if set (Daniel Jurgens)  [Orabug: 37710815]
  - net/mlx5: IFC updates for changing max EQs (Daniel Jurgens)  [Orabug: 37710815]
  - net/mlx5: Correct TASR typo into TSAR (Cosmin Ratiu)  [Orabug: 37710815]
  - net/mlx5e: SHAMPO, Re-enable HW-GRO (Yoray Zack)  [Orabug: 37710815]
  - net/mlx5e: SHAMPO, Use KSMs instead of KLMs (Yoray Zack)  [Orabug: 37710815]
  - net/mlx5e: Fix netif state handling (Shay Drory)  [Orabug: 37710815]
  - net/mlx5e: RSS, Block XOR hash with over 128 channels (Carolina Jubran)  [Orabug: 37710815]
  - net/mlx5: Support matching on l4_type for ttc_table (Jianbo Liu)  [Orabug: 37710815]
  - net/mlx5: Enable SD feature (Tariq Toukan)  [Orabug: 37710815]
  - net/mlx5e: Block TLS device offload on combined SD netdev (Tariq Toukan)  [Orabug: 37710815]
  - net/mlx5e: Support per-mdev queue counter (Tariq Toukan)  [Orabug: 37710815]
  - net/mlx5e: Support cross-vhca RSS (Tariq Toukan)  [Orabug: 37710815]
  - net/mlx5e: Let channels be SD-aware (Tariq Toukan)  [Orabug: 37710815]
  - net/mlx5e: Connect mlx5 IPsec statistics with XFRM core (Leon Romanovsky)  [Orabug: 37710815]
  - xfrm: get global statistics from the offloaded device (Leon Romanovsky)  [Orabug: 37710815]
  - RDS: avoid queueing delayed work on an offlined cpu (Praveen Kumar Kannoju)  [Orabug: 37260584] [Orabug: 37551309]
  - uek-rpm/kernel-uek.spec: Set DEFAULTKERNEL correctly during %postun (Vijay Kumar)  [Orabug: 37376706]


author: Jack Vogel <jack.vogel@oracle.com> [5.15.0-308.179.6.2.el9uek]
changelog:
  - x86/bhi: Do not set BHI_DIS_S in 32-bit mode (Pawan Gupta)  [Orabug: 37920681]
  - x86/bpf: Add IBHF call at end of classic BPF (Daniel Sneddon)  [Orabug: 37920681]
  - x86/bpf: Call branch history clearing sequence on exit (Daniel Sneddon)  [Orabug: 37920681]
  - selftest/x86/bugs: Add selftests for ITS (Pawan Gupta)  [Orabug: 37863726]  {CVE-2024-28956}
  - x86/its: Align RETs in BHB clear sequence to avoid thunking (Pawan Gupta)  [Orabug: 37863726]  {CVE-2024-28956}
  - x86/its: Add "vmexit" option to skip mitigation on some CPUs (Pawan Gupta)  [Orabug: 37863726]  {CVE-2024-28956}
  - x86/its: Enable Indirect Target Selection mitigation (Pawan Gupta)  [Orabug: 37863726]  {CVE-2024-28956}
  - x86/its: Add support for ITS-safe return thunk (Pawan Gupta)  [Orabug: 37863726]  {CVE-2024-28956}
  - x86/its: Add support for ITS-safe indirect thunk (Pawan Gupta)  [Orabug: 37863726]  {CVE-2024-28956}
  - x86/its: Enumerate Indirect Target Selection (ITS) bug (Pawan Gupta)  [Orabug: 37863726]  {CVE-2024-28956}
  - Documentation: x86/bugs/its: Add ITS documentation (Pawan Gupta)  [Orabug: 37863726]  {CVE-2024-28956}
  - x86/alternatives: Remove faulty optimization (Josh Poimboeuf)  [Orabug: 37863726]  {CVE-2024-28956}
  - x86/alternative: Optimize returns patching (Borislav Petkov (AMD))  [Orabug: 37863726]  {CVE-2024-28956}


author: Brian Maly <brian.maly@oracle.com> [5.15.0-308.179.6.3.el9uek]
changelog:
  - x86/bugs: Enabling Retbleed and SRSO mitigation can taint the kernel (Alexandre Chartre)  [Orabug: 37937056]


author: Vijayendra Suman <vijayendra.suman@oracle.com> [5.15.0-308.179.6.4.el9uek]
changelog:
  - certs: Add new Oracle Linux Driver Signing (key 1) certificate (Sherry Yang)  [Orabug: 37980731]
  - RDS: use pin_user_pages_fast() (Stephen Brennan)  [Orabug: 37980705]
  - vhost-scsi: Fix vhost_scsi_send_status() (Dongli Zhang)  [Orabug: 37980690]
  - vhost-scsi: Fix vhost_scsi_send_bad_target() (Dongli Zhang)  [Orabug: 37980690]
  - vhost-scsi: protect vq->log_used with vq->mutex (Dongli Zhang)  [Orabug: 37980690]
  - vhost-scsi: Reduce response iov mem use (Mike Christie)  [Orabug: 37980690]
  - vhost-scsi: Allocate iov_iter used for unaligned copies when needed (Mike Christie)  [Orabug: 37980690]
  - vhost-scsi: Stop duplicating se_cmd fields (Mike Christie)  [Orabug: 37980690]
  - vhost-scsi: Dynamically allocate scatterlists (Mike Christie)  [Orabug: 37980690]
  - vhost-scsi: Return queue full for page alloc failures during copy (Mike Christie)  [Orabug: 37980690]
  - vhost-scsi: Add better resource allocation failure handling (Mike Christie)  [Orabug: 37980690]
  - vhost-scsi: Allocate T10 PI structs only when enabled (Mike Christie)  [Orabug: 37980690]
  - vhost-scsi: Reduce mem use by moving upages to per queue (Mike Christie)  [Orabug: 37980690]
  - scsi: target: core: Use RCU helpers for INQUIRY t10_alua_tg_pt_gp (Mike Christie)  [Orabug: 37980690]
  - scsi: target: Perform ALUA group changes in one step (Mike Christie)  [Orabug: 37980690]
  - scsi: target: Replace lun_tg_pt_gp_lock with rcu in I/O path (Mike Christie)  [Orabug: 37980690]
  - scsi: target: Fix write perf due to unneeded throttling (Mike Christie)  [Orabug: 37980690]
  - vhost scsi: Allow user to control num virtqueues (Mike Christie)  [Orabug: 37980690]
  - vhost-scsi: Rename vhost_scsi_iov_to_sgl (Mike Christie)  [Orabug: 37980690]
  - vhost-scsi: unbreak any layout for response (Jason Wang)  [Orabug: 37980690]
  - Revert "vhost-scsi: protect vq->log_base with vq->mutex" (Mike Christie)  [Orabug: 37980690]
  - Revert "vhost_scsi: log write descriptors" (Mike Christie)  [Orabug: 37980690]


author: Brian Maly <brian.maly@oracle.com> [5.15.0-308.179.6.6.el9uek]
changelog:
  - mm: make page_mapped_in_vma() hugetlb walk aware (Jane Chu)  [Orabug: 38024577]
  - mm/rmap: Fix handling of hugetlbfs pages in page_vma_mapped_walk (zhenwei pi)  [Orabug: 38024577]


author: Brian Maly <brian.maly@oracle.com> [5.15.0-308.179.6.7.el9uek]
changelog:
  - mm: shmem: remove unnecessary warning in shmem_writepage() (Ricardo Cañuelo Navarro)  [Orabug: 38034039]  
  - shmem: add support to ignore swap (Luis Chamberlain)  [Orabug: 38034039]  
  - shmem: update documentation (Luis Chamberlain)  [Orabug: 38034039]  
  - shmem: skip page split if we're not reclaiming (Luis Chamberlain)  [Orabug: 38034039]  
  - shmem: move reclaim check early on writepages() (Luis Chamberlain)  [Orabug: 38034039]  
  - shmem: set shmem_writepage() variables early (Luis Chamberlain)  [Orabug: 38034039]  
  - shmem: remove check for folio lock on writepage() (Luis Chamberlain)  [Orabug: 38034039]


author: Vijayendra Suman <vijayendra.suman@oracle.com> [5.15.0-308.179.2.el9uek]
changelog:
  - LTS version: v5.15.179 (Vijayendra Suman)
  - net: ipv6: fix dst refleaks in rpl, seg6 and ioam6 lwtunnels (Jakub Kicinski)
  - kbuild: userprogs: use correct lld when linking through clang (Thomas Weißschuh)
  - vsock: Orphan socket after transport release (Michal Luczaj)
  - vsock: Keep the binding until socket destruction (Michal Luczaj)
  - bpf, vsock: Invoke proto::close on close() (Michal Luczaj)
  - media: uvcvideo: Remove dangling pointers (Ricardo Ribalda)
  - media: uvcvideo: Fix crash during unbind if gpio unit is in use (Ricardo Ribalda)
  - nilfs2: handle errors that nilfs_prepare_chunk() may return (Ryusuke Konishi)
  - nilfs2: eliminate staggered calls to kunmap in nilfs_rename (Ryusuke Konishi)
  - nilfs2: move page release outside of nilfs_delete_entry and nilfs_set_link (Ryusuke Konishi)
  - spi-mxs: Fix chipselect glitch (Ralf Schlatterbeck)
  - mtd: rawnand: cadence: fix unchecked dereference (Niravkumar L Rabara)
  - md: select BLOCK_LEGACY_AUTOLOAD (NeilBrown)
  - media: uvcvideo: Avoid returning invalid controls (Ricardo Ribalda)
  - media: uvcvideo: Avoid invalid memory access (Ricardo Ribalda)
  - drivers: virt: acrn: hsm: Use kzalloc to avoid info leak in pmcmd_ioctl (Haoyu Li)
  - eeprom: digsy_mtc: Make GPIO lookup table match the device (Andy Shevchenko)
  - bus: mhi: host: pci_generic: Use pci_try_reset_function() to avoid deadlock (Manivannan Sadhasivam)
  - slimbus: messaging: Free transaction ID in delayed interrupt scenario (Visweswara Tanuku)
  - intel_th: pci: Add Panther Lake-P/U support (Alexander Shishkin)
  - intel_th: pci: Add Panther Lake-H support (Alexander Shishkin)
  - intel_th: pci: Add Arrow Lake support (Pawel Chmielewski)
  - mei: me: add panther lake P DID (Alexander Usyskin)
  - Squashfs: check the inode number is not the invalid value of zero (Phillip Lougher)
  - usb: xhci: Enable the TRB overfetch quirk on VIA VL805 (Michal Pecio)
  - xhci: pci: Fix indentation in the PCI device ID definitions (Andy Shevchenko)
  - usb: gadget: Check bmAttributes only if configuration is valid (Prashanth K)
  - usb: gadget: Fix setting self-powered state on suspend (Marek Szyprowski)
  - usb: gadget: Set self-powered based on MaxPower and bmAttributes (Prashanth K)
  - usb: typec: tcpci_rt1711h: Unmask alert interrupts to fix functionality (AngeloGioacchino Del Regno)
  - usb: typec: ucsi: increase timeout for PPM reset operations (Fedor Pchelkin)
  - usb: dwc3: gadget: Prevent irq storm when TH re-executes (Badhri Jagan Sridharan)
  - usb: renesas_usbhs: Flush the notify_hotplug_work (Claudiu Beznea)
  - usb: quirks: Add DELAY_INIT and NO_LPM for Prolific Mass Storage Card Reader (Miao Li)
  - usb: hub: lack of clearing xHC resources (Pawel Laszczak)
  - usb: renesas_usbhs: Use devm_usb_get_phy() (Claudiu Beznea)
  - usb: renesas_usbhs: Call clk_put() (Claudiu Beznea)
  - Revert "drivers/card_reader/rtsx_usb: Restore interrupt based detection" (Christian Heusel)
  - gpio: rcar: Fix missing of_node_put() call (Fabrizio Castro)
  - net: ipv6: fix missing dst ref drop in ila lwtunnel (Justin Iurman)
  - net: ipv6: fix dst ref loop in ila lwtunnel (Justin Iurman)
  - sched/fair: Fix potential memory corruption in child_cfs_rq_on_list (Zecheng Li)
  - net-timestamp: support TCP GSO case for a few missing flags (Jason Xing)
  - exfat: fix soft lockup in exfat_clear_bitmap (Namjae Jeon)
  - x86/sgx: Fix size overflows in sgx_encl_create() (Jarkko Sakkinen)
  - vlan: enforce underlying device type (Oscar Maes)
  - ppp: Fix KMSAN uninit-value warning with bpf (Jiayuan Chen)
  - net: hns3: make sure ptp clock is unregister and freed if hclge_ptp_get_cycle returns an error (Peiyang Wang)
  - be2net: fix sleeping while atomic bugs in be_ndo_bridge_getlink (Nikolay Aleksandrov)
  - drm/sched: Fix preprocessor guard (Philipp Stanner)
  - hwmon: fix a NULL vs IS_ERR_OR_NULL() check in xgene_hwmon_probe() (Xinghuo Chen)
  - llc: do not use skb_get() before dev_queue_xmit() (Eric Dumazet)
  - ALSA: usx2y: validate nrpacks module parameter on probe (Murad Masimov)
  - hwmon: (ad7314) Validate leading zero bits and return error (Erik Schumacher)
  - hwmon: (ntc_thermistor) Fix the ncpXXxh103 sensor table (Maud Spierings)
  - hwmon: (pmbus) Initialise page count in pmbus_identify() (Titus Rwantare)
  - caif_virtio: fix wrong pointer check in cfv_probe() (Vitaliy Shevtsov)
  - net: gso: fix ownership in __udp_gso_segment (Antoine Tenart)
  - nvmet-tcp: Fix a possible sporadic response drops in weakly ordered arch (Meir Elisha)
  - HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() (Zhang Lixu)
  - HID: google: fix unused variable warning under !CONFIG_ACPI (Yu-Chun Lin)
  - wifi: iwlwifi: limit printed string from FW file (Johannes Berg)
  - mm: don't skip arch_sync_kernel_mappings() in error paths (Ryan Roberts)
  - mm/page_alloc: fix uninitialized variable (Hao Zhang)
  - block: fix conversion of GPT partition name to 7-bit (Olivier Gayot)
  - s390/traps: Fix test_monitor_call() inline assembly (Heiko Carstens)
  - rapidio: fix an API misues when rio_add_net() fails (Haoxiang Li)
  - rapidio: add check for rio_add_net() in rio_scan_alloc_net() (Haoxiang Li)
  - wifi: nl80211: reject cooked mode if it is set along with other flags (Vitaliy Shevtsov)
  - wifi: cfg80211: regulatory: improve invalid hints checking (Nikita Zhandarovich)
  - x86/cpu: Properly parse CPUID leaf 0x2 TLB descriptor 0x63 (Ahmed S. Darwish)
  - x86/cpu: Validate CPUID leaf 0x2 EDX output (Ahmed S. Darwish)
  - x86/cacheinfo: Validate CPUID leaf 0x2 EDX output (Ahmed S. Darwish)
  - platform/x86: thinkpad_acpi: Add battery quirk for ThinkPad X131e (Mingcong Bai)
  - drm/radeon: Fix rs400_gpu_init for ATI mobility radeon Xpress 200M (Richard Thier)
  - ALSA: hda/realtek: update ALC222 depop optimize (Kailang Yang)
  - ALSA: hda: intel: Add Dell ALC3271 to power_save denylist (Hoku Ishibe)
  - gpio: aggregator: protect driver attr handlers against module unload (Koichiro Den)
  - gpio: rcar: Use raw_spinlock to protect register access (Niklas Söderlund)
  - HID: appleir: Fix potential NULL dereference at raw event handle (Daniil Dulov)
  - Revert "of: reserved-memory: Fix using wrong number of cells to get property 'alignment'" (Rob Herring (Arm))
  - drm/amdgpu: disable BAR resize on Dell G5 SE (Alex Deucher)
  - drm/amdgpu: Check extended configuration space register when system uses large bar (Ma Jun)
  - smb: client: Add check for next_buffer in receive_encrypted_standard() (Haoxiang Li)
  - pfifo_tail_enqueue: Drop new packet when sch->limit == 0 (Quang Le)
  - intel_idle: Handle older CPUs, which stop the TSC in deeper C states, correctly (Thomas Gleixner)
  - sched/core: Prevent rescheduling when interrupts are disabled (Thomas Gleixner)
  - vmlinux.lds: Ensure that const vars with relocations are mapped R/O (Ard Biesheuvel)
  - mptcp: always handle address removal under msk socket lock (Paolo Abeni)
  - phy: exynos5-usbdrd: fix MPLL_MULTIPLIER and SSC_REFCLKSEL masks in refclk (Kaustabh Chakraborty)
  - phy: tegra: xusb: reset VBUS & ID OVERRIDE (BH Hsieh)
  - net: enetc: correct the xdp_tx statistics (Wei Fang)
  - net: enetc: update UDP checksum when updating originTimestamp field (Wei Fang)
  - net: enetc: fix the off-by-one issue in enetc_map_tx_buffs() (Wei Fang)
  - usbnet: gl620a: fix endpoint checking in genelink_bind() (Nikita Zhandarovich)
  - i2c: npcm: disable interrupt enable bit before devm_request_irq (Tyrone Ting)
  - drm/amd/display: Fix HPD after gpu reset (Roman Li)
  - perf/core: Fix low freq setting via IOC_PERIOD (Kan Liang)
  - ALSA: usb-audio: Re-add sample rate quirk for Pioneer DJM-900NXS2 (Dmitry Panchenko)
  - ftrace: Avoid potential division by zero in function_stat_show() (Nikolay Kuratov)
  - x86/CPU: Fix warm boot hang regression on AMD SC1100 SoC systems (Russell Senior)
  - net: ipv6: fix dst ref loop on input in rpl lwt (Justin Iurman)
  - net: ipv6: rpl_iptunnel: mitigate 2-realloc issue (Justin Iurman)
  - net: ipv6: fix dst ref loop on input in seg6 lwt (Justin Iurman)
  - net: ipv6: seg6_iptunnel: mitigate 2-realloc issue (Justin Iurman)
  - include: net: add static inline dst_dev_overhead() to dst.h (Justin Iurman)
  - seg6: add support for SRv6 H.L2Encaps.Red behavior (Andrea Mayer)
  - seg6: add support for SRv6 H.Encaps.Red behavior (Andrea Mayer)
  - net/mlx5: IRQ, Fix null string in debug print (Shay Drory)
  - net: mvpp2: cls: Fixed Non IP flow, with vlan tag flow defination. (Harshal Chaudhari)
  - tcp: Defer ts_recent changes until req is owned (Wang Hai)
  - ipvs: Always clear ipvs_property flag in skb_scrub_packet() (Philo Lu)
  - ASoC: es8328: fix route from DAC to output (Nicolas Frattaroli)
  - net: cadence: macb: Synchronize stats calculations (Sean Anderson)
  - afs: Fix the server_list to unuse a displaced server rather than putting it (David Howells)
  - afs: Make it possible to find the volumes that are using a server (David Howells)
  - afs: remove variable nr_servers (Colin Ian King)
  - Bluetooth: L2CAP: Fix L2CAP_ECRED_CONN_RSP response (Luiz Augusto von Dentz)
  - ALSA: usb-audio: Avoid dropping MIDI events at closing multiple ports (Takashi Iwai)
  - sunrpc: suppress warnings for unused procfs functions (Arnd Bergmann)
  - RDMA/mlx5: Fix bind QP error cleanup flow (Patrisious Haddad)
  - scsi: core: Clear driver private data when retrying request (Ye Bin)
  - scsi: core: Don't memset() the entire scsi_cmnd in scsi_init_command() (Christoph Hellwig)
  - ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up (Vasiliy Kovalev)
  - ovl: pass ofs to creation operations (Christian Brauner)
  - ovl: use wrappers to all vfs_*xattr() calls (Amir Goldstein)
  - IB/mlx5: Set and get correct qp_num for a DCT QP (Mark Zhang)
  - x86/cpu/kvm: SRSO: Fix possible missing IBPB on VM-Exit (Patrick Bellasi)
  - mtd: rawnand: cadence: fix incorrect device in dma_unmap_single (Niravkumar L Rabara)
  - mtd: rawnand: cadence: use dma_map_resource for sdma address (Niravkumar L Rabara)
  - mtd: rawnand: cadence: fix error code in cadence_nand_init() (Niravkumar L Rabara)
  - acct: block access to kernel internal filesystems (Christian Brauner)
  - acct: perform last write from workqueue (Christian Brauner)
  - ALSA: hda/conexant: Add quirk for HP ProBook 450 G4 mute LED (John Veness)
  - nfp: bpf: Add check for nfp_app_ctrl_msg_alloc() (Haoxiang Li)
  - drop_monitor: fix incorrect initialization order (Gavrilov Ilia)
  - tee: optee: Fix supplicant wait loop (Sumit Garg)
  - bpf: skip non exist keys in generic_map_lookup_batch (Yan Zhai)
  - nvme/ioctl: add missing space in err message (Caleb Sander Mateos)
  - power: supply: da9150-fg: fix potential overflow (Andrey Vatoropin)
  - arp: switch to dev_getbyhwaddr() in arp_req_set_public() (Breno Leitao)
  - net: Add non-RCU dev_getbyhwaddr() helper (Breno Leitao)
  - flow_dissector: Fix port range key handling in BPF conversion (Cong Wang)
  - flow_dissector: Fix handling of mixed port and port-range keys (Cong Wang)
  - geneve: Suppress list corruption splat in geneve_destroy_tunnels(). (Kuniyuki Iwashima)
  - geneve: Fix use-after-free in geneve_find_dev(). (Kuniyuki Iwashima)
  - powerpc/code-patching: Fix KASAN hit by not flagging text patching area as VM_ALLOC (Christophe Leroy)
  - ALSA: hda/realtek: Fixup ALC225 depop procedure (Kailang Yang)
  - powerpc/64s: Rewrite __real_pte() and __rpte_to_hidx() as static inline (Christophe Leroy)
  - powerpc/64s/mm: Move __real_pte stubs into hash-4k.h (Michael Ellerman)
  - USB: gadget: f_midi: f_midi_complete to call queue_work (Jill Donahue)
  - usb: dwc3: Fix timeout issue during controller enter/exit from halt state (Selvarasu Ganesan)
  - usb: dwc3: Increase DWC3 controller halt timeout (Wesley Cheng)
  - batman-adv: Drop unmanaged ELP metric worker (Sven Eckelmann)
  - batman-adv: Drop initialization of flexible ethtool_link_ksettings (Sven Eckelmann)
  - media: uvcvideo: Only save async fh if success (Ricardo Ribalda)
  - media: uvcvideo: Refactor iterators (Ricardo Ribalda)
  - media: uvcvideo: Set error_idx during ctrl_commit errors (Ricardo Ribalda)
  - soc: mediatek: mtk-devapc: Fix leaking IO map on driver remove (Krzysztof Kozlowski)
  - soc/mediatek: mtk-devapc: Convert to platform remove callback returning void (Uwe Kleine-König)
  - soc: mediatek: mtk-devapc: Fix leaking IO map on error paths (Krzysztof Kozlowski)
  - soc: mediatek: mtk-devapc: Switch to devm_clk_get_enabled() (AngeloGioacchino Del Regno)
  - kfence: skip __GFP_THISNODE allocations on NUMA systems (Marco Elver)
  - kfence: enable check kfence canary on panic via boot param (huangshaobo)
  - kfence: allow use of a deferrable timer (Marco Elver)
  - tpm: Change to kvalloc() in eventlog/acpi.c (Jarkko Sakkinen)
  - tpm: Use managed allocation for bios event log (Eddie James)
  - arm64: dts: mediatek: mt8183: Disable DSI display output by default (Chen-Yu Tsai)
  - ASoC: renesas: rz-ssi: Add a check for negative sample_space (Dan Carpenter)
  - drm/rockchip: cdn-dp: Use drm_connector_helper_hpd_irq_event() (Thomas Zimmermann)
  - drm/probe-helper: Create a HPD IRQ event helper for a single connector (Maxime Ripard)
  - ksmbd: fix integer overflows on 32 bit systems (Dan Carpenter)
  - memcg: fix soft lockup in the OOM process (Chen Ridong)
  - mm: update mark_victim tracepoints fields (Carlos Galo)
  - media: imx-jpeg: Fix potential error pointer dereference in detach_pm() (Dan Carpenter)
  - crypto: testmgr - some more fixes to RSA test vectors (Ignat Korchagin)
  - crypto: testmgr - populate RSA CRT parameters in RSA test vectors (Ignat Korchagin)
  - crypto: testmgr - fix version number of RSA tests (lei he)
  - crypto: testmgr - Fix wrong test case of RSA (Lei He)
  - crypto: testmgr - fix wrong key length for pkcs1pad (Lei He)
  - arm64: mte: Do not allow PROT_MTE on MAP_HUGETLB user mappings (Catalin Marinas)
  - pps: Fix a use-after-free (Calvin Owens)
  - btrfs: avoid monopolizing a core when activating a swap file (Filipe Manana)
  - x86/i8253: Disable PIT timer 0 when not in use (David Woodhouse)
  - f2fs: fix to wait dio completion (Chao Yu)
  - ARM: dts: dra7: Add bus_dma_limit for l4 cfg bus (Romain Naour)
  - parport_pc: add support for ASIX AX99100 (Jiaqing Zhao)
  - serial: 8250_pci: add support for ASIX AX99100 (Jiaqing Zhao)
  - can: ems_pci: move ASIX AX99100 ids to pci_ids.h (Jiaqing Zhao)
  - nilfs2: protect access to buffers with no active references (Ryusuke Konishi)
  - nilfs2: do not force clear folio if buffer is referenced (Ryusuke Konishi)
  - nilfs2: do not output warnings when clearing dirty buffers (Ryusuke Konishi)
  - alpha: replace hardcoded stack offsets with autogenerated ones (Ivan Kokshaysky)
  - kdb: Do not assume write() callback available (John Ogness)
  - drm/v3d: Stop active perfmon if it is being destroyed (Christian Gmeiner)
  - drm/tidss: Clear the interrupt status for interrupts being disabled (Devarsh Thakkar)
  - drm/tidss: Fix issue in irq handling causing irq-flood issue (Tomi Valkeinen)
  - ipv6: mcast: add RCU protection to mld_newpack() (Eric Dumazet)
  - ndisc: extend RCU protection in ndisc_send_skb() (Eric Dumazet)
  - openvswitch: use RCU protection in ovs_vport_cmd_fill_info() (Eric Dumazet)
  - arp: use RCU protection in arp_xmit() (Eric Dumazet)
  - neighbour: use RCU protection in __neigh_notify() (Eric Dumazet)
  - neighbour: delete redundant judgment statements (Li Zetao)
  - ndisc: use RCU protection in ndisc_alloc_skb() (Eric Dumazet)
  - ipv6: use RCU protection in ip6_default_advmss() (Eric Dumazet)
  - ipv4: use RCU protection in __ip_rt_update_pmtu() (Eric Dumazet)
  - net: ipv4: Cache pmtu for all packet paths if multipath enabled (Vladimir Vdovin)
  - selftest: net: Test IPv4 PMTU exceptions with DSCP and ECN (Guillaume Nault)
  - Namespaceify mtu_expires sysctl (xu xin)
  - Namespaceify min_pmtu sysctl (xu xin)
  - ipv4: use RCU protection in inet_select_addr() (Eric Dumazet)
  - ipv4: use RCU protection in rt_is_expired() (Eric Dumazet)
  - net: add dev_net_rcu() helper (Eric Dumazet)
  - ipv4: add RCU protection to ip4_dst_hoplimit() (Eric Dumazet)
  - clocksource: Use migrate_disable() to avoid calling get_random_u32() in atomic context (Waiman Long)
  - clocksource: Use pr_info() for "Checking clocksource synchronization" message (Waiman Long)
  - clocksource: Replace cpumask_weight() with cpumask_empty() (Yury Norov)
  - btrfs: fix hole expansion when writing at an offset beyond EOF (Filipe Manana)
  - mlxsw: Add return value check for mlxsw_sp_port_get_stats_raw() (Wentao Liang)
  - arm64: Handle .ARM.attributes section in linker scripts (Nathan Chancellor)
  - regmap-irq: Add missing kfree() (Jiasheng Jiang)
  - partitions: mac: fix handling of bogus partition table (Jann Horn)
  - gpio: stmpe: Check return value of stmpe_reg_read in stmpe_gpio_irq_sync_unlock (Wentao Liang)
  - alpha: align stack for page fault and user unaligned trap handlers (Ivan Kokshaysky)
  - serial: 8250: Fix fifo underflow on flush (John Keeping)
  - cgroup: fix race between fork and cgroup.kill (Shakeel Butt)
  - efi: Avoid cold plugged memory for placing the kernel (Ard Biesheuvel)
  - alpha: make stack 16-byte aligned (most cases) (Ivan Kokshaysky)
  - can: j1939: j1939_sk_send_loop(): fix unable to send messages with data length zero (Alexander Hölzl)
  - can: c_can: fix unbalanced runtime PM disable in error path (Krzysztof Kozlowski)
  - USB: serial: option: drop MeiG Smart defines (Johan Hovold)
  - USB: serial: option: fix Telit Cinterion FN990A name (Fabio Porcedda)
  - USB: serial: option: add Telit Cinterion FN990B compositions (Fabio Porcedda)
  - USB: serial: option: add MeiG Smart SLM828 (Chester A. Unal)
  - usb: cdc-acm: Fix handling of oversized fragments (Jann Horn)
  - usb: cdc-acm: Check control transfer buffer size before access (Jann Horn)
  - USB: cdc-acm: Fill in Renesas R-Car D3 USB Download mode quirk (Marek Vasut)
  - USB: hub: Ignore non-compliant devices with too many configs or interfaces (Alan Stern)
  - usb: gadget: f_midi: fix MIDI Streaming descriptor lengths (John Keeping)
  - USB: Add USB_QUIRK_NO_LPM quirk for sony xperia xz1 smartphone (Mathias Nyman)
  - USB: quirks: add USB_QUIRK_NO_LPM quirk for Teclast dist (Lei Huang)
  - usb: core: fix pipe creation for get_bMaxPacketSize0 (Stefan Eichenberger)
  - USB: pci-quirks: Fix HCCPARAMS register error for LS7A EHCI (Huacai Chen)
  - usb: dwc2: gadget: remove of_node reference upon udc_stop (Fabrice Gasnier)
  - usb: gadget: udc: renesas_usb3: Fix compiler warning (Guo Ren)
  - usb: roles: set switch registered flag early on (Elson Roy Serrao)
  - perf/x86/intel: Ensure LBRs are disabled when a CPU is starting (Sean Christopherson)
  - KVM: x86: Reject Hyper-V's SEND_IPI hypercalls if local APIC isn't in-kernel (Sean Christopherson)
  - batman-adv: Ignore neighbor throughput metrics in error case (Sven Eckelmann)
  - batman-adv: fix panic during interface removal (Andy Strohman)
  - ASoC: Intel: bytcr_rt5640: Add DMI quirk for Vexia Edu Atla 10 tablet 5V (Hans de Goede)
  - orangefs: fix a oob in orangefs_debug_write (Mike Marshall)
  - Grab mm lock before grabbing pt lock (Maksym Planeta)
  - vfio/pci: Enable iowrite64 and ioread64 for vfio pci (Ramesh Thomas)
  - PCI/DPC: Quirk PIO log size for Intel Raptor Lake-P (Takashi Iwai)
  - media: vidtv: Fix a null-ptr-deref in vidtv_mux_stop_thread (Edward Adam Davis)
  - media: cxd2841er: fix 64-bit division on gcc-9 (Arnd Bergmann)
  - x86/xen: allow larger contiguous memory regions in PV guests (Juergen Gross)
  - xen: remove a confusing comment on auto-translated guest I/O (Petr Tesarik)
  - gpio: bcm-kona: Add missing newline to dev_err format string (Artur Weber)
  - gpio: bcm-kona: Make sure GPIO bits are unlocked when requesting IRQ (Artur Weber)
  - gpio: bcm-kona: Fix GPIO lock/unlock for banks above bank 0 (Artur Weber)
  - drm/i915/selftests: avoid using uninitialized context (Krzysztof Karas)
  - arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array (Radu Rendec)
  - team: better TEAM_OPTION_TYPE_STRING validation (Eric Dumazet)
  - vrf: use RCU protection in l3mdev_l3_out() (Eric Dumazet)
  - ndisc: ndisc_send_redirect() must use dev_get_by_index_rcu() (Eric Dumazet)
  - HID: multitouch: Add NULL check in mt_input_configured (Charles Han)
  - NFSD: fix hang in nfsd4_shutdown_callback (Dai Ngo)
  - nfsd: clear acl_access/acl_default after releasing them (Li Lingfeng)
  - tty: xilinx_uartps: split sysrq handling (Sean Anderson)
  - mptcp: prevent excessive coalescing on receive (Paolo Abeni)
  - ocfs2: check dir i_size in ocfs2_find_entry (Su Yue)
  - memory: tegra20-emc: Correct memory device mask (Dmitry Osipenko)
  - gpio: xilinx: remove excess kernel doc (Bartosz Golaszewski)
  - net/ncsi: use dev_set_mac_address() for Get MC MAC Address handling (Paul Fertser)
  - MIPS: ftrace: Declare ftrace_get_parent_ra_addr() as static (WangYuli)
  - ptp: Ensure info->enable callback is always set (Thomas Weißschuh)
  - net: phy: c45-tjaxx: add delay between MDIO write and read in soft_reset (Milos Reljin)
  - net/ncsi: wait for the last response to Deselect Package before configuring channel (Paul Fertser)
  - misc: fastrpc: Fix registered buffer page address (Ekansh Gupta)
  - mtd: onenand: Fix uninitialized retlen in do_otp_read() (Ivan Stepchenko)
  - NFC: nci: Add bounds checking in nci_hci_create_pipe() (Dan Carpenter)
  - nilfs2: fix possible int overflows in nilfs_fiemap() (Nikita Zhandarovich)
  - ocfs2: handle a symlink read error correctly (Matthew Wilcox (Oracle))
  - pnfs/flexfiles: retry getting layout segment for reads (Mike Snitzer)
  - vfio/platform: check the bounds of read/write syscalls (Alex Williamson)
  - nvmem: core: improve range check for nvmem_cell_write() (Jennifer Berringer)
  - nvmem: qcom-spmi-sdam: Set size in struct nvmem_config (Luca Weiss)
  - crypto: qce - unregister previously registered algos in error path (Bartosz Golaszewski)
  - crypto: qce - fix goto jump in error path (Bartosz Golaszewski)
  - media: uvcvideo: Remove redundant NULL assignment (Ricardo Ribalda)
  - media: uvcvideo: Fix event flags in uvc_ctrl_send_events (Ricardo Ribalda)
  - media: ccs: Fix cleanup order in ccs_probe() (Mehdi Djait)
  - media: ccs: Fix CCS static data parsing for large block sizes (Sakari Ailus)
  - media: ov5640: fix get_light_freq on auto (Sam Bobrowicz)
  - media: mc: fix endpoint iteration (Cosmin Tanislav)
  - soc: qcom: smem_state: fix missing of_node_put in error path (Krzysztof Kozlowski)
  - iio: light: as73211: fix channel handling in only-color triggered buffer (Javier Carrasco)
  - media: ccs: Clean up parsed CCS static data on parse failure (Sakari Ailus)
  - xfs: Add error handling for xfs_reflink_cancel_cow_range (Wentao Liang)
  - crypto: qce - fix priority to be less than ARMv8 CE (Eric Biggers)
  - arm64: dts: qcom: sm8350: Fix MPSS memory length (Krzysztof Kozlowski)
  - x86/boot: Use '-std=gnu11' to fix build with GCC 15 (Nathan Chancellor)
  - kbuild: Move -Wenum-enum-conversion to W=2 (Nathan Chancellor)
  - scsi: qla2xxx: Move FCE Trace buffer allocation to user control (Quinn Tran)
  - nvme-pci: Add TUXEDO IBP Gen9 to Samsung sleep quirk (Georg Gottleuber)
  - nvme-pci: Add TUXEDO InfinityFlex to Samsung sleep quirk (Georg Gottleuber)
  - PCI: endpoint: Finish virtual EP removal in pci_epf_remove_vepf() (Zijun Hu)
  - ALSA: hda/realtek: Enable headset mic on Positivo C6400 (Edson Juliano Drosdeck)
  - mips/math-emu: fix emulation of the prefx instruction (Mateusz Jończyk)
  - dm-crypt: track tag_offset in convert_context (Hou Tao)
  - dm-crypt: don't update io->sector after kcryptd_crypt_write_io_submit() (Hou Tao)
  - powerpc/pseries/eeh: Fix get PE state translation (Narayana Murty N)
  - MIPS: Loongson64: remove ROM Size unit in boardinfo (Kexy Biscuit)
  - serial: sh-sci: Do not probe the serial port if its slot in sci_ports[] is in use (Claudiu Beznea)
  - serial: sh-sci: Drop __initdata macro for port_cfg (Claudiu Beznea)
  - soc: qcom: socinfo: Avoid out of bounds read of serial number (Stephan Gerhold)
  - usb: gadget: f_tcm: Don't prepare BOT write request twice (Thinh Nguyen)
  - usb: gadget: f_tcm: ep_autoconfig with fullspeed endpoint (Thinh Nguyen)
  - usb: gadget: f_tcm: Decrement command ref count on cleanup (Thinh Nguyen)
  - usb: gadget: f_tcm: Translate error to sense (Thinh Nguyen)
  - wifi: brcmfmac: fix NULL pointer dereference in brcmf_txfinalize() (Marcel Hamer)
  - wifi: rtlwifi: rtl8821ae: Fix media status report (Bitterblue Smith)
  - HID: hid-sensor-hub: don't use stale platform-data on remove (Heiko Stuebner)
  - of: reserved-memory: Fix using wrong number of cells to get property 'alignment' (Zijun Hu)
  - of: Fix of_find_node_opts_by_path() handling of alias+path+options (Zijun Hu)
  - of: Correct child specifier used as input of the 2nd nexus node (Zijun Hu)
  - perf bench: Fix undefined behavior in cmpworker() (Kuan-Wei Chiu)
  - efi: libstub: Use '-std=gnu11' to fix build with GCC 15 (Nathan Chancellor)
  - blk-cgroup: Fix class @block_class's subsystem refcount leakage (Zijun Hu)
  - clk: qcom: clk-rpmh: prevent integer overflow in recalc_rate (Anastasia Belova)
  - clk: qcom: gcc-mdm9607: Fix cmd_rcgr offset for blsp1_uart6 rcg (Satya Priya Kakitapalli)
  - clk: qcom: gcc-sm6350: Add missing parent_map for two clocks (Luca Weiss)
  - clk: qcom: clk-alpha-pll: fix alpha mode configuration (Gabor Juhos)
  - clk: sunxi-ng: a100: enable MMC clock reparenting (Cody Eksal)
  - Bluetooth: L2CAP: accept zero as a special value for MTU auto-selection (Fedor Pchelkin)
  - Bluetooth: L2CAP: handle NULL sock pointer in l2cap_sock_alloc (Fedor Pchelkin)
  - drm/i915: Drop 64bpp YUV formats from ICL+ SDR planes (Ville Syrjälä)
  - drm/komeda: Add check for komeda_get_layer_fourcc_list() (Haoxiang Li)
  - drm/amd/pm: Mark MM activity as unsupported (Lijo Lazar)
  - KVM: s390: vsie: fix some corner-cases when grabbing vsie pages (David Hildenbrand)
  - KVM: Explicitly verify target vCPU is online in kvm_get_vcpu() (Sean Christopherson)
  - arm64: dts: rockchip: increase gmac rx_delay on rk3399-puma (Jakob Unterwurzacher)
  - binfmt_flat: Fix integer overflow bug on 32 bit systems (Dan Carpenter)
  - m68k: vga: Fix I/O defines (Thomas Zimmermann)
  - s390/futex: Fix FUTEX_OP_ANDN implementation (Heiko Carstens)
  - drm/modeset: Handle tiled displays in pan_display_atomic. (Maarten Lankhorst)
  - leds: lp8860: Write full EEPROM, not only half of it (Alexander Sverdlin)
  - cpufreq: s3c64xx: Fix compilation warning (Viresh Kumar)
  - tun: revert fix group permission check (Willem de Bruijn)
  - net: rose: lock the socket in rose_bind() (Eric Dumazet)
  - net: atlantic: fix warning during hot unplug (Jacob Moroni)
  - gpio: pca953x: Improve interrupt support (Mark Tomlinson)
  - udp: gso: do not drop small packets when PMTU reduces (Yan Zhai)
  - tg3: Disable tg3 PCIe AER on system reboot (Lenny Szubowicz)
  - gpu: drm_dp_cec: fix broken CEC adapter properties check (Hans Verkuil)
  - firmware: iscsi_ibft: fix ISCSI_IBFT Kconfig entry (Prasad Pandit)
  - nvme: handle connectivity loss in nvme_set_queue_count (Daniel Wagner)
  - usb: xhci: Fix NULL pointer dereference on certain command aborts (Michal Pecio)
  - usb: xhci: Add timeout argument in address_device USB HCD callback (Hardik Gajjar)
  - xfs: don't over-report free space or inodes in statvfs (Darrick J. Wong)
  - xfs: report realtime block quota limits on realtime directories (Darrick J. Wong)
  - gpio: xilinx: Convert gpio_lock to raw spinlock (Sean Anderson)
  - net/ncsi: fix locking in Get MAC Address handling (Paul Fertser)
  - net/ncsi: Add NC-SI 1.2 Get MC MAC Address command (Peter Delevoryas)
  - usb: chipidea: ci_hdrc_imx: decrement device's refcount in .remove() and in the error path of .probe() (Joe Hattori)
  - usb: chipidea/ci_hdrc_imx: Convert to platform remove callback returning void (Uwe Kleine-König)
  - usb: chipidea: ci_hdrc_imx: use dev_err_probe() (Alexander Stein)
  - x86/mm: Don't disable PCID when INVLPG has been fixed by microcode (Xi Ruoyao)
  - platform/x86: acer-wmi: Ignore AC events (Armin Wolf)
  - Input: allocate keycode for phone linking (Illia Ostapyshyn)
  - selftests/net/ipsec: Fix Null pointer dereference in rtattr_pack() (Liu Ye)
  - tipc: re-order conditions in tipc_crypto_key_rcv() (Dan Carpenter)
  - mmc: sdhci-msm: Correctly set the load for the regulator (Yuanjie Yang)
  - net: wwan: iosm: Fix hibernation by re-binding the driver around it (Maciej S. Szmigiero)
  - APEI: GHES: Have GHES honor the panic= setting (Borislav Petkov)
  - i2c: Force ELAN06FA touchpad I2C bus freq to 100KHz (Randolph Ha)
  - wifi: iwlwifi: avoid memory leak (Miri Korenblit)
  - net/mlx5: use do_aux_work for PHC overflow checks (Vadim Fedorenko)
  - HID: Wacom: Add PCI Wacom device support (Even Xu)
  - mfd: lpc_ich: Add another Gemini Lake ISA bridge PCI device-id (Hans de Goede)
  - tomoyo: don't emit warning in tomoyo_write_control() (Tetsuo Handa)
  - wifi: brcmsmac: add gain range check to wlc_phy_iqcal_gainparams_nphy() (Dmitry Antipov)
  - mmc: core: Respect quirk_max_rate for non-UHS SDIO card (Shawn Lin)
  - tun: fix group permission check (Stas Sergeev)
  - safesetid: check size of policy writes (Leo Stone)
  - printk: Fix signed integer overflow when defining LOG_BUF_LEN_MAX (Kuan-Wei Chiu)
  - x86/amd_nb: Restrict init function to AMD-based systems (Yazen Ghannam)
  - lockdep: Fix upper limit for LOCKDEP_*_BITS configs (Carlos Llamas)
  - sched: Don't try to catch up excess steal time. (Suleiman Souhlal)
  - btrfs: convert BUG_ON in btrfs_reloc_cow_block() to proper error handling (Josef Bacik)
  - btrfs: fix data race when accessing the inode's disk_i_size at btrfs_drop_extents() (Hao-ran Zheng)
  - btrfs: fix use-after-free when attempting to join an aborted transaction (Filipe Manana)
  - btrfs: output the reason for open_ctree() failure (Qu Wenruo)
  - usb: gadget: f_tcm: Don't free command immediately (Thinh Nguyen)
  - media: uvcvideo: Fix double free in error path (Laurent Pinchart)
  - mptcp: consolidate suboption status (Paolo Abeni)
  - usb: typec: tcpci: Prevent Sink disconnection before vPpsShutdown in SPR PPS (Kyle Tso)
  - usb: typec: tcpm: set SRC_SEND_CAPABILITIES timeout to PD_T_SENDER_RESPONSE (Jos Wang)
  - usb: dwc3: core: Defer the probe until USB power supply ready (Kyle Tso)
  - usb: gadget: f_tcm: Fix Get/SetInterface return value (Thinh Nguyen)
  - drivers/card_reader/rtsx_usb: Restore interrupt based detection (Sean Rhodes)
  - net: usb: rtl8150: enable basic endpoint checking (Nikita Zhandarovich)
  - ALSA: usb-audio: Add delay quirk for iBasso DC07 Pro (Lianqin Hu)
  - ktest.pl: Check kernelrelease return in get_version (Ricardo B. Marliere)
  - netfilter: nf_tables: reject mismatching sum of field_len with set key length (Pablo Neira Ayuso)
  - NFSD: Reset cb_seq_status after NFS4ERR_DELAY (Chuck Lever)
  - hexagon: Fix unbalanced spinlock in die() (Lin Yujun)
  - hexagon: fix using plain integer as NULL pointer warning in cmpxchg (Willem de Bruijn)
  - kconfig: fix memory leak in sym_warn_unmet_dep() (Masahiro Yamada)
  - kconfig: WERROR unmet symbol dependency (Sergey Senozhatsky)
  - kconfig: deduplicate code in conf_read_simple() (Masahiro Yamada)
  - kconfig: remove unused code for S_DEF_AUTO in conf_read_simple() (Masahiro Yamada)
  - kconfig: require a space after '#' for valid input (Masahiro Yamada)
  - kconfig: add warn-unknown-symbols sanity check (Sergey Senozhatsky)
  - kconfig: fix file name in warnings when loading KCONFIG_DEFCONFIG_LIST (Masahiro Yamada)
  - genksyms: fix memory leak when the same symbol is read from *.symref file (Masahiro Yamada)
  - genksyms: fix memory leak when the same symbol is added from source (Masahiro Yamada)
  - net: sh_eth: Fix missing rtnl lock in suspend/resume path (Kory Maincent)
  - bgmac: reduce max frame size to support just MTU 1500 (Rafał Miłecki)
  - vsock: Allow retrying on connect() failure (Michal Luczaj)
  - perf trace: Fix runtime error of index out of bounds (Howard Chu)
  - ptp: Properly handle compat ioctls (Thomas Weißschuh)
  - net: davicom: fix UAF in dm9000_drv_remove (Chenyuan Yang)
  - net: netdevsim: try to close UDP port harness races (Jakub Kicinski)
  - net: rose: fix timer races against user threads (Eric Dumazet)
  - PM: hibernate: Add error handling for syscore_suspend() (Wentao Liang)
  - ipmr: do not call mr_mfc_uses_dev() for unres entries (Eric Dumazet)
  - net: fec: implement TSO descriptor cleanup (Dheeraj Reddy Jonnalagadda)
  - gpio: mxc: remove dead code after switch to DT-only (Ahmad Fatoum)
  - net: hns3: fix oops when unload drivers paralleling (Jian Shen)
  - ubifs: skip dumping tnc tree when zroot is null (pangliyuan)
  - rtc: pcf85063: fix potential OOB write in PCF85063 NVMEM read (Oleksij Rempel)
  - dmaengine: ti: edma: fix OF node reference leaks in edma_driver (Joe Hattori)
  - xfrm: replay: Fix the update of replay_esn->oseq_hi for GSO (Jianbo Liu)
  - tools/bootconfig: Fix the wrong format specifier (Luo Yifan)
  - NFSv4.2: mark OFFLOAD_CANCEL MOVEABLE (Olga Kornievskaia)
  - NFSv4.2: fix COPY_NOTIFY xdr buf size calculation (Olga Kornievskaia)
  - module: Extend the preempt disabled section in dereference_symbol_descriptor(). (Sebastian Andrzej Siewior)
  - ocfs2: mark dquot as inactive if failed to start trans while releasing dquot (Su Yue)
  - scsi: ufs: bsg: Delete bsg_dev when setting up bsg fails (Guixin Liu)
  - scsi: mpt3sas: Set ioc->manu_pg11.EEDPTagMode directly to 1 (Paul Menzel)
  - PCI: rcar-ep: Fix incorrect variable used when calling devm_request_mem_region() (King Dix)
  - staging: media: imx: fix OF node leak in imx_media_add_of_subdevs() (Joe Hattori)
  - mtd: hyperbus: hbmc-am654: fix an OF node reference leak (Joe Hattori)
  - mtd: hyperbus: hbmc-am654: Convert to platform remove callback returning void (Uwe Kleine-König)
  - mtd: hyperbus: Make hyperbus_unregister_device() return void (Uwe Kleine-König)
  - media: uvcvideo: Propagate buf->error to userspace (Ricardo Ribalda)
  - media: camif-core: Add check for clk_enable() (Jiasheng Jiang)
  - media: mipi-csis: Add check for clk_enable() (Jiasheng Jiang)
  - media: i2c: ov9282: Correct the exposure offset (Dave Stevenson)
  - media: i2c: imx412: Add missing newline to prints (Luca Weiss)
  - media: marvell: Add check for clk_enable() (Jiasheng Jiang)
  - PCI: endpoint: Destroy the EPC device in devm_pci_epc_destroy() (Zijun Hu)
  - media: lmedm04: Handle errors for lme2510_int_read (Chen Ni)
  - media: rc: iguanair: handle timeouts (Oliver Neukum)
  - efi: sysfb_efi: fix W=1 warnings when EFI is not set (Randy Dunlap)
  - of: reserved-memory: Do not make kmemleak ignore freed address (Zijun Hu)
  - memblock: drop memblock_free_early_nid() and memblock_free_early() (Mike Rapoport)
  - xen/x86: free_p2m_page: use memblock_free_ptr() to free a virtual pointer (Mike Rapoport)
  - RDMA/mlx5: Fix indirect mkey ODP page count (Michael Guralnik)
  - RDMA/mlx5: Enforce umem boundaries for explicit ODP page faults (Michael Guralnik)
  - fbdev: omapfb: Fix an OF node leak in dss_of_port_get_parent_device() (Joe Hattori)
  - ARM: dts: mediatek: mt7623: fix IR nodename (Rafał Miłecki)
  - arm64: dts: qcom: sdm845: Fix interrupt types of camss interrupts (Vladimir Zapolskiy)
  - arm64: dts: qcom: sm8150-microsoft-surface-duo: fix typos in da7280 properties (Neil Armstrong)
  - arm64: dts: qcom: sm8350: correct sleep clock frequency (Dmitry Baryshkov)
  - arm64: dts: qcom: sm8250: correct sleep clock frequency (Dmitry Baryshkov)
  - arm64: dts: qcom: sm6125: correct sleep clock frequency (Dmitry Baryshkov)
  - arm64: dts: qcom: sc7280: correct sleep clock frequency (Dmitry Baryshkov)
  - arm64: dts: qcom: msm8994: correct sleep clock frequency (Dmitry Baryshkov)
  - arm64: dts: qcom: msm8916: correct sleep clock frequency (Dmitry Baryshkov)
  - arm64: dts: qcom: msm8994: Describe USB interrupts (Konrad Dybcio)
  - arm64: dts: qcom: msm8996: Fix up USB3 interrupts (Konrad Dybcio)
  - arm64: dts: mediatek: mt8183-kukui-jacuzzi: Drop pp3300_panel voltage settings (Chen-Yu Tsai)
  - memory: tegra20-emc: fix an OF node reference bug in tegra_emc_find_node_by_ram_code() (Joe Hattori)
  - memory: tegra20-emc: Support matching timings by LPDDR2 configuration (Dmitry Osipenko)
  - memory: Add LPDDR2-info helpers (Dmitry Osipenko)
  - arm64: dts: mediatek: mt8183: willow: Support second source touchscreen (Hsin-Te Yuan)
  - arm64: dts: mediatek: mt8183: kenzo: Support second source touchscreen (Hsin-Te Yuan)
  - arm64: dts: mediatek: mt8173-evb: Fix MT6397 PMIC sub-node names (Chen-Yu Tsai)
  - arm64: dts: mediatek: mt8173-elm: Fix MT6397 PMIC sub-node names (Chen-Yu Tsai)
  - arm64: dts: mediatek: mt8173-elm: Drop regulator-compatible property (Chen-Yu Tsai)
  - arm64: dts: mediatek: mt8173-evb: Drop regulator-compatible property (Chen-Yu Tsai)
  - rdma/cxgb4: Prevent potential integer overflow on 32bit (Dan Carpenter)
  - RDMA/mlx4: Avoid false error about access to uninitialized gids array (Leon Romanovsky)
  - arm64: dts: mediatek: mt8516: reserve 192 KiB for TF-A (Val Packett)
  - arm64: dts: mediatek: mt8516: add i2c clock-div property (Val Packett)
  - arm64: dts: mediatek: mt8516: remove 2 invalid i2c clocks (Fabien Parent)
  - arm64: dts: mediatek: mt8516: fix wdt irq type (Val Packett)
  - arm64: dts: mediatek: mt8516: fix GICv2 range (Val Packett)
  - arm64: dts: mt8183: set DMIC one-wire mode on Damu (Hsin-Yi Wang)
  - ARM: at91: pm: change BU Power Switch to automatic mode (Nicolas Ferre)
  - padata: avoid UAF for reorder_work (Chen Ridong)
  - padata: add pd get/put refcnt helper (Chen Ridong)
  - padata: fix UAF in padata_reorder (Chen Ridong)
  - bpf: Send signals asynchronously if !preemptible (Puranjay Mohan)
  - perf report: Fix misleading help message about --demangle (Jiachen Zhang)
  - perf top: Don't complain about lack of vmlinux when not resolving some kernel samples (Arnaldo Carvalho de Melo)
  - padata: fix sysfs store callback check (Thomas Weißschuh)
  - crypto: ixp4xx - fix OF node reference leaks in init_ixp_crypto() (Joe Hattori)
  - crypto: hisilicon/sec2 - fix for aead invalid authsize (Wenkai Lin)
  - crypto: hisilicon/sec2 - fix for aead icv error (Wenkai Lin)
  - crypto: hisilicon/sec2 - optimize the error return process (Chenghai Huang)
  - crypto: hisilicon/sec - delete redundant blank lines (Kai Ye)
  - crypto: hisilicon/sec - add some comments for soft fallback (Kai Ye)
  - ktest.pl: Remove unused declarations in run_bisect_test function (Ba Jing)
  - ASoC: renesas: rz-ssi: Use only the proper amount of dividers (Claudiu Beznea)
  - perf bpf: Fix two memory leakages when calling perf_env__insert_bpf_prog_info() (Zhongqiu Han)
  - perf header: Fix one memory leakage in process_bpf_prog_info() (Zhongqiu Han)
  - perf header: Fix one memory leakage in process_bpf_btf() (Zhongqiu Han)
  - ASoC: sun4i-spdif: Add clock multiplier settings (George Lander)
  - libbpf: Fix segfault due to libelf functions not setting errno (Quentin Monnet)
  - net/rose: prevent integer overflows in rose_setsockopt() (Nikita Zhandarovich)
  - tcp_cubic: fix incorrect HyStart round start detection (Mahdi Arghavani)
  - net: ethernet: ti: am65-cpsw: fix freeing IRQ in am65_cpsw_nuss_remove_tx_chns() (Roger Quadros)
  - netfilter: nft_flow_offload: update tcp state flags under lock (Florian Westphal)
  - net: sched: Disallow replacing of child qdisc from one parent to another (Jamal Hadi Salim)
  - net: avoid race between device unregistration and ethnl ops (Antoine Tenart)
  - net/mlxfw: Drop hard coded max FW flash image size (Maher Sanalla)
  - net: let net.core.dev_weight always be non-zero (Liu Jian)
  - selftests/landlock: Fix error message (Mickaël Salaün)
  - clk: analogbits: Fix incorrect calculation of vco rate delta (Bo Gan)
  - wifi: cfg80211: adjust allocation of colocated AP data (Dmitry Antipov)
  - wifi: cfg80211: Handle specific BSSID in 6GHz scanning (Ilan Peer)
  - selftests: harness: fix printing of mismatch values in __EXPECT() (Dmitry V. Levin)
  - cpufreq: ACPI: Fix max-frequency computation (Gautham R. Shenoy)
  - wifi: mt76: mt76u_vendor_request: Do not print error messages when -EPROTO (WangYuli)
  - landlock: Handle weird files (Mickaël Salaün)
  - landlock: Move filesystem helpers and add a new one (Mickaël Salaün)
  - net/smc: fix data error when recvmsg with MSG_PEEK flag (Guangguan Wang)
  - wifi: wlcore: fix unbalanced pm_runtime calls (Andreas Kemnade)
  - samples/landlock: Fix possible NULL dereference in parse_path() (Zichen Xie)
  - regulator: of: Implement the unwind path of of_regulator_match() (Joe Hattori)
  - team: prevent adding a device which is already a team device lower (Octavian Purdila)
  - clk: imx8mp: Fix clkout1/2 support (Marek Vasut)
  - cpufreq: schedutil: Fix superfluous updates caused by need_freq_update (Sultan Alsawaf (unemployed))
  - leds: netxbig: Fix an OF node reference leak in netxbig_leds_get_of_pdata() (Joe Hattori)
  - dt-bindings: mfd: bd71815: Fix rsense and typos (Matti Vaittinen)
  - cpupower: fix TSC MHz calculation (He Rongguang)
  - ACPI: fan: cleanup resources in the error path of .probe() (Joe Hattori)
  - regulator: dt-bindings: mt6315: Drop regulator-compatible property (Chen-Yu Tsai)
  - HID: multitouch: fix support for Goodix PID 0x01e9 (Jiri Kosina)
  - Revert "HID: multitouch: Add support for lenovo Y9000P Touchpad" (Jiri Kosina)
  - HID: multitouch: Add support for lenovo Y9000P Touchpad (He Lugang)
  - wifi: rtlwifi: pci: wait for firmware loading before releasing memory (Thadeu Lima de Souza Cascardo)
  - wifi: rtlwifi: fix memory leaks and invalid access at probe error path (Thadeu Lima de Souza Cascardo)
  - wifi: rtlwifi: destroy workqueue at rtl_deinit_core (Thadeu Lima de Souza Cascardo)
  - wifi: rtlwifi: remove unused check_buddy_priv (Thadeu Lima de Souza Cascardo)
  - wifi: rtlwifi: remove unused dualmac control leftovers (Dmitry Antipov)
  - wifi: rtlwifi: remove unused timer and related code (Dmitry Antipov)
  - rtlwifi: replace usage of found with dedicated list iterator variable (Jakob Koschel)
  - dt-bindings: leds: class-multicolor: Fix path to color definitions (Geert Uytterhoeven)
  - dt-bindings: leds: class-multicolor: reference class directly in multi-led node (Krzysztof Kozlowski)
  - dt-bindings: leds: Add multicolor PWM LED bindings (Sven Schwermer)
  - dt-bindings: leds: Optional multi-led unit address (Sven Schwermer)
  - dt-bindings: leds: Add Qualcomm Light Pulse Generator binding (Bjorn Andersson)
  - dt-bindings: Another pass removing cases of 'allOf' containing a '$ref' (Rob Herring)
  - spi: dt-bindings: add schema listing peripheral-specific properties (Pratyush Yadav)
  - dt-bindings: mmc: controller: clarify the address-cells description (Neil Armstrong)
  - spi: zynq-qspi: Add check for clk_enable() (Mingwei Zheng)
  - wifi: rtlwifi: usb: fix workqueue leak when probe fails (Thadeu Lima de Souza Cascardo)
  - wifi: rtlwifi: fix init_sw_vars leak when probe fails (Thadeu Lima de Souza Cascardo)
  - wifi: rtlwifi: wait for firmware loading before releasing memory (Thadeu Lima de Souza Cascardo)
  - wifi: rtlwifi: rtl8192se: rise completion of firmware loading as last step (Thadeu Lima de Souza Cascardo)
  - wifi: rtlwifi: do not complete firmware loading needlessly (Thadeu Lima de Souza Cascardo)
  - ipmi: ipmb: Add check devm_kasprintf() returned value (Charles Han)
  - genirq: Make handle_enforce_irqctx() unconditionally available (Thomas Gleixner)
  - drm/amdgpu: Fix potential NULL pointer dereference in atomctrl_get_smc_sclk_range_table (Ivan Stepchenko)
  - HID: core: Fix assumption that Resolution Multipliers must be in Logical Collections (Alan Stern)
  - drm/etnaviv: Fix page property being used for non writecombine buffers (Sui Jingfeng)
  - sched/fair: Fix value reported by hot tasks pulled in /proc/schedstat (Peter Zijlstra)
  - sched/psi: Use task->psi_flags to clear in CPU migration (Chengming Zhou)
  - afs: Fix the fallback handling for the YFS.RemoveFile2 RPC call (David Howells)
  - select: Fix unbalanced user_access_end() (Christophe Leroy)
  - partitions: ldm: remove the initial kernel-doc notation (Randy Dunlap)
  - nvme: Add error check for xa_store in nvme_get_effects_log (Keisuke Nishimura)
  - pstore/blk: trivial typo fixes (Eugen Hristev)
  - nbd: don't allow reconnect after disconnect (Yu Kuai)
  - block: retry call probe after request_module in blk_request_module (Yang Erkun)
  - block: deprecate autoloading based on dev_t (Christoph Hellwig)
  - fs: fix proc_handler for sysctl_nr_open (Jinliang Zheng)
  - fs: move fs stat sysctls to file_table.c (Luis Chamberlain)
  - fs: move inode sysctls to its own file (Luis Chamberlain)
  - sysctl: share unsigned long const values (Luis Chamberlain)
  - sysctl: use const for typically used max/min proc sysctls (Xiaoming Ni)
  - hung_task: move hung_task sysctl interface to hung_task.c (Xiaoming Ni)
  - afs: Fix directory format encoding struct (David Howells)
  - afs: Fix EEXIST error returned from afs_rmdir() to be ENOTEMPTY (David Howells)
  - uek-rpm: switch to new secureboot certificates and upgrade shim (Samasth Norway Ananda)  [Orabug: 37764001]


author: Brian Maly <brian.maly@oracle.com> [5.15.0-309.179.1.el9uek]
changelog:
  - x86/microcode/AMD: Clean the cache if update did not load microcode (Boris Ostrovsky)  [Orabug: 37800728]
  - x86/microcode/AMD: Add finalize_late_load() microcode_op (Boris Ostrovsky)  [Orabug: 37800728]
  - x86/microcode/AMD: Extend the SHA check to Zen5, block loading of any unreleased standalone Zen5 microcode patches (Borislav Petkov (AMD))  [Orabug: 37800728]
  - x86/microcode/AMD: Add some forgotten models to the SHA check (Borislav Petkov (AMD))  [Orabug: 37800728]
  - x86/microcode/AMD: Load only SHA256-checksummed patches (Borislav Petkov (AMD))  [Orabug: 37800728]
  - x86/microcode/AMD: Flush patch buffer mapping after application (Borislav Petkov (AMD))  [Orabug: 37800728]
  - x86/microcode/AMD: Stash BSP's CPUID(1).EAX (Boris Ostrovsky)  [Orabug: 37800728]


author: Vijayendra Suman <vijayendra.suman@oracle.com> [5.15.0-309.180.2.el9uek]
changelog:
  - LTS version: v5.15.180 (Vijayendra Suman)
  - mmc: sdhci-brcmstb: Initialize base_clk to NULL in sdhci_brcmstb_probe() (Nathan Chancellor)
  - tracing: Do not use PERF enums when perf is not defined (Steven Rostedt)
  - mm, slab: remove duplicate kernel-doc comment for ksize() (Vlastimil Babka)
  - mmc: sdhci-brcmstb: use clk_get_rate(base_clk) in PM resume (Kamal Dasu)
  - NFSD: Skip sending CB_RECALL_ANY when the backchannel isn't up (Chuck Lever)
  - nfsd: put dl_stid if fail to queue dl_recall (Li Lingfeng)
  - jfs: add index corruption check to DT_GETPAGE() (Roman Smirnov)
  - ext4: fix OOB read when checking dotdot dir (Acs, Jakub)
  - ext4: don't over-report free space or inodes in statvfs (Theodore Ts'o)
  - tracing/osnoise: Fix possible recursive locking for cpus_read_lock() (Ran Xiaokai)
  - tracing: Fix synth event printk format for str fields (Douglas Raillard)
  - tracing: Ensure module defining synth event cannot be unloaded while tracing (Douglas Raillard)
  - tracing: Fix use-after-free in print_graph_function_flags during tracer switching (Tengda Wu)
  - mmc: sdhci-pxav3: set NEED_RSP_BUSY capability (Karel Balej)
  - ACPI: resource: Skip IRQ override on ASUS Vivobook 14 X1404VAP (Paul Menzel)
  - acpi: nfit: fix narrowing conversion in acpi_nfit_ctl (Murad Masimov)
  - x86/mm: Fix flush_tlb_range() when used for zapping normal PMDs (Jann Horn)
  - x86/tsc: Always save/restore TSC sched_clock() on suspend/resume (Guilherme G. Piccoli)
  - btrfs: handle errors from btrfs_dec_ref() properly (Josef Bacik)
  - ntb_perf: Delete duplicate dmaengine_unmap_put() call in perf_copy_chunk() (Markus Elfring)
  - platform/x86: ISST: Correct command storage data length (Srinivas Pandruvada)
  - drm/amd/display: Skip inactive planes within ModeSupportAndSystemConfiguration (Hersen Wu)
  - drm/amd/pm: Fix negative array index read (Jesse Zhang)
  - tty: serial: fsl_lpuart: disable transmitter before changing RS485 related registers (Sherry Sun)
  - tty: serial: fsl_lpuart: use UARTMODIR register bits for lpuart32 platform (Sherry Sun)
  - mmc: sdhci-brcmstb: add cqhci suspend/resume to PM ops (Kamal Dasu)
  - mmc: sdhci-brcmstb: Add ability to increase max clock rate for 72116b0 (Kamal Dasu)
  - can: flexcan: disable transceiver during system PM (Haibo Chen)
  - can: flexcan: only change CAN state when link up in system PM (Haibo Chen)
  - arcnet: Add NULL check in com20020pci_probe() (Henry Martin)
  - net: fix geneve_opt length integer overflow (Lin Ma)
  - ipv6: fix omitted netlink attributes when using RTEXT_FILTER_SKIP_STATS (Fernando Fernandez Mancera)
  - netfilter: nft_tunnel: fix geneve_opt type confusion addition (Lin Ma)
  - tunnels: Accept PACKET_HOST in skb_tunnel_check_pmtu(). (Guillaume Nault)
  - vsock: avoid timeout during connect() if the socket is closing (Stefano Garzarella)
  - net: mvpp2: Prevent parser TCAM memory corruption (Tobias Waldekranz)
  - net_sched: skbprio: Remove overly strict queue assertions (Cong Wang)
  - netlabel: Fix NULL pointer exception caused by CALIPSO on IPv4 sockets (Debin Zhu)
  - netfilter: nft_set_hash: GC reaps elements with conncount for dynamic sets only (Pablo Neira Ayuso)
  - ASoC: imx-card: Add NULL check in imx_card_probe() (Henry Martin)
  - ntb: intel: Fix using link status DB's (Nikita Shubin)
  - ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans (Yajun Deng)
  - riscv: ftrace: Add parentheses in macro definitions of make_call_t0 and make_call_ra (Juhan Jin)
  - spufs: fix a leak in spufs_create_context() (Al Viro)
  - spufs: fix a leak on spufs_new_file() failure (Al Viro)
  - hwmon: (nct6775-core) Fix out of bounds access for NCT679{8,9} (Tasos Sahanidis)
  - can: statistics: use atomic access in hot path (Oliver Hartkopp)
  - ALSA: hda/realtek: Add mute LED quirk for HP Pavilion x360 14-dy1xxx (Navon John Lukose)
  - drm/amd: Keep display off while going into S4 (Mario Limonciello)
  - x86/sgx: Warn explicitly if X86_FEATURE_SGX_LC is not enabled (Vladis Dronov)
  - locking/semaphore: Use wake_q to wake up processes outside lock critical section (Waiman Long)
  - sched/deadline: Use online cpus for validating runtime (Shrikanth Hegde)
  - ksmbd: fix incorrect validation for num_aces field of smb_acl (Namjae Jeon)
  - affs: don't write overlarge OFS data block size fields (Simon Tatham)
  - affs: generate OFS sequence numbers starting at 1 (Simon Tatham)
  - nvme-pci: skip CMB blocks incompatible with PCI P2P DMA (Icenowy Zheng)
  - nvme-pci: clean up CMBMSC when registering CMB fails (Icenowy Zheng)
  - nvme-tcp: fix possible UAF in nvme_tcp_poll (Sagi Grimberg)
  - wifi: iwlwifi: fw: allocate chained SG tables for dump (Johannes Berg)
  - sched/smt: Always inline sched_smt_active() (Josh Poimboeuf)
  - octeontx2-af: Fix mbox INTR handler when num VFs > 64 (Geetha sowjanya)
  - ACPI: processor: idle: Return an error if both P_LVL{2,3} idle states are invalid (Giovanni Gherdovich)
  - ring-buffer: Fix bytes_dropped calculation issue (Feng Yang)
  - ksmbd: use aead_request_free to match aead_request_alloc (Miaoqian Lin)
  - rtnetlink: Allocate vfinfo size for VF GUIDs when supported (Mark Zhang)
  - exfat: fix the infinite loop in exfat_find_last_cluster() (Yuezhang Mo)
  - objtool, media: dib8000: Prevent divide-by-zero in dib8000_set_dds() (Josh Poimboeuf)
  - fs/procfs: fix the comment above proc_pid_wchan() (Bart Van Assche)
  - perf python: Check if there is space to copy all the event (Arnaldo Carvalho de Melo)
  - perf python: Don't keep a raw_data pointer to consumed ring buffer space (Arnaldo Carvalho de Melo)
  - perf python: Decrement the refcount of just created event on failure (Arnaldo Carvalho de Melo)
  - perf python: Fixup description of sample.id event member (Arnaldo Carvalho de Melo)
  - i3c: master: svc: Fix missing the IBI rules (Stanley Chu)
  - fuse: fix dax truncate/punch_hole fault path (Alistair Popple)
  - NFSv4: Don't trigger uneccessary scans for return-on-close delegations (Trond Myklebust)
  - ocfs2: validate l_tree_depth to avoid out-of-bounds access (Vasiliy Kovalev)
  - kexec: initialize ELF lowest address to ULONG_MAX (Sourabh Jain)
  - perf units: Fix insufficient array space (Arnaldo Carvalho de Melo)
  - iio: adc: ad7124: Fix comparison of channel configs (Uwe Kleine-König)
  - fs/ntfs3: Fix a couple integer overflows on 32bit systems (Dan Carpenter)
  - iio: accel: mma8452: Ensure error return on failure to matching oversampling ratio (Jonathan Cameron)
  - coresight: catu: Fix number of pages while using 64k pages (Ilkka Koskinen)
  - soundwire: slave: fix an OF node reference leak in soundwire slave device (Joe Hattori)
  - isofs: fix KMSAN uninit-value bug in do_isofs_readdir() (Qasim Ijaz)
  - clk: qcom: mmcc-sdm660: fix stuck video_subcore0 clock (Barnabás Czémán)
  - crypto: hisilicon/sec2 - fix for aead auth key length (Wenkai Lin)
  - x86/dumpstack: Fix inaccurate unwinding from exception stacks due to misplaced assignment (Jann Horn)
  - mfd: sm501: Switch to BIT() to mitigate integer overflows (Nikita Zhandarovich)
  - RDMA/mlx5: Fix mlx5_poll_one() cur_qp update flow (Patrisious Haddad)
  - crypto: nx - Fix uninitialised hv_nxc on error (Herbert Xu)
  - power: supply: max77693: Fix wrong conversion of charge input threshold value (Artur Weber)
  - x86/entry: Fix ORC unwinder for PUSH_REGS with save_ret=1 (Jann Horn)
  - clk: amlogic: g12a: fix mmc A peripheral clock (Jerome Brunet)
  - clk: amlogic: gxbb: drop non existing 32k clock parent (Jerome Brunet)
  - clk: amlogic: g12b: fix cluster A parent data (Jerome Brunet)
  - pinctrl: tegra: Set SFIO mode to Mux Register (Prathamesh Shete)
  - IB/mad: Check available slots before posting receive WRs (Maher Sanalla)
  - remoteproc: qcom_q6v5_mss: Handle platforms with one power domain (Luca Weiss)
  - RDMA/core: Don't expose hw_counters outside of init net namespace (Roman Gushchin)
  - clk: rockchip: rk3328: fix wrong clk_ref_usb3otg parent (Peter Geis)
  - pinctrl: renesas: rzg2l: Fix missing of_node_put() call (Fabrizio Castro)
  - pinctrl: renesas: rza2: Fix missing of_node_put() call (Fabrizio Castro)
  - lib: 842: Improve error handling in sw842_compress() (Tanya Agarwal)
  - clk: qcom: gcc-msm8953: fix stuck venus0_core0 clock (Vladimir Lypak)
  - clk: samsung: Fix UBSAN panic in samsung_clk_init() (Will McVicker)
  - libbpf: Fix hypothetical STT_SECTION extern NULL deref case (Andrii Nakryiko)
  - remoteproc: qcom_q6v5_pas: Make single-PD handling more robust (Luca Weiss)
  - remoteproc: core: Clear table_sz when rproc_shutdown (Peng Fan)
  - crypto: hisilicon/sec2 - fix for aead authsize alignment (Wenkai Lin)
  - clk: amlogic: gxbb: drop incorrect flag on 32k clock (Jerome Brunet)
  - fbdev: sm501fb: Add some geometry checks. (Danila Chernetsov)
  - mdacon: rework dependency list (Arnd Bergmann)
  - fbdev: au1100fb: Move a variable assignment behind a null pointer check (Markus Elfring)
  - PCI: pciehp: Don't enable HPIE when resuming in poll mode (Ilpo Järvinen)
  - drm/mediatek: dsi: fix error codes in mtk_dsi_host_transfer() (Dan Carpenter)
  - PCI: xilinx-cpm: Fix IRQ domain leak in error path of probe (Thippeswamy Havalige)
  - PCI: Remove stray put_device() in pci_register_host_bridge() (Dan Carpenter)
  - drm/amd/display: fix type mismatch in CalculateDynamicMetadataParameters() (Vitaliy Shevtsov)
  - PCI: Avoid reset when disabled via sysfs (Nishanth Aravamudan)
  - PCI/portdrv: Only disable pciehp interrupts early when needed (Feng Tang)
  - PCI: brcmstb: Use internal register to change link capability (Jim Quinlan)
  - PCI: cadence-ep: Fix the driver to send MSG TLP for INTx without data payload (Hans Zhang)
  - PCI/ASPM: Fix link state exit during switch upstream function removal (Daniel Stodden)
  - drm/mediatek: mtk_hdmi: Fix typo for aud_sampe_size member (AngeloGioacchino Del Regno)
  - drm/mediatek: mtk_hdmi: Unregister audio platform device on failure (AngeloGioacchino Del Regno)
  - drm/vkms: Fix use after free and double free on init error (José Expósito)
  - drm: xlnx: zynqmp: Fix max dma segment size (Tomi Valkeinen)
  - drm/dp_mst: Fix drm RAD print (Wayne Lin)
  - drm/bridge: ti-sn65dsi86: Fix multiple instances (Geert Uytterhoeven)
  - ASoC: ti: j721e-evm: Fix clock configuration for ti,j7200-cpb-audio compatible (Jayesh Choudhary)
  - ALSA: hda/realtek: Always honor no_shutup_pins (Takashi Iwai)
  - HID: remove superfluous (and wrong) Makefile entry for CONFIG_INTEL_ISH_FIRMWARE_DOWNLOADER (Jiri Kosina)
  - media: platform: allgro-dvt: unregister v4l2_device on the error path (Joe Hattori)
  - perf/ring_buffer: Allow the EPOLLRDNORM flag for poll (Tao Chen)
  - lockdep: Don't disable interrupts on RT in disable_irq_nosync_lockdep.*() (Sebastian Andrzej Siewior)
  - PM: sleep: Fix handling devices with direct_complete set on errors (Rafael J. Wysocki)
  - thermal: int340x: Add NULL check for adev (Chenyuan Yang)
  - EDAC/ie31200: Fix the error path order of ie31200_init() (Qiuxu Zhuo)
  - EDAC/ie31200: Fix the DIMM size mask for several SoCs (Qiuxu Zhuo)
  - EDAC/ie31200: Fix the size of EDAC_MC_LAYER_CHIP_SELECT layer (Qiuxu Zhuo)
  - selinux: Chain up tool resolving errors in install_policy.sh (Tim Schumacher)
  - PM: sleep: Adjust check before setting power.must_resume (Rafael J. Wysocki)
  - x86/platform: Only allow CONFIG_EISA for 32-bit (Arnd Bergmann)
  - x86/fpu: Avoid copying dynamic FP state from init_task in arch_dup_task_struct() (Benjamin Berg)
  - cpufreq: governor: Fix negative 'idle_time' handling in dbs_update() (Jie Zhan)
  - cpufreq: scpi: compare kHz instead of Hz (zuoqian)
  - x86/mm/pat: cpa-test: fix length for CPA_ARRAY test (Mike Rapoport (Microsoft))
  - watch_queue: fix pipe accounting mismatch (Eric Sandeen)
  - media: i2c: et8ek8: Don't strip remove function when driver is builtin (Uwe Kleine-König)
  - memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove (Luo Qiu)
  - net: usb: qmi_wwan: add Telit Cinterion FE990B composition (Fabio Porcedda)
  - net: usb: qmi_wwan: add Telit Cinterion FN990B composition (Fabio Porcedda)
  - tty: serial: 8250: Add Brainboxes XC devices (Cameron Williams)
  - tty: serial: 8250: Add some more device IDs (Cameron Williams)
  - counter: microchip-tcb-capture: Fix undefined counter channel state on probe (William Breathitt Gray)
  - counter: stm32-lptimer-cnt: fix error handling when enabling (Fabrice Gasnier)
  - ALSA: hda/realtek: Support mute LED on HP Laptop 15s-du3xxx (Dhruv Deshpande)
  - netfilter: socket: Lookup orig tuple for IPv6 SNAT (Maxim Mikityanskiy)
  - ARM: Remove address checking for MMUless devices (Yanjun Yang)
  - ARM: 9351/1: fault: Add "cut here" line for prefetch aborts (Kees Cook)
  - ARM: 9350/1: fault: Implement copy_from_kernel_nofault_allowed() (Kees Cook)
  - atm: Fix NULL pointer dereference (Minjoong Kim)
  - HID: hid-plantronics: Add mic mute mapping and generalize quirks (Terry Junge)
  - ALSA: usb-audio: Add quirk for Plantronics headsets to fix control names (Terry Junge)
  - bpf, sockmap: Fix race between element replace and close() (Michal Luczaj)
  - Bluetooth: hci_event: Align BR/EDR JUST_WORKS paring with LE (Luiz Augusto von Dentz)   {CVE-2024-8805}
  - arm64: dts: rockchip: fix u2phy1_host status for NanoPi R4S (Justin Klaassen)
  - mptcp: Fix data stream corruption in the address announcement (Arthur Mongodin)
  - drm/amdgpu: Fix JPEG video caps max size for navi1x and raven (David Rosca)
  - drm/radeon: fix uninitialized size issue in radeon_vce_cs_parse() (Nikita Zhandarovich)
  - soc: qcom: pdr: Fix the potential deadlock (Saranya R)
  - batman-adv: Ignore own maximum aggregation size during RX (Sven Eckelmann)
  - ARM: shmobile: smp: Enforce shmobile_smp_* alignment (Geert Uytterhoeven)
  - proc: fix UAF in proc_get_inode() (Ye Bin)
  - mmc: atmel-mci: Add missing clk_disable_unprepare() (Gu Bowen)
  - regulator: check that dummy regulator has been probed before using it (Christian Eggers)
  - drm/v3d: Don't run jobs that have errors flagged in its fence (Maíra Canal)
  - i2c: omap: fix IRQ storms (Andreas Kemnade)
  - Revert "gre: Fix IPv6 link-local address generation." (Guillaume Nault)
  - net/neighbor: add missing policy for NDTPA_QUEUE_LENBYTES (Lin Ma)
  - net: atm: fix use after free in lec_send() (Dan Carpenter)
  - ipv6: Set errno after ip_fib_metrics_init() in ip6_route_info_create(). (Kuniyuki Iwashima)
  - ipv6: Fix memleak of nhc_pcpu_rth_output in fib_check_nh_v6_gw(). (Kuniyuki Iwashima)
  - Bluetooth: Fix error code in chan_alloc_skb_cb() (Dan Carpenter)
  - RDMA/hns: Fix wrong value of max_sge_rd (Junxian Huang)
  - RDMA/hns: Fix a missing rollback in error path of hns_roce_create_qp_common() (Junxian Huang)
  - RDMA/hns: Fix unmatched condition in error path of alloc_user_qp_db() (Junxian Huang)
  - RDMA/hns: Fix soft lockup during bt pages loop (Junxian Huang)
  - RDMA/hns: Remove redundant 'phy_addr' in hns_roce_hem_list_find_mtt() (Chengchang Tang)
  - RDMA/bnxt_re: Avoid clearing VLAN_ID mask in modify qp path (Saravanan Vajravel)
  - ARM: dts: bcm2711: Don't mark timer regs unconfigured (Phil Elwell)
  - RDMA/bnxt_re: Add missing paranthesis in map_qp_id_to_tbl_indx (Kashyap Desai)
  - ARM: dts: bcm2711: PL011 UARTs are actually r1p5 (Phil Elwell)
  - xfrm_output: Force software GSO only in tunnel mode (Cosmin Ratiu)
  - firmware: imx-scu: fix OF node leak in .probe() (Joe Hattori)
  - smb: client: fix potential UAF in cifs_debug_files_proc_show() (Paulo Alcantara)
  - smb: client: Fix match_session bug preventing session reuse (Henrique Carvalho)
  - drm/amd/display: Fix null check for pipe_ctx->plane_state in resource_build_scaling_params (Ma Ke)
  - drm/amd/display: Check for invalid input params when building scaling params (Michael Strauss)
  - i2c: sis630: Fix an error handling path in sis630_probe() (Christophe JAILLET)
  - i2c: ali15x3: Fix an error handling path in ali15x3_probe() (Christophe JAILLET)
  - i2c: ali1535: Fix an error handling path in ali1535_probe() (Christophe JAILLET)
  - cifs: Fix integer overflow while processing closetimeo mount option (Murad Masimov)
  - cifs: Fix integer overflow while processing actimeo mount option (Murad Masimov)
  - cifs: Fix integer overflow while processing acdirmax mount option (Murad Masimov)
  - cifs: Fix integer overflow while processing acregmax mount option (Murad Masimov)
  - ASoC: codecs: wm0010: Fix error handling path in wm0010_spi_probe() (Christophe JAILLET)
  - drm/gma500: Add NULL check for pci_gfx_root in mid_get_vbt_data() (Ivan Abramov)
  - ASoC: ops: Consistently treat platform_max as control value (Charles Keepax)
  - tcp: fix races in tcp_abort() (Eric Dumazet)
  - lib/buildid: Handle memfd_secret() files in build_id_parse() (Andrii Nakryiko)
  - qlcnic: fix memory leak issues in qlcnic_sriov_common.c (Haoxiang Li)
  - drm/amd/display: Fix slab-use-after-free on hdcp_work (Mario Limonciello)
  - drm/amd/display: Assign normalized_pix_clk when color depth = 14 (Alex Hung)
  - drm/amd/display: Restore correct backlight brightness after a GPU reset (Mario Limonciello)
  - drm/atomic: Filter out redundant DPMS calls (Ville Syrjälä)
  - x86/microcode/AMD: Fix out-of-bounds on systems with CPU-less NUMA nodes (Florent Revest)
  - USB: serial: option: match on interface class for Telit FN990B (Johan Hovold)
  - USB: serial: option: fix Telit Cinterion FE990A name (Fabio Porcedda)
  - USB: serial: option: add Telit Cinterion FE990B compositions (Fabio Porcedda)
  - USB: serial: ftdi_sio: add support for Altera USB Blaster 3 (Boon Khai Ng)
  - block: fix 'kmem_cache of name 'bio-108' already exists' (Ming Lei)
  - drm/nouveau: Do not override forced connector status (Thomas Zimmermann)
  - mptcp: safety check before fallback (Matthieu Baerts (NGI0))
  - x86/irq: Define trace events conditionally (Arnd Bergmann)
  - fuse: don't truncate cached, mutated symlink (Miklos Szeredi)
  - ASoC: tas2764: Set the SDOUT polarity correctly (Hector Martin)
  - ASoC: tas2764: Fix power control mask (Hector Martin)
  - ASoC: tas2770: Fix volume scale (Hector Martin)
  - nvme: only allow entering LIVE from CONNECTING state (Daniel Wagner)
  - sctp: Fix undefined behavior in left shift operation (Yu-Chun Lin)
  - nvmet-rdma: recheck queue state is LIVE in state lock in recv done (Ruozhu Li)
  - net: wwan: mhi_wwan_mbim: Silence sequence number glitch errors (Stephan Gerhold)
  - ASoC: SOF: Intel: hda: add softdep pre to snd-hda-codec-hdmi module (Terry Cheong)
  - ASoC: arizona/madera: use fsleep() in up/down DAPM event delays. (Vitaly Rodionov)
  - ASoC: rsnd: don't indicate warning on rsnd_kctrl_accept_runtime() (Kuninori Morimoto)
  - thermal/cpufreq_cooling: Remove structure member documentation (Daniel Lezcano)
  - s390/cio: Fix CHPID "configure" attribute caching (Peter Oberparleiter)
  - sched: Clarify wake_up_q()'s write to task->wake_q.next (Jann Horn)
  - HID: ignore non-functional sensor in HP 5MP Camera (Chia-Lin Kao (AceLan))
  - HID: intel-ish-hid: fix the length of MNG_SYNC_FW_CLOCK in doorbell (Zhang Lixu)
  - vboxsf: fix building with GCC 15 (Brahmajit Das)
  - alpha/elf: Fix misc/setarch test of util-linux by removing 32bit support (Eric W. Biederman)
  - ACPI: resource: IRQ override for Eluktronics MECH-17 (Gannon Kolding)
  - scsi: qla1280: Fix kernel oops when debug level > 2 (Magnus Lindholm)
  - scsi: core: Use GFP_NOIO to avoid circular locking dependency (Rik van Riel)
  - iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic() (Chengen Du)
  - powercap: call put_device() on an error path in powercap_register_control_type() (Joe Hattori)
  - hrtimers: Mark is_migration_base() with __always_inline (Andy Shevchenko)
  - nvme-fc: go straight to connecting state when initializing (Daniel Wagner)
  - net/mlx5e: Prevent bridge link show failure for non-eswitch-allowed devices (Carolina Jubran)
  - net/mlx5: Bridge, fix the crash caused by LAG state check (Jianbo Liu)
  - net: openvswitch: remove misbehaving actions length check (Ilya Maximets)
  - openvswitch: Use kmalloc_size_roundup() to match ksize() usage (Kees Cook)
  - slab: Introduce kmalloc_size_roundup() (Kees Cook)
  - gre: Fix IPv6 link-local address generation. (Guillaume Nault)
  - netfilter: nft_exthdr: fix offset with ipv4_find_option() (Alexey Kashavkin)
  - net_sched: Prevent creation of classes with TC_H_ROOT (Cong Wang)
  - ipvs: prevent integer overflow in do_ip_vs_get_ctl() (Dan Carpenter)
  - netfilter: nf_conncount: Fully initialize struct nf_conncount_tuple in insert_tree() (Kohei Enju)
  - net/mlx5: handle errors in mlx5_chains_create_table() (Wentao Liang)
  - Drivers: hv: vmbus: Don't release fb_mmio resource in vmbus_free_mmio() (Michael Kelley)
  - netpoll: hold rcu read lock in __netpoll_send_skb() (Breno Leitao)
  - net: dsa: mv88e6xxx: Verify after ATU Load ops (Joseph Huang)
  - ice: fix memory leak in aRFS after reset (Grzegorz Nitka)
  - netfilter: nft_ct: Use __refcount_inc() for per-CPU nft_ct_pcpu_template. (Sebastian Andrzej Siewior)
  - pinctrl: bcm281xx: Fix incorrect regmap max_registers value (Artur Weber)
  - fbdev: hyperv_fb: iounmap() the correct memory when removing a device (Michael Kelley)
  - ipv6: Fix signed integer overflow in __ip6_append_data (Wang Yufen)
  - sched/isolation: Prevent boot crash when the boot CPU is nohz_full (Oleg Nesterov)
  - clockevents/drivers/i8253: Fix stop sequence for timer 0 (David Woodhouse)
  - vlan: fix memory leak in vlan_newlink() (Eric Dumazet)


author: Brian Maly <brian.maly@oracle.com> [5.15.0-309.180.3.el9uek]
changelog:
  - net/mlx5: Reclaim max 50K pages at once (Anand Khoje)  [Orabug: 36933755]
  - x86/sev: Fix position dependent variable references in startup code (Ard Biesheuvel)  [Orabug: 37356711]
  - x86/PCI: Export find_cap() to be used in early PCI code (Rayan Dasoriya)  [Orabug: 37356711]
  - x86/quirks: Scan all busses for early PCI quirks (Rayan Dasoriya)  [Orabug: 37356711]
  - x86/quirks: Add parameter to clear MSIs early on boot (Rayan Dasoriya)  [Orabug: 37356711]
  - iommu/amd: Add map/unmap_pages() iommu_domain_ops callback support (Vasant Hegde)  [Orabug: 37356711]
  - iommu/amd/io-pgtable: Implement unmap_pages io_pgtable_ops callback (Vasant Hegde)  [Orabug: 37356711]
  - iommu/amd/io-pgtable: Implement map_pages io_pgtable_ops callback (Vasant Hegde)  [Orabug: 37356711]
  - iommu/amd: Use put_pages_list (Matthew Wilcox (Oracle))  [Orabug: 37356711]
  - x86/sev: Make enc_dec_hypercall() accept a size instead of npages (Steve Rutherford)  [Orabug: 37356711]
  - iommu/amd: Simplify pagetable freeing (Robin Murphy)  [Orabug: 37356711]
  - x86/kvm: Add kexec support for SEV Live Migration. (Ashish Kalra)  [Orabug: 37356711]
  - nfsd: allow layout state to be admin-revoked. (NeilBrown)  [Orabug: 37644985]
  - nfsd: allow delegation state ids to be revoked and then freed (NeilBrown)  [Orabug: 37644985]
  - nfsd: allow open state ids to be revoked and then freed (NeilBrown)  [Orabug: 37644985]
  - nfsd: allow lock state ids to be revoked and then freed (NeilBrown)  [Orabug: 37644985]
  - nfsd: allow admin-revoked NFSv4.0 state to be freed. (NeilBrown)  [Orabug: 37644985]
  - nfsd: report in /proc/fs/nfsd/clients/*/states when state is admin-revoke (NeilBrown)  [Orabug: 37644985]
  - nfsd: allow state with no file to appear in /proc/fs/nfsd/clients/*/states (NeilBrown)  [Orabug: 37644985]
  - nfsd: prepare for supporting admin-revocation of state (NeilBrown)  [Orabug: 37644985]
  - nfsd: split sc_status out of sc_type (NeilBrown)  [Orabug: 37644985]
  - nfsd: remove stale comment in nfs4_show_deleg() (NeilBrown)  [Orabug: 37644985]
  - nfsd: avoid race after unhash_delegation_locked() (NeilBrown)  [Orabug: 37644985]
  - nfsd: don't call functions with side-effecting inside WARN_ON() (NeilBrown)  [Orabug: 37644985]
  - NFSD: Add nfsd_seq4_status trace event (Chuck Lever)  [Orabug: 37644985]
  - NFSD: Clean up nfsd4_encode_layoutreturn() (Chuck Lever)  [Orabug: 37644985]
  - NFSD: Make @lgp parameter of ->encode_layoutget a const pointer (Chuck Lever)  [Orabug: 37644985]
  - NFSD: Clean up nfsd4_encode_stateid() (Chuck Lever)  [Orabug: 37644985]
  - NFSD: Add simple u32, u64, and bool encoders (Chuck Lever)  [Orabug: 37644985]
  - NFSD: Add encoders for NFSv4 clientids and verifiers (Chuck Lever)  [Orabug: 37644985]
  - nfsd: add some kerneldoc comments for stateid preprocessing functions (Jeff Layton)  [Orabug: 37644985]
  - nfsd: eliminate find_deleg_file_locked (Jeff Layton)  [Orabug: 37644985]
  - nfsd: fix potential race in nfs4_find_file (Jeff Layton)  [Orabug: 37644985]
  - vhost-scsi: Fix vhost_scsi_send_status() (Dongli Zhang)  [Orabug: 37840544]
  - vhost-scsi: Fix vhost_scsi_send_bad_target() (Dongli Zhang)  [Orabug: 37840544]
  - vhost-scsi: protect vq->log_used with vq->mutex (Dongli Zhang)  [Orabug: 37840544]
  - vhost-scsi: Reduce response iov mem use (Mike Christie)  [Orabug: 37840544]
  - vhost-scsi: Allocate iov_iter used for unaligned copies when needed (Mike Christie)  [Orabug: 37840544]
  - vhost-scsi: Stop duplicating se_cmd fields (Mike Christie)  [Orabug: 37840544]
  - vhost-scsi: Dynamically allocate scatterlists (Mike Christie)  [Orabug: 37840544]
  - vhost-scsi: Return queue full for page alloc failures during copy (Mike Christie)  [Orabug: 37840544]
  - vhost-scsi: Add better resource allocation failure handling (Mike Christie)  [Orabug: 37840544]
  - vhost-scsi: Allocate T10 PI structs only when enabled (Mike Christie)  [Orabug: 37840544]
  - vhost-scsi: Reduce mem use by moving upages to per queue (Mike Christie)  [Orabug: 37840544]
  - scsi: target: core: Use RCU helpers for INQUIRY t10_alua_tg_pt_gp (Mike Christie)  [Orabug: 37840544]
  - scsi: target: Perform ALUA group changes in one step (Mike Christie)  [Orabug: 37840544]
  - scsi: target: Replace lun_tg_pt_gp_lock with rcu in I/O path (Mike Christie)  [Orabug: 37840544]
  - scsi: target: Fix write perf due to unneeded throttling (Mike Christie)  [Orabug: 37840544]
  - vhost scsi: Allow user to control num virtqueues (Mike Christie)  [Orabug: 37840544]
  - vhost-scsi: Rename vhost_scsi_iov_to_sgl (Mike Christie)  [Orabug: 37840544]
  - vhost-scsi: unbreak any layout for response (Jason Wang)  [Orabug: 37840544]
  - Revert "vhost-scsi: protect vq->log_base with vq->mutex" (Mike Christie)  [Orabug: 37840544]
  - Revert "vhost_scsi: log write descriptors" (Mike Christie)  [Orabug: 37840544]
  - x86/bugs: Enabling Retbleed and SRSO mitigation can taint the kernel (Alexandre Chartre)  [Orabug: 37945824]
  - x86/bhi: Do not set BHI_DIS_S in 32-bit mode (Pawan Gupta)  [Orabug: 37945831]
  - x86/bpf: Add IBHF call at end of classic BPF (Daniel Sneddon)  [Orabug: 37945831]
  - x86/bpf: Call branch history clearing sequence on exit (Daniel Sneddon)  [Orabug: 37945831]
  - selftest/x86/bugs: Add selftests for ITS (Pawan Gupta)  [Orabug: 37945842]  {CVE-2024-28956}
  - x86/its: Align RETs in BHB clear sequence to avoid thunking (Pawan Gupta)  [Orabug: 37945842]  {CVE-2024-28956}
  - x86/its: Add "vmexit" option to skip mitigation on some CPUs (Pawan Gupta)  [Orabug: 37945842]  {CVE-2024-28956}
  - x86/its: Enable Indirect Target Selection mitigation (Pawan Gupta)  [Orabug: 37945842]  {CVE-2024-28956}
  - x86/its: Add support for ITS-safe return thunk (Pawan Gupta)  [Orabug: 37945842]  {CVE-2024-28956}
  - x86/its: Add support for ITS-safe indirect thunk (Pawan Gupta)  [Orabug: 37945842]  {CVE-2024-28956}
  - x86/its: Enumerate Indirect Target Selection (ITS) bug (Pawan Gupta)  [Orabug: 37945842]  {CVE-2024-28956}
  - Documentation: x86/bugs/its: Add ITS documentation (Pawan Gupta)  [Orabug: 37945842]  {CVE-2024-28956}
  - x86/alternatives: Remove faulty optimization (Josh Poimboeuf)  [Orabug: 37945842]  {CVE-2024-28956}
  - x86/alternative: Optimize returns patching (Borislav Petkov (AMD))  [Orabug: 37945842]  {CVE-2024-28956}


author: Vijayendra Suman <vijayendra.suman@oracle.com> [5.15.0-309.180.4.el9uek]
changelog:
  - nvme: unblock ctrl state transition for firmware update (Daniel Wagner)
  - nfsd: decrease sc_count directly if fail to queue dl_recall (Li Lingfeng)
  - cpufreq/sched: Fix the usage of CPUFREQ_NEED_UPDATE_LIMITS (Rafael J. Wysocki)
  - ice: Check VF VSI Pointer Value in ice_vc_add_fdir_fltr() (Xuanqiang Luo)
  - usb: chipidea: ci_hdrc_imx: fix usbmisc handling (Fedor Pchelkin)
  - Revert "PCI: Avoid reset when disabled via sysfs" (Alex Williamson)
  - uek-rpm: CONFIG_PTP_1588_CLOCK_OCP enable for OCI (Vijayendra Suman)  [Orabug: 37777354]
  - ptp: ocp: let ptp core report driver name instead of the drivers (Vijayendra Suman)  [Orabug: 37777354]
  - ptp: ocp: Add .getmaxphase ptp_clock_info callback (Rahul Rameshbabu)  [Orabug: 37777354]
  - ptp: ocp: remove flash image header check fallback (Vadim Fedorenko)  [Orabug: 37777354]
  - ptp: ocp: expose config and temperature for ART card (Vadim Fedorenko)  [Orabug: 37777354]
  - ptp: ocp: add serial port of mRO50 MAC on ART card (Vadim Fedorenko)  [Orabug: 37777354]
  - ptp: ocp: add Orolia timecard support (Vadim Fedorenko)  [Orabug: 37777354]
  - ptp: ocp: upgrade serial line information (Vadim Fedorenko)  [Orabug: 37777354]
  - ] ptp: ocp: remove symlink for second GNSS (Vadim Fedorenko)  [Orabug: 37777354]
  - ptp_ocp: use device_find_any_child() instead of custom approach (Andy Shevchenko)  [Orabug: 37777354]
  - ptp_ocp: replace kzalloc(x*y) by kcalloc(y, x) (Andy Shevchenko)  [Orabug: 37777354]
  - ptp_ocp: do not call pci_set_drvdata(pdev, NULL) (Andy Shevchenko)  [Orabug: 37777354]
  - ptp_ocp: drop duplicate NULL check in ptp_ocp_detach() (Andy Shevchenko)  [Orabug: 37777354]
  - ptp_ocp: use bits.h macros for all masks (Andy Shevchenko)  [Orabug: 37777354]
  - ptp: ocp: Add firmware header checks (Vadim Fedorenko)  [Orabug: 37777354]
  - ptp: ocp: fix PPS source selector debugfs reporting (Jonathan Lemon)  [Orabug: 37777354]
  - ptp: ocp: add .init function for sma_op vector (Jonathan Lemon)  [Orabug: 37777354]
  - ptp: ocp: vectorize the sma accessor functions (Jonathan Lemon)  [Orabug: 37777354]
  - ptp: ocp: constify selectors (Jonathan Lemon)  [Orabug: 37777354]
  - ptp: ocp: parameterize input/output sma selectors (Jonathan Lemon)  [Orabug: 37777354]
  - ptp: ocp: revise firmware display (Jonathan Lemon)  [Orabug: 37777354]
  - ptp: ocp: add Celestica timecard PCI ids (Vadim Fedorenko)  [Orabug: 37777354]
  - ptp: ocp: Remove #ifdefs around PCI IDs (Jonathan Lemon)  [Orabug: 37777354]
  - ptp: ocp: 32-bit fixups for pci start address (Jonathan Lemon)  [Orabug: 37777354]
  - ptp: ocp: change sysfs attr group handling (Jonathan Lemon)  [Orabug: 37777354]
  - ptp: ocp: have adjtime handle negative delta_ns correctly (Jonathan Lemon)  [Orabug: 37777354]
  - ptp: ocp: Use DIV64_U64_ROUND_UP for rounding. (Jonathan Lemon)  [Orabug: 37777354]
  - ptp: ocp: handle error from nvmem_device_find (Jonathan Lemon)  [Orabug: 37777354]
  - ptp: ocp: use snprintf() in ptp_ocp_verify() (Dan Carpenter)  [Orabug: 37777354]
  - ptp: ocp: Make debugfs variables the correct bitwidth (Jonathan Lemon)  [Orabug: 37777354]
  - ptp: ocp: Fix PTP_PF_* verification requests (Jonathan Lemon)  [Orabug: 37777354]
  - ptp: ocp: Add 2 more timestampers (Jonathan Lemon)  [Orabug: 37777354]
  - ptp: ocp: Add 4 frequency counters (Jonathan Lemon)  [Orabug: 37777354]
  - ptp: ocp: Program the signal generators via PTP_CLK_REQ_PEROUT (Jonathan Lemon)  [Orabug: 37777354]
  - ptp: ocp: Add signal generators and update sysfs nodes (Jonathan Lemon)  [Orabug: 37777354]
  - ptp: ocp: Add firmware capability bits for feature gating (Jonathan Lemon)  [Orabug: 37777354]
  - ptp: ocp: Add GND and VCC output selectors (Jonathan Lemon)  [Orabug: 37777354]
  - ptp: ocp: Rename output selector 'GNSS' to 'GNSS1' (Jonathan Lemon)  [Orabug: 37777354]
  - ptp: ocp: Add ability to disable input selectors. (Jonathan Lemon)  [Orabug: 37777354]
  - ptp: ocp: Add support for selectable SMA directions. (Jonathan Lemon)  [Orabug: 37777354]
  - ptp: ocp: add UPF_NO_THRE_TEST flag for serial ports (Jonathan Lemon)  [Orabug: 37777354]
  - ptp: ocp: Update devlink firmware display path. (Jonathan Lemon)  [Orabug: 37777354]
  - ptp: ocp: add nvmem interface for accessing eeprom (Jonathan Lemon)  [Orabug: 37777354]
  - ptp: ocp: correct label for error path (Jonathan Lemon)  [Orabug: 37777354]
  - ptp: ocp: off by in in ptp_ocp_tod_gnss_name() (Dan Carpenter)  [Orabug: 37777354]
  - ptp: ocp: Add serial port information to the debug summary (Jonathan Lemon)  [Orabug: 37777354]
  - ptp: ocp: adjust utc_tai_offset to TOD info (Vadim Fedorenko)  [Orabug: 37777354]
  - ptp: ocp: add tod_correction attribute (Vadim Fedorenko)  [Orabug: 37777354]
  - ptp: ocp: Expose clock status drift and offset (Vadim Fedorenko)  [Orabug: 37777354]
  - ptp: ocp: add TOD debug information (Vadim Fedorenko)  [Orabug: 37777354]
  - ptp: ocp: Add ptp_ocp_adjtime_coarse for large adjustments (Jonathan Lemon)  [Orabug: 37777354]
  - ptp: ocp: Move devlink registration to be last devlink command (Leon Romanovsky)  [Orabug: 37777354]
  - ptp: ocp: Avoid operator precedence warning in ptp_ocp_summary_show() (Nathan Chancellor)  [Orabug: 37777354]
  - ptp: ocp: Add timestamp window adjustment (Jonathan Lemon)  [Orabug: 37777354]
  - ptp: ocp: Have FPGA fold in ns adjustment for adjtime. (Jonathan Lemon)  [Orabug: 37777354]
  - ptp: ocp: Enable 4th timestamper / PPS generator (Jonathan Lemon)  [Orabug: 37777354]
  - ptp: ocp: Add second GNSS device (Jonathan Lemon)  [Orabug: 37777354]
  - ptp: ocp: Add NMEA output (Jonathan Lemon)  [Orabug: 37777354]
  - ptp: ocp: Add debugfs entry for timecard (Jonathan Lemon)  [Orabug: 37777354]
  - ptp: ocp: Separate the init and info logic (Jonathan Lemon)  [Orabug: 37777354]
  - ptp: ocp: Add sysfs attribute utc_tai_offset (Jonathan Lemon)  [Orabug: 37777354]
  - ptp: ocp: Add IRIG-B output mode control (Jonathan Lemon)  [Orabug: 37777354]
  - ptp: ocp: Add IRIG-B and DCF blocks (Jonathan Lemon)  [Orabug: 37777354]
  - ptp: ocp: Add SMA selector and controls (Jonathan Lemon)  [Orabug: 37777354]
  - ptp: ocp: Add third timestamper (Jonathan Lemon)  [Orabug: 37777354]
  - ptp: ocp: Report error if resource registration fails. (Jonathan Lemon)  [Orabug: 37777354]
  - ptp: ocp: Skip resources with out of range irqs (Jonathan Lemon)  [Orabug: 37777354]
  - ptp: ocp: Skip I2C flash read when there is no controller. (Jonathan Lemon)  [Orabug: 37777354]
  - ptp: ocp: Parameterize the TOD information display. (Jonathan Lemon)  [Orabug: 37777354]
  - ptp: ocp: parameterize the i2c driver used (Jonathan Lemon)  [Orabug: 37777354]
  - vhost-scsi: log event queue write descriptors (Dongli Zhang)  [Orabug: 37884058]
  - vhost-scsi: log control queue write descriptors (Dongli Zhang)  [Orabug: 37884058]
  - vhost-scsi: log I/O queue write descriptors (Dongli Zhang)  [Orabug: 37884058]
  - vhost-scsi: adjust vhost_scsi_get_desc() to log vring descriptors (Dongli Zhang)  [Orabug: 37884058]
  - vhost: modify vhost_log_write() for broader users (Dongli Zhang)  [Orabug: 37884058]
  - mm: make page_mapped_in_vma() hugetlb walk aware (Jane Chu)  [Orabug: 37956589]
  - mm/rmap: Fix handling of hugetlbfs pages in page_vma_mapped_walk (zhenwei pi)  [Orabug: 37956589]
  - ext4: update the backup superblock's at the end of the online resize (Theodore Ts'o)  [Orabug: 37356729]
  - gve: ignore nonrelevant GSO type bits when processing TSO headers (Joshua Washington)  [Orabug: 37356729]
  - gve: update gve.rst (Rushil Gupta)  [Orabug: 37356729]
  - gve: RX path for DQO-QPL (Rushil Gupta)  [Orabug: 37356729]
  - gve: Tx path for DQO-QPL (Rushil Gupta)  [Orabug: 37356729]
  - gve: Control path for DQO-QPL (Rushil Gupta)  [Orabug: 37356729]
  - gve: Fix gve interrupt names (Praveen Kaligineedi)  [Orabug: 37356729]
  - gve: Handle alternate miss completions (Jeroen de Borst)  [Orabug: 37356729]
  - gve: Adding a new AdminQ command to verify driver (Jeroen de Borst)  [Orabug: 37356729]
  - gve: Fix error return code in gve_prefill_rx_pages() (Yang Yingliang)  [Orabug: 37356729]
  - gve: Reduce alloc and copy costs in the GQ rx path (Shailend Chand)  [Orabug: 37356729]
  - google/gve:fix repeated words in comments (Jilin Yuan)  [Orabug: 37356729]
  - gve: Fix spelling mistake "droping" -> "dropping" (Colin Ian King)  [Orabug: 37356729]
  - gve: enhance no queue page list detection (Haiyue Wang)  [Orabug: 37356729]
  - gve: Recording rx queue before sending to napi (Tao Liu)  [Orabug: 37356729]
  - ext4: add ioctls to get/set the ext4 superblock uuid (Jeremy Bongio)  [Orabug: 37356729]
  - ext4: implement support for get/set fs label (Lukas Czerner)  [Orabug: 37356729]
  - gve: Add tx|rx-coalesce-usec for DQO (Tao Liu)  [Orabug: 37356729]
  - gve: Add consumed counts to ethtool stats (Jordan Kim)  [Orabug: 37356729]
  - gve: Implement suspend/resume/shutdown (Catherine Sullivan)  [Orabug: 37356729]
  - gve: Add optional metadata descriptor type GVE_TXD_MTD (Willem de Bruijn)  [Orabug: 37356729]
  - gve: remove memory barrier around seqno (Catherine Sullivan)  [Orabug: 37356729]
  - gve: Update gve_free_queue_page_list signature (Catherine Sullivan)  [Orabug: 37356729]
  - gve: Move the irq db indexes out of the ntfy block struct (Catherine Sullivan)  [Orabug: 37356729]
  - gve: Correct order of processing device options (Jeroen de Borst)  [Orabug: 37356729]
  - gve: fix for null pointer dereference. (Ameer Hamza)  [Orabug: 37356729]
  - gve: fix unmatched u64_stats_update_end() (Dan Carpenter)  [Orabug: 37356729]
  - gve: Add a jumbo-frame device option. (Shailend Chand)  [Orabug: 37356729]
  - gve: Implement packet continuation for RX. (David Awogbemila)  [Orabug: 37356729]
  - gve: Allow pageflips on larger pages (Jordan Kim)  [Orabug: 37356729]
  - gve: Add netif_set_xps_queue call (Catherine Sullivan)  [Orabug: 37356729]
  - gve: Do lazy cleanup in TX path (Tao Liu)  [Orabug: 37356729]
  - gve: Add rx buffer pagecnt bias (Catherine Sullivan)  [Orabug: 37356729]
  - gve: Switch to use napi_complete_done (Yangchun Fu)  [Orabug: 37356729]
  - gve: Use kvcalloc() instead of kvzalloc() (Gustavo A. R. Silva)  [Orabug: 37356729]
  - selftests/net: optmem_max became per netns (Eric Dumazet)  [Orabug: 37356732]
  - tcp: derive delack_max with tcp_rto_min helper (Kevin Yang)  [Orabug: 37356732]
  - tcp: derive delack_max from rto_min (Eric Dumazet)  [Orabug: 37356732]
  - tcp: add sysctl_tcp_rto_min_us (Kevin Yang)  [Orabug: 37356732]
  - tcp: constify tcp_rto_min() and tcp_rto_min_us() argument (Eric Dumazet)  [Orabug: 37356732]
  - net: constify sk_dst_get() and __sk_dst_get() argument (Eric Dumazet)  [Orabug: 37356732]
  - net: Namespace-ify sysctl_optmem_max (Eric Dumazet)  [Orabug: 37356732]
  - net: increase optmem_max default value (Eric Dumazet)  [Orabug: 37356732]
  - net: phy: dp83867: Fix SGMII FIFO depth for non OF devices (Michael Sit Wei Hong)  [Orabug: 37670821]
  - net: phy: dp83867: fix get nvmem cell fail (Nikita Shubin)  [Orabug: 37670821]
  - net: phy: dp83867: implement support for io_impedance_ctrl nvmem cell (Rasmus Villemoes)  [Orabug: 37670821]
  - net: phy: constify netdev->dev_addr references (Jakub Kicinski)  [Orabug: 37670821]
  - net: phy: dp83867: introduce critical chip default init for non-of platform (Lay, Kuan Loon)  [Orabug: 37670821]
  - RDS: use pin_user_pages_fast() (Stephen Brennan)  [Orabug: 37872748]
  - uek-rpm: Reduce the size of the Bluefield 3 kernel (Henry Willard)  [Orabug: 37910874]
  - uek-rpm: Make sure dtb directory exists for emb3. (Henry Willard)  [Orabug: 37910874]
  - uek-rpm: Move the gve kernel module from extra to kernel-uek-core (Samasth Norway Ananda)  [Orabug: 37940898]
  - platform/mellanox: mlxbf-pmc: Support additional PMC blocks (Shravan Kumar Ramani)  [Orabug: 37955981]
  - mlxbf-bootctl: use sysfs_emit_at() in secure_boot_fuse_state_show() (David Thompson)  [Orabug: 37955981]
  - mlxbf-bootctl: Support sysfs entries for RTC battery status (Xiangrong Li)  [Orabug: 37955981]
  - platform/mellanox: mlxbf-bootctl: use sysfs_emit() instead of sprintf() (Ai Chao)  [Orabug: 37955981]
  - drivers/platform/mellanox: Convert snprintf to sysfs_emit (Li Zhijian)  [Orabug: 37955981]
  - certs: Add new Oracle Linux Driver Signing (key 1) certificate (Sherry Yang)  [Orabug: 37967553]


author: Jack Vogel <jack.vogel@oracle.com> [5.15.0-309.180.4.2.el9uek]
changelog:
  - Add Zen34 clients (Borislav Petkov (AMD))  [Orabug: 38129825]  {CVE-2024-36350} {CVE-2024-36357} 
  - x86/process: Move the buffer clearing before MONITOR (Kim Phillips)  [Orabug: 38129825]  {CVE-2024-36350} {CVE-2024-36357} 
  - Add normal counters (Borislav Petkov (AMD))  [Orabug: 38129825]  {CVE-2024-36350} {CVE-2024-36357} 
  - KVM: SVM: Advertize TSA CPUID bits to guests (Borislav Petkov (AMD))  [Orabug: 38129825]  {CVE-2024-36350} {CVE-2024-36357} 
  - x86/bugs: Add a Transient Scheduler Attacks mitigation (Borislav Petkov (AMD))  [Orabug: 38129825]  {CVE-2024-36350} {CVE-2024-36357} 
  - x86/bugs: Rename MDS machinery to something more generic (Borislav Petkov (AMD))  [Orabug: 38129825]  {CVE-2024-36350} {CVE-2024-36357} 
  - x86/CPU/AMD: Add ZenX generations flags (Borislav Petkov (AMD))  [Orabug: 38129825]  {CVE-2024-36350} {CVE-2024-36357} 
  - x86/bugs: Free X86_BUG_AMD_APIC_C1E and X86_BUG_AMD_E400 bits (Boris Ostrovsky)  [Orabug: 38129825]  {CVE-2024-36350} {CVE-2024-36357}


author: Vijayendra Suman <vijayendra.suman@oracle.com> [5.15.0-308.178.1.el9uek]
changelog:
  - perf dso: fix dso__is_kallsyms() check (Stephen Brennan)  [Orabug: 37709864]
  - scsi: storvsc: Set correct data length for sending SCSI command without payload (Long Li)  [Orabug: 37681137]
  - dyndbg: export ddebug_add_module/ddebug_remove_module (Julian Pidancet)  [Orabug: 37629344]
  - kallsyms: add module_kallsyms_on_each_symbol_locked (Julian Pidancet)  [Orabug: 37629344]
  - kallsyms: export module_kallsyms_on_each_symbol (Julian Pidancet)  [Orabug: 37629344]
  - rds: ib: Make traffic_class visible to user-space (Håkon Bugge)  [Orabug: 37350892]
  - rds: ib: Remove incorrect update of the path record sl and qos_class fields (Håkon Bugge)  [Orabug: 37350892]
  - selftest/vm: Add -O2 in CFLAGS to Makefile to avoid possible failure (Yifei Liu)  [Orabug: 37197150]


author: Vijayendra Suman <vijayendra.suman@oracle.com> [5.15.0-309.180.4.el9uek]
changelog:
  - nvme: unblock ctrl state transition for firmware update (Daniel Wagner)   
  - nfsd: decrease sc_count directly if fail to queue dl_recall (Li Lingfeng)   
  - cpufreq/sched: Fix the usage of CPUFREQ_NEED_UPDATE_LIMITS (Rafael J. Wysocki)   
  - ice: Check VF VSI Pointer Value in ice_vc_add_fdir_fltr() (Xuanqiang Luo)   
  - usb: chipidea: ci_hdrc_imx: fix usbmisc handling (Fedor Pchelkin)   
  - Revert "PCI: Avoid reset when disabled via sysfs" (Alex Williamson)   
  - uek-rpm: CONFIG_PTP_1588_CLOCK_OCP enable for OCI (Vijayendra Suman)  [Orabug: 37777354]  
  - ptp: ocp: let ptp core report driver name instead of the drivers (Vijayendra Suman)  [Orabug: 37777354]  
  - ptp: ocp: Add .getmaxphase ptp_clock_info callback (Rahul Rameshbabu)  [Orabug: 37777354]  
  - ptp: ocp: remove flash image header check fallback (Vadim Fedorenko)  [Orabug: 37777354]  
  - ptp: ocp: expose config and temperature for ART card (Vadim Fedorenko)  [Orabug: 37777354]  
  - ptp: ocp: add serial port of mRO50 MAC on ART card (Vadim Fedorenko)  [Orabug: 37777354]  
  - ptp: ocp: add Orolia timecard support (Vadim Fedorenko)  [Orabug: 37777354]  
  - ptp: ocp: upgrade serial line information (Vadim Fedorenko)  [Orabug: 37777354]  
  - ] ptp: ocp: remove symlink for second GNSS (Vadim Fedorenko)  [Orabug: 37777354]  
  - ptp_ocp: use device_find_any_child() instead of custom approach (Andy Shevchenko)  [Orabug: 37777354]  
  - ptp_ocp: replace kzalloc(x*y) by kcalloc(y, x) (Andy Shevchenko)  [Orabug: 37777354]  
  - ptp_ocp: do not call pci_set_drvdata(pdev, NULL) (Andy Shevchenko)  [Orabug: 37777354]  
  - ptp_ocp: drop duplicate NULL check in ptp_ocp_detach() (Andy Shevchenko)  [Orabug: 37777354]  
  - ptp_ocp: use bits.h macros for all masks (Andy Shevchenko)  [Orabug: 37777354]  
  - ptp: ocp: Add firmware header checks (Vadim Fedorenko)  [Orabug: 37777354]  
  - ptp: ocp: fix PPS source selector debugfs reporting (Jonathan Lemon)  [Orabug: 37777354]  
  - ptp: ocp: add .init function for sma_op vector (Jonathan Lemon)  [Orabug: 37777354]  
  - ptp: ocp: vectorize the sma accessor functions (Jonathan Lemon)  [Orabug: 37777354]  
  - ptp: ocp: constify selectors (Jonathan Lemon)  [Orabug: 37777354]  
  - ptp: ocp: parameterize input/output sma selectors (Jonathan Lemon)  [Orabug: 37777354]  
  - ptp: ocp: revise firmware display (Jonathan Lemon)  [Orabug: 37777354]  
  - ptp: ocp: add Celestica timecard PCI ids (Vadim Fedorenko)  [Orabug: 37777354]  
  - ptp: ocp: Remove #ifdefs around PCI IDs (Jonathan Lemon)  [Orabug: 37777354]  
  - ptp: ocp: 32-bit fixups for pci start address (Jonathan Lemon)  [Orabug: 37777354]  
  - ptp: ocp: change sysfs attr group handling (Jonathan Lemon)  [Orabug: 37777354]  
  - ptp: ocp: have adjtime handle negative delta_ns correctly (Jonathan Lemon)  [Orabug: 37777354]  
  - ptp: ocp: Use DIV64_U64_ROUND_UP for rounding. (Jonathan Lemon)  [Orabug: 37777354]  
  - ptp: ocp: handle error from nvmem_device_find (Jonathan Lemon)  [Orabug: 37777354]  
  - ptp: ocp: use snprintf() in ptp_ocp_verify() (Dan Carpenter)  [Orabug: 37777354]  
  - ptp: ocp: Make debugfs variables the correct bitwidth (Jonathan Lemon)  [Orabug: 37777354]  
  - ptp: ocp: Fix PTP_PF_* verification requests (Jonathan Lemon)  [Orabug: 37777354]  
  - ptp: ocp: Add 2 more timestampers (Jonathan Lemon)  [Orabug: 37777354]  
  - ptp: ocp: Add 4 frequency counters (Jonathan Lemon)  [Orabug: 37777354]  
  - ptp: ocp: Program the signal generators via PTP_CLK_REQ_PEROUT (Jonathan Lemon)  [Orabug: 37777354]  
  - ptp: ocp: Add signal generators and update sysfs nodes (Jonathan Lemon)  [Orabug: 37777354]  
  - ptp: ocp: Add firmware capability bits for feature gating (Jonathan Lemon)  [Orabug: 37777354]  
  - ptp: ocp: Add GND and VCC output selectors (Jonathan Lemon)  [Orabug: 37777354]  
  - ptp: ocp: Rename output selector 'GNSS' to 'GNSS1' (Jonathan Lemon)  [Orabug: 37777354]  
  - ptp: ocp: Add ability to disable input selectors. (Jonathan Lemon)  [Orabug: 37777354]  
  - ptp: ocp: Add support for selectable SMA directions. (Jonathan Lemon)  [Orabug: 37777354]  
  - ptp: ocp: add UPF_NO_THRE_TEST flag for serial ports (Jonathan Lemon)  [Orabug: 37777354]  
  - ptp: ocp: Update devlink firmware display path. (Jonathan Lemon)  [Orabug: 37777354]  
  - ptp: ocp: add nvmem interface for accessing eeprom (Jonathan Lemon)  [Orabug: 37777354]  
  - ptp: ocp: correct label for error path (Jonathan Lemon)  [Orabug: 37777354]  
  - ptp: ocp: off by in in ptp_ocp_tod_gnss_name() (Dan Carpenter)  [Orabug: 37777354]  
  - ptp: ocp: Add serial port information to the debug summary (Jonathan Lemon)  [Orabug: 37777354]  
  - ptp: ocp: adjust utc_tai_offset to TOD info (Vadim Fedorenko)  [Orabug: 37777354]  
  - ptp: ocp: add tod_correction attribute (Vadim Fedorenko)  [Orabug: 37777354]  
  - ptp: ocp: Expose clock status drift and offset (Vadim Fedorenko)  [Orabug: 37777354]  
  - ptp: ocp: add TOD debug information (Vadim Fedorenko)  [Orabug: 37777354]  
  - ptp: ocp: Add ptp_ocp_adjtime_coarse for large adjustments (Jonathan Lemon)  [Orabug: 37777354]  
  - ptp: ocp: Move devlink registration to be last devlink command (Leon Romanovsky)  [Orabug: 37777354]  
  - ptp: ocp: Avoid operator precedence warning in ptp_ocp_summary_show() (Nathan Chancellor)  [Orabug: 37777354]  
  - ptp: ocp: Add timestamp window adjustment (Jonathan Lemon)  [Orabug: 37777354]  
  - ptp: ocp: Have FPGA fold in ns adjustment for adjtime. (Jonathan Lemon)  [Orabug: 37777354]  
  - ptp: ocp: Enable 4th timestamper / PPS generator (Jonathan Lemon)  [Orabug: 37777354]  
  - ptp: ocp: Add second GNSS device (Jonathan Lemon)  [Orabug: 37777354]  
  - ptp: ocp: Add NMEA output (Jonathan Lemon)  [Orabug: 37777354]  
  - ptp: ocp: Add debugfs entry for timecard (Jonathan Lemon)  [Orabug: 37777354]  
  - ptp: ocp: Separate the init and info logic (Jonathan Lemon)  [Orabug: 37777354]  
  - ptp: ocp: Add sysfs attribute utc_tai_offset (Jonathan Lemon)  [Orabug: 37777354]  
  - ptp: ocp: Add IRIG-B output mode control (Jonathan Lemon)  [Orabug: 37777354]  
  - ptp: ocp: Add IRIG-B and DCF blocks (Jonathan Lemon)  [Orabug: 37777354]  
  - ptp: ocp: Add SMA selector and controls (Jonathan Lemon)  [Orabug: 37777354]  
  - ptp: ocp: Add third timestamper (Jonathan Lemon)  [Orabug: 37777354]  
  - ptp: ocp: Report error if resource registration fails. (Jonathan Lemon)  [Orabug: 37777354]  
  - ptp: ocp: Skip resources with out of range irqs (Jonathan Lemon)  [Orabug: 37777354]  
  - ptp: ocp: Skip I2C flash read when there is no controller. (Jonathan Lemon)  [Orabug: 37777354]  
  - ptp: ocp: Parameterize the TOD information display. (Jonathan Lemon)  [Orabug: 37777354]  
  - ptp: ocp: parameterize the i2c driver used (Jonathan Lemon)  [Orabug: 37777354]  
  - vhost-scsi: log event queue write descriptors (Dongli Zhang)  [Orabug: 37884058]  
  - vhost-scsi: log control queue write descriptors (Dongli Zhang)  [Orabug: 37884058]  
  - vhost-scsi: log I/O queue write descriptors (Dongli Zhang)  [Orabug: 37884058]  
  - vhost-scsi: adjust vhost_scsi_get_desc() to log vring descriptors (Dongli Zhang)  [Orabug: 37884058]  
  - vhost: modify vhost_log_write() for broader users (Dongli Zhang)  [Orabug: 37884058]  
  - mm: make page_mapped_in_vma() hugetlb walk aware (Jane Chu)  [Orabug: 37956589]  
  - mm/rmap: Fix handling of hugetlbfs pages in page_vma_mapped_walk (zhenwei pi)  [Orabug: 37956589]  
  - ext4: update the backup superblock's at the end of the online resize (Theodore Ts'o)  [Orabug: 37356729]  
  - gve: ignore nonrelevant GSO type bits when processing TSO headers (Joshua Washington)  [Orabug: 37356729]  
  - gve: update gve.rst (Rushil Gupta)  [Orabug: 37356729]  
  - gve: RX path for DQO-QPL (Rushil Gupta)  [Orabug: 37356729]  
  - gve: Tx path for DQO-QPL (Rushil Gupta)  [Orabug: 37356729]  
  - gve: Control path for DQO-QPL (Rushil Gupta)  [Orabug: 37356729]  
  - gve: Fix gve interrupt names (Praveen Kaligineedi)  [Orabug: 37356729]  
  - gve: Handle alternate miss completions (Jeroen de Borst)  [Orabug: 37356729]  
  - gve: Adding a new AdminQ command to verify driver (Jeroen de Borst)  [Orabug: 37356729]  
  - gve: Fix error return code in gve_prefill_rx_pages() (Yang Yingliang)  [Orabug: 37356729]  
  - gve: Reduce alloc and copy costs in the GQ rx path (Shailend Chand)  [Orabug: 37356729]  
  - google/gve:fix repeated words in comments (Jilin Yuan)  [Orabug: 37356729]  
  - gve: Fix spelling mistake "droping" -> "dropping" (Colin Ian King)  [Orabug: 37356729]  
  - gve: enhance no queue page list detection (Haiyue Wang)  [Orabug: 37356729]  
  - gve: Recording rx queue before sending to napi (Tao Liu)  [Orabug: 37356729]  
  - ext4: add ioctls to get/set the ext4 superblock uuid (Jeremy Bongio)  [Orabug: 37356729]  
  - ext4: implement support for get/set fs label (Lukas Czerner)  [Orabug: 37356729]  
  - gve: Add tx|rx-coalesce-usec for DQO (Tao Liu)  [Orabug: 37356729]  
  - gve: Add consumed counts to ethtool stats (Jordan Kim)  [Orabug: 37356729]  
  - gve: Implement suspend/resume/shutdown (Catherine Sullivan)  [Orabug: 37356729]  
  - gve: Add optional metadata descriptor type GVE_TXD_MTD (Willem de Bruijn)  [Orabug: 37356729]  
  - gve: remove memory barrier around seqno (Catherine Sullivan)  [Orabug: 37356729]  
  - gve: Update gve_free_queue_page_list signature (Catherine Sullivan)  [Orabug: 37356729]  
  - gve: Move the irq db indexes out of the ntfy block struct (Catherine Sullivan)  [Orabug: 37356729]  
  - gve: Correct order of processing device options (Jeroen de Borst)  [Orabug: 37356729]  
  - gve: fix for null pointer dereference. (Ameer Hamza)  [Orabug: 37356729]  
  - gve: fix unmatched u64_stats_update_end() (Dan Carpenter)  [Orabug: 37356729]  
  - gve: Add a jumbo-frame device option. (Shailend Chand)  [Orabug: 37356729]  
  - gve: Implement packet continuation for RX. (David Awogbemila)  [Orabug: 37356729]  
  - gve: Allow pageflips on larger pages (Jordan Kim)  [Orabug: 37356729]  
  - gve: Add netif_set_xps_queue call (Catherine Sullivan)  [Orabug: 37356729]  
  - gve: Do lazy cleanup in TX path (Tao Liu)  [Orabug: 37356729]  
  - gve: Add rx buffer pagecnt bias (Catherine Sullivan)  [Orabug: 37356729]  
  - gve: Switch to use napi_complete_done (Yangchun Fu)  [Orabug: 37356729]  
  - gve: Use kvcalloc() instead of kvzalloc() (Gustavo A. R. Silva)  [Orabug: 37356729]  
  - selftests/net: optmem_max became per netns (Eric Dumazet)  [Orabug: 37356732]  
  - tcp: derive delack_max with tcp_rto_min helper (Kevin Yang)  [Orabug: 37356732]  
  - tcp: derive delack_max from rto_min (Eric Dumazet)  [Orabug: 37356732]  
  - tcp: add sysctl_tcp_rto_min_us (Kevin Yang)  [Orabug: 37356732]  
  - tcp: constify tcp_rto_min() and tcp_rto_min_us() argument (Eric Dumazet)  [Orabug: 37356732]  
  - net: constify sk_dst_get() and __sk_dst_get() argument (Eric Dumazet)  [Orabug: 37356732]  
  - net: Namespace-ify sysctl_optmem_max (Eric Dumazet)  [Orabug: 37356732]  
  - net: increase optmem_max default value (Eric Dumazet)  [Orabug: 37356732]  
  - net: phy: dp83867: Fix SGMII FIFO depth for non OF devices (Michael Sit Wei Hong)  [Orabug: 37670821]  
  - net: phy: dp83867: fix get nvmem cell fail (Nikita Shubin)  [Orabug: 37670821]  
  - net: phy: dp83867: implement support for io_impedance_ctrl nvmem cell (Rasmus Villemoes)  [Orabug: 37670821]  
  - net: phy: constify netdev->dev_addr references (Jakub Kicinski)  [Orabug: 37670821]  
  - net: phy: dp83867: introduce critical chip default init for non-of platform (Lay, Kuan Loon)  [Orabug: 37670821]  
  - RDS: use pin_user_pages_fast() (Stephen Brennan)  [Orabug: 37872748]  
  - uek-rpm: Reduce the size of the Bluefield 3 kernel (Henry Willard)  [Orabug: 37910874]  
  - uek-rpm: Make sure dtb directory exists for emb3. (Henry Willard)  [Orabug: 37910874]  
  - uek-rpm: Move the gve kernel module from extra to kernel-uek-core (Samasth Norway Ananda)  [Orabug: 37940898]  
  - platform/mellanox: mlxbf-pmc: Support additional PMC blocks (Shravan Kumar Ramani)  [Orabug: 37955981]  
  - mlxbf-bootctl: use sysfs_emit_at() in secure_boot_fuse_state_show() (David Thompson)  [Orabug: 37955981]  
  - mlxbf-bootctl: Support sysfs entries for RTC battery status (Xiangrong Li)  [Orabug: 37955981]  
  - platform/mellanox: mlxbf-bootctl: use sysfs_emit() instead of sprintf() (Ai Chao)  [Orabug: 37955981]  
  - drivers/platform/mellanox: Convert snprintf to sysfs_emit (Li Zhijian)  [Orabug: 37955981]  
  - certs: Add new Oracle Linux Driver Signing (key 1) certificate (Sherry Yang)  [Orabug: 37967553]


author: Vijayendra Suman <vijayendra.suman@oracle.com> [5.15.0-310.180.1.el9uek]
changelog:
  - uek-rpm: Enable CONFIG_ACPI_THERMAL and other ACPI config for Bluefield 3 (Thomas Tai)  [Orabug: 38007368]  
  - dt-bindings: trivial-devices: add onnn,adt7462 (Chanh Nguyen)  [Orabug: 38006900]  
  - mailbox: pcc: Check before sending MCTP PCC response ACK (Adam Young)  [Orabug: 38006900]  
  - media: dt-bindings: Add OV5642 (Fabio Estevam)  [Orabug: 38006900]  
  - hwmon: (xgene) Migrate to use generic PCC shmem related macros (Sudeep Holla)  [Orabug: 38006900]  
  - i2c: xgene-slimpro: Migrate to use generic PCC shmem related macros (Sudeep Holla)  [Orabug: 38006900]  
  - ACPI: PCC: Add PCC shared memory region command and status bitfields (Sudeep Holla)  [Orabug: 38006900]  
  - mailbox: pcc: Support shared interrupt for multiple subspaces (Huisong Li)  [Orabug: 38006900]  
  - mailbox: pcc: Add support for platform notification handling (Huisong Li)  [Orabug: 38006900]  
  - mailbox: pcc: Use mbox_bind_client (Elliot Berman)  [Orabug: 38006900]  
  - mailbox: omap: Use mbox_bind_client (Elliot Berman)  [Orabug: 38006900]  
  - mailbox: Allow direct registration to a channel (Elliot Berman)  [Orabug: 38006900]  
  - mailbox: pcc: Reset pcc_chan_count to zero in case of PCC probe failure (Huisong Li)  [Orabug: 38006900]  
  - mailbox: pcc: Fix spelling mistake "Plaform" -> "Platform" (Colin Ian King)  [Orabug: 38006900]  
  - mailbox: pcc: Fix an invalid-load caught by the address sanitizer (Mario Limonciello)  [Orabug: 38006900]  
  - mailbox: pcc: Handle all PCC subtypes correctly in pcc_mbox_irq (Sudeep Holla)  [Orabug: 38006900]  
  - mailbox: pcc: Avoid using the uninitialized variable 'dev' (Sudeep Holla)  [Orabug: 38006900]  
  - ACPI/PCC: Add maintainer for PCC mailbox driver (Sudeep Holla)  [Orabug: 38006900]  
  - mailbox: pcc: Move bulk of PCCT parsing into pcc_mbox_probe (Sudeep Holla)  [Orabug: 38006900]  
  - mailbox: pcc: Add support for PCCT extended PCC subspaces(type 3/4) (Sudeep Holla)  [Orabug: 38006900]  
  - mailbox: pcc: Drop handling invalid bit-width in {read,write}_register (Sudeep Holla)  [Orabug: 38006900]  
  - mailbox: pcc: Avoid accessing PCCT table in pcc_send_data and pcc_mbox_irq (Sudeep Holla)  [Orabug: 38006900]  
  - mailbox: pcc: Add PCC register bundle and associated accessor functions (Sudeep Holla)  [Orabug: 38006900]  
  - mailbox: pcc: Rename doorbell ack to platform interrupt ack register (Sudeep Holla)  [Orabug: 38006900]  
  - uek-rpm: Enable CONFIG_VITESSE_PHY for Bluefield 3 (Thomas Tai)  [Orabug: 37985802]  
  - x86/its: Fix build errors when CONFIG_MODULES=n (Eric Biggers)  [Orabug: 37970165]  
  - x86/its: Use dynamic thunks for indirect branches (Peter Zijlstra)  [Orabug: 37970165]  
  - x86/modules: Set VM_FLUSH_RESET_PERMS in module_alloc() (Thomas Gleixner)  [Orabug: 37970165]  
  - uek-rpm/config-aarch64: Enable BT_HCIUART_BCM for RPi Bluetooth (Vijay Kumar)  [Orabug: 37960844]  
  - x86/its: its_native_only bug is not correctly reported (Alexandre Chartre)  [Orabug: 37960160]  
  - RDMA/mlx5: Fix CC counters query for MPV (Patrisious Haddad)  [Orabug: 37358844]  
  - amd_hsmp: Increase the SMU timeout to 500ms (Vijay Kumar)  [Orabug: 37266677]  
  - bpf/bpf_get,set_sockopt: add option to set TCP-BPF sock ops flags (Alan Maguire)  [Orabug: 36699198]


author: Jack Vogel <jack.vogel@oracle.com> [6.12.0-0.20.20.1.el9uek]
changelog:
  - rds: ib: Fix NULL ptr deref in rds_ib_cq_follow_affinity (Håkon Bugge)  [Orabug: 37702023]
  - scsi: mpi3mr: Task Abort EH Support (Chandrakanth Patil)  [Orabug: 37778472]
  - scsi: mpi3mr: Update driver version to 8.13.0.5.50 (Ranjan Kumar)  [Orabug: 37778472]
  - scsi: mpi3mr: Check admin reply queue from Watchdog (Ranjan Kumar)  [Orabug: 37778472]
  - scsi: mpi3mr: Update timestamp only for supervisor IOCs (Ranjan Kumar)  [Orabug: 37778472]
  - scsi: mpi3mr: Update MPI Headers to revision 35 (Ranjan Kumar)  [Orabug: 37778472]
  - scsi: mpi3mr: Fix locking in an error path (Bart Van Assche)  [Orabug: 37778472]
  - scsi: mpi3mr: Fix spelling mistake "skiping" -> "skipping" (Colin Ian King)  [Orabug: 37778472]
  - scsi: mpi3mr: Update driver version to 8.12.1.0.50 (Ranjan Kumar)  [Orabug: 37778472]
  - scsi: mpi3mr: Synchronous access b/w reset and tm thread for reply queue (Ranjan Kumar)  [Orabug: 37778472]
  - scsi: mpi3mr: Support for Segmented Hardware Trace buffer (Ranjan Kumar)  [Orabug: 37778472]
  - scsi: mpi3mr: Avoid reply queue full condition (Ranjan Kumar)  [Orabug: 37778472]
  - scsi: mpi3mr: Update driver version to 8.12.0.3.50 (Ranjan Kumar)  [Orabug: 37778472]
  - uek-rpm: Enable Intel In Field Scan as a module in UEK8 (Harshit Mogalapalli)  [Orabug: 37778856]


author: Jack Vogel <jack.vogel@oracle.com> [6.12.0-1.23.1.el9uek]
changelog:
  - LTS version: v6.12.23 (Jack Vogel)
  - platform/x86/amd/pmf: fix cleanup in amd_pmf_init_smart_pc() (Dan Carpenter)
  - tracing: Do not use PERF enums when perf is not defined (Steven Rostedt)
  - ARM: 9443/1: Require linker to support KEEP within OVERLAY for DCE (Nathan Chancellor)
  - NFSD: Skip sending CB_RECALL_ANY when the backchannel isn't up (Chuck Lever)
  - NFSD: Never return NFS4ERR_FILE_OPEN when removing a directory (Chuck Lever)
  - NFSD: nfsd_unlink() clobbers non-zero status returned from fh_fill_pre_attrs() (Chuck Lever)
  - nfsd: fix management of listener transports (Olga Kornievskaia)
  - nfsd: put dl_stid if fail to queue dl_recall (Li Lingfeng)
  - nfsd: allow SC_STATUS_FREEABLE when searching via nfs4_lookup_stateid() (Jeff Layton)
  - media: streamzap: fix race between device disconnection and urb callback (Murad Masimov)
  - media: vimc: skip .s_stream() for stopped entities (Nikita Zhandarovich)
  - exec: fix the racy usage of fs_struct->in_exec (Oleg Nesterov)
  - mm: zswap: fix crypto_free_acomp() deadlock in zswap_cpu_comp_dead() (Yosry Ahmed)
  - jfs: add index corruption check to DT_GETPAGE() (Roman Smirnov)
  - jfs: fix slab-out-of-bounds read in ea_get() (Qasim Ijaz)
  - ext4: fix OOB read when checking dotdot dir (Acs, Jakub)
  - ext4: don't over-report free space or inodes in statvfs (Theodore Ts'o)
  - wifi: mt76: mt7921: fix kernel panic due to null pointer dereference (Ming Yen Hsieh)
  - arm64: Don't call NULL in do_compat_alignment_fixup() (Angelos Oikonomopoulos)
  - mm/gup: reject FOLL_SPLIT_PMD with hugetlb VMAs (David Hildenbrand)
  - tracing/osnoise: Fix possible recursive locking for cpus_read_lock() (Ran Xiaokai)
  - tracing: Fix synth event printk format for str fields (Douglas Raillard)
  - tracing: Ensure module defining synth event cannot be unloaded while tracing (Douglas Raillard)
  - tracing: Fix use-after-free in print_graph_function_flags during tracer switching (Tengda Wu)
  - exfat: fix potential wrong error return from get_block (Sungjong Seo)
  - exfat: fix random stack corruption after get_block (Sungjong Seo)
  - ksmbd: fix null pointer dereference in alloc_preauth_hash() (Namjae Jeon)
  - ksmbd: validate zero num_subauth before sub_auth is accessed (Norbert Szetei)
  - ksmbd: fix overflow in dacloffset bounds check (Norbert Szetei)
  - ksmbd: fix session use-after-free in multichannel connection (Namjae Jeon)
  - ksmbd: fix use-after-free in ksmbd_sessions_deregister() (Namjae Jeon)
  - ksmbd: add bounds check for create lease context (Norbert Szetei)
  - ksmbd: add bounds check for durable handle context (Namjae Jeon)
  - KVM: SVM: Don't change target vCPU state on AP Creation VMGEXIT error (Sean Christopherson)
  - mmc: sdhci-omap: Disable MMC_CAP_AGGRESSIVE_PM for eMMC/SD (Ulf Hansson)
  - mmc: sdhci-pxav3: set NEED_RSP_BUSY capability (Karel Balej)
  - mmc: omap: Fix memory leak in mmc_omap_new_slot (Miaoqian Lin)
  - Remove unnecessary firmware version check for gc v9_4_2 (Candice Li)
  - media: omap3isp: Handle ARM dma_iommu_mapping (Robin Murphy)
  - ARM: 9444/1: add KEEP() keyword to ARM_VECTORS (Christian Eggers)
  - ACPI: resource: Skip IRQ override on ASUS Vivobook 14 X1404VAP (Paul Menzel)
  - acpi: nfit: fix narrowing conversion in acpi_nfit_ctl (Murad Masimov)
  - wifi: mt76: mt7925: remove unused acpi function for clc (Ming Yen Hsieh)
  - x86/mm: Fix flush_tlb_range() when used for zapping normal PMDs (Jann Horn)
  - x86/tsc: Always save/restore TSC sched_clock() on suspend/resume (Guilherme G. Piccoli)
  - x86/Kconfig: Add cmpxchg8b support back to Geode CPUs (Arnd Bergmann)
  - uprobes/x86: Harden uretprobe syscall trampoline check (Jiri Olsa)
  - perf/x86/intel: Avoid disable PMU if !cpuc->enabled in sample read (Kan Liang)
  - perf/x86/intel: Apply static call for drain_pebs (Peter Zijlstra (Intel))
  - ntb_perf: Delete duplicate dmaengine_unmap_put() call in perf_copy_chunk() (Markus Elfring)
  - platform/x86: ISST: Correct command storage data length (Srinivas Pandruvada)
  - platform/x86: thinkpad_acpi: disable ACPI fan access for T495* and E560 (Eduard Christian Dumitrescu)
  - ACPI: x86: Extend Lenovo Yoga Tab 3 quirk with skip GPIO event-handlers (Hans de Goede)
  - x86/tdx: Fix arch_safe_halt() execution for TDX VMs (Vishal Annapurve)
  - x86/mce: use is_copy_from_user() to determine copy-from-user context (Shuai Xue)
  - x86/microcode/AMD: Fix __apply_microcode_amd()'s return value (Boris Ostrovsky)
  - KVM: x86: block KVM_CAP_SYNC_REGS if guest state is protected (Paolo Bonzini)
  - x86/hyperv: Fix check of return value from snp_set_vmsa() (Tianyu Lan)
  - LoongArch: BPF: Use move_addr() for BPF_PSEUDO_FUNC (Hengqi Chen)
  - LoongArch: BPF: Don't override subprog's return value (Hengqi Chen)
  - LoongArch: BPF: Fix off-by-one error in build_prologue() (Hengqi Chen)
  - LoongArch: Increase MAX_IO_PICS up to 8 (Huacai Chen)
  - LoongArch: Increase ARCH_DMA_MINALIGN up to 16 (Huacai Chen)
  - rust: Fix enabling Rust and building with GCC for LoongArch (WANG Rui)
  - usbnet:fix NPE during rx_complete (Ying Lu)
  - wifi: mac80211: Fix sparse warning for monitor_sdata (Alexander Wetzel)
  - tty: serial: lpuart: only disable CTS instead of overwriting the whole UARTMODIR register (Sherry Sun)
  - tty: serial: fsl_lpuart: Fix unused variable 'sport' build warning (Sherry Sun)
  - tty: serial: fsl_lpuart: use port struct directly to simply code (Sherry Sun)
  - tty: serial: fsl_lpuart: Use u32 and u8 for register variables (Sherry Sun)
  - cgroup/rstat: Fix forceidle time in cpu.stat (Abel Wu)
  - cgroup/rstat: Tracking cgroup-level niced CPU time (Joshua Hahn)
  - tracing: Correct the refcount if the hist/hist_debug file fails to open (Tengda Wu)
  - tracing/hist: Support POLLPRI event for poll on histogram (Masami Hiramatsu (Google))
  - tracing/hist: Add poll(POLLIN) support on hist file (Masami Hiramatsu (Google))
  - tracing: Switch trace_events_hist.c code over to use guard() (Steven Rostedt)
  - tools/power turbostat: report CoreThr per measurement interval (Len Brown)
  - perf/core: Fix child_total_time_enabled accounting bug at task exit (Yeoreum Yun)
  - drm/amdgpu/gfx12: fix num_mec (Alex Deucher)
  - drm/amdgpu/gfx11: fix num_mec (Alex Deucher)
  - kbuild: deb-pkg: don't set KBUILD_BUILD_VERSION unconditionally (Alexandru Gagniuc)
  - net: ibmveth: make veth_pool_store stop hanging (Dave Marquardt)
  - arcnet: Add NULL check in com20020pci_probe() (Henry Martin)
  - ipv6: Do not consider link down nexthops in path selection (Ido Schimmel)
  - ipv6: Start path selection from the first nexthop (Ido Schimmel)
  - net: fix geneve_opt length integer overflow (Lin Ma)
  - net: dsa: mv88e6xxx: propperly shutdown PPU re-enable timer on destroy (David Oberhollenzer)
  - ipv6: fix omitted netlink attributes when using RTEXT_FILTER_SKIP_STATS (Fernando Fernandez Mancera)
  - netfilter: nft_tunnel: fix geneve_opt type confusion addition (Lin Ma)
  - net: decrease cached dst counters in dst_release (Antoine Tenart)
  - tunnels: Accept PACKET_HOST in skb_tunnel_check_pmtu(). (Guillaume Nault)
  - vsock: avoid timeout during connect() if the socket is closing (Stefano Garzarella)
  - udp: Fix memory accounting leak. (Kuniyuki Iwashima)
  - udp: Fix multiple wraparounds of sk->sk_rmem_alloc. (Kuniyuki Iwashima)
  - net: mvpp2: Prevent parser TCAM memory corruption (Tobias Waldekranz)
  - sctp: add mutual exclusion in proc_sctp_do_udp_port() (Eric Dumazet)
  - net_sched: skbprio: Remove overly strict queue assertions (Cong Wang)
  - netlabel: Fix NULL pointer exception caused by CALIPSO on IPv4 sockets (Debin Zhu)
  - netfilter: nf_tables: don't unregister hook when table is dormant (Florian Westphal)
  - netfilter: nft_set_hash: GC reaps elements with conncount for dynamic sets only (Pablo Neira Ayuso)
  - idpf: fix adapter NULL pointer dereference on reboot (Emil Tantilov)
  - e1000e: change k1 configuration on MTP and later platforms (Vitaly Lifshits)
  - spi: bcm2835: Restore native CS probing when pinctrl-bcm2835 is absent (Florian Fainelli)
  - ALSA: hda/realtek: Fix built-in mic on another ASUS VivoBook model (Takashi Iwai)
  - spi: bcm2835: Do not call gpiod_put() on invalid descriptor (Florian Fainelli)
  - ASoC: imx-card: Add NULL check in imx_card_probe() (Henry Martin)
  - nvme/ioctl: don't warn on vectorized uring_cmd with fixed buffer (Caleb Sander Mateos)
  - riscv/purgatory: 4B align purgatory_start (Björn Töpel)
  - riscv/kexec_file: Handle R_RISCV_64 in purgatory relocator (Yao Zi)
  - riscv: Fix hugetlb retrieval of number of ptes in case of !present pte (Alexandre Ghiti)
  - spi: cadence: Fix out-of-bounds array access in cdns_mrvl_xspi_setup_clock() (Josh Poimboeuf)
  - ASoC: codecs: rt5665: Fix some error handling paths in rt5665_probe() (Christophe JAILLET)
  - s390/entry: Fix setting _CIF_MCCK_GUEST with lowcore relocation (Sven Schnelle)
  - ublk: make sure ubq->canceling is set when queue is frozen (Ming Lei)
  - x86/uaccess: Improve performance by aligning writes to 8 bytes in copy_user_generic(), on non-FSRM/ERMS CPUs (Herton R. Krzesinski)
  - RISC-V: errata: Use medany for relocatable builds (Palmer Dabbelt)
  - ALSA: hda/realtek: Fix built-in mic breakage on ASUS VivoBook X515JA (Takashi Iwai)
  - firmware: cs_dsp: Ensure cs_dsp_load[_coeff]() returns 0 on success (Richard Fitzgerald)
  - ntb: intel: Fix using link status DB's (Nikita Shubin)
  - ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans (Yajun Deng)
  - riscv: ftrace: Add parentheses in macro definitions of make_call_t0 and make_call_ra (Juhan Jin)
  - fs/9p: fix NULL pointer dereference on mkdir (Christian Schoenebeck)
  - spufs: fix a leak in spufs_create_context() (Al Viro)
  - spufs: fix gang directory lifetimes (Al Viro)
  - spufs: fix a leak on spufs_new_file() failure (Al Viro)
  - netfs: Fix netfs_unbuffered_read() to return ssize_t rather than int (David Howells)
  - hwmon: (nct6775-core) Fix out of bounds access for NCT679{8,9} (Tasos Sahanidis)
  - memory: omap-gpmc: drop no compatible check (Roger Quadros)
  - can: statistics: use atomic access in hot path (Oliver Hartkopp)
  - ALSA: hda/realtek: Add mute LED quirk for HP Pavilion x360 14-dy1xxx (Navon John Lukose)
  - selftests: netfilter: skip br_netfilter queue tests if kernel is tainted (Florian Westphal)
  - net: devmem: do not WARN conditionally after netdev_rx_queue_restart() (Taehee Yoo)
  - drm/amd: Keep display off while going into S4 (Mario Limonciello)
  - nvme-pci: fix stuck reset on concurrent DPC and HP (Keith Busch)
  - x86/sgx: Warn explicitly if X86_FEATURE_SGX_LC is not enabled (Vladis Dronov)
  - x86/hyperv: Fix output argument to hypercall that changes page visibility (Michael Kelley)
  - locking/semaphore: Use wake_q to wake up processes outside lock critical section (Waiman Long)
  - wifi: mac80211: fix SA Query processing in MLO (Johannes Berg)
  - wifi: mac80211: flush the station before moving it to UN-AUTHORIZED state (Emmanuel Grumbach)
  - ASoC: rt1320: set wake_capable = 0 explicitly (Bard Liao)
  - ASoC: codecs: wsa884x: report temps to hwmon in millidegree of Celsius (Alexey Klimov)
  - x86/hyperv/vtl: Stop kernel from probing VTL0 low memory (Naman Jain)
  - sched/deadline: Use online cpus for validating runtime (Shrikanth Hegde)
  - ALSA: hda/realtek: Add support for ASUS Zenbook UM3406KA Laptops using CS35L41 HDA (Stefan Binding)
  - ALSA: hda/realtek: Add support for ASUS B5405 and B5605 Laptops using CS35L41 HDA (Stefan Binding)
  - ALSA: hda/realtek: Add support for ASUS B3405 and B3605 Laptops using CS35L41 HDA (Stefan Binding)
  - ALSA: hda/realtek: Add support for various ASUS Laptops using CS35L41 HDA (Stefan Binding)
  - ALSA: hda/realtek: Add support for ASUS ROG Strix G614 Laptops using CS35L41 HDA (Stefan Binding)
  - ALSA: hda/realtek: Add support for ASUS ROG Strix GA603 Laptops using CS35L41 HDA (Stefan Binding)
  - ALSA: hda/realtek: Add support for ASUS ROG Strix G814 Laptop using CS35L41 HDA (Stefan Binding)
  - exfat: add a check for invalid data size (Yuezhang Mo)
  - platform/x86/amd/pmf: Update PMF Driver for Compatibility with new PMF-TA (Shyam Sundar S K)
  - platform/x86/amd/pmf: Propagate PMF-TA return codes (Shyam Sundar S K)
  - HID: i2c-hid: improve i2c_hid_get_report error message (Wentao Guan)
  - net: dsa: rtl8366rb: don't prompt users for LED control (Jakub Kicinski)
  - platform/x86/intel/vsec: Add Diamond Rapids support (David E. Box)
  - platform/x86: intel-hid: fix volume buttons on Microsoft Surface Go 4 tablet (Dmitry Panchenko)
  - cifs: fix incorrect validation for num_aces field of smb_acl (Namjae Jeon)
  - smb: common: change the data type of num_aces to le16 (Namjae Jeon)
  - perf/core: Fix perf_pmu_register() vs. perf_init_event() (Peter Zijlstra)
  - ALSA: hda: Fix speakers on ASUS EXPERTBOOK P5405CSA 1.0 (Daniel Bárta)
  - ALSA: hda/realtek: Fix Asus Z13 2025 audio (Antheas Kapenekakis)
  - affs: don't write overlarge OFS data block size fields (Simon Tatham)
  - affs: generate OFS sequence numbers starting at 1 (Simon Tatham)
  - wifi: brcmfmac: keep power during suspend if board requires it (Matthias Proske)
  - nvme-pci: skip CMB blocks incompatible with PCI P2P DMA (Icenowy Zheng)
  - nvme-pci: clean up CMBMSC when registering CMB fails (Icenowy Zheng)
  - nvme-tcp: fix possible UAF in nvme_tcp_poll (Sagi Grimberg)
  - wifi: iwlwifi: mvm: use the right version of the rate API (Emmanuel Grumbach)
  - wifi: iwlwifi: fw: allocate chained SG tables for dump (Johannes Berg)
  - wifi: mac80211: remove debugfs dir for virtual monitor (Alexander Wetzel)
  - wifi: mac80211: Cleanup sta TXQs on flush (Alexander Wetzel)
  - nfs: Add missing release on error in nfs_lock_and_join_requests() (Dan Carpenter)
  - objtool/loongarch: Add unwind hints in prepare_frametrace() (Josh Poimboeuf)
  - rcu-tasks: Always inline rcu_irq_work_resched() (Josh Poimboeuf)
  - context_tracking: Always inline ct_{nmi,irq}_{enter,exit}() (Josh Poimboeuf)
  - sched/smt: Always inline sched_smt_active() (Josh Poimboeuf)
  - objtool: Fix verbose disassembly if CROSS_COMPILE isn't set (David Laight)
  - octeontx2-af: Free NIX_AF_INT_VEC_GEN irq (Geetha sowjanya)
  - octeontx2-af: Fix mbox INTR handler when num VFs > 64 (Geetha sowjanya)
  - net: phy: broadcom: Correct BCM5221 PHY model detection (Jim Liu)
  - ACPI: processor: idle: Return an error if both P_LVL{2,3} idle states are invalid (Giovanni Gherdovich)
  - LoongArch: Rework the arch_kgdb_breakpoint() implementation (Yuli Wang)
  - LoongArch: Fix device node refcount leak in fdt_cpu_clk_init() (Miaoqian Lin)
  - LoongArch: Fix help text of CMDLINE_EXTEND in Kconfig (谢致邦 (XIE Zhibang))
  - objtool: Fix segfault in ignore_unreachable_insn() (Josh Poimboeuf)
  - ring-buffer: Fix bytes_dropped calculation issue (Feng Yang)
  - net/mlx5e: SHAMPO, Make reserved size independent of page size (Lama Kayal)
  - ksmbd: fix r_count dec/increment mismatch (Namjae Jeon)
  - ksmbd: fix multichannel connection failure (Namjae Jeon)
  - ksmbd: use aead_request_free to match aead_request_alloc (Miaoqian Lin)
  - rndis_host: Flag RNDIS modems as WWAN devices (Lubomir Rintel)
  - rtnetlink: Allocate vfinfo size for VF GUIDs when supported (Mark Zhang)
  - exfat: fix missing shutdown check (Yuezhang Mo)
  - exfat: fix the infinite loop in exfat_find_last_cluster() (Yuezhang Mo)
  - smb: client: Fix netns refcount imbalance causing leaks and use-after-free (Wang Zhaolong)
  - NFS: Shut down the nfs_client only after all the superblocks (Trond Myklebust)
  - objtool, media: dib8000: Prevent divide-by-zero in dib8000_set_dds() (Josh Poimboeuf)
  - objtool, nvmet: Fix out-of-bounds stack access in nvmet_ctrl_state_show() (Josh Poimboeuf)
  - thermal: core: Remove duplicate struct declaration (xueqin Luo)
  - perf bpf-filter: Fix a parsing error with comma (Namhyung Kim)
  - perf tools: annotate asm_pure_loop.S (Marcus Meissner)
  - fs/procfs: fix the comment above proc_pid_wchan() (Bart Van Assche)
  - perf vendor events arm64 AmpereOneX: Fix frontend_bound calculation (Ilkka Koskinen)
  - tty: n_tty: use uint for space returned by tty_write_room() (Jiri Slaby (SUSE))
  - staging: vchiq_arm: Fix possible NPR of keep-alive thread (Stefan Wahren)
  - staging: vchiq_arm: Register debugfs after cdev (Stefan Wahren)
  - staging: rtl8723bs: select CONFIG_CRYPTO_LIB_AES (谢致邦 (XIE Zhibang))
  - perf: intel-tpebs: Fix incorrect usage of zfree() (James Clark)
  - perf python: Check if there is space to copy all the event (Arnaldo Carvalho de Melo)
  - perf python: Don't keep a raw_data pointer to consumed ring buffer space (Arnaldo Carvalho de Melo)
  - perf python: Decrement the refcount of just created event on failure (Arnaldo Carvalho de Melo)
  - perf python: Fixup description of sample.id event member (Arnaldo Carvalho de Melo)
  - i3c: master: svc: Fix missing the IBI rules (Stanley Chu)
  - um: hostfs: avoid issues on inode number reuse by host (Benjamin Berg)
  - um: remove copy_from_kernel_nofault_allowed (Benjamin Berg)
  - um: Pass the correct Rust target and options with gcc (David Gow)
  - selftests/mm/cow: fix the incorrect error handling (Cyan Yang)
  - fuse: fix dax truncate/punch_hole fault path (Alistair Popple)
  - NFS: fix open_owner_id_maxsz and related fields. (NeilBrown)
  - NFSv4: Avoid unnecessary scans of filesystems for delayed delegations (Trond Myklebust)
  - NFSv4: Avoid unnecessary scans of filesystems for expired delegations (Trond Myklebust)
  - NFSv4: Avoid unnecessary scans of filesystems for returning delegations (Trond Myklebust)
  - NFSv4: Don't trigger uneccessary scans for return-on-close delegations (Trond Myklebust)
  - arch/powerpc: drop GENERIC_PTDUMP from mpc885_ads_defconfig (Anshuman Khandual)
  - ocfs2: validate l_tree_depth to avoid out-of-bounds access (Vasiliy Kovalev)
  - kexec: initialize ELF lowest address to ULONG_MAX (Sourabh Jain)
  - kernel/events/uprobes: handle device-exclusive entries correctly in __replace_page() (David Hildenbrand)
  - perf units: Fix insufficient array space (Arnaldo Carvalho de Melo)
  - perf evlist: Add success path to evlist__create_syswide_maps (Ian Rogers)
  - perf debug: Avoid stack overflow in recursive error message (Ian Rogers)
  - iio: light: Add check for array bounds in veml6075_read_int_time_ms (Karan Sanghavi)
  - iio: adc: ad7768-1: set MOSI idle state to prevent accidental reset (Jonathan Santos)
  - iio: adc: ad7173: Fix comparison of channel configs (Uwe Kleine-König)
  - iio: adc: ad7124: Fix comparison of channel configs (Uwe Kleine-König)
  - iio: adc: ad4130: Fix comparison of channel setups (Uwe Kleine-König)
  - dmaengine: fsl-edma: free irq correctly in remove path (Peng Fan)
  - dmaengine: fsl-edma: cleanup chan after dma_async_device_unregister (Peng Fan)
  - fs/ntfs3: Prevent integer overflow in hdr_first_de() (Dan Carpenter)
  - fs/ntfs3: Fix a couple integer overflows on 32bit systems (Dan Carpenter)
  - usb: xhci: correct debug message page size calculation (Niklas Neronin)
  - perf bench: Fix perf bench syscall loop count (Thomas Richter)
  - perf arm-spe: Fix load-store operation checking (Leo Yan)
  - iio: backend: make sure to NULL terminate stack buffer (Nuno Sá)
  - iio: accel: msa311: Fix failure to release runtime pm if direct mode claim fails. (Jonathan Cameron)
  - iio: accel: mma8452: Ensure error return on failure to matching oversampling ratio (Jonathan Cameron)
  - ucsi_ccg: Don't show failed to get FW build information error (Mario Limonciello)
  - perf build: Fix in-tree build due to symbolic link (Luca Ceresoli)
  - tools/x86: Fix linux/unaligned.h include path in lib/insn.c (Ian Rogers)
  - perf pmu: Don't double count common sysfs and json events (James Clark)
  - coresight-etm4x: add isb() before reading the TRCSTATR (Yuanfang Zhang)
  - vhost-scsi: Fix handling of multiple calls to vhost_scsi_set_endpoint (Mike Christie)
  - coresight: catu: Fix number of pages while using 64k pages (Ilkka Koskinen)
  - greybus: gb-beagleplay: Add error handling for gb_greybus_init (Wentao Liang)
  - perf report: Switch data file correctly in TUI (Namhyung Kim)
  - soundwire: slave: fix an OF node reference leak in soundwire slave device (Joe Hattori)
  - isofs: fix KMSAN uninit-value bug in do_isofs_readdir() (Qasim Ijaz)
  - phy: phy-rockchip-samsung-hdptx: Don't use dt aliases to determine phy-id (Heiko Stuebner)
  - fs/ntfs3: Update inode->i_mapping->a_ops on compression state (Konstantin Komarov)
  - w1: fix NULL pointer dereference in probe (Chenyuan Yang)
  - perf: Always feature test reallocarray (James Clark)
  - perf stat: Fix find_stat for mixed legacy/non-legacy events (Ian Rogers)
  - clk: qcom: mmcc-sdm660: fix stuck video_subcore0 clock (Barnabás Czémán)
  - pinctrl: intel: Fix wrong bypass assignment in intel_pinctrl_probe_pwm() (Andy Shevchenko)
  - crypto: hisilicon/sec2 - fix for aead auth key length (Wenkai Lin)
  - RDMA/core: Fix use-after-free when rename device name (Wang Liang)
  - x86/dumpstack: Fix inaccurate unwinding from exception stacks due to misplaced assignment (Jann Horn)
  - leds: Fix LED_OFF brightness race (Remi Pommarel)
  - mfd: sm501: Switch to BIT() to mitigate integer overflows (Nikita Zhandarovich)
  - pinctrl: renesas: rzv2m: Fix missing of_node_put() call (Fabrizio Castro)
  - RDMA/mlx5: Fix mlx5_poll_one() cur_qp update flow (Patrisious Haddad)
  - bpf: Fix array bounds error with may_goto (Jiayuan Chen)
  - clk: qcom: gcc-sm8650: Do not turn off USB GDSCs during gdsc_disable() (Neil Armstrong)
  - crypto: nx - Fix uninitialised hv_nxc on error (Herbert Xu)
  - power: supply: max77693: Fix wrong conversion of charge input threshold value (Artur Weber)
  - x86/entry: Fix ORC unwinder for PUSH_REGS with save_ret=1 (Jann Horn)
  - clk: amlogic: g12a: fix mmc A peripheral clock (Jerome Brunet)
  - clk: clk-imx8mp-audiomix: fix dsp/ocram_a clock parents (Laurentiu Mihalcea)
  - crypto: qat - remove access to parity register for QAT GEN4 (Bairavi Alagappan)
  - pinctrl: npcm8xx: Fix incorrect struct npcm8xx_pincfg assignment (Andy Shevchenko)
  - rust: fix signature of rust_fmt_argument (Alice Ryhl)
  - selftests/bpf: Select NUMA_NO_NODE to create map (Saket Kumar Bhaskar)
  - clk: amlogic: gxbb: drop non existing 32k clock parent (Jerome Brunet)
  - clk: amlogic: g12b: fix cluster A parent data (Jerome Brunet)
  - pinctrl: tegra: Set SFIO mode to Mux Register (Prathamesh Shete)
  - IB/mad: Check available slots before posting receive WRs (Maher Sanalla)
  - crypto: api - Fix larval relookup type and mask (Herbert Xu)
  - power: supply: bq27xxx_battery: do not update cached flags prematurely (Sicelo A. Mhlongo)
  - remoteproc: qcom_q6v5_mss: Handle platforms with one power domain (Luca Weiss)
  - RDMA/erdma: Prevent use-after-free in erdma_accept_newconn() (Cheng Xu)
  - RDMA/mlx5: Fix calculation of total invalidated pages (Chiara Meiohas)
  - RDMA/core: Don't expose hw_counters outside of init net namespace (Roman Gushchin)
  - clk: rockchip: rk3328: fix wrong clk_ref_usb3otg parent (Peter Geis)
  - selftests/bpf: Fix freplace_link segfault in tailcalls prog test (Tengda Wu)
  - RDMA/mlx5: Fix MR cache initialization error flow (Michael Guralnik)
  - pinctrl: renesas: rzg2l: Fix missing of_node_put() call (Fabrizio Castro)
  - pinctrl: renesas: rza2: Fix missing of_node_put() call (Fabrizio Castro)
  - lib: 842: Improve error handling in sw842_compress() (Tanya Agarwal)
  - bpf: Use preempt_count() directly in bpf_send_signal_common() (Hou Tao)
  - clk: qcom: gcc-x1e80100: Unregister GCC_GPU_CFG_AHB_CLK/GCC_DISP_XO_CLK (Konrad Dybcio)
  - remoteproc: qcom_q6v5_pas: Use resource with CX PD for MSM8226 (Luca Weiss)
  - crypto: tegra - Set IV to NULL explicitly for AES ECB (Akhil R)
  - RDMA/mana_ib: Ensure variable err is initialized (Kees Bakker)
  - s390: Remove ioremap_wt() and pgprot_writethrough() (Niklas Schnelle)
  - clk: qcom: gcc-msm8953: fix stuck venus0_core0 clock (Vladimir Lypak)
  - crypto: tegra - Fix CMAC intermediate result handling (Akhil R)
  - pinctrl: nuvoton: npcm8xx: Fix error handling in npcm8xx_gpio_fw() (Yue Haibing)
  - clk: samsung: Fix UBSAN panic in samsung_clk_init() (Will McVicker)
  - remoteproc: qcom: pas: add minidump_id to SC7280 WPSS (Luca Weiss)
  - clk: renesas: r8a08g045: Check the source of the CPU PLL settings (Claudiu Beznea)
  - x86/mm/pat: Fix VM_PAT handling when fork() fails in copy_page_range() (David Hildenbrand)
  - selftests/bpf: Fix string read in strncmp benchmark (Viktor Malik)
  - libbpf: Fix hypothetical STT_SECTION extern NULL deref case (Andrii Nakryiko)
  - remoteproc: qcom_q6v5_pas: Make single-PD handling more robust (Luca Weiss)
  - pinctrl: renesas: rzg2l: Suppress binding attributes (Claudiu Beznea)
  - of: property: Increase NR_FWNODE_REFERENCE_ARGS (Zijun Hu)
  - remoteproc: core: Clear table_sz when rproc_shutdown (Peng Fan)
  - RDMA/mlx5: Fix page_size variable overflow (Michael Guralnik)
  - crypto: hisilicon/sec2 - fix for sec spec check (Wenkai Lin)
  - crypto: hisilicon/sec2 - fix for aead authsize alignment (Wenkai Lin)
  - clk: amlogic: gxbb: drop incorrect flag on 32k clock (Jerome Brunet)
  - crypto: tegra - Use HMAC fallback when keyslots are full (Akhil R)
  - crypto: bpf - Add MODULE_DESCRIPTION for skcipher (Arnd Bergmann)
  - crypto: tegra - check return value for hash do_one_req (Akhil R)
  - crypto: tegra - Use separate buffer for setkey (Akhil R)
  - crypto: qat - set parity error mask for qat_420xx (Bairavi Alagappan)
  - crypto: iaa - Test the correct request flag (Herbert Xu)
  - fbdev: sm501fb: Add some geometry checks. (Danila Chernetsov)
  - mdacon: rework dependency list (Arnd Bergmann)
  - dummycon: fix default rows/cols (Arnd Bergmann)
  - fbdev: au1100fb: Move a variable assignment behind a null pointer check (Markus Elfring)
  - PCI: pciehp: Don't enable HPIE when resuming in poll mode (Ilpo Järvinen)
  - PCI: Fix BAR resizing when VF BARs are assigned (Ilpo Järvinen)
  - PCI: histb: Fix an error handling path in histb_pcie_probe() (Christophe JAILLET)
  - PCI: dwc: ep: Return -ENOMEM for allocation failures (Dan Carpenter)
  - drm/amd/display: avoid NPD when ASIC does not support DMUB (Thadeu Lima de Souza Cascardo)
  - drm/mediatek: dsi: fix error codes in mtk_dsi_host_transfer() (Dan Carpenter)
  - drm/mediatek: dp: drm_err => dev_err in HPD path to avoid NULL ptr (Douglas Anderson)
  - drm/mediatek: Fix config_updating flag never false when no mbox channel (Jason-JH Lin)
  - PCI: xilinx-cpm: Fix IRQ domain leak in error path of probe (Thippeswamy Havalige)
  - PCI: Remove stray put_device() in pci_register_host_bridge() (Dan Carpenter)
  - powerpc/kexec: fix physical address calculation in clear_utlb_entry() (Christophe Leroy)
  - crypto: powerpc: Mark ghashp8-ppc.o as an OBJECT_FILES_NON_STANDARD (Christophe Leroy)
  - drm/msm/a6xx: Fix a6xx indexed-regs in devcoreduump (Rob Clark)
  - drm/amd/display: fix type mismatch in CalculateDynamicMetadataParameters() (Vitaliy Shevtsov)
  - drm/panthor: Update CS_STATUS_ defines to correct values (Ashley Smith)
  - PCI: Avoid reset when disabled via sysfs (Nishanth Aravamudan)
  - PCI/portdrv: Only disable pciehp interrupts early when needed (Feng Tang)
  - PCI: brcmstb: Fix potential premature regulator disabling (Jim Quinlan)
  - PCI: brcmstb: Fix error path after a call to regulator_bulk_get() (Jim Quinlan)
  - PCI: brcmstb: Use internal register to change link capability (Jim Quinlan)
  - PCI: brcmstb: Set generation limit before PCIe link up (Jim Quinlan)
  - PCI: cadence-ep: Fix the driver to send MSG TLP for INTx without data payload (Hans Zhang)
  - drm/amdkfd: Fix Circular Locking Dependency in 'svm_range_cpu_invalidate_pagetables' (Srinivasan Shanmugam)
  - drm/msm/dsi: Set PHY usescase (and mode) before registering DSI host (Marijn Suijten)
  - drm/msm/dsi: Use existing per-interface slice count in DSC timing (Marijn Suijten)
  - drm/msm/dsi/phy: Program clock inverters in correct register (Krzysztof Kozlowski)
  - drm/msm/dpu: don't use active in atomic_check() (Dmitry Baryshkov)
  - drm/amd/display: fix an indent issue in DML21 (Aurabindo Pillai)
  - PCI/ACS: Fix 'pci=config_acs=' parameter (Tushar Dave)
  - drm/panel: ilitek-ili9882t: fix GPIO name in error message (John Keeping)
  - PCI/ASPM: Fix link state exit during switch upstream function removal (Daniel Stodden)
  - drm/mediatek: mtk_hdmi: Fix typo for aud_sampe_size member (AngeloGioacchino Del Regno)
  - drm/mediatek: mtk_hdmi: Unregister audio platform device on failure (AngeloGioacchino Del Regno)
  - PCI: Remove add_align overwrite unrelated to size0 (Ilpo Järvinen)
  - PCI: Use downstream bridges for distributing resources (Kai-Heng Feng)
  - drm/amdgpu/umsch: fix ucode check (Alex Deucher)
  - drm/amdgpu: refine smu send msg debug log format (Yang Wang)
  - gpu: cdns-mhdp8546: fix call balance of mhdp->clk handling routines (Vitalii Mordan)
  - drm/vkms: Fix use after free and double free on init error (José Expósito)
  - drm: xlnx: zynqmp: Fix max dma segment size (Tomi Valkeinen)
  - drm/bridge: it6505: fix HDCP V match check is not performed correctly (Hermes Wu)
  - drm/dp_mst: Fix drm RAD print (Wayne Lin)
  - drm/ssd130x: ensure ssd132x pitch is correct (John Keeping)
  - drm/ssd130x: fix ssd132x encoding (John Keeping)
  - drm/ssd130x: Set SPI .id_table to prevent an SPI core warning (Javier Martinez Canillas)
  - drm/bridge: ti-sn65dsi86: Fix multiple instances (Geert Uytterhoeven)
  - ALSA: timer: Don't take register_mutex with copy_from/to_user() (Takashi Iwai)
  - ASoC: ti: j721e-evm: Fix clock configuration for ti,j7200-cpb-audio compatible (Jayesh Choudhary)
  - ALSA: hda/realtek: Always honor no_shutup_pins (Takashi Iwai)
  - dt-bindings: vendor-prefixes: add GOcontroll (Maud Spierings)
  - HID: remove superfluous (and wrong) Makefile entry for CONFIG_INTEL_ISH_FIRMWARE_DOWNLOADER (Jiri Kosina)
  - ASoC: amd: acp: Fix for enabling DMIC on acp platforms via _DSD entry (Venkata Prasad Potturu)
  - ASoC: cs35l41: check the return value from spi_setup() (Vitaliy Shevtsov)
  - platform/x86: dell-ddv: Fix temperature calculation (Armin Wolf)
  - platform/x86: dell-uart-backlight: Make dell_uart_bl_serdev_driver static (Ilpo Järvinen)
  - platform/x86: lenovo-yoga-tab2-pro-1380-fastcharger: Make symbol static (Ilpo Järvinen)
  - auxdisplay: panel: Fix an API misuse in panel.c (Andy Shevchenko)
  - media: platform: allgro-dvt: unregister v4l2_device on the error path (Joe Hattori)
  - media: verisilicon: HEVC: Initialize start_bit field (Benjamin Gaignard)
  - auxdisplay: MAX6959 should select BITREVERSE (Geert Uytterhoeven)
  - regulator: pca9450: Fix enable register for LDO5 (Frieder Schrempf)
  - x86/entry: Add __init to ia32_emulation_override_cmdline() (Vitaly Kuznetsov)
  - x86/fpu/xstate: Fix inconsistencies in guest FPU xfeatures (Chao Gao)
  - x86/traps: Make exc_double_fault() consistently noreturn (Josh Poimboeuf)
  - perf/ring_buffer: Allow the EPOLLRDNORM flag for poll (Tao Chen)
  - lockdep: Don't disable interrupts on RT in disable_irq_nosync_lockdep.*() (Sebastian Andrzej Siewior)
  - PM: sleep: Fix handling devices with direct_complete set on errors (Rafael J. Wysocki)
  - thermal: int340x: Add NULL check for adev (Chenyuan Yang)
  - x86/resctrl: Fix allocation of cleanest CLOSID on platforms with no monitors (James Morse)
  - EDAC/ie31200: Fix the error path order of ie31200_init() (Qiuxu Zhuo)
  - EDAC/ie31200: Fix the DIMM size mask for several SoCs (Qiuxu Zhuo)
  - EDAC/ie31200: Fix the size of EDAC_MC_LAYER_CHIP_SELECT layer (Qiuxu Zhuo)
  - selinux: Chain up tool resolving errors in install_policy.sh (Tim Schumacher)
  - watchdog/hardlockup/perf: Fix perf_event memory leak (Li Huafei)
  - kunit/stackinit: Use fill byte different from Clang i386 pattern (Kees Cook)
  - RISC-V: KVM: Disable the kernel perf counter during configure (Atish Patra)
  - cpufreq: tegra194: Allow building for Tegra234 (Aaron Kling)
  - PM: sleep: Adjust check before setting power.must_resume (Rafael J. Wysocki)
  - lockdep/mm: Fix might_fault() lockdep check of current->mm->mmap_lock (Peter Zijlstra)
  - x86/sev: Add missing RIP_REL_REF() invocations during sme_enable() (Kevin Loughlin)
  - x86/platform: Only allow CONFIG_EISA for 32-bit (Arnd Bergmann)
  - x86/fpu: Avoid copying dynamic FP state from init_task in arch_dup_task_struct() (Benjamin Berg)
  - x86/fpu: Fix guest FPU state buffer allocation size (Stanislav Spassov)
  - EDAC/{skx_common,i10nm}: Fix some missing error reports on Emerald Rapids (Qiuxu Zhuo)
  - cpufreq: governor: Fix negative 'idle_time' handling in dbs_update() (Jie Zhan)
  - sched/eevdf: Force propagating min_slice of cfs_rq when {en,de}queue tasks (Tianchen Ding)
  - sched: Cancel the slice protection of the idle entity (zihan zhou)
  - smack: ipv4/ipv6: tcp/dccp/sctp: fix incorrect child socket label (Konstantin Andreev)
  - smack: dont compile ipv6 code unless ipv6 is configured (Konstantin Andreev)
  - cpufreq: scpi: compare kHz instead of Hz (zuoqian)
  - x86/mm/pat: cpa-test: fix length for CPA_ARRAY test (Mike Rapoport (Microsoft))
  - watch_queue: fix pipe accounting mismatch (Eric Sandeen)
  - LTS version: v6.12.22 (Jack Vogel)
  - bcachefs: bch2_ioctl_subvolume_destroy() fixes (Kent Overstreet)
  - serial: 8250_dma: terminate correct DMA in tx_dma_flush() (John Keeping)
  - serial: stm32: do not deassert RS485 RTS GPIO prematurely (Cheick Traore)
  - perf tools: Fix up some comments and code to properly use the event_source bus (Greg Kroah-Hartman)
  - memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove (Luo Qiu)
  - usb: xhci: Apply the link chain quirk on NEC isoc endpoints (Michal Pecio)
  - usb: xhci: Don't skip on Stopped - Length Invalid (Michal Pecio)
  - net: usb: usbnet: restore usb%d name exception for local mac addresses (Dominique Martinet)
  - net: usb: qmi_wwan: add Telit Cinterion FE990B composition (Fabio Porcedda)
  - net: usb: qmi_wwan: add Telit Cinterion FN990B composition (Fabio Porcedda)
  - tty: serial: fsl_lpuart: disable transmitter before changing RS485 related registers (Sherry Sun)
  - tty: serial: 8250: Add Brainboxes XC devices (Cameron Williams)
  - tty: serial: 8250: Add some more device IDs (Cameron Williams)
  - counter: microchip-tcb-capture: Fix undefined counter channel state on probe (William Breathitt Gray)
  - counter: stm32-lptimer-cnt: fix error handling when enabling (Fabrice Gasnier)
  - ALSA: hda/realtek: Support mute LED on HP Laptop 15s-du3xxx (Dhruv Deshpande)
  - netfilter: socket: Lookup orig tuple for IPv6 SNAT (Maxim Mikityanskiy)
  - drm/amd/display: Don't write DP_MSTM_CTRL after LT (Wayne Lin)
  - atm: Fix NULL pointer dereference (Minjoong Kim)
  - HID: hid-plantronics: Add mic mute mapping and generalize quirks (Terry Junge)
  - ALSA: usb-audio: Add quirk for Plantronics headsets to fix control names (Terry Junge)
  - LTS version: v6.12.21 (Jack Vogel)
  - mptcp: Fix data stream corruption in the address announcement (Arthur Mongodin)
  - mm/huge_memory: drop beyond-EOF folios with the right number of refs (Zi Yan)
  - arm64: dts: rockchip: fix u2phy1_host status for NanoPi R4S (Justin Klaassen)
  - libsubcmd: Silence compiler warning (Eder Zulian)
  - Revert "sched/core: Reduce cost of sched_move_task when config autogroup" (Dietmar Eggemann)
  - KVM: arm64: Eagerly switch ZCR_EL{1,2} (Mark Rutland)
  - KVM: arm64: Mark some header functions as inline (Mark Rutland)
  - KVM: arm64: Refactor exit handlers (Mark Rutland)
  - KVM: arm64: Remove VHE host restore of CPACR_EL1.SMEN (Mark Rutland)
  - KVM: arm64: Remove VHE host restore of CPACR_EL1.ZEN (Mark Rutland)
  - KVM: arm64: Remove host FPSIMD saving for non-protected KVM (Mark Rutland)
  - KVM: arm64: Unconditionally save+flush host FPSIMD/SVE/SME state (Mark Rutland)
  - KVM: arm64: Calculate cptr_el2 traps on activating traps (Fuad Tabba)
  - io_uring/net: fix sendzc double notif flush (Pavel Begunkov)
  - ksmbd: fix incorrect validation for num_aces field of smb_acl (Namjae Jeon)
  - drm/amdkfd: Fix user queue validation on Gfx7/8 (Philip Yang)
  - drm/amdgpu: Fix JPEG video caps max size for navi1x and raven (David Rosca)
  - drm/amdgpu: Fix MPEG2, MPEG4 and VC1 video caps max size (David Rosca)
  - drm/amdgpu: Remove JPEG from vega and carrizo video caps (David Rosca)
  - drm/amdgpu/pm: wire up hwmon fan speed for smu 14.0.2 (Alex Deucher)
  - drm/amdgpu/pm: Handle SCLK offset correctly in overdrive for smu 14.0.2 (Tomasz Pakuła)
  - drm/amdgpu: Restore uncached behaviour on GFX12 (David Belanger)
  - drm/amd/pm: add unique_id for gfx12 (Harish Kasiviswanathan)
  - drm/amd/display: Use HW lock mgr for PSR1 when only one eDP (Mario Limonciello)
  - drm/amd/display: Fix message for support_edp0_on_dp1 (Yilin Chen)
  - drm/amdgpu/gfx12: correct cleanup of 'me' field with gfx_v12_0_me_fini() (Wentao Liang)
  - drm/sched: Fix fence reference count leak (qianyi liu)
  - drm/radeon: fix uninitialized size issue in radeon_vce_cs_parse() (Nikita Zhandarovich)
  - pmdomain: amlogic: fix T7 ISP secpower (Xianwei Zhao)
  - soc: qcom: pdr: Fix the potential deadlock (Saranya R)
  - batman-adv: Ignore own maximum aggregation size during RX (Sven Eckelmann)
  - xsk: fix an integer overflow in xp_create_and_assign_umem() (Gavrilov Ilia)
  - keys: Fix UAF in key_put() (David Howells)
  - efi/libstub: Avoid physical address 0x0 when doing random allocation (Ard Biesheuvel)
  - firmware: qcom: uefisecapp: fix efivars registration race (Johan Hovold)
  - ARM: shmobile: smp: Enforce shmobile_smp_* alignment (Geert Uytterhoeven)
  - ARM: dts: imx6qdl-apalis: Fix poweroff on Apalis iMX6 (Stefan Eichenberger)
  - memcg: drain obj stock on cpu hotplug teardown (Shakeel Butt)
  - proc: fix UAF in proc_get_inode() (Ye Bin)
  - mm/page_alloc: fix memory accept before watermarks gets initialized (Kirill A. Shutemov)
  - mm/migrate: fix shmem xarray update during migration (Zi Yan)
  - mm: fix error handling in __filemap_get_folio() with FGP_NOWAIT (Raphael S. Carvalho)
  - selftests/mm: run_vmtests.sh: fix half_ufd_size_MB calculation (Rafael Aquini)
  - mmc: atmel-mci: Add missing clk_disable_unprepare() (Gu Bowen)
  - mmc: sdhci-brcmstb: add cqhci suspend/resume to PM ops (Kamal Dasu)
  - arm64: dts: rockchip: fix pinmux of UART5 for PX30 Ringneck on Haikou (Quentin Schulz)
  - arm64: dts: rockchip: fix pinmux of UART0 for PX30 Ringneck on Haikou (Quentin Schulz)
  - arm64: dts: freescale: imx8mm-verdin-dahlia: add Microphone Jack to sound card (Stefan Eichenberger)
  - arm64: dts: freescale: imx8mp-verdin-dahlia: add Microphone Jack to sound card (Stefan Eichenberger)
  - accel/qaic: Fix integer overflow in qaic_validate_req() (Dan Carpenter)
  - regulator: check that dummy regulator has been probed before using it (Christian Eggers)
  - regulator: dummy: force synchronous probing (Christian Eggers)
  - netfs: Call `invalidate_cache` only if implemented (Max Kellermann)
  - riscv: dts: starfive: Fix a typo in StarFive JH7110 pin function definitions (E Shattow)
  - io_uring/net: don't clear REQ_F_NEED_CLEANUP unconditionally (Jens Axboe)
  - drm/v3d: Don't run jobs that have errors flagged in its fence (Maíra Canal)
  - drm/xe: Fix exporting xe buffers multiple times (Tomasz Rusinowicz)
  - can: flexcan: disable transceiver during system PM (Haibo Chen)
  - can: flexcan: only change CAN state when link up in system PM (Haibo Chen)
  - can: ucan: fix out of bound read in strscpy() source (Vincent Mailhol)
  - can: rcar_canfd: Fix page entries in the AFL list (Biju Das)
  - dt-bindings: can: renesas,rcar-canfd: Fix typo in pattern properties for R-Car V4M (Biju Das)
  - net: mana: Support holes in device list reply msg (Haiyang Zhang)
  - i2c: omap: fix IRQ storms (Andreas Kemnade)
  - tracing: tprobe-events: Fix leakage of module refcount (Masami Hiramatsu (Google))
  - Revert "gre: Fix IPv6 link-local address generation." (Guillaume Nault)
  - net/neighbor: add missing policy for NDTPA_QUEUE_LENBYTES (Lin Ma)
  - libfs: Fix duplicate directory entry in offset_dir_lookup (Yongjian Sun)
  - net: ipv6: ioam6: fix lwtunnel_output() loop (Justin Iurman)
  - net: lwtunnel: fix recursion loops (Justin Iurman)
  - net: ti: icssg-prueth: Add lock to stats (MD Danish Anwar)
  - net: atm: fix use after free in lec_send() (Dan Carpenter)
  - gpu: host1x: Do not assume that a NULL domain means no DMA IOMMU (Jason Gunthorpe)
  - phy: fix xa_alloc_cyclic() error handling (Michal Swiatkowski)
  - dpll: fix xa_alloc_cyclic() error handling (Michal Swiatkowski)
  - devlink: fix xa_alloc_cyclic() error handling (Michal Swiatkowski)
  - ipv6: Set errno after ip_fib_metrics_init() in ip6_route_info_create(). (Kuniyuki Iwashima)
  - ipv6: Fix memleak of nhc_pcpu_rth_output in fib_check_nh_v6_gw(). (Kuniyuki Iwashima)
  - net: ipv6: fix TCP GSO segmentation with NAT (Felix Fietkau)
  - net: ethernet: ti: am65-cpsw: Fix NAPI registration sequence (Vignesh Raghavendra)
  - ata: libata-core: Add ATA_QUIRK_NO_LPM_ON_ATI for certain Samsung SSDs (Niklas Cassel)
  - tracing: tprobe-events: Fix to clean up tprobe correctly when module unload (Masami Hiramatsu (Google))
  - ARM: davinci: da850: fix selecting ARCH_DAVINCI_DA8XX (David Lechner)
  - accel/qaic: Fix possible data corruption in BOs > 2G (Jeffrey Hugo)
  - Bluetooth: hci_event: Fix connection regression between LE and non-LE adapters (Arkadiusz Bokowy)
  - Bluetooth: Fix error code in chan_alloc_skb_cb() (Dan Carpenter)
  - RDMA/hns: Fix wrong value of max_sge_rd (Junxian Huang)
  - RDMA/hns: Fix missing xa_destroy() (Junxian Huang)
  - RDMA/hns: Fix a missing rollback in error path of hns_roce_create_qp_common() (Junxian Huang)
  - RDMA/hns: Fix invalid sq params not being blocked (Junxian Huang)
  - RDMA/hns: Fix unmatched condition in error path of alloc_user_qp_db() (Junxian Huang)
  - RDMA/hns: Fix soft lockup during bt pages loop (Junxian Huang)
  - RDMA/bnxt_re: Avoid clearing VLAN_ID mask in modify qp path (Saravanan Vajravel)
  - dma-mapping: fix missing clear bdr in check_ram_in_range_map() (Baochen Qiang)
  - ARM: dts: BCM5301X: Fix switch port labels of ASUS RT-AC3200 (Chester A. Unal)
  - ARM: dts: BCM5301X: Fix switch port labels of ASUS RT-AC5300 (Chester A. Unal)
  - ARM: dts: bcm2711: Don't mark timer regs unconfigured (Phil Elwell)
  - ARM: OMAP1: select CONFIG_GENERIC_IRQ_CHIP (Arnd Bergmann)
  - RDMA/mlx5: Handle errors returned from mlx5r_ib_rate() (Qasim Ijaz)
  - RDMA/bnxt_re: Add missing paranthesis in map_qp_id_to_tbl_indx (Kashyap Desai)
  - RDMA/rxe: Fix the failure of ibv_query_device() and ibv_query_device_ex() tests (Zhu Yanjun)
  - arm64: dts: rockchip: Remove undocumented sdmmc property from lubancat-1 (Yao Zi)
  - arm64: dts: bcm2712: PL011 UARTs are actually r1p5 (Phil Elwell)
  - ARM: dts: bcm2711: PL011 UARTs are actually r1p5 (Phil Elwell)
  - ARM: dts: bcm2711: Fix xHCI power-domain (Stefan Wahren)
  - soc: imx8m: Unregister cpufreq and soc dev in cleanup path (Peng Fan)
  - soc: imx8m: Use devm_* to simplify probe failure handling (Marek Vasut)
  - soc: imx8m: Remove global soc_uid (Marek Vasut)
  - xfrm_output: Force software GSO only in tunnel mode (Cosmin Ratiu)
  - xfrm: fix tunnel mode TX datapath in packet offload mode (Alexandre Cassen)
  - arm64: dts: rockchip: remove supports-cqe from rk3588 tiger (Heiko Stuebner)
  - arm64: dts: rockchip: remove supports-cqe from rk3588 jaguar (Heiko Stuebner)
  - arm64: dts: freescale: tqma8mpql: Fix vqmmc-supply (Alexander Stein)
  - firmware: imx-scu: fix OF node leak in .probe() (Joe Hattori)
  - firmware: qcom: scm: Fix error code in probe() (Dan Carpenter)
  - rds: Tear down the copy-from-user cache before destroying rds_wq (Håkon Bugge)  [Orabug: 37379052]
  - uek-rpm: Set uek_release variable in UEK 8 spec file (Harshit Mogalapalli)  [Orabug: 37801392]


