[El-errata] ELBA-2023-12589 Oracle Linux 9 Unbreakable Enterprise kernel bug fix update

[Errata Announcements for Oracle Linux]

Oracle Linux Bug Fix Advisory ELBA-2023-12589

http://linux.oracle.com/errata/ELBA-2023-12589.html

The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:

x86_64:
bpftool-5.15.0-103.114.4.el9uek.x86_64.rpm
kernel-uek-5.15.0-103.114.4.el9uek.x86_64.rpm
kernel-uek-core-5.15.0-103.114.4.el9uek.x86_64.rpm
kernel-uek-debug-5.15.0-103.114.4.el9uek.x86_64.rpm
kernel-uek-debug-core-5.15.0-103.114.4.el9uek.x86_64.rpm
kernel-uek-debug-devel-5.15.0-103.114.4.el9uek.x86_64.rpm
kernel-uek-debug-modules-5.15.0-103.114.4.el9uek.x86_64.rpm
kernel-uek-debug-modules-extra-5.15.0-103.114.4.el9uek.x86_64.rpm
kernel-uek-devel-5.15.0-103.114.4.el9uek.x86_64.rpm
kernel-uek-doc-5.15.0-103.114.4.el9uek.noarch.rpm
kernel-uek-modules-5.15.0-103.114.4.el9uek.x86_64.rpm
kernel-uek-modules-extra-5.15.0-103.114.4.el9uek.x86_64.rpm



SRPMS:
http://oss.oracle.com/ol9/SRPMS-updates//kernel-uek-5.15.0-103.114.4.el9uek.src.rpm



Description of changes:

[5.15.0-103.114.4.el9uek]
- tick/common: Align tick period during sched_timer setup (Thomas Gleixner)  [Orabug: 35533588]

[5.15.0-103.114.3.el9uek]
- net/rds: Fix endless rds_send_xmit() loop if cp_index > 0 (Gerd Rausch)  [Orabug: 35307762]

[5.15.0-103.114.2.el9uek]
- selinux: don't use make's grouped targets feature yet (Paul Moore) 
- lib: cpu_rmap: Fix potential use-after-free in irq_cpu_rmap_release() (Ben Hutchings) 
- firmware: arm_ffa: Set handle field to zero in memory descriptor (Balint Dobszay) 
- Revert "ext4: don't clear SB_RDONLY when remounting r/w until quota is re-enabled" (Theodore Ts'o) 
- Revert "debugobject: Ensure pool refill (again)" (Greg Kroah-Hartman) 
- Revert "staging: rtl8192e: Replace macro RTL_PCI_DEVICE with PCI_DEVICE" (Greg Kroah-Hartman) 
- iommu/amd: Fix compile error for unused function (Joerg Roedel)  [Orabug: 35421758]
- iommu/amd: Do not Invalidate IRT when IRTE caching is disabled (Suravee Suthikulpanit)  [Orabug: 35421758]
- iommu/amd: Introduce Disable IRTE Caching Support (Suravee Suthikulpanit)  [Orabug: 35421758]
- iommu/amd: Remove the unused struct amd_ir_data.ref (Suravee Suthikulpanit)  [Orabug: 35421758]
- iommu/amd: Switch amd_iommu_update_ga() to use modify_irte_ga() (Joao Martins)  [Orabug: 35421758]
- iommu/amd: Handle GALog overflows (Joao Martins)  [Orabug: 35421758]
- KVM: x86: ioapic: Fix level-triggered EOI and userspace I/OAPIC reconfigure race (Adamos Ttofari)  [Orabug: 35421758]
- x86/fpu: KVM: Set the base guest FPU uABI size to sizeof(struct kvm_xsave) (Sean Christopherson)  [Orabug: 35446569]
- uek-rpm: Move mlx5-vfio-pci to core rpm (Samasth Norway Ananda)  [Orabug: 35469662]
- xfs: IO time one extent per EFI (Wengang Wang)  [Orabug: 35475137]
- xfs: log recovery stage split EFIs with multiple extents (Wengang Wang)  [Orabug: 35475137]
- rds/ib: Fix ib_rx_total_frags while freeing frags (Praveen Kumar Kannoju)  [Orabug: 35477331]

[5.15.0-103.114.1.el9uek]
- LTS version: v5.15.114 (Jack Vogel) 
- net: phy: mscc: add VSC8502 to MODULE_DEVICE_TABLE (David Epping) 
- 3c589_cs: Fix an error handling path in tc589_probe() (Christophe JAILLET) 
- regulator: mt6359: add read check for PMIC MT6359 (Sen Chu) 
- firmware: arm_ffa: Set reserved/MBZ fields to zero in the memory descriptors (Sudeep Holla) 
- arm64: dts: imx8mn-var-som: fix PHY detection bug by adding deassert delay (Hugo Villeneuve) 
- net/mlx5: Devcom, fix error flow in mlx5_devcom_register_device (Shay Drory) 
- net/mlx5: Fix error message when failing to allocate device memory (Roi Dayan) 
- net/mlx5: DR, Check force-loopback RC QP capability independently from RoCE (Yevgeny Kliteynik) 
- net/mlx5: DR, Fix crc32 calculation to work on big-endian (BE) CPUs (Erez Shitrit) 
- net/mlx5e: do as little as possible in napi poll when budget is 0 (Jakub Kicinski) 
- platform/mellanox: mlxbf-pmc: fix sscanf() error checking (Dan Carpenter) 
- forcedeth: Fix an error handling path in nv_probe() (Christophe JAILLET) 
- sctp: fix an issue that plpmtu can never go to complete state (Xin Long) 
- ASoC: Intel: Skylake: Fix declaration of enum skl_ch_cfg (Cezary Rojewski) 
- x86/show_trace_log_lvl: Ensure stack pointer is aligned, again (Vernon Lovejoy) 
- xen/pvcalls-back: fix double frees with pvcalls_new_active_socket() (Dan Carpenter) 
- coresight: Fix signedness bug in tmc_etr_buf_insert_barrier_packet() (Dan Carpenter) 
- regulator: pca9450: Fix BUCK2 enable_mask (Alexander Stein) 
- fs: fix undefined behavior in bit shift for SB_NOUSER (Hao Ge) 
- firmware: arm_ffa: Fix FFA device names for logical partitions (Sudeep Holla) 
- firmware: arm_ffa: Check if ffa_driver remove is present before executing (Sudeep Holla) 
- power: supply: sbs-charger: Fix INHIBITED bit for Status reg (Daisuke Nojiri) 
- power: supply: bq27xxx: Add cache parameter to bq27xxx_battery_current_and_status() (Hans de Goede) 
- power: supply: bq27xxx: Fix poll_interval handling and races on remove (Hans de Goede) 
- power: supply: bq27xxx: Fix I2C IRQ race on remove (Hans de Goede) 
- power: supply: bq27xxx: Fix bq27xxx_battery_update() race condition (Hans de Goede) 
- power: supply: mt6360: add a check of devm_work_autocancel in mt6360_charger_probe (Kang Chen) 
- power: supply: leds: Fix blink to LED on transition (Hans de Goede) 
- cifs: mapchars mount option ignored (Steve French) 
- ipv6: Fix out-of-bounds access in ipv6_find_tlv() (Gavrilov Ilia) 
- bpf: Fix mask generation for 32-bit narrow loads of 64-bit fields (Will Deacon) 
- octeontx2-pf: Fix TSOv6 offload (Sunil Goutham) 
- selftests: fib_tests: mute cleanup error message (Po-Hsu Lin) 
- net: fix skb leak in __skb_tstamp_tx() (Pratyush Yadav) 
- ASoC: lpass: Fix for KASAN use_after_free out of bounds (Ravulapati Vishnu Vardhan Rao) 
- media: radio-shark: Add endpoint checks (Alan Stern) 
- USB: sisusbvga: Add endpoint checks (Alan Stern) 
- USB: core: Add routines for endpoint checks in old drivers (Alan Stern) 
- udplite: Fix NULL pointer dereference in __sk_mem_raise_allocated(). (Kuniyuki Iwashima) 
- net: fix stack overflow when LRO is disabled for virtual interfaces (Taehee Yoo) 
- fbdev: udlfb: Fix endpoint check (Alan Stern) 
- debugobjects: Don't wake up kswapd from fill_pool() (Tetsuo Handa) 
- x86/topology: Fix erroneous smp_num_siblings on Intel Hybrid platforms (Zhang Rui) 
- perf/x86/uncore: Correct the number of CHAs on SPR (Kan Liang) 
- parisc: Fix flush_dcache_page() for usage from irq context (Helge Deller) 
- selftests/memfd: Fix unknown type name build failure (Hardik Garg) 
- x86/mm: Avoid incomplete Global INVLPG flushes (Dave Hansen) 
- dt-binding: cdns,usb3: Fix cdns,on-chip-buff-size type (Frank Li) 
- btrfs: use nofs when cleaning up aborted transactions (Josef Bacik) 
- gpio: mockup: Fix mode of debugfs files (Zev Weiss) 
- parisc: Allow to reboot machine after system halt (Helge Deller) 
- parisc: Handle kgdb breakpoints only in kernel context (Helge Deller) 
- m68k: Move signal frame following exception on 68020/030 (Finn Thain) 
- net: cdc_ncm: Deal with too low values of dwNtbOutMaxSize (Tudor Ambarus) 
- ASoC: rt5682: Disable jack detection interrupt during suspend (Matthias Kaehlcke) 
- mmc: sdhci-esdhc-imx: make "no-mmc-hs400" works (Haibo Chen) 
- ALSA: hda/realtek: Enable headset onLenovo M70/M90 (Bin Li) 
- ALSA: hda: Fix unhandled register update during auto-suspend period (Takashi Iwai) 
- ALSA: hda/ca0132: add quirk for EVGA X299 DARK (Adam Stylinski) 
- arm64: Also reset KASAN tag if page is not PG_mte_tagged (Peter Collingbourne) 
- ocfs2: Switch to security_inode_init_security() (Roberto Sassu) 
- spi: fsl-cpm: Use 16 bit mode for large transfers with even size (Christophe Leroy) 
- spi: fsl-spi: Re-organise transfer bits_per_word adaptation (Christophe Leroy) 
- ARM: dts: stm32: fix AV96 board SAI2 pin muxing on stm32mp15 (Olivier Moysan) 
- watchdog: sp5100_tco: Immediately trigger upon starting. (Gregory Oakes) 
- dt-bindings: ata: ahci-ceva: Cover all 4 iommus entries (Michal Simek) 
- dt-bindings: ata: ahci-ceva: convert to yaml (Piyush Mehta) 
- usb: dwc3: fix gadget mode suspend interrupt handler issue (Linyu Yuan) 
- usb: gadget: Properly configure the device for remote wakeup (Elson Roy Serrao) 
- LTS version: v5.15.113 (Jack Vogel) 
- HID: wacom: add three styli to wacom_intuos_get_tool_type (Ping Cheng) 
- HID: wacom: Add new Intuos Pro Small (PTH-460) device IDs (Ping Cheng) 
- HID: wacom: Force pen out of prox if no events have been received in a while (Jason Gerecke) 
- s390/qdio: fix do_sqbs() inline assembly constraint (Heiko Carstens) 
- nilfs2: fix use-after-free bug of nilfs_root in nilfs_evict_inode() (Ryusuke Konishi) 
- powerpc/64s/radix: Fix soft dirty tracking (Michael Ellerman) 
- tpm/tpm_tis: Disable interrupts for more Lenovo devices (Jerry Snitselaar) 
- powerpc/iommu: Incorrect DDW Table is referenced for SR-IOV device (Gaurav Batra) 
- ceph: force updating the msg pointer in non-split case (Xiubo Li) 
- vc_screen: reload load of struct vc_data pointer in vcs_write() to avoid UAF (George Kennedy) 
- thunderbolt: Clear registers properly when auto clear isn't in use (Mario Limonciello) 
- serial: qcom-geni: fix enabling deactivated interrupt (Krzysztof Kozlowski) 
- serial: 8250_exar: Add support for USR298x PCI Modems (Andrew Davis) 
- serial: Add support for Advantech PCI-1611U card (Vitaliy Tomin) 
- statfs: enforce statfs[64] structure initialization (Ilya Leoshkevich) 
- ksmbd: fix global-out-of-bounds in smb2_find_context_vals (Chih-Yen Chang) 
- ksmbd: fix wrong UserName check in session_user (Chih-Yen Chang) 
- ksmbd: allocate one more byte for implied bcc[0] (Chih-Yen Chang) 
- ksmbd: smb2: Allow messages padded to 8byte boundary (Gustav Johansson) 
- SMB3: drop reference to cfile before sending oplock break (Bharath SM) 
- SMB3: Close all deferred handles of inode in case of handle lease break (Bharath SM) 
- can: kvaser_pciefd: Disable interrupts in probe error path (Jimmy Assarsson) 
- can: kvaser_pciefd: Do not send EFLUSH command on TFD interrupt (Jimmy Assarsson) 
- can: kvaser_pciefd: Clear listen-only bit if not explicitly requested (Jimmy Assarsson) 
- can: kvaser_pciefd: Empty SRB buffer in probe (Jimmy Assarsson) 
- can: kvaser_pciefd: Call request_irq() before enabling interrupts (Jimmy Assarsson) 
- can: kvaser_pciefd: Set CAN_STATE_STOPPED in kvaser_pciefd_stop() (Jimmy Assarsson) 
- can: isotp: recvmsg(): allow MSG_CMSG_COMPAT flag (Oliver Hartkopp) 
- can: j1939: recvmsg(): allow MSG_CMSG_COMPAT flag (Oliver Hartkopp) 
- ALSA: hda/realtek: Add quirk for 2nd ASUS GU603 (Luke D. Jones) 
- ALSA: hda/realtek: Add a quirk for HP EliteDesk 805 (Ai Chao) 
- ALSA: hda/realtek: Add quirk for Clevo L140AU (Jeremy Soller) 
- ALSA: hda: Add NVIDIA codec IDs a3 through a7 to patch table (Nikhil Mahale) 
- ALSA: hda: Fix Oops by 9.1 surround channel names (Takashi Iwai) 
- xhci: Fix incorrect tracking of free space on transfer rings (Mathias Nyman) 
- xhci-pci: Only run d3cold avoidance quirk for s2idle (Mario Limonciello) 
- usb: typec: altmodes/displayport: fix pin_assignment_show (Badhri Jagan Sridharan) 
- usb: gadget: u_ether: Fix host MAC address case (Konrad Gräfe) 
- usb: dwc3: debugfs: Resume dwc3 before accessing registers (Udipto Goswami) 
- USB: UHCI: adjust zhaoxin UHCI controllers OverCurrent bit value (Weitao Wang) 
- usb-storage: fix deadlock when a scsi command timeouts more than once (Maxime Bizon) 
- USB: usbtmc: Fix direction for 0-length ioctl control messages (Alan Stern) 
- ALSA: usb-audio: Add a sample rate workaround for Line6 Pod Go (Takashi Iwai) 
- bridge: always declare tunnel functions (Arnd Bergmann) 
- netfilter: nft_set_rbtree: fix null deref on element insertion (Florian Westphal) 
- netfilter: nf_tables: fix nft_trans type confusion (Florian Westphal) 
- vlan: fix a potential uninit-value in vlan_dev_hard_start_xmit() (Eric Dumazet) 
- igb: fix bit_shift to be in [1..8] range (Aleksandr Loktionov) 
- net: dsa: mv88e6xxx: Fix mv88e6393x EPC write command offset (Marco Migliore) 
- cassini: Fix a memory leak in the error handling path of cas_init_one() (Christophe JAILLET) 
- scsi: storvsc: Don't pass unused PFNs to Hyper-V host (Michael Kelley) 
- wifi: iwlwifi: mvm: don't trust firmware n_channels (Johannes Berg) 
- wifi: iwlwifi: mvm: fix cancel_delayed_work_sync() deadlock (Johannes Berg) 
- wifi: mac80211: fix min center freq offset tracing (Johannes Berg) 
- net: bcmgenet: Restore phy_stop() depending upon suspend/close (Florian Fainelli) 
- net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop() (Florian Fainelli) 
- s390/cio: include subchannels without devices also for evaluation (Vineeth Vijayan) 
- tipc: check the bearer min mtu properly when setting it by netlink (Xin Long) 
- tipc: do not update mtu if msg_max is too small in mtu negotiation (Xin Long) 
- tipc: add tipc_bearer_min_mtu to calculate min mtu (Xin Long) 
- virtio_net: Fix error unwinding of XDP initialization (Feng Liu) 
- virtio-net: Maintain reverse cleanup order (Parav Pandit) 
- net: nsh: Use correct mac_offset to unwind gso skb in nsh_gso_segment() (Dong Chenchen) 
- drm/exynos: fix g2d_open/close helper function definitions (Arnd Bergmann) 
- SUNRPC: Fix trace_svc_register() call site (Chuck Lever) 
- SUNRPC: always free ctxt when freeing deferred request (NeilBrown) 
- SUNRPC: Remove svc_rqst::rq_xprt_hlen (Chuck Lever) 
- SUNRPC: Remove dead code in svc_tcp_release_rqst() (Chuck Lever) 
- SUNRPC: Clean up svc_deferred_class trace events (Chuck Lever) 
- tracing: Introduce helpers to safely handle dynamic-sized sockaddrs (Chuck Lever) 
- SUNRPC: double free xprt_ctxt while still in use (NeilBrown) 
- media: netup_unidvb: fix use-after-free at del_timer() (Duoming Zhou) 
- net: hns3: fix reset delay time to avoid configuration timeout (Jie Wang) 
- net: hns3: fix sending pfc frames after reset issue (Jijie Shao) 
- net: hns3: fix output information incomplete for dumping tx queue info with debugfs (Jie Wang) 
- erspan: get the proto with the md version for collect_md (Xin Long) 
- serial: 8250_bcm7271: fix leak in brcmuart_probe (Doug Berger) 
- serial: 8250_bcm7271: balance clk_enable calls (Doug Berger) 
- serial: arc_uart: fix of_iomap leak in arc_serial_probe (Ke Zhang) 
- tcp: fix possible sk_priority leak in tcp_v4_send_reset() (Eric Dumazet) 
- vsock: avoid to close connected socket after the timeout (Zhuang Shengen) 
- ALSA: hda/realtek: Apply HP B&O top speaker profile to Pavilion 15 (Ryan C. Underwood) 
- ALSA: firewire-digi00x: prevent potential use after free (Dan Carpenter) 
- net: phy: dp83867: add w/a for packet errors seen with short cables (Grygorii Strashko) 
- net: fec: Better handle pm_runtime_get() failing in .remove() (Uwe Kleine-König) 
- selftets: seg6: disable rp_filter by default in srv6_end_dt4_l3vpn_test (Andrea Mayer) 
- selftests: seg6: disable DAD on IPv6 router cfg for srv6_end_dt4_l3vpn_test (Andrea Mayer) 
- af_key: Reject optional tunnel/BEET mode templates in outbound policies (Tobias Brunner) 
- cpupower: Make TSC read per CPU for Mperf monitor (Wyes Karny) 
- ASoC: fsl_micfil: Fix error handler with pm_runtime_enable (Shengjiu Wang) 
- dt-bindings: display/msm: dsi-controller-main: Document qcom, master-dsi and qcom, sync-dual-dsi (Jianhua Lu) 
- drm/msm/dpu: Remove duplicate register defines from INTF (Marijn Suijten) 
- drm/msm/dpu: Move non-MDP_TOP INTF_INTR offsets out of hwio header (Marijn Suijten) 
- drm/msm/dpu: Add INTF_5 interrupts (Bjorn Andersson) 
- drm/msm/dp: unregister audio driver during unbind (Srinivas Kandagatla) 
- Revert "Fix XFRM-I support for nested ESP tunnels" (Martin Willi) 
- xfrm: don't check the default policy if the policy allows the packet (Sabrina Dubroca) 
- platform/x86: hp-wmi: add micmute to hp_wmi_keymap struct (Fae) 
- platform/x86: Move existing HP drivers to a new hp subdir (Jorge Lopez) 
- platform/x86: hp-wmi: Support touchpad on/off (Daniel Houldsworth) 
- parisc: Replace regular spinlock with spin_trylock on panic path (Guilherme G. Piccoli) 
- mfd: dln2: Fix memory leak in dln2_probe() (Qiang Ning) 
- soundwire: qcom: gracefully handle too many ports in DT (Krzysztof Kozlowski) 
- phy: st: miphy28lp: use _poll_timeout functions for waits (Alain Volmat) 
- Input: xpad - add constants for GIP interface numbers (Vicki Pfau) 
- iommu/sprd: Release dma buffer to avoid memory leak (Chunyan Zhang) 
- iommu/arm-smmu-v3: Acknowledge pri/event queue overflow if any (Tomas Krcka) 
- clk: tegra20: fix gcc-7 constant overflow warning (Arnd Bergmann) 
- fs/ntfs3: Fix a possible null-pointer dereference in ni_clear() (Jia-Ju Bai) 
- fs/ntfs3: Add length check in indx_get_root (Edward Lo) 
- fs/ntfs3: Validate MFT flags before replaying logs (Edward Lo) 
- fs/ntfs3: Fix NULL dereference in ni_write_inode (Abdun Nihaal) 
- fs/ntfs3: Enhance the attribute size check (Edward Lo) 
- fs/ntfs3: Fix NULL pointer dereference in 'ni_write_inode' (Ye Bin) 
- iommu/arm-smmu-qcom: Limit the SMR groups to 128 (Manivannan Sadhasivam) 
- RDMA/core: Fix multiple -Warray-bounds warnings (Gustavo A. R. Silva) 
- recordmcount: Fix memory leaks in the uwrite function (Hao Zeng) 
- sched: Fix KCSAN noinstr violation (Josh Poimboeuf) 
- mcb-pci: Reallocate memory region to avoid memory overlapping (Rodríguez Barbarin, José Javier) 
- serial: 8250: Reinit port->pm on port specific driver unbind (Tony Lindgren) 
- usb: typec: tcpm: fix multiple times discover svids error (Frank Wang) 
- HID: wacom: generic: Set battery quirk only when we see battery data (Jason Gerecke) 
- spi: spi-imx: fix MX51_ECSPI_* macros when cs > 3 (Kevin Groeneveld) 
- HID: logitech-hidpp: Reconcile USB and Unifying serials (Bastien Nocera) 
- HID: logitech-hidpp: Don't use the USB serial for USB devices (Bastien Nocera) 
- staging: rtl8192e: Replace macro RTL_PCI_DEVICE with PCI_DEVICE (Philipp Hortmann) 
- Bluetooth: L2CAP: fix "bad unlock balance" in l2cap_disconnect_rsp (Min Li) 
- Bluetooth: hci_bcm: Fall back to getting bdaddr from EFI if not set (Hans de Goede) 
- Bluetooth: btintel: Add LE States quirk support (Chethan T N) 
- ipvs: Update width of source for ip_vs_sync_conn_options (Simon Horman) 
- nbd: fix incomplete validation of ioctl arg (Zhong Jinghua) 
- wifi: ath11k: Fix SKB corruption in REO destination ring (Nagarajan Maran) 
- wifi: iwlwifi: dvm: Fix memcpy: detected field-spanning write backtrace (Hans de Goede) 
- null_blk: Always check queue mode setting from configfs (Chaitanya Kulkarni) 
- wifi: iwlwifi: pcie: Fix integer overflow in iwl_write_to_user_buf (Hyunwoo Kim) 
- wifi: iwlwifi: pcie: fix possible NULL pointer dereference (Daniel Gabay) 
- bpf: Add preempt_count_{sub,add} into btf id deny list (Yafang) 
- samples/bpf: Fix fout leak in hbm's run_bpf_prog (Hao Zeng) 
- f2fs: fix to check readonly condition correctly (Chao Yu) 
- f2fs: fix to drop all dirty pages during umount() if cp_error is set (Chao Yu) 
- ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa() (Ojaswin Mujoo) 
- ext4: set goal start correctly in ext4_mb_normalize_request (Kemeng Shi) 
- scsi: ufs: ufs-pci: Add support for Intel Lunar Lake (Adrian Hunter) 
- gfs2: Fix inode height consistency check (Andreas Gruenbacher) 
- scsi: message: mptlan: Fix use after free bug in mptlan_remove() due to race condition (Zheng Wang) 
- lib: cpu_rmap: Avoid use after free on rmap->obj array entries (Eli Cohen) 
- net: Catch invalid index in XPS mapping (Nick Child) 
- net: pasemi: Fix return type of pasemi_mac_start_tx() (Nathan Chancellor) 
- bnxt: avoid overflow in bnxt_get_nvram_directory() (Maxim Korotkov) 
- scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow (Justin Tee) 
- ext2: Check block size validity during mount (Jan Kara) 
- wifi: brcmfmac: cfg80211: Pass the PMK in binary instead of hex (Hector Martin) 
- bpf: Annotate data races in bpf_local_storage (Kumar Kartikeya Dwivedi) 
- wifi: ath: Silence memcpy run-time false positive warning (Kees Cook) 
- media: Prefer designated initializers over memset for subdev pad ops (Laurent Pinchart) 
- drm/amd: Fix an out of bounds error in BIOS parser (Mario Limonciello) 
- ACPICA: ACPICA: check null return of ACPI_ALLOCATE_ZEROED in acpi_db_display_objects (void0red) 
- ACPICA: Avoid undefined behavior: applying zero offset to null pointer (Tamir Duberstein) 
- drm/msm/dp: Clean up handling of DP AUX interrupts (Douglas Anderson) 
- drm/tegra: Avoid potential 32-bit integer overflow (Nur Hussein) 
- remoteproc: stm32_rproc: Add mutex protection for workqueue (Arnaud Pouliquen) 
- ACPI: EC: Fix oops when removing custom query handlers (Armin Wolf) 
- firmware: arm_sdei: Fix sleep from invalid context BUG (Pierre Gondois) 
- memstick: r592: Fix UAF bug in r592_remove due to race condition (Zheng Wang) 
- media: pci: tw68: Fix null-ptr-deref bug in buf prepare and finish (harperchen) 
- media: cx23885: Fix a null-ptr-deref bug in buffer_prepare() and buffer_finish() (harperchen) 
- arm64: dts: qcom: msm8996: Add missing DWC3 quirks (Konrad Dybcio) 
- regmap: cache: Return error in cache sync operations for REGCACHE_NONE (Alexander Stein) 
- drm/amd/display: Use DC_LOG_DC in the trasform pixel function (Rodrigo Siqueira) 
- drm/displayid: add displayid_get_header() and check bounds better (Jani Nikula) 
- fs: hfsplus: remove WARN_ON() from hfsplus_cat_{read,write}_inode() (Tetsuo Handa) 
- rcu: Protect rcu_print_task_exp_stall() ->exp_tasks access (Zqiang) 
- refscale: Move shutdown from wait_event() to wait_event_idle() (Paul E. McKenney) 
- ext4: allow ext4_get_group_info() to fail (Theodore Ts'o) 
- ext4: allow to find by goal if EXT4_MB_HINT_GOAL_ONLY is set (Kemeng Shi) 
- ext4: fix lockdep warning when enabling MMP (Jan Kara) 
- ext4: don't clear SB_RDONLY when remounting r/w until quota is re-enabled (Theodore Ts'o) 
- ext4: reflect error codes from ext4_multi_mount_protect() to its callers (Theodore Ts'o) 
- ext4: remove an unused variable warning with CONFIG_QUOTA=n (Austin Kim) 
- fbdev: arcfb: Fix error handling in arcfb_probe() (Zongjie Li) 
- drm/i915/dp: prevent potential div-by-zero (Nikita Zhandarovich) 
- af_unix: Fix data races around sk->sk_shutdown. (Kuniyuki Iwashima) 
- af_unix: Fix a data race of sk->sk_receive_queue->qlen. (Kuniyuki Iwashima) 
- net: datagram: fix data-races in datagram_poll() (Eric Dumazet) 
- ipvlan:Fix out-of-bounds caused by unclear skb->cb (t.feng) 
- gve: Remove the code of clearing PBA bit (Ziwei Xiao) 
- tcp: add annotations around sk->sk_shutdown accesses (Eric Dumazet) 
- net: add vlan_get_protocol_and_depth() helper (Eric Dumazet) 
- net: deal with most data-races in sk_wait_event() (Eric Dumazet) 
- net: annotate sk->sk_err write from do_recvmmsg() (Eric Dumazet) 
- netlink: annotate accesses to nlk->cb_running (Eric Dumazet) 
- netfilter: conntrack: fix possible bug_on with enable_hooks=1 (Florian Westphal) 
- netfilter: nf_tables: always release netdev hooks from notifier (Florian Westphal) 
- net: Fix load-tearing on sk->sk_stamp in sock_recv_cmsgs(). (Kuniyuki Iwashima) 
- net: stmmac: Initialize MAC_ONEUS_TIC_COUNTER register (Marek Vasut) 
- net: stmmac: switch to use interrupt for hw crosstimestamping (Wong Vee Khee) 
- linux/dim: Do nothing if no time delta between samples (Roy Novich) 
- tick/broadcast: Make broadcast device replacement work correctly (Thomas Gleixner) 
- scsi: ufs: core: Fix I/O hang that occurs when BKOPS fails in W-LUN suspend (Keoseong Park) 
- net: mdio: mvusb: Fix an error handling path in mvusb_mdio_probe() (Christophe JAILLET) 
- ARM: 9296/1: HP Jornada 7XX: fix kernel-doc warnings (Randy Dunlap) 
- drm/mipi-dsi: Set the fwnode for mipi_dsi_device (Saravana Kannan) 
- LTS version: v5.15.112 (Jack Vogel) 
- drm/amd/display: Fix hang when skipping modeset (Aurabindo Pillai) 
- drbd: correctly submit flush bio on barrier (Christoph Böhmwalder) 
- serial: 8250: Fix serial8250_tx_empty() race with DMA Tx (Ilpo Järvinen) 
- drm/msm/adreno: adreno_gpu: Use suspend() instead of idle() on load error (Konrad Dybcio) 
- ext4: fix invalid free tracking in ext4_xattr_move_to_block() (Theodore Ts'o) 
- ext4: remove a BUG_ON in ext4_mb_release_group_pa() (Theodore Ts'o) 
- ext4: bail out of ext4_xattr_ibody_get() fails for any reason (Theodore Ts'o) 
- ext4: add bounds checking in get_max_inline_xattr_value_size() (Theodore Ts'o) 
- ext4: fix deadlock when converting an inline directory in nojournal mode (Theodore Ts'o) 
- ext4: improve error handling from ext4_dirhash() (Theodore Ts'o) 
- ext4: improve error recovery code paths in __ext4_remount() (Theodore Ts'o) 
- ext4: check iomap type only if ext4_iomap_begin() does not fail (Baokun Li) 
- ext4: fix data races when using cached status extents (Jan Kara) 
- ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum (Tudor Ambarus) 
- ext4: fix WARNING in mb_find_extent (Ye Bin) 
- locking/rwsem: Add __always_inline annotation to __down_read_common() and inlined callers (John Stultz) 
- ksmbd: not allow guest user on multichannel (Namjae Jeon) 
- ksmbd: fix deadlock in ksmbd_find_crypto_ctx() (Namjae Jeon) 
- ksmbd: fix racy issue while destroying session on multichannel (Namjae Jeon) 
- ksmbd: fix kernel oops from idr_remove() (Namjae Jeon) 
- ksmbd: add channel rwlock (Namjae Jeon) 
- ksmbd: replace sessions list in connection with xarray (Namjae Jeon) 
- ksmbd: fix multi session connection failure (Namjae Jeon) 
- ksmbd: set RSS capable in FSCTL_QUERY_NETWORK_INTERFACE_INFO (Namjae Jeon) 
- wifi: rtw88: rtw8821c: Fix rfe_option field width (Sascha Hauer) 
- drm/amd/display: Add NULL plane_state check for cursor disable logic (Nicholas Kazlauskas) 
- drm/amd/display: Refine condition of cursor visibility for pipe-split (Dale Zhao) 
- drm/msm/adreno: fix runtime PM imbalance at gpu load (Johan Hovold) 
- drm/msm: Remove struct_mutex usage (Rob Clark) 
- drm/i915/dg2: Add HDMI pixel clock frequencies 267.30 and 319.89 MHz (Ankit Nautiyal) 
- drm/i915/dg2: Add additional HDMI pixel clock frequencies (Taylor, Clinton A) 
- drm/i915/dg2: Support 4k at 30 on HDMI (Vandita Kulkarni) 
- ASoC: soc-pcm.c: call __soc_pcm_close() in soc_pcm_close() (Kuninori Morimoto) 
- ASoC: DPCM: Don't pick up BE without substream (Takashi Iwai) 
- ASoC: soc-pcm: Move debugfs removal out of spinlock (Takashi Iwai) 
- ASoC: soc-compress: Inherit atomicity from DAI link for Compress FE (Daniel Baluta) 
- ASoC: soc-pcm: Fix DPCM lockdep warning due to nested stream locks (Takashi Iwai) 
- fs/ntfs3: Refactoring of various minor issues (Konstantin Komarov) 
- HID: wacom: insert timestamp to packed Bluetooth (BT) events (Ping Cheng) 
- HID: wacom: Set a default resolution for older tablets (Ping Cheng) 
- drm/amdgpu: disable sdma ecc irq only when sdma RAS is enabled in suspend (Guchun Chen) 
- drm/amdgpu: Fix vram recover doesn't work after whole GPU reset (v2) (Lin.Cao) 
- drm/amdgpu/gfx: disable gfx9 cp_ecc_error_irq only when enabling legacy gfx ras (Guchun Chen) 
- drm/amdgpu: fix an amdgpu_irq_put() issue in gmc_v9_0_hw_fini() (Hamza Mahfooz) 
- drm/amd/display: fix flickering caused by S/G mode (Hamza Mahfooz) 
- drm/panel: otm8009a: Set backlight parent to panel device (James Cowgill) 
- f2fs: fix potential corruption when moving a directory (Jaegeuk Kim) 
- drm/msm: fix NULL-deref on irq uninstall (Johan Hovold) 
- drm/msm: fix NULL-deref on snapshot tear down (Johan Hovold) 
- drm/bridge: lt8912b: Fix DSI Video Mode (Francesco Dolcini) 
- ARM: dts: s5pv210: correct MIPI CSIS clock name (Krzysztof Kozlowski) 
- ARM: dts: exynos: fix WM8960 clock name in Itop Elite (Krzysztof Kozlowski) 
- remoteproc: imx_rproc: Call of_node_put() on iteration error (Mathieu Poirier) 
- remoteproc: st: Call of_node_put() on iteration error (Mathieu Poirier) 
- remoteproc: stm32: Call of_node_put() on iteration error (Mathieu Poirier) 
- sh: nmi_debug: fix return value of __setup handler (Randy Dunlap) 
- sh: init: use OF_EARLY_FLATTREE for early init (Randy Dunlap) 
- sh: mcount.S: fix build error when PRINTK is not enabled (Randy Dunlap) 
- sh: math-emu: fix macro redefined warning (Randy Dunlap) 
- SMB3: force unmount was failing to close deferred close files (Steve French) 
- smb3: fix problem remounting a share after shutdown (Steve French) 
- inotify: Avoid reporting event with invalid wd (Jan Kara) 
- platform/x86: touchscreen_dmi: Add info for the Dexp Ursus KX210i (Andrey Avdeev) 
- platform/x86: touchscreen_dmi: Add upside-down quirk for GDIX1002 ts on the Juno Tablet (Hans de Goede) 
- cifs: release leases for deferred close handles when freezing (Steve French) 
- cifs: fix pcchunk length type in smb2_copychunk_range (Pawel Witek) 
- btrfs: fix space cache inconsistency after error loading it from disk (Filipe Manana) 
- btrfs: print-tree: parent bytenr must be aligned to sector size (Anastasia Belova) 
- btrfs: zero the buffer before marking it dirty in btrfs_redirty_list_add (Christoph Hellwig) 
- btrfs: don't free qgroup space unless specified (Josef Bacik) 
- btrfs: fix encoded write i_size corruption with no-holes (Boris Burkov) 
- btrfs: zoned: fix wrong use of bitops API in btrfs_ensure_empty_zones (Naohiro Aota) 
- btrfs: fix btrfs_prev_leaf() to not return the same key twice (Filipe Manana) 
- perf stat: Separate bperf from bpf_profiler (Dmitrii Dolgov) 
- perf evlist: Refactor evlist__for_each_cpu() (Ian Rogers) 
- perf symbols: Fix return incorrect build_id size in elf_read_build_id() (Yang Jihong) 
- crypto: engine - fix crypto_queue backlog handling (Olivier Bacon) 
- crypto: engine - Use crypto_request_complete (Herbert Xu) 
- crypto: api - Add scaffolding to change completion function signature (Herbert Xu) 
- crypto: engine - check if BH is disabled during completion (Corentin Labbe) 
- crypto: sun8i-ss - Fix a test in sun8i_ss_setup_ivs() (Christophe JAILLET) 
- perf map: Delete two variable initialisations before null pointer checks in sort__sym_from_cmp() (Markus Elfring) 
- perf pmu: zfree() expects a pointer to a pointer to zero it after freeing its contents (Arnaldo Carvalho de Melo) 
- perf vendor events power9: Remove UTF-8 characters from JSON files (Kajol Jain) 
- perf scripts intel-pt-events.py: Fix IPC output for Python 2 (Roman Lozko) 
- net: enetc: check the index of the SFI rather than the handle (Wei Fang) 
- virtio_net: suppress cpu stall when free_unused_bufs (Wenliang Wang) 
- virtio_net: split free_unused_bufs() (Xuan Zhuo) 
- net: dsa: mt7530: fix corrupt frames using trgmii on 40 MHz XTAL MT7621 (Arınç ÜNAL) 
- ALSA: caiaq: input: Add error handling for unsupported input methods in snd_usb_caiaq_input_init (Ruliang Lin) 
- drm/amdgpu: add a missing lock for AMDGPU_SCHED (Chia-I Wu) 
- af_packet: Don't send zero-byte data in packet_sendmsg_spkt(). (Kuniyuki Iwashima) 
- ionic: catch failure from devlink_alloc (Shannon Nelson) 
- ethtool: Fix uninitialized number of lanes (Ido Schimmel) 
- ionic: remove noise from ethtool rxnfc error msg (Shannon Nelson) 
- octeontx2-vf: Detach LF resources on probe cleanup (Subbaraya Sundeep) 
- octeontx2-pf: Disable packet I/O for graceful exit (Subbaraya Sundeep) 
- octeontx2-af: Skip PFs if not enabled (Ratheesh Kannoth) 
- octeontx2-af: Secure APR table update with the lock (Geetha sowjanya) 
- rxrpc: Fix hard call timeout units (David Howells) 
- sfc: Fix module EEPROM reporting for QSFP modules (Andy Moreton) 
- r8152: move setting r8153b_rx_agg_chg_indicate() (Hayes Wang) 
- r8152: fix the poor throughput for 2.5G devices (Hayes Wang) 
- r8152: fix flow control issue of RTL8156A (Hayes Wang) 
- net/sched: act_mirred: Add carrier check (Victor Nogueira) 
- RISC-V: mm: Enable huge page support to kernel_page_present() function (Sia Jee Heng) 
- watchdog: dw_wdt: Fix the error handling path of dw_wdt_drv_probe() (Christophe JAILLET) 
- writeback: fix call of incorrect macro (Maxim Korotkov) 
- net: dsa: mv88e6xxx: add mv88e6321 rsvd2cpu (Angelo Dureghello) 
- selftests: srv6: make srv6_end_dt46_l3vpn_test more robust (Andrea Mayer) 
- sit: update dev->needed_headroom in ipip6_tunnel_bind_dev() (Cong Wang) 
- net/sched: cls_api: remove block_cb from driver_list before freeing (Vlad Buslov) 
- net/ncsi: clear Tx enable mode when handling a Config required AEN (Cosmo Chou) 
- scsi: qedi: Fix use after free bug in qedi_remove() (Zheng Wang) 
- fs/ntfs3: Fix null-ptr-deref on inode->i_op in ntfs_lookup() (ZhangPeng) 
- ASoC: soc-pcm: fix BE handling of PAUSE_RELEASE (Pierre-Louis Bossart) 
- ASoC: soc-pcm: test refcount before triggering (Pierre-Louis Bossart) 
- ASoC: soc-pcm: serialize BE triggers (Takashi Iwai) 
- ASoC: soc-pcm: Fix and cleanup DPCM locking (Takashi Iwai) 
- ASoC: soc-pcm: align BE 'atomicity' with that of the FE (Pierre-Louis Bossart) 
- ASoC: soc-pcm: use GFP_ATOMIC for dpcm structure (Pierre-Louis Bossart) 
- mailbox: zynqmp: Fix counts of child nodes (Tanmay Shah) 
- mailbox: zynq: Switch to flexible array to simplify code (Christophe JAILLET) 
- bus: mhi: host: Range check CHDBOFF and ERDBOFF (Jeffrey Hugo) 
- bus: mhi: host: Use mhi_tryset_pm_state() for setting fw error state (Jeffrey Hugo) 
- bus: mhi: host: Remove duplicate ee check for syserr (Jeffrey Hugo) 
- uek-rpm: update the location of the mhi driver (Jack Vogel) 
- bus: mhi: Move host MHI code to "host" directory (Manivannan Sadhasivam) 
- ubifs: Fix memory leak in do_rename (Mårten Lindahl) 
- ubifs: Fix AA deadlock when setting xattr for encrypted file (Zhihao Cheng) 
- crypto: ccp - Clear PSP interrupt status register before calling handler (Jeremi Piotrowski) 
- ring-buffer: Ensure proper resetting of atomic variables in ring_buffer_reset_online_cpus (Tze-nan Wu) 
- LTS version: v5.15.111 (Jack Vogel) 
- arm64: dts: qcom: sdm845: correct dynamic power coefficients - again (Vincent Guittot) 
- sound/oss/dmasound: fix 'dmasound_setup' defined but not used (Miles Chen) 
- debugobject: Ensure pool refill (again) (Thomas Gleixner) 
- perf intel-pt: Fix CYC timestamps after standalone CBR (Adrian Hunter) 
- perf auxtrace: Fix address filter entire kernel size (Adrian Hunter) 
- dm: don't lock fs when the map is NULL in process of resume (Li Lingfeng) 
- dm ioctl: fix nested locking in table_clear() to remove deadlock concern (Mike Snitzer) 
- dm flakey: fix a crash with invalid table line (Mikulas Patocka) 
- dm integrity: call kmem_cache_destroy() in dm_integrity_init() error path (Mike Snitzer) 
- dm clone: call kmem_cache_destroy() in dm_clone_init() error path (Mike Snitzer) 
- dm verity: fix error handling for check_at_most_once on FEC (Yeongjin Gil) 
- ia64: fix an addr to taddr in huge_pte_offset() (Hugh Dickins) 
- s390/dasd: fix hanging blockdevice after request requeue (Stefan Haberland) 
- btrfs: scrub: reject unsupported scrub flags (Qu Wenruo) 
- scripts/gdb: fix lx-timerlist for Python3 (Peng Liu) 
- clk: rockchip: rk3399: allow clk_cifout to force clk_cifout_src to reparent (Quentin Schulz) 
- wifi: rtl8xxxu: RTL8192EU always needs full init (Bitterblue Smith) 
- mailbox: zynqmp: Fix typo in IPI documentation (Tanmay Shah) 
- mailbox: zynqmp: Fix IPI isr handling (Tanmay Shah) 
- mtd: core: fix error path for nvmem provider (Michael Walle) 
- mtd: core: fix nvmem error reporting (Michael Walle) 
- mtd: core: provide unique name for nvmem device, take two (Michael Walle) 
- md/raid10: fix null-ptr-deref in raid10_sync_request (Li Nan) 
- nilfs2: fix infinite loop in nilfs_mdt_get_block() (Ryusuke Konishi) 
- nilfs2: do not write dirty data after degenerating to read-only (Ryusuke Konishi) 
- ALSA: usb-audio: Add quirk for Pioneer DDJ-800 (Geraldo Nascimento) 
- parisc: Fix argument pointer in real64_call_asm() (Helge Deller) 
- afs: Fix updating of i_size with dv jump from server (Marc Dionne) 
- mfd: tqmx86: Correct board names for TQMxE39x (Matthias Schiffer) 
- mfd: tqmx86: Specify IO port register range more precisely (Matthias Schiffer) 
- mfd: tqmx86: Do not access I2C_DETECT register through io_base (Matthias Schiffer) 
- thermal/drivers/mediatek: Use devm_of_iomap to avoid resource leak in mtk_thermal_probe (Kang Chen) 
- dmaengine: at_xdmac: do not enable all cyclic channels (Claudiu Beznea) 
- dmaengine: at_xdmac: Fix race for the tx desc callback (Tudor Ambarus) 
- dmaengine: at_xdmac: Fix concurrency over chan's completed_cookie (Tudor Ambarus) 
- dmaengine: dw-edma: Fix to enable to issue dma request on DMA processing (Shunsuke Mie) 
- dmaengine: dw-edma: Fix to change for continuous transfer (Shunsuke Mie) 
- dma: gpi: remove spurious unlock in gpi_ch_init (Dmitry Baryshkov) 
- phy: tegra: xusb: Add missing tegra_xusb_port_unregister for usb2_port and ulpi_port (Gaosheng Cui) 
- pwm: mtk-disp: Configure double buffering before reading in .get_state() (AngeloGioacchino Del Regno) 
- pwm: mtk-disp: Disable shadow registers before setting backlight values (AngeloGioacchino Del Regno) 
- leds: tca6507: Fix error handling of using fwnode_property_read_string (H. Nikolaus Schaller) 
- dmaengine: mv_xor_v2: Fix an error code. (Christophe JAILLET) 
- leds: TI_LMU_COMMON: select REGMAP instead of depending on it (Randy Dunlap) 
- pinctrl: renesas: r8a779a0: Remove incorrect AVB[01] pinmux configuration (Hai Pham) 
- ext4: fix use-after-free read in ext4_find_extent for bigalloc + inline (Ye Bin) 
- ext4: fix i_disksize exceeding i_size problem in paritally written case (Zhihao Cheng) 
- SMB3: Close deferred file handles in case of handle lease break (Bharath SM) 
- SMB3: Add missing locks to protect deferred close file list (Bharath SM) 
- timekeeping: Fix references to nonexistent ktime_get_fast_ns() (Geert Uytterhoeven) 
- openrisc: Properly store r31 to pt_regs on unhandled exceptions (Stafford Horne) 
- clocksource/drivers/davinci: Fix memory leak in davinci_timer_register when init fails (Qinrun Dai) 
- RDMA/mlx5: Use correct device num_ports when modify DC (Mark Zhang) 
- RDMA/mlx5: Fix flow counter query via DEVX (Mark Bloch) 
- Input: raspberrypi-ts - fix refcount leak in rpi_ts_probe (Miaoqian Lin) 
- clk: qcom: gcc-sm8350: fix PCIe PIPE clocks handling (Dmitry Baryshkov) 
- clk: qcom: regmap: add PHY clock source implementation (Dmitry Baryshkov) 
- NFSv4.1: Always send a RECLAIM_COMPLETE after establishing lease (Trond Myklebust) 
- IB/hfi1: Fix bugs with non-PAGE_SIZE-end multi-iovec user SDMA requests (Patrick Kelsey) 
- IB/hfi1: Fix SDMA mmu_rb_node not being evicted in LRU order (Patrick Kelsey) 
- RDMA/srpt: Add a check for valid 'mad_agent' pointer (Saravanan Vajravel) 
- RDMA/cm: Trace icm_send_rej event before the cm state is reset (Mark Zhang) 
- clk: qcom: gcc-sm6115: Mark RCGs shared where applicable (Konrad Dybcio) 
- RDMA/siw: Remove namespace check from siw_netdev_event() (Tetsuo Handa) 
- clk: add missing of_node_put() in "assigned-clocks" property parsing (Clément Léger) 
- power: supply: generic-adc-battery: fix unit scaling (Sebastian Reichel) 
- fs/ntfs3: Fix slab-out-of-bounds read in hdr_delete_de() (Zeng Heng) 
- fs/ntfs3: Fix OOB read in indx_insert_into_buffer (ZhangPeng) 
- fs/ntfs3: Add check for kmemdup (Jiasheng Jiang) 
- fs/ntfs3: Fix memory leak if ntfs_read_mft failed (Chen Zhongjin) 
- rtc: meson-vrtc: Use ktime_get_real_ts64() to get the current time (Martin Blumenstingl) 
- RDMA/mlx4: Prevent shift wrapping in set_user_sq_size() (Dan Carpenter) 
- rtc: omap: include header for omap_rtc_power_off_program prototype (Krzysztof Kozlowski) 
- workqueue: Fix hung time report of worker pools (Petr Mladek) 
- workqueue: Introduce show_one_worker_pool and show_one_workqueue. (Imran Khan) 
- RDMA/rdmavt: Delete unnecessary NULL check (Natalia Petrova) 
- RDMA/siw: Fix potential page_array out of range access (Daniil Dulov) 
- clk: at91: clk-sam9x60-pll: fix return value check (Claudiu Beznea) 
- sched/rt: Fix bad task migration for rt tasks (Schspa Shi) 
- Revert "objtool: Support addition to set CFA base" (Josh Poimboeuf) 
- perf/core: Fix hardlockup failure caused by perf throttle (Yang Jihong) 
- sched/fair: Fix inaccurate tally of ttwu_move_affine (Libo Chen) 
- sched/fair: Use __schedstat_set() in set_next_entity() (Yafang Shao) 
- powerpc/rtas: use memmove for potentially overlapping buffer copy (Nathan Lynch) 
- macintosh: via-pmu-led: requires ATA to be set (Randy Dunlap) 
- powerpc/sysdev/tsi108: fix resource printk format warnings (Randy Dunlap) 
- powerpc/wii: fix resource printk format warnings (Randy Dunlap) 
- powerpc/mpc512x: fix resource printk format warning (Randy Dunlap) 
- macintosh/windfarm_smu_sat: Add missing of_node_put() (Liang He) 
- virtio_ring: don't update event idx on get_buf (Albert Huang) 
- spmi: Add a check for remove callback when removing a SPMI driver (Jishnu Prakash) 
- staging: rtl8192e: Fix W_DISABLE# does not work after stop/start (Philipp Hortmann) 
- serial: 8250: Add missing wakeup event reporting (Florian Fainelli) 
- tty: serial: fsl_lpuart: adjust buffer length to the intended size (Shenwei Wang) 
- firmware: stratix10-svc: Fix an NULL vs IS_ERR() bug in probe (Dan Carpenter) 
- usb: mtu3: fix kernel panic at qmu transfer done irq handler (Chunfeng Yun) 
- usb: chipidea: fix missing goto in ci_hdrc_probe (Yinhao Hu) 
- usb: gadget: tegra-xudc: Fix crash in vbus_draw (Jon Hunter) 
- sh: sq: Fix incorrect element size for allocating bitmap buffer (John Paul Adrian Glaubitz) 
- uapi/linux/const.h: prefer ISO-friendly __typeof__ (Kevin Brodsky) 
- scripts/gdb: raise error with reduced debugging information (Florian Fainelli) 
- i2c: cadence: cdns_i2c_master_xfer(): Fix runtime PM leak on error path (Lars-Peter Clausen) 
- spi: cadence-quadspi: fix suspend-resume implementations (Dhruva Gole) 
- ASoC: fsl_mqs: move of_node_put() to the correct location (Liliang Ye) 
- coresight: etm_pmu: Set the module field (Suzuki K Poulose) 
- HID: amd_sfh: Add support for shutdown operation (Basavaraj Natikar) 
- scripts/gdb: bail early if there are no generic PD (Florian Fainelli) 
- scripts/gdb: bail early if there are no clocks (Florian Fainelli) 
- ia64: salinfo: placate defined-but-not-used warning (Randy Dunlap) 
- ia64: mm/contig: fix section mismatch warning/error (Randy Dunlap) 
- PCI/EDR: Clear Device Status after EDR error recovery (Kuppuswamy Sathyanarayanan) 
- of: Fix modalias string generation (Miquel Raynal) 
- vmci_host: fix a race condition in vmci_host_poll() causing GPF (Dae R. Jeong) 
- spi: fsl-spi: Fix CPM/QE mode Litte Endian (Christophe Leroy) 
- spi: qup: Don't skip cleanup in remove's error path (Uwe Kleine-König) 
- linux/vt_buffer.h: allow either builtin or modular for macros (Randy Dunlap) 
- ASoC: es8316: Handle optional IRQ assignment (Cristian Ciocaltea) 
- PCI: imx6: Install the fault handler only on compatible match (H. Nikolaus Schaller) 
- usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition (Zheng Wang) 
- spi: imx: Don't skip cleanup in remove's error path (Uwe Kleine-König) 
- spi: spi-imx: using pm_runtime_resume_and_get instead of pm_runtime_get_sync (Minghao Chi) 
- serial: 8250_bcm7271: Fix arbitration handling (Doug Berger) 
- iio: light: max44009: add missing OF device matching (Krzysztof Kozlowski) 
- fpga: bridge: fix kernel-doc parameter description (Marco Pagani) 
- serial: stm32: Re-assert RTS/DE GPIO in RS485 mode only if more data are transmitted (Marek Vasut) 
- serial: stm32: re-introduce an irq flag condition in usart_receive_chars (Erwan Le Ray) 
- usb: dwc3: gadget: Change condition for processing suspend event (Prashanth K) 
- usb: host: xhci-rcar: remove leftover quirk handling (Wolfram Sang) 
- pstore: Revert pmsg_lock back to a normal mutex (John Stultz) 
- drivers: staging: rtl8723bs: Fix locking in rtw_scan_timeout_handler() (Hans de Goede) 
- drivers: staging: rtl8723bs: Fix locking in _rtw_join_timeout_handler() (Hans de Goede) 
- ipmi: ASPEED_BT_IPMI_BMC: select REGMAP_MMIO instead of depending on it (Randy Dunlap) 
- tcp/udp: Fix memleaks of sk and zerocopy skbs with TX timestamp. (Kuniyuki Iwashima) 
- net: amd: Fix link leak when verifying config failed (Gencen Gan) 
- netlink: Use copy_to_user() for optval in netlink_getsockopt(). (Kuniyuki Iwashima) 
- ipv4: Fix potential uninit variable access bug in __ip_make_skb() (Ziyang Xuan) 
- net/sched: sch_fq: fix integer overflow of "credit" (Davide Caratti) 
- netfilter: nf_tables: don't write table validation state without mutex (Florian Westphal) 
- bpf: Don't EFAULT for getsockopt with optval=NULL (Stanislav Fomichev) 
- net: stmmac:fix system hang when setting up tag_8021q VLAN for DSA ports (Yan Wang) 
- net/mlx5: E-switch, Don't destroy indirect table in split rule (Chris Mi) 
- ixgbe: Enable setting RSS table to default values (Joe Damato) 
- ixgbe: Allow flow hash to be set via ethtool (Joe Damato) 
- wifi: iwlwifi: fw: fix memory leak in debugfs (Johannes Berg) 
- wifi: iwlwifi: mvm: check firmware response size (Johannes Berg) 
- wifi: mt76: mt7921e: improve reliability of dma reset (Quan Zhou) 
- wifi: mt76: fix 6GHz high channel not be scanned (Ming Yen Hsieh) 
- wifi: mt76: mt7921e: fix probe timeout after reboot (Quan Zhou) 
- wifi: mt76: add flexible polling wait-interval support (Deren Wu) 
- wifi: mt76: handle failure of vzalloc in mt7615_coredump_work (Kang Chen) 
- wifi: iwlwifi: make the loop for card preparation effective (Emmanuel Grumbach) 
- jdb2: Don't refuse invalidation of already invalidated buffers (Jan Kara) 
- wifi: iwlwifi: fw: move memset before early return (Tom Rix) 
- wifi: iwlwifi: mvm: initialize seq variable (Tom Rix) 
- wifi: iwlwifi: yoyo: Fix possible division by zero (Daniel Gabay) 
- wifi: iwlwifi: yoyo: skip dump correctly on hw error (Daniel Gabay) 
- md/raid10: don't call bio_start_io_acct twice for bio which experienced read error (Yu Kuai) 
- md/raid10: fix memleak of md thread (Yu Kuai) 
- md/raid10: fix memleak for 'conf->bio_split' (Yu Kuai) 
- md/raid10: fix leak of 'r10bio->remaining' for recovery (Yu Kuai) 
- md/raid10: fix task hung in raid10d (Li Nan) 
- md/raid10: factor out code from wait_barrier() to stop_waiting_barrier() (Yu Kuai) 
- md: raid10 add nowait support (Vishal Verma) 
- md: drop queue limitation for RAID1 and RAID10 (Mariusz Tkaczyk) 
- bpf, sockmap: Revert buggy deadlock fix in the sockhash and sockmap (Daniel Borkmann) 
- selftests/bpf: Fix leaked bpf_link in get_stackid_cannot_attach (Song Liu) 
- nvme-fcloop: fix "inconsistent {IN-HARDIRQ-W} -> {HARDIRQ-ON-W} usage" (Ming Lei) 
- nvme: fix async event trace event (Keith Busch) 
- nvme: handle the persistent internal error AER (Michael Kelley) 
- nvmet: fix I/O Command Set specific Identify Controller (Damien Le Moal) 
- nvmet: fix Identify Active Namespace ID list handling (Damien Le Moal) 
- nvmet: fix Identify Controller handling (Damien Le Moal) 
- nvmet: fix Identify Namespace handling (Damien Le Moal) 
- nvmet: fix error handling in nvmet_execute_identify_cns_cs_ns() (Damien Le Moal) 
- bpf, sockmap: fix deadlocks in the sockhash and sockmap (Xin Liu) 
- net: ethernet: stmmac: dwmac-rk: fix optional phy regulator handling (Sebastian Reichel) 
- scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup() (Shuchang Li) 
- f2fs: fix to avoid use-after-free for cached IPU bio (Chao Yu) 
- xsk: Fix unaligned descriptor validation (Kal Conley) 
- crypto: drbg - Only fail when jent is unavailable in FIPS mode (Herbert Xu) 
- crypto: drbg - make drbg_prepare_hrng() handle jent instantiation errors (Nicolai Stange) 
- bpftool: Fix bug for long instructions in program CFG dumps (Quentin Monnet) 
- selftests/bpf: Wait for receive in cg_storage_multi test (YiFei Zhu) 
- selftests: xsk: Disable IPv6 on VETH1 (Kal Conley) 
- net: qrtr: correct types of trace event parameters (Simon Horman) 
- wifi: rt2x00: Fix memory leak when handling surveys (Armin Wolf) 
- wifi: rtlwifi: fix incorrect error codes in rtl_debugfs_set_write_reg() (Wei Chen) 
- wifi: rtlwifi: fix incorrect error codes in rtl_debugfs_set_write_rfreg() (Wei Chen) 
- crypto: sa2ul - Select CRYPTO_DES (Suman Anna) 
- crypto: caam - Clear some memory in instantiate_rng (Christophe JAILLET) 
- f2fs: compress: fix to call f2fs_wait_on_page_writeback() in f2fs_write_raw_pages() (Yangtao Li) 
- f2fs: apply zone capacity to all zone type (Jaegeuk Kim) 
- f2fs: enforce single zone capacity (Jaegeuk Kim) 
- f2fs: handle dqget error in f2fs_transfer_project_quota() (Yangtao Li) 
- scsi: megaraid: Fix mega_cmd_done() CMDID_INT_CMDS (Danila Chernetsov) 
- net/packet: convert po->auxdata to an atomic flag (Eric Dumazet) 
- net/packet: convert po->origdev to an atomic flag (Eric Dumazet) 
- net/packet: annotate accesses to po->xmit (Eric Dumazet) 
- vlan: partially enable SIOCSHWTSTAMP in container (Vadim Fedorenko) 
- net: pcs: xpcs: remove double-read of link state when using AN (Russell King (Oracle)) 
- bpf: Remove misleading spec_v1 check on var-offset stack read (Luis Gerhorst) 
- selftests/bpf: Fix a fd leak in an error path in network_helpers.c (Martin KaFai Lau) 
- scm: fix MSG_CTRUNC setting condition for SO_PASSSEC (Alexander Mikhalitsyn) 
- bpf: fix precision propagation verbose logging (Andrii Nakryiko) 
- bpf: take into account liveness when propagating precision (Andrii Nakryiko) 
- wifi: rtw88: mac: Return the original error from rtw_mac_power_switch() (Martin Blumenstingl) 
- wifi: rtw88: mac: Return the original error from rtw_pwr_seq_parser() (Martin Blumenstingl) 
- tools: bpftool: Remove invalid \' json escape (Luis Gerhorst) 
- wifi: ath6kl: reduce WARN to dev_dbg() in callback (Fedor Pchelkin) 
- wifi: brcmfmac: support CQM RSSI notification with older firmware (John Keeping) 
- wifi: ath5k: fix an off by one check in ath5k_eeprom_read_freq_list() (Dan Carpenter) 
- wifi: ath9k: hif_usb: fix memory leak of remain_skbs (Fedor Pchelkin) 
- wifi: ath6kl: minor fix for allocation size (Alexey V. Vissarionov) 
- hwmon: (pmbus/fsp-3y) Fix functionality bitmask in FSP-3Y YM-2151E (Tomáš Pecka) 
- cpufreq: use correct unit when verify cur freq (Sanjay Chandrashekara) 
- tick/common: Align tick period with the HZ tick. (Sebastian Andrzej Siewior) 
- drm/i915: Make intel_get_crtc_new_encoder() less oopsy (Ville Syrjälä) 
- debugobject: Prevent init race with static objects (Thomas Gleixner) 
- arm64: kgdb: Set PSTATE.SS to 1 to re-enable single-step (Sumit Garg) 
- x86/ioapic: Don't return 0 from arch_dynirq_lower_bound() (Saurabh Sengar) 
- regulator: stm32-pwr: fix of_iomap leak (YAN SHI) 
- media: venus: dec: Fix handling of the start cmd (Michał Krawczyk) 
- media: rc: gpio-ir-recv: Fix support for wake-up (Florian Fainelli) 
- drm/amd/display: Fix potential null dereference (Igor Artemiev) 
- media: rcar_fdp1: Fix refcount leak in probe and remove function (Miaoqian Lin) 
- media: rcar_fdp1: Convert to platform remove callback returning void (Uwe Kleine-König) 
- platform: Provide a remove callback that returns no value (Uwe Kleine-König) 
- media: rcar_fdp1: Fix the correct variable assignments (Tang Bin) 
- media: rcar_fdp1: Make use of the helper function devm_platform_ioremap_resource() (Cai Huoqing) 
- media: saa7134: fix use after free bug in saa7134_finidev due to race condition (Zheng Wang) 
- media: dm1105: Fix use after free bug in dm1105_remove due to race condition (Zheng Wang) 
- media: rkvdec: fix use after free bug in rkvdec_remove (Zheng Wang) 
- x86/apic: Fix atomic update of offset in reserve_eilvt_offset() (Uros Bizjak) 
- regulator: core: Avoid lockdep reports when resolving supplies (Douglas Anderson) 
- regulator: core: Consistently set mutex_owner when using ww_mutex_lock_slow() (Douglas Anderson) 
- drm/ttm/pool: Fix ttm_pool_alloc error path (Thomas Hellström) 
- drm/ttm: optimize pool allocations a bit v2 (Christian König) 
- arm64: dts: qcom: msm8994-msft-lumia-octagon: drop unit address from PMI8994 regulator (Krzysztof Kozlowski) 
- arm64: dts: qcom: msm8994-kitakami: drop unit address from PMI8994 regulator (Krzysztof Kozlowski) 
- arm64: dts: qcom: sc7180-trogdor-lazor: correct trackpad supply (Krzysztof Kozlowski) 
- mailbox: mpfs: switch to txdone_poll (Conor Dooley) 
- drm/lima/lima_drv: Add missing unwind goto in lima_pdev_probe() (Harshit Mogalapalli) 
- ACPI: VIOT: Initialize the correct IOMMU fwspec (Jean-Philippe Brucker) 
- firmware: arm_scmi: Fix xfers allocation on Rx channel (Cristian Marussi) 
- ARM: dts: gta04: fix excess dma channel usage (H. Nikolaus Schaller) 
- drm: rcar-du: Fix a NULL vs IS_ERR() bug (Dan Carpenter) 
- mmc: sdhci-of-esdhc: fix quirk to ignore command inhibit for data (Georgii Kruglov) 
- ACPI: processor: Fix evaluating _PDC method when running as Xen dom0 (Roger Pau Monne) 
- drm/amd/display/dc/dce60/Makefile: Fix previous attempt to silence known override-init warnings (Lee Jones) 
- drm: msm: adreno: Disable preemption on Adreno 510 (Adam Skladowski) 
- drm/msm/adreno: drop bogus pm_runtime_set_active() (Johan Hovold) 
- drm/msm/adreno: Defer enabling runpm until hw_init() (Rob Clark) 
- media: max9286: Free control handler (Laurent Pinchart) 
- drm/bridge: adv7533: Fix adv7533_mode_valid for adv7533 and adv7535 (Adam Ford) 
- firmware: qcom_scm: Clear download bit during reboot (Mukesh Ojha) 
- media: av7110: prevent underflow in write_ts_to_decoder() (Dan Carpenter) 
- media: bdisp: Add missing check for create_workqueue (Jiasheng Jiang) 
- x86/MCE/AMD: Use an u64 for bank_map (Muralidhara M K) 
- ARM: dts: qcom: ipq8064: Fix the PCI I/O port range (Manivannan Sadhasivam) 
- ARM: dts: qcom: ipq8064: reduce pci IO size to 64K (Christian Marangi) 
- ARM: dts: qcom: ipq4019: Fix the PCI I/O port range (Manivannan Sadhasivam) 
- arm64: dts: qcom: sm8250: Fix the PCI I/O port range (Manivannan Sadhasivam) 
- arm64: dts: qcom: msm8996: Fix the PCI I/O port range (Manivannan Sadhasivam) 
- arm64: dts: qcom: ipq6018: Fix the PCI I/O port range (Manivannan Sadhasivam) 
- arm64: dts: qcom: ipq8074: Fix the PCI I/O port range (Manivannan Sadhasivam) 
- arm64: dts: qcom: msm8998: Fix the PCI I/O port range (Manivannan Sadhasivam) 
- arm64: dts: qcom: sdm845: Fix the PCI I/O port range (Manivannan Sadhasivam) 
- arm64: dts: qcom: sdm845: correct dynamic power coefficients (Dmitry Baryshkov) 
- arm64: dts: qcom: msm8998: Fix stm-stimulus-base reg name (Konrad Dybcio) 
- arm64: dts: broadcom: bcmbca: bcm4908: fix procmon nodename (Rafał Miłecki) 
- arm64: dts: broadcom: bcmbca: bcm4908: fix NAND interrupt name (Rafał Miłecki) 
- arm64: dts: Move BCM4908 dts to bcmbca folder (William Zhang) 
- arm64: dts: Add base DTS file for bcmbca device Asus GT-AX6000 (Rafał Miłecki) 
- ARM64: dts: Add DTS files for bcmbca SoC BCM6858 (Anand Gore) 
- arm64: dts: Add DTS files for bcmbca SoC BCM4912 (William Zhang) 
- arm64: dts: Add DTS files for bcmbca SoC BCM63158 (William Zhang) 
- arm64: dts: broadcom: bcm4908: add DT for Netgear RAXE500 (Rafał Miłecki) 
- arm64: dts: ti: k3-j721e-main: Remove ti,strobe-sel property (Bhavya Kapoor) 
- regulator: core: Shorten off-on-delay-us for always-on/boot-on by time since booted (Douglas Anderson) 
- EDAC/skx: Fix overflows on the DRAM row address mapping arrays (Qiuxu Zhuo) 
- drm/msm/disp/dpu: check for crtc enable rather than crtc active to release shared resources (Vinod Polimera) 
- arm64: dts: renesas: r8a774c0: Remove bogus voltages from OPP table (Geert Uytterhoeven) 
- arm64: dts: renesas: r8a77990: Remove bogus voltages from OPP table (Geert Uytterhoeven) 
- soc: ti: pm33xx: Fix refcount leak in am33xx_pm_probe (Miaoqian Lin) 
- tools/x86/kcpuid: Fix avx512bw and avx512lvl fields in Fn00000007 (Terry Bowman) 
- drm/probe-helper: Cancel previous job before starting new one (Dom Cobley) 
- drm/vgem: add missing mutex_destroy (Maíra Canal) 
- drm/rockchip: Drop unbalanced obj unref (Rob Clark) 
- erofs: fix potential overflow calculating xattr_isize (Jingbo Xu) 
- erofs: stop parsing non-compact HEAD index if clusterofs is invalid (Gao Xiang) 
- tpm, tpm_tis: Claim locality when interrupts are reenabled on resume (Lino Sanfilippo) 
- tpm, tpm: Implement usage counter for locality (Lino Sanfilippo) 
- tpm, tpm_tis: Claim locality before writing interrupt registers (Lino Sanfilippo) 
- tpm, tpm_tis: Disable interrupts if tpm_tis_probe_irq() failed (Lino Sanfilippo) 
- tpm, tpm_tis: Claim locality before writing TPM_INT_ENABLE register (Lino Sanfilippo) 
- tpm, tpm_tis: Do not skip reset of original interrupt vector (Lino Sanfilippo) 
- selinux: ensure av_permissions.h is built when needed (Paul Moore) 
- selinux: fix Makefile dependencies of flask.h (Ondrej Mosnacek) 
- selftests/resctrl: Check for return value after write_schemata() (Ilpo Järvinen) 
- selftests/resctrl: Allow ->setup() to return errors (Ilpo Järvinen) 
- selftests/resctrl: Move ->setup() call outside of test specific branches (Ilpo Järvinen) 
- selftests/resctrl: Extend CPU vendor detection (Shaopeng Tan) 
- selftests/resctrl: Return NULL if malloc_and_init_memory() did not alloc mem (Ilpo Järvinen) 
- rcu: Fix missing TICK_DEP_MASK_RCU_EXP dependency check (Zqiang) 
- sound/oss/dmasound: fix build when drivers are mixed =y/=m (Randy Dunlap) 
- xfs: don't consider future format versions valid (Dave Chinner) 
- ubifs: Free memory for tmpfile name (Mårten Lindahl) 
- ubi: Fix return value overwrite issue in try_write_vid_and_data() (Wang YanQing) 
- ubifs: Fix memleak when insert_old_idx() failed (Zhihao Cheng) 
- Revert "ubifs: dirty_cow_znode: Fix memleak in error handling path" (Zhihao Cheng) 
- iommu/amd: Fix "Guest Virtual APIC Table Root Pointer" configuration in IRTE (Kishon Vijay Abraham I) 
- tracing: Fix permissions for the buffer_percent file (Ondrej Mosnacek) 
- i2c: omap: Fix standard mode false ACK readings (Reid Tonking) 
- ksmbd: fix memleak in session setup (Namjae Jeon) 
- ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem() (Namjae Jeon) 
- ksmbd: call rcu_barrier() in ksmbd_server_exit() (Namjae Jeon) 
- writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs (Baokun Li) 
- relayfs: fix out-of-bounds access in relay_file_read (Zhang Zhengming) 
- KVM: nVMX: Emulate NOPs in L2, and PAUSE if it's not intercepted (Sean Christopherson) 
- reiserfs: Add security prefix to xattr name in reiserfs_security_write() (Roberto Sassu) 
- rcu: Avoid stack overflow due to __rcu_irq_enter_check_tick() being kprobe-ed (Zheng Yejian) 
- crypto: safexcel - Cleanup ring IRQ workqueues on load failure (Jonathan McDowell) 
- crypto: api - Demote BUG_ON() in crypto_unregister_alg() to a WARN_ON() (Toke Høiland-Jørgensen) 
- ring-buffer: Sync IRQ works before buffer destruction (Johannes Berg) 
- pinctrl: qcom: lpass-lpi: set output value before enabling output (Krzysztof Kozlowski) 
- soundwire: qcom: correct setting ignore bit on v1.5.1 (Krzysztof Kozlowski) 
- pwm: meson: Fix g12a ao clk81 name (Heiner Kallweit) 
- pwm: meson: Fix axg ao mux parents (Heiner Kallweit) 
- wifi: mt76: add missing locking to protect against concurrent rx/status calls (Felix Fietkau) 
- kheaders: Use array declaration instead of char (Kees Cook) 
- ipmi: fix SSIF not responding under certain cond. (Zhang Yuchen) 
- ipmi:ssif: Add send_retries increment (Corey Minyard) 
- MIPS: fw: Allow firmware to pass a empty env (Jiaxun Yang) 
- tick/nohz: Fix cpu_is_hotpluggable() by checking with nohz subsystem (Joel Fernandes (Google)) 
- xhci: fix debugfs register accesses while suspended (Johan Hovold) 
- tty: Prevent writing chars during tcsetattr TCSADRAIN/FLUSH (Ilpo Järvinen) 
- staging: iio: resolver: ads1210: fix config mode (Nuno Sá) 
- ext4: use ext4_journal_start/stop for fast commit transactions (Harshad Shirwadkar) 
- blk-crypto: make blk_crypto_evict_key() more robust (Eric Biggers) 
- blk-crypto: make blk_crypto_evict_key() return void (Eric Biggers) 
- blk-mq: release crypto keyslot before reporting I/O complete (Eric Biggers) 
- hwmon: (adt7475) Use device_property APIs when configuring polarity (Chris Packham) 
- hwmon: (k10temp) Check range scale when CUR_TEMP register is read-write (Babu Moger) 
- USB: dwc3: fix runtime pm imbalance on unbind (Johan Hovold) 
- USB: dwc3: fix runtime pm imbalance on probe errors (Johan Hovold) 
- IMA: allow/fix UML builds (Randy Dunlap) 
- PCI: qcom: Fix the incorrect register usage in v2.7.0 config (Manivannan Sadhasivam) 
- PCI: pciehp: Fix AB-BA deadlock between reset_lock and device_lock (Lukas Wunner) 
- arm64: Stash shadow stack pointer in the task struct on interrupt (Ard Biesheuvel) 
- arm64: Always load shadow stack pointer directly from the task struct (Ard Biesheuvel) 
- wifi: mt76: mt7921e: Set memory space enable in PCI_COMMAND if unset (Mario Limonciello) 
- wireguard: timers: cast enum limits members to int in prints (Jiri Slaby (SUSE)) 
- x86/cpu: Add model number for Intel Arrow Lake processor (Tony Luck) 
- asm-generic/io.h: suppress endianness warnings for readq() and writeq() (Vladimir Oltean) 
- selftests mount: Fix mount_setattr_test builds failed (Anh Tuan Phan) 
- ASoC: Intel: bytcr_rt5640: Add quirk for the Acer Iconia One 7 B1-750 (Hans de Goede) 
- iio: adc: palmas_gpadc: fix NULL dereference on rmmod (Patrik Dahlström) 
- x86/hyperv: Block root partition functionality in a Confidential VM (Michael Kelley) 
- ASoC: soc-pcm: fix hw->formats cleared by soc_pcm_hw_init() for dpcm (Shengjiu Wang) 
- ASOC: Intel: sof_sdw: add quirk for Intel 'Rooks County' NUC M15 (Eugene Huang) 
- uek_kabi: Add UEK_KABI_DEPRECATE_ENUM (Sherry Yang)  [Orabug: 35469882]
- Revert "uek-rpm: Make kernel to depend on latest libdnf version" (Somasundaram Krishnasamy)  [Orabug: 35304450]
- net/rds: Ignore rds_send_hb()'s return value (Sharath Srinivasan)  [Orabug: 35338769]
- net/rds: Use monotonic ktime_get_seconds() in rds_hb_worker() (Sharath Srinivasan)  [Orabug: 35338769]
- net/rds: Fix race in rds_hb_worker() when reading cp->cp_hb_start (Sharath Srinivasan)  [Orabug: 35338769]
- net/rds: Fix "hb timeout" race by setting cp_hb_start before rds_send_hb() (Sharath Srinivasan)  [Orabug: 35338769]
- uek-rpm: Blacklist cls_tcindex module (Somasundaram Krishnasamy)  [Orabug: 35354216]
- net/sched: tcindex: Fix NULL dereference in tcindex_set_parms() (Harshit Mogalapalli)  [Orabug: 35415132]