[El-errata] ELSA-2025-20368 Important: Oracle Linux 9 Unbreakable Enterprise kernel security update

[Errata Announcements for Oracle Linux]

Oracle Linux Security Advisory ELSA-2025-20368

http://linux.oracle.com/errata/ELSA-2025-20368.html

The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:

x86_64:
kernel-uek-6.12.0-100.28.2.el9uek.x86_64.rpm
kernel-uek-core-6.12.0-100.28.2.el9uek.x86_64.rpm
kernel-uek-debug-6.12.0-100.28.2.el9uek.x86_64.rpm
kernel-uek-debug-core-6.12.0-100.28.2.el9uek.x86_64.rpm
kernel-uek-debug-devel-6.12.0-100.28.2.el9uek.x86_64.rpm
kernel-uek-debug-modules-6.12.0-100.28.2.el9uek.x86_64.rpm
kernel-uek-debug-modules-core-6.12.0-100.28.2.el9uek.x86_64.rpm
kernel-uek-debug-modules-deprecated-6.12.0-100.28.2.el9uek.x86_64.rpm
kernel-uek-debug-modules-desktop-6.12.0-100.28.2.el9uek.x86_64.rpm
kernel-uek-debug-modules-extra-6.12.0-100.28.2.el9uek.x86_64.rpm
kernel-uek-debug-modules-extra-netfilter-6.12.0-100.28.2.el9uek.x86_64.rpm
kernel-uek-debug-modules-usb-6.12.0-100.28.2.el9uek.x86_64.rpm
kernel-uek-debug-modules-wireless-6.12.0-100.28.2.el9uek.x86_64.rpm
kernel-uek-devel-6.12.0-100.28.2.el9uek.x86_64.rpm
kernel-uek-doc-6.12.0-100.28.2.el9uek.noarch.rpm
kernel-uek-modules-6.12.0-100.28.2.el9uek.x86_64.rpm
kernel-uek-modules-core-6.12.0-100.28.2.el9uek.x86_64.rpm
kernel-uek-modules-deprecated-6.12.0-100.28.2.el9uek.x86_64.rpm
kernel-uek-modules-desktop-6.12.0-100.28.2.el9uek.x86_64.rpm
kernel-uek-modules-extra-6.12.0-100.28.2.el9uek.x86_64.rpm
kernel-uek-modules-extra-netfilter-6.12.0-100.28.2.el9uek.x86_64.rpm
kernel-uek-modules-usb-6.12.0-100.28.2.el9uek.x86_64.rpm
kernel-uek-modules-wireless-6.12.0-100.28.2.el9uek.x86_64.rpm

aarch64:
kernel-uek-6.12.0-100.28.2.el9uek.aarch64.rpm
kernel-uek-core-6.12.0-100.28.2.el9uek.aarch64.rpm
kernel-uek-debug-6.12.0-100.28.2.el9uek.aarch64.rpm
kernel-uek-debug-core-6.12.0-100.28.2.el9uek.aarch64.rpm
kernel-uek-debug-devel-6.12.0-100.28.2.el9uek.aarch64.rpm
kernel-uek-debug-modules-6.12.0-100.28.2.el9uek.aarch64.rpm
kernel-uek-debug-modules-core-6.12.0-100.28.2.el9uek.aarch64.rpm
kernel-uek-debug-modules-deprecated-6.12.0-100.28.2.el9uek.aarch64.rpm
kernel-uek-debug-modules-desktop-6.12.0-100.28.2.el9uek.aarch64.rpm
kernel-uek-debug-modules-extra-6.12.0-100.28.2.el9uek.aarch64.rpm
kernel-uek-debug-modules-extra-netfilter-6.12.0-100.28.2.el9uek.aarch64.rpm
kernel-uek-debug-modules-usb-6.12.0-100.28.2.el9uek.aarch64.rpm
kernel-uek-debug-modules-wireless-6.12.0-100.28.2.el9uek.aarch64.rpm
kernel-uek-devel-6.12.0-100.28.2.el9uek.aarch64.rpm
kernel-uek-modules-6.12.0-100.28.2.el9uek.aarch64.rpm
kernel-uek-modules-extra-6.12.0-100.28.2.el9uek.aarch64.rpm
kernel-uek-modules-core-6.12.0-100.28.2.el9uek.aarch64.rpm
kernel-uek-modules-deprecated-6.12.0-100.28.2.el9uek.aarch64.rpm
kernel-uek-modules-desktop-6.12.0-100.28.2.el9uek.aarch64.rpm
kernel-uek-modules-extra-netfilter-6.12.0-100.28.2.el9uek.aarch64.rpm
kernel-uek-modules-usb-6.12.0-100.28.2.el9uek.aarch64.rpm
kernel-uek-modules-wireless-6.12.0-100.28.2.el9uek.aarch64.rpm
kernel-uek64k-6.12.0-100.28.2.el9uek.aarch64.rpm
kernel-uek64k-core-6.12.0-100.28.2.el9uek.aarch64.rpm
kernel-uek64k-modules-6.12.0-100.28.2.el9uek.aarch64.rpm
kernel-uek64k-modules-core-6.12.0-100.28.2.el9uek.aarch64.rpm
kernel-uek64k-modules-deprecated-6.12.0-100.28.2.el9uek.aarch64.rpm
kernel-uek64k-modules-desktop-6.12.0-100.28.2.el9uek.aarch64.rpm
kernel-uek64k-modules-extra-6.12.0-100.28.2.el9uek.aarch64.rpm
kernel-uek64k-modules-extra-netfilter-6.12.0-100.28.2.el9uek.aarch64.rpm
kernel-uek64k-modules-usb-6.12.0-100.28.2.el9uek.aarch64.rpm
kernel-uek64k-modules-wireless-6.12.0-100.28.2.el9uek.aarch64.rpm


SRPMS:
http://oss.oracle.com/ol9/SRPMS-updates//kernel-uek-6.12.0-100.28.2.el9uek.src.rpm

Related CVEs:

CVE-2024-28956




Description of changes:

[6.12.0-100.28.2.el9uek]
- sched/eevdf: Fix se->slice being set to U64_MAX and resulting crash (Omar Sandoval) 
- certs: Add new Oracle Linux Driver Signing (key 1) certificate (Sherry Yang)  [Orabug: 37967533]
- Revert "block: sysfs option to change ioticks granularity" (Gulam Mohamed)  [Orabug: 37921776]
- RDS: use pin_user_pages_fast() (Stephen Brennan)  [Orabug: 37968545]

[6.12.0-100.28.1.el9uek]
- KVM: SEV: Add KVM_SEV_SNP_ENABLE_REQ_CERTS command (Michael Roth)  [Orabug: 37894105]
- KVM: Introduce KVM_EXIT_SNP_REQ_CERTS for SNP certificate-fetching (Michael Roth)  [Orabug: 37894105]
- Revert "KVM: Introduce KVM_EXIT_SNP_REQ_CERTS for SNP certificate-fetching" (Liam Merwick)  [Orabug: 37894105]
- uek-rpm: Enable SECURITY_DMESG_RESTRICT in UEK8 (Harshit Mogalapalli)  [Orabug: 37867042]

[6.12.0-2.28.3.el9uek]
- LTS version: v6.12.28 (Jack Vogel)
- dm: fix copying after src array boundaries (Tudor Ambarus)
- drm/amd/display: Fix slab-use-after-free in hdcp (Chris Bainbridge)
- drm/amd/display: Add scoped mutexes for amdgpu_dm_dhcp (Mario Limonciello)
- drivers: base: handle module_kobject creation (Shyam Saini)
- kernel: globalize lookup_or_create_module_kobject() (Shyam Saini)
- kernel: param: rename locate_module_kobject (Shyam Saini)
- Revert "drm/meson: vclk: fix calculation of 59.94 fractional rates" (Christian Hewitt)
- arm64: dts: st: Use 128kB size for aliased GIC400 register access on stm32mp25 SoCs (Christian Bruel)
- arm64: dts: st: Adjust interrupt-controller for stm32mp25 SoCs (Christian Bruel)
- ARM: dts: opos6ul: add ksz8081 phy properties (Sébastien Szymanski)
- arm64: dts: imx95: Correct the range of PCIe app-reg region (Richard Zhu)
- firmware: arm_ffa: Skip Rx buffer ownership release if not acquired (Sudeep Holla)
- firmware: arm_scmi: Balance device refcount when destroying devices (Cristian Marussi)
- drm/xe: Ensure fixed_slice_mode gets set after ccs_mode change (Niranjana Vishwanathapura)
- sch_ets: make est_qlen_notify() idempotent (Cong Wang)
- sch_qfq: make qfq_qlen_notify() idempotent (Cong Wang)
- sch_hfsc: make hfsc_qlen_notify() idempotent (Cong Wang)
- sch_drr: make drr_qlen_notify() idempotent (Cong Wang)
- sch_htb: make htb_qlen_notify() idempotent (Cong Wang)
- accel/ivpu: Add handling of VPU_JSM_STATUS_MVNCI_CONTEXT_VIOLATION_HW (Karol Wachowski)
- accel/ivpu: Fix locking order in ivpu_job_submit (Karol Wachowski)
- accel/ivpu: Abort all jobs after command queue unregister (Karol Wachowski)
- accel/ivpu: Update VPU FW API headers (Andrzej Kacprowski)
- accel/ivpu: Fix a typo (Andrew Kreimer)
- accel/ivpu: Use xa_alloc_cyclic() instead of custom function (Karol Wachowski)
- accel/ivpu: Make DB_ID and JOB_ID allocations incremental (Tomasz Rusinowicz)
- net: Fix the devmem sock opts and msgs for parisc (Pranjal Shrivastava)
- bcachefs: Remove incorrect __counted_by annotation (Alan Huang)
- mm, slab: clean up slab->obj_exts always (Zhenhua Huang)
- net: vertexcom: mse102x: Fix RX error handling (Stefan Wahren)
- net: vertexcom: mse102x: Add range check for CMD_RTS (Stefan Wahren)
- net: vertexcom: mse102x: Fix LEN_MASK (Stefan Wahren)
- net: vertexcom: mse102x: Fix possible stuck of SPI interrupt (Stefan Wahren)
- net: hns3: defer calling ptp_clock_register() (Jian Shen)
- net: hns3: fixed debugfs tm_qset size (Hao Lan)
- net: hns3: fix an interrupt residual problem (Yonglong Liu)
- net: hns3: store rx VLAN tag offload state for VF (Jian Shen)
- octeon_ep: Fix host hang issue during device reboot (Sathesh B Edara)
- net: fec: ERR007885 Workaround for conventional TX (Mattias Barthel)
- net: lan743x: Fix memleak issue when GSO enabled (Thangaraj Samynathan)
- ptp: ocp: Fix NULL dereference in Adva board SMA sysfs operations (Sagi Maimon)
- net: use sock_gen_put() when sk_state is TCP_TIME_WAIT (Jibin Zhang)
- bnxt_en: fix module unload sequence (Vadim Fedorenko)
- ASoC: simple-card-utils: Fix pointer check in graph_util_parse_link_direction (Alexander Stein)
- nvmet-tcp: select CONFIG_TLS from CONFIG_NVME_TARGET_TCP_TLS (Alistair Francis)
- nvme-tcp: select CONFIG_TLS from CONFIG_NVME_TCP_TLS (Alistair Francis)
- nvme-tcp: fix premature queue removal and I/O failover (Michael Liang)
- bnxt_en: Fix ethtool -d byte order for 32-bit values (Michael Chan)
- bnxt_en: Fix out-of-bound memcpy() during ethtool -w (Shruti Parab)
- bnxt_en: Fix coredump logic to free allocated buffer (Shruti Parab)
- bnxt_en: call pci_alloc_irq_vectors() after bnxt_reserve_rings() (Kashyap Desai)
- bnxt_en: Add missing skb_mark_for_recycle() in bnxt_rx_vlan() (Somnath Kotur)
- bnxt_en: Fix ethtool selftest output in one of the failure cases (Kalesh AP)
- bnxt_en: Fix error handling path in bnxt_init_chip() (Shravya KN)
- ALSA: hda/realtek: Fix built-mic regression on other ASUS models (Takashi Iwai)
- net: ipv6: fix UDPv6 GSO segmentation with NAT (Felix Fietkau)
- net: dsa: felix: fix broken taprio gate states after clock jump (Vladimir Oltean)
- net: ethernet: mtk_eth_soc: fix SER panic with 4GB+ RAM (Chad Monroe)
- igc: fix lock order in igc_ptp_reset (Jacob Keller)
- idpf: protect shutdown from reset (Larysa Zaremba)
- idpf: fix potential memory leak on kcalloc() failure (Michal Swiatkowski)
- net: mdio: mux-meson-gxl: set reversed bit when using internal phy (Da Xue)
- net: dlink: Correct endianness handling of led_mode (Simon Horman)
- drm/mipi-dbi: Fix blanking for non-16 bit formats (Russell Cloran)
- drm/tests: shmem: Fix memleak (Maxime Ripard)
- nvme-pci: fix queue unquiesce check on slot_reset (Keith Busch)
- ALSA: ump: Fix buffer overflow at UMP SysEx message conversion (Takashi Iwai)
- scsi: ufs: core: Remove redundant query_complete trace (Keoseong Park)
- idpf: fix offloads support for encapsulated packets (Madhu Chittim)
- ice: Check VF VSI Pointer Value in ice_vc_add_fdir_fltr() (Xuanqiang Luo)
- net_sched: qfq: Fix double list add in class with netem as child qdisc (Victor Nogueira)
- net_sched: ets: Fix double list add in class with netem as child qdisc (Victor Nogueira)
- net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc (Victor Nogueira)
- net_sched: drr: Fix double list add in class with netem as child qdisc (Victor Nogueira)
- pds_core: remove write-after-free of client_id (Shannon Nelson)
- pds_core: specify auxiliary_device to be created (Shannon Nelson)
- pds_core: make pdsc_auxbus_dev_del() void (Shannon Nelson)
- net: ethernet: mtk_eth_soc: sync mtk_clks_source_name array (Daniel Golle)
- net: ethernet: mtk-star-emac: rearm interrupts in rx_poll only when advised (Louis-Alexis Eyraud)
- net: ethernet: mtk-star-emac: fix spinlock recursion issues on rx/tx poll (Louis-Alexis Eyraud)
- rtase: Modify the condition used to detect overflow in rtase_calc_time_mitigation (Justin Lai)
- bnxt_en: improve TX timestamping FIFO configuration (Vadim Fedorenko)
- octeon_ep_vf: Resolve netdevice usage count issue (Sathesh B Edara)
- net: mscc: ocelot: delete PVID VLAN when readding it as non-PVID (Vladimir Oltean)
- Bluetooth: L2CAP: copy RX timestamp to new fragments (Pauli Virtanen)
- Bluetooth: btintel_pcie: Add additional to checks to clear TX/RX paths (Kiran K)
- Bluetooth: btusb: avoid NULL pointer dereference in skb_dequeue() (En-Wei Wu)
- Bluetooth: btintel_pcie: Avoid redundant buffer allocation (Kiran K)
- Bluetooth: hci_conn: Fix not setting timeout for BIG Create Sync (Luiz Augusto von Dentz)
- Bluetooth: hci_conn: Fix not setting conn_timeout for Broadcast Receiver (Luiz Augusto von Dentz)
- Bluetooth: hci_conn: Remove alloc from critical section (Iulia Tanasescu)
- ASoC: amd: acp: Fix NULL pointer deref in acp_i2s_set_tdm_slot (Venkata Prasad Potturu)
- accel/ivpu: Correct DCT interrupt handling (Karol Wachowski)
- net/mlx5: E-switch, Fix error handling for enabling roce (Chris Mi)
- net/mlx5e: Fix lock order in mlx5e_tx_reporter_ptpsq_unhealthy_recover (Cosmin Ratiu)
- net/mlx5e: TC, Continue the attr process even if encap entry is invalid (Jianbo Liu)
- net/mlx5: E-Switch, Initialize MAC Address for Default GID (Maor Gottlieb)
- net/mlx5e: Use custom tunnel header for vxlan gbp (Vlad Dogaru)
- xsk: Fix race condition in AF_XDP generic RX path (e.kubanski)
- vxlan: vnifilter: Fix unlocked deletion of default FDB entry (Ido Schimmel)
- powerpc/boot: Fix dash warning (Madhavan Srinivasan)
- wifi: plfxlc: Remove erroneous assert in plfxlc_mac_release (Murad Masimov)
- wifi: iwlwifi: fix the check for the SCRATCH register upon resume (Emmanuel Grumbach)
- wifi: iwlwifi: don't warn if the NIC is gone in resume (Emmanuel Grumbach)
- drm/i915/pxp: fix undefined reference to intel_pxp_gsccs_is_ready_for_sessions' (Chen Linxuan)
- ALSA: hda/realtek - Enable speaker for HP platform (Kailang Yang)
- ASoC: Intel: sof_sdw: Add NULL check in asoc_sdw_rt_dmic_rtd_init() (Chenyuan Yang)
- powerpc/boot: Check for ld-option support (Madhavan Srinivasan)
- pinctrl: imx: Return NULL if no group is matched and found (Hui Wang)
- book3s64/radix : Align section vmemmap start address to PAGE_SIZE (Donet Tom)
- ASoC: soc-pcm: Fix hw_params() and DAPM widget sequence (Sheetal)
- ASoC: cs-amp-lib-test: Don't select SND_SOC_CS_AMP_LIB (Richard Fitzgerald)
- ASoC: soc-core: Stop using of_property_read_bool() for non-boolean properties (Geert Uytterhoeven)
- drm/amd/display: Default IPS to RCG_IN_ACTIVE_IPS2_IN_OFF (Leo Li)
- tracing: Fix oob write in trace_seq_to_buffer() (Jeongjun Park)
- cpufreq: Fix setting policy limits when frequency tables are used (Rafael J. Wysocki)
- cpufreq: Avoid using inconsistent policy->min and policy->max (Rafael J. Wysocki)
- smb: client: fix zero length for mkdir POSIX create context (Jethro Donaldson)
- ksmbd: fix use-after-free in session logoff (Sean Heelan)
- ksmbd: fix use-after-free in kerberos authentication (Sean Heelan)
- ksmbd: fix use-after-free in ksmbd_session_rpc_open (Namjae Jeon)
- platform/x86/intel-uncore-freq: Fix missing uncore sysfs during CPU hotplug (Shouye Liu)
- platform/x86/amd: pmc: Require at least 2.5 seconds between HW sleep cycles (Mario Limonciello)
- iommu: Fix two issues in iommu_copy_struct_from_user() (Nicolin Chen)
- iommu/vt-d: Apply quirk_iommu_igfx for 8086:0044 (QM57/QS57) (Mingcong Bai)
- iommu/arm-smmu-v3: Fix pgsize_bit for sva domains (Balbir Singh)
- iommu/arm-smmu-v3: Fix iommu_device_probe bug due to duplicated stream ids (Nicolin Chen)
- iommu/amd: Fix potential buffer overflow in parse_ivrs_acpihid (Pavel Paklov)
- drm: Select DRM_KMS_HELPER from DRM_DEBUG_DP_MST_TOPOLOGY_REFS (Janne Grunau)
- drm/amdgpu: Fix offset for HDP remap in nbio v7.11 (Lijo Lazar)
- dm: always update the array size in realloc_argv on success (Benjamin Marzinski)
- dm-integrity: fix a warning on invalid table line (Mikulas Patocka)
- dm-bufio: don't schedule in atomic context (LongPing Wei)
- x86/boot/sev: Support memory acceptance in the EFI stub under SVSM (Ard Biesheuvel)
- wifi: brcm80211: fmac: Add error handling for brcmf_usb_dl_writeimage() (Wentao Liang)
- tracing: Do not take trace_event_sem in print_event_fields() (Steven Rostedt)
- spi: tegra114: Don't fail set_cs_timing when delays are zero (Aaron Kling)
- mmc: renesas_sdhi: Fix error handling in renesas_sdhi_probe (Ruslan Piasetskyi)
- mm/memblock: repeat setting reserved region nid if array is doubled (Wei Yang)
- mm/memblock: pass size instead of end to memblock_set_node() (Wei Yang)
- irqchip/qcom-mpm: Prevent crash when trying to handle non-wake GPIOs (Stephan Gerhold)
- amd-xgbe: Fix to ensure dependent features are toggled with RX checksum offload (Vishal Badole)
- perf/x86/intel: KVM: Mask PEBS_ENABLE loaded for guest with vCPU's value. (Sean Christopherson)
- perf/x86/intel: Only check the group flag for X86 leader (Kan Liang)
- parisc: Fix double SIGFPE crash (Helge Deller)
- arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays (Will Deacon)
- i2c: imx-lpi2c: Fix clock count when probe defers (Clark Wang)
- EDAC/altera: Set DDR and SDMMC interrupt mask before registration (Niravkumar L Rabara)
- EDAC/altera: Test the correct error reg offset (Niravkumar L Rabara)
- drm/nouveau: Fix WARN_ON in nouveau_fence_context_kill() (Philipp Stanner)
- drm/fdinfo: Protect against driver unbind (Tvrtko Ursulin)
- cpufreq: intel_pstate: Unchecked MSR aceess in legacy mode (Srinivas Pandruvada)
- btrfs: fix COW handling in run_delalloc_nocow() (Dave Chen)
- btrfs: adjust subpage bit start based on sectorsize (Josef Bacik)
- binder: fix offset calculation in debug log (Carlos Llamas)
- ALSA: usb-audio: Add second USB ID for Jabra Evolve 65 headset (Joachim Priesner)
- ALSA: usb-audio: Add retry on -EPROTO from usb_set_interface() (Geoffrey D. Bennett)
- Revert "rndis_host: Flag RNDIS modems as WWAN devices" (Christian Heusel)
- Bluetooth: btusb: Add 13 USB device IDs for Qualcomm WCN785x (Zijun Hu)
- Bluetooth: btusb: Add new VID/PID for WCN785x (Dorian Cruveiller)
- Bluetooth: btusb: Add ID 0x2c7c:0x0130 for Qualcomm WCN785x (Mark Dietzer)
- Bluetooth: btusb: Add one more ID 0x13d3:0x3623 for Qualcomm WCN785x (Zijun Hu)
- Bluetooth: btusb: Add one more ID 0x0489:0xe0f3 for Qualcomm WCN785x (Zijun Hu)
- Bluetooth: btusb: add Foxconn 0xe0fc for Qualcomm WCN785x (Aaron Ma)
- x86/PCI: Export find_cap() to be used in early PCI code (Rayan Dasoriya)  [Orabug: 37383447]
- x86/quirks: Scan all busses for early PCI quirks (Rayan Dasoriya)  [Orabug: 37383447]
- x86/quirks: Add parameter to clear MSIs early on boot (Rayan Dasoriya)  [Orabug: 37383447]
- scsi: megaraid_sas: Driver version update to 07.734.00.00-rc1 (Chandrakanth Patil)  [Orabug: 37877985]
- scsi: megaraid_sas: Make most module parameters static (Dr. David Alan Gilbert)  [Orabug: 37877985]
- scsi: mpt3sas: Fix buffer overflow in mpt3sas_send_mctp_passthru_req() (Dan Carpenter)  [Orabug: 37878012]
- scsi: mpt3sas: Fix spelling mistake "receveid" -> "received" (Colin Ian King)  [Orabug: 37878012]
- scsi: mpt3sas: update driver version to 52.100.00.00 (Shivasharan S)  [Orabug: 37878012]
- scsi: mpt3sas: Send a diag reset if target reset fails (Shivasharan S)  [Orabug: 37878012]
- scsi: mpt3sas: Report driver capability as part of IOCINFO command (Shivasharan S)  [Orabug: 37878012]
- scsi: mpt3sas: Add support for MCTP Passthrough commands (Shivasharan S)  [Orabug: 37878012]
- scsi: mpt3sas: Update MPI headers to 02.00.62 version (Shivasharan S)  [Orabug: 37878012]
- scsi: mpt3sas: Fix a locking bug in an error path (Bart Van Assche)  [Orabug: 37878012]
- scsi: mpt3sas: Reduce log level of ignore_delay_remove message to KERN_INFO (Paul Menzel)  [Orabug: 37878012]
- scsi: mpt3sas: Remove unused config functions (Dr. David Alan Gilbert)  [Orabug: 37878012]
- scsi: mpt3sas: Add details to EEDPTagMode error message (Paul Menzel)  [Orabug: 37878012]
- scsi: mpt3sas: Update driver version to 51.100.00.00 (Ranjan Kumar)  [Orabug: 37878012]
- vhost-scsi: log event queue write descriptors (Dongli Zhang)  [Orabug: 37883837]
- vhost-scsi: log control queue write descriptors (Dongli Zhang)  [Orabug: 37883837]
- vhost-scsi: log I/O queue write descriptors (Dongli Zhang)  [Orabug: 37883837]
- vhost-scsi: adjust vhost_scsi_get_desc() to log vring descriptors (Dongli Zhang)  [Orabug: 37883837]
- vhost: modify vhost_log_write() for broader users (Dongli Zhang)  [Orabug: 37883837]
- uek: kabi: update x86_64 kABI files for new symbols (Yifei Liu)  [Orabug: 37899161]
- uek-rpm: Move vmxnet3 to module-core in UEK8 (Harshit Mogalapalli)  [Orabug: 37908279]
- x86/bugs: Enabling Retbleed and SRSO mitigation can taint the kernel (Alexandre Chartre)  [Orabug: 37936569]
- x86/bhi: Do not set BHI_DIS_S in 32-bit mode (Pawan Gupta)  [Orabug: 37920673]
- x86/bpf: Add IBHF call at end of classic BPF (Daniel Sneddon)  [Orabug: 37920673]
- x86/bpf: Call branch history clearing sequence on exit (Daniel Sneddon)  [Orabug: 37920673]
- selftest/x86/bugs: Add selftests for ITS (Pawan Gupta)  [Orabug: 37945459]  {CVE-2024-28956}
- x86/its: Align RETs in BHB clear sequence to avoid thunking (Pawan Gupta)  [Orabug: 37945459]  {CVE-2024-28956}
- x86/its: Add support for RSB stuffing mitigation (Pawan Gupta)  [Orabug: 37945459]  {CVE-2024-28956}
- x86/its: Add "vmexit" option to skip mitigation on some CPUs (Pawan Gupta)  [Orabug: 37945459]  {CVE-2024-28956}
- x86/its: Enable Indirect Target Selection mitigation (Pawan Gupta)  [Orabug: 37945459]  {CVE-2024-28956}
- x86/its: Add support for ITS-safe return thunk (Pawan Gupta)  [Orabug: 37945459]  {CVE-2024-28956}
- x86/its: Add support for ITS-safe indirect thunk (Pawan Gupta)  [Orabug: 37945459]  {CVE-2024-28956}
- x86/its: Enumerate Indirect Target Selection (ITS) bug (Pawan Gupta)  [Orabug: 37945459]  {CVE-2024-28956}
- Documentation: x86/bugs/its: Add ITS documentation (Pawan Gupta)  [Orabug: 37945459]  {CVE-2024-28956}

[6.12.0-2.27.2.el9uek]
- LTS version: v6.12.27 (Jack Vogel)
- bpf: Fix BPF_INTERNAL namespace import (Xi Ruoyao)
- LTS version: v6.12.26 (Jack Vogel)
- mq-deadline: don't call req_get_ioprio from the I/O completion handler (Christoph Hellwig)
- arm64: dts: ti: k3-j784s4-j742s2-main-common: Correct the GICD size (Keerthy)
- crypto: Kconfig - Select LIB generic option (Herbert Xu)
- usb: typec: class: Unlocked on error in typec_register_partner() (Dan Carpenter)
- objtool: Silence more KCOV warnings, part 2 (Josh Poimboeuf)
- objtool: Ignore end-of-section jumps for KCOV/GCOV (Josh Poimboeuf)
- usb: xhci: Fix Short Packet handling rework ignoring errors (Michal Pecio)
- nvme: fixup scan failure for non-ANA multipath controllers (Hannes Reinecke)
- MIPS: cm: Fix warning if MIPS_CM is disabled (Thomas Bogendoerfer)
- media: i2c: imx214: Fix uninitialized variable in imx214_set_ctrl() (Dan Carpenter)
- crypto: lib/Kconfig - Hide arch options from user (Herbert Xu)
- iommu: Handle race with default domain setup (Robin Murphy)
- net: dsa: mv88e6xxx: enable STU methods for 6320 family (Marek Behún)
- net: dsa: mv88e6xxx: enable .port_set_policy() for 6320 family (Marek Behún)
- net: dsa: mv88e6xxx: enable PVT for 6321 switch (Marek Behún)
- net: dsa: mv88e6xxx: fix atu_move_port_mask for 6341 family (Marek Behún)
- Revert "net: dsa: mv88e6xxx: fix internal PHYs for 6320 family" (Marek Behún)
- usb: typec: class: Invalidate USB device pointers on partner unregistration (Andrei Kuchynski)
- ext4: goto right label 'out_mmap_sem' in ext4_setattr() (Baokun Li)
- comedi: jr3_pci: Fix synchronous deletion of timer (Ian Abbott)
- vmxnet3: Fix malformed packet sizing in vmxnet3_process_xdp (Daniel Borkmann)
- usb: typec: class: Fix NULL pointer access (Andrei Kuchynski)
- selftests/bpf: Adjust data size to have ETH_HLEN (Shigeru Yoshida)
- selftests/bpf: check program redirect in xdp_cpumap_attach (Alexis Lothoré (eBPF Foundation))
- selftests/bpf: make xdp_cpumap_attach keep redirect prog attached (Alexis Lothoré (eBPF Foundation))
- selftests/bpf: fix bpf_map_redirect call for cpu map test (Alexis Lothoré (eBPF Foundation))
- xfs: flush inodegc before swapon (Christoph Hellwig)
- xfs: rename xfs_iomap_swapfile_activate to xfs_vm_swap_activate (Christoph Hellwig)
- xfs: Do not allow norecovery mount with quotacheck (Carlos Maiolino)
- xfs: do not check NEEDSREPAIR if ro,norecovery mount. (Lukas Herbolt)
- driver core: fix potential NULL pointer dereference in dev_uevent() (Dmitry Torokhov)
- driver core: introduce device_set_driver() helper (Dmitry Torokhov)
- Revert "drivers: core: synchronize really_probe() and dev_uevent()" (Dmitry Torokhov)
- spi: spi-imx: Add check for spi_imx_setupxfer() (Tamura Dai)
- drm/amdgpu: Use the right function for hdp flush (Lijo Lazar)
- drm/amdgpu: use a dummy owner for sysfs triggered cleaner shaders v4 (Christian König)
- md/raid1: Add check for missing source disk in process_checks() (Meir Elisha)
- x86/cpu: Add CPU model number for Bartlett Lake CPUs with Raptor Cove cores (Pi Xiange)
- ubsan: Fix panic from test_ubsan_out_of_bounds (Mostafa Saleh)
- spi: tegra210-quad: add rate limiting and simplify timeout error message (Breno Leitao)
- spi: tegra210-quad: use WARN_ON_ONCE instead of WARN_ON for timeouts (Breno Leitao)
- ksmbd: fix WARNING "do not call blocking ops when !TASK_RUNNING" (Namjae Jeon)
- riscv: Provide all alternative macros all the time (Andrew Jones)
- iomap: skip unnecessary ifs_block_is_uptodate check (Gou Hao)
- netfs: Only create /proc/fs/netfs with CONFIG_PROC_FS (Song Liu)
- x86/i8253: Call clockevent_i8253_disable() with interrupts disabled (Fernando Fernandez Mancera)
- ASoC: fsl_asrc_dma: get codec or cpu dai from backend (Shengjiu Wang)
- scsi: pm80xx: Set phy_attached to zero when device is gone (Igor Pylypiv)
- scsi: ufs: exynos: gs101: Put UFS device in reset on .suspend() (Peter Griffin)
- scsi: ufs: exynos: Move phy calls to .exit() callback (Peter Griffin)
- scsi: ufs: exynos: Enable PRDT pre-fetching with UFSHCD_CAP_CRYPTO (Peter Griffin)
- scsi: ufs: exynos: Ensure pre_link() executes before exynos_ufs_phy_init() (Peter Griffin)
- scsi: hisi_sas: Fix I/O errors caused by hardware port ID changes (Xingui Yang)
- ext4: make block validity check resistent to sb bh corruption (Ojaswin Mujoo)
- iommu: Clear iommu-dma ops on cleanup (Robin Murphy)
- cifs: Fix querying of WSL CHR and BLK reparse points over SMB1 (Pali Rohár)
- timekeeping: Add a lockdep override in tick_freeze() (Sebastian Andrzej Siewior)
- cifs: Fix encoding of SMB1 Session Setup Kerberos Request in non-UNICODE mode (Pali Rohár)
- nvmet-fc: put ref when assoc->del_work is already scheduled (Daniel Wagner)
- nvmet-fc: take tgtport reference only once (Daniel Wagner)
- x86/bugs: Don't fill RSB on context switch with eIBRS (Josh Poimboeuf)
- x86/bugs: Don't fill RSB on VMEXIT with eIBRS+retpoline (Josh Poimboeuf)
- x86/bugs: Use SBPB in write_ibpb() if applicable (Josh Poimboeuf)
- selftests/mincore: Allow read-ahead pages to reach the end of the file (Qiuxu Zhuo)
- x86/xen: disable CPU idle and frequency drivers for PVH dom0 (Roger Pau Monne)
- gpiolib: of: Move Atmel HSMCI quirk up out of the regulator comment (Andy Shevchenko)
- objtool: Stop UNRET validation on UD2 (Josh Poimboeuf)
- nvme: multipath: fix return value of nvme_available_path (Uday Shankar)
- nvme: re-read ANA log page after ns scan completes (Hannes Reinecke)
- drm/xe/xe3lpg: Apply Wa_14022293748, Wa_22019794406 (Julia Filipchuk)
- drm/amdgpu: Increase KIQ invalidate_tlbs timeout (Jay Cornwall)
- ACPI PPTT: Fix coding mistakes in a couple of sizeof() calls (Jean-Marc Eurin)
- ACPI: EC: Set ec_no_wakeup for Lenovo Go S (Mario Limonciello)
- nvme: requeue namespace scan on missed AENs (Hannes Reinecke)
- xen: Change xen-acpi-processor dom0 dependency (Jason Andryuk)
- perf/core: Fix WARN_ON(!ctx) in __free_event() for partial init (Gabriel Shahrouzi)
- selftests: ublk: fix test_stripe_04 (Ming Lei)
- cgroup/cpuset: Don't allow creation of local partition over a remote one (Waiman Long)
- KVM: s390: Don't use %pK through debug printing (Thomas Weißschuh)
- KVM: s390: Don't use %pK through tracepoints (Thomas Weißschuh)
- sched/isolation: Make CONFIG_CPU_ISOLATION depend on CONFIG_SMP (Oleg Nesterov)
- kbuild: add dependency from vmlinux to sorttable (Xi Ruoyao)
- io_uring: always do atomic put from iowq (Pavel Begunkov)
- rtc: pcf85063: do a SW reset if POR failed (Lukas Stockmann)
- 9p/trans_fd: mark concurrent read and writes to p9_conn->err (Ignacio Encinas)
- 9p/net: fix improper handling of bogus negative read/write replies (Dominique Martinet)
- ntb_hw_amd: Add NTB PCI ID for new gen CPU (Basavaraj Natikar)
- ntb: reduce stack usage in idt_scan_mws (Arnd Bergmann)
- qibfs: fix _another_ leak (Al Viro)
- objtool, lkdtm: Obfuscate the do_nothing() pointer (Josh Poimboeuf)
- objtool, regulator: rk808: Remove potential undefined behavior in rk806_set_mode_dcdc() (Josh Poimboeuf)
- objtool, ASoC: codecs: wcd934x: Remove potential undefined behavior in wcd934x_slim_irq_handler() (Josh Poimboeuf)
- objtool, panic: Disable SMAP in __stack_chk_fail() (Josh Poimboeuf)
- objtool: Silence more KCOV warnings (Josh Poimboeuf)
- um: work around sched_yield not yielding in time-travel mode (Benjamin Berg)
- thunderbolt: Scan retimers after device router has been enumerated (Mika Westerberg)
- usb: host: xhci-plat: mvebu: use ->quirks instead of ->init_quirk() func (Théo Lebrun)
- usb: gadget: aspeed: Add NULL pointer check in ast_vhub_init_dev() (Chenyuan Yang)
- phy: rockchip: usbdp: Avoid call hpd_event_trigger in dp_phy_init (Andy Yan)
- usb: xhci: Avoid Stop Endpoint retry loop if the endpoint seems Running (Michal Pecio)
- dmaengine: dmatest: Fix dmatest waiting less when interrupted (Vinicius Costa Gomes)
- i3c: master: svc: Add support for Nuvoton npcm845 i3c (Stanley Chu)
- xhci: Handle spurious events on Etron host isoc enpoints (Mathias Nyman)
- usb: xhci: Fix isochronous Ring Underrun/Overrun event handling (Michal Pecio)
- usb: xhci: Complete 'error mid TD' transfers when handling Missed Service (Michal Pecio)
- sound/virtio: Fix cancel_sync warnings on uninitialized work_structs (John Stultz)
- usb: dwc3: gadget: Avoid using reserved endpoints on Intel Merrifield (Andy Shevchenko)
- usb: dwc3: gadget: Refactor loop to avoid NULL endpoints (Andy Shevchenko)
- fs/ntfs3: Fix WARNING in ntfs_extend_initialized_size (Edward Adam Davis)
- fs/ntfs3: Keep write operations atomic (Lizhi Xu)
- usb: host: max3421-hcd: Add missing spi_device_id table (Alexander Stein)
- mailbox: pcc: Always clear the platform ack interrupt first (Sudeep Holla)
- mailbox: pcc: Fix the possible race in updation of chan_in_use flag (Huisong Li)
- bpf: Reject attaching fexit/fmod_ret to __noreturn functions (Yafang Shao)
- bpf: Only fails the busy counter check in bpf_cgrp_storage_get if it creates storage (Martin KaFai Lau)
- bpf: bpftool: Setting error code in do_loader() (Sewon Nam)
- s390/tty: Fix a potential memory leak bug (Haoxiang Li)
- s390/sclp: Add check for get_zeroed_page() (Haoxiang Li)
- parisc: PDT: Fix missing prototype warning (Yu-Chun Lin)
- clk: check for disabled clock-provider in of_clk_get_hw_from_clkspec() (Heiko Stuebner)
- bpf: Fix deadlock between rcu_tasks_trace and event_mutex. (Alexei Starovoitov)
- bpf: Fix kmemleak warning for percpu hashmap (Yonghong Song)
- crypto: null - Use spin lock instead of mutex (Herbert Xu)
- crypto: lib/Kconfig - Fix lib built-in failure when arch is modular (Herbert Xu)
- crypto: ccp - Add support for PCI device 0x1134 (Devaraj Rangasamy)
- MIPS: cm: Detect CM quirks from device tree (Gregory CLEMENT)
- pinctrl: mcp23s08: Get rid of spurious level interrupts (Dmitry Mastykin)
- pinctrl: renesas: rza2: Fix potential NULL pointer dereference (Chenyuan Yang)
- selftests/bpf: Fix stdout race condition in traffic monitor (Amery Hung)
- USB: wdm: add annotation (Oliver Neukum)
- USB: wdm: wdm_wwan_port_tx_complete mutex in atomic context (Oliver Neukum)
- USB: wdm: close race between wdm_open and wdm_wwan_port_stop (Oliver Neukum)
- USB: wdm: handle IO errors in wdm_wwan_port_start (Oliver Neukum)
- USB: VLI disk crashes if LPM is used (Oliver Neukum)
- usb: quirks: Add delay init quirk for SanDisk 3.2Gen1 Flash Drive (Miao Li)
- usb: quirks: add DELAY_INIT quirk for Silicon Motion Flash Drive (Miao Li)
- usb: dwc3: xilinx: Prevent spike in reset signal (Mike Looijmans)
- usb: dwc3: gadget: check that event count does not exceed event buffer length (Frode Isaksen)
- USB: OHCI: Add quirk for LS7A OHCI controller (rev 0x02) (Huacai Chen)
- usb: chipidea: ci_hdrc_imx: implement usb_phy_init() error handling (Fedor Pchelkin)
- usb: chipidea: ci_hdrc_imx: fix call balance of regulator routines (Fedor Pchelkin)
- usb: chipidea: ci_hdrc_imx: fix usbmisc handling (Fedor Pchelkin)
- usb: cdns3: Fix deadlock when using NCM gadget (Ralph Siemsen)
- usb: xhci: Fix invalid pointer dereference in Etron workaround (Michal Pecio)
- xhci: Limit time spent with xHC interrupts disabled during bus resume (Mathias Nyman)
- USB: serial: simple: add OWON HDS200 series oscilloscope support (Craig Hesling)
- USB: serial: option: add Sierra Wireless EM9291 (Adam Xue)
- USB: serial: ftdi_sio: add support for Abacus Electrics Optical Probe (Michael Ehrenreich)
- serial: sifive: lock port in startup()/shutdown() callbacks (Ryo Takakura)
- serial: msm: Configure correct working mode before starting earlycon (Stephan Gerhold)
- tty: Require CAP_SYS_ADMIN for all usages of TIOCL_SELMOUSEREPORT (Günther Noack)
- firmware: stratix10-svc: Add of_platform_default_populate() (Mahesh Rao)
- misc: microchip: pci1xxxx: Fix incorrect IRQ status handling during ack (Rengarajan S)
- misc: microchip: pci1xxxx: Fix Kernel panic during IRQ handler registration (Rengarajan S)
- char: misc: register chrdev region with all possible minors (Thadeu Lima de Souza Cascardo)
- KVM: x86: Take irqfds.lock when adding/deleting IRQ bypass producer (Sean Christopherson)
- KVM: x86: Reset IRTE to host control if *new* route isn't postable (Sean Christopherson)
- KVM: x86: Explicitly treat routing entry type changes as changes (Sean Christopherson)
- mei: vsc: Fix fortify-panic caused by invalid counted_by() use (Hans de Goede)
- mei: me: add panther lake H DID (Alexander Usyskin)
- scsi: Improve CDL control (Damien Le Moal)
- USB: storage: quirk for ADATA Portable HDD CH94 (Oliver Neukum)
- ata: libata-scsi: Fix ata_msense_control_ata_feature() (Damien Le Moal)
- ata: libata-scsi: Fix ata_mselect_control_ata_feature() return type (Damien Le Moal)
- ata: libata-scsi: Improve CDL control (Damien Le Moal)
- mcb: fix a double free bug in chameleon_parse_gdd() (Haoxiang Li)
- cxl/core/regs.c: Skip Memory Space Enable check for RCD and RCH Ports (Smita Koralahalli)
- KVM: SVM: Allocate IR data using atomic allocation (Sean Christopherson)
- io_uring: fix 'sync' handling of io_fallback_tw() (Jens Axboe)
- LoongArch: KVM: Fix PMU pass-through issue if VM exits to host finally (Bibo Mao)
- LoongArch: KVM: Fully clear some CSRs when VM reboot (Bibo Mao)
- LoongArch: Remove a bogus reference to ZONE_DMA (Petr Tesarik)
- LoongArch: Return NULL from huge_pte_offset() for invalid PMD (Ming Wang)
- LoongArch: Handle fp, lsx, lasx and lbt assembly symbols (Tiezhu Yang)
- irqchip/gic-v2m: Prevent use after free of gicv2m_get_fwnode() (Suzuki K Poulose)
- x86/insn: Fix CTEST instruction decoding (Kirill A. Shutemov)
- drm/amd/display: Force full update in gpu reset (Roman Li)
- drm/amd/display: Fix gpu reset in multidisplay config (Roman Li)
- drm: panel: jd9365da: fix reset signal polarity in unprepare (Hugo Villeneuve)
- rust: firmware: Use ffi::c_char type in FwFunc (Christian Schrefl)
- net: phy: microchip: force IRQ polling mode for lan88xx (Fiona Klute)
- net: selftests: initialize TCP header and skb payload with zero (Oleksij Rempel)
- xen-netfront: handle NULL returned by xdp_convert_buff_to_frame() (Alexey Nepomnyashih)
- crypto: atmel-sha204a - Set hwrng quality to lowest possible (Marek Behún)
- sched_ext: Use kvzalloc for large exit_dump allocation (Breno Leitao)
- virtio_console: fix missing byte order handling for cols and rows (Halil Pasic)
- netfilter: fib: avoid lookup if socket is available (Florian Westphal)
- LoongArch: Make do_xyz() exception handlers more robust (Tiezhu Yang)
- LoongArch: Make regs_irqs_disabled() more clear (Tiezhu Yang)
- LoongArch: Select ARCH_USE_MEMTEST (Yuli Wang)
- perf/x86: Fix non-sampling (counting) events on certain x86 platforms (Luo Gengkun)
- bpf: Add namespace to BPF internal symbols (Alexei Starovoitov)
- splice: remove duplicate noinline from pipe_clear_nowait (T.J. Mercier)
- riscv: uprobes: Add missing fence.i after building the XOL buffer (Björn Töpel)
- riscv: Replace function-like macro by static inline function (Björn Töpel)
- iommu/amd: Return an error if vCPU affinity is set for non-vCPU IRTE (Sean Christopherson)
- block: never reduce ra_pages in blk_apply_bdi_limits (Christoph Hellwig)
- pds_core: make wait_context part of q_info (Shannon Nelson)
- pds_core: Remove unnecessary check in pds_client_adminq_cmd() (Brett Creeley)
- pds_core: handle unsupported PDS_CORE_CMD_FW_CONTROL result (Brett Creeley)
- pds_core: Prevent possible adminq overflow/stuck condition (Brett Creeley)
- net: dsa: mt7530: sync driver-specific behavior of MT7531 variants (Daniel Golle)
- net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (Cong Wang)
- net_sched: hfsc: Fix a UAF vulnerability in class handling (Cong Wang)
- fix a couple of races in MNT_TREE_BENEATH handling by do_move_mount() (Al Viro)
- net: ethernet: mtk_eth_soc: net: revise NETSYSv3 hardware configuration (Bo-Cun Chen)
- tipc: fix NULL pointer dereference in tipc_mon_reinit_self() (Tung Nguyen)
- net: phy: leds: fix memory leak (Qingfang Deng)
- net: lwtunnel: disable BHs when required (Justin Iurman)
- scsi: ufs: core: Add NULL check in ufshcd_mcq_compl_pending_transfer() (Chenyuan Yang)
- scsi: core: Clear flags for scsi_cmnd that did not complete (Anastasia Kovaleva)
- net/mlx5: Move ttc allocation after switch case to prevent leaks (Henry Martin)
- net/mlx5: Fix null-ptr-deref in mlx5_create_{inner_,}ttc_table() (Henry Martin)
- cgroup/cpuset-v1: Add missing support for cpuset_v2_mode (T.J. Mercier)
- btrfs: zoned: return EIO on RAID1 block group write pointer mismatch (Johannes Thumshirn)
- btrfs: avoid page_lockend underflow in btrfs_punch_hole_lock_range() (Qu Wenruo)
- cpufreq: fix compile-test defaults (Johan Hovold)
- cpufreq: Do not enable by default during compile testing (Krzysztof Kozlowski)
- cpufreq: cppc: Fix invalid return value in .get() callback (Marc Zyngier)
- scsi: ufs: mcq: Add NULL check in ufshcd_mcq_abort() (Chenyuan Yang)
- cpufreq: scpi: Fix null-ptr-deref in scpi_cpufreq_get_rate() (Henry Martin)
- cpufreq: scmi: Fix null-ptr-deref in scmi_cpufreq_get_rate() (Henry Martin)
- cpufreq: apple-soc: Fix null-ptr-deref in apple_soc_cpufreq_get_rate() (Henry Martin)
- dma/contiguous: avoid warning about unused size_bytes (Arnd Bergmann)
- cpufreq: sun50i: prevent out-of-bounds access (Andre Przywara)
- ceph: Fix incorrect flush end position calculation (David Howells)
- lib/Kconfig.ubsan: Remove 'default UBSAN' from UBSAN_INTEGER_WRAP (Nathan Chancellor)
- drm/amd/display/dml2: use vzalloc rather than kzalloc (Alex Deucher)
- drm/amd/display: Fix unnecessary cast warnings from checkpatch (Rohit Chavan)
- drm/xe/bmg: Add one additional PCI ID (Matt Roper)
- net/niu: Niu requires MSIX ENTRY_DATA fields touch before entry reads (Jonathan Currier)
- scsi: ufs: exynos: Disable iocc if dma-coherent property isn't set (Peter Griffin)
- scsi: ufs: exynos: Move UFS shareability value to drvdata (Peter Griffin)
- scsi: ufs: exynos: Add gs101_ufs_drv_init() hook and enable WriteBooster (Peter Griffin)
- scsi: ufs: exynos: Remove superfluous function parameter (Tudor Ambarus)
- scsi: ufs: exynos: Remove empty drv_init method (Tudor Ambarus)
- ksmbd: fix use-after-free in __smb2_lease_break_noti() (Namjae Jeon)
- ksmbd: browse interfaces list on FSCTL_QUERY_INTERFACE_INFO IOCTL (Namjae Jeon)
- ksmbd: add netdev-up/down event debug print (Namjae Jeon)
- ksmbd: use __GFP_RETRY_MAYFAIL (Namjae Jeon)
- accel/ivpu: Fix the NPU's DPU frequency calculation (Andrzej Kacprowski)
- accel/ivpu: Add auto selection logic for job scheduler (Jacek Lawrynowicz)
- PCI/MSI: Add an option to write MSIX ENTRY_DATA before any reads (Jonathan Currier)
- PCI/MSI: Handle the NOMASK flag correctly for all PCI/MSI backends (Thomas Gleixner)
- PCI/MSI: Convert pci_msi_ignore_mask to per MSI domain flag (Roger Pau Monne)
- scsi: ufs: qcom: fix dev reference leaked through of_qcom_ice_get (Tudor Ambarus)
- of: resolver: Fix device node refcount leakage in of_resolve_phandles() (Zijun Hu)
- of: resolver: Simplify of_resolve_phandles() using __free() (Rob Herring (Arm))
- arm64: dts: ti: k3-j784s4-j742s2-main-common: Fix serdes_ln_ctrl reg-masks (Siddharth Vadapalli)
- arm64: dts: ti: Refactor J784s4 SoC files to a common file (Manorit Chawdhry)
- iio: adc: ad7768-1: Fix conversion result sign (Sergiu Cuciurean)
- iio: adc: ad7768-1: Move setting of val a bit later to avoid unnecessary return value check (Jonathan Cameron)
- net: dsa: mv88e6xxx: fix VTU methods for 6320 family (Marek Behún)
- media: ov08x40: Add missing ov08x40_identify_module() call on stream-start (Hans de Goede)
- media: ov08x40: Move ov08x40_identify_module() function up (Hans de Goede)
- media: i2c: imx214: Fix link frequency validation (André Apitzsch)
- media: i2c: imx214: Check number of lanes from device tree (André Apitzsch)
- media: i2c: imx214: Replace register addresses with macros (André Apitzsch)
- media: i2c: imx214: Convert to CCI register access helpers (André Apitzsch)
- media: i2c: imx214: Simplify with dev_err_probe() (André Apitzsch)
- media: i2c: imx214: Use subdev active state (André Apitzsch)
- PM: EM: Address RCU-related sparse warnings (Rafael J. Wysocki)
- PM: EM: use kfree_rcu() to simplify the code (Li RongQing)
- mmc: sdhci-msm: fix dev reference leaked through of_qcom_ice_get (Tudor Ambarus)
- soc: qcom: ice: introduce devm_of_qcom_ice_get (Tudor Ambarus)
- mm/vmscan: don't try to reclaim hwpoison folio (Jinjiang Tu)
- tracing: Verify event formats that have "%*p.." (Steven Rostedt)
- tracing: Add __print_dynamic_array() helper (Steven Rostedt)
- module: sign with sha512 instead of sha1 by default (Thorsten Leemhuis)
- LTS version: v6.12.25 (Jack Vogel)
- selftests/bpf: extend changes_pkt_data with cases w/o subprograms (Eduard Zingerman)
- bpf: fix null dereference when computing changes_pkt_data of prog w/o subprogs (Eduard Zingerman)
- selftests/bpf: validate that tail call invalidates packet pointers (Eduard Zingerman)
- selftests/bpf: freplace tests for tracking of changes_packet_data (Eduard Zingerman)
- bpf: check changes_pkt_data property for extension programs (Eduard Zingerman)
- selftests/bpf: test for changing packet data from global functions (Eduard Zingerman)
- bpf: track changes_pkt_data property for global functions (Eduard Zingerman)
- bpf: add find_containing_subprog() utility function (Eduard Zingerman)
- wifi: ath12k: Fix invalid entry fetch in ath12k_dp_mon_srng_process (P Praneesh)
- MIPS: ds1287: Match ds1287_set_base_clock() function types (WangYuli)
- MIPS: cevt-ds1287: Add missing ds1287.h include (WangYuli)
- MIPS: dec: Declare which_prom() as static (WangYuli)
- Revert "wifi: ath12k: Fix invalid entry fetch in ath12k_dp_mon_srng_process" (Alexander Tsoy)
- mm/vma: add give_up_on_oom option on modify/merge, use in uffd release (Lorenzo Stoakes)
- nvmet-fc: Remove unused functions (WangYuli)
- drm/amd/display: Temporarily disable hostvm on DCN31 (Aurabindo Pillai)
- LoongArch: Eliminate superfluous get_numa_distances_cnt() (Yuli Wang)
- efi/libstub: Bump up EFI_MMAP_NR_SLACK_SLOTS to 32 (Hamza Mahfooz)
- misc: pci_endpoint_test: Fix 'irq_type' to convey the correct type (Kunihiko Hayashi)
- misc: pci_endpoint_test: Avoid issue of interrupts remaining after request_irq error (Kunihiko Hayashi)
- selftests/bpf: Fix raw_tp null handling test (Shung-Hsi Yu)
- md: fix mddev uaf while iterating all_mddevs list (Yu Kuai)
- platform/x86: msi-wmi-platform: Workaround a ACPI firmware bug (Armin Wolf)
- platform/x86: msi-wmi-platform: Rename "data" variable (Armin Wolf)
- kbuild: Add '-fno-builtin-wcslen' (Nathan Chancellor)
- scripts: generate_rust_analyzer: Add ffi crate (Lukas Fischer)
- cpufreq: Reference count policy in cpufreq_update_limits() (Rafael J. Wysocki)
- arm64/boot: Enable EL2 requirements for FEAT_PMUv3p9 (Anshuman Khandual)
- arm64/sysreg: Add register fields for HFGWTR2_EL2 (Anshuman Khandual)
- arm64/sysreg: Add register fields for HFGRTR2_EL2 (Anshuman Khandual)
- arm64/sysreg: Add register fields for HFGITR2_EL2 (Anshuman Khandual)
- arm64/sysreg: Add register fields for HDFGWTR2_EL2 (Anshuman Khandual)
- arm64/sysreg: Add register fields for HDFGRTR2_EL2 (Anshuman Khandual)
- arm64/sysreg: Update register fields for ID_AA64MMFR0_EL1 (Anshuman Khandual)
register (Thomas Zimmermann)
- drm/amdgpu: fix warning of drm_mm_clean (ZhenGuo Yin)
- drm/xe: Set LRC addresses before guc load (Lucas De Marchi)
- drm/xe/userptr: fix notifier vs folio deadlock (Matthew Auld)
- drm/xe/dma_buf: stop relying on placement in unmap (Matthew Auld)
- drm/amd/display: Add HP Probook 445 and 465 to the quirk list for eDP on DP1 (Mario Limonciello)
- drm/amd/display: Protect FPU in dml2_init()/dml21_init() (Huacai Chen)
- drm/amd/display: Do not enable Replay and PSR while VRR is on in amdgpu_dm_commit_planes() (Tom Chung)
- drm/amdgpu: immediately use GTT for new allocations (Christian König)
- drm/i915/gvt: fix unterminated-string-initialization warning (Jani Nikula)
- drm/xe: Fix an out-of-bounds shift when invalidating TLB (Thomas Hellström)
- drm/sti: remove duplicate object names (Rolf Eike Beer)
- drm/imagination: take paired job reference (Brendan King)
- drm/imagination: fix firmware memory leaks (Brendan King)
- drm/nouveau: prime: fix ttm_bo_delayed_delete oops (Chris Bainbridge)
- drm/amdgpu/dma_buf: fix page_link check (Matthew Auld)
- drm/amdgpu/mes11: optimize MES pipe FW version fetching (Alex Deucher)
- drm/amd/display: Protect FPU in dml21_copy() (Huacai Chen)
- drm/amd/display: Protect FPU in dml2_validate()/dml21_validate() (Huacai Chen)
- drm/amd/display: Add HP Elitebook 645 to the quirk list for eDP on DP1 (Mario Limonciello)
- drm/xe: Use local fence in error path of xe_migrate_clear (Matthew Brost)
- drm/i915/vrr: Add vrr.vsync_{start, end} in vrr_params_changed (Ankit Nautiyal)
- drm/amdgpu/mes12: optimize MES pipe FW version fetching (Alex Deucher)
- drm/amd/pm/powerplay/hwmgr/vega20_thermal: Prevent division by zero (Denis Arefev)
- drm/amd/pm/swsmu/smu13/smu_v13_0: Prevent division by zero (Denis Arefev)
- drm/amd/pm/powerplay/hwmgr/smu7_thermal: Prevent division by zero (Denis Arefev)
- drm/amd/pm/smu11: Prevent division by zero (Denis Arefev)
- drm/amd/pm/powerplay: Prevent division by zero (Denis Arefev)
- drm/amd/pm: Prevent division by zero (Denis Arefev)
- drm/amd/display: Increase vblank offdelay for PSR panels (Leo Li)
- drm/amd/display: Actually do immediate vblank disable (Leo Li)
- drm/amd: Handle being compiled without SI or CIK support better (Mario Limonciello)
- drm/amd/display: prevent hang on link training fail (Brendan Tam)
- drm/amdgpu: Prefer shadow rom when available (Lijo Lazar)
- drm/msm/a6xx: Fix stale rpmh votes from GPU (Akhil P Oommen)
- drm/msm/dsi: Add check for devm_kstrdup() (Haoxiang Li)
- drm/ast: Fix ast_dp connection status (Jocelyn Falempe)
- drm/repaper: fix integer overflows in repeat functions (Nikita Zhandarovich)
- perf/x86/intel/uncore: Fix the scale of IIO free running counters on SPR (Kan Liang)
- perf/x86/intel/uncore: Fix the scale of IIO free running counters on ICX (Kan Liang)
- perf/x86/intel/uncore: Fix the scale of IIO free running counters on SNR (Kan Liang)
- perf/x86/intel: Allow to update user space GPRs from PEBS records (Dapeng Mi)
- platform/x86: amd: pmf: Fix STT limits (Mario Limonciello)
- RAS/AMD/FMPM: Get masked address (Yazen Ghannam)
- RAS/AMD/ATL: Include row[13] bit in row retirement (Yazen Ghannam)
- scsi: ufs: exynos: Ensure consistent phy reference counts (Peter Griffin)
- scsi: megaraid_sas: Block zero-length ATA VPD inquiry (Chandrakanth Patil)
- x86/boot/sev: Avoid shared GHCB page for early memory acceptance (Ard Biesheuvel)
- x86/cpu/amd: Fix workaround for erratum 1054 (Sandipan Das)
- x86/microcode/AMD: Extend the SHA check to Zen5, block loading of any unreleased standalone Zen5 microcode patches (Borislav Petkov (AMD))
- virtiofs: add filesystem context source name check (Xiangsheng Hou)
- tracing: Fix filter string testing (Steven Rostedt)
- string: Add load_unaligned_zeropad() code path to sized_strscpy() (Peter Collingbourne)
- smb3 client: fix open hardlink on deferred close file error (Chunjie Zhu)
- slab: ensure slab->obj_exts is clear in a newly allocated slab page (Suren Baghdasaryan)
- selftests/mm: generate a temporary mountpoint for cgroup filesystem (Mark Brown)
- riscv: Avoid fortify warning in syscall_get_arguments() (Nathan Chancellor)
- Revert "smb: client: fix TCP timers deadlock after rmmod" (Kuniyuki Iwashima)
- Revert "smb: client: Fix netns refcount imbalance causing leaks and use-after-free" (Kuniyuki Iwashima)
- ksmbd: fix the warning from __kernel_write_iter (Namjae Jeon)
- ksmbd: Prevent integer overflow in calculation of deadtime (Denis Arefev)
- ksmbd: fix use-after-free in smb_break_all_levII_oplock() (Namjae Jeon)
- ksmbd: Fix dangling pointer in krb_authenticate (Sean Heelan)
- ovl: don't allow datadir only (Miklos Szeredi)
- mm: fix apply_to_existing_page_range() (Kirill A. Shutemov)
- mm: fix filemap_get_folios_contig returning batches of identical folios (Vishal Moola (Oracle))
- mm/gup: fix wrongly calculated returned value in fault_in_safe_writeable() (Baoquan He)
- mm/compaction: fix bug in hugetlb handling pathway (Vishal Moola (Oracle))
- loop: LOOP_SET_FD: send uevents for partitions (Thomas Weißschuh)
- loop: properly send KOBJ_CHANGED uevent for disk device (Thomas Weißschuh)
- isofs: Prevent the use of too small fid (Edward Adam Davis)
- i2c: cros-ec-tunnel: defer probe if parent EC is not present (Thadeu Lima de Souza Cascardo)
- hfs/hfsplus: fix slab-out-of-bounds in hfs_bnode_read_key (Vasiliy Kovalev)
- crypto: caam/qi - Fix drv_ctx refcount bug (Herbert Xu)
- cpufreq/sched: Explicitly synchronize limits_changed flag handling (Rafael J. Wysocki)
- btrfs: correctly escape subvol in btrfs_show_options() (Johannes Kimmel)
- Bluetooth: vhci: Avoid needless snprintf() calls (Kees Cook)
- Bluetooth: l2cap: Process valid commands in too long frame (Frédéric Danis)
- drm/msm/a6xx+: Don't let IB_SIZE overflow (Rob Clark)
- ftrace: fix incorrect hash size in register_ftrace_direct() (Menglong Dong)
- i2c: atr: Fix wrong include (Andy Shevchenko)
- nfsd: decrease sc_count directly if fail to queue dl_recall (Li Lingfeng)
- nfs: add missing selections of CONFIG_CRC32 (Eric Biggers)
- dma-buf/sw_sync: Decrement refcount on error in sw_sync_ioctl_get_deadline() (Dan Carpenter)
- drm/v3d: Fix Indirect Dispatch configuration for V3D 7.1.6 and later (Maíra Canal)
- block: integrity: Do not call set_page_dirty_lock() (Martin K. Petersen)
- asus-laptop: Fix an uninitialized variable (Denis Arefev)
- ASoC: qcom: Fix sc7280 lpass potential buffer overflow (Evgeny Pimenov)
- ASoC: Intel: sof_sdw: Add quirk for Asus Zenbook S16 (Peter Ujfalusi)
- ASoC: codecs:lpass-wsa-macro: Fix logic of enabling vi channels (Srinivas Kandagatla)
- ASoC: codecs:lpass-wsa-macro: Fix vi feedback rate (Srinivas Kandagatla)
- ASoC: fsl: fsl_qmc_audio: Reset audio data pointers on TRIGGER_START event (Herve Codina)
- Revert "PCI: Avoid reset when disabled via sysfs" (Alex Williamson)
- writeback: fix false warning in inode_to_wb() (Andreas Gruenbacher)
- rust: kbuild: use pound to support GNU Make < 4.3 (Miguel Ojeda)
- rust: disable clippy::needless_continue (Miguel Ojeda)
- rust: kasan/kbuild: fix missing flags on first build (Miguel Ojeda)
- objtool/rust: add one more noreturn Rust function for Rust 1.86.0 (Miguel Ojeda)
- cpufreq/sched: Fix the usage of CPUFREQ_NEED_UPDATE_LIMITS (Rafael J. Wysocki)
- riscv: KGDB: Remove ".option norvc/.option rvc" for kgdb_compiled_break (WangYuli)
- riscv: KGDB: Do not inline arch_kgdb_breakpoint() (WangYuli)
- kunit: qemu_configs: SH: Respect kunit cmdline (Thomas Weißschuh)
- riscv: module: Allocate PLT entries for R_RISCV_PLT32 (Samuel Holland)
- riscv: module: Fix out-of-bounds relocation access (Samuel Holland)
- riscv: Properly export reserved regions in /proc/iomem (Björn Töpel)
- riscv: Use kvmalloc_array on relocation_hashtable (Will Pierce)
- net: ethernet: mtk_eth_soc: revise QDMA packet scheduler settings (Bo-Cun Chen)
- net: ethernet: mtk_eth_soc: correct the max weight of the queue limit for 100Mbps (Bo-Cun Chen)
- net: ethernet: mtk_eth_soc: reapply mdc divider on reset (Bo-Cun Chen)
- net: ti: icss-iep: Fix possible NULL pointer dereference for perout request (Meghana Malladi)
- net: ti: icss-iep: Add phase offset configuration for perout signal (Meghana Malladi)
- net: ti: icss-iep: Add pwidth configuration for perout signal (Meghana Malladi)
- ptp: ocp: fix start time alignment in ptp_ocp_signal_set (Sagi Maimon)
- net: dsa: avoid refcount warnings when ds->ops->tag_8021q_vlan_del() fails (Vladimir Oltean)
- net: dsa: free routing table on probe failure (Vladimir Oltean)
- net: dsa: clean up FDB, MDB, VLAN entries on unbind (Vladimir Oltean)
- net: dsa: mv88e6xxx: fix -ENOENT when deleting VLANs and MST is unsupported (Vladimir Oltean)
- net: dsa: mv88e6xxx: avoid unregistering devlink regions which were never registered (Vladimir Oltean)
- net: txgbe: fix memory leak in txgbe_probe() error path (Abdun Nihaal)
- net: bridge: switchdev: do not notify new brentries as changed (Jonas Gorski)
- net: b53: enable BPDU reception for management port (Jonas Gorski)
- netlink: specs: rt-link: adjust mctp attribute naming (Jakub Kicinski)
- netlink: specs: rt-link: add an attr layer around alt-ifname (Jakub Kicinski)
- cxgb4: fix memory leak in cxgb4_init_ethtool_filters() error path (Abdun Nihaal)
- ata: libata-sata: Save all fields from sense data descriptor (Niklas Cassel)
- loop: stop using vfs_iter_{read,write} for buffered I/O (Christoph Hellwig)
- loop: aio inherit the ioprio of original request (Yunlong Xing)
- eth: bnxt: fix missing ring index trim on error path (Jakub Kicinski)
- net: ethernet: ti: am65-cpsw: fix port_np reference counting (Michael Walle)
- net: ngbe: fix memory leak in ngbe_probe() error path (Abdun Nihaal)
- can: rockchip_canfd: fix broken quirks checks (Weizhao Ouyang)
- net: openvswitch: fix nested key length validation in the set() action (Ilya Maximets)
- netlink: specs: ovs_vport: align with C codegen capabilities (Jakub Kicinski)
- block: fix resource leak in blk_register_queue() error path (Zheng Qixing)
- net: mctp: Set SOCK_RCU_FREE (Matt Johnston)
- ethtool: cmis_cdb: use correct rpl size in ethtool_cmis_module_poll() (Damodharam Ammepalli)
- pds_core: fix memory leak in pdsc_debugfs_add_qcq() (Abdun Nihaal)
- test suite: use %zu to print size_t (Matthew Wilcox (Oracle))
- smc: Fix lockdep false-positive for IPPROTO_SMC. (Kuniyuki Iwashima)
- dt-bindings: soc: fsl: fsl,ls1028a-reset: Fix maintainer entry (Geert Uytterhoeven)
- igc: add lock preventing multiple simultaneous PTM transactions (Christopher S M Hall)
- igc: cleanup PTP module if probe fails (Christopher S M Hall)
- igc: handle the IGC_PTP_ENABLED flag correctly (Christopher S M Hall)
- igc: move ktime snapshot into PTM retry loop (Christopher S M Hall)
- igc: increase wait time before retrying PTM (Christopher S M Hall)
- igc: fix PTM cycle trigger logic (Christopher S M Hall)
- Revert "wifi: mac80211: Update skb's control block key in ieee80211_tx_dequeue()" (Johannes Berg)
- xen: fix multicall debug feature (Juergen Gross)
- ipv6: add exception routes to GC list in rt6_insert_exception (Xin Long)
- Bluetooth: l2cap: Check encryption key size on incoming connection (Frédéric Danis)
- Bluetooth: btrtl: Prevent potential NULL dereference (Dan Carpenter)
- Bluetooth: hci_event: Fix sending MGMT_EV_DEVICE_FOUND for invalid address (Luiz Augusto von Dentz)
- RDMA/core: Silence oversized kvmalloc() warning (Shay Drory)
- ASoC: cs42l43: Reset clamp override on jack removal (Charles Keepax)
- ALSA: hda/realtek - Fixed ASUS platform headset Mic issue (Kailang Yang)
- ALSA: hda/realtek: Workaround for resume on Dell Venue 11 Pro 7130 (Takashi Iwai)
- ALSA: hda: improve bass speaker support for ASUS Zenbook UM5606WA (Jaroslav Kysela)
- ALSA: hda/cirrus_scodec_test: Don't select dependencies (Richard Fitzgerald)
- RDMA/hns: Fix wrong maximum DMA segment size (Chengchang Tang)
- RDMA/usnic: Fix passing zero to PTR_ERR in usnic_ib_pci_probe() (Yue Haibing)
- ovl: remove unused forward declaration (Giuseppe Scrivano)
- crypto: tegra - Fix IV usage for AES ECB (Akhil R)
- crypto: tegra - Do not use fixed size buffers (Akhil R)
- crypto: tegra - remove redundant error check on ret (Colin Ian King)
- ASoC: Intel: avs: Fix null-ptr-deref in avs_component_probe() (Henry Martin)
- ASoC: dwc: always enable/disable i2s irqs (Brady Norander)
- md/md-bitmap: fix stats collection for external bitmaps (Zheng Qixing)
- md/raid10: fix missing discard IO accounting (Yu Kuai)
- scsi: iscsi: Fix missing scsi_host_put() in error path (Miaoqian Lin)
- wifi: wl1251: fix memory leak in wl1251_tx_work (Abdun Nihaal)
- wifi: mac80211: Purge vif txq in ieee80211_do_stop() (Remi Pommarel)
- wifi: mac80211: Update skb's control block key in ieee80211_tx_dequeue() (Remi Pommarel)
- wifi: at76c50x: fix use after free access in at76_disconnect (Abdun Nihaal)
- scsi: hisi_sas: Enable force phy when SATA disk directly connected (Xingui Yang)
- aarch64: increase DEFAULT_CRASH_KERNEL_LOW_SIZE for kdump (Brian Maly)  [Orabug: 37446372]
- vhost-scsi: Fix vhost_scsi_send_status() (Dongli Zhang)  [Orabug: 37840543]
- vhost-scsi: Fix vhost_scsi_send_bad_target() (Dongli Zhang)  [Orabug: 37840543]
- vhost-scsi: protect vq->log_used with vq->mutex (Dongli Zhang)  [Orabug: 37840543]
- vhost-scsi: Reduce response iov mem use (Mike Christie)  [Orabug: 37840543]
- vhost-scsi: Allocate iov_iter used for unaligned copies when needed (Mike Christie)  [Orabug: 37840543]
- vhost-scsi: Stop duplicating se_cmd fields (Mike Christie)  [Orabug: 37840543]
- vhost-scsi: Dynamically allocate scatterlists (Mike Christie)  [Orabug: 37840543]
- vhost-scsi: Return queue full for page alloc failures during copy (Mike Christie)  [Orabug: 37840543]
- vhost-scsi: Add better resource allocation failure handling (Mike Christie)  [Orabug: 37840543]
- vhost-scsi: Allocate T10 PI structs only when enabled (Mike Christie)  [Orabug: 37840543]
- vhost-scsi: Reduce mem use by moving upages to per queue (Mike Christie)  [Orabug: 37840543]
- Revert "vhost-scsi: protect vq->log_base with vq->mutex" (Mike Christie)  [Orabug: 37840543]
- Revert "vhost_scsi: log write descriptors" (Mike Christie)  [Orabug: 37840543]
- scsi: mpi3mr: Event processing debug improvement (Ranjan Kumar)  [Orabug: 37878021]
- scsi: mpi3mr: Add level check to control event logging (Ranjan Kumar)  [Orabug: 37878021]
- scsi: mpi3mr: Reset the pending interrupt flag (Ranjan Kumar)  [Orabug: 37878021]
- scsi: mpi3mr: Fix pending I/O counter (Ranjan Kumar)  [Orabug: 37878021]

[6.12.0-2.24.1.el9uek]
- x86/microcode/AMD: Clean the cache if update did not load microcode (Boris Ostrovsky)  [Orabug: 37800727]
- LTS version: v6.12.24 (Jack Vogel)
- HSI: ssi_protocol: Fix use after free vulnerability in ssi_protocol Driver Due to Race Condition (Kaixin Wang)
- s390/cpumf: Fix double free on error in cpumf_pmu_event_init() (Thomas Richter)
- Bluetooth: hci_uart: Fix another race during initialization (Arseniy Krasnov)
- media: mediatek: vcodec: mark vdec_vp9_slice_map_counts_eob_coef noinline (Arnd Bergmann)
- kbuild: Add '-fno-builtin-wcslen' (Nathan Chancellor)
- libbpf: Prevent compiler warnings/errors (Eder Zulian)
- x86/e820: Fix handling of subpage regions when calculating nosave ranges in e820__register_nosave_regions() (Myrrh Periwinkle)
- nfsd: don't ignore the return code of svc_proc_register() (Jeff Layton)
- NFSD: Fix CB_GETATTR status fix (Chuck Lever)
- NFSD: fix decoding in nfs4_xdr_dec_cb_getattr (Olga Kornievskaia)
- ACPI: platform-profile: Fix CFI violation when accessing sysfs files (Nathan Chancellor)
- iommufd: Fail replace if device has not been attached (Yi Liu)
- iommufd: Make attach_handle generic than fault specific (Nicolin Chen)
- arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists (Douglas Anderson)
- thermal/drivers/mediatek/lvts: Disable Stage 3 thermal threshold (Nícolas F. R. A. Prado)
- thermal/drivers/mediatek/lvts: Disable monitor mode during suspend (Nícolas F. R. A. Prado)
- selftests: mptcp: fix incorrect fd checks in main_loop (Cong Liu)
- selftests: mptcp: close fd_in before returning in main_loop (Geliang Tang)
- sched_ext: create_dsq: Return -EEXIST on duplicate request (Jake Hillion)
- s390: Fix linker error when -no-pie option is unavailable (Sumanth Korikkar)
- s390/virtio_ccw: Don't allocate/assign airqs for non-existing queues (David Hildenbrand)
- s390/pci: Fix zpci_bus_is_isolated_vf() for non-VFs (Niklas Schnelle)
- ring-buffer: Use flush_kernel_vmap_range() over flush_dcache_folio() (Steven Rostedt)
- pinctrl: samsung: add support for eint_fltcon_offset (Peter Griffin)
- pinctrl: qcom: Clear latched interrupt status when changing IRQ type (Stephan Gerhold)
- phy: freescale: imx8m-pcie: assert phy reset and perst in power off (Stefan Eichenberger)
- PCI: Fix wrong length of devres array (Philipp Stanner)
- PCI: Fix reference leak in pci_register_host_bridge() (Ma Ke)
- PCI: Fix reference leak in pci_alloc_child_bus() (Ma Ke)
- PCI: pciehp: Avoid unnecessary device replacement check (Lukas Wunner)
- PCI: j721e: Fix the value of .linkdown_irq_regfield for J784S4 (Siddharth Vadapalli)
- PCI: brcmstb: Fix missing of_node_put() in brcm_pcie_probe() (Stanimir Varbanov)
- of/irq: Fix device node refcount leakages in of_irq_init() (Zijun Hu)
- of/irq: Fix device node refcount leakage in API irq_of_parse_and_map() (Zijun Hu)
- of/irq: Fix device node refcount leakages in of_irq_count() (Zijun Hu)
- of/irq: Fix device node refcount leakage in API of_irq_parse_raw() (Zijun Hu)
- of/irq: Fix device node refcount leakage in API of_irq_parse_one() (Zijun Hu)
- ntb: use 64-bit arithmetic for the MSI doorbell mask (Fedor Pchelkin)
- net: mana: Switch to page pool for jumbo frames (Haiyang Zhang)
- misc: pci_endpoint_test: Fix displaying 'irq_type' after 'request_irq' error (Kunihiko Hayashi)
- selftests/landlock: Add a new test for setuid() (Mickaël Salaün)
- selftests/landlock: Split signal_scoping_threads tests (Mickaël Salaün)
- landlock: Prepare to add second errata (Mickaël Salaün)
- landlock: Always allow signals between threads of the same process (Mickaël Salaün)
- landlock: Add erratum for TCP fix (Mickaël Salaün)
- landlock: Add the errata interface (Mickaël Salaün)
- landlock: Move code to ease future backports (Mickaël Salaün)
- KVM: x86: Acquire SRCU in KVM_GET_MP_STATE to protect guest memory accesses (Sean Christopherson)
- KVM: x86: Explicitly zero-initialize on-stack CPUID unions (Sean Christopherson)
- KVM: PPC: Enable CAP_SPAPR_TCE_VFIO on pSeries KVM guests (Amit Machhiwal)
- gve: handle overflow when reporting TX consumed descriptors (Joshua Washington)
- gpio: zynq: Fix wakeup source leaks on device unbind (Krzysztof Kozlowski)
- gpio: tegra186: fix resource handling in ACPI probe path (Guixin Liu)
- ftrace: Properly merge notrace hashes (Andy Chiu)
- ftrace: Add cond_resched() to ftrace_graph_set_hash() (zhoumin)
- dt-bindings: coresight: qcom,coresight-tpdm: Fix too many 'reg' (Krzysztof Kozlowski)
- dt-bindings: coresight: qcom,coresight-tpda: Fix too many 'reg' (Krzysztof Kozlowski)
- dm-verity: fix prefetch-vs-suspend race (Mikulas Patocka)
- dm-integrity: fix non-constant-time tag verification (Jo Van Bulck)
- dm-integrity: set ti->error on memory allocation failure (Mikulas Patocka)
- dm-ebs: fix prefetch-vs-suspend race (Mikulas Patocka)
- dlm: fix error if active rsb is not hashed (Alexander Aring)
- dlm: fix error if inactive rsb is not hashed (Alexander Aring)
- crypto: ccp - Fix uAPI definitions of PSP errors (Dionna Glaze)
- crypto: ccp - Fix check for the primary ASP device (Tom Lendacky)
- clk: qcom: gdsc: Set retain_ff before moving to HW CTRL (Taniya Das)
- clk: qcom: gdsc: Capture pm_genpd_add_subdomain result code (Bryan O'Donoghue)
- clk: qcom: gdsc: Release pm subdomains in reverse add order (Bryan O'Donoghue)
- clk: qcom: clk-branch: Fix invert halt status bit check for votable clocks (Ajit Pandey)
- clk: renesas: r9a07g043: Fix HP clock source for RZ/Five (Lad Prabhakar)
- cifs: Ensure that all non-client-specific reparse points are processed by the server (Pali Rohár)
- cifs: fix integer overflow in match_server() (Roman Smirnov)
- cifs: avoid NULL pointer dereference in dbg call (Alexandra Diupina)
- CIFS: Propagate min offload along with other parameters from primary to secondary channels. (Aman)
- thermal/drivers/rockchip: Add missing rk3328 mapping entry (Trevor Woerner)
- tracing: Do not add length to print format in synthetic events (Steven Rostedt)
- tracing: fprobe events: Fix possible UAF on modules (Masami Hiramatsu (Google))
- x86/xen: fix balloon target initialization for PVH dom0 (Roger Pau Monne)
- sctp: detect and prevent references to a freed transport in sendmsg (Ricardo Cañuelo Navarro)
- mm/hwpoison: introduce folio_contain_hwpoisoned_page() helper (Jinjiang Tu)
- mm/hugetlb: move hugetlb_sysctl_init() to the __init section (Marc Herbert)
- mm/hwpoison: do not send SIGBUS to processes with recovered clean pages (Shuai Xue)
- mm/userfaultfd: fix release hang over concurrent GUP (Peter Xu)
- mm: add missing release barrier on PGDAT_RECLAIM_LOCKED unlock (Mathieu Desnoyers)
- mm/mremap: correctly handle partial mremap() of VMA starting at 0 (Lorenzo Stoakes)
- mm: fix lazy mmu docs and usage (Ryan Roberts)
- mm: make page_mapped_in_vma() hugetlb walk aware (Jane Chu)
- mm/rmap: reject hugetlb folios in folio_make_device_exclusive() (David Hildenbrand)
- mm/damon/ops: have damon_get_folio return folio even for tail pages (Usama Arif)
- sparc/mm: avoid calling arch_enter/leave_lazy_mmu() in set_ptes (Ryan Roberts)
- sparc/mm: disable preemption in lazy mmu mode (Ryan Roberts)
- iommu/vt-d: Wire up irq_ack() to irq_move_irq() for posted MSIs (Sean Christopherson)
- iommu/vt-d: Fix possible circular locking dependency (Lu Baolu)
- iommu/vt-d: Don't clobber posted vCPU IRTE when host IRQ affinity changes (Sean Christopherson)
- iommu/vt-d: Put IRTE back into posted MSI mode if vCPU posting is disabled (Sean Christopherson)
- iommu/tegra241-cmdqv: Fix warnings due to dmam_free_coherent() (Nicolin Chen)
- iommufd: Fix uninitialized rc in iommufd_access_rw() (Nicolin Chen)
- btrfs: zoned: fix zone finishing with missing devices (Johannes Thumshirn)
- btrfs: zoned: fix zone activation with missing devices (Johannes Thumshirn)
- btrfs: tests: fix chunk map leak after failure to add it to the tree (Filipe Manana)
- btrfs: fix non-empty delayed iputs list on unmount due to compressed write workers (Filipe Manana)
- backlight: led_bl: Hold led_access lock when calling led_sysfs_disable() (Herve Codina)
- arm64: dts: exynos: gs101: disable pinctrl_gsacore node (Peter Griffin)
- arm64: dts: mediatek: mt8173: Fix disp-pwm compatible string (Chen-Yu Tsai)
- arm64: mm: Correct the update of max_pfn (Zhenhua Huang)
- arm64: tegra: Remove the Orin NX/Nano suspend key (Ninad Malwade)
- arm64: mops: Do not dereference src reg for a set operation (Keir Fraser)
- mtd: rawnand: Add status chack in r852_ready() (Wentao Liang)
- mtd: inftlcore: Add error check for inftl_read_oob() (Wentao Liang)
- mptcp: only inc MPJoinAckHMacFailure for HMAC failures (Matthieu Baerts (NGI0))
- mptcp: fix NULL pointer in can_accept_new_subflow (Gang Yan)
- lib: scatterlist: fix sg_split_phys to preserve original scatterlist offsets (T Pratham)
- locking/lockdep: Decrease nr_unused_locks if lock unused in zap_class() (Boqun Feng)
- mailbox: tegra-hsp: Define dimensioning masks in SoC data (Kartik Rajput)
- mfd: ene-kb3930: Fix a potential NULL pointer dereference (Chenyuan Yang)
- leds: rgb: leds-qcom-lpg: Fix calculation of best period Hi-Res PWMs (Abel Vesa)
- leds: rgb: leds-qcom-lpg: Fix pwm resolution max for Hi-Res PWMs (Abel Vesa)
- jbd2: remove wrong sb->s_sequence check (Jan Kara)
- i3c: Add NULL pointer check in i3c_master_queue_ibi() (Manjunatha Venkatesh)
- i3c: master: svc: Use readsb helper for reading MDB (Stanley Chu)
- ima: limit the number of ToMToU integrity violations (Mimi Zohar)
- ima: limit the number of open-writers integrity violations (Mimi Zohar)
- smb311 client: fix missing tcon check when mounting with linux/posix extensions (Steve French)
- soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe() (Chenyuan Yang)
- svcrdma: do not unregister device for listeners (Olga Kornievskaia)
- tpm: do not start chip while suspended (Thadeu Lima de Souza Cascardo)
- udf: Fix inode_getblk() return value (Jan Kara)
- vdpa/mlx5: Fix oversized null mkey longer than 32bit (Si-Wei Liu)
- f2fs: fix to avoid atomicity corruption of atomic file (Yeongjin Gil)
- ext4: fix off-by-one error in do_split (Artem Sadovnikov)
- bus: mhi: host: Fix race between unprepare and queue_buf (Jeff Hugo)
- accel/ivpu: Fix deadlock in ivpu_ms_cleanup() (Jacek Lawrynowicz)
- accel/ivpu: Fix warning in ivpu_ipc_send_receive_internal() (Jacek Lawrynowicz)
- ALSA: hda/realtek: Enable Mute LED on HP OMEN 16 Laptop xd000xx (Sharan Kumar M)
- ASoC: qdsp6: q6asm-dai: fix q6asm_dai_compr_set_params error path (Alexey Klimov)
- ASoC: qdsp6: q6apm-dai: fix capture pipeline overruns. (Srinivas Kandagatla)
- ASoC: qdsp6: q6apm-dai: set 10 ms period and buffer alignment. (Srinivas Kandagatla)
- ASoC: q6apm-dai: make use of q6apm_get_hw_pointer (Srinivas Kandagatla)
- ASoC: q6apm-dai: schedule all available frames to avoid dsp under-runs (Srinivas Kandagatla)
- ASoC: q6apm: add q6apm_get_hw_pointer helper (Srinivas Kandagatla)
- ASoC: codecs: wcd937x: fix a potential memory leak in wcd937x_soc_codec_probe() (Haoxiang Li)
- io_uring/kbuf: reject zero sized provided buffers (Jens Axboe)
- io_uring/net: fix io_req_post_cqe abuse by send bundle (Pavel Begunkov)
- io_uring/net: fix accept multishot handling (Pavel Begunkov)
- wifi: mt76: mt7925: fix the wrong simultaneous cap for MLO (Ming Yen Hsieh)
- wifi: mt76: mt7925: fix the wrong link_idx when a p2p_device is present (Ming Yen Hsieh)
- wifi: mt76: mt7925: fix country count limitation for CLC (Ming Yen Hsieh)
- wifi: mt76: mt7925: ensure wow pattern command align fw format (Ming Yen Hsieh)
- wifi: mac80211: fix integer overflow in hwmp_route_info_get() (Gavrilov Ilia)
- wifi: mt76: Add check for devm_kstrdup() (Haoxiang Li)
- clocksource/drivers/stm32-lptimer: Use wakeup capable instead of init wakeup (Alexandre Torgue)
- mtd: Replace kcalloc() with devm_kcalloc() (Jiasheng Jiang)
- net: dsa: mv88e6xxx: fix internal PHYs for 6320 family (Marek Behún)
- net: dsa: mv88e6xxx: workaround RGMII transmit delay erratum for 6320 family (Marek Behún)
- mtd: Add check for devm_kcalloc() (Jiasheng Jiang)
- mptcp: sockopt: fix getting freebind & transparent (Matthieu Baerts (NGI0))
- mptcp: sockopt: fix getting IPV6_V6ONLY (Matthieu Baerts (NGI0))
- media: chips-media: wave5: Fix timeout while testing 10bit hevc fluster (Jackson.lee)
- media: chips-media: wave5: Fix a hang after seeking (Jackson.lee)
- media: chips-media: wave5: Avoid race condition in the interrupt handler (Jackson.lee)
- media: chips-media: wave5: Fix gray color on screen (Jackson.lee)
- media: i2c: imx214: Rectify probe error handling related to runtime PM (Sakari Ailus)
- media: i2c: imx219: Rectify runtime PM handling in probe and remove (Sakari Ailus)
- media: i2c: imx319: Rectify runtime PM handling probe and remove (Sakari Ailus)
- media: venus: hfi_parser: refactor hfi packet parsing logic (Vikash Garodia)
- media: venus: hfi_parser: add check to avoid out of bound access (Vikash Garodia)
- media: nuvoton: Fix reference handling of ece_pdev (Ricardo Ribalda)
- media: nuvoton: Fix reference handling of ece_node (Ricardo Ribalda)
- media: i2c: ov7251: Introduce 1 ms delay between regulators and en GPIO (Sakari Ailus)
- media: i2c: ov7251: Set enable GPIO low in probe (Sakari Ailus)
- media: i2c: ccs: Set the device's runtime PM status correctly in probe (Sakari Ailus)
- media: i2c: ccs: Set the device's runtime PM status correctly in remove (Sakari Ailus)
- Revert "media: imx214: Fix the error handling in imx214_probe()" (Sakari Ailus)
- media: v4l2-dv-timings: prevent possible overflow in v4l2_detect_gtf() (Karina Yankevich)
- media: imx219: Adjust PLL settings based on the number of MIPI lanes (Dave Stevenson)
- media: platform: stm32: Add check for clk_enable() (Jiasheng Jiang)
- media: visl: Fix ERANGE error when setting enum controls (Nicolas Dufresne)
- media: hi556: Fix memory leak (on error) in hi556_check_hwcfg() (Hans de Goede)
- media: streamzap: prevent processing IR data on URB failure (Murad Masimov)
- accel/ivpu: Fix PM related deadlocks in MS IOCTLs (Jacek Lawrynowicz)
- tpm, tpm_tis: Fix timeout handling when waiting for TPM status (Jonathan McDowell)
- mtd: rawnand: brcmnand: fix PM resume warning (Kamal Dasu)
- spi: cadence-qspi: Fix probe on AM62A LP SK (Miquel Raynal)
- KVM: arm64: Tear down vGIC on failed vCPU creation (Will Deacon)
- arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list (Douglas Anderson)
- arm64: errata: Assume that unknown CPUs _are_ vulnerable to Spectre BHB (Douglas Anderson)
- arm64: errata: Add QCOM_KRYO_4XX_GOLD to the spectre_bhb_k24_list (Douglas Anderson)
- arm64: cputype: Add MIDR_CORTEX_A76AE (Douglas Anderson)
- xenfs/xensyms: respect hypervisor's "next" indication (Jan Beulich)
- media: rockchip: rga: fix rga offset lookup (John Keeping)
- media: siano: Fix error handling in smsdvb_module_init() (Yuan Can)
- media: vim2m: print device name after registering device (Matthew Majewski)
- media: venus: hfi: add check to handle incorrect queue size (Vikash Garodia)
- media: venus: hfi: add a check to handle OOB in sfr region (Vikash Garodia)
- media: intel/ipu6: set the dev_parent of video device to pdev (Bingbu Cao)
- media: mgb4: Fix switched CMT frequency range "magic values" sets (Martin Tůma)
- media: i2c: adv748x: Fix test pattern selection mask (Niklas Söderlund)
- media: mgb4: Fix CMT registers update logic (Martin Tůma)
- media: uapi: rkisp1-config: Fix typo in extensible params example (Niklas Söderlund)
- media: mtk-vcodec: venc: avoid -Wenum-compare-conditional warning (Arnd Bergmann)
- media: mediatek: vcodec: Fix a resource leak related to the scp device in FW initialization (Jiasheng Jiang)
- dt-bindings: media: st,stmipid02: correct lane-polarities maxItems (Alain Volmat)
- auxdisplay: hd44780: Fix an API misuse in hd44780.c (Haoxiang Li)
- HID: pidff: Fix set_device_control() (Tomasz Pakuła)
- HID: pidff: Fix 90 degrees direction name North -> East (Tomasz Pakuła)
- HID: pidff: Compute INFINITE value instead of using hardcoded 0xffff (Tomasz Pakuła)
- HID: pidff: Clamp effect playback LOOP_COUNT value (Tomasz Pakuła)
- HID: pidff: Rename two functions to align them with naming convention (Tomasz Pakuła)
- HID: pidff: Remove redundant call to pidff_find_special_keys (Tomasz Pakuła)
- HID: pidff: Support device error response from PID_BLOCK_LOAD (Tomasz Pakuła)
- HID: pidff: Comment and code style update (Tomasz Pakuła)
- HID: hid-universal-pidff: Add Asetek wheelbases support (Tomasz Pakuła)
- HID: pidff: Make sure to fetch pool before checking SIMULTANEOUS_MAX (Tomasz Pakuła)
- HID: pidff: Factor out pool report fetch and remove excess declaration (Tomasz Pakuła)
- HID: pidff: Use macros instead of hardcoded min/max values for shorts (Tomasz Pakuła)
- HID: pidff: Simplify pidff_rescale_signed (Tomasz Pakuła)
- HID: pidff: Move all hid-pidff definitions to a dedicated header (Tomasz Pakuła)
- HID: pidff: Factor out code for setting gain (Tomasz Pakuła)
- HID: pidff: Rescale time values to match field units (Tomasz Pakuła)
- HID: pidff: Define values used in pidff_find_special_fields (Tomasz Pakuła)
- HID: pidff: Simplify pidff_upload_effect function (Tomasz Pakuła)
- HID: pidff: Completely rework and fix pidff_reset function (Tomasz Pakuła)
- HID: pidff: Stop all effects before enabling actuators (Tomasz Pakuła)
- HID: pidff: Clamp PERIODIC effect period to device's logical range (Tomasz Pakuła)
- s390/pci: Fix s390_mmio_read/write syscall page fault handling (Niklas Schnelle)
- ext4: don't treat fhandle lookup of ea_inode as FS corruption (Jann Horn)
- bpf: support SKF_NET_OFF and SKF_LL_OFF on skb frags (Willem de Bruijn)
- erofs: set error to bio if file-backed IO fails (Sheng Yong)
- pwm: fsl-ftm: Handle clk_get_rate() returning 0 (Uwe Kleine-König)
- pwm: rcar: Improve register calculation (Uwe Kleine-König)
- pwm: mediatek: Prevent divide-by-zero in pwm_mediatek_config() (Josh Poimboeuf)
- tpm: End any active auth session before shutdown (Jonathan McDowell)
- tpm, tpm_tis: Workaround failed command reception on Infineon devices (Jonathan McDowell)
- ktest: Fix Test Failures Due to Missing LOG_FILE Directories (Ayush Jain)
- tracing: probe-events: Add comments about entry data storing code (Masami Hiramatsu (Google))
- fbdev: omapfb: Add 'plane' value check (Leonid Arapov)
- drm/amdgpu: grab an additional reference on the gang fence v2 (Christian König)
- drm/amdgpu: Fix the race condition for draining retry fault (Emily Deng)
- PCI: Enable Configuration RRS SV early (Bjorn Helgaas)
- drm/amdgpu: handle amdgpu_cgs_create_device() errors in amd_powerplay_create() (Wentao Liang)
- PCI: Add Rockchip Vendor ID (Shawn Lin)
- drm/mediatek: mtk_dpi: Explicitly manage TVD clock in power on/off (AngeloGioacchino Del Regno)
- drm/mediatek: mtk_dpi: Move the input_2p_en bit to platform data (AngeloGioacchino Del Regno)
- drm/xe/xelp: Move Wa_16011163337 from tunings to workarounds (Tvrtko Ursulin)
- drm/amdkfd: debugfs hang_hws skip GPU with MES (Philip Yang)
- drm/amdkfd: Fix pqm_destroy_queue race with GPU reset (Philip Yang)
- drm/amdkfd: Fix mode1 reset crash issue (Philip Yang)
- drm/amdkfd: clamp queue size to minimum (David Yat Sin)
- drivers: base: devres: Allow to release group on device release (Lucas De Marchi)
- drm/amd/display: stop DML2 from removing pipes based on planes (Mike Katsnelson)
- drm/bridge: panel: forbid initializing a panel with unknown connector type (Luca Ceresoli)
- drm/debugfs: fix printk format for bridge index (Luca Ceresoli)
- drm: panel-orientation-quirks: Add quirk for OneXPlayer Mini (Intel) (Andrew Wyatt)
- drm: panel-orientation-quirks: Add new quirk for GPD Win 2 (Andrew Wyatt)
- drm: panel-orientation-quirks: Add quirk for AYA NEO Slide (Andrew Wyatt)
- drm: panel-orientation-quirks: Add quirks for AYA NEO Flip DS and KB (Andrew Wyatt)
- drm: panel-orientation-quirks: Add support for AYANEO 2S (Andrew Wyatt)
- drm/amdgpu: Unlocked unmap only clear page table leaves (Philip Yang)
- drm/amd/display: Update Cursor request mode to the beginning prefetch always (Zhikai Zhai)
- drm/xe/vf: Don't try to trigger a full GT reset if VF (Michal Wajdeczko)
- drm/xe/bmg: Add new PCI IDs (Shekhar Chauhan)
- drm: allow encoder mode_set even when connectors change for crtc (Abhinav Kumar)
- Bluetooth: Add quirk for broken READ_PAGE_SCAN_TYPE (Pedro Nishiyama)
- Bluetooth: Add quirk for broken READ_VOICE_SETTING (Pedro Nishiyama)
- Bluetooth: qca: simplify WCN399x NVM loading (Dmitry Baryshkov)
- Bluetooth: hci_qca: use the power sequencer for wcn6750 (Janaki Ramaiah Thota)
- Bluetooth: btusb: Add 2 HWIDs for MT7922 (Jiande Lu)
- Bluetooth: hci_uart: fix race during initialization (Arseniy Krasnov)
- Bluetooth: btintel_pcie: Add device id of Whale Peak (Kiran K)
- tracing: fix return value in __ftrace_event_enable_disable for TRACE_REG_UNREGISTER (Gabriele Paoloni)
- net: vlan: don't propagate flags on open (Stanislav Fomichev)
- wifi: mt76: mt76x2u: add TP-Link TL-WDN6200 ID to device table (Icenowy Zheng)
- btrfs: harden block_group::bg_list against list_del() races (Boris Burkov)
- ahci: Marvell 88SE9215 controllers prefer DMA for ATAPI (Huacai Chen)
- scsi: st: Fix array overflow in st_setup() (Kai Mäkisara)
- cdc_ether|r8152: ThinkPad Hybrid USB-C/A Dock quirk (Philipp Hahn)
- ext4: ignore xattrs past end (Bhupesh)
- Revert "f2fs: rebuild nat_bits during umount" (Chao Yu)
- ext4: protect ext4_release_dquot against freezing (Ojaswin Mujoo)
- ahci: add PCI ID for Marvell 88SE9215 SATA Controller (Daniel Kral)
- net: sfp: add quirk for FS SFP-10GM-T copper SFP+ module (Martin Schiller)
- f2fs: fix to avoid out-of-bounds access in f2fs_truncate_inode_blocks() (Chao Yu)
- wifi: ath12k: Fix invalid data access in ath12k_dp_rx_h_undecap_nwifi (Manish Dharanenthiran)
- net: sfp: add quirk for 2.5G OEM BX SFP (Birger Koblitz)
- ata: libata-eh: Do not use ATAPI DMA for a device limited to PIO mode (Niklas Cassel)
- jfs: add sanity check for agwidth in dbMount (Edward Adam Davis)
- jfs: Prevent copying of nlink with value 0 from disk inode (Edward Adam Davis)
- fs/jfs: Prevent integer overflow in AG size calculation (Rand Deeb)
- fs/jfs: cast inactags to s64 to prevent potential overflow (Rand Deeb)
- jfs: Fix uninit-value access of imap allocated in the diMount() function (Zhongqiu Han)
- can: flexcan: add NXP S32G2/S32G3 SoC support (Ciprian Marian Costea)
- can: flexcan: Add quirk to handle separate interrupt lines for mailboxes (Ciprian Marian Costea)
- page_pool: avoid infinite loop to schedule delayed worker (Jason Xing)
- net: usb: asix_devices: add FiberGecko DeviceID (Max Schulze)
- scsi: target: spc: Fix RSOC parameter data header size (Chaohai Chen)
- wifi: mac80211: ensure sdata->work is canceled before initialized. (Miri Korenblit)
- wifi: mac80211: add strict mode disabling workarounds (Johannes Berg)
- f2fs: don't retry IO for corrupted data scenario (Chao Yu)
- net: page_pool: don't cast mp param to devmem (Pavel Begunkov)
- ata: libata-core: Add 'external' to the libata.force kernel parameter (Niklas Cassel)
- wifi: ath12k: Fix invalid entry fetch in ath12k_dp_mon_srng_process (P Praneesh)
- wifi: ath12k: fix memory leak in ath12k_pci_remove() (Miaoqing Pan)
- wifi: ath11k: fix memory leak in ath11k_xxx_remove() (Miaoqing Pan)
- wifi: ath11k: Fix DMA buffer allocation to resolve SWIOTLB issues (P Praneesh)
- platform/x86: x86-android-tablets: Add select POWER_SUPPLY to Kconfig (Hans de Goede)
- ASoC: amd: yc: update quirk data for new Lenovo model (Syed Saba kareem)
- ASoC: amd: Add DMI quirk for ACP6X mic support (keenplify)
- ALSA: usb-audio: Fix CME quirk for UF series keyboards (Ricard Wanderlof)
- mmc: dw_mmc: add a quirk for accessing 64-bit FIFOs in two halves (Kaustabh Chakraborty)
- media: s5p-mfc: Corrected NV12M/NV21M plane-sizes (Aakarsh Jain)
- media: uvcvideo: Add quirk for Actions UVC05 (Ricardo Ribalda)
- ASoC: fsl_audmix: register card device depends on 'dais' property (Shengjiu Wang)
- ALSA: hda: intel: Add Lenovo IdeaPad Z570 to probe denylist (Maxim Mikityanskiy)
- ALSA: hda: intel: Fix Optimus when GPU has no sound (Maxim Mikityanskiy)
- ASoC: amd: ps: use macro for ACP6.3 pci revision id (Vijendar Mukunda)
- HID: pidff: Fix null pointer dereference in pidff_find_fields (Tomasz Pakuła)
- HID: pidff: Add PERIODIC_SINE_ONLY quirk (Tomasz Pakuła)
- HID: Add hid-universal-pidff driver and supported device ids (Tomasz Pakuła)
- HID: pidff: Add FIX_WHEEL_DIRECTION quirk (Tomasz Pakuła)
- HID: pidff: Add hid_pidff_init_with_quirks and export as GPL symbol (Tomasz Pakuła)
- HID: pidff: Add PERMISSIVE_CONTROL quirk (Tomasz Pakuła)
- HID: pidff: Add MISSING_PBO quirk and its detection (Tomasz Pakuła)
- HID: pidff: Add MISSING_DELAY quirk and its detection (Tomasz Pakuła)
- HID: pidff: Do not send effect envelope if it's empty (Tomasz Pakuła)
- HID: pidff: Convert infinite length from Linux API to PID standard (Tomasz Pakuła)
- ASoC: SOF: topology: Use krealloc_array() to replace krealloc() (Zhang Heng)
- platform/chrome: cros_ec_lpc: Match on Framework ACPI device (Daniel Schaefer)
- zstd: Increase DYNAMIC_BMI2 GCC version cutoff from 4.8 to 11.0 to work around compiler segfault (Ingo Molnar)
- xen/mcelog: Add __nonstring annotations for unterminated strings (Kees Cook)
- arm64: cputype: Add QCOM_CPU_PART_KRYO_3XX_GOLD (Douglas Anderson)
- Flush console log from kernel_power_off() (Paul E. McKenney)
- PM: hibernate: Avoid deadlock in hibernate_compressor_param_set() (Lizhi Xu)
- perf/dwc_pcie: fix some unreleased resources (Yunhui Cui)
- perf: arm_pmu: Don't disable counter in armpmu_add() (Mark Rutland)
- x86/cpu: Don't clear X86_FEATURE_LAHF_LM flag in init_amd_k8() on AMD when running in a virtual machine (Max Grobecker)
- x86/ia32: Leave NULL selector values 0~3 unchanged (Xin Li (Intel))
- x86/percpu: Disable named address spaces for UBSAN_BOOL with KASAN for GCC < 14.2 (Uros Bizjak)
- x86/mm: Clear _PAGE_DIRTY for kernel mappings when we clear _PAGE_RW (Matthew Wilcox (Oracle))
- pm: cpupower: bench: Prevent NULL dereference on malloc failure (Zhongqiu Han)
- umount: Allow superblock owners to force umount (Trond Myklebust)
- fs: consistently deref the files table with rcu_dereference_raw() (Mateusz Guzik)
- iommu/mediatek: Fix NULL pointer deference in mtk_iommu_device_group (Louis-Alexis Eyraud)
- iommu/exynos: Fix suspend/resume with IDENTITY domain (Marek Szyprowski)
- nft_set_pipapo: fix incorrect avx2 match of 5th field octet (Florian Westphal)
- net: ppp: Add bound checking for skb data on ppp_sync_txmung (Arnaud Lecomte)
- ipv6: Align behavior across nexthops during path selection (Ido Schimmel)
- net: phy: allow MDIO bus PM ops to start/stop state machine for phylink-controlled PHY (Vladimir Oltean)
- net: phy: move phy_link_change() prior to mdio_bus_phy_may_suspend() (Vladimir Oltean)
- smb: client: fix UAF in decryption with multichannel (Paulo Alcantara)
- net_sched: sch_sfq: move the limit validation (Octavian Purdila)
- net_sched: sch_sfq: use a temporary work area for validating configuration (Octavian Purdila)
- nvmet-fcloop: swap list_add_tail arguments (Daniel Wagner)
- drm/i915/huc: Fix fence not released on early probe errors (Janusz Krzysztofik)
- ata: sata_sx4: Add error handling in pdc20621_i2c_read() (Wentao Liang)
- net: libwx: handle page_pool_dev_alloc_pages error (Chenyuan Yang)
- drm/tests: probe-helper: Fix drm_display_mode memory leak (Maxime Ripard)
- drm/tests: modes: Fix drm_display_mode memory leak (Maxime Ripard)
- drm/tests: cmdline: Fix drm_display_mode memory leak (Maxime Ripard)
- drm/tests: helpers: Create kunit helper to destroy a drm_display_mode (Maxime Ripard)
- drm/tests: modeset: Fix drm_display_mode memory leak (Maxime Ripard)
- net: ethtool: Don't call .cleanup_data when prepare_data fails (Maxime Chevallier)
- tc: Ensure we have enough buffer space when sending filter netlink notifications (Toke Høiland-Jørgensen)
- octeontx2-pf: qos: fix VF root node parent queue index (Hariprasad Kelam)
- net: tls: explicitly disallow disconnect (Jakub Kicinski)
- codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (Cong Wang)
- tipc: fix memory leak in tipc_link_xmit (Tung Nguyen)
- objtool: Fix INSN_CONTEXT_SWITCH handling in validate_unret() (Josh Poimboeuf)
- ata: pata_pxa: Fix potential NULL pointer dereference in pxa_ata_probe() (Henry Martin)
- drm/xe/hw_engine: define sysfs_ops on all directories (Tejas Upadhyay)
- x86/acpi: Don't limit CPUs to 1 for Xen PV guests due to disabled ACPI (Petr Vaněk)
- drm/i915: Disable RPG during live selftest (Badal Nilawar)
- ublk: fix handling recovery & reissue in ublk_abort_queue() (Ming Lei)
- ublk: refactor recovery configuration flag helpers (Uday Shankar)
- selftests/futex: futex_waitv wouldblock test should fail (Edward Liaw)
- gpiolib: of: Fix the choice for Ingenic NAND quirk (Andy Shevchenko)
- cgroup/cpuset: Further optimize code if CONFIG_CPUSETS_V1 not set (Waiman Long)
- cgroup/cpuset: Enforce at most one rebuild_sched_domains_locked() call per operation (Waiman Long)
- cgroup/cpuset: Revert "Allow suppression of sched domain rebuild in update_cpumasks_hier()" (Waiman Long)
- cgroup/cpuset: Fix error handling in remote_partition_disable() (Waiman Long)
- cgroup/cpuset: Fix incorrect isolated_cpus update in update_parent_effective_cpumask() (Waiman Long)
- ASoC: Intel: adl: add 2xrt1316 audio configuration (Bard Liao)