[El-errata] ELBA-2025-20316 Oracle Linux 9 Unbreakable Enterprise kernel bug fix update

[Errata Announcements for Oracle Linux]

Oracle Linux Bug Fix Advisory ELBA-2025-20316

http://linux.oracle.com/errata/ELBA-2025-20316.html

The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:

x86_64:
kernel-uek-6.12.0-1.23.3.el9uek.x86_64.rpm
kernel-uek-core-6.12.0-1.23.3.el9uek.x86_64.rpm
kernel-uek-debug-6.12.0-1.23.3.el9uek.x86_64.rpm
kernel-uek-debug-core-6.12.0-1.23.3.el9uek.x86_64.rpm
kernel-uek-debug-devel-6.12.0-1.23.3.el9uek.x86_64.rpm
kernel-uek-debug-modules-6.12.0-1.23.3.el9uek.x86_64.rpm
kernel-uek-debug-modules-core-6.12.0-1.23.3.el9uek.x86_64.rpm
kernel-uek-debug-modules-deprecated-6.12.0-1.23.3.el9uek.x86_64.rpm
kernel-uek-debug-modules-desktop-6.12.0-1.23.3.el9uek.x86_64.rpm
kernel-uek-debug-modules-extra-6.12.0-1.23.3.el9uek.x86_64.rpm
kernel-uek-debug-modules-extra-netfilter-6.12.0-1.23.3.el9uek.x86_64.rpm
kernel-uek-debug-modules-usb-6.12.0-1.23.3.el9uek.x86_64.rpm
kernel-uek-debug-modules-wireless-6.12.0-1.23.3.el9uek.x86_64.rpm
kernel-uek-devel-6.12.0-1.23.3.el9uek.x86_64.rpm
kernel-uek-doc-6.12.0-1.23.3.el9uek.noarch.rpm
kernel-uek-modules-6.12.0-1.23.3.el9uek.x86_64.rpm
kernel-uek-modules-core-6.12.0-1.23.3.el9uek.x86_64.rpm
kernel-uek-modules-deprecated-6.12.0-1.23.3.el9uek.x86_64.rpm
kernel-uek-modules-desktop-6.12.0-1.23.3.el9uek.x86_64.rpm
kernel-uek-modules-extra-6.12.0-1.23.3.el9uek.x86_64.rpm
kernel-uek-modules-extra-netfilter-6.12.0-1.23.3.el9uek.x86_64.rpm
kernel-uek-modules-usb-6.12.0-1.23.3.el9uek.x86_64.rpm
kernel-uek-modules-wireless-6.12.0-1.23.3.el9uek.x86_64.rpm

aarch64:
kernel-uek-6.12.0-1.23.3.el9uek.aarch64.rpm
kernel-uek-core-6.12.0-1.23.3.el9uek.aarch64.rpm
kernel-uek-debug-6.12.0-1.23.3.el9uek.aarch64.rpm
kernel-uek-debug-core-6.12.0-1.23.3.el9uek.aarch64.rpm
kernel-uek-debug-devel-6.12.0-1.23.3.el9uek.aarch64.rpm
kernel-uek-debug-modules-6.12.0-1.23.3.el9uek.aarch64.rpm
kernel-uek-debug-modules-core-6.12.0-1.23.3.el9uek.aarch64.rpm
kernel-uek-debug-modules-deprecated-6.12.0-1.23.3.el9uek.aarch64.rpm
kernel-uek-debug-modules-desktop-6.12.0-1.23.3.el9uek.aarch64.rpm
kernel-uek-debug-modules-extra-6.12.0-1.23.3.el9uek.aarch64.rpm
kernel-uek-debug-modules-extra-netfilter-6.12.0-1.23.3.el9uek.aarch64.rpm
kernel-uek-debug-modules-usb-6.12.0-1.23.3.el9uek.aarch64.rpm
kernel-uek-debug-modules-wireless-6.12.0-1.23.3.el9uek.aarch64.rpm
kernel-uek-devel-6.12.0-1.23.3.el9uek.aarch64.rpm
kernel-uek-modules-6.12.0-1.23.3.el9uek.aarch64.rpm
kernel-uek-modules-extra-6.12.0-1.23.3.el9uek.aarch64.rpm
kernel-uek-modules-core-6.12.0-1.23.3.el9uek.aarch64.rpm
kernel-uek-modules-deprecated-6.12.0-1.23.3.el9uek.aarch64.rpm
kernel-uek-modules-desktop-6.12.0-1.23.3.el9uek.aarch64.rpm
kernel-uek-modules-extra-netfilter-6.12.0-1.23.3.el9uek.aarch64.rpm
kernel-uek-modules-usb-6.12.0-1.23.3.el9uek.aarch64.rpm
kernel-uek-modules-wireless-6.12.0-1.23.3.el9uek.aarch64.rpm
kernel-uek64k-6.12.0-1.23.3.el9uek.aarch64.rpm
kernel-uek64k-core-6.12.0-1.23.3.el9uek.aarch64.rpm
kernel-uek64k-modules-6.12.0-1.23.3.el9uek.aarch64.rpm
kernel-uek64k-modules-core-6.12.0-1.23.3.el9uek.aarch64.rpm
kernel-uek64k-modules-deprecated-6.12.0-1.23.3.el9uek.aarch64.rpm
kernel-uek64k-modules-desktop-6.12.0-1.23.3.el9uek.aarch64.rpm
kernel-uek64k-modules-extra-6.12.0-1.23.3.el9uek.aarch64.rpm
kernel-uek64k-modules-extra-netfilter-6.12.0-1.23.3.el9uek.aarch64.rpm
kernel-uek64k-modules-usb-6.12.0-1.23.3.el9uek.aarch64.rpm
kernel-uek64k-modules-wireless-6.12.0-1.23.3.el9uek.aarch64.rpm


SRPMS:
http://oss.oracle.com/ol9/SRPMS-updates//kernel-uek-6.12.0-1.23.3.el9uek.src.rpm



Description of changes:

[6.12.0-1.23.3]
- RDS: avoid using offlined CPU during reconnect (Arumugam Kolappan)  [Orabug: 37800558]

[6.12.0-1.23.2]
- vhost_scsi: log write descriptors (Dongli Zhang)  [Orabug: 37393517]
- vhost-scsi: protect vq->log_base with vq->mutex (Dongli Zhang)  [Orabug: 37393517]
- RDS: avoid queueing delayed work on an offlined cpu (Praveen Kumar Kannoju)  [Orabug: 37260584] [Orabug: 37551308]
- Revert "x86/simplefb: simplefb was broken on UEFI mode Oracle and HP system, skip VIDEO_TYPE_EFI" (Harshit Mogalapalli)  [Orabug: 37638881]
- uek-rpm: Replace legacy FBDEV drivers with simpledrm and fbdev emulation layer (Harshit Mogalapalli)  [Orabug: 37638881]
- uek-rpm/kernel-uek.spec: Set DEFAULTKERNEL correctly during %postun (Vijay Kumar)
- uek-rpm: Enable gcov build (Sherry Yang)  [Orabug: 37734677]
- uek-rpm: remove .el9 from shim version (Samasth Norway Ananda)  [Orabug: 37820202]
- drm/mgag200: Added support for the new device G200eH5 (Gwenael Georgeault)  [Orabug: 37835185]

[6.12.0-1.23.1]
- LTS version: v6.12.23 (Jack Vogel)
- platform/x86/amd/pmf: fix cleanup in amd_pmf_init_smart_pc() (Dan Carpenter)
- tracing: Do not use PERF enums when perf is not defined (Steven Rostedt)
- ARM: 9443/1: Require linker to support KEEP within OVERLAY for DCE (Nathan Chancellor)
- NFSD: Skip sending CB_RECALL_ANY when the backchannel isn't up (Chuck Lever)
- NFSD: Never return NFS4ERR_FILE_OPEN when removing a directory (Chuck Lever)
- NFSD: nfsd_unlink() clobbers non-zero status returned from fh_fill_pre_attrs() (Chuck Lever)
- nfsd: fix management of listener transports (Olga Kornievskaia)
- nfsd: put dl_stid if fail to queue dl_recall (Li Lingfeng)
- nfsd: allow SC_STATUS_FREEABLE when searching via nfs4_lookup_stateid() (Jeff Layton)
- media: streamzap: fix race between device disconnection and urb callback (Murad Masimov)
- media: vimc: skip .s_stream() for stopped entities (Nikita Zhandarovich)
- exec: fix the racy usage of fs_struct->in_exec (Oleg Nesterov)
- mm: zswap: fix crypto_free_acomp() deadlock in zswap_cpu_comp_dead() (Yosry Ahmed)
- jfs: add index corruption check to DT_GETPAGE() (Roman Smirnov)
- jfs: fix slab-out-of-bounds read in ea_get() (Qasim Ijaz)
- ext4: fix OOB read when checking dotdot dir (Acs, Jakub)
- ext4: don't over-report free space or inodes in statvfs (Theodore Ts'o)
- wifi: mt76: mt7921: fix kernel panic due to null pointer dereference (Ming Yen Hsieh)
- arm64: Don't call NULL in do_compat_alignment_fixup() (Angelos Oikonomopoulos)
- mm/gup: reject FOLL_SPLIT_PMD with hugetlb VMAs (David Hildenbrand)
- tracing/osnoise: Fix possible recursive locking for cpus_read_lock() (Ran Xiaokai)
- tracing: Fix synth event printk format for str fields (Douglas Raillard)
- tracing: Ensure module defining synth event cannot be unloaded while tracing (Douglas Raillard)
- tracing: Fix use-after-free in print_graph_function_flags during tracer switching (Tengda Wu)
- exfat: fix potential wrong error return from get_block (Sungjong Seo)
- exfat: fix random stack corruption after get_block (Sungjong Seo)
- ksmbd: fix null pointer dereference in alloc_preauth_hash() (Namjae Jeon)
- ksmbd: validate zero num_subauth before sub_auth is accessed (Norbert Szetei)
- ksmbd: fix overflow in dacloffset bounds check (Norbert Szetei)
- ksmbd: fix session use-after-free in multichannel connection (Namjae Jeon)
- ksmbd: fix use-after-free in ksmbd_sessions_deregister() (Namjae Jeon)
- ksmbd: add bounds check for create lease context (Norbert Szetei)
- ksmbd: add bounds check for durable handle context (Namjae Jeon)
- KVM: SVM: Don't change target vCPU state on AP Creation VMGEXIT error (Sean Christopherson)
- mmc: sdhci-omap: Disable MMC_CAP_AGGRESSIVE_PM for eMMC/SD (Ulf Hansson)
- mmc: sdhci-pxav3: set NEED_RSP_BUSY capability (Karel Balej)
- mmc: omap: Fix memory leak in mmc_omap_new_slot (Miaoqian Lin)
- Remove unnecessary firmware version check for gc v9_4_2 (Candice Li)
- media: omap3isp: Handle ARM dma_iommu_mapping (Robin Murphy)
- ARM: 9444/1: add KEEP() keyword to ARM_VECTORS (Christian Eggers)
- ACPI: resource: Skip IRQ override on ASUS Vivobook 14 X1404VAP (Paul Menzel)
- acpi: nfit: fix narrowing conversion in acpi_nfit_ctl (Murad Masimov)
- wifi: mt76: mt7925: remove unused acpi function for clc (Ming Yen Hsieh)
- x86/mm: Fix flush_tlb_range() when used for zapping normal PMDs (Jann Horn)
- x86/tsc: Always save/restore TSC sched_clock() on suspend/resume (Guilherme G. Piccoli)
- x86/Kconfig: Add cmpxchg8b support back to Geode CPUs (Arnd Bergmann)
- uprobes/x86: Harden uretprobe syscall trampoline check (Jiri Olsa)
- perf/x86/intel: Avoid disable PMU if !cpuc->enabled in sample read (Kan Liang)
- perf/x86/intel: Apply static call for drain_pebs (Peter Zijlstra (Intel))
- ntb_perf: Delete duplicate dmaengine_unmap_put() call in perf_copy_chunk() (Markus Elfring)
- platform/x86: ISST: Correct command storage data length (Srinivas Pandruvada)
- platform/x86: thinkpad_acpi: disable ACPI fan access for T495* and E560 (Eduard Christian Dumitrescu)
- ACPI: x86: Extend Lenovo Yoga Tab 3 quirk with skip GPIO event-handlers (Hans de Goede)
- x86/tdx: Fix arch_safe_halt() execution for TDX VMs (Vishal Annapurve)
- x86/mce: use is_copy_from_user() to determine copy-from-user context (Shuai Xue)
- x86/microcode/AMD: Fix __apply_microcode_amd()'s return value (Boris Ostrovsky)
- KVM: x86: block KVM_CAP_SYNC_REGS if guest state is protected (Paolo Bonzini)
- x86/hyperv: Fix check of return value from snp_set_vmsa() (Tianyu Lan)
- LoongArch: BPF: Use move_addr() for BPF_PSEUDO_FUNC (Hengqi Chen)
- LoongArch: BPF: Don't override subprog's return value (Hengqi Chen)
- LoongArch: BPF: Fix off-by-one error in build_prologue() (Hengqi Chen)
- LoongArch: Increase MAX_IO_PICS up to 8 (Huacai Chen)
- LoongArch: Increase ARCH_DMA_MINALIGN up to 16 (Huacai Chen)
- rust: Fix enabling Rust and building with GCC for LoongArch (WANG Rui)
- usbnet:fix NPE during rx_complete (Ying Lu)
- wifi: mac80211: Fix sparse warning for monitor_sdata (Alexander Wetzel)
- tty: serial: lpuart: only disable CTS instead of overwriting the whole UARTMODIR register (Sherry Sun)
- tty: serial: fsl_lpuart: Fix unused variable 'sport' build warning (Sherry Sun)
- tty: serial: fsl_lpuart: use port struct directly to simply code (Sherry Sun)
- tty: serial: fsl_lpuart: Use u32 and u8 for register variables (Sherry Sun)
- cgroup/rstat: Fix forceidle time in cpu.stat (Abel Wu)
- cgroup/rstat: Tracking cgroup-level niced CPU time (Joshua Hahn)
- tracing: Correct the refcount if the hist/hist_debug file fails to open (Tengda Wu)
- tracing/hist: Support POLLPRI event for poll on histogram (Masami Hiramatsu (Google))
- tracing/hist: Add poll(POLLIN) support on hist file (Masami Hiramatsu (Google))
- tracing: Switch trace_events_hist.c code over to use guard() (Steven Rostedt)
- tools/power turbostat: report CoreThr per measurement interval (Len Brown)
- perf/core: Fix child_total_time_enabled accounting bug at task exit (Yeoreum Yun)
- drm/amdgpu/gfx12: fix num_mec (Alex Deucher)
- drm/amdgpu/gfx11: fix num_mec (Alex Deucher)
- kbuild: deb-pkg: don't set KBUILD_BUILD_VERSION unconditionally (Alexandru Gagniuc)
- net: ibmveth: make veth_pool_store stop hanging (Dave Marquardt)
- arcnet: Add NULL check in com20020pci_probe() (Henry Martin)
- ipv6: Do not consider link down nexthops in path selection (Ido Schimmel)
- ipv6: Start path selection from the first nexthop (Ido Schimmel)
- net: fix geneve_opt length integer overflow (Lin Ma)
- net: dsa: mv88e6xxx: propperly shutdown PPU re-enable timer on destroy (David Oberhollenzer)
- ipv6: fix omitted netlink attributes when using RTEXT_FILTER_SKIP_STATS (Fernando Fernandez Mancera)
- netfilter: nft_tunnel: fix geneve_opt type confusion addition (Lin Ma)
- net: decrease cached dst counters in dst_release (Antoine Tenart)
- tunnels: Accept PACKET_HOST in skb_tunnel_check_pmtu(). (Guillaume Nault)
- vsock: avoid timeout during connect() if the socket is closing (Stefano Garzarella)
- udp: Fix memory accounting leak. (Kuniyuki Iwashima)
- udp: Fix multiple wraparounds of sk->sk_rmem_alloc. (Kuniyuki Iwashima)
- net: mvpp2: Prevent parser TCAM memory corruption (Tobias Waldekranz)
- sctp: add mutual exclusion in proc_sctp_do_udp_port() (Eric Dumazet)
- net_sched: skbprio: Remove overly strict queue assertions (Cong Wang)
- netlabel: Fix NULL pointer exception caused by CALIPSO on IPv4 sockets (Debin Zhu)
- netfilter: nf_tables: don't unregister hook when table is dormant (Florian Westphal)
- netfilter: nft_set_hash: GC reaps elements with conncount for dynamic sets only (Pablo Neira Ayuso)
- idpf: fix adapter NULL pointer dereference on reboot (Emil Tantilov)
- e1000e: change k1 configuration on MTP and later platforms (Vitaly Lifshits)
- spi: bcm2835: Restore native CS probing when pinctrl-bcm2835 is absent (Florian Fainelli)
- ALSA: hda/realtek: Fix built-in mic on another ASUS VivoBook model (Takashi Iwai)
- spi: bcm2835: Do not call gpiod_put() on invalid descriptor (Florian Fainelli)
- ASoC: imx-card: Add NULL check in imx_card_probe() (Henry Martin)
- nvme/ioctl: don't warn on vectorized uring_cmd with fixed buffer (Caleb Sander Mateos)
- riscv/purgatory: 4B align purgatory_start (Björn Töpel)
- riscv/kexec_file: Handle R_RISCV_64 in purgatory relocator (Yao Zi)
- riscv: Fix hugetlb retrieval of number of ptes in case of !present pte (Alexandre Ghiti)
- spi: cadence: Fix out-of-bounds array access in cdns_mrvl_xspi_setup_clock() (Josh Poimboeuf)
- ASoC: codecs: rt5665: Fix some error handling paths in rt5665_probe() (Christophe JAILLET)
- s390/entry: Fix setting _CIF_MCCK_GUEST with lowcore relocation (Sven Schnelle)
- ublk: make sure ubq->canceling is set when queue is frozen (Ming Lei)
- x86/uaccess: Improve performance by aligning writes to 8 bytes in copy_user_generic(), on non-FSRM/ERMS CPUs (Herton R. Krzesinski)
- RISC-V: errata: Use medany for relocatable builds (Palmer Dabbelt)
- ALSA: hda/realtek: Fix built-in mic breakage on ASUS VivoBook X515JA (Takashi Iwai)
- firmware: cs_dsp: Ensure cs_dsp_load[_coeff]() returns 0 on success (Richard Fitzgerald)
- ntb: intel: Fix using link status DB's (Nikita Shubin)
- ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans (Yajun Deng)
- riscv: ftrace: Add parentheses in macro definitions of make_call_t0 and make_call_ra (Juhan Jin)
- fs/9p: fix NULL pointer dereference on mkdir (Christian Schoenebeck)
- spufs: fix a leak in spufs_create_context() (Al Viro)
- spufs: fix gang directory lifetimes (Al Viro)
- spufs: fix a leak on spufs_new_file() failure (Al Viro)
- netfs: Fix netfs_unbuffered_read() to return ssize_t rather than int (David Howells)
- hwmon: (nct6775-core) Fix out of bounds access for NCT679{8,9} (Tasos Sahanidis)
- memory: omap-gpmc: drop no compatible check (Roger Quadros)
- can: statistics: use atomic access in hot path (Oliver Hartkopp)
- ALSA: hda/realtek: Add mute LED quirk for HP Pavilion x360 14-dy1xxx (Navon John Lukose)
- selftests: netfilter: skip br_netfilter queue tests if kernel is tainted (Florian Westphal)
- net: devmem: do not WARN conditionally after netdev_rx_queue_restart() (Taehee Yoo)
- drm/amd: Keep display off while going into S4 (Mario Limonciello)
- nvme-pci: fix stuck reset on concurrent DPC and HP (Keith Busch)
- x86/sgx: Warn explicitly if X86_FEATURE_SGX_LC is not enabled (Vladis Dronov)
- x86/hyperv: Fix output argument to hypercall that changes page visibility (Michael Kelley)
- locking/semaphore: Use wake_q to wake up processes outside lock critical section (Waiman Long)
- wifi: mac80211: fix SA Query processing in MLO (Johannes Berg)
- wifi: mac80211: flush the station before moving it to UN-AUTHORIZED state (Emmanuel Grumbach)
- ASoC: rt1320: set wake_capable = 0 explicitly (Bard Liao)
- ASoC: codecs: wsa884x: report temps to hwmon in millidegree of Celsius (Alexey Klimov)
- x86/hyperv/vtl: Stop kernel from probing VTL0 low memory (Naman Jain)
- sched/deadline: Use online cpus for validating runtime (Shrikanth Hegde)
- ALSA: hda/realtek: Add support for ASUS Zenbook UM3406KA Laptops using CS35L41 HDA (Stefan Binding)
- ALSA: hda/realtek: Add support for ASUS B5405 and B5605 Laptops using CS35L41 HDA (Stefan Binding)
- ALSA: hda/realtek: Add support for ASUS B3405 and B3605 Laptops using CS35L41 HDA (Stefan Binding)
- ALSA: hda/realtek: Add support for various ASUS Laptops using CS35L41 HDA (Stefan Binding)
- ALSA: hda/realtek: Add support for ASUS ROG Strix G614 Laptops using CS35L41 HDA (Stefan Binding)
- ALSA: hda/realtek: Add support for ASUS ROG Strix GA603 Laptops using CS35L41 HDA (Stefan Binding)
- ALSA: hda/realtek: Add support for ASUS ROG Strix G814 Laptop using CS35L41 HDA (Stefan Binding)
- exfat: add a check for invalid data size (Yuezhang Mo)
- platform/x86/amd/pmf: Update PMF Driver for Compatibility with new PMF-TA (Shyam Sundar S K)
- platform/x86/amd/pmf: Propagate PMF-TA return codes (Shyam Sundar S K)
- HID: i2c-hid: improve i2c_hid_get_report error message (Wentao Guan)
- net: dsa: rtl8366rb: don't prompt users for LED control (Jakub Kicinski)
- platform/x86/intel/vsec: Add Diamond Rapids support (David E. Box)
- platform/x86: intel-hid: fix volume buttons on Microsoft Surface Go 4 tablet (Dmitry Panchenko)
- cifs: fix incorrect validation for num_aces field of smb_acl (Namjae Jeon)
- smb: common: change the data type of num_aces to le16 (Namjae Jeon)
- perf/core: Fix perf_pmu_register() vs. perf_init_event() (Peter Zijlstra)
- ALSA: hda: Fix speakers on ASUS EXPERTBOOK P5405CSA 1.0 (Daniel Bárta)
- ALSA: hda/realtek: Fix Asus Z13 2025 audio (Antheas Kapenekakis)
- affs: don't write overlarge OFS data block size fields (Simon Tatham)
- affs: generate OFS sequence numbers starting at 1 (Simon Tatham)
- wifi: brcmfmac: keep power during suspend if board requires it (Matthias Proske)
- nvme-pci: skip CMB blocks incompatible with PCI P2P DMA (Icenowy Zheng)
- nvme-pci: clean up CMBMSC when registering CMB fails (Icenowy Zheng)
- nvme-tcp: fix possible UAF in nvme_tcp_poll (Sagi Grimberg)
- wifi: iwlwifi: mvm: use the right version of the rate API (Emmanuel Grumbach)
- wifi: iwlwifi: fw: allocate chained SG tables for dump (Johannes Berg)
- wifi: mac80211: remove debugfs dir for virtual monitor (Alexander Wetzel)
- wifi: mac80211: Cleanup sta TXQs on flush (Alexander Wetzel)
- nfs: Add missing release on error in nfs_lock_and_join_requests() (Dan Carpenter)
- objtool/loongarch: Add unwind hints in prepare_frametrace() (Josh Poimboeuf)
- rcu-tasks: Always inline rcu_irq_work_resched() (Josh Poimboeuf)
- context_tracking: Always inline ct_{nmi,irq}_{enter,exit}() (Josh Poimboeuf)
- sched/smt: Always inline sched_smt_active() (Josh Poimboeuf)
- objtool: Fix verbose disassembly if CROSS_COMPILE isn't set (David Laight)
- octeontx2-af: Free NIX_AF_INT_VEC_GEN irq (Geetha sowjanya)
- octeontx2-af: Fix mbox INTR handler when num VFs > 64 (Geetha sowjanya)
- net: phy: broadcom: Correct BCM5221 PHY model detection (Jim Liu)
- ACPI: processor: idle: Return an error if both P_LVL{2,3} idle states are invalid (Giovanni Gherdovich)
- LoongArch: Rework the arch_kgdb_breakpoint() implementation (Yuli Wang)
- LoongArch: Fix device node refcount leak in fdt_cpu_clk_init() (Miaoqian Lin)
- LoongArch: Fix help text of CMDLINE_EXTEND in Kconfig (谢致邦 (XIE Zhibang))
- objtool: Fix segfault in ignore_unreachable_insn() (Josh Poimboeuf)
- ring-buffer: Fix bytes_dropped calculation issue (Feng Yang)
- net/mlx5e: SHAMPO, Make reserved size independent of page size (Lama Kayal)
- ksmbd: fix r_count dec/increment mismatch (Namjae Jeon)
- ksmbd: fix multichannel connection failure (Namjae Jeon)
- ksmbd: use aead_request_free to match aead_request_alloc (Miaoqian Lin)
- rndis_host: Flag RNDIS modems as WWAN devices (Lubomir Rintel)
- rtnetlink: Allocate vfinfo size for VF GUIDs when supported (Mark Zhang)
- exfat: fix missing shutdown check (Yuezhang Mo)
- exfat: fix the infinite loop in exfat_find_last_cluster() (Yuezhang Mo)
- smb: client: Fix netns refcount imbalance causing leaks and use-after-free (Wang Zhaolong)
- NFS: Shut down the nfs_client only after all the superblocks (Trond Myklebust)
- objtool, media: dib8000: Prevent divide-by-zero in dib8000_set_dds() (Josh Poimboeuf)
- objtool, nvmet: Fix out-of-bounds stack access in nvmet_ctrl_state_show() (Josh Poimboeuf)
- thermal: core: Remove duplicate struct declaration (xueqin Luo)
- perf bpf-filter: Fix a parsing error with comma (Namhyung Kim)
- perf tools: annotate asm_pure_loop.S (Marcus Meissner)
- fs/procfs: fix the comment above proc_pid_wchan() (Bart Van Assche)
- perf vendor events arm64 AmpereOneX: Fix frontend_bound calculation (Ilkka Koskinen)
- tty: n_tty: use uint for space returned by tty_write_room() (Jiri Slaby (SUSE))
- staging: vchiq_arm: Fix possible NPR of keep-alive thread (Stefan Wahren)
- staging: vchiq_arm: Register debugfs after cdev (Stefan Wahren)
- staging: rtl8723bs: select CONFIG_CRYPTO_LIB_AES (谢致邦 (XIE Zhibang))
- perf: intel-tpebs: Fix incorrect usage of zfree() (James Clark)
- perf python: Check if there is space to copy all the event (Arnaldo Carvalho de Melo)
- perf python: Don't keep a raw_data pointer to consumed ring buffer space (Arnaldo Carvalho de Melo)
- perf python: Decrement the refcount of just created event on failure (Arnaldo Carvalho de Melo)
- perf python: Fixup description of sample.id event member (Arnaldo Carvalho de Melo)
- i3c: master: svc: Fix missing the IBI rules (Stanley Chu)
- um: hostfs: avoid issues on inode number reuse by host (Benjamin Berg)
- um: remove copy_from_kernel_nofault_allowed (Benjamin Berg)
- um: Pass the correct Rust target and options with gcc (David Gow)
- selftests/mm/cow: fix the incorrect error handling (Cyan Yang)
- fuse: fix dax truncate/punch_hole fault path (Alistair Popple)
- NFS: fix open_owner_id_maxsz and related fields. (NeilBrown)
- NFSv4: Avoid unnecessary scans of filesystems for delayed delegations (Trond Myklebust)
- NFSv4: Avoid unnecessary scans of filesystems for expired delegations (Trond Myklebust)
- NFSv4: Avoid unnecessary scans of filesystems for returning delegations (Trond Myklebust)
- NFSv4: Don't trigger uneccessary scans for return-on-close delegations (Trond Myklebust)
- arch/powerpc: drop GENERIC_PTDUMP from mpc885_ads_defconfig (Anshuman Khandual)
- ocfs2: validate l_tree_depth to avoid out-of-bounds access (Vasiliy Kovalev)
- kexec: initialize ELF lowest address to ULONG_MAX (Sourabh Jain)
- kernel/events/uprobes: handle device-exclusive entries correctly in __replace_page() (David Hildenbrand)
- perf units: Fix insufficient array space (Arnaldo Carvalho de Melo)
- perf evlist: Add success path to evlist__create_syswide_maps (Ian Rogers)
- perf debug: Avoid stack overflow in recursive error message (Ian Rogers)
- iio: light: Add check for array bounds in veml6075_read_int_time_ms (Karan Sanghavi)
- iio: adc: ad7768-1: set MOSI idle state to prevent accidental reset (Jonathan Santos)
- iio: adc: ad7173: Fix comparison of channel configs (Uwe Kleine-König)
- iio: adc: ad7124: Fix comparison of channel configs (Uwe Kleine-König)
- iio: adc: ad4130: Fix comparison of channel setups (Uwe Kleine-König)
- dmaengine: fsl-edma: free irq correctly in remove path (Peng Fan)
- dmaengine: fsl-edma: cleanup chan after dma_async_device_unregister (Peng Fan)
- fs/ntfs3: Prevent integer overflow in hdr_first_de() (Dan Carpenter)
- fs/ntfs3: Fix a couple integer overflows on 32bit systems (Dan Carpenter)
- usb: xhci: correct debug message page size calculation (Niklas Neronin)
- perf bench: Fix perf bench syscall loop count (Thomas Richter)
- perf arm-spe: Fix load-store operation checking (Leo Yan)
- iio: backend: make sure to NULL terminate stack buffer (Nuno Sá)
- iio: accel: msa311: Fix failure to release runtime pm if direct mode claim fails. (Jonathan Cameron)
- iio: accel: mma8452: Ensure error return on failure to matching oversampling ratio (Jonathan Cameron)
- ucsi_ccg: Don't show failed to get FW build information error (Mario Limonciello)
- perf build: Fix in-tree build due to symbolic link (Luca Ceresoli)
- tools/x86: Fix linux/unaligned.h include path in lib/insn.c (Ian Rogers)
- perf pmu: Don't double count common sysfs and json events (James Clark)
- coresight-etm4x: add isb() before reading the TRCSTATR (Yuanfang Zhang)
- vhost-scsi: Fix handling of multiple calls to vhost_scsi_set_endpoint (Mike Christie)
- coresight: catu: Fix number of pages while using 64k pages (Ilkka Koskinen)
- greybus: gb-beagleplay: Add error handling for gb_greybus_init (Wentao Liang)
- perf report: Switch data file correctly in TUI (Namhyung Kim)
- soundwire: slave: fix an OF node reference leak in soundwire slave device (Joe Hattori)
- isofs: fix KMSAN uninit-value bug in do_isofs_readdir() (Qasim Ijaz)
- phy: phy-rockchip-samsung-hdptx: Don't use dt aliases to determine phy-id (Heiko Stuebner)
- fs/ntfs3: Update inode->i_mapping->a_ops on compression state (Konstantin Komarov)
- w1: fix NULL pointer dereference in probe (Chenyuan Yang)
- perf: Always feature test reallocarray (James Clark)
- perf stat: Fix find_stat for mixed legacy/non-legacy events (Ian Rogers)
- clk: qcom: mmcc-sdm660: fix stuck video_subcore0 clock (Barnabás Czémán)
- pinctrl: intel: Fix wrong bypass assignment in intel_pinctrl_probe_pwm() (Andy Shevchenko)
- crypto: hisilicon/sec2 - fix for aead auth key length (Wenkai Lin)
- RDMA/core: Fix use-after-free when rename device name (Wang Liang)
- x86/dumpstack: Fix inaccurate unwinding from exception stacks due to misplaced assignment (Jann Horn)
- leds: Fix LED_OFF brightness race (Remi Pommarel)
- mfd: sm501: Switch to BIT() to mitigate integer overflows (Nikita Zhandarovich)
- pinctrl: renesas: rzv2m: Fix missing of_node_put() call (Fabrizio Castro)
- RDMA/mlx5: Fix mlx5_poll_one() cur_qp update flow (Patrisious Haddad)
- bpf: Fix array bounds error with may_goto (Jiayuan Chen)
- clk: qcom: gcc-sm8650: Do not turn off USB GDSCs during gdsc_disable() (Neil Armstrong)
- crypto: nx - Fix uninitialised hv_nxc on error (Herbert Xu)
- power: supply: max77693: Fix wrong conversion of charge input threshold value (Artur Weber)
- x86/entry: Fix ORC unwinder for PUSH_REGS with save_ret=1 (Jann Horn)
- clk: amlogic: g12a: fix mmc A peripheral clock (Jerome Brunet)
- clk: clk-imx8mp-audiomix: fix dsp/ocram_a clock parents (Laurentiu Mihalcea)
- crypto: qat - remove access to parity register for QAT GEN4 (Bairavi Alagappan)
- pinctrl: npcm8xx: Fix incorrect struct npcm8xx_pincfg assignment (Andy Shevchenko)
- rust: fix signature of rust_fmt_argument (Alice Ryhl)
- selftests/bpf: Select NUMA_NO_NODE to create map (Saket Kumar Bhaskar)
- clk: amlogic: gxbb: drop non existing 32k clock parent (Jerome Brunet)
- clk: amlogic: g12b: fix cluster A parent data (Jerome Brunet)
- pinctrl: tegra: Set SFIO mode to Mux Register (Prathamesh Shete)
- IB/mad: Check available slots before posting receive WRs (Maher Sanalla)
- crypto: api - Fix larval relookup type and mask (Herbert Xu)
- power: supply: bq27xxx_battery: do not update cached flags prematurely (Sicelo A. Mhlongo)
- remoteproc: qcom_q6v5_mss: Handle platforms with one power domain (Luca Weiss)
- RDMA/erdma: Prevent use-after-free in erdma_accept_newconn() (Cheng Xu)
- RDMA/mlx5: Fix calculation of total invalidated pages (Chiara Meiohas)
- RDMA/core: Don't expose hw_counters outside of init net namespace (Roman Gushchin)
- clk: rockchip: rk3328: fix wrong clk_ref_usb3otg parent (Peter Geis)
- selftests/bpf: Fix freplace_link segfault in tailcalls prog test (Tengda Wu)
- RDMA/mlx5: Fix MR cache initialization error flow (Michael Guralnik)
- pinctrl: renesas: rzg2l: Fix missing of_node_put() call (Fabrizio Castro)
- pinctrl: renesas: rza2: Fix missing of_node_put() call (Fabrizio Castro)
- lib: 842: Improve error handling in sw842_compress() (Tanya Agarwal)
- bpf: Use preempt_count() directly in bpf_send_signal_common() (Hou Tao)
- clk: qcom: gcc-x1e80100: Unregister GCC_GPU_CFG_AHB_CLK/GCC_DISP_XO_CLK (Konrad Dybcio)
- remoteproc: qcom_q6v5_pas: Use resource with CX PD for MSM8226 (Luca Weiss)
- crypto: tegra - Set IV to NULL explicitly for AES ECB (Akhil R)
- RDMA/mana_ib: Ensure variable err is initialized (Kees Bakker)
- s390: Remove ioremap_wt() and pgprot_writethrough() (Niklas Schnelle)
- clk: qcom: gcc-msm8953: fix stuck venus0_core0 clock (Vladimir Lypak)
- crypto: tegra - Fix CMAC intermediate result handling (Akhil R)
- pinctrl: nuvoton: npcm8xx: Fix error handling in npcm8xx_gpio_fw() (Yue Haibing)
- clk: samsung: Fix UBSAN panic in samsung_clk_init() (Will McVicker)
- remoteproc: qcom: pas: add minidump_id to SC7280 WPSS (Luca Weiss)
- clk: renesas: r8a08g045: Check the source of the CPU PLL settings (Claudiu Beznea)
- x86/mm/pat: Fix VM_PAT handling when fork() fails in copy_page_range() (David Hildenbrand)
- selftests/bpf: Fix string read in strncmp benchmark (Viktor Malik)
- libbpf: Fix hypothetical STT_SECTION extern NULL deref case (Andrii Nakryiko)
- remoteproc: qcom_q6v5_pas: Make single-PD handling more robust (Luca Weiss)
- pinctrl: renesas: rzg2l: Suppress binding attributes (Claudiu Beznea)
- of: property: Increase NR_FWNODE_REFERENCE_ARGS (Zijun Hu)
- remoteproc: core: Clear table_sz when rproc_shutdown (Peng Fan)
- RDMA/mlx5: Fix page_size variable overflow (Michael Guralnik)
- crypto: hisilicon/sec2 - fix for sec spec check (Wenkai Lin)
- crypto: hisilicon/sec2 - fix for aead authsize alignment (Wenkai Lin)
- clk: amlogic: gxbb: drop incorrect flag on 32k clock (Jerome Brunet)
- crypto: tegra - Use HMAC fallback when keyslots are full (Akhil R)
- crypto: bpf - Add MODULE_DESCRIPTION for skcipher (Arnd Bergmann)
- crypto: tegra - check return value for hash do_one_req (Akhil R)
- crypto: tegra - Use separate buffer for setkey (Akhil R)
- crypto: qat - set parity error mask for qat_420xx (Bairavi Alagappan)
- crypto: iaa - Test the correct request flag (Herbert Xu)
- fbdev: sm501fb: Add some geometry checks. (Danila Chernetsov)
- mdacon: rework dependency list (Arnd Bergmann)
- dummycon: fix default rows/cols (Arnd Bergmann)
- fbdev: au1100fb: Move a variable assignment behind a null pointer check (Markus Elfring)
- PCI: pciehp: Don't enable HPIE when resuming in poll mode (Ilpo Järvinen)
- PCI: Fix BAR resizing when VF BARs are assigned (Ilpo Järvinen)
- PCI: histb: Fix an error handling path in histb_pcie_probe() (Christophe JAILLET)
- PCI: dwc: ep: Return -ENOMEM for allocation failures (Dan Carpenter)
- drm/amd/display: avoid NPD when ASIC does not support DMUB (Thadeu Lima de Souza Cascardo)
- drm/mediatek: dsi: fix error codes in mtk_dsi_host_transfer() (Dan Carpenter)
- drm/mediatek: dp: drm_err => dev_err in HPD path to avoid NULL ptr (Douglas Anderson)
- drm/mediatek: Fix config_updating flag never false when no mbox channel (Jason-JH Lin)
- PCI: xilinx-cpm: Fix IRQ domain leak in error path of probe (Thippeswamy Havalige)
- PCI: Remove stray put_device() in pci_register_host_bridge() (Dan Carpenter)
- powerpc/kexec: fix physical address calculation in clear_utlb_entry() (Christophe Leroy)
- crypto: powerpc: Mark ghashp8-ppc.o as an OBJECT_FILES_NON_STANDARD (Christophe Leroy)
- drm/msm/a6xx: Fix a6xx indexed-regs in devcoreduump (Rob Clark)
- drm/amd/display: fix type mismatch in CalculateDynamicMetadataParameters() (Vitaliy Shevtsov)
- drm/panthor: Update CS_STATUS_ defines to correct values (Ashley Smith)
- PCI: Avoid reset when disabled via sysfs (Nishanth Aravamudan)
- PCI/portdrv: Only disable pciehp interrupts early when needed (Feng Tang)
- PCI: brcmstb: Fix potential premature regulator disabling (Jim Quinlan)
- PCI: brcmstb: Fix error path after a call to regulator_bulk_get() (Jim Quinlan)
- PCI: brcmstb: Use internal register to change link capability (Jim Quinlan)
- PCI: brcmstb: Set generation limit before PCIe link up (Jim Quinlan)
- PCI: cadence-ep: Fix the driver to send MSG TLP for INTx without data payload (Hans Zhang)
- drm/amdkfd: Fix Circular Locking Dependency in 'svm_range_cpu_invalidate_pagetables' (Srinivasan Shanmugam)
- drm/msm/dsi: Set PHY usescase (and mode) before registering DSI host (Marijn Suijten)
- drm/msm/dsi: Use existing per-interface slice count in DSC timing (Marijn Suijten)
- drm/msm/dsi/phy: Program clock inverters in correct register (Krzysztof Kozlowski)
- drm/msm/dpu: don't use active in atomic_check() (Dmitry Baryshkov)
- drm/amd/display: fix an indent issue in DML21 (Aurabindo Pillai)
- PCI/ACS: Fix 'pci=config_acs=' parameter (Tushar Dave)
- drm/panel: ilitek-ili9882t: fix GPIO name in error message (John Keeping)
- PCI/ASPM: Fix link state exit during switch upstream function removal (Daniel Stodden)
- drm/mediatek: mtk_hdmi: Fix typo for aud_sampe_size member (AngeloGioacchino Del Regno)
- drm/mediatek: mtk_hdmi: Unregister audio platform device on failure (AngeloGioacchino Del Regno)
- PCI: Remove add_align overwrite unrelated to size0 (Ilpo Järvinen)
- PCI: Use downstream bridges for distributing resources (Kai-Heng Feng)
- drm/amdgpu/umsch: fix ucode check (Alex Deucher)
- drm/amdgpu: refine smu send msg debug log format (Yang Wang)
- gpu: cdns-mhdp8546: fix call balance of mhdp->clk handling routines (Vitalii Mordan)
- drm/vkms: Fix use after free and double free on init error (José Expósito)
- drm: xlnx: zynqmp: Fix max dma segment size (Tomi Valkeinen)
- drm/bridge: it6505: fix HDCP V match check is not performed correctly (Hermes Wu)
- drm/dp_mst: Fix drm RAD print (Wayne Lin)
- drm/ssd130x: ensure ssd132x pitch is correct (John Keeping)
- drm/ssd130x: fix ssd132x encoding (John Keeping)
- drm/ssd130x: Set SPI .id_table to prevent an SPI core warning (Javier Martinez Canillas)
- drm/bridge: ti-sn65dsi86: Fix multiple instances (Geert Uytterhoeven)
- ALSA: timer: Don't take register_mutex with copy_from/to_user() (Takashi Iwai)
- ASoC: ti: j721e-evm: Fix clock configuration for ti,j7200-cpb-audio compatible (Jayesh Choudhary)
- ALSA: hda/realtek: Always honor no_shutup_pins (Takashi Iwai)
- dt-bindings: vendor-prefixes: add GOcontroll (Maud Spierings)
- HID: remove superfluous (and wrong) Makefile entry for CONFIG_INTEL_ISH_FIRMWARE_DOWNLOADER (Jiri Kosina)
- ASoC: amd: acp: Fix for enabling DMIC on acp platforms via _DSD entry (Venkata Prasad Potturu)
- ASoC: cs35l41: check the return value from spi_setup() (Vitaliy Shevtsov)
- platform/x86: dell-ddv: Fix temperature calculation (Armin Wolf)
- platform/x86: dell-uart-backlight: Make dell_uart_bl_serdev_driver static (Ilpo Järvinen)
- platform/x86: lenovo-yoga-tab2-pro-1380-fastcharger: Make symbol static (Ilpo Järvinen)
- auxdisplay: panel: Fix an API misuse in panel.c (Andy Shevchenko)
- media: platform: allgro-dvt: unregister v4l2_device on the error path (Joe Hattori)
- media: verisilicon: HEVC: Initialize start_bit field (Benjamin Gaignard)
- auxdisplay: MAX6959 should select BITREVERSE (Geert Uytterhoeven)
- regulator: pca9450: Fix enable register for LDO5 (Frieder Schrempf)
- x86/entry: Add __init to ia32_emulation_override_cmdline() (Vitaly Kuznetsov)
- x86/fpu/xstate: Fix inconsistencies in guest FPU xfeatures (Chao Gao)
- x86/traps: Make exc_double_fault() consistently noreturn (Josh Poimboeuf)
- perf/ring_buffer: Allow the EPOLLRDNORM flag for poll (Tao Chen)
- lockdep: Don't disable interrupts on RT in disable_irq_nosync_lockdep.*() (Sebastian Andrzej Siewior)
- PM: sleep: Fix handling devices with direct_complete set on errors (Rafael J. Wysocki)
- thermal: int340x: Add NULL check for adev (Chenyuan Yang)
- x86/resctrl: Fix allocation of cleanest CLOSID on platforms with no monitors (James Morse)
- EDAC/ie31200: Fix the error path order of ie31200_init() (Qiuxu Zhuo)
- EDAC/ie31200: Fix the DIMM size mask for several SoCs (Qiuxu Zhuo)
- EDAC/ie31200: Fix the size of EDAC_MC_LAYER_CHIP_SELECT layer (Qiuxu Zhuo)
- selinux: Chain up tool resolving errors in install_policy.sh (Tim Schumacher)
- watchdog/hardlockup/perf: Fix perf_event memory leak (Li Huafei)
- kunit/stackinit: Use fill byte different from Clang i386 pattern (Kees Cook)
- RISC-V: KVM: Disable the kernel perf counter during configure (Atish Patra)
- cpufreq: tegra194: Allow building for Tegra234 (Aaron Kling)
- PM: sleep: Adjust check before setting power.must_resume (Rafael J. Wysocki)
- lockdep/mm: Fix might_fault() lockdep check of current->mm->mmap_lock (Peter Zijlstra)
- x86/sev: Add missing RIP_REL_REF() invocations during sme_enable() (Kevin Loughlin)
- x86/platform: Only allow CONFIG_EISA for 32-bit (Arnd Bergmann)
- x86/fpu: Avoid copying dynamic FP state from init_task in arch_dup_task_struct() (Benjamin Berg)
- x86/fpu: Fix guest FPU state buffer allocation size (Stanislav Spassov)
- EDAC/{skx_common,i10nm}: Fix some missing error reports on Emerald Rapids (Qiuxu Zhuo)
- cpufreq: governor: Fix negative 'idle_time' handling in dbs_update() (Jie Zhan)
- sched/eevdf: Force propagating min_slice of cfs_rq when {en,de}queue tasks (Tianchen Ding)
- sched: Cancel the slice protection of the idle entity (zihan zhou)
- smack: ipv4/ipv6: tcp/dccp/sctp: fix incorrect child socket label (Konstantin Andreev)
- smack: dont compile ipv6 code unless ipv6 is configured (Konstantin Andreev)
- cpufreq: scpi: compare kHz instead of Hz (zuoqian)
- x86/mm/pat: cpa-test: fix length for CPA_ARRAY test (Mike Rapoport (Microsoft))
- watch_queue: fix pipe accounting mismatch (Eric Sandeen)
- LTS version: v6.12.22 (Jack Vogel)
- bcachefs: bch2_ioctl_subvolume_destroy() fixes (Kent Overstreet)
- serial: 8250_dma: terminate correct DMA in tx_dma_flush() (John Keeping)
- serial: stm32: do not deassert RS485 RTS GPIO prematurely (Cheick Traore)
- perf tools: Fix up some comments and code to properly use the event_source bus (Greg Kroah-Hartman)
- memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove (Luo Qiu)
- usb: xhci: Apply the link chain quirk on NEC isoc endpoints (Michal Pecio)
- usb: xhci: Don't skip on Stopped - Length Invalid (Michal Pecio)
- net: usb: usbnet: restore usb%d name exception for local mac addresses (Dominique Martinet)
- net: usb: qmi_wwan: add Telit Cinterion FE990B composition (Fabio Porcedda)
- net: usb: qmi_wwan: add Telit Cinterion FN990B composition (Fabio Porcedda)
- tty: serial: fsl_lpuart: disable transmitter before changing RS485 related registers (Sherry Sun)
- tty: serial: 8250: Add Brainboxes XC devices (Cameron Williams)
- tty: serial: 8250: Add some more device IDs (Cameron Williams)
- counter: microchip-tcb-capture: Fix undefined counter channel state on probe (William Breathitt Gray)
- counter: stm32-lptimer-cnt: fix error handling when enabling (Fabrice Gasnier)
- ALSA: hda/realtek: Support mute LED on HP Laptop 15s-du3xxx (Dhruv Deshpande)
- netfilter: socket: Lookup orig tuple for IPv6 SNAT (Maxim Mikityanskiy)
- drm/amd/display: Don't write DP_MSTM_CTRL after LT (Wayne Lin)
- atm: Fix NULL pointer dereference (Minjoong Kim)
- HID: hid-plantronics: Add mic mute mapping and generalize quirks (Terry Junge)
- ALSA: usb-audio: Add quirk for Plantronics headsets to fix control names (Terry Junge)
- LTS version: v6.12.21 (Jack Vogel)
- mptcp: Fix data stream corruption in the address announcement (Arthur Mongodin)
- mm/huge_memory: drop beyond-EOF folios with the right number of refs (Zi Yan)
- arm64: dts: rockchip: fix u2phy1_host status for NanoPi R4S (Justin Klaassen)
- libsubcmd: Silence compiler warning (Eder Zulian)
- Revert "sched/core: Reduce cost of sched_move_task when config autogroup" (Dietmar Eggemann)
- KVM: arm64: Eagerly switch ZCR_EL{1,2} (Mark Rutland)
- KVM: arm64: Mark some header functions as inline (Mark Rutland)
- KVM: arm64: Refactor exit handlers (Mark Rutland)
- KVM: arm64: Remove VHE host restore of CPACR_EL1.SMEN (Mark Rutland)
- KVM: arm64: Remove VHE host restore of CPACR_EL1.ZEN (Mark Rutland)
- KVM: arm64: Remove host FPSIMD saving for non-protected KVM (Mark Rutland)
- KVM: arm64: Unconditionally save+flush host FPSIMD/SVE/SME state (Mark Rutland)
- KVM: arm64: Calculate cptr_el2 traps on activating traps (Fuad Tabba)
- io_uring/net: fix sendzc double notif flush (Pavel Begunkov)
- ksmbd: fix incorrect validation for num_aces field of smb_acl (Namjae Jeon)
- drm/amdkfd: Fix user queue validation on Gfx7/8 (Philip Yang)
- drm/amdgpu: Fix JPEG video caps max size for navi1x and raven (David Rosca)
- drm/amdgpu: Fix MPEG2, MPEG4 and VC1 video caps max size (David Rosca)
- drm/amdgpu: Remove JPEG from vega and carrizo video caps (David Rosca)
- drm/amdgpu/pm: wire up hwmon fan speed for smu 14.0.2 (Alex Deucher)
- drm/amdgpu/pm: Handle SCLK offset correctly in overdrive for smu 14.0.2 (Tomasz Pakuła)
- drm/amdgpu: Restore uncached behaviour on GFX12 (David Belanger)
- drm/amd/pm: add unique_id for gfx12 (Harish Kasiviswanathan)
- drm/amd/display: Use HW lock mgr for PSR1 when only one eDP (Mario Limonciello)
- drm/amd/display: Fix message for support_edp0_on_dp1 (Yilin Chen)
- drm/amdgpu/gfx12: correct cleanup of 'me' field with gfx_v12_0_me_fini() (Wentao Liang)
- drm/sched: Fix fence reference count leak (qianyi liu)
- drm/radeon: fix uninitialized size issue in radeon_vce_cs_parse() (Nikita Zhandarovich)
- pmdomain: amlogic: fix T7 ISP secpower (Xianwei Zhao)
- soc: qcom: pdr: Fix the potential deadlock (Saranya R)
- batman-adv: Ignore own maximum aggregation size during RX (Sven Eckelmann)
- xsk: fix an integer overflow in xp_create_and_assign_umem() (Gavrilov Ilia)
- keys: Fix UAF in key_put() (David Howells)
- efi/libstub: Avoid physical address 0x0 when doing random allocation (Ard Biesheuvel)
- firmware: qcom: uefisecapp: fix efivars registration race (Johan Hovold)
- ARM: shmobile: smp: Enforce shmobile_smp_* alignment (Geert Uytterhoeven)
- ARM: dts: imx6qdl-apalis: Fix poweroff on Apalis iMX6 (Stefan Eichenberger)
- memcg: drain obj stock on cpu hotplug teardown (Shakeel Butt)
- proc: fix UAF in proc_get_inode() (Ye Bin)
- mm/page_alloc: fix memory accept before watermarks gets initialized (Kirill A. Shutemov)
- mm/migrate: fix shmem xarray update during migration (Zi Yan)
- mm: fix error handling in __filemap_get_folio() with FGP_NOWAIT (Raphael S. Carvalho)
- selftests/mm: run_vmtests.sh: fix half_ufd_size_MB calculation (Rafael Aquini)
- mmc: atmel-mci: Add missing clk_disable_unprepare() (Gu Bowen)
- mmc: sdhci-brcmstb: add cqhci suspend/resume to PM ops (Kamal Dasu)
- arm64: dts: rockchip: fix pinmux of UART5 for PX30 Ringneck on Haikou (Quentin Schulz)
- arm64: dts: rockchip: fix pinmux of UART0 for PX30 Ringneck on Haikou (Quentin Schulz)
- arm64: dts: freescale: imx8mm-verdin-dahlia: add Microphone Jack to sound card (Stefan Eichenberger)
- arm64: dts: freescale: imx8mp-verdin-dahlia: add Microphone Jack to sound card (Stefan Eichenberger)
- accel/qaic: Fix integer overflow in qaic_validate_req() (Dan Carpenter)
- regulator: check that dummy regulator has been probed before using it (Christian Eggers)
- regulator: dummy: force synchronous probing (Christian Eggers)
- netfs: Call invalidate_cache only if implemented (Max Kellermann)
- riscv: dts: starfive: Fix a typo in StarFive JH7110 pin function definitions (E Shattow)
- io_uring/net: don't clear REQ_F_NEED_CLEANUP unconditionally (Jens Axboe)
- drm/v3d: Don't run jobs that have errors flagged in its fence (Maíra Canal)
- drm/xe: Fix exporting xe buffers multiple times (Tomasz Rusinowicz)
- can: flexcan: disable transceiver during system PM (Haibo Chen)
- can: flexcan: only change CAN state when link up in system PM (Haibo Chen)
- can: ucan: fix out of bound read in strscpy() source (Vincent Mailhol)
- can: rcar_canfd: Fix page entries in the AFL list (Biju Das)
- dt-bindings: can: renesas,rcar-canfd: Fix typo in pattern properties for R-Car V4M (Biju Das)
- net: mana: Support holes in device list reply msg (Haiyang Zhang)
- i2c: omap: fix IRQ storms (Andreas Kemnade)
- tracing: tprobe-events: Fix leakage of module refcount (Masami Hiramatsu (Google))
- Revert "gre: Fix IPv6 link-local address generation." (Guillaume Nault)
- net/neighbor: add missing policy for NDTPA_QUEUE_LENBYTES (Lin Ma)
- libfs: Fix duplicate directory entry in offset_dir_lookup (Yongjian Sun)
- net: ipv6: ioam6: fix lwtunnel_output() loop (Justin Iurman)
- net: lwtunnel: fix recursion loops (Justin Iurman)
- net: ti: icssg-prueth: Add lock to stats (MD Danish Anwar)
- net: atm: fix use after free in lec_send() (Dan Carpenter)
- gpu: host1x: Do not assume that a NULL domain means no DMA IOMMU (Jason Gunthorpe)
- phy: fix xa_alloc_cyclic() error handling (Michal Swiatkowski)
- dpll: fix xa_alloc_cyclic() error handling (Michal Swiatkowski)
- devlink: fix xa_alloc_cyclic() error handling (Michal Swiatkowski)
- ipv6: Set errno after ip_fib_metrics_init() in ip6_route_info_create(). (Kuniyuki Iwashima)
- ipv6: Fix memleak of nhc_pcpu_rth_output in fib_check_nh_v6_gw(). (Kuniyuki Iwashima)
- net: ipv6: fix TCP GSO segmentation with NAT (Felix Fietkau)
- net: ethernet: ti: am65-cpsw: Fix NAPI registration sequence (Vignesh Raghavendra)
- ata: libata-core: Add ATA_QUIRK_NO_LPM_ON_ATI for certain Samsung SSDs (Niklas Cassel)
- tracing: tprobe-events: Fix to clean up tprobe correctly when module unload (Masami Hiramatsu (Google))
- ARM: davinci: da850: fix selecting ARCH_DAVINCI_DA8XX (David Lechner)
- accel/qaic: Fix possible data corruption in BOs > 2G (Jeffrey Hugo)
- Bluetooth: hci_event: Fix connection regression between LE and non-LE adapters (Arkadiusz Bokowy)
- Bluetooth: Fix error code in chan_alloc_skb_cb() (Dan Carpenter)
- RDMA/hns: Fix wrong value of max_sge_rd (Junxian Huang)
- RDMA/hns: Fix missing xa_destroy() (Junxian Huang)
- RDMA/hns: Fix a missing rollback in error path of hns_roce_create_qp_common() (Junxian Huang)
- RDMA/hns: Fix invalid sq params not being blocked (Junxian Huang)
- RDMA/hns: Fix unmatched condition in error path of alloc_user_qp_db() (Junxian Huang)
- RDMA/hns: Fix soft lockup during bt pages loop (Junxian Huang)
- RDMA/bnxt_re: Avoid clearing VLAN_ID mask in modify qp path (Saravanan Vajravel)
- dma-mapping: fix missing clear bdr in check_ram_in_range_map() (Baochen Qiang)
- ARM: dts: BCM5301X: Fix switch port labels of ASUS RT-AC3200 (Chester A. Unal)
- ARM: dts: BCM5301X: Fix switch port labels of ASUS RT-AC5300 (Chester A. Unal)
- ARM: dts: bcm2711: Don't mark timer regs unconfigured (Phil Elwell)
- ARM: OMAP1: select CONFIG_GENERIC_IRQ_CHIP (Arnd Bergmann)
- RDMA/mlx5: Handle errors returned from mlx5r_ib_rate() (Qasim Ijaz)
- RDMA/bnxt_re: Add missing paranthesis in map_qp_id_to_tbl_indx (Kashyap Desai)
- RDMA/rxe: Fix the failure of ibv_query_device() and ibv_query_device_ex() tests (Zhu Yanjun)
- arm64: dts: rockchip: Remove undocumented sdmmc property from lubancat-1 (Yao Zi)
- arm64: dts: bcm2712: PL011 UARTs are actually r1p5 (Phil Elwell)
- ARM: dts: bcm2711: PL011 UARTs are actually r1p5 (Phil Elwell)
- ARM: dts: bcm2711: Fix xHCI power-domain (Stefan Wahren)
- soc: imx8m: Unregister cpufreq and soc dev in cleanup path (Peng Fan)
- soc: imx8m: Use devm_* to simplify probe failure handling (Marek Vasut)
- soc: imx8m: Remove global soc_uid (Marek Vasut)
- xfrm_output: Force software GSO only in tunnel mode (Cosmin Ratiu)
- xfrm: fix tunnel mode TX datapath in packet offload mode (Alexandre Cassen)
- arm64: dts: rockchip: remove supports-cqe from rk3588 tiger (Heiko Stuebner)
- arm64: dts: rockchip: remove supports-cqe from rk3588 jaguar (Heiko Stuebner)
- arm64: dts: freescale: tqma8mpql: Fix vqmmc-supply (Alexander Stein)
- firmware: imx-scu: fix OF node leak in .probe() (Joe Hattori)
- firmware: qcom: scm: Fix error code in probe() (Dan Carpenter)
- rds: Tear down the copy-from-user cache before destroying rds_wq (Håkon Bugge)  [Orabug: 37379052]
- uek-rpm: Set uek_release variable in UEK 8 spec file (Harshit Mogalapalli)  [Orabug: 37801392]

[6.12.0-0.20.20.1]
- rds: ib: Fix NULL ptr deref in rds_ib_cq_follow_affinity (Håkon Bugge)  [Orabug: 37702023]
- scsi: mpi3mr: Task Abort EH Support (Chandrakanth Patil)  [Orabug: 37778472]
- scsi: mpi3mr: Update driver version to 8.13.0.5.50 (Ranjan Kumar)  [Orabug: 37778472]
- scsi: mpi3mr: Check admin reply queue from Watchdog (Ranjan Kumar)  [Orabug: 37778472]
- scsi: mpi3mr: Update timestamp only for supervisor IOCs (Ranjan Kumar)  [Orabug: 37778472]
- scsi: mpi3mr: Update MPI Headers to revision 35 (Ranjan Kumar)  [Orabug: 37778472]
- scsi: mpi3mr: Fix locking in an error path (Bart Van Assche)  [Orabug: 37778472]
- scsi: mpi3mr: Fix spelling mistake "skiping" -> "skipping" (Colin Ian King)  [Orabug: 37778472]
- scsi: mpi3mr: Update driver version to 8.12.1.0.50 (Ranjan Kumar)  [Orabug: 37778472]
- scsi: mpi3mr: Synchronous access b/w reset and tm thread for reply queue (Ranjan Kumar)  [Orabug: 37778472]
- scsi: mpi3mr: Support for Segmented Hardware Trace buffer (Ranjan Kumar)  [Orabug: 37778472]
- scsi: mpi3mr: Avoid reply queue full condition (Ranjan Kumar)  [Orabug: 37778472]
- scsi: mpi3mr: Update driver version to 8.12.0.3.50 (Ranjan Kumar)  [Orabug: 37778472]
- uek-rpm: Enable Intel In Field Scan as a module in UEK8 (Harshit Mogalapalli)  [Orabug: 37778856]