From el-errata at oss.oracle.com  Wed Jun  3 09:19:03 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Wed, 03 Jun 2026 02:19:03 -0700
Subject: [El-errata] ELBA-2026-50292 Oracle Linux 9 podman bug fix update
Message-ID: <mailman.119.1780478356.34.el-errata@oss.oracle.com>

Oracle Linux Bug Fix Advisory ELBA-2026-50292

http://linux.oracle.com/errata/ELBA-2026-50292.html

The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:

x86_64:
podman-5.6.0-14.0.3.el9_7.x86_64.rpm
podman-docker-5.6.0-14.0.3.el9_7.noarch.rpm
podman-plugins-5.6.0-14.0.3.el9_7.x86_64.rpm
podman-remote-5.6.0-14.0.3.el9_7.x86_64.rpm
podman-tests-5.6.0-14.0.3.el9_7.x86_64.rpm

aarch64:
podman-5.6.0-14.0.3.el9_7.aarch64.rpm
podman-docker-5.6.0-14.0.3.el9_7.noarch.rpm
podman-plugins-5.6.0-14.0.3.el9_7.aarch64.rpm
podman-remote-5.6.0-14.0.3.el9_7.aarch64.rpm
podman-tests-5.6.0-14.0.3.el9_7.aarch64.rpm


SRPMS:
http://oss.oracle.com/ol9/SRPMS-updates/podman-5.6.0-14.0.3.el9_7.src.rpm



Description of changes:

[5.6.0-14.0.3]
- Rework CNI/Netavark detection logic [JIRA: EVG-3769]



From el-errata at oss.oracle.com  Wed Jun  3 09:19:08 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Wed, 03 Jun 2026 02:19:08 -0700
Subject: [El-errata] ELBA-2026-21706-1 Oracle Linux 8 kernel bug fix update
Message-ID: <mailman.120.1780478362.34.el-errata@oss.oracle.com>

Oracle Linux Bug Fix Advisory ELBA-2026-21706-1

http://linux.oracle.com/errata/ELBA-2026-21706-1.html

The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:

x86_64:
bpftool-4.18.0-553.126.1.0.1.el8_10.x86_64.rpm
kernel-4.18.0-553.126.1.0.1.el8_10.x86_64.rpm
kernel-abi-stablelists-4.18.0-553.126.1.0.1.el8_10.noarch.rpm
kernel-core-4.18.0-553.126.1.0.1.el8_10.x86_64.rpm
kernel-cross-headers-4.18.0-553.126.1.0.1.el8_10.x86_64.rpm
kernel-debug-4.18.0-553.126.1.0.1.el8_10.x86_64.rpm
kernel-debug-core-4.18.0-553.126.1.0.1.el8_10.x86_64.rpm
kernel-debug-devel-4.18.0-553.126.1.0.1.el8_10.x86_64.rpm
kernel-debug-modules-4.18.0-553.126.1.0.1.el8_10.x86_64.rpm
kernel-debug-modules-extra-4.18.0-553.126.1.0.1.el8_10.x86_64.rpm
kernel-devel-4.18.0-553.126.1.0.1.el8_10.x86_64.rpm
kernel-doc-4.18.0-553.126.1.0.1.el8_10.noarch.rpm
kernel-headers-4.18.0-553.126.1.0.1.el8_10.x86_64.rpm
kernel-modules-4.18.0-553.126.1.0.1.el8_10.x86_64.rpm
kernel-modules-extra-4.18.0-553.126.1.0.1.el8_10.x86_64.rpm
kernel-tools-4.18.0-553.126.1.0.1.el8_10.x86_64.rpm
kernel-tools-libs-4.18.0-553.126.1.0.1.el8_10.x86_64.rpm
kernel-tools-libs-devel-4.18.0-553.126.1.0.1.el8_10.x86_64.rpm
perf-4.18.0-553.126.1.0.1.el8_10.x86_64.rpm
python3-perf-4.18.0-553.126.1.0.1.el8_10.x86_64.rpm


SRPMS:
http://oss.oracle.com/ol8/SRPMS-updates/kernel-4.18.0-553.126.1.0.1.el8_10.src.rpm



Description of changes:

[4.18.0-553.126.1.0.1]
- scsi: core: Restrict legal sdev_state transitions via sysfs (Uday Shankar) [Orabug: 37778230]

[4.18.0-553.126.1]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.3
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34750652]
- Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985772]

[4.18.0-553.126.1]
- crypto: af_alg - Work around empty control messages without MSG_MORE (Thomas Huth) [RHEL-175772]
- crypto: af_alg - Fix regression on empty requests (Thomas Huth) [RHEL-175772]
- crypto: af_alg - fix use-after-free in af_alg_accept() due to bh_lock_sock() (Thomas Huth) [RHEL-175772]
- crypto: af_alg - remove redundant initializations of sk_family (Thomas Huth) [RHEL-175772]
- crypto: af_alg - Use bh_lock_sock in sk_destruct (Thomas Huth) [RHEL-175772]
- crypto: algif_aead - fix uninitialized ctx->init (Thomas Huth) [RHEL-175772]
- crypto: algif_aead - Only wake up when ctx->more is zero (Thomas Huth) [RHEL-175772]
- crypto: algif_aead - Do not set MAY_BACKLOG on the async path (Thomas Huth) [RHEL-175772]
- crypto: null - Remove VLA usage of skcipher (Thomas Huth) [RHEL-175772]
- smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172815]
- smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172815]
- smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172815]
- smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172815]
- smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172815] {CVE-2026-31709}
- smb: client: Return a status code only as a constant in sid_to_id() (Paulo Alcantara) [RHEL-172815]
- cifs: add validation check for the fields in smb_aces (Paulo Alcantara) [RHEL-172815]
- cifs: fix incorrect validation for num_aces field of smb_acl (Paulo Alcantara) [RHEL-172815]
- smb: common: change the data type of num_aces to le16 (Paulo Alcantara) [RHEL-172815]
- netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174212] {CVE-2026-43190}
- md/bitmap: fix GPF in write_page caused by resize race (CKI Backport Bot) [RHEL-174088] {CVE-2026-43163}
- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174045] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174045] {CVE-2026-43158}
- can: raw: fix ro->uniq use-after-free in raw_rcv() (Davide Caratti) [RHEL-170753] {CVE-2026-31532}
- can: af_can: export can_sock_destruct() (Davide Caratti) [RHEL-170753] {CVE-2026-31532}
- HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172734] {CVE-2026-43051}
- netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172614] {CVE-2026-43027}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172566] {CVE-2026-43020}
- Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (David Marlin) [RHEL-165057] {CVE-2026-31408}
- Bluetooth: SCO: Fix UAF on sco_sock_timeout (David Marlin) [RHEL-165057] {CVE-2026-31408}
- Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout (David Marlin) [RHEL-165057] {CVE-2026-31408}
- Bluetooth: Init sk_peer_* on bt_sock_alloc (David Marlin) [RHEL-165057] {CVE-2026-31408}
- Bluetooth: Consolidate code around sk_alloc into a helper function (David Marlin) [RHEL-165057] {CVE-2026-31408}
- netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171149] {CVE-2026-31685}
- net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171132] {CVE-2026-31684}
- smb: client: fix mid_q_entry memleak leak with per-mid locking (Paulo Alcantara) [RHEL-164032]
- smb: client: smb: client: eliminate mid_flags field (Paulo Alcantara) [RHEL-164032]
- smb: client: add mid_counter_lock to protect the mid counter counter (Paulo Alcantara) [RHEL-164032]
- smb: client: rename server mid_lock to mid_queue_lock (Paulo Alcantara) [RHEL-164032]
- smb3: fix lock ordering potential deadlock in cifs_sync_mid_result (Paulo Alcantara) [RHEL-164032]
- smb: client: remove redundant lstrp update in negotiate protocol (Paulo Alcantara) [RHEL-164032]
- smb: client: fix race condition in negotiate timeout by using more precise timing (Paulo Alcantara) [RHEL-164032]
- smb: client: fix first command failure during re-negotiation (Paulo Alcantara) [RHEL-164032]
- smb: client: fix hang in wait_for_response() for negproto (Paulo Alcantara) [RHEL-164032]
- ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-166886] {CVE-2025-68183}
- selftests/bpf: Test outer map update operations in syscall program (Viktor Malik) [RHEL-152219]
- selftests/bpf: Add test cases for inner map (Viktor Malik) [RHEL-152219]
- bpf: prepare for more bpf syscall to be used from kernel and user space. (Viktor Malik) [RHEL-152219]
- bpf: Optimize the free of inner map (Viktor Malik) [RHEL-152219]
- bpf: Defer the free of inner map when necessary (Viktor Malik) [RHEL-152219]
- bpf: Set need_defer as false when clearing fd array during map free (Viktor Malik) [RHEL-152219]
- bpf: Add map and need_defer parameters to .map_fd_put_ptr() (Viktor Malik) [RHEL-152219]
- bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers (Viktor Malik) [RHEL-152219]
- netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166981] {CVE-2026-23455}
- ALSA: firewire-motu: fix buffer overflow in hwdep read for DSP events (CKI Backport Bot) [RHEL-166960] {CVE-2025-68347}
- RDMA/umad: Reject negative data_len in ib_umad_write (Kamal Heib) [RHEL-156872] {CVE-2026-23243}
- Bluetooth: mgmt: remove NULL check in add_ext_adv_params_complete() (David Marlin) [RHEL-122890]
- Bluetooth: MGMT: Fix list corruption and UAF in command complete handlers (David Marlin) [RHEL-122890]
- Bluetooth: MGMT: Fix memory leak in set_ssp_complete (David Marlin) [RHEL-122890]
- Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once (David Marlin) [RHEL-122890]
- Bluetooth: hci_sync: Avoid use-after-free in dbg for hci_add_adv_monitor() (David Marlin) [RHEL-122890]
- Bluetooth: ISO: don't try to remove CIG if there are bound CIS left (David Marlin) [RHEL-122890]
- Bluetooth: hci_sync: Don't double print name in add/remove adv_monitor (David Marlin) [RHEL-122890]
- Bluetooth: hci_sync: Avoid use-after-free in dbg for hci_remove_adv_monitor() (David Marlin) [RHEL-122890]
- Bluetooth: hci_event: Fix Invalid wait context (David Marlin) [RHEL-122890]
- Bluetooth: hci_sync: Fix use HCI_OP_LE_READ_BUFFER_SIZE_V2 (David Marlin) [RHEL-122890]
- Bluetooth: hci_conn: Fix crash on hci_create_cis_sync (David Marlin) [RHEL-122890]
- Bluetooth: hci_conn: Fix not restoring ISO buffer count on disconnect (David Marlin) [RHEL-122890]
- Bluetooth: Fix HCIGETDEVINFO regression (David Marlin) [RHEL-122890]
- Bluetooth: hci_sync: Fix hci_read_buffer_size_sync (David Marlin) [RHEL-122890]
- Bluetooth: hci_sync: fix double mgmt_pending_free() in remove_adv_monitor() (David Marlin) [RHEL-122890]
- Bluetooth: hci_conn: Fix updating ISO QoS PHY (David Marlin) [RHEL-122890]
- Bluetooth: MGMT: Fix dangling pointer on mgmt_add_adv_patterns_monitor_complete (David Marlin) [RHEL-122890]
- Bluetooth: MGMT: Fix possible UAFs (David Marlin) [RHEL-122890] {CVE-2025-39981}
- Bluetooth: hci_sync: fix set_local_name race condition (David Marlin) [RHEL-122890] {CVE-2025-39981}
- Bluetooth: hci_sync: Add helper functions to manipulate cmd_sync queue (David Marlin) [RHEL-122890]
- Bluetooth: Fix race condition in hci_cmd_sync_clear (David Marlin) [RHEL-122890]
- Bluetooth: hci_sock: Prevent race in socket write iter and sock bind (David Marlin) [RHEL-122890]
- Bluetooth: MGMT: Protect mgmt_pending list with its own lock (David Marlin) [RHEL-122890]
- Bluetooth: MGMT: Fix sparse errors (David Marlin) [RHEL-122890]
- Bluetooth: MGMT: Fix possible crash on mgmt_index_removed (David Marlin) [RHEL-122890]
- Bluetooth: Add initial implementation of CIS connections (David Marlin) [RHEL-122890]
- Bluetooth: hci_core: Fix possible buffer overflow (David Marlin) [RHEL-122890]
- Bluetooth: Keep MGMT pending queue ordered FIFO (David Marlin) [RHEL-122890]
- Bluetooth: MGMT: Remove unused mgmt_pending_find_data (David Marlin) [RHEL-122890]
- Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete (David Marlin) [RHEL-122890] {CVE-2025-39981}
- Bluetooth: MGMT: Fix slab-use-after-free Read in mgmt_remove_adv_monitor_sync (David Marlin) [RHEL-122890]
- Bluetooth: hci_sync: Using hci_cmd_sync_submit when removing Adv Monitor (David Marlin) [RHEL-122890]
- Bluetooth: MGMT: Fix possible deadlocks (David Marlin) [RHEL-122890] {CVE-2025-39981}
- Bluetooth: MGMT: Fix slab-use-after-free Read in set_powered_sync (David Marlin) [RHEL-122890] {CVE-2025-39981}
- Bluetooth: mgmt: remove NULL check in mgmt_set_connectable_complete() (David Marlin) [RHEL-122890] {CVE-2025-39981}
- Bluetooth: hci_sync: Refactor remove Adv Monitor (David Marlin) [RHEL-122890] {CVE-2025-39981}
- Bluetooth: hci_sync: Refactor add Adv Monitor (David Marlin) [RHEL-122890] {CVE-2025-39981}
- Bluetooth: msft: Move code snippet to correct location (David Marlin) [RHEL-122890]
- Bluetooth: msft: Clear tracked devices on resume (David Marlin) [RHEL-122890] {CVE-2025-39981}
- Bluetooth: mgmt: Add MGMT Adv Monitor Device Found/Lost events (David Marlin) [RHEL-122890] {CVE-2025-39981}
- Bluetooth: msft: Handle MSFT Monitor Device Event (David Marlin) [RHEL-122890] {CVE-2025-39981}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157322] {CVE-2026-23270}
- libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-142093] {CVE-2025-71116}



From el-errata at oss.oracle.com  Wed Jun  3 09:19:13 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Wed, 03 Jun 2026 02:19:13 -0700
Subject: [El-errata] ELSA-2026-21706 Important: Oracle Linux 8 kernel
 security update
Message-ID: <mailman.121.1780478370.34.el-errata@oss.oracle.com>

Oracle Linux Security Advisory ELSA-2026-21706

http://linux.oracle.com/errata/ELSA-2026-21706.html

The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:

x86_64:
bpftool-4.18.0-553.126.1.el8_10.x86_64.rpm
kernel-4.18.0-553.126.1.el8_10.x86_64.rpm
kernel-abi-stablelists-4.18.0-553.126.1.el8_10.noarch.rpm
kernel-core-4.18.0-553.126.1.el8_10.x86_64.rpm
kernel-cross-headers-4.18.0-553.126.1.el8_10.x86_64.rpm
kernel-debug-4.18.0-553.126.1.el8_10.x86_64.rpm
kernel-debug-core-4.18.0-553.126.1.el8_10.x86_64.rpm
kernel-debug-devel-4.18.0-553.126.1.el8_10.x86_64.rpm
kernel-debug-modules-4.18.0-553.126.1.el8_10.x86_64.rpm
kernel-debug-modules-extra-4.18.0-553.126.1.el8_10.x86_64.rpm
kernel-devel-4.18.0-553.126.1.el8_10.x86_64.rpm
kernel-doc-4.18.0-553.126.1.el8_10.noarch.rpm
kernel-headers-4.18.0-553.126.1.el8_10.x86_64.rpm
kernel-modules-4.18.0-553.126.1.el8_10.x86_64.rpm
kernel-modules-extra-4.18.0-553.126.1.el8_10.x86_64.rpm
kernel-tools-4.18.0-553.126.1.el8_10.x86_64.rpm
kernel-tools-libs-4.18.0-553.126.1.el8_10.x86_64.rpm
kernel-tools-libs-devel-4.18.0-553.126.1.el8_10.x86_64.rpm
perf-4.18.0-553.126.1.el8_10.x86_64.rpm
python3-perf-4.18.0-553.126.1.el8_10.x86_64.rpm

aarch64:
bpftool-4.18.0-553.126.1.el8_10.aarch64.rpm
kernel-cross-headers-4.18.0-553.126.1.el8_10.aarch64.rpm
kernel-headers-4.18.0-553.126.1.el8_10.aarch64.rpm
kernel-tools-4.18.0-553.126.1.el8_10.aarch64.rpm
kernel-tools-libs-4.18.0-553.126.1.el8_10.aarch64.rpm
kernel-tools-libs-devel-4.18.0-553.126.1.el8_10.aarch64.rpm
perf-4.18.0-553.126.1.el8_10.aarch64.rpm
python3-perf-4.18.0-553.126.1.el8_10.aarch64.rpm


SRPMS:
http://oss.oracle.com/ol8/SRPMS-updates/kernel-4.18.0-553.126.1.el8_10.src.rpm

Related CVEs:

CVE-2025-39981
CVE-2025-68183
CVE-2025-68347
CVE-2025-71116
CVE-2026-23243
CVE-2026-23270
CVE-2026-23455
CVE-2026-31408
CVE-2026-31532
CVE-2026-31684
CVE-2026-31685
CVE-2026-31709
CVE-2026-43020
CVE-2026-43027
CVE-2026-43051
CVE-2026-43158
CVE-2026-43163
CVE-2026-43190




Description of changes:

[4.18.0-553.126.1]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.3
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34750652]
- Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985772]

[4.18.0-553.126.1]
- crypto: af_alg - Work around empty control messages without MSG_MORE (Thomas Huth) [RHEL-175772]
- crypto: af_alg - Fix regression on empty requests (Thomas Huth) [RHEL-175772]
- crypto: af_alg - fix use-after-free in af_alg_accept() due to bh_lock_sock() (Thomas Huth) [RHEL-175772]
- crypto: af_alg - remove redundant initializations of sk_family (Thomas Huth) [RHEL-175772]
- crypto: af_alg - Use bh_lock_sock in sk_destruct (Thomas Huth) [RHEL-175772]
- crypto: algif_aead - fix uninitialized ctx->init (Thomas Huth) [RHEL-175772]
- crypto: algif_aead - Only wake up when ctx->more is zero (Thomas Huth) [RHEL-175772]
- crypto: algif_aead - Do not set MAY_BACKLOG on the async path (Thomas Huth) [RHEL-175772]
- crypto: null - Remove VLA usage of skcipher (Thomas Huth) [RHEL-175772]
- smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172815]
- smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172815]
- smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172815]
- smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172815]
- smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172815] {CVE-2026-31709}
- smb: client: Return a status code only as a constant in sid_to_id() (Paulo Alcantara) [RHEL-172815]
- cifs: add validation check for the fields in smb_aces (Paulo Alcantara) [RHEL-172815]
- cifs: fix incorrect validation for num_aces field of smb_acl (Paulo Alcantara) [RHEL-172815]
- smb: common: change the data type of num_aces to le16 (Paulo Alcantara) [RHEL-172815]
- netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174212] {CVE-2026-43190}
- md/bitmap: fix GPF in write_page caused by resize race (CKI Backport Bot) [RHEL-174088] {CVE-2026-43163}
- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174045] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174045] {CVE-2026-43158}
- can: raw: fix ro->uniq use-after-free in raw_rcv() (Davide Caratti) [RHEL-170753] {CVE-2026-31532}
- can: af_can: export can_sock_destruct() (Davide Caratti) [RHEL-170753] {CVE-2026-31532}
- HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172734] {CVE-2026-43051}
- netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172614] {CVE-2026-43027}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172566] {CVE-2026-43020}
- Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (David Marlin) [RHEL-165057] {CVE-2026-31408}
- Bluetooth: SCO: Fix UAF on sco_sock_timeout (David Marlin) [RHEL-165057] {CVE-2026-31408}
- Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout (David Marlin) [RHEL-165057] {CVE-2026-31408}
- Bluetooth: Init sk_peer_* on bt_sock_alloc (David Marlin) [RHEL-165057] {CVE-2026-31408}
- Bluetooth: Consolidate code around sk_alloc into a helper function (David Marlin) [RHEL-165057] {CVE-2026-31408}
- netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171149] {CVE-2026-31685}
- net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171132] {CVE-2026-31684}
- smb: client: fix mid_q_entry memleak leak with per-mid locking (Paulo Alcantara) [RHEL-164032]
- smb: client: smb: client: eliminate mid_flags field (Paulo Alcantara) [RHEL-164032]
- smb: client: add mid_counter_lock to protect the mid counter counter (Paulo Alcantara) [RHEL-164032]
- smb: client: rename server mid_lock to mid_queue_lock (Paulo Alcantara) [RHEL-164032]
- smb3: fix lock ordering potential deadlock in cifs_sync_mid_result (Paulo Alcantara) [RHEL-164032]
- smb: client: remove redundant lstrp update in negotiate protocol (Paulo Alcantara) [RHEL-164032]
- smb: client: fix race condition in negotiate timeout by using more precise timing (Paulo Alcantara) [RHEL-164032]
- smb: client: fix first command failure during re-negotiation (Paulo Alcantara) [RHEL-164032]
- smb: client: fix hang in wait_for_response() for negproto (Paulo Alcantara) [RHEL-164032]
- ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-166886] {CVE-2025-68183}
- selftests/bpf: Test outer map update operations in syscall program (Viktor Malik) [RHEL-152219]
- selftests/bpf: Add test cases for inner map (Viktor Malik) [RHEL-152219]
- bpf: prepare for more bpf syscall to be used from kernel and user space. (Viktor Malik) [RHEL-152219]
- bpf: Optimize the free of inner map (Viktor Malik) [RHEL-152219]
- bpf: Defer the free of inner map when necessary (Viktor Malik) [RHEL-152219]
- bpf: Set need_defer as false when clearing fd array during map free (Viktor Malik) [RHEL-152219]
- bpf: Add map and need_defer parameters to .map_fd_put_ptr() (Viktor Malik) [RHEL-152219]
- bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers (Viktor Malik) [RHEL-152219]
- netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166981] {CVE-2026-23455}
- ALSA: firewire-motu: fix buffer overflow in hwdep read for DSP events (CKI Backport Bot) [RHEL-166960] {CVE-2025-68347}
- RDMA/umad: Reject negative data_len in ib_umad_write (Kamal Heib) [RHEL-156872] {CVE-2026-23243}
- Bluetooth: mgmt: remove NULL check in add_ext_adv_params_complete() (David Marlin) [RHEL-122890]
- Bluetooth: MGMT: Fix list corruption and UAF in command complete handlers (David Marlin) [RHEL-122890]
- Bluetooth: MGMT: Fix memory leak in set_ssp_complete (David Marlin) [RHEL-122890]
- Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once (David Marlin) [RHEL-122890]
- Bluetooth: hci_sync: Avoid use-after-free in dbg for hci_add_adv_monitor() (David Marlin) [RHEL-122890]
- Bluetooth: ISO: don't try to remove CIG if there are bound CIS left (David Marlin) [RHEL-122890]
- Bluetooth: hci_sync: Don't double print name in add/remove adv_monitor (David Marlin) [RHEL-122890]
- Bluetooth: hci_sync: Avoid use-after-free in dbg for hci_remove_adv_monitor() (David Marlin) [RHEL-122890]
- Bluetooth: hci_event: Fix Invalid wait context (David Marlin) [RHEL-122890]
- Bluetooth: hci_sync: Fix use HCI_OP_LE_READ_BUFFER_SIZE_V2 (David Marlin) [RHEL-122890]
- Bluetooth: hci_conn: Fix crash on hci_create_cis_sync (David Marlin) [RHEL-122890]
- Bluetooth: hci_conn: Fix not restoring ISO buffer count on disconnect (David Marlin) [RHEL-122890]
- Bluetooth: Fix HCIGETDEVINFO regression (David Marlin) [RHEL-122890]
- Bluetooth: hci_sync: Fix hci_read_buffer_size_sync (David Marlin) [RHEL-122890]
- Bluetooth: hci_sync: fix double mgmt_pending_free() in remove_adv_monitor() (David Marlin) [RHEL-122890]
- Bluetooth: hci_conn: Fix updating ISO QoS PHY (David Marlin) [RHEL-122890]
- Bluetooth: MGMT: Fix dangling pointer on mgmt_add_adv_patterns_monitor_complete (David Marlin) [RHEL-122890]
- Bluetooth: MGMT: Fix possible UAFs (David Marlin) [RHEL-122890] {CVE-2025-39981}
- Bluetooth: hci_sync: fix set_local_name race condition (David Marlin) [RHEL-122890] {CVE-2025-39981}
- Bluetooth: hci_sync: Add helper functions to manipulate cmd_sync queue (David Marlin) [RHEL-122890]
- Bluetooth: Fix race condition in hci_cmd_sync_clear (David Marlin) [RHEL-122890]
- Bluetooth: hci_sock: Prevent race in socket write iter and sock bind (David Marlin) [RHEL-122890]
- Bluetooth: MGMT: Protect mgmt_pending list with its own lock (David Marlin) [RHEL-122890]
- Bluetooth: MGMT: Fix sparse errors (David Marlin) [RHEL-122890]
- Bluetooth: MGMT: Fix possible crash on mgmt_index_removed (David Marlin) [RHEL-122890]
- Bluetooth: Add initial implementation of CIS connections (David Marlin) [RHEL-122890]
- Bluetooth: hci_core: Fix possible buffer overflow (David Marlin) [RHEL-122890]
- Bluetooth: Keep MGMT pending queue ordered FIFO (David Marlin) [RHEL-122890]
- Bluetooth: MGMT: Remove unused mgmt_pending_find_data (David Marlin) [RHEL-122890]
- Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete (David Marlin) [RHEL-122890] {CVE-2025-39981}
- Bluetooth: MGMT: Fix slab-use-after-free Read in mgmt_remove_adv_monitor_sync (David Marlin) [RHEL-122890]
- Bluetooth: hci_sync: Using hci_cmd_sync_submit when removing Adv Monitor (David Marlin) [RHEL-122890]
- Bluetooth: MGMT: Fix possible deadlocks (David Marlin) [RHEL-122890] {CVE-2025-39981}
- Bluetooth: MGMT: Fix slab-use-after-free Read in set_powered_sync (David Marlin) [RHEL-122890] {CVE-2025-39981}
- Bluetooth: mgmt: remove NULL check in mgmt_set_connectable_complete() (David Marlin) [RHEL-122890] {CVE-2025-39981}
- Bluetooth: hci_sync: Refactor remove Adv Monitor (David Marlin) [RHEL-122890] {CVE-2025-39981}
- Bluetooth: hci_sync: Refactor add Adv Monitor (David Marlin) [RHEL-122890] {CVE-2025-39981}
- Bluetooth: msft: Move code snippet to correct location (David Marlin) [RHEL-122890]
- Bluetooth: msft: Clear tracked devices on resume (David Marlin) [RHEL-122890] {CVE-2025-39981}
- Bluetooth: mgmt: Add MGMT Adv Monitor Device Found/Lost events (David Marlin) [RHEL-122890] {CVE-2025-39981}
- Bluetooth: msft: Handle MSFT Monitor Device Event (David Marlin) [RHEL-122890] {CVE-2025-39981}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157322] {CVE-2026-23270}
- libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-142093] {CVE-2025-71116}



From el-errata at oss.oracle.com  Wed Jun  3 09:19:17 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Wed, 03 Jun 2026 02:19:17 -0700
Subject: [El-errata] ELSA-2026-22315 Moderate: Oracle Linux 8
 compat-openssl10 security update
Message-ID: <mailman.122.1780478411.34.el-errata@oss.oracle.com>

Oracle Linux Security Advisory ELSA-2026-22315

http://linux.oracle.com/errata/ELSA-2026-22315.html

The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:

x86_64:
compat-openssl10-1.0.2o-4.el8_10.2.i686.rpm
compat-openssl10-1.0.2o-4.el8_10.2.x86_64.rpm

aarch64:
compat-openssl10-1.0.2o-4.el8_10.2.aarch64.rpm


SRPMS:
http://oss.oracle.com/ol8/SRPMS-updates/compat-openssl10-1.0.2o-4.el8_10.2.src.rpm

Related CVEs:

CVE-2026-28390




Description of changes:

[1.1.0.2o-4.2]
- Fixes CVE-2026-28390: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing
  Resolves: RHEL-165754



From el-errata at oss.oracle.com  Wed Jun  3 09:19:16 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Wed, 03 Jun 2026 02:19:16 -0700
Subject: [El-errata] ELSA-2026-22140 Important: Oracle Linux 8 httpd:2.4
 security update
Message-ID: <mailman.123.1780478414.34.el-errata@oss.oracle.com>

Oracle Linux Security Advisory ELSA-2026-22140

http://linux.oracle.com/errata/ELSA-2026-22140.html

The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:

x86_64:
httpd-2.4.37-65.0.1.module+el8.10.0+90899+db89cbcc.7.x86_64.rpm
httpd-devel-2.4.37-65.0.1.module+el8.10.0+90899+db89cbcc.7.x86_64.rpm
httpd-filesystem-2.4.37-65.0.1.module+el8.10.0+90899+db89cbcc.7.noarch.rpm
httpd-manual-2.4.37-65.0.1.module+el8.10.0+90899+db89cbcc.7.noarch.rpm
httpd-tools-2.4.37-65.0.1.module+el8.10.0+90899+db89cbcc.7.x86_64.rpm
mod_http2-1.15.7-10.module+el8.10.0+90899+db89cbcc.5.x86_64.rpm
mod_ldap-2.4.37-65.0.1.module+el8.10.0+90899+db89cbcc.7.x86_64.rpm
mod_md-2.0.8-8.module+el8.10.0+90899+db89cbcc.2.x86_64.rpm
mod_proxy_html-2.4.37-65.0.1.module+el8.10.0+90899+db89cbcc.7.x86_64.rpm
mod_session-2.4.37-65.0.1.module+el8.10.0+90899+db89cbcc.7.x86_64.rpm
mod_ssl-2.4.37-65.0.1.module+el8.10.0+90899+db89cbcc.7.x86_64.rpm

aarch64:
httpd-2.4.37-65.0.1.module+el8.10.0+90899+db89cbcc.7.aarch64.rpm
httpd-devel-2.4.37-65.0.1.module+el8.10.0+90899+db89cbcc.7.aarch64.rpm
httpd-filesystem-2.4.37-65.0.1.module+el8.10.0+90899+db89cbcc.7.noarch.rpm
httpd-manual-2.4.37-65.0.1.module+el8.10.0+90899+db89cbcc.7.noarch.rpm
httpd-tools-2.4.37-65.0.1.module+el8.10.0+90899+db89cbcc.7.aarch64.rpm
mod_http2-1.15.7-10.module+el8.10.0+90899+db89cbcc.5.aarch64.rpm
mod_ldap-2.4.37-65.0.1.module+el8.10.0+90899+db89cbcc.7.aarch64.rpm
mod_md-2.0.8-8.module+el8.10.0+90899+db89cbcc.2.aarch64.rpm
mod_proxy_html-2.4.37-65.0.1.module+el8.10.0+90899+db89cbcc.7.aarch64.rpm
mod_session-2.4.37-65.0.1.module+el8.10.0+90899+db89cbcc.7.aarch64.rpm
mod_ssl-2.4.37-65.0.1.module+el8.10.0+90899+db89cbcc.7.aarch64.rpm


SRPMS:
http://oss.oracle.com/ol8/SRPMS-updates/httpd-2.4.37-65.0.1.module+el8.10.0+90899+db89cbcc.7.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates/mod_http2-1.15.7-10.module+el8.10.0+90899+db89cbcc.5.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates/mod_md-2.0.8-8.module+el8.10.0+90899+db89cbcc.2.src.rpm

Related CVEs:

CVE-2025-53020
CVE-2026-28780
CVE-2026-33007
CVE-2026-33857
CVE-2026-34032
CVE-2026-34059




Description of changes:

httpd
[2.4.37-65.0.1.7]
- Replace index.html with Oracle's index page oracle_index.html

mod_http2
[1.15.7-10.5]
- Resolves: RHEL-166277 - httpd:2.4/httpd: Apache HTTP Server: HTTP/2 DoS by
  Memory Increase (CVE-2025-53020)

mod_md
[1:2.0.8-8.2]
- Resolves: RHEL-134487 - httpd:2.4/httpd: Apache HTTP Server: mod_md (ACME),
  unintended retry intervals (CVE-2025-55753)



From el-errata at oss.oracle.com  Wed Jun  3 12:56:18 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Wed, 03 Jun 2026 05:56:18 -0700
Subject: [El-errata] ELSA-2026-20611 Important: Oracle Linux 8 gnutls
 security update
Message-ID: <mailman.126.1780491391.34.el-errata@oss.oracle.com>

Oracle Linux Security Advisory ELSA-2026-20611

http://linux.oracle.com/errata/ELSA-2026-20611.html

The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:

x86_64:
gnutls-3.6.16-8.el8_10.6.i686.rpm
gnutls-3.6.16-8.el8_10.6.x86_64.rpm
gnutls-c++-3.6.16-8.el8_10.6.i686.rpm
gnutls-c++-3.6.16-8.el8_10.6.x86_64.rpm
gnutls-dane-3.6.16-8.el8_10.6.i686.rpm
gnutls-dane-3.6.16-8.el8_10.6.x86_64.rpm
gnutls-devel-3.6.16-8.el8_10.6.i686.rpm
gnutls-devel-3.6.16-8.el8_10.6.x86_64.rpm
gnutls-utils-3.6.16-8.el8_10.6.x86_64.rpm

aarch64:
gnutls-3.6.16-8.el8_10.6.aarch64.rpm
gnutls-c++-3.6.16-8.el8_10.6.aarch64.rpm
gnutls-dane-3.6.16-8.el8_10.6.aarch64.rpm
gnutls-devel-3.6.16-8.el8_10.6.aarch64.rpm
gnutls-utils-3.6.16-8.el8_10.6.aarch64.rpm


SRPMS:
http://oss.oracle.com/ol8/SRPMS-updates/gnutls-3.6.16-8.el8_10.6.src.rpm

Related CVEs:

CVE-2026-3833
CVE-2026-5260
CVE-2026-33845
CVE-2026-33846
CVE-2026-42009
CVE-2026-42010
CVE-2026-42011
CVE-2026-42012
CVE-2026-42013
CVE-2026-42014
CVE-2026-42015




Description of changes:

[3.6.16-8.6]
- Fix CVE-2026-33846 (DTLS fragment reassembly, High, heap overwrite)
- Fix CVE-2026-42009 (DTLS fragment reassembly, High, undefined behaviour)
- Fix CVE-2026-33845 (DTLS fragment reassembly, High, heap overread)
- Fix CVE-2026-42010 (PSK authentication, High, authentication bypass)
- Fix CVE-2026-3833 (Name constraints, Medium, name constraint bypass)
- Fix CVE-2026-42011 (Name constraints, Medium, name constraint bypass)
- Fix CVE-2026-42012 (CN fallback, Medium, certificate misuse)
- Fix CVE-2026-42013 (CN fallback, Medium, certificate misuse)
- Fix CVE-2026-42014 (PKCS#11 PIN change, Medium, use-after-free)
- Fix CVE-2026-5260 (PKCS#11 RSA, Medium, heap overread)
- Fix CVE-2026-42015 (PKCS#12 appending, Low, heap overwrite)
- Fix upstream security issue #1808 (PSK rehandshake)
- Fix upstream security issue #1810 (EKU OID prefix match)
- Fix upstream security issue #1818 (RSA correctness, OpenSSL format import)
- Fix upstream security issue #1819 (PKCS#11 trust removal error path)
- Fix upstream security issue #1817 (session parameter loading robustness)



From el-errata at oss.oracle.com  Thu Jun  4 09:55:10 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Thu, 04 Jun 2026 02:55:10 -0700
Subject: [El-errata] ELSA-2026-50299 Important: Oracle Linux 7 Unbreakable
 Enterprise kernel security update
Message-ID: <mailman.138.1780566926.34.el-errata@oss.oracle.com>

Oracle Linux Security Advisory ELSA-2026-50299

http://linux.oracle.com/errata/ELSA-2026-50299.html

The following updated rpms for Oracle Linux 7 have been uploaded to the Unbreakable Linux Network:

x86_64:
kernel-uek-5.4.17-2136.356.4.1.el7uek.x86_64.rpm
kernel-uek-container-5.4.17-2136.356.4.1.el7uek.x86_64.rpm
kernel-uek-container-debug-5.4.17-2136.356.4.1.el7uek.x86_64.rpm
kernel-uek-debug-5.4.17-2136.356.4.1.el7uek.x86_64.rpm
kernel-uek-debug-devel-5.4.17-2136.356.4.1.el7uek.x86_64.rpm
kernel-uek-devel-5.4.17-2136.356.4.1.el7uek.x86_64.rpm
kernel-uek-doc-5.4.17-2136.356.4.1.el7uek.noarch.rpm
kernel-uek-tools-5.4.17-2136.356.4.1.el7uek.x86_64.rpm


SRPMS:
http://oss.oracle.com/ol7/SRPMS-updates/kernel-uek-5.4.17-2136.356.4.1.el7uek.src.rpm

Related CVEs:

CVE-2025-54518
CVE-2026-23193
CVE-2026-23216
CVE-2026-31402
CVE-2026-43284
CVE-2026-43503
CVE-2026-46300
CVE-2026-46333




Description of changes:

[5.4.17-2136.356.4.1]
- smb: client: reject userspace cifs.spnego descriptions (Asim Viladi Oglu Manizada)  [Orabug: 39463669]

[5.4.17-2136.356.4]
- tun: free page on build_skb failure in tun_xdp_one() (Weiming Shi) [Orabug: 39429147]
- tap: free page on error paths in tap_get_user_xdp() (Weiming Shi) [Orabug: 39429147]
- tun: free page on short-frame rejection in tun_xdp_one() (Weiming Shi) [Orabug: 39429147]

[5.4.17-2136.356.3]
- ptrace: slightly saner 'get_dumpable()' logic (Linus Torvalds) [Orabug: 39384275,39391459] {CVE-2026-46333}
- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Hyunwoo Kim) [Orabug: 39368828,39441326] {CVE-2026-43503,CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (William Bowling) [Orabug: 39368828] {CVE-2026-46300}

[5.4.17-2136.356.2]
- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Jeff Layton) [Orabug: 39167617,39368718] {CVE-2026-31402}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (Maurizio Lombardi) [Orabug: 38985173,39368732] {CVE-2026-23216}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (Maurizio Lombardi) [Orabug: 38970455,39368774] {CVE-2026-23193}
- xfrm: esp: avoid in-place decrypt on shared skb frags (Kuan-Ting Chen) [Orabug: 39334580,39367147] {CVE-2026-43284}
- x86/CPU/AMD: Add a fix for AMD-SB-7052 (Prathyushi Nangia) [Orabug: 39218897] {CVE-2025-54518}

[5.4.17-2136.356.1]
- arm64/kvm: Include linux/random.h in trng.c (Siddh Raman Pant) [Orabug: 39327096]
- i2c: designware: Disable TX_EMPTY irq while waiting for block length byte (Tam Nguyen) [Orabug: 39174662]
- i2c: designware: Handle invalid SMBus block data response length value (Tam Nguyen) [Orabug: 39174662]
- i2c: designware: fix __i2c_dw_disable() in case master is holding SCL low (Yann Sionneau) [Orabug: 39174662]

[5.4.17-2136.355.3]
- crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [Orabug: 39250687,39331106] {CVE-2026-43077}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [Orabug: 39250687,39331111] {CVE-2026-43078}
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [Orabug: 39250687]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [Orabug: 39250687,39300911] {CVE-2026-43033}
- crypto: authenc - use memcpy_sglist() instead of null skcipher (Eric Biggers) [Orabug: 39250687]
- crypto: algif_aead - snapshot IV for async AEAD requests (Douya Le) [Orabug: 39250687,39452217] {CVE-2026-46028}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [Orabug: 39250687,39283868,39292250] {CVE-2026-31431}
- crypto: algif_aead - use memcpy_sglist() instead of null skcipher (Eric Biggers) [Orabug: 39250687] {CVE-2026-31431}
- crypto: scatterwalk - Backport memcpy_sglist() (Eric Biggers) [Orabug: 39250687]
- crypto: doc - fix kernel-doc notation in chacha.c and af_alg.c (Randy Dunlap) [Orabug: 39250687]

[5.4.17-2136.355.2]
- Revert "rds: Drop rds conn in connect worker if not in down state." (Alok Tiwari) [Orabug: 39253770]
- x86/CPU: Fix FPDSS on Zen1 (Siddh Raman Pant) [Orabug: 39241225,39273723] {CVE-2026-31628}
- SUNRPC: svcauth_gss: avoid NULL deref on zero length gss_token in gss_read_proxy_verf (Joshua Rogers) [Orabug: 38852342] {CVE-2025-71120}

[5.4.17-2136.355.1]
- net/sched: Enforce that teql can only be used as root qdisc (Jamal Hadi Salim) [Orabug: 38930950] {CVE-2026-23074}

[5.4.17-2136.354.4]
- macvlan: fix possible UAF in macvlan_forward_source() (Eric Dumazet) [Orabug: 38887731] {CVE-2026-23001}
- macvlan: Use 'hash' iterators to simplify code (Christophe Jaillet) [Orabug: 38887731] {CVE-2026-23001}
- macvlan: Add nodst option to macvlan type source (Jethro Beekman) [Orabug: 38887731] {CVE-2026-23001}
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Eric Dumazet) [Orabug: 38970510,39188399] {CVE-2026-23209,CVE-2026-23273}
- macvlan: fix error recovery in macvlan_common_newlink() (Eric Dumazet) [Orabug: 38970510] {CVE-2026-23209}

[5.4.17-2136.354.3]
- io_uring: fix filename leak in __io_openat_prep() (Prithvi Tambewagh) [Orabug: 39064937] {CVE-2025-68814}
- rds: Drop rds conn in connect worker if not in down state. (Rohit Nair) [Orabug: 39045035]



From el-errata at oss.oracle.com  Thu Jun  4 09:55:15 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Thu, 04 Jun 2026 02:55:15 -0700
Subject: [El-errata] ELBA-2026-50296 Oracle Linux 8  sos  bug fix update
Message-ID: <mailman.139.1780566929.34.el-errata@oss.oracle.com>

Oracle Linux Bug Fix Advisory ELBA-2026-50296

http://linux.oracle.com/errata/ELBA-2026-50296.html

The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:

x86_64:
sos-4.10.2-2.0.2.el8_10.noarch.rpm
sos-audit-4.10.2-2.0.2.el8_10.noarch.rpm

aarch64:
sos-4.10.2-2.0.2.el8_10.noarch.rpm
sos-audit-4.10.2-2.0.2.el8_10.noarch.rpm


SRPMS:
http://oss.oracle.com/ol8/SRPMS-updates/sos-4.10.2-2.0.2.el8_10.src.rpm



Description of changes:

[4.10.2-2.0.2]
- Add optional proc/ and sys/ regular file de-duplication step and reduplication binary [Orabug: 38765115]



From el-errata at oss.oracle.com  Thu Jun  4 09:55:17 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Thu, 04 Jun 2026 02:55:17 -0700
Subject: [El-errata] ELBA-2026-50300 Oracle Linux 8  crash  bug fix update
Message-ID: <mailman.140.1780566932.34.el-errata@oss.oracle.com>

Oracle Linux Bug Fix Advisory ELBA-2026-50300

http://linux.oracle.com/errata/ELBA-2026-50300.html

The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:

x86_64:
crash-9.0.2-1.0.1.el8.x86_64.rpm
crash-devel-9.0.2-1.0.1.el8.i686.rpm
crash-devel-9.0.2-1.0.1.el8.x86_64.rpm

aarch64:
crash-9.0.2-1.0.1.el8.aarch64.rpm
crash-devel-9.0.2-1.0.1.el8.aarch64.rpm


SRPMS:
http://oss.oracle.com/ol8/SRPMS-updates/crash-9.0.2-1.0.1.el8.src.rpm



Description of changes:

[9.0.2-1.0.1]
- Update crash tool to latest version 9.0.2 [Orabug: 39402913]



From el-errata at oss.oracle.com  Thu Jun  4 09:55:19 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Thu, 04 Jun 2026 02:55:19 -0700
Subject: [El-errata] ELSA-2026-50299 Important: Oracle Linux 8 Unbreakable
 Enterprise kernel security update
Message-ID: <mailman.141.1780566934.34.el-errata@oss.oracle.com>

Oracle Linux Security Advisory ELSA-2026-50299

http://linux.oracle.com/errata/ELSA-2026-50299.html

The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:


aarch64:
kernel-uek-5.4.17-2136.356.4.1.el8uek.aarch64.rpm
kernel-uek-debug-5.4.17-2136.356.4.1.el8uek.aarch64.rpm
kernel-uek-debug-devel-5.4.17-2136.356.4.1.el8uek.aarch64.rpm
kernel-uek-devel-5.4.17-2136.356.4.1.el8uek.aarch64.rpm
kernel-uek-doc-5.4.17-2136.356.4.1.el8uek.noarch.rpm


SRPMS:
http://oss.oracle.com/ol8/SRPMS-updates/kernel-uek-5.4.17-2136.356.4.1.el8uek.src.rpm

Related CVEs:

CVE-2025-54518
CVE-2026-23193
CVE-2026-23216
CVE-2026-31402
CVE-2026-43284
CVE-2026-43503
CVE-2026-46300
CVE-2026-46333




Description of changes:

[5.4.17-2136.356.4.1]
- smb: client: reject userspace cifs.spnego descriptions (Asim Viladi Oglu Manizada)  [Orabug: 39463669]

[5.4.17-2136.356.4]
- tun: free page on build_skb failure in tun_xdp_one() (Weiming Shi) [Orabug: 39429147]
- tap: free page on error paths in tap_get_user_xdp() (Weiming Shi) [Orabug: 39429147]
- tun: free page on short-frame rejection in tun_xdp_one() (Weiming Shi) [Orabug: 39429147]

[5.4.17-2136.356.3]
- ptrace: slightly saner 'get_dumpable()' logic (Linus Torvalds) [Orabug: 39384275,39391459] {CVE-2026-46333}
- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Hyunwoo Kim) [Orabug: 39368828,39441326] {CVE-2026-43503,CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (William Bowling) [Orabug: 39368828] {CVE-2026-46300}

[5.4.17-2136.356.2]
- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Jeff Layton) [Orabug: 39167617,39368718] {CVE-2026-31402}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (Maurizio Lombardi) [Orabug: 38985173,39368732] {CVE-2026-23216}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (Maurizio Lombardi) [Orabug: 38970455,39368774] {CVE-2026-23193}
- xfrm: esp: avoid in-place decrypt on shared skb frags (Kuan-Ting Chen) [Orabug: 39334580,39367147] {CVE-2026-43284}
- x86/CPU/AMD: Add a fix for AMD-SB-7052 (Prathyushi Nangia) [Orabug: 39218897] {CVE-2025-54518}

[5.4.17-2136.356.1]
- arm64/kvm: Include linux/random.h in trng.c (Siddh Raman Pant) [Orabug: 39327096]
- i2c: designware: Disable TX_EMPTY irq while waiting for block length byte (Tam Nguyen) [Orabug: 39174662]
- i2c: designware: Handle invalid SMBus block data response length value (Tam Nguyen) [Orabug: 39174662]
- i2c: designware: fix __i2c_dw_disable() in case master is holding SCL low (Yann Sionneau) [Orabug: 39174662]

[5.4.17-2136.355.3]
- crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [Orabug: 39250687,39331106] {CVE-2026-43077}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [Orabug: 39250687,39331111] {CVE-2026-43078}
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [Orabug: 39250687]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [Orabug: 39250687,39300911] {CVE-2026-43033}
- crypto: authenc - use memcpy_sglist() instead of null skcipher (Eric Biggers) [Orabug: 39250687]
- crypto: algif_aead - snapshot IV for async AEAD requests (Douya Le) [Orabug: 39250687,39452217] {CVE-2026-46028}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [Orabug: 39250687,39283868,39292250] {CVE-2026-31431}
- crypto: algif_aead - use memcpy_sglist() instead of null skcipher (Eric Biggers) [Orabug: 39250687] {CVE-2026-31431}
- crypto: scatterwalk - Backport memcpy_sglist() (Eric Biggers) [Orabug: 39250687]
- crypto: doc - fix kernel-doc notation in chacha.c and af_alg.c (Randy Dunlap) [Orabug: 39250687]

[5.4.17-2136.355.2]
- Revert "rds: Drop rds conn in connect worker if not in down state." (Alok Tiwari) [Orabug: 39253770]
- x86/CPU: Fix FPDSS on Zen1 (Siddh Raman Pant) [Orabug: 39241225,39273723] {CVE-2026-31628}
- SUNRPC: svcauth_gss: avoid NULL deref on zero length gss_token in gss_read_proxy_verf (Joshua Rogers) [Orabug: 38852342] {CVE-2025-71120}

[5.4.17-2136.355.1]
- net/sched: Enforce that teql can only be used as root qdisc (Jamal Hadi Salim) [Orabug: 38930950] {CVE-2026-23074}

[5.4.17-2136.354.4]
- macvlan: fix possible UAF in macvlan_forward_source() (Eric Dumazet) [Orabug: 38887731] {CVE-2026-23001}
- macvlan: Use 'hash' iterators to simplify code (Christophe Jaillet) [Orabug: 38887731] {CVE-2026-23001}
- macvlan: Add nodst option to macvlan type source (Jethro Beekman) [Orabug: 38887731] {CVE-2026-23001}
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Eric Dumazet) [Orabug: 38970510,39188399] {CVE-2026-23209,CVE-2026-23273}
- macvlan: fix error recovery in macvlan_common_newlink() (Eric Dumazet) [Orabug: 38970510] {CVE-2026-23209}

[5.4.17-2136.354.3]
- io_uring: fix filename leak in __io_openat_prep() (Prithvi Tambewagh) [Orabug: 39064937] {CVE-2025-68814}
- rds: Drop rds conn in connect worker if not in down state. (Rohit Nair) [Orabug: 39045035]



From el-errata at oss.oracle.com  Thu Jun  4 09:55:24 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Thu, 04 Jun 2026 02:55:24 -0700
Subject: [El-errata] ELSA-2026-22305 Important: Oracle Linux 8 php:8.2
 security update
Message-ID: <mailman.142.1780566938.34.el-errata@oss.oracle.com>

Oracle Linux Security Advisory ELSA-2026-22305

http://linux.oracle.com/errata/ELSA-2026-22305.html

The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:

x86_64:
apcu-panel-5.1.23-1.module+el8.10.0+90469+8883f508.noarch.rpm
libzip-1.7.3-1.module+el8.10.0+90469+8883f508.x86_64.rpm
libzip-devel-1.7.3-1.module+el8.10.0+90469+8883f508.x86_64.rpm
libzip-tools-1.7.3-1.module+el8.10.0+90469+8883f508.x86_64.rpm
php-8.2.31-1.module+el8.10.0+90904+47df83bf.x86_64.rpm
php-bcmath-8.2.31-1.module+el8.10.0+90904+47df83bf.x86_64.rpm
php-cli-8.2.31-1.module+el8.10.0+90904+47df83bf.x86_64.rpm
php-common-8.2.31-1.module+el8.10.0+90904+47df83bf.x86_64.rpm
php-dba-8.2.31-1.module+el8.10.0+90904+47df83bf.x86_64.rpm
php-dbg-8.2.31-1.module+el8.10.0+90904+47df83bf.x86_64.rpm
php-devel-8.2.31-1.module+el8.10.0+90904+47df83bf.x86_64.rpm
php-embedded-8.2.31-1.module+el8.10.0+90904+47df83bf.x86_64.rpm
php-enchant-8.2.31-1.module+el8.10.0+90904+47df83bf.x86_64.rpm
php-ffi-8.2.31-1.module+el8.10.0+90904+47df83bf.x86_64.rpm
php-fpm-8.2.31-1.module+el8.10.0+90904+47df83bf.x86_64.rpm
php-gd-8.2.31-1.module+el8.10.0+90904+47df83bf.x86_64.rpm
php-gmp-8.2.31-1.module+el8.10.0+90904+47df83bf.x86_64.rpm
php-intl-8.2.31-1.module+el8.10.0+90904+47df83bf.x86_64.rpm
php-ldap-8.2.31-1.module+el8.10.0+90904+47df83bf.x86_64.rpm
php-mbstring-8.2.31-1.module+el8.10.0+90904+47df83bf.x86_64.rpm
php-mysqlnd-8.2.31-1.module+el8.10.0+90904+47df83bf.x86_64.rpm
php-odbc-8.2.31-1.module+el8.10.0+90904+47df83bf.x86_64.rpm
php-opcache-8.2.31-1.module+el8.10.0+90904+47df83bf.x86_64.rpm
php-pdo-8.2.31-1.module+el8.10.0+90904+47df83bf.x86_64.rpm
php-pear-1.10.14-1.module+el8.10.0+90469+8883f508.noarch.rpm
php-pecl-apcu-5.1.23-1.module+el8.10.0+90469+8883f508.x86_64.rpm
php-pecl-apcu-devel-5.1.23-1.module+el8.10.0+90469+8883f508.x86_64.rpm
php-pecl-rrd-2.0.3-1.module+el8.10.0+90469+8883f508.x86_64.rpm
php-pecl-xdebug3-3.2.2-2.module+el8.10.0+90469+8883f508.x86_64.rpm
php-pecl-zip-1.22.3-1.module+el8.10.0+90469+8883f508.x86_64.rpm
php-pgsql-8.2.31-1.module+el8.10.0+90904+47df83bf.x86_64.rpm
php-process-8.2.31-1.module+el8.10.0+90904+47df83bf.x86_64.rpm
php-snmp-8.2.31-1.module+el8.10.0+90904+47df83bf.x86_64.rpm
php-soap-8.2.31-1.module+el8.10.0+90904+47df83bf.x86_64.rpm
php-xml-8.2.31-1.module+el8.10.0+90904+47df83bf.x86_64.rpm

aarch64:
apcu-panel-5.1.23-1.module+el8.10.0+90469+8883f508.noarch.rpm
libzip-1.7.3-1.module+el8.10.0+90469+8883f508.aarch64.rpm
libzip-devel-1.7.3-1.module+el8.10.0+90469+8883f508.aarch64.rpm
libzip-tools-1.7.3-1.module+el8.10.0+90469+8883f508.aarch64.rpm
php-8.2.31-1.module+el8.10.0+90904+47df83bf.aarch64.rpm
php-bcmath-8.2.31-1.module+el8.10.0+90904+47df83bf.aarch64.rpm
php-cli-8.2.31-1.module+el8.10.0+90904+47df83bf.aarch64.rpm
php-common-8.2.31-1.module+el8.10.0+90904+47df83bf.aarch64.rpm
php-dba-8.2.31-1.module+el8.10.0+90904+47df83bf.aarch64.rpm
php-dbg-8.2.31-1.module+el8.10.0+90904+47df83bf.aarch64.rpm
php-devel-8.2.31-1.module+el8.10.0+90904+47df83bf.aarch64.rpm
php-embedded-8.2.31-1.module+el8.10.0+90904+47df83bf.aarch64.rpm
php-enchant-8.2.31-1.module+el8.10.0+90904+47df83bf.aarch64.rpm
php-ffi-8.2.31-1.module+el8.10.0+90904+47df83bf.aarch64.rpm
php-fpm-8.2.31-1.module+el8.10.0+90904+47df83bf.aarch64.rpm
php-gd-8.2.31-1.module+el8.10.0+90904+47df83bf.aarch64.rpm
php-gmp-8.2.31-1.module+el8.10.0+90904+47df83bf.aarch64.rpm
php-intl-8.2.31-1.module+el8.10.0+90904+47df83bf.aarch64.rpm
php-ldap-8.2.31-1.module+el8.10.0+90904+47df83bf.aarch64.rpm
php-mbstring-8.2.31-1.module+el8.10.0+90904+47df83bf.aarch64.rpm
php-mysqlnd-8.2.31-1.module+el8.10.0+90904+47df83bf.aarch64.rpm
php-odbc-8.2.31-1.module+el8.10.0+90904+47df83bf.aarch64.rpm
php-opcache-8.2.31-1.module+el8.10.0+90904+47df83bf.aarch64.rpm
php-pdo-8.2.31-1.module+el8.10.0+90904+47df83bf.aarch64.rpm
php-pear-1.10.14-1.module+el8.10.0+90469+8883f508.noarch.rpm
php-pecl-apcu-5.1.23-1.module+el8.10.0+90469+8883f508.aarch64.rpm
php-pecl-apcu-devel-5.1.23-1.module+el8.10.0+90469+8883f508.aarch64.rpm
php-pecl-rrd-2.0.3-1.module+el8.10.0+90469+8883f508.aarch64.rpm
php-pecl-xdebug3-3.2.2-2.module+el8.10.0+90469+8883f508.aarch64.rpm
php-pecl-zip-1.22.3-1.module+el8.10.0+90469+8883f508.aarch64.rpm
php-pgsql-8.2.31-1.module+el8.10.0+90904+47df83bf.aarch64.rpm
php-process-8.2.31-1.module+el8.10.0+90904+47df83bf.aarch64.rpm
php-snmp-8.2.31-1.module+el8.10.0+90904+47df83bf.aarch64.rpm
php-soap-8.2.31-1.module+el8.10.0+90904+47df83bf.aarch64.rpm
php-xml-8.2.31-1.module+el8.10.0+90904+47df83bf.aarch64.rpm


SRPMS:
http://oss.oracle.com/ol8/SRPMS-updates/libzip-1.7.3-1.module+el8.10.0+90469+8883f508.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates/php-8.2.31-1.module+el8.10.0+90904+47df83bf.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates/php-pear-1.10.14-1.module+el8.10.0+90469+8883f508.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates/php-pecl-apcu-5.1.23-1.module+el8.10.0+90469+8883f508.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates/php-pecl-rrd-2.0.3-1.module+el8.10.0+90469+8883f508.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates/php-pecl-xdebug3-3.2.2-2.module+el8.10.0+90469+8883f508.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates/php-pecl-zip-1.22.3-1.module+el8.10.0+90469+8883f508.src.rpm

Related CVEs:

CVE-2026-6735
CVE-2026-7258
CVE-2026-7262
CVE-2026-7568




Description of changes:

libzip
php
[8.2.31-1]
- rebase to 8.2.31

php-pear
php-pecl-apcu
php-pecl-rrd
php-pecl-xdebug3
php-pecl-zip



From el-errata at oss.oracle.com  Thu Jun  4 09:55:26 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Thu, 04 Jun 2026 02:55:26 -0700
Subject: [El-errata] ELSA-2026-22643 Important: Oracle Linux 8 thunderbird
 security update
Message-ID: <mailman.143.1780566939.34.el-errata@oss.oracle.com>

Oracle Linux Security Advisory ELSA-2026-22643

http://linux.oracle.com/errata/ELSA-2026-22643.html

The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:

x86_64:
thunderbird-140.11.0-1.0.1.el8_10.x86_64.rpm

aarch64:
thunderbird-140.11.0-1.0.1.el8_10.aarch64.rpm


SRPMS:
http://oss.oracle.com/ol8/SRPMS-updates/thunderbird-140.11.0-1.0.1.el8_10.src.rpm

Related CVEs:

CVE-2026-8388
CVE-2026-8391
CVE-2026-8401
CVE-2026-8946
CVE-2026-8947
CVE-2026-8950
CVE-2026-8953
CVE-2026-8954
CVE-2026-8955
CVE-2026-8956
CVE-2026-8957
CVE-2026-8958
CVE-2026-8959
CVE-2026-8961
CVE-2026-8962
CVE-2026-8968
CVE-2026-8970
CVE-2026-8974
CVE-2026-8975




Description of changes:

[140.11.0-1.0.1]
- Fix prefs for new nss [Orabug: 37079820]
- Add Oracle prefs file

[140.11.0]
- Add OpenELA debranding

[140.11.0-1]
- Update to 140.11.0 ESR



From el-errata at oss.oracle.com  Thu Jun  4 09:55:28 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Thu, 04 Jun 2026 02:55:28 -0700
Subject: [El-errata] ELSA-2026-22721 Important: Oracle Linux 8 expat
 security update
Message-ID: <mailman.144.1780566941.34.el-errata@oss.oracle.com>

Oracle Linux Security Advisory ELSA-2026-22721

http://linux.oracle.com/errata/ELSA-2026-22721.html

The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:

x86_64:
expat-2.5.0-2.el8_10.i686.rpm
expat-2.5.0-2.el8_10.x86_64.rpm
expat-devel-2.5.0-2.el8_10.i686.rpm
expat-devel-2.5.0-2.el8_10.x86_64.rpm

aarch64:
expat-2.5.0-2.el8_10.aarch64.rpm
expat-devel-2.5.0-2.el8_10.aarch64.rpm


SRPMS:
http://oss.oracle.com/ol8/SRPMS-updates/expat-2.5.0-2.el8_10.src.rpm

Related CVEs:

CVE-2026-45186




Description of changes:

[2.5.0-2]
- Fix CVE-2026-45186
- Resolves: RHEL-177979



From el-errata at oss.oracle.com  Thu Jun  4 09:55:35 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Thu, 04 Jun 2026 02:55:35 -0700
Subject: [El-errata] ELSA-2026-50299 Important: Oracle Linux 8 Unbreakable
 Enterprise kernel security update
Message-ID: <mailman.145.1780566948.34.el-errata@oss.oracle.com>

Oracle Linux Security Advisory ELSA-2026-50299

http://linux.oracle.com/errata/ELSA-2026-50299.html

The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:

x86_64:
kernel-uek-5.4.17-2136.356.4.1.el8uek.x86_64.rpm
kernel-uek-container-5.4.17-2136.356.4.1.el8uek.x86_64.rpm
kernel-uek-container-debug-5.4.17-2136.356.4.1.el8uek.x86_64.rpm
kernel-uek-debug-5.4.17-2136.356.4.1.el8uek.x86_64.rpm
kernel-uek-debug-devel-5.4.17-2136.356.4.1.el8uek.x86_64.rpm
kernel-uek-devel-5.4.17-2136.356.4.1.el8uek.x86_64.rpm
kernel-uek-doc-5.4.17-2136.356.4.1.el8uek.noarch.rpm


SRPMS:
http://oss.oracle.com/ol8/SRPMS-updates/kernel-uek-5.4.17-2136.356.4.1.el8uek.src.rpm

Related CVEs:

CVE-2025-54518
CVE-2026-23193
CVE-2026-23216
CVE-2026-31402
CVE-2026-43284
CVE-2026-43503
CVE-2026-46300
CVE-2026-46333




Description of changes:

[5.4.17-2136.356.4.1]
- smb: client: reject userspace cifs.spnego descriptions (Asim Viladi Oglu Manizada)  [Orabug: 39463669]

[5.4.17-2136.356.4]
- tun: free page on build_skb failure in tun_xdp_one() (Weiming Shi) [Orabug: 39429147]
- tap: free page on error paths in tap_get_user_xdp() (Weiming Shi) [Orabug: 39429147]
- tun: free page on short-frame rejection in tun_xdp_one() (Weiming Shi) [Orabug: 39429147]

[5.4.17-2136.356.3]
- ptrace: slightly saner 'get_dumpable()' logic (Linus Torvalds) [Orabug: 39384275,39391459] {CVE-2026-46333}
- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Hyunwoo Kim) [Orabug: 39368828,39441326] {CVE-2026-43503,CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (William Bowling) [Orabug: 39368828] {CVE-2026-46300}

[5.4.17-2136.356.2]
- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Jeff Layton) [Orabug: 39167617,39368718] {CVE-2026-31402}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (Maurizio Lombardi) [Orabug: 38985173,39368732] {CVE-2026-23216}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (Maurizio Lombardi) [Orabug: 38970455,39368774] {CVE-2026-23193}
- xfrm: esp: avoid in-place decrypt on shared skb frags (Kuan-Ting Chen) [Orabug: 39334580,39367147] {CVE-2026-43284}
- x86/CPU/AMD: Add a fix for AMD-SB-7052 (Prathyushi Nangia) [Orabug: 39218897] {CVE-2025-54518}

[5.4.17-2136.356.1]
- arm64/kvm: Include linux/random.h in trng.c (Siddh Raman Pant) [Orabug: 39327096]
- i2c: designware: Disable TX_EMPTY irq while waiting for block length byte (Tam Nguyen) [Orabug: 39174662]
- i2c: designware: Handle invalid SMBus block data response length value (Tam Nguyen) [Orabug: 39174662]
- i2c: designware: fix __i2c_dw_disable() in case master is holding SCL low (Yann Sionneau) [Orabug: 39174662]



From el-errata at oss.oracle.com  Thu Jun  4 09:55:41 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Thu, 04 Jun 2026 02:55:41 -0700
Subject: [El-errata] ELSA-2026-50294 Important: Oracle Linux 8 Unbreakable
 Enterprise kernel security update
Message-ID: <mailman.148.1780566954.34.el-errata@oss.oracle.com>

Oracle Linux Security Advisory ELSA-2026-50294

http://linux.oracle.com/errata/ELSA-2026-50294.html

The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:

x86_64:
bpftool-5.15.0-321.202.5.el8uek.x86_64.rpm
kernel-uek-5.15.0-321.202.5.el8uek.x86_64.rpm
kernel-uek-core-5.15.0-321.202.5.el8uek.x86_64.rpm
kernel-uek-debug-5.15.0-321.202.5.el8uek.x86_64.rpm
kernel-uek-debug-core-5.15.0-321.202.5.el8uek.x86_64.rpm
kernel-uek-debug-devel-5.15.0-321.202.5.el8uek.x86_64.rpm
kernel-uek-debug-modules-5.15.0-321.202.5.el8uek.x86_64.rpm
kernel-uek-debug-modules-extra-5.15.0-321.202.5.el8uek.x86_64.rpm
kernel-uek-devel-5.15.0-321.202.5.el8uek.x86_64.rpm
kernel-uek-doc-5.15.0-321.202.5.el8uek.noarch.rpm
kernel-uek-modules-5.15.0-321.202.5.el8uek.x86_64.rpm
kernel-uek-modules-extra-5.15.0-321.202.5.el8uek.x86_64.rpm
kernel-uek-container-5.15.0-321.202.5.el8uek.x86_64.rpm
kernel-uek-container-debug-5.15.0-321.202.5.el8uek.x86_64.rpm

aarch64:
bpftool-5.15.0-321.202.5.el8uek.aarch64.rpm
kernel-uek-5.15.0-321.202.5.el8uek.aarch64.rpm
kernel-uek-core-5.15.0-321.202.5.el8uek.aarch64.rpm
kernel-uek-debug-5.15.0-321.202.5.el8uek.aarch64.rpm
kernel-uek-debug-core-5.15.0-321.202.5.el8uek.aarch64.rpm
kernel-uek-debug-devel-5.15.0-321.202.5.el8uek.aarch64.rpm
kernel-uek-debug-modules-5.15.0-321.202.5.el8uek.aarch64.rpm
kernel-uek-debug-modules-extra-5.15.0-321.202.5.el8uek.aarch64.rpm
kernel-uek-devel-5.15.0-321.202.5.el8uek.aarch64.rpm
kernel-uek-doc-5.15.0-321.202.5.el8uek.noarch.rpm
kernel-uek-modules-5.15.0-321.202.5.el8uek.aarch64.rpm
kernel-uek-modules-extra-5.15.0-321.202.5.el8uek.aarch64.rpm
kernel-uek-container-5.15.0-321.202.5.el8uek.aarch64.rpm
kernel-uek-container-debug-5.15.0-321.202.5.el8uek.aarch64.rpm


SRPMS:
http://oss.oracle.com/ol8/SRPMS-updates/kernel-uek-5.15.0-321.202.5.el8uek.src.rpm

Related CVEs:

CVE-2025-38085
CVE-2025-54518
CVE-2026-23270
CVE-2026-31402
CVE-2026-43284
CVE-2026-46300
CVE-2026-46333




Description of changes:

[5.15.0-321.202.5]
- Revert "ip6_tunnel: Fix usage of skb_vlan_inet_prepare()" (Harshit Mogalapalli)  [Orabug: 39476647]
- smb: client: reject userspace cifs.spnego descriptions (Asim Viladi Oglu Manizada)  [Orabug: 39463672]

[5.15.0-321.202.4]
- tun: free page on build_skb failure in tun_xdp_one() (Weiming Shi)  [Orabug: 39429143]
- tap: free page on error paths in tap_get_user_xdp() (Weiming Shi)  [Orabug: 39429143]
- tun: free page on short-frame rejection in tun_xdp_one() (Weiming Shi)  [Orabug: 39429143]

[5.15.0-321.202.3]
- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Hyunwoo Kim)  [Orabug: 39368827]  {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (William Bowling)  [Orabug: 39368827]
- ptrace: slightly saner 'get_dumpable()' logic (Linus Torvalds)  [Orabug: 39384274]  {CVE-2026-46333}
- mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (David Hildenbrand (Red Hat))  [Orabug: 38474901]
- Revert "mm/hugetlb: add option to allows disabling CVE-2025-38085 mitigation" (Samasth Norway Ananda)  [Orabug: 38474901]
- mm/rmap: fix two comments related to huge_pmd_unshare() (David Hildenbrand (Red Hat))  [Orabug: 38474901]
- mm/hugetlb: fix two comments related to huge_pmd_unshare() (David Hildenbrand (Red Hat))  [Orabug: 38474901]
- mm/hugetlb: fix hugetlb_pmd_shared() (David Hildenbrand (Red Hat))  [Orabug: 38474901]

[5.15.0-321.202.2]
- dpaa2-switch: Fix interrupt storm after receiving bad if_id in IRQ handler (Guenter Roeck)
- Revert "arm64: dts: qcom: sdm845-oneplus: Mark l14a regulator as boot-on" (Sasha Levin)
- ip6_tunnel: Fix usage of skb_vlan_inet_prepare() (Ben Hutchings)
- hwmon: (max16065) Use READ/WRITE_ONCE to avoid compiler optimization induced race (Gui-Dong Han)
- wifi: wlcore: Return -ENOMEM instead of -EAGAIN if there is not enough headroom (Guenter Roeck)
- sched: idle: Make skipping governor callbacks more consistent (Rafael J. Wysocki)
- nvmet-tcp: fix use-before-check of sg in bounds validation (Cengiz Can)
- remoteproc: mediatek: Unprepare SCP clock during system suspend (Tzung-Bi Shih)
- net: openvswitch: Avoid releasing netdev before teardown completes (Toke H?iland-J?rgensen)
- ACPI: processor: Fix previous acpi_processor_errata_piix4() fix (Rafael J. Wysocki)
- net: hsr: fix VLAN add unwind on slave errors (Luka Gejak)
- x86/CPU/AMD: Add a fix for AMD-SB-7052 (Prathyushi Nangia)  [Orabug: 39327141]  {CVE-2025-54518}
- xfrm: esp: ipv4: fix up flags setting (Greg Kroah-Hartman)  [Orabug: 39342679]  {CVE-2026-43284}
- xfrm: esp: avoid in-place decrypt on shared skb frags (Kuan-Ting Chen)  [Orabug: 39342679]  {CVE-2026-43284}
- KVM: x86: disable preemption around the call to kvm_arch_vcpu_{un|}blocking (Maxim Levitsky)  [Orabug: 39334996]
- KVM: Don't block+unblock when halt-polling is successful (Sean Christopherson)  [Orabug: 39334996]
- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Jeff Layton)  [Orabug: 39167616]  {CVE-2026-31402}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (Victor Nogueira)  [Orabug: 39103230]  {CVE-2026-23270}
- exadata: tools: perf: update column to comm_nodigit (Stephen Brennan)  [Orabug: 39327019]
- perf report: Add comm_nodigit sort key (Stephen Brennan)  [Orabug: 39327019]
- Revert "tools: perf: add comm_ignore_digit column" (Stephen Brennan)  [Orabug: 39327019]

[5.15.0-321.202.1]
- virtio-net: add cond_resched() to the command waiting loop (Jason Wang) [Orabug: 39291988]
- virtio-net: convert rx mode setting to use workqueue (Jason Wang) [Orabug: 39291988]
- x86: KVM: Add common feature flag for AMD's PSFD (Sean Christopherson) [Orabug: 35586248]
- KVM: x86: Insert "AMD" in KVM_X86_FEATURE_PSFD (Jim Mattson) [Orabug: 35586248]
- KVM: x86: Expose Predictive Store Forwarding Disable (Babu Moger) [Orabug: 35586248]
- i2c: designware: fix __i2c_dw_disable() in case master is holding SCL low (Yann Sionneau) [Orabug: 39174661]



From el-errata at oss.oracle.com  Thu Jun  4 09:55:46 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Thu, 04 Jun 2026 02:55:46 -0700
Subject: [El-errata] ELSA-2026-50294 Important: Oracle Linux 9 Unbreakable
 Enterprise kernel security update
Message-ID: <mailman.149.1780566958.34.el-errata@oss.oracle.com>

Oracle Linux Security Advisory ELSA-2026-50294

http://linux.oracle.com/errata/ELSA-2026-50294.html

The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:


aarch64:
bpftool-5.15.0-321.202.5.el9uek.aarch64.rpm
kernel-uek-5.15.0-321.202.5.el9uek.aarch64.rpm
kernel-uek-container-5.15.0-321.202.5.el9uek.aarch64.rpm
kernel-uek-container-debug-5.15.0-321.202.5.el9uek.aarch64.rpm
kernel-uek-core-5.15.0-321.202.5.el9uek.aarch64.rpm
kernel-uek-debug-5.15.0-321.202.5.el9uek.aarch64.rpm
kernel-uek-debug-core-5.15.0-321.202.5.el9uek.aarch64.rpm
kernel-uek-debug-devel-5.15.0-321.202.5.el9uek.aarch64.rpm
kernel-uek-debug-modules-5.15.0-321.202.5.el9uek.aarch64.rpm
kernel-uek-debug-modules-extra-5.15.0-321.202.5.el9uek.aarch64.rpm
kernel-uek-devel-5.15.0-321.202.5.el9uek.aarch64.rpm
kernel-uek-doc-5.15.0-321.202.5.el9uek.noarch.rpm
kernel-uek-modules-5.15.0-321.202.5.el9uek.aarch64.rpm
kernel-uek-modules-extra-5.15.0-321.202.5.el9uek.aarch64.rpm
kernel-uek64k-5.15.0-321.202.5.el9uek.aarch64.rpm
kernel-uek64k-core-5.15.0-321.202.5.el9uek.aarch64.rpm
kernel-uek64k-devel-5.15.0-321.202.5.el9uek.aarch64.rpm
kernel-uek64k-modules-5.15.0-321.202.5.el9uek.aarch64.rpm
kernel-uek64k-modules-extra-5.15.0-321.202.5.el9uek.aarch64.rpm


SRPMS:
http://oss.oracle.com/ol9/SRPMS-updates/kernel-uek-5.15.0-321.202.5.el9uek.src.rpm

Related CVEs:

CVE-2025-38085
CVE-2025-54518
CVE-2026-23270
CVE-2026-31402
CVE-2026-43284
CVE-2026-46300
CVE-2026-46333




Description of changes:

[5.15.0-321.202.5]
- Revert "ip6_tunnel: Fix usage of skb_vlan_inet_prepare()" (Harshit Mogalapalli)  [Orabug: 39476647]
- smb: client: reject userspace cifs.spnego descriptions (Asim Viladi Oglu Manizada)  [Orabug: 39463672]

[5.15.0-321.202.4]
- tun: free page on build_skb failure in tun_xdp_one() (Weiming Shi)  [Orabug: 39429143]
- tap: free page on error paths in tap_get_user_xdp() (Weiming Shi)  [Orabug: 39429143]
- tun: free page on short-frame rejection in tun_xdp_one() (Weiming Shi)  [Orabug: 39429143]

[5.15.0-321.202.3]
- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Hyunwoo Kim)  [Orabug: 39368827]  {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (William Bowling)  [Orabug: 39368827]
- ptrace: slightly saner 'get_dumpable()' logic (Linus Torvalds)  [Orabug: 39384274]  {CVE-2026-46333}
- mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (David Hildenbrand (Red Hat))  [Orabug: 38474901]
- Revert "mm/hugetlb: add option to allows disabling CVE-2025-38085 mitigation" (Samasth Norway Ananda)  [Orabug: 38474901]
- mm/rmap: fix two comments related to huge_pmd_unshare() (David Hildenbrand (Red Hat))  [Orabug: 38474901]
- mm/hugetlb: fix two comments related to huge_pmd_unshare() (David Hildenbrand (Red Hat))  [Orabug: 38474901]
- mm/hugetlb: fix hugetlb_pmd_shared() (David Hildenbrand (Red Hat))  [Orabug: 38474901]

[5.15.0-321.202.2]
- dpaa2-switch: Fix interrupt storm after receiving bad if_id in IRQ handler (Guenter Roeck)
- Revert "arm64: dts: qcom: sdm845-oneplus: Mark l14a regulator as boot-on" (Sasha Levin)
- ip6_tunnel: Fix usage of skb_vlan_inet_prepare() (Ben Hutchings)
- hwmon: (max16065) Use READ/WRITE_ONCE to avoid compiler optimization induced race (Gui-Dong Han)
- wifi: wlcore: Return -ENOMEM instead of -EAGAIN if there is not enough headroom (Guenter Roeck)
- sched: idle: Make skipping governor callbacks more consistent (Rafael J. Wysocki)
- nvmet-tcp: fix use-before-check of sg in bounds validation (Cengiz Can)
- remoteproc: mediatek: Unprepare SCP clock during system suspend (Tzung-Bi Shih)
- net: openvswitch: Avoid releasing netdev before teardown completes (Toke H?iland-J?rgensen)
- ACPI: processor: Fix previous acpi_processor_errata_piix4() fix (Rafael J. Wysocki)
- net: hsr: fix VLAN add unwind on slave errors (Luka Gejak)
- x86/CPU/AMD: Add a fix for AMD-SB-7052 (Prathyushi Nangia)  [Orabug: 39327141]  {CVE-2025-54518}
- xfrm: esp: ipv4: fix up flags setting (Greg Kroah-Hartman)  [Orabug: 39342679]  {CVE-2026-43284}
- xfrm: esp: avoid in-place decrypt on shared skb frags (Kuan-Ting Chen)  [Orabug: 39342679]  {CVE-2026-43284}
- KVM: x86: disable preemption around the call to kvm_arch_vcpu_{un|}blocking (Maxim Levitsky)  [Orabug: 39334996]
- KVM: Don't block+unblock when halt-polling is successful (Sean Christopherson)  [Orabug: 39334996]
- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Jeff Layton)  [Orabug: 39167616]  {CVE-2026-31402}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (Victor Nogueira)  [Orabug: 39103230]  {CVE-2026-23270}
- exadata: tools: perf: update column to comm_nodigit (Stephen Brennan)  [Orabug: 39327019]
- perf report: Add comm_nodigit sort key (Stephen Brennan)  [Orabug: 39327019]
- Revert "tools: perf: add comm_ignore_digit column" (Stephen Brennan)  [Orabug: 39327019]

[5.15.0-321.202.1]
- virtio-net: add cond_resched() to the command waiting loop (Jason Wang) [Orabug: 39291988]
- virtio-net: convert rx mode setting to use workqueue (Jason Wang) [Orabug: 39291988]
- x86: KVM: Add common feature flag for AMD's PSFD (Sean Christopherson) [Orabug: 35586248]
- KVM: x86: Insert "AMD" in KVM_X86_FEATURE_PSFD (Jim Mattson) [Orabug: 35586248]
- KVM: x86: Expose Predictive Store Forwarding Disable (Babu Moger) [Orabug: 35586248]
- i2c: designware: fix __i2c_dw_disable() in case master is holding SCL low (Yann Sionneau) [Orabug: 39174661]

[5.15.0-320.202.8]
- iommu/arm-smmu-v3: Handle zeroed A4-2C HTTU override settings (Joao Martins) [Orabug: 39186453]
- iommu: Move IOMMU_DIRTY_NO_CLEAR define (Shameer Kolothum) [Orabug: 39186453]
- iommu/arm-smmu-v3: Enable HTTU for stage1 with io-pgtable mapping (Kunkun Jiang) [Orabug: 39186453]
- iommu/arm-smmu-v3: Add support for dirty tracking in domain alloc (Joao Martins) [Orabug: 39186453]
- iommu/io-pgtable-arm: Add read_and_clear_dirty() support (Shameer Kolothum) [Orabug: 39186453]
- iommu/arm-smmu-v3: Add feature detection for HTTU (Jean-Philippe Brucker) [Orabug: 39186453]

[5.15.0-320.202.7]
- crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [Orabug: 39250686,39331104] {CVE-2026-43077}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [Orabug: 39250686,39331109] {CVE-2026-43078}
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [Orabug: 39250686]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [Orabug: 39250686,39300910] {CVE-2026-43033}
- crypto: authenc - use memcpy_sglist() instead of null skcipher (Eric Biggers) [Orabug: 39250686]
- crypto: algif_aead - snapshot IV for async AEAD requests (Douya Le) [Orabug: 39250686]
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [Orabug: 39250686,39283867,39291961] {CVE-2026-31431}
- crypto: algif_aead - use memcpy_sglist() instead of null skcipher (Eric Biggers) [Orabug: 39250686] {CVE-2026-31431}
- crypto: scatterwalk - Backport memcpy_sglist() (Eric Biggers) [Orabug: 39250686]
- uek-rpm: Enable FWCTL for aarch64 (Dave Kleikamp) [Orabug: 39252913]

[5.15.0-320.202.6]
- Revert "rds: Drop rds conn in connect worker if not in down state." (Vijayendra Suman) [Orabug: 39277795]
- uek-rpm: CONFIG_INTEL_IOMMU_SCALABLE_MODE_DEFAULT_ON should be set (Dave Kleikamp) [Orabug: 39109819]
- iommu/vt-d: Disallow dirty tracking if incoherent page walk (Lu Baolu) [Orabug: 39109819]
- iommu/vt-d: Set variable intel_dirty_ops to static (Kunwu Chan) [Orabug: 39109819]
- iommu/vt-d: Access/Dirty bit support for SS domains (Joao Martins) [Orabug: 39109819]
- iommu/amd: reduce GA Log overflow printk noise (Alejandro Jimenez) [Orabug: 39209012]
- iommu/amd: add reschedule points to GA Log draining (Alejandro Jimenez) [Orabug: 39209012]
- iommu/amd: Rework GAInt handling in overflow case (Joao Martins) [Orabug: 39209012]
- iommu/amd: Disable GAInt while GA Log is processed (Joao Martins) [Orabug: 39209012]
- iommu/amd: Move helpers to update IOMMU features to amd_iommu.h (Alejandro Jimenez) [Orabug: 39209012]
- iommu/amd: Increase GA Log buffer size to 8192 entries (Joao Martins) [Orabug: 39209012]
- x86/CPU: Fix FPDSS on Zen1 (Borislav Petkov) [Orabug: 39241228,39273722] {CVE-2026-31628}

[5.15.0-320.202.5]
- Revert "PCI: Enable ACS after configuring IOMMU for OF platforms" (Manivannan Sadhasivam) [Orabug: 39187371]
- net/handshake: duplicate handshake cancellations leak socket (Scott Mayhew) [Orabug: 38847720] {CVE-2025-68775}
- ext4: show 'shutdown' hint when ext4 is forced to shutdown (Baokun Li) [Orabug: 39002346]
- ext4: show 'emergency_ro' when EXT4_FLAGS_EMERGENCY_RO is set (Baokun Li) [Orabug: 39002346]
- ext4: correct behavior under errors=remount-ro mode (Baokun Li) [Orabug: 39002346]
- ext4: add more ext4_emergency_state() checks around sb_rdonly() (Baokun Li) [Orabug: 39002346]
- ext4: add ext4_emergency_state() helper function (Baokun Li) [Orabug: 39002346]
- ext4: add EXT4_FLAGS_EMERGENCY_RO bit (Baokun Li) [Orabug: 39002346]
- ext4: convert EXT4_FLAGS_* defines to enum (Baokun Li) [Orabug: 39002346]
- ext4: make ext4_forced_shutdown() take struct super_block (Jan Kara) [Orabug: 39002346]
- ipv6: use RCU in ip6_xmit() (Eric Dumazet) [Orabug: 38649062] {CVE-2025-40135}
- memfd: move MFD_MF_KEEP_UE_MAPPED flag to higher bit (William Roche) [Orabug: 39109773]
- scsi: qla2xxx: Sanitize payload size to prevent member overflow (Jiasheng Jiang) [Orabug: 38930868] {CVE-2026-23059}
- bpf: Fix reference count leak in bpf_prog_test_run_xdp() (Tetsuo Handa) [Orabug: 38887702] {CVE-2026-22994}
- nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [Orabug: 38887682] {CVE-2026-22989}
- net/mlx5e: TC, delete flows only for existing peers (Mark Bloch) [Orabug: 38970398] {CVE-2026-23173}
- net/handshake: restore destructor on submit failure (Caoping) [Orabug: 38887601] {CVE-2025-71148}
- scsi: qla2xxx: Fix improper freeing of purex item (Zilin Guan) [Orabug: 38798929] {CVE-2025-68741}
- bnxt_en: Fix XDP_TX path (Michael Chan) [Orabug: 38847684] {CVE-2025-68770}
- perf/x86/amd: Check event before enable to avoid GPF (George Kennedy) [Orabug: 38847849] {CVE-2025-68798}
- scsi: smartpqi: Fix device resources accessed after device removal (Mike Mcgowen) [Orabug: 38798848] {CVE-2025-68371}
- KVM: SVM: Don't skip unrelated instruction if INT3/INTO is replaced (Omar Sandoval) [Orabug: 38773579] {CVE-2025-68259}
- x86/fpu: Ensure XFD state on signal delivery (Chang S. Bae) [Orabug: 38773165] {CVE-2025-68171}
- virtio-net: fix received length check in big packets (Bui Quang Minh) [Orabug: 38737152] {CVE-2025-40292}
- ACPI: CPPC: Fix NULL pointer dereference when nosmp is used (Yunhui Cui) [Orabug: 38641284] {CVE-2025-38113}
- EDAC/i10nm: Skip DIMM enumeration on a disabled memory controller (Qiuxu Zhuo) [Orabug: 38649173] {CVE-2025-40157}
- sunrpc: fix null pointer dereference on zero-length checksum (Lei Lu) [Orabug: 38649042] {CVE-2025-40129}
- cpufreq: CPPC: Fix possible null-ptr-deref for cppc_get_cpu_cost() (Jinjie Ruan) [Orabug: 38641275] {CVE-2024-53230}
- cpufreq: CPPC: Fix possible null-ptr-deref for cpufreq_cpu_get_raw() (Jinjie Ruan) [Orabug: 38641272] {CVE-2024-53231}
- vhost: vringh: Fix copy_to_iter return value check (Michael S. Tsirkin) [Orabug: 38592117] {CVE-2025-40056}
- crypto: qat - flush misc workqueue during device shutdown (Giovanni Cabiddu) [Orabug: 38401717] {CVE-2025-39721}
- vhost: vringh: Modify the return value check (Zhang Jiao) [Orabug: 38592085] {CVE-2025-40051}
- virtio-net: fix recursived rtnl_lock() during probe() (Zigit Zo) [Orabug: 38324330] {CVE-2025-38551}
- gve: prevent ethtool ops after shutdown (Jordan Rhee) [Orabug: 38401492] {CVE-2025-38735}
- KVM: SVM: Reject SEV{-ES} intra host migration if vCPU creation is in-flight (Sean Christopherson) [Orabug: 38254140] {CVE-2025-38455}
- net: usb: lan78xx: fix WARN in __netif_napi_del_locked on disconnect (Oleksij Rempel) [Orabug: 38253871] {CVE-2025-38385}
- net/mlx5e: Disable MACsec offload for uplink representor profile (Carolina Jubran) [Orabug: 38094809] {CVE-2025-38020}
- dmaengine: idxd: fix memory leak in error handling path of idxd_alloc (Shuai Xue) [Orabug: 38094794] {CVE-2025-38015}
- net/mlx5: Fix ECVF vports unload on shutdown flow (Amir Tzin) [Orabug: 38152903] {CVE-2025-38109}
- bnxt: properly flush XDP redirect lists (Yan Zhai) [Orabug: 38175054] {CVE-2025-38246}
- eth: bnxt: fix missing ring index trim on error path (Jakub Kicinski) [Orabug: 37937451] {CVE-2025-37873}
- net/mlx5: Fix null-ptr-deref in mlx5_create_{inner_,}ttc_table() (Henry Martin) [Orabug: 37938078] {CVE-2025-37888}
- nfsd: fix possible badness in FREE_STATEID (Olga Kornievskaia) [Orabug: 37989102] {CVE-2024-50043}
- devlink: fix xa_alloc_cyclic() error handling (Michal Swiatkowski) [Orabug: 37828271] {CVE-2025-22017}

[5.15.0-320.202.4]
- xsk: fix an integer overflow in xp_create_and_assign_umem() (Gavrilov Ilia) [Orabug: 37828202] {CVE-2025-21997}
- RDMA/mlx5: Fix the recovery flow of the UMR QP (Yishai Hadas) [Orabug: 37766306] {CVE-2025-21892}
- misc: misc_minor_alloc to use ida for all dynamic/misc dynamic minors (Vimal Agrawal) [Orabug: 37678552] {CVE-2024-58078}
- net/sched: cls_api: fix error handling causing NULL dereference (Pierre Riteau) [Orabug: 37702083] {CVE-2025-21857}
- bpf, test_run: Fix use-after-free issue in eth_skb_pkt_type() (Shigeru Yoshida) [Orabug: 37766220] {CVE-2025-21867}
- net: xdp: Disallow attaching device-bound programs in generic mode (Toke H?iland-J?rgensen) [Orabug: 37650238] {CVE-2025-21808}
- iommufd/iova_bitmap: Fix shift-out-of-bounds in iova_bitmap_offset_to_index() (Qasim Ijaz) [Orabug: 37649891] {CVE-2025-21724}
- xfrm: delete intermediate secpath entry in packet offload mode (Alexandre Cassen) [Orabug: 37649866] {CVE-2025-21720}
- gpiolib: Fix crash on error in gpiochip_get_ngpios() (Andy Shevchenko) [Orabug: 37650154] {CVE-2025-21783}
- scsi: mpi3mr: Fix possible crash when setting up bsg fails (Guixin Liu) [Orabug: 37649886] {CVE-2025-21723}
- uek-rpm: Enable CONFIG_NET_VRF in container kernel (Boris Ostrovsky) [Orabug: 38932706]
- Documentation: add documentation for MFD_MF_KEEP_UE_MAPPED (William Roche) [Orabug: 38768951]
- selftests/mm: test userspace MFR for HugeTLB hugepage (William Roche) [Orabug: 38768951]
- mm: memfd/hugetlb: introduce memfd-based userspace MFR policy (William Roche) [Orabug: 38768951]



From el-errata at oss.oracle.com  Thu Jun  4 09:55:51 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Thu, 04 Jun 2026 02:55:51 -0700
Subject: [El-errata] ELSA-2026-50294 Important: Oracle Linux 9 Unbreakable
 Enterprise kernel security update
Message-ID: <mailman.150.1780566964.34.el-errata@oss.oracle.com>

Oracle Linux Security Advisory ELSA-2026-50294

http://linux.oracle.com/errata/ELSA-2026-50294.html

The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:

x86_64:
bpftool-5.15.0-321.202.5.el9uek.x86_64.rpm
kernel-uek-5.15.0-321.202.5.el9uek.x86_64.rpm
kernel-uek-core-5.15.0-321.202.5.el9uek.x86_64.rpm
kernel-uek-debug-5.15.0-321.202.5.el9uek.x86_64.rpm
kernel-uek-debug-core-5.15.0-321.202.5.el9uek.x86_64.rpm
kernel-uek-debug-devel-5.15.0-321.202.5.el9uek.x86_64.rpm
kernel-uek-debug-modules-5.15.0-321.202.5.el9uek.x86_64.rpm
kernel-uek-debug-modules-extra-5.15.0-321.202.5.el9uek.x86_64.rpm
kernel-uek-devel-5.15.0-321.202.5.el9uek.x86_64.rpm
kernel-uek-doc-5.15.0-321.202.5.el9uek.noarch.rpm
kernel-uek-modules-5.15.0-321.202.5.el9uek.x86_64.rpm
kernel-uek-modules-extra-5.15.0-321.202.5.el9uek.x86_64.rpm
kernel-uek-container-5.15.0-321.202.5.el9uek.x86_64.rpm
kernel-uek-container-debug-5.15.0-321.202.5.el9uek.x86_64.rpm



SRPMS:
http://oss.oracle.com/ol9/SRPMS-updates/kernel-uek-5.15.0-321.202.5.el9uek.src.rpm

Related CVEs:

CVE-2025-38085
CVE-2025-54518
CVE-2026-23270
CVE-2026-31402
CVE-2026-43284
CVE-2026-46300
CVE-2026-46333




Description of changes:

[5.15.0-321.202.5]
- Revert "ip6_tunnel: Fix usage of skb_vlan_inet_prepare()" (Harshit Mogalapalli)  [Orabug: 39476647]
- smb: client: reject userspace cifs.spnego descriptions (Asim Viladi Oglu Manizada)  [Orabug: 39463672]

[5.15.0-321.202.4]
- tun: free page on build_skb failure in tun_xdp_one() (Weiming Shi)  [Orabug: 39429143]
- tap: free page on error paths in tap_get_user_xdp() (Weiming Shi)  [Orabug: 39429143]
- tun: free page on short-frame rejection in tun_xdp_one() (Weiming Shi)  [Orabug: 39429143]

[5.15.0-321.202.3]
- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Hyunwoo Kim)  [Orabug: 39368827]  {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (William Bowling)  [Orabug: 39368827]
- ptrace: slightly saner 'get_dumpable()' logic (Linus Torvalds)  [Orabug: 39384274]  {CVE-2026-46333}
- mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (David Hildenbrand (Red Hat))  [Orabug: 38474901]
- Revert "mm/hugetlb: add option to allows disabling CVE-2025-38085 mitigation" (Samasth Norway Ananda)  [Orabug: 38474901]
- mm/rmap: fix two comments related to huge_pmd_unshare() (David Hildenbrand (Red Hat))  [Orabug: 38474901]
- mm/hugetlb: fix two comments related to huge_pmd_unshare() (David Hildenbrand (Red Hat))  [Orabug: 38474901]
- mm/hugetlb: fix hugetlb_pmd_shared() (David Hildenbrand (Red Hat))  [Orabug: 38474901]

[5.15.0-321.202.2]
- dpaa2-switch: Fix interrupt storm after receiving bad if_id in IRQ handler (Guenter Roeck)
- Revert "arm64: dts: qcom: sdm845-oneplus: Mark l14a regulator as boot-on" (Sasha Levin)
- ip6_tunnel: Fix usage of skb_vlan_inet_prepare() (Ben Hutchings)
- hwmon: (max16065) Use READ/WRITE_ONCE to avoid compiler optimization induced race (Gui-Dong Han)
- wifi: wlcore: Return -ENOMEM instead of -EAGAIN if there is not enough headroom (Guenter Roeck)
- sched: idle: Make skipping governor callbacks more consistent (Rafael J. Wysocki)
- nvmet-tcp: fix use-before-check of sg in bounds validation (Cengiz Can)
- remoteproc: mediatek: Unprepare SCP clock during system suspend (Tzung-Bi Shih)
- net: openvswitch: Avoid releasing netdev before teardown completes (Toke H?iland-J?rgensen)
- ACPI: processor: Fix previous acpi_processor_errata_piix4() fix (Rafael J. Wysocki)
- net: hsr: fix VLAN add unwind on slave errors (Luka Gejak)
- x86/CPU/AMD: Add a fix for AMD-SB-7052 (Prathyushi Nangia)  [Orabug: 39327141]  {CVE-2025-54518}
- xfrm: esp: ipv4: fix up flags setting (Greg Kroah-Hartman)  [Orabug: 39342679]  {CVE-2026-43284}
- xfrm: esp: avoid in-place decrypt on shared skb frags (Kuan-Ting Chen)  [Orabug: 39342679]  {CVE-2026-43284}
- KVM: x86: disable preemption around the call to kvm_arch_vcpu_{un|}blocking (Maxim Levitsky)  [Orabug: 39334996]
- KVM: Don't block+unblock when halt-polling is successful (Sean Christopherson)  [Orabug: 39334996]
- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Jeff Layton)  [Orabug: 39167616]  {CVE-2026-31402}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (Victor Nogueira)  [Orabug: 39103230]  {CVE-2026-23270}
- exadata: tools: perf: update column to comm_nodigit (Stephen Brennan)  [Orabug: 39327019]
- perf report: Add comm_nodigit sort key (Stephen Brennan)  [Orabug: 39327019]
- Revert "tools: perf: add comm_ignore_digit column" (Stephen Brennan)  [Orabug: 39327019]

[5.15.0-321.202.1]
- virtio-net: add cond_resched() to the command waiting loop (Jason Wang) [Orabug: 39291988]
- virtio-net: convert rx mode setting to use workqueue (Jason Wang) [Orabug: 39291988]
- x86: KVM: Add common feature flag for AMD's PSFD (Sean Christopherson) [Orabug: 35586248]
- KVM: x86: Insert "AMD" in KVM_X86_FEATURE_PSFD (Jim Mattson) [Orabug: 35586248]
- KVM: x86: Expose Predictive Store Forwarding Disable (Babu Moger) [Orabug: 35586248]
- i2c: designware: fix __i2c_dw_disable() in case master is holding SCL low (Yann Sionneau) [Orabug: 39174661]



From el-errata at oss.oracle.com  Thu Jun  4 09:55:56 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Thu, 04 Jun 2026 02:55:56 -0700
Subject: [El-errata] ELSA-2026-50293 Important: Oracle Linux 9 Unbreakable
 Enterprise kernel security update
Message-ID: <mailman.151.1780566970.34.el-errata@oss.oracle.com>

Oracle Linux Security Advisory ELSA-2026-50293

http://linux.oracle.com/errata/ELSA-2026-50293.html

The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:

x86_64:
kernel-uek-6.12.0-203.76.7.1.el9uek.x86_64.rpm
kernel-uek-core-6.12.0-203.76.7.1.el9uek.x86_64.rpm
kernel-uek-debug-6.12.0-203.76.7.1.el9uek.x86_64.rpm
kernel-uek-debug-core-6.12.0-203.76.7.1.el9uek.x86_64.rpm
kernel-uek-debug-devel-6.12.0-203.76.7.1.el9uek.x86_64.rpm
kernel-uek-debug-modules-6.12.0-203.76.7.1.el9uek.x86_64.rpm
kernel-uek-debug-modules-core-6.12.0-203.76.7.1.el9uek.x86_64.rpm
kernel-uek-debug-modules-deprecated-6.12.0-203.76.7.1.el9uek.x86_64.rpm
kernel-uek-debug-modules-desktop-6.12.0-203.76.7.1.el9uek.x86_64.rpm
kernel-uek-debug-modules-extra-6.12.0-203.76.7.1.el9uek.x86_64.rpm
kernel-uek-debug-modules-extra-netfilter-6.12.0-203.76.7.1.el9uek.x86_64.rpm
kernel-uek-debug-modules-usb-6.12.0-203.76.7.1.el9uek.x86_64.rpm
kernel-uek-debug-modules-wireless-6.12.0-203.76.7.1.el9uek.x86_64.rpm
kernel-uek-devel-6.12.0-203.76.7.1.el9uek.x86_64.rpm
kernel-uek-doc-6.12.0-203.76.7.1.el9uek.noarch.rpm
kernel-uek-modules-6.12.0-203.76.7.1.el9uek.x86_64.rpm
kernel-uek-modules-core-6.12.0-203.76.7.1.el9uek.x86_64.rpm
kernel-uek-modules-deprecated-6.12.0-203.76.7.1.el9uek.x86_64.rpm
kernel-uek-modules-desktop-6.12.0-203.76.7.1.el9uek.x86_64.rpm
kernel-uek-modules-extra-6.12.0-203.76.7.1.el9uek.x86_64.rpm
kernel-uek-modules-extra-netfilter-6.12.0-203.76.7.1.el9uek.x86_64.rpm
kernel-uek-modules-usb-6.12.0-203.76.7.1.el9uek.x86_64.rpm
kernel-uek-modules-wireless-6.12.0-203.76.7.1.el9uek.x86_64.rpm
kernel-uek-tools-6.12.0-203.76.7.1.el9uek.x86_64.rpm

aarch64:
kernel-uek-6.12.0-203.76.7.1.el9uek.aarch64.rpm
kernel-uek-core-6.12.0-203.76.7.1.el9uek.aarch64.rpm
kernel-uek-debug-6.12.0-203.76.7.1.el9uek.aarch64.rpm
kernel-uek-debug-core-6.12.0-203.76.7.1.el9uek.aarch64.rpm
kernel-uek-debug-devel-6.12.0-203.76.7.1.el9uek.aarch64.rpm
kernel-uek-debug-modules-6.12.0-203.76.7.1.el9uek.aarch64.rpm
kernel-uek-debug-modules-core-6.12.0-203.76.7.1.el9uek.aarch64.rpm
kernel-uek-debug-modules-deprecated-6.12.0-203.76.7.1.el9uek.aarch64.rpm
kernel-uek-debug-modules-desktop-6.12.0-203.76.7.1.el9uek.aarch64.rpm
kernel-uek-debug-modules-extra-6.12.0-203.76.7.1.el9uek.aarch64.rpm
kernel-uek-debug-modules-extra-netfilter-6.12.0-203.76.7.1.el9uek.aarch64.rpm
kernel-uek-debug-modules-usb-6.12.0-203.76.7.1.el9uek.aarch64.rpm
kernel-uek-debug-modules-wireless-6.12.0-203.76.7.1.el9uek.aarch64.rpm
kernel-uek-devel-6.12.0-203.76.7.1.el9uek.aarch64.rpm
kernel-uek-doc-6.12.0-203.76.7.1.el9uek.noarch.rpm
kernel-uek-modules-6.12.0-203.76.7.1.el9uek.aarch64.rpm
kernel-uek-modules-extra-6.12.0-203.76.7.1.el9uek.aarch64.rpm
kernel-uek-modules-core-6.12.0-203.76.7.1.el9uek.aarch64.rpm
kernel-uek-modules-deprecated-6.12.0-203.76.7.1.el9uek.aarch64.rpm
kernel-uek-modules-desktop-6.12.0-203.76.7.1.el9uek.aarch64.rpm
kernel-uek-modules-extra-netfilter-6.12.0-203.76.7.1.el9uek.aarch64.rpm
kernel-uek-modules-usb-6.12.0-203.76.7.1.el9uek.aarch64.rpm
kernel-uek-modules-wireless-6.12.0-203.76.7.1.el9uek.aarch64.rpm
kernel-uek-tools-6.12.0-203.76.7.1.el9uek.aarch64.rpm
kernel-uek64k-6.12.0-203.76.7.1.el9uek.aarch64.rpm
kernel-uek64k-core-6.12.0-203.76.7.1.el9uek.aarch64.rpm
kernel-uek64k-devel-6.12.0-203.76.7.1.el9uek.aarch64.rpm
kernel-uek64k-modules-6.12.0-203.76.7.1.el9uek.aarch64.rpm
kernel-uek64k-modules-core-6.12.0-203.76.7.1.el9uek.aarch64.rpm
kernel-uek64k-modules-deprecated-6.12.0-203.76.7.1.el9uek.aarch64.rpm
kernel-uek64k-modules-desktop-6.12.0-203.76.7.1.el9uek.aarch64.rpm
kernel-uek64k-modules-extra-6.12.0-203.76.7.1.el9uek.aarch64.rpm
kernel-uek64k-modules-extra-netfilter-6.12.0-203.76.7.1.el9uek.aarch64.rpm
kernel-uek64k-modules-usb-6.12.0-203.76.7.1.el9uek.aarch64.rpm
kernel-uek64k-modules-wireless-6.12.0-203.76.7.1.el9uek.aarch64.rpm


SRPMS:
http://oss.oracle.com/ol9/SRPMS-updates/kernel-uek-6.12.0-203.76.7.1.el9uek.src.rpm

Related CVEs:

CVE-2025-54518
CVE-2026-23270
CVE-2026-23278
CVE-2026-31402
CVE-2026-31431
CVE-2026-31628
CVE-2026-43033
CVE-2026-43078
CVE-2026-43084
CVE-2026-43284
CVE-2026-43500
CVE-2026-46300
CVE-2026-46333




Description of changes:

[6.12.0-203.76.7.1]
- smb: client: reject userspace cifs.spnego descriptions (Asim Viladi Oglu Manizada)  [Orabug: 39474418]

[6.12.0-203.76.7]
- tun: free page on build_skb failure in tun_xdp_one() (Weiming Shi)  [Orabug: 39456024]
- tap: free page on error paths in tap_get_user_xdp() (Weiming Shi)  [Orabug: 39456024]
- tun: free page on short-frame rejection in tun_xdp_one() (Weiming Shi)  [Orabug: 39456024]

[6.12.0-203.76.6]
- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Hyunwoo Kim)  [Orabug: 39442660]  {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (William Bowling)  [Orabug: 39442660]

[6.12.0-203.76.5]
- ptrace: slightly saner 'get_dumpable()' logic (Linus Torvalds)  [Orabug: 39407652]  {CVE-2026-46333}

[6.12.0-203.76.4]
- x86/CPU/AMD: Add a fix for AMD-SB-7052 (Prathyushi Nangia)  [Orabug: 39218893]  {CVE-2025-54518}
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim)  [Orabug: 39334587]  {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (David Howells)  [Orabug: 39334587]
- rxrpc: only handle RESPONSE during service challenge (Wang Jie)  [Orabug: 39334587]
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells)  [Orabug: 39334587]
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells)  [Orabug: 39334587]
- rxrpc: Fix re-decryption of RESPONSE packets (David Howells)  [Orabug: 39334587]
- xfrm: esp: avoid in-place decrypt on shared skb frags (Kuan-Ting Chen)  [Orabug: 39334587]  {CVE-2026-43284}
- bcm-hsdk-gpl: Fix build issues for HSDK 6.5.34 (Vijay Kumar)  [Orabug: 39342234]
- bcm-hsdk-gpl: Update BCM HSDK GPL driver to 6.5.34 (Vijay Kumar)  [Orabug: 39342234]
- minke-fan-cpld: Avoid logging 'unknown fan id' when no fan is present (arista-hpandya)  [Orabug: 39335238]
- exadata: tools: perf: update column to comm_nodigit (Stephen Brennan)  [Orabug: 39327035]
- perf report: Add comm_nodigit sort key (Stephen Brennan)  [Orabug: 39327035]
- Revert "tools: perf: add comm_ignore_digit column" (Stephen Brennan)  [Orabug: 39327035]
- octeontx2-af: cn20k: Fix RVU AF interrupt handler (Geetha sowjanya)  [Orabug: 39318904]
- octeontx2-af: Move QMEM allocations from GFP_KERNEL to ATOMIC (Sunil Goutham)  [Orabug: 39318904]
- bphy-pf: CNF20Ka: poll MHABs based on cpri_mask instead of fixed count (Viswajith Murali)  [Orabug: 39318904]
- octeontx2-af: Add devlink param for NIX RQ caching (Nishok A)  [Orabug: 39318904]
- octeontx2-af: cn20k: Fix the RVUAF->PF mbox address (Geetha sowjanya)  [Orabug: 39318904]
- octeontx2-af: Add devlink and debugfs support for NPA DWRR registers. (Anshumali Gaur)  [Orabug: 39318904]
- cn20k-af: psw: Fix build warning (Srujana Challa)  [Orabug: 39318904]
- octeontx2-af: npc: cn20k: Fix AI review comments. (Ratheesh Kannoth)  [Orabug: 39318904]
- cn20k-af: psw: add mailbox to write to PSW MSIX registers (Srujana Challa)  [Orabug: 39318904]
- cn20k-af: psw: add debugfs support for psw (Srujana Challa)  [Orabug: 39318904]
- cn20k-af: psw: introduce a mailbox to program PSW mbox msix vector (Srujana Challa)  [Orabug: 39318904]
- cn20k-af: psw: add PSW AF API Notification queue support (Srujana Challa)  [Orabug: 39318904]
- cn20k-af: psw: add FLR handler for PSW (Srujana Challa)  [Orabug: 39318904]
- cn20k-af: psw: setup PSW timed polling structure tables (Srujana Challa)  [Orabug: 39318904]
- cn20k-af: psw: add mailbox for PSW PCIe configuration (Srujana Challa)  [Orabug: 39318904]
- cn20k-af: psw: add mailbox for PSW LF mapping (Srujana Challa)  [Orabug: 39318904]
- cn20k-af: psw: add new mailbox for PSW doorbell configuration (Srujana Challa)  [Orabug: 39318904]
- cn20k-af: psw: setups PSW FID resources (Srujana Challa)  [Orabug: 39318904]
- cn20k-af: psw: setup PSW GID resources (Srujana Challa)  [Orabug: 39318904]
- cn20k-af: psw: add mailbox to get PSW capabilities (Srujana Challa)  [Orabug: 39318904]
- cn20k-af: psw: register PSW AF interrupts (Srujana Challa)  [Orabug: 39318904]
- cn20k-af: psw: introduce PSW block (Srujana Challa)  [Orabug: 39318904]
- octeontx2-af: limit max periodic timers for cn20k (Shijith Thotton)  [Orabug: 39318904]
- octeontx2-af: npc: cn20k: Make default entries as x4. (Ratheesh Kannoth)  [Orabug: 39318904]
- octeonxt2-af: npc: Fix bugs (Ratheesh Kannoth)  [Orabug: 39318904]
- octeontx2-pf: cn20ka: fix call trace in otx2_unregister_dl() after kernel reboot. (Anshumali Gaur)  [Orabug: 39318904]
- octeontx2-pf: cn20ka: fix call trace in otx2vf_remove after kernel reboot. (Anshumali Gaur)  [Orabug: 39318904]
- octeontx2-af: cn20k: Configure default CPT_AF_UCC_CTL for IPsec error codes (Amit Singh Tomar)  [Orabug: 39318904]
- octeontx2-af: CN20k: add support for RFOE4 on half MP (Sai Krishna)  [Orabug: 39318904]
- octeontx2-pf: Fix kernel crash during eswitch creation (Suman Ghosh)  [Orabug: 39318904]
- octeontx2-af: Use ZERO_OR_NULL_PTR for cgxchan2link_map (Subbaraya Sundeep)  [Orabug: 39318904]
- octeontx2-af: cn20K: mcs: Add parser configuration for VLAN extraction (Geetha sowjanya)  [Orabug: 39318904]
- octeontx2-af: Add support for single SBTAG parsing (Kiran Kumar K)  [Orabug: 39318904]
- octeontx2-af: Fix SDP channel base (Geetha sowjanya)  [Orabug: 39318904]
- octeontx2-af: cn20K: mcs: Add MCS DSA tag parsing configuration support (Geetha sowjanya)  [Orabug: 39318904]
- octeontx2-af: Avoid any false positives for Altaf (Linu Cherian)  [Orabug: 39318904]
- octeontx2-af: npc: Fix broadcast MCAM entry type on CN10K (Rakesh Kudurumalla)  [Orabug: 39318904]
- octeontx2-af: cn20k: Add platform check. (Anshumali Gaur)  [Orabug: 39318904]
- octeontx2-bphy-netdev: add get_link_ksettings to fix SIOCETHTOOL error (Sai Krishna)  [Orabug: 39318904]
- octeontx2-af: npc: cn20k: dont free default mcam indexes (Ratheesh Kannoth)  [Orabug: 39318904]
- bphy-pf: CNF20ka: Replace deprecated MSI-X API in CPRI netdev driver (Viswajith Murali)  [Orabug: 39318904]
- octeontx2-af: npc: cn20k: Fix kernel warn. (Ratheesh Kannoth)  [Orabug: 39318904]
- octeontx2-af: npc: cn20k: Mismatch stats. (Ratheesh Kannoth)  [Orabug: 39318904]
- octeontx2-af: npc: cn20k: Dont free PF default mcam indexes. (Ratheesh Kannoth)  [Orabug: 39318904]
- octeontx2-af: npc: cn20k: FIx invalid access (Ratheesh Kannoth)  [Orabug: 39318904]
- octeontx2-af: npc: cn20k: dstats (Ratheesh Kannoth)  [Orabug: 39318904]
- octeonxt2-af: npc: cn20k: show enable/disable status. (Ratheesh Kannoth)  [Orabug: 39318904]
- octeontx2-af: npc: cn20k: debugfs for virtual indexes (Ratheesh Kannoth)  [Orabug: 39318904]
- octeontx2-af: npc: cn20k: Fix AI reviews (Ratheesh Kannoth)  [Orabug: 39318904]
- octeontx2-af: npc: cn20k: Alloc default indexes during nix lf alloc (Ratheesh Kannoth)  [Orabug: 39318904]
- octeontx2-af: npc: cn20k: Fix default mcam idx free (Ratheesh Kannoth)  [Orabug: 39318904]
- octeontx2-af: npc: Remove SoC specific local variables. (Ratheesh Kannoth)  [Orabug: 39318904]
- octeontx2-af: mcs: Fix SC resource cleanup loop (Geetha sowjanya)  [Orabug: 39318904]
- octeontx2-af: cn20k: mcs: Add SC CAM bypass entry (Geetha sowjanya)  [Orabug: 39318904]
- octeontx2-af: Modify the pcifunc VF mask (Subbaraya Sundeep)  [Orabug: 39318904]
- octeontx2-af: cn20k: update the AFPFX_TRIGX reg offset (Geetha sowjanya)  [Orabug: 39318904]
- octeontx2-af: cn20K: Fix rvu mbox registers offset (Geetha sowjanya)  [Orabug: 39318904]
- octeontx2: sdp: Display backpressure status in debugfs (Subbaraya Sundeep)  [Orabug: 39318904]
- octeontx2-pf: Fix aura BPID assignment when CONFIG_DCB is enabled (Geetha sowjanya)  [Orabug: 39318904]
- octeontx2-af: add bounds check in nix_bp_enable (Rakesh Kudurumalla)  [Orabug: 39318904]
- octeontx2-af: cn20k: Set a default value for res_meta_offset (Tanmay Jagdale)  [Orabug: 39318904]
- octeontx2-af: Support mapping of individual slots to RVU block LFs (Subbaraya Sundeep)  [Orabug: 39318904]
- cn20k-af: ml: improve AF register access control (Srikanth Yalavarthi)  [Orabug: 39318904]
- cn20k-af: ml: fetch list of LF IDs attached (Srikanth Yalavarthi)  [Orabug: 39318904]
- cn20k-af: ml: fix using uninitialized partition ID (Srikanth Yalavarthi)  [Orabug: 39318904]
- cn20k-af: ml: enable mapping LF to partition ID (Srikanth Yalavarthi)  [Orabug: 39318904]
- cn20k-af: ml: enable mapping LF with partitions (Srikanth Yalavarthi)  [Orabug: 39318904]
- cn20k-af: ml: support ML lf alloc and free (Srikanth Yalavarthi)  [Orabug: 39318904]
- cn20k-af: ml: support fetching msix offset for ML (Srikanth Yalavarthi)  [Orabug: 39318904]
- cn20k-af: ml: support attach and detach of ML LFs (Srikanth Yalavarthi)  [Orabug: 39318904]
- cn20k-af: ml: add support to fetch ML capabilities (Srikanth Yalavarthi)  [Orabug: 39318904]
- cn20k-af: ml: implement ML mbox message handler (Srikanth Yalavarthi)  [Orabug: 39318904]
- cn20k-af: ml: register ML interrupt handlers (Srikanth Yalavarthi)  [Orabug: 39318904]
- cn20k-af: ml: implement hw resource setup and free (Srikanth Yalavarthi)  [Orabug: 39318904]
- cn20k-af: ml: enable ML block probe and remove (Srikanth Yalavarthi)  [Orabug: 39318904]
- cn20k-af: ml: add skeleton code for ML EB driver (Prince Takkar)  [Orabug: 39318904]
- octeontx2-pf: cn20k: Add CN20K TX SecY policy bit support (Subrat Pandey)  [Orabug: 39318904]
- octeontx2-af: cn20k: mcs: Set default mcs Id to 0. (Subrat Pandey)  [Orabug: 39318904]
- octeontx2-af: cn20k: Fix memleak in npc_install flow (Suman Ghosh)  [Orabug: 39318904]
- octeontx2-af: Fix flags for HWWQE period timers (Mikko Suni)  [Orabug: 39318904]
- octeontx2-af: cn20k: Use physical address for AF->PF mbox (Geetha sowjanya)  [Orabug: 39318904]
- octeontx2-af: cn20k: update fields of CPT_AF_LFX_CTL (Rahul Bhansali)  [Orabug: 39318904]
- octeontx2-af: cn20k: configure RX inline replay (Shashank Gupta)  [Orabug: 39318904]
- Octeontx2-af: cn20k: configure inline RQ mask (Bharat Bhushan)  [Orabug: 39318904]
- octeontx2-pf: Don't initialize ipsec queues for representor PF. (Geetha sowjanya)  [Orabug: 39318904]
- octeontx2-bphy-pf: CNF20ka: BPHY NIC PF driver for chiplet based BPHY NIX bypass mode (Naveen Mamindlapalli)  [Orabug: 39318904]
- octeontx2-af: fix npc mbox structure defination (Mohit Kumar Parjapat)  [Orabug: 39318904]
- octeontx2-af: npc: cn20k: Avoid SoC specific structures (Ratheesh Kannoth)  [Orabug: 39318904]
- octeontx2-af: npc: cn20k: Fix get number of kw (Ratheesh Kannoth)  [Orabug: 39318904]
- octeontx2-pf: switch: cancel work before destroying wq. (Ratheesh Kannoth)  [Orabug: 39318904]
- octeontx: switch: Fix compiler warnings. (Ratheesh Kannoth)  [Orabug: 39318904]
- octeontx2-pf: selftest: Use unique mbox ids (Linu Cherian)  [Orabug: 39318904]
- octeontx: pan: Disable WQ after unregister notifier (Ratheesh Kannoth)  [Orabug: 39318904]
- octeontx2-af: switch: Define new flag (Ratheesh Kannoth)  [Orabug: 39318904]
- octeontx2-pf: switch: Fix bugs. (Ratheesh Kannoth)  [Orabug: 39318904]
- octeontx2-af: switch: Update mcam_idx for reply flow (Ratheesh Kannoth)  [Orabug: 39318904]
- octeontx2-pf: switch: Support ovs offloading (Ratheesh Kannoth)  [Orabug: 39318904]
- octeontx2-pf: switch: Support mask as well for flow. (Ratheesh Kannoth)  [Orabug: 39318904]
- octeontx2-af: switch: Pass tuple mask as well to flow. (Ratheesh Kannoth)  [Orabug: 39318904]
- octeontx2-pf: switch: Retrieve VLAN infor for L3 routing (Ratheesh Kannoth)  [Orabug: 39318904]
- octeontx2-af: switch: Add vlan tag as part of message (Ratheesh Kannoth)  [Orabug: 39318904]
- octeontx2-af: switch: Dont process events if switchdev is not up (Ratheesh Kannoth)  [Orabug: 39318904]
- octeontx2-pf: switch: make functions static (Ratheesh Kannoth)  [Orabug: 39318904]
- octeontx2-pf: switch: Fix graceful shutdown. (Ratheesh Kannoth)  [Orabug: 39318904]
- octeontx2-pf: switch: Notify switchdev on NF table callback (Ratheesh Kannoth)  [Orabug: 39318904]
- octeontx2-af: switch: Support SNAT/DNAT routing (Ratheesh Kannoth)  [Orabug: 39318904]
- octeontx2-pf: switch: Reject acceleration for invalid bridge (Ratheesh Kannoth)  [Orabug: 39318904]
- octeontx2-af: switch: Fix buffer overflow (Ratheesh Kannoth)  [Orabug: 39318904]
- octeontx2-pf: switch: Fix below kernel splat (Ratheesh Kannoth)  [Orabug: 39318904]
- octeontx2-pf: switchdev: Register for Route events. (Ratheesh Kannoth)  [Orabug: 39318904]
- octeontx2-af: switchdev: Forward route notifications. (Ratheesh Kannoth)  [Orabug: 39318904]
- octeontx2-pf: switchdev: Add driver support (Ratheesh Kannoth)  [Orabug: 39318904]
- octeontx2-af: switchdev: L2 offload support (Ratheesh Kannoth)  [Orabug: 39318904]
- octeontx2-pf: Remove devlink support for SDP VF NIC driver (Anshumali Gaur)  [Orabug: 39318904]
- octeontx2-af: Handle pool context address update in Aura context write (Ashwin Sekhar T K)  [Orabug: 39318904]
- octeontx2-af: CN20k: fix unused-function warning (Amit Singh Tomar)  [Orabug: 39318904]
- octeontx2-pf: Move representor event handling into common file (Geetha sowjanya)  [Orabug: 39318904]
- octeontx2-af: Fix Rep link state sync up with PF/VFs (Geetha sowjanya)  [Orabug: 39318904]
- octeontx2-af: npa: cn20k: Fix DPC config mbox (Ashwin Sekhar T K)  [Orabug: 39318904]
- Octeontx2-pf: Fix transceiver details corruption (Hariprasad Kelam)  [Orabug: 39318904]
- octeontx2-af: change GEN PF device ID (Sai Krishna)  [Orabug: 39318904]
- octeontx2-af: CN20K: Fetch LBK supported channels (Hariprasad Kelam)  [Orabug: 39318904]
- octeontx2-af: Fix limiting SRIOV VF count logic (Sunil Goutham)  [Orabug: 39318904]
- octeontx2-af: Fix KASAN slab-out-of-bounds error (Anshumali Gaur)  [Orabug: 39318904]
- octeontx2-af: Update irq affinity for mbox and flr (Linu Cherian)  [Orabug: 39318904]
- octeontx2-af: cn20k: Add FLR/ME support (Linu Cherian)  [Orabug: 39318904]
- octeontx2-af: Fix possible memleak while mbox init (Sai Krishna)  [Orabug: 39318904]
- octeontx2-af: Map alternative AF NIX_AF_GINT only for CN10K (Geetha sowjanya)  [Orabug: 39318904]
- octeontx2-af: Add support to forward error interrupts to alt AF (Anil Kumar Reddy)  [Orabug: 39318904]
- octeontx2-af: Add support to forward flr to alternative AF (Anil Kumar Reddy)  [Orabug: 39318904]
- octeontx2-af: Update Alternative AF status (Linu Cherian)  [Orabug: 39318904]
- octeontx2-af: cn20k: Cleanup AF interrupt vector (Linu Cherian)  [Orabug: 39318904]
- octeontx2-af: Do not hardcode AF bus number in debugfs (Subbaraya Sundeep)  [Orabug: 39318904]
- octeontx2-af: Fix rsrc_alloc debugfs file (Subbaraya Sundeep)  [Orabug: 39318904]
- octeontx2-pf: Add devlink option to reset MAC stats for debugging (Viswajith Murali)  [Orabug: 39318904]
- octeontx2-af: npc: cn20k: Add devlink for defrag initiation (Ratheesh Kannoth)  [Orabug: 39318904]
- net: octeontx2: Fix coding style issues (Subrat Pandey)  [Orabug: 39318904]
- octeontx2-af: Fix mcs string buffer size (Stefan Wiehler)  [Orabug: 39318904]
- octeontx2-af: Skip TM tree print for disabled SQs (Anshumali Gaur)  [Orabug: 39318904]
- octeontx2-af: debugfs: Add cn20k sdp rings info (Subbaraya Sundeep)  [Orabug: 39318904]
- octeontx2-af: Fix kernel crash during NIX TM register dump (Anshumali Gaur)  [Orabug: 39318904]
- octeontx2-af: cpt: Add debug support for more than 64 engines. (Bharat Bhushan)  [Orabug: 39318904]
- octeontx2-af: cn20k: cpt: Update engine offset calculation (Bharat Bhushan)  [Orabug: 39318904]
- octeontx2-pf: Add support to display "Autoneg" (Hariprasad Kelam)  [Orabug: 39318904]
- octeontx2-vf: Set tc filter flag on vf netdev (Suman Ghosh)  [Orabug: 39318904]
- Octeontx2-pf: Update link mode mapping (Hariprasad Kelam)  [Orabug: 39318904]
- Octeontx2-pf: Fix ethtool eeprom read logic (Hariprasad Kelam)  [Orabug: 39318904]
- octeontx2-pf: ethtool: Display physical connector type (Hariprasad Kelam)  [Orabug: 39318904]
- octeontx2-pf: restart interface when link settings are changed by user (Naveen Mamindlapalli)  [Orabug: 39318904]
- octeontx2-sdpvf: Fix PTP options for SDP interfaces (Roy Franz)  [Orabug: 39318904]
- octeontx2-vf: Add partial ethtool support for SDP VFs (Hariprasad Kelam)  [Orabug: 39318904]
- octeontx2-pf: Add page pool stats to ethtool (Ratheesh Kannoth)  [Orabug: 39318904]
- octeontx2-pf: Add missing changes in otx2_ethtool.c (Suman Ghosh)  [Orabug: 39318904]
- Octeontx2-pf: tc: fix egress ratelimiting (Hariprasad Kelam)  [Orabug: 39318904]
- octeontx2-pf: Support to enable EDSA/Higig2 pkts parsing (Hariprasad Kelam)  [Orabug: 39318904]
- octeontx2-pf: Using compound/head page ref count (Geetha sowjanya)  [Orabug: 39318904]
- octeontx2-pf: Fix NDC sync operation errors (Geetha sowjanya)  [Orabug: 39318904]
- octeontx2-pf: cn20k: fix target address (Juan Garcia)  [Orabug: 39318904]
- octeontx2-pf: Check address for Null before free (Geetha sowjanya)  [Orabug: 39318904]
- octeontx2-af: mcs: Add soft reset sequence in mcs_global_cfg() (Viswajith Murali)  [Orabug: 39318904]
- octeontx2-pf: mcs: Don't account field alignment when installing TX SecY policy (Geetha sowjanya)  [Orabug: 39318904]
- octeontx2-af: Fix start and end bit for scan config (Ratheesh Kannoth)  [Orabug: 39318904]
- octeontx2: npc: cn20k: Remove function (Ratheesh Kannoth)  [Orabug: 39318904]
- octeontx2: npc: cn20k: refactor code (Ratheesh Kannoth)  [Orabug: 39318904]
- octeontx2-af: cgx: misc changes (Hariprasad Kelam)  [Orabug: 39318904]
- octeontx2-af: reset TL1 SW_XOFF before returning from link mode change (Naveen Mamindlapalli)  [Orabug: 39318904]
- octeontx2-af: Remove MAC address validation check (Suman Ghosh)  [Orabug: 39318904]
- octeontx2-af: Show count of dropped packets by DMAC filters (Hariprasad Kelam)  [Orabug: 39318904]
- octeontx2-af: Update mbox version (Sunil Goutham)  [Orabug: 39318904]
- cn10k-ipsec: Fix compilation with XFRM_OFFLOAD enabled (Sunil Goutham)  [Orabug: 39318904]
- octeontx2-vf: Register dummy netdev for host PF VFs (Subbaraya Sundeep)  [Orabug: 39318904]
- octeontx2-pf: cn20k: Configure SQ default channel based on UP message (Subbaraya Sundeep)  [Orabug: 39318904]
- octeontx2-pf: Dereference only a valid pointer (Suman Ghosh)  [Orabug: 39318904]
- octeontx2-vf: Fix VF mbox up message error on PTP RX enable (Sai Krishna)  [Orabug: 39318904]
- octeontx2-pf: Add support for creating netdev interfaces for SDP VFs (Suman Ghosh)  [Orabug: 39318904]
- octeontx2-pf: Add more debug messages (Geetha sowjanya)  [Orabug: 39318904]
- octeontx2-pf: Send UP messages to VF only when VF is up. (Subbaraya Sundeep)  [Orabug: 39318904]
- octeontx2-pf: Avoid null pointer dereference (Subbaraya Sundeep)  [Orabug: 39318904]
- cn10k-ipsec: fix uninitialized send queue during ESP offload (Shashank Gupta)  [Orabug: 39318904]
- cn10k-ipsec: Initialize ipsec queues on enabling IPsec (Bharat Bhushan)  [Orabug: 39318904]
- octeontx2-pf: cn10k/cn20k: Update count_eot in NPA_LF_AURA_BATCH_FREE0 (Geetha sowjanya)  [Orabug: 39318904]
- octeontx2-pf: persist netdev stats across routine operations (Anshumali Gaur)  [Orabug: 39318904]
- octeontx2-pf: Add self test (Linu Cherian)  [Orabug: 39318904]
- octeontx2-pf: Add ethtool -m option support (Suman Ghosh)  [Orabug: 39318904]
- octeontx2-pf: Skip dma map and unmap when IOMMU is bypassed (Sunil Goutham)  [Orabug: 39318904]
- octeontx2-pf: Add NIXLF error/poison interrupt handlers (Naveen Mamindlapalli)  [Orabug: 39318904]
- octeontx2-pf: Validation for TL1 Round robin priority (Hariprasad Kelam)  [Orabug: 39318904]
- octeontx2-pf: devlink param support to modify physical interface links. (Rakesh Babu)  [Orabug: 39318904]
- octeontx2-pf: Add devlink param to vary rbuf size (Subbaraya Sundeep)  [Orabug: 39318904]
- octeontx2-pf: Add devlink param to vary cqe size (Subbaraya Sundeep)  [Orabug: 39318904]
- octeontx2-af: CN20k: add multi chiplet support to NIX path (Sai Krishna)  [Orabug: 39318904]
- octeontx2-af: CN20k: Enable TX PTP timestamping on BPHY NIX link (Sai Krishna)  [Orabug: 39318904]
- octeontx2-af: cn10k: Fix accessing invalid CSRs (Sai Krishna)  [Orabug: 39318904]
- octeontx2-af: CN20k: fix fwdata NULL pointer dereference when RPM probe fails (Sai Krishna)  [Orabug: 39318904]
- octeontx2-af: CN20k: Map BPHY chiplet RPMs followed by compute chiplet RPMs (Sai Krishna)  [Orabug: 39318904]
- octeontx2-af: CN20k: Add chiplet RPM AF mbox support for port ready, get channel info messages. (Sai Krishna)  [Orabug: 39318904]
- octeontx2-af: cnf20k: account for XCB RPM links in CGX link calculation (Naveen Mamindlapalli)  [Orabug: 39318904]
- octeontx2-af: Add support for chiplet based BPHY RPM driver as AF RVU extension block module (Sai Krishna)  [Orabug: 39318904]
- octeontx2-af: Add BPHY chiplet, RPM, LMAC data to fwdata (Sai Krishna)  [Orabug: 39318904]
- bphy-pf: CNF20ka: Register driver with PCI subsys ID (Anshumali Gaur)  [Orabug: 39318904]
- bphy-pf: CNF20ka: Fix MSI-X init failure by setting both DMA masks (Viswajith Murali)  [Orabug: 39318904]
- bphy-pf: CNF20K: Add build and config support for CPRI PF driver to avoid module conflicts (Viswajith Murali)  [Orabug: 39318904]
- bphy-pf: CNF20ka: Fix CPRI MSI-X initialization failure (Viswajith Murali)  [Orabug: 39318904]
- bphy-pf: CNF20ka: Add workaround for gpint issue for CPRI pkt path (Viswajith Murali)  [Orabug: 39318904]
- bphy-pf: CNF20ka: Add cpri netdev driver support (Viswajith Murali)  [Orabug: 39318904]
- octeontx-bphy-netdev: Fix unexpected packet in netdev by ensuring proper PSW hardware write handling (Viswajith Murali)  [Orabug: 39318904]
- octeontx2-bphy-netdev: allow forcing ts steps cnt (Baha Mesleh)  [Orabug: 39318904]
- octeontx2-bphy-netdev: fix fec counters reporting (Baha Mesleh)  [Orabug: 39318904]
- octeontx2-bphy-netdev: fix ecpri pkt stats update (Baha Mesleh)  [Orabug: 39318904]
- octeontx2-bphy-netdev: fix ecpri type5 handling (Baha Mesleh)  [Orabug: 39318904]
- octeontx2-bphy-netdev: fix a deadlock in cpri (Baha Mesleh)  [Orabug: 39318904]
- octeontx2-bphy-netdev: Fix race condition for timestamp packets (Sai Krishna)  [Orabug: 39318904]
- octeontx2-bphy-netdev: Fix kernel crash by using proper max PSM queue count (Sai Krishna)  [Orabug: 39318904]
- octeontx2-bphy-netdev: protect psm queue access (Baha Mesleh)  [Orabug: 39318904]
- octeontx2-bphy-netdev: fix debugfs memleak (Baha Mesleh)  [Orabug: 39318904]
- octeontx2-bphy-netdev: Detect DL circular buffer full (Naveen Mamindlapalli)  [Orabug: 39318904]
- octeontx2-bphy-netdev: fix rsfec stats reading (Baha Mesleh)  [Orabug: 39318904]
- octeontx2-bphy-netdev: Support for eCPRI MsgType5 timestamping (Sai Krishna)  [Orabug: 39318904]
- octeontx2-bphy-netdev: Use correct netdev priv structure for debugging (Baha Mesleh)  [Orabug: 39318904]
- octeontx2-bphy-netdev: disable CPRI RX on cleanup (Baha Mesleh)  [Orabug: 39318904]
- octeontx2-bphy-netdev: ignore mcs untagged error (Baha Mesleh)  [Orabug: 39318904]
- octeontx2-bphy-netdev: disable rx on RFOEs on exit (Baha Mesleh)  [Orabug: 39318904]
- octeontx2-bphy-netdev: Fix crash issue during initialization of cpri, rfoe interfaces on set MAC address (Sai Krishna)  [Orabug: 39318904]
- octeontx2-bphy-netdev: OcteonTX2 Base PHY RFOE netdev driver (Sai Krishna)  [Orabug: 39318904]
- octeontx2-af: CN20k DPI AF driver msix, interrupt handling (Sai Krishna)  [Orabug: 39318904]
- octeontx2-af: Move DPI block reset handling to AF extension block driver (Sai Krishna)  [Orabug: 39318904]
- octeontx2-af: CN20k DPI AF driver channel table mbox support (Sai Krishna)  [Orabug: 39318904]
- octeontx2-af: CN20k DPI AF driver mbox support (Sai Krishna)  [Orabug: 39318904]
- octeontx2-af: CN20k DPI AF driver initial support (Sai Krishna)  [Orabug: 39318904]
- octeontx2-af: cn20k: Don't reset the PF_DISC register (Geetha sowjanya)  [Orabug: 39318904]
- octeontx2-af: CN20K: update RPM links (Hariprasad Kelam)  [Orabug: 39318904]
- octeontx2-af: cn20k: Add block discovery register (Geetha sowjanya)  [Orabug: 39318904]
- octeontx2-af: Fix PTP RX enable mbox fail issue over NIC VF (Sai Krishna)  [Orabug: 39318904]
- octeontx2-af: Modify NIX register offset value for CN20K (Subbaraya Sundeep)  [Orabug: 39318904]
- octeontx2-af: Validate NIX maximum LFs correctly (Subbaraya Sundeep)  [Orabug: 39318904]
- octeontx2-af: Fix incorrect BPID initialization for CPT channels (Geetha sowjanya)  [Orabug: 39318904]
- octeontx2-af: cn20k: Allow CPT PF access to CPT_AF_GRPX_THR (Shashank Gupta)  [Orabug: 39318904]
- octeontx2-af: cn20k: support packet data buffer (pdb) configuration (Bharat Bhushan)  [Orabug: 39318904]
- octeontx2-af: cn20k: Set LBK channels (Hariprasad Kelam)  [Orabug: 39318904]
- octeontx2-af: cn20k: Fix config parameter check when disable inline queue (Bharat Bhushan)  [Orabug: 39318904]
- octeontx2-af: cn20k: Enable CPT parse and Frag info header byte swap (Bharat Bhushan)  [Orabug: 39318904]
- octeontx2-af: Add an MCAM entry to count CPT 2nd pass miss packets (Naveen Mamindlapalli)  [Orabug: 39318904]
- octeontx2-af: support overriding aura to zero for second pass (Nithin Dabilpuram)  [Orabug: 39318904]
- octeontx2-af: cn20k: cpt: Use proper mask to get max CPT LF's (Amit Singh Tomar)  [Orabug: 39318904]
- octeontx2-af: allow mbox access from CPT VFs for backward compatibility (Amit Singh Tomar)  [Orabug: 39318904]
- octeontx2-af: Drop CPT PF/VF check for relevant mboxes (Amit Singh Tomar)  [Orabug: 39318904]
- octeontx2-af: cn20k: Change CPT channels configuration (Bharat Bhushan)  [Orabug: 39318904]
- octeontx2-af: cn20k: Allow CPT PF access to CPTX_AF_CTX_PSP_TIMER_CTL (Shashank Gupta)  [Orabug: 39318904]
- octeontx2-af: cn20k: change CPT register address as per latest csr (Bharat Bhushan)  [Orabug: 39318904]
- octeontx2-af: cn20k: Allow access to CPT_AF_UCCX_CTL (Tanmay Jagdale)  [Orabug: 39318904]
- octeontx2-af: CN20K channel configuration (Sunil Goutham)  [Orabug: 39318904]
- octeontx2-af: cn20k: Enable RXC on inline inbound cptlf (Bharat Bhushan)  [Orabug: 39318904]
- octeontx2-af: cn20k: Fix RXC flush and cleanup sequence (Bharat Bhushan)  [Orabug: 39318904]
- octeontx2-af: cn20k: Add CPT CTX flush support (Tanmay Jagdale)  [Orabug: 39318904]
- octeontx2-af: fix CPT ctx flush (Srujana Challa)  [Orabug: 39318904]
- octeontx2-af: cn20k: Setup CPT reassembly Queue Configuration Register (Amit Singh Tomar)  [Orabug: 39318904]
- octeontx2-af: cn20k: Move RXC specific functions (Tanmay Jagdale)  [Orabug: 39318904]
- octeontx2-af: cn20k: handle multi-queue reassembly teardown (Amit Singh Tomar)  [Orabug: 39318904]
- octeontx2-af: cn20k: add mbox for NIX RX inline configuration (Amit Singh Tomar)  [Orabug: 39318904]
- octeontx2-af: cn20k: add mbox for CPT RX inline configuration (Amit Singh Tomar)  [Orabug: 39318904]
- octeontx2-af: cn20k: add mbox for CPT RX queue allocation (Amit Singh Tomar)  [Orabug: 39318904]
- octeontx2-af: cn20k: Add mbox to configure rx inline nixlf (Bharat Bhushan)  [Orabug: 39318904]
- octeontx2-af: cn20k: Add mbox to configure rx inline profile (Bharat Bhushan)  [Orabug: 39318904]
- crypto: octeontx2: Add new mailbox to set queue priority (Amit Singh Tomar)  [Orabug: 39318904]
- octeontx2-af: cn20k: Add rxc teardown support (Bharat Bhushan)  [Orabug: 39318904]
- octeontx2-af: cn20k: Add queue id to rxc time config mbox (Bharat Bhushan)  [Orabug: 39318904]
- octeontx2-af: cn20k: Add cpt stats mailbox support (Bharat Bhushan)  [Orabug: 39318904]
- octeontx2-af: cn20k: add FLT interrupts (Amit Singh Tomar)  [Orabug: 39318904]
- octeontx2-af: Unify HW interrupt APIs (Amit Singh Tomar)  [Orabug: 39318904]
- octeontx-af: cpt: Get CPT PF number using PF Device ID (Bharat Bhushan)  [Orabug: 39318904]
- octeontx2-af: cn20k: cpt: Update max engine calculation (Bharat Bhushan)  [Orabug: 39318904]
- octeontx2-pf: Add TC rules support for CN20K (Subbaraya Sundeep)  [Orabug: 39318904]
- octeontx2-pf: Set correct sequence for carrier off and tx queue stop (Suman Ghosh)  [Orabug: 39318904]
- octeontx2: Fix klockwork issues. (Suman Ghosh)  [Orabug: 39318904]
- octeontx2-pf: Free queue memory allocated sq timestamp (Ratheesh Kannoth)  [Orabug: 39318904]
- octeontx2-pf: Check for DMAC extraction support before setting DMAC based hardware filter for a VF (Suman Ghosh)  [Orabug: 39318904]
- octeontx2-pf: Move REP devlink APIs to separate file (Geetha sowjanya)  [Orabug: 39318904]
- octeontx2-af: Fix representor up notification events (Geetha sowjanya)  [Orabug: 39318904]
- octeontx2-af: Use ews_rules value to update REP tcam rules (Geetha sowjanya)  [Orabug: 39318904]
- Octeontx2-af: Change args for rvu_get_pf (Hariprasad Kelam)  [Orabug: 39318904]
- octeontx2-af: Add validation before accessing fwdata (Hariprasad Kelam)  [Orabug: 39318904]
- octeontx2-af: map management port always to first PF (Hariprasad Kelam)  [Orabug: 39318904]
- octeontx2-af: replace generic error codes (Hariprasad Kelam)  [Orabug: 39318904]
- octeontx2-af: link mode mapping (Hariprasad Kelam)  [Orabug: 39318904]
- octeontx2-af: Assign CGX id from PCI revision id (Hariprasad Kelam)  [Orabug: 39318904]
- octeontx2-af: Remove MAC address validation check (Suman Ghosh)  [Orabug: 39318904]
- octeontx2-af: lmac validation with is_lmac_valid (Hariprasad Kelam)  [Orabug: 39318904]
- octeontx2-af: Fix compilation warning/klockwork issues (Hariprasad Kelam)  [Orabug: 39318904]
- octeontx2-af: configure 802.3 pause frames in SGMII/QSGMII mode (Hariprasad Kelam)  [Orabug: 39318904]
- octeontx2-af: Add new CGX_CMDs to set and get PHY modulation type (Hariprasad Kelam)  [Orabug: 39318904]
- octeontx2-af: Do not allow VFs to overwrite PKIND config (Hariprasad Kelam)  [Orabug: 39318904]
- octeontx2-af: Put CGX LMAC also in Higig2 mode (Hariprasad Kelam)  [Orabug: 39318904]
- octeontx2-sdp: Add FLR interrupts for Host PFs (Subbaraya Sundeep)  [Orabug: 39318904]
- octeontx2-sdp: Refactor SDP interrupts code (Subbaraya Sundeep)  [Orabug: 39318904]
- octeontx2-sdp: Fix SDP channel numbers in NPC rules (Subbaraya Sundeep)  [Orabug: 39318904]
- octeontx2-sdp: Check whether SDP block is present before access (Subbaraya Sundeep)  [Orabug: 39318904]
- octeontx2-af: sdp: Fix address range assignment logic (Hariprasad Kelam)  [Orabug: 39318904]
- octeontx2-af: sdp: Maintain host to RVU GEN PF mapping (Subbaraya Sundeep)  [Orabug: 39318904]
- octeontx2-sdp: misc SDP fixes (Hariprasad Kelam)  [Orabug: 39318904]
- octeontx-af: cn20k: Manage rings allocation and freeing (Hariprasad Kelam)  [Orabug: 39318904]
- octeontx2-af: CN20K: SDP mbox framework (Hariprasad Kelam)  [Orabug: 39318904]
- octeontx2-af: CN20K: SDP extension driver (Hariprasad Kelam)  [Orabug: 39318904]
- Octeontx2-pf: enable AF_XDP zero copy support (Hariprasad Kelam)  [Orabug: 39318904]
- octeontx2-af: Fix clearing TL3_TL2X_LINKX_CFG[ENA] during SMQ flush to drop packets (Naveen Mamindlapalli)  [Orabug: 39318904]
- octeontx2-af: Fix ROCEV2 RSS hashing QP ID length (Kiran Kumar K)  [Orabug: 39318904]
- octeontx2-af: Allow to set CPT result address offset (Bharat Bhushan)  [Orabug: 39318904]
- octeontx2-af: cn20k: add mbox for NIX flow vector configuration (Satheesh Paul)  [Orabug: 39318904]
- octeontx2-af: add ROCEv2 header for RSS hashing (Kiran Kumar K)  [Orabug: 39318904]
- octeontx2-af: Update lbk maximum frame size as per CN20K (Subbaraya Sundeep)  [Orabug: 39318904]
- octeontx2-af: fix TX scheduler count (Satha Rao)  [Orabug: 39318904]
- octeontx2-af: Fix the issue of infinite loop in nix_aq_reset (Naveen Mamindlapalli)  [Orabug: 39318904]
- octeontx2-af: Misc changes in NIX block (Subbaraya Sundeep)  [Orabug: 39318904]
- octeontx2-af: Dump hw register state on error (Geetha sowjanya)  [Orabug: 39318904]
- octeontx2-af: cn20k: Add new mailbox to configure LSO alt flags (Suman Ghosh)  [Orabug: 39318904]
- octeontx2-af: cn20k: Extend SPI to SA index translation (Bharat Bhushan)  [Orabug: 39318904]
- octeontx2-pf: notify VF about ptp event (Harman Kalra)  [Orabug: 39318904]
- octeontx2-af: Sending tsc value to the userspace (Harman Kalra)  [Orabug: 39318904]
- octeontx2-af: Support for PTP notification to PF (Hariprasad Kelam)  [Orabug: 39318904]
- octeontx2-af: npa: fix DPC permit register access (Ashwin Sekhar T K)  [Orabug: 39318904]
- octeontx2-af: npa: cn20k: Add DPC support (Linu Cherian)  [Orabug: 39318904]
- octeontx2-af: npa: cn20k: Add debugfs support for Halo (Linu Cherian)  [Orabug: 39318904]
- octeontx2-af: npa: cn20k: Add NPA Halo support (Linu Cherian)  [Orabug: 39318904]
- octeontx2-af: Fix number of entries in the kpu3 cam (Kiran Kumar K)  [Orabug: 39318904]
- octeontx2-af: npc: cn20k: Fix subbank count (Ratheesh Kannoth)  [Orabug: 39318904]
- octeontx2-af: Fix number of entries in the kpu2 cam (Kiran Kumar K)  [Orabug: 39318904]
- octeontx2-af: add mbox to read default rule (Satheesh Paul)  [Orabug: 39318904]
- octeontx2-af: kpu: Input validation check. (Ratheesh Kannoth)  [Orabug: 39318904]
- octeontx2-af: kpu: Fix lodable profile issue (Ratheesh Kannoth)  [Orabug: 39318904]
- octeontx2-af: Convert to C99 flexible array (Anshumali Gaur)  [Orabug: 39318904]
- octeontx2-af: npc: cn20k: Restore stats in defrag (Ratheesh Kannoth)  [Orabug: 39318904]
- octeontx2-af: Flow delete and free mbox (Ratheesh Kannoth)  [Orabug: 39318904]
- octeontx2-af: Add traces in NPC mailboxes (Suman Ghosh)  [Orabug: 39318904]
- octeontx2-af: Fix KPU9 state variable for ROCEV2 (Kiran Kumar K)  [Orabug: 39318904]
- octeontx2-af: add support for ROCEv2 header parsing (Kiran Kumar K)  [Orabug: 39318904]
- octeontx2-af: add more VLAN tag parsing in case of E-tag (Kiran Kumar K)  [Orabug: 39318904]
- octeontx2-af: add changes to fragment flags for cn20k (Kiran Kumar K)  [Orabug: 39318904]
- octeontx2-af: Avoid updating cn10k registers during cn20k reboot (Suman Ghosh)  [Orabug: 39318904]
- octeontx2-af: Do not access match stats for cn20k (Subbaraya Sundeep)  [Orabug: 39318904]
- octeontx2-af: cn20k: Update NPC CSRs (Suman Ghosh)  [Orabug: 39318904]
- octeontx2-af: Fix out of bound access in entry2counter array (Ratheesh Kannoth)  [Orabug: 39318904]
- octeontx2-af: Fix initialization of mcam's entry2target_pffunc field (Suman Ghosh)  [Orabug: 39318904]
- octeontx2-af: add changes to fragment flag extraction in parse nibble (Kiran Kumar K)  [Orabug: 39318904]
- octeontx2-af: Fix CPT CGX channel mask for cn20k (Sai Krishna)  [Orabug: 39318904]
- octeontx2-af: add changes to fragment flag in KPU profile for CN20K (Kiran Kumar K)  [Orabug: 39318904]
- octeontx2-af: fix mcam hit counter (Satheesh Paul)  [Orabug: 39318904]
- Revert "octeontx2-af: npc: cn20k: Get base steer rule index." (Rahul Bhansali)  [Orabug: 39318904]
- octeontx2-af: npc: cn20k: fix rule type for LBK VF (Rahul Bhansali)  [Orabug: 39318904]
- octeontx2-af: Fix failed to load custom pfl warning (Ratheesh Kannoth)  [Orabug: 39318904]
- octeontx2-af: add changes to update CPT pad length offset in KPU (Kiran Kumar K)  [Orabug: 39318904]
- octeontx2-af: npc: cn20k: Fix search order (Ratheesh Kannoth)  [Orabug: 39318904]
- octeontx2-af: npc: Use dev_dbg() (Ratheesh Kannoth)  [Orabug: 39318904]
- octeontx2-af: Fix compilation warnings (Sunil Goutham)  [Orabug: 39318904]
- octeontx2: cn20k: npc: Set action2 for x2 entries. (Ratheesh Kannoth)  [Orabug: 39318904]
- octeontx2-af: cn20k: Enable action2 programming in npc (Bharat Bhushan)  [Orabug: 39318904]
- octeontx2-af: npc: cn20k: Set default profile DYNAMIC (Ratheesh Kannoth)  [Orabug: 39318904]
- octeontx2-af: npc: cn20k: Fix csr register field offset. (Satheesh Paul)  [Orabug: 39318904]
- octeontx2-af: npc: cn20k: Reject request for x4 entries in x2 profile. (Ratheesh Kannoth)  [Orabug: 39318904]
- octeontx2-af: npc: cn20k: Alloc mcam entry for install flow (Ratheesh Kannoth)  [Orabug: 39318904]
- octeontx2-af: Disable fw load faiure warning (Ratheesh Kannoth)  [Orabug: 39318904]
- octeontx2-af: Load custom kpu profile from filesystem. (Ratheesh Kannoth)  [Orabug: 39318904]
- octeontx2-af: npc: cn20k: Fix install flow priority (Kiran Kumar K)  [Orabug: 39318904]
- octeontx2-af: cn20k: Add support for custom mkex profiles (Suman Ghosh)  [Orabug: 39318904]
- octeontx2-af: npc: cn20k: Get base steer rule index. (Ratheesh Kannoth)  [Orabug: 39318904]
- octeontx2-af: npc: cn20k: Stats support (Ratheesh Kannoth)  [Orabug: 39318904]
- octeontx2-af: cn20k: Reject mcam alloc mbox with invalid keytype (Ratheesh Kannoth)  [Orabug: 39318904]
- octeontx2-pf: cn20k: Reserve x4 key mcam entries for ntuple (Ratheesh Kannoth)  [Orabug: 39318904]
- octeontx2-af: npc: cn20k: Get kex related info from PF. (Ratheesh Kannoth)  [Orabug: 39318904]
- octeontx2-af: npc: cn20k: Fix parse result nibble mask reading. (Ratheesh Kannoth)  [Orabug: 39318904]
- octeontx2-af: Set correct nibble bits for cn20k (Suman Ghosh)  [Orabug: 39318904]
- octeontx2-af: Fix parse nibble mask (Suman Ghosh)  [Orabug: 39318904]
- octeontx2-af: cn20k: Avoid accessing cn10k registers (Suman Ghosh)  [Orabug: 39318904]
- octeontx2-af: cn20k: Add new mailboxes for CN20K silicon (Suman Ghosh)  [Orabug: 39318904]
- octeontx2-af: Fix npc_mcam_get_hit_status mbox for cn10k (Ratheesh Kannoth)  [Orabug: 39318904]
- octeontx2-af: npc: cn20k: Convert vidx to mcam_idx in mbox handler (Ratheesh Kannoth)  [Orabug: 39318904]
- octeontx2-af: npc: cn20k: Add an mbox interface to defrag (Ratheesh Kannoth)  [Orabug: 39318904]
- octeontx2-af: npc: cn20k: defragmentation support (Ratheesh Kannoth)  [Orabug: 39318904]
- octeontx2-af: npc: cn20k: Introduce virtual mcam index (Ratheesh Kannoth)  [Orabug: 39318904]
- octeontx2-af: npc: cn20k: Validate mcam index before enable/disable (Ratheesh Kannoth)  [Orabug: 39318904]
- octeontx2-af: npc: cn20k: Add new mailboxes to get kex config and free counts (Suman Ghosh)  [Orabug: 39318904]
- octeontx2-af: npc: cn20k: Use common APIs to read/write/copy/enable mcam entry (Suman Ghosh)  [Orabug: 39318904]
- octeontx2-af: Add a new mbox to read/write MCAM hit status (Suman Ghosh)  [Orabug: 39318904]
- octeontx2-af: npc: cn20k: debugfs support (Ratheesh Kannoth)  [Orabug: 39318904]
- octeontx2-af: npc: cn20k: Use common APIs to alloc/free/get mcam index. (Ratheesh Kannoth)  [Orabug: 39318904]
- octeontx2-af: npc: cn20k: Allocate default mcam indexes. (Ratheesh Kannoth)  [Orabug: 39318904]
- octeontx2-af: npc: cn20k: Modify alloc entry mailbox (Suman Ghosh)  [Orabug: 39318904]
- ocetontx2-af: npc: cn20k: MKEX profile support (Suman Ghosh)  [Orabug: 39318904]
- octeontx2-af: npc: cn20k: KPM profile changes (Suman Ghosh)  [Orabug: 39318904]
- octeontx2-af: npc: cn20k: Index management. (Ratheesh Kannoth)  [Orabug: 39318904]
- octeontx2: Fix klockwork issues. (Suman Ghosh)  [Orabug: 39318904]
- octeontx2-af: Fix Support of FDSA tag (George Cherian)  [Orabug: 39318904]
- octeontx2-af: Support for FDSA tag (Hariprasad Kelam)  [Orabug: 39318904]
- octeontx2-af: Adding changes to parse stacked VLANs (Kiran Kumar K)  [Orabug: 39318904]
- Octeontx2-af: Skip overlap check for SPI field (Hariprasad Kelam)  [Orabug: 39318904]
- octeontx2-af: Fix issue with GRE parsing (Kiran Kumar K)  [Orabug: 39318904]
- octeontx2-af: Add support to parse more VLAN headers (Kiran Kumar K)  [Orabug: 39318904]
- octeontx2-af: Fix issue with IPV6 GRE and multi VLAN (Kiran Kumar K)  [Orabug: 39318904]
- octeontx2-af: Add KPU changes to parse fabric path header (Kiran Kumar K)  [Orabug: 39318904]
- octeontx2-af: Add few missing changes (Suman Ghosh)  [Orabug: 39318904]
- octeontx2-af: allow second pass pkts via default ucast entry (Nithin Dabilpuram)  [Orabug: 39318904]
- octeontx2-af: suppress kpu profile loading warning (Harman Kalra)  [Orabug: 39318904]
- octeontx2-af: use cpt channel mask in flow install path (Nithin Dabilpuram)  [Orabug: 39318904]
- octeontx2-af: Add NPC support to filter GTP-U and GTP-C packets based on TEID (Suman Ghosh)  [Orabug: 39318904]
- octeontx2: cn20k: Assign unique MCS IDs based on PCI enumeration (Subrat Pandey)  [Orabug: 39318904]
- octeontx2-pf: Choose macsec encryption offload per packet (Subbaraya Sundeep)  [Orabug: 39318904]
- octeontx2-af: mcs: Use new SCI CAM in hardware (Subbaraya Sundeep)  [Orabug: 39318904]
- octeontx2-pf: mcs: Fix mcs resources free on PF shutdown (Geetha sowjanya)  [Orabug: 39318904]
- octeontx2-af: mcs: Add devlink parameter to toggle MCS bypass mode (Geetha sowjanya)  [Orabug: 39318904]
- octeontx2-af: mcs: Display port mapped stats for cn20k (Subbaraya Sundeep)  [Orabug: 39318904]
- octeontx2-af: cn20k: Add MCS LMAC channel and count configuration (Geetha sowjanya)  [Orabug: 39318904]
- octeontx2-af: cn20k: mcs set mcs id and silicon check (Geetha sowjanya)  [Orabug: 39318904]
- octeontx2-af: cn20k: Fix mcs tx_sa_map API (Geetha sowjanya)  [Orabug: 39318904]
- octeontx2-af: cn20k: Add mcs PN threshold support (Geetha sowjanya)  [Orabug: 39318904]
- octeontx2-af: cn20k: MCS add port configure APIs (Geetha sowjanya)  [Orabug: 39318904]
- octeontx2-af: cn20K: Add MCS parser configuration (Geetha sowjanya)  [Orabug: 39318904]
- octeontx2-af: mcs: Fix mcs register offsets (Geetha sowjanya)  [Orabug: 39318904]
- octeontx2-af: mcs: Fix unsupported secy stats read (Geetha sowjanya)  [Orabug: 39318904]
- octeontx2-af: cn20k: Add MCS support (Linu Cherian)  [Orabug: 39318904]
- octeontx2-af: mcs: Remove SA stats support (Ratheesh Kannoth)  [Orabug: 39318904]
- octeontx2-af: cnf10k-b: mcs: Fix stats reg address (Geetha sowjanya)  [Orabug: 39318904]
- octeontx2-af: rvu: enable mcs fips mailboxes (Ankur Dwivedi)  [Orabug: 39318904]
- octeontx2-af: mcs: add mailboxes for fips (Ankur Dwivedi)  [Orabug: 39318904]
- octeontx2-af: sso: clear all the sets on init (Pavan Nikhilesh)  [Orabug: 39318904]
- octeontx2-af: tim: add ring priority support (Pavan Nikhilesh)  [Orabug: 39318904]
- octeontx2-af: update TIM interval support (Pavan Nikhilesh)  [Orabug: 39318904]
- octeontx2-af: moderate SSO AF error interrupts (Shijith Thotton)  [Orabug: 39318904]
- octeontx2-af: lower TIM bucket skip IRQ log level (Pavan Nikhilesh)  [Orabug: 39318904]
- octeontx2-af: cn20k: remove GTI clock adjustment (Pavan Nikhilesh)  [Orabug: 39318904]
- octeontx2-af: cn20k: update xaq aura offset (Pavan Nikhilesh)  [Orabug: 39318904]
- octeontx2-af: cn20k: cleanup SSO EVA on LF reset (Pavan Nikhilesh)  [Orabug: 39318904]
- octeontx2-af: add SSO HW info mbox (Pavan Nikhilesh)  [Orabug: 39318904]
- octeontx2-af: add SSO AGGR config and stats mbox (Pavan Nikhilesh)  [Orabug: 39318904]
- octeontx2-af: add SSO EVA error interrupts (Pavan Nikhilesh)  [Orabug: 39318904]
- octeontx2-af: update masks for CN20K resources (Pavan Nikhilesh)  [Orabug: 39318904]
- octeontx2-af: Fixed compilation warnings (Sunil Goutham)  [Orabug: 39318904]
- octeontx2-af: fix interval flag check (Pavan Nikhilesh)  [Orabug: 39318904]
- octeontx2-af: add TIM hardware info mbox (Pavan Nikhilesh)  [Orabug: 39318904]
- octeontx2-af: add TIM HWWQE mbox support (Pavan Nikhilesh)  [Orabug: 39318904]
- octeontx2-af: add mbox to capture counters (Pavan Nikhilesh)  [Orabug: 39318904]
- octeontx2-af: reveal only TIM params that are available (Shijith Thotton)  [Orabug: 39318904]
- octeontx2-af: add TIM error af interrupt handlers (Pavan Nikhilesh)  [Orabug: 39318904]
- octeontx2-af: clear state on TIM ring disable (Pavan Nikhilesh)  [Orabug: 39318904]
- octeontx2-af: disable preemption when enabling TIM (Pavan Nikhilesh)  [Orabug: 39318904]
- octeontx2-af: account for cycle wraparound (Pavan Nikhilesh)  [Orabug: 39318904]
- octeontx2-af: prevent TIM register read reorder (Pavan Nikhilesh)  [Orabug: 39318904]
- octeontx2-af: fix arguments passed to XAQ aura deinit (Shijith Thotton)  [Orabug: 39318904]
- octeontx2-af: debugfs: fix undefined SSO register access (Shijith Thotton)  [Orabug: 39318904]
- octeontx2-af: update TIM adjust GTI errata silicons (Shijith Thotton)  [Orabug: 39318904]
- octeontx2-af: update TIM adjust GTI errata silicons (Shijith Thotton)  [Orabug: 39318904]
- octeontx2-af: add TIM adjust GTI errata workaround (Shijith Thotton)  [Orabug: 39318904]
- octeontx2-af: cn10k: devlink params to configure TIM (Shijith Thotton)  [Orabug: 39318904]
- octeontx2-af: TIM: Set conditional clock always on (Geetha sowjanya)  [Orabug: 39318904]
- octeontx2-af: Apply relevant HW issue workarounds for 96xx B0 silicon (Sunil Goutham)  [Orabug: 39318904]
- octeontx2-af: Add SSO and TIM units support to the AF driver (Pavan Nikhilesh)  [Orabug: 39318904]
- octeontx2-af: enable rxc with lookaside cpt lf (Vidya Sagar Velumuri)  [Orabug: 39318904]
- octeontx2-af: fix issue with spitosa table teardown (Nithin Dabilpuram)  [Orabug: 39318904]
- octeontx2-af: fix cflags include paths (Wladislav Wiebe)  [Orabug: 39318904]
- octeontx2-af: Move out REE mbox messages (Linu Cherian)  [Orabug: 39318904]
- octeontx2-af: Add generic mbox handler for Eblock (Linu Cherian)  [Orabug: 39318904]
- octeontx2-af: Use AF extension block interface (Linu Cherian)  [Orabug: 39318904]
- octeontx2-af: Add RVU AF extension block interface (Linu Cherian)  [Orabug: 39318904]
- octeontx2-af: Introducing REE block for 98xx (Smadar Fuks)  [Orabug: 39318904]
- octeontx2-af: fix VF bringup affecting PF promiscous state (Harman Kalra)  [Orabug: 39318904]
- octeontx2-af: consider mode when using cpt base channel for bp (Nithin Dabilpuram)  [Orabug: 39318904]
- octeontx2-af: Update minimum receive frame size (Sathesh Edara)  [Orabug: 39318904]
- octeontx2-af: set default min and max rx len for CPT link (Nithin Dabilpuram)  [Orabug: 39318904]
- octeontx2-af: add NIX mbox message to get HW info (Shijith Thotton)  [Orabug: 39318904]
- octeontx2-af: fix inline inbound IPsec configuration (Srujana Challa)  [Orabug: 39318904]
- octeontx2-af: support for custom L2 header (Satheesh Paul A)  [Orabug: 39318904]
- octeontx2-af: fix to get different rq mask (Rakesh Kudurumalla)  [Orabug: 39318904]
- octeontx2-af: poll for tx link credits before link mode change (Naveen Mamindlapalli)  [Orabug: 39318904]
- octeontx2-af: Handle physical link state change requests (Hariprasad Kelam)  [Orabug: 39318904]
- octeontx2-af: Add mbox to alloc/free BPIDs (Geetha sowjanya)  [Orabug: 39318904]
- octeontx2-af: Dynamically allocate bpids for CPT and LBK (Geetha sowjanya)  [Orabug: 39318904]
- octeontx2-af: Add support for SPI to SA index translation (Kiran Kumar K)  [Orabug: 39318904]
- octeontx2-af: Update HW workarounds for 96xx C0, 98xx and F95xx B0 chips (Geetha sowjanya)  [Orabug: 39318904]
- octeontx2-pf: Add devlink support to configure TL1 RR_PRIO (Hariprasad Kelam)  [Orabug: 39318904]
- octeontx2-af: add support for CPT second pass (Rakesh Kudurumalla)  [Orabug: 39318904]
- octeontx2-af: add new mbox to support sync cycle on rx path (Satha Rao)  [Orabug: 39318904]
- octeontx2-af: add support for changing vlan tpid (Nithin Dabilpuram)  [Orabug: 39318904]
- octeontx2-pf: Fix devm_kcalloc() error checking (Dan Carpenter)  [Orabug: 39318904]
- octeontx2-pf: Use new bandwidth profiles in receive queue (Subbaraya Sundeep)  [Orabug: 39318904]
- octeontx2-af: Display new bandwidth profiles too in debugfs (Subbaraya Sundeep)  [Orabug: 39318904]
- octeontx2-af: Accommodate more bandwidth profiles for cn20k (Subbaraya Sundeep)  [Orabug: 39318904]
- octeontx2-pf: Initialize new NIX SQ context for cn20k (Subbaraya Sundeep)  [Orabug: 39318904]
- octeontx2-pf: Initialize cn20k specific aura and pool contexts (Linu Cherian)  [Orabug: 39318904]
- octeontx2-af: Skip NDC operations for cn20k (Linu Cherian)  [Orabug: 39318904]
- octeontx2-af: Extend debugfs support for cn20k NPA (Linu Cherian)  [Orabug: 39318904]
- octeontx2-af: Add cn20k NPA block contexts (Linu Cherian)  [Orabug: 39318904]
- octeontx2-af: Extend debugfs support for cn20k NIX (Subbaraya Sundeep)  [Orabug: 39318904]
- octeontx2-af: Add cn20k NIX block contexts (Subbaraya Sundeep)  [Orabug: 39318904]
- octeontx2-af: Simplify context writing and reading to hardware (Subbaraya Sundeep)  [Orabug: 39318904]
- octeontx2: convert to ndo_hwtstamp API (Vadim Fedorenko)  [Orabug: 39318904]
- Octeontx2-af: Fix pci_alloc_irq_vectors() return value check (Harshit Mogalapalli)  [Orabug: 39318904]
- Octeontx2-af: Fix missing error code in cgx_probe() (Harshit Mogalapalli)  [Orabug: 39318904]
- octeontx2-pf: fix bitmap leak (Bo Sun)  [Orabug: 39318904]
- octeontx2-vf: fix bitmap leak (Bo Sun)  [Orabug: 39318904]
- octeontx2-af: Remove unused declarations (Yue Haibing)  [Orabug: 39318904]
- Octeontx2-af: Fix NIX X2P calibration failures (Hariprasad Kelam)  [Orabug: 39318904]
- Octeontx2-vf: Fix max packet length errors (Hariprasad Kelam)  [Orabug: 39318904]
- Octeontx2-af: Broadcast XON on all channels (Hariprasad Kelam)  [Orabug: 39318904]
- octeontx2-af: use unsigned int as iterator for unsigned values (Simon Horman)  [Orabug: 39318904]
- net: Fix typos (Bjorn Helgaas)  [Orabug: 39318904]
- Octeontx2-af: Debugfs support for firmware data (Hariprasad Kelam)  [Orabug: 39318904]
- Octeontx2-af: RPM: Update DMA mask (Hariprasad Kelam)  [Orabug: 39318904]
- Octeontx2-af: Disable stale DMAC filters (Subbaraya Sundeep)  [Orabug: 39318904]
- Octeontx2-af: Add programmed macaddr to RVU pfvf (Hariprasad Kelam)  [Orabug: 39318904]
- octeontx2-af: Fix error code in rvu_mbox_init() (Dan Carpenter)  [Orabug: 39318904]
- Octeontx2-pf: ethtool: support multi advertise mode (Hariprasad Kelam)  [Orabug: 39318904]
- Octeontx2-af: Introduce mode group index (Hariprasad Kelam)  [Orabug: 39318904]
- Octeontx-pf: Update SGMII mode mapping (Hariprasad Kelam)  [Orabug: 39318904]
- octeontx2-af: Fix rvu_mbox_init return path (Subbaraya Sundeep)  [Orabug: 39318904]
- Octeontx2-pf: Fix Backpresure configuration (Hariprasad Kelam)  [Orabug: 39318904]
- octeontx2-pf: CN20K mbox implementation between PF-VF (Sai Krishna)  [Orabug: 39318904]
- octeontx2-af: CN20K mbox implementation for AF's VF (Sai Krishna)  [Orabug: 39318904]
- octeontx2-pf: CN20K mbox REQ/ACK implementation for NIC PF (Sai Krishna)  [Orabug: 39318904]
- octeontx2-af: CN20k mbox to support AF REQ/ACK functionality (Sai Krishna)  [Orabug: 39318904]
- octeontx2-af: CN20k basic mbox operations and structures (Sai Krishna)  [Orabug: 39318904]
- octeontx2: Set appropriate PF, VF masks and shifts based on silicon (Subbaraya Sundeep)  [Orabug: 39318904]
- octeontx2-pf: Avoid typecasts by simplifying otx2_atomic64_add macro (Subbaraya Sundeep)  [Orabug: 39318904]
- octeontx2: Annotate mmio regions as __iomem (Subbaraya Sundeep)  [Orabug: 39318904]
- octeontx2-pf: macsec: Get MACSEC capability flag from AF (Subbaraya Sundeep)  [Orabug: 39318904]
- octeontx2-af: Add MACSEC capability flag (Subbaraya Sundeep)  [Orabug: 39318904]
- octeontx2-af: Send Link events one by one (Subbaraya Sundeep)  [Orabug: 39318904]
- octeontx2-af: NPC: Clear Unicast rule on nixlf detach (Hariprasad Kelam)  [Orabug: 39318904]
- octeontx2-pf: Avoid adding dcbnl_ops for LBK and SDP vf (Suman Ghosh)  [Orabug: 39318904]
- octeontx2-pf: Add tracepoint for NIX_PARSE_S (Subbaraya Sundeep)  [Orabug: 39318904]
- octeontx2: Add new tracepoint otx2_msg_status (Subbaraya Sundeep)  [Orabug: 39318904]
- octeontx2: Add pcifunc also to mailbox tracepoints (Subbaraya Sundeep)  [Orabug: 39318904]
- octeontx2-af: Display names for CPT and UP messages (Subbaraya Sundeep)  [Orabug: 39318904]
- octeontx2-af: convert dev_dbg to tracepoint in mbox (Subbaraya Sundeep)  [Orabug: 39318904]
- octeontx2-pf: Fix ethtool support for SDP representors (Hariprasad Kelam)  [Orabug: 39318904]
- net: octeontx2: Use pure PCI devres API (Philipp Stanner)  [Orabug: 39318904]
- octeontx2-pf: AF_XDP: code clean up (Hariprasad Kelam)  [Orabug: 39318904]
- octeontx2-af: Remove unused rvu_npc_enable_bcast_entry (Dr. David Alan Gilbert)  [Orabug: 39318904]
- xfrm: Add explicit dev to .xdo_dev_state_{add,delete,free} (Cosmin Ratiu)  [Orabug: 39318904]
- octeontx2-pf: handle otx2_mbox_get_rsp errors (Chenyuan Yang)  [Orabug: 39318904]
- net: octeontx2: Handle XDP_ABORTED and XDP invalid as XDP_DROP (Lorenzo Bianconi)  [Orabug: 39318904]
- octeontx2-af: mcs: Remove redundant 'flush_workqueue()' calls (Chen Ni)  [Orabug: 39318904]
- net: octeontx2: Add metadata support for xdp mode (Lorenzo Bianconi)  [Orabug: 39318904]
- xfrm: provide common xdo_dev_offload_ok callback implementation (Leon Romanovsky)  [Orabug: 39318904]
- octeontx2: hide unused label (Arnd Bergmann)  [Orabug: 39318904]
- octeontx2-pf: AF_XDP zero copy transmit support (Suman Ghosh)  [Orabug: 39318904]
- octeontx2-pf: Prepare for AF_XDP (Suman Ghosh)  [Orabug: 39318904]
- octeontx2-pf: Reconfigure RSS table after enabling AF_XDP zerocopy on rx queue (Suman Ghosh)  [Orabug: 39318904]
- octeontx2-pf: AF_XDP zero copy receive support (Suman Ghosh)  [Orabug: 39318904]
- octeontx2-pf: use xdp_return_frame() to free xdp buffers (Suman Ghosh)  [Orabug: 39318904]
- octeontx2-pf: mcs: Remove dead code and semi-colon from rsrc_name() (Nihar Chaithanya)  [Orabug: 39318904]
- octeontx2-pf: fix error handling of devlink port in rvu_rep_create() (Harshit Mogalapalli)  [Orabug: 39318904]
- octeontx2-pf: fix netdev memory leak in rvu_rep_create() (Harshit Mogalapalli)  [Orabug: 39318904]
- octeontx2-af: fix build regression without CONFIG_DCB (Arnd Bergmann)  [Orabug: 39318904]
- cn10k-ipsec: Fix compilation error when CONFIG_XFRM_OFFLOAD disabled (Bharat Bhushan)  [Orabug: 39318904]
- octeontx2-af: Fix installation of PF multicast rule (Geetha sowjanya)  [Orabug: 39318904]
- cn10k-ipsec: Enable outbound ipsec crypto offload (Bharat Bhushan)  [Orabug: 39318904]
- cn10k-ipsec: Allow ipsec crypto offload for skb with SA (Bharat Bhushan)  [Orabug: 39318904]
- cn10k-ipsec: Process outbound ipsec crypto offload (Bharat Bhushan)  [Orabug: 39318904]
- cn10k-ipsec: Add SA add/del support for outb ipsec crypto offload (Bharat Bhushan)  [Orabug: 39318904]
- cn10k-ipsec: Init hardware for outbound ipsec crypto offload (Bharat Bhushan)  [Orabug: 39318904]
- octeontx2-af: Disable backpressure between CPT and NIX (Bharat Bhushan)  [Orabug: 39318904]
- octeontx2-pf: Move skb fragment map/unmap to common code (Bharat Bhushan)  [Orabug: 39318904]
- octeontx2-pf: map skb data as device writeable (Bharat Bhushan)  [Orabug: 39318904]
- octeontx2-af: Fix SDP MAC link credits configuration (Geetha sowjanya)  [Orabug: 39318904]
- octeontx2-pf: Fix spelling mistake "reprentator" -> "representor" (Colin Ian King)  [Orabug: 39318904]
- octeontx2-pf: Adds TC offload support (Geetha sowjanya)  [Orabug: 39318904]
- octeontx2-pf: Implement offload stats ndo for representors (Geetha sowjanya)  [Orabug: 39318904]
- octeontx2-pf: Add devlink port support (Geetha sowjanya)  [Orabug: 39318904]
- octeontx2-pf: Add representors for sdp MAC (Geetha sowjanya)  [Orabug: 39318904]
- octeontx2-pf: Configure VF mtu via representor (Geetha sowjanya)  [Orabug: 39318904]
- octeontx2-pf: Add support to sync link state between representor and VFs (Geetha sowjanya)  [Orabug: 39318904]
- octeontx2-pf: Get VF stats via representor (Geetha sowjanya)  [Orabug: 39318904]
- octeontx2-af: Add packet path between representor and VF (Geetha sowjanya)  [Orabug: 39318904]
- octeontx2-pf: Add basic net_device_ops (Geetha sowjanya)  [Orabug: 39318904]
- octeontx2-pf: Create representor netdev (Geetha sowjanya)  [Orabug: 39318904]
- octeontx2-pf: RVU representor driver (Geetha sowjanya)  [Orabug: 39318904]
- octeontx2-af: Knobs for NPC default rule counters (Linu Cherian)  [Orabug: 39318904]
- octeontx2-af: Refactor few NPC mcam APIs (Linu Cherian)  [Orabug: 39318904]
- octeontx2-pf: Move shared APIs to header file (Geetha sowjanya)  [Orabug: 39318904]
- octeontx2-pf: Reuse PF max mtu value (Geetha sowjanya)  [Orabug: 39318904]
- octeontx2-pf: Add new APIs for queue memory alloc/free. (Geetha sowjanya)  [Orabug: 39318904]
- octeontx2-pf: Define common API for HW resources configuration (Geetha sowjanya)  [Orabug: 39318904]
- net: marvell: use ethtool string helpers (Rosen Penev)  [Orabug: 39318904]
- uek: kabi: update kABI files for new symbols (Saeed Mirzamohammadi)  [Orabug: 39268116]
- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Jeff Layton)  [Orabug: 39167615]  {CVE-2026-31402}
- netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal)  [Orabug: 39110670]  {CVE-2026-23278}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (Victor Nogueira)  [Orabug: 39103229]  {CVE-2026-23270}

[6.12.0-203.76.3]
- sched/deadline: Use revised wakeup rule for dl_server (Peter Zijlstra)
- netfilter: nfnetlink_queue: make hash table per queue (Florian Westphal) [Orabug: 39339273] {CVE-2026-43084}
- netfilter: nfnetlink_queue: nfqnl_instance GFP_ATOMIC -> GFP_KERNEL_ACCOUNT allocation (Scott Mitchell)
- Revert "drm/xe: Switch MMIO interface to take xe_mmio instead of xe_gt" (Sasha Levin)
- Revert "drm/xe/mmio: Avoid double-adjust in 64-bit reads" (Sasha Levin)
- iommu/amd: Fix ivrs_base memleak in early_amd_iommu_init() (Zhen Ni) [Orabug: 39145066]
- iommu/amd: Fix header file (Vasant Hegde) [Orabug: 39145066]
- iommu/amd: Preserve default DTE fields when updating Host Page Table Root (Alejandro Jimenez) [Orabug: 39145066]
- iommu/amd: Enable support for up to 2K interrupts per function (Kishon Vijay Abraham I) [Orabug: 39145066]
- iommu/amd: Rename DTE_INTTABLEN* and MAX_IRQS_PER_TABLE macro (Sairaj Kodilkar) [Orabug: 39145066]
- iommu/amd: Replace slab cache allocator with page allocator (Sairaj Kodilkar) [Orabug: 39145066]
- iommu/amd: Introduce generic function to set multibit feature value (Sairaj Kodilkar) [Orabug: 39145066]
- iommu/amd: Remove amd_iommu_apply_erratum_63() (Suravee Suthikulpanit) [Orabug: 39145066]
- iommu/amd: Lock DTE before updating the entry with WRITE_ONCE() (Suravee Suthikulpanit) [Orabug: 39145066]
- iommu/amd: Modify clear_dte_entry() to avoid in-place update (Suravee Suthikulpanit) [Orabug: 39145066]
- iommu/amd: Introduce helper function get_dte256() (Suravee Suthikulpanit) [Orabug: 39145066]
- iommu/amd: Modify set_dte_entry() to use 256-bit DTE helpers (Suravee Suthikulpanit) [Orabug: 39145066]
- iommu/amd: Introduce helper function to update 256-bit DTE (Suravee Suthikulpanit) [Orabug: 39145066]
- iommu/amd: Introduce struct ivhd_dte_flags to store persistent DTE flags (Suravee Suthikulpanit) [Orabug: 39145066]
- iommu/amd: Disable AMD IOMMU if CMPXCHG16B feature is not supported (Suravee Suthikulpanit) [Orabug: 39145066]
- iommu/amd: Misc ACPI IVRS debug info clean up (Suravee Suthikulpanit) [Orabug: 39145066]
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [Orabug: 39250685,39331108] {CVE-2026-43078}
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [Orabug: 39250685]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [Orabug: 39250685,39300909] {CVE-2026-43033}
- crypto: authenc - use memcpy_sglist() instead of null skcipher (Eric Biggers) [Orabug: 39250685]
- crypto: algif_aead - snapshot IV for async AEAD requests (Douya Le) [Orabug: 39250685]
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [Orabug: 39250685,39283866,39291972,39292190] {CVE-2026-31431}
- crypto: algif_aead - use memcpy_sglist() instead of null skcipher (Eric Biggers) [Orabug: 39250685]
- crypto: scatterwalk - Backport memcpy_sglist() (Eric Biggers) [Orabug: 39250685]
- iommu/arm-smmu-v3: Handle zeroed A4-2C HTTU override settings (Joao Martins) [Orabug: 39260974]

[6.12.0-203.76.2]
- Revert "rds: Drop rds conn in connect worker if not in down state." (Vijayendra Suman) [Orabug: 39276980]
- uek-rpm/config-aarch64: Enable NVIDIA-recommended Vera-Rubin configs (Vijay Kumar) [Orabug: 39157707]
- kselftest/arm64: Add HWCAP test for FEAT_LS64 (Yicong Yang) [Orabug: 39157707]
- arm64: Provide basic EL2 setup for FEAT_{LS64, LS64_V} usage at EL0/1 (Yicong Yang) [Orabug: 39157707]
- perf: arm_spe: Relax period restriction (Leo Yan) [Orabug: 39157707]
- perf/arm_cspmu: Add PMEVFILT2R support (Robin Murphy) [Orabug: 39157707]
- ACPI: CPPC: Add IS_OPTIONAL_CPC_REG macro to judge if a cpc_reg is optional (Lifeng Zheng) [Orabug: 39157707]
- dt-bindings: gpio: Add Tegra256 support (Prathamesh Shete) [Orabug: 39157707]
- perf/arm_cspmu: nvidia: Add revision id matching (Besar Wicaksono) [Orabug: 39157707]
- arm64: Handle BRBE booting requirements (Anshuman Khandual) [Orabug: 39157707]
- arm64: el2_setup.h: Make __init_el2_fgt labels consistent, again (Rob Herring) [Orabug: 39157707]
- arm64/gcs: Provide basic EL2 setup to allow GCS usage at EL0 and EL1 (Mark Brown) [Orabug: 39157707]
- tools headers arm64: Add NVIDIA Olympus part (Besar Wicaksono) [Orabug: 39157707]
- perf arm-spe: Add NVIDIA Olympus to neoverse list (Besar Wicaksono) [Orabug: 39157707]
- perf arm_spe: Add CPU variants supporting common data source packet (Leo Yan) [Orabug: 39157707]
- arch_topology: Provide a stub topology_core_has_smt() for !CONFIG_GENERIC_ARCH_TOPOLOGY (Yicong Yang) [Orabug: 39157707]
- perf: arm_pmuv3: Don't use PMCCNTR_EL0 on SMT cores (Yicong Yang) [Orabug: 39157707]
- perf: arm_pmuv3: Factor out PMCCNTR_EL0 use conditions (Yicong Yang) [Orabug: 39157707]
- perf/arm_cspmu: nvidia: Add pmevfiltr2 support (Besar Wicaksono) [Orabug: 39157707]
- perf/arm_cspmu: Add pmpidr support (Besar Wicaksono) [Orabug: 39157707]
- perf/arm_cspmu: Move register definitons to header (Robin Murphy) [Orabug: 39157707]
- perf/arm_cspmu: Add callback to reset filter config (Besar Wicaksono) [Orabug: 39157707]
- perf/arm_cspmu: Generalise event filtering (Robin Murphy) [Orabug: 39157707]
- perf: arm_pmuv3: Add support for the Branch Record Buffer Extension (BRBE) (Rob Herring) [Orabug: 39157707]
- arm64/sysreg: Add BRBE registers and fields (Anshuman Khandual) [Orabug: 39157707]
- perf: arm_pmu: Move PMUv3-specific data (Mark Rutland) [Orabug: 39157707]
- perf: apple_m1: Don't disable counter in m1_pmu_enable_event() (Rob Herring) [Orabug: 39157707]
- perf: arm_v7_pmu: Don't disable counter in (armv7|krait_|scorpion_)pmu_enable_event() (Rob Herring) [Orabug: 39157707]
- perf: arm_v7_pmu: Drop obvious comments for enabling/disabling counters and interrupts (Rob Herring) [Orabug: 39157707]
- perf: arm_pmuv3: Don't disable counter in armv8pmu_enable_event() (Mark Rutland) [Orabug: 39157707]
- ACPI: CPPC: Rename EPP constants for clarity (Sumit Gupta) [Orabug: 39157707]
- ACPI: CPPC: Add three functions related to autonomous selection (Lifeng Zheng) [Orabug: 39157707]
- ACPI: CPPC: Modify cppc_get_auto_sel_caps() to cppc_get_auto_sel() (Lifeng Zheng) [Orabug: 39157707]
- cpufreq/amd-pstate: Store the boost numerator as highest perf again (Mario Limonciello) [Orabug: 39157707]
- ACPI: CPPC: Refactor register value get and set ABIs (Lifeng Zheng) [Orabug: 39157707]
- ACPI: CPPC: Add cppc_set_reg_val() (Lifeng Zheng) [Orabug: 39157707]
- ACPI: CPPC: Extract cppc_get_reg_val_in_pcc() (Lifeng Zheng) [Orabug: 39157707]
- ACPI: CPPC: Rename cppc_get_perf() to cppc_get_reg_val() (Lifeng Zheng) [Orabug: 39157707]
- ACPI: CPPC: Optimize cppc_get_perf() (Lifeng Zheng) [Orabug: 39157707]
- ACPI: CPPC: Factor out and export per-cpu cppc_perf_ctrs_in_pcc_cpu() (Jie Zhan) [Orabug: 39157707]
- ACPI: CPPC: Clean up cppc_perf_caps and cppc_perf_ctrls structs (Sumit Gupta) [Orabug: 39157707]
- cpufreq: CPPC: Add generic helpers for sysfs show/store (Sumit Gupta) [Orabug: 39157707]
- cpufreq: CPPC: Add support for autonomous selection (Lifeng Zheng) [Orabug: 39157707]
- PCI: Add PCI_BRIDGE_NO_ALIAS quirk for ASPEED AST1150 (Nirmoy Das) [Orabug: 39157707]
- PCI: Add ASPEED vendor ID to pci_ids.h (Nirmoy Das) [Orabug: 39157707]
- i2c: tegra: Add support for SW mutex register (Kartik) [Orabug: 39157707]
- i2c: tegra: Use internal reset when reset property is not available (Akhil R) [Orabug: 39157707]
- i2c: tegra: Add HS mode support (Akhil R) [Orabug: 39157707]
- i2c: tegra: Update Tegra256 timing parameters (Akhil R) [Orabug: 39157707]
- i2c: tegra: Use separate variables for fast and fastplus (Akhil R) [Orabug: 39157707]
- i2c: tegra: Add Tegra264 support (Akhil R) [Orabug: 39157707]
- i2c: tegra: Add Tegra256 support (Akhil R) [Orabug: 39157707]
- i2c: tegra: Do not configure DMA if not supported (Kartik) [Orabug: 39157707]
- gpio: tegra186: Fix GPIO name collisions for Tegra410 (Kartik) [Orabug: 39157707]
- gpio: tegra186: Use generic macro for port definitions (Kartik) [Orabug: 39157707]
- gpio: tegra186: Add support for Tegra410 (Prathamesh Shete) [Orabug: 39157707]
- gpio: tegra186: Add support for Tegra256 (Prathamesh Shete) [Orabug: 39157707]
- arm64: acpi: Enable ACPI CCEL support (Suzuki K Poulose) [Orabug: 39157707]
- arm64: Enable EFI secret area Securityfs support (Suzuki K Poulose) [Orabug: 39157707]
- arm64: realm: ioremap: Allow mapping memory as encrypted (Suzuki K Poulose) [Orabug: 39157707]
- arm64: Document Arm Confidential Compute (Steven Price) [Orabug: 39157707]
- virt: arm-cca-guest: TSM_REPORT support for realms (Sami Mujawar) [Orabug: 39157707]
- arm64: Enable memory encrypt for Realms (Suzuki K Poulose) [Orabug: 39157707]
- arm64: mm: Avoid TLBI when marking pages as valid (Steven Price) [Orabug: 39157707]
- arm64: Enforce bounce buffers for realm DMA (Steven Price) [Orabug: 39157707]
- efi: arm64: Map Device with Prot Shared (Suzuki K Poulose) [Orabug: 39157707]
- arm64: rsi: Map unprotected MMIO as decrypted (Suzuki K Poulose) [Orabug: 39157707]
- arm64: rsi: Add support for checking whether an MMIO is protected (Suzuki K Poulose) [Orabug: 39157707]
- arm64: realm: Query IPA size from the RMM (Steven Price) [Orabug: 39157707]
- arm64: Detect if in a realm and set RIPAS RAM (Suzuki K Poulose) [Orabug: 39157707]
- arm64: rsi: Add RSI definitions (Suzuki K Poulose) [Orabug: 39157707]
- PCI/TPH: Add TPH documentation (Wei Huang) [Orabug: 39157707]
- PCI/TPH: Add Steering Tag support (Wei Huang) [Orabug: 39157707]
- PCI: Add TLP Processing Hints (TPH) support (Wei Huang) [Orabug: 39157707]
- sched: Update rq->avg_idle when a task is moved to an idle CPU (Shubhang Kaushik) [Orabug: 39214522]
- arm64: mte: Set TCMA1 whenever MTE is present in the kernel (Carl Worth) [Orabug: 39214522]
- x86/CPU: Fix FPDSS on Zen1 (Borislav Petkov) [Orabug: 39241227,39273721] {CVE-2026-31628}
- uek-rpm: Enable FWCTL modules for aarch64 (Dave Kleikamp) [Orabug: 39252919]
- uek-rpm: CONFIG_INTEL_IOMMU_SCALABLE_MODE_DEFAULT_ON should be set (Dave Kleikamp) [Orabug: 39259550]

[6.12.0-203.76.1]
- Revert "EDAC: Octeon: Init SDEI" (Jeremy Tang) [Orabug: 39203407]

[6.12.0-202.76.2]
- ipv6: use RCU in ip6_xmit() (Eric Dumazet) [Orabug: 38649060,39186444,39202432] {CVE-2025-40135}
- dst: fix races in rt6_uncached_list_del() and rt_del_uncached_list() (Eric Dumazet) [Orabug: 38887740,39181101,39202431] {CVE-2026-23004}
- net: bridge: fix nd_tbl NULL dereference when IPv6 is disabled (Fernando Fernandez Mancera) [Orabug: 39029337,39131054] {CVE-2026-23381}
- io_uring/kbuf: check if target buffer list is still legacy on recycle (Jens Axboe) [Orabug: 39144150,39343763] {CVE-2026-43366}
- spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Breno Leitao) [Orabug: 38970584,39166116] {CVE-2026-23207}
- spi: tegra210-quad: Check hardware status on timeout (Vishwaroop A) [Orabug: 39166116]
- spi: tegra210-quad: Refactor error handling into helper functions (Vishwaroop A) [Orabug: 39166116]
- spi: tegra210-quad: Add support for internal DMA (Vishwaroop A) [Orabug: 39166116]
- spi: tegra210-quad: Update dummy sequence configuration (Vishwaroop A) [Orabug: 39166116]
- iommufd/device: Add helper to detect the first attach of a group (Yi Liu) [Orabug: 39166116]
- iommufd/device: Replace idev->igroup with local variable (Yi Liu) [Orabug: 39166116]
- iommufd/device: Only add reserved_iova in non-pasid path (Yi Liu) [Orabug: 39166116]
- iommufd: Pass @pasid through the device attach/replace path (Yi Liu) [Orabug: 39166116]
- iommu: Drop iommu_group_replace_domain() (Yi Liu) [Orabug: 39166116]
- arm64: contpte: fix set_access_flags() no-op check for SMMU/ATS faults (Piotr Jaroszynski) [Orabug: 39166116]

[6.12.0-202.76.1]
- uek-rpm/config-x86_64-onos: Reduce unneeded options in config file for ONOS (Brian Utterback) [Orabug: 39029491]
- Kconfig for ARISTA_SCD_DRIVER driver needs select REGMAP_I2C (Brian Utterback) [Orabug: 39095293]
- memfd: move MFD_MF_KEEP_UE_MAPPED flag to higher bit (William Roche) [Orabug: 39109772]
- uek-rpm: Enable CONFIG_NET_VRF in container kernel (Boris Ostrovsky) [Orabug: 39161478]
- sched: idle: Make skipping governor callbacks more consistent (Rafael J. Wysocki)
- dpaa2-switch: Fix interrupt storm after receiving bad if_id in IRQ handler (Guenter Roeck)
- soc: rockchip: grf: Add missing of_node_put() when returning (Shawn Lin)
- tracing: Add NULL pointer check to trigger_data_free() (Guenter Roeck) [Orabug: 39227772] {CVE-2026-23309}
- qmi_wwan: allow max_mtu above hard_mtu to control rx_urb_size (Laurent Vivier)
- bpf: Fix unsound scalar forking in maybe_fork_scalars() for BPF_OR (Daniel Wade) [Orabug: 39198231] {CVE-2026-31413}
- ASoC: SOF: ipc4-topology: Allow bytes controls without initial payload (Peter Ujfalusi)
- Bluetooth: L2CAP: Fix stack-out-of-bounds read in l2cap_ecred_conn_req (Minseo Park) [Orabug: 39251164] {CVE-2026-31513}
- Revert "arm64: dts: qcom: sdm845-oneplus: Mark l14a regulator as boot-on" (Sasha Levin)
- erofs: set fileio bio failed in short read case (Sheng Yong) [Orabug: 39251169] {CVE-2026-31514}
- ACPI: processor: Fix previous acpi_processor_errata_piix4() fix (Rafael J. Wysocki) [Orabug: 39198208] {CVE-2026-23443}
- kbuild: Leave objtool binary around with 'make clean' (Nathan Chancellor)
- wifi: wlcore: Return -ENOMEM instead of -EAGAIN if there is not enough headroom (Guenter Roeck) [Orabug: 39262447] {CVE-2026-31552}
- net: macb: Reinitialize tx/rx queue pointer registers and rx ring during resume (Kevin Hao)
- net: macb: Introduce gem_init_rx_ring() (Kevin Hao)
- net: macb: Shuffle the tx ring before enabling tx (Kevin Hao)
- remoteproc: mediatek: Unprepare SCP clock during system suspend (Tzung-Bi Shih)
- LTS version: v6.12.76 (Sherry Yang)
- Revert "x86/kexec: add a sanity check on previous kernel's ima kexec buffer" (Sasha Levin)
- LTS version: v6.12.75 (Sherry Yang)
- most: core: fix leak on early registration failure (Johan Hovold)
- arm64: Fix sampling the "stable" virtual counter in preemptible section (Marc Zyngier)
- xfs: fix copy-paste error in previous fix (Darrick J. Wong)
- drm/i915/wakeref: clean up INTEL_WAKEREF_PUT_* flag macros (Jani Nikula)
- ALSA: pcm: Revert bufs move in snd_pcm_xfern_frames_ioctl() (Nathan Chancellor)
- NTB: ntb_transport: Fix too small buffer for debugfs_name (Koichiro Den)
- tracing: Wake up poll waiters for hist files when removing an event (Petr Pavlu)
- tracing: Fix checking of freed trace_event_file for hist files (Petr Pavlu)
- fgraph: Do not call handlers direct when not using ftrace_ops (Steven Rostedt)
- tracing: ring-buffer: Fix to check event length before using (Masami Hiramatsu) [Orabug: 39331678] {CVE-2026-43210}
- net: nfc: nci: Fix parameter validation for packet data (Michael Thalmeier)
- drm/amdgpu: keep vga memory on MacBooks with switchable graphics (Alex Deucher)
- arm64: Force the use of CNTVCT_EL0 in __delay() (Marc Zyngier)
- x86/kexec: Copy ACPI root pointer address from config table (Ard Biesheuvel)
- net/sched: act_skbedit: fix divide-by-zero in tcf_skbedit_hash() (Liu Ruitong) [Orabug: 39331784] {CVE-2026-43238}
- net: ethernet: ec_bhf: Fix dma_free_coherent() dma handle (Thomas Fourier)
- ASoC: amd: yc: Add DMI quirk for ASUS Vivobook Pro 15X M6501RR (Gustavo Salvini)
- cifs: some missing initializations on replay (Shyam Prasad N) [Orabug: 39300554] {CVE-2026-31693}
- fbcon: Remove struct fbcon_display.inverse (Thomas Zimmermann)
- fbdev: ffb: fix corrupted video output on Sun FFB1 (Ren? Rebe)
- fbdev: of: display_timing: fix refcount leak in of_get_display_timings() (Weigang He) [Orabug: 39331889] {CVE-2026-43264}
- fbdev: vt8500lcdfb: fix missing dma_free_coherent() (Thomas Fourier)
- fbcon: check return value of con2fb_acquire_newinfo() (Andrey Vatoropin) [Orabug: 39331303] {CVE-2026-43123}
- mm: numa_memblks: Identify the accurate NUMA ID of CFMW (Cui Chao)
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (Junxi Qian) [Orabug: 39331577] {CVE-2026-43186}
- function_graph: Restore direct mode when callbacks drop to one (Shengming Hu)
- atm: fore200e: fix use-after-free in tasklets during device removal (Duoming Zhou)
- net: intel: fix PCI device ID conflict between i40e and ipw2200 (Ethan Nelson-Moore)
- procfs: fix possible double mmput() in do_procmap_query() (Andrii Nakryiko) [Orabug: 39339241] {CVE-2026-43178}
- drm/amdgpu: fix sync handling in amdgpu_dma_buf_move_notify (Pierre-Eric Pelloux-Prayer) [Orabug: 39343623] {CVE-2026-43318}
- drm/amd/display: Increase DCN35 SR enter/exit latency (Sun Peng Li)
- io_uring/filetable: clamp alloc_hint to the configured alloc range (Jens Axboe)
- tracing: Fix to set write permission to per-cpu buffer_size_kb (Masami Hiramatsu)
- net: macb: Fix tx/rx malfunction after phy link down and up (Kevin Hao)
- net: ti: icssg-prueth: Add optional dependency on HSR (Kevin Hao)
- octeontx2-af: CGX: fix bitmap leaks (Bo Sun)
- net: wan/fsl_ucc_hdlc: Fix dma_free_coherent() in uhdlc_memclean() (Thomas Fourier)
- net: ethernet: marvell: skge: remove incorrect conflicting PCI ID (Ethan Nelson-Moore)
- LoongArch: Disable instrumentation for setup_ptwalker() (Tiezhu Yang)
- LoongArch: Guard percpu handler under !CONFIG_PREEMPT_RT (Tiezhu Yang)
- LoongArch: Use %px to print unmodified unwinding address (Tiezhu Yang)
- LoongArch: Prefer top-down allocation after arch_mem_init() (Huacai Chen)
- LoongArch: Make cpumask_of_node() robust against NUMA_NO_NODE (John Garry)
- rust: kbuild: pass -Zunstable-options for Rust 1.95.0 (Miguel Ojeda)
- ceph: supply snapshot context in ceph_zero_partial_object() (Ethanwu) [Orabug: 39331924] {CVE-2026-43273}
- MIPS: rb532: Fix MMIO UART resource registration (Jiaxun Yang)
- cifs: Fix locking usage for tcon fields (Shyam Prasad N) [Orabug: 39331696] {CVE-2026-43215}
- watchdog/softlockup: fix sample ring index wrap in need_counting_irqs() (Shengming Hu)
- kcsan, compiler_types: avoid duplicate type issues in BPF Type Format (Alan Maguire)
- staging: rtl8723bs: fix null dereference in find_network (Ethan Tidmore)
- parisc: kernel: replace kfree() with put_device() in create_tree_node() (Haoxiang Li)
- PCI: Fix pci_slot_trylock() error handling (Jinhui Guo) [Orabug: 39331680] {CVE-2026-43211}
- net: cpsw_new: Fix unnecessary netdev unregistration in cpsw_probe() error path (Kevin Hao)
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (Sunday Clement) [Orabug: 39331661] {CVE-2026-43206}
- tipc: fix RCU dereference race in tipc_aead_users_dec() (Daniel Hodges)
- mtd: rawnand: pl353: Fix software ECC support (Andrea Scian)
- usb: dwc2: fix resume failure if dr_mode is host (Jisheng Zhang)
- usb: dwc3: gadget: Move vbus draw to workqueue context (Prashanth K) [Orabug: 39331512] {CVE-2026-43170}
- PCI: dwc: Fix msg_atu_index assignment (Niklas Cassel)
- mm/slab: use unsigned long for orig_size to ensure proper metadata align (Harry Yoo)
- scsi: ufs: core: Flush exception handling work when RPM level is zero (Thomas Yen) [Orabug: 39331937] {CVE-2026-43275}
- perf/arm-cmn: Reject unsupported hardware configurations (Robin Murphy) [Orabug: 39331435] {CVE-2026-43150}
- remoteproc: imx_rproc: Fix invalid loaded resource table detection (Peng Fan)
- btrfs: continue trimming remaining devices on failure (Jinbaohong)
- clk: rs9: Reserve 8 struct clk_hw slots for for 9FGV0841 (Marek Vasut)
- arm64: Fix non-atomic __READ_ONCE() with CONFIG_LTO=y (Marco Elver)
- PCI/IOV: Fix race between SR-IOV enable/disable and hotplug (Niklas Schnelle)
- Revert "PCI/IOV: Add PCI rescan-remove locking when enabling/disabling SR-IOV" (Niklas Schnelle) [Orabug: 39331422] {CVE-2026-43147}
- kexec: derive purgatory entry from symbol (Li Chen) [Orabug: 39343538] {CVE-2026-43289}
- ocfs2: fix reflink preserve cleanup issue (Heming Zhao) [Orabug: 39331504] {CVE-2026-43168}
- rapidio: replace rio_free_net() with kfree() in rio_scan_alloc_net() (Haoxiang Li)
- mm/highmem: fix __kmap_to_page() build error (William Tambe)
- mtd: spinand: Disable continuous read during probe (David Laporte)
- iio: gyro: itg3200: Fix unchecked return value in read_raw (Antoniu Miclaus)
- powerpc/smp: Add check for kcalloc() failure in parse_thread_groups() (Guangshuo Li)
- vhost: move vdpa group bound check to vhost_vdpa (Eugenio P?rez) [Orabug: 39331827] {CVE-2026-43248}
- tools: Fix bitfield dependency failure (Leo Yan)
- arm64: poe: fix stale POR_EL0 values for ptrace (Joey Gouly)
- dm mpath: make pg_init_delay_msecs settable (Benjamin Marzinski)
- bus: fsl-mc: fix an error handling in fsl_mc_device_add() (Haoxiang Li)
- io_uring/net: don't continue send bundle if poll was required for retry (Jens Axboe)
- usb: gadget: tegra-xudc: Add handling for BLCG_COREPLL_PWRDN (Haotien Hsu)
- mm/vmalloc: prevent RCU stalls in kasan_release_vmalloc_node (Deepanshu Kartikey) [Orabug: 39343546] {CVE-2026-43292}
- nvmem: Drop OF node reference on nvmem_add_one_cell() failure (Krzysztof Kozlowski)
- nfsd: fix return error code for nfsd_map_name_to_[ug]id (Anthony Iliopoulos)
- md/bitmap: fix GPF in write_page caused by resize race (Jack Wang) [Orabug: 39331482] {CVE-2026-43163}
- xfs: check for deleted cursors when revalidating two btrees (Darrick J. Wong) [Orabug: 39103129] {CVE-2026-23249}
- xfs: check return value of xchk_scrub_create_subord (Darrick J. Wong) [Orabug: 39103131] {CVE-2026-23250}
- xfs: only call xf{array,blob}_destroy if we have a valid pointer (Darrick J. Wong) [Orabug: 39103133] {CVE-2026-23251}
- pinctrl: intel: Add code name documentation (Raag Jadav)
- PCI: endpoint: Fix swapped parameters in pci_{primary/secondary}_epc_epf_unlink() functions (Manikanta Maddireddy)
- KVM: x86: Add SRCU protection for reading PDPTRs in __get_sregs2() (Vasiliy Kovalev) [Orabug: 39331693] {CVE-2026-43214}
- xfs: fix remote xattr valuelblk check (Darrick J. Wong)
- xfs: fix the xattr scrub to detect freemap/entries array collisions (Darrick J. Wong)
- xfs: fix freemap adjustments when adding xattrs to leaf blocks (Darrick J. Wong) [Orabug: 39331458] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (Darrick J. Wong) [Orabug: 39331580] {CVE-2026-43187}
- iio: accel: adxl380: Avoid reading more entries than present in FIFO (Francesco Lavra)
- mfd: omap-usb-host: Fix OF populate on driver rebind (Johan Hovold)
- mfd: qcom-pm8xxx: Fix OF populate on driver rebind (Johan Hovold)
- mfd: core: Add locking around 'mfd_of_node_list' (Douglas Anderson) [Orabug: 39331409] {CVE-2026-43143}
- iommu/vt-d: Flush dev-IOTLB only when PCIe device is accessible in scalable mode (Jinhui Guo) [Orabug: 39331341] {CVE-2026-43130}
- media: verisilicon: AV1: Fix tile info buffer size (Benjamin Gaignard)
- xfs: remove xfs_attr_leaf_hasname (Christoph Hellwig) [Orabug: 39331444] {CVE-2026-43153}
- xfs: mark data structures corrupt on EIO and ENODATA (Darrick J. Wong)
- drm/bridge: anx7625: Fix invalid EDID size (Loic Poulain)
- drm/buddy: Prevent BUG_ON by validating rounded allocation (Sanjay Yadav) [Orabug: 39331510] {CVE-2026-43169}
- selftests/mm/charge_reserved_hugetlb: drop mount size for hugetlbfs (Li Wang)
- drm: of: drm_of_panel_bridge_remove(): fix device_node leak (Luca Ceresoli)
- media: venus: vdec: restrict EOS addr quirk to IRIS2 only (Dikshita Agarwal)
- media: venus: vdec: fix error state assignment for zero bytesused (Renjiang Han)
- arm64: dts: rockchip: Do not enable hdmi_sound node on Pinebook Pro (Yan Jun)
- dm-unstripe: fix mapping bug when there are multiple targets in a table (Matt Whitlock)
- dm-integrity: fix recalculation in bitmap mode (Mikulas Patocka)
- reset: gpio: suppress bind attributes in sysfs (Bartosz Golaszewski)
- s390/pci: Handle futile config accesses of disabled devices directly (Niklas Schnelle)
- clk: tegra: tegra124-emc: Fix potential memory leak in tegra124_clk_register_emc() (Haoxiang Li)
- media: i2c: ov01a10: Fix digital gain range (Mehdi Djait)
- media: stm32: dcmipp: bytecap: clear all interrupts upon stream stop (Alain Volmat)
- soc: rockchip: grf: Support multiple grf to be handled (Shawn Lin)
- soc: rockchip: grf: Fix wrong RK3576_IOCGRF_MISC_CON definition (Shawn Lin)
- clk: clk-apple-nco: Add "apple,t8103-nco" compatible (Janne Grunau)
- bus: omap-ocp2scp: fix OF populate on driver rebind (Johan Hovold)
- KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (Yosry Ahmed) [Orabug: 39331358] {CVE-2026-43133}
- soc: ti: pruss: Fix double free in pruss_clk_mux_setup() (Xu Wang)
- soc: ti: k3-socinfo: Fix regmap leak on probe failure (Johan Hovold)
- dm: clear cloned request bio pointer when last clone bio completes (Michael Liang) [Orabug: 39331954] {CVE-2026-43278}
- dm-integrity: fix a typo in the code for write/discard race (Mikulas Patocka)
- platform/x86: ISST: Add missing write block check (Srinivas Pandruvada)
- media: ipu6: Fix RPM reference leak in probe error paths (Bingbu Cao) [Orabug: 39331545] {CVE-2026-43177}
- media: ipu6: Fix typo and wrong constant in ipu6-mmu.c (Bingbu Cao)
- media: i2c: ov5647: use our own mutex for the ctrl lock (Xiaolei Wang)
- media: ccs: Fix setting initial sub-device state (Sakari Ailus)
- media: i2c: ov5647: Fix PIXEL_RATE value for VGA mode (Jai Luthra)
- media: i2c: ov5647: Sensor should report RAW color space (David Plowman)
- media: i2c: ov5647: Correct minimum VBLANK value (David Plowman)
- media: i2c: ov5647: Correct pixel array offset (David Plowman)
- media: i2c: ov5647: Initialize subdev before controls (Jai Luthra)
- media: ccs: Avoid possible division by zero (Sakari Ailus)
- media: qcom: camss: vfe: Fix out-of-bounds access in vfe_isr_reg_update() (Alper Ak)
- media: i2c: ov01a10: Fix test-pattern disabling (Hans de Goede)
- media: i2c: ov01a10: Fix passing stream instead of pad to v4l2_subdev_state_get_format() (Hans de Goede)
- media: i2c: ov01a10: Add missing v4l2_subdev_cleanup() calls (Hans de Goede)
- media: i2c: ov01a10: Fix analogue gain range (Hans de Goede)
- media: i2c: ov01a10: Fix reported pixel-rate value (Hans de Goede)
- media: i2c: ov01a10: Fix the horizontal flip control (Hans de Goede)
- media: i2c/tw9906: Fix potential memory leak in tw9906_probe() (Abdun Nihaal) [Orabug: 39331821] {CVE-2026-43246}
- media: i2c/tw9903: Fix potential memory leak in tw9903_probe() (Abdun Nihaal) [Orabug: 39331705] {CVE-2026-43218}
- media: cx25821: Add missing unmap in snd_cx25821_hw_params() (Haoxiang Li)
- media: cx23885: Add missing unmap in snd_cx23885_hw_params() (Haoxiang Li) [Orabug: 39331366] {CVE-2026-43135}
- media: cx88: Add missing unmap in snd_cx88_hw_params() (Haoxiang Li) [Orabug: 39331866] {CVE-2026-43257}
- media: radio-keene: fix memory leak in error path (Shaurya Rane) [Orabug: 39331752] {CVE-2026-43231}
- media: verisilicon: AV1: Set IDR flag for intra_only frame type (Benjamin Gaignard)
- media: rockchip: rga: Fix possible ERR_PTR dereference in rga_buf_init() (Alper Ak)
- media: amphion: Drop min_queued_buffers assignment (Ming Qian)
- arm64: dts: apple: t8112-j473: Keep the HDMI port powered on (Janne Grunau)
- HID: logitech-hidpp: Check maxfield in hidpp_get_report_length() (G?nther Noack) [Orabug: 39331370] {CVE-2026-43136}
- HID: prodikeys: Check presence of pm->input_ep82 (G?nther Noack) [Orabug: 39331846] {CVE-2026-43251}
- HID: magicmouse: Do not crash on missing msc->input (G?nther Noack) [Orabug: 39331389] {CVE-2026-43140}
- HID: hid-pl: handle probe errors (Oliver Neukum) [Orabug: 39331440] {CVE-2026-43152}
- arm64: Disable branch profiling for all arm64 code (Breno Leitao)
- KVM: nSVM: Remove a user-triggerable WARN on nested_svm_load_cr3() succeeding (Sean Christopherson) [Orabug: 39343613] {CVE-2026-43315}
- KVM: x86: Return "unsupported" instead of "invalid" on access to unsupported PV MSR (Sean Christopherson)
- ARM: omap2: Fix reference count leaks in omap_control_init() (Xu Wang)
- arm64: dts: qcom: x1e80100: Add missing TCSR ref clock to the DP PHYs (Abel Vesa)
- media: verisilicon: AV1: Fix tx mode bit setting (Benjamin Gaignard)
- media: verisilicon: AV1: Fix enable cdef computation (Benjamin Gaignard)
- media: chips-media: wave5: Fix device cleanup order to prevent kernel panic (Xulin Sun)
- media: chips-media: wave5: Fix kthread worker destruction in polling mode (Xulin Sun)
- media: mtk-mdp: Fix a reference leak bug in mtk_mdp_remove() (Haoxiang Li)
- media: mtk-mdp: Fix error handling in probe function (Haoxiang Li)
- media: mediatek: encoder: Fix uninitialized scalar variable issue (Irui Wang)
- dm-verity: correctly handle dm_bufio_client_create() failure (Eric Biggers) [Orabug: 39331353] {CVE-2026-43132}
- phy: qcom: edp: Make the number of clocks flexible (Abel Vesa)
- Revert "PCI: qcom: Enable MSI interrupts together with Link up if 'Global IRQ' is supported" (Niklas Cassel)
- drm/tests: shmem: Swap names of export tests (Thomas Zimmermann)
- fpga: dfl: use subsys_initcall to allow built-in drivers to be added (Thadeu Lima de Souza Cascardo)
- ASoC: SOF: ipc4-control: Keep the payload size up to date (Peter Ujfalusi)
- ASoC: SOF: ipc4-control: Use the correct size for scontrol->ipc_control_data (Peter Ujfalusi)
- ASoC: SOF: ipc4-topology: Correct the allocation size for bytes controls (Peter Ujfalusi) [Orabug: 39331023] {CVE-2025-71286}
- ASoC: SOF: ipc4-control: If there is no data do not send bytes update (Peter Ujfalusi)
- clk: renesas: rzg2l: Select correct div round macro (Chris Brandt)
- clk: renesas: rzg2l: Fix intin variable size (Chris Brandt)
- rpmsg: core: fix race in driver_override_show() and use core helper (Gui-Dong Han) [Orabug: 39331012] {CVE-2025-71274}
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Vahagn Vardanian) [Orabug: 39331761] {CVE-2026-43233}
- dpaa2-switch: validate num_ifs to prevent out-of-bounds write (Junrui Luo)
- net: consume xmit errors of GSO frames (Jakub Kicinski) [Orabug: 39331606] {CVE-2026-43194}
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Jianbo Liu) [Orabug: 39331628] {CVE-2026-43199}
- net/mlx5e: Support routed networks during IPsec MACs initialization (Alexandre Cassen)
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Shay Drory)
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Shay Drory)
- net/mlx5: DR, Fix circular locking dependency in dump (Shay Drory)
- RDMA/umem: Fix double dma_buf_unpin in failure path (Jacob Moroni) [Orabug: 39331331] {CVE-2026-43128}
- net: usb: pegasus: enable basic endpoint checking (Ziyi Guo) [Orabug: 39331449] {CVE-2026-43156}
- RDMA/efa: Fix typo in efa_alloc_mr() (Jason Gunthorpe)
- net: wan: farsync: Fix use-after-free bugs caused by unfinished tasklets (Duoming Zhou)
- RDMA/core: Fix stale RoCE GIDs during netdev events at registration (Jiri Pirko)
- tipc: fix duplicate publication key in tipc_service_insert_publ() (Tung Nguyen)
- kcm: fix zero-frag skb in frag_list on partial sendmsg error (Jiayuan Chen)
- tls: Fix race condition in tls_sw_cancel_work_tx() (Hyunwoo Kim) [Orabug: 39073883] {CVE-2026-23240}
- Bluetooth: L2CAP: Fix missing key size check for L2CAP_LE_CONN_REQ (Luiz Augusto von Dentz) [Orabug: 39331361] {CVE-2026-43134}
- Bluetooth: L2CAP: Fix not checking output MTU is acceptable on L2CAP_ECRED_CONN_REQ (Luiz Augusto von Dentz)
- Bluetooth: L2CAP: Fix response to L2CAP_ECRED_CONN_REQ (Luiz Augusto von Dentz)
- Bluetooth: hci_qca: Cleanup on all setup failures (Jinwang Li)
- Bluetooth: L2CAP: Fix result of L2CAP_ECRED_CONN_RSP when MTU is too short (Luiz Augusto von Dentz)
- Bluetooth: L2CAP: Fix invalid response to L2CAP_ECRED_RECONF_REQ (Luiz Augusto von Dentz)
- Remove WARN_ALL_UNSEEDED_RANDOM kernel config option (Linus Torvalds)
- wifi: cfg80211: wext: fix IGTK key ID off-by-one (Johannes Berg)
- bnxt_en: Fix deleting of Ntuple filters (Pavan Chebbi)
- bnxt_en: Fix RSS context delete logic (Pavan Chebbi) [Orabug: 39331875] {CVE-2026-43260}
- net: ethernet: xscale: Check for PTP support properly (Linus Walleij)
- net: ixp4xx_eth: convert to ndo_hwtstamp_get() and ndo_hwtstamp_set() (Vladimir Oltean)
- net: usb: lan78xx: scan all MDIO addresses on LAN7801 (Martin P?lsson)
- net: usb: kaweth: remove TX queue manipulation in kaweth_set_rx_mode (Ziyi Guo) [Orabug: 39331549] {CVE-2026-43180}
- espintcp: Fix race condition in espintcp_close() (Hyunwoo Kim)
- xfrm: always flush state and policy upon NETDEV_UNREGISTER event (Tetsuo Handa) [Orabug: 39331496] {CVE-2026-43167}
- ipmi: ipmb: initialise event handler read bytes (Matt Johnston)
- xfrm: skip templates check for packet offload tunnel mode (Leon Romanovsky)
- xfrm6: fix uninitialized saddr in xfrm6_get_saddr() (Jiayuan Chen) [Orabug: 39331383] {CVE-2026-43139}
- ntb: ntb_hw_switchtec: Fix shift-out-of-bounds for 0 mw lut (Maciej Grochowski)
- ntb: ntb_hw_switchtec: Fix array-index-out-of-bounds access (Maciej Grochowski)
- rtc: zynqmp: correct frequency value (Tomas Melin)
- drm/amd/display: Remove conditional for shaper 3DLUT power-on (Alex Hung)
- arm64: hugetlbpage: avoid unused-but-set-parameter warning (gcc-16) (Arnd Bergmann)
- btrfs: replace BUG() with error handling in __btrfs_balance() (Adarsh Das)
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (Takashi Iwai) [Orabug: 39331959] {CVE-2026-43279}
- drm/radeon: Add HAINAN clock adjustment (Decce6)
- spi: spidev: fix lock inversion between spi_lock and buf_lock (Fabian Godehardt) [Orabug: 39343626] {CVE-2026-43319}
- drm/amd/display: bypass post csc for additional color spaces in dal (Clay King)
- drm/amdgpu: Add HAINAN clock adjustment (Decce6)
- ALSA: usb-audio: Update the number of packets properly at receiving (Takashi Iwai)
- drm/amdgpu: Adjust usleep_range in fence wait (Ce Sun)
- drm/amd/display: Avoid updating surface with the same surface under MPO (Wayne Lin)
- drm/amd/display: Fix system resume lag issue (Tom Chung)
- drm/amd/display: Fix writeback on DCN 3.2+ (Alex Hung)
- ARM: 9467/1: mm: Don't use %pK through printk (Thomas Wei?schuh)
- include: uapi: netfilter_bridge.h: Cover for musl libc (Phil Sutter)
- ACPI: x86: Force enabling of PWM2 on the Yogabook YB1-X90 (Yauhen Kharuzhy)
- thermal: int340x: Fix sysfs group leak on DLVR registration failure (Kaushlendra Kumar)
- libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [Orabug: 39343577] {CVE-2026-43304}
- ceph: supply snapshot context in ceph_uninline_data() (Ethanwu)
- fs/ntfs3: avoid calling run_get_entry() when run == NULL in ntfs_read_run_nb_ra() (Konstantin Komarov)
- fs/ntfs3: drop preallocated clusters for sparse and compressed files (Konstantin Komarov)
- fs: ntfs3: fix infinite loop triggered by zero-sized ATTR_LIST (Jaehun Gou)
- fs: ntfs3: fix infinite loop in attr_load_runs_range on inconsistent metadata (Jaehun Gou)
- fs: ntfs3: check return value of indx_find to avoid infinite loop (Jaehun Gou)
- MIPS: Loongson: Make cpumask_of_node() robust against NUMA_NO_NODE (John Garry)
- iio: magnetometer: Remove IRQF_ONESHOT (Sebastian Andrzej Siewior)
- iio: Use IRQF_NO_THREAD (Sebastian Andrzej Siewior)
- mfd: intel-lpss: Add Intel Nova Lake-S PCI IDs (Ilpo J?rvinen)
- Revert "mfd: da9052-spi: Change read-mask to write-mask" (Marcus Folkesson)
- phy: fsl-imx8mq-usb: disable bind/unbind platform driver feature (Xu Yang)
- phy: mvebu-cp110-utmi: fix dr_mode property read from dts (Aleksandar Gerasimovski)
- watchdog: imx7ulp_wdt: handle the nowayout option (Oleksandr Suvorov)
- binder: don't use %pK through printk (Thomas Wei?schuh)
- fix it87_wdt early reboot by reporting running timer (Ren? Rebe)
- serial: 8250: 8250_omap.c: Clear DMA RX running status only after DMA termination is done (Moteen Shah)
- serial: 8250: 8250_omap.c: Add support for handling UART error conditions (Moteen Shah)
- staging: rtl8723bs: fix memory leak on failure path (Diksha Kumari)
- usb: chipidea: udc: fix DMA and SG cleanup in _ep_nuke() (Mario Peter)
- usb: gadget: f_fs: Fix ioctl error handling (Sam Day)
- usb: gadget: f_fs: fix DMA-BUF OUT queues (Sam Day)
- misc: eeprom: Fix EWEN/EWDS/ERAL commands for 93xx56 and 93xx66 (Markus Koch)
- misc: bcm_vk: Fix possible null-pointer dereferences in bcm_vk_read() (Tuo Li)
- phy: cadence-torrent: restore parent clock for refclk during resume (Thomas Richard)
- phy: ti: phy-j721e-wiz: restore mux selection during resume (Thomas Richard)
- dmaengine: stm32-mdma: initialize m2m_hw_period and ccr to fix warnings (Cl?ment Le Goffic)
- dmaengine: sun6i: Choose appropriate burst length under maxburst (Chen-Yu Tsai)
- most: core: fix resource leak in most_register_interface error paths (Navaneeth K)
- fpga: of-fpga-region: Fail if any bridge is missing (Romain Gantois)
- usb: typec: ucsi: psy: Fix voltage and current max for non-Fixed PDOs (Benson Leung)
- serial: 8250_dw: handle clock enable errors in runtime_resume (Artem Shimko)
- staging: rtl8723bs: fix missing status update on sdio_alloc_irq() failure (Liang Jie)
- soundwire: intel_auxdevice: add cs42l45 codec to wake_capable_list (Maciej Strozek)
- soundwire: dmi-quirks: add mapping for Avell B.ON (OEM rebranded of NUC15) (Peter Ujfalusi)
- dmaengine: stm32-dma3: use module_platform_driver (Amelie Delaunay)
- 9p/xen: protect xen_9pfs_front_free against concurrent calls (Stefano Stabellini)
- m68k: nommu: fix memmove() with differently aligned src and dest for 68000 (Daniel Palmer)
- HID: i2c-hid: Add FocalTech FT8112 (Daniel Peng)
- clk: microchip: core: correct return value on *_get_parent() (Brian Masney)
- mailbox: sprd: clear delivery flag before handling TX done (Otto Pfl?ger)
- remoteproc: mediatek: Break lock dependency to prepare_lock (Tzung-Bi Shih)
- mailbox: sprd: mask interrupts that are not handled (Otto Pfl?ger)
- mailbox: imx: Skip the suspend flag for i.MX7ULP (Jacky Bai)
- mailbox: pcc: Remove spurious IRQF_ONESHOT usage (Mark Brown)
- remoteproc: imx_dsp_rproc: Skip RP_MBOX_SUSPEND_SYSTEM when mailbox TX channel is uninitialized (Iuliana Prodan)
- tracing: Fix false sharing in hwlat get_sample() (Colin Lord)
- riscv: vector: init vector context with proper vlenb (Sergey Matyukevich)
- scsi: ufs: mediatek: Fix page faults in ufs_mtk_clk_scale() trace event (Keita Morisaki)
- vhost: fix caching attributes of MMIO regions by setting them explicitly (Kommula Shiva Shankar)
- scsi: buslogic: Reduce stack usage (Arnd Bergmann)
- hisi_acc_vfio_pci: update status after RAS error (Longfang Liu)
- ata: libata: avoid long timeouts on hot-unplugged SATA DAS (Henry Tseng)
- RDMA/rtrs-clt: For conn rejection use actual err number (Md Haris Iqbal)
- nfc: nxp-nci: remove interrupt trigger type (Carl Lee)
- myri10ge: avoid uninitialized variable use (Arnd Bergmann)
- PCI: Mark Nvidia GB10 to avoid bus reset (Johnny-Cc Chang)
- PCI: Add ACS quirk for Qualcomm Hamoa & Glymur (Krishna Chaitanya Chundru)
- PCI: Fix pci_slot_lock () device locking (Keith Busch)
- PCI/AER: Clear stale errors on reporting agents upon probe (Lukas Wunner)
- PCI: Mark ASM1164 SATA controller to avoid bus reset (Alex Williamson)
- vmw_vsock: bypass false-positive Wnonnull warning with gcc-16 (Arnd Bergmann)
- net: usb: sr9700: remove code to drive nonexistent multicast filter (Ethan Nelson-Moore)
- bnxt_en: Allow ntuple filters for drops (Joe Damato)
- wifi: ath10k: fix lock protection in ath10k_wmi_event_peer_sta_ps_state_chg() (Ziyi Guo)
- wifi: rtw89: pci: restore LDO setting after device resume (Dian-Syuan Yang)
- net: sfp: add quirk for Lantech 8330-265D (Marek Beh?n)
- octeontx2-af: Workaround SQM/PSE stalls by disabling sticky (Geetha Sowjanya)
- Bluetooth: btusb: Add device ID for Realtek RTL8761BU (Jacopo Scannella)
- Bluetooth: btusb: Add new VID/PID for RTL8852CE (Shell Chen)
- Bluetooth: hci_conn: use mod_delayed_work for active mode timeout (Stefan S?rensen)
- Bluetooth: hci_conn: Set link_policy on incoming ACL connections (Stefan S?rensen)
- Bluetooth: btusb: Add support for MediaTek7920 0489:e158 (Andrew Elantsev)
- ipv4: fib: Annotate access to struct fib_alias.fa_state. (Kuniyuki Iwashima)
- wifi: iwlegacy: add missing mutex protection in il3945_store_measurement() (Ziyi Guo)
- wifi: iwlegacy: add missing mutex protection in il4965_store_tx_power() (Ziyi Guo)
- net: hns3: extend HCLGE_FD_AD_QID to 11 bits (Jijie Shao)
- ipv4: igmp: annotate data-races around idev->mr_maxdelay (Eric Dumazet)
- gro: change the BUG_ON() in gro_pull_from_frag0() (Eric Dumazet)
- ext4: propagate flags to convert_initialized_extent() (Ojaswin Mujoo)
- wifi: rtw89: 8922a: add digital compensation for 2GHz (Po-Hao Huang)
- wifi: rtw89: fix unable to receive probe responses under MLO connection (Po-Hao Huang)
- wifi: iwlwifi: mvm: check the validity of noa_len (Miri Korenblit)
- net: usb: r8152: fix transmit queue timeout (Mingj Ye)
- openrisc: define arch-specific version of nop() (Brian Masney)
- netfilter: xt_tcpmss: check remaining length before reading optlen (Florian Westphal) [Orabug: 39331591] {CVE-2026-43190}
- netfilter: nf_conntrack: Add allow_clash to generic protocol handler (Yuto Hamaguchi)
- ext4: use reserved metadata blocks when splitting extent on endio (Zhang Yi)
- ext4: mark group extend fast-commit ineligible (Li Chen)
- ext4: move ext4_percpu_param_init() before ext4_mb_init() (Baokun Li) [Orabug: 39343531] {CVE-2026-43288}
- ext4: mark group add fast-commit ineligible (Li Chen)
- ipv6: exthdrs: annotate data-race over multiple sysctl (Eric Dumazet)
- ipv6: annotate data-races over sysctl.flowlabel_reflect (Eric Dumazet)
- ipv6: annotate data-races in ip6_multipath_hash_{policy,fields}() (Eric Dumazet)
- wifi: cfg80211: allow only one NAN interface, also in multi radio (Miri Korenblit)
- wifi: ath12k: fix preferred hardware mode calculation (Baochen Qiang)
- wifi: ath11k: Fix failure to connect to a 6 GHz AP (Qian Zhang)
- wifi: ath11k: add pm quirk for Thinkpad Z13/Z16 Gen1 (Ross Vandegrift)
- wifi: rtw89: wow: add reason codes for disassociation in WoWLAN mode (Chin-Yen Lee)
- wifi: rtw89: mac: correct page number for CSI response (Ping-Ke Shih)
- iommu/amd: move wait_on_sem() out of spinlock (Ankit Soni) [Orabug: 39331853] {CVE-2026-43253}
- wifi: libertas: fix WARNING in usb_tx_block (Szymon Wilczek) [Orabug: 39331859] {CVE-2026-43255}
- net: wwan: mhi: Add network support for Foxconn T99W760 (Slark Xiao)
- iommu/arm-smmu-v3: Improve CMDQ lock fairness and efficiency (Alexander Grest)
- dm: remove fake timeout to avoid leak request (Ding Hui) [Orabug: 39343609] {CVE-2026-43314}
- dm: replace -EEXIST with -EBUSY (Daniel Gomez)
- wifi: rtw88: Fix inadvertent sharing of struct ieee80211_supported_band data (Bitterblue Smith)
- wifi: rtw88: Use devm_kmemdup() in rtw_set_supported_band() (Bitterblue Smith) [Orabug: 39331003] {CVE-2025-71273}
- wifi: rtw89: ser: enable error IMR after recovering from L1 (Zong-Zhe Yang)
- wifi: rtw89: 8922a: set random mac if efuse contains zeroes (Jose Ignacio Tornos Martinez)
- wifi: rtw88: rtw8821cu: Add ID for Mercusys MU6H (Hsiu-Ming Chang)
- wifi: rtw88: 8822b: Avoid WARNING in rtw8822b_config_trx_mode() (Bitterblue Smith) [Orabug: 39343515] {CVE-2025-71297}
- wifi: rtw88: fix DTIM period handling when conf->dtim_period is zero (Roman Peshkichev)
- jfs: nlink overflow in jfs_rename (Jori Koolstra)
- jfs: Add missing set_freezable() for freezable kthread (Xu Wang)
- ALSA: usb-audio: Add iface reset and delay quirk for AB13X USB Audio (Lianqin Hu)
- ALSA: mixer: oss: Add card disconnect checkpoints (Takashi Iwai) [Orabug: 39331318] {CVE-2026-43126}
- ALSA: hda/realtek - Enable mute LEDs on HP ENVY x360 15-es0xxx (Illia Barbashyn)
- ASoC: fsl: imx-rpmsg: use snd_soc_find_dai_with_mutex() in probe (Ziyi Guo)
- spi: geni-qcom: Fix abort sequence execution for serial engine errors (Praveen Talari)
- ASoC: SOF: Intel: hda: Fix NULL pointer dereference (Ranjani Sridharan) [Orabug: 39331375] {CVE-2026-43137}
- power: sequencing: fix missing state_lock in pwrseq_power_on() error path (Ziyi Guo)
- modpost: Amend ppc64 save/restfpr symnames for -Os build (Ren? Rebe)
- ASoC: es8328: Add error unwind in resume (Hsieh Hung-En)
- HID: logitech-hidpp: Add support for Logitech K980 (Bastien Nocera)
- hwmon: (f71882fg) Add F81968 support (Ji-Ze Hong)
- hwmon: (nct6775) Add ASUS Pro WS WRX90E-SAGE SE (Denis Pauk)
- hwmon: (dell-smm) Add support for Dell OptiPlex 7080 (Armin Wolf)
- ASoC: codecs: max98390: Check return value of devm_gpiod_get_optional() in max98390_i2c_probe() (Chen Ni)
- drm/amd/display: avoid dig reg access timeout on usb4 link training fail (Zhongwei)
- drm/amd/display: Fix GFX12 family constant checks (Matthew Stewart)
- spi: spi-mem: Protect dirmap_create() with spi_mem_access_start/end (Chin-Ting Kuo)
- ASoC: sunxi: sun50i-dmic: Add missing check for devm_regmap_init_mmio (Chen Ni)
- gpio: aspeed-sgpio: Change the macro to support deferred probe (Billy Tsai)
- ALSA: hda/realtek: fix LG Gram Style 14 speakers (Damien Dagorn)
- ALSA: hda/conexant: Add headset mic fix for MECHREVO Wujie 15X Pro (Gongqi)
- HID: elecom: Add support for ELECOM HUGE Plus M-HT1MRBK (David Phillips)
- HID: multitouch: add eGalaxTouch EXC3188 support (Thorsten Schmelzer)
- media: rkisp1: Fix filter mode register configuration (Rui Wang)
- drm/atmel-hlcdc: fix use-after-free of drm_crtc_commit after release (Ludovic Desroches)
- drm/atmel-hlcdc: don't reject the commit if the src rect has fractional parts (Ludovic Desroches)
- drm/atmel-hlcdc: fix memory leak from the atomic_destroy_state callback (Ludovic Desroches)
- drm/amd/display: Disable FEC when powering down encoders (Ovidiu Bunea)
- PCI: Add Intel Nova Lake audio Device ID (Peter Ujfalusi)
- ASoC: soc-acpi-intel-arl-match: change rt722 amp endpoint to aggregated (Bard Liao)
- virt: vbox: uapi: Mark inner unions in packed structs as packed (Thomas Wei?schuh)
- hyper-v: Mark inner union in hv_kvp_exchg_msg_value as packed (Thomas Wei?schuh)
- drm: Account property blob allocations to memcg (Xiao Kan) [Orabug: 39343527] {CVE-2026-43287}
- drm/amdkfd: Fix GART PTE for non-4K pagesize in svm_migrate_gart_map() (Donet Tom)
- drm/amdkfd: Relax size checking during queue buffer get (Donet Tom)
- ALSA: hda/realtek: add HP Victus 16-e0xxx mute LED quirk (Bharat Dev Burman)
- media: ipu6: Always close firmware stream (Sakari Ailus)
- media: ipu6: Close firmware streams on streaming enable failure (Sakari Ailus)
- media: ipu6: Ensure stream_mutex is acquired when dealing with node list (Sakari Ailus)
- media: mt9m114: Return -EPROBE_DEFER if no endpoint is found (Hans de Goede)
- media: mt9m114: Avoid a reset low spike during probe() (Hans de Goede)
- media: v4l2-async: Fix error handling on steps after finding a match (Sakari Ailus) [Orabug: 39331585] {CVE-2026-43189}
- media: cx25821: Fix a resource leak in cx25821_dev_setup() (Haoxiang Li)
- media: solo6x10: Check for out of bounds chip_id (Kees Cook) [Orabug: 39343616] {CVE-2026-43316}
- media: pvrusb2: fix URB leak in pvr2_send_request_ex (Szymon Wilczek) [Orabug: 39331719] {CVE-2026-43223}
- media: adv7180: fix frame interval in progressive mode (Thorsten Schmelzer)
- drm/panel: Fix a possible null-pointer dereference in jdi_panel_dsi_remove() (Tuo Li)
- media: amphion: Clear last_buffer_dequeued flag for DEC_CMD_START (Ming Qian)
- spi: spi-mem: Limit octal DTR constraints to octal DTR situations (Miquel Raynal)
- ASoC: wm8962: Don't report a microphone if it's shorted to ground on plug (Sebastian Krzyszkowiak)
- ASoC: wm8962: Add WM8962_ADC_MONOMIX to "3D Coefficients" mask (Sebastian Krzyszkowiak)
- drm/xe: Only toggle scheduling in TDR if GuC is running (Matthew Brost)
- drm/amd/display: only power down dig on phy endpoints (Dmytro Laktyushkin)
- drm/amdgpu: Skip loading SDMA_RS64 in VF (Yubiao Wang)
- HID: apple: Add "SONiX KN85 Keyboard" to the list of non-apple keyboards (Joey Bednar)
- drm/amd/display: Add signal type check for dcn401 get_phyd32clk_src (Dmytro Laktyushkin) [Orabug: 39331807] {CVE-2026-43243}
- drm/amdgpu: avoid a warning in timedout job handler (Alex Deucher)
- drm/amd/display: Fix dsc eDP issue (Charlene Liu) [Orabug: 39343628] {CVE-2026-43320}
- drm/amdgpu: add support for HDP IP version 6.1.1 (Tim Huang)
- media: mediatek: vcodec: Don't try to decode 422/444 VP9 (Nicolas Dufresne)
- media: chips-media: wave5: Process ready frames when CMD_STOP sent to Encoder (Brandon Brnich)
- media: chips-media: wave5: Fix conditional in start_streaming (Brandon Brnich)
- media: omap3isp: set initial format (Hans Verkuil)
- media: omap3isp: isppreview: always clamp in preview_try_format() (Hans Verkuil)
- media: omap3isp: isp_video_mbus_to_pix/pix_to_mbus fixes (Hans Verkuil)
- drm/v3d: Set DMA segment size to avoid debug warnings (Xiaolei Wang)
- spi: stm32: fix Overrun issue at < 8bpw (Deepak Kumar)
- media: dvb-core: dmxdevfilter must always flush bufs (Hans Verkuil)
- ASoC: SOF: ipc4: Support for sending payload along with LARGE_CONFIG_GET (Peter Ujfalusi)
- drm/amd/display: Add USB-C DP Alt Mode lane limitation in DCN32 (Lincheng Ku)
- spi-geni-qcom: use xfer->bits_per_word for can_dma() (Jonathan Marek)
- spi-geni-qcom: initialize mode related registers to 0 (Jonathan Marek)
- drm/amdkfd: Handle GPU reset and drain retry fault race (Philip Yang)
- drm/amdgpu: fix NULL pointer issue buffer funcs (Likun Gao) [Orabug: 39331070] {CVE-2025-71294}
- gpu/panel-edp: add AUO panel entry for B140HAN06.4 (Alexey Klimov)
- drm/display/dp_mst: Add protection against 0 vcpi (Suraj Kandpal)
- parisc: Prevent interrupts during reboot (Helge Deller)
- arm64: tegra: smaug: Add usb-role-switch support (Diogo Ivo)
- Revert "arm64: zynqmp: Add an OP-TEE node to the device tree" (Tomas Melin)
- firmware: arm_ffa: Unmap Rx/Tx buffers on init failure (Haoxiang Li)
- pstore: ram_core: fix incorrect success return when vmap() fails (Ruipeng Qi) [Orabug: 39331308] {CVE-2026-43124}
- sched/debug: Fix updating of ppos on server write ops (Joel Fernandes)
- char: tpm: cr50: Remove IRQF_ONESHOT (Sebastian Andrzej Siewior)
- mailbox: bcm-ferxrm-mailbox: Use default primary handler (Sebastian Andrzej Siewior)
- crypto: hisilicon/qm - move the barrier before writing to the mailbox register (Chenghai Huang)
- PCI/MSI: Unmap MSI-X region on error (Haoxiang Li)
- clocksource/drivers/timer-integrator-ap: Add missing Kconfig dependency on OF (Bartosz Golaszewski)
- clocksource/drivers/sh_tmu: Always leave device running after probe (Niklas S?derlund)
- bpf: Recognize special arithmetic shift in the verifier (Alexei Starovoitov)
- bpf: crypto: Use the correct destructor kfunc type (Sami Tolvanen) [Orabug: 39343581] {CVE-2026-43306}
- perf/x86/cstate: Add Airmont NP (Martin Schiller)
- perf/x86/msr: Add Airmont NP (Martin Schiller)
- bpf: verifier improvement in 32bit shift sign extension pattern (Cupertino Miranda)
- sparc: don't reference obsolete termio struct for TC* constants (Sam James)
- sparc: Synchronize user stack on fork and clone (Andreas Larsson)
- block: decouple secure erase size limit from discard size limit (Luke Wang)
- blk-mq-debugfs: add missing debugfs_mutex in blk_mq_debugfs_register_hctxs() (Yu Kuai)
- xenbus: Use .freeze/.thaw to handle xenbus devices (Jason Andryuk)
- ACPI: battery: fix incorrect charging status when current is zero (Ata I?Lhan K?kt?rk)
- ACPI: x86: s2idle: Invoke Microsoft _DSM Function 9 (Turn On Display) (Jakob Riemenschneider)
- perf/cxlpmu: Replace IRQF_ONESHOT with IRQF_NO_THREAD (Sebastian Andrzej Siewior)
- s390/perf: Disable register readout on sampling events (Thomas Richter)
- cpufreq: dt-platdev: Block the driver from probing on more QC platforms (Konrad Dybcio)
- md-cluster: fix NULL pointer dereference in process_metadata_update (Jiasheng Jiang) [Orabug: 39331918] {CVE-2026-43271}
- alpha: fix user-space corruption during memory compaction (Magnus Lindholm)
- powercap: intel_rapl: Add PL4 support for Ice Lake (Daniel Tang)
- ACPICA: Abort AML bytecode execution when executing AML_FATAL_OP (Armin Wolf)
- ACPI: resource: Add JWIPC JVC9100 to irq1_level_low_skip_override[] (Ai Chao)
- ACPI: processor: Fix NULL-pointer dereference in acpi_processor_errata_piix4() (Tuo Li) [Orabug: 39343603] {CVE-2026-43313}
- EFI/CPER: don't go past the ARM processor CPER record buffer (Mauro Carvalho Chehab) [Orabug: 39331896] {CVE-2026-43266}
- APEI/GHES: ARM processor Error: don't go past allocated memory (Mauro Carvalho Chehab) [Orabug: 39331636] {CVE-2026-43201}
- APEI/GHES: ensure that won't go past CPER allocated record (Mauro Carvalho Chehab) [Orabug: 39331947] {CVE-2026-43277}
- EFI/CPER: don't dump the entire memory region (Mauro Carvalho Chehab) [Orabug: 39331518] {CVE-2026-43171}
- x86/xen/pvh: Enable PAE mode for 32-bit guest only when CONFIG_X86_PAE is set (Hou Wenlong)
- rnbd-srv: Zero the rsp buffer before using it (Md Haris Iqbal)
- arm64: Add support for TSV110 Spectre-BHB mitigation (Jinqian Yang) [Orabug: 39331877] {CVE-2026-43261}
- perf/arm-cmn: Support CMN-600AE (Robin Murphy)
- s390/purgatory: Add -Wno-default-const-init-unsafe to KBUILD_CFLAGS (Heiko Carstens)
- tools/power cpupower: Reset errno before strtoull() (Kaushlendra Kumar)
- smb: client: prevent races in ->query_interfaces() (Henrique Carvalho) [Orabug: 39331789] {CVE-2026-43239}
- gfs2: fiemap page fault fix (Andreas Gruenbacher) [Orabug: 39331882] {CVE-2026-43262}
- smb: client: add proper locking around ses->iface_last_update (Henrique Carvalho)
- btrfs: handle user interrupt properly in btrfs_trim_fs() (Jinbaohong)
- btrfs: fallback to buffered IO if the data profile has duplication (Qu Wenruo)
- dlm: validate length in dlm_search_rsb_tree (Ziming Zhang) [Orabug: 39331312] {CVE-2026-43125}
- minix: Add required sanity checking to minix_check_superblock() (Jori Koolstra)
- i3c: mipi-i3c-hci: Reset RING_OPERATION1 fields during init (Adrian Hunter)
- i3c: master: svc: Initialize 'dev' to NULL in svc_i3c_master_ibi_isr() (Frank Li)
- hfsplus: pretend special inodes as regular files (Tetsuo Handa)
- audit: add missing syscalls to read class (Jeffrey Bencteux)
- fs/buffer: add alert in try_to_free_buffers() for folios without buffers (Deepakkumar Karn) [Orabug: 39331077] {CVE-2025-71295}
- hfsplus: fix volume corruption issue for generic/498 (Viacheslav Dubeyko)
- audit: add fchmodat2() to change attributes class (Jeffrey Bencteux)
- statmount: permission check should return EPERM (Bhavik Sachdev)
- rtc: interface: Alarm race handling should not discard preceding error (Anthony Pighin)
- libperf build: Always place libperf includes first (Ian Rogers)
- libperf: Don't remove -g when EXTRA_CFLAGS are used (James Clark)
- perf vendor events amd: Fix Zen 5 MAB allocation events (Sandipan Das)
- perf annotate: Fix memcpy size in arch__grow_instructions() (Suchit Karunakaran)
- perf maps: Fix reference count leak in maps__find_ams() (Ian Rogers)
- libsubcmd: Fix null intersection case in exclude_cmds() (Sri Jayaramappa)
- perf callchain: Fix srcline printing with inlines (Ian Rogers)
- perf unwind-libdw: Fix invalid reference counts (Ian Rogers)
- perf test stat tests: Fix for virtualized machines (Thomas Richter)
- perf test stat: Update test expectations and events (Ian Rogers)
- ASoC: dt-bindings: asahi-kasei,ak5558: Fix the supply names (Shengjiu Wang)
- ASoC: dt-bindings: asahi-kasei,ak4458: Fix the supply names (Shengjiu Wang)
- ASoC: dt-bindings: asahi-kasei,ak4458: set unevaluatedProperties:false (Shengjiu Wang)
- dt-bindings: phy: qcom-edp: Add missing clock for X Elite (Abel Vesa)
- SUNRPC: fix gss_auth kref leak in gss_alloc_msg error path (Daniel Hodges)
- SUNRPC: auth_gss: fix memory leaks in XDR decoding error paths (Chuck Lever)
- Drivers: hv: vmbus: Use kthread for vmbus interrupts on PREEMPT_RT (Jan Kiszka)
- ata: libata-scsi: refactor ata_scsi_translate() (Damien Le Moal)
- ata: pata_ftide010: Fix some DMA timings (Linus Walleij)
- ext4: use optimized mballoc scanning regardless of inode format (Jan Kara)
- ext4: fix dirtyclusters double decrement on fs shutdown (Brian Foster)
- ext4: fix e4b bitmap inconsistency reports (Yongjian Sun)
- ext4: fix memory leak in ext4_ext_shift_extents() (Zilin Guan)
- ext4: drop extent cache when splitting extent fails (Zhang Yi)
- ext4: drop extent cache after doing PARTIAL_VALID1 zeroout (Zhang Yi)
- ext4: don't cache extent during splitting extent (Zhang Yi)
- ext4: don't zero the entire extent if EXT4_EXT_DATA_PARTIAL_VALID1 (Zhang Yi)
- ext4: subdivide EXT4_EXT_DATA_VALID1 (Zhang Yi)
- MIPS: Work around LLVM bug when gp is used as global register variable (Yao Zi)
- drm/amd/display: Use same max plane scaling limits for all 64 bpp formats (Mario Kleiner)
- ASoC: rockchip: i2s-tdm: Use param rate if not provided by set_sysclk (Detlev Casanova)
- x86/hyperv: Fix error pointer dereference (Ethan Tidmore)
- btrfs: fix invalid leaf access in btrfs_quota_enable() if ref key not found (Filipe Manana)
- btrfs: use the correct type to initialize block reserve for delayed refs (Filipe Manana)
- efi: Fix reservation of unaccepted memory table (Kiryl Shutsemau)
- drm/xe/xe2_hpg: Fix handling of Wa_14019988906 & Wa_14019877138 (Matt Roper)
- drm/xe/xe2_hpg: Add set of workarounds (Shekhar Chauhan)
- drm/xe/ptl: Apply Wa_13011645652 (Vinay Belgaumkar)
- drm/xe/mmio: Avoid double-adjust in 64-bit reads (Shuicheng Lin)
- drm/xe: Switch MMIO interface to take xe_mmio instead of xe_gt (Matt Roper)
- drm/xe: Adjust mmio code to pass VF substructure to SRIOV code (Matt Roper)
- drm/xe: Add xe_tile backpointer to xe_mmio (Matt Roper)
- drm/xe: Switch mmio_ext to use 'struct xe_mmio' (Matt Roper)
- drm/xe: Populate GT's mmio iomap from tile during init (Matt Roper)
- drm/xe: Move GSI offset adjustment fields into 'struct xe_mmio' (Matt Roper)
- drm/xe: Clarify size of MMIO region (Matt Roper)
- drm/xe: Create dedicated xe_mmio structure (Matt Roper)
- drm/xe: Move forcewake to 'gt.pm' substructure (Matt Roper)
- s390/kexec: Make KEXEC_SIG available when CONFIG_MODULES=n (Alexander Egorenkov)
- spi: wpcm-fiu: Fix potential NULL pointer dereference in wpcm_fiu_probe() (Felix Gu)
- drm/amd/display: Fix out-of-bounds stream encoder index v3 (Srinivasan Shanmugam)
- drm/amd/display: Reject cursor plane on DCE when scaled differently than primary (Timur Krist?f)
- drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (Srinivasan Shanmugam)
- ASoC: codecs: aw88261: Fix erroneous bitmask logic in Awinic init (Alexandre Ferrieux)
- drm/i915/acpi: free _DSM package when no connectors (Kaushlendra Kumar)
- ASoC: fsl_xcvr: Revert fix missing lock in fsl_xcvr_mode_put() (Ziyi Guo)
- drm/amdgpu: Fix memory leak in amdgpu_ras_init() (Zilin Guan)
- drm/amdgpu: Use kvfree instead of kfree in amdgpu_gmc_get_nps_memranges() (Zilin Guan)
- drm/amdgpu: Fix memory leak in amdgpu_acpi_enumerate_xcc() (Zilin Guan)
- apparmor: fix aa_label to return state from compount and component match (John Johansen)
- apparmor: fix invalid deref of rawdata when export_binary is unset (Georgia Garcia)
- apparmor: avoid per-cpu hold underflow in aa_get_buffer (Zhengmian Hu)
- apparmor: make label_match return a consistent value (John Johansen)
- apparmor: remove apply_modes_to_perms from label_match (John Johansen)
- apparmor: fix rlimit for posix cpu timers (John Johansen)
- apparmor: return -ENOMEM in unpack_perms_table upon alloc failure (Ryan Lee)
- apparmor: Fix & Optimize table creation from possibly unaligned memory (Helge Deller)
- AppArmor: Allow apparmor to handle unaligned dfa tables (Helge Deller)
- apparmor: fix NULL sock in aa_sock_file_perm (John Johansen)
- net/mlx5e: Use unsigned for mlx5e_get_max_num_channels (Cosmin Ratiu)
- net/mlx5: Fix multiport device check over light SFs (Shay Drory)
- bonding: alb: fix UAF in rlb_arp_recv during bond up/down (Hangbin Liu)
- octeontx2-af: Fix default entries mcam entry action (Hariprasad Kelam)
- icmp: prevent possible overflow in icmp_global_allow() (Eric Dumazet)
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Eric Dumazet) [Orabug: 39110677] {CVE-2026-23273}
- ping: annotate data-races in ping_lookup() (Eric Dumazet)
- bpftool: Fix truncated netlink dumps (Jakub Kicinski)
- ipv6: fix a race in ip6_sock_set_v6only() (Eric Dumazet)
- net: remove WARN_ON_ONCE when accessing forward path array (Pablo Neira Ayuso)
- ipvs: do not keep dest_dst if dev is going down (Julian Anastasov)
- netfilter: nf_conntrack_h323: don't pass uninitialised l3num value (Florian Westphal)
- selftests: forwarding: vxlan_bridge_1d_ipv6: fix test failure with br_netfilter enabled (Aleksei Oladko)
- selftests: forwarding: vxlan_bridge_1d: fix test failure with br_netfilter enabled (Aleksei Oladko)
- net: bridge: mcast: always update mdb_n_entries for vlan contexts (Nikolay Aleksandrov)
- xen-netback: reject zero-queue configuration from guest (Ziyi Guo)
- net: usb: catc: enable basic endpoint checking (Ziyi Guo)
- net: sparx5/lan969x: fix PTP clock max_adj value (Daniel Machon)
- ipv6: Fix out-of-bound access in fib6_add_rt2node(). (Kuniyuki Iwashima)
- net: mscc: ocelot: add missing lock protection in ocelot_port_xmit_inj() (Ziyi Guo)
- net: mscc: ocelot: split xmit into FDMA and register injection paths (Ziyi Guo)
- net: mscc: ocelot: extract ocelot_xmit_timestamp() helper (Ziyi Guo)
- net: sparx5/lan969x: fix DWRR cost max to match hardware register width (Daniel Machon)
- selftests: mlxsw: tc_restrictions: Fix test failure with new iproute2 (Ido Schimmel)
- cpuidle: Skip governor when only one idle state is available (Aboorva Devarajan)
- ACPI: PM: Add unused power resource quirk for THUNDEROBOT ZERO (Zhai Can)
- objpool: fix the overestimation of object pooling metadata size (Zhouwenhao)
- selftests/memfd: use IPC semaphore instead of SIGSTOP/SIGCONT (Aristeu Rozanski)
- kbuild: Add objtool to top-level clean target (Josh Poimboeuf)
- powercap: intel_rapl_tpmi: Remove FW_BUG from invalid version check (Kuppuswamy Sathyanarayanan)
- ACPI: CPPC: Fix remaining for_each_possible_cpu() to use online CPUs (Sean V Kelley)
- fs/ntfs3: Fix slab-out-of-bounds read in DeleteIndexEntryRoot (Jiasheng Jiang)
- fs/ntfs3: prevent infinite loops caused by the next valid being the same (Edward Adam Davis)
- fs/ntfs3: Initialize new folios before use (Bartlomiej Kubik)
- io_uring/cancel: de-unionize file and user_data in struct io_cancel_data (Jens Axboe)
- drbd: always set BLK_FEAT_STABLE_WRITES (Christoph B?hmwalder)
- dmaengine: fsl-edma: don't explicitly disable clocks in .remove() (Jared Kangas)
- backlight: qcom-wled: Change PM8950 WLED configurations (Barnab?s Cz?m?n)
- backlight: qcom-wled: Support ovp values for PMI8994 (Barnab?s Cz?m?n)
- leds: qcom-lpg: Check the return value of regmap_bulk_write() (Xu Wang)
- pinctrl: single: fix refcount leak in pcs_add_gpio_func() (Wei Li)
- pinctrl: qcom: sm8250-lpass-lpi: Fix i2s2_data_groups definition (Luca Weiss)
- iio: sca3000: Fix a resource leak in sca3000_probe() (Harshit Mogalapalli)
- ovl: Fix uninit-value in ovl_fill_real (Qing Wang)
- pinctrl: equilibrium: Fix device node reference leak in pinbank_init() (Felix Gu)
- usb: bdc: fix sleep during atomic (Justin Chen)
- drivers: iio: mpu3050: use dev_err_probe for regulator request (Svyatoslav Ryhel)
- mfd: simple-mfd-i2c: Add Delta TN48M CPLD support (Robert Marko)
- mfd: simple-mfd-i2c: Keep compatible strings in alphabetical order (Ioana Ciornei)
- mfd: simple-mfd-i2c: Add SpacemiT P1 support (Alex Elder)
- mfd: simple-mfd-i2c: Add compatible strings for Layerscape QIXIS FPGA (Ioana Ciornei)
- mfd: simple-mfd-i2c: Add MAX77705 support (Dzmitry Sankouski)
- mfd: arizona: Fix regulator resource leak on wm5102_clear_write_sequencer() failure (Xu Wang)
- Revert "mmc: rtsx_pci_sdmmc: increase power-on settling delay to 5ms" (Greg Kroah-Hartman)
- phy: freescale: imx8qm-hsio: fix NULL pointer dereference (Thomas Richard)
- coresight: etm3x: Fix cpulocked warning on cpuhp (Antonio Borneo)
- watchdog: starfive-wdt: Fix PM reference leak in probe error path (Kery Qi)
- iio: pressure: mprls0025pa: fix pressure calculation (Petre Rodan)
- iio: pressure: mprls0025pa: fix scan_type struct (Petre Rodan)
- iio: pressure: mprls0025pa: fix interrupt flag (Petre Rodan)
- iio: pressure: mprls0025pa: fix SPI CS delay violation (Petre Rodan)
- iio: pressure: mprls0025pa: fix spi_transfer struct initialisation (Petre Rodan)
- mmc: rtsx_pci_sdmmc: increase power-on settling delay to 5ms (Matthew Schwartz)
- serial: SH_SCI: improve "DMA support" prompt (Randy Dunlap)
- serial: imx: change SERIAL_IMX_CONSOLE to bool (Randy Dunlap)
- staging: greybus: lights: avoid NULL deref (Chaitanya Mishra)
- iio: test: drop dangling symbol in gain-time-scale helpers (Randy Dunlap)
- soundwire: intel_ace2x: add SND_HDA_CORE dependency (Arnd Bergmann)
- dma: dma-axi-dmac: fix HW scatter-gather not looking at the queue (Nuno Sa)
- dma: dma-axi-dmac: fix SW cyclic transfers (Nuno Sa)
- dmaengine: mediatek: uart-apdma: Fix above 4G addressing TX/RX (AngeloGioacchino Del Regno)
- interconnect: mediatek: Aggregate bandwidth with saturating add (Nicolas Frattaroli)
- interconnect: mediatek: Don't hijack parent device (Nicolas Frattaroli)
- clk: mediatek: Fix error handling in runtime PM setup (Xu Wang)
- clk: qcom: gfx3d: add parent to parent request map (Dmitry Baryshkov)
- clk: qcom: dispcc-sm7150: Fix dispcc_mdss_pclk1_clk_src (David Heidelberger)
- clk: qcom: dispcc-sdm845: Enable parents for pixel clocks (Petr Hodina)
- clk: Move clk_{save,restore}_context() to COMMON_CLK section (Geert Uytterhoeven)
- clk: qcom: gcc-ipq5018: flag sleep clock as critical (George Moussalem)
- clk: qcom: gcc-msm8917: Remove ALWAYS_ON flag from cpp_gdsc (Barnab?s Cz?m?n)
- clk: qcom: gcc-msm8953: Remove ALWAYS_ON flag from cpp_gdsc (Barnab?s Cz?m?n)
- clk: qcom: gcc-qdu1000: Update the SDCC RCGs to use shared_floor_ops (Jagadeesh Kona)
- clk: qcom: gcc-x1e80100: Update the SDCC RCGs to use shared_floor_ops (Jagadeesh Kona)
- clk: qcom: gcc-sdx75: Update the SDCC RCGs to use shared_floor_ops (Jagadeesh Kona)
- clk: qcom: gcc-sm4450: Update the SDCC RCGs to use shared_floor_ops (Jagadeesh Kona)
- clk: qcom: gcc-sm8450: Update the SDCC RCGs to use shared_floor_ops (Jagadeesh Kona)
- clk: meson: gxbb: Limit the HDMI PLL OD to /4 on GXL/GXM SoCs (Martin Blumenstingl)
- clk: qcom: rcg2: compute 2d using duty fraction directly (Taniya Das)
- clk: qcom: gcc-sm8650: Use floor ops for SDCC RCGs (Vladimir Zapolskiy)
- clk: qcom: gcc-sm8550: Use floor ops for SDCC RCGs (Vladimir Zapolskiy)
- fbdev: au1200fb: Fix a memory leak in au1200fb_drv_probe() (Felix Gu)
- fbdev: of_display_timing: Fix device node reference leak in of_get_display_timings() (Felix Gu)
- tracing: Remove duplicate ENABLE_EVENT_STR and DISABLE_EVENT_STR macros (Steven Rostedt)
- tracing: Properly process error handling in event_hist_trigger_parse() (Miaoqian Lin)
- fs/nfs: Fix readdir slow-start regression (Sagi Grimberg)
- nvdimm: virtio_pmem: serialize flush requests (Li Chen)
- scsi: csiostor: Fix dereference of null pointer rn (Colin Ian King)
- scsi: ufs: host: mediatek: Require CONFIG_PM (Arnd Bergmann)
- scsi: smartpqi: Fix memory leak in pqi_report_phys_luns() (Zilin Guan)
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia)
- RDMA/uverbs: Add __GFP_NOWARN to ib_uverbs_unmarshall_recv() kmalloc (Liuyi)
- power: supply: qcom_battmgr: Recognize "LiP" as lithium-polymer (Val Packett)
- power: supply: pm8916_lbc: Fix use-after-free for extcon in IRQ handler (Waqar Hameed)
- mtd: spinand: Fix kernel doc (Miquel Raynal)
- mtd: parsers: ofpart: fix OF node refcount leak in parse_fixed_partitions() (Weigang He)
- cxl: Fix premature commit_end increment on decoder commit failure (Yuxiong Wang)
- RDMA/core: add rdma_rw_max_sge() helper for SQ sizing (Chuck Lever)
- RDMA/rxe: Fix race condition in QP timer handlers (Li Zhijian)
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Zilin Guan)
- RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (Liuyi)
- NFS/localio: use GFP_NOIO and non-memreclaim workqueue in nfs_local_commit (Mike Snitzer)
- nfs/localio: eliminate unnecessary kref in nfs_local_fsync_ctx (Mike Snitzer)
- mtd: parsers: Fix memory leak in mtd_parser_tplink_safeloader_parse() (Zilin Guan)
- crypto: ccp - Send PSP_CMD_TEE_RING_DESTROY when PSP_CMD_TEE_RING_INIT fails (Mario Limonciello)
- crypto: ccp - Factor out ring destroy handling to a helper (Mario Limonciello)
- crypto: ccp - Add an S4 restore flow (Mario Limonciello)
- crypto: ccp - Declare PSP dead if PSP_CMD_TEE_RING_INIT fails (Mario Limonciello)
- platform/x86/amd/pmf: Prevent TEE errors after hibernate (Shyam Sundar S K)
- vfio/pci: Lock upstream bridge for vfio_pci_core_disable() (Anthony Pighin)
- mtd: rawnand: cadence: Fix return type of CDMA send-and-wait helper (Alok Tiwari)
- IB/mlx5: Fix port speed query for representors (Or Har-Toov)
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Chiara Meiohas)
- tools/power/x86/intel-speed-select: Fix file descriptor leak in isolate_cpus() (Malaya Kumar Rout)
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (Jacob Moroni)
- RDMA/rxe: Fix double free in rxe_srq_from_init (Jiasheng Jiang)
- RDMA/rtrs-srv: fix SG mapping (Roman Pen)
- power: supply: wm97xx: Fix NULL pointer dereference in power_supply_changed() (Waqar Hameed)
- power: supply: bq27xxx: fix wrong errno when bus ops are unsupported (Xu Wang)
- power: reset: nvmem-reboot-mode: respect cell size for nvmem_cell_write (Alexander Koskovich)
- power: supply: sbs-battery: Fix use-after-free in power_supply_changed() (Waqar Hameed)
- power: supply: rt9455: Fix use-after-free in power_supply_changed() (Waqar Hameed)
- power: supply: pm8916_lbc: Fix use-after-free in power_supply_changed() (Waqar Hameed)
- power: supply: pm8916_bms_vm: Fix use-after-free in power_supply_changed() (Waqar Hameed)
- power: supply: goldfish: Fix use-after-free in power_supply_changed() (Waqar Hameed)
- power: supply: cpcap-battery: Fix use-after-free in power_supply_changed() (Waqar Hameed)
- power: supply: bq25980: Fix use-after-free in power_supply_changed() (Waqar Hameed)
- power: supply: bq256xx: Fix use-after-free in power_supply_changed() (Waqar Hameed)
- power: supply: act8945a: Fix use-after-free in power_supply_changed() (Waqar Hameed)
- power: supply: ab8500: Fix use-after-free in power_supply_changed() (Waqar Hameed)
- RDMA/hns: Notify ULP of remaining soft-WCs during reset (Chengchang Tang)
- RDMA/hns: Fix RoCEv1 failure due to DSCP (Junxian Huang)
- RDMA/hns: Fix WQ_MEM_RECLAIM warning (Chengchang Tang)
- IB/cache: update gid cache on client reregister event (Etienne Aujames)
- RDMA/rtrs: server: remove dead code (Lihonggang)
- octeontx2-pf: Unregister devlink on probe failure (Hariprasad Kelam)
- octeon_ep_vf: ensure dbell BADDR updation (Vimlesh Kumar)
- octeon_ep: ensure dbell BADDR updation (Vimlesh Kumar)
- octeon_ep: disable per ring interrupts (Vimlesh Kumar)
- serial: caif: fix use-after-free in caif_serial ldisc_close() (Jiayuan Chen)
- xfrm: fix ip_rt_bug race in icmp_route_lookup reverse path (Jiayuan Chen)
- net: Switch to skb_dstref_steal/skb_dstref_restore for ip_route_input callers (Stanislav Fomichev)
- net: Add skb_dstref_steal and skb_dstref_restore (Stanislav Fomichev)
- net: sunhme: Fix sbus regression (Ren? Rebe)
- net: atm: fix crash due to unvalidated vcc pointer in sigd_send() (Jiayuan Chen) [Orabug: 39188476] {CVE-2026-31411}
- smb: client: correct value for smbd_max_fragmented_recv_size (Stefan Metzmacher)
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (Jinliang Zheng)
- net: hns3: fix double free issue for tx spare buffer (Jian Shen)
- PCI: Add ACS quirk for Pericom PI7C9X2G404 switches [12d8:b404] (Nicolas Cavallari)
- netfilter: nft_set_rbtree: check for partial overlaps in anonymous sets (Pablo Neira Ayuso)
- netfilter: nft_set_rbtree: fix bogus EEXIST with NLM_F_CREATE with null interval (Pablo Neira Ayuso)
- netfilter: nft_counter: fix reset of counters on 32bit archs (Anders Grahn)
- netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal)
- netfilter: nfnetlink_queue: do shared-unconfirmed check before segmentation (Florian Westphal)
- netfilter: nfnetlink_queue: optimize verdict lookup with hash table (Scott Mitchell)
- nfc: hci: shdlc: Stop timers and work before freeing context (Victoria Votokina)
- inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Eric Dumazet)
- bonding: only set speed/duplex to unknown, if getting speed failed (Thomas Bogendoerfer)
- mptcp: fix receive space timestamp initialization (Paolo Abeni)
- of: unittest: fix possible null-pointer dereferences in of_unittest_property_copy() (Tuo Li)
- ucount: check for CAP_SYS_RESOURCE using ns_capable_noaudit() (Ondrej Mosnacek)
- ipc: don't audit capability check in ipc_permissions() (Ondrej Mosnacek)
- selftests/mm: convert page_size to unsigned long (Siddarth G)
- selftests/mm: pagemap_ioctl: Fix types mismatches shown by compiler options (Muhammad Usama Anjum)
- PCI/ACPI: Restrict program_hpx_type2() to AER bits (H?kon Bugge)
- PCI: Add defines for bridge window indexing (Ilpo J?rvinen)
- PCI: Initialize RCB from pci_configure_device() (H?kon Bugge)
- wifi: ath10k: sdio: add missing lock protection in ath10k_sdio_fw_crashed_dump() (Ziyi Guo)
- PCI: Check parent for NULL in of_pci_bus_release_domain_nr() (Sergey Shtylyov)
- tcp: tcp_tx_timestamp() must look at the rtx queue (Eric Dumazet)
- fat: avoid parent link count underflow in rmdir (Zhiyu Zhang)
- nfsd: never defer requests during idmap lookup (Anthony Iliopoulos)
- xdrgen: Initialize data pointer for zero-length items (Chuck Lever)
- NFS: NFSERR_INVAL is not defined by NFSv2 (Chuck Lever)
- xdrgen: Fix struct prefix for typedef types in program wrappers (Chuck Lever)
- dm: use bio_clone_blkg_association (Mikulas Patocka)
- iommu/vt-d: Clear Present bit before tearing down PASID entry (Lu Baolu)
- iommu/vt-d: Avoid draining PRQ in sva mm release path (Lu Baolu)
- iommu/vt-d: Drain PRQs when domain removed from RID (Lu Baolu)
- iommu/vt-d: Separate page request queue from SVM (Joel Granados)
- iommu/vt-d: Flush cache for PASID table before using it (Dmytro Maluka)
- PCI: Mark 3ware-9650SA Root Port Extended Tags as broken (J?rg Wedekind)
- kallsyms/ftrace: set module buildid in ftrace_mod_address_lookup() (Petr Mladek)
- module: add helper function for reading module_buildid() (Petr Mladek)
- netfilter: nf_conncount: fix tracking of connections from localhost (Fernando Fernandez Mancera)
- netfilter: nft_compat: add more restrictions on netlink attributes (Florian Westphal)
- netfilter: nf_conncount: increase the connection clean up limit to 64 (Fernando Fernandez Mancera)
- netfilter: nf_conncount: make nf_conncount_gc_list() to disable BH (Fernando Fernandez Mancera)
- netfilter: nf_tables: reset table validation state on abort (Florian Westphal)
- wifi: cfg80211: stop NAN and P2P in cfg80211_leave (Miri Korenblit)
- mctp i2c: initialise event handler read bytes (Matt Johnston)
- net: mctp-i2c: fix duplicate reception of old data (Jian Zhang)
- quota: fix livelock between quotactl and freeze_super (Abhishek Bapat)
- dm: use READ_ONCE in dm_blk_report_zones (Mikulas Patocka)
- dm: fix unlocked test for dm_suspended_md (Mikulas Patocka)
- PCI/portdrv: Fix potential resource leak (Uwe Kleine-K?nig)
- PCI: Do not attempt to set ExtTag for VFs (H?kon Bugge)
- Documentation: tracing: Add PCI tracepoint documentation (Shuai Xue)
- Documentation: trace: Refactor toctree (Purva Yeshi)
- docs: fix WARNING document not included in any toctree (Surajsonawane2415)
- PCI/P2PDMA: Release per-CPU pgmap ref when vm_insert_page() fails (Hou Tao)
- wifi: cfg80211: Fix use_for flag update on BSS refresh (Huang Chenming)
- PCI/PM: Avoid redundant delays on D3hot->D3cold (Brian Norris)
- Documentation: PCI: endpoint: Fix ntb/vntb copy & paste errors (Baruch Siach)
- PCI: mediatek: Fix IRQ domain leak when MSI allocation fails (Xu Wang)
- hwmon: (pmbus/mpq8785) fix VOUT_MODE mismatch during identification (Carl Lee)
- hwmon: pmbus: mpq8785: Add support for MPM82504 (Pawel Dembicki)
- hwmon: pmbus: mpq8785: Implement VOUT feedback resistor divider ratio configuration (Pawel Dembicki)
- hwmon: pmbus: mpq8785: Prepare driver for multiple device support (Pawel Dembicki)
- Revert "hwmon: (ibmpex) fix use-after-free in high/low store" (Guenter Roeck)
- spi: tools: Add include folder to .gitignore (Francesco Lavra)
- HID: intel-ish-hid: fix NULL-ptr-deref in ishtp_bus_remove_all_clients (Ryan Lin)
- platform/chrome: cros_ec_lightbar: Fix response size initialization (Tzung-Bi Shih)
- drm/xe: Unregister drm device on probe error (Shuicheng Lin)
- evm: Use ordered xattrs list to calculate HMAC in evm_init_hmac() (Roberto Sassu)
- media: uvcvideo: Fix allocation for small frame sizes (Ricardo Ribalda)
- platform/chrome: cros_typec_switch: Don't touch struct fwnode_handle::dev (Andy Shevchenko)
- drm/buddy: release free_trees array on buddy mm teardown (Micha? Grzelak)
- drm/msm/a2xx: fix pixel shader start on A225 (Dmitry Baryshkov)
- media: ccs: Accommodate C-PHY into the calculation (David Heidelberger)
- drm/msm/dpu: fix CMD panels on DPU 1.x - 3.x (Dmitry Baryshkov)
- drm/msm/disp: set num_planes to 1 for interleaved YUV formats (Dmitry Baryshkov)
- HID: playstation: Add missing check for input_ff_create_memless (Xu Wang)
- regulator: core: move supply check earlier in set_machine_constraints() (Andr? Draszik)
- drm/msm/dpu: fix WD timer handling on DPU 8.x (Dmitry Baryshkov)
- drm/msm/dpu: Set vsync source irrespective of mdp top support (Teguh Sobirin)
- drm/msm/disp/dpu: add merge3d support for sc7280 (Mahadevan P)
- drm/amdgpu: Use explicit VCN instance 0 in SR-IOV init (Srinivasan Shanmugam)
- drm/amdkfd: Fix signal_eviction_fence() bool return value (Srinivasan Shanmugam)
- drm/amd: Drop "amdgpu kernel modesetting enabled" message (Mario Limonciello)
- media: chips-media: wave5: Fix memory leak on codec_info allocation failure (Zilin Guan)
- ASoC: nau8821: Fixup nau8821_enable_jack_detect() (Cristian Ciocaltea)
- ASoC: nau8821: Avoid unnecessary blocking in IRQ handler (Cristian Ciocaltea)
- ASoC: nau8821: Consistently clear interrupts before unmasking (Cristian Ciocaltea)
- smack: /smack/doi: accept previously used values (Konstantin Andreev)
- smack: /smack/doi must be > 0 (Konstantin Andreev)
- drm/panthor: Evict groups before VM termination (Ketil Johnsen)
- ALSA: vmaster: Relax __free() variable declarations (Takashi Iwai)
- ALSA: pcm: Relax __free() variable declarations (Takashi Iwai)
- ALSA: pcm: use new array-copying-wrapper (Chenyuan Yang)
- drm/panel: sw43408: Remove manual invocation of unprepare at remove (David Heidelberger)
- workqueue: Process rescuer work items one-by-one using a cursor (Lai Jiangshan)
- workqueue: Only assign rescuer work when really needed (Lai Jiangshan)
- workqueue: Factor out assign_rescuer_work() (Lai Jiangshan)
- drm/panthor: Make sure we resume the tick when new jobs are submitted (Boris Brezillon)
- drm/panthor: Fix the logic that decides when to stop ticking (Boris Brezillon)
- drm/panthor: Fix immediate ticking on a disabled tick (Boris Brezillon)
- drm/panthor: Fix the group priority rotation logic (Boris Brezillon)
- drm/panthor: Fix the full_tick check (Boris Brezillon)
- drm/panthor: Recover from panthor_gpu_flush_caches() failures (Boris Brezillon)
- arm64: dts: qcom: sm6115: Add CX_MEM/DBGC GPU regions (Konrad Dybcio)
- arm64: dts: qcom: agatti: Add CX_MEM/DBGC GPU regions (Konrad Dybcio)
- arm64: dts: qcom: x1e: bus is 40-bits (fix 64GB models) (Jonathan Marek)
- arm64: dts: qcom: sdm845-db845c: specify power for WiFi CH1 (Dmitry Baryshkov)
- arm64: dts: qcom: sdm845-db845c: drop CS from SPIO0 (Dmitry Baryshkov)
- arm64: dts: qcom: qrb4210-rb2: Fix UART3 wakeup IRQ storm (Dmitry Baryshkov)
- arm64: dts: amlogic: g12: assign the MMC A signal clock (Jerome Brunet)
- arm64: dts: amlogic: g12: assign the MMC B and C signal clocks (Jerome Brunet)
- arm64: dts: amlogic: gx: assign the MMC signal clocks (Jerome Brunet)
- arm64: dts: amlogic: axg: assign the MMC signal clocks (Jerome Brunet)
- arm64: dts: amlogic: c3: assign the MMC signal clocks (Jerome Brunet)
- hwspinlock: omap: Handle devm_pm_runtime_enable() errors (Xu Wang)
- arm64: dts: ti: k3-j784s4-j742s2-main-common.dtsi: Refactor watchdog instances for j784s4 (Abhash Kumar Jha)
- arm64: dts: ti: k3-j784s4-main.dtsi: Move c71_3 node to appropriate order (Abhash Kumar Jha)
- arm64: dts: amlogic: s4: fix mmc clock assignment (Jerome Brunet)
- arm64: dts: amlogic: s4: assign mmc b clock to 24MHz (Jerome Brunet)
- arm64: dts: mediatek: mt8183-jacuzzi-pico6: Fix typo in pinmux node (AngeloGioacchino Del Regno)
- arm: dts: lpc32xx: add clocks property to Motor Control PWM device tree node (Vladimir Zapolskiy)
- ARM: dts: lpc32xx: Set motor PWM #pwm-cells property value to 3 cells (Vladimir Zapolskiy)
- powerpc/eeh: fix recursive pci_lock_rescan_remove locking in EEH event handling (Narayana Murty N)
- soc: mediatek: svs: Fix memory leak in svs_enable_debug_write() (Zilin Guan)
- soc: qcom: cmd-db: Use devm_memremap() to fix memory leak in cmd_db_dev_probe (Xu Wang)
- powerpc/uaccess: Move barrier_nospec() out of allow_read_{from/write}_user() (Christophe Leroy)
- ARM: dts: allwinner: sun5i-a13-utoo-p66: delete "power-gpios" property (Chen-Yu Tsai)
- arm64: dts: qcom: msm8994-octagon: Fix Analog Devices vendor prefix of AD7147 (Vladimir Zapolskiy)
- arm64: dts: qcom: x1e80100: Fix USB combo PHYs SS1 and SS2 ref clocks (Abel Vesa)
- arm64: dts: qcom: sdm845-oneplus: Mark l14a regulator as boot-on (Casey Connolly)
- arm64: dts: qcom: sdm845-oneplus: Don't mark ts supply boot-on (Casey Connolly)
- arm64: dts: qcom: sdm630: fix gpu_speed_bin size (Dmitry Baryshkov)
- clk: qcom: Return correct error code in qcom_cc_probe_by_index() (Xu Wang)
- arm64: dts: tqma8mpql-mba8mp-ras314: Fix HDMI CEC pad control settings (Alexander Stein)
- arm64: dts: tqma8mpql-mba8mpxl: Fix HDMI CEC pad control settings (Alexander Stein)
- firmware: arm_ffa: Correct 32-bit response handling in NOTIFICATION_INFO_GET (Sudeep Holla)
- EDAC/i5400: Fix snprintf() limit calculation in calculate_dimm_size() (Dan Carpenter)
- EDAC/i5000: Fix snprintf() size calculation in calculate_dimm_size() (Dan Carpenter)
- soc: qcom: smem: handle ENOMEM error during probe (Jorge Ramirez-Ortiz)
- pstore/ram: fix buffer overflow in persistent_ram_save_old() (Pwnverse)
- hwrng: core - use RCU and work_struct to fix race condition (Lianjie Wang)
- hwrng: core - Allow runtime disabling of the HW RNG (Jonathan Mcdowell)
- crypto: starfive - Fix memory leak in starfive_aes_aead_do_one_req() (Zilin Guan)
- fs/tests: exec: drop duplicate bprm_stack_limits test vectors (Titouan Ameline de Cadeville)
- sched/rt: Skip currently executing CPU in rto_next_cpu() (Chen Jinghuang)
- sched/deadline: Clear the defer params (Joel Fernandes)
- media: pci: mg4b: Use IRQF_NO_THREAD (Sebastian Andrzej Siewior)
- mfd: wm8350-core: Use IRQF_ONESHOT (Sebastian Andrzej Siewior)
- EDAC/altera: Remove IRQF_ONESHOT (Sebastian Andrzej Siewior)
- scsi: efct: Use IRQF_ONESHOT and default primary handler (Sebastian Andrzej Siewior)
- Bluetooth: btintel_pcie: Use IRQF_ONESHOT and default primary handler (Sebastian Andrzej Siewior)
- platform/x86: int0002: Remove IRQF_ONESHOT from request_irq() (Sebastian Andrzej Siewior)
- genirq: Set IRQF_COND_ONESHOT in devm_request_irq(). (Sebastian Andrzej Siewior)
- bpf: Fix bpf_xdp_store_bytes proto for read-only arg (Paul Chaignon)
- crypto: caam - fix netdev memory leak in dpaa2_caam_probe (Jianpeng Chang)
- crypto: hisilicon/trng - support tfms sharing the device (Weili Qian)
- x86/fgraph,bpf: Switch kprobe_multi program stack unwind to hw_regs path (Jiri Olsa)
- x86/fgraph,bpf: Fix stack ORC unwind from kprobe_multi return probe (Jiri Olsa)
- tracing: Add ftrace_fill_perf_regs() for perf event (Masami Hiramatsu)
- tracing: Add ftrace_partial_regs() for converting ftrace_regs to pt_regs (Masami Hiramatsu)
- fgraph: Replace fgraph_ret_regs with ftrace_regs (Masami Hiramatsu)
- ftrace: Rename ftrace_regs_return_value to ftrace_regs_get_return_value (Masami Hiramatsu)
- ftrace: Use arch_ftrace_regs() for ftrace_regs_*() macros (Masami Hiramatsu)
- ftrace: Consolidate ftrace_regs accessor functions for archs using pt_regs (Steven Rostedt)
- ftrace: Make ftrace_regs abstract from direct use (Steven Rostedt)
- tracing: Add a comment about ftrace_regs definition (Masami Hiramatsu)
- bpf, sockmap: Fix FIONREAD for sockmap (Jiayuan Chen)
- bpf, sockmap: Fix incorrect copied_seq calculation (Jiayuan Chen)
- crypto: ccp - narrow scope of snp_range_list (Tycho Andersen)
- crypto: ccp - Ensure implicit SEV/SNP init and shutdown in ioctls (Ashish Kalra)
- hrtimer: Fix trace oddity (Thomas Gleixner)
- selftests/bpf: Fix resource leak in serial_test_wq on attach failure (Kery Qi)
- bpf: Preserve id of register in sync_linked_regs() (Puranjay Mohan)
- crypto: hisilicon/sec2 - support skcipher/aead fallback for hardware queue unavailable (Qi Tao)
- crypto: hisilicon/zip - adjust the way to obtain the req in the callback function (Chenghai Huang)
- crypto: octeontx - fix dma_free_coherent() size (Thomas Fourier)
- crypto: cavium - fix dma_free_coherent() size (Thomas Fourier)
- ARM: VDSO: Patch out __vdso_clock_getres() if unavailable (Thomas Wei?schuh)
- libbpf: Fix OOB read in btf_dump_get_bitfield_value (Varun R Mallya)
- selftests/bpf: veristat: fix printing order in output_stats() (Puranjay Mohan)
- crypto: qat - fix warning on adf_pfvf_pf_proto.c (Giovanni Cabiddu)
- perf/x86/core: Do not set bit width for unavailable counters (Sandipan Das)
- s390/cio: Fix device lifecycle handling in css_alloc_subchannel() (Salah Triki)
- PM: sleep: wakeirq: harden dev_pm_clear_wake_irq() against races (Gui-Dong Han)
- cpufreq: intel_pstate: Enable asym capacity only when CPU SMT is not possible (Yaxiong Tian)
- perf: arm_spe: Properly set hw.state on failures (Leo Yan)
- PM: wakeup: Handle empty list in wakeup_sources_walk_start() (Sam Wu)
- md/raid1: fix memory leak in raid1_run() (Zilin Guan)
- md/raid1: fix memory leak in raid1_run() if no active rdev (Zheng Qixing)
- Partial revert "x86/xen: fix balloon target initialization for PVH dom0" (Roger Pau Monn?)
- ublk: Validate SQE128 flag before accessing the cmd (Govindarajulu Varadarajan)
- thermal/of: Fix reference leak in thermal_of_cm_lookup() (Felix Gu)
- iomap: fix submission side handling of completion side errors (Christoph Hellwig)
- cpufreq: scmi: Fix device_node reference leak in scmi_cpu_domain_id() (Felix Gu)
- OPP: Return correct value in dev_pm_opp_get_level (Aleks Todorov)
- md/raid10: fix any_working flag handling in raid10_sync_request (Li Nan)
- md/raid5: fix raid5_run() to return error when log_init() fails (Yu Kuai)
- thermal: intel: x86_pkg_temp_thermal: Handle invalid temperature (Rafael J. Wysocki)
- cpuidle: governors: menu: Always check timers with tick stopped (Rafael J. Wysocki)
- io_uring/sync: validate passed in offset (Jens Axboe)
- ACPICA: Fix NULL pointer dereference in acpi_ev_address_space_dispatch() (Alexey Simakov)
- io_uring: use release-acquire ordering for IORING_SETUP_R_DISABLED (Caleb Sander)
- xen/virtio: Don't use grant-dma-ops when running as Dom0 (Teddy Astie)
- rnbd-srv: Fix server side setting of bi_size for special IOs (Florian-Ewald Mueller)
- rnbd-srv: use bio_add_virt_nofail (Christoph Hellwig)
- block: add a bio_add_virt_nofail helper (Christoph Hellwig)
- smb: client: fix potential UAF and double free in smb2_open_file() (Paulo Alcantara)
- btrfs: fix block_group_tree dirty_list corruption (Boris Burkov)
- btrfs: qgroup: return correct error when deleting qgroup relation item (Filipe Manana)
- erofs: handle end of filesystem properly for file-backed mounts (Gao Xiang)
- erofs: get rid of raw bi_end_io() usage (Gao Xiang)
- tpm: st33zp24: Fix missing cleanup on get_burstcount() error (Alper Ak)
- tpm: tpm_i2c_infineon: Fix locality leak on get_burstcount() failure (Alper Ak)
- i3c: dw: Fix memory leak in dw_i3c_master_i2c_xfers() (Zilin Guan)
- i3c: dw: Initialize spinlock to avoid upsetting lockdep (Fredrik Markstrom)
- gfs2: Fix use-after-free in iomap inline data write path (Deepanshu Kartikey)
- gfs2: Fix slab-use-after-free in qd_put (Andreas Gruenbacher)
- gfs2: Retries missing in gfs2_{rename,exchange} (Andreas Gruenbacher)
- i3c: master: Update hot-join flag only on success (Adrian Hunter)
for 'init_fs' (Ben Dooks)
- i3c: Move device name assignment after i3c_bus_init (Billy Tsai)
- audit: move the compat_xxx_class[] extern declarations to audit_arch.h (Ben Dooks)
- rcu: Fix rcu_read_unlock() deadloop due to softirq (Yao Kai)
- rcu: Remove local_irq_save/restore() in rcu_preempt_deferred_qs_handler() (Zqiang)
- rcu: Refactor expedited handling check in rcu_read_unlock_special() (Joel Fernandes)
- hfsplus: return error when node already exists in hfs_bnode_create (Shardul Bankar)
- auxdisplay: arm-charlcd: fix release_mem_region() size (Thomas Fourier)
- RDMA/umad: Reject negative data_len in ib_umad_write (Yunje Shin) [Orabug: 39103108] {CVE-2026-23243}
- RDMA/siw: Fix potential NULL pointer dereference in header processing (Yunje Shin)



From el-errata at oss.oracle.com  Thu Jun  4 09:56:01 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Thu, 04 Jun 2026 02:56:01 -0700
Subject: [El-errata] OLAMBA-2026-0014 Oracle Linux 8 ol-automation-manager
 bug fix update
Message-ID: <mailman.154.1780566974.34.el-errata@oss.oracle.com>

Oracle Linux Bug Fix Advisory OLAMBA-2026-0014

http://linux.oracle.com/errata/OLAMBA-2026-0014.html

The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:

x86_64:
ol-automation-manager-2.3.1-12.el8.x86_64.rpm
ol-automation-manager-cli-2.3.1-12.el8.noarch.rpm
python311-olamkit-2.3.1-12.el8.noarch.rpm


SRPMS:
http://oss.oracle.com/ol8/SRPMS-updates/ol-automation-manager-2.3.1-12.el8.src.rpm



Description of changes:

[2.3.1-12.el8]
- Fix command to set db session timeout for locks [Orabug: 39318191]



From el-errata at oss.oracle.com  Thu Jun  4 09:56:06 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Thu, 04 Jun 2026 02:56:06 -0700
Subject: [El-errata] ELSA-2026-50293 Important: Unbreakable Enterprise
 kernel security update
Message-ID: <mailman.155.1780566980.34.el-errata@oss.oracle.com>

Oracle Linux Security Advisory ELSA-2026-50293

http://linux.oracle.com/errata/ELSA-2026-50293.html

The following updated rpms for have been uploaded to the Unbreakable Linux Network:

x86_64:
kernel-uek-6.12.0-203.76.7.1.el10uek.x86_64.rpm
kernel-uek-core-6.12.0-203.76.7.1.el10uek.x86_64.rpm
kernel-uek-devel-6.12.0-203.76.7.1.el10uek.x86_64.rpm
kernel-uek-doc-6.12.0-203.76.7.1.el10uek.noarch.rpm
kernel-uek-modules-6.12.0-203.76.7.1.el10uek.x86_64.rpm
kernel-uek-modules-core-6.12.0-203.76.7.1.el10uek.x86_64.rpm
kernel-uek-modules-deprecated-6.12.0-203.76.7.1.el10uek.x86_64.rpm
kernel-uek-modules-desktop-6.12.0-203.76.7.1.el10uek.x86_64.rpm
kernel-uek-modules-extra-6.12.0-203.76.7.1.el10uek.x86_64.rpm
kernel-uek-modules-extra-netfilter-6.12.0-203.76.7.1.el10uek.x86_64.rpm
kernel-uek-modules-usb-6.12.0-203.76.7.1.el10uek.x86_64.rpm
kernel-uek-modules-wireless-6.12.0-203.76.7.1.el10uek.x86_64.rpm
kernel-uek-tools-6.12.0-203.76.7.1.el10uek.x86_64.rpm
kernel-uek-debug-6.12.0-203.76.7.1.el10uek.x86_64.rpm
kernel-uek-debug-core-6.12.0-203.76.7.1.el10uek.x86_64.rpm
kernel-uek-debug-devel-6.12.0-203.76.7.1.el10uek.x86_64.rpm
kernel-uek-debug-modules-6.12.0-203.76.7.1.el10uek.x86_64.rpm
kernel-uek-debug-modules-core-6.12.0-203.76.7.1.el10uek.x86_64.rpm
kernel-uek-debug-modules-deprecated-6.12.0-203.76.7.1.el10uek.x86_64.rpm
kernel-uek-debug-modules-desktop-6.12.0-203.76.7.1.el10uek.x86_64.rpm
kernel-uek-debug-modules-extra-6.12.0-203.76.7.1.el10uek.x86_64.rpm
kernel-uek-debug-modules-extra-netfilter-6.12.0-203.76.7.1.el10uek.x86_64.rpm
kernel-uek-debug-modules-usb-6.12.0-203.76.7.1.el10uek.x86_64.rpm
kernel-uek-debug-modules-wireless-6.12.0-203.76.7.1.el10uek.x86_64.rpm

aarch64:
kernel-uek-6.12.0-203.76.7.1.el10uek.aarch64.rpm
kernel-uek-core-6.12.0-203.76.7.1.el10uek.aarch64.rpm
kernel-uek-devel-6.12.0-203.76.7.1.el10uek.aarch64.rpm
kernel-uek-doc-6.12.0-203.76.7.1.el10uek.noarch.rpm
kernel-uek-modules-6.12.0-203.76.7.1.el10uek.aarch64.rpm
kernel-uek-modules-core-6.12.0-203.76.7.1.el10uek.aarch64.rpm
kernel-uek-modules-deprecated-6.12.0-203.76.7.1.el10uek.aarch64.rpm
kernel-uek-modules-desktop-6.12.0-203.76.7.1.el10uek.aarch64.rpm
kernel-uek-modules-extra-6.12.0-203.76.7.1.el10uek.aarch64.rpm
kernel-uek-modules-extra-netfilter-6.12.0-203.76.7.1.el10uek.aarch64.rpm
kernel-uek-modules-usb-6.12.0-203.76.7.1.el10uek.aarch64.rpm
kernel-uek-modules-wireless-6.12.0-203.76.7.1.el10uek.aarch64.rpm
kernel-uek-tools-6.12.0-203.76.7.1.el10uek.aarch64.rpm
kernel-uek-debug-6.12.0-203.76.7.1.el10uek.aarch64.rpm
kernel-uek-debug-core-6.12.0-203.76.7.1.el10uek.aarch64.rpm
kernel-uek-debug-devel-6.12.0-203.76.7.1.el10uek.aarch64.rpm
kernel-uek-debug-modules-6.12.0-203.76.7.1.el10uek.aarch64.rpm
kernel-uek-debug-modules-core-6.12.0-203.76.7.1.el10uek.aarch64.rpm
kernel-uek-debug-modules-deprecated-6.12.0-203.76.7.1.el10uek.aarch64.rpm
kernel-uek-debug-modules-desktop-6.12.0-203.76.7.1.el10uek.aarch64.rpm
kernel-uek-debug-modules-extra-6.12.0-203.76.7.1.el10uek.aarch64.rpm
kernel-uek-debug-modules-extra-netfilter-6.12.0-203.76.7.1.el10uek.aarch64.rpm
kernel-uek-debug-modules-usb-6.12.0-203.76.7.1.el10uek.aarch64.rpm
kernel-uek-debug-modules-wireless-6.12.0-203.76.7.1.el10uek.aarch64.rpm
kernel-uek64k-6.12.0-203.76.7.1.el10uek.aarch64.rpm
kernel-uek64k-core-6.12.0-203.76.7.1.el10uek.aarch64.rpm
kernel-uek64k-devel-6.12.0-203.76.7.1.el10uek.aarch64.rpm
kernel-uek64k-modules-6.12.0-203.76.7.1.el10uek.aarch64.rpm
kernel-uek64k-modules-core-6.12.0-203.76.7.1.el10uek.aarch64.rpm
kernel-uek64k-modules-deprecated-6.12.0-203.76.7.1.el10uek.aarch64.rpm
kernel-uek64k-modules-desktop-6.12.0-203.76.7.1.el10uek.aarch64.rpm
kernel-uek64k-modules-extra-6.12.0-203.76.7.1.el10uek.aarch64.rpm
kernel-uek64k-modules-extra-netfilter-6.12.0-203.76.7.1.el10uek.aarch64.rpm
kernel-uek64k-modules-usb-6.12.0-203.76.7.1.el10uek.aarch64.rpm
kernel-uek64k-modules-wireless-6.12.0-203.76.7.1.el10uek.aarch64.rpm


SRPMS:
http://oss.oracle.com/ol10/SRPMS-updates/kernel-uek-6.12.0-203.76.7.1.el10uek.src.rpm

Related CVEs:

CVE-2025-54518
CVE-2026-23270
CVE-2026-23278
CVE-2026-31402
CVE-2026-31431
CVE-2026-31628
CVE-2026-43033
CVE-2026-43078
CVE-2026-43084
CVE-2026-43284
CVE-2026-43500
CVE-2026-46300
CVE-2026-46333




Description of changes:

[6.12.0-203.76.7.1]
- smb: client: reject userspace cifs.spnego descriptions (Asim Viladi Oglu Manizada)  [Orabug: 39474418]

[6.12.0-203.76.7]
- tun: free page on build_skb failure in tun_xdp_one() (Weiming Shi)  [Orabug: 39456024]
- tap: free page on error paths in tap_get_user_xdp() (Weiming Shi)  [Orabug: 39456024]
- tun: free page on short-frame rejection in tun_xdp_one() (Weiming Shi)  [Orabug: 39456024]

[6.12.0-203.76.6]
- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Hyunwoo Kim)  [Orabug: 39442660]  {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (William Bowling)  [Orabug: 39442660]

[6.12.0-203.76.5]
- ptrace: slightly saner 'get_dumpable()' logic (Linus Torvalds)  [Orabug: 39407652]  {CVE-2026-46333}

[6.12.0-203.76.4]
- x86/CPU/AMD: Add a fix for AMD-SB-7052 (Prathyushi Nangia)  [Orabug: 39218893]  {CVE-2025-54518}
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim)  [Orabug: 39334587]  {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (David Howells)  [Orabug: 39334587]
- rxrpc: only handle RESPONSE during service challenge (Wang Jie)  [Orabug: 39334587]
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells)  [Orabug: 39334587]
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells)  [Orabug: 39334587]
- rxrpc: Fix re-decryption of RESPONSE packets (David Howells)  [Orabug: 39334587]
- xfrm: esp: avoid in-place decrypt on shared skb frags (Kuan-Ting Chen)  [Orabug: 39334587]  {CVE-2026-43284}
- bcm-hsdk-gpl: Fix build issues for HSDK 6.5.34 (Vijay Kumar)  [Orabug: 39342234]
- bcm-hsdk-gpl: Update BCM HSDK GPL driver to 6.5.34 (Vijay Kumar)  [Orabug: 39342234]
- minke-fan-cpld: Avoid logging 'unknown fan id' when no fan is present (arista-hpandya)  [Orabug: 39335238]
- exadata: tools: perf: update column to comm_nodigit (Stephen Brennan)  [Orabug: 39327035]
- perf report: Add comm_nodigit sort key (Stephen Brennan)  [Orabug: 39327035]
- Revert "tools: perf: add comm_ignore_digit column" (Stephen Brennan)  [Orabug: 39327035]
- octeontx2-af: cn20k: Fix RVU AF interrupt handler (Geetha sowjanya)  [Orabug: 39318904]
- octeontx2-af: Move QMEM allocations from GFP_KERNEL to ATOMIC (Sunil Goutham)  [Orabug: 39318904]
- bphy-pf: CNF20Ka: poll MHABs based on cpri_mask instead of fixed count (Viswajith Murali)  [Orabug: 39318904]
- octeontx2-af: Add devlink param for NIX RQ caching (Nishok A)  [Orabug: 39318904]
- octeontx2-af: cn20k: Fix the RVUAF->PF mbox address (Geetha sowjanya)  [Orabug: 39318904]
- octeontx2-af: Add devlink and debugfs support for NPA DWRR registers. (Anshumali Gaur)  [Orabug: 39318904]
- cn20k-af: psw: Fix build warning (Srujana Challa)  [Orabug: 39318904]
- octeontx2-af: npc: cn20k: Fix AI review comments. (Ratheesh Kannoth)  [Orabug: 39318904]
- cn20k-af: psw: add mailbox to write to PSW MSIX registers (Srujana Challa)  [Orabug: 39318904]
- cn20k-af: psw: add debugfs support for psw (Srujana Challa)  [Orabug: 39318904]
- cn20k-af: psw: introduce a mailbox to program PSW mbox msix vector (Srujana Challa)  [Orabug: 39318904]
- cn20k-af: psw: add PSW AF API Notification queue support (Srujana Challa)  [Orabug: 39318904]
- cn20k-af: psw: add FLR handler for PSW (Srujana Challa)  [Orabug: 39318904]
- cn20k-af: psw: setup PSW timed polling structure tables (Srujana Challa)  [Orabug: 39318904]
- cn20k-af: psw: add mailbox for PSW PCIe configuration (Srujana Challa)  [Orabug: 39318904]
- cn20k-af: psw: add mailbox for PSW LF mapping (Srujana Challa)  [Orabug: 39318904]
- cn20k-af: psw: add new mailbox for PSW doorbell configuration (Srujana Challa)  [Orabug: 39318904]
- cn20k-af: psw: setups PSW FID resources (Srujana Challa)  [Orabug: 39318904]
- cn20k-af: psw: setup PSW GID resources (Srujana Challa)  [Orabug: 39318904]
- cn20k-af: psw: add mailbox to get PSW capabilities (Srujana Challa)  [Orabug: 39318904]
- cn20k-af: psw: register PSW AF interrupts (Srujana Challa)  [Orabug: 39318904]
- cn20k-af: psw: introduce PSW block (Srujana Challa)  [Orabug: 39318904]
- octeontx2-af: limit max periodic timers for cn20k (Shijith Thotton)  [Orabug: 39318904]
- octeontx2-af: npc: cn20k: Make default entries as x4. (Ratheesh Kannoth)  [Orabug: 39318904]
- octeonxt2-af: npc: Fix bugs (Ratheesh Kannoth)  [Orabug: 39318904]
- octeontx2-pf: cn20ka: fix call trace in otx2_unregister_dl() after kernel reboot. (Anshumali Gaur)  [Orabug: 39318904]
- octeontx2-pf: cn20ka: fix call trace in otx2vf_remove after kernel reboot. (Anshumali Gaur)  [Orabug: 39318904]
- octeontx2-af: cn20k: Configure default CPT_AF_UCC_CTL for IPsec error codes (Amit Singh Tomar)  [Orabug: 39318904]
- octeontx2-af: CN20k: add support for RFOE4 on half MP (Sai Krishna)  [Orabug: 39318904]
- octeontx2-pf: Fix kernel crash during eswitch creation (Suman Ghosh)  [Orabug: 39318904]
- octeontx2-af: Use ZERO_OR_NULL_PTR for cgxchan2link_map (Subbaraya Sundeep)  [Orabug: 39318904]
- octeontx2-af: cn20K: mcs: Add parser configuration for VLAN extraction (Geetha sowjanya)  [Orabug: 39318904]
- octeontx2-af: Add support for single SBTAG parsing (Kiran Kumar K)  [Orabug: 39318904]
- octeontx2-af: Fix SDP channel base (Geetha sowjanya)  [Orabug: 39318904]
- octeontx2-af: cn20K: mcs: Add MCS DSA tag parsing configuration support (Geetha sowjanya)  [Orabug: 39318904]
- octeontx2-af: Avoid any false positives for Altaf (Linu Cherian)  [Orabug: 39318904]
- octeontx2-af: npc: Fix broadcast MCAM entry type on CN10K (Rakesh Kudurumalla)  [Orabug: 39318904]
- octeontx2-af: cn20k: Add platform check. (Anshumali Gaur)  [Orabug: 39318904]
- octeontx2-bphy-netdev: add get_link_ksettings to fix SIOCETHTOOL error (Sai Krishna)  [Orabug: 39318904]
- octeontx2-af: npc: cn20k: dont free default mcam indexes (Ratheesh Kannoth)  [Orabug: 39318904]
- bphy-pf: CNF20ka: Replace deprecated MSI-X API in CPRI netdev driver (Viswajith Murali)  [Orabug: 39318904]
- octeontx2-af: npc: cn20k: Fix kernel warn. (Ratheesh Kannoth)  [Orabug: 39318904]
- octeontx2-af: npc: cn20k: Mismatch stats. (Ratheesh Kannoth)  [Orabug: 39318904]
- octeontx2-af: npc: cn20k: Dont free PF default mcam indexes. (Ratheesh Kannoth)  [Orabug: 39318904]
- octeontx2-af: npc: cn20k: FIx invalid access (Ratheesh Kannoth)  [Orabug: 39318904]
- octeontx2-af: npc: cn20k: dstats (Ratheesh Kannoth)  [Orabug: 39318904]
- octeonxt2-af: npc: cn20k: show enable/disable status. (Ratheesh Kannoth)  [Orabug: 39318904]
- octeontx2-af: npc: cn20k: debugfs for virtual indexes (Ratheesh Kannoth)  [Orabug: 39318904]
- octeontx2-af: npc: cn20k: Fix AI reviews (Ratheesh Kannoth)  [Orabug: 39318904]
- octeontx2-af: npc: cn20k: Alloc default indexes during nix lf alloc (Ratheesh Kannoth)  [Orabug: 39318904]
- octeontx2-af: npc: cn20k: Fix default mcam idx free (Ratheesh Kannoth)  [Orabug: 39318904]
- octeontx2-af: npc: Remove SoC specific local variables. (Ratheesh Kannoth)  [Orabug: 39318904]
- octeontx2-af: mcs: Fix SC resource cleanup loop (Geetha sowjanya)  [Orabug: 39318904]
- octeontx2-af: cn20k: mcs: Add SC CAM bypass entry (Geetha sowjanya)  [Orabug: 39318904]
- octeontx2-af: Modify the pcifunc VF mask (Subbaraya Sundeep)  [Orabug: 39318904]
- octeontx2-af: cn20k: update the AFPFX_TRIGX reg offset (Geetha sowjanya)  [Orabug: 39318904]
- octeontx2-af: cn20K: Fix rvu mbox registers offset (Geetha sowjanya)  [Orabug: 39318904]
- octeontx2: sdp: Display backpressure status in debugfs (Subbaraya Sundeep)  [Orabug: 39318904]
- octeontx2-pf: Fix aura BPID assignment when CONFIG_DCB is enabled (Geetha sowjanya)  [Orabug: 39318904]
- octeontx2-af: add bounds check in nix_bp_enable (Rakesh Kudurumalla)  [Orabug: 39318904]
- octeontx2-af: cn20k: Set a default value for res_meta_offset (Tanmay Jagdale)  [Orabug: 39318904]
- octeontx2-af: Support mapping of individual slots to RVU block LFs (Subbaraya Sundeep)  [Orabug: 39318904]
- cn20k-af: ml: improve AF register access control (Srikanth Yalavarthi)  [Orabug: 39318904]
- cn20k-af: ml: fetch list of LF IDs attached (Srikanth Yalavarthi)  [Orabug: 39318904]
- cn20k-af: ml: fix using uninitialized partition ID (Srikanth Yalavarthi)  [Orabug: 39318904]
- cn20k-af: ml: enable mapping LF to partition ID (Srikanth Yalavarthi)  [Orabug: 39318904]
- cn20k-af: ml: enable mapping LF with partitions (Srikanth Yalavarthi)  [Orabug: 39318904]
- cn20k-af: ml: support ML lf alloc and free (Srikanth Yalavarthi)  [Orabug: 39318904]
- cn20k-af: ml: support fetching msix offset for ML (Srikanth Yalavarthi)  [Orabug: 39318904]
- cn20k-af: ml: support attach and detach of ML LFs (Srikanth Yalavarthi)  [Orabug: 39318904]
- cn20k-af: ml: add support to fetch ML capabilities (Srikanth Yalavarthi)  [Orabug: 39318904]
- cn20k-af: ml: implement ML mbox message handler (Srikanth Yalavarthi)  [Orabug: 39318904]
- cn20k-af: ml: register ML interrupt handlers (Srikanth Yalavarthi)  [Orabug: 39318904]
- cn20k-af: ml: implement hw resource setup and free (Srikanth Yalavarthi)  [Orabug: 39318904]
- cn20k-af: ml: enable ML block probe and remove (Srikanth Yalavarthi)  [Orabug: 39318904]
- cn20k-af: ml: add skeleton code for ML EB driver (Prince Takkar)  [Orabug: 39318904]
- octeontx2-pf: cn20k: Add CN20K TX SecY policy bit support (Subrat Pandey)  [Orabug: 39318904]
- octeontx2-af: cn20k: mcs: Set default mcs Id to 0. (Subrat Pandey)  [Orabug: 39318904]
- octeontx2-af: cn20k: Fix memleak in npc_install flow (Suman Ghosh)  [Orabug: 39318904]
- octeontx2-af: Fix flags for HWWQE period timers (Mikko Suni)  [Orabug: 39318904]
- octeontx2-af: cn20k: Use physical address for AF->PF mbox (Geetha sowjanya)  [Orabug: 39318904]
- octeontx2-af: cn20k: update fields of CPT_AF_LFX_CTL (Rahul Bhansali)  [Orabug: 39318904]
- octeontx2-af: cn20k: configure RX inline replay (Shashank Gupta)  [Orabug: 39318904]
- Octeontx2-af: cn20k: configure inline RQ mask (Bharat Bhushan)  [Orabug: 39318904]
- octeontx2-pf: Don't initialize ipsec queues for representor PF. (Geetha sowjanya)  [Orabug: 39318904]
- octeontx2-bphy-pf: CNF20ka: BPHY NIC PF driver for chiplet based BPHY NIX bypass mode (Naveen Mamindlapalli)  [Orabug: 39318904]
- octeontx2-af: fix npc mbox structure defination (Mohit Kumar Parjapat)  [Orabug: 39318904]
- octeontx2-af: npc: cn20k: Avoid SoC specific structures (Ratheesh Kannoth)  [Orabug: 39318904]
- octeontx2-af: npc: cn20k: Fix get number of kw (Ratheesh Kannoth)  [Orabug: 39318904]
- octeontx2-pf: switch: cancel work before destroying wq. (Ratheesh Kannoth)  [Orabug: 39318904]
- octeontx: switch: Fix compiler warnings. (Ratheesh Kannoth)  [Orabug: 39318904]
- octeontx2-pf: selftest: Use unique mbox ids (Linu Cherian)  [Orabug: 39318904]
- octeontx: pan: Disable WQ after unregister notifier (Ratheesh Kannoth)  [Orabug: 39318904]
- octeontx2-af: switch: Define new flag (Ratheesh Kannoth)  [Orabug: 39318904]
- octeontx2-pf: switch: Fix bugs. (Ratheesh Kannoth)  [Orabug: 39318904]
- octeontx2-af: switch: Update mcam_idx for reply flow (Ratheesh Kannoth)  [Orabug: 39318904]
- octeontx2-pf: switch: Support ovs offloading (Ratheesh Kannoth)  [Orabug: 39318904]
- octeontx2-pf: switch: Support mask as well for flow. (Ratheesh Kannoth)  [Orabug: 39318904]
- octeontx2-af: switch: Pass tuple mask as well to flow. (Ratheesh Kannoth)  [Orabug: 39318904]
- octeontx2-pf: switch: Retrieve VLAN infor for L3 routing (Ratheesh Kannoth)  [Orabug: 39318904]
- octeontx2-af: switch: Add vlan tag as part of message (Ratheesh Kannoth)  [Orabug: 39318904]
- octeontx2-af: switch: Dont process events if switchdev is not up (Ratheesh Kannoth)  [Orabug: 39318904]
- octeontx2-pf: switch: make functions static (Ratheesh Kannoth)  [Orabug: 39318904]
- octeontx2-pf: switch: Fix graceful shutdown. (Ratheesh Kannoth)  [Orabug: 39318904]
- octeontx2-pf: switch: Notify switchdev on NF table callback (Ratheesh Kannoth)  [Orabug: 39318904]
- octeontx2-af: switch: Support SNAT/DNAT routing (Ratheesh Kannoth)  [Orabug: 39318904]
- octeontx2-pf: switch: Reject acceleration for invalid bridge (Ratheesh Kannoth)  [Orabug: 39318904]
- octeontx2-af: switch: Fix buffer overflow (Ratheesh Kannoth)  [Orabug: 39318904]
- octeontx2-pf: switch: Fix below kernel splat (Ratheesh Kannoth)  [Orabug: 39318904]
- octeontx2-pf: switchdev: Register for Route events. (Ratheesh Kannoth)  [Orabug: 39318904]
- octeontx2-af: switchdev: Forward route notifications. (Ratheesh Kannoth)  [Orabug: 39318904]
- octeontx2-pf: switchdev: Add driver support (Ratheesh Kannoth)  [Orabug: 39318904]
- octeontx2-af: switchdev: L2 offload support (Ratheesh Kannoth)  [Orabug: 39318904]
- octeontx2-pf: Remove devlink support for SDP VF NIC driver (Anshumali Gaur)  [Orabug: 39318904]
- octeontx2-af: Handle pool context address update in Aura context write (Ashwin Sekhar T K)  [Orabug: 39318904]
- octeontx2-af: CN20k: fix unused-function warning (Amit Singh Tomar)  [Orabug: 39318904]
- octeontx2-pf: Move representor event handling into common file (Geetha sowjanya)  [Orabug: 39318904]
- octeontx2-af: Fix Rep link state sync up with PF/VFs (Geetha sowjanya)  [Orabug: 39318904]
- octeontx2-af: npa: cn20k: Fix DPC config mbox (Ashwin Sekhar T K)  [Orabug: 39318904]
- Octeontx2-pf: Fix transceiver details corruption (Hariprasad Kelam)  [Orabug: 39318904]
- octeontx2-af: change GEN PF device ID (Sai Krishna)  [Orabug: 39318904]
- octeontx2-af: CN20K: Fetch LBK supported channels (Hariprasad Kelam)  [Orabug: 39318904]
- octeontx2-af: Fix limiting SRIOV VF count logic (Sunil Goutham)  [Orabug: 39318904]
- octeontx2-af: Fix KASAN slab-out-of-bounds error (Anshumali Gaur)  [Orabug: 39318904]
- octeontx2-af: Update irq affinity for mbox and flr (Linu Cherian)  [Orabug: 39318904]
- octeontx2-af: cn20k: Add FLR/ME support (Linu Cherian)  [Orabug: 39318904]
- octeontx2-af: Fix possible memleak while mbox init (Sai Krishna)  [Orabug: 39318904]
- octeontx2-af: Map alternative AF NIX_AF_GINT only for CN10K (Geetha sowjanya)  [Orabug: 39318904]
- octeontx2-af: Add support to forward error interrupts to alt AF (Anil Kumar Reddy)  [Orabug: 39318904]
- octeontx2-af: Add support to forward flr to alternative AF (Anil Kumar Reddy)  [Orabug: 39318904]
- octeontx2-af: Update Alternative AF status (Linu Cherian)  [Orabug: 39318904]
- octeontx2-af: cn20k: Cleanup AF interrupt vector (Linu Cherian)  [Orabug: 39318904]
- octeontx2-af: Do not hardcode AF bus number in debugfs (Subbaraya Sundeep)  [Orabug: 39318904]
- octeontx2-af: Fix rsrc_alloc debugfs file (Subbaraya Sundeep)  [Orabug: 39318904]
- octeontx2-pf: Add devlink option to reset MAC stats for debugging (Viswajith Murali)  [Orabug: 39318904]
- octeontx2-af: npc: cn20k: Add devlink for defrag initiation (Ratheesh Kannoth)  [Orabug: 39318904]
- net: octeontx2: Fix coding style issues (Subrat Pandey)  [Orabug: 39318904]
- octeontx2-af: Fix mcs string buffer size (Stefan Wiehler)  [Orabug: 39318904]
- octeontx2-af: Skip TM tree print for disabled SQs (Anshumali Gaur)  [Orabug: 39318904]
- octeontx2-af: debugfs: Add cn20k sdp rings info (Subbaraya Sundeep)  [Orabug: 39318904]
- octeontx2-af: Fix kernel crash during NIX TM register dump (Anshumali Gaur)  [Orabug: 39318904]
- octeontx2-af: cpt: Add debug support for more than 64 engines. (Bharat Bhushan)  [Orabug: 39318904]
- octeontx2-af: cn20k: cpt: Update engine offset calculation (Bharat Bhushan)  [Orabug: 39318904]
- octeontx2-pf: Add support to display "Autoneg" (Hariprasad Kelam)  [Orabug: 39318904]
- octeontx2-vf: Set tc filter flag on vf netdev (Suman Ghosh)  [Orabug: 39318904]
- Octeontx2-pf: Update link mode mapping (Hariprasad Kelam)  [Orabug: 39318904]
- Octeontx2-pf: Fix ethtool eeprom read logic (Hariprasad Kelam)  [Orabug: 39318904]
- octeontx2-pf: ethtool: Display physical connector type (Hariprasad Kelam)  [Orabug: 39318904]
- octeontx2-pf: restart interface when link settings are changed by user (Naveen Mamindlapalli)  [Orabug: 39318904]
- octeontx2-sdpvf: Fix PTP options for SDP interfaces (Roy Franz)  [Orabug: 39318904]
- octeontx2-vf: Add partial ethtool support for SDP VFs (Hariprasad Kelam)  [Orabug: 39318904]
- octeontx2-pf: Add page pool stats to ethtool (Ratheesh Kannoth)  [Orabug: 39318904]
- octeontx2-pf: Add missing changes in otx2_ethtool.c (Suman Ghosh)  [Orabug: 39318904]
- Octeontx2-pf: tc: fix egress ratelimiting (Hariprasad Kelam)  [Orabug: 39318904]
- octeontx2-pf: Support to enable EDSA/Higig2 pkts parsing (Hariprasad Kelam)  [Orabug: 39318904]
- octeontx2-pf: Using compound/head page ref count (Geetha sowjanya)  [Orabug: 39318904]
- octeontx2-pf: Fix NDC sync operation errors (Geetha sowjanya)  [Orabug: 39318904]
- octeontx2-pf: cn20k: fix target address (Juan Garcia)  [Orabug: 39318904]
- octeontx2-pf: Check address for Null before free (Geetha sowjanya)  [Orabug: 39318904]
- octeontx2-af: mcs: Add soft reset sequence in mcs_global_cfg() (Viswajith Murali)  [Orabug: 39318904]
- octeontx2-pf: mcs: Don't account field alignment when installing TX SecY policy (Geetha sowjanya)  [Orabug: 39318904]
- octeontx2-af: Fix start and end bit for scan config (Ratheesh Kannoth)  [Orabug: 39318904]
- octeontx2: npc: cn20k: Remove function (Ratheesh Kannoth)  [Orabug: 39318904]
- octeontx2: npc: cn20k: refactor code (Ratheesh Kannoth)  [Orabug: 39318904]
- octeontx2-af: cgx: misc changes (Hariprasad Kelam)  [Orabug: 39318904]
- octeontx2-af: reset TL1 SW_XOFF before returning from link mode change (Naveen Mamindlapalli)  [Orabug: 39318904]
- octeontx2-af: Remove MAC address validation check (Suman Ghosh)  [Orabug: 39318904]
- octeontx2-af: Show count of dropped packets by DMAC filters (Hariprasad Kelam)  [Orabug: 39318904]
- octeontx2-af: Update mbox version (Sunil Goutham)  [Orabug: 39318904]
- cn10k-ipsec: Fix compilation with XFRM_OFFLOAD enabled (Sunil Goutham)  [Orabug: 39318904]
- octeontx2-vf: Register dummy netdev for host PF VFs (Subbaraya Sundeep)  [Orabug: 39318904]
- octeontx2-pf: cn20k: Configure SQ default channel based on UP message (Subbaraya Sundeep)  [Orabug: 39318904]
- octeontx2-pf: Dereference only a valid pointer (Suman Ghosh)  [Orabug: 39318904]
- octeontx2-vf: Fix VF mbox up message error on PTP RX enable (Sai Krishna)  [Orabug: 39318904]
- octeontx2-pf: Add support for creating netdev interfaces for SDP VFs (Suman Ghosh)  [Orabug: 39318904]
- octeontx2-pf: Add more debug messages (Geetha sowjanya)  [Orabug: 39318904]
- octeontx2-pf: Send UP messages to VF only when VF is up. (Subbaraya Sundeep)  [Orabug: 39318904]
- octeontx2-pf: Avoid null pointer dereference (Subbaraya Sundeep)  [Orabug: 39318904]
- cn10k-ipsec: fix uninitialized send queue during ESP offload (Shashank Gupta)  [Orabug: 39318904]
- cn10k-ipsec: Initialize ipsec queues on enabling IPsec (Bharat Bhushan)  [Orabug: 39318904]
- octeontx2-pf: cn10k/cn20k: Update count_eot in NPA_LF_AURA_BATCH_FREE0 (Geetha sowjanya)  [Orabug: 39318904]
- octeontx2-pf: persist netdev stats across routine operations (Anshumali Gaur)  [Orabug: 39318904]
- octeontx2-pf: Add self test (Linu Cherian)  [Orabug: 39318904]
- octeontx2-pf: Add ethtool -m option support (Suman Ghosh)  [Orabug: 39318904]
- octeontx2-pf: Skip dma map and unmap when IOMMU is bypassed (Sunil Goutham)  [Orabug: 39318904]
- octeontx2-pf: Add NIXLF error/poison interrupt handlers (Naveen Mamindlapalli)  [Orabug: 39318904]
- octeontx2-pf: Validation for TL1 Round robin priority (Hariprasad Kelam)  [Orabug: 39318904]
- octeontx2-pf: devlink param support to modify physical interface links. (Rakesh Babu)  [Orabug: 39318904]
- octeontx2-pf: Add devlink param to vary rbuf size (Subbaraya Sundeep)  [Orabug: 39318904]
- octeontx2-pf: Add devlink param to vary cqe size (Subbaraya Sundeep)  [Orabug: 39318904]
- octeontx2-af: CN20k: add multi chiplet support to NIX path (Sai Krishna)  [Orabug: 39318904]
- octeontx2-af: CN20k: Enable TX PTP timestamping on BPHY NIX link (Sai Krishna)  [Orabug: 39318904]
- octeontx2-af: cn10k: Fix accessing invalid CSRs (Sai Krishna)  [Orabug: 39318904]
- octeontx2-af: CN20k: fix fwdata NULL pointer dereference when RPM probe fails (Sai Krishna)  [Orabug: 39318904]
- octeontx2-af: CN20k: Map BPHY chiplet RPMs followed by compute chiplet RPMs (Sai Krishna)  [Orabug: 39318904]
- octeontx2-af: CN20k: Add chiplet RPM AF mbox support for port ready, get channel info messages. (Sai Krishna)  [Orabug: 39318904]
- octeontx2-af: cnf20k: account for XCB RPM links in CGX link calculation (Naveen Mamindlapalli)  [Orabug: 39318904]
- octeontx2-af: Add support for chiplet based BPHY RPM driver as AF RVU extension block module (Sai Krishna)  [Orabug: 39318904]
- octeontx2-af: Add BPHY chiplet, RPM, LMAC data to fwdata (Sai Krishna)  [Orabug: 39318904]
- bphy-pf: CNF20ka: Register driver with PCI subsys ID (Anshumali Gaur)  [Orabug: 39318904]
- bphy-pf: CNF20ka: Fix MSI-X init failure by setting both DMA masks (Viswajith Murali)  [Orabug: 39318904]
- bphy-pf: CNF20K: Add build and config support for CPRI PF driver to avoid module conflicts (Viswajith Murali)  [Orabug: 39318904]
- bphy-pf: CNF20ka: Fix CPRI MSI-X initialization failure (Viswajith Murali)  [Orabug: 39318904]
- bphy-pf: CNF20ka: Add workaround for gpint issue for CPRI pkt path (Viswajith Murali)  [Orabug: 39318904]
- bphy-pf: CNF20ka: Add cpri netdev driver support (Viswajith Murali)  [Orabug: 39318904]
- octeontx-bphy-netdev: Fix unexpected packet in netdev by ensuring proper PSW hardware write handling (Viswajith Murali)  [Orabug: 39318904]
- octeontx2-bphy-netdev: allow forcing ts steps cnt (Baha Mesleh)  [Orabug: 39318904]
- octeontx2-bphy-netdev: fix fec counters reporting (Baha Mesleh)  [Orabug: 39318904]
- octeontx2-bphy-netdev: fix ecpri pkt stats update (Baha Mesleh)  [Orabug: 39318904]
- octeontx2-bphy-netdev: fix ecpri type5 handling (Baha Mesleh)  [Orabug: 39318904]
- octeontx2-bphy-netdev: fix a deadlock in cpri (Baha Mesleh)  [Orabug: 39318904]
- octeontx2-bphy-netdev: Fix race condition for timestamp packets (Sai Krishna)  [Orabug: 39318904]
- octeontx2-bphy-netdev: Fix kernel crash by using proper max PSM queue count (Sai Krishna)  [Orabug: 39318904]
- octeontx2-bphy-netdev: protect psm queue access (Baha Mesleh)  [Orabug: 39318904]
- octeontx2-bphy-netdev: fix debugfs memleak (Baha Mesleh)  [Orabug: 39318904]
- octeontx2-bphy-netdev: Detect DL circular buffer full (Naveen Mamindlapalli)  [Orabug: 39318904]
- octeontx2-bphy-netdev: fix rsfec stats reading (Baha Mesleh)  [Orabug: 39318904]
- octeontx2-bphy-netdev: Support for eCPRI MsgType5 timestamping (Sai Krishna)  [Orabug: 39318904]
- octeontx2-bphy-netdev: Use correct netdev priv structure for debugging (Baha Mesleh)  [Orabug: 39318904]
- octeontx2-bphy-netdev: disable CPRI RX on cleanup (Baha Mesleh)  [Orabug: 39318904]
- octeontx2-bphy-netdev: ignore mcs untagged error (Baha Mesleh)  [Orabug: 39318904]
- octeontx2-bphy-netdev: disable rx on RFOEs on exit (Baha Mesleh)  [Orabug: 39318904]
- octeontx2-bphy-netdev: Fix crash issue during initialization of cpri, rfoe interfaces on set MAC address (Sai Krishna)  [Orabug: 39318904]
- octeontx2-bphy-netdev: OcteonTX2 Base PHY RFOE netdev driver (Sai Krishna)  [Orabug: 39318904]
- octeontx2-af: CN20k DPI AF driver msix, interrupt handling (Sai Krishna)  [Orabug: 39318904]
- octeontx2-af: Move DPI block reset handling to AF extension block driver (Sai Krishna)  [Orabug: 39318904]
- octeontx2-af: CN20k DPI AF driver channel table mbox support (Sai Krishna)  [Orabug: 39318904]
- octeontx2-af: CN20k DPI AF driver mbox support (Sai Krishna)  [Orabug: 39318904]
- octeontx2-af: CN20k DPI AF driver initial support (Sai Krishna)  [Orabug: 39318904]
- octeontx2-af: cn20k: Don't reset the PF_DISC register (Geetha sowjanya)  [Orabug: 39318904]
- octeontx2-af: CN20K: update RPM links (Hariprasad Kelam)  [Orabug: 39318904]
- octeontx2-af: cn20k: Add block discovery register (Geetha sowjanya)  [Orabug: 39318904]
- octeontx2-af: Fix PTP RX enable mbox fail issue over NIC VF (Sai Krishna)  [Orabug: 39318904]
- octeontx2-af: Modify NIX register offset value for CN20K (Subbaraya Sundeep)  [Orabug: 39318904]
- octeontx2-af: Validate NIX maximum LFs correctly (Subbaraya Sundeep)  [Orabug: 39318904]
- octeontx2-af: Fix incorrect BPID initialization for CPT channels (Geetha sowjanya)  [Orabug: 39318904]
- octeontx2-af: cn20k: Allow CPT PF access to CPT_AF_GRPX_THR (Shashank Gupta)  [Orabug: 39318904]
- octeontx2-af: cn20k: support packet data buffer (pdb) configuration (Bharat Bhushan)  [Orabug: 39318904]
- octeontx2-af: cn20k: Set LBK channels (Hariprasad Kelam)  [Orabug: 39318904]
- octeontx2-af: cn20k: Fix config parameter check when disable inline queue (Bharat Bhushan)  [Orabug: 39318904]
- octeontx2-af: cn20k: Enable CPT parse and Frag info header byte swap (Bharat Bhushan)  [Orabug: 39318904]
- octeontx2-af: Add an MCAM entry to count CPT 2nd pass miss packets (Naveen Mamindlapalli)  [Orabug: 39318904]
- octeontx2-af: support overriding aura to zero for second pass (Nithin Dabilpuram)  [Orabug: 39318904]
- octeontx2-af: cn20k: cpt: Use proper mask to get max CPT LF's (Amit Singh Tomar)  [Orabug: 39318904]
- octeontx2-af: allow mbox access from CPT VFs for backward compatibility (Amit Singh Tomar)  [Orabug: 39318904]
- octeontx2-af: Drop CPT PF/VF check for relevant mboxes (Amit Singh Tomar)  [Orabug: 39318904]
- octeontx2-af: cn20k: Change CPT channels configuration (Bharat Bhushan)  [Orabug: 39318904]
- octeontx2-af: cn20k: Allow CPT PF access to CPTX_AF_CTX_PSP_TIMER_CTL (Shashank Gupta)  [Orabug: 39318904]
- octeontx2-af: cn20k: change CPT register address as per latest csr (Bharat Bhushan)  [Orabug: 39318904]
- octeontx2-af: cn20k: Allow access to CPT_AF_UCCX_CTL (Tanmay Jagdale)  [Orabug: 39318904]
- octeontx2-af: CN20K channel configuration (Sunil Goutham)  [Orabug: 39318904]
- octeontx2-af: cn20k: Enable RXC on inline inbound cptlf (Bharat Bhushan)  [Orabug: 39318904]
- octeontx2-af: cn20k: Fix RXC flush and cleanup sequence (Bharat Bhushan)  [Orabug: 39318904]
- octeontx2-af: cn20k: Add CPT CTX flush support (Tanmay Jagdale)  [Orabug: 39318904]
- octeontx2-af: fix CPT ctx flush (Srujana Challa)  [Orabug: 39318904]
- octeontx2-af: cn20k: Setup CPT reassembly Queue Configuration Register (Amit Singh Tomar)  [Orabug: 39318904]
- octeontx2-af: cn20k: Move RXC specific functions (Tanmay Jagdale)  [Orabug: 39318904]
- octeontx2-af: cn20k: handle multi-queue reassembly teardown (Amit Singh Tomar)  [Orabug: 39318904]
- octeontx2-af: cn20k: add mbox for NIX RX inline configuration (Amit Singh Tomar)  [Orabug: 39318904]
- octeontx2-af: cn20k: add mbox for CPT RX inline configuration (Amit Singh Tomar)  [Orabug: 39318904]
- octeontx2-af: cn20k: add mbox for CPT RX queue allocation (Amit Singh Tomar)  [Orabug: 39318904]
- octeontx2-af: cn20k: Add mbox to configure rx inline nixlf (Bharat Bhushan)  [Orabug: 39318904]
- octeontx2-af: cn20k: Add mbox to configure rx inline profile (Bharat Bhushan)  [Orabug: 39318904]
- crypto: octeontx2: Add new mailbox to set queue priority (Amit Singh Tomar)  [Orabug: 39318904]
- octeontx2-af: cn20k: Add rxc teardown support (Bharat Bhushan)  [Orabug: 39318904]
- octeontx2-af: cn20k: Add queue id to rxc time config mbox (Bharat Bhushan)  [Orabug: 39318904]
- octeontx2-af: cn20k: Add cpt stats mailbox support (Bharat Bhushan)  [Orabug: 39318904]
- octeontx2-af: cn20k: add FLT interrupts (Amit Singh Tomar)  [Orabug: 39318904]
- octeontx2-af: Unify HW interrupt APIs (Amit Singh Tomar)  [Orabug: 39318904]
- octeontx-af: cpt: Get CPT PF number using PF Device ID (Bharat Bhushan)  [Orabug: 39318904]
- octeontx2-af: cn20k: cpt: Update max engine calculation (Bharat Bhushan)  [Orabug: 39318904]
- octeontx2-pf: Add TC rules support for CN20K (Subbaraya Sundeep)  [Orabug: 39318904]
- octeontx2-pf: Set correct sequence for carrier off and tx queue stop (Suman Ghosh)  [Orabug: 39318904]
- octeontx2: Fix klockwork issues. (Suman Ghosh)  [Orabug: 39318904]
- octeontx2-pf: Free queue memory allocated sq timestamp (Ratheesh Kannoth)  [Orabug: 39318904]
- octeontx2-pf: Check for DMAC extraction support before setting DMAC based hardware filter for a VF (Suman Ghosh)  [Orabug: 39318904]
- octeontx2-pf: Move REP devlink APIs to separate file (Geetha sowjanya)  [Orabug: 39318904]
- octeontx2-af: Fix representor up notification events (Geetha sowjanya)  [Orabug: 39318904]
- octeontx2-af: Use ews_rules value to update REP tcam rules (Geetha sowjanya)  [Orabug: 39318904]
- Octeontx2-af: Change args for rvu_get_pf (Hariprasad Kelam)  [Orabug: 39318904]
- octeontx2-af: Add validation before accessing fwdata (Hariprasad Kelam)  [Orabug: 39318904]
- octeontx2-af: map management port always to first PF (Hariprasad Kelam)  [Orabug: 39318904]
- octeontx2-af: replace generic error codes (Hariprasad Kelam)  [Orabug: 39318904]
- octeontx2-af: link mode mapping (Hariprasad Kelam)  [Orabug: 39318904]
- octeontx2-af: Assign CGX id from PCI revision id (Hariprasad Kelam)  [Orabug: 39318904]
- octeontx2-af: Remove MAC address validation check (Suman Ghosh)  [Orabug: 39318904]
- octeontx2-af: lmac validation with is_lmac_valid (Hariprasad Kelam)  [Orabug: 39318904]
- octeontx2-af: Fix compilation warning/klockwork issues (Hariprasad Kelam)  [Orabug: 39318904]
- octeontx2-af: configure 802.3 pause frames in SGMII/QSGMII mode (Hariprasad Kelam)  [Orabug: 39318904]
- octeontx2-af: Add new CGX_CMDs to set and get PHY modulation type (Hariprasad Kelam)  [Orabug: 39318904]
- octeontx2-af: Do not allow VFs to overwrite PKIND config (Hariprasad Kelam)  [Orabug: 39318904]
- octeontx2-af: Put CGX LMAC also in Higig2 mode (Hariprasad Kelam)  [Orabug: 39318904]
- octeontx2-sdp: Add FLR interrupts for Host PFs (Subbaraya Sundeep)  [Orabug: 39318904]
- octeontx2-sdp: Refactor SDP interrupts code (Subbaraya Sundeep)  [Orabug: 39318904]
- octeontx2-sdp: Fix SDP channel numbers in NPC rules (Subbaraya Sundeep)  [Orabug: 39318904]
- octeontx2-sdp: Check whether SDP block is present before access (Subbaraya Sundeep)  [Orabug: 39318904]
- octeontx2-af: sdp: Fix address range assignment logic (Hariprasad Kelam)  [Orabug: 39318904]
- octeontx2-af: sdp: Maintain host to RVU GEN PF mapping (Subbaraya Sundeep)  [Orabug: 39318904]
- octeontx2-sdp: misc SDP fixes (Hariprasad Kelam)  [Orabug: 39318904]
- octeontx-af: cn20k: Manage rings allocation and freeing (Hariprasad Kelam)  [Orabug: 39318904]
- octeontx2-af: CN20K: SDP mbox framework (Hariprasad Kelam)  [Orabug: 39318904]
- octeontx2-af: CN20K: SDP extension driver (Hariprasad Kelam)  [Orabug: 39318904]
- Octeontx2-pf: enable AF_XDP zero copy support (Hariprasad Kelam)  [Orabug: 39318904]
- octeontx2-af: Fix clearing TL3_TL2X_LINKX_CFG[ENA] during SMQ flush to drop packets (Naveen Mamindlapalli)  [Orabug: 39318904]
- octeontx2-af: Fix ROCEV2 RSS hashing QP ID length (Kiran Kumar K)  [Orabug: 39318904]
- octeontx2-af: Allow to set CPT result address offset (Bharat Bhushan)  [Orabug: 39318904]
- octeontx2-af: cn20k: add mbox for NIX flow vector configuration (Satheesh Paul)  [Orabug: 39318904]
- octeontx2-af: add ROCEv2 header for RSS hashing (Kiran Kumar K)  [Orabug: 39318904]
- octeontx2-af: Update lbk maximum frame size as per CN20K (Subbaraya Sundeep)  [Orabug: 39318904]
- octeontx2-af: fix TX scheduler count (Satha Rao)  [Orabug: 39318904]
- octeontx2-af: Fix the issue of infinite loop in nix_aq_reset (Naveen Mamindlapalli)  [Orabug: 39318904]
- octeontx2-af: Misc changes in NIX block (Subbaraya Sundeep)  [Orabug: 39318904]
- octeontx2-af: Dump hw register state on error (Geetha sowjanya)  [Orabug: 39318904]
- octeontx2-af: cn20k: Add new mailbox to configure LSO alt flags (Suman Ghosh)  [Orabug: 39318904]
- octeontx2-af: cn20k: Extend SPI to SA index translation (Bharat Bhushan)  [Orabug: 39318904]
- octeontx2-pf: notify VF about ptp event (Harman Kalra)  [Orabug: 39318904]
- octeontx2-af: Sending tsc value to the userspace (Harman Kalra)  [Orabug: 39318904]
- octeontx2-af: Support for PTP notification to PF (Hariprasad Kelam)  [Orabug: 39318904]
- octeontx2-af: npa: fix DPC permit register access (Ashwin Sekhar T K)  [Orabug: 39318904]
- octeontx2-af: npa: cn20k: Add DPC support (Linu Cherian)  [Orabug: 39318904]
- octeontx2-af: npa: cn20k: Add debugfs support for Halo (Linu Cherian)  [Orabug: 39318904]
- octeontx2-af: npa: cn20k: Add NPA Halo support (Linu Cherian)  [Orabug: 39318904]
- octeontx2-af: Fix number of entries in the kpu3 cam (Kiran Kumar K)  [Orabug: 39318904]
- octeontx2-af: npc: cn20k: Fix subbank count (Ratheesh Kannoth)  [Orabug: 39318904]
- octeontx2-af: Fix number of entries in the kpu2 cam (Kiran Kumar K)  [Orabug: 39318904]
- octeontx2-af: add mbox to read default rule (Satheesh Paul)  [Orabug: 39318904]
- octeontx2-af: kpu: Input validation check. (Ratheesh Kannoth)  [Orabug: 39318904]
- octeontx2-af: kpu: Fix lodable profile issue (Ratheesh Kannoth)  [Orabug: 39318904]
- octeontx2-af: Convert to C99 flexible array (Anshumali Gaur)  [Orabug: 39318904]
- octeontx2-af: npc: cn20k: Restore stats in defrag (Ratheesh Kannoth)  [Orabug: 39318904]
- octeontx2-af: Flow delete and free mbox (Ratheesh Kannoth)  [Orabug: 39318904]
- octeontx2-af: Add traces in NPC mailboxes (Suman Ghosh)  [Orabug: 39318904]
- octeontx2-af: Fix KPU9 state variable for ROCEV2 (Kiran Kumar K)  [Orabug: 39318904]
- octeontx2-af: add support for ROCEv2 header parsing (Kiran Kumar K)  [Orabug: 39318904]
- octeontx2-af: add more VLAN tag parsing in case of E-tag (Kiran Kumar K)  [Orabug: 39318904]
- octeontx2-af: add changes to fragment flags for cn20k (Kiran Kumar K)  [Orabug: 39318904]
- octeontx2-af: Avoid updating cn10k registers during cn20k reboot (Suman Ghosh)  [Orabug: 39318904]
- octeontx2-af: Do not access match stats for cn20k (Subbaraya Sundeep)  [Orabug: 39318904]
- octeontx2-af: cn20k: Update NPC CSRs (Suman Ghosh)  [Orabug: 39318904]
- octeontx2-af: Fix out of bound access in entry2counter array (Ratheesh Kannoth)  [Orabug: 39318904]
- octeontx2-af: Fix initialization of mcam's entry2target_pffunc field (Suman Ghosh)  [Orabug: 39318904]
- octeontx2-af: add changes to fragment flag extraction in parse nibble (Kiran Kumar K)  [Orabug: 39318904]
- octeontx2-af: Fix CPT CGX channel mask for cn20k (Sai Krishna)  [Orabug: 39318904]
- octeontx2-af: add changes to fragment flag in KPU profile for CN20K (Kiran Kumar K)  [Orabug: 39318904]
- octeontx2-af: fix mcam hit counter (Satheesh Paul)  [Orabug: 39318904]
- Revert "octeontx2-af: npc: cn20k: Get base steer rule index." (Rahul Bhansali)  [Orabug: 39318904]
- octeontx2-af: npc: cn20k: fix rule type for LBK VF (Rahul Bhansali)  [Orabug: 39318904]
- octeontx2-af: Fix failed to load custom pfl warning (Ratheesh Kannoth)  [Orabug: 39318904]
- octeontx2-af: add changes to update CPT pad length offset in KPU (Kiran Kumar K)  [Orabug: 39318904]
- octeontx2-af: npc: cn20k: Fix search order (Ratheesh Kannoth)  [Orabug: 39318904]
- octeontx2-af: npc: Use dev_dbg() (Ratheesh Kannoth)  [Orabug: 39318904]
- octeontx2-af: Fix compilation warnings (Sunil Goutham)  [Orabug: 39318904]
- octeontx2: cn20k: npc: Set action2 for x2 entries. (Ratheesh Kannoth)  [Orabug: 39318904]
- octeontx2-af: cn20k: Enable action2 programming in npc (Bharat Bhushan)  [Orabug: 39318904]
- octeontx2-af: npc: cn20k: Set default profile DYNAMIC (Ratheesh Kannoth)  [Orabug: 39318904]
- octeontx2-af: npc: cn20k: Fix csr register field offset. (Satheesh Paul)  [Orabug: 39318904]
- octeontx2-af: npc: cn20k: Reject request for x4 entries in x2 profile. (Ratheesh Kannoth)  [Orabug: 39318904]
- octeontx2-af: npc: cn20k: Alloc mcam entry for install flow (Ratheesh Kannoth)  [Orabug: 39318904]
- octeontx2-af: Disable fw load faiure warning (Ratheesh Kannoth)  [Orabug: 39318904]
- octeontx2-af: Load custom kpu profile from filesystem. (Ratheesh Kannoth)  [Orabug: 39318904]
- octeontx2-af: npc: cn20k: Fix install flow priority (Kiran Kumar K)  [Orabug: 39318904]
- octeontx2-af: cn20k: Add support for custom mkex profiles (Suman Ghosh)  [Orabug: 39318904]
- octeontx2-af: npc: cn20k: Get base steer rule index. (Ratheesh Kannoth)  [Orabug: 39318904]
- octeontx2-af: npc: cn20k: Stats support (Ratheesh Kannoth)  [Orabug: 39318904]
- octeontx2-af: cn20k: Reject mcam alloc mbox with invalid keytype (Ratheesh Kannoth)  [Orabug: 39318904]
- octeontx2-pf: cn20k: Reserve x4 key mcam entries for ntuple (Ratheesh Kannoth)  [Orabug: 39318904]
- octeontx2-af: npc: cn20k: Get kex related info from PF. (Ratheesh Kannoth)  [Orabug: 39318904]
- octeontx2-af: npc: cn20k: Fix parse result nibble mask reading. (Ratheesh Kannoth)  [Orabug: 39318904]
- octeontx2-af: Set correct nibble bits for cn20k (Suman Ghosh)  [Orabug: 39318904]
- octeontx2-af: Fix parse nibble mask (Suman Ghosh)  [Orabug: 39318904]
- octeontx2-af: cn20k: Avoid accessing cn10k registers (Suman Ghosh)  [Orabug: 39318904]
- octeontx2-af: cn20k: Add new mailboxes for CN20K silicon (Suman Ghosh)  [Orabug: 39318904]
- octeontx2-af: Fix npc_mcam_get_hit_status mbox for cn10k (Ratheesh Kannoth)  [Orabug: 39318904]
- octeontx2-af: npc: cn20k: Convert vidx to mcam_idx in mbox handler (Ratheesh Kannoth)  [Orabug: 39318904]
- octeontx2-af: npc: cn20k: Add an mbox interface to defrag (Ratheesh Kannoth)  [Orabug: 39318904]
- octeontx2-af: npc: cn20k: defragmentation support (Ratheesh Kannoth)  [Orabug: 39318904]
- octeontx2-af: npc: cn20k: Introduce virtual mcam index (Ratheesh Kannoth)  [Orabug: 39318904]
- octeontx2-af: npc: cn20k: Validate mcam index before enable/disable (Ratheesh Kannoth)  [Orabug: 39318904]
- octeontx2-af: npc: cn20k: Add new mailboxes to get kex config and free counts (Suman Ghosh)  [Orabug: 39318904]
- octeontx2-af: npc: cn20k: Use common APIs to read/write/copy/enable mcam entry (Suman Ghosh)  [Orabug: 39318904]
- octeontx2-af: Add a new mbox to read/write MCAM hit status (Suman Ghosh)  [Orabug: 39318904]
- octeontx2-af: npc: cn20k: debugfs support (Ratheesh Kannoth)  [Orabug: 39318904]
- octeontx2-af: npc: cn20k: Use common APIs to alloc/free/get mcam index. (Ratheesh Kannoth)  [Orabug: 39318904]
- octeontx2-af: npc: cn20k: Allocate default mcam indexes. (Ratheesh Kannoth)  [Orabug: 39318904]
- octeontx2-af: npc: cn20k: Modify alloc entry mailbox (Suman Ghosh)  [Orabug: 39318904]
- ocetontx2-af: npc: cn20k: MKEX profile support (Suman Ghosh)  [Orabug: 39318904]
- octeontx2-af: npc: cn20k: KPM profile changes (Suman Ghosh)  [Orabug: 39318904]
- octeontx2-af: npc: cn20k: Index management. (Ratheesh Kannoth)  [Orabug: 39318904]
- octeontx2: Fix klockwork issues. (Suman Ghosh)  [Orabug: 39318904]
- octeontx2-af: Fix Support of FDSA tag (George Cherian)  [Orabug: 39318904]
- octeontx2-af: Support for FDSA tag (Hariprasad Kelam)  [Orabug: 39318904]
- octeontx2-af: Adding changes to parse stacked VLANs (Kiran Kumar K)  [Orabug: 39318904]
- Octeontx2-af: Skip overlap check for SPI field (Hariprasad Kelam)  [Orabug: 39318904]
- octeontx2-af: Fix issue with GRE parsing (Kiran Kumar K)  [Orabug: 39318904]
- octeontx2-af: Add support to parse more VLAN headers (Kiran Kumar K)  [Orabug: 39318904]
- octeontx2-af: Fix issue with IPV6 GRE and multi VLAN (Kiran Kumar K)  [Orabug: 39318904]
- octeontx2-af: Add KPU changes to parse fabric path header (Kiran Kumar K)  [Orabug: 39318904]
- octeontx2-af: Add few missing changes (Suman Ghosh)  [Orabug: 39318904]
- octeontx2-af: allow second pass pkts via default ucast entry (Nithin Dabilpuram)  [Orabug: 39318904]
- octeontx2-af: suppress kpu profile loading warning (Harman Kalra)  [Orabug: 39318904]
- octeontx2-af: use cpt channel mask in flow install path (Nithin Dabilpuram)  [Orabug: 39318904]
- octeontx2-af: Add NPC support to filter GTP-U and GTP-C packets based on TEID (Suman Ghosh)  [Orabug: 39318904]
- octeontx2: cn20k: Assign unique MCS IDs based on PCI enumeration (Subrat Pandey)  [Orabug: 39318904]
- octeontx2-pf: Choose macsec encryption offload per packet (Subbaraya Sundeep)  [Orabug: 39318904]
- octeontx2-af: mcs: Use new SCI CAM in hardware (Subbaraya Sundeep)  [Orabug: 39318904]
- octeontx2-pf: mcs: Fix mcs resources free on PF shutdown (Geetha sowjanya)  [Orabug: 39318904]
- octeontx2-af: mcs: Add devlink parameter to toggle MCS bypass mode (Geetha sowjanya)  [Orabug: 39318904]
- octeontx2-af: mcs: Display port mapped stats for cn20k (Subbaraya Sundeep)  [Orabug: 39318904]
- octeontx2-af: cn20k: Add MCS LMAC channel and count configuration (Geetha sowjanya)  [Orabug: 39318904]
- octeontx2-af: cn20k: mcs set mcs id and silicon check (Geetha sowjanya)  [Orabug: 39318904]
- octeontx2-af: cn20k: Fix mcs tx_sa_map API (Geetha sowjanya)  [Orabug: 39318904]
- octeontx2-af: cn20k: Add mcs PN threshold support (Geetha sowjanya)  [Orabug: 39318904]
- octeontx2-af: cn20k: MCS add port configure APIs (Geetha sowjanya)  [Orabug: 39318904]
- octeontx2-af: cn20K: Add MCS parser configuration (Geetha sowjanya)  [Orabug: 39318904]
- octeontx2-af: mcs: Fix mcs register offsets (Geetha sowjanya)  [Orabug: 39318904]
- octeontx2-af: mcs: Fix unsupported secy stats read (Geetha sowjanya)  [Orabug: 39318904]
- octeontx2-af: cn20k: Add MCS support (Linu Cherian)  [Orabug: 39318904]
- octeontx2-af: mcs: Remove SA stats support (Ratheesh Kannoth)  [Orabug: 39318904]
- octeontx2-af: cnf10k-b: mcs: Fix stats reg address (Geetha sowjanya)  [Orabug: 39318904]
- octeontx2-af: rvu: enable mcs fips mailboxes (Ankur Dwivedi)  [Orabug: 39318904]
- octeontx2-af: mcs: add mailboxes for fips (Ankur Dwivedi)  [Orabug: 39318904]
- octeontx2-af: sso: clear all the sets on init (Pavan Nikhilesh)  [Orabug: 39318904]
- octeontx2-af: tim: add ring priority support (Pavan Nikhilesh)  [Orabug: 39318904]
- octeontx2-af: update TIM interval support (Pavan Nikhilesh)  [Orabug: 39318904]
- octeontx2-af: moderate SSO AF error interrupts (Shijith Thotton)  [Orabug: 39318904]
- octeontx2-af: lower TIM bucket skip IRQ log level (Pavan Nikhilesh)  [Orabug: 39318904]
- octeontx2-af: cn20k: remove GTI clock adjustment (Pavan Nikhilesh)  [Orabug: 39318904]
- octeontx2-af: cn20k: update xaq aura offset (Pavan Nikhilesh)  [Orabug: 39318904]
- octeontx2-af: cn20k: cleanup SSO EVA on LF reset (Pavan Nikhilesh)  [Orabug: 39318904]
- octeontx2-af: add SSO HW info mbox (Pavan Nikhilesh)  [Orabug: 39318904]
- octeontx2-af: add SSO AGGR config and stats mbox (Pavan Nikhilesh)  [Orabug: 39318904]
- octeontx2-af: add SSO EVA error interrupts (Pavan Nikhilesh)  [Orabug: 39318904]
- octeontx2-af: update masks for CN20K resources (Pavan Nikhilesh)  [Orabug: 39318904]
- octeontx2-af: Fixed compilation warnings (Sunil Goutham)  [Orabug: 39318904]
- octeontx2-af: fix interval flag check (Pavan Nikhilesh)  [Orabug: 39318904]
- octeontx2-af: add TIM hardware info mbox (Pavan Nikhilesh)  [Orabug: 39318904]
- octeontx2-af: add TIM HWWQE mbox support (Pavan Nikhilesh)  [Orabug: 39318904]
- octeontx2-af: add mbox to capture counters (Pavan Nikhilesh)  [Orabug: 39318904]
- octeontx2-af: reveal only TIM params that are available (Shijith Thotton)  [Orabug: 39318904]
- octeontx2-af: add TIM error af interrupt handlers (Pavan Nikhilesh)  [Orabug: 39318904]
- octeontx2-af: clear state on TIM ring disable (Pavan Nikhilesh)  [Orabug: 39318904]
- octeontx2-af: disable preemption when enabling TIM (Pavan Nikhilesh)  [Orabug: 39318904]
- octeontx2-af: account for cycle wraparound (Pavan Nikhilesh)  [Orabug: 39318904]
- octeontx2-af: prevent TIM register read reorder (Pavan Nikhilesh)  [Orabug: 39318904]
- octeontx2-af: fix arguments passed to XAQ aura deinit (Shijith Thotton)  [Orabug: 39318904]
- octeontx2-af: debugfs: fix undefined SSO register access (Shijith Thotton)  [Orabug: 39318904]
- octeontx2-af: update TIM adjust GTI errata silicons (Shijith Thotton)  [Orabug: 39318904]
- octeontx2-af: update TIM adjust GTI errata silicons (Shijith Thotton)  [Orabug: 39318904]
- octeontx2-af: add TIM adjust GTI errata workaround (Shijith Thotton)  [Orabug: 39318904]
- octeontx2-af: cn10k: devlink params to configure TIM (Shijith Thotton)  [Orabug: 39318904]
- octeontx2-af: TIM: Set conditional clock always on (Geetha sowjanya)  [Orabug: 39318904]
- octeontx2-af: Apply relevant HW issue workarounds for 96xx B0 silicon (Sunil Goutham)  [Orabug: 39318904]
- octeontx2-af: Add SSO and TIM units support to the AF driver (Pavan Nikhilesh)  [Orabug: 39318904]
- octeontx2-af: enable rxc with lookaside cpt lf (Vidya Sagar Velumuri)  [Orabug: 39318904]
- octeontx2-af: fix issue with spitosa table teardown (Nithin Dabilpuram)  [Orabug: 39318904]
- octeontx2-af: fix cflags include paths (Wladislav Wiebe)  [Orabug: 39318904]
- octeontx2-af: Move out REE mbox messages (Linu Cherian)  [Orabug: 39318904]
- octeontx2-af: Add generic mbox handler for Eblock (Linu Cherian)  [Orabug: 39318904]
- octeontx2-af: Use AF extension block interface (Linu Cherian)  [Orabug: 39318904]
- octeontx2-af: Add RVU AF extension block interface (Linu Cherian)  [Orabug: 39318904]
- octeontx2-af: Introducing REE block for 98xx (Smadar Fuks)  [Orabug: 39318904]
- octeontx2-af: fix VF bringup affecting PF promiscous state (Harman Kalra)  [Orabug: 39318904]
- octeontx2-af: consider mode when using cpt base channel for bp (Nithin Dabilpuram)  [Orabug: 39318904]
- octeontx2-af: Update minimum receive frame size (Sathesh Edara)  [Orabug: 39318904]
- octeontx2-af: set default min and max rx len for CPT link (Nithin Dabilpuram)  [Orabug: 39318904]
- octeontx2-af: add NIX mbox message to get HW info (Shijith Thotton)  [Orabug: 39318904]
- octeontx2-af: fix inline inbound IPsec configuration (Srujana Challa)  [Orabug: 39318904]
- octeontx2-af: support for custom L2 header (Satheesh Paul A)  [Orabug: 39318904]
- octeontx2-af: fix to get different rq mask (Rakesh Kudurumalla)  [Orabug: 39318904]
- octeontx2-af: poll for tx link credits before link mode change (Naveen Mamindlapalli)  [Orabug: 39318904]
- octeontx2-af: Handle physical link state change requests (Hariprasad Kelam)  [Orabug: 39318904]
- octeontx2-af: Add mbox to alloc/free BPIDs (Geetha sowjanya)  [Orabug: 39318904]
- octeontx2-af: Dynamically allocate bpids for CPT and LBK (Geetha sowjanya)  [Orabug: 39318904]
- octeontx2-af: Add support for SPI to SA index translation (Kiran Kumar K)  [Orabug: 39318904]
- octeontx2-af: Update HW workarounds for 96xx C0, 98xx and F95xx B0 chips (Geetha sowjanya)  [Orabug: 39318904]
- octeontx2-pf: Add devlink support to configure TL1 RR_PRIO (Hariprasad Kelam)  [Orabug: 39318904]
- octeontx2-af: add support for CPT second pass (Rakesh Kudurumalla)  [Orabug: 39318904]
- octeontx2-af: add new mbox to support sync cycle on rx path (Satha Rao)  [Orabug: 39318904]
- octeontx2-af: add support for changing vlan tpid (Nithin Dabilpuram)  [Orabug: 39318904]
- octeontx2-pf: Fix devm_kcalloc() error checking (Dan Carpenter)  [Orabug: 39318904]
- octeontx2-pf: Use new bandwidth profiles in receive queue (Subbaraya Sundeep)  [Orabug: 39318904]
- octeontx2-af: Display new bandwidth profiles too in debugfs (Subbaraya Sundeep)  [Orabug: 39318904]
- octeontx2-af: Accommodate more bandwidth profiles for cn20k (Subbaraya Sundeep)  [Orabug: 39318904]
- octeontx2-pf: Initialize new NIX SQ context for cn20k (Subbaraya Sundeep)  [Orabug: 39318904]
- octeontx2-pf: Initialize cn20k specific aura and pool contexts (Linu Cherian)  [Orabug: 39318904]
- octeontx2-af: Skip NDC operations for cn20k (Linu Cherian)  [Orabug: 39318904]
- octeontx2-af: Extend debugfs support for cn20k NPA (Linu Cherian)  [Orabug: 39318904]
- octeontx2-af: Add cn20k NPA block contexts (Linu Cherian)  [Orabug: 39318904]
- octeontx2-af: Extend debugfs support for cn20k NIX (Subbaraya Sundeep)  [Orabug: 39318904]
- octeontx2-af: Add cn20k NIX block contexts (Subbaraya Sundeep)  [Orabug: 39318904]
- octeontx2-af: Simplify context writing and reading to hardware (Subbaraya Sundeep)  [Orabug: 39318904]
- octeontx2: convert to ndo_hwtstamp API (Vadim Fedorenko)  [Orabug: 39318904]
- Octeontx2-af: Fix pci_alloc_irq_vectors() return value check (Harshit Mogalapalli)  [Orabug: 39318904]
- Octeontx2-af: Fix missing error code in cgx_probe() (Harshit Mogalapalli)  [Orabug: 39318904]
- octeontx2-pf: fix bitmap leak (Bo Sun)  [Orabug: 39318904]
- octeontx2-vf: fix bitmap leak (Bo Sun)  [Orabug: 39318904]
- octeontx2-af: Remove unused declarations (Yue Haibing)  [Orabug: 39318904]
- Octeontx2-af: Fix NIX X2P calibration failures (Hariprasad Kelam)  [Orabug: 39318904]
- Octeontx2-vf: Fix max packet length errors (Hariprasad Kelam)  [Orabug: 39318904]
- Octeontx2-af: Broadcast XON on all channels (Hariprasad Kelam)  [Orabug: 39318904]
- octeontx2-af: use unsigned int as iterator for unsigned values (Simon Horman)  [Orabug: 39318904]
- net: Fix typos (Bjorn Helgaas)  [Orabug: 39318904]
- Octeontx2-af: Debugfs support for firmware data (Hariprasad Kelam)  [Orabug: 39318904]
- Octeontx2-af: RPM: Update DMA mask (Hariprasad Kelam)  [Orabug: 39318904]
- Octeontx2-af: Disable stale DMAC filters (Subbaraya Sundeep)  [Orabug: 39318904]
- Octeontx2-af: Add programmed macaddr to RVU pfvf (Hariprasad Kelam)  [Orabug: 39318904]
- octeontx2-af: Fix error code in rvu_mbox_init() (Dan Carpenter)  [Orabug: 39318904]
- Octeontx2-pf: ethtool: support multi advertise mode (Hariprasad Kelam)  [Orabug: 39318904]
- Octeontx2-af: Introduce mode group index (Hariprasad Kelam)  [Orabug: 39318904]
- Octeontx-pf: Update SGMII mode mapping (Hariprasad Kelam)  [Orabug: 39318904]
- octeontx2-af: Fix rvu_mbox_init return path (Subbaraya Sundeep)  [Orabug: 39318904]
- Octeontx2-pf: Fix Backpresure configuration (Hariprasad Kelam)  [Orabug: 39318904]
- octeontx2-pf: CN20K mbox implementation between PF-VF (Sai Krishna)  [Orabug: 39318904]
- octeontx2-af: CN20K mbox implementation for AF's VF (Sai Krishna)  [Orabug: 39318904]
- octeontx2-pf: CN20K mbox REQ/ACK implementation for NIC PF (Sai Krishna)  [Orabug: 39318904]
- octeontx2-af: CN20k mbox to support AF REQ/ACK functionality (Sai Krishna)  [Orabug: 39318904]
- octeontx2-af: CN20k basic mbox operations and structures (Sai Krishna)  [Orabug: 39318904]
- octeontx2: Set appropriate PF, VF masks and shifts based on silicon (Subbaraya Sundeep)  [Orabug: 39318904]
- octeontx2-pf: Avoid typecasts by simplifying otx2_atomic64_add macro (Subbaraya Sundeep)  [Orabug: 39318904]
- octeontx2: Annotate mmio regions as __iomem (Subbaraya Sundeep)  [Orabug: 39318904]
- octeontx2-pf: macsec: Get MACSEC capability flag from AF (Subbaraya Sundeep)  [Orabug: 39318904]
- octeontx2-af: Add MACSEC capability flag (Subbaraya Sundeep)  [Orabug: 39318904]
- octeontx2-af: Send Link events one by one (Subbaraya Sundeep)  [Orabug: 39318904]
- octeontx2-af: NPC: Clear Unicast rule on nixlf detach (Hariprasad Kelam)  [Orabug: 39318904]
- octeontx2-pf: Avoid adding dcbnl_ops for LBK and SDP vf (Suman Ghosh)  [Orabug: 39318904]
- octeontx2-pf: Add tracepoint for NIX_PARSE_S (Subbaraya Sundeep)  [Orabug: 39318904]
- octeontx2: Add new tracepoint otx2_msg_status (Subbaraya Sundeep)  [Orabug: 39318904]
- octeontx2: Add pcifunc also to mailbox tracepoints (Subbaraya Sundeep)  [Orabug: 39318904]
- octeontx2-af: Display names for CPT and UP messages (Subbaraya Sundeep)  [Orabug: 39318904]
- octeontx2-af: convert dev_dbg to tracepoint in mbox (Subbaraya Sundeep)  [Orabug: 39318904]
- octeontx2-pf: Fix ethtool support for SDP representors (Hariprasad Kelam)  [Orabug: 39318904]
- net: octeontx2: Use pure PCI devres API (Philipp Stanner)  [Orabug: 39318904]
- octeontx2-pf: AF_XDP: code clean up (Hariprasad Kelam)  [Orabug: 39318904]
- octeontx2-af: Remove unused rvu_npc_enable_bcast_entry (Dr. David Alan Gilbert)  [Orabug: 39318904]
- xfrm: Add explicit dev to .xdo_dev_state_{add,delete,free} (Cosmin Ratiu)  [Orabug: 39318904]
- octeontx2-pf: handle otx2_mbox_get_rsp errors (Chenyuan Yang)  [Orabug: 39318904]
- net: octeontx2: Handle XDP_ABORTED and XDP invalid as XDP_DROP (Lorenzo Bianconi)  [Orabug: 39318904]
- octeontx2-af: mcs: Remove redundant 'flush_workqueue()' calls (Chen Ni)  [Orabug: 39318904]
- net: octeontx2: Add metadata support for xdp mode (Lorenzo Bianconi)  [Orabug: 39318904]
- xfrm: provide common xdo_dev_offload_ok callback implementation (Leon Romanovsky)  [Orabug: 39318904]
- octeontx2: hide unused label (Arnd Bergmann)  [Orabug: 39318904]
- octeontx2-pf: AF_XDP zero copy transmit support (Suman Ghosh)  [Orabug: 39318904]
- octeontx2-pf: Prepare for AF_XDP (Suman Ghosh)  [Orabug: 39318904]
- octeontx2-pf: Reconfigure RSS table after enabling AF_XDP zerocopy on rx queue (Suman Ghosh)  [Orabug: 39318904]
- octeontx2-pf: AF_XDP zero copy receive support (Suman Ghosh)  [Orabug: 39318904]
- octeontx2-pf: use xdp_return_frame() to free xdp buffers (Suman Ghosh)  [Orabug: 39318904]
- octeontx2-pf: mcs: Remove dead code and semi-colon from rsrc_name() (Nihar Chaithanya)  [Orabug: 39318904]
- octeontx2-pf: fix error handling of devlink port in rvu_rep_create() (Harshit Mogalapalli)  [Orabug: 39318904]
- octeontx2-pf: fix netdev memory leak in rvu_rep_create() (Harshit Mogalapalli)  [Orabug: 39318904]
- octeontx2-af: fix build regression without CONFIG_DCB (Arnd Bergmann)  [Orabug: 39318904]
- cn10k-ipsec: Fix compilation error when CONFIG_XFRM_OFFLOAD disabled (Bharat Bhushan)  [Orabug: 39318904]
- octeontx2-af: Fix installation of PF multicast rule (Geetha sowjanya)  [Orabug: 39318904]
- cn10k-ipsec: Enable outbound ipsec crypto offload (Bharat Bhushan)  [Orabug: 39318904]
- cn10k-ipsec: Allow ipsec crypto offload for skb with SA (Bharat Bhushan)  [Orabug: 39318904]
- cn10k-ipsec: Process outbound ipsec crypto offload (Bharat Bhushan)  [Orabug: 39318904]
- cn10k-ipsec: Add SA add/del support for outb ipsec crypto offload (Bharat Bhushan)  [Orabug: 39318904]
- cn10k-ipsec: Init hardware for outbound ipsec crypto offload (Bharat Bhushan)  [Orabug: 39318904]
- octeontx2-af: Disable backpressure between CPT and NIX (Bharat Bhushan)  [Orabug: 39318904]
- octeontx2-pf: Move skb fragment map/unmap to common code (Bharat Bhushan)  [Orabug: 39318904]
- octeontx2-pf: map skb data as device writeable (Bharat Bhushan)  [Orabug: 39318904]
- octeontx2-af: Fix SDP MAC link credits configuration (Geetha sowjanya)  [Orabug: 39318904]
- octeontx2-pf: Fix spelling mistake "reprentator" -> "representor" (Colin Ian King)  [Orabug: 39318904]
- octeontx2-pf: Adds TC offload support (Geetha sowjanya)  [Orabug: 39318904]
- octeontx2-pf: Implement offload stats ndo for representors (Geetha sowjanya)  [Orabug: 39318904]
- octeontx2-pf: Add devlink port support (Geetha sowjanya)  [Orabug: 39318904]
- octeontx2-pf: Add representors for sdp MAC (Geetha sowjanya)  [Orabug: 39318904]
- octeontx2-pf: Configure VF mtu via representor (Geetha sowjanya)  [Orabug: 39318904]
- octeontx2-pf: Add support to sync link state between representor and VFs (Geetha sowjanya)  [Orabug: 39318904]
- octeontx2-pf: Get VF stats via representor (Geetha sowjanya)  [Orabug: 39318904]
- octeontx2-af: Add packet path between representor and VF (Geetha sowjanya)  [Orabug: 39318904]
- octeontx2-pf: Add basic net_device_ops (Geetha sowjanya)  [Orabug: 39318904]
- octeontx2-pf: Create representor netdev (Geetha sowjanya)  [Orabug: 39318904]
- octeontx2-pf: RVU representor driver (Geetha sowjanya)  [Orabug: 39318904]
- octeontx2-af: Knobs for NPC default rule counters (Linu Cherian)  [Orabug: 39318904]
- octeontx2-af: Refactor few NPC mcam APIs (Linu Cherian)  [Orabug: 39318904]
- octeontx2-pf: Move shared APIs to header file (Geetha sowjanya)  [Orabug: 39318904]
- octeontx2-pf: Reuse PF max mtu value (Geetha sowjanya)  [Orabug: 39318904]
- octeontx2-pf: Add new APIs for queue memory alloc/free. (Geetha sowjanya)  [Orabug: 39318904]
- octeontx2-pf: Define common API for HW resources configuration (Geetha sowjanya)  [Orabug: 39318904]
- net: marvell: use ethtool string helpers (Rosen Penev)  [Orabug: 39318904]
- uek: kabi: update kABI files for new symbols (Saeed Mirzamohammadi)  [Orabug: 39268116]
- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Jeff Layton)  [Orabug: 39167615]  {CVE-2026-31402}
- netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal)  [Orabug: 39110670]  {CVE-2026-23278}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (Victor Nogueira)  [Orabug: 39103229]  {CVE-2026-23270}

[6.12.0-203.76.3]
- sched/deadline: Use revised wakeup rule for dl_server (Peter Zijlstra)
- netfilter: nfnetlink_queue: make hash table per queue (Florian Westphal) [Orabug: 39339273] {CVE-2026-43084}
- netfilter: nfnetlink_queue: nfqnl_instance GFP_ATOMIC -> GFP_KERNEL_ACCOUNT allocation (Scott Mitchell)
- Revert "drm/xe: Switch MMIO interface to take xe_mmio instead of xe_gt" (Sasha Levin)
- Revert "drm/xe/mmio: Avoid double-adjust in 64-bit reads" (Sasha Levin)
- iommu/amd: Fix ivrs_base memleak in early_amd_iommu_init() (Zhen Ni) [Orabug: 39145066]
- iommu/amd: Fix header file (Vasant Hegde) [Orabug: 39145066]
- iommu/amd: Preserve default DTE fields when updating Host Page Table Root (Alejandro Jimenez) [Orabug: 39145066]
- iommu/amd: Enable support for up to 2K interrupts per function (Kishon Vijay Abraham I) [Orabug: 39145066]
- iommu/amd: Rename DTE_INTTABLEN* and MAX_IRQS_PER_TABLE macro (Sairaj Kodilkar) [Orabug: 39145066]
- iommu/amd: Replace slab cache allocator with page allocator (Sairaj Kodilkar) [Orabug: 39145066]
- iommu/amd: Introduce generic function to set multibit feature value (Sairaj Kodilkar) [Orabug: 39145066]
- iommu/amd: Remove amd_iommu_apply_erratum_63() (Suravee Suthikulpanit) [Orabug: 39145066]
- iommu/amd: Lock DTE before updating the entry with WRITE_ONCE() (Suravee Suthikulpanit) [Orabug: 39145066]
- iommu/amd: Modify clear_dte_entry() to avoid in-place update (Suravee Suthikulpanit) [Orabug: 39145066]
- iommu/amd: Introduce helper function get_dte256() (Suravee Suthikulpanit) [Orabug: 39145066]
- iommu/amd: Modify set_dte_entry() to use 256-bit DTE helpers (Suravee Suthikulpanit) [Orabug: 39145066]
- iommu/amd: Introduce helper function to update 256-bit DTE (Suravee Suthikulpanit) [Orabug: 39145066]
- iommu/amd: Introduce struct ivhd_dte_flags to store persistent DTE flags (Suravee Suthikulpanit) [Orabug: 39145066]
- iommu/amd: Disable AMD IOMMU if CMPXCHG16B feature is not supported (Suravee Suthikulpanit) [Orabug: 39145066]
- iommu/amd: Misc ACPI IVRS debug info clean up (Suravee Suthikulpanit) [Orabug: 39145066]
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [Orabug: 39250685,39331108] {CVE-2026-43078}
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [Orabug: 39250685]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [Orabug: 39250685,39300909] {CVE-2026-43033}
- crypto: authenc - use memcpy_sglist() instead of null skcipher (Eric Biggers) [Orabug: 39250685]
- crypto: algif_aead - snapshot IV for async AEAD requests (Douya Le) [Orabug: 39250685]
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [Orabug: 39250685,39283866,39291972,39292190] {CVE-2026-31431}
- crypto: algif_aead - use memcpy_sglist() instead of null skcipher (Eric Biggers) [Orabug: 39250685]
- crypto: scatterwalk - Backport memcpy_sglist() (Eric Biggers) [Orabug: 39250685]
- iommu/arm-smmu-v3: Handle zeroed A4-2C HTTU override settings (Joao Martins) [Orabug: 39260974]

[6.12.0-203.76.2]
- Revert "rds: Drop rds conn in connect worker if not in down state." (Vijayendra Suman) [Orabug: 39276980]
- uek-rpm/config-aarch64: Enable NVIDIA-recommended Vera-Rubin configs (Vijay Kumar) [Orabug: 39157707]
- kselftest/arm64: Add HWCAP test for FEAT_LS64 (Yicong Yang) [Orabug: 39157707]
- arm64: Provide basic EL2 setup for FEAT_{LS64, LS64_V} usage at EL0/1 (Yicong Yang) [Orabug: 39157707]
- perf: arm_spe: Relax period restriction (Leo Yan) [Orabug: 39157707]
- perf/arm_cspmu: Add PMEVFILT2R support (Robin Murphy) [Orabug: 39157707]
- ACPI: CPPC: Add IS_OPTIONAL_CPC_REG macro to judge if a cpc_reg is optional (Lifeng Zheng) [Orabug: 39157707]
- dt-bindings: gpio: Add Tegra256 support (Prathamesh Shete) [Orabug: 39157707]
- perf/arm_cspmu: nvidia: Add revision id matching (Besar Wicaksono) [Orabug: 39157707]
- arm64: Handle BRBE booting requirements (Anshuman Khandual) [Orabug: 39157707]
- arm64: el2_setup.h: Make __init_el2_fgt labels consistent, again (Rob Herring) [Orabug: 39157707]
- arm64/gcs: Provide basic EL2 setup to allow GCS usage at EL0 and EL1 (Mark Brown) [Orabug: 39157707]
- tools headers arm64: Add NVIDIA Olympus part (Besar Wicaksono) [Orabug: 39157707]
- perf arm-spe: Add NVIDIA Olympus to neoverse list (Besar Wicaksono) [Orabug: 39157707]
- perf arm_spe: Add CPU variants supporting common data source packet (Leo Yan) [Orabug: 39157707]
- arch_topology: Provide a stub topology_core_has_smt() for !CONFIG_GENERIC_ARCH_TOPOLOGY (Yicong Yang) [Orabug: 39157707]
- perf: arm_pmuv3: Don't use PMCCNTR_EL0 on SMT cores (Yicong Yang) [Orabug: 39157707]
- perf: arm_pmuv3: Factor out PMCCNTR_EL0 use conditions (Yicong Yang) [Orabug: 39157707]
- perf/arm_cspmu: nvidia: Add pmevfiltr2 support (Besar Wicaksono) [Orabug: 39157707]
- perf/arm_cspmu: Add pmpidr support (Besar Wicaksono) [Orabug: 39157707]
- perf/arm_cspmu: Move register definitons to header (Robin Murphy) [Orabug: 39157707]
- perf/arm_cspmu: Add callback to reset filter config (Besar Wicaksono) [Orabug: 39157707]
- perf/arm_cspmu: Generalise event filtering (Robin Murphy) [Orabug: 39157707]
- perf: arm_pmuv3: Add support for the Branch Record Buffer Extension (BRBE) (Rob Herring) [Orabug: 39157707]
- arm64/sysreg: Add BRBE registers and fields (Anshuman Khandual) [Orabug: 39157707]
- perf: arm_pmu: Move PMUv3-specific data (Mark Rutland) [Orabug: 39157707]
- perf: apple_m1: Don't disable counter in m1_pmu_enable_event() (Rob Herring) [Orabug: 39157707]
- perf: arm_v7_pmu: Don't disable counter in (armv7|krait_|scorpion_)pmu_enable_event() (Rob Herring) [Orabug: 39157707]
- perf: arm_v7_pmu: Drop obvious comments for enabling/disabling counters and interrupts (Rob Herring) [Orabug: 39157707]
- perf: arm_pmuv3: Don't disable counter in armv8pmu_enable_event() (Mark Rutland) [Orabug: 39157707]
- ACPI: CPPC: Rename EPP constants for clarity (Sumit Gupta) [Orabug: 39157707]
- ACPI: CPPC: Add three functions related to autonomous selection (Lifeng Zheng) [Orabug: 39157707]
- ACPI: CPPC: Modify cppc_get_auto_sel_caps() to cppc_get_auto_sel() (Lifeng Zheng) [Orabug: 39157707]
- cpufreq/amd-pstate: Store the boost numerator as highest perf again (Mario Limonciello) [Orabug: 39157707]
- ACPI: CPPC: Refactor register value get and set ABIs (Lifeng Zheng) [Orabug: 39157707]
- ACPI: CPPC: Add cppc_set_reg_val() (Lifeng Zheng) [Orabug: 39157707]
- ACPI: CPPC: Extract cppc_get_reg_val_in_pcc() (Lifeng Zheng) [Orabug: 39157707]
- ACPI: CPPC: Rename cppc_get_perf() to cppc_get_reg_val() (Lifeng Zheng) [Orabug: 39157707]
- ACPI: CPPC: Optimize cppc_get_perf() (Lifeng Zheng) [Orabug: 39157707]
- ACPI: CPPC: Factor out and export per-cpu cppc_perf_ctrs_in_pcc_cpu() (Jie Zhan) [Orabug: 39157707]
- ACPI: CPPC: Clean up cppc_perf_caps and cppc_perf_ctrls structs (Sumit Gupta) [Orabug: 39157707]
- cpufreq: CPPC: Add generic helpers for sysfs show/store (Sumit Gupta) [Orabug: 39157707]
- cpufreq: CPPC: Add support for autonomous selection (Lifeng Zheng) [Orabug: 39157707]
- PCI: Add PCI_BRIDGE_NO_ALIAS quirk for ASPEED AST1150 (Nirmoy Das) [Orabug: 39157707]
- PCI: Add ASPEED vendor ID to pci_ids.h (Nirmoy Das) [Orabug: 39157707]
- i2c: tegra: Add support for SW mutex register (Kartik) [Orabug: 39157707]
- i2c: tegra: Use internal reset when reset property is not available (Akhil R) [Orabug: 39157707]
- i2c: tegra: Add HS mode support (Akhil R) [Orabug: 39157707]
- i2c: tegra: Update Tegra256 timing parameters (Akhil R) [Orabug: 39157707]
- i2c: tegra: Use separate variables for fast and fastplus (Akhil R) [Orabug: 39157707]
- i2c: tegra: Add Tegra264 support (Akhil R) [Orabug: 39157707]
- i2c: tegra: Add Tegra256 support (Akhil R) [Orabug: 39157707]
- i2c: tegra: Do not configure DMA if not supported (Kartik) [Orabug: 39157707]
- gpio: tegra186: Fix GPIO name collisions for Tegra410 (Kartik) [Orabug: 39157707]
- gpio: tegra186: Use generic macro for port definitions (Kartik) [Orabug: 39157707]
- gpio: tegra186: Add support for Tegra410 (Prathamesh Shete) [Orabug: 39157707]
- gpio: tegra186: Add support for Tegra256 (Prathamesh Shete) [Orabug: 39157707]
- arm64: acpi: Enable ACPI CCEL support (Suzuki K Poulose) [Orabug: 39157707]
- arm64: Enable EFI secret area Securityfs support (Suzuki K Poulose) [Orabug: 39157707]
- arm64: realm: ioremap: Allow mapping memory as encrypted (Suzuki K Poulose) [Orabug: 39157707]
- arm64: Document Arm Confidential Compute (Steven Price) [Orabug: 39157707]
- virt: arm-cca-guest: TSM_REPORT support for realms (Sami Mujawar) [Orabug: 39157707]
- arm64: Enable memory encrypt for Realms (Suzuki K Poulose) [Orabug: 39157707]
- arm64: mm: Avoid TLBI when marking pages as valid (Steven Price) [Orabug: 39157707]
- arm64: Enforce bounce buffers for realm DMA (Steven Price) [Orabug: 39157707]
- efi: arm64: Map Device with Prot Shared (Suzuki K Poulose) [Orabug: 39157707]
- arm64: rsi: Map unprotected MMIO as decrypted (Suzuki K Poulose) [Orabug: 39157707]
- arm64: rsi: Add support for checking whether an MMIO is protected (Suzuki K Poulose) [Orabug: 39157707]
- arm64: realm: Query IPA size from the RMM (Steven Price) [Orabug: 39157707]
- arm64: Detect if in a realm and set RIPAS RAM (Suzuki K Poulose) [Orabug: 39157707]
- arm64: rsi: Add RSI definitions (Suzuki K Poulose) [Orabug: 39157707]
- PCI/TPH: Add TPH documentation (Wei Huang) [Orabug: 39157707]
- PCI/TPH: Add Steering Tag support (Wei Huang) [Orabug: 39157707]
- PCI: Add TLP Processing Hints (TPH) support (Wei Huang) [Orabug: 39157707]
- sched: Update rq->avg_idle when a task is moved to an idle CPU (Shubhang Kaushik) [Orabug: 39214522]
- arm64: mte: Set TCMA1 whenever MTE is present in the kernel (Carl Worth) [Orabug: 39214522]
- x86/CPU: Fix FPDSS on Zen1 (Borislav Petkov) [Orabug: 39241227,39273721] {CVE-2026-31628}
- uek-rpm: Enable FWCTL modules for aarch64 (Dave Kleikamp) [Orabug: 39252919]
- uek-rpm: CONFIG_INTEL_IOMMU_SCALABLE_MODE_DEFAULT_ON should be set (Dave Kleikamp) [Orabug: 39259550]

[6.12.0-203.76.1]
- Revert "EDAC: Octeon: Init SDEI" (Jeremy Tang) [Orabug: 39203407]

[6.12.0-202.76.2]
- ipv6: use RCU in ip6_xmit() (Eric Dumazet) [Orabug: 38649060,39186444,39202432] {CVE-2025-40135}
- dst: fix races in rt6_uncached_list_del() and rt_del_uncached_list() (Eric Dumazet) [Orabug: 38887740,39181101,39202431] {CVE-2026-23004}
- net: bridge: fix nd_tbl NULL dereference when IPv6 is disabled (Fernando Fernandez Mancera) [Orabug: 39029337,39131054] {CVE-2026-23381}
- io_uring/kbuf: check if target buffer list is still legacy on recycle (Jens Axboe) [Orabug: 39144150,39343763] {CVE-2026-43366}
- spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Breno Leitao) [Orabug: 38970584,39166116] {CVE-2026-23207}
- spi: tegra210-quad: Check hardware status on timeout (Vishwaroop A) [Orabug: 39166116]
- spi: tegra210-quad: Refactor error handling into helper functions (Vishwaroop A) [Orabug: 39166116]
- spi: tegra210-quad: Add support for internal DMA (Vishwaroop A) [Orabug: 39166116]
- spi: tegra210-quad: Update dummy sequence configuration (Vishwaroop A) [Orabug: 39166116]
- iommufd/device: Add helper to detect the first attach of a group (Yi Liu) [Orabug: 39166116]
- iommufd/device: Replace idev->igroup with local variable (Yi Liu) [Orabug: 39166116]
- iommufd/device: Only add reserved_iova in non-pasid path (Yi Liu) [Orabug: 39166116]
- iommufd: Pass @pasid through the device attach/replace path (Yi Liu) [Orabug: 39166116]
- iommu: Drop iommu_group_replace_domain() (Yi Liu) [Orabug: 39166116]
- arm64: contpte: fix set_access_flags() no-op check for SMMU/ATS faults (Piotr Jaroszynski) [Orabug: 39166116]

[6.12.0-202.76.1]
- uek-rpm/config-x86_64-onos: Reduce unneeded options in config file for ONOS (Brian Utterback) [Orabug: 39029491]
- Kconfig for ARISTA_SCD_DRIVER driver needs select REGMAP_I2C (Brian Utterback) [Orabug: 39095293]
- memfd: move MFD_MF_KEEP_UE_MAPPED flag to higher bit (William Roche) [Orabug: 39109772]
- uek-rpm: Enable CONFIG_NET_VRF in container kernel (Boris Ostrovsky) [Orabug: 39161478]
- sched: idle: Make skipping governor callbacks more consistent (Rafael J. Wysocki)
- dpaa2-switch: Fix interrupt storm after receiving bad if_id in IRQ handler (Guenter Roeck)
- soc: rockchip: grf: Add missing of_node_put() when returning (Shawn Lin)
- tracing: Add NULL pointer check to trigger_data_free() (Guenter Roeck) [Orabug: 39227772] {CVE-2026-23309}
- qmi_wwan: allow max_mtu above hard_mtu to control rx_urb_size (Laurent Vivier)
- bpf: Fix unsound scalar forking in maybe_fork_scalars() for BPF_OR (Daniel Wade) [Orabug: 39198231] {CVE-2026-31413}
- ASoC: SOF: ipc4-topology: Allow bytes controls without initial payload (Peter Ujfalusi)
- Bluetooth: L2CAP: Fix stack-out-of-bounds read in l2cap_ecred_conn_req (Minseo Park) [Orabug: 39251164] {CVE-2026-31513}
- Revert "arm64: dts: qcom: sdm845-oneplus: Mark l14a regulator as boot-on" (Sasha Levin)
- erofs: set fileio bio failed in short read case (Sheng Yong) [Orabug: 39251169] {CVE-2026-31514}
- ACPI: processor: Fix previous acpi_processor_errata_piix4() fix (Rafael J. Wysocki) [Orabug: 39198208] {CVE-2026-23443}
- kbuild: Leave objtool binary around with 'make clean' (Nathan Chancellor)
- wifi: wlcore: Return -ENOMEM instead of -EAGAIN if there is not enough headroom (Guenter Roeck) [Orabug: 39262447] {CVE-2026-31552}
- net: macb: Reinitialize tx/rx queue pointer registers and rx ring during resume (Kevin Hao)
- net: macb: Introduce gem_init_rx_ring() (Kevin Hao)
- net: macb: Shuffle the tx ring before enabling tx (Kevin Hao)
- remoteproc: mediatek: Unprepare SCP clock during system suspend (Tzung-Bi Shih)
- LTS version: v6.12.76 (Sherry Yang)
- Revert "x86/kexec: add a sanity check on previous kernel's ima kexec buffer" (Sasha Levin)
- LTS version: v6.12.75 (Sherry Yang)
- most: core: fix leak on early registration failure (Johan Hovold)
- arm64: Fix sampling the "stable" virtual counter in preemptible section (Marc Zyngier)
- xfs: fix copy-paste error in previous fix (Darrick J. Wong)
- drm/i915/wakeref: clean up INTEL_WAKEREF_PUT_* flag macros (Jani Nikula)
- ALSA: pcm: Revert bufs move in snd_pcm_xfern_frames_ioctl() (Nathan Chancellor)
- NTB: ntb_transport: Fix too small buffer for debugfs_name (Koichiro Den)
- tracing: Wake up poll waiters for hist files when removing an event (Petr Pavlu)
- tracing: Fix checking of freed trace_event_file for hist files (Petr Pavlu)
- fgraph: Do not call handlers direct when not using ftrace_ops (Steven Rostedt)
- tracing: ring-buffer: Fix to check event length before using (Masami Hiramatsu) [Orabug: 39331678] {CVE-2026-43210}
- net: nfc: nci: Fix parameter validation for packet data (Michael Thalmeier)
- drm/amdgpu: keep vga memory on MacBooks with switchable graphics (Alex Deucher)
- arm64: Force the use of CNTVCT_EL0 in __delay() (Marc Zyngier)
- x86/kexec: Copy ACPI root pointer address from config table (Ard Biesheuvel)
- net/sched: act_skbedit: fix divide-by-zero in tcf_skbedit_hash() (Liu Ruitong) [Orabug: 39331784] {CVE-2026-43238}
- net: ethernet: ec_bhf: Fix dma_free_coherent() dma handle (Thomas Fourier)
- ASoC: amd: yc: Add DMI quirk for ASUS Vivobook Pro 15X M6501RR (Gustavo Salvini)
- cifs: some missing initializations on replay (Shyam Prasad N) [Orabug: 39300554] {CVE-2026-31693}
- fbcon: Remove struct fbcon_display.inverse (Thomas Zimmermann)
- fbdev: ffb: fix corrupted video output on Sun FFB1 (Ren? Rebe)
- fbdev: of: display_timing: fix refcount leak in of_get_display_timings() (Weigang He) [Orabug: 39331889] {CVE-2026-43264}
- fbdev: vt8500lcdfb: fix missing dma_free_coherent() (Thomas Fourier)
- fbcon: check return value of con2fb_acquire_newinfo() (Andrey Vatoropin) [Orabug: 39331303] {CVE-2026-43123}
- mm: numa_memblks: Identify the accurate NUMA ID of CFMW (Cui Chao)
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (Junxi Qian) [Orabug: 39331577] {CVE-2026-43186}
- function_graph: Restore direct mode when callbacks drop to one (Shengming Hu)
- atm: fore200e: fix use-after-free in tasklets during device removal (Duoming Zhou)
- net: intel: fix PCI device ID conflict between i40e and ipw2200 (Ethan Nelson-Moore)
- procfs: fix possible double mmput() in do_procmap_query() (Andrii Nakryiko) [Orabug: 39339241] {CVE-2026-43178}
- drm/amdgpu: fix sync handling in amdgpu_dma_buf_move_notify (Pierre-Eric Pelloux-Prayer) [Orabug: 39343623] {CVE-2026-43318}
- drm/amd/display: Increase DCN35 SR enter/exit latency (Sun Peng Li)
- io_uring/filetable: clamp alloc_hint to the configured alloc range (Jens Axboe)
- tracing: Fix to set write permission to per-cpu buffer_size_kb (Masami Hiramatsu)
- net: macb: Fix tx/rx malfunction after phy link down and up (Kevin Hao)
- net: ti: icssg-prueth: Add optional dependency on HSR (Kevin Hao)
- octeontx2-af: CGX: fix bitmap leaks (Bo Sun)
- net: wan/fsl_ucc_hdlc: Fix dma_free_coherent() in uhdlc_memclean() (Thomas Fourier)
- net: ethernet: marvell: skge: remove incorrect conflicting PCI ID (Ethan Nelson-Moore)
- LoongArch: Disable instrumentation for setup_ptwalker() (Tiezhu Yang)
- LoongArch: Guard percpu handler under !CONFIG_PREEMPT_RT (Tiezhu Yang)
- LoongArch: Use %px to print unmodified unwinding address (Tiezhu Yang)
- LoongArch: Prefer top-down allocation after arch_mem_init() (Huacai Chen)
- LoongArch: Make cpumask_of_node() robust against NUMA_NO_NODE (John Garry)
- rust: kbuild: pass -Zunstable-options for Rust 1.95.0 (Miguel Ojeda)
- ceph: supply snapshot context in ceph_zero_partial_object() (Ethanwu) [Orabug: 39331924] {CVE-2026-43273}
- MIPS: rb532: Fix MMIO UART resource registration (Jiaxun Yang)
- cifs: Fix locking usage for tcon fields (Shyam Prasad N) [Orabug: 39331696] {CVE-2026-43215}
- watchdog/softlockup: fix sample ring index wrap in need_counting_irqs() (Shengming Hu)
- kcsan, compiler_types: avoid duplicate type issues in BPF Type Format (Alan Maguire)
- staging: rtl8723bs: fix null dereference in find_network (Ethan Tidmore)
- parisc: kernel: replace kfree() with put_device() in create_tree_node() (Haoxiang Li)
- PCI: Fix pci_slot_trylock() error handling (Jinhui Guo) [Orabug: 39331680] {CVE-2026-43211}
- net: cpsw_new: Fix unnecessary netdev unregistration in cpsw_probe() error path (Kevin Hao)
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (Sunday Clement) [Orabug: 39331661] {CVE-2026-43206}
- tipc: fix RCU dereference race in tipc_aead_users_dec() (Daniel Hodges)
- mtd: rawnand: pl353: Fix software ECC support (Andrea Scian)
- usb: dwc2: fix resume failure if dr_mode is host (Jisheng Zhang)
- usb: dwc3: gadget: Move vbus draw to workqueue context (Prashanth K) [Orabug: 39331512] {CVE-2026-43170}
- PCI: dwc: Fix msg_atu_index assignment (Niklas Cassel)
- mm/slab: use unsigned long for orig_size to ensure proper metadata align (Harry Yoo)
- scsi: ufs: core: Flush exception handling work when RPM level is zero (Thomas Yen) [Orabug: 39331937] {CVE-2026-43275}
- perf/arm-cmn: Reject unsupported hardware configurations (Robin Murphy) [Orabug: 39331435] {CVE-2026-43150}
- remoteproc: imx_rproc: Fix invalid loaded resource table detection (Peng Fan)
- btrfs: continue trimming remaining devices on failure (Jinbaohong)
- clk: rs9: Reserve 8 struct clk_hw slots for for 9FGV0841 (Marek Vasut)
- arm64: Fix non-atomic __READ_ONCE() with CONFIG_LTO=y (Marco Elver)
- PCI/IOV: Fix race between SR-IOV enable/disable and hotplug (Niklas Schnelle)
- Revert "PCI/IOV: Add PCI rescan-remove locking when enabling/disabling SR-IOV" (Niklas Schnelle) [Orabug: 39331422] {CVE-2026-43147}
- kexec: derive purgatory entry from symbol (Li Chen) [Orabug: 39343538] {CVE-2026-43289}
- ocfs2: fix reflink preserve cleanup issue (Heming Zhao) [Orabug: 39331504] {CVE-2026-43168}
- rapidio: replace rio_free_net() with kfree() in rio_scan_alloc_net() (Haoxiang Li)
- mm/highmem: fix __kmap_to_page() build error (William Tambe)
- mtd: spinand: Disable continuous read during probe (David Laporte)
- iio: gyro: itg3200: Fix unchecked return value in read_raw (Antoniu Miclaus)
- powerpc/smp: Add check for kcalloc() failure in parse_thread_groups() (Guangshuo Li)
- vhost: move vdpa group bound check to vhost_vdpa (Eugenio P?rez) [Orabug: 39331827] {CVE-2026-43248}
- tools: Fix bitfield dependency failure (Leo Yan)
- arm64: poe: fix stale POR_EL0 values for ptrace (Joey Gouly)
- dm mpath: make pg_init_delay_msecs settable (Benjamin Marzinski)
- bus: fsl-mc: fix an error handling in fsl_mc_device_add() (Haoxiang Li)
- io_uring/net: don't continue send bundle if poll was required for retry (Jens Axboe)
- usb: gadget: tegra-xudc: Add handling for BLCG_COREPLL_PWRDN (Haotien Hsu)
- mm/vmalloc: prevent RCU stalls in kasan_release_vmalloc_node (Deepanshu Kartikey) [Orabug: 39343546] {CVE-2026-43292}
- nvmem: Drop OF node reference on nvmem_add_one_cell() failure (Krzysztof Kozlowski)
- nfsd: fix return error code for nfsd_map_name_to_[ug]id (Anthony Iliopoulos)
- md/bitmap: fix GPF in write_page caused by resize race (Jack Wang) [Orabug: 39331482] {CVE-2026-43163}
- xfs: check for deleted cursors when revalidating two btrees (Darrick J. Wong) [Orabug: 39103129] {CVE-2026-23249}
- xfs: check return value of xchk_scrub_create_subord (Darrick J. Wong) [Orabug: 39103131] {CVE-2026-23250}
- xfs: only call xf{array,blob}_destroy if we have a valid pointer (Darrick J. Wong) [Orabug: 39103133] {CVE-2026-23251}
- pinctrl: intel: Add code name documentation (Raag Jadav)
- PCI: endpoint: Fix swapped parameters in pci_{primary/secondary}_epc_epf_unlink() functions (Manikanta Maddireddy)
- KVM: x86: Add SRCU protection for reading PDPTRs in __get_sregs2() (Vasiliy Kovalev) [Orabug: 39331693] {CVE-2026-43214}
- xfs: fix remote xattr valuelblk check (Darrick J. Wong)
- xfs: fix the xattr scrub to detect freemap/entries array collisions (Darrick J. Wong)
- xfs: fix freemap adjustments when adding xattrs to leaf blocks (Darrick J. Wong) [Orabug: 39331458] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (Darrick J. Wong) [Orabug: 39331580] {CVE-2026-43187}
- iio: accel: adxl380: Avoid reading more entries than present in FIFO (Francesco Lavra)
- mfd: omap-usb-host: Fix OF populate on driver rebind (Johan Hovold)
- mfd: qcom-pm8xxx: Fix OF populate on driver rebind (Johan Hovold)
- mfd: core: Add locking around 'mfd_of_node_list' (Douglas Anderson) [Orabug: 39331409] {CVE-2026-43143}
- iommu/vt-d: Flush dev-IOTLB only when PCIe device is accessible in scalable mode (Jinhui Guo) [Orabug: 39331341] {CVE-2026-43130}
- media: verisilicon: AV1: Fix tile info buffer size (Benjamin Gaignard)
- xfs: remove xfs_attr_leaf_hasname (Christoph Hellwig) [Orabug: 39331444] {CVE-2026-43153}
- xfs: mark data structures corrupt on EIO and ENODATA (Darrick J. Wong)
- drm/bridge: anx7625: Fix invalid EDID size (Loic Poulain)
- drm/buddy: Prevent BUG_ON by validating rounded allocation (Sanjay Yadav) [Orabug: 39331510] {CVE-2026-43169}
- selftests/mm/charge_reserved_hugetlb: drop mount size for hugetlbfs (Li Wang)
- drm: of: drm_of_panel_bridge_remove(): fix device_node leak (Luca Ceresoli)
- media: venus: vdec: restrict EOS addr quirk to IRIS2 only (Dikshita Agarwal)
- media: venus: vdec: fix error state assignment for zero bytesused (Renjiang Han)
- arm64: dts: rockchip: Do not enable hdmi_sound node on Pinebook Pro (Yan Jun)
- dm-unstripe: fix mapping bug when there are multiple targets in a table (Matt Whitlock)
- dm-integrity: fix recalculation in bitmap mode (Mikulas Patocka)
- reset: gpio: suppress bind attributes in sysfs (Bartosz Golaszewski)
- s390/pci: Handle futile config accesses of disabled devices directly (Niklas Schnelle)
- clk: tegra: tegra124-emc: Fix potential memory leak in tegra124_clk_register_emc() (Haoxiang Li)
- media: i2c: ov01a10: Fix digital gain range (Mehdi Djait)
- media: stm32: dcmipp: bytecap: clear all interrupts upon stream stop (Alain Volmat)
- soc: rockchip: grf: Support multiple grf to be handled (Shawn Lin)
- soc: rockchip: grf: Fix wrong RK3576_IOCGRF_MISC_CON definition (Shawn Lin)
- clk: clk-apple-nco: Add "apple,t8103-nco" compatible (Janne Grunau)
- bus: omap-ocp2scp: fix OF populate on driver rebind (Johan Hovold)
- KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (Yosry Ahmed) [Orabug: 39331358] {CVE-2026-43133}
- soc: ti: pruss: Fix double free in pruss_clk_mux_setup() (Xu Wang)
- soc: ti: k3-socinfo: Fix regmap leak on probe failure (Johan Hovold)
- dm: clear cloned request bio pointer when last clone bio completes (Michael Liang) [Orabug: 39331954] {CVE-2026-43278}
- dm-integrity: fix a typo in the code for write/discard race (Mikulas Patocka)
- platform/x86: ISST: Add missing write block check (Srinivas Pandruvada)
- media: ipu6: Fix RPM reference leak in probe error paths (Bingbu Cao) [Orabug: 39331545] {CVE-2026-43177}
- media: ipu6: Fix typo and wrong constant in ipu6-mmu.c (Bingbu Cao)
- media: i2c: ov5647: use our own mutex for the ctrl lock (Xiaolei Wang)
- media: ccs: Fix setting initial sub-device state (Sakari Ailus)
- media: i2c: ov5647: Fix PIXEL_RATE value for VGA mode (Jai Luthra)
- media: i2c: ov5647: Sensor should report RAW color space (David Plowman)
- media: i2c: ov5647: Correct minimum VBLANK value (David Plowman)
- media: i2c: ov5647: Correct pixel array offset (David Plowman)
- media: i2c: ov5647: Initialize subdev before controls (Jai Luthra)
- media: ccs: Avoid possible division by zero (Sakari Ailus)
- media: qcom: camss: vfe: Fix out-of-bounds access in vfe_isr_reg_update() (Alper Ak)
- media: i2c: ov01a10: Fix test-pattern disabling (Hans de Goede)
- media: i2c: ov01a10: Fix passing stream instead of pad to v4l2_subdev_state_get_format() (Hans de Goede)
- media: i2c: ov01a10: Add missing v4l2_subdev_cleanup() calls (Hans de Goede)
- media: i2c: ov01a10: Fix analogue gain range (Hans de Goede)
- media: i2c: ov01a10: Fix reported pixel-rate value (Hans de Goede)
- media: i2c: ov01a10: Fix the horizontal flip control (Hans de Goede)
- media: i2c/tw9906: Fix potential memory leak in tw9906_probe() (Abdun Nihaal) [Orabug: 39331821] {CVE-2026-43246}
- media: i2c/tw9903: Fix potential memory leak in tw9903_probe() (Abdun Nihaal) [Orabug: 39331705] {CVE-2026-43218}
- media: cx25821: Add missing unmap in snd_cx25821_hw_params() (Haoxiang Li)
- media: cx23885: Add missing unmap in snd_cx23885_hw_params() (Haoxiang Li) [Orabug: 39331366] {CVE-2026-43135}
- media: cx88: Add missing unmap in snd_cx88_hw_params() (Haoxiang Li) [Orabug: 39331866] {CVE-2026-43257}
- media: radio-keene: fix memory leak in error path (Shaurya Rane) [Orabug: 39331752] {CVE-2026-43231}
- media: verisilicon: AV1: Set IDR flag for intra_only frame type (Benjamin Gaignard)
- media: rockchip: rga: Fix possible ERR_PTR dereference in rga_buf_init() (Alper Ak)
- media: amphion: Drop min_queued_buffers assignment (Ming Qian)
- arm64: dts: apple: t8112-j473: Keep the HDMI port powered on (Janne Grunau)
- HID: logitech-hidpp: Check maxfield in hidpp_get_report_length() (G?nther Noack) [Orabug: 39331370] {CVE-2026-43136}
- HID: prodikeys: Check presence of pm->input_ep82 (G?nther Noack) [Orabug: 39331846] {CVE-2026-43251}
- HID: magicmouse: Do not crash on missing msc->input (G?nther Noack) [Orabug: 39331389] {CVE-2026-43140}
- HID: hid-pl: handle probe errors (Oliver Neukum) [Orabug: 39331440] {CVE-2026-43152}
- arm64: Disable branch profiling for all arm64 code (Breno Leitao)
- KVM: nSVM: Remove a user-triggerable WARN on nested_svm_load_cr3() succeeding (Sean Christopherson) [Orabug: 39343613] {CVE-2026-43315}
- KVM: x86: Return "unsupported" instead of "invalid" on access to unsupported PV MSR (Sean Christopherson)
- ARM: omap2: Fix reference count leaks in omap_control_init() (Xu Wang)
- arm64: dts: qcom: x1e80100: Add missing TCSR ref clock to the DP PHYs (Abel Vesa)
- media: verisilicon: AV1: Fix tx mode bit setting (Benjamin Gaignard)
- media: verisilicon: AV1: Fix enable cdef computation (Benjamin Gaignard)
- media: chips-media: wave5: Fix device cleanup order to prevent kernel panic (Xulin Sun)
- media: chips-media: wave5: Fix kthread worker destruction in polling mode (Xulin Sun)
- media: mtk-mdp: Fix a reference leak bug in mtk_mdp_remove() (Haoxiang Li)
- media: mtk-mdp: Fix error handling in probe function (Haoxiang Li)
- media: mediatek: encoder: Fix uninitialized scalar variable issue (Irui Wang)
- dm-verity: correctly handle dm_bufio_client_create() failure (Eric Biggers) [Orabug: 39331353] {CVE-2026-43132}
- phy: qcom: edp: Make the number of clocks flexible (Abel Vesa)
- Revert "PCI: qcom: Enable MSI interrupts together with Link up if 'Global IRQ' is supported" (Niklas Cassel)
- drm/tests: shmem: Swap names of export tests (Thomas Zimmermann)
- fpga: dfl: use subsys_initcall to allow built-in drivers to be added (Thadeu Lima de Souza Cascardo)
- ASoC: SOF: ipc4-control: Keep the payload size up to date (Peter Ujfalusi)
- ASoC: SOF: ipc4-control: Use the correct size for scontrol->ipc_control_data (Peter Ujfalusi)
- ASoC: SOF: ipc4-topology: Correct the allocation size for bytes controls (Peter Ujfalusi) [Orabug: 39331023] {CVE-2025-71286}
- ASoC: SOF: ipc4-control: If there is no data do not send bytes update (Peter Ujfalusi)
- clk: renesas: rzg2l: Select correct div round macro (Chris Brandt)
- clk: renesas: rzg2l: Fix intin variable size (Chris Brandt)
- rpmsg: core: fix race in driver_override_show() and use core helper (Gui-Dong Han) [Orabug: 39331012] {CVE-2025-71274}
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Vahagn Vardanian) [Orabug: 39331761] {CVE-2026-43233}
- dpaa2-switch: validate num_ifs to prevent out-of-bounds write (Junrui Luo)
- net: consume xmit errors of GSO frames (Jakub Kicinski) [Orabug: 39331606] {CVE-2026-43194}
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Jianbo Liu) [Orabug: 39331628] {CVE-2026-43199}
- net/mlx5e: Support routed networks during IPsec MACs initialization (Alexandre Cassen)
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Shay Drory)
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Shay Drory)
- net/mlx5: DR, Fix circular locking dependency in dump (Shay Drory)
- RDMA/umem: Fix double dma_buf_unpin in failure path (Jacob Moroni) [Orabug: 39331331] {CVE-2026-43128}
- net: usb: pegasus: enable basic endpoint checking (Ziyi Guo) [Orabug: 39331449] {CVE-2026-43156}
- RDMA/efa: Fix typo in efa_alloc_mr() (Jason Gunthorpe)
- net: wan: farsync: Fix use-after-free bugs caused by unfinished tasklets (Duoming Zhou)
- RDMA/core: Fix stale RoCE GIDs during netdev events at registration (Jiri Pirko)
- tipc: fix duplicate publication key in tipc_service_insert_publ() (Tung Nguyen)
- kcm: fix zero-frag skb in frag_list on partial sendmsg error (Jiayuan Chen)
- tls: Fix race condition in tls_sw_cancel_work_tx() (Hyunwoo Kim) [Orabug: 39073883] {CVE-2026-23240}
- Bluetooth: L2CAP: Fix missing key size check for L2CAP_LE_CONN_REQ (Luiz Augusto von Dentz) [Orabug: 39331361] {CVE-2026-43134}
- Bluetooth: L2CAP: Fix not checking output MTU is acceptable on L2CAP_ECRED_CONN_REQ (Luiz Augusto von Dentz)
- Bluetooth: L2CAP: Fix response to L2CAP_ECRED_CONN_REQ (Luiz Augusto von Dentz)
- Bluetooth: hci_qca: Cleanup on all setup failures (Jinwang Li)
- Bluetooth: L2CAP: Fix result of L2CAP_ECRED_CONN_RSP when MTU is too short (Luiz Augusto von Dentz)
- Bluetooth: L2CAP: Fix invalid response to L2CAP_ECRED_RECONF_REQ (Luiz Augusto von Dentz)
- Remove WARN_ALL_UNSEEDED_RANDOM kernel config option (Linus Torvalds)
- wifi: cfg80211: wext: fix IGTK key ID off-by-one (Johannes Berg)
- bnxt_en: Fix deleting of Ntuple filters (Pavan Chebbi)
- bnxt_en: Fix RSS context delete logic (Pavan Chebbi) [Orabug: 39331875] {CVE-2026-43260}
- net: ethernet: xscale: Check for PTP support properly (Linus Walleij)
- net: ixp4xx_eth: convert to ndo_hwtstamp_get() and ndo_hwtstamp_set() (Vladimir Oltean)
- net: usb: lan78xx: scan all MDIO addresses on LAN7801 (Martin P?lsson)
- net: usb: kaweth: remove TX queue manipulation in kaweth_set_rx_mode (Ziyi Guo) [Orabug: 39331549] {CVE-2026-43180}
- espintcp: Fix race condition in espintcp_close() (Hyunwoo Kim)
- xfrm: always flush state and policy upon NETDEV_UNREGISTER event (Tetsuo Handa) [Orabug: 39331496] {CVE-2026-43167}
- ipmi: ipmb: initialise event handler read bytes (Matt Johnston)
- xfrm: skip templates check for packet offload tunnel mode (Leon Romanovsky)
- xfrm6: fix uninitialized saddr in xfrm6_get_saddr() (Jiayuan Chen) [Orabug: 39331383] {CVE-2026-43139}
- ntb: ntb_hw_switchtec: Fix shift-out-of-bounds for 0 mw lut (Maciej Grochowski)
- ntb: ntb_hw_switchtec: Fix array-index-out-of-bounds access (Maciej Grochowski)
- rtc: zynqmp: correct frequency value (Tomas Melin)
- drm/amd/display: Remove conditional for shaper 3DLUT power-on (Alex Hung)
- arm64: hugetlbpage: avoid unused-but-set-parameter warning (gcc-16) (Arnd Bergmann)
- btrfs: replace BUG() with error handling in __btrfs_balance() (Adarsh Das)
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (Takashi Iwai) [Orabug: 39331959] {CVE-2026-43279}
- drm/radeon: Add HAINAN clock adjustment (Decce6)
- spi: spidev: fix lock inversion between spi_lock and buf_lock (Fabian Godehardt) [Orabug: 39343626] {CVE-2026-43319}
- drm/amd/display: bypass post csc for additional color spaces in dal (Clay King)
- drm/amdgpu: Add HAINAN clock adjustment (Decce6)
- ALSA: usb-audio: Update the number of packets properly at receiving (Takashi Iwai)
- drm/amdgpu: Adjust usleep_range in fence wait (Ce Sun)
- drm/amd/display: Avoid updating surface with the same surface under MPO (Wayne Lin)
- drm/amd/display: Fix system resume lag issue (Tom Chung)
- drm/amd/display: Fix writeback on DCN 3.2+ (Alex Hung)
- ARM: 9467/1: mm: Don't use %pK through printk (Thomas Wei?schuh)
- include: uapi: netfilter_bridge.h: Cover for musl libc (Phil Sutter)
- ACPI: x86: Force enabling of PWM2 on the Yogabook YB1-X90 (Yauhen Kharuzhy)
- thermal: int340x: Fix sysfs group leak on DLVR registration failure (Kaushlendra Kumar)
- libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [Orabug: 39343577] {CVE-2026-43304}
- ceph: supply snapshot context in ceph_uninline_data() (Ethanwu)
- fs/ntfs3: avoid calling run_get_entry() when run == NULL in ntfs_read_run_nb_ra() (Konstantin Komarov)
- fs/ntfs3: drop preallocated clusters for sparse and compressed files (Konstantin Komarov)
- fs: ntfs3: fix infinite loop triggered by zero-sized ATTR_LIST (Jaehun Gou)
- fs: ntfs3: fix infinite loop in attr_load_runs_range on inconsistent metadata (Jaehun Gou)
- fs: ntfs3: check return value of indx_find to avoid infinite loop (Jaehun Gou)
- MIPS: Loongson: Make cpumask_of_node() robust against NUMA_NO_NODE (John Garry)
- iio: magnetometer: Remove IRQF_ONESHOT (Sebastian Andrzej Siewior)
- iio: Use IRQF_NO_THREAD (Sebastian Andrzej Siewior)
- mfd: intel-lpss: Add Intel Nova Lake-S PCI IDs (Ilpo J?rvinen)
- Revert "mfd: da9052-spi: Change read-mask to write-mask" (Marcus Folkesson)
- phy: fsl-imx8mq-usb: disable bind/unbind platform driver feature (Xu Yang)
- phy: mvebu-cp110-utmi: fix dr_mode property read from dts (Aleksandar Gerasimovski)
- watchdog: imx7ulp_wdt: handle the nowayout option (Oleksandr Suvorov)
- binder: don't use %pK through printk (Thomas Wei?schuh)
- fix it87_wdt early reboot by reporting running timer (Ren? Rebe)
- serial: 8250: 8250_omap.c: Clear DMA RX running status only after DMA termination is done (Moteen Shah)
- serial: 8250: 8250_omap.c: Add support for handling UART error conditions (Moteen Shah)
- staging: rtl8723bs: fix memory leak on failure path (Diksha Kumari)
- usb: chipidea: udc: fix DMA and SG cleanup in _ep_nuke() (Mario Peter)
- usb: gadget: f_fs: Fix ioctl error handling (Sam Day)
- usb: gadget: f_fs: fix DMA-BUF OUT queues (Sam Day)
- misc: eeprom: Fix EWEN/EWDS/ERAL commands for 93xx56 and 93xx66 (Markus Koch)
- misc: bcm_vk: Fix possible null-pointer dereferences in bcm_vk_read() (Tuo Li)
- phy: cadence-torrent: restore parent clock for refclk during resume (Thomas Richard)
- phy: ti: phy-j721e-wiz: restore mux selection during resume (Thomas Richard)
- dmaengine: stm32-mdma: initialize m2m_hw_period and ccr to fix warnings (Cl?ment Le Goffic)
- dmaengine: sun6i: Choose appropriate burst length under maxburst (Chen-Yu Tsai)
- most: core: fix resource leak in most_register_interface error paths (Navaneeth K)
- fpga: of-fpga-region: Fail if any bridge is missing (Romain Gantois)
- usb: typec: ucsi: psy: Fix voltage and current max for non-Fixed PDOs (Benson Leung)
- serial: 8250_dw: handle clock enable errors in runtime_resume (Artem Shimko)
- staging: rtl8723bs: fix missing status update on sdio_alloc_irq() failure (Liang Jie)
- soundwire: intel_auxdevice: add cs42l45 codec to wake_capable_list (Maciej Strozek)
- soundwire: dmi-quirks: add mapping for Avell B.ON (OEM rebranded of NUC15) (Peter Ujfalusi)
- dmaengine: stm32-dma3: use module_platform_driver (Amelie Delaunay)
- 9p/xen: protect xen_9pfs_front_free against concurrent calls (Stefano Stabellini)
- m68k: nommu: fix memmove() with differently aligned src and dest for 68000 (Daniel Palmer)
- HID: i2c-hid: Add FocalTech FT8112 (Daniel Peng)
- clk: microchip: core: correct return value on *_get_parent() (Brian Masney)
- mailbox: sprd: clear delivery flag before handling TX done (Otto Pfl?ger)
- remoteproc: mediatek: Break lock dependency to prepare_lock (Tzung-Bi Shih)
- mailbox: sprd: mask interrupts that are not handled (Otto Pfl?ger)
- mailbox: imx: Skip the suspend flag for i.MX7ULP (Jacky Bai)
- mailbox: pcc: Remove spurious IRQF_ONESHOT usage (Mark Brown)
- remoteproc: imx_dsp_rproc: Skip RP_MBOX_SUSPEND_SYSTEM when mailbox TX channel is uninitialized (Iuliana Prodan)
- tracing: Fix false sharing in hwlat get_sample() (Colin Lord)
- riscv: vector: init vector context with proper vlenb (Sergey Matyukevich)
- scsi: ufs: mediatek: Fix page faults in ufs_mtk_clk_scale() trace event (Keita Morisaki)
- vhost: fix caching attributes of MMIO regions by setting them explicitly (Kommula Shiva Shankar)
- scsi: buslogic: Reduce stack usage (Arnd Bergmann)
- hisi_acc_vfio_pci: update status after RAS error (Longfang Liu)
- ata: libata: avoid long timeouts on hot-unplugged SATA DAS (Henry Tseng)
- RDMA/rtrs-clt: For conn rejection use actual err number (Md Haris Iqbal)
- nfc: nxp-nci: remove interrupt trigger type (Carl Lee)
- myri10ge: avoid uninitialized variable use (Arnd Bergmann)
- PCI: Mark Nvidia GB10 to avoid bus reset (Johnny-Cc Chang)
- PCI: Add ACS quirk for Qualcomm Hamoa & Glymur (Krishna Chaitanya Chundru)
- PCI: Fix pci_slot_lock () device locking (Keith Busch)
- PCI/AER: Clear stale errors on reporting agents upon probe (Lukas Wunner)
- PCI: Mark ASM1164 SATA controller to avoid bus reset (Alex Williamson)
- vmw_vsock: bypass false-positive Wnonnull warning with gcc-16 (Arnd Bergmann)
- net: usb: sr9700: remove code to drive nonexistent multicast filter (Ethan Nelson-Moore)
- bnxt_en: Allow ntuple filters for drops (Joe Damato)
- wifi: ath10k: fix lock protection in ath10k_wmi_event_peer_sta_ps_state_chg() (Ziyi Guo)
- wifi: rtw89: pci: restore LDO setting after device resume (Dian-Syuan Yang)
- net: sfp: add quirk for Lantech 8330-265D (Marek Beh?n)
- octeontx2-af: Workaround SQM/PSE stalls by disabling sticky (Geetha Sowjanya)
- Bluetooth: btusb: Add device ID for Realtek RTL8761BU (Jacopo Scannella)
- Bluetooth: btusb: Add new VID/PID for RTL8852CE (Shell Chen)
- Bluetooth: hci_conn: use mod_delayed_work for active mode timeout (Stefan S?rensen)
- Bluetooth: hci_conn: Set link_policy on incoming ACL connections (Stefan S?rensen)
- Bluetooth: btusb: Add support for MediaTek7920 0489:e158 (Andrew Elantsev)
- ipv4: fib: Annotate access to struct fib_alias.fa_state. (Kuniyuki Iwashima)
- wifi: iwlegacy: add missing mutex protection in il3945_store_measurement() (Ziyi Guo)
- wifi: iwlegacy: add missing mutex protection in il4965_store_tx_power() (Ziyi Guo)
- net: hns3: extend HCLGE_FD_AD_QID to 11 bits (Jijie Shao)
- ipv4: igmp: annotate data-races around idev->mr_maxdelay (Eric Dumazet)
- gro: change the BUG_ON() in gro_pull_from_frag0() (Eric Dumazet)
- ext4: propagate flags to convert_initialized_extent() (Ojaswin Mujoo)
- wifi: rtw89: 8922a: add digital compensation for 2GHz (Po-Hao Huang)
- wifi: rtw89: fix unable to receive probe responses under MLO connection (Po-Hao Huang)
- wifi: iwlwifi: mvm: check the validity of noa_len (Miri Korenblit)
- net: usb: r8152: fix transmit queue timeout (Mingj Ye)
- openrisc: define arch-specific version of nop() (Brian Masney)
- netfilter: xt_tcpmss: check remaining length before reading optlen (Florian Westphal) [Orabug: 39331591] {CVE-2026-43190}
- netfilter: nf_conntrack: Add allow_clash to generic protocol handler (Yuto Hamaguchi)
- ext4: use reserved metadata blocks when splitting extent on endio (Zhang Yi)
- ext4: mark group extend fast-commit ineligible (Li Chen)
- ext4: move ext4_percpu_param_init() before ext4_mb_init() (Baokun Li) [Orabug: 39343531] {CVE-2026-43288}
- ext4: mark group add fast-commit ineligible (Li Chen)
- ipv6: exthdrs: annotate data-race over multiple sysctl (Eric Dumazet)
- ipv6: annotate data-races over sysctl.flowlabel_reflect (Eric Dumazet)
- ipv6: annotate data-races in ip6_multipath_hash_{policy,fields}() (Eric Dumazet)
- wifi: cfg80211: allow only one NAN interface, also in multi radio (Miri Korenblit)
- wifi: ath12k: fix preferred hardware mode calculation (Baochen Qiang)
- wifi: ath11k: Fix failure to connect to a 6 GHz AP (Qian Zhang)
- wifi: ath11k: add pm quirk for Thinkpad Z13/Z16 Gen1 (Ross Vandegrift)
- wifi: rtw89: wow: add reason codes for disassociation in WoWLAN mode (Chin-Yen Lee)
- wifi: rtw89: mac: correct page number for CSI response (Ping-Ke Shih)
- iommu/amd: move wait_on_sem() out of spinlock (Ankit Soni) [Orabug: 39331853] {CVE-2026-43253}
- wifi: libertas: fix WARNING in usb_tx_block (Szymon Wilczek) [Orabug: 39331859] {CVE-2026-43255}
- net: wwan: mhi: Add network support for Foxconn T99W760 (Slark Xiao)
- iommu/arm-smmu-v3: Improve CMDQ lock fairness and efficiency (Alexander Grest)
- dm: remove fake timeout to avoid leak request (Ding Hui) [Orabug: 39343609] {CVE-2026-43314}
- dm: replace -EEXIST with -EBUSY (Daniel Gomez)
- wifi: rtw88: Fix inadvertent sharing of struct ieee80211_supported_band data (Bitterblue Smith)
- wifi: rtw88: Use devm_kmemdup() in rtw_set_supported_band() (Bitterblue Smith) [Orabug: 39331003] {CVE-2025-71273}
- wifi: rtw89: ser: enable error IMR after recovering from L1 (Zong-Zhe Yang)
- wifi: rtw89: 8922a: set random mac if efuse contains zeroes (Jose Ignacio Tornos Martinez)
- wifi: rtw88: rtw8821cu: Add ID for Mercusys MU6H (Hsiu-Ming Chang)
- wifi: rtw88: 8822b: Avoid WARNING in rtw8822b_config_trx_mode() (Bitterblue Smith) [Orabug: 39343515] {CVE-2025-71297}
- wifi: rtw88: fix DTIM period handling when conf->dtim_period is zero (Roman Peshkichev)
- jfs: nlink overflow in jfs_rename (Jori Koolstra)
- jfs: Add missing set_freezable() for freezable kthread (Xu Wang)
- ALSA: usb-audio: Add iface reset and delay quirk for AB13X USB Audio (Lianqin Hu)
- ALSA: mixer: oss: Add card disconnect checkpoints (Takashi Iwai) [Orabug: 39331318] {CVE-2026-43126}
- ALSA: hda/realtek - Enable mute LEDs on HP ENVY x360 15-es0xxx (Illia Barbashyn)
- ASoC: fsl: imx-rpmsg: use snd_soc_find_dai_with_mutex() in probe (Ziyi Guo)
- spi: geni-qcom: Fix abort sequence execution for serial engine errors (Praveen Talari)
- ASoC: SOF: Intel: hda: Fix NULL pointer dereference (Ranjani Sridharan) [Orabug: 39331375] {CVE-2026-43137}
- power: sequencing: fix missing state_lock in pwrseq_power_on() error path (Ziyi Guo)
- modpost: Amend ppc64 save/restfpr symnames for -Os build (Ren? Rebe)
- ASoC: es8328: Add error unwind in resume (Hsieh Hung-En)
- HID: logitech-hidpp: Add support for Logitech K980 (Bastien Nocera)
- hwmon: (f71882fg) Add F81968 support (Ji-Ze Hong)
- hwmon: (nct6775) Add ASUS Pro WS WRX90E-SAGE SE (Denis Pauk)
- hwmon: (dell-smm) Add support for Dell OptiPlex 7080 (Armin Wolf)
- ASoC: codecs: max98390: Check return value of devm_gpiod_get_optional() in max98390_i2c_probe() (Chen Ni)
- drm/amd/display: avoid dig reg access timeout on usb4 link training fail (Zhongwei)
- drm/amd/display: Fix GFX12 family constant checks (Matthew Stewart)
- spi: spi-mem: Protect dirmap_create() with spi_mem_access_start/end (Chin-Ting Kuo)
- ASoC: sunxi: sun50i-dmic: Add missing check for devm_regmap_init_mmio (Chen Ni)
- gpio: aspeed-sgpio: Change the macro to support deferred probe (Billy Tsai)
- ALSA: hda/realtek: fix LG Gram Style 14 speakers (Damien Dagorn)
- ALSA: hda/conexant: Add headset mic fix for MECHREVO Wujie 15X Pro (Gongqi)
- HID: elecom: Add support for ELECOM HUGE Plus M-HT1MRBK (David Phillips)
- HID: multitouch: add eGalaxTouch EXC3188 support (Thorsten Schmelzer)
- media: rkisp1: Fix filter mode register configuration (Rui Wang)
- drm/atmel-hlcdc: fix use-after-free of drm_crtc_commit after release (Ludovic Desroches)
- drm/atmel-hlcdc: don't reject the commit if the src rect has fractional parts (Ludovic Desroches)
- drm/atmel-hlcdc: fix memory leak from the atomic_destroy_state callback (Ludovic Desroches)
- drm/amd/display: Disable FEC when powering down encoders (Ovidiu Bunea)
- PCI: Add Intel Nova Lake audio Device ID (Peter Ujfalusi)
- ASoC: soc-acpi-intel-arl-match: change rt722 amp endpoint to aggregated (Bard Liao)
- virt: vbox: uapi: Mark inner unions in packed structs as packed (Thomas Wei?schuh)
- hyper-v: Mark inner union in hv_kvp_exchg_msg_value as packed (Thomas Wei?schuh)
- drm: Account property blob allocations to memcg (Xiao Kan) [Orabug: 39343527] {CVE-2026-43287}
- drm/amdkfd: Fix GART PTE for non-4K pagesize in svm_migrate_gart_map() (Donet Tom)
- drm/amdkfd: Relax size checking during queue buffer get (Donet Tom)
- ALSA: hda/realtek: add HP Victus 16-e0xxx mute LED quirk (Bharat Dev Burman)
- media: ipu6: Always close firmware stream (Sakari Ailus)
- media: ipu6: Close firmware streams on streaming enable failure (Sakari Ailus)
- media: ipu6: Ensure stream_mutex is acquired when dealing with node list (Sakari Ailus)
- media: mt9m114: Return -EPROBE_DEFER if no endpoint is found (Hans de Goede)
- media: mt9m114: Avoid a reset low spike during probe() (Hans de Goede)
- media: v4l2-async: Fix error handling on steps after finding a match (Sakari Ailus) [Orabug: 39331585] {CVE-2026-43189}
- media: cx25821: Fix a resource leak in cx25821_dev_setup() (Haoxiang Li)
- media: solo6x10: Check for out of bounds chip_id (Kees Cook) [Orabug: 39343616] {CVE-2026-43316}
- media: pvrusb2: fix URB leak in pvr2_send_request_ex (Szymon Wilczek) [Orabug: 39331719] {CVE-2026-43223}
- media: adv7180: fix frame interval in progressive mode (Thorsten Schmelzer)
- drm/panel: Fix a possible null-pointer dereference in jdi_panel_dsi_remove() (Tuo Li)
- media: amphion: Clear last_buffer_dequeued flag for DEC_CMD_START (Ming Qian)
- spi: spi-mem: Limit octal DTR constraints to octal DTR situations (Miquel Raynal)
- ASoC: wm8962: Don't report a microphone if it's shorted to ground on plug (Sebastian Krzyszkowiak)
- ASoC: wm8962: Add WM8962_ADC_MONOMIX to "3D Coefficients" mask (Sebastian Krzyszkowiak)
- drm/xe: Only toggle scheduling in TDR if GuC is running (Matthew Brost)
- drm/amd/display: only power down dig on phy endpoints (Dmytro Laktyushkin)
- drm/amdgpu: Skip loading SDMA_RS64 in VF (Yubiao Wang)
- HID: apple: Add "SONiX KN85 Keyboard" to the list of non-apple keyboards (Joey Bednar)
- drm/amd/display: Add signal type check for dcn401 get_phyd32clk_src (Dmytro Laktyushkin) [Orabug: 39331807] {CVE-2026-43243}
- drm/amdgpu: avoid a warning in timedout job handler (Alex Deucher)
- drm/amd/display: Fix dsc eDP issue (Charlene Liu) [Orabug: 39343628] {CVE-2026-43320}
- drm/amdgpu: add support for HDP IP version 6.1.1 (Tim Huang)
- media: mediatek: vcodec: Don't try to decode 422/444 VP9 (Nicolas Dufresne)
- media: chips-media: wave5: Process ready frames when CMD_STOP sent to Encoder (Brandon Brnich)
- media: chips-media: wave5: Fix conditional in start_streaming (Brandon Brnich)
- media: omap3isp: set initial format (Hans Verkuil)
- media: omap3isp: isppreview: always clamp in preview_try_format() (Hans Verkuil)
- media: omap3isp: isp_video_mbus_to_pix/pix_to_mbus fixes (Hans Verkuil)
- drm/v3d: Set DMA segment size to avoid debug warnings (Xiaolei Wang)
- spi: stm32: fix Overrun issue at < 8bpw (Deepak Kumar)
- media: dvb-core: dmxdevfilter must always flush bufs (Hans Verkuil)
- ASoC: SOF: ipc4: Support for sending payload along with LARGE_CONFIG_GET (Peter Ujfalusi)
- drm/amd/display: Add USB-C DP Alt Mode lane limitation in DCN32 (Lincheng Ku)
- spi-geni-qcom: use xfer->bits_per_word for can_dma() (Jonathan Marek)
- spi-geni-qcom: initialize mode related registers to 0 (Jonathan Marek)
- drm/amdkfd: Handle GPU reset and drain retry fault race (Philip Yang)
- drm/amdgpu: fix NULL pointer issue buffer funcs (Likun Gao) [Orabug: 39331070] {CVE-2025-71294}
- gpu/panel-edp: add AUO panel entry for B140HAN06.4 (Alexey Klimov)
- drm/display/dp_mst: Add protection against 0 vcpi (Suraj Kandpal)
- parisc: Prevent interrupts during reboot (Helge Deller)
- arm64: tegra: smaug: Add usb-role-switch support (Diogo Ivo)
- Revert "arm64: zynqmp: Add an OP-TEE node to the device tree" (Tomas Melin)
- firmware: arm_ffa: Unmap Rx/Tx buffers on init failure (Haoxiang Li)
- pstore: ram_core: fix incorrect success return when vmap() fails (Ruipeng Qi) [Orabug: 39331308] {CVE-2026-43124}
- sched/debug: Fix updating of ppos on server write ops (Joel Fernandes)
- char: tpm: cr50: Remove IRQF_ONESHOT (Sebastian Andrzej Siewior)
- mailbox: bcm-ferxrm-mailbox: Use default primary handler (Sebastian Andrzej Siewior)
- crypto: hisilicon/qm - move the barrier before writing to the mailbox register (Chenghai Huang)
- PCI/MSI: Unmap MSI-X region on error (Haoxiang Li)
- clocksource/drivers/timer-integrator-ap: Add missing Kconfig dependency on OF (Bartosz Golaszewski)
- clocksource/drivers/sh_tmu: Always leave device running after probe (Niklas S?derlund)
- bpf: Recognize special arithmetic shift in the verifier (Alexei Starovoitov)
- bpf: crypto: Use the correct destructor kfunc type (Sami Tolvanen) [Orabug: 39343581] {CVE-2026-43306}
- perf/x86/cstate: Add Airmont NP (Martin Schiller)
- perf/x86/msr: Add Airmont NP (Martin Schiller)
- bpf: verifier improvement in 32bit shift sign extension pattern (Cupertino Miranda)
- sparc: don't reference obsolete termio struct for TC* constants (Sam James)
- sparc: Synchronize user stack on fork and clone (Andreas Larsson)
- block: decouple secure erase size limit from discard size limit (Luke Wang)
- blk-mq-debugfs: add missing debugfs_mutex in blk_mq_debugfs_register_hctxs() (Yu Kuai)
- xenbus: Use .freeze/.thaw to handle xenbus devices (Jason Andryuk)
- ACPI: battery: fix incorrect charging status when current is zero (Ata I?Lhan K?kt?rk)
- ACPI: x86: s2idle: Invoke Microsoft _DSM Function 9 (Turn On Display) (Jakob Riemenschneider)
- perf/cxlpmu: Replace IRQF_ONESHOT with IRQF_NO_THREAD (Sebastian Andrzej Siewior)
- s390/perf: Disable register readout on sampling events (Thomas Richter)
- cpufreq: dt-platdev: Block the driver from probing on more QC platforms (Konrad Dybcio)
- md-cluster: fix NULL pointer dereference in process_metadata_update (Jiasheng Jiang) [Orabug: 39331918] {CVE-2026-43271}
- alpha: fix user-space corruption during memory compaction (Magnus Lindholm)
- powercap: intel_rapl: Add PL4 support for Ice Lake (Daniel Tang)
- ACPICA: Abort AML bytecode execution when executing AML_FATAL_OP (Armin Wolf)
- ACPI: resource: Add JWIPC JVC9100 to irq1_level_low_skip_override[] (Ai Chao)
- ACPI: processor: Fix NULL-pointer dereference in acpi_processor_errata_piix4() (Tuo Li) [Orabug: 39343603] {CVE-2026-43313}
- EFI/CPER: don't go past the ARM processor CPER record buffer (Mauro Carvalho Chehab) [Orabug: 39331896] {CVE-2026-43266}
- APEI/GHES: ARM processor Error: don't go past allocated memory (Mauro Carvalho Chehab) [Orabug: 39331636] {CVE-2026-43201}
- APEI/GHES: ensure that won't go past CPER allocated record (Mauro Carvalho Chehab) [Orabug: 39331947] {CVE-2026-43277}
- EFI/CPER: don't dump the entire memory region (Mauro Carvalho Chehab) [Orabug: 39331518] {CVE-2026-43171}
- x86/xen/pvh: Enable PAE mode for 32-bit guest only when CONFIG_X86_PAE is set (Hou Wenlong)
- rnbd-srv: Zero the rsp buffer before using it (Md Haris Iqbal)
- arm64: Add support for TSV110 Spectre-BHB mitigation (Jinqian Yang) [Orabug: 39331877] {CVE-2026-43261}
- perf/arm-cmn: Support CMN-600AE (Robin Murphy)
- s390/purgatory: Add -Wno-default-const-init-unsafe to KBUILD_CFLAGS (Heiko Carstens)
- tools/power cpupower: Reset errno before strtoull() (Kaushlendra Kumar)
- smb: client: prevent races in ->query_interfaces() (Henrique Carvalho) [Orabug: 39331789] {CVE-2026-43239}
- gfs2: fiemap page fault fix (Andreas Gruenbacher) [Orabug: 39331882] {CVE-2026-43262}
- smb: client: add proper locking around ses->iface_last_update (Henrique Carvalho)
- btrfs: handle user interrupt properly in btrfs_trim_fs() (Jinbaohong)
- btrfs: fallback to buffered IO if the data profile has duplication (Qu Wenruo)
- dlm: validate length in dlm_search_rsb_tree (Ziming Zhang) [Orabug: 39331312] {CVE-2026-43125}
- minix: Add required sanity checking to minix_check_superblock() (Jori Koolstra)
- i3c: mipi-i3c-hci: Reset RING_OPERATION1 fields during init (Adrian Hunter)
- i3c: master: svc: Initialize 'dev' to NULL in svc_i3c_master_ibi_isr() (Frank Li)
- hfsplus: pretend special inodes as regular files (Tetsuo Handa)
- audit: add missing syscalls to read class (Jeffrey Bencteux)
- fs/buffer: add alert in try_to_free_buffers() for folios without buffers (Deepakkumar Karn) [Orabug: 39331077] {CVE-2025-71295}
- hfsplus: fix volume corruption issue for generic/498 (Viacheslav Dubeyko)
- audit: add fchmodat2() to change attributes class (Jeffrey Bencteux)
- statmount: permission check should return EPERM (Bhavik Sachdev)
- rtc: interface: Alarm race handling should not discard preceding error (Anthony Pighin)
- libperf build: Always place libperf includes first (Ian Rogers)
- libperf: Don't remove -g when EXTRA_CFLAGS are used (James Clark)
- perf vendor events amd: Fix Zen 5 MAB allocation events (Sandipan Das)
- perf annotate: Fix memcpy size in arch__grow_instructions() (Suchit Karunakaran)
- perf maps: Fix reference count leak in maps__find_ams() (Ian Rogers)
- libsubcmd: Fix null intersection case in exclude_cmds() (Sri Jayaramappa)
- perf callchain: Fix srcline printing with inlines (Ian Rogers)
- perf unwind-libdw: Fix invalid reference counts (Ian Rogers)
- perf test stat tests: Fix for virtualized machines (Thomas Richter)
- perf test stat: Update test expectations and events (Ian Rogers)
- ASoC: dt-bindings: asahi-kasei,ak5558: Fix the supply names (Shengjiu Wang)
- ASoC: dt-bindings: asahi-kasei,ak4458: Fix the supply names (Shengjiu Wang)
- ASoC: dt-bindings: asahi-kasei,ak4458: set unevaluatedProperties:false (Shengjiu Wang)
- dt-bindings: phy: qcom-edp: Add missing clock for X Elite (Abel Vesa)
- SUNRPC: fix gss_auth kref leak in gss_alloc_msg error path (Daniel Hodges)
- SUNRPC: auth_gss: fix memory leaks in XDR decoding error paths (Chuck Lever)
- Drivers: hv: vmbus: Use kthread for vmbus interrupts on PREEMPT_RT (Jan Kiszka)
- ata: libata-scsi: refactor ata_scsi_translate() (Damien Le Moal)
- ata: pata_ftide010: Fix some DMA timings (Linus Walleij)
- ext4: use optimized mballoc scanning regardless of inode format (Jan Kara)
- ext4: fix dirtyclusters double decrement on fs shutdown (Brian Foster)
- ext4: fix e4b bitmap inconsistency reports (Yongjian Sun)
- ext4: fix memory leak in ext4_ext_shift_extents() (Zilin Guan)
- ext4: drop extent cache when splitting extent fails (Zhang Yi)
- ext4: drop extent cache after doing PARTIAL_VALID1 zeroout (Zhang Yi)
- ext4: don't cache extent during splitting extent (Zhang Yi)
- ext4: don't zero the entire extent if EXT4_EXT_DATA_PARTIAL_VALID1 (Zhang Yi)
- ext4: subdivide EXT4_EXT_DATA_VALID1 (Zhang Yi)
- MIPS: Work around LLVM bug when gp is used as global register variable (Yao Zi)
- drm/amd/display: Use same max plane scaling limits for all 64 bpp formats (Mario Kleiner)
- ASoC: rockchip: i2s-tdm: Use param rate if not provided by set_sysclk (Detlev Casanova)
- x86/hyperv: Fix error pointer dereference (Ethan Tidmore)
- btrfs: fix invalid leaf access in btrfs_quota_enable() if ref key not found (Filipe Manana)
- btrfs: use the correct type to initialize block reserve for delayed refs (Filipe Manana)
- efi: Fix reservation of unaccepted memory table (Kiryl Shutsemau)
- drm/xe/xe2_hpg: Fix handling of Wa_14019988906 & Wa_14019877138 (Matt Roper)
- drm/xe/xe2_hpg: Add set of workarounds (Shekhar Chauhan)
- drm/xe/ptl: Apply Wa_13011645652 (Vinay Belgaumkar)
- drm/xe/mmio: Avoid double-adjust in 64-bit reads (Shuicheng Lin)
- drm/xe: Switch MMIO interface to take xe_mmio instead of xe_gt (Matt Roper)
- drm/xe: Adjust mmio code to pass VF substructure to SRIOV code (Matt Roper)
- drm/xe: Add xe_tile backpointer to xe_mmio (Matt Roper)
- drm/xe: Switch mmio_ext to use 'struct xe_mmio' (Matt Roper)
- drm/xe: Populate GT's mmio iomap from tile during init (Matt Roper)
- drm/xe: Move GSI offset adjustment fields into 'struct xe_mmio' (Matt Roper)
- drm/xe: Clarify size of MMIO region (Matt Roper)
- drm/xe: Create dedicated xe_mmio structure (Matt Roper)
- drm/xe: Move forcewake to 'gt.pm' substructure (Matt Roper)
- s390/kexec: Make KEXEC_SIG available when CONFIG_MODULES=n (Alexander Egorenkov)
- spi: wpcm-fiu: Fix potential NULL pointer dereference in wpcm_fiu_probe() (Felix Gu)
- drm/amd/display: Fix out-of-bounds stream encoder index v3 (Srinivasan Shanmugam)
- drm/amd/display: Reject cursor plane on DCE when scaled differently than primary (Timur Krist?f)
- drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (Srinivasan Shanmugam)
- ASoC: codecs: aw88261: Fix erroneous bitmask logic in Awinic init (Alexandre Ferrieux)
- drm/i915/acpi: free _DSM package when no connectors (Kaushlendra Kumar)
- ASoC: fsl_xcvr: Revert fix missing lock in fsl_xcvr_mode_put() (Ziyi Guo)
- drm/amdgpu: Fix memory leak in amdgpu_ras_init() (Zilin Guan)
- drm/amdgpu: Use kvfree instead of kfree in amdgpu_gmc_get_nps_memranges() (Zilin Guan)
- drm/amdgpu: Fix memory leak in amdgpu_acpi_enumerate_xcc() (Zilin Guan)
- apparmor: fix aa_label to return state from compount and component match (John Johansen)
- apparmor: fix invalid deref of rawdata when export_binary is unset (Georgia Garcia)
- apparmor: avoid per-cpu hold underflow in aa_get_buffer (Zhengmian Hu)
- apparmor: make label_match return a consistent value (John Johansen)
- apparmor: remove apply_modes_to_perms from label_match (John Johansen)
- apparmor: fix rlimit for posix cpu timers (John Johansen)
- apparmor: return -ENOMEM in unpack_perms_table upon alloc failure (Ryan Lee)
- apparmor: Fix & Optimize table creation from possibly unaligned memory (Helge Deller)
- AppArmor: Allow apparmor to handle unaligned dfa tables (Helge Deller)
- apparmor: fix NULL sock in aa_sock_file_perm (John Johansen)
- net/mlx5e: Use unsigned for mlx5e_get_max_num_channels (Cosmin Ratiu)
- net/mlx5: Fix multiport device check over light SFs (Shay Drory)
- bonding: alb: fix UAF in rlb_arp_recv during bond up/down (Hangbin Liu)
- octeontx2-af: Fix default entries mcam entry action (Hariprasad Kelam)
- icmp: prevent possible overflow in icmp_global_allow() (Eric Dumazet)
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Eric Dumazet) [Orabug: 39110677] {CVE-2026-23273}
- ping: annotate data-races in ping_lookup() (Eric Dumazet)
- bpftool: Fix truncated netlink dumps (Jakub Kicinski)
- ipv6: fix a race in ip6_sock_set_v6only() (Eric Dumazet)
- net: remove WARN_ON_ONCE when accessing forward path array (Pablo Neira Ayuso)
- ipvs: do not keep dest_dst if dev is going down (Julian Anastasov)
- netfilter: nf_conntrack_h323: don't pass uninitialised l3num value (Florian Westphal)
- selftests: forwarding: vxlan_bridge_1d_ipv6: fix test failure with br_netfilter enabled (Aleksei Oladko)
- selftests: forwarding: vxlan_bridge_1d: fix test failure with br_netfilter enabled (Aleksei Oladko)
- net: bridge: mcast: always update mdb_n_entries for vlan contexts (Nikolay Aleksandrov)
- xen-netback: reject zero-queue configuration from guest (Ziyi Guo)
- net: usb: catc: enable basic endpoint checking (Ziyi Guo)
- net: sparx5/lan969x: fix PTP clock max_adj value (Daniel Machon)
- ipv6: Fix out-of-bound access in fib6_add_rt2node(). (Kuniyuki Iwashima)
- net: mscc: ocelot: add missing lock protection in ocelot_port_xmit_inj() (Ziyi Guo)
- net: mscc: ocelot: split xmit into FDMA and register injection paths (Ziyi Guo)
- net: mscc: ocelot: extract ocelot_xmit_timestamp() helper (Ziyi Guo)
- net: sparx5/lan969x: fix DWRR cost max to match hardware register width (Daniel Machon)
- selftests: mlxsw: tc_restrictions: Fix test failure with new iproute2 (Ido Schimmel)
- cpuidle: Skip governor when only one idle state is available (Aboorva Devarajan)
- ACPI: PM: Add unused power resource quirk for THUNDEROBOT ZERO (Zhai Can)
- objpool: fix the overestimation of object pooling metadata size (Zhouwenhao)
- selftests/memfd: use IPC semaphore instead of SIGSTOP/SIGCONT (Aristeu Rozanski)
- kbuild: Add objtool to top-level clean target (Josh Poimboeuf)
- powercap: intel_rapl_tpmi: Remove FW_BUG from invalid version check (Kuppuswamy Sathyanarayanan)
- ACPI: CPPC: Fix remaining for_each_possible_cpu() to use online CPUs (Sean V Kelley)
- fs/ntfs3: Fix slab-out-of-bounds read in DeleteIndexEntryRoot (Jiasheng Jiang)
- fs/ntfs3: prevent infinite loops caused by the next valid being the same (Edward Adam Davis)
- fs/ntfs3: Initialize new folios before use (Bartlomiej Kubik)
- io_uring/cancel: de-unionize file and user_data in struct io_cancel_data (Jens Axboe)
- drbd: always set BLK_FEAT_STABLE_WRITES (Christoph B?hmwalder)
- dmaengine: fsl-edma: don't explicitly disable clocks in .remove() (Jared Kangas)
- backlight: qcom-wled: Change PM8950 WLED configurations (Barnab?s Cz?m?n)
- backlight: qcom-wled: Support ovp values for PMI8994 (Barnab?s Cz?m?n)
- leds: qcom-lpg: Check the return value of regmap_bulk_write() (Xu Wang)
- pinctrl: single: fix refcount leak in pcs_add_gpio_func() (Wei Li)
- pinctrl: qcom: sm8250-lpass-lpi: Fix i2s2_data_groups definition (Luca Weiss)
- iio: sca3000: Fix a resource leak in sca3000_probe() (Harshit Mogalapalli)
- ovl: Fix uninit-value in ovl_fill_real (Qing Wang)
- pinctrl: equilibrium: Fix device node reference leak in pinbank_init() (Felix Gu)
- usb: bdc: fix sleep during atomic (Justin Chen)
- drivers: iio: mpu3050: use dev_err_probe for regulator request (Svyatoslav Ryhel)
- mfd: simple-mfd-i2c: Add Delta TN48M CPLD support (Robert Marko)
- mfd: simple-mfd-i2c: Keep compatible strings in alphabetical order (Ioana Ciornei)
- mfd: simple-mfd-i2c: Add SpacemiT P1 support (Alex Elder)
- mfd: simple-mfd-i2c: Add compatible strings for Layerscape QIXIS FPGA (Ioana Ciornei)
- mfd: simple-mfd-i2c: Add MAX77705 support (Dzmitry Sankouski)
- mfd: arizona: Fix regulator resource leak on wm5102_clear_write_sequencer() failure (Xu Wang)
- Revert "mmc: rtsx_pci_sdmmc: increase power-on settling delay to 5ms" (Greg Kroah-Hartman)
- phy: freescale: imx8qm-hsio: fix NULL pointer dereference (Thomas Richard)
- coresight: etm3x: Fix cpulocked warning on cpuhp (Antonio Borneo)
- watchdog: starfive-wdt: Fix PM reference leak in probe error path (Kery Qi)
- iio: pressure: mprls0025pa: fix pressure calculation (Petre Rodan)
- iio: pressure: mprls0025pa: fix scan_type struct (Petre Rodan)
- iio: pressure: mprls0025pa: fix interrupt flag (Petre Rodan)
- iio: pressure: mprls0025pa: fix SPI CS delay violation (Petre Rodan)
- iio: pressure: mprls0025pa: fix spi_transfer struct initialisation (Petre Rodan)
- mmc: rtsx_pci_sdmmc: increase power-on settling delay to 5ms (Matthew Schwartz)
- serial: SH_SCI: improve "DMA support" prompt (Randy Dunlap)
- serial: imx: change SERIAL_IMX_CONSOLE to bool (Randy Dunlap)
- staging: greybus: lights: avoid NULL deref (Chaitanya Mishra)
- iio: test: drop dangling symbol in gain-time-scale helpers (Randy Dunlap)
- soundwire: intel_ace2x: add SND_HDA_CORE dependency (Arnd Bergmann)
- dma: dma-axi-dmac: fix HW scatter-gather not looking at the queue (Nuno Sa)
- dma: dma-axi-dmac: fix SW cyclic transfers (Nuno Sa)
- dmaengine: mediatek: uart-apdma: Fix above 4G addressing TX/RX (AngeloGioacchino Del Regno)
- interconnect: mediatek: Aggregate bandwidth with saturating add (Nicolas Frattaroli)
- interconnect: mediatek: Don't hijack parent device (Nicolas Frattaroli)
- clk: mediatek: Fix error handling in runtime PM setup (Xu Wang)
- clk: qcom: gfx3d: add parent to parent request map (Dmitry Baryshkov)
- clk: qcom: dispcc-sm7150: Fix dispcc_mdss_pclk1_clk_src (David Heidelberger)
- clk: qcom: dispcc-sdm845: Enable parents for pixel clocks (Petr Hodina)
- clk: Move clk_{save,restore}_context() to COMMON_CLK section (Geert Uytterhoeven)
- clk: qcom: gcc-ipq5018: flag sleep clock as critical (George Moussalem)
- clk: qcom: gcc-msm8917: Remove ALWAYS_ON flag from cpp_gdsc (Barnab?s Cz?m?n)
- clk: qcom: gcc-msm8953: Remove ALWAYS_ON flag from cpp_gdsc (Barnab?s Cz?m?n)
- clk: qcom: gcc-qdu1000: Update the SDCC RCGs to use shared_floor_ops (Jagadeesh Kona)
- clk: qcom: gcc-x1e80100: Update the SDCC RCGs to use shared_floor_ops (Jagadeesh Kona)
- clk: qcom: gcc-sdx75: Update the SDCC RCGs to use shared_floor_ops (Jagadeesh Kona)
- clk: qcom: gcc-sm4450: Update the SDCC RCGs to use shared_floor_ops (Jagadeesh Kona)
- clk: qcom: gcc-sm8450: Update the SDCC RCGs to use shared_floor_ops (Jagadeesh Kona)
- clk: meson: gxbb: Limit the HDMI PLL OD to /4 on GXL/GXM SoCs (Martin Blumenstingl)
- clk: qcom: rcg2: compute 2d using duty fraction directly (Taniya Das)
- clk: qcom: gcc-sm8650: Use floor ops for SDCC RCGs (Vladimir Zapolskiy)
- clk: qcom: gcc-sm8550: Use floor ops for SDCC RCGs (Vladimir Zapolskiy)
- fbdev: au1200fb: Fix a memory leak in au1200fb_drv_probe() (Felix Gu)
- fbdev: of_display_timing: Fix device node reference leak in of_get_display_timings() (Felix Gu)
- tracing: Remove duplicate ENABLE_EVENT_STR and DISABLE_EVENT_STR macros (Steven Rostedt)
- tracing: Properly process error handling in event_hist_trigger_parse() (Miaoqian Lin)
- fs/nfs: Fix readdir slow-start regression (Sagi Grimberg)
- nvdimm: virtio_pmem: serialize flush requests (Li Chen)
- scsi: csiostor: Fix dereference of null pointer rn (Colin Ian King)
- scsi: ufs: host: mediatek: Require CONFIG_PM (Arnd Bergmann)
- scsi: smartpqi: Fix memory leak in pqi_report_phys_luns() (Zilin Guan)
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia)
- RDMA/uverbs: Add __GFP_NOWARN to ib_uverbs_unmarshall_recv() kmalloc (Liuyi)
- power: supply: qcom_battmgr: Recognize "LiP" as lithium-polymer (Val Packett)
- power: supply: pm8916_lbc: Fix use-after-free for extcon in IRQ handler (Waqar Hameed)
- mtd: spinand: Fix kernel doc (Miquel Raynal)
- mtd: parsers: ofpart: fix OF node refcount leak in parse_fixed_partitions() (Weigang He)
- cxl: Fix premature commit_end increment on decoder commit failure (Yuxiong Wang)
- RDMA/core: add rdma_rw_max_sge() helper for SQ sizing (Chuck Lever)
- RDMA/rxe: Fix race condition in QP timer handlers (Li Zhijian)
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Zilin Guan)
- RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (Liuyi)
- NFS/localio: use GFP_NOIO and non-memreclaim workqueue in nfs_local_commit (Mike Snitzer)
- nfs/localio: eliminate unnecessary kref in nfs_local_fsync_ctx (Mike Snitzer)
- mtd: parsers: Fix memory leak in mtd_parser_tplink_safeloader_parse() (Zilin Guan)
- crypto: ccp - Send PSP_CMD_TEE_RING_DESTROY when PSP_CMD_TEE_RING_INIT fails (Mario Limonciello)
- crypto: ccp - Factor out ring destroy handling to a helper (Mario Limonciello)
- crypto: ccp - Add an S4 restore flow (Mario Limonciello)
- crypto: ccp - Declare PSP dead if PSP_CMD_TEE_RING_INIT fails (Mario Limonciello)
- platform/x86/amd/pmf: Prevent TEE errors after hibernate (Shyam Sundar S K)
- vfio/pci: Lock upstream bridge for vfio_pci_core_disable() (Anthony Pighin)
- mtd: rawnand: cadence: Fix return type of CDMA send-and-wait helper (Alok Tiwari)
- IB/mlx5: Fix port speed query for representors (Or Har-Toov)
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Chiara Meiohas)
- tools/power/x86/intel-speed-select: Fix file descriptor leak in isolate_cpus() (Malaya Kumar Rout)
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (Jacob Moroni)
- RDMA/rxe: Fix double free in rxe_srq_from_init (Jiasheng Jiang)
- RDMA/rtrs-srv: fix SG mapping (Roman Pen)
- power: supply: wm97xx: Fix NULL pointer dereference in power_supply_changed() (Waqar Hameed)
- power: supply: bq27xxx: fix wrong errno when bus ops are unsupported (Xu Wang)
- power: reset: nvmem-reboot-mode: respect cell size for nvmem_cell_write (Alexander Koskovich)
- power: supply: sbs-battery: Fix use-after-free in power_supply_changed() (Waqar Hameed)
- power: supply: rt9455: Fix use-after-free in power_supply_changed() (Waqar Hameed)
- power: supply: pm8916_lbc: Fix use-after-free in power_supply_changed() (Waqar Hameed)
- power: supply: pm8916_bms_vm: Fix use-after-free in power_supply_changed() (Waqar Hameed)
- power: supply: goldfish: Fix use-after-free in power_supply_changed() (Waqar Hameed)
- power: supply: cpcap-battery: Fix use-after-free in power_supply_changed() (Waqar Hameed)
- power: supply: bq25980: Fix use-after-free in power_supply_changed() (Waqar Hameed)
- power: supply: bq256xx: Fix use-after-free in power_supply_changed() (Waqar Hameed)
- power: supply: act8945a: Fix use-after-free in power_supply_changed() (Waqar Hameed)
- power: supply: ab8500: Fix use-after-free in power_supply_changed() (Waqar Hameed)
- RDMA/hns: Notify ULP of remaining soft-WCs during reset (Chengchang Tang)
- RDMA/hns: Fix RoCEv1 failure due to DSCP (Junxian Huang)
- RDMA/hns: Fix WQ_MEM_RECLAIM warning (Chengchang Tang)
- IB/cache: update gid cache on client reregister event (Etienne Aujames)
- RDMA/rtrs: server: remove dead code (Lihonggang)
- octeontx2-pf: Unregister devlink on probe failure (Hariprasad Kelam)
- octeon_ep_vf: ensure dbell BADDR updation (Vimlesh Kumar)
- octeon_ep: ensure dbell BADDR updation (Vimlesh Kumar)
- octeon_ep: disable per ring interrupts (Vimlesh Kumar)
- serial: caif: fix use-after-free in caif_serial ldisc_close() (Jiayuan Chen)
- xfrm: fix ip_rt_bug race in icmp_route_lookup reverse path (Jiayuan Chen)
- net: Switch to skb_dstref_steal/skb_dstref_restore for ip_route_input callers (Stanislav Fomichev)
- net: Add skb_dstref_steal and skb_dstref_restore (Stanislav Fomichev)
- net: sunhme: Fix sbus regression (Ren? Rebe)
- net: atm: fix crash due to unvalidated vcc pointer in sigd_send() (Jiayuan Chen) [Orabug: 39188476] {CVE-2026-31411}
- smb: client: correct value for smbd_max_fragmented_recv_size (Stefan Metzmacher)
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (Jinliang Zheng)
- net: hns3: fix double free issue for tx spare buffer (Jian Shen)
- PCI: Add ACS quirk for Pericom PI7C9X2G404 switches [12d8:b404] (Nicolas Cavallari)
- netfilter: nft_set_rbtree: check for partial overlaps in anonymous sets (Pablo Neira Ayuso)
- netfilter: nft_set_rbtree: fix bogus EEXIST with NLM_F_CREATE with null interval (Pablo Neira Ayuso)
- netfilter: nft_counter: fix reset of counters on 32bit archs (Anders Grahn)
- netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal)
- netfilter: nfnetlink_queue: do shared-unconfirmed check before segmentation (Florian Westphal)
- netfilter: nfnetlink_queue: optimize verdict lookup with hash table (Scott Mitchell)
- nfc: hci: shdlc: Stop timers and work before freeing context (Victoria Votokina)
- inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Eric Dumazet)
- bonding: only set speed/duplex to unknown, if getting speed failed (Thomas Bogendoerfer)
- mptcp: fix receive space timestamp initialization (Paolo Abeni)
- of: unittest: fix possible null-pointer dereferences in of_unittest_property_copy() (Tuo Li)
- ucount: check for CAP_SYS_RESOURCE using ns_capable_noaudit() (Ondrej Mosnacek)
- ipc: don't audit capability check in ipc_permissions() (Ondrej Mosnacek)
- selftests/mm: convert page_size to unsigned long (Siddarth G)
- selftests/mm: pagemap_ioctl: Fix types mismatches shown by compiler options (Muhammad Usama Anjum)
- PCI/ACPI: Restrict program_hpx_type2() to AER bits (H?kon Bugge)
- PCI: Add defines for bridge window indexing (Ilpo J?rvinen)
- PCI: Initialize RCB from pci_configure_device() (H?kon Bugge)
- wifi: ath10k: sdio: add missing lock protection in ath10k_sdio_fw_crashed_dump() (Ziyi Guo)
- PCI: Check parent for NULL in of_pci_bus_release_domain_nr() (Sergey Shtylyov)
- tcp: tcp_tx_timestamp() must look at the rtx queue (Eric Dumazet)
- fat: avoid parent link count underflow in rmdir (Zhiyu Zhang)
- nfsd: never defer requests during idmap lookup (Anthony Iliopoulos)
- xdrgen: Initialize data pointer for zero-length items (Chuck Lever)
- NFS: NFSERR_INVAL is not defined by NFSv2 (Chuck Lever)
- xdrgen: Fix struct prefix for typedef types in program wrappers (Chuck Lever)
- dm: use bio_clone_blkg_association (Mikulas Patocka)
- iommu/vt-d: Clear Present bit before tearing down PASID entry (Lu Baolu)
- iommu/vt-d: Avoid draining PRQ in sva mm release path (Lu Baolu)
- iommu/vt-d: Drain PRQs when domain removed from RID (Lu Baolu)
- iommu/vt-d: Separate page request queue from SVM (Joel Granados)
- iommu/vt-d: Flush cache for PASID table before using it (Dmytro Maluka)
- PCI: Mark 3ware-9650SA Root Port Extended Tags as broken (J?rg Wedekind)
- kallsyms/ftrace: set module buildid in ftrace_mod_address_lookup() (Petr Mladek)
- module: add helper function for reading module_buildid() (Petr Mladek)
- netfilter: nf_conncount: fix tracking of connections from localhost (Fernando Fernandez Mancera)
- netfilter: nft_compat: add more restrictions on netlink attributes (Florian Westphal)
- netfilter: nf_conncount: increase the connection clean up limit to 64 (Fernando Fernandez Mancera)
- netfilter: nf_conncount: make nf_conncount_gc_list() to disable BH (Fernando Fernandez Mancera)
- netfilter: nf_tables: reset table validation state on abort (Florian Westphal)
- wifi: cfg80211: stop NAN and P2P in cfg80211_leave (Miri Korenblit)
- mctp i2c: initialise event handler read bytes (Matt Johnston)
- net: mctp-i2c: fix duplicate reception of old data (Jian Zhang)
- quota: fix livelock between quotactl and freeze_super (Abhishek Bapat)
- dm: use READ_ONCE in dm_blk_report_zones (Mikulas Patocka)
- dm: fix unlocked test for dm_suspended_md (Mikulas Patocka)
- PCI/portdrv: Fix potential resource leak (Uwe Kleine-K?nig)
- PCI: Do not attempt to set ExtTag for VFs (H?kon Bugge)
- Documentation: tracing: Add PCI tracepoint documentation (Shuai Xue)
- Documentation: trace: Refactor toctree (Purva Yeshi)
- docs: fix WARNING document not included in any toctree (Surajsonawane2415)
- PCI/P2PDMA: Release per-CPU pgmap ref when vm_insert_page() fails (Hou Tao)
- wifi: cfg80211: Fix use_for flag update on BSS refresh (Huang Chenming)
- PCI/PM: Avoid redundant delays on D3hot->D3cold (Brian Norris)
- Documentation: PCI: endpoint: Fix ntb/vntb copy & paste errors (Baruch Siach)
- PCI: mediatek: Fix IRQ domain leak when MSI allocation fails (Xu Wang)
- hwmon: (pmbus/mpq8785) fix VOUT_MODE mismatch during identification (Carl Lee)
- hwmon: pmbus: mpq8785: Add support for MPM82504 (Pawel Dembicki)
- hwmon: pmbus: mpq8785: Implement VOUT feedback resistor divider ratio configuration (Pawel Dembicki)
- hwmon: pmbus: mpq8785: Prepare driver for multiple device support (Pawel Dembicki)
- Revert "hwmon: (ibmpex) fix use-after-free in high/low store" (Guenter Roeck)
- spi: tools: Add include folder to .gitignore (Francesco Lavra)
- HID: intel-ish-hid: fix NULL-ptr-deref in ishtp_bus_remove_all_clients (Ryan Lin)
- platform/chrome: cros_ec_lightbar: Fix response size initialization (Tzung-Bi Shih)
- drm/xe: Unregister drm device on probe error (Shuicheng Lin)
- evm: Use ordered xattrs list to calculate HMAC in evm_init_hmac() (Roberto Sassu)
- media: uvcvideo: Fix allocation for small frame sizes (Ricardo Ribalda)
- platform/chrome: cros_typec_switch: Don't touch struct fwnode_handle::dev (Andy Shevchenko)
- drm/buddy: release free_trees array on buddy mm teardown (Micha? Grzelak)
- drm/msm/a2xx: fix pixel shader start on A225 (Dmitry Baryshkov)
- media: ccs: Accommodate C-PHY into the calculation (David Heidelberger)
- drm/msm/dpu: fix CMD panels on DPU 1.x - 3.x (Dmitry Baryshkov)
- drm/msm/disp: set num_planes to 1 for interleaved YUV formats (Dmitry Baryshkov)
- HID: playstation: Add missing check for input_ff_create_memless (Xu Wang)
- regulator: core: move supply check earlier in set_machine_constraints() (Andr? Draszik)
- drm/msm/dpu: fix WD timer handling on DPU 8.x (Dmitry Baryshkov)
- drm/msm/dpu: Set vsync source irrespective of mdp top support (Teguh Sobirin)
- drm/msm/disp/dpu: add merge3d support for sc7280 (Mahadevan P)
- drm/amdgpu: Use explicit VCN instance 0 in SR-IOV init (Srinivasan Shanmugam)
- drm/amdkfd: Fix signal_eviction_fence() bool return value (Srinivasan Shanmugam)
- drm/amd: Drop "amdgpu kernel modesetting enabled" message (Mario Limonciello)
- media: chips-media: wave5: Fix memory leak on codec_info allocation failure (Zilin Guan)
- ASoC: nau8821: Fixup nau8821_enable_jack_detect() (Cristian Ciocaltea)
- ASoC: nau8821: Avoid unnecessary blocking in IRQ handler (Cristian Ciocaltea)
- ASoC: nau8821: Consistently clear interrupts before unmasking (Cristian Ciocaltea)
- smack: /smack/doi: accept previously used values (Konstantin Andreev)
- smack: /smack/doi must be > 0 (Konstantin Andreev)
- drm/panthor: Evict groups before VM termination (Ketil Johnsen)
- ALSA: vmaster: Relax __free() variable declarations (Takashi Iwai)
- ALSA: pcm: Relax __free() variable declarations (Takashi Iwai)
- ALSA: pcm: use new array-copying-wrapper (Chenyuan Yang)
- drm/panel: sw43408: Remove manual invocation of unprepare at remove (David Heidelberger)
- workqueue: Process rescuer work items one-by-one using a cursor (Lai Jiangshan)
- workqueue: Only assign rescuer work when really needed (Lai Jiangshan)
- workqueue: Factor out assign_rescuer_work() (Lai Jiangshan)
- drm/panthor: Make sure we resume the tick when new jobs are submitted (Boris Brezillon)
- drm/panthor: Fix the logic that decides when to stop ticking (Boris Brezillon)
- drm/panthor: Fix immediate ticking on a disabled tick (Boris Brezillon)
- drm/panthor: Fix the group priority rotation logic (Boris Brezillon)
- drm/panthor: Fix the full_tick check (Boris Brezillon)
- drm/panthor: Recover from panthor_gpu_flush_caches() failures (Boris Brezillon)
- arm64: dts: qcom: sm6115: Add CX_MEM/DBGC GPU regions (Konrad Dybcio)
- arm64: dts: qcom: agatti: Add CX_MEM/DBGC GPU regions (Konrad Dybcio)
- arm64: dts: qcom: x1e: bus is 40-bits (fix 64GB models) (Jonathan Marek)
- arm64: dts: qcom: sdm845-db845c: specify power for WiFi CH1 (Dmitry Baryshkov)
- arm64: dts: qcom: sdm845-db845c: drop CS from SPIO0 (Dmitry Baryshkov)
- arm64: dts: qcom: qrb4210-rb2: Fix UART3 wakeup IRQ storm (Dmitry Baryshkov)
- arm64: dts: amlogic: g12: assign the MMC A signal clock (Jerome Brunet)
- arm64: dts: amlogic: g12: assign the MMC B and C signal clocks (Jerome Brunet)
- arm64: dts: amlogic: gx: assign the MMC signal clocks (Jerome Brunet)
- arm64: dts: amlogic: axg: assign the MMC signal clocks (Jerome Brunet)
- arm64: dts: amlogic: c3: assign the MMC signal clocks (Jerome Brunet)
- hwspinlock: omap: Handle devm_pm_runtime_enable() errors (Xu Wang)
- arm64: dts: ti: k3-j784s4-j742s2-main-common.dtsi: Refactor watchdog instances for j784s4 (Abhash Kumar Jha)
- arm64: dts: ti: k3-j784s4-main.dtsi: Move c71_3 node to appropriate order (Abhash Kumar Jha)
- arm64: dts: amlogic: s4: fix mmc clock assignment (Jerome Brunet)
- arm64: dts: amlogic: s4: assign mmc b clock to 24MHz (Jerome Brunet)
- arm64: dts: mediatek: mt8183-jacuzzi-pico6: Fix typo in pinmux node (AngeloGioacchino Del Regno)
- arm: dts: lpc32xx: add clocks property to Motor Control PWM device tree node (Vladimir Zapolskiy)
- ARM: dts: lpc32xx: Set motor PWM #pwm-cells property value to 3 cells (Vladimir Zapolskiy)
- powerpc/eeh: fix recursive pci_lock_rescan_remove locking in EEH event handling (Narayana Murty N)
- soc: mediatek: svs: Fix memory leak in svs_enable_debug_write() (Zilin Guan)
- soc: qcom: cmd-db: Use devm_memremap() to fix memory leak in cmd_db_dev_probe (Xu Wang)
- powerpc/uaccess: Move barrier_nospec() out of allow_read_{from/write}_user() (Christophe Leroy)
- ARM: dts: allwinner: sun5i-a13-utoo-p66: delete "power-gpios" property (Chen-Yu Tsai)
- arm64: dts: qcom: msm8994-octagon: Fix Analog Devices vendor prefix of AD7147 (Vladimir Zapolskiy)
- arm64: dts: qcom: x1e80100: Fix USB combo PHYs SS1 and SS2 ref clocks (Abel Vesa)
- arm64: dts: qcom: sdm845-oneplus: Mark l14a regulator as boot-on (Casey Connolly)
- arm64: dts: qcom: sdm845-oneplus: Don't mark ts supply boot-on (Casey Connolly)
- arm64: dts: qcom: sdm630: fix gpu_speed_bin size (Dmitry Baryshkov)
- clk: qcom: Return correct error code in qcom_cc_probe_by_index() (Xu Wang)
- arm64: dts: tqma8mpql-mba8mp-ras314: Fix HDMI CEC pad control settings (Alexander Stein)
- arm64: dts: tqma8mpql-mba8mpxl: Fix HDMI CEC pad control settings (Alexander Stein)
- firmware: arm_ffa: Correct 32-bit response handling in NOTIFICATION_INFO_GET (Sudeep Holla)
- EDAC/i5400: Fix snprintf() limit calculation in calculate_dimm_size() (Dan Carpenter)
- EDAC/i5000: Fix snprintf() size calculation in calculate_dimm_size() (Dan Carpenter)
- soc: qcom: smem: handle ENOMEM error during probe (Jorge Ramirez-Ortiz)
- pstore/ram: fix buffer overflow in persistent_ram_save_old() (Pwnverse)
- hwrng: core - use RCU and work_struct to fix race condition (Lianjie Wang)
- hwrng: core - Allow runtime disabling of the HW RNG (Jonathan Mcdowell)
- crypto: starfive - Fix memory leak in starfive_aes_aead_do_one_req() (Zilin Guan)
- fs/tests: exec: drop duplicate bprm_stack_limits test vectors (Titouan Ameline de Cadeville)
- sched/rt: Skip currently executing CPU in rto_next_cpu() (Chen Jinghuang)
- sched/deadline: Clear the defer params (Joel Fernandes)
- media: pci: mg4b: Use IRQF_NO_THREAD (Sebastian Andrzej Siewior)
- mfd: wm8350-core: Use IRQF_ONESHOT (Sebastian Andrzej Siewior)
- EDAC/altera: Remove IRQF_ONESHOT (Sebastian Andrzej Siewior)
- scsi: efct: Use IRQF_ONESHOT and default primary handler (Sebastian Andrzej Siewior)
- Bluetooth: btintel_pcie: Use IRQF_ONESHOT and default primary handler (Sebastian Andrzej Siewior)
- platform/x86: int0002: Remove IRQF_ONESHOT from request_irq() (Sebastian Andrzej Siewior)
- genirq: Set IRQF_COND_ONESHOT in devm_request_irq(). (Sebastian Andrzej Siewior)
- bpf: Fix bpf_xdp_store_bytes proto for read-only arg (Paul Chaignon)
- crypto: caam - fix netdev memory leak in dpaa2_caam_probe (Jianpeng Chang)
- crypto: hisilicon/trng - support tfms sharing the device (Weili Qian)
- x86/fgraph,bpf: Switch kprobe_multi program stack unwind to hw_regs path (Jiri Olsa)
- x86/fgraph,bpf: Fix stack ORC unwind from kprobe_multi return probe (Jiri Olsa)
- tracing: Add ftrace_fill_perf_regs() for perf event (Masami Hiramatsu)
- tracing: Add ftrace_partial_regs() for converting ftrace_regs to pt_regs (Masami Hiramatsu)
- fgraph: Replace fgraph_ret_regs with ftrace_regs (Masami Hiramatsu)
- ftrace: Rename ftrace_regs_return_value to ftrace_regs_get_return_value (Masami Hiramatsu)
- ftrace: Use arch_ftrace_regs() for ftrace_regs_*() macros (Masami Hiramatsu)
- ftrace: Consolidate ftrace_regs accessor functions for archs using pt_regs (Steven Rostedt)
- ftrace: Make ftrace_regs abstract from direct use (Steven Rostedt)
- tracing: Add a comment about ftrace_regs definition (Masami Hiramatsu)
- bpf, sockmap: Fix FIONREAD for sockmap (Jiayuan Chen)
- bpf, sockmap: Fix incorrect copied_seq calculation (Jiayuan Chen)
- crypto: ccp - narrow scope of snp_range_list (Tycho Andersen)
- crypto: ccp - Ensure implicit SEV/SNP init and shutdown in ioctls (Ashish Kalra)
- hrtimer: Fix trace oddity (Thomas Gleixner)
- selftests/bpf: Fix resource leak in serial_test_wq on attach failure (Kery Qi)
- bpf: Preserve id of register in sync_linked_regs() (Puranjay Mohan)
- crypto: hisilicon/sec2 - support skcipher/aead fallback for hardware queue unavailable (Qi Tao)
- crypto: hisilicon/zip - adjust the way to obtain the req in the callback function (Chenghai Huang)
- crypto: octeontx - fix dma_free_coherent() size (Thomas Fourier)
- crypto: cavium - fix dma_free_coherent() size (Thomas Fourier)
- ARM: VDSO: Patch out __vdso_clock_getres() if unavailable (Thomas Wei?schuh)
- libbpf: Fix OOB read in btf_dump_get_bitfield_value (Varun R Mallya)
- selftests/bpf: veristat: fix printing order in output_stats() (Puranjay Mohan)
- crypto: qat - fix warning on adf_pfvf_pf_proto.c (Giovanni Cabiddu)
- perf/x86/core: Do not set bit width for unavailable counters (Sandipan Das)
- s390/cio: Fix device lifecycle handling in css_alloc_subchannel() (Salah Triki)
- PM: sleep: wakeirq: harden dev_pm_clear_wake_irq() against races (Gui-Dong Han)
- cpufreq: intel_pstate: Enable asym capacity only when CPU SMT is not possible (Yaxiong Tian)
- perf: arm_spe: Properly set hw.state on failures (Leo Yan)
- PM: wakeup: Handle empty list in wakeup_sources_walk_start() (Sam Wu)
- md/raid1: fix memory leak in raid1_run() (Zilin Guan)
- md/raid1: fix memory leak in raid1_run() if no active rdev (Zheng Qixing)
- Partial revert "x86/xen: fix balloon target initialization for PVH dom0" (Roger Pau Monn?)
- ublk: Validate SQE128 flag before accessing the cmd (Govindarajulu Varadarajan)
- thermal/of: Fix reference leak in thermal_of_cm_lookup() (Felix Gu)
- iomap: fix submission side handling of completion side errors (Christoph Hellwig)
- cpufreq: scmi: Fix device_node reference leak in scmi_cpu_domain_id() (Felix Gu)
- OPP: Return correct value in dev_pm_opp_get_level (Aleks Todorov)
- md/raid10: fix any_working flag handling in raid10_sync_request (Li Nan)
- md/raid5: fix raid5_run() to return error when log_init() fails (Yu Kuai)
- thermal: intel: x86_pkg_temp_thermal: Handle invalid temperature (Rafael J. Wysocki)
- cpuidle: governors: menu: Always check timers with tick stopped (Rafael J. Wysocki)
- io_uring/sync: validate passed in offset (Jens Axboe)
- ACPICA: Fix NULL pointer dereference in acpi_ev_address_space_dispatch() (Alexey Simakov)
- io_uring: use release-acquire ordering for IORING_SETUP_R_DISABLED (Caleb Sander)
- xen/virtio: Don't use grant-dma-ops when running as Dom0 (Teddy Astie)
- rnbd-srv: Fix server side setting of bi_size for special IOs (Florian-Ewald Mueller)
- rnbd-srv: use bio_add_virt_nofail (Christoph Hellwig)
- block: add a bio_add_virt_nofail helper (Christoph Hellwig)
- smb: client: fix potential UAF and double free in smb2_open_file() (Paulo Alcantara)
- btrfs: fix block_group_tree dirty_list corruption (Boris Burkov)
- btrfs: qgroup: return correct error when deleting qgroup relation item (Filipe Manana)
- erofs: handle end of filesystem properly for file-backed mounts (Gao Xiang)
- erofs: get rid of raw bi_end_io() usage (Gao Xiang)
- tpm: st33zp24: Fix missing cleanup on get_burstcount() error (Alper Ak)
- tpm: tpm_i2c_infineon: Fix locality leak on get_burstcount() failure (Alper Ak)
- i3c: dw: Fix memory leak in dw_i3c_master_i2c_xfers() (Zilin Guan)
- i3c: dw: Initialize spinlock to avoid upsetting lockdep (Fredrik Markstrom)
- gfs2: Fix use-after-free in iomap inline data write path (Deepanshu Kartikey)
- gfs2: Fix slab-use-after-free in qd_put (Andreas Gruenbacher)
- gfs2: Retries missing in gfs2_{rename,exchange} (Andreas Gruenbacher)
- i3c: master: Update hot-join flag only on success (Adrian Hunter)
for 'init_fs' (Ben Dooks)
- i3c: Move device name assignment after i3c_bus_init (Billy Tsai)
- audit: move the compat_xxx_class[] extern declarations to audit_arch.h (Ben Dooks)
- rcu: Fix rcu_read_unlock() deadloop due to softirq (Yao Kai)
- rcu: Remove local_irq_save/restore() in rcu_preempt_deferred_qs_handler() (Zqiang)
- rcu: Refactor expedited handling check in rcu_read_unlock_special() (Joel Fernandes)
- hfsplus: return error when node already exists in hfs_bnode_create (Shardul Bankar)
- auxdisplay: arm-charlcd: fix release_mem_region() size (Thomas Fourier)
- RDMA/umad: Reject negative data_len in ib_umad_write (Yunje Shin) [Orabug: 39103108] {CVE-2026-23243}
- RDMA/siw: Fix potential NULL pointer dereference in header processing (Yunje Shin)



From el-errata at oss.oracle.com  Mon Jun  8 17:58:43 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Mon, 08 Jun 2026 10:58:43 -0700
Subject: [El-errata] ELSA-2026-17618 Moderate: Oracle Linux 7 ImageMagick
 security update
Message-ID: <mailman.0.1780941552.18.el-errata@oss.oracle.com>

Oracle Linux Security Advisory ELSA-2026-17618

http://linux.oracle.com/errata/ELSA-2026-17618.html

The following updated rpms for Oracle Linux 7 have been uploaded to the Unbreakable Linux Network:

x86_64:
ImageMagick-6.9.10.68-7.0.11.el7_9.i686.rpm
ImageMagick-6.9.10.68-7.0.11.el7_9.x86_64.rpm
ImageMagick-c++-6.9.10.68-7.0.11.el7_9.i686.rpm
ImageMagick-c++-6.9.10.68-7.0.11.el7_9.x86_64.rpm
ImageMagick-c++-devel-6.9.10.68-7.0.11.el7_9.i686.rpm
ImageMagick-c++-devel-6.9.10.68-7.0.11.el7_9.x86_64.rpm
ImageMagick-devel-6.9.10.68-7.0.11.el7_9.i686.rpm
ImageMagick-devel-6.9.10.68-7.0.11.el7_9.x86_64.rpm
ImageMagick-doc-6.9.10.68-7.0.11.el7_9.x86_64.rpm
ImageMagick-perl-6.9.10.68-7.0.11.el7_9.x86_64.rpm


SRPMS:
http://oss.oracle.com/ol7/SRPMS-updates/ImageMagick-6.9.10.68-7.0.11.el7_9.src.rpm

Related CVEs:

CVE-2026-32636




Description of changes:

[6.9.10.68-7.0.11]
- Fix CVE-2026-32636 [Orabug: 39375225]

[6.9.10.68-7.0.9]
- Fix CVE-2026-28691 and CVE-2026-28693 [Orabug: 39174244]

[6.9.10.68-7.0.7]
- Fixes Local File Disclosure via Path Traversal (CVE-2026-25965) [Orabug: 39118995]
- Fixes Memory allocation with excessive without limits in the internal SVG decoder (CVE-2026-25985)

[6.9.10.68-7.0.5]
- Fix CVE-2025-62171 and CVE-2026-23876 [Orabug: 38997140]

[6.9.10.68-7.0.3]
- Security update CVE-2025-57803 [Orabug: 38455460]

[6.9.10.68-7.0.1]
- Fix for CVE-2025-55154 [Orabug: 38417011]



From el-errata at oss.oracle.com  Mon Jun  8 18:06:56 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Mon, 08 Jun 2026 11:06:56 -0700
Subject: [El-errata] ELBA-2026-50303 Oracle Linux 9  grub2  bug fix update
Message-ID: <mailman.1.1780942030.18.el-errata@oss.oracle.com>

Oracle Linux Bug Fix Advisory ELBA-2026-50303

http://linux.oracle.com/errata/ELBA-2026-50303.html

The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:

x86_64:
grub2-common-2.06-114.0.2.el9_7.2.noarch.rpm
grub2-efi-aa64-modules-2.06-114.0.2.el9_7.2.noarch.rpm
grub2-efi-x64-2.06-114.0.2.el9_7.2.x86_64.rpm
grub2-efi-x64-cdboot-2.06-114.0.2.el9_7.2.x86_64.rpm
grub2-efi-x64-modules-2.06-114.0.2.el9_7.2.noarch.rpm
grub2-pc-2.06-114.0.2.el9_7.2.x86_64.rpm
grub2-pc-modules-2.06-114.0.2.el9_7.2.noarch.rpm
grub2-tools-2.06-114.0.2.el9_7.2.x86_64.rpm
grub2-tools-efi-2.06-114.0.2.el9_7.2.x86_64.rpm
grub2-tools-extra-2.06-114.0.2.el9_7.2.x86_64.rpm
grub2-tools-minimal-2.06-114.0.2.el9_7.2.x86_64.rpm

aarch64:
grub2-common-2.06-114.0.2.el9_7.2.noarch.rpm
grub2-efi-aa64-2.06-114.0.2.el9_7.2.aarch64.rpm
grub2-efi-aa64-cdboot-2.06-114.0.2.el9_7.2.aarch64.rpm
grub2-efi-aa64-modules-2.06-114.0.2.el9_7.2.noarch.rpm
grub2-efi-x64-modules-2.06-114.0.2.el9_7.2.noarch.rpm
grub2-tools-2.06-114.0.2.el9_7.2.aarch64.rpm
grub2-tools-extra-2.06-114.0.2.el9_7.2.aarch64.rpm
grub2-tools-minimal-2.06-114.0.2.el9_7.2.aarch64.rpm


SRPMS:
http://oss.oracle.com/ol9/SRPMS-updates/grub2-2.06-114.0.2.el9_7.2.src.rpm



Description of changes:

[2.06-114.0.2.el9_7.2]
- Fix code32_start for compatibility with older kernels [EVG-3643]

[2.06-114.0.1.el9_7.2]
- Update grub2 dependencies to match new Secure Boot certificate chain of trust [Orabug: 37766761]
- Fix typo in SBAT metadata [Orabug: 37693946]
- Allow installation of grub2 only with shim-aa64 that allows booting it [Orabug: 37693946]
- net/dns: Fix removal of DNS server [Orabug: 37539625]
- net/dns: Simplify error handling of recv_hook() function [Orabug: 37539625]
- net/dns: Add debugging messages in recv_hook() function [Orabug: 37539625]
- net/dns: Fix lookup error when no IPv6 is returned [Orabug: 37539625]
- efinet: close and reopen network card on failure [Orabug: 35126950], [Orabug: 37747175]
- efinet: Correct closing of SNP protocol [Orabug: 35126950], [Orabug: 37747175]
- Support setting custom kernels as default kernels [Orabug: 36043978]
- Bump SBAT metadata for grub to 3 [Orabug: 34872719]
- Fix CVE-2022-3775 [Orabug: 34871953]
- Enable signing for aarch64 EFI
- Fix signing certificate names
- Enable back btrfs grub module for EFI pre-built image [Orabug: 34360986]
- Replaced bugzilla.oracle.com references [Orabug: 34202300]
- Update provided certificate version to 202204 [JIRA: OLDIS-16371]
- Various coverity fixes [JIRA: OLDIS-16371]
- bump SBAT generation
- Update bug url [Orabug: 34202300]
- Revert provided certificate version back to 202102 [JIRA: OLDIS-16371]
- Update signing certificate [JIRA: OLDIS-16371]
- fix SBAT data [JIRA: OLDIS-16371]
- Update requires [JIRA: OLDIS-16371]
- Rebuild for SecureBoot signatures [Orabug: 33801813]
- Do not add shim and grub certificate deps for aarch64 packages [Orabug: 32670033]
- Update Oracle SBAT data [Orabug: 32670033]
- Use new signing certificate [Orabug: 32670033]
- honor /etc/sysconfig/kernel DEFAULTKERNEL setting for BLS [Orabug: 30643497]
- set EFIDIR as redhat for additional grub2 tools [Orabug: 29875597]
- Update upstream references [Orabug: 26388226]
- Insert Unbreakable Enterprise Kernel text into BLS config file [Orabug: 29417955]
- Put "with" in menuentry instead of "using" [Orabug: 18504756]
- Use different titles for UEK and RHCK kernels [Orabug: 18504756]

[2.06-114.2]
- kern/efi/mm: Change grub_efi_mm_add_regions() to keep track of map allocation size
- Resolves: #RHEL-155284

[2.06-114.1]
- Fixes CVE-2025-61662 Missing unregister call for gettext command may lead to use-after-free
- Resolves: #RHEL-141593



From el-errata at oss.oracle.com  Mon Jun  8 18:12:39 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Mon, 08 Jun 2026 11:12:39 -0700
Subject: [El-errata] ELSA-2026-24339 Important: Oracle Linux 8 bind security
 update
Message-ID: <mailman.2.1780942390.18.el-errata@oss.oracle.com>

Oracle Linux Security Advisory ELSA-2026-24339

http://linux.oracle.com/errata/ELSA-2026-24339.html

The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:

x86_64:
bind-9.11.36-16.el8_10.8.x86_64.rpm
bind-chroot-9.11.36-16.el8_10.8.x86_64.rpm
bind-devel-9.11.36-16.el8_10.8.i686.rpm
bind-devel-9.11.36-16.el8_10.8.x86_64.rpm
bind-export-devel-9.11.36-16.el8_10.8.i686.rpm
bind-export-devel-9.11.36-16.el8_10.8.x86_64.rpm
bind-export-libs-9.11.36-16.el8_10.8.i686.rpm
bind-export-libs-9.11.36-16.el8_10.8.x86_64.rpm
bind-libs-9.11.36-16.el8_10.8.i686.rpm
bind-libs-9.11.36-16.el8_10.8.x86_64.rpm
bind-libs-lite-9.11.36-16.el8_10.8.i686.rpm
bind-libs-lite-9.11.36-16.el8_10.8.x86_64.rpm
bind-license-9.11.36-16.el8_10.8.noarch.rpm
bind-lite-devel-9.11.36-16.el8_10.8.i686.rpm
bind-lite-devel-9.11.36-16.el8_10.8.x86_64.rpm
bind-pkcs11-9.11.36-16.el8_10.8.x86_64.rpm
bind-pkcs11-devel-9.11.36-16.el8_10.8.i686.rpm
bind-pkcs11-devel-9.11.36-16.el8_10.8.x86_64.rpm
bind-pkcs11-libs-9.11.36-16.el8_10.8.i686.rpm
bind-pkcs11-libs-9.11.36-16.el8_10.8.x86_64.rpm
bind-pkcs11-utils-9.11.36-16.el8_10.8.x86_64.rpm
bind-sdb-9.11.36-16.el8_10.8.x86_64.rpm
bind-sdb-chroot-9.11.36-16.el8_10.8.x86_64.rpm
bind-utils-9.11.36-16.el8_10.8.x86_64.rpm
python3-bind-9.11.36-16.el8_10.8.noarch.rpm

aarch64:
bind-9.11.36-16.el8_10.8.aarch64.rpm
bind-chroot-9.11.36-16.el8_10.8.aarch64.rpm
bind-devel-9.11.36-16.el8_10.8.aarch64.rpm
bind-export-devel-9.11.36-16.el8_10.8.aarch64.rpm
bind-export-libs-9.11.36-16.el8_10.8.aarch64.rpm
bind-libs-9.11.36-16.el8_10.8.aarch64.rpm
bind-libs-lite-9.11.36-16.el8_10.8.aarch64.rpm
bind-license-9.11.36-16.el8_10.8.noarch.rpm
bind-lite-devel-9.11.36-16.el8_10.8.aarch64.rpm
bind-pkcs11-9.11.36-16.el8_10.8.aarch64.rpm
bind-pkcs11-devel-9.11.36-16.el8_10.8.aarch64.rpm
bind-pkcs11-libs-9.11.36-16.el8_10.8.aarch64.rpm
bind-pkcs11-utils-9.11.36-16.el8_10.8.aarch64.rpm
bind-sdb-9.11.36-16.el8_10.8.aarch64.rpm
bind-sdb-chroot-9.11.36-16.el8_10.8.aarch64.rpm
bind-utils-9.11.36-16.el8_10.8.aarch64.rpm
python3-bind-9.11.36-16.el8_10.8.noarch.rpm


SRPMS:
http://oss.oracle.com/ol8/SRPMS-updates/bind-9.11.36-16.el8_10.8.src.rpm

Related CVEs:

CVE-2026-3039
CVE-2026-5946




Description of changes:

[32:9.11.36-16.8]
- Fix GSS-API resource leak (CVE-2026-3039)
- Invalid handling of CLASS != IN (CVE-2026-5946)



From el-errata at oss.oracle.com  Mon Jun  8 18:12:33 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Mon, 08 Jun 2026 11:12:33 -0700
Subject: [El-errata] ELSA-2026-22730 Moderate: Oracle Linux 8 vim security
 update
Message-ID: <mailman.3.1780942425.18.el-errata@oss.oracle.com>

Oracle Linux Security Advisory ELSA-2026-22730

http://linux.oracle.com/errata/ELSA-2026-22730.html

The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:

x86_64:
vim-X11-8.0.1763-23.0.1.el8_10.x86_64.rpm
vim-common-8.0.1763-23.0.1.el8_10.x86_64.rpm
vim-enhanced-8.0.1763-23.0.1.el8_10.x86_64.rpm
vim-filesystem-8.0.1763-23.0.1.el8_10.noarch.rpm
vim-minimal-8.0.1763-23.0.1.el8_10.x86_64.rpm

aarch64:
vim-X11-8.0.1763-23.0.1.el8_10.aarch64.rpm
vim-common-8.0.1763-23.0.1.el8_10.aarch64.rpm
vim-enhanced-8.0.1763-23.0.1.el8_10.aarch64.rpm
vim-filesystem-8.0.1763-23.0.1.el8_10.noarch.rpm
vim-minimal-8.0.1763-23.0.1.el8_10.aarch64.rpm


SRPMS:
http://oss.oracle.com/ol8/SRPMS-updates/vim-8.0.1763-23.0.1.el8_10.src.rpm

Related CVEs:

CVE-2026-35177




Description of changes:

[8.0.1763-23.0.1]
- Remove upstream references [Orabug: 31197557]
- Added glibc-gconv-extra to common requires to provide ISO-8859-2 [Orabug: 34114984]

[2:8.0.1763-23]
- RHEL-170126 CVE-2026-35177 vim: Vim zip.vim plugin: Arbitrary file overwrite
  via path traversal bypass

[2:8.0.1763-22.3]
- Relates: RHEL-164956 vim: arbitrary command execution via modeline sandbox bypass

[2:8.0.1763-22.2]
- Resolves: RHEL-164956 vim: arbitrary command execution via modeline sandbox bypass

[2:8.0.1763-22.1]
- RHEL-159620 CVE-2026-33412 vim: Vim: Arbitrary code execution via command injection in glob() function
- RHEL-155428 CVE-2026-28417 vim: Vim: Arbitrary code execution via OS command injection in the netrw plugin
- RHEL-155412 CVE-2026-28421 vim: Vim: Denial of service and information disclosure via crafted swap file



From el-errata at oss.oracle.com  Mon Jun  8 18:12:35 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Mon, 08 Jun 2026 11:12:35 -0700
Subject: [El-errata] ELSA-2026-23258 Important: Oracle Linux 8 kernel
 security update
Message-ID: <mailman.4.1780942428.18.el-errata@oss.oracle.com>

Oracle Linux Security Advisory ELSA-2026-23258

http://linux.oracle.com/errata/ELSA-2026-23258.html

The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:

x86_64:
bpftool-4.18.0-553.129.1.el8_10.x86_64.rpm
kernel-4.18.0-553.129.1.el8_10.x86_64.rpm
kernel-abi-stablelists-4.18.0-553.129.1.el8_10.noarch.rpm
kernel-core-4.18.0-553.129.1.el8_10.x86_64.rpm
kernel-cross-headers-4.18.0-553.129.1.el8_10.x86_64.rpm
kernel-debug-4.18.0-553.129.1.el8_10.x86_64.rpm
kernel-debug-core-4.18.0-553.129.1.el8_10.x86_64.rpm
kernel-debug-devel-4.18.0-553.129.1.el8_10.x86_64.rpm
kernel-debug-modules-4.18.0-553.129.1.el8_10.x86_64.rpm
kernel-debug-modules-extra-4.18.0-553.129.1.el8_10.x86_64.rpm
kernel-devel-4.18.0-553.129.1.el8_10.x86_64.rpm
kernel-doc-4.18.0-553.129.1.el8_10.noarch.rpm
kernel-headers-4.18.0-553.129.1.el8_10.x86_64.rpm
kernel-modules-4.18.0-553.129.1.el8_10.x86_64.rpm
kernel-modules-extra-4.18.0-553.129.1.el8_10.x86_64.rpm
kernel-tools-4.18.0-553.129.1.el8_10.x86_64.rpm
kernel-tools-libs-4.18.0-553.129.1.el8_10.x86_64.rpm
kernel-tools-libs-devel-4.18.0-553.129.1.el8_10.x86_64.rpm
perf-4.18.0-553.129.1.el8_10.x86_64.rpm
python3-perf-4.18.0-553.129.1.el8_10.x86_64.rpm

aarch64:
bpftool-4.18.0-553.129.1.el8_10.aarch64.rpm
kernel-cross-headers-4.18.0-553.129.1.el8_10.aarch64.rpm
kernel-headers-4.18.0-553.129.1.el8_10.aarch64.rpm
kernel-tools-4.18.0-553.129.1.el8_10.aarch64.rpm
kernel-tools-libs-4.18.0-553.129.1.el8_10.aarch64.rpm
kernel-tools-libs-devel-4.18.0-553.129.1.el8_10.aarch64.rpm
perf-4.18.0-553.129.1.el8_10.aarch64.rpm
python3-perf-4.18.0-553.129.1.el8_10.aarch64.rpm


SRPMS:
http://oss.oracle.com/ol8/SRPMS-updates/kernel-4.18.0-553.129.1.el8_10.src.rpm

Related CVEs:

CVE-2026-46243




Description of changes:

[4.18.0-553.129.1]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.3
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34750652]
- Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985772]

[4.18.0-553.129.1]
- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178938] {CVE-2026-46243}

[4.18.0-553.128.1]
- smb: client: fix OOB reads parsing symlink error response (Paulo Alcantara) [RHEL-171465] {CVE-2026-31613}
- geneve: Suppress list corruption splat in geneve_destroy_tunnels(). (Antoine Tenart) [RHEL-168961]
- geneve: Fix use-after-free in geneve_find_dev(). (Antoine Tenart) [RHEL-168961] {CVE-2025-21858}
- netfilter: nf_tables: release flowtable after rcu grace period on error (Florian Westphal) [RHEL-160514] {CVE-2026-23392}

[4.18.0-553.127.1]
- smc: Fix use-after-free in tcp_write_timer_handler(). (Steve Best) [RHEL-167084] {CVE-2023-53781}
- nbd: defer config unlock in nbd_genl_connect (CKI Backport Bot) [RHEL-166939] {CVE-2025-68366}
- libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-143892] {CVE-2026-22984}
- libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-143874] {CVE-2026-22990}



From el-errata at oss.oracle.com  Mon Jun  8 18:12:32 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Mon, 08 Jun 2026 11:12:32 -0700
Subject: [El-errata] ELSA-2026-22644 Important: Oracle Linux 8 samba
 security update
Message-ID: <mailman.5.1780942429.18.el-errata@oss.oracle.com>

Oracle Linux Security Advisory ELSA-2026-22644

http://linux.oracle.com/errata/ELSA-2026-22644.html

The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:

x86_64:
ctdb-4.19.4-16.0.1.el8_10.x86_64.rpm
libnetapi-4.19.4-16.0.1.el8_10.i686.rpm
libnetapi-4.19.4-16.0.1.el8_10.x86_64.rpm
libnetapi-devel-4.19.4-16.0.1.el8_10.i686.rpm
libnetapi-devel-4.19.4-16.0.1.el8_10.x86_64.rpm
libsmbclient-4.19.4-16.0.1.el8_10.i686.rpm
libsmbclient-4.19.4-16.0.1.el8_10.x86_64.rpm
libsmbclient-devel-4.19.4-16.0.1.el8_10.i686.rpm
libsmbclient-devel-4.19.4-16.0.1.el8_10.x86_64.rpm
libwbclient-4.19.4-16.0.1.el8_10.i686.rpm
libwbclient-4.19.4-16.0.1.el8_10.x86_64.rpm
libwbclient-devel-4.19.4-16.0.1.el8_10.i686.rpm
libwbclient-devel-4.19.4-16.0.1.el8_10.x86_64.rpm
python3-samba-4.19.4-16.0.1.el8_10.i686.rpm
python3-samba-4.19.4-16.0.1.el8_10.x86_64.rpm
python3-samba-dc-4.19.4-16.0.1.el8_10.x86_64.rpm
python3-samba-devel-4.19.4-16.0.1.el8_10.i686.rpm
python3-samba-devel-4.19.4-16.0.1.el8_10.x86_64.rpm
python3-samba-test-4.19.4-16.0.1.el8_10.x86_64.rpm
samba-4.19.4-16.0.1.el8_10.x86_64.rpm
samba-client-4.19.4-16.0.1.el8_10.x86_64.rpm
samba-client-libs-4.19.4-16.0.1.el8_10.i686.rpm
samba-client-libs-4.19.4-16.0.1.el8_10.x86_64.rpm
samba-common-4.19.4-16.0.1.el8_10.noarch.rpm
samba-common-libs-4.19.4-16.0.1.el8_10.i686.rpm
samba-common-libs-4.19.4-16.0.1.el8_10.x86_64.rpm
samba-common-tools-4.19.4-16.0.1.el8_10.x86_64.rpm
samba-dc-libs-4.19.4-16.0.1.el8_10.i686.rpm
samba-dc-libs-4.19.4-16.0.1.el8_10.x86_64.rpm
samba-dcerpc-4.19.4-16.0.1.el8_10.x86_64.rpm
samba-devel-4.19.4-16.0.1.el8_10.i686.rpm
samba-devel-4.19.4-16.0.1.el8_10.x86_64.rpm
samba-krb5-printing-4.19.4-16.0.1.el8_10.x86_64.rpm
samba-ldb-ldap-modules-4.19.4-16.0.1.el8_10.x86_64.rpm
samba-libs-4.19.4-16.0.1.el8_10.i686.rpm
samba-libs-4.19.4-16.0.1.el8_10.x86_64.rpm
samba-pidl-4.19.4-16.0.1.el8_10.noarch.rpm
samba-test-4.19.4-16.0.1.el8_10.x86_64.rpm
samba-test-libs-4.19.4-16.0.1.el8_10.x86_64.rpm
samba-tools-4.19.4-16.0.1.el8_10.x86_64.rpm
samba-usershares-4.19.4-16.0.1.el8_10.x86_64.rpm
samba-vfs-glusterfs-4.19.4-16.0.1.el8_10.x86_64.rpm
samba-vfs-iouring-4.19.4-16.0.1.el8_10.x86_64.rpm
samba-winbind-4.19.4-16.0.1.el8_10.x86_64.rpm
samba-winbind-clients-4.19.4-16.0.1.el8_10.x86_64.rpm
samba-winbind-krb5-locator-4.19.4-16.0.1.el8_10.x86_64.rpm
samba-winbind-modules-4.19.4-16.0.1.el8_10.i686.rpm
samba-winbind-modules-4.19.4-16.0.1.el8_10.x86_64.rpm
samba-winexe-4.19.4-16.0.1.el8_10.x86_64.rpm

aarch64:
ctdb-4.19.4-16.0.1.el8_10.aarch64.rpm
libnetapi-4.19.4-16.0.1.el8_10.aarch64.rpm
libnetapi-devel-4.19.4-16.0.1.el8_10.aarch64.rpm
libsmbclient-4.19.4-16.0.1.el8_10.aarch64.rpm
libsmbclient-devel-4.19.4-16.0.1.el8_10.aarch64.rpm
libwbclient-4.19.4-16.0.1.el8_10.aarch64.rpm
libwbclient-devel-4.19.4-16.0.1.el8_10.aarch64.rpm
python3-samba-4.19.4-16.0.1.el8_10.aarch64.rpm
python3-samba-dc-4.19.4-16.0.1.el8_10.aarch64.rpm
python3-samba-devel-4.19.4-16.0.1.el8_10.aarch64.rpm
python3-samba-test-4.19.4-16.0.1.el8_10.aarch64.rpm
samba-4.19.4-16.0.1.el8_10.aarch64.rpm
samba-client-4.19.4-16.0.1.el8_10.aarch64.rpm
samba-client-libs-4.19.4-16.0.1.el8_10.aarch64.rpm
samba-common-4.19.4-16.0.1.el8_10.noarch.rpm
samba-common-libs-4.19.4-16.0.1.el8_10.aarch64.rpm
samba-common-tools-4.19.4-16.0.1.el8_10.aarch64.rpm
samba-dc-libs-4.19.4-16.0.1.el8_10.aarch64.rpm
samba-dcerpc-4.19.4-16.0.1.el8_10.aarch64.rpm
samba-devel-4.19.4-16.0.1.el8_10.aarch64.rpm
samba-krb5-printing-4.19.4-16.0.1.el8_10.aarch64.rpm
samba-ldb-ldap-modules-4.19.4-16.0.1.el8_10.aarch64.rpm
samba-libs-4.19.4-16.0.1.el8_10.aarch64.rpm
samba-pidl-4.19.4-16.0.1.el8_10.noarch.rpm
samba-test-4.19.4-16.0.1.el8_10.aarch64.rpm
samba-test-libs-4.19.4-16.0.1.el8_10.aarch64.rpm
samba-tools-4.19.4-16.0.1.el8_10.aarch64.rpm
samba-usershares-4.19.4-16.0.1.el8_10.aarch64.rpm
samba-vfs-glusterfs-4.19.4-16.0.1.el8_10.aarch64.rpm
samba-vfs-iouring-4.19.4-16.0.1.el8_10.aarch64.rpm
samba-winbind-4.19.4-16.0.1.el8_10.aarch64.rpm
samba-winbind-clients-4.19.4-16.0.1.el8_10.aarch64.rpm
samba-winbind-krb5-locator-4.19.4-16.0.1.el8_10.aarch64.rpm
samba-winbind-modules-4.19.4-16.0.1.el8_10.aarch64.rpm


SRPMS:
http://oss.oracle.com/ol8/SRPMS-updates/samba-4.19.4-16.0.1.el8_10.src.rpm

Related CVEs:

CVE-2026-3012
CVE-2026-4408
CVE-2026-4480




Description of changes:

[4.19.4-16.0.1]
- s3: winbindd: winbindd_pam: fix leak in extract_pac_vrfy_sigs [Orabug: 36518285]
- s3:passdb: Do not leak memory in pdb_tdb [Orabug: 36371377]
- Gluster volumes not accessible via Samba due to missing samba-vfs-glusterfs in OL8 [Orabug: 30205755]

[4.19.4-16]
- resolves: RHEL-156322 - Fix CVE-2026-3012
- resolves: RHEL-161647 - Fix CVE-2026-4480
- resolves: RHEL-177933 - Fix CVE-2026-4408
- resolves: RHEL-166866 - Build hardening, stack protection with FORTIFY_SOURCE



From el-errata at oss.oracle.com  Mon Jun  8 18:12:37 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Mon, 08 Jun 2026 11:12:37 -0700
Subject: [El-errata] ELSA-2026-23360 Important: Oracle Linux 8 bind9.16
 security update
Message-ID: <mailman.6.1780942437.18.el-errata@oss.oracle.com>

Oracle Linux Security Advisory ELSA-2026-23360

http://linux.oracle.com/errata/ELSA-2026-23360.html

The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:

x86_64:
bind9.16-9.16.23-0.22.el8_10.6.x86_64.rpm
bind9.16-chroot-9.16.23-0.22.el8_10.6.x86_64.rpm
bind9.16-devel-9.16.23-0.22.el8_10.6.i686.rpm
bind9.16-devel-9.16.23-0.22.el8_10.6.x86_64.rpm
bind9.16-dnssec-utils-9.16.23-0.22.el8_10.6.x86_64.rpm
bind9.16-doc-9.16.23-0.22.el8_10.6.noarch.rpm
bind9.16-libs-9.16.23-0.22.el8_10.6.i686.rpm
bind9.16-libs-9.16.23-0.22.el8_10.6.x86_64.rpm
bind9.16-license-9.16.23-0.22.el8_10.6.noarch.rpm
bind9.16-utils-9.16.23-0.22.el8_10.6.x86_64.rpm
python3-bind9.16-9.16.23-0.22.el8_10.6.noarch.rpm

aarch64:
bind9.16-9.16.23-0.22.el8_10.6.aarch64.rpm
bind9.16-chroot-9.16.23-0.22.el8_10.6.aarch64.rpm
bind9.16-devel-9.16.23-0.22.el8_10.6.aarch64.rpm
bind9.16-dnssec-utils-9.16.23-0.22.el8_10.6.aarch64.rpm
bind9.16-doc-9.16.23-0.22.el8_10.6.noarch.rpm
bind9.16-libs-9.16.23-0.22.el8_10.6.aarch64.rpm
bind9.16-license-9.16.23-0.22.el8_10.6.noarch.rpm
bind9.16-utils-9.16.23-0.22.el8_10.6.aarch64.rpm
python3-bind9.16-9.16.23-0.22.el8_10.6.noarch.rpm


SRPMS:
http://oss.oracle.com/ol8/SRPMS-updates/bind9.16-9.16.23-0.22.el8_10.6.src.rpm

Related CVEs:

CVE-2026-3039
CVE-2026-5946




Description of changes:

[32:9.16.23-0.22.6]
- Fix GSS-API resource leak (CVE-2026-3039)
- Invalid handling of CLASS != IN (CVE-2026-5946)



From el-errata at oss.oracle.com  Mon Jun  8 18:12:30 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Mon, 08 Jun 2026 11:12:30 -0700
Subject: [El-errata] ELSA-2026-22112 Important: Oracle Linux 8
 go-toolset:ol8 security update
Message-ID: <mailman.7.1780942438.18.el-errata@oss.oracle.com>

Oracle Linux Security Advisory ELSA-2026-22112

http://linux.oracle.com/errata/ELSA-2026-22112.html

The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:

x86_64:
delve-1.25.2-1.0.1.module+el8.10.0+90715+2d4d8dfd.x86_64.rpm
golang-1.25.9-1.0.1.module+el8.10.0+90898+1e3c34bb.x86_64.rpm
golang-bin-1.25.9-1.0.1.module+el8.10.0+90898+1e3c34bb.x86_64.rpm
golang-docs-1.25.9-1.0.1.module+el8.10.0+90898+1e3c34bb.noarch.rpm
golang-misc-1.25.9-1.0.1.module+el8.10.0+90898+1e3c34bb.noarch.rpm
golang-race-1.25.9-1.0.1.module+el8.10.0+90898+1e3c34bb.x86_64.rpm
golang-src-1.25.9-1.0.1.module+el8.10.0+90898+1e3c34bb.noarch.rpm
golang-tests-1.25.9-1.0.1.module+el8.10.0+90898+1e3c34bb.noarch.rpm
go-toolset-1.25.9-1.0.1.module+el8.10.0+90898+1e3c34bb.x86_64.rpm

aarch64:
delve-1.25.2-1.0.1.module+el8.10.0+90715+2d4d8dfd.aarch64.rpm
golang-1.25.9-1.0.1.module+el8.10.0+90898+1e3c34bb.aarch64.rpm
golang-bin-1.25.9-1.0.1.module+el8.10.0+90898+1e3c34bb.aarch64.rpm
golang-docs-1.25.9-1.0.1.module+el8.10.0+90898+1e3c34bb.noarch.rpm
golang-misc-1.25.9-1.0.1.module+el8.10.0+90898+1e3c34bb.noarch.rpm
golang-race-1.25.9-1.0.1.module+el8.10.0+90898+1e3c34bb.aarch64.rpm
golang-src-1.25.9-1.0.1.module+el8.10.0+90898+1e3c34bb.noarch.rpm
golang-tests-1.25.9-1.0.1.module+el8.10.0+90898+1e3c34bb.noarch.rpm
go-toolset-1.25.9-1.0.1.module+el8.10.0+90898+1e3c34bb.aarch64.rpm


SRPMS:
http://oss.oracle.com/ol8/SRPMS-updates/delve-1.25.2-1.0.1.module+el8.10.0+90715+2d4d8dfd.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates/golang-1.25.9-1.0.1.module+el8.10.0+90898+1e3c34bb.src.rpm

Related CVEs:

CVE-2026-33811
CVE-2026-33814
CVE-2026-39817
CVE-2026-39819
CVE-2026-39820
CVE-2026-39823
CVE-2026-39825
CVE-2026-39826
CVE-2026-39836
CVE-2026-42499
CVE-2026-42501




Description of changes:

delve
golang
[1.25.9-1.0.1]
- EXPERIMENTAL: Introduce fipsnoenforceems GODEBUG var
- Backported from OL9u7
- Resolves: OLDIS-53586



From el-errata at oss.oracle.com  Wed Jun 10 19:53:24 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Wed, 10 Jun 2026 21:53:24 +0200
Subject: [El-errata] New Ksplice updates for UEKR7 5.15.0 on OL8 and OL9
 (ELSA-2026-50305)
Message-ID: <mailman.32.1781121217.18.el-errata@oss.oracle.com>

Synopsis: ELSA-2026-50305 can now be patched using Ksplice
CVEs: CVE-2025-10263

Users with Oracle Linux Premier Support can now use Ksplice to patch
against the latest Oracle Linux Security Advisory, ELSA-2026-50305.
More information about this errata can be found at
https://linux.oracle.com/errata/ELSA-2026-50305.html

INSTALLING THE UPDATES

We recommend that all users of Ksplice Uptrack running UEKR7 5.15.0 on
OL8 and OL9 install these updates.

On systems that have "autoinstall = yes" in /etc/uptrack/uptrack.conf,
these updates will be installed automatically and you do not need to
take any action.

Alternatively, you can install these updates by running:

# /usr/sbin/uptrack-upgrade -y


DESCRIPTION

* CVE-2025-10263: Racy TLB invalidation on Arm64 CPUs.

SUPPORT

Ksplice support is available at ksplice-support_ww at oracle.com.



From el-errata at oss.oracle.com  Wed Jun 10 19:54:10 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Wed, 10 Jun 2026 21:54:10 +0200
Subject: [El-errata] New Ksplice updates for UEKR6 5.4.17 on OL7 and OL8
 (ELSA-2026-50306)
Message-ID: <mailman.33.1781121280.18.el-errata@oss.oracle.com>

Synopsis: ELSA-2026-50306 can now be patched using Ksplice
CVEs: CVE-2025-10263

Users with Oracle Linux Premier Support can now use Ksplice to patch
against the latest Oracle Linux Security Advisory, ELSA-2026-50306.
More information about this errata can be found at
https://linux.oracle.com/errata/ELSA-2026-50306.html

INSTALLING THE UPDATES

We recommend that all users of Ksplice Uptrack running UEKR6 5.4.17 on
OL7 and OL8 install these updates.

On systems that have "autoinstall = yes" in /etc/uptrack/uptrack.conf,
these updates will be installed automatically and you do not need to
take any action.

Alternatively, you can install these updates by running:

# /usr/sbin/uptrack-upgrade -y


DESCRIPTION

* CVE-2025-10263: Racy TLB invalidation on Arm64 CPUs.

SUPPORT

Ksplice support is available at ksplice-support_ww at oracle.com.



From el-errata at oss.oracle.com  Wed Jun 10 19:54:52 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Wed, 10 Jun 2026 21:54:52 +0200
Subject: [El-errata] New Ksplice updates for UEKR8 6.12.0 on OL9 and OL10
 (ELSA-2026-50304)
Message-ID: <mailman.34.1781121304.18.el-errata@oss.oracle.com>

Synopsis: ELSA-2026-50304 can now be patched using Ksplice
CVEs: CVE-2025-10263

Users with Oracle Linux Premier Support can now use Ksplice to patch
against the latest Oracle Linux Security Advisory, ELSA-2026-50304.
More information about this errata can be found at
https://linux.oracle.com/errata/ELSA-2026-50304.html

INSTALLING THE UPDATES

We recommend that all users of Ksplice Uptrack running UEKR8 6.12.0 on
OL9 and OL10 install these updates.

On systems that have "autoinstall = yes" in /etc/uptrack/uptrack.conf,
these updates will be installed automatically and you do not need to
take any action.

Alternatively, you can install these updates by running:

# /usr/sbin/uptrack-upgrade -y


DESCRIPTION

* CVE-2025-10263: Racy TLB invalidation on Arm64 CPUs.

SUPPORT

Ksplice support is available at ksplice-support_ww at oracle.com.



From el-errata at oss.oracle.com  Wed Jun 10 20:01:32 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Wed, 10 Jun 2026 13:01:32 -0700
Subject: [El-errata] ELSA-2026-7675 Important: Oracle Linux 10 nodejs24
 security update
Message-ID: <mailman.35.1781121705.18.el-errata@oss.oracle.com>

Oracle Linux Security Advisory ELSA-2026-7675

http://linux.oracle.com/errata/ELSA-2026-7675.html

The following updated rpms for Oracle Linux 10 have been uploaded to the Unbreakable Linux Network:

x86_64:
nodejs24-24.14.1-2.0.2.el10_1.x86_64.rpm
nodejs24-devel-24.14.1-2.0.2.el10_1.x86_64.rpm
nodejs24-docs-24.14.1-2.0.2.el10_1.noarch.rpm
nodejs24-full-i18n-24.14.1-2.0.2.el10_1.x86_64.rpm
nodejs24-libs-24.14.1-2.0.2.el10_1.x86_64.rpm
nodejs24-npm-11.11.0-1.24.14.1.2.0.2.el10_1.noarch.rpm

aarch64:
nodejs24-24.14.1-2.0.2.el10_1.aarch64.rpm
nodejs24-devel-24.14.1-2.0.2.el10_1.aarch64.rpm
nodejs24-docs-24.14.1-2.0.2.el10_1.noarch.rpm
nodejs24-full-i18n-24.14.1-2.0.2.el10_1.aarch64.rpm
nodejs24-libs-24.14.1-2.0.2.el10_1.aarch64.rpm
nodejs24-npm-11.11.0-1.24.14.1.2.0.2.el10_1.noarch.rpm


SRPMS:
http://oss.oracle.com/ol10/SRPMS-updates/nodejs24-24.14.1-2.0.2.el10_1.src.rpm

Related CVEs:

CVE-2026-1525
CVE-2026-1526
CVE-2026-1527
CVE-2026-1528
CVE-2026-2229
CVE-2026-2581
CVE-2026-21637
CVE-2026-21710
CVE-2026-21711
CVE-2026-21712
CVE-2026-21713
CVE-2026-21714
CVE-2026-21715
CVE-2026-21716
CVE-2026-21717
CVE-2026-25547
CVE-2026-26996
CVE-2026-27135




Description of changes:

[1:24.14.1-2.0.2]
- Rebuild to correct NVR

[1:24.14.1-2.0.1]
- Update upstream references



From el-errata at oss.oracle.com  Wed Jun 10 20:01:39 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Wed, 10 Jun 2026 13:01:39 -0700
Subject: [El-errata] ELSA-2026-50305 Important: Oracle Linux 9 Unbreakable
 Enterprise kernel security update
Message-ID: <mailman.36.1781121711.18.el-errata@oss.oracle.com>

Oracle Linux Security Advisory ELSA-2026-50305

http://linux.oracle.com/errata/ELSA-2026-50305.html

The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:

x86_64:
bpftool-5.15.0-321.202.5.1.el9uek.x86_64.rpm
kernel-uek-5.15.0-321.202.5.1.el9uek.x86_64.rpm
kernel-uek-core-5.15.0-321.202.5.1.el9uek.x86_64.rpm
kernel-uek-debug-5.15.0-321.202.5.1.el9uek.x86_64.rpm
kernel-uek-debug-core-5.15.0-321.202.5.1.el9uek.x86_64.rpm
kernel-uek-debug-devel-5.15.0-321.202.5.1.el9uek.x86_64.rpm
kernel-uek-debug-modules-5.15.0-321.202.5.1.el9uek.x86_64.rpm
kernel-uek-debug-modules-extra-5.15.0-321.202.5.1.el9uek.x86_64.rpm
kernel-uek-devel-5.15.0-321.202.5.1.el9uek.x86_64.rpm
kernel-uek-doc-5.15.0-321.202.5.1.el9uek.noarch.rpm
kernel-uek-modules-5.15.0-321.202.5.1.el9uek.x86_64.rpm
kernel-uek-modules-extra-5.15.0-321.202.5.1.el9uek.x86_64.rpm
kernel-uek-container-5.15.0-321.202.5.1.el9uek.x86_64.rpm
kernel-uek-container-debug-5.15.0-321.202.5.1.el9uek.x86_64.rpm



SRPMS:
http://oss.oracle.com/ol9/SRPMS-updates/kernel-uek-5.15.0-321.202.5.1.el9uek.src.rpm

Related CVEs:

CVE-2025-10263




Description of changes:

[5.15.0-321.202.5.1]
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Rutland)  [Orabug: 39017590]  {CVE-2025-10263}
- arm64: tlb: Add ARM64_WORKAROUND_REPEAT_TLBI_SYNC (Mark Rutland)  [Orabug: 39017590]
- ARM: uek: Disable CONFIG_NVIDIA_CARMEL_CNP_ERRATUM (Boris Ostrovsky)  [Orabug: 39017590]
- arm64: tlb: allow XZR argument to TLBI ops (Mark Rutland)  [Orabug: 39017590]
- arm64: cputype: Add C1-Premium definitions (Mark Rutland)  [Orabug: 39017590]
- arm64: cputype: Add C1-Ultra definitions (Mark Rutland)  [Orabug: 39017590]



From el-errata at oss.oracle.com  Wed Jun 10 20:01:44 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Wed, 10 Jun 2026 13:01:44 -0700
Subject: [El-errata] ELSA-2026-50305 Important: Oracle Linux 9 Unbreakable
 Enterprise kernel security update
Message-ID: <mailman.37.1781121717.18.el-errata@oss.oracle.com>

Oracle Linux Security Advisory ELSA-2026-50305

http://linux.oracle.com/errata/ELSA-2026-50305.html

The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:


aarch64:
bpftool-5.15.0-321.202.5.1.el9uek.aarch64.rpm
kernel-uek-5.15.0-321.202.5.1.el9uek.aarch64.rpm
kernel-uek-container-5.15.0-321.202.5.1.el9uek.aarch64.rpm
kernel-uek-container-debug-5.15.0-321.202.5.1.el9uek.aarch64.rpm
kernel-uek-core-5.15.0-321.202.5.1.el9uek.aarch64.rpm
kernel-uek-debug-5.15.0-321.202.5.1.el9uek.aarch64.rpm
kernel-uek-debug-core-5.15.0-321.202.5.1.el9uek.aarch64.rpm
kernel-uek-debug-devel-5.15.0-321.202.5.1.el9uek.aarch64.rpm
kernel-uek-debug-modules-5.15.0-321.202.5.1.el9uek.aarch64.rpm
kernel-uek-debug-modules-extra-5.15.0-321.202.5.1.el9uek.aarch64.rpm
kernel-uek-devel-5.15.0-321.202.5.1.el9uek.aarch64.rpm
kernel-uek-doc-5.15.0-321.202.5.1.el9uek.noarch.rpm
kernel-uek-modules-5.15.0-321.202.5.1.el9uek.aarch64.rpm
kernel-uek-modules-extra-5.15.0-321.202.5.1.el9uek.aarch64.rpm
kernel-uek64k-5.15.0-321.202.5.1.el9uek.aarch64.rpm
kernel-uek64k-core-5.15.0-321.202.5.1.el9uek.aarch64.rpm
kernel-uek64k-devel-5.15.0-321.202.5.1.el9uek.aarch64.rpm
kernel-uek64k-modules-5.15.0-321.202.5.1.el9uek.aarch64.rpm
kernel-uek64k-modules-extra-5.15.0-321.202.5.1.el9uek.aarch64.rpm


SRPMS:
http://oss.oracle.com/ol9/SRPMS-updates/kernel-uek-5.15.0-321.202.5.1.el9uek.src.rpm

Related CVEs:

CVE-2025-10263




Description of changes:

[5.15.0-321.202.5.1]
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Rutland)  [Orabug: 39017590]  {CVE-2025-10263}
- arm64: tlb: Add ARM64_WORKAROUND_REPEAT_TLBI_SYNC (Mark Rutland)  [Orabug: 39017590]
- ARM: uek: Disable CONFIG_NVIDIA_CARMEL_CNP_ERRATUM (Boris Ostrovsky)  [Orabug: 39017590]
- arm64: tlb: allow XZR argument to TLBI ops (Mark Rutland)  [Orabug: 39017590]
- arm64: cputype: Add C1-Premium definitions (Mark Rutland)  [Orabug: 39017590]
- arm64: cputype: Add C1-Ultra definitions (Mark Rutland)  [Orabug: 39017590]

[5.15.0-321.202.5]
- Revert "ip6_tunnel: Fix usage of skb_vlan_inet_prepare()" (Harshit Mogalapalli)  [Orabug: 39476647]
- smb: client: reject userspace cifs.spnego descriptions (Asim Viladi Oglu Manizada)  [Orabug: 39463672]

[5.15.0-321.202.4]
- tun: free page on build_skb failure in tun_xdp_one() (Weiming Shi)  [Orabug: 39429143]
- tap: free page on error paths in tap_get_user_xdp() (Weiming Shi)  [Orabug: 39429143]
- tun: free page on short-frame rejection in tun_xdp_one() (Weiming Shi)  [Orabug: 39429143]

[5.15.0-321.202.3]
- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Hyunwoo Kim)  [Orabug: 39368827]  {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (William Bowling)  [Orabug: 39368827]
- ptrace: slightly saner 'get_dumpable()' logic (Linus Torvalds)  [Orabug: 39384274]  {CVE-2026-46333}
- mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (David Hildenbrand (Red Hat))  [Orabug: 38474901]
- Revert "mm/hugetlb: add option to allows disabling CVE-2025-38085 mitigation" (Samasth Norway Ananda)  [Orabug: 38474901]
- mm/rmap: fix two comments related to huge_pmd_unshare() (David Hildenbrand (Red Hat))  [Orabug: 38474901]
- mm/hugetlb: fix two comments related to huge_pmd_unshare() (David Hildenbrand (Red Hat))  [Orabug: 38474901]
- mm/hugetlb: fix hugetlb_pmd_shared() (David Hildenbrand (Red Hat))  [Orabug: 38474901]

[5.15.0-321.202.2]
- dpaa2-switch: Fix interrupt storm after receiving bad if_id in IRQ handler (Guenter Roeck)
- Revert "arm64: dts: qcom: sdm845-oneplus: Mark l14a regulator as boot-on" (Sasha Levin)
- ip6_tunnel: Fix usage of skb_vlan_inet_prepare() (Ben Hutchings)
- hwmon: (max16065) Use READ/WRITE_ONCE to avoid compiler optimization induced race (Gui-Dong Han)
- wifi: wlcore: Return -ENOMEM instead of -EAGAIN if there is not enough headroom (Guenter Roeck)
- sched: idle: Make skipping governor callbacks more consistent (Rafael J. Wysocki)
- nvmet-tcp: fix use-before-check of sg in bounds validation (Cengiz Can)
- remoteproc: mediatek: Unprepare SCP clock during system suspend (Tzung-Bi Shih)
- net: openvswitch: Avoid releasing netdev before teardown completes (Toke H?iland-J?rgensen)
- ACPI: processor: Fix previous acpi_processor_errata_piix4() fix (Rafael J. Wysocki)
- net: hsr: fix VLAN add unwind on slave errors (Luka Gejak)
- x86/CPU/AMD: Add a fix for AMD-SB-7052 (Prathyushi Nangia)  [Orabug: 39327141]  {CVE-2025-54518}
- xfrm: esp: ipv4: fix up flags setting (Greg Kroah-Hartman)  [Orabug: 39342679]  {CVE-2026-43284}
- xfrm: esp: avoid in-place decrypt on shared skb frags (Kuan-Ting Chen)  [Orabug: 39342679]  {CVE-2026-43284}
- KVM: x86: disable preemption around the call to kvm_arch_vcpu_{un|}blocking (Maxim Levitsky)  [Orabug: 39334996]
- KVM: Don't block+unblock when halt-polling is successful (Sean Christopherson)  [Orabug: 39334996]
- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Jeff Layton)  [Orabug: 39167616]  {CVE-2026-31402}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (Victor Nogueira)  [Orabug: 39103230]  {CVE-2026-23270}
- exadata: tools: perf: update column to comm_nodigit (Stephen Brennan)  [Orabug: 39327019]
- perf report: Add comm_nodigit sort key (Stephen Brennan)  [Orabug: 39327019]
- Revert "tools: perf: add comm_ignore_digit column" (Stephen Brennan)  [Orabug: 39327019]

[5.15.0-321.202.1]
- virtio-net: add cond_resched() to the command waiting loop (Jason Wang) [Orabug: 39291988]
- virtio-net: convert rx mode setting to use workqueue (Jason Wang) [Orabug: 39291988]
- x86: KVM: Add common feature flag for AMD's PSFD (Sean Christopherson) [Orabug: 35586248]
- KVM: x86: Insert "AMD" in KVM_X86_FEATURE_PSFD (Jim Mattson) [Orabug: 35586248]
- KVM: x86: Expose Predictive Store Forwarding Disable (Babu Moger) [Orabug: 35586248]
- i2c: designware: fix __i2c_dw_disable() in case master is holding SCL low (Yann Sionneau) [Orabug: 39174661]

[5.15.0-320.202.8]
- iommu/arm-smmu-v3: Handle zeroed A4-2C HTTU override settings (Joao Martins) [Orabug: 39186453]
- iommu: Move IOMMU_DIRTY_NO_CLEAR define (Shameer Kolothum) [Orabug: 39186453]
- iommu/arm-smmu-v3: Enable HTTU for stage1 with io-pgtable mapping (Kunkun Jiang) [Orabug: 39186453]
- iommu/arm-smmu-v3: Add support for dirty tracking in domain alloc (Joao Martins) [Orabug: 39186453]
- iommu/io-pgtable-arm: Add read_and_clear_dirty() support (Shameer Kolothum) [Orabug: 39186453]
- iommu/arm-smmu-v3: Add feature detection for HTTU (Jean-Philippe Brucker) [Orabug: 39186453]

[5.15.0-320.202.7]
- crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [Orabug: 39250686,39331104] {CVE-2026-43077}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [Orabug: 39250686,39331109] {CVE-2026-43078}
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [Orabug: 39250686]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [Orabug: 39250686,39300910] {CVE-2026-43033}
- crypto: authenc - use memcpy_sglist() instead of null skcipher (Eric Biggers) [Orabug: 39250686]
- crypto: algif_aead - snapshot IV for async AEAD requests (Douya Le) [Orabug: 39250686]
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [Orabug: 39250686,39283867,39291961] {CVE-2026-31431}
- crypto: algif_aead - use memcpy_sglist() instead of null skcipher (Eric Biggers) [Orabug: 39250686] {CVE-2026-31431}
- crypto: scatterwalk - Backport memcpy_sglist() (Eric Biggers) [Orabug: 39250686]
- uek-rpm: Enable FWCTL for aarch64 (Dave Kleikamp) [Orabug: 39252913]

[5.15.0-320.202.6]
- Revert "rds: Drop rds conn in connect worker if not in down state." (Vijayendra Suman) [Orabug: 39277795]
- uek-rpm: CONFIG_INTEL_IOMMU_SCALABLE_MODE_DEFAULT_ON should be set (Dave Kleikamp) [Orabug: 39109819]
- iommu/vt-d: Disallow dirty tracking if incoherent page walk (Lu Baolu) [Orabug: 39109819]
- iommu/vt-d: Set variable intel_dirty_ops to static (Kunwu Chan) [Orabug: 39109819]
- iommu/vt-d: Access/Dirty bit support for SS domains (Joao Martins) [Orabug: 39109819]
- iommu/amd: reduce GA Log overflow printk noise (Alejandro Jimenez) [Orabug: 39209012]
- iommu/amd: add reschedule points to GA Log draining (Alejandro Jimenez) [Orabug: 39209012]
- iommu/amd: Rework GAInt handling in overflow case (Joao Martins) [Orabug: 39209012]
- iommu/amd: Disable GAInt while GA Log is processed (Joao Martins) [Orabug: 39209012]
- iommu/amd: Move helpers to update IOMMU features to amd_iommu.h (Alejandro Jimenez) [Orabug: 39209012]
- iommu/amd: Increase GA Log buffer size to 8192 entries (Joao Martins) [Orabug: 39209012]
- x86/CPU: Fix FPDSS on Zen1 (Borislav Petkov) [Orabug: 39241228,39273722] {CVE-2026-31628}

[5.15.0-320.202.5]
- Revert "PCI: Enable ACS after configuring IOMMU for OF platforms" (Manivannan Sadhasivam) [Orabug: 39187371]
- net/handshake: duplicate handshake cancellations leak socket (Scott Mayhew) [Orabug: 38847720] {CVE-2025-68775}
- ext4: show 'shutdown' hint when ext4 is forced to shutdown (Baokun Li) [Orabug: 39002346]
- ext4: show 'emergency_ro' when EXT4_FLAGS_EMERGENCY_RO is set (Baokun Li) [Orabug: 39002346]
- ext4: correct behavior under errors=remount-ro mode (Baokun Li) [Orabug: 39002346]
- ext4: add more ext4_emergency_state() checks around sb_rdonly() (Baokun Li) [Orabug: 39002346]
- ext4: add ext4_emergency_state() helper function (Baokun Li) [Orabug: 39002346]
- ext4: add EXT4_FLAGS_EMERGENCY_RO bit (Baokun Li) [Orabug: 39002346]
- ext4: convert EXT4_FLAGS_* defines to enum (Baokun Li) [Orabug: 39002346]
- ext4: make ext4_forced_shutdown() take struct super_block (Jan Kara) [Orabug: 39002346]
- ipv6: use RCU in ip6_xmit() (Eric Dumazet) [Orabug: 38649062] {CVE-2025-40135}
- memfd: move MFD_MF_KEEP_UE_MAPPED flag to higher bit (William Roche) [Orabug: 39109773]
- scsi: qla2xxx: Sanitize payload size to prevent member overflow (Jiasheng Jiang) [Orabug: 38930868] {CVE-2026-23059}
- bpf: Fix reference count leak in bpf_prog_test_run_xdp() (Tetsuo Handa) [Orabug: 38887702] {CVE-2026-22994}
- nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [Orabug: 38887682] {CVE-2026-22989}
- net/mlx5e: TC, delete flows only for existing peers (Mark Bloch) [Orabug: 38970398] {CVE-2026-23173}
- net/handshake: restore destructor on submit failure (Caoping) [Orabug: 38887601] {CVE-2025-71148}
- scsi: qla2xxx: Fix improper freeing of purex item (Zilin Guan) [Orabug: 38798929] {CVE-2025-68741}
- bnxt_en: Fix XDP_TX path (Michael Chan) [Orabug: 38847684] {CVE-2025-68770}
- perf/x86/amd: Check event before enable to avoid GPF (George Kennedy) [Orabug: 38847849] {CVE-2025-68798}
- scsi: smartpqi: Fix device resources accessed after device removal (Mike Mcgowen) [Orabug: 38798848] {CVE-2025-68371}
- KVM: SVM: Don't skip unrelated instruction if INT3/INTO is replaced (Omar Sandoval) [Orabug: 38773579] {CVE-2025-68259}
- x86/fpu: Ensure XFD state on signal delivery (Chang S. Bae) [Orabug: 38773165] {CVE-2025-68171}
- virtio-net: fix received length check in big packets (Bui Quang Minh) [Orabug: 38737152] {CVE-2025-40292}
- ACPI: CPPC: Fix NULL pointer dereference when nosmp is used (Yunhui Cui) [Orabug: 38641284] {CVE-2025-38113}
- EDAC/i10nm: Skip DIMM enumeration on a disabled memory controller (Qiuxu Zhuo) [Orabug: 38649173] {CVE-2025-40157}
- sunrpc: fix null pointer dereference on zero-length checksum (Lei Lu) [Orabug: 38649042] {CVE-2025-40129}
- cpufreq: CPPC: Fix possible null-ptr-deref for cppc_get_cpu_cost() (Jinjie Ruan) [Orabug: 38641275] {CVE-2024-53230}
- cpufreq: CPPC: Fix possible null-ptr-deref for cpufreq_cpu_get_raw() (Jinjie Ruan) [Orabug: 38641272] {CVE-2024-53231}
- vhost: vringh: Fix copy_to_iter return value check (Michael S. Tsirkin) [Orabug: 38592117] {CVE-2025-40056}
- crypto: qat - flush misc workqueue during device shutdown (Giovanni Cabiddu) [Orabug: 38401717] {CVE-2025-39721}
- vhost: vringh: Modify the return value check (Zhang Jiao) [Orabug: 38592085] {CVE-2025-40051}
- virtio-net: fix recursived rtnl_lock() during probe() (Zigit Zo) [Orabug: 38324330] {CVE-2025-38551}
- gve: prevent ethtool ops after shutdown (Jordan Rhee) [Orabug: 38401492] {CVE-2025-38735}
- KVM: SVM: Reject SEV{-ES} intra host migration if vCPU creation is in-flight (Sean Christopherson) [Orabug: 38254140] {CVE-2025-38455}
- net: usb: lan78xx: fix WARN in __netif_napi_del_locked on disconnect (Oleksij Rempel) [Orabug: 38253871] {CVE-2025-38385}
- net/mlx5e: Disable MACsec offload for uplink representor profile (Carolina Jubran) [Orabug: 38094809] {CVE-2025-38020}
- dmaengine: idxd: fix memory leak in error handling path of idxd_alloc (Shuai Xue) [Orabug: 38094794] {CVE-2025-38015}
- net/mlx5: Fix ECVF vports unload on shutdown flow (Amir Tzin) [Orabug: 38152903] {CVE-2025-38109}
- bnxt: properly flush XDP redirect lists (Yan Zhai) [Orabug: 38175054] {CVE-2025-38246}
- eth: bnxt: fix missing ring index trim on error path (Jakub Kicinski) [Orabug: 37937451] {CVE-2025-37873}
- net/mlx5: Fix null-ptr-deref in mlx5_create_{inner_,}ttc_table() (Henry Martin) [Orabug: 37938078] {CVE-2025-37888}
- nfsd: fix possible badness in FREE_STATEID (Olga Kornievskaia) [Orabug: 37989102] {CVE-2024-50043}
- devlink: fix xa_alloc_cyclic() error handling (Michal Swiatkowski) [Orabug: 37828271] {CVE-2025-22017}



From el-errata at oss.oracle.com  Wed Jun 10 20:01:49 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Wed, 10 Jun 2026 13:01:49 -0700
Subject: [El-errata] ELSA-2026-50305 Important: Oracle Linux 8 Unbreakable
 Enterprise kernel security update
Message-ID: <mailman.38.1781121723.18.el-errata@oss.oracle.com>

Oracle Linux Security Advisory ELSA-2026-50305

http://linux.oracle.com/errata/ELSA-2026-50305.html

The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:

x86_64:
bpftool-5.15.0-321.202.5.1.el8uek.x86_64.rpm
kernel-uek-5.15.0-321.202.5.1.el8uek.x86_64.rpm
kernel-uek-core-5.15.0-321.202.5.1.el8uek.x86_64.rpm
kernel-uek-debug-5.15.0-321.202.5.1.el8uek.x86_64.rpm
kernel-uek-debug-core-5.15.0-321.202.5.1.el8uek.x86_64.rpm
kernel-uek-debug-devel-5.15.0-321.202.5.1.el8uek.x86_64.rpm
kernel-uek-debug-modules-5.15.0-321.202.5.1.el8uek.x86_64.rpm
kernel-uek-debug-modules-extra-5.15.0-321.202.5.1.el8uek.x86_64.rpm
kernel-uek-devel-5.15.0-321.202.5.1.el8uek.x86_64.rpm
kernel-uek-doc-5.15.0-321.202.5.1.el8uek.noarch.rpm
kernel-uek-modules-5.15.0-321.202.5.1.el8uek.x86_64.rpm
kernel-uek-modules-extra-5.15.0-321.202.5.1.el8uek.x86_64.rpm
kernel-uek-container-5.15.0-321.202.5.1.el8uek.x86_64.rpm
kernel-uek-container-debug-5.15.0-321.202.5.1.el8uek.x86_64.rpm

aarch64:
bpftool-5.15.0-321.202.5.1.el8uek.aarch64.rpm
kernel-uek-5.15.0-321.202.5.1.el8uek.aarch64.rpm
kernel-uek-core-5.15.0-321.202.5.1.el8uek.aarch64.rpm
kernel-uek-debug-5.15.0-321.202.5.1.el8uek.aarch64.rpm
kernel-uek-debug-core-5.15.0-321.202.5.1.el8uek.aarch64.rpm
kernel-uek-debug-devel-5.15.0-321.202.5.1.el8uek.aarch64.rpm
kernel-uek-debug-modules-5.15.0-321.202.5.1.el8uek.aarch64.rpm
kernel-uek-debug-modules-extra-5.15.0-321.202.5.1.el8uek.aarch64.rpm
kernel-uek-devel-5.15.0-321.202.5.1.el8uek.aarch64.rpm
kernel-uek-doc-5.15.0-321.202.5.1.el8uek.noarch.rpm
kernel-uek-modules-5.15.0-321.202.5.1.el8uek.aarch64.rpm
kernel-uek-modules-extra-5.15.0-321.202.5.1.el8uek.aarch64.rpm
kernel-uek-container-5.15.0-321.202.5.1.el8uek.aarch64.rpm
kernel-uek-container-debug-5.15.0-321.202.5.1.el8uek.aarch64.rpm


SRPMS:
http://oss.oracle.com/ol8/SRPMS-updates/kernel-uek-5.15.0-321.202.5.1.el8uek.src.rpm

Related CVEs:

CVE-2025-10263




Description of changes:

[5.15.0-321.202.5.1]
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Rutland)  [Orabug: 39017590]  {CVE-2025-10263}
- arm64: tlb: Add ARM64_WORKAROUND_REPEAT_TLBI_SYNC (Mark Rutland)  [Orabug: 39017590]
- ARM: uek: Disable CONFIG_NVIDIA_CARMEL_CNP_ERRATUM (Boris Ostrovsky)  [Orabug: 39017590]
- arm64: tlb: allow XZR argument to TLBI ops (Mark Rutland)  [Orabug: 39017590]
- arm64: cputype: Add C1-Premium definitions (Mark Rutland)  [Orabug: 39017590]
- arm64: cputype: Add C1-Ultra definitions (Mark Rutland)  [Orabug: 39017590]



From el-errata at oss.oracle.com  Wed Jun 10 20:02:04 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Wed, 10 Jun 2026 13:02:04 -0700
Subject: [El-errata] ELSA-2026-24340 Important: Oracle Linux 8 frr security
 update
Message-ID: <mailman.41.1781121737.18.el-errata@oss.oracle.com>

Oracle Linux Security Advisory ELSA-2026-24340

http://linux.oracle.com/errata/ELSA-2026-24340.html

The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:

x86_64:
frr-7.5.1-24.0.1.el8_10.x86_64.rpm
frr-selinux-7.5.1-24.0.1.el8_10.noarch.rpm

aarch64:
frr-7.5.1-24.0.1.el8_10.aarch64.rpm
frr-selinux-7.5.1-24.0.1.el8_10.noarch.rpm


SRPMS:
http://oss.oracle.com/ol8/SRPMS-updates/frr-7.5.1-24.0.1.el8_10.src.rpm

Related CVEs:

CVE-2026-37457




Description of changes:

[7.5.1-24.0.1]
- Fix POSTIN scriptlet [Orabug: 34712485]

[7.5.1-24]
- Fix off-by-one error in FlowSpec operator array bounds checking (CVE-2026-37457)
- Resolves: RHEL-174676



From el-errata at oss.oracle.com  Wed Jun 10 20:02:06 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Wed, 10 Jun 2026 13:02:06 -0700
Subject: [El-errata] ELSA-2026-24365 Important: Oracle Linux 8 unbound
 security update
Message-ID: <mailman.42.1781121739.18.el-errata@oss.oracle.com>

Oracle Linux Security Advisory ELSA-2026-24365

http://linux.oracle.com/errata/ELSA-2026-24365.html

The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:

x86_64:
python3-unbound-1.16.2-5.11.el8_10.x86_64.rpm
unbound-1.16.2-5.11.el8_10.x86_64.rpm
unbound-devel-1.16.2-5.11.el8_10.i686.rpm
unbound-devel-1.16.2-5.11.el8_10.x86_64.rpm
unbound-libs-1.16.2-5.11.el8_10.i686.rpm
unbound-libs-1.16.2-5.11.el8_10.x86_64.rpm

aarch64:
python3-unbound-1.16.2-5.11.el8_10.aarch64.rpm
unbound-1.16.2-5.11.el8_10.aarch64.rpm
unbound-devel-1.16.2-5.11.el8_10.aarch64.rpm
unbound-libs-1.16.2-5.11.el8_10.aarch64.rpm


SRPMS:
http://oss.oracle.com/ol8/SRPMS-updates/unbound-1.16.2-5.11.el8_10.src.rpm

Related CVEs:

CVE-2026-42944
CVE-2026-42959




Description of changes:

[1.16.2-5.11]
- Fix CVE-2026-42944 (RHEL?177909)
- Fix CVE-2026-42959 (RHEL-177809)



From el-errata at oss.oracle.com  Wed Jun 10 20:02:08 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Wed, 10 Jun 2026 13:02:08 -0700
Subject: [El-errata] ELSA-2026-24545 Important: Oracle Linux 8 libyang
 security update
Message-ID: <mailman.43.1781121741.18.el-errata@oss.oracle.com>

Oracle Linux Security Advisory ELSA-2026-24545

http://linux.oracle.com/errata/ELSA-2026-24545.html

The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:

x86_64:
libyang-1.0.184-2.el8_10.i686.rpm
libyang-1.0.184-2.el8_10.x86_64.rpm

aarch64:
libyang-1.0.184-2.el8_10.aarch64.rpm


SRPMS:
http://oss.oracle.com/ol8/SRPMS-updates/libyang-1.0.184-2.el8_10.src.rpm

Related CVEs:

CVE-2026-44673




Description of changes:

[1.0.184-2]
- DoS or arbitrary code execution via maliciously crafted LYB binary blob
- Resolves: RHEL-177017 - CVE-2026-44673



From el-errata at oss.oracle.com  Wed Jun 10 20:01:56 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Wed, 10 Jun 2026 13:01:56 -0700
Subject: [El-errata] ELSA-2026-50306 Important: Oracle Linux 8 Unbreakable
 Enterprise kernel security update
Message-ID: <mailman.44.1781121831.18.el-errata@oss.oracle.com>

Oracle Linux Security Advisory ELSA-2026-50306

http://linux.oracle.com/errata/ELSA-2026-50306.html

The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:

x86_64:
kernel-uek-5.4.17-2136.356.4.2.el8uek.x86_64.rpm
kernel-uek-container-5.4.17-2136.356.4.2.el8uek.x86_64.rpm
kernel-uek-container-debug-5.4.17-2136.356.4.2.el8uek.x86_64.rpm
kernel-uek-debug-5.4.17-2136.356.4.2.el8uek.x86_64.rpm
kernel-uek-debug-devel-5.4.17-2136.356.4.2.el8uek.x86_64.rpm
kernel-uek-devel-5.4.17-2136.356.4.2.el8uek.x86_64.rpm
kernel-uek-doc-5.4.17-2136.356.4.2.el8uek.noarch.rpm


SRPMS:
http://oss.oracle.com/ol8/SRPMS-updates/kernel-uek-5.4.17-2136.356.4.2.el8uek.src.rpm

Related CVEs:

CVE-2025-10263




Description of changes:

[5.4.17-2136.356.4.2]
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Rutland)  [Orabug: 39017592]  {CVE-2025-10263}
- arm64: tlb: Add ARM64_WORKAROUND_REPEAT_TLBI_SYNC (Mark Rutland)  [Orabug: 39017592]
- ARM: uek: Disable CONFIG_QCOM_FALKOR_ERRATUM_1003 (Boris Ostrovsky)  [Orabug: 39017592]
- arm64: tlb: allow XZR argument to TLBI ops (Mark Rutland)  [Orabug: 39017592]
- arm64: cputype: Add C1-Premium definitions (Mark Rutland)  [Orabug: 39017592]
- arm64: cputype: Add C1-Ultra definitions (Mark Rutland)  [Orabug: 39017592]



From el-errata at oss.oracle.com  Wed Jun 10 20:02:14 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Wed, 10 Jun 2026 13:02:14 -0700
Subject: [El-errata] ELSA-2026-50306 Important: Oracle Linux 7 Unbreakable
 Enterprise kernel security update
Message-ID: <mailman.45.1781121832.18.el-errata@oss.oracle.com>

Oracle Linux Security Advisory ELSA-2026-50306

http://linux.oracle.com/errata/ELSA-2026-50306.html

The following updated rpms for Oracle Linux 7 have been uploaded to the Unbreakable Linux Network:

x86_64:
kernel-uek-5.4.17-2136.356.4.2.el7uek.x86_64.rpm
kernel-uek-container-5.4.17-2136.356.4.2.el7uek.x86_64.rpm
kernel-uek-container-debug-5.4.17-2136.356.4.2.el7uek.x86_64.rpm
kernel-uek-debug-5.4.17-2136.356.4.2.el7uek.x86_64.rpm
kernel-uek-debug-devel-5.4.17-2136.356.4.2.el7uek.x86_64.rpm
kernel-uek-devel-5.4.17-2136.356.4.2.el7uek.x86_64.rpm
kernel-uek-doc-5.4.17-2136.356.4.2.el7uek.noarch.rpm
kernel-uek-tools-5.4.17-2136.356.4.2.el7uek.x86_64.rpm


SRPMS:
http://oss.oracle.com/ol7/SRPMS-updates/kernel-uek-5.4.17-2136.356.4.2.el7uek.src.rpm

Related CVEs:

CVE-2025-10263




Description of changes:

[5.4.17-2136.356.4.2]
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Rutland)  [Orabug: 39017592]  {CVE-2025-10263}
- arm64: tlb: Add ARM64_WORKAROUND_REPEAT_TLBI_SYNC (Mark Rutland)  [Orabug: 39017592]
- ARM: uek: Disable CONFIG_QCOM_FALKOR_ERRATUM_1003 (Boris Ostrovsky)  [Orabug: 39017592]
- arm64: tlb: allow XZR argument to TLBI ops (Mark Rutland)  [Orabug: 39017592]
- arm64: cputype: Add C1-Premium definitions (Mark Rutland)  [Orabug: 39017592]
- arm64: cputype: Add C1-Ultra definitions (Mark Rutland)  [Orabug: 39017592]

[5.4.17-2136.356.4.1]
- smb: client: reject userspace cifs.spnego descriptions (Asim Viladi Oglu Manizada)  [Orabug: 39463669]

[5.4.17-2136.356.4]
- tun: free page on build_skb failure in tun_xdp_one() (Weiming Shi) [Orabug: 39429147]
- tap: free page on error paths in tap_get_user_xdp() (Weiming Shi) [Orabug: 39429147]
- tun: free page on short-frame rejection in tun_xdp_one() (Weiming Shi) [Orabug: 39429147]

[5.4.17-2136.356.3]
- ptrace: slightly saner 'get_dumpable()' logic (Linus Torvalds) [Orabug: 39384275,39391459] {CVE-2026-46333}
- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Hyunwoo Kim) [Orabug: 39368828,39441326] {CVE-2026-43503,CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (William Bowling) [Orabug: 39368828] {CVE-2026-46300}

[5.4.17-2136.356.2]
- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Jeff Layton) [Orabug: 39167617,39368718] {CVE-2026-31402}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (Maurizio Lombardi) [Orabug: 38985173,39368732] {CVE-2026-23216}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (Maurizio Lombardi) [Orabug: 38970455,39368774] {CVE-2026-23193}
- xfrm: esp: avoid in-place decrypt on shared skb frags (Kuan-Ting Chen) [Orabug: 39334580,39367147] {CVE-2026-43284}
- x86/CPU/AMD: Add a fix for AMD-SB-7052 (Prathyushi Nangia) [Orabug: 39218897] {CVE-2025-54518}

[5.4.17-2136.356.1]
- arm64/kvm: Include linux/random.h in trng.c (Siddh Raman Pant) [Orabug: 39327096]
- i2c: designware: Disable TX_EMPTY irq while waiting for block length byte (Tam Nguyen) [Orabug: 39174662]
- i2c: designware: Handle invalid SMBus block data response length value (Tam Nguyen) [Orabug: 39174662]
- i2c: designware: fix __i2c_dw_disable() in case master is holding SCL low (Yann Sionneau) [Orabug: 39174662]

[5.4.17-2136.355.3]
- crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [Orabug: 39250687,39331106] {CVE-2026-43077}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [Orabug: 39250687,39331111] {CVE-2026-43078}
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [Orabug: 39250687]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [Orabug: 39250687,39300911] {CVE-2026-43033}
- crypto: authenc - use memcpy_sglist() instead of null skcipher (Eric Biggers) [Orabug: 39250687]
- crypto: algif_aead - snapshot IV for async AEAD requests (Douya Le) [Orabug: 39250687,39452217] {CVE-2026-46028}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [Orabug: 39250687,39283868,39292250] {CVE-2026-31431}
- crypto: algif_aead - use memcpy_sglist() instead of null skcipher (Eric Biggers) [Orabug: 39250687] {CVE-2026-31431}
- crypto: scatterwalk - Backport memcpy_sglist() (Eric Biggers) [Orabug: 39250687]
- crypto: doc - fix kernel-doc notation in chacha.c and af_alg.c (Randy Dunlap) [Orabug: 39250687]

[5.4.17-2136.355.2]
- Revert "rds: Drop rds conn in connect worker if not in down state." (Alok Tiwari) [Orabug: 39253770]
- x86/CPU: Fix FPDSS on Zen1 (Siddh Raman Pant) [Orabug: 39241225,39273723] {CVE-2026-31628}
- SUNRPC: svcauth_gss: avoid NULL deref on zero length gss_token in gss_read_proxy_verf (Joshua Rogers) [Orabug: 38852342] {CVE-2025-71120}

[5.4.17-2136.355.1]
- net/sched: Enforce that teql can only be used as root qdisc (Jamal Hadi Salim) [Orabug: 38930950] {CVE-2026-23074}

[5.4.17-2136.354.4]
- macvlan: fix possible UAF in macvlan_forward_source() (Eric Dumazet) [Orabug: 38887731] {CVE-2026-23001}
- macvlan: Use 'hash' iterators to simplify code (Christophe Jaillet) [Orabug: 38887731] {CVE-2026-23001}
- macvlan: Add nodst option to macvlan type source (Jethro Beekman) [Orabug: 38887731] {CVE-2026-23001}
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Eric Dumazet) [Orabug: 38970510,39188399] {CVE-2026-23209,CVE-2026-23273}
- macvlan: fix error recovery in macvlan_common_newlink() (Eric Dumazet) [Orabug: 38970510] {CVE-2026-23209}



From el-errata at oss.oracle.com  Wed Jun 10 20:02:02 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Wed, 10 Jun 2026 13:02:02 -0700
Subject: [El-errata] ELBA-2026-24588 Oracle Linux 8 sos bug fix and
 enhancement update
Message-ID: <mailman.46.1781121834.18.el-errata@oss.oracle.com>

Oracle Linux Bug Fix Advisory ELBA-2026-24588

http://linux.oracle.com/errata/ELBA-2026-24588.html

The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:

x86_64:
sos-4.11.0-1.0.1.el8_10.noarch.rpm
sos-audit-4.11.0-1.0.1.el8_10.noarch.rpm

aarch64:
sos-4.11.0-1.0.1.el8_10.noarch.rpm
sos-audit-4.11.0-1.0.1.el8_10.noarch.rpm


SRPMS:
http://oss.oracle.com/ol8/SRPMS-updates/sos-4.11.0-1.0.1.el8_10.src.rpm



Description of changes:

[4.11.0-1.0.1]
- Add optional proc/ and sys/ regular file de-duplication step and reduplication binary [Orabug: 38765115]
- Add kvm debugfs to sosreport [Orabug: 38869053]
- Add qtree pci,numa command to virsh-qemu-monitor command [Orabug: 38465950]
- Adding OSMH support information [Orabug: 38158377]
- Add Keyboard exception handler to collector [Orabug: 37874482]
- Print stack of all un-interrupted processes [Orabug: 37630111]
- Update the enabled and skipped plugins lists to match ExaData's
  requirements. [Orabug: 37440315]
- Disable upload options [Orabug: 31969352]
- Disable upload option to sos report collector [Orabug: 36069764]
- Adding socket statistics command output [Orabug: 36491747]
- Add irq debugfs to sosreport [Orabug: 36511145]
- Added os detect string [Orabug: 28674897]
- Added sos-oraclelinux-vendor-vendorurl.patch
- Remove rpc_clnt directory from sunrpc debugfs [Orabug: 37097463]
- Disable ethtool EEPROM dump for link down interfaces [Orabug: 37050543]
- Modify sos.spec to make python3-magic as dependency for sos package [Orabug: 36826342]
- Add exadata plugin to collect exadata specific info [Orabug: 35312548]
- Append .txt extension to files rejected by MOS policy [Orabug: 35801795]
- Collecting last 50k lines of ftrace file trace [Orabug: 36448808]
- Adding socket statistics command output [Orabug: 36491747]
- Add IO queue depth of all the devices on node [Orabug: 35849258]
- Disable upload option to sos report collector [Orabug: 36069764]
- Add irq debugfs to sosreport [Orabug: 36511145]
- Collect all rsyslogs files for all-logs option [Orabug: 36264341]
- Set SIGPIPE to default action for BrokenPipeError [Orabug: 36016241]
- Modifying dnf history info remove empty files [Orabug: 35350237]
- Modifying dnf history info transaction index [Orabug: 35350237]
- Adding virsh guest cgroup configuration [Orabug: 35088964]
- Adding PluginOpt support for ksplice and btrfs  [Orabug: 34993258]
- Adding virsh qemu-monitor info-tree command [Orabug: 34650374]
- append .txt to .com domain named files [Orabug: 34523347]
- Adding dmesg -T to show timestamp for syslog comparison [Orabug: 34250313]
- Adding uptrack-uname to show effective ksplice kernel version [Orabug: 33553351]
- Fix ksplice plugin does not show description [Orabug: 32886513]
- Adjusted ksplice plugin patches for path change [Orabug: 32881277]
- Fix patch for Orabug 31969352 [Orabug: 32822570]
- Add in some btrfs commands [Orabug: 32727607]
- Add /var/run/ksplice/debug to sos ksplice plugin [Orabug: 32618933]
- Do not exit on unknown plugin [Orabug: 32556170]
- Allow a journal log size to be smaller than 100M [Orabug: 32454362]
- Replace RH_FTP_HOST and RH_API_HOST with "_none_" [Orabug: 31975601]
- Disable upload options for OracleLinux [Orabug: 31969352]
- Added sos-oraclelinux-vendor-vendorurl.patch
- Fix os detect string for Oracle Linux [Orabug: 28674897]
- Add ksplice plugin [Orabug: 30273666] (Philippe Vanhaesendonck)
- [ovn_central] call podman exec without a timeout
  Resolves: bz1767359

[= 4.11.0-1]
- Update to 4.11.0-1
  Resolves: RHEL-157813



From el-errata at oss.oracle.com  Wed Jun 10 20:02:00 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Wed, 10 Jun 2026 13:02:00 -0700
Subject: [El-errata] ELSA-2026-50306 Important: Oracle Linux 8 Unbreakable
 Enterprise kernel security update
Message-ID: <mailman.47.1781121856.18.el-errata@oss.oracle.com>

Oracle Linux Security Advisory ELSA-2026-50306

http://linux.oracle.com/errata/ELSA-2026-50306.html

The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:


aarch64:
kernel-uek-5.4.17-2136.356.4.2.el8uek.aarch64.rpm
kernel-uek-debug-5.4.17-2136.356.4.2.el8uek.aarch64.rpm
kernel-uek-debug-devel-5.4.17-2136.356.4.2.el8uek.aarch64.rpm
kernel-uek-devel-5.4.17-2136.356.4.2.el8uek.aarch64.rpm
kernel-uek-doc-5.4.17-2136.356.4.2.el8uek.noarch.rpm


SRPMS:
http://oss.oracle.com/ol8/SRPMS-updates/kernel-uek-5.4.17-2136.356.4.2.el8uek.src.rpm

Related CVEs:

CVE-2025-10263




Description of changes:

[5.4.17-2136.356.4.2]
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Rutland)  [Orabug: 39017592]  {CVE-2025-10263}
- arm64: tlb: Add ARM64_WORKAROUND_REPEAT_TLBI_SYNC (Mark Rutland)  [Orabug: 39017592]
- ARM: uek: Disable CONFIG_QCOM_FALKOR_ERRATUM_1003 (Boris Ostrovsky)  [Orabug: 39017592]
- arm64: tlb: allow XZR argument to TLBI ops (Mark Rutland)  [Orabug: 39017592]
- arm64: cputype: Add C1-Premium definitions (Mark Rutland)  [Orabug: 39017592]
- arm64: cputype: Add C1-Ultra definitions (Mark Rutland)  [Orabug: 39017592]

[5.4.17-2136.356.4.1]
- smb: client: reject userspace cifs.spnego descriptions (Asim Viladi Oglu Manizada)  [Orabug: 39463669]

[5.4.17-2136.356.4]
- tun: free page on build_skb failure in tun_xdp_one() (Weiming Shi) [Orabug: 39429147]
- tap: free page on error paths in tap_get_user_xdp() (Weiming Shi) [Orabug: 39429147]
- tun: free page on short-frame rejection in tun_xdp_one() (Weiming Shi) [Orabug: 39429147]

[5.4.17-2136.356.3]
- ptrace: slightly saner 'get_dumpable()' logic (Linus Torvalds) [Orabug: 39384275,39391459] {CVE-2026-46333}
- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Hyunwoo Kim) [Orabug: 39368828,39441326] {CVE-2026-43503,CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (William Bowling) [Orabug: 39368828] {CVE-2026-46300}

[5.4.17-2136.356.2]
- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Jeff Layton) [Orabug: 39167617,39368718] {CVE-2026-31402}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (Maurizio Lombardi) [Orabug: 38985173,39368732] {CVE-2026-23216}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (Maurizio Lombardi) [Orabug: 38970455,39368774] {CVE-2026-23193}
- xfrm: esp: avoid in-place decrypt on shared skb frags (Kuan-Ting Chen) [Orabug: 39334580,39367147] {CVE-2026-43284}
- x86/CPU/AMD: Add a fix for AMD-SB-7052 (Prathyushi Nangia) [Orabug: 39218897] {CVE-2025-54518}

[5.4.17-2136.356.1]
- arm64/kvm: Include linux/random.h in trng.c (Siddh Raman Pant) [Orabug: 39327096]
- i2c: designware: Disable TX_EMPTY irq while waiting for block length byte (Tam Nguyen) [Orabug: 39174662]
- i2c: designware: Handle invalid SMBus block data response length value (Tam Nguyen) [Orabug: 39174662]
- i2c: designware: fix __i2c_dw_disable() in case master is holding SCL low (Yann Sionneau) [Orabug: 39174662]

[5.4.17-2136.355.3]
- crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [Orabug: 39250687,39331106] {CVE-2026-43077}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [Orabug: 39250687,39331111] {CVE-2026-43078}
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [Orabug: 39250687]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [Orabug: 39250687,39300911] {CVE-2026-43033}
- crypto: authenc - use memcpy_sglist() instead of null skcipher (Eric Biggers) [Orabug: 39250687]
- crypto: algif_aead - snapshot IV for async AEAD requests (Douya Le) [Orabug: 39250687,39452217] {CVE-2026-46028}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [Orabug: 39250687,39283868,39292250] {CVE-2026-31431}
- crypto: algif_aead - use memcpy_sglist() instead of null skcipher (Eric Biggers) [Orabug: 39250687] {CVE-2026-31431}
- crypto: scatterwalk - Backport memcpy_sglist() (Eric Biggers) [Orabug: 39250687]
- crypto: doc - fix kernel-doc notation in chacha.c and af_alg.c (Randy Dunlap) [Orabug: 39250687]

[5.4.17-2136.355.2]
- Revert "rds: Drop rds conn in connect worker if not in down state." (Alok Tiwari) [Orabug: 39253770]
- x86/CPU: Fix FPDSS on Zen1 (Siddh Raman Pant) [Orabug: 39241225,39273723] {CVE-2026-31628}
- SUNRPC: svcauth_gss: avoid NULL deref on zero length gss_token in gss_read_proxy_verf (Joshua Rogers) [Orabug: 38852342] {CVE-2025-71120}

[5.4.17-2136.355.1]
- net/sched: Enforce that teql can only be used as root qdisc (Jamal Hadi Salim) [Orabug: 38930950] {CVE-2026-23074}

[5.4.17-2136.354.4]
- macvlan: fix possible UAF in macvlan_forward_source() (Eric Dumazet) [Orabug: 38887731] {CVE-2026-23001}
- macvlan: Use 'hash' iterators to simplify code (Christophe Jaillet) [Orabug: 38887731] {CVE-2026-23001}
- macvlan: Add nodst option to macvlan type source (Jethro Beekman) [Orabug: 38887731] {CVE-2026-23001}
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Eric Dumazet) [Orabug: 38970510,39188399] {CVE-2026-23209,CVE-2026-23273}
- macvlan: fix error recovery in macvlan_common_newlink() (Eric Dumazet) [Orabug: 38970510] {CVE-2026-23209}



From el-errata at oss.oracle.com  Wed Jun 10 20:07:27 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Wed, 10 Jun 2026 13:07:27 -0700
Subject: [El-errata] ELSA-2026-50304 Important: Unbreakable Enterprise
 kernel security update
Message-ID: <mailman.48.1781122095.18.el-errata@oss.oracle.com>

Oracle Linux Security Advisory ELSA-2026-50304

http://linux.oracle.com/errata/ELSA-2026-50304.html

The following updated rpms for have been uploaded to the Unbreakable Linux Network:

x86_64:
kernel-uek-6.12.0-203.76.7.3.el10uek.x86_64.rpm
kernel-uek-core-6.12.0-203.76.7.3.el10uek.x86_64.rpm
kernel-uek-devel-6.12.0-203.76.7.3.el10uek.x86_64.rpm
kernel-uek-doc-6.12.0-203.76.7.3.el10uek.noarch.rpm
kernel-uek-modules-6.12.0-203.76.7.3.el10uek.x86_64.rpm
kernel-uek-modules-core-6.12.0-203.76.7.3.el10uek.x86_64.rpm
kernel-uek-modules-deprecated-6.12.0-203.76.7.3.el10uek.x86_64.rpm
kernel-uek-modules-desktop-6.12.0-203.76.7.3.el10uek.x86_64.rpm
kernel-uek-modules-extra-6.12.0-203.76.7.3.el10uek.x86_64.rpm
kernel-uek-modules-extra-netfilter-6.12.0-203.76.7.3.el10uek.x86_64.rpm
kernel-uek-modules-usb-6.12.0-203.76.7.3.el10uek.x86_64.rpm
kernel-uek-modules-wireless-6.12.0-203.76.7.3.el10uek.x86_64.rpm
kernel-uek-tools-6.12.0-203.76.7.3.el10uek.x86_64.rpm
kernel-uek-debug-6.12.0-203.76.7.3.el10uek.x86_64.rpm
kernel-uek-debug-core-6.12.0-203.76.7.3.el10uek.x86_64.rpm
kernel-uek-debug-devel-6.12.0-203.76.7.3.el10uek.x86_64.rpm
kernel-uek-debug-modules-6.12.0-203.76.7.3.el10uek.x86_64.rpm
kernel-uek-debug-modules-core-6.12.0-203.76.7.3.el10uek.x86_64.rpm
kernel-uek-debug-modules-deprecated-6.12.0-203.76.7.3.el10uek.x86_64.rpm
kernel-uek-debug-modules-desktop-6.12.0-203.76.7.3.el10uek.x86_64.rpm
kernel-uek-debug-modules-extra-6.12.0-203.76.7.3.el10uek.x86_64.rpm
kernel-uek-debug-modules-extra-netfilter-6.12.0-203.76.7.3.el10uek.x86_64.rpm
kernel-uek-debug-modules-usb-6.12.0-203.76.7.3.el10uek.x86_64.rpm
kernel-uek-debug-modules-wireless-6.12.0-203.76.7.3.el10uek.x86_64.rpm

aarch64:
kernel-uek-6.12.0-203.76.7.3.el10uek.aarch64.rpm
kernel-uek-core-6.12.0-203.76.7.3.el10uek.aarch64.rpm
kernel-uek-devel-6.12.0-203.76.7.3.el10uek.aarch64.rpm
kernel-uek-doc-6.12.0-203.76.7.3.el10uek.noarch.rpm
kernel-uek-modules-6.12.0-203.76.7.3.el10uek.aarch64.rpm
kernel-uek-modules-core-6.12.0-203.76.7.3.el10uek.aarch64.rpm
kernel-uek-modules-deprecated-6.12.0-203.76.7.3.el10uek.aarch64.rpm
kernel-uek-modules-desktop-6.12.0-203.76.7.3.el10uek.aarch64.rpm
kernel-uek-modules-extra-6.12.0-203.76.7.3.el10uek.aarch64.rpm
kernel-uek-modules-extra-netfilter-6.12.0-203.76.7.3.el10uek.aarch64.rpm
kernel-uek-modules-usb-6.12.0-203.76.7.3.el10uek.aarch64.rpm
kernel-uek-modules-wireless-6.12.0-203.76.7.3.el10uek.aarch64.rpm
kernel-uek-tools-6.12.0-203.76.7.3.el10uek.aarch64.rpm
kernel-uek-debug-6.12.0-203.76.7.3.el10uek.aarch64.rpm
kernel-uek-debug-core-6.12.0-203.76.7.3.el10uek.aarch64.rpm
kernel-uek-debug-devel-6.12.0-203.76.7.3.el10uek.aarch64.rpm
kernel-uek-debug-modules-6.12.0-203.76.7.3.el10uek.aarch64.rpm
kernel-uek-debug-modules-core-6.12.0-203.76.7.3.el10uek.aarch64.rpm
kernel-uek-debug-modules-deprecated-6.12.0-203.76.7.3.el10uek.aarch64.rpm
kernel-uek-debug-modules-desktop-6.12.0-203.76.7.3.el10uek.aarch64.rpm
kernel-uek-debug-modules-extra-6.12.0-203.76.7.3.el10uek.aarch64.rpm
kernel-uek-debug-modules-extra-netfilter-6.12.0-203.76.7.3.el10uek.aarch64.rpm
kernel-uek-debug-modules-usb-6.12.0-203.76.7.3.el10uek.aarch64.rpm
kernel-uek-debug-modules-wireless-6.12.0-203.76.7.3.el10uek.aarch64.rpm
kernel-uek64k-6.12.0-203.76.7.3.el10uek.aarch64.rpm
kernel-uek64k-core-6.12.0-203.76.7.3.el10uek.aarch64.rpm
kernel-uek64k-devel-6.12.0-203.76.7.3.el10uek.aarch64.rpm
kernel-uek64k-modules-6.12.0-203.76.7.3.el10uek.aarch64.rpm
kernel-uek64k-modules-core-6.12.0-203.76.7.3.el10uek.aarch64.rpm
kernel-uek64k-modules-deprecated-6.12.0-203.76.7.3.el10uek.aarch64.rpm
kernel-uek64k-modules-desktop-6.12.0-203.76.7.3.el10uek.aarch64.rpm
kernel-uek64k-modules-extra-6.12.0-203.76.7.3.el10uek.aarch64.rpm
kernel-uek64k-modules-extra-netfilter-6.12.0-203.76.7.3.el10uek.aarch64.rpm
kernel-uek64k-modules-usb-6.12.0-203.76.7.3.el10uek.aarch64.rpm
kernel-uek64k-modules-wireless-6.12.0-203.76.7.3.el10uek.aarch64.rpm


SRPMS:
http://oss.oracle.com/ol10/SRPMS-updates/kernel-uek-6.12.0-203.76.7.3.el10uek.src.rpm

Related CVEs:

CVE-2025-10263




Description of changes:

[6.12.0-203.76.7.3]
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Rutland)  [Orabug: 39017589]  {CVE-2025-10263}
- arm64: tlb: Add ARM64_WORKAROUND_REPEAT_TLBI_SYNC (Mark Rutland)  [Orabug: 39017589]
- arm64: tlb: allow XZR argument to TLBI ops (Mark Rutland)  [Orabug: 39017589]
- arm64: cputype: Add C1-Premium definitions (Mark Rutland)  [Orabug: 39017589]
- arm64: cputype: Add C1-Ultra definitions (Mark Rutland)  [Orabug: 39017589]

[6.12.0-203.76.7.2]
- kabi: update FIPS kABI files (Saeed Mirzamohammadi)  [Orabug: 39489008]
- KEYS: Reserve key usage values (Saeed Mirzamohammadi)  [Orabug: 39489008]
- crypto: keep FIPS MPI helpers private (Saeed Mirzamohammadi)  [Orabug: 39489008]
- crypto: keep FIPS compression helpers private (Saeed Mirzamohammadi)  [Orabug: 39489008]
- crypto: keep FIPS helper library symbols private (Saeed Mirzamohammadi)  [Orabug: 39489008]
- crypto: tcrypt - clamp num_mb to avoid divide-by-zero (Saeed Mirzamohammadi)  [Orabug: 39489008]
- crypto: tcrypt - stop ahash speed tests when setkey fails (Saeed Mirzamohammadi)  [Orabug: 39489008]
- crypto: add x86 GHASH CLMUL to FIPS module (Saeed Mirzamohammadi)  [Orabug: 39489008]
- crypto: add fixed-time AES to FIPS module (Saeed Mirzamohammadi)  [Orabug: 39489008]
- fips: add scatterwalk to FIPS module (Saeed Mirzamohammadi)  [Orabug: 39489008]
- crypto: avoid auto-load for arch specific impls (Saeed Mirzamohammadi)  [Orabug: 39489008]
- arm64/crypto: wire up FIPS aliases and helpers (Saeed Mirzamohammadi)  [Orabug: 39489008]
- crypto: share alg registry between FIPS and base kernel (Saeed Mirzamohammadi)  [Orabug: 39489008]
- crypto: keep crypto_user out of the FIPS module (Saeed Mirzamohammadi)  [Orabug: 39489008]
- crypto: tcrypt - skip retest in FIPS mode (Saeed Mirzamohammadi)  [Orabug: 39489008]
- crypto: skip redundant FIPS self-module signature check (Saeed Mirzamohammadi)  [Orabug: 39489008]
- scripts: fail cleanly on arm64 boot image formats (Saeed Mirzamohammadi)  [Orabug: 39489008]
- crypto/hkdf: Skip tests with keys too short in FIPS mode (Saeed Mirzamohammadi)  [Orabug: 39489008]
- uek-rpm: build module symvers before fips140.ko (Saeed Mirzamohammadi)  [Orabug: 39489008]
- crypto: add crc64_rocksoft_generic to the FIPS module (Saeed Mirzamohammadi)  [Orabug: 39489008]
- crypto: add keywrap to the FIPS module (Saeed Mirzamohammadi)  [Orabug: 39489008]
- crypto: add cts to the FIPS module (Saeed Mirzamohammadi)  [Orabug: 39489008]
- crypto: convert kdf_sp800108 to CRYPTO_API() (Saeed Mirzamohammadi)  [Orabug: 39489008]
- fips: drop ansi_cprng and revert ansi_cprng FIPS hooks (Saeed Mirzamohammadi)  [Orabug: 39489008]
- crypto/testmgr: mark xxhash64 as fips disallowed (Saeed Mirzamohammadi)  [Orabug: 39489008]
- Revert "fips: add xxhash64-generic to FIPS module" (Saeed Mirzamohammadi)  [Orabug: 39489008]
- asm-generic/vmlinux.lds.h: remove unreachable FIPS140 branch (Saeed Mirzamohammadi)  [Orabug: 39489008]
- btrfs: switch to library APIs for checksums (Eric Biggers)  [Orabug: 39489008]
- lib/crypto: blake2b: Add BLAKE2b library functions (Eric Biggers)  [Orabug: 39489008]
- byteorder: Add le64_to_cpu_array() and cpu_to_le64_array() (Eric Biggers)  [Orabug: 39489008]



From el-errata at oss.oracle.com  Wed Jun 10 20:07:33 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Wed, 10 Jun 2026 13:07:33 -0700
Subject: [El-errata] ELSA-2026-50304 Important: Oracle Linux 9 Unbreakable
 Enterprise kernel security update
Message-ID: <mailman.51.1781122122.18.el-errata@oss.oracle.com>

Oracle Linux Security Advisory ELSA-2026-50304

http://linux.oracle.com/errata/ELSA-2026-50304.html

The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:

x86_64:
kernel-uek-6.12.0-203.76.7.3.el9uek.x86_64.rpm
kernel-uek-core-6.12.0-203.76.7.3.el9uek.x86_64.rpm
kernel-uek-debug-6.12.0-203.76.7.3.el9uek.x86_64.rpm
kernel-uek-debug-core-6.12.0-203.76.7.3.el9uek.x86_64.rpm
kernel-uek-debug-devel-6.12.0-203.76.7.3.el9uek.x86_64.rpm
kernel-uek-debug-modules-6.12.0-203.76.7.3.el9uek.x86_64.rpm
kernel-uek-debug-modules-core-6.12.0-203.76.7.3.el9uek.x86_64.rpm
kernel-uek-debug-modules-deprecated-6.12.0-203.76.7.3.el9uek.x86_64.rpm
kernel-uek-debug-modules-desktop-6.12.0-203.76.7.3.el9uek.x86_64.rpm
kernel-uek-debug-modules-extra-6.12.0-203.76.7.3.el9uek.x86_64.rpm
kernel-uek-debug-modules-extra-netfilter-6.12.0-203.76.7.3.el9uek.x86_64.rpm
kernel-uek-debug-modules-usb-6.12.0-203.76.7.3.el9uek.x86_64.rpm
kernel-uek-debug-modules-wireless-6.12.0-203.76.7.3.el9uek.x86_64.rpm
kernel-uek-devel-6.12.0-203.76.7.3.el9uek.x86_64.rpm
kernel-uek-doc-6.12.0-203.76.7.3.el9uek.noarch.rpm
kernel-uek-modules-6.12.0-203.76.7.3.el9uek.x86_64.rpm
kernel-uek-modules-core-6.12.0-203.76.7.3.el9uek.x86_64.rpm
kernel-uek-modules-deprecated-6.12.0-203.76.7.3.el9uek.x86_64.rpm
kernel-uek-modules-desktop-6.12.0-203.76.7.3.el9uek.x86_64.rpm
kernel-uek-modules-extra-6.12.0-203.76.7.3.el9uek.x86_64.rpm
kernel-uek-modules-extra-netfilter-6.12.0-203.76.7.3.el9uek.x86_64.rpm
kernel-uek-modules-usb-6.12.0-203.76.7.3.el9uek.x86_64.rpm
kernel-uek-modules-wireless-6.12.0-203.76.7.3.el9uek.x86_64.rpm
kernel-uek-tools-6.12.0-203.76.7.3.el9uek.x86_64.rpm

aarch64:
kernel-uek-6.12.0-203.76.7.3.el9uek.aarch64.rpm
kernel-uek-core-6.12.0-203.76.7.3.el9uek.aarch64.rpm
kernel-uek-debug-6.12.0-203.76.7.3.el9uek.aarch64.rpm
kernel-uek-debug-core-6.12.0-203.76.7.3.el9uek.aarch64.rpm
kernel-uek-debug-devel-6.12.0-203.76.7.3.el9uek.aarch64.rpm
kernel-uek-debug-modules-6.12.0-203.76.7.3.el9uek.aarch64.rpm
kernel-uek-debug-modules-core-6.12.0-203.76.7.3.el9uek.aarch64.rpm
kernel-uek-debug-modules-deprecated-6.12.0-203.76.7.3.el9uek.aarch64.rpm
kernel-uek-debug-modules-desktop-6.12.0-203.76.7.3.el9uek.aarch64.rpm
kernel-uek-debug-modules-extra-6.12.0-203.76.7.3.el9uek.aarch64.rpm
kernel-uek-debug-modules-extra-netfilter-6.12.0-203.76.7.3.el9uek.aarch64.rpm
kernel-uek-debug-modules-usb-6.12.0-203.76.7.3.el9uek.aarch64.rpm
kernel-uek-debug-modules-wireless-6.12.0-203.76.7.3.el9uek.aarch64.rpm
kernel-uek-devel-6.12.0-203.76.7.3.el9uek.aarch64.rpm
kernel-uek-doc-6.12.0-203.76.7.3.el9uek.noarch.rpm
kernel-uek-modules-6.12.0-203.76.7.3.el9uek.aarch64.rpm
kernel-uek-modules-extra-6.12.0-203.76.7.3.el9uek.aarch64.rpm
kernel-uek-modules-core-6.12.0-203.76.7.3.el9uek.aarch64.rpm
kernel-uek-modules-deprecated-6.12.0-203.76.7.3.el9uek.aarch64.rpm
kernel-uek-modules-desktop-6.12.0-203.76.7.3.el9uek.aarch64.rpm
kernel-uek-modules-extra-netfilter-6.12.0-203.76.7.3.el9uek.aarch64.rpm
kernel-uek-modules-usb-6.12.0-203.76.7.3.el9uek.aarch64.rpm
kernel-uek-modules-wireless-6.12.0-203.76.7.3.el9uek.aarch64.rpm
kernel-uek-tools-6.12.0-203.76.7.3.el9uek.aarch64.rpm
kernel-uek64k-6.12.0-203.76.7.3.el9uek.aarch64.rpm
kernel-uek64k-core-6.12.0-203.76.7.3.el9uek.aarch64.rpm
kernel-uek64k-devel-6.12.0-203.76.7.3.el9uek.aarch64.rpm
kernel-uek64k-modules-6.12.0-203.76.7.3.el9uek.aarch64.rpm
kernel-uek64k-modules-core-6.12.0-203.76.7.3.el9uek.aarch64.rpm
kernel-uek64k-modules-deprecated-6.12.0-203.76.7.3.el9uek.aarch64.rpm
kernel-uek64k-modules-desktop-6.12.0-203.76.7.3.el9uek.aarch64.rpm
kernel-uek64k-modules-extra-6.12.0-203.76.7.3.el9uek.aarch64.rpm
kernel-uek64k-modules-extra-netfilter-6.12.0-203.76.7.3.el9uek.aarch64.rpm
kernel-uek64k-modules-usb-6.12.0-203.76.7.3.el9uek.aarch64.rpm
kernel-uek64k-modules-wireless-6.12.0-203.76.7.3.el9uek.aarch64.rpm


SRPMS:
http://oss.oracle.com/ol9/SRPMS-updates/kernel-uek-6.12.0-203.76.7.3.el9uek.src.rpm

Related CVEs:

CVE-2025-10263




Description of changes:

[6.12.0-203.76.7.3]
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Rutland)  [Orabug: 39017589]  {CVE-2025-10263}
- arm64: tlb: Add ARM64_WORKAROUND_REPEAT_TLBI_SYNC (Mark Rutland)  [Orabug: 39017589]
- arm64: tlb: allow XZR argument to TLBI ops (Mark Rutland)  [Orabug: 39017589]
- arm64: cputype: Add C1-Premium definitions (Mark Rutland)  [Orabug: 39017589]
- arm64: cputype: Add C1-Ultra definitions (Mark Rutland)  [Orabug: 39017589]

[6.12.0-203.76.7.2]
- kabi: update FIPS kABI files (Saeed Mirzamohammadi)  [Orabug: 39489008]
- KEYS: Reserve key usage values (Saeed Mirzamohammadi)  [Orabug: 39489008]
- crypto: keep FIPS MPI helpers private (Saeed Mirzamohammadi)  [Orabug: 39489008]
- crypto: keep FIPS compression helpers private (Saeed Mirzamohammadi)  [Orabug: 39489008]
- crypto: keep FIPS helper library symbols private (Saeed Mirzamohammadi)  [Orabug: 39489008]
- crypto: tcrypt - clamp num_mb to avoid divide-by-zero (Saeed Mirzamohammadi)  [Orabug: 39489008]
- crypto: tcrypt - stop ahash speed tests when setkey fails (Saeed Mirzamohammadi)  [Orabug: 39489008]
- crypto: add x86 GHASH CLMUL to FIPS module (Saeed Mirzamohammadi)  [Orabug: 39489008]
- crypto: add fixed-time AES to FIPS module (Saeed Mirzamohammadi)  [Orabug: 39489008]
- fips: add scatterwalk to FIPS module (Saeed Mirzamohammadi)  [Orabug: 39489008]
- crypto: avoid auto-load for arch specific impls (Saeed Mirzamohammadi)  [Orabug: 39489008]
- arm64/crypto: wire up FIPS aliases and helpers (Saeed Mirzamohammadi)  [Orabug: 39489008]
- crypto: share alg registry between FIPS and base kernel (Saeed Mirzamohammadi)  [Orabug: 39489008]
- crypto: keep crypto_user out of the FIPS module (Saeed Mirzamohammadi)  [Orabug: 39489008]
- crypto: tcrypt - skip retest in FIPS mode (Saeed Mirzamohammadi)  [Orabug: 39489008]
- crypto: skip redundant FIPS self-module signature check (Saeed Mirzamohammadi)  [Orabug: 39489008]
- scripts: fail cleanly on arm64 boot image formats (Saeed Mirzamohammadi)  [Orabug: 39489008]
- crypto/hkdf: Skip tests with keys too short in FIPS mode (Saeed Mirzamohammadi)  [Orabug: 39489008]
- uek-rpm: build module symvers before fips140.ko (Saeed Mirzamohammadi)  [Orabug: 39489008]
- crypto: add crc64_rocksoft_generic to the FIPS module (Saeed Mirzamohammadi)  [Orabug: 39489008]
- crypto: add keywrap to the FIPS module (Saeed Mirzamohammadi)  [Orabug: 39489008]
- crypto: add cts to the FIPS module (Saeed Mirzamohammadi)  [Orabug: 39489008]
- crypto: convert kdf_sp800108 to CRYPTO_API() (Saeed Mirzamohammadi)  [Orabug: 39489008]
- fips: drop ansi_cprng and revert ansi_cprng FIPS hooks (Saeed Mirzamohammadi)  [Orabug: 39489008]
- crypto/testmgr: mark xxhash64 as fips disallowed (Saeed Mirzamohammadi)  [Orabug: 39489008]
- Revert "fips: add xxhash64-generic to FIPS module" (Saeed Mirzamohammadi)  [Orabug: 39489008]
- asm-generic/vmlinux.lds.h: remove unreachable FIPS140 branch (Saeed Mirzamohammadi)  [Orabug: 39489008]
- btrfs: switch to library APIs for checksums (Eric Biggers)  [Orabug: 39489008]
- lib/crypto: blake2b: Add BLAKE2b library functions (Eric Biggers)  [Orabug: 39489008]
- byteorder: Add le64_to_cpu_array() and cpu_to_le64_array() (Eric Biggers)  [Orabug: 39489008]



From el-errata at oss.oracle.com  Thu Jun 11 09:39:40 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Thu, 11 Jun 2026 02:39:40 -0700
Subject: [El-errata] ELBA-2026-22798 Oracle Linux 8 grub2 bug fix and
 enhancement update
Message-ID: <mailman.52.1781170794.18.el-errata@oss.oracle.com>

Oracle Linux Bug Fix Advisory ELBA-2026-22798

http://linux.oracle.com/errata/ELBA-2026-22798.html

The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:

x86_64:
grub2-common-2.02-170.0.1.el8_10.2.noarch.rpm
grub2-efi-aa64-modules-2.02-170.0.1.el8_10.2.noarch.rpm
grub2-efi-ia32-2.02-170.0.1.el8_10.2.x86_64.rpm
grub2-efi-ia32-cdboot-2.02-170.0.1.el8_10.2.x86_64.rpm
grub2-efi-ia32-modules-2.02-170.0.1.el8_10.2.noarch.rpm
grub2-efi-x64-2.02-170.0.1.el8_10.2.x86_64.rpm
grub2-efi-x64-cdboot-2.02-170.0.1.el8_10.2.x86_64.rpm
grub2-efi-x64-modules-2.02-170.0.1.el8_10.2.noarch.rpm
grub2-pc-2.02-170.0.1.el8_10.2.x86_64.rpm
grub2-pc-modules-2.02-170.0.1.el8_10.2.noarch.rpm
grub2-tools-2.02-170.0.1.el8_10.2.x86_64.rpm
grub2-tools-efi-2.02-170.0.1.el8_10.2.x86_64.rpm
grub2-tools-extra-2.02-170.0.1.el8_10.2.x86_64.rpm
grub2-tools-minimal-2.02-170.0.1.el8_10.2.x86_64.rpm

aarch64:
grub2-common-2.02-170.0.1.el8_10.2.noarch.rpm
grub2-efi-aa64-2.02-170.0.1.el8_10.2.aarch64.rpm
grub2-efi-aa64-cdboot-2.02-170.0.1.el8_10.2.aarch64.rpm
grub2-efi-aa64-modules-2.02-170.0.1.el8_10.2.noarch.rpm
grub2-efi-ia32-modules-2.02-170.0.1.el8_10.2.noarch.rpm
grub2-efi-x64-modules-2.02-170.0.1.el8_10.2.noarch.rpm
grub2-pc-modules-2.02-170.0.1.el8_10.2.noarch.rpm
grub2-tools-2.02-170.0.1.el8_10.2.aarch64.rpm
grub2-tools-extra-2.02-170.0.1.el8_10.2.aarch64.rpm
grub2-tools-minimal-2.02-170.0.1.el8_10.2.aarch64.rpm


SRPMS:
http://oss.oracle.com/ol8/SRPMS-updates/grub2-2.02-170.0.1.el8_10.2.src.rpm



Description of changes:

[2.02-170.0.1.el8_10.2]
- Update grub2 dependencies to match new Secure Boot certificate chain of trust [Orabug: 37766761]
- Fix typo in SBAT metadata [Orabug: 37693946]
- Allow installation of grub2 only with shim-aa64 that allows booting it [Orabug: 37693946]
- net/dns: Fix removal of DNS server [Orabug: 37539625]
- net/dns: Simplify error handling of recv_hook() function [Orabug: 37539625]
- net/dns: Add debugging messages in recv_hook() function [Orabug: 37539625]
- net/dns: Fix lookup error when no IPv6 is returned [Orabug: 37539625]
- Use correct os_name on OL
- Backport the support for setting custom kernels as default kernels [Orabug: 36690061]
- Restore correct SBAT entries
- Replaced bugzilla.oracle.com references [Orabug: 35475894]
- efinet: Close and reopen card on failure [Orabug: 35126950]
- Fix CVE-2022-3775 [Orabug: 34867710]
- Bump SBAT metadata for grub to 3 [Orabug: 34871758]
- Enable signing on aarch64
- Don't try to switch to a BLS config if GRUB_ENABLE_BLSCFG is already set (Javier Martinez Canillas) [Orabug: 34375996]
- Enable back btrfs module by default [Orabug: 34377188]
- Backport upstream SNP protocol fixes [Orabug: 34195100]
- Rebase Fix EFI loader kernel image allocation patch, adapt it to new NX code [Orabug: 34352232]
- enable multiboot2 [Orabug: 34285558]
- backport arm64: Fix EFI loader kernel image allocation [Orabug: 33702462]
- backport Arm: check for the PE magic for the compiled arch [Orabug: 33702462]
- Backport some better script logic for BTRFS support [Orabug: 32448171]
- Do not add shim and grub certificate deps for aarch64 packages [Orabug: 32670033]
- Update Oracle SBAT data [Orabug: 32670033]
- Use new signing certificate [Orabug: 32670033]
- Fix various coverity issues [Orabug: 32530657]
- Set proper blsdir if /boot is on btrfs rootfs [Orabug: 32063327]
- Add CVE-2020-15706, CVE-2020-15707 to the list [Orabug: 31225072]
- honor /etc/sysconfig/kernel DEFAULTKERNEL setting for BLS [Orabug: 30643497]
- set EFIDIR as redhat for additional grub2 tools [Orabug: 29875597]
- Update upstream references [Orabug: 26388226]
- Insert Unbreakable Enterprise Kernel text into BLS config file [Orabug: 29417955]
- fix symlink removal scriptlet, to be executed only on removal [Orabug: 19231481]
- Fix comparison in patch for 18504756
- Remove symlink to grub environment file during uninstall on EFI platforms [Orabug: 19231481]
- Put "with" in menuentry instead of "using" [Orabug: 18504756]
- Use different titles for UEK and RHCK kernels [Orabug: 18504756]

[2.02-170.2]
- Bump sbat to grub,5
- Resolves: #RHEL-177648

[2.02-170.1]
- Fixes CVE-2025-61662 Missing unregister call for gettext command may lead to use-after-free
- Resolves: #RHEL-141583



From el-errata at oss.oracle.com  Thu Jun 11 09:39:42 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Thu, 11 Jun 2026 02:39:42 -0700
Subject: [El-errata] ELSA-2026-25030 Important: Oracle Linux 8
 postgresql-jdbc security update
Message-ID: <mailman.53.1781170795.18.el-errata@oss.oracle.com>

Oracle Linux Security Advisory ELSA-2026-25030

http://linux.oracle.com/errata/ELSA-2026-25030.html

The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:

x86_64:
postgresql-jdbc-42.2.14-4.el8_10.noarch.rpm
postgresql-jdbc-javadoc-42.2.14-4.el8_10.noarch.rpm

aarch64:
postgresql-jdbc-42.2.14-4.el8_10.noarch.rpm
postgresql-jdbc-javadoc-42.2.14-4.el8_10.noarch.rpm


SRPMS:
http://oss.oracle.com/ol8/SRPMS-updates/postgresql-jdbc-42.2.14-4.el8_10.src.rpm

Related CVEs:

CVE-2026-42198




Description of changes:

[42.2.14-4]
- Limit SCRAM PBKDF2 iterations to prevent DoS via malicious server
- Resolves: CVE-2026-42198



From el-errata at oss.oracle.com  Fri Jun 12 16:30:54 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Fri, 12 Jun 2026 09:30:54 -0700
Subject: [El-errata] ELSA-2026-13977 Important: Oracle Linux 7 firefox
 security update
Message-ID: <mailman.11.1781281867.37.el-errata@oss.oracle.com>

Oracle Linux Security Advisory ELSA-2026-13977

http://linux.oracle.com/errata/ELSA-2026-13977.html

The following updated rpms for Oracle Linux 7 have been uploaded to the Unbreakable Linux Network:

x86_64:
firefox-140.9.1-1.0.1.el7_9.x86_64.rpm


SRPMS:
http://oss.oracle.com/ol7/SRPMS-updates/firefox-140.9.1-1.0.1.el7_9.src.rpm

Related CVEs:

CVE-2026-5731
CVE-2026-5732
CVE-2026-5734
CVE-2026-33416
CVE-2026-33636




Description of changes:

[140.9.1-1.0.1]
- Update to 140.9.1 ESR [Orabug: 39324689][CVE-2026-5731][CVE-2026-5732]
  [CVE-2026-5734][CVE-2026-33416][CVE-2026-33636]

[140.9.0-1.0.1]
- Update to 140.9.0 ESR [Orabug: 39361657][CVE-2026-4684][CVE-2026-4685]
  [CVE-2026-4686][CVE-2026-4687][CVE-2026-4688][CVE-2026-4689][CVE-2026-4690]
  [CVE-2026-4691][CVE-2026-4692][CVE-2026-4693][CVE-2026-4694][CVE-2026-4695]
  [CVE-2026-4696][CVE-2026-4697][CVE-2026-4698][CVE-2026-4699][CVE-2026-4700]
  [CVE-2026-4701][CVE-2026-4702][CVE-2026-4704][CVE-2026-4705][CVE-2026-4706]
  [CVE-2026-4707][CVE-2026-4708][CVE-2026-4709][CVE-2026-4710][CVE-2026-4711]
  [CVE-2026-4712][CVE-2026-4713][CVE-2026-4714][CVE-2026-4715][CVE-2026-4716]
  [CVE-2026-4717][CVE-2026-4718][CVE-2026-4719][CVE-2026-4720][CVE-2026-4721]

[140.8.0-2.0.1]
- Update to 140.8.0 ESR [Orabug: 39361647][CVE-2026-2447][CVE-2026-2757]
  [CVE-2026-2758][CVE-2026-2759][CVE-2026-2760][CVE-2026-2761][CVE-2026-2762]
  [CVE-2026-2763][CVE-2026-2764][CVE-2026-2765][CVE-2026-2766][CVE-2026-2767]
  [CVE-2026-2768][CVE-2026-2769][CVE-2026-2770][CVE-2026-2771][CVE-2026-2772]
  [CVE-2026-2773][CVE-2026-2774][CVE-2026-2775][CVE-2026-2776][CVE-2026-2777]
  [CVE-2026-2778][CVE-2026-2779][CVE-2026-2780][CVE-2026-2781][CVE-2026-2782]
  [CVE-2026-2783][CVE-2026-2784][CVE-2026-2785][CVE-2026-2786][CVE-2026-2787]
  [CVE-2026-2788][CVE-2026-2789][CVE-2026-2790][CVE-2026-2791][CVE-2026-2792]
  [CVE-2026-2793]

[140.7.0-1.0.1]
- Update to 140.7.0 ESR [Orabug: 38940976][CVE-2025-14327][CVE-2026-0877]
  [CVE-2026-0878][CVE-2026-0879][CVE-2026-0880][CVE-2026-0882][CVE-2026-0883]
  [CVE-2026-0884][CVE-2026-0885][CVE-2026-0886][CVE-2026-0887][CVE-2026-0890]
  [CVE-2026-0891]

[140.6.0-1.0.1]
- Update to 140.6.0 ESR [Orabug: 38813993][CVE-2025-14321][CVE-2025-14322]
  [CVE-2025-14323][CVE-2025-14324][CVE-2025-14325][CVE-2025-14328]
  [CVE-2025-14329][CVE-2025-14330][CVE-2025-14331][CVE-2025-14333]

[140.5.0-1.0.1]
- Update to 140.5.0 ESR [Orabug: 38708474][CVE-2025-13012][CVE-2025-13013]
  [CVE-2025-13014][CVE-2025-13015][CVE-2025-13016][CVE-2025-13017]
  [CVE-2025-13018][CVE-2025-13019][CVE-2025-13020]

[140.4.0-4.0.1]
- Update to 140.4.0 ESR [Orabug: 38595697][CVE-2025-11708][CVE-2025-11709]
  [CVE-2025-11710][CVE-2025-11711][CVE-2025-11712][CVE-2025-11714]
  [CVE-2025-11715]

[140.3.0-1.0.1]
- Update to 140.3.0 [Orabug: 38509157][CVE-2025-10527][CVE-2025-10528]
  [CVE-2025-10529][CVE-2025-10532][CVE-2025-10533][CVE-2025-10536]
  [CVE-2025-10537]
- Disable SVE parts of libyuv if not supported [Orabug: 38509157]

[128.14.0-2.0.1]
- Update to 128.14.0 [Orabug: 38400668][CVE-2025-9179][CVE-2025-9180]
  [CVE-2025-9181][CVE-2025-9182][CVE-2025-9185]

[128.13.0-1.0.1]
- Update to 128.13.0 [Orabug: 38256809][CVE-2025-8027][CVE-2025-8028]
  [CVE-2025-8029][CVE-2025-8030][CVE-2025-8031][CVE-2025-8032][CVE-2025-8033]
  [CVE-2025-8034][CVE-2025-8035]



From el-errata at oss.oracle.com  Fri Jun 12 16:30:56 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Fri, 12 Jun 2026 09:30:56 -0700
Subject: [El-errata] ELSA-2026-3984 Important: Oracle Linux 7 firefox
 security update
Message-ID: <mailman.12.1781281869.37.el-errata@oss.oracle.com>

Oracle Linux Security Advisory ELSA-2026-3984

http://linux.oracle.com/errata/ELSA-2026-3984.html

The following updated rpms for Oracle Linux 7 have been uploaded to the Unbreakable Linux Network:

x86_64:
firefox-140.8.0-2.0.1.el7_9.x86_64.rpm


SRPMS:
http://oss.oracle.com/ol7/SRPMS-updates/firefox-140.8.0-2.0.1.el7_9.src.rpm

Related CVEs:

CVE-2026-2447
CVE-2026-2757
CVE-2026-2758
CVE-2026-2759
CVE-2026-2760
CVE-2026-2761
CVE-2026-2762
CVE-2026-2763
CVE-2026-2764
CVE-2026-2765
CVE-2026-2766
CVE-2026-2767
CVE-2026-2768
CVE-2026-2769
CVE-2026-2770
CVE-2026-2771
CVE-2026-2772
CVE-2026-2773
CVE-2026-2774
CVE-2026-2775
CVE-2026-2776
CVE-2026-2777
CVE-2026-2778
CVE-2026-2779
CVE-2026-2780
CVE-2026-2781
CVE-2026-2782
CVE-2026-2783
CVE-2026-2784
CVE-2026-2785
CVE-2026-2786
CVE-2026-2787
CVE-2026-2788
CVE-2026-2789
CVE-2026-2790
CVE-2026-2791
CVE-2026-2792
CVE-2026-2793




Description of changes:

[140.8.0-2.0.1]
- Update to 140.8.0 ESR [Orabug: 39361647][CVE-2026-2447][CVE-2026-2757]
  [CVE-2026-2758][CVE-2026-2759][CVE-2026-2760][CVE-2026-2761][CVE-2026-2762]
  [CVE-2026-2763][CVE-2026-2764][CVE-2026-2765][CVE-2026-2766][CVE-2026-2767]
  [CVE-2026-2768][CVE-2026-2769][CVE-2026-2770][CVE-2026-2771][CVE-2026-2772]
  [CVE-2026-2773][CVE-2026-2774][CVE-2026-2775][CVE-2026-2776][CVE-2026-2777]
  [CVE-2026-2778][CVE-2026-2779][CVE-2026-2780][CVE-2026-2781][CVE-2026-2782]
  [CVE-2026-2783][CVE-2026-2784][CVE-2026-2785][CVE-2026-2786][CVE-2026-2787]
  [CVE-2026-2788][CVE-2026-2789][CVE-2026-2790][CVE-2026-2791][CVE-2026-2792]
  [CVE-2026-2793]

[140.7.0-1.0.1]
- Update to 140.7.0 ESR [Orabug: 38940976][CVE-2025-14327][CVE-2026-0877]
  [CVE-2026-0878][CVE-2026-0879][CVE-2026-0880][CVE-2026-0882][CVE-2026-0883]
  [CVE-2026-0884][CVE-2026-0885][CVE-2026-0886][CVE-2026-0887][CVE-2026-0890]
  [CVE-2026-0891]

[140.6.0-1.0.1]
- Update to 140.6.0 ESR [Orabug: 38813993][CVE-2025-14321][CVE-2025-14322]
  [CVE-2025-14323][CVE-2025-14324][CVE-2025-14325][CVE-2025-14328]
  [CVE-2025-14329][CVE-2025-14330][CVE-2025-14331][CVE-2025-14333]

[140.5.0-1.0.1]
- Update to 140.5.0 ESR [Orabug: 38708474][CVE-2025-13012][CVE-2025-13013]
  [CVE-2025-13014][CVE-2025-13015][CVE-2025-13016][CVE-2025-13017]
  [CVE-2025-13018][CVE-2025-13019][CVE-2025-13020]

[140.4.0-4.0.1]
- Update to 140.4.0 ESR [Orabug: 38595697][CVE-2025-11708][CVE-2025-11709]
  [CVE-2025-11710][CVE-2025-11711][CVE-2025-11712][CVE-2025-11714]
  [CVE-2025-11715]

[140.3.0-1.0.1]
- Update to 140.3.0 [Orabug: 38509157][CVE-2025-10527][CVE-2025-10528]
  [CVE-2025-10529][CVE-2025-10532][CVE-2025-10533][CVE-2025-10536]
  [CVE-2025-10537]
- Disable SVE parts of libyuv if not supported [Orabug: 38509157]

[128.14.0-2.0.1]
- Update to 128.14.0 [Orabug: 38400668][CVE-2025-9179][CVE-2025-9180]
  [CVE-2025-9181][CVE-2025-9182][CVE-2025-9185]

[128.13.0-1.0.1]
- Update to 128.13.0 [Orabug: 38256809][CVE-2025-8027][CVE-2025-8028]
  [CVE-2025-8029][CVE-2025-8030][CVE-2025-8031][CVE-2025-8032][CVE-2025-8033]
  [CVE-2025-8034][CVE-2025-8035]

[128.12.0-1.0.1]
- Update to 128.12.0 [Orabug: 38141310][CVE-2025-6424][CVE-2025-6425]
  [CVE-2025-6429][CVE-2025-6430]

[128.11.0-1.0.1]
- Update to 128.11.0 [Orabug: 38077559][CVE-2025-5263][CVE-2025-5264]
  [CVE-2025-5266][CVE-2025-5267][CVE-2025-5268][CVE-2025-5269]



From el-errata at oss.oracle.com  Fri Jun 12 16:30:58 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Fri, 12 Jun 2026 09:30:58 -0700
Subject: [El-errata] ELSA-2026-8427 Important: Oracle Linux 7 firefox
 security update
Message-ID: <mailman.13.1781281871.37.el-errata@oss.oracle.com>

Oracle Linux Security Advisory ELSA-2026-8427

http://linux.oracle.com/errata/ELSA-2026-8427.html

The following updated rpms for Oracle Linux 7 have been uploaded to the Unbreakable Linux Network:

x86_64:
firefox-140.9.0-1.0.1.el7_9.x86_64.rpm


SRPMS:
http://oss.oracle.com/ol7/SRPMS-updates/firefox-140.9.0-1.0.1.el7_9.src.rpm

Related CVEs:

CVE-2026-4684
CVE-2026-4685
CVE-2026-4686
CVE-2026-4687
CVE-2026-4688
CVE-2026-4689
CVE-2026-4690
CVE-2026-4691
CVE-2026-4692
CVE-2026-4693
CVE-2026-4694
CVE-2026-4695
CVE-2026-4696
CVE-2026-4697
CVE-2026-4698
CVE-2026-4699
CVE-2026-4700
CVE-2026-4701
CVE-2026-4702
CVE-2026-4704
CVE-2026-4705
CVE-2026-4706
CVE-2026-4707
CVE-2026-4708
CVE-2026-4709
CVE-2026-4710
CVE-2026-4711
CVE-2026-4712
CVE-2026-4713
CVE-2026-4714
CVE-2026-4715
CVE-2026-4716
CVE-2026-4717
CVE-2026-4718
CVE-2026-4719
CVE-2026-4720
CVE-2026-4721




Description of changes:

[140.9.0-1.0.1]
- Update to 140.9.0 ESR [Orabug: 39361657][CVE-2026-4684][CVE-2026-4685]
  [CVE-2026-4686][CVE-2026-4687][CVE-2026-4688][CVE-2026-4689][CVE-2026-4690]
  [CVE-2026-4691][CVE-2026-4692][CVE-2026-4693][CVE-2026-4694][CVE-2026-4695]
  [CVE-2026-4696][CVE-2026-4697][CVE-2026-4698][CVE-2026-4699][CVE-2026-4700]
  [CVE-2026-4701][CVE-2026-4702][CVE-2026-4704][CVE-2026-4705][CVE-2026-4706]
  [CVE-2026-4707][CVE-2026-4708][CVE-2026-4709][CVE-2026-4710][CVE-2026-4711]
  [CVE-2026-4712][CVE-2026-4713][CVE-2026-4714][CVE-2026-4715][CVE-2026-4716]
  [CVE-2026-4717][CVE-2026-4718][CVE-2026-4719][CVE-2026-4720][CVE-2026-4721]

[140.8.0-2.0.1]
- Update to 140.8.0 ESR [Orabug: 39361647][CVE-2026-2447][CVE-2026-2757]
  [CVE-2026-2758][CVE-2026-2759][CVE-2026-2760][CVE-2026-2761][CVE-2026-2762]
  [CVE-2026-2763][CVE-2026-2764][CVE-2026-2765][CVE-2026-2766][CVE-2026-2767]
  [CVE-2026-2768][CVE-2026-2769][CVE-2026-2770][CVE-2026-2771][CVE-2026-2772]
  [CVE-2026-2773][CVE-2026-2774][CVE-2026-2775][CVE-2026-2776][CVE-2026-2777]
  [CVE-2026-2778][CVE-2026-2779][CVE-2026-2780][CVE-2026-2781][CVE-2026-2782]
  [CVE-2026-2783][CVE-2026-2784][CVE-2026-2785][CVE-2026-2786][CVE-2026-2787]
  [CVE-2026-2788][CVE-2026-2789][CVE-2026-2790][CVE-2026-2791][CVE-2026-2792]
  [CVE-2026-2793]

[140.7.0-1.0.1]
- Update to 140.7.0 ESR [Orabug: 38940976][CVE-2025-14327][CVE-2026-0877]
  [CVE-2026-0878][CVE-2026-0879][CVE-2026-0880][CVE-2026-0882][CVE-2026-0883]
  [CVE-2026-0884][CVE-2026-0885][CVE-2026-0886][CVE-2026-0887][CVE-2026-0890]
  [CVE-2026-0891]

[140.6.0-1.0.1]
- Update to 140.6.0 ESR [Orabug: 38813993][CVE-2025-14321][CVE-2025-14322]
  [CVE-2025-14323][CVE-2025-14324][CVE-2025-14325][CVE-2025-14328]
  [CVE-2025-14329][CVE-2025-14330][CVE-2025-14331][CVE-2025-14333]

[140.5.0-1.0.1]
- Update to 140.5.0 ESR [Orabug: 38708474][CVE-2025-13012][CVE-2025-13013]
  [CVE-2025-13014][CVE-2025-13015][CVE-2025-13016][CVE-2025-13017]
  [CVE-2025-13018][CVE-2025-13019][CVE-2025-13020]

[140.4.0-4.0.1]
- Update to 140.4.0 ESR [Orabug: 38595697][CVE-2025-11708][CVE-2025-11709]
  [CVE-2025-11710][CVE-2025-11711][CVE-2025-11712][CVE-2025-11714]
  [CVE-2025-11715]

[140.3.0-1.0.1]
- Update to 140.3.0 [Orabug: 38509157][CVE-2025-10527][CVE-2025-10528]
  [CVE-2025-10529][CVE-2025-10532][CVE-2025-10533][CVE-2025-10536]
  [CVE-2025-10537]
- Disable SVE parts of libyuv if not supported [Orabug: 38509157]

[128.14.0-2.0.1]
- Update to 128.14.0 [Orabug: 38400668][CVE-2025-9179][CVE-2025-9180]
  [CVE-2025-9181][CVE-2025-9182][CVE-2025-9185]

[128.13.0-1.0.1]
- Update to 128.13.0 [Orabug: 38256809][CVE-2025-8027][CVE-2025-8028]
  [CVE-2025-8029][CVE-2025-8030][CVE-2025-8031][CVE-2025-8032][CVE-2025-8033]
  [CVE-2025-8034][CVE-2025-8035]

[128.12.0-1.0.1]
- Update to 128.12.0 [Orabug: 38141310][CVE-2025-6424][CVE-2025-6425]
  [CVE-2025-6429][CVE-2025-6430]



From el-errata at oss.oracle.com  Fri Jun 12 16:31:06 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Fri, 12 Jun 2026 09:31:06 -0700
Subject: [El-errata] ELSA-2026-25110 Important: Oracle Linux 8 .NET 8.0
 security update
Message-ID: <mailman.14.1781281879.37.el-errata@oss.oracle.com>

Oracle Linux Security Advisory ELSA-2026-25110

http://linux.oracle.com/errata/ELSA-2026-25110.html

The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:

x86_64:
aspnetcore-runtime-8.0-8.0.28-1.0.1.el8_10.x86_64.rpm
aspnetcore-runtime-dbg-8.0-8.0.28-1.0.1.el8_10.x86_64.rpm
aspnetcore-targeting-pack-8.0-8.0.28-1.0.1.el8_10.x86_64.rpm
dotnet-apphost-pack-8.0-8.0.28-1.0.1.el8_10.x86_64.rpm
dotnet-hostfxr-8.0-8.0.28-1.0.1.el8_10.x86_64.rpm
dotnet-runtime-8.0-8.0.28-1.0.1.el8_10.x86_64.rpm
dotnet-runtime-dbg-8.0-8.0.28-1.0.1.el8_10.x86_64.rpm
dotnet-sdk-8.0-8.0.128-1.0.1.el8_10.x86_64.rpm
dotnet-sdk-8.0-source-built-artifacts-8.0.128-1.0.1.el8_10.x86_64.rpm
dotnet-sdk-dbg-8.0-8.0.128-1.0.1.el8_10.x86_64.rpm
dotnet-targeting-pack-8.0-8.0.28-1.0.1.el8_10.x86_64.rpm
dotnet-templates-8.0-8.0.128-1.0.1.el8_10.x86_64.rpm

aarch64:
aspnetcore-runtime-8.0-8.0.28-1.0.1.el8_10.aarch64.rpm
aspnetcore-runtime-dbg-8.0-8.0.28-1.0.1.el8_10.aarch64.rpm
aspnetcore-targeting-pack-8.0-8.0.28-1.0.1.el8_10.aarch64.rpm
dotnet-apphost-pack-8.0-8.0.28-1.0.1.el8_10.aarch64.rpm
dotnet-hostfxr-8.0-8.0.28-1.0.1.el8_10.aarch64.rpm
dotnet-runtime-8.0-8.0.28-1.0.1.el8_10.aarch64.rpm
dotnet-runtime-dbg-8.0-8.0.28-1.0.1.el8_10.aarch64.rpm
dotnet-sdk-8.0-8.0.128-1.0.1.el8_10.aarch64.rpm
dotnet-sdk-8.0-source-built-artifacts-8.0.128-1.0.1.el8_10.aarch64.rpm
dotnet-sdk-dbg-8.0-8.0.128-1.0.1.el8_10.aarch64.rpm
dotnet-targeting-pack-8.0-8.0.28-1.0.1.el8_10.aarch64.rpm
dotnet-templates-8.0-8.0.128-1.0.1.el8_10.aarch64.rpm


SRPMS:
http://oss.oracle.com/ol8/SRPMS-updates/dotnet8.0-8.0.128-1.0.1.el8_10.src.rpm

Related CVEs:

CVE-2026-45491
CVE-2026-45591




Description of changes:

[8.0.128-1.0.1]
- Add support for Oracle Linux

[8.0.128-1]
- Update to .NET SDK 8.0.128 and Runtime 8.0.28
- Resolves: RHEL-181052

[8.0.126-2]
- Update to .NET SDK 8.0.126 and Runtime 8.0.26
- Resolves: RHEL-163413

[8.0.125-2]
- Update to .NET SDK 8.0.125 and Runtime 8.0.25
- Resolves: RHEL-152929

[8.0.124-2]
- Update to .NET SDK 8.0.124 and Runtime 8.0.24
- Resolves: RHEL-144965

[8.0.123-2]
- Update to .NET SDK 8.0.123 and Runtime 8.0.23
- Resolves: RHEL-138651

[8.0.122-2]
- Update to .NET SDK 8.0.122 and Runtime 8.0.22
- Resolves: RHEL-125737

[8.0.121-2]
- Update to .NET SDK 8.0.121 and Runtime 8.0.21
- Resolves: RHEL-116865

[8.0.120-2]
- Update to .NET SDK 8.0.120 and Runtime 8.0.20
- Resolves: RHEL-112254

[8.0.119-2]
- Update to .NET SDK 8.0.119 and Runtime 8.0.19
- Resolves: RHEL-106722



From el-errata at oss.oracle.com  Fri Jun 12 16:31:08 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Fri, 12 Jun 2026 09:31:08 -0700
Subject: [El-errata] ELSA-2026-25113 Important: Oracle Linux 8 .NET 9.0
 security update
Message-ID: <mailman.15.1781281881.37.el-errata@oss.oracle.com>

Oracle Linux Security Advisory ELSA-2026-25113

http://linux.oracle.com/errata/ELSA-2026-25113.html

The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:

x86_64:
aspnetcore-runtime-9.0-9.0.17-1.0.1.el8_10.x86_64.rpm
aspnetcore-runtime-dbg-9.0-9.0.17-1.0.1.el8_10.x86_64.rpm
aspnetcore-targeting-pack-9.0-9.0.17-1.0.1.el8_10.x86_64.rpm
dotnet-apphost-pack-9.0-9.0.17-1.0.1.el8_10.x86_64.rpm
dotnet-hostfxr-9.0-9.0.17-1.0.1.el8_10.x86_64.rpm
dotnet-runtime-9.0-9.0.17-1.0.1.el8_10.x86_64.rpm
dotnet-runtime-dbg-9.0-9.0.17-1.0.1.el8_10.x86_64.rpm
dotnet-sdk-9.0-9.0.118-1.0.1.el8_10.x86_64.rpm
dotnet-sdk-9.0-source-built-artifacts-9.0.118-1.0.1.el8_10.x86_64.rpm
dotnet-sdk-aot-9.0-9.0.118-1.0.1.el8_10.x86_64.rpm
dotnet-sdk-dbg-9.0-9.0.118-1.0.1.el8_10.x86_64.rpm
dotnet-targeting-pack-9.0-9.0.17-1.0.1.el8_10.x86_64.rpm
dotnet-templates-9.0-9.0.118-1.0.1.el8_10.x86_64.rpm
netstandard-targeting-pack-2.1-9.0.118-1.0.1.el8_10.x86_64.rpm

aarch64:
aspnetcore-runtime-9.0-9.0.17-1.0.1.el8_10.aarch64.rpm
aspnetcore-runtime-dbg-9.0-9.0.17-1.0.1.el8_10.aarch64.rpm
aspnetcore-targeting-pack-9.0-9.0.17-1.0.1.el8_10.aarch64.rpm
dotnet-apphost-pack-9.0-9.0.17-1.0.1.el8_10.aarch64.rpm
dotnet-hostfxr-9.0-9.0.17-1.0.1.el8_10.aarch64.rpm
dotnet-runtime-9.0-9.0.17-1.0.1.el8_10.aarch64.rpm
dotnet-runtime-dbg-9.0-9.0.17-1.0.1.el8_10.aarch64.rpm
dotnet-sdk-9.0-9.0.118-1.0.1.el8_10.aarch64.rpm
dotnet-sdk-9.0-source-built-artifacts-9.0.118-1.0.1.el8_10.aarch64.rpm
dotnet-sdk-aot-9.0-9.0.118-1.0.1.el8_10.aarch64.rpm
dotnet-sdk-dbg-9.0-9.0.118-1.0.1.el8_10.aarch64.rpm
dotnet-targeting-pack-9.0-9.0.17-1.0.1.el8_10.aarch64.rpm
dotnet-templates-9.0-9.0.118-1.0.1.el8_10.aarch64.rpm
netstandard-targeting-pack-2.1-9.0.118-1.0.1.el8_10.aarch64.rpm


SRPMS:
http://oss.oracle.com/ol8/SRPMS-updates/dotnet9.0-9.0.118-1.0.1.el8_10.src.rpm

Related CVEs:

CVE-2026-45491
CVE-2026-45591




Description of changes:

[9.0.118-1.0.1]
- Add support for Oracle Linux

[9.0.118-1]
- Update to .NET SDK 9.0.118 and Runtime 9.0.17
- Resolves: RHEL-181550

[9.0.116-2]
- Update to .NET SDK 9.0.116 and Runtime 9.0.15
- Resolves: RHEL-163389

[9.0.115-2]
- Update to .NET SDK 9.0.115 and Runtime 9.0.14
- Resolves: RHEL-152941

[9.0.114-2]
- Update to .NET SDK 9.0.114 and Runtime 9.0.13
- Resolves: RHEL-144969

[9.0.113-2]
- Update to .NET SDK 9.0.113 and Runtime 9.0.12
- Resolves: RHEL-138644

[9.0.112-2]
- Update to .NET SDK 9.0.112 and Runtime 9.0.11
- Resolves: RHEL-125742

[9.0.111-2]
- Update to .NET SDK 9.0.111 and Runtime 9.0.10
- Resolves: RHEL-116856

[9.0.110-2]
- Update to .NET SDK 9.0.110 and Runtime 9.0.9
- Resolves: RHEL-112264

[9.0.109-2]
- Update to .NET SDK 9.0.109 and Runtime 9.0.8
- Resolves: RHEL-106726



From el-errata at oss.oracle.com  Fri Jun 12 16:31:11 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Fri, 12 Jun 2026 09:31:11 -0700
Subject: [El-errata] ELSA-2026-25114 Important: Oracle Linux 8 .NET 10.0
 security update
Message-ID: <mailman.16.1781281884.37.el-errata@oss.oracle.com>

Oracle Linux Security Advisory ELSA-2026-25114

http://linux.oracle.com/errata/ELSA-2026-25114.html

The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:

x86_64:
aspnetcore-runtime-10.0-10.0.9-1.0.1.el8_10.x86_64.rpm
aspnetcore-runtime-dbg-10.0-10.0.9-1.0.1.el8_10.x86_64.rpm
aspnetcore-targeting-pack-10.0-10.0.9-1.0.1.el8_10.x86_64.rpm
dotnet-10.0.109-1.0.1.el8_10.x86_64.rpm
dotnet-apphost-pack-10.0-10.0.9-1.0.1.el8_10.x86_64.rpm
dotnet-host-10.0.9-1.0.1.el8_10.x86_64.rpm
dotnet-hostfxr-10.0-10.0.9-1.0.1.el8_10.x86_64.rpm
dotnet-runtime-10.0-10.0.9-1.0.1.el8_10.x86_64.rpm
dotnet-runtime-dbg-10.0-10.0.9-1.0.1.el8_10.x86_64.rpm
dotnet-sdk-10.0-10.0.109-1.0.1.el8_10.x86_64.rpm
dotnet-sdk-10.0-source-built-artifacts-10.0.109-1.0.1.el8_10.x86_64.rpm
dotnet-sdk-aot-10.0-10.0.109-1.0.1.el8_10.x86_64.rpm
dotnet-sdk-dbg-10.0-10.0.109-1.0.1.el8_10.x86_64.rpm
dotnet-targeting-pack-10.0-10.0.9-1.0.1.el8_10.x86_64.rpm
dotnet-templates-10.0-10.0.109-1.0.1.el8_10.x86_64.rpm

aarch64:
aspnetcore-runtime-10.0-10.0.9-1.0.1.el8_10.aarch64.rpm
aspnetcore-runtime-dbg-10.0-10.0.9-1.0.1.el8_10.aarch64.rpm
aspnetcore-targeting-pack-10.0-10.0.9-1.0.1.el8_10.aarch64.rpm
dotnet-10.0.109-1.0.1.el8_10.aarch64.rpm
dotnet-apphost-pack-10.0-10.0.9-1.0.1.el8_10.aarch64.rpm
dotnet-host-10.0.9-1.0.1.el8_10.aarch64.rpm
dotnet-hostfxr-10.0-10.0.9-1.0.1.el8_10.aarch64.rpm
dotnet-runtime-10.0-10.0.9-1.0.1.el8_10.aarch64.rpm
dotnet-runtime-dbg-10.0-10.0.9-1.0.1.el8_10.aarch64.rpm
dotnet-sdk-10.0-10.0.109-1.0.1.el8_10.aarch64.rpm
dotnet-sdk-10.0-source-built-artifacts-10.0.109-1.0.1.el8_10.aarch64.rpm
dotnet-sdk-aot-10.0-10.0.109-1.0.1.el8_10.aarch64.rpm
dotnet-sdk-dbg-10.0-10.0.109-1.0.1.el8_10.aarch64.rpm
dotnet-targeting-pack-10.0-10.0.9-1.0.1.el8_10.aarch64.rpm
dotnet-templates-10.0-10.0.109-1.0.1.el8_10.aarch64.rpm


SRPMS:
http://oss.oracle.com/ol8/SRPMS-updates/dotnet10.0-10.0.109-1.0.1.el8_10.src.rpm

Related CVEs:

CVE-2026-45491
CVE-2026-45591




Description of changes:

[10.0.109-1.0.1]
- Add support for Oracle Linux

[10.0.109-1]
- Update to .NET SDK 10.0.109 and Runtime 10.0.9
- Resolves: RHEL-181555

[10.0.106-2]
- Update to .NET SDK 10.0.106 and Runtime 10.0.6
- Resolves: RHEL-163381

[10.0.104-2]
- Update to .NET SDK 10.0.104 and Runtime 10.0.4
- Resolves: RHEL-152949

[10.0.103-2]
- Update to .NET SDK 10.0.103 and Runtime 10.0.3
- Resolves: RHEL-144973

[10.0.102-2]
- Update to .NET SDK 10.0.102 and Runtime 10.0.2
- Resolves: RHEL-138639

[10.0.101-2]
- Update to .NET SDK 10.0.101 and Runtime 10.0.1
- Resolves: RHEL-130937

[10.0.100-1]
- Update to .NET SDK 10.0.100 and Runtime 10.0.0
- Resolves: RHEL-125747

[10.0.100~rc.2.25502.107-0.10]
- Update to .NET SDK 10.0.100-rc.2.25502.107 and Runtime 10.0.0-rc.2.25502.107
- Resolves: RHEL-121301

[10.0.100~preview.6.25358.103-0.9]
- Disable bootstrap
- Resolves: RHEL-114568



From el-errata at oss.oracle.com  Fri Jun 12 16:30:52 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Fri, 12 Jun 2026 09:30:52 -0700
Subject: [El-errata] ELBA-2026-9174 Oracle Linux 7 krb5 bug fix and
 enhancement update
Message-ID: <mailman.17.1781281886.37.el-errata@oss.oracle.com>

Oracle Linux Bug Fix Advisory ELBA-2026-9174

http://linux.oracle.com/errata/ELBA-2026-9174.html

The following updated rpms for Oracle Linux 7 have been uploaded to the Unbreakable Linux Network:

x86_64:
krb5-devel-1.15.1-55.0.11.el7_9.i686.rpm
krb5-devel-1.15.1-55.0.11.el7_9.x86_64.rpm
krb5-libs-1.15.1-55.0.11.el7_9.i686.rpm
krb5-libs-1.15.1-55.0.11.el7_9.x86_64.rpm
krb5-pkinit-1.15.1-55.0.11.el7_9.x86_64.rpm
krb5-server-1.15.1-55.0.11.el7_9.x86_64.rpm
krb5-server-ldap-1.15.1-55.0.11.el7_9.x86_64.rpm
krb5-workstation-1.15.1-55.0.11.el7_9.x86_64.rpm
libkadm5-1.15.1-55.0.11.el7_9.i686.rpm
libkadm5-1.15.1-55.0.11.el7_9.x86_64.rpm


SRPMS:
http://oss.oracle.com/ol7/SRPMS-updates/krb5-1.15.1-55.0.11.el7_9.src.rpm



Description of changes:

[1.15.1-55.0.11]
- krad: packet ID fetched from uninitialized variable [Orabug: 39235867]

[1.15.1-55.0.9]
- Fixes CVE-2025-24528 , Prevent overflow when calculating ulog block size [Orabug: 37587301]



