linux-hwe-6.8 (6.8.0-58.60~22.04.1) jammy; urgency=medium * jammy/linux-hwe-6.8: 6.8.0-58.60~22.04.1 -proposed tracker (LP: #2102528) * Packaging resync (LP: #1786013) - [Packaging] debian.hwe-6.8/dkms-versions -- update from kernel-versions (main/2025.03.17) [ Ubuntu: 6.8.0-58.60 ] * noble/linux: 6.8.0-58.60 -proposed tracker (LP: #2102529) * Packaging resync (LP: #1786013) - [Packaging] update variants - [Packaging] debian.master/dkms-versions -- update from kernel-versions (main/2025.03.17) * wdat_wdt.ko should be pulled in by linux-image-virtual (LP: #2098554) - [Packaging]: wdat_wdt.ko is moved from "linux-modules-extra-*-generic" to "linux-modules-*-generic" * Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) - openrisc: Use asm-generic's version of fix_to_virt() & virt_to_fix() - iTCO_wdt: mask NMI_NOW bit for update_no_reboot_bit() call - watchdog: xilinx_wwdt: Calculate max_hw_heartbeat_ms using clock frequency - watchdog: apple: Actually flush writes after requesting watchdog restart - watchdog: mediatek: Make sure system reset gets asserted in mtk_wdt_restart() - can: gs_usb: add VID/PID for Xylanta SAINT3 product family - can: gs_usb: add usb endpoint address detection at driver probe step - can: sun4i_can: sun4i_can_err(): call can_change_state() even if cf is NULL - can: m_can: m_can_handle_lec_err(): fix {rx,tx}_errors statistics - can: ifi_canfd: ifi_canfd_handle_lec_err(): fix {rx,tx}_errors statistics - can: hi311x: hi3110_can_ist(): fix {rx,tx}_errors statistics - can: sja1000: sja1000_err(): fix {rx,tx}_errors statistics - can: sun4i_can: sun4i_can_err(): fix {rx,tx}_errors statistics - can: ems_usb: ems_usb_rx_err(): fix {rx,tx}_errors statistics - can: f81604: f81604_handle_can_bus_errors(): fix {rx,tx}_errors statistics - ipvs: fix UB due to uninitialized stack access in ip_vs_protocol_init() - selftests: hid: fix typo and exit code - ptp: Add error handling for adjfine callback in ptp_clock_adjtime - net/sched: tbf: correct backlog statistic for GSO packets - net: hsr: fix fill_frame_info() regression vs VLAN packets - platform/x86: asus-wmi: add support for vivobook fan profiles - platform/x86: asus-wmi: Fix inconsistent use of thermal policies - platform/x86: asus-wmi: Ignore return value when writing thermal policy - net/smc: mark optional smcd_ops and check for support when called - net/smc: add operations to merge sndbuf with peer DMB - net/smc: {at|de}tach sndbuf to peer DMB if supported - net/smc: refactoring initialization of smc sock - net/qed: allow old cards not supporting "num_images" to work - ixgbevf: stop attempting IPSEC offload on Mailbox API 1.5 - ixgbe: downgrade logging of unsupported VF API version to debug - net: sched: fix erspan_opt settings in cls_flower - netfilter: nft_set_hash: skip duplicated elements pending gc run - netfilter: nft_set_hash: unaligned atomic read on struct nft_set_ext - ethtool: Fix wrong mod state in case of verbose and no_mask bitset - mlxsw: spectrum_acl_flex_keys: Constify struct mlxsw_afk_element_inst - mlxsw: spectrum_acl_flex_keys: Use correct key block on Spectrum-4 - net/mlx5e: Remove workaround to avoid syndrome for internal port - xhci: Allow RPM on the USB controller (1022:43f7) by default - gpio: grgpio: use a helper variable to store the address of ofdev->dev - usb: dwc3: gadget: Rewrite endpoint allocation flow - usb: dwc3: ep0: Don't reset resource alloc flag (including ep0) - usb: dwc3: ep0: Don't clear ep0 DWC3_EP_TRANSFER_STARTED - mmc: mtk-sd: use devm_mmc_alloc_host - mmc: mtk-sd: Fix error handle of probe function - mmc: mtk-sd: fix devm_clk_get_optional usage - mmc: mtk-sd: Fix MMC_CAP2_CRYPTO flag setting - zram: do not mark idle slots that cannot be idle - zram: clear IDLE flag in mark_idle() - powerpc/vdso: Refactor CFLAGS for CVDSO build - powerpc/vdso: Drop -mstack-protector-guard flags in 32-bit files with clang - ntp: Remove invalid cast in time offset math - driver core: Add FWLINK_FLAG_IGNORE to completely ignore a fwnode link - driver core: fw_devlink: Stop trying to optimize cycle detection logic - drivers: core: fix device leak in __fw_devlink_relax_cycles() - i3c: master: support to adjust first broadcast address speed - i3c: master: svc: use slow speed for first broadcast address - i3c: master: svc: Modify enabled_events bit 7:0 to act as IBI enable counter - i3c: master: Replace hard code 2 with macro I3C_ADDR_SLOT_STATUS_BITS - i3c: master: Extend address status bit to 4 and add I3C_ADDR_SLOT_EXT_DESIRED - i3c: master: Fix dynamic address leak when 'assigned-address' is present - i3c: master: Fix missing 'ret' assignment in set_speed() - drm/bridge: it6505: update usleep_range for RC circuit charge time - drm/bridge: it6505: Fix inverted reset polarity - scsi: ufs: core: Always initialize the UIC done completion - scsi: ufs: core: Add ufshcd_send_bsg_uic_cmd() for UFS BSG - bpf, vsock: Fix poll() missing a queue - bpf, vsock: Invoke proto::close on close() - xsk: always clear DMA mapping information when unmapping the pool - bpftool: fix potential NULL pointer dereferencing in prog_dump() - drm/sti: Add __iomem for mixer_dbg_mxn's parameter - ALSA: seq: ump: Use automatic cleanup of kfree() - ALSA: ump: Update substream name from assigned FB names - ALSA: seq: ump: Fix seq port updates per FB info notify - ALSA: usb-audio: Notify xrun for low-latency mode - tools: Override makefile ARCH variable if defined, but empty - ASoC: SOF: ipc3-topology: Convert the topology pin index to ALH dai index - ASoC: SOF: ipc3-topology: fix resource leaks in sof_ipc3_widget_setup_comp_dai() - bpf: Fix narrow scalar spill onto 64-bit spilled scalar slots - scsi: scsi_debug: Fix hrtimer support for ndelay - ASoC: mediatek: mt8188-mt6359: Remove hardcoded dmic codec - drm/v3d: Enable Performance Counters before clearing them - scatterlist: fix incorrect func name in kernel-doc - iio: magnetometer: yas530: use signed integer type for clamp limits - bpf: Handle BPF_EXIST and BPF_NOEXIST for LPM trie - bpf: Remove unnecessary kfree(im_node) in lpm_trie_update_elem - bpf: Handle in-place update for full LPM trie correctly - bpf: Fix exact match conditions in trie_get_next_key() - x86/CPU/AMD: WARN when setting EFER.AUTOIBRS if and only if the WRMSR fails - watchdog: rti: of: honor timeout-sec property - can: mcp251xfd: mcp251xfd_get_tef_len(): work around erratum DS80000789E 6. - tracing: Fix cmp_entries_dup() to respect sort() comparison rules - arm64: Ensure bits ASID[15:8] are masked out when the kernel uses 8-bit ASIDs - ALSA: usb-audio: add mixer mapping for Corsair HS80 - ALSA: hda/realtek: Enable mute and micmute LED on HP ProBook 430 G8 - ALSA: hda/realtek: Add support for Samsung Galaxy Book3 360 (NP730QFG) - scsi: qla2xxx: Fix abort in bsg timeout - scsi: qla2xxx: Fix NVMe and NPIV connect issue - scsi: qla2xxx: Supported speed displayed incorrectly for VPorts - scsi: qla2xxx: Remove check req_sg_cnt should be equal to rsp_sg_cnt - scsi: ufs: core: Add missing post notify for power mode change - fs/smb/client: cifs_prime_dcache() for SMB3 POSIX reparse points - drm/dp_mst: Verify request type in the corresponding down message reply - drm/amdgpu/hdp5.2: do a posting read when flushing HDP - modpost: Add .irqentry.text to OTHER_SECTIONS - x86/kexec: Restore GDT on return from ::preserve_context kexec - dma-buf: fix dma_fence_array_signaled v4 - dma-fence: Fix reference leak on fence merge failure path - dma-fence: Use kernel's sort for merging fences - regmap: detach regmap from dev on regmap_exit - mmc: sdhci-pci: Add DMI quirk for missing CD GPIO on Vexia Edu Atla 10 tablet - mmc: core: Further prevent card detect during shutdown - ocfs2: update seq_file index in ocfs2_dlm_seq_next - lib: stackinit: hide never-taken branch from compiler - kasan: make report_lock a raw spinlock - x86/mm: Add _PAGE_NOPTISHADOW bit to avoid updating userspace page tables - epoll: annotate racy check - kselftest/arm64: Log fp-stress child startup errors to stdout - btrfs: avoid unnecessary device path update for the same device - btrfs: do not clear read-only when adding sprout device - kselftest/arm64: Don't leak pipe fds in pac.exec_sign_all() - hwmon: (nct6775) Add 665-ACE/600M-CL to ASUS WMI monitoring list - ACPI: x86: Make UART skip quirks work on PCI UARTs without an UID - perf/x86/amd: Warn only on new bits set - spi: spi-fsl-lpspi: Adjust type of scldiv - HID: add per device quirk to force bind to hid-generic - media: uvcvideo: RealSense D421 Depth module metadata - media: uvcvideo: Add a quirk for the Kaiweets KTI-W02 infrared camera - media: cx231xx: Add support for Dexatek USB Video Grabber 1d19:6108 - mmc: core: Add SD card quirk for broken poweroff notification - mmc: sdhci-esdhc-imx: enable quirks SDHCI_QUIRK_NO_LED - regmap: maple: Provide lockdep (sub)class for maple tree's internal lock - selftests/resctrl: Protect against array overflow when reading strings - drm/vc4: hdmi: Avoid log spam for audio start failure - drm/vc4: hvs: Set AXI panic modes for the HVS - drm: panel-orientation-quirks: Add quirk for AYA NEO 2 model - drm: panel-orientation-quirks: Add quirk for AYA NEO Founder edition - drm: panel-orientation-quirks: Add quirk for AYA NEO GEEK - drm/bridge: it6505: Enable module autoloading - drm/mcde: Enable module autoloading - drm/radeon/r600_cs: Fix possible int overflow in r600_packet3_check() - drm/display: Fix building with GCC 15 - ALSA: hda: Use own quirk lookup helper - ALSA: hda/conexant: Use the new codec SSID matching - r8169: don't apply UDP padding quirk on RTL8126A - samples/bpf: Fix a resource leak - net: fec_mpc52xx_phy: Use %pa to format resource_size_t - net: ethernet: fs_enet: Use %pa to format resource_size_t - net/sched: cbs: Fix integer overflow in cbs_set_port_rate() - Bluetooth: L2CAP: handle NULL sock pointer in l2cap_sock_alloc - wifi: ath5k: add PCI ID for SX76X - wifi: ath5k: add PCI ID for Arcadyan devices - fanotify: allow reporting errors on failure to open fd - drm/panel: simple: Add Microchip AC69T88A LVDS Display panel - net: sfp: change quirks for Alcatel Lucent G-010S-P - net: stmmac: Programming sequence for VLAN packets with split header - drm/sched: memset() 'job' in drm_sched_job_init() - amdgpu/uvd: get ring reference from rq scheduler - drm/amdgpu: don't access invalid sched - drm/amdgpu: clear RB_OVERFLOW bit when enabling interrupts for vega20_ih - drm/amdgpu: Dereference the ATCS ACPI buffer - netlink: specs: Add missing bitset attrs to ethtool spec - drm/amdgpu: refine error handling in amdgpu_ttm_tt_pin_userptr - fsl/fman: Validate cell-index value obtained from Device Tree - drm/amdgpu: skip amdgpu_device_cache_pci_state under sriov - ALSA: usb-audio: Make mic volume workarounds globally applicable - wifi: ipw2x00: libipw_rx_any(): fix bad alignment - dsa: qca8k: Use nested lock to avoid splat - Bluetooth: btusb: Add RTL8852BE device 0489:e123 to device tables - Bluetooth: Add new quirks for ATS2851 - Bluetooth: Support new quirks for ATS2851 - Bluetooth: Set quirks for ATS2851 - ASoC: hdmi-codec: reorder channel allocation list - rocker: fix link status detection in rocker_carrier_init() - net/neighbor: clear error in case strict check is not set - netpoll: Use rcu_access_pointer() in __netpoll_setup - pinctrl: freescale: fix COMPILE_TEST error with PINCTRL_IMX_SCU - tracing/ftrace: disable preemption in syscall probe - tracing: Use atomic64_inc_return() in trace_clock_counter() - tools/rtla: fix collision with glibc sched_attr/sched_set_attr - rtla/timerlat: Make timerlat_top_cpu->*_count unsigned long long - scsi: ufs: core: Make DMA mask configuration more flexible - scsi: lpfc: Call lpfc_sli4_queue_unset() in restart and rmmod paths - clk: qcom: rcg2: add clk_rcg2_shared_floor_ops - clk: qcom: rpmh: add support for SAR2130P - clk: qcom: tcsrcc-sm8550: add SAR2130P support - scsi: st: Don't modify unknown block number in MTIOCGET - scsi: st: Add MTIOCGET and MTLOAD to ioctls allowed after device reset - pinctrl: qcom-pmic-gpio: add support for PM8937 - pinctrl: qcom: spmi-mpp: Add PM8937 compatible - thermal/drivers/qcom/tsens-v1: Add support for MSM8937 tsens - nvdimm: rectify the illogical code within nd_dax_probe() - smb: client: memcpy() with surrounding object base address - verification/dot2: Improve dot parser robustness - KMSAN: uninit-value in inode_go_dump (5) - PCI: qcom: Add support for IPQ9574 - PCI: vmd: Add DID 8086:B06F and 8086:B60B for Intel client SKUs - PCI: vmd: Set devices to D0 before enabling PM L1 Substates - PCI: Detect and trust built-in Thunderbolt chips - PCI: Add 'reset_subordinate' to reset hierarchy below bridge - PCI: Add ACS quirk for Wangxun FF5xxx NICs - f2fs: print message if fscorrupted was found in f2fs_new_node_page() - ACPI: x86: Add skip i2c clients quirk for Acer Iconia One 8 A1-840 - ACPI: x86: Clean up Asus entries in acpi_quirk_skip_dmi_ids[] - fs/ntfs3: Fix case when unmarked clusters intersect with zone - usb: chipidea: udc: handle USB Error Interrupt if IOC not set - iio: light: ltr501: Add LTER0303 to the supported devices - ASoC: amd: yc: fix internal mic on Redmi G 2022 - drm/amdgpu/vcn: reset fw_shared when VCPU buffers corrupted on vcn v4.0.3 - drm/amdgpu/vcn: reset fw_shared under SRIOV - ASoC: amd: yc: Add quirk for microphone on Lenovo Thinkpad T14s Gen 6 21M1CTO1WW - misc: eeprom: eeprom_93cx6: Add quirk for extra read clock cycle - rtc: cmos: avoid taking rtc_lock for extended period of time - serial: 8250_dw: Add Sophgo SG2044 quirk - smb: client: don't try following DFS links in cifs_tree_connect() - setlocalversion: work around "git describe" performance - sched/core: Remove the unnecessary need_resched() check in nohz_csd_func() - sched/fair: Check idle_cpu() before need_resched() to detect ilb CPU turning busy - sched/core: Prevent wakeup of ksoftirqd during idle load balance - btrfs: fix missing snapshot drew unlock when root is dead during swap activation - clk: en7523: Initialize num before accessing hws in en7523_register_clocks() - tracing/eprobe: Fix to release eprobe when failed to add dyn_event - x86: Fix build regression with CONFIG_KEXEC_JUMP enabled - Revert "unicode: Don't special case ignorable code points" - vfio/mlx5: Align the page tracking max message size with the device capability - selftests/ftrace: adjust offset for kprobe syntax error test - KVM: x86/mmu: Ensure that kvm_release_pfn_clean() takes exact pfn from kvm_faultin_pfn() - jffs2: Fix rtime decompressor - mm/damon/vaddr: fix issue in damon_va_evenly_split_region() - iio: invensense: fix multiple odr switch when FIFO is off - ocfs2: Revert "ocfs2: fix the la space leak when unmounting an ocfs2 volume" - ALSA: hda: Fix build error without CONFIG_SND_DEBUG - usb: dwc3: ep0: Don't reset resource alloc flag - ALSA: usb-audio: Update UMP group attributes for GTB blocks, too - platform/x86: asus-wmi: Fix thermal profile initialization - i3c: master: svc: fix possible assignment of the same address to two devices - btrfs: drop unused parameter file_offset from btrfs_encoded_read_regular_fill_pages() - md/raid5: Wait sync io to finish before changing group cnt - media: platform: rga: fix 32-bit DMA limitation - net: phy: dp83869: fix status reporting for 1000base-x autonegotiation - remoteproc: qcom_q6v5_pas: disable auto boot for wpss - mtd: spinand: winbond: Fix 512GW and 02JW OOB layout - PCI: Pass domain number to pci_bus_release_domain_nr() explicitly - dt-bindings: net: fec: add pps channel property - net: fec: refactor PPS channel configuration - net: fec: make PPS channel configurable - drm/xe/xe_guc_ads: save/restore OA registers and allowlist regs - drm/xe/migrate: use XE_BO_FLAG_PAGETABLE - drm/amd: Add some missing straps from NBIO 7.11.0 - drm/amd: Fix initialization mistake for NBIO 7.11 devices - drm/amdgpu/pm: Don't use OD table on Arcturus - drm/amd/pm: Remove arcturus min power limit - drm/amd/display: update pipe selection policy to check head pipe - drm/amd/display: Remove PIPE_DTO_SRC_SEL programming from set_dtbclk_dto - Revert "drm/xe/xe_guc_ads: save/restore OA registers and allowlist regs" - ipv6: avoid possible NULL deref in modify_prefix_route() - net: phy: microchip: Reset LAN88xx PHY to ensure clean link state on LAN7800/7850 - ice: fix PHY Clock Recovery availability check - vsock/test: fix failures due to wrong SO_RCVLOWAT parameter - vsock/test: fix parameter types in SO_VM_SOCKETS_* calls - mmc: core Convert UNSTUFF_BITS macro to inline function - mmc: sd: SDUC Support Recognition - mmc: core: Adjust ACMD22 to SDUC - mmc: core: Use GFP_NOIO in ACMD22 - f2fs: clean up w/ F2FS_{BLK_TO_BYTES,BTYES_TO_BLK} - f2fs: fix to adjust appropriate length for fiemap - f2fs: fix to requery extent which cross boundary of inquiry - drm/amd/display: calculate final viewport before TAP optimization - drm/amd/display: Ignore scalar validation failure if pipe is phantom - pmdomain: core: Add missing put_device() - pmdomain: core: Fix error path in pm_genpd_init() when ida alloc fails - pmdomain: core: add dummy release function to genpd device - bpf: Ensure reg is PTR_TO_STACK in process_iter_arg - bpf: Don't mark STACK_INVALID as STACK_MISC in mark_stack_slot_misc - LoongArch: KVM: Protect kvm_check_requests() with SRCU - net :mana :Request a V2 response version for MANA_QUERY_GF_STAT - ALSA: usb-audio: Add extra PID for RME Digiface USB - ALSA: hda/realtek: fix micmute LEDs don't work on HP Laptops - scsi: ufs: pltfrm: Disable runtime PM during removal of glue drivers - io_uring/cmd: document some uring_cmd related helpers - io_uring: Change res2 parameter type in io_uring_cmd_done - selftests/damon: add _damon_sysfs.py to TEST_FILES - drm/amd/display: Correct prefetch calculation - drm/amd/amdgpu: allow use kiq to do hdp flush under sriov - drm/amdgpu/hdp6.0: do a posting read when flushing HDP - drm/amdgpu/hdp4.0: do a posting read when flushing HDP - drm/amdgpu/hdp5.0: do a posting read when flushing HDP - x86/cpu/intel: Switch to new Intel CPU model defines - x86/cpu/intel: Drop stray FAM6 check with new Intel CPU model defines - x86/cpu: Add Lunar Lake to list of CPUs with a broken MONITOR implementation - mm/damon: fix order of arguments in damos_before_apply tracepoint - mm: respect mmap hint address when aligning for THP - scsi: ufs: pltfrm: Drop PM runtime reference count after ufshcd_remove() - memblock: allow zero threshold in validate_numa_converage() - s390/pci: Sort PCI functions prior to creating virtual busses - s390/pci: Use topology ID for multi-function devices - s390/pci: Ignore RID for isolated VFs - s390/pci: Fix SR-IOV for PFs initially in standby - s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() - s390/pci: Fix handling of isolated VFs - ext4: partial zero eof block on unaligned inode size extension - crypto: ecdsa - Convert byte arrays with key coordinates to digits - crypto: ecc - Prevent ecc_digits_from_bytes from reading too many bytes - crypto: ecdsa - Rename keylen to bufsize where necessary - crypto: ecdsa - Use ecc_digits_from_bytes to convert signature - crypto: ecdsa - Avoid signed integer overflow on signature decoding - ACPI: video: force native for Apple MacbookPro11,2 and Air7,2 - cleanup: Adjust scoped_guard() macros to avoid potential warning - gpio: free irqs that are still requested when the chip is being removed - media: uvcvideo: Force UVC version to 1.0a for 0408:4035 - media: uvcvideo: Force UVC version to 1.0a for 0408:4033 - wifi: mac80211: export ieee80211_purge_tx_queue() for drivers - drm/amd/display: skip disable CRTC in seemless bootup case - drm/amd/display: disable SG displays on cyan skillfish - wifi: mac80211: Add non-atomic station iterator - accel/qaic: Add AIC080 support - mptcp: annotate data-races around subflow->fully_established - net/tcp: Add missing lockdep annotations for TCP-AO hlist traversals - drm/amd/display: Prune Invalid Modes For HDMI Output - i2c: i801: Add support for Intel Arrow Lake-H - i2c: i801: Add support for Intel Panther Lake - Bluetooth: hci_conn: Reduce hci_conn_drop() calls in two functions - Bluetooth: btusb: Add new VID/PID 13d3/3602 for MT7925 - Bluetooth: btusb: Add USB HW IDs for MT7921/MT7922/MT7925 - Bluetooth: btusb: Add new VID/PID 0489/e111 for MT7925 - Bluetooth: btusb: Add new VID/PID 0489/e124 for MT7925 - Bluetooth: btusb: Add 3 HWIDs for MT7925 - rtla/timerlat: Make timerlat_hist_cpu->*_count unsigned long long - ring-buffer: Correct stale comments related to non-consuming readers - ring-buffer: Limit time with disabled interrupts in rb_check_pages() - scsi: lpfc: Check SLI_ACTIVE flag in FDMI cmpl before submitting follow up FDMI - scsi: lpfc: Prevent NDLP reference count underflow in dev_loss_tmo callback - clk: qcom: clk-alpha-pll: Add support for zonda ole pll configure - clk: qcom: clk-alpha-pll: Add NSS HUAYRA ALPHA PLL support for ipq9574 - mailbox: pcc: Check before sending MCTP PCC response ACK - remoteproc: qcom: pas: Add support for SA8775p ADSP, CDSP and GPDSP - remoteproc: qcom: pas: enable SAR2130P audio DSP support - fs/ntfs3: Implement fallocate for compressed files - fs/ntfs3: Fix warning in ni_fiemap - regulator: qcom-rpmh: Update ranges for FTSMPS525 - usb: chipidea: add CI_HDRC_HAS_SHORT_PKT_LIMIT flag - usb: chipidea: udc: limit usb request length to max 16KB - usb: chipidea: udc: create bounce buffer for problem sglist entries if possible - iio: adc: ad7192: Convert from of specific to fwnode property handling - iio: adc: ad7192: properly check spi_get_device_match_data() - usb: typec: ucsi: add callback for connector status updates - usb: typec: ucsi: glink: move GPIO reading into connector_status callback - usb: typec: ucsi: add update_connector callback - usb: typec: ucsi: glink: set orientation aware if supported - usb: typec: ucsi: glink: be more precise on orientation-aware ports - usb: typec: ucsi: glink: fix off-by-one in connector_status - usb: typec: ucsi: Set orientation as none when connector is unplugged - nvme: use helper nvme_ctrl_state in nvme_keep_alive_finish function - Revert "nvme: make keep-alive synchronous operation" - irqchip/gic-v3-its: Avoid explicit cpumask allocation on stack - irqchip/gicv3-its: Add workaround for hip09 ITS erratum 162100801 - [Config] updateconfigs for HISILICON_ERRATUM_162100801 - drm/amd/display: Add option to retrieve detile buffer size - btrfs: drop unused parameter options from open_ctree() - btrfs: drop unused parameter data from btrfs_fill_super() - btrfs: fix mount failure due to remount races - net/mlx5: unique names for per device caches - s390/pci: Fix leak of struct zpci_dev when zpci_add_device() fails - ALSA: hda/realtek: Fix spelling mistake "Firelfy" -> "Firefly" - softirq: Allow raising SCHED_SOFTIRQ from SMP-call-function on RT kernel - Upstream stable to v6.6.65, v6.6.66, v6.12.4, v6.12.5 * Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) // CVE-2024-41932 - sched: fix warning in sched_setaffinity * Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) // CVE-2024-57872 - scsi: ufs: pltfrm: Dellocate HBA during ufshcd_pltfrm_remove() * Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) // CVE-2024-56588 - scsi: hisi_sas: Create all dump files during debugfs initialization * Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) // CVE-2024-47794 - bpf: Prevent tailcall infinite loop caused by freplace * Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) // CVE-2024-56599 - wifi: ath10k: avoid NULL pointer error during sdio remove * Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) // CVE-2024-56607 - wifi: ath12k: fix atomic calls in ath12k_mac_op_set_bitrate_mask() * Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) // CVE-2024-56608 - drm/amd/display: Fix out-of-bounds access in 'dcn21_link_encoder_create' * Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) // CVE-2024-56609 - wifi: rtw88: use ieee80211_purge_tx_queue() to purge TX skb * Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) // CVE-2024-56782 - ACPI: x86: Add adev NULL check to acpi_quirk_skip_serdev_enumeration() * Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) // CVE-2024-48876 - stackdepot: fix stack_depot_save_flags() in NMI context * Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) // CVE-2024-56620 - scsi: ufs: qcom: Only free platform MSIs when ESI is enabled * Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) // CVE-2024-56621 - scsi: ufs: core: Cancel RTC work during ufshcd_remove() * Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) // CVE-2024-49569 - nvme-rdma: unquiesce admin_q before destroy it * Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) // CVE-2024-56632 - nvme-tcp: fix the memleak while create new ctrl failed * Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) // CVE-2024-56647 - net: Fix icmp host relookup triggering ip_rt_bug * Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) // CVE-2024-56775 - drm/amd/display: Fix handling of plane refcount * Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) // CVE-2024-56561 - PCI: endpoint: Fix PCI domain ID release in pci_epc_destroy() * Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) // CVE-2024-56550 - s390/stacktrace: Use break instead of return statement * Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) // CVE-2024-56771 - mtd: spinand: winbond: Fix 512GW, 01GW, 01JW and 02JW ECC information * Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) // CVE-2024-56568 - iommu/arm-smmu: Defer probe of clients after smmu device bound * Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) // CVE-2024-56772 - kunit: string-stream: Fix a UAF bug in kunit_init_suite() * Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) // CVE-2024-56773 - kunit: Fix potential null dereference in kunit_device_driver_test() * Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) // CVE-2024-56580 - media: qcom: camss: fix error path on configuration of power domains * Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) // CVE-2024-57850 - jffs2: Prevent rtime decompress memory corruption * Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) // CVE-2024-56583 - sched/deadline: Fix warning in migrate_enable for boosted tasks * Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) // CVE-2024-56611 - mm/mempolicy: fix migrate_to_node() assuming there is at least one VMA in a MM * Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) // CVE-2024-56613 - sched/numa: fix memory leak due to the overwritten vma->numab_state * Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) // CVE-2024-56584 - io_uring/tctx: work around xa_store() allocation error issue * Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) // CVE-2024-56781 - powerpc/prom_init: Fixup missing powermac #size-cells * Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) // CVE-2024-56785 - MIPS: Loongson64: DTS: Really fix PCIe port nodes for ls7a * Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) // CVE-2024-56585 - LoongArch: Fix sleeping in atomic context for PREEMPT_RT * Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) // CVE-2024-41935 - f2fs: fix to shrink read extent node in batches * Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) // CVE-2024-43098 - i3c: Use i3cdev->desc->info instead of calling i3c_device_get_info() to avoid deadlock * Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) // CVE-2024-45828 - i3c: mipi-i3c-hci: Mask ring interrupts before ring stop request * Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) // CVE-2024-56586 - f2fs: fix f2fs_bug_on when uninstalling filesystem call f2fs_evict_inode. * Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) // CVE-2024-56587 - leds: class: Protect brightness_show() with led_cdev->led_access mutex * Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) // CVE-2024-56786 - bpf: put bpf_link's program when link is safe to be deallocated * Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) // CVE-2024-47141 - pinmux: Use sequential access to access desc->pinmux data * Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) // CVE-2024-56589 - scsi: hisi_sas: Add cond_resched() for no forced preemption model * Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) // CVE-2024-56590 - Bluetooth: hci_core: Fix not checking skb length on hci_acldata_packet * Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) // CVE-2024-56592 - bpf: Call free_htab_elem() after htab_unlock_bucket() * Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) // CVE-2024-56593 - wifi: brcmfmac: Fix oops due to NULL pointer dereference in brcmf_sdiod_sglist_rw() * Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) // CVE-2024-56594 - drm/amdgpu: set the right AMDGPU sg segment limitation * Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) // CVE-2024-57843 - virtio-net: fix overflow inside virtnet_rq_alloc * Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) // CVE-2024-56596 - jfs: fix array-index-out-of-bounds in jfs_readdir * Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) // CVE-2024-56597 - jfs: fix shift-out-of-bounds in dbSplit * Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) // CVE-2024-47143 - dma-debug: fix a possible deadlock on radix_lock * Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) // CVE-2024-56601 - net: inet: do not leave a dangling sk pointer in inet_create() * Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) // CVE-2024-56602 - net: ieee802154: do not leave a dangling sk pointer in ieee802154_create() * Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) // CVE-2024-56603 - net: af_can: do not leave a dangling sk pointer in can_create() * Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) // CVE-2024-56604 - Bluetooth: RFCOMM: avoid leaving dangling sk pointer in rfcomm_sock_alloc() * Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) // CVE-2024-56605 - Bluetooth: L2CAP: do not leave dangling sk pointer on error in l2cap_sock_create() * Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) // CVE-2024-56606 - af_packet: avoid erroring out after sock_init_data() in packet_create() * Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) // CVE-2024-47809 - dlm: fix possible lkb_resource null dereference * Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) // CVE-2024-48873 - wifi: rtw89: check return value of ieee80211_probereq_get() for RNR * Missing support for USB-C Apple Magic Trackpad (LP: #2098063) // Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) - HID: magicmouse: Apple Magic Trackpad 2 USB-C driver support * Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) // CVE-2024-56787 - soc: imx8m: Probe the SoC driver as platform driver * Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) // CVE-2024-56610 - kcsan: Turn report_filterlist_lock into a raw_spinlock * Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) // CVE-2024-48875 - btrfs: don't take dev_replace rwsem on task already holding it * Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) // CVE-2024-57849 - s390/cpum_sf: Handle CPU hotplug remove during sampling * Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) // CVE-2024-57876 - drm/dp_mst: Fix resetting msg rx state after topology removal * Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) // CVE-2024-56616 - drm/dp_mst: Fix MST sideband message body length check * Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) // CVE-2024-48881 - bcache: revert replacing IS_ERR_OR_NULL with IS_ERR again * Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) // CVE-2024-56619 - nilfs2: fix potential out-of-bounds memory access in nilfs_find_entry() * Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) // CVE-2024-56622 - scsi: ufs: core: sysfs: Prevent div by zero * Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) // CVE-2024-56623 - scsi: qla2xxx: Fix use after free on unload * Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) // CVE-2024-57874 - arm64: ptrace: fix partial SETREGSET for NT_ARM_TAGGED_ADDR_CTRL * Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) // CVE-2024-56625 - can: dev: can_set_termination(): allow sleeping GPIOs * Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) // CVE-2024-56626 - ksmbd: fix Out-of-Bounds Write in ksmbd_vfs_stream_write * Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) // CVE-2024-56628 - LoongArch: Add architecture specific huge_pte_clear() * Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) // CVE-2024-56629 - HID: wacom: fix when get product name maybe null pointer * Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) // CVE-2024-56630 - ocfs2: free inode when ocfs2_get_init_inode() fails * Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) // CVE-2024-56631 - scsi: sg: Fix slab-use-after-free read in sg_release() * Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) // CVE-2024-50051 - spi: mpc52xx: Add cancel_work_sync before module remove * Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) // CVE-2024-56633 - tcp_bpf: Fix the sk_mem_uncharge logic in tcp_bpf_sendmsg * Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) // CVE-2024-56565 - f2fs: fix to drop all discards after creating snapshot on lvm device * Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) // CVE-2024-56634 - gpio: grgpio: Add NULL check in grgpio_probe * Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) // CVE-2024-56635 - net: avoid potential UAF in default_operstate() * Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) // CVE-2024-56636 - geneve: do not assume mac header is set in geneve_xmit_skb() * Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) // CVE-2024-56637 - netfilter: ipset: Hold module reference while requesting a module * Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) // CVE-2024-56638 - netfilter: nft_inner: incorrect percpu area handling under softirq * Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) // CVE-2024-52332 - igb: Fix potential invalid memory access in igb_init_module() * Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) // CVE-2024-56640 - net/smc: fix LGR and link use-after-free issue * Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) // CVE-2024-56641 - net/smc: initialize close_work early to avoid warning * Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) // CVE-2024-56643 - dccp: Fix memory leak in dccp_feat_change_recv * Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) // CVE-2024-56644 - net/ipv6: release expired exception dst cached in socket * Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) // CVE-2024-56645 - can: j1939: j1939_session_new(): fix skb reference counting * Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) // CVE-2024-56648 - net: hsr: avoid potential out-of-bound access in fill_frame_info() * Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) // CVE-2024-56649 - net: enetc: Do not configure preemptible TCs if SIs do not support * Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) // CVE-2024-56783 - netfilter: nft_socket: remove WARN_ON_ONCE on maximum cgroup level * Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) // CVE-2024-56650 - netfilter: x_tables: fix LED ID check in led_tg_check() * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) - wifi: radiotap: Avoid -Wflex-array-member-not-at-end warnings - ASoC: codecs: rt5640: Always disable IRQs from rt5640_cancel_work() - ASoC: Intel: bytcr_rt5640: Add support for non ACPI instantiated codec - ASoC: Intel: bytcr_rt5640: Add DMI quirk for Vexia Edu Atla 10 tablet - ASoC: Intel: sst: Support LPE0F28 ACPI HID - wifi: iwlwifi: mvm: Use the sync timepoint API in suspend - mac80211: fix user-power when emulating chanctx - usb: add support for new USB device ID 0x17EF:0x3098 for the r8152 driver - selftests/watchdog-test: Fix system accidentally reset after watchdog-test - ALSA: hda/realtek: Add subwoofer quirk for Infinix ZERO BOOK 13 - x86/amd_nb: Fix compile-testing without CONFIG_AMD_NB - bpf: fix filed access without lock - net: usb: qmi_wwan: add Quectel RG650V - soc: qcom: Add check devm_kasprintf() returned value - firmware: arm_scmi: Reject clear channel request on A2P - regulator: rk808: Add apply_bit for BUCK3 on RK809 - platform/x86: dell-smbios-base: Extends support to Alienware products - platform/x86: dell-wmi-base: Handle META key Lock/Unlock events - ASoC: tas2781: Add new driver version for tas2563 & tas2781 qfn chip - tools/lib/thermal: Remove the thermal.h soft link when doing make clean - can: j1939: fix error in J1939 documentation. - platform/x86: thinkpad_acpi: Fix for ThinkPad's with ECFW showing incorrect fan speed - ASoC: amd: yc: Support dmic on another model of Lenovo Thinkpad E14 Gen 6 - ASoC: stm: Prevent potential division by zero in stm32_sai_mclk_round_rate() - ASoC: stm: Prevent potential division by zero in stm32_sai_get_clk_div() - drm: panel-orientation-quirks: Make Lenovo Yoga Tab 3 X90F DMI match less strict - proc/softirqs: replace seq_printf with seq_put_decimal_ull_width - ASoC: audio-graph-card2: Purge absent supplies for device tree nodes - LoongArch: Define a default value for VM_DATA_DEFAULT_FLAGS - ALSA: usb-audio: Fix Yamaha P-125 Quirk Entry - ARM: 9420/1: smp: Fix SMP for xip kernels - ipmr: Fix access to mfc_cache_list without lock held - mptcp: fix possible integer overflow in mptcp_reset_tout_timer - arm64: probes: Disable kprobes/uprobes on MOPS instructions - kselftest/arm64: mte: fix printf type warnings about __u64 - kselftest/arm64: mte: fix printf type warnings about longs - s390/cio: Do not unregister the subchannel based on DNV - s390/pageattr: Implement missing kernel_page_present() - ext4: avoid remount errors with 'abort' mount option - mips: asm: fix warning when disabling MIPS_FP_SUPPORT - m68k: mvme147: Fix SCSI controller IRQ numbers - m68k: mvme147: Reinstate early console - arm64: fix .data.rel.ro size assertion when CONFIG_LTO_CLANG - acpi/arm64: Adjust error handling procedure in gtdt_parse_timer_block() - cachefiles: Fix missing pos updates in cachefiles_ondemand_fd_write_iter() - block: fix bio_split_rw_at to take zone_write_granularity into account - s390/syscalls: Avoid creation of arch/arch/ directory - ext4: remove calls to to set/clear the folio error flag - ext4: pipeline buffer reads in mext_page_mkuptodate() - ext4: remove array of buffer_heads from mext_page_mkuptodate() - ext4: fix race in buffer_head read fault injection - nvme-pci: reverse request order in nvme_queue_rqs - virtio_blk: reverse request order in virtio_queue_rqs - crypto: qat - remove check after debugfs_create_dir() - firmware: google: Unregister driver_info on failure - crypto: qat - remove faulty arbiter config reset - thermal: core: Initialize thermal zones before registering them - EDAC/fsl_ddr: Fix bad bit shift operations - EDAC/skx_common: Differentiate memory error sources - EDAC/{skx_common,i10nm}: Fix incorrect far-memory error source indicator - crypto: cavium - Fix the if condition to exit loop after timeout - amd-pstate: Set min_perf to nominal_perf for active mode performance gov - crypto: hisilicon/qm - disable same error report before resetting - crypto: inside-secure - Fix the return value of safexcel_xcbcmac_cra_init() - doc: rcu: update printed dynticks counter bits - hwmon: (pmbus_core) Allow to hook PMBUS_SMBALERT_MASK - hwmon: (pmbus/core) clear faults after setting smbalert mask - hwmon: (nct6775-core) Fix overflows seen when writing limit attributes - ACPI: CPPC: Fix _CPC register setting issue - crypto: caam - add error check to caam_rsa_set_priv_key_form - crypto: cavium - Fix an error handling path in cpt_ucode_load_fw() - rcuscale: Do a proper cleanup if kfree_scale_init() fails - tools/lib/thermal: Make more generic the command encoding function - thermal/lib: Fix memory leak on error in thermal_genl_auto() - x86/unwind/orc: Fix unwind for newly forked tasks - time: Partially revert cleanup on msecs_to_jiffies() documentation - time: Fix references to _msecs_to_jiffies() handling of values - kcsan, seqlock: Support seqcount_latch_t - kcsan, seqlock: Fix incorrect assumption in read_seqbegin() - clocksource/drivers:sp804: Make user selectable - clocksource/drivers/timer-ti-dm: Fix child node refcount handling - spi: spi-fsl-lpspi: Use IRQF_NO_AUTOEN flag in request_irq() - microblaze: Export xmb_manager functions - arm64: dts: mt8195: Fix dtbs_check error for mutex node - arm64: dts: mt8195: Fix dtbs_check error for infracfg_ao node - soc: ti: smartreflex: Use IRQF_NO_AUTOEN flag in request_irq() - arm64: dts: qcom: sm6350: Fix GPU frequencies missing on some speedbins - ARM: dts: microchip: sam9x60: Add missing property atmel,usart-mode - mmc: mmc_spi: drop buggy snprintf() - openrisc: Implement fixmap to fix earlycon - efi/libstub: fix efi_parse_options() ignoring the default command line - tpm: fix signed/unsigned bug when checking event logs - media: i2c: ds90ub960: Fix missing return check on ub960_rxport_read call - arm64: dts: mt8183: krane: Fix the address of eeprom at i2c4 - arm64: dts: mt8183: kukui: Fix the address of eeprom at i2c4 - arm64: dts: mediatek: mt8173-elm-hana: Add vdd-supply to second source trackpad - Revert "cgroup: Fix memory leak caused by missing cgroup_bpf_offline" - cgroup/bpf: only cgroup v2 can be attached by bpf programs - regulator: rk808: Restrict DVS GPIOs to the RK808 variant only - arm64: dts: mt8183: fennel: add i2c2's i2c-scl-internal-delay-ns - arm64: dts: mt8183: burnet: add i2c2's i2c-scl-internal-delay-ns - arm64: dts: mt8183: cozmo: add i2c2's i2c-scl-internal-delay-ns - arm64: dts: mt8183: Damu: add i2c2's i2c-scl-internal-delay-ns - pwm: imx27: Workaround of the pwm output bug when decrease the duty cycle - ARM: dts: cubieboard4: Fix DCDC5 regulator constraints - arm64: dts: ti: k3-j7200: use ti,j7200-padconf compatible - arm64: dts: ti: k3-j7200: Fix register map for main domain pmx - arm64: dts: ti: k3-j7200: Fix clock ids for MCSPI instances - arm64: dts: ti: k3-j721e: Fix clock IDs for MCSPI instances - arm64: dts: ti: k3-j721s2: Fix clock IDs for MCSPI instances - um: Unconditionally call unflatten_device_tree() - x86/of: Unconditionally call unflatten_and_copy_device_tree() - of/fdt: add dt_phys arg to early_init_dt_scan and early_init_dt_verify - riscv: Fix wrong usage of __pa() on a fixmap address - pmdomain: ti-sci: Add missing of_node_put() for args.np - spi: tegra210-quad: Avoid shift-out-of-bounds - spi: zynqmp-gqspi: Undo runtime PM changes at driver exit time - regmap: irq: Set lockdep class for hierarchical IRQ domains - arm64: dts: renesas: hihope: Drop #sound-dai-cells - arm64: dts: mediatek: Add ADC node on MT6357, MT6358, MT6359 PMICs - arm64: dts: mediatek: mt6358: fix dtbs_check error - arm64: dts: mediatek: mt8183-kukui-jacuzzi: Fix DP bridge supply names - arm64: dts: mediatek: mt8183-kukui-jacuzzi: Add supplies for fixed regulators - selftests/resctrl: Split fill_buf to allow tests finer-grained control - selftests/resctrl: Refactor fill_buf functions - selftests/resctrl: Fix memory overflow due to unhandled wraparound - selftests/resctrl: Protect against array overrun during iMC config parsing - arm64: dts: rockchip: correct analog audio name on Indiedroid Nova - platform/x86: panasonic-laptop: Return errno correctly in show callback - drm/mm: Mark drm_mm_interval_tree*() functions with __maybe_unused - drm/vc4: hvs: Don't write gamma luts on 2711 - drm/vc4: hvs: Fix dlist debug not resetting the next entry pointer - drm/vc4: hvs: Remove incorrect limit from hvs_dlist debugfs function - drm/vc4: hvs: Correct logic on stopping an HVS channel - drm/omap: Fix possible NULL dereference - drm/omap: Fix locking in omap_gem_new_dmabuf() - wifi: p54: Use IRQF_NO_AUTOEN flag in request_irq() - wifi: mwifiex: Use IRQF_NO_AUTOEN flag in request_irq() - drm/imx/dcss: Use IRQF_NO_AUTOEN flag in request_irq() - drm/imx/ipuv3: Use IRQF_NO_AUTOEN flag in request_irq() - drm/v3d: Address race-condition in MMU flush - wifi: ath10k: fix invalid VHT parameters in supported_vht_mcs_rate_nss1 - wifi: ath10k: fix invalid VHT parameters in supported_vht_mcs_rate_nss2 - dt-bindings: vendor-prefixes: Add NeoFidelity, Inc - ASoC: fsl_micfil: fix regmap_write_bits usage - ASoC: dt-bindings: mt6359: Update generic node name and dmic-mode - drm/bridge: anx7625: Drop EDID cache on bridge power off - drm/bridge: it6505: Drop EDID cache on bridge power off - libbpf: Fix expected_attach_type set handling in program load callback - libbpf: Fix output .symtab byte-order during linking - bpf: Fix the xdp_adjust_tail sample prog issue - wifi: ath11k: Fix CE offset address calculation for WCN6750 in SSR - ice: consistently use q_idx in ice_vc_cfg_qs_msg() - drm/vc4: Match drm_dev_enter and exit calls in vc4_hvs_atomic_flush - libbpf: fix sym_is_subprog() logic for weak global subprogs - ASoC: rt722-sdca: Remove logically deadcode in rt722-sdca.c - libbpf: never interpret subprogs in .text as entry programs - netdevsim: copy addresses for both in and out paths - drm/bridge: tc358767: Fix link properties discovery - selftests/bpf: Fix msg_verify_data in test_sockmap - selftests/bpf: Fix txmsg_redir of test_txmsg_pull in test_sockmap - drm: fsl-dcu: enable PIXCLK on LS1021A - drm/msm/dpu: on SDM845 move DSPP_3 to LM_5 block - drm/msm/dpu: drop LM_3 / LM_4 on SDM845 - drm/msm/dpu: drop LM_3 / LM_4 on MSM8998 - selftests/bpf: fix test_spin_lock_fail.c's global vars usage - drm/panfrost: Remove unused id_mask from struct panfrost_model - bpf, arm64: Remove garbage frame for struct_ops trampoline - drm/msm/adreno: Use IRQF_NO_AUTOEN flag in request_irq() - drm/msm/gpu: Check the status of registration to PM QoS - drm/etnaviv: Request pages from DMA32 zone on addressing_limited - drm/etnaviv: hold GPU lock across perfmon sampling - wifi: wfx: Fix error handling in wfx_core_init() - drm/msm/dpu: cast crtc_clk calculation to u64 in _dpu_core_perf_calc_clk() - bpf, bpftool: Fix incorrect disasm pc - drm/vkms: Drop unnecessary call to drm_crtc_cleanup() - drm: use ATOMIC64_INIT() for atomic64_t - netfilter: nf_tables: avoid false-positive lockdep splat on rule deletion - netfilter: nf_tables: must hold rcu read lock while iterating expression type list - netfilter: nf_tables: skip transaction if update object is not implemented - netfilter: nf_tables: must hold rcu read lock while iterating object type list - netlink: typographical error in nlmsg_type constants definition - selftests/bpf: Add txmsg_pass to pull/push/pop in test_sockmap - selftests/bpf: Fix SENDPAGE data logic in test_sockmap - selftests/bpf: Fix total_bytes in msg_loop_rx in test_sockmap - selftests/bpf: Add push/pop checking for msg_verify_data in test_sockmap - bpf, sockmap: Several fixes to bpf_msg_push_data - bpf, sockmap: Fix sk_msg_reset_curr - sock_diag: add module pointer to "struct sock_diag_handler" - sock_diag: allow concurrent operations - sock_diag: allow concurrent operation in sock_diag_rcv_msg() - net: use unrcu_pointer() helper - selftests: net: really check for bg process completion - drm/amdkfd: Fix wrong usage of INIT_WORK() - bpf: Force uprobe bpf program to always return 0 - net: rfkill: gpio: Add check for clk_enable() - netpoll: Use rcu_access_pointer() in netpoll_poll_lock - wireguard: selftests: load nf_conntrack if not present - cppc_cpufreq: Use desired perf if feedback ctrs are 0 or unchanged - clk: mediatek: drop two dead config options - [Config] drop COMMON_CLK_MT8195_AUDSYS and COMMON_CLK_MT8195_MSDC - trace/trace_event_perf: remove duplicate samples on the first tracepoint event - pinctrl: zynqmp: drop excess struct member description - scsi: hisi_sas: Enable all PHYs that are not disabled by user during controller reset - mfd: tps65010: Use IRQF_NO_AUTOEN flag in request_irq() to fix race - mfd: da9052-spi: Change read-mask to write-mask - cpufreq: loongson2: Unregister platform_driver on failure - powerpc/fadump: Refactor and prepare fadump_cma_init for late init - mtd: hyperbus: rpc-if: Add missing MODULE_DEVICE_TABLE - mtd: rawnand: atmel: Fix possible memory leak - mtd: rawnand: fix double free in atmel_pmecc_create_user() - mtd: spi-nor: spansion: Use nor->addr_nbytes in octal DTR mode in RD_ANY_REG_OP - RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci - RDMA/hns: Use dev_* printings in hem code instead of ibdev_* - RDMA/bnxt_re: Check cqe flags to know imm_data vs inv_irkey - clk: sunxi-ng: d1: Fix PLL_AUDIO0 preset - clk: renesas: rzg2l: Fix FOUTPOSTDIV clk - RDMA/rxe: Set queue pair cur_qp_state when being queried - RISC-V: KVM: Fix APLIC in_clrip and clripnum write emulation - clk: imx: lpcg-scu: SW workaround for errata (e10858) - clk: imx: fracn-gppll: correct PLL initialization flow - clk: imx: fracn-gppll: fix pll power up - clk: imx: clk-scu: fix clk enable state save and restore - clk: imx: imx8-acm: Fix return value check in clk_imx_acm_attach_pm_domains() - iommu/vt-d: Fix checks and print in dmar_fault_dump_ptes() - iommu/vt-d: Fix checks and print in pgtable_walk() - checkpatch: check for missing Fixes tags - checkpatch: always parse orig_commit in fixes tag - mfd: rt5033: Fix missing regmap_del_irq_chip() - fs/proc/kcore.c: fix coccinelle reported ERROR instances - scsi: fusion: Remove unused variable 'rc' - scsi: sg: Enable runtime power management - x86/tdx: Introduce wrappers to read and write TD metadata - x86/tdx: Rename tdx_parse_tdinfo() to tdx_setup() - x86/tdx: Dynamically disable SEPT violations from causing #VEs - RDMA/hns: Fix out-of-order issue of requester when setting FENCE - cpufreq: CPPC: Fix wrong return value in cppc_get_cpu_cost() - cpufreq: CPPC: Fix wrong return value in cppc_get_cpu_power() - dax: delete a stale directory pmem - KVM: PPC: Book3S HV: Stop using vc->dpdes for nested KVM guests - KVM: PPC: Book3S HV: Avoid returning to nested hypervisor on pending doorbells - powerpc/sstep: make emulate_vsx_load and emulate_vsx_store static - powerpc/kexec: Fix return of uninitialized variable - IB/mlx5: Allocate resources just before first QP/SRQ is created - clk: ralink: mtmips: fix clock plan for Ralink SoC RT3883 - clk: ralink: mtmips: remove duplicated 'xtal' clock for Ralink SoC RT3883 - dt-bindings: clock: axi-clkgen: include AXI clk - clk: clk-axi-clkgen: make sure to enable the AXI bus clock - arm64: dts: qcom: sc8180x: Add a SoC-specific compatible to cpufreq-hw - pinctrl: k210: Undef K210_PC_DEFAULT - smb: cached directories can be more than root file handle - mailbox: arm_mhuv2: clean up loop in get_irq_chan_comb() - perf cs-etm: Don't flush when packet_queue fills up - gfs2: Get rid of gfs2_glock_queue_put in signal_our_withdraw - gfs2: Replace gfs2_glock_queue_put with gfs2_glock_put_async - gfs2: Rename GLF_VERIFY_EVICT to GLF_VERIFY_DELETE - gfs2: Allow immediate GLF_VERIFY_DELETE work - gfs2: Fix unlinked inode cleanup - perf stat: Close cork_fd when create_perf_stat_counter() failed - perf stat: Fix affinity memory leaks on error path - perf trace: Keep exited threads for summary - perf test attr: Add back missing topdown events - f2fs: compress: fix inconsistent update of i_blocks in release_compress_blocks and reserve_compress_blocks - perf probe: Fix libdw memory leak - perf probe: Correct demangled symbols in C++ program - rust: macros: fix documentation of the paste! macro - PCI: cpqphp: Use PCI_POSSIBLE_ERROR() to check config reads - PCI: cpqphp: Fix PCIBIOS_* return value confusion - perf ftrace latency: Fix unit on histogram first entry when using --use-nsec - f2fs: fix the wrong f2fs_bug_on condition in f2fs_do_replace_block - f2fs: check curseg->inited before write_sum_page in change_curseg - f2fs: fix to avoid use GC_AT when setting gc_mode as GC_URGENT_LOW or GC_URGENT_MID - PCI: cadence: Extract link setup sequence from cdns_pcie_host_setup() - PCI: cadence: Set cdns_pcie_host_init() global - PCI: j721e: Add reset GPIO to struct j721e_pcie - PCI: j721e: Use T_PERST_CLK_US macro - PCI: j721e: Add suspend and resume support - PCI: j721e: Deassert PERST# after a delay of PCIE_T_PVPERL_MS milliseconds - f2fs: fix to avoid forcing direct write to use buffered IO on inline_data inode - perf trace: avoid garbage when not printing a trace event's arguments - m68k: mcfgpio: Fix incorrect register offset for CONFIG_M5441x - m68k: coldfire/device.c: only build FEC when HW macros are defined - perf list: Fix topic and pmu_name argument order - perf trace: Fix tracing itself, creating feedback loops - perf trace: Do not lose last events in a race - perf trace: Avoid garbage when not printing a syscall's arguments - remoteproc: qcom: pas: add minidump_id to SM8350 resources - rpmsg: glink: use only lower 16-bits of param2 for CMD_OPEN name length - remoteproc: qcom_q6v5_mss: Re-order writes to the IMEM region - nfsd: restore callback functionality for NFSv4.0 - NFSD: Cap the number of bytes copied by nfs4_reset_recoverydir() - NFSD: Fix nfsd4_shutdown_copy() - hwmon: (tps23861) Fix reporting of negative temperatures - vdpa/mlx5: Fix suboptimal range on iotlb iteration - selftests/mount_setattr: Fix failures on 64K PAGE_SIZE kernels - gpio: zevio: Add missed label initialisation - fs_parser: update mount_api doc to match function signature - LoongArch: Fix build failure with GCC 15 (-std=gnu23) - LoongArch: BPF: Sign-extend return values - power: supply: core: Remove might_sleep() from power_supply_put() - power: supply: bq27xxx: Fix registers of bq27426 - power: supply: rt9471: Fix wrong WDT function regfield declaration - power: supply: rt9471: Use IC status regfield to report real charger status - net: usb: lan78xx: Fix memory leak on device unplug by freeing PHY device - tg3: Set coherent DMA mask bits to 31 for BCM57766 chipsets - net: usb: lan78xx: Fix refcounting and autosuspend on invalid WoL configuration - net: microchip: vcap: Add typegroup table terminators in kunit tests - net/ipv6: delete temporary address if mngtmpaddr is removed or unmanaged - net: mdio-ipq4019: add missing error check - marvell: pxa168_eth: fix call balance of pep->clk handling routines - net: stmmac: dwmac-socfpga: Set RX watchdog interrupt as broken - octeontx2-af: RPM: Fix mismatch in lmac type - octeontx2-af: RPM: Fix low network performance - octeontx2-pf: Reset MAC stats during probe - octeontx2-af: RPM: fix stale RSFEC counters - octeontx2-af: RPM: fix stale FCFEC counters - octeontx2-af: Quiesce traffic before NIX block reset - spi: atmel-quadspi: Fix register name in verbose logging function - net: hsr: fix hsr_init_sk() vs network/transport headers. - bnxt_en: Reserve rings after PCIe AER recovery if NIC interface is down - bnxt_en: Refactor bnxt_ptp_init() - bnxt_en: Unregister PTP during PCI shutdown and suspend - llc: Improve setsockopt() handling of malformed user input - rxrpc: Improve setsockopt() handling of malformed user input - tcp: Fix use-after-free of nreq in reqsk_timer_handler(). - ip6mr: fix tables suspicious RCU usage - ipmr: fix tables suspicious RCU usage - iio: light: al3010: Fix an error handling path in al3010_probe() - usb: using mutex lock and supporting O_NONBLOCK flag in iowarrior_read() - usb: yurex: make waiting on yurex_write interruptible - USB: chaoskey: fail open after removal - USB: chaoskey: Fix possible deadlock chaoskey_list_lock - misc: apds990x: Fix missing pm_runtime_disable() - counter: stm32-timer-cnt: Add check for clk_enable() - counter: ti-ecap-capture: Add check for clk_enable() - ALSA: hda/realtek: Update ALC256 depop procedure - drm/radeon: add helper rdev_to_drm(rdev) - drm/radeon: change rdev->ddev to rdev_to_drm(rdev) - drm/radeon: Fix spurious unplug event on radeon HDMI - apparmor: fix 'Do simple duplicate message elimination' - ASoC: amd: yc: Fix for enabling DMIC on acp6x via _DSD entry - gfs2: Don't set GLF_LOCK in gfs2_dispose_glock_lru - gfs2: Remove and replace gfs2_glock_queue_work - f2fs: fix fiemap failure issue when page size is 16KB - usb: ehci-spear: fix call balance of sehci clk handling routines - ALSA: usb-audio: Fix a DMA to stack memory bug - ASoC: Intel: sst: Fix used of uninitialized ctx to log an error - soc: qcom: socinfo: fix revision check in qcom_socinfo_probe() - ext4: supress data-race warnings in ext4_free_inodes_{count,set}() - ext4: fix FS_IOC_GETFSMAP handling - jfs: xattr: check invalid xattr size more strictly - ASoC: amd: yc: Add a quirk for microfone on Lenovo ThinkPad P14s Gen 5 21MES00B00 - ASoC: codecs: Fix atomicity violation in snd_soc_component_get_drvdata() - perf/x86/intel/pt: Fix buffer full but size is 0 case - crypto: x86/aegis128 - access 32-bit arguments as 32-bit - KVM: x86/mmu: Skip the "try unsync" path iff the old SPTE was a leaf SPTE - powerpc/pseries: Fix KVM guest detection for disabling hardlockup detector - KVM: arm64: vgic-v3: Sanitise guest writes to GICR_INVLPIR - KVM: arm64: Ignore PMCNTENSET_EL0 while checking for overflow status - KVM: arm64: vgic-its: Clear ITE when DISCARD frees an ITE - KVM: arm64: vgic-its: Add a data length check in vgic_its_save_* - KVM: arm64: vgic-its: Clear DTE when MAPD unmaps a device - fsnotify: fix sending inotify event with unexpected filename - tty: ldsic: fix tty_ldisc_autoload sysctl's proc_handler - locking/lockdep: Avoid creating new name string literals in lockdep_set_subclass() - tools/nolibc: s390: include std.h - pinctrl: qcom: spmi: fix debugfs drive strength - dt-bindings: iio: dac: ad3552r: fix maximum spi speed - exfat: fix uninit-value in __exfat_get_dentry_set - Bluetooth: Fix type of len in rfcomm_sock_getsockopt{,_old}() - Compiler Attributes: disable __counted_by for clang < 19.1.3 - usb: xhci: Fix TD invalidation under pending Set TR Dequeue - ARM: dts: omap36xx: declare 1GHz OPP as turbo again - wifi: brcmfmac: release 'root' node in all execution paths - Revert "usb: gadget: composite: fix OS descriptors w_value logic" - gpio: exar: set value when external pull-up or pull-down is present - spi: Fix acpi deferred irq probe - cpufreq: mediatek-hw: Fix wrong return value in mtk_cpufreq_get_cpu_power() - cifs: support mounting with alternate password to allow password rotation - parisc/ftrace: Fix function graph tracing disablement - platform/chrome: cros_ec_typec: fix missing fwnode reference decrement - ubi: wl: Put source PEB into correct list if trying locking LEB failed - dt-bindings: serial: rs485: Fix rs485-rts-delay property - serial: 8250_fintek: Add support for F81216E - serial: 8250: omap: Move pm_runtime_get_sync - iio: gts: Fix uninitialized symbol 'ret' - ublk: fix ublk_ch_mmap() for 64K page size - arm64: tls: Fix context-switching of tpidrro_el0 when kpti is enabled - block: fix missing dispatching request when queue is started or unquiesced - block: fix ordering between checking QUEUE_FLAG_QUIESCED request adding - block: fix ordering between checking BLK_MQ_S_STOPPED request adding - blk-mq: Make blk_mq_quiesce_tagset() hold the tag list mutex less long - HID: wacom: Interpret tilt data from Intuos Pro BT as signed values - soc: fsl: rcpm: fix missing of_node_put() in copy_ippdexpcr1_setting() - media: v4l2-core: v4l2-dv-timings: check cvt/gtf result - ALSA: ump: Fix evaluation of MIDI 1.0 FB info - ALSA: hda/realtek: Update ALC225 depop procedure - ALSA: hda/realtek: Fixup ALC225 depop procedure - ALSA: hda/realtek: Set PCBeep to default value for ALC274 - ALSA: hda/realtek: Fix Internal Speaker and Mic boost of Infinix Y4 Max - ALSA: hda/realtek: Apply quirk for Medion E15433 - smb3: request handle caching when caching directories - smb: client: handle max length for SMB symlinks - cifs: Add tracing for the cifs_tcon struct refcounting - usb: dwc3: gadget: Fix checking for number of TRBs left - ublk: fix error code for unsupported command - lib: string_helpers: silence snprintf() output truncation warning - um: Fix the return value of elf_core_copy_task_fpregs - um: Always dump trace for specified task in show_stack - rtc: st-lpc: Use IRQF_NO_AUTOEN flag in request_irq() - rtc: abx80x: Fix WDT bit position of the status register - ubi: fastmap: wl: Schedule fm_work if wear-leveling pool is empty - ubifs: Correct the total block count by deducting journal reservation - jffs2: fix use of uninitialized variable - rtc: rzn1: fix BCD to rtc_time conversion errors - nvme-multipath: prepare for "queue-depth" iopolicy - nvme-multipath: implement "queue-depth" iopolicy - nvme-multipath: avoid hang on inaccessible namespaces - nvme/multipath: Fix RCU list traversal to use SRCU primitive - block: return unsigned int from bdev_io_min - 9p/xen: fix init sequence - perf/arm-smmuv3: Fix lockdep assert in ->event_init() - perf/arm-cmn: Ensure port and device id bits are set properly - smb: client: disable directory caching when dir_cache_timeout is zero - cifs: Fix parsing native symlinks relative to the export - cifs: Fix parsing reparse point with native symlink in SMB1 non-UNICODE session - rtc: ab-eoz9: don't fail temperature reads on undervoltage notification - init/modpost: conditionally check section mismatch to __meminit* - Rename .data.unlikely to .data..unlikely - Rename .data.once to .data..once to fix resetting WARN*_ONCE - modpost: remove incorrect code in do_eisa_entry() - cifs: during remount, make sure passwords are in sync - cifs: unlock on error in smb3_reconfigure() - nfs: ignore SB_RDONLY when mounting nfs - SUNRPC: timeout and cancel TLS handshake with -ETIMEDOUT - xfs: remove unknown compat feature check in superblock write validation - btrfs: don't loop for nowait writes when checking for cross references - md/md-bitmap: Add missing destroy_work_on_stack() - arm64: dts: allwinner: pinephone: Add mount matrix to accelerometer - arm64: dts: freescale: imx8mm-verdin: Fix SD regulator startup delay - arm64: dts: ti: k3-am62-verdin: Fix SD regulator startup delay - media: i2c: dw9768: Fix pm_runtime_set_suspended() with runtime pm enabled - arm64: dts: freescale: imx8mp-verdin: Fix SD regulator startup delay - media: imx-jpeg: Fix potential error pointer dereference in detach_pm() - media: verisilicon: av1: Fix reference video buffer pointer assignment - media: platform: exynos4-is: Fix an OF node reference leak in fimc_md_is_isp_available - media: amphion: Fix pm_runtime_set_suspended() with runtime pm enabled - media: venus: Fix pm_runtime_set_suspended() with runtime pm enabled - media: gspca: ov534-ov772x: Fix off-by-one error in set_frame_rate() - media: uvcvideo: Stop stream during unregister - maple_tree: refine mas_store_root() on storing NULL - vmstat: call fold_vm_zone_numa_events() before show per zone NUMA event - zram: clear IDLE flag after recompression - iommu/io-pgtable-arm: Fix stage-2 map/unmap for concatenated tables - leds: lp55xx: Remove redundant test for invalid channel number - clk: qcom: gcc-qcs404: fix initial rate of GPLL3 - ARM: 9429/1: ioremap: Sync PGDs for VMALLOC shadow - ARM: 9430/1: entry: Do a dummy read from VMAP shadow - ARM: 9431/1: mm: Pair atomic_set_release() with _read_acquire() - ceph: extract entity name from device id - util_macros.h: fix/rework find_closest() macros - scsi: ufs: exynos: Fix hibern8 notify callbacks - i3c: master: svc: Fix pm_runtime_set_suspended() with runtime pm enabled - PCI: keystone: Set mode as Root Complex for "ti,keystone-pcie" compatible - PCI: keystone: Add link up check to ks_pcie_other_map_bus() - PCI: endpoint: Clear secondary (not primary) EPC in pci_epc_remove_epf() - fs/proc/kcore.c: Clear ret value in read_kcore_iter after successful iov_iter_zero - thermal: int3400: Fix reading of current_uuid for active policy - leds: flash: mt6360: Fix device_for_each_child_node() refcounting in error paths - ovl: properly handle large files in ovl_security_fileattr - dm: Fix typo in error message - dm thin: Add missing destroy_work_on_stack() - PCI: of_property: Assign PCI instead of CPU bus address to dynamic PCI nodes - PCI: rockchip-ep: Fix address translation unit programming - iio: accel: kx022a: Fix raw read format - iio: Fix fwnode_handle in __fwnode_iio_channel_get_by_name() - iio: gts: fix infinite loop for gain_to_scaletables() - powerpc: Fix stack protector Kconfig test for clang - powerpc: Adjust adding stack protector flags to KBUILD_CLAGS for clang - udmabuf: use vmf_insert_pfn and VM_PFNMAP for handling mmap - drm/mediatek: Fix child node refcount handling in early exit - drm/etnaviv: flush shader L1 cache after user commandstream - drm: xlnx: zynqmp_dpsub: fix hotplug detection - drm/amdkfd: Use the correct wptr size - drm/amd/pm: update current_socclk and current_uclk in gpu_metrics on smu v13.0.7 - posix-timers: Target group sigqueue to current task only if not exiting - wifi: cfg80211: Add wiphy_delayed_work_pending() - wifi: mac80211: Convert color collision detection to wiphy work - spi: stm32: fix missing device mode capability in stm32mp25 - usb: typec: use cleanup facility for 'altmodes_node' - platform/x86: ideapad-laptop: add missing Ideapad Pro 5 fn keys - integrity: Avoid -Wflex-array-member-not-at-end warnings - integrity: Use static_assert() to check struct sizes - ASoC: max9768: Fix event generation for playback mute - ARM: 9434/1: cfi: Fix compilation corner case - drm/amd/display: Skip Invalid Streams from DSC Policy - drm/amd/display: Fix DSC-re-computing - drm/amd/display: Fix incorrect DSC recompute trigger - s390/facilities: Fix warning about shadow of global variable - cachefiles: Fix incorrect length return value in cachefiles_ondemand_fd_write_iter() - thermal: core: Drop thermal_zone_device_is_enabled() - thermal: core: Synchronize suspend-prepare and post-suspend actions - thermal: core: Rearrange PM notification code - thermal: core: Represent suspend-related thermal zone flags as bits - thermal: core: Mark thermal zones as initializing to start with - thermal: core: Fix race between zone registration and system suspend - crypto: qat - Fix missing destroy_workqueue in adf_init_aer() - sched/cpufreq: Ensure sd is rebuilt for EAS check - cleanup: Remove address space of returned pointer - ARM: dts: renesas: genmai: Fix partition size for QSPI NOR Flash - arm64: dts: mediatek: mt8395-genio-1200-evk: Fix dtbs_check error for phy - scripts/kernel-doc: Do not track section counter across processed files - arm64: dts: qcom: x1e80100: Resize GIC Redistributor register region - scripts/kernel-doc: add modeline for vim users - scripts/kernel-doc: simplify function printing - scripts/kernel-doc: separate out function signature - scripts/kernel-doc: simplify signature printing - doc: kerneldoc.py: fix indentation - kernel-doc: allow object-like macros in ReST output - arm64: dts: mediatek: mt8188: Fix USB3 PHY port default status - arm64: dts: rockchip: Remove 'enable-active-low' from two boards - arm64: dts: qcom: x1e80100: Update C4/C5 residency/exit numbers - dt-bindings: cache: qcom,llcc: Fix X1E80100 reg entries - pwm: Assume a disabled PWM to emit a constant inactive output - drm/imagination: Convert to use time_before macro - drm/imagination: Use pvr_vm_context_get() - drm/v3d: Flush the MMU before we supply more memory to the binner - drm/amdgpu: Fix JPEG v4.0.3 register write - ASoC: fsl-asoc-card: Add missing handling of {hp,mic}-dt-gpios - wifi: rtl8xxxu: Perform update_beacon_work when beaconing is enabled - selftests/bpf: netns_new() and netns_free() helpers. - selftests/bpf: Fix backtrace printing for selftests crashes - selftests/bpf: add missing header include for htons - drm/vc4: hdmi: Increase audio MAI fifo dreq threshold - drm/vc4: Introduce generation number enum - drm/vc4: Match drm_dev_enter and exit calls in vc4_hvs_lut_load - drm/vc4: Correct generation check in vc4_hvs_lut_load - bpf: Tighten tail call checks for lingering locks, RCU, preempt_disable - drm/panfrost: Add missing OPP table refcnt decremental - selftests: netfilter: Fix missing return values in conntrack_dump_flush - Bluetooth: btintel: Do no pass vendor events to stack - Bluetooth: btbcm: fix missing of_node_put() in btbcm_get_board_name() - Bluetooth: ISO: Use kref to track lifetime of iso_conn - Bluetooth: ISO: Do not emit LE PA Create Sync if previous is pending - Bluetooth: hci_conn: Use __counted_by() to avoid -Wfamnae warning - Bluetooth: hci_conn: Use struct_size() in hci_le_big_create_sync() - Bluetooth: ISO: Do not emit LE BIG Create Sync if previous is pending - Bluetooth: ISO: Send BIG Create Sync via hci_sync - Bluetooth: iso: Fix circular lock in iso_conn_big_sync - net: txgbe: remove GPIO interrupt controller - net: txgbe: fix null pointer to pcs - RDMA/core: Provide rdma_user_mmap_disassociate() to disassociate mmap pages - RDMA/hns: Disassociate mmap pages for all uctx when HW is being reset - iommu/amd: Remove amd_iommu_domain_update() from page table freeing - iommu/amd/pgtbl_v2: Take protection domain lock before invalidating TLB - RDMA/hns: Fix flush cqe error when racing with destroy qp - RDMA/hns: Modify debugfs name - leds: max5970: Fix unreleased fwnode_handle in probe function - kasan: move checks to do_strncpy_from_user - kunit: skb: use "gfp" variable instead of hardcoding GFP_KERNEL - RDMA/hns: Fix different dgids mapping to the same dip_idx - RDMA/hns: Fix accessing invalid dip_ctx during destroying QP - rust: kernel: add srctree-relative doclinks - rust: kernel: fix THIS_MODULE header path in ThisModule doc comment - i3c: master: Remove i3c_dev_disable_ibi_locked(olddev) on device hotjoin - remoteproc: qcom: pas: Remove subdevs on the error path of adsp_probe() - remoteproc: qcom: adsp: Remove subdevs on the error path of adsp_probe() - nfsd: Revert "nfsd: release svc_expkey/svc_export with rcu_work" - f2fs: clean up val{>>,<<}F2FS_BLKSIZE_BITS - f2fs: fix to do cast in F2FS_{BLK_TO_BYTES, BTYES_TO_BLK} to avoid overflow - vfio/mlx5: Fix unwind flows in mlx5vf_pci_save/resume_device_data() - exfat: fix file being changed by unaligned direct write - bnxt_en: Set backplane link modes correctly for ethtool - devres: Fix page faults when tracing devres from unloaded modules - usb: gadget: uvc: wake pump everytime we update the free list - drm/xe/ufence: Wake up waiters after setting ufence->signalled - net_sched: sch_fq: don't follow the fast path if Tx is behind now - ASoC: da7213: Populate max_register to regmap_config - KVM: x86: switch hugepage recovery thread to vhost_task - kvm: defer huge page recovery vhost task to later - KVM: x86/mmu: Ensure NX huge page recovery thread is alive before waking - KVM: arm64: Change kvm_handle_mmio_return() return polarity - dt-bindings: pinctrl: samsung: Fix interrupt constraint for variants with fallbacks - xhci: Fix control transfer error on Etron xHCI host - xhci: Combine two if statements for Etron xHCI host - xhci: Don't perform Soft Retry for Etron xHCI host - xhci: Don't issue Reset Device command to Etron xHCI host - mtd: spi-nor: core: replace dummy buswidth from addr to data - Revert "mtd: spi-nor: core: replace dummy buswidth from addr to data" - RISC-V: Scalar unaligned access emulated on hotplug CPUs - serial: amba-pl011: Fix RX stall when DMA is used - serial: amba-pl011: fix build regression - i40e: Fix handling changed priv flags - netdev-genl: Hold rcu_read_lock in napi_get - usb: misc: ljca: set small runtime autosuspend delay - usb: misc: ljca: move usb_autopm_put_interface() after wait for response - blk-mq: add non_owner variant of start_freeze/unfreeze queue APIs - block: model freeze & enter queue as lock for supporting lockdep - block: always verify unfreeze lock on the owner task - x86/Documentation: Update algo in init_size description of boot protocol - kbuild: deb-pkg: Don't fail if modules.order is missing - tools/power turbostat: Fix trailing 'n' parsing - block: don't verify IO lock for freeze/unfreeze in elevator_init_mq() - zram: permit only one post-processing operation at a time - perf jevents: Don't stop at the first matched pmu when searching a events table - docs: media: update location of the media patches - Revert "KVM: VMX: Move LOAD_IA32_PERF_GLOBAL_CTRL errata handling out of setup_vmcs_config()" - soc: fsl: cpm1: qmc: Fix blank line and spaces - soc: fsl: cpm1: qmc: Re-order probe() operations - soc: fsl: cpm1: qmc: Introduce qmc_init_resource() and its CPM1 version - soc: fsl: cpm1: qmc: Introduce qmc_{init,exit}_xcc() and their CPM1 version - soc: fsl: cpm1: qmc: Set the ret error code on platform_get_irq() failure - x86/mm: Carve out INVLPG inline asm for use by others - ALSA: hda/realtek: Enable mic on Vaio VJFH52 - ALSA: hda/realtek: Enable speaker pins for Medion E15443 platform - ALSA: hda/realtek: fix mute/micmute LEDs don't work for EliteBook X G1i - usb: dwc3: gadget: Add missing check for single port RAM in TxFIFO resizing logic - sched: Initialize idle tasks only once - Upstream stable to v6.6.64, v6.11.11, v6.12.1, v6.12.2, v6.12.3 * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) // CVE-2024-53222 - zram: fix NULL pointer in comp_algorithm_show() * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) // CVE-2024-53169 - nvme-fabrics: fix kernel crash while shutting down controller * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) // CVE-2024-56721 - x86/CPU/AMD: Terminate the erratum_1386_microcode array * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) // CVE-2024-53187 - io_uring: check for overflows in io_pin_pages * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) // CVE-2024-53147 - exfat: fix out-of-bounds access of directory entries * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) // CVE-2024-53196 - KVM: arm64: Don't retire aborted MMIO instruction * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) // CVE-2024-56685 - ASoC: mediatek: Check num_codecs is not zero to avoid panic during probe * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) // CVE-2024-53201 - drm/amd/display: Fix null check for pipe_ctx->plane_state in dcn20_program_pipe * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) // CVE-2024-53203 - usb: typec: fix potential array underflow in ucsi_ccg_sync_control() * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) // CVE-2024-53209 - bnxt_en: Fix receive ring space parameters when XDP is active * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) // CVE-2024-56742 - vfio/mlx5: Fix an unwind issue in mlx5vf_add_migration_pages() * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) // CVE-2024-53216 - nfsd: release svc_expkey/svc_export with rcu_work * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) // CVE-2024-53219 - virtiofs: use pages instead of pointer for kernel direct IO * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) // CVE-2024-53221 - f2fs: fix null-ptr-deref in f2fs_submit_page_bio() * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) // CVE-2024-53228 - riscv: kvm: Fix out-of-bounds array access * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) // CVE-2024-53232 - iommu/s390: Implement blocking domain * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) // CVE-2024-53236 - xsk: Free skb when TX metadata options are invalid * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) // CVE-2024-56703 - ipv6: Fix soft lockups in fib6_select_path under high next hop churn * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) // CVE-2024-56540 - accel/ivpu: Prevent recovery invocation during probe and resume * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) // CVE-2024-53163 - crypto: qat/qat_420xx - fix off by one in uof_get_name() * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) // CVE-2024-56755 - netfs/fscache: Add a memory barrier for FSCACHE_VOLUME_CREATING * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) // CVE-2024-56549 - cachefiles: Fix NULL pointer dereference in object->file * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) // CVE-2024-56551 - drm/amdgpu: fix usage slab after free * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) // CVE-2024-56776 - drm/sti: avoid potential dereference of error pointers * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) // CVE-2024-56777 - drm/sti: avoid potential dereference of error pointers in sti_gdp_atomic_check * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) // CVE-2024-56778 - drm/sti: avoid potential dereference of error pointers in sti_hqvdp_atomic_check * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) // CVE-2024-56557 - iio: adc: ad7923: Fix buffer overflow for tx_buf and ring_xfer * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) // CVE-2024-56779 - nfsd: fix nfs4_openowner leak when concurrent nfsd4_open occur * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) // CVE-2024-56558 - nfsd: make sure exp active before svc_export_show * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) // CVE-2024-56562 - i3c: master: Fix miss free init_dyn_addr at i3c_master_put_i3c_addrs() * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) // CVE-2024-56566 - mm/slub: Avoid list corruption when removing a slab from the full list * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) // CVE-2024-57838 - s390/entry: Mark IRQ entries to fix stack depot warnings * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) // CVE-2024-56567 - ad7780: fix division by zero in ad7780_write_raw() * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) // CVE-2024-56569 - ftrace: Fix regression with module command in stack_trace_filter * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) // CVE-2024-56570 - ovl: Filter invalid inodes with missing lookup function * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) // CVE-2024-56572 - media: platform: allegro-dvt: Fix possible memory leak in allocate_buffers_internal() * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) // CVE-2024-56573 - efi/libstub: Free correct pointer on failure * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) // CVE-2024-56574 - media: ts2020: fix null-ptr-deref in ts2020_probe() * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) // CVE-2024-56575 - media: imx-jpeg: Ensure power suppliers be suspended before detach them * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) // CVE-2024-56576 - media: i2c: tc358743: Fix crash in the probe error path when using polling * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) // CVE-2024-56577 - media: mtk-jpeg: Fix null-ptr-deref during unload module * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) // CVE-2024-56578 - media: imx-jpeg: Set video drvdata before register video device * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) // CVE-2024-56579 - media: amphion: Set video drvdata before register video device * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) // CVE-2024-56581 - btrfs: ref-verify: fix use-after-free after invalid ref action * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) // CVE-2024-56774 - btrfs: add a sanity check for btrfs root in btrfs_search_slot() * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) // CVE-2024-56780 - quota: flush quota_release_work upon quota writeback * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) // CVE-2024-53168 - sunrpc: fix one UAF issue caused by sunrpc kernel tcp socket * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) // CVE-2024-56688 - sunrpc: clear XPRT_SOCK_UPD_TIMEOUT when reset transport * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) // CVE-2024-56729 - smb: Initialize cfid->tcon before performing network ops * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) // CVE-2024-56704 - 9p/xen: fix release of IRQ * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) // CVE-2024-53171 - ubifs: authentication: Fix use-after-free in ubifs_tnc_end_commit * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) // CVE-2024-53172 - ubi: fastmap: Fix duplicate slab cache names while attaching * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) // CVE-2024-56739 - rtc: check if __rtc_read_time was successful in rtc_timer_do_work() * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) // CVE-2024-53173 - NFSv4.0: Fix a use-after-free problem in the asynchronous open() * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) // CVE-2024-53145 - um: Fix potential integer overflow during physmem setup * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) // CVE-2024-53174 - SUNRPC: make sure cache entry active before cache_show * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) // CVE-2024-53146 - NFSD: Prevent a potential integer overflow * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) // CVE-2024-53175 - ipc: fix memleak if msg_init_ns failed in create_ipc_ns * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) // CVE-2024-56692 - f2fs: fix to do sanity check on node blkaddr in truncate_node() * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) // CVE-2024-56698 - usb: dwc3: gadget: Fix looping of queued SG entries * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) // CVE-2024-56687 - usb: musb: Fix hardware lockup on first Rx endpoint request * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) // CVE-2024-53176 - smb: During unmount, ensure all cached dir instances drop their dentry * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) // CVE-2024-53177 - smb: prevent use-after-free due to open_cached_dir error paths * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) // CVE-2024-53178 - smb: Don't leak cfid when reconnect races with open_cached_dir * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) // CVE-2024-53180 - ALSA: pcm: Add sanity NULL check for the default mmap fault handler * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) // CVE-2024-56700 - media: wl128x: Fix atomicity violation in fmc_send_cmd() * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) // CVE-2022-49034 - sh: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) // CVE-2024-53181 - um: vector: Do not use drvdata in release * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) // CVE-2024-53183 - um: net: Do not use drvdata in release * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) // CVE-2024-53184 - um: ubd: Do not use drvdata in release * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) // CVE-2024-53185 - smb: client: fix NULL ptr deref in crypto_aead_setkey() * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) // CVE-2024-53188 - wifi: ath12k: fix crash when unbinding * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) // CVE-2024-53190 - wifi: rtlwifi: Drastically reduce the attempts to read efuse in case of failures * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) // CVE-2024-53191 - wifi: ath12k: fix warning when unbinding * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) // CVE-2024-56741 - apparmor: test: Fix memory leak for aa_unpack_strdup() * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) // CVE-2024-53148 - comedi: Flush partial mappings in error case * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) // CVE-2024-53194 - PCI: Fix use-after-free of slot->bus on hot remove * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) // CVE-2024-53195 - KVM: arm64: Get rid of userspace_irqchip_in_use * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) // CVE-2024-53197 - ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) // CVE-2024-42122 - drm/amd/display: Add NULL pointer check for kzalloc * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) // CVE-2024-49906 - drm/amd/display: Check null pointer before try to access it * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) // CVE-2024-53150 - ALSA: usb-audio: Fix out of bounds reads when finding clock sources * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) // CVE-2024-53198 - xen: Fix the issue of resource not being properly released in xenbus_dev_probe() * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) // CVE-2024-41014 - xfs: add bounds checking to xlog_recover_process_data * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) // CVE-2024-53200 - drm/amd/display: Fix null check for pipe_ctx->plane_state in hwss_setup_dpp * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) // CVE-2024-53202 - firmware_loader: Fix possible resource leak in fw_log_firmware_info() * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) // CVE-2024-53208 - Bluetooth: MGMT: Fix slab-use-after-free Read in set_powered_sync * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) // CVE-2024-53210 - s390/iucv: MSG_PEEK causes memory leak in iucv_sock_destruct() * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) // CVE-2024-53213 - net: usb: lan78xx: Fix double free issue with interrupt buffer allocation * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) // CVE-2024-53214 - vfio/pci: Properly hide first-in-list PCIe extended capability * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) // CVE-2024-53215 - svcrdma: fix miss destroy percpu_counter in svc_rdma_proc_init() * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) // CVE-2024-53217 - NFSD: Prevent NULL dereference in nfsd4_process_cb_update() * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) // CVE-2024-56689 - PCI: endpoint: epf-mhi: Avoid NULL dereference if DT lacks 'mmio' * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) // CVE-2024-53151 - svcrdma: Address an integer overflow * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) // CVE-2024-53218 - f2fs: fix race in concurrent f2fs_stop_gc_thread * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) // CVE-2024-56744 - f2fs: fix to avoid potential deadlock in f2fs_record_stop_reason() * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) // CVE-2024-53220 - f2fs: fix to account dirty data in __get_secs_required() * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) // CVE-2024-56745 - PCI: Fix reset_method_store() memory leak * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) // CVE-2024-53223 - clk: ralink: mtmips: fix clocks probe order in oldest ralink SoCs * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) // CVE-2024-53154 - clk: clk-apple-nco: Add NULL check in applnco_probe * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) // CVE-2024-53224 - RDMA/mlx5: Move events notifier registration to be after device registration * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) // CVE-2024-56746 - fbdev: sh7760fb: Fix a possible memory leak in sh7760fb_alloc_mem() * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) // CVE-2024-53155 - ocfs2: fix uninitialized value in ocfs2_file_read_iter() * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) // CVE-2024-53226 - RDMA/hns: Fix NULL pointer derefernce in hns_roce_map_mr_sg() * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) // CVE-2024-56747 - scsi: qedi: Fix a possible memory leak in qedi_alloc_and_init_sb() * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) // CVE-2024-56748 - scsi: qedf: Fix a possible memory leak in qedf_alloc_and_init_sb() * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) // CVE-2024-53229 - RDMA/rxe: Fix the qp flush warnings in req * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) // CVE-2024-56722 - RDMA/hns: Fix cpu stuck caused by printings during reset * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) // CVE-2024-53230 - cpufreq: CPPC: Fix possible null-ptr-deref for cppc_get_cpu_cost() * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) // CVE-2024-53231 - cpufreq: CPPC: Fix possible null-ptr-deref for cpufreq_cpu_get_raw() * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) // CVE-2024-56701 - powerpc/pseries: Fix dtl_access_lock to be a rw_semaphore * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) // CVE-2024-56678 - powerpc/mm/fault: Fix kfence page fault reporting * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) // CVE-2024-56677 - powerpc/fadump: Move fadump_cma_init to setup_arch() after initmem_init() * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) // CVE-2024-56723 - mfd: intel_soc_pmic_bxtwc: Use IRQ domain for PMIC devices * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) // CVE-2024-56724 - mfd: intel_soc_pmic_bxtwc: Use IRQ domain for TMU device * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) // CVE-2024-56691 - mfd: intel_soc_pmic_bxtwc: Use IRQ domain for USB Type-C device * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) // CVE-2024-53233 - unicode: Fix utf8_load() error path * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) // CVE-2024-56694 - bpf: fix recursive lock when verdict program return SK_PASS * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) // CVE-2024-53234 - erofs: handle NONHEAD !delta[1] lclusters gracefully * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) // CVE-2024-53239 - ALSA: 6fire: Release resources at card release * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) // CVE-2024-56531 - ALSA: caiaq: Use snd_card_free_when_closed() at disconnection * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) // CVE-2024-56532 - ALSA: us122l: Use snd_card_free_when_closed() at disconnection * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) // CVE-2024-56533 - ALSA: usx2y: Use snd_card_free_when_closed() at disconnection * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) // CVE-2024-56751 - ipv6: release nexthop on device removal * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) // CVE-2024-56720 - bpf, sockmap: Several fixes to bpf_msg_pop_data * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) // CVE-2024-56538 - drm: zynqmp_kms: Unplug DRM device before removal * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) // CVE-2024-56752 - drm/nouveau/gr/gf100: Fix missing unlock in gf100_gr_chan_new() * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) // CVE-2024-56725 - octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_dcbnl.c * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) // CVE-2024-56707 - octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_dmac_flt.c * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) // CVE-2024-56726 - octeontx2-pf: handle otx2_mbox_get_rsp errors in cn10k.c * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) // CVE-2024-56727 - octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_flows.c * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) // CVE-2024-56728 - octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_ethtool.c * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) // CVE-2024-56679 - octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_common.c * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) // CVE-2024-56539 - wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_config_scan() * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) // CVE-2024-56543 - wifi: ath12k: Skip Rx TID cleanup for self peer * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) // CVE-2024-56683 - drm/vc4: hdmi: Avoid hang with debug registers when suspended * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) // CVE-2024-56545 - HID: hyperv: streamline driver probe to avoid devres issues * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) // CVE-2024-56705 - media: atomisp: Add check for rgby_data memory allocation failure * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) // CVE-2024-53157 - firmware: arm_scpi: Check the DVFS OPP count returned by the firmware * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) // CVE-2024-53158 - soc: qcom: geni-se: fix array underflow in geni_se_clk_tbl_get() * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) // CVE-2024-56546 - drivers: soc: xilinx: add the missing kfree in xlnx_add_cb_for_suspend() * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) // CVE-2024-56681 - crypto: bcm - add error check in the ahash_hmac_init function * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) // CVE-2024-53160 - rcu/kvfree: Fix data-race in __mod_timer / kvfree_call_rcu * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) // CVE-2024-56708 - EDAC/igen6: Avoid segmentation fault on module unload * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) // CVE-2024-56690 - crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) // CVE-2024-53161 - EDAC/bluefield: Fix potential integer overflow * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) // CVE-2024-53162 - crypto: qat/qat_4xxx - fix off by one in uof_get_name() * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) // CVE-2024-56754 - crypto: caam - Fix the pointer passed to caam_qi_shutdown() * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) // CVE-2024-56548 - hfsplus: don't query the device logical block size multiple times * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) // CVE-2024-56756 - nvme-pci: fix freeing of the HMB descriptor table * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) // CVE-2024-53142 - initramfs: avoid filename buffer overrun * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) // CVE-2024-56693 - brd: defer automatic disk creation until module initialization succeeds * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) // CVE-2024-44955 - drm/amd/display: Don't refer to dc_sink in is_dsc_need_re_compute * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) // CVE-2024-49899 - drm/amd/display: Initialize denominators' default to 1 * Noble update: upstream stable patchset 2025-03-06 (LP: #2101042) - sctp: fix possible UAF in sctp_v6_available() - net: vertexcom: mse102x: Fix tx_bytes calculation - drm/rockchip: vop: Fix a dereferenced before check warning - mptcp: error out earlier on disconnect - mptcp: cope racing subflow creation in mptcp_rcv_space_adjust - net/mlx5: fs, lock FTE when checking if active - net/mlx5e: kTLS, Fix incorrect page refcounting - net/mlx5e: clear xdp features on non-uplink representors - net/mlx5e: CT: Fix null-ptr-deref in add rule err flow - virtio/vsock: Fix accept_queue memory leak - Bluetooth: btintel: Direct exception event to bluetooth stack - net: sched: cls_u32: Fix u32's systematic failure to free IDR entries for hnodes. - samples: pktgen: correct dev to DEV - net: stmmac: dwmac-mediatek: Fix inverted handling of mediatek,mac-wol - net: Make copy_safe_from_sockptr() match documentation - stmmac: dwmac-intel-plat: fix call balance of tx_clk handling routines - net: ti: icssg-prueth: Fix 1 PPS sync - bonding: add ns target multicast address to slave device - ARM: 9419/1: mm: Fix kernel memory mapping for xip kernels - x86/mm: Fix a kdump kernel failure on SME system when CONFIG_IMA_KEXEC=y - mm: fix NULL pointer dereference in alloc_pages_bulk_noprof - ocfs2: uncache inode which has failed entering the group - vdpa: solidrun: Fix UB bug with devres - vdpa/mlx5: Fix PA offset with unaligned starting iotlb map - vp_vdpa: fix id_table array not null terminated error - ima: fix buffer overrun in ima_eventdigest_init_common - KVM: nVMX: Treat vpid01 as current if L2 is active, but with VPID disabled - KVM: x86: Unconditionally set irr_pending when updating APICv state - KVM: VMX: Bury Intel PT virtualization (guest/host mode) behind CONFIG_BROKEN - nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint - nommu: pass NULL argument to vma_iter_prealloc() - ALSA: hda/realtek - Fixed Clevo platform headset Mic issue - ocfs2: fix UBSAN warning in ocfs2_verify_volume() - nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint - LoongArch: Fix early_numa_add_cpu() usage for FDT systems - LoongArch: Disable KASAN if PGDIR_SIZE is too large for cpu_vabits - LoongArch: Make KASAN work with 5-level page-tables - Revert "mmc: dw_mmc: Fix IDMAC operation with pages bigger than 4K" - mmc: sunxi-mmc: Fix A100 compatible description - drm/bridge: tc358768: Fix DSI command tx - pmdomain: imx93-blk-ctrl: correct remove path - nouveau: fw: sync dma after setup is called. - drm/amd: Fix initialization mistake for NBIO 7.7.0 - drm/amd/display: Adjust VSDB parser for replay feature - lib/buildid: Fix build ID parsing logic - media: dvbdev: fix the logic when DVB_DYNAMIC_MINORS is not set - mptcp: add userspace_pm_lookup_addr_by_id helper - mptcp: update local address flags when setting it - mptcp: hold pm lock when deleting entry - mptcp: drop lookup_by_id in lookup_addr - mptcp: pm: use _rcu variant under rcu_read_lock - mm: avoid unsafe VMA hook invocation when error arises on mmap hook - mm: unconditionally close VMAs on error - mm: refactor map_deny_write_exec() - mm: refactor arch_calc_vm_flag_bits() and arm64 MTE handling - mm: resolve faulty mmap_region() error path behaviour - net/mlx5: Fix msix vectors to respect platform limit - vsock: Fix sk_error_queue memory leak - virtio/vsock: Improve MSG_ZEROCOPY error handling - net: phylink: ensure PHY momentary link-fails are handled - drm/vmwgfx: avoid null_ptr_deref in vmw_framebuffer_surface_create_handle - ARM: fix cacheflush with PAN - drm/amd/display: Run idle optimizations at end of vblank handler - drm/amd/display: Change some variable name of psr - x86/CPU/AMD: Clear virtualized VMLOAD/VMSAVE on Zen4 client - x86/stackprotector: Work around strict Clang TLS symbol requirements - sched/task_stack: fix object_is_on_stack() for KASAN tagged pointers - fs/proc/task_mmu: prevent integer overflow in pagemap_scan_get_args() - mm/mremap: fix address wraparound in move_page_tables() - KVM: selftests: Disable strict aliasing - mm: page_alloc: move mlocked flag clearance into free_pages_prepare() - LoongArch: Add WriteCombine shadow mapping in KASAN - drm/xe: handle flat ccs during hibernation on igpu - pmdomain: arm: Use FLAG_DEV_NAME_FW to ensure unique names - pmdomain: core: Add GENPD_FLAG_DEV_NAME_FW flag - nouveau: handle EBUSY and EAGAIN for GSP aux errors. - nouveau/dp: handle retries for AUX CH transfers with GSP. - drm/amdgpu: fix check in gmc_v9_0_get_vm_pte() - drm/amdgpu: Fix video caps for H264 and HEVC encode maximum size - drm/amd/pm: print pp_dpm_mclk in ascending order on SMU v14.0.0 - drm/amd/display: Handle dml allocation failure to avoid crash - drm/amd/display: Fix failure to read vram info due to static BP_RESULT - drm/xe: Restore system memory GGTT mappings - drm/xe: improve hibernation on igpu - net: sched: u32: Add test case for systematic hnode IDR leaks - Upstream stable to v6.6.63, v6.11.10 * Noble update: upstream stable patchset 2025-03-04 (LP: #2100894) - 9p: v9fs_fid_find: also lookup by inode if not found dentry - 9p: Avoid creating multiple slab caches with the same name - selftests/bpf: Verify that sync_linked_regs preserves subreg_def - irqchip/ocelot: Fix trigger register address - nvme: tcp: avoid race between queue_lock lock and destroy - block: Fix elevator_get_default() checking for NULL q->tag_set - HID: multitouch: Add support for B2402FVA track point - HID: multitouch: Add quirk for HONOR MagicBook Art 14 touchpad - iommu/arm-smmu: Clarify MMU-500 CPRE workaround - nvme: disable CC.CRIME (NVME_CC_CRIME) - bpf: use kvzmalloc to allocate BPF verifier environment - crypto: api - Fix liveliness check in crypto_alg_tested - crypto: marvell/cesa - Disable hash algorithms - sound: Make CONFIG_SND depend on INDIRECT_IOMEM instead of UML - drm/vmwgfx: Limit display layout ioctl array size to VMWGFX_NUM_DISPLAY_UNITS - RDMA/siw: Add sendpage_ok() check to disable MSG_SPLICE_PAGES - nvme-multipath: defer partition scanning - drm/amdkfd: Accounting pdd vram_usage for svm - powerpc/powernv: Free name on error in opal_event_init() - net: phy: mdio-bcm-unimac: Add BCM6846 support - nvme-loop: flush off pending I/O while shutting down loop controller - smb: client: Fix use-after-free of network namespace. - nvme/host: Fix RCU list traversal to use SRCU primitive - vDPA/ifcvf: Fix pci_read_config_byte() return code handling - bpf: Add sk_is_inet and IS_ICSK check in tls_sw_has_ctx_tx/rx - bpf: Fix mismatched RCU unlock flavour in bpf_out_neigh_v6 - ASoC: amd: yc: Add quirk for ASUS Vivobook S15 M3502RA - ASoC: amd: yc: Fix non-functional mic on ASUS E1404FA - fs: Fix uninitialized value issue in from_kuid and from_kgid - HID: multitouch: Add quirk for Logitech Bolt receiver w/ Casa touchpad - HID: lenovo: Add support for Thinkpad X1 Tablet Gen 3 keyboard - RISCV: KVM: use raw_spinlock for critical section in imsic - ASoC: rt722-sdca: increase clk_stop_timeout to fix clock stop issue - LoongArch: Use "Exception return address" to comment ERA - ASoC: fsl_micfil: Add sample rate constraint - net: usb: qmi_wwan: add Fibocom FG132 0x0112 composition - bpf: Check validity of link->type in bpf_link_show_fdinfo() - mm: support order-1 folios in the page cache - mm: always initialise folio->_deferred_list - mm: refactor folio_undo_large_rmappable() - mm/thp: fix deferred split unqueue naming and locking - 9p: fix slab cache name creation for real - nvmet-passthru: clear EUID/NGUID/UUID while using loop target - pinctrl: intel: platform: Add Panther Lake to the list of supported - s390/ap: Fix CCA crypto card behavior within protected execution environment - selftests/bpf: Assert link info uprobe_multi count & path_size if unset - ALSA: hda/tas2781: Add new quirk for Lenovo, ASUS, Dell projects - drm/xe/query: Increase timestamp width - nvme: make keep-alive synchronous operation - samples/landlock: Fix port parsing in sandboxer - ASoC: Intel: avs: Update stream status in a separate thread - ASoC: codecs: Fix error handling in aw_dev_get_dsp_status function - netfs: Downgrade i_rwsem for a buffered write - afs: Fix lock recursion - HID: i2c-hid: Delayed i2c resume wakeup for 0x0d42 Goodix touchpad - LoongArch: KVM: Mark hrtimer to expire in hard interrupt context - drm/xe: Don't restart parallel queues multiple times on GT reset - Upstream stable to v6.6.62, v6.11.9 * Noble update: upstream stable patchset 2025-02-27 (LP: #2100292) - arm64: dts: rockchip: Fix rt5651 compatible value on rk3399-eaidk-610 - arm64: dts: rockchip: Fix rt5651 compatible value on rk3399-sapphire- excavator - arm64: dts: rockchip: Remove hdmi's 2nd interrupt on rk3328 - arm64: dts: rockchip: Fix wakeup prop names on PineNote BT node - arm64: dts: rockchip: Fix reset-gpios property on brcm BT nodes - arm64: dts: rockchip: fix i2c2 pinctrl-names property on anbernic-rg353p/v - arm64: dts: rockchip: Fix bluetooth properties on rk3566 box demo - arm64: dts: rockchip: Fix bluetooth properties on Rock960 boards - arm64: dts: rockchip: Add DTS for FriendlyARM NanoPi R2S Plus - arm64: dts: rockchip: Remove undocumented supports-emmc property - arm64: dts: rockchip: Remove #cooling-cells from fan on Theobroma lion - arm64: dts: rockchip: Fix LED triggers on rk3308-roc-cc - arm64: dts: rockchip: remove num-slots property from rk3328-nanopi-r2s-plus - arm64: dts: imx8-ss-vpu: Fix imx8qm VPU IRQs - arm64: dts: imx8mp: correct sdhc ipg clk - arm64: dts: rockchip: remove orphaned pinctrl-names from pinephone pro - ARM: dts: rockchip: fix rk3036 acodec node - ARM: dts: rockchip: drop grf reference from rk3036 hdmi - ARM: dts: rockchip: Fix the spi controller on rk3036 - ARM: dts: rockchip: Fix the realtek audio codec on rk3036-kylin - arm64: dts: rockchip: Correct GPIO polarity on brcm BT nodes - sunrpc: handle -ENOTCONN in xs_tcp_setup_socket() - NFSv3: only use NFS timeout for MOUNT when protocols are compatible - nfs: avoid i_lock contention in nfs_clear_invalid_mapping - net: enetc: set MAC address to the VF net_device - dt-bindings: net: xlnx,axi-ethernet: Correct phy-mode property value - can: c_can: fix {rx,tx}_errors statistics - can: c_can: c_can_handle_bus_err(): update statistics if skb allocation fails - ice: change q_index variable type to s16 to store -1 value - e1000e: Remove Meteor Lake SMBUS workarounds - net: phy: ti: add PHY_RST_AFTER_CLK_EN flag - net: stmmac: Fix unbalanced IRQ wake disable warning on single irq case - netfilter: nf_tables: pass nft_chain to destroy function, not nft_ctx - netfilter: nf_tables: wait for rcu grace period on net_device removal - netfilter: nf_tables: do not defer rule destruction via call_rcu - net: arc: rockchip: fix emac mdio node support - drivers: net: ionic: add missed debugfs cleanup to ionic_probe() error path - Revert "ALSA: hda/conexant: Mute speakers at suspend / shutdown" - media: stb0899_algo: initialize cfr before using it - media: dvb_frontend: don't play tricks with underflow values - media: adv7604: prevent underflow condition when reporting colorspace - scsi: sd_zbc: Use kvzalloc() to allocate REPORT ZONES buffer - ALSA: firewire-lib: fix return value on fail in amdtp_tscm_init() - tools/lib/thermal: Fix sampling handler context ptr - thermal/of: support thermal zones w/o trips subnode - ASoC: SOF: sof-client-probes-ipc4: Set param_size extension bits - media: pulse8-cec: fix data timestamp at pulse8_setup() - media: v4l2-ctrls-api: fix error handling for v4l2_g_ctrl() - can: m_can: m_can_close(): don't call free_irq() for IRQ-less devices - can: mcp251xfd: mcp251xfd_get_tef_len(): fix length calculation - can: mcp251xfd: mcp251xfd_ring_alloc(): fix coalescing configuration when switching CAN modes - ksmbd: count all requests in req_running counter - ksmbd: fix broken transfers when exceeding max simultaneous operations - pwm: imx-tpm: Use correct MODULO value for EPWM mode - rpmsg: glink: Handle rejected intent request better - drm/amdgpu: Adjust debugfs eviction and IB access permissions - drm/amdgpu: Adjust debugfs register access permissions - drm/amdgpu: Fix DPX valid mode check on GC 9.4.3 - thermal/drivers/qcom/lmh: Remove false lockdep backtrace - dm cache: correct the number of origin blocks to match the target length - dm cache: optimize dirty bit checking with find_next_bit when resizing - dm-unstriped: cast an operand to sector_t to prevent potential uint32_t overflow - ALSA: usb-audio: Add quirk for HP 320 FHD Webcam - net: wwan: t7xx: Fix off-by-one error in t7xx_dpmaif_rx_buf_alloc() - mptcp: use sock_kfree_s instead of kfree - arm64: Kconfig: Make SME depend on BROKEN for now - [Config] updateconfigs for ARM64_SME - arm64: smccc: Remove broken support for SMCCCv1.3 SVE discard hint - Revert "wifi: mac80211: fix RCU list iterations" - i2c: designware: do not hold SCL low when I2C_DYNAMIC_TAR_UPDATE is not set - fs/proc: fix compile warning about variable 'vmcore_mmap_ops' - usb: dwc3: fix fault at system suspend if device was already runtime suspended - USB: serial: qcserial: add support for Sierra Wireless EM86xx - USB: serial: option: add Fibocom FG132 0x0112 composition - USB: serial: option: add Quectel RG650V - irqchip/gic-v3: Force propagation of the active state with a read-back - ucounts: fix counter leak in inc_rlimit_get_ucounts() - ASoC: amd: yc: fix internal mic on Xiaomi Book Pro 14 2022 - arm64: dts: rockchip: Designate Turing RK1's system power controller - EDAC/qcom: Make irq configuration optional - arm64: dts: rockchip: Drop regulator-init-microvolt from two boards - net: dpaa_eth: print FD status in CPU endianness in dpaa_eth_fd tracepoint - virtio_net: Sync rss config to device when virtnet_probe - drm/xe: Set mask bits for CCS_MODE register - drm/amd/display: Fix brightness level not retained over reboot - drm/imagination: Add a per-file PVR context list - mptcp: no admin perm to list endpoints - btrfs: fix the length of reserved qgroup to free - btrfs: fix per-subvolume RO/RW flags with new mount API - clk: qcom: gcc-x1e80100: Fix USB MP SS1 PHY GDSC pwrsts flags - clk: qcom: clk-alpha-pll: Fix pll post div mask when width is not set - objpool: fix to make percpu slot allocation more robust - mm/damon/core: handle zero {aggregation,ops_update} intervals - mm/damon/core: handle zero schemes apply interval - mm/mlock: set the correct prev on failure - clk: qcom: gcc-x1e80100: Fix halt_check for pipediv2 clocks - staging: vchiq_arm: Get the rid off struct vchiq_2835_state - staging: vchiq_arm: Use devm_kzalloc() for vchiq_arm_state allocation - drm/xe/guc/ct: Flush g2h worker in case of g2h response timeout - drm/xe: Move LNL scheduling WA to xe_device.h - drm/xe/ufence: Flush xe ordered_wq in case of ufence timeout - drm/xe/guc/tlb: Flush g2h worker in case of tlb timeout - xtensa: Emulate one-byte cmpxchg - Upstream stable to v6.6.61, v6.11.8 * Noble update: upstream stable patchset 2025-02-27 (LP: #2100292) // CVE-2024-50270 - mm/damon/core: avoid overflow in damon_feed_loop_next_input() * Noble update: upstream stable patchset 2025-02-27 (LP: #2100292) // CVE-2024-50274 - idpf: avoid vport access in idpf_get_link_ksettings * Noble update: upstream stable patchset 2025-02-27 (LP: #2100292) // CVE-2024-53067 - scsi: ufs: core: Start the RTC update work later * Noble update: upstream stable patchset 2025-02-27 (LP: #2100292) // CVE-2024-53084 - drm/imagination: Break an object reference loop * Noble update: upstream stable patchset 2025-02-27 (LP: #2100292) // CVE-2024-53085 - tpm: Lock TPM chip in tpm_pm_suspend() first * Noble update: upstream stable patchset 2025-02-27 (LP: #2100292) // CVE-2024-53086 - drm/xe: Drop VM dma-resv lock on xe_sync_in_fence_get failure in exec IOCTL * Noble update: upstream stable patchset 2025-02-27 (LP: #2100292) // CVE-2024-53087 - drm/xe: Fix possible exec queue leak in exec IOCTL * Noble update: upstream stable patchset 2025-02-27 (LP: #2100292) // CVE-2024-50288 - media: vivid: fix buffer overwrite when using > 32 buffers * Noble update: upstream stable patchset 2025-02-27 (LP: #2100292) // CVE-2024-50289 - media: av7110: fix a spectre vulnerability * Noble update: upstream stable patchset 2025-02-27 (LP: #2100292) // CVE-2024-53062 - media: mgb4: protect driver against spectre * Noble update: upstream stable patchset 2025-02-27 (LP: #2100292) // CVE-2024-50291 - media: dvb-core: add missing buffer index check * Noble update: upstream stable patchset 2025-02-27 (LP: #2100292) // CVE-2024-50297 - net: xilinx: axienet: Enqueue Tx packets in dql before dmaengine starts * Noble update: upstream stable patchset 2025-02-27 (LP: #2100292) // CVE-2024-50267 - USB: serial: io_edgeport: fix use after free in debug printk * Noble update: upstream stable patchset 2025-02-27 (LP: #2100292) // CVE-2024-50268 - usb: typec: fix potential out of bounds in ucsi_ccg_update_set_new_cam_cmd() * Noble update: upstream stable patchset 2025-02-27 (LP: #2100292) // CVE-2024-53083 - usb: typec: qcom-pmic: init value of hdr_len/txbuf_len earlier * Noble update: upstream stable patchset 2025-02-27 (LP: #2100292) // CVE-2024-50269 - usb: musb: sunxi: Fix accessing an released usb phy * Noble update: upstream stable patchset 2025-02-27 (LP: #2100292) // CVE-2024-50271 - signal: restore the override_rlimit logic * Noble update: upstream stable patchset 2025-02-27 (LP: #2100292) // CVE-2024-50272 - filemap: Fix bounds checking in filemap_read() * Noble update: upstream stable patchset 2025-02-27 (LP: #2100292) // CVE-2024-50273 - btrfs: reinitialize delayed ref list after deleting it from the list * Noble update: upstream stable patchset 2025-02-27 (LP: #2100292) // CVE-2024-50275 - arm64/sve: Discard stale CPU state when handling SVE traps * Noble update: upstream stable patchset 2025-02-27 (LP: #2100292) // CVE-2024-50276 - net: vertexcom: mse102x: Fix possible double free of TX skb * Noble update: upstream stable patchset 2025-02-27 (LP: #2100292) // CVE-2024-53066 - nfs: Fix KMSAN warning in decode_getfattr_attrs() * Noble update: upstream stable patchset 2025-02-27 (LP: #2100292) // CVE-2024-50278 - dm cache: fix potential out-of-bounds access on the first resume * Noble update: upstream stable patchset 2025-02-27 (LP: #2100292) // CVE-2024-50279 - dm cache: fix out-of-bounds access to the dirty bitset when resizing * Noble update: upstream stable patchset 2025-02-27 (LP: #2100292) // CVE-2024-50280 - dm cache: fix flushing uninitialized delayed_work on cache_ctr error * Noble update: upstream stable patchset 2025-02-27 (LP: #2100292) // CVE-2024-53060 - drm/amdgpu: prevent NULL pointer dereference if ATIF is not supported * Noble update: upstream stable patchset 2025-02-27 (LP: #2100292) // CVE-2024-50282 - drm/amdgpu: add missing size check in amdgpu_debugfs_gprwave_read() * Noble update: upstream stable patchset 2025-02-27 (LP: #2100292) // CVE-2024-50283 - ksmbd: fix slab-use-after-free in smb3_preauth_hash_rsp * Noble update: upstream stable patchset 2025-02-27 (LP: #2100292) // CVE-2024-50284 - ksmbd: Fix the missing xa_store error check * Noble update: upstream stable patchset 2025-02-27 (LP: #2100292) // CVE-2024-50285 - ksmbd: check outstanding simultaneous SMB operations * Noble update: upstream stable patchset 2025-02-27 (LP: #2100292) // CVE-2024-50286 - ksmbd: fix slab-use-after-free in ksmbd_smb2_session_create * Noble update: upstream stable patchset 2025-02-27 (LP: #2100292) // CVE-2024-50287 - media: v4l2-tpg: prevent the risk of a division by zero * Noble update: upstream stable patchset 2025-02-27 (LP: #2100292) // CVE-2024-50290 - media: cx24116: prevent overflows on SNR calculus * Noble update: upstream stable patchset 2025-02-27 (LP: #2100292) // CVE-2024-53061 - media: s5p-jpeg: prevent buffer overflows * Noble update: upstream stable patchset 2025-02-27 (LP: #2100292) // CVE-2024-53081 - media: ar0521: don't overflow when checking PLL values * Noble update: upstream stable patchset 2025-02-27 (LP: #2100292) // CVE-2024-50292 - ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove * Noble update: upstream stable patchset 2025-02-27 (LP: #2100292) // CVE-2024-50294 - rxrpc: Fix missing locking causing hanging calls * Noble update: upstream stable patchset 2025-02-27 (LP: #2100292) // CVE-2024-50295 - net: arc: fix the device for dma_map_single/dma_unmap_single * Noble update: upstream stable patchset 2025-02-27 (LP: #2100292) // CVE-2024-53082 - virtio_net: Add hash_key_length check * Noble update: upstream stable patchset 2025-02-27 (LP: #2100292) // CVE-2024-50296 - net: hns3: fix kernel crash when uninstalling driver * Noble update: upstream stable patchset 2025-02-27 (LP: #2100292) // CVE-2024-53088 - i40e: fix race condition by adding filter's intermediate sync state * Noble update: upstream stable patchset 2025-02-27 (LP: #2100292) // CVE-2024-50298 - net: enetc: allocate vf_state during PF probes * Noble update: upstream stable patchset 2025-02-27 (LP: #2100292) // CVE-2024-50299 - sctp: properly validate chunk size in sctp_sf_ootb() * Noble update: upstream stable patchset 2025-02-27 (LP: #2100292) // CVE-2024-50300 - regulator: rtq2208: Fix uninitialized use of regulator_config * Noble update: upstream stable patchset 2025-02-27 (LP: #2100292) // CVE-2024-50301 - security/keys: fix slab-out-of-bounds in key_task_permission * Noble update: upstream stable patchset 2025-02-27 (LP: #2100292) // CVE-2024-53072 - platform/x86/amd/pmc: Detect when STB is not available * Noble update: upstream stable patchset 2025-02-27 (LP: #2100292) // CVE-2024-53068 - firmware: arm_scmi: Fix slab-use-after-free in scmi_bus_notifier() * Noble update: upstream stable patchset 2025-02-25 (LP: #2099996) - Input: xpad - sort xpad_device by vendor and product ID - Input: xpad - add support for 8BitDo Ultimate 2C Wireless Controller - cgroup: Fix potential overflow issue when checking max_depth - spi: geni-qcom: Fix boot warning related to pm_runtime and devres - wifi: iwlegacy: Fix "field-spanning write" warning in il_enqueue_hcmd() - mac80211: MAC80211_MESSAGE_TRACING should depend on TRACING - wifi: mac80211: skip non-uploaded keys in ieee80211_iter_keys - wifi: ath11k: Fix invalid ring usage in full monitor mode - wifi: brcm80211: BRCM_TRACING should depend on TRACING - RDMA/cxgb4: Dump vendor specific QP details - RDMA/mlx5: Round max_rd_atomic/max_dest_rd_atomic up instead of down - RDMA/bnxt_re: Fix the usage of control path spin locks - RDMA/bnxt_re: synchronize the qp-handle table array - RDMA/bnxt_re: Fix the locking while accessing the QP table - wifi: iwlwifi: mvm: disconnect station vifs if recovery failed - wifi: iwlwifi: mvm: don't add default link in fw restart flow - ASoC: cs42l51: Fix some error handling paths in cs42l51_probe() - net: stmmac: dwmac4: Fix high address display by updating reg_space[] from register values - net: stmmac: fix TSO DMA API usage causing oops - gtp: allow -1 to be specified as file description from userspace - bpf: Force checkpoint when jmp history is too long - net: skip offload for NETIF_F_IPV6_CSUM if ipv6 header contains extension - net: reenable NETIF_F_IPV6_CSUM offload for BIG TCP packets - mlxsw: spectrum_ptp: Add missing verification before pushing Tx header - bpf, test_run: Fix LIVE_FRAME frame update after a page has been recycled - iomap: improve shared block detection in iomap_unshare_iter - iomap: don't bother unsharing delalloc extents - iomap: share iomap_unshare_iter predicate code with fsdax - fsdax: remove zeroing code from dax_unshare_iter - iomap: turn iomap_want_unshare_iter into an inline function - kasan: Fix Software Tag-Based KASAN with GCC - firmware: arm_sdei: Fix the input parameter of cpuhp_remove_state() - afs: Fix missing subdir edit when renamed between parent dirs - smb: client: set correct device number on nfs reparse points - cxl/events: Fix Trace DRAM Event Record - fs/ntfs3: Fix warning possible deadlock in ntfs_set_state - fs/ntfs3: Stale inode instead of bad - scsi: scsi_transport_fc: Allow setting rport state to current state - cifs: Fix creating native symlinks pointing to current or parent directory - thermal: intel: int340x: processor: Remove MMIO RAPL CPU hotplug support - thermal: intel: int340x: processor: Add MMIO RAPL PL4 support - net: amd: mvme147: Fix probe banner message - NFS: remove revoked delegation from server's delegation list - misc: sgi-gru: Don't disable preemption in GRU driver - usb: gadget: dummy_hcd: Switch to hrtimer transfer scheduler - usb: gadget: dummy_hcd: Set transfer interval to 1 microframe - usb: gadget: dummy_hcd: execute hrtimer callback in softirq context - USB: gadget: dummy-hcd: Fix "task hung" problem - ALSA: usb-audio: Add quirks for Dell WD19 dock - usbip: tools: Fix detach_port() invalid port error path - usb: phy: Fix API devm_usb_put_phy() can not release the phy - usb: typec: fix unreleased fwnode_handle in typec_port_register_altmodes() - usb: typec: qcom-pmic-typec: use fwnode_handle_put() to release fwnodes - xhci: Fix Link TRB DMA in command ring stopped completion event - xhci: Use pm_runtime_get to prevent RPM on unsupported systems - Revert "driver core: Fix uevent_show() vs driver detach race" - iio: light: veml6030: fix microlux value calculation - RISC-V: ACPI: fix early_ioremap to early_memremap - tools/mm: -Werror fixes in page-types/slabinfo - tools/mm: fix compile error - thunderbolt: Honor TMU requirements in the domain when setting TMU mode - mmc: sdhci-pci-gli: GL9767: Fix low power mode on the set clock function - mmc: sdhci-pci-gli: GL9767: Fix low power mode in the SD Express process - block: fix sanity checks in blk_rq_map_user_bvec - cgroup/bpf: use a dedicated workqueue for cgroup bpf destruction - phy: freescale: imx8m-pcie: Do CMN_RST just before PHY PLL lock check - riscv: vdso: Prevent the compiler from inserting calls to memset() - Input: edt-ft5x06 - fix regmap leak when probe fails - ALSA: hda/realtek: Limit internal Mic boost on Dell platform - riscv: efi: Set NX compat flag in PE/COFF header - riscv: Use '%u' to format the output of 'cpu' - riscv: Remove unused GENERATING_ASM_OFFSETS - riscv: Remove duplicated GET_RM - cxl/port: Fix cxl_bus_rescan() vs bus_rescan_devices() - cxl/acpi: Ensure ports ready at cxl_acpi_probe() return - mei: use kvmalloc for read buffer - mm/page_alloc: let GFP_ATOMIC order-0 allocs access highatomic reserves - x86/traps: Enable UBSAN traps on x86 - x86/traps: move kmsan check after instrumentation_begin - kasan: remove vmalloc_percpu test - vmscan,migrate: fix page count imbalance on node stats when demoting pages - io_uring: always lock __io_cqring_overflow_flush - mm: huge_memory: add vma_thp_disabled() and thp_disabled_by_hw() - mm: don't install PMD mappings when THPs are disabled by the hw/process/vma - perf trace: Fix non-listed archs in the syscalltbl routines - dpll: add Embedded SYNC feature for a pin - ice: add callbacks for Embedded SYNC enablement on dpll pins - bpf: Add bpf_mem_alloc_check_size() helper - net: ethernet: mtk_wed: fix path of MT7988 WO firmware - drm/mediatek: ovl: Remove the color format comment for ovl_fmt_convert() - drm/mediatek: Fix get efuse issue for MT8188 DPTX - ACPI: resource: Fold Asus Vivobook Pro N6506M* DMI quirks together - powercap: intel_rapl_msr: Add PL4 support for Arrowlake-U - usb: typec: qcom-pmic-typec: fix missing fwnode removal in error path - mm: shrinker: avoid memleak in alloc_shrinker_info - firmware: microchip: auto-update: fix poll_complete() to not report spurious timeout errors - soc: qcom: pmic_glink: Handle GLINK intent allocation rejections - cxl/port: Fix CXL port initialization order when the subsystem is built-in - btrfs: merge btrfs_orig_bbio_end_io() into btrfs_bio_end_io() - posix-cpu-timers: Clear TICK_DEP_BIT_POSIX_TIMER on clone - mm/ksm: remove redundant code in ksm_fork - nvme: re-fix error-handling for io_uring nvme-passthrough - btrfs: fix extent map merging not happening for adjacent extents - btrfs: fix defrag not merging contiguous extents due to merged extent maps - mm, mmap: limit THP alignment of anonymous mappings to PMD-aligned sizes - mm: multi-gen LRU: ignore non-leaf pmd_young for force_scan=true - mm: multi-gen LRU: remove MM_LEAF_OLD and MM_NONLEAF_TOTAL stats - mm: shrink skip folio mapped by an exiting process - mm: multi-gen LRU: use {ptep,pmdp}_clear_young_notify() - drm/i915: Skip programming FIA link enable bits for MTL+ - drm/i915/display: WA for Re-initialize dispcnlunitt1 xosc clock - drm/i915/dp: Clear VSC SDP during post ddi disable routine - drm/i915/pps: Disable DPLS_GATING around pps sequence - drm/i915: move rawclk from runtime to display runtime info - drm/xe/display: drop unused rawclk_freq and RUNTIME_INFO() - drm/xe: Support 'nomodeset' kernel command-line option - drm/xe/xe2hpg: Introduce performance tuning changes for Xe2_HPG - drm/amdgpu/swsmu: fix ordering for setting workload_mask - drm/amdgpu/swsmu: default to fullscreen 3D profile for dGPUs - drm/amdgpu: handle default profile on on devices without fullscreen 3D - MIPS: export __cmpxchg_small() - rcu/kvfree: Add kvfree_rcu_barrier() API - rcu/kvfree: Refactor kvfree_rcu_queue_batch() - Upstream stable to v6.6.60, v6.11.7 * Noble update: upstream stable patchset 2025-02-25 (LP: #2099996) // CVE-2024-53050 - drm/i915/hdcp: Add encoder check in hdcp2_get_capability * Noble update: upstream stable patchset 2025-02-25 (LP: #2099996) // CVE-2024-53051 - drm/i915/hdcp: Add encoder check in intel_hdcp_get_capability * Noble update: upstream stable patchset 2025-02-25 (LP: #2099996) // CVE-2024-50303 - resource,kexec: walk_system_ram_res_rev must retain resource flags * Noble update: upstream stable patchset 2025-02-25 (LP: #2099996) // CVE-2024-50263 - fork: only invoke khugepaged, ksm hooks if no error * Noble update: upstream stable patchset 2025-02-25 (LP: #2099996) // CVE-2024-50220 - fork: do not invoke uffd on fork if error occurs * Noble update: upstream stable patchset 2025-02-25 (LP: #2099996) // CVE-2024-50221 - drm/amd/pm: Vangogh: Fix kernel memory out of bounds write * Noble update: upstream stable patchset 2025-02-25 (LP: #2099996) // CVE-2024-53053 - scsi: ufs: core: Fix another deadlock during RTC update * Noble update: upstream stable patchset 2025-02-25 (LP: #2099996) // CVE-2024-50225 - btrfs: fix error propagation of split bios * Noble update: upstream stable patchset 2025-02-25 (LP: #2099996) // CVE-2024-50230 - nilfs2: fix kernel bug due to missing clearing of checked flag * Noble update: upstream stable patchset 2025-02-25 (LP: #2099996) // CVE-2024-50238 - phy: qcom: qmp-usbc: fix NULL-deref on runtime suspend * Noble update: upstream stable patchset 2025-02-25 (LP: #2099996) // CVE-2024-53044 - net/sched: sch_api: fix xa_insert() error path in tcf_block_get_ext() * Noble update: upstream stable patchset 2025-02-25 (LP: #2099996) // CVE-2024-50304 - ipv4: ip_tunnel: Fix suspicious RCU usage warning in ip_tunnel_find() * Noble update: upstream stable patchset 2025-02-25 (LP: #2099996) // CVE-2024-53048 - ice: fix crash on probe for DPLL enabled E810 LOM * Noble update: upstream stable patchset 2025-02-25 (LP: #2099996) // CVE-2024-53045 - ASoC: dapm: fix bounds checker error in dapm_widget_list_create * Noble update: upstream stable patchset 2025-02-25 (LP: #2099996) // CVE-2024-53055 - wifi: iwlwifi: mvm: fix 6 GHz scan construction * Noble update: upstream stable patchset 2025-02-25 (LP: #2099996) // CVE-2024-53046 - arm64: dts: imx8ulp: correct the flexspi compatible string * Noble update: upstream stable patchset 2025-02-25 (LP: #2099996) // CVE-2024-53052 - io_uring/rw: fix missing NOWAIT check for O_DIRECT start write * Noble update: upstream stable patchset 2025-02-25 (LP: #2099996) // CVE-2024-50215 - nvmet-auth: assign dh_key to NULL after kfree_sensitive * Noble update: upstream stable patchset 2025-02-25 (LP: #2099996) // CVE-2024-50216 - xfs: fix finding a last resort AG in xfs_filestream_pick_ag * Noble update: upstream stable patchset 2025-02-25 (LP: #2099996) // CVE-2024-53043 - mctp i2c: handle NULL header address * Noble update: upstream stable patchset 2025-02-25 (LP: #2099996) // CVE-2024-50218 - ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow * Noble update: upstream stable patchset 2025-02-25 (LP: #2099996) // CVE-2024-53047 - mptcp: init: protect sched with rcu_read_lock * Noble update: upstream stable patchset 2025-02-25 (LP: #2099996) // CVE-2024-50222 - iov_iter: fix copy_page_from_iter_atomic() if KMAP_LOCAL_FORCE_MAP * Noble update: upstream stable patchset 2025-02-25 (LP: #2099996) // CVE-2024-50223 - sched/numa: Fix the potential null pointer dereference in task_numa_work() * Noble update: upstream stable patchset 2025-02-25 (LP: #2099996) // CVE-2024-50224 - spi: spi-fsl-dspi: Fix crash when not using GPIO chip select * Noble update: upstream stable patchset 2025-02-25 (LP: #2099996) // CVE-2024-50226 - cxl/port: Fix use-after-free, permit out-of-order decoder shutdown * Noble update: upstream stable patchset 2025-02-25 (LP: #2099996) // CVE-2024-50231 - iio: gts-helper: Fix memory leaks in iio_gts_build_avail_scale_table() * Noble update: upstream stable patchset 2025-02-25 (LP: #2099996) // CVE-2024-53076 - iio: gts-helper: Fix memory leaks for the error path of iio_gts_build_avail_scale_table() * Noble update: upstream stable patchset 2025-02-25 (LP: #2099996) // CVE-2024-50232 - iio: adc: ad7124: fix division by zero in ad7124_set_channel_odr() * Noble update: upstream stable patchset 2025-02-25 (LP: #2099996) // CVE-2024-50234 - wifi: iwlegacy: Clear stale interrupts before resuming device * Noble update: upstream stable patchset 2025-02-25 (LP: #2099996) // CVE-2024-50235 - wifi: cfg80211: clear wdev->cqm_config pointer on free * Noble update: upstream stable patchset 2025-02-25 (LP: #2099996) // CVE-2024-50236 - wifi: ath10k: Fix memory leak in management tx * Noble update: upstream stable patchset 2025-02-25 (LP: #2099996) // CVE-2024-50237 - wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower * Noble update: upstream stable patchset 2025-02-25 (LP: #2099996) // CVE-2024-50239 - phy: qcom: qmp-usb-legacy: fix NULL-deref on runtime suspend * Noble update: upstream stable patchset 2025-02-25 (LP: #2099996) // CVE-2024-50240 - phy: qcom: qmp-usb: fix NULL-deref on runtime suspend * Noble update: upstream stable patchset 2025-02-25 (LP: #2099996) // CVE-2024-50242 - fs/ntfs3: Additional check in ntfs_file_release * Noble update: upstream stable patchset 2025-02-25 (LP: #2099996) // CVE-2024-50243 - fs/ntfs3: Fix general protection fault in run_is_mapped_full * Noble update: upstream stable patchset 2025-02-25 (LP: #2099996) // CVE-2024-50244 - fs/ntfs3: Additional check in ni_clear() * Noble update: upstream stable patchset 2025-02-25 (LP: #2099996) // CVE-2024-50245 - fs/ntfs3: Fix possible deadlock in mi_read * Noble update: upstream stable patchset 2025-02-25 (LP: #2099996) // CVE-2024-50246 - fs/ntfs3: Add rough attr alloc_size check * Noble update: upstream stable patchset 2025-02-25 (LP: #2099996) // CVE-2024-50247 - fs/ntfs3: Check if more than chunk-size bytes are written * Noble update: upstream stable patchset 2025-02-25 (LP: #2099996) // CVE-2024-50250 - fsdax: dax_unshare_iter needs to copy entire blocks * Noble update: upstream stable patchset 2025-02-25 (LP: #2099996) // CVE-2024-50251 - netfilter: nft_payload: sanitize offset and length before calling skb_checksum() * Noble update: upstream stable patchset 2025-02-25 (LP: #2099996) // CVE-2024-50252 - mlxsw: spectrum_ipip: Fix memory leak when changing remote IPv6 address * Noble update: upstream stable patchset 2025-02-25 (LP: #2099996) // CVE-2024-50255 - Bluetooth: hci: fix null-ptr-deref in hci_read_supported_codecs * Noble update: upstream stable patchset 2025-02-25 (LP: #2099996) // CVE-2024-50257 - netfilter: Fix use-after-free in get_info() * Noble update: upstream stable patchset 2025-02-25 (LP: #2099996) // CVE-2024-50258 - net: fix crash when config small gso_max_size/gso_ipv4_max_size * Noble update: upstream stable patchset 2025-02-25 (LP: #2099996) // CVE-2024-50262 - bpf: Fix out-of-bounds write in trie_get_next_key() * Noble update: upstream stable patchset 2025-02-25 (LP: #2099996) // CVE-2024-50259 - netdevsim: Add trailing zero to terminate the string in nsim_nexthop_bucket_activity_write() * Noble update: upstream stable patchset 2025-02-25 (LP: #2099996) // CVE-2024-53042 - ipv4: ip_tunnel: Fix suspicious RCU usage warning in ip_tunnel_init_flow() * Noble update: upstream stable patchset 2025-02-25 (LP: #2099996) // CVE-2024-53058 - net: stmmac: TSO: Fix unbalanced DMA map/unmap for non-paged SKB data * Noble update: upstream stable patchset 2025-02-25 (LP: #2099996) // CVE-2024-50261 - macsec: Fix use-after-free while sending the offloading packet * Noble update: upstream stable patchset 2025-02-25 (LP: #2099996) // CVE-2024-53059 - wifi: iwlwifi: mvm: Fix response handling in iwl_mvm_send_recovery_cmd() * Noble update: upstream stable patchset 2025-02-07 (LP: #2097575) - irqchip/gic-v3-its: Fix VSYNC referencing an unmapped VPE on GIC v4.1 - xfs: fix error returns from xfs_bmapi_write - xfs: fix xfs_bmap_add_extent_delay_real for partial conversions - xfs: remove a racy if_bytes check in xfs_reflink_end_cow_extent - xfs: require XFS_SB_FEAT_INCOMPAT_LOG_XATTRS for attr log intent item recovery - xfs: check opcode and iovec count match in xlog_recover_attri_commit_pass2 - xfs: fix missing check for invalid attr flags - xfs: check shortform attr entry flags specifically - xfs: validate recovered name buffers when recovering xattr items - xfs: enforce one namespace per attribute - xfs: revert commit 44af6c7e59b12 - xfs: use dontcache for grabbing inodes during scrub - xfs: match lock mode in xfs_buffered_write_iomap_begin() - xfs: make the seq argument to xfs_bmapi_convert_delalloc() optional - xfs: make xfs_bmapi_convert_delalloc() to allocate the target offset - xfs: convert delayed extents to unwritten when zeroing post eof blocks - xfs: allow symlinks with short remote targets - xfs: make sure sb_fdblocks is non-negative - xfs: fix unlink vs cluster buffer instantiation race - xfs: fix freeing speculative preallocations for preallocated files - xfs: allow unlinked symlinks and dirs with zero size - xfs: restrict when we try to align cow fork delalloc to cowextsz hints - selftests: mptcp: join: change capture/checksum as bool - selftests: mptcp: join: test for prohibited MPC to port-based endp - selftests: mptcp: remove duplicated variables - iio: accel: bma400: Fix uninitialized variable field_value in tap event handling. - bpf: Make sure internal and UAPI bpf_redirect flags don't overlap - bpf: devmap: provide rxq after redirect - cpufreq/amd-pstate: Fix amd_pstate mode switch on shared memory systems - lib/Kconfig.debug: fix grammar in RUST_BUILD_ASSERT_ALLOW - bpf: Fix memory leak in bpf_core_apply - RDMA/bnxt_re: Fix a possible memory leak - RDMA/bnxt_re: Fix incorrect AVID type in WQE structure - RDMA/bnxt_re: Add a check for memory allocation - x86/resctrl: Avoid overflow in MB settings in bw_validate() - ARM: dts: bcm2837-rpi-cm3-io3: Fix HDMI hpd-gpio pin - bpf: Add cookie to perf_event bpf_link_info records - bpf: fix unpopulated name_len field in perf_event link info - selftests/bpf: Add cookies check for perf_event fill_link_info test - selftests/bpf: fix perf_event link info name_len assertion - s390/pci: Handle PCI error codes other than 0x3a - bpf: fix kfunc btf caching for modules - iio: frequency: {admv4420,adrf6780}: format Kconfig entries - iio: frequency: admv4420: fix missing select REMAP_SPI in Kconfig - drm/vmwgfx: Handle possible ENOMEM in vmw_stdu_connector_atomic_check - selftests/bpf: Fix cross-compiling urandom_read - task_work: Add TWA_NMI_CURRENT as an additional notify mode. - sched/core: Disable page allocation in task_tick_mm_cid() - ALSA: hda/cs8409: Fix possible NULL dereference - firmware: arm_scmi: Fix the double free in scmi_debugfs_common_setup() - RDMA/cxgb4: Fix RDMA_CM_EVENT_UNREACHABLE error for iWARP - RDMA/irdma: Fix misspelling of "accept*" - RDMA/srpt: Make slab cache names unique - ipv4: give an IPv4 dev to blackhole_netdev - RDMA/bnxt_re: Fix the max CQ WQEs for older adapters - RDMA/bnxt_re: Fix out of bound check - RDMA/bnxt_re: Return more meaningful error - RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages - RDMA/bnxt_re: Fix the GID table length - accel/qaic: Fix the for loop used to walk SG table - drm/msm/dpu: make sure phys resources are properly initialized - drm/msm/dpu: check for overflow in _dpu_crtc_setup_lm_bounds() - drm/msm/dsi: improve/fix dsc pclk calculation - drm/msm/dsi: fix 32-bit signed integer extension in pclk_rate calculation - drm/msm: Avoid NULL dereference in msm_disp_state_print_regs() - drm/msm: Allocate memory for disp snapshot with kvzalloc() - firmware: arm_scmi: Queue in scmi layer for mailbox implementation - net/smc: Fix memory leak when using percpu refs - net: usb: usbnet: fix race in probe failure - net: stmmac: dwmac-tegra: Fix link bring-up sequence - octeontx2-af: Fix potential integer overflows on integer shifts - drm/amd/amdgpu: Fix double unlock in amdgpu_mes_add_ring - macsec: don't increment counters for an unrelated SA - netdevsim: use cond_resched() in nsim_dev_trap_report_work() - net: ethernet: aeroflex: fix potential memory leak in greth_start_xmit_gbit() - net/smc: Fix searching in list of known pnetids in smc_pnet_add_pnetid - net: xilinx: axienet: fix potential memory leak in axienet_start_xmit() - bpf: Fix truncation bug in coerce_reg_to_size_sx() - irqchip/renesas-rzg2l: Fix missing put_device - drm/msm/dpu: don't always program merge_3d block - net: bcmasp: fix potential memory leak in bcmasp_xmit() - tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink(). - net: dsa: mv88e6xxx: Fix the max_vid definition for the MV88E6361 - genetlink: hold RCU in genlmsg_mcast() - ravb: Remove setting of RX software timestamp - net: ravb: Only advertise Rx/Tx timestamps if hardware supports it - scsi: target: core: Fix null-ptr-deref in target_alloc_device() - smb: client: fix possible double free in smb2_set_ea() - smb: client: fix OOBs when building SMB2_IOCTL request - usb: typec: altmode should keep reference to parent - s390: Initialize psw mask in perf_arch_fetch_caller_regs() - bpf: Fix link info netfilter flags to populate defrag flag - vmxnet3: Fix packet corruption in vmxnet3_xdp_xmit_frame - net/mlx5: Check for invalid vector index on EQ creation - net/mlx5: Fix command bitmask initialization - net/mlx5: Unregister notifier on eswitch init failure - bpf, sockmap: SK_DROP on attempted redirects of unsupported af_vsock - vsock: Update rx_bytes on read_skb() - vsock: Update msg_count on read_skb() - bpf, vsock: Drop static vsock_bpf_prot initialization - riscv, bpf: Make BPF_CMPXCHG fully ordered - nvme-pci: fix race condition between reset and nvme_dev_disable() - bpf: Fix iter/task tid filtering - cdrom: Avoid barrier_nospec() in cdrom_ioctl_media_changed() - khugepaged: inline hpage_collapse_alloc_folio() - khugepaged: convert alloc_charge_hpage to alloc_charge_folio - khugepaged: remove hpage from collapse_file() - mm: khugepaged: fix the arguments order in khugepaged_collapse_file trace point - iio: adc: ti-lmp92064: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig - xhci: dbgtty: remove kfifo_out() wrapper - xhci: dbgtty: use kfifo from tty_port struct - xhci: dbc: honor usb transfer size boundaries. - usb: gadget: f_uac2: fix non-newline-terminated function name - usb: gadget: f_uac2: fix return value for UAC2_ATTRIBUTE_STRING store - XHCI: Separate PORT and CAPs macros into dedicated file - usb: dwc3: core: Fix system suspend on TI AM62 platforms - tracing/fprobe-event: cleanup: Fix a wrong comment in fprobe event - tracing/probes: cleanup: Set trace_probe::nr_args at trace_probe_init - tracing/probes: Support $argN in return probe (kprobe and fprobe) - uprobes: encapsulate preparation of uprobe args buffer - uprobes: prepare uprobe args buffer lazily - uprobes: prevent mutex_lock() under rcu_read_lock() - uprobe: avoid out-of-bounds memory access of fetching args - exec: don't WARN for racy path_noexec check - ASoC: amd: yc: Add quirk for HP Dragonfly pro one - ASoC: codecs: lpass-rx-macro: add missing CDC_RX_BCL_VBAT_RF_PROC2 to default regs values - ASoC: fsl_sai: Enable 'FIFO continue on error' FCONT bit - arm64: Force position-independent veneers - udf: refactor udf_current_aext() to handle error - udf: refactor udf_next_aext() to handle error - udf: refactor inode_bmap() to handle error - udf: fix uninit-value use in udf_get_fileshortad - ASoC: qcom: sm8250: add qrb4210-rb2-sndcard compatible string - cifs: Validate content of NFS reparse point buffer - platform/x86: dell-sysman: add support for alienware products - LoongArch: Don't crash in stack_top() for tasks without vDSO - jfs: Fix sanity check in dbMount - tracing/probes: Fix MAX_TRACE_ARGS limit handling - tracing: Consider the NULL character when validating the event length - xfrm: extract dst lookup parameters into a struct - xfrm: respect ip protocols rules criteria when performing dst lookups - netfilter: bpf: must hold reference on net namespace - net/sun3_82586: fix potential memory leak in sun3_82586_send_packet() - net: plip: fix break; causing plip to never transmit - octeon_ep: Implement helper for iterating packets in Rx queue - octeon_ep: Add SKB allocation failures handling in __octep_oq_process_rx() - net: dsa: mv88e6xxx: Fix error when setting port policy on mv88e6393x - fsl/fman: Save device references taken in mac_probe() - fsl/fman: Fix refcount handling of fman-related devices - netfilter: xtables: fix typo causing some targets not to load on IPv6 - net: wwan: fix global oob in wwan_rtnl_policy - net/sched: adjust device watchdog timer to detect stopped queue at right time - net: fix races in netdev_tx_sent_queue()/dev_watchdog() - net: usb: usbnet: fix name regression - bpf: Add MEM_WRITE attribute - bpf: Fix overloading of MEM_UNINIT's meaning - bpf: Remove MEM_UNINIT from skb/xdp MTU helpers - net/sched: act_api: deny mismatched skip_sw/skip_hw flags for actions created by classifiers - net: sched: fix use-after-free in taprio_change() - net: sched: use RCU read-side critical section in taprio_dump() - posix-clock: posix-clock: Fix unbalanced locking in pc_clock_settime() - Bluetooth: SCO: Fix UAF on sco_sock_timeout - Bluetooth: ISO: Fix UAF on iso_sock_timeout - bpf,perf: Fix perf_event_detach_bpf_prog error handling - net: dsa: mv88e6xxx: group cycle counter coefficients - net: dsa: mv88e6xxx: read cycle counter period from hardware - net: dsa: mv88e6xxx: support 4000ps cycle counter period - ASoC: dt-bindings: davinci-mcasp: Fix interrupts property - ASoC: dt-bindings: davinci-mcasp: Fix interrupt properties - ASoC: loongson: Fix component check failed on FDT systems - ASoC: max98388: Fix missing increment of variable slot_found - ASoC: rsnd: Fix probe failure on HiHope boards due to endpoint parsing - ASoC: fsl_micfil: Add a flag to distinguish with different volume control types - ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size() - powercap: dtpm_devfreq: Fix error check against dev_pm_qos_add_request() - nfsd: cancel nfsd_shrinker_work using sync mode in nfs4_state_shutdown_net - ALSA: hda/realtek: Update default depop procedure - smb: client: Handle kstrdup failures for passwords - cpufreq: CPPC: fix perf_to_khz/khz_to_perf conversion exception - btrfs: fix passing 0 to ERR_PTR in btrfs_search_dir_index_item() - btrfs: zoned: fix zone unusable accounting for freed reserved extent - ACPI: resource: Add LG 16T90SP to irq1_level_low_skip_override[] - ACPI: PRM: Find EFI_MEMORY_RUNTIME block for PRM handler and context - ACPI: button: Add DMI quirk for Samsung Galaxy Book2 to fix initial lid detection issue - nilfs2: fix kernel bug due to missing clearing of buffer delay flag - openat2: explicitly return -E2BIG for (usize > PAGE_SIZE) - KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory - KVM: arm64: Fix shift-out-of-bounds bug - KVM: arm64: Don't eagerly teardown the vgic on init error - x86/lam: Disable ADDRESS_MASKING in most cases - [Config] disable ADDRESS_MASKING - ALSA: hda/tas2781: select CRC32 instead of CRC32_SARWATE - ALSA: hda/realtek: Add subwoofer quirk for Acer Predator G9-593 - LoongArch: Get correct cores_per_package for SMT systems - LoongArch: Enable IRQ if do_ale() triggered in irq-enabled context - LoongArch: Make KASAN usable for variable cpu_vabits - xfrm: fix one more kernel-infoleak in algo dumping - hv_netvsc: Fix VF namespace also in synthetic NIC NETDEV_REGISTER event - drm/amd/display: Disable PSR-SU on Parade 08-01 TCON too - selinux: improve error checking in sel_write_load() - net: phy: dp83822: Fix reset pin definitions - ata: libata: Set DID_TIME_OUT for commands that actually timed out - ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe() - platform/x86: dell-wmi: Ignore suspend notifications - ACPI: PRM: Clean up guid type in struct prm_handler_info - tracing: probes: Fix to zero initialize a local variable - task_work: make TWA_NMI_CURRENT handling conditional on IRQ_WORK - xfrm: validate new SA's prefixlen using SA family when sel.family is unset - bpf: Use raw_spinlock_t in ringbuf - reset: starfive: jh71x0: Fix accessing the empty member on JH7110 SoC - bpf: Fix unpopulated path_size when uprobe_multi fields unset - RDMA/bnxt_re: Fix incorrect dereference of srq in async event - RDMA/bnxt_re: Get the toggle bits from SRQ events - RDMA/bnxt_re: Change the sequence of updating the CQ toggle value - drm/msm/dpu: move CRTC resource assignment to dpu_encoder_virt_atomic_check - ring-buffer: Fix reader locking when changing the sub buffer order - drm/msm/dpu: Don't always set merge_3d pending flush - drm/msm/a6xx+: Insert a fence wait before SMMU table update - drm/xe: Take job list lock in xe_sched_add_pending_job - drm/xe: Use bookkeep slots for external BO's in exec IOCTL - net: ethernet: mtk_eth_soc: fix memory corruption during fq dma init - net/mlx5e: Don't call cleanup on profile rollback failure - bpf: Fix print_reg_state's constant scalar dump - fsnotify: optimize the case of no parent watcher - fsnotify: Avoid data race between fsnotify_recalc_mask() and fsnotify_object_watched() - drm/xe/mcr: Use Xe2_LPM steering tables for Xe2_HPM - objpool: fix choosing allocation for percpu slots - bnxt_en: replace ptp_lock with irqsave variant - bpf, arm64: Fix address emission with tag-based KASAN enabled - net: dsa: microchip: disable EEE for KSZ879x/KSZ877x/KSZ876x - ASoC: topology: Bump minimal topology ABI version - fbdev: wm8505fb: select CONFIG_FB_IOMEM_FOPS - btrfs: qgroup: set a more sane default value for subtree drop threshold - btrfs: clear force-compress on remount when compress mount option is given - x86/amd_nb: Add new PCI IDs for AMD family 1Ah model 60h-70h - x86/amd_nb: Add new PCI ID for AMD family 1Ah model 20h - btrfs: reject ro->rw reconfiguration if there are hard ro requirements - xfs: don't fail repairs on metadata files with no attr fork - drm/bridge: Fix assignment of the of_node of the parent to aux bridge - platform/x86/intel/pmc: Fix pmc_core_iounmap to call iounmap for valid addresses - fgraph: Fix missing unlock in register_ftrace_graph() - fgraph: Change the name of cpuhp state to "fgraph:online" - ASoC: SOF: Intel: hda: Always clean up link DMA during stop - ASoC: dapm: avoid container_of() to get component - ASoC: qcom: sc7280: Fix missing Soundwire runtime stream alloc - ASoC: qcom: sdm845: add missing soundwire runtime stream alloc - soundwire: intel_ace2x: Send PDI stream number during prepare - x86: support user address masking instead of non-speculative conditional - ASoC: qcom: Select missing common Soundwire module code on SDM845 - SAUCE: Revert "iio: adc: ti-lmp92064: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig" - Upstream stable to v6.6.58, v6.6.59, v6.11.6 * CVE-2025-21756 - vsock: Keep the binding until socket destruction - vsock: Orphan socket after transport release * Fix NIC name changes for ice (LP: #2100264) - ice: Remove ndo_get_phys_port_name * CVE-2024-50256 - netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6() * CVE-2025-21702 - pfifo_tail_enqueue: Drop new packet when sch->limit == 0 * CVE-2024-50167 - be2net: fix potential memory leak in be_xmit() * Fix line-out playback on some platforms with Cirrus Logic “Dolphin” hardware (LP: #2099880) - ALSA: hda/cirrus: Correct the full scale volume set logic * Enable Large Language Model (LLM) workloads using Intel NPU (LP: #2098972) - accel/ivpu: Increase DMA address range * Patchset for TUXEDO devices (LP: #2098104) - wifi: ath12k: add fallback board name without variant while searching board-2.bin - wifi: ath12k: remove unused ATH12K_BD_IE_BOARD_EXT - wifi: ath12k: add support to search regdb data in board-2.bin for WCN7850 - wifi: ath12k: support default regdb while searching board-2.bin for WCN7850 - ACPI: resource: Use IRQ override on Maibenben X565 - ACPI: resource: Do IRQ override on TongFang GXxHRXx and GMxHGxx - ALSA: hda/realtek: Fix headset mic on TUXEDO Gemini 17 Gen3 - ALSA: hda/realtek: Fix headset mic on TUXEDO Stellaris 16 Gen6 mb1 - PCI: Avoid putting some root ports into D3 on TUXEDO Sirius Gen1 - nvme-pci: Add TUXEDO InfinityFlex to Samsung sleep quirk - nvme-pci: Add TUXEDO IBP Gen9 to Samsung sleep quirk * Introduce and use sendpages_ok() instead of sendpage_ok() in nvme-tcp and drbd (LP: #2093871) - net: introduce helper sendpages_ok() - nvme-tcp: use sendpages_ok() instead of sendpage_ok() - drbd: use sendpages_ok() instead of sendpage_ok() * CVE-2024-56765 - powerpc/pseries/vas: Add close() callback in vas_vm_ops struct * CVE-2025-21700 - net: sched: Disallow replacing of child qdisc from one parent to another * CVE-2024-56615 - bpf: fix OOB devmap writes when deleting elements * CVE-2024-56651 - can: hi311x: hi3110_can_ist(): fix potential use-after-free * CVE-2024-56627 - ksmbd: fix Out-of-Bounds Read in ksmbd_vfs_stream_read * CVE-2024-56600 - net: inet6: do not leave a dangling sk pointer in inet6_create() * CVE-2024-56661 - tipc: fix NULL deref in cleanup_bearer() * CVE-2024-56642 - tipc: Fix use-after-free of kernel socket in cleanup_bearer(). * CVE-2024-53227 - scsi: bfa: Fix use-after-free in bfad_im_module_exit() * CVE-2024-53237 - Bluetooth: fix use-after-free in device_for_each_child() * CVE-2024-53166 - block, bfq: fix bfqq uaf in bfq_limit_depth() * CVE-2024-50265 - ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove() * CVE-2024-50249 - ACPI: CPPC: Make rmw_lock a raw_spin_lock * iBFT iSCSI out-of-bounds shift UBSAN warning (LP: #2097824) - iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic() * [Ubuntu 24.04] MultiVM - L2 guest(s) running stress-ng getting stuck at booting after triggering crash (LP: #2077722) - KVM: PPC: Book3S HV: Mask off LPCR_MER for a vCPU before running it to avoid spurious interrupts * btrfs will WARN_ON() in btrfs_remove_qgroup() unnecessarily (LP: #2091719) - btrfs: improve the warning and error message for btrfs_remove_qgroup() * CVE-2024-50248 - ntfs3: Add bounds checking to mi_enum_attr() - fs/ntfs3: Sequential field availability check in mi_enum_attr() * CVE-2025-21701 - net: avoid race between device unregistration and ethnl ops * CVE-2024-57798 - drm/dp_mst: Ensure mst_primary pointer is valid in drm_dp_mst_handle_up_req() * CVE-2024-56672 - blk-cgroup: Fix UAF in blkcg_unpin_online() * CVE-2024-56658 - net: defer final 'struct net' free in netns dismantle * CVE-2024-56598 - jfs: array-index-out-of-bounds fix in dtReadFirst * CVE-2024-56595 - jfs: add a check to prevent array-index-out-of-bounds in dbAdjTree * CVE-2024-53140 - netlink: terminate outstanding dump on socket close * CVE-2024-53063 - media: dvbdev: prevent the risk of out of memory access * CVE-2024-50302 - HID: core: zero-initialize the report buffer -- Stefan Bader <stefan.bader@canonical.com> Fri, 28 Mar 2025 11:52:46 +0100 linux-hwe-6.8 (6.8.0-57.59~22.04.1) jammy; urgency=medium * jammy/linux-hwe-6.8: 6.8.0-57.59~22.04.1 -proposed tracker (LP: #2102489) [ Ubuntu: 6.8.0-57.59 ] * noble/linux: 6.8.0-57.59 -proposed tracker (LP: #2102490) * CVE-2024-57798 - drm/dp_mst: Ensure mst_primary pointer is valid in drm_dp_mst_handle_up_req() * CVE-2024-56672 - blk-cgroup: Fix UAF in blkcg_unpin_online() * CVE-2024-56658 - net: defer final 'struct net' free in netns dismantle * CVE-2024-56598 - jfs: array-index-out-of-bounds fix in dtReadFirst * CVE-2024-56595 - jfs: add a check to prevent array-index-out-of-bounds in dbAdjTree * CVE-2024-53140 - netlink: terminate outstanding dump on socket close * CVE-2024-53063 - media: dvbdev: prevent the risk of out of memory access * CVE-2024-50302 - HID: core: zero-initialize the report buffer -- Stefan Bader <stefan.bader@canonical.com> Wed, 19 Mar 2025 15:17:16 +0100 linux-hwe-6.8 (6.8.0-56.58~22.04.1) jammy; urgency=medium * jammy/linux-hwe-6.8: 6.8.0-56.58~22.04.1 -proposed tracker (LP: #2098243) [ Ubuntu: 6.8.0-56.58 ] * noble/linux: 6.8.0-56.58 -proposed tracker (LP: #2098244) * Noble update: upstream stable patchset 2024-07-19 (LP: #2073603) - Revert "drm: Make drivers depends on DRM_DW_HDMI" - Revert "UBUNTU: [Config] Drivers now depend on DRM_DW_HDMI" * drm/amd/display: Add check for granularity in dml ceil/floor helpers (LP: #2098080) - drm/amd/display: Add check for granularity in dml ceil/floor helpers * optimized default EPP for GNR family (LP: #2097554) - cpufreq: intel_pstate: Update Balance-performance EPP for Granite Rapids * Incorrect LAPIC/x2APIC parsing order (LP: #2097455) - x86/acpi: Fix LAPIC/x2APIC parsing order * MGLRU: page allocation failure on NUMA-enabled systems (LP: #2097214) - mm/vmscan: wake up flushers conditionally to avoid cgroup OOM * Upstream commit 65357e2c164a: "RDMA/mana_ib: set node_guid" applied incorrectly (LP: #2096885) - Revert "RDMA/mana_ib: set node_guid" * AppArmor early policy load not funcitoning (LP: #2095370) - SAUCE: Revert "UBUNTU: SAUCE: apparmor4.0.0 [67/90]: userns - add the ability to reference a global variable for a feature value" * apparmor unconfined profile blocks pivot_root (LP: #2067900) - SAUCE: Revert "UBUNTU: SAUCE: apparmor4.0.0 [81/90]: apparmor: convert easy uses of unconfined() to label_mediates()" * CVE-2024-50117 - drm/amd: Guard against bad data for ATIF ACPI method * CVE-2024-56582 - btrfs: fix use-after-free in btrfs_encoded_read_endio() * CVE-2024-53165 - sh: intc: Fix use-after-free bug in register_intc_controller() * CVE-2024-53156 - wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service() * CVE-2024-56663 - wifi: nl80211: fix NL80211_ATTR_MLO_LINK_ID off-by-one * CVE-2024-56614 - xsk: fix OOB map writes when deleting elements * VM boots slowly with large-BAR GPU Passthrough due to pci/probe.c redundancy (LP: #2097389) - PCI: Batch BAR sizing operations * Noble update: upstream stable patchset 2025-02-04 (LP: #2097393) - Revert "PCI/MSI: Provide stubs for IMS functions" - gfs2: Revert "introduce qd_bh_get_or_undo" - gfs2: qd_check_sync cleanups - gfs2: Revert "ignore negated quota changes" - Revert "powerpc/ps3_defconfig: Disable PPC64_BIG_ENDIAN_ELF_ABI_V2" - tracing: Have saved_cmdlines arrays all in one allocation - spi: spi-fsl-lpspi: remove redundant spi_controller_put call - ata: ahci: Add mask_port_map module parameter - ASoC: tas2781: mark dvc_tlv with __maybe_unused - scsi: sd: Do not repeat the starting disk message - bootconfig: Fix the kerneldoc of _xbc_exit() - perf sched: Move start_work_mutex and work_done_wait_mutex initialization to perf_sched__replay() - perf sched: Fix memory leak in perf_sched__map() - perf sched: Move curr_thread initialization to perf_sched__map() - perf sched: Move curr_pid and cpu_last_switched initialization to perf_sched__{lat|map|replay}() - libsubcmd: Don't free the usage string - selftests: Introduce Makefile variable to list shared bash scripts - jbd2: fix kernel-doc for j_transaction_overhead_buffers - lib/build_OID_registry: avoid non-destructive substitution for Perl < 5.13.2 compat - drm/amd/display: Remove a redundant check in authenticated_dp - drm/amd/display: Revert "Check HDCP returned status" - zram: don't free statically defined names - x86/amd_nb: Add new PCI IDs for AMD family 0x1a - rtnetlink: change nlk->cb_mutex role - rtnetlink: add RTNL_FLAG_DUMP_UNLOCKED flag - mpls: no longer hold RTNL in mpls_netconf_dump_devconf() - phonet: no longer hold RTNL in route_dumpit() - rcu/nocb: Make IRQs disablement symmetric - HID: asus: add ROG Ally N-Key ID and keycodes - HID: asus: add ROG Z13 lightbar - hid-asus: add ROG Ally X prod ID to quirk list - scsi: Revert "scsi: sd: Do not repeat the starting disk message" - btrfs: fix uninitialized pointer free in add_inode_ref() - btrfs: fix uninitialized pointer free on read_alloc_one_name() error - ksmbd: fix user-after-free from session log off - ALSA: hda/conexant - Fix audio routing for HP EliteOne 1000 G2 - mptcp: pm: fix UaF read in mptcp_pm_nl_rm_addr_or_subflow - net: enetc: remove xdp_drops statistic from enetc_xdp_drop() - net: enetc: block concurrent XDP transmissions during ring reconfiguration - net: enetc: disable Tx BD rings after they are empty - net: enetc: disable NAPI after all rings are disabled - net: enetc: add missing static descriptor and inline keyword - posix-clock: Fix missing timespec64 check in pc_clock_settime() - udp: Compute L4 checksum as usual when not segmenting the skb - arm64: probes: Remove broken LDR (literal) uprobe support - arm64: probes: Fix simulate_ldr*_literal() - arm64: probes: Fix uprobes for big-endian kernels - net: macb: Avoid 20s boot delay by skipping MDIO bus registration for fixed- link PHY - net: microchip: vcap api: Fix memory leaks in vcap_api_encode_rule_test() - maple_tree: correct tree corruption on spanning store - nilfs2: propagate directory read errors from nilfs_find_entry() - fat: fix uninitialized variable - mm/mremap: fix move_normal_pmd/retract_page_tables race - mm/swapfile: skip HugeTLB pages for unuse_vma - mm/damon/tests/sysfs-kunit.h: fix memory leak in damon_sysfs_test_add_targets() - tcp: fix mptcp DSS corruption due to large pmtu xmit - net: fec: Move `fec_ptp_read()` to the top of the file - net: fec: Remove duplicated code - mptcp: prevent MPC handshake on port-based signal endpoints - iommu/vt-d: Fix incorrect pci_for_each_dma_alias() for non-PCI devices - s390/sclp: Deactivate sclp after all its users - s390/sclp_vt220: Convert newlines to CRLF instead of LFCR - KVM: s390: gaccess: Check if guest address is in memslot - KVM: s390: Change virtual to physical address access in diag 0x258 handler - x86/cpufeatures: Define X86_FEATURE_AMD_IBPB_RET - x86/cpufeatures: Add a IBPB_NO_RET BUG flag - x86/entry: Have entry_ibpb() invalidate return predictions - x86/bugs: Skip RSB fill at VMEXIT - x86/bugs: Do not use UNTRAIN_RET with IBPB on entry - fgraph: Use CPU hotplug mechanism to initialize idle shadow stacks - blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race - io_uring/sqpoll: close race on waiting for sqring entries - blk-mq: setup queue ->tag_set before initializing hctx - ublk: don't allow user copy for unprivileged device - selftest: hid: add the missing tests directory - Input: xpad - add support for MSI Claw A1M - scsi: mpi3mr: Correct a test in mpi3mr_sas_port_add() - scsi: mpi3mr: Validate SAS port assignments - scsi: ufs: core: Set SDEV_OFFLINE when UFS is shut down - scsi: ufs: core: Fix the issue of ICU failure - scsi: ufs: core: Requeue aborted request - drm/radeon: Fix encoder->possible_clones - drm/i915/dp_mst: Handle error during DSC BW overhead/slice calculation - drm/i915/dp_mst: Don't require DSC hblank quirk for a non-DSC compatible mode - drm/xe/xe_sync: initialise ufence.signalled - drm/xe/ufence: ufence can be signaled right after wait_woken - drm/vmwgfx: Cleanup kms setup without 3d - drm/vmwgfx: Handle surface check failure correctly - drm/amdgpu/pm: Fix code alignment issue - drm/amdgpu/smu13: always apply the powersave optimization - drm/amdgpu/swsmu: Only force workload setup on init - iio: dac: ad5770r: add missing select REGMAP_SPI in Kconfig - iio: dac: ltc1660: add missing select REGMAP_SPI in Kconfig - iio: dac: stm32-dac-core: add missing select REGMAP_MMIO in Kconfig - iio: adc: ti-ads8688: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig - iio: hid-sensors: Fix an error handling path in _hid_sensor_set_report_latency() - iio: light: veml6030: fix ALS sensor resolution - iio: light: veml6030: fix IIO device retrieval from embedded device - iio: light: opt3001: add missing full-scale range value - iio: amplifiers: ada4250: add missing select REGMAP_SPI in Kconfig - iio: frequency: adf4377: add missing select REMAP_SPI in Kconfig - iio: light: bu27008: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig - iio: resolver: ad2s1210 add missing select REGMAP in Kconfig - iio: pressure: bm1390: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig - iio: dac: ad5766: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig - iio: proximity: mb1232: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig - iio: dac: ad3552r: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig - iio: adc: ti-lmp92064: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig - iio: adc: ti-lmp92064: add missing select REGMAP_SPI in Kconfig - iio: adc: ti-ads124s08: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig - iio: resolver: ad2s1210: add missing select (TRIGGERED_)BUFFER in Kconfig - iio: accel: kx022a: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig - Bluetooth: Call iso_exit() on module unload - Bluetooth: Remove debugfs directory on module init failure - Bluetooth: ISO: Fix multiple init when debugfs is disabled - Bluetooth: btusb: Fix not being able to reconnect after suspend - Bluetooth: btusb: Fix regression with fake CSR controllers 0a12:0001 - vt: prevent kernel-infoleak in con_font_get() - xhci: tegra: fix checked USB2 port number - xhci: Fix incorrect stream context type macro - xhci: Mitigate failed set dequeue pointer commands - USB: serial: option: add support for Quectel EG916Q-GL - USB: serial: option: add Telit FN920C04 MBIM compositions - usb: typec: qcom-pmic-typec: fix sink status being overwritten with RP_DEF - usb: dwc3: Wait for EndXfer completion before restoring GUSB2PHYCFG - misc: microchip: pci1xxxx: add support for NVMEM_DEVID_AUTO for EEPROM device - misc: microchip: pci1xxxx: add support for NVMEM_DEVID_AUTO for OTP device - serial: imx: Update mctrl old_status on RTSD interrupt - parport: Proper fix for array out-of-bounds access - x86/resctrl: Annotate get_mem_config() functions as __init - x86/apic: Always explicitly disarm TSC-deadline timer - x86/CPU/AMD: Only apply Zenbleed fix for Zen2 during late microcode load - x86/entry_32: Do not clobber user EFLAGS.ZF - x86/entry_32: Clear CPU buffers after register restore in NMI return - tty: n_gsm: Fix use-after-free in gsm_cleanup_mux - x86/bugs: Use code segment selector for VERW operand - pinctrl: intel: platform: fix error path in device_for_each_child_node() - pinctrl: ocelot: fix system hang on level based interrupts - pinctrl: stm32: check devm_kasprintf() returned value - pinctrl: apple: check devm_kasprintf() returned value - irqchip/gic-v4: Don't allow a VMOVP on a dying VPE - irqchip/sifive-plic: Unmask interrupt in plic_irq_enable() - serial: qcom-geni: fix polled console initialisation - serial: qcom-geni: revert broken hibernation support - serial: qcom-geni: fix shutdown race - serial: qcom-geni: fix dma rx cancellation - serial: qcom-geni: fix receiver enable - mm: vmscan.c: fix OOM on swap stress test - ALSA: hda/conexant - Use cached pin control for Node 0x1d on HP EliteOne 1000 G2 - Upstream stable to v6.6.57, v6.11.5 * Noble update: upstream stable patchset 2025-02-03 (LP: #2097301) - Revert "perf callchain: Fix stitch LBR memory leaks" - ASoC: amd: acp: add ZSC control register programming sequence - virtio: rename virtio_config_enabled to virtio_config_core_enabled - virtio: allow driver to disable the configure change notification - virtio-net: synchronize operstate with admin state on up/down - virtio-net: synchronize probe with ndo_set_features - wifi: rtw89: limit the PPDU length for VHT rate to 0x40000 - af_unix: Don't call skb_get() for OOB skb. - af_unix: Remove single nest in manage_oob(). - af_unix: Rename unlinked_skb in manage_oob(). - af_unix: Move spin_lock() in manage_oob(). - iommu/amd: Move allocation of the top table into v1_alloc_pgtable - iommu/amd: Set the pgsize_bitmap correctly - drm/xe: Move and export xe_hw_engine lookup. - drm/msm/dp: rename wide_bus_en to wide_bus_supported - drm/msm/dp: enable widebus on all relevant chipsets - bpf, arm64: Fix tailcall hierarchy - libbpf: Don't take direct pointers into BTF data from st_ops - s390/entry: Move early program check handler to entry.S - selftests/bpf: fix to avoid __msg tag de-duplication by clang - libbpf: Ensure new BTF objects inherit input endianness - PCI: dwc: ep: Rename dw_pcie_ep_exit() to dw_pcie_ep_deinit() - PCI: qcom-ep: Enable controller resources like PHY only after refclk is available - net: ravb: Fix maximum TX frame size for GbEth devices - ravb: Make it clear the information relates to maximum frame size - net: ravb: Fix R-Car RX frame size limit - netfilter: nf_tables: missing objects with no memcg accounting - PCI: dra7xx: Fix error handling when IRQ request fails in probe - KVM: x86: Re-split x2APIC ICR into ICR+ICR2 for AMD (x2AVIC) - intel_idle: fix ACPI _CST matching for newer Xeon platforms - wifi: mt76: mt7925: fix a potential association failure upon resuming - cifs: Remove intermediate object of failed create reparse call - drm/amd/display: Disable replay if VRR capability is false - drm/amd/display: Fix VRR cannot enable - l2tp: free sessions using rcu - net: skbuff: sprinkle more __GFP_NOWARN on ingress allocs - nvme: fix metadata handling in nvme-passthrough - wifi: wilc1000: Do not operate uninitialized hardware during suspend/resume - x86/apic: Remove logical destination mode for 64-bit - pmdomain: core: Use dev_name() instead of kobject_get_path() in debugfs - drm/xe: Name and document Wa_14019789679 - drm/xe: Add timeout to preempt fences - drm/amd/display: Fix possible overflow in integer multiplication - ext4: fix error message when rejecting the default hash - power: supply: Drop use_cnt check from power_supply_property_is_writeable() - ALSA: hda/realtek: fix mute/micmute LED for HP mt645 G8 - drm/xe: Generate oob before compiling anything - clk: qcom: gcc-sc8180x: Register QUPv3 RCGs for DFS on sc8180x - drm/amd/display: Restore Optimized pbn Value if Failed to Disable DSC - Revert "drm/amd/display: Skip Recompute DSC Params if no Stream on Link" - pmdomain: core: Reduce debug summary table width - fs/ntfs3: Do not call file_modified if collapse range failed - fs/ntfs3: Optimize large writes into sparse file - fs/ntfs3: Fix sparse warning in ni_fiemap - fs/ntfs3: Refactor enum_rstbl to suppress static checker - virtio_console: fix misc probe bugs - ntfs3: Change to non-blocking allocation in ntfs_d_hash - bpf: Call the missed btf_record_free() when map creation fails - selftests/bpf: Fix ARG_PTR_TO_LONG {half-,}uninitialized test - bpf: Check percpu map value size first - s390/facility: Disable compile time optimization for decompressor code - s390/mm: Add cond_resched() to cmm_alloc/free_pages() - bpf, x64: Fix a jit convergence issue - ext4: nested locking for xattr inode - s390/cpum_sf: Remove WARN_ON_ONCE statements - ktest.pl: Avoid false positives with grub2 skip regex - soundwire: intel_bus_common: enable interrupts before exiting reset - PCI: Add function 0 DMA alias quirk for Glenfly Arise chip - clk: bcm: bcm53573: fix OF node leak in init - PCI: Add ACS quirk for Qualcomm SA8775P - i2c: i801: Use a different adapter-name for IDF adapters - PCI: Mark Creative Labs EMU20k2 INTx masking as broken - RISC-V: Don't have MAX_PHYSMEM_BITS exceed phys_addr_t - mfd: intel_soc_pmic_chtwc: Make Lenovo Yoga Tab 3 X90F DMI match less strict - mfd: intel-lpss: Add Intel Arrow Lake-H LPSS PCI IDs - mfd: intel-lpss: Rename SPI intel_lpss_platform_info structs - mfd: intel-lpss: Add Intel Panther Lake LPSS PCI IDs - riscv: Omit optimized string routines when using KASAN - riscv: avoid Imbalance in RAS - RDMA/mlx5: Enforce umem boundaries for explicit ODP page faults - PCI: qcom: Disable mirroring of DBI and iATU register space in BAR region - PCI: endpoint: Assign PCI domain number for endpoint controllers - soundwire: cadence: re-check Peripheral status with delayed_work - riscv/kexec_file: Fix relocation type R_RISCV_ADD16 and R_RISCV_SUB16 unknown - media: videobuf2-core: clear memory related fields in __vb2_plane_dmabuf_put() - remoteproc: imx_rproc: Use imx specific hook for find_loaded_rsc_table - usb: chipidea: udc: enable suspend interrupt after usb reset - usb: dwc2: Adjust the timing of USB Driver Interrupt Registration in the Crashkernel Scenario - xhci: dbc: Fix STALL transfer event handling - usb: host: xhci-plat: Parse xhci-missing_cas_quirk and apply quirk - comedi: ni_routing: tools: Check when the file could not be opened - LoongArch: Fix memleak in pci_acpi_scan_root() - netfilter: nf_nat: don't try nat source port reallocation for reverse dir clash - netfilter: nf_reject: Fix build warning when CONFIG_BRIDGE_NETFILTER=n - tools/iio: Add memory allocation failure check for trigger_name - staging: vme_user: added bound check to geoid - driver core: bus: Return -EIO instead of 0 when show/store invalid bus attribute - scsi: lpfc: Add ELS_RSP cmd to the list of WQEs to flush in lpfc_els_flush_cmd() - scsi: lpfc: Revise TRACE_EVENT log flag severities from KERN_ERR to KERN_WARNING - NFSD: Mark filecache "down" if init fails - nfsd: nfsd_destroy_serv() must call svc_destroy() even if nfsd_startup_net() failed - ice: set correct dst VSI in only LAN filters - ice: clear port vlan config during reset - ice: disallow DPLL_PIN_STATE_SELECTABLE for dpll output pins - ice: fix VLAN replay after reset - SUNRPC: Fix integer overflow in decode_rc_list() - tcp: fix to allow timestamp undo if no retransmits were sent - tcp: fix tcp_enter_recovery() to zero retrans_stamp when it's safe - tcp: fix TFO SYN_RECV to not zero retrans_stamp with retransmits out - rxrpc: Fix uninitialised variable in rxrpc_send_data() - selftests: net: no_forwarding: fix VID for $swp2 in one_bridge_two_pvids() test - Bluetooth: btusb: Don't fail external suspend requests - net: phy: bcm84881: Fix some error handling paths - Revert "net: stmmac: set PP_FLAG_DMA_SYNC_DEV only if XDP is enabled" - net: ethernet: adi: adin1110: Fix some error handling path in adin1110_read_fifo() - net: dsa: b53: fix jumbo frame mtu check - net: dsa: b53: fix max MTU for 1g switches - net: dsa: b53: fix max MTU for BCM5325/BCM5365 - net: dsa: b53: allow lower MTUs on BCM5325/5365 - net: dsa: b53: fix jumbo frames on 10/100 ports - drm/nouveau: pass cli to nouveau_channel_new() instead of drm+device - nouveau/dmem: Fix privileged error in copy engine channel - gpio: aspeed: Add the flush write to ensure the write complete. - gpio: aspeed: Use devm_clk api to manage clock source - powercap: intel_rapl_tpmi: Ignore minor version change - ice: Fix netif_is_ice() in Safe Mode - ice: Flush FDB entries before reset - e1000e: change I219 (19) devices to ADP - net: ibm: emac: mal: fix wrong goto - btrfs: zoned: fix missing RCU locking in error message when loading zone info - sctp: ensure sk_state is set to CLOSED if hashing fails in sctp_listen_start - netfilter: fib: check correct rtable in vrf setups - net: ibm: emac: mal: add dcr_unmap to _remove - net: dsa: refuse cross-chip mirroring operations - rtnetlink: Add bulk registration helpers for rtnetlink message handlers. - vxlan: Handle error of rtnl_register_module(). - bridge: Handle error of rtnl_register_module(). - mctp: Handle error of rtnl_register_module(). - mpls: Handle error of rtnl_register_module(). - phonet: Handle error of rtnl_register_module(). - rcu/nocb: Fix rcuog wake-up from offline softirq - x86/amd_nb: Add new PCI IDs for AMD family 1Ah model 60h - HID: multitouch: Add support for lenovo Y9000P Touchpad - hwmon: intel-m10-bmc-hwmon: relabel Columbiaville to CVL Die Temperature - hwmon: (tmp513) Add missing dependency on REGMAP_I2C - hwmon: (mc34vr500) Add missing dependency on REGMAP_I2C - hwmon: (adm9240) Add missing dependency on REGMAP_I2C - hwmon: (adt7470) Add missing dependency on REGMAP_I2C - hwmon: (ltc2991) Add missing dependency on REGMAP_I2C - HID: plantronics: Workaround for an unexcepted opposite volume key - Revert "usb: yurex: Replace snprintf() with the safer scnprintf() variant" - usb: dwc3: core: Stop processing of pending events if controller is halted - usb: xhci: Fix problem with xhci resume from suspend - usb: storage: ignore bogus device raised by JieLi BR21 USB sound chip - usb: dwc3: re-enable runtime PM after failed resume - usb: gadget: core: force synchronous registration - hid: intel-ish-hid: Fix uninitialized variable 'rv' in ish_fw_xfer_direct_dma - ACPI: resource: Make Asus ExpertBook B2402 matches cover more models - ACPI: resource: Make Asus ExpertBook B2502 matches cover more models - drm/amdkfd: Fix an eviction fence leak - drm/amd/display: fix hibernate entry for DCN35+ - drm/xe/guc_submit: fix xa_store() error checking - drm/i915/hdcp: fix connector refcounting - drm/xe/ct: fix xa_store() error checking - scsi: ufs: Use pre-calculated offsets in ufshcd_init_lrb() - mmc: sdhci-of-dwcmshc: Prevent stale command interrupt handling - mptcp: fallback when MPTCP opts are dropped after 1st data - ata: libata: avoid superfluous disk spin down + spin up during hibernation - OPP: fix error code in dev_pm_opp_set_config() - net: dsa: lan9303: ensure chip reset and wait for READY status - mptcp: pm: do not remove closing subflows - powercap: intel_rapl_tpmi: Fix bogus register reading - selftests/mm: fix incorrect buffer->mirror size in hmm2 double_map test - selftests/rseq: Fix mm_cid test failure - btrfs: split remaining space to discard in chunks - btrfs: add cancellation points to trim loops - fs/proc/kcore.c: allow translation of physical memory addresses - io_uring/rw: fix cflags posting for single issue multishot read - Upstream stable to v6.6.56, v6.11.1, v6.11.2, v6.11.3, v6.11.4 * Noble update: upstream stable patchset 2025-02-03 (LP: #2097301) // CVE-2024-50182 - secretmem: disable memfd_secret() if arch cannot set direct map * Noble update: upstream stable patchset 2025-02-03 (LP: #2097301) // CVE-2024-50019 - kthread: unpark only parked kthread * Noble update: upstream stable patchset 2025-02-03 (LP: #2097301) // CVE-2024-50096 - nouveau/dmem: Fix vulnerability in migrate_to_ram upon copy error * Noble update: upstream stable patchset 2025-02-03 (LP: #2097301) // CVE-2024-50020 - ice: Fix improper handling of refcount in ice_sriov_set_msix_vec_count() * Noble update: upstream stable patchset 2025-02-03 (LP: #2097301) // CVE-2024-50021 - ice: Fix improper handling of refcount in ice_dpll_init_rclk_pins() * Noble update: upstream stable patchset 2025-02-03 (LP: #2097301) // CVE-2024-50022 - device-dax: correct pgoff align in dax_set_mapping() * Noble update: upstream stable patchset 2025-02-03 (LP: #2097301) // CVE-2024-50185 - mptcp: handle consistently DSS corruption * Noble update: upstream stable patchset 2025-02-03 (LP: #2097301) // CVE-2024-50023 - net: phy: Remove LED entry from LEDs list on unregister * Noble update: upstream stable patchset 2025-02-03 (LP: #2097301) // CVE-2024-50024 - net: Fix an unsafe loop on the list * Noble update: upstream stable patchset 2025-02-03 (LP: #2097301) // CVE-2024-50186 - net: explicitly clear the sk pointer, when pf->create fails * Noble update: upstream stable patchset 2025-02-03 (LP: #2097301) // CVE-2024-50025 - scsi: fnic: Move flush_work initialization out of if block * Noble update: upstream stable patchset 2025-02-03 (LP: #2097301) // CVE-2024-50026 - scsi: wd33c93: Don't use stale scsi_pointer value * Noble update: upstream stable patchset 2025-02-03 (LP: #2097301) // CVE-2024-50027 - thermal: core: Free tzp copy along with the thermal zone * Noble update: upstream stable patchset 2025-02-03 (LP: #2097301) // CVE-2024-50028 - thermal: core: Reference count the zone in thermal_zone_get_by_id() * Noble update: upstream stable patchset 2025-02-03 (LP: #2097301) // CVE-2024-50029 - Bluetooth: hci_conn: Fix UAF in hci_enhanced_setup_sync * Noble update: upstream stable patchset 2025-02-03 (LP: #2097301) // CVE-2024-50030 - drm/xe/ct: prevent UAF in send_recv() * Noble update: upstream stable patchset 2025-02-03 (LP: #2097301) // CVE-2024-50187 - drm/vc4: Stop the active perfmon before being destroyed * Noble update: upstream stable patchset 2025-02-03 (LP: #2097301) // CVE-2024-50031 - drm/v3d: Stop the active perfmon before being destroyed * Noble update: upstream stable patchset 2025-02-03 (LP: #2097301) // CVE-2024-50189 - HID: amd_sfh: Switch to device-managed dmam_alloc_coherent() * Noble update: upstream stable patchset 2025-02-03 (LP: #2097301) // CVE-2024-50033 - slip: make slhc_remember() more robust against malicious packets * Noble update: upstream stable patchset 2025-02-03 (LP: #2097301) // CVE-2024-50035 - ppp: fix ppp_async_encode() illegal access * Noble update: upstream stable patchset 2025-02-03 (LP: #2097301) // CVE-2024-50036 - net: do not delay dst_entries_add() in dst_release() * Noble update: upstream stable patchset 2025-02-03 (LP: #2097301) // CVE-2024-50038 - netfilter: xtables: avoid NFPROTO_UNSPEC where needed * Noble update: upstream stable patchset 2025-02-03 (LP: #2097301) // CVE-2024-50039 - net/sched: accept TCA_STAB only for root qdisc * Noble update: upstream stable patchset 2025-02-03 (LP: #2097301) // CVE-2024-50040 - igb: Do not bring the device up after non-fatal error * Noble update: upstream stable patchset 2025-02-03 (LP: #2097301) // CVE-2024-50041 - i40e: Fix macvlan leak by synchronizing access to mac_filter_hash * Noble update: upstream stable patchset 2025-02-03 (LP: #2097301) // CVE-2024-50042 - ice: Fix increasing MSI-X on VF * Noble update: upstream stable patchset 2025-02-03 (LP: #2097301) // CVE-2024-50093 - thermal: intel: int340x: processor: Fix warning during module unload * Noble update: upstream stable patchset 2025-02-03 (LP: #2097301) // CVE-2024-50044 - Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change * Noble update: upstream stable patchset 2025-02-03 (LP: #2097301) // CVE-2024-50045 - netfilter: br_netfilter: fix panic with metadata_dst skb * Noble update: upstream stable patchset 2025-02-03 (LP: #2097301) // CVE-2024-50188 - net: phy: dp83869: fix memory corruption when enabling fiber * Noble update: upstream stable patchset 2025-02-03 (LP: #2097301) // CVE-2024-50046 - NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies() * Noble update: upstream stable patchset 2025-02-03 (LP: #2097301) // CVE-2024-50180 - fbdev: sisfb: Fix strbuf array overflow * Noble update: upstream stable patchset 2025-02-03 (LP: #2097301) // CVE-2024-50047 - smb: client: fix UAF in async decryption * Noble update: upstream stable patchset 2025-02-03 (LP: #2097301) // CVE-2024-50048 - fbcon: Fix a NULL pointer dereference issue in fbcon_putcs * Noble update: upstream stable patchset 2025-02-03 (LP: #2097301) // CVE-2024-50049 - drm/amd/display: Check null pointer before dereferencing se * Noble update: upstream stable patchset 2025-02-03 (LP: #2097301) // CVE-2024-50090 - drm/xe/oa: Fix overflow in oa batch buffer * Noble update: upstream stable patchset 2025-02-03 (LP: #2097301) // CVE-2024-50183 - scsi: lpfc: Ensure DA_ID handling completion before deleting an NPIV instance * Noble update: upstream stable patchset 2025-02-03 (LP: #2097301) // CVE-2024-50055 - driver core: bus: Fix double free in driver API bus_register() * Noble update: upstream stable patchset 2025-02-03 (LP: #2097301) // CVE-2024-50056 - usb: gadget: uvc: Fix ERR_PTR dereference in uvc_v4l2.c * Noble update: upstream stable patchset 2025-02-03 (LP: #2097301) // CVE-2024-50184 - virtio_pmem: Check device status before requesting flush * Noble update: upstream stable patchset 2025-02-03 (LP: #2097301) // CVE-2024-50057 - usb: typec: tipd: Free IRQ only if it was requested before * Noble update: upstream stable patchset 2025-02-03 (LP: #2097301) // CVE-2024-50058 - serial: protect uart_port_dtr_rts() in uart_shutdown() too * Noble update: upstream stable patchset 2025-02-03 (LP: #2097301) // CVE-2024-50181 - clk: imx: Remove CLK_SET_PARENT_GATE for DRAM mux for i.MX7D * Noble update: upstream stable patchset 2025-02-03 (LP: #2097301) // CVE-2024-50059 - ntb: ntb_hw_switchtec: Fix use after free vulnerability in switchtec_ntb_remove due to race condition * Noble update: upstream stable patchset 2025-02-03 (LP: #2097301) // CVE-2024-50060 - io_uring: check if we need to reschedule during overflow flush * Noble update: upstream stable patchset 2025-02-03 (LP: #2097301) // CVE-2024-50061 - i3c: master: cdns: Fix use after free vulnerability in cdns_i3c_master Driver Due to Race Condition * Noble update: upstream stable patchset 2025-02-03 (LP: #2097301) // CVE-2024-50062 - RDMA/rtrs-srv: Avoid null pointer deref during path establishment * Noble update: upstream stable patchset 2025-02-03 (LP: #2097301) // CVE-2024-50095 - RDMA/mad: Improve handling of timed out WRs of mad agent * Noble update: upstream stable patchset 2025-02-03 (LP: #2097301) // CVE-2024-50063 - bpf: Prevent tail call between progs attached to different hooks * Noble update: upstream stable patchset 2025-02-03 (LP: #2097301) // CVE-2024-50191 - ext4: don't set SB_RDONLY after filesystem errors * Noble update: upstream stable patchset 2025-02-03 (LP: #2097301) // CVE-2024-50064 - zram: free secondary algorithms names * Noble update: upstream stable patchset 2025-02-03 (LP: #2097301) // CVE-2024-50089 - unicode: Don't special case ignorable code points * Noble update: upstream stable patchset 2025-02-03 (LP: #2097301) // CVE-2024-49865 - drm/xe/vm: move xa_alloc to prevent UAF * Noble update: upstream stable patchset 2025-02-03 (LP: #2097301) // CVE-2024-49968 - ext4: filesystems without casefold feature cannot be mounted with siphash * Noble update: upstream stable patchset 2025-02-03 (LP: #2097301) // CVE-2024-49893 - drm/amd/display: Check stream_status before it is used * Noble update: upstream stable patchset 2025-02-03 (LP: #2097301) // CVE-2024-49972 - drm/amd/display: Deallocate DML memory if allocation fails * Noble update: upstream stable patchset 2025-02-03 (LP: #2097301) // CVE-2024-49914 - drm/amd/display: Add null check for pipe_ctx->plane_state in dcn20_program_pipe * Noble update: upstream stable patchset 2025-02-03 (LP: #2097301) // CVE-2024-49920 - drm/amd/display: Check null pointers before multiple uses * Noble update: upstream stable patchset 2025-02-03 (LP: #2097301) // CVE-2024-49921 - drm/amd/display: Check null pointers before used * Noble update: upstream stable patchset 2025-02-03 (LP: #2097301) // CVE-2024-50009 - cpufreq: amd-pstate: add check for cpufreq_cpu_get's return value * Noble update: upstream stable patchset 2025-02-03 (LP: #2097301) // CVE-2024-47726 - f2fs: fix to wait dio completion * Noble update: upstream stable patchset 2025-02-03 (LP: #2097301) // CVE-2024-47711 - af_unix: Don't return OOB skb in manage_oob(). * CVE-2024-53170 - block: fix uaf for flush rq while iterating tags * CVE-2024-50148 - Bluetooth: bnep: fix wild-memory-access in proto_unregister * CVE-2024-50134 - drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLA * CVE-2024-50171 - net: systemport: fix potential memory leak in bcm_sysport_xmit() * CVE-2024-50229 - nilfs2: fix potential deadlock with newly created symlinks * CVE-2024-50233 - staging: iio: frequency: ad9832: fix division by zero in ad9832_calc_freqreg() * [Lenovo Ubuntu 24.04 Bug] dmesg show "spi-nor: probe of spi0.0 failed with error -95" (LP: #2070339) - mtd: core: Don't fail mtd_otp_nvmem_add() if OTP is unsupported - mtd: core: Align comment with an action in mtd_otp_nvmem_add() * python perf module missing in realtime kernel (LP: #2089411) - [Packaging] linux-tools: Add missing python perf symlink - [Packaging] linux-tools: Fix python perf library packaging - [Packaging] linux-tools: Fall back to old python perf path * CVE-2024-53104 - media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format -- Stefan Bader <stefan.bader@canonical.com> Wed, 19 Feb 2025 12:04:47 +0100 linux-hwe-6.8 (6.8.0-55.57~22.04.1) jammy; urgency=medium * jammy/linux-hwe-6.8: 6.8.0-55.57~22.04.1 -proposed tracker (LP: #2097980) [ Ubuntu: 6.8.0-55.57 ] * noble/linux: 6.8.0-55.57 -proposed tracker (LP: #2097981) * python perf module missing in realtime kernel (LP: #2089411) - [Packaging] linux-tools: Add missing python perf symlink - [Packaging] linux-tools: Fix python perf library packaging - [Packaging] linux-tools: Fall back to old python perf path * CVE-2024-53104 - media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format -- Stefan Bader <stefan.bader@canonical.com> Mon, 17 Feb 2025 11:37:44 +0100 linux-hwe-6.8 (6.8.0-54.56~22.04.1) jammy; urgency=medium [ Ubuntu: 6.8.0-54.56 ] * CVE-2025-0927 - SAUCE: fs: hfs/hfsplus: add key_len boundary check to hfs_bnode_read_key -- Manuel Diewald <manuel.diewald@canonical.com> Sat, 08 Feb 2025 01:51:27 +0100 linux-hwe-6.8 (6.8.0-53.55~22.04.1) jammy; urgency=medium * jammy/linux-hwe-6.8: 6.8.0-53.55~22.04.1 -proposed tracker (LP: #2093676) * Packaging resync (LP: #1786013) - [Packaging] debian.hwe-6.8/dkms-versions -- update from kernel-versions (main/2025.01.13) * Add list of source files to linux-buildinfo (LP: #2086606) - [Packaging] hwe-6.8: Add dwarfdump dependency [ Ubuntu: 6.8.0-53.55 ] * noble/linux: 6.8.0-53.55 -proposed tracker (LP: #2093677) * Packaging resync (LP: #1786013) - [Packaging] debian.master/dkms-versions -- update from kernel-versions (main/2025.01.13) * generate and ship vmlinux.h to allow packages to build BPF CO-RE (LP: #2050083) - [Packaging] add linux-bpf-dev package - [Packaging] do not attempt to generate BTF header on armhf * Unable to boot as a guest on VMware ESX (LP: #2091941) - ptp/vmware: Use VMware hypercall API - input/vmmouse: Use VMware hypercall API - drm/vmwgfx: Use VMware hypercall API - x86/vmware: Use VMware hypercall API - x86/vmware: Correct macro names - x86/vmware: Remove legacy VMWARE_HYPERCALL* macros * When /dev/vmbus/hv_kvp is not present, disable hv-kvp-daemon (LP: #2091744) - [Packaging] disable hv-kvp-daemon if needed * Backport "netkit: Add option for scrubbing skb meta data" to 6.8 (LP: #2091184) - netkit: Add option for scrubbing skb meta data * KVM: Cache CPUID at KVM.ko module init to reduce latency of VM-Enter and VM- Exit (LP: #2093146) - KVM: x86: Cache CPUID.0xD XSTATE offsets+sizes during module init * [SRU] add support of QCA BT 0489:e0fc (LP: #2085406) - Bluetooth: btusb: add Foxconn 0xe0fc for Qualcomm WCN785x * ice driver RTNL assertion failed warning on shutdown/reboot (LP: #2091107) - ice: Remove and readd netdev during devlink reload * vfio_pci soft lockup on VM start while using PCIe passthrough (LP: #2089306) - SAUCE: Revert "vfio/pci: Insert full vma on mmap'd MMIO fault" - SAUCE: Revert "vfio/pci: Use unmap_mapping_range()" * [SRU] Fix error of resume on rtl8168fp (LP: #2087507) - r8169: avoid unsolicited interrupts * [SRU] power: intel_pstate: HWP interrupt support for maximum ratio changed (LP: #2090852) - x86/cpufeatures: Add HWP highest perf change feature flag - cpufreq: intel_pstate: Support highest performance change interrupt * Noble update: upstream stable patchset 2024-11-29 (LP: #2089884) - static_call: Handle module init failure correctly in static_call_del_module() - static_call: Replace pointless WARN_ON() in static_call_module_notify() - jump_label: Simplify and clarify static_key_fast_inc_cpus_locked() - jump_label: Fix static_key_slow_dec() yet again - scsi: st: Fix input/output error on empty drive reset - scsi: pm8001: Do not overwrite PCI queue mapping - drm/amdgpu: Fix get each xcp macro - mailbox: rockchip: fix a typo in module autoloading - mailbox: bcm2835: Fix timeout during suspend mode - ceph: remove the incorrect Fw reference check when dirtying pages - ieee802154: Fix build error - net: sparx5: Fix invalid timestamps - net/mlx5: Fix error path in multi-packet WQE transmit - net/mlx5: Added cond_resched() to crdump collection - net/mlx5e: Fix NULL deref in mlx5e_tir_builder_alloc() - net/mlx5e: Fix crash caused by calling __xfrm_state_delete() twice - netfilter: uapi: NFTA_FLOWTABLE_HOOK is NLA_NESTED - net: ieee802154: mcr20a: Use IRQF_NO_AUTOEN flag in request_irq() - net: wwan: qcom_bam_dmux: Fix missing pm_runtime_disable() - selftests: netfilter: Fix nft_audit.sh for newer nft binaries - netfilter: nf_tables: prevent nf_skb_duplicated corruption - Bluetooth: MGMT: Fix possible crash on mgmt_index_removed - Bluetooth: MGMT: Fix possible deadlocks - Bluetooth: L2CAP: Fix uaf in l2cap_connect - Bluetooth: hci_core: Fix calling mgmt_device_connected - Bluetooth: btmrvl: Use IRQF_NO_AUTOEN flag in request_irq() - net: Add netif_get_gro_max_size helper for GRO - net: Fix gso_features_check to check for both dev->gso_{ipv4_,}max_size - net: ethernet: lantiq_etop: fix memory disclosure - net: fec: Restart PPS after link state change - net: fec: Reload PTP registers after link-state change - net: avoid potential underflow in qdisc_pkt_len_init() with UFO - net: add more sanity checks to qdisc_pkt_len_init() - net: stmmac: dwmac4: extend timeout for VLAN Tag register busy bit check - ipv4: ip_gre: Fix drops of small packets in ipgre_xmit - net: test for not too small csum_start in virtio_net_hdr_to_skb() - ppp: do not assume bh is held in ppp_channel_bridge_input() - iomap: constrain the file range passed to iomap_file_unshare - dt-bindings: net: xlnx,axi-ethernet: Add missing reg minItems - sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start - i2c: xiic: improve error message when transfer fails to start - i2c: xiic: Try re-initialization on bus busy timeout - loop: don't set QUEUE_FLAG_NOMERGES - ASoC: atmel: mchp-pdmc: Skip ALSA restoration if substream runtime is uninitialized - ALSA: mixer_oss: Remove some incorrect kfree_const() usages - ALSA: hda/realtek: Fix the push button function for the ALC257 - ALSA: hda/generic: Unconditionally prefer preferred_dacs pairs - ASoC: imx-card: Set card.owner to avoid a warning calltrace if SND=m - cifs: Fix buffer overflow when parsing NFS reparse points - cifs: Do not convert delimiter when parsing NFS-style symlinks - ALSA: gus: Fix some error handling paths related to get_bpos() usage - ALSA: hda/conexant: Fix conflicting quirk for System76 Pangolin - wifi: ath9k: fix possible integer overflow in ath9k_get_et_stats() - wifi: rtw89: avoid to add interface to list twice when SER - wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit - crypto: x86/sha256 - Add parentheses around macros' single arguments - crypto: octeontx - Fix authenc setkey - crypto: octeontx2 - Fix authenc setkey - ice: Adjust over allocation of memory in ice_sched_add_root_node() and ice_sched_add_node() - wifi: iwlwifi: mvm: Fix a race in scan abort flow - wifi: iwlwifi: mvm: drop wrong STA selection in TX - wifi: cfg80211: Set correct chandef when starting CAC - net/xen-netback: prevent UAF in xenvif_flush_hash() - net: hisilicon: hip04: fix OF node leak in probe() - net: hisilicon: hns_dsaf_mac: fix OF node leak in hns_mac_get_info() - net: hisilicon: hns_mdio: fix OF node leak in probe() - ACPI: PAD: fix crash in exit_round_robin() - ACPICA: Fix memory leak if acpi_ps_get_next_namepath() fails - ACPICA: Fix memory leak if acpi_ps_get_next_field() fails - e1000e: avoid failing the system during pm_suspend - wifi: mt76: mt7915: disable tx worker during tx BA session enable/disable - net: sched: consistently use rcu_replace_pointer() in taprio_change() - Bluetooth: btusb: Add Realtek RTL8852C support ID 0x0489:0xe122 - Bluetooth: btrtl: Set msft ext address filter quirk for RTL8852B - ACPI: video: Add force_vendor quirk for Panasonic Toughbook CF-18 - ACPI: CPPC: Add support for setting EPP register in FFH - blk_iocost: fix more out of bound shifts - wifi: ath12k: fix array out-of-bound access in SoC stats - wifi: ath11k: fix array out-of-bound access in SoC stats - wifi: rtw88: select WANT_DEV_COREDUMP - ACPI: EC: Do not release locks during operation region accesses - ACPICA: check null return of ACPI_ALLOCATE_ZEROED() in acpi_db_convert_to_package() - tipc: guard against string buffer overrun - net: mvpp2: Increase size of queue_name buffer - bnxt_en: Extend maximum length of version string by 1 byte - ipv4: Check !in_dev earlier for ioctl(SIOCSIFADDR). - wifi: rtw89: correct base HT rate mask for firmware - ipv4: Mask upper DSCP bits and ECN bits in NETLINK_FIB_LOOKUP family - net: atlantic: Avoid warning about potential string truncation - crypto: simd - Do not call crypto_alloc_tfm during registration - netpoll: Ensure clean state on setup failures - tcp: avoid reusing FIN_WAIT2 when trying to find port in connect() process - wifi: iwlwifi: mvm: use correct key iteration - wifi: iwlwifi: mvm: avoid NULL pointer dereference - ACPICA: iasl: handle empty connection_node - proc: add config & param to block forcing mem writes - [Config] updateconfigs to select PROC_MEM_ALWAYS_FORCE - drivers/perf: arm_spe: Use perf_allow_kernel() for permissions - can: netlink: avoid call to do_set_data_bittiming callback with stale can_priv::ctrlmode - wifi: mt76: mt7915: add dummy HW offload of IEEE 802.11 fragmentation - wifi: mt76: mt7915: hold dev->mt76.mutex while disabling tx worker - wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext() - nfp: Use IRQF_NO_AUTOEN flag in request_irq() - ALSA: usb-audio: Add input value sanity checks for standard types - x86/ioapic: Handle allocation failures gracefully - ALSA: usb-audio: Define macros for quirk table entries - ALSA: usb-audio: Replace complex quirk lines with macros - ALSA: usb-audio: Add logitech Audio profile quirk - ASoC: codecs: wsa883x: Handle reading version failure - tools/x86/kcpuid: Protect against faulty "max subleaf" values - x86/pkeys: Add PKRU as a parameter in signal handling functions - x86/pkeys: Restore altstack access in sigreturn() - x86/kexec: Add EFI config table identity mapping for kexec kernel - ALSA: asihpi: Fix potential OOB array access - ALSA: hdsp: Break infinite MIDI input flush loop - tools/nolibc: powerpc: limit stack-protector workaround to GCC - selftests/nolibc: avoid passing NULL to printf("%s") - x86/syscall: Avoid memcpy() for ia32 syscall_get_arguments() - hwmon: (nct6775) add G15CF to ASUS WMI monitoring list - fbdev: efifb: Register sysfs groups through driver core - fbdev: pxafb: Fix possible use after free in pxafb_task() - rcuscale: Provide clear error when async specified without primitives - power: reset: brcmstb: Do not go into infinite loop if reset fails - iommu/vt-d: Always reserve a domain ID for identity setup - iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count - drm/stm: Avoid use-after-free issues with crtc and plane - drm/amdgpu: disallow multiple BO_HANDLES chunks in one submit - drm/amdgpu: prevent BO_HANDLES error from being overwritten - drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer - drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream - ata: pata_serverworks: Do not use the term blacklist - ata: sata_sil: Rename sil_blacklist to sil_quirks - HID: Ignore battery for all ELAN I2C-HID devices - drm/amd/display: Handle null 'stream_status' in 'planes_changed_for_existing_stream' - drm/amd/display: Check null pointers before using dc->clk_mgr - drm/amd/display: Add null check for 'afb' in amdgpu_dm_plane_handle_cursor_update (v2) - drm/amd/display: fix double free issue during amdgpu module unload - jfs: UBSAN: shift-out-of-bounds in dbFindBits - jfs: Fix uaf in dbFreeBits - jfs: check if leafidx greater than num leaves per dmap tree - scsi: smartpqi: correct stream detection - drm/msm/adreno: Assign msm_gpu->pdev earlier to avoid nullptrs - jfs: Fix uninit-value access of new_ea in ea_buffer - drm/amdgpu: add raven1 gfxoff quirk - drm/amdgpu: enable gfxoff quirk on HP 705G4 - drm/amdkfd: Fix resource leak in criu restore queue - HID: multitouch: Add support for Thinkpad X12 Gen 2 Kbd Portfolio - platform/x86: touchscreen_dmi: add nanote-next quirk - drm/stm: ltdc: reset plane transparency after plane disable - drm/amd/display: Check stream before comparing them - drm/amd/display: Check link_res->hpo_dp_link_enc before using it - drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation - drm/amd/display: Fix index out of bounds in degamma hardware format translation - drm/amd/display: Fix index out of bounds in DCN30 color transformation - drm/amd/display: Avoid overflow assignment in link_dp_cts - drm/amd/display: Initialize get_bytes_per_element's default to 1 - drm/printer: Allow NULL data in devcoredump printer - perf,x86: avoid missing caller address in stack traces captured in uprobe - scsi: lpfc: Update PRLO handling in direct attached topology - drm/amdgpu: fix unchecked return value warning for amdgpu_gfx - perf: Fix event_function_call() locking - scsi: NCR5380: Initialize buffer for MSG IN and STATUS transfers - drm/radeon/r100: Handle unknown family in r100_cp_init_microcode() - drm/amdgpu: Block MMR_READ IOCTL in reset - drm/amdgpu/gfx9: use rlc safe mode for soft recovery - drm/amd/pm: ensure the fw_info is not null before using it - of/irq: Refer to actual buffer size in of_irq_parse_one() - powerpc/pseries: Use correct data types from pseries_hp_errorlog struct - drm/amdgpu/gfx11: use rlc safe mode for soft recovery - drm/amdgpu/gfx10: use rlc safe mode for soft recovery - platform/x86: lenovo-ymc: Ignore the 0x0 state - ksmbd: add refcnt to ksmbd_conn struct - ksmbd: fix use-after-free in SMB request handling - bpf: Make the pointer returned by iter next method valid - ext4: ext4_search_dir should return a proper error - ext4: avoid use-after-free in ext4_ext_show_leaf() - ext4: fix i_data_sem unlock order in ext4_ind_migrate() - bpftool: Fix undefined behavior caused by shifting into the sign bit - iomap: handle a post-direct I/O invalidate race in iomap_write_delalloc_release - bpftool: Fix undefined behavior in qsort(NULL, 0, ...) - spi: spi-imx: Fix pm_runtime_set_suspended() with runtime pm enabled - spi: spi-cadence: Fix pm_runtime_set_suspended() with runtime pm enabled - spi: spi-cadence: Fix missing spi_controller_is_target() check - selftest: hid: add missing run-hid-tools-tests.sh - spi: s3c64xx: fix timeout counters in flush_fifo - selftests: breakpoints: use remaining time to check if suspend succeed - accel/ivpu: Add missing MODULE_FIRMWARE metadata - spi: rpc-if: Add missing MODULE_DEVICE_TABLE - perf: Really fix event_function_call() locking - selftests: vDSO: fix vDSO name for powerpc - selftests: vDSO: fix vdso_config for powerpc - selftests: vDSO: fix vDSO symbols lookup for powerpc64 - powerpc/vdso: Flag VDSO64 entry points as functions - selftests/mm: fix charge_reserved_hugetlb.sh test - powerpc/vdso: Fix VDSO data access when running in a non-root time namespace - selftests: vDSO: fix ELF hash table entry size for s390x - selftests: vDSO: fix vdso_config for s390 - Revert "ALSA: hda: Conditionally use snooping for AMD HDMI" - platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug - i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume - i2c: qcom-geni: Use IRQF_NO_AUTOEN flag in request_irq() - i2c: xiic: Wait for TX empty to avoid missed TX NAKs - media: i2c: ar0521: Use cansleep version of gpiod_set_value() - i2c: xiic: Fix pm_runtime_set_suspended() with runtime pm enabled - i2c: designware: fix controller is holding SCL low while ENABLE bit is disabled - rust: sync: require `T: Sync` for `LockedBy::access` - ovl: fail if trusted xattrs are needed but caller lacks permission - firmware: tegra: bpmp: Drop unused mbox_client_to_bpmp() - memory: tegra186-emc: drop unused to_tegra186_emc() - dt-bindings: clock: exynos7885: Fix duplicated binding - spi: bcm63xx: Fix module autoloading - spi: bcm63xx: Fix missing pm_runtime_disable() - power: supply: hwmon: Fix missing temp1_max_alarm attribute - perf/core: Fix small negative period being ignored - parisc: Fix itlb miss handler for 64-bit programs - drm/mediatek: ovl_adaptor: Add missing of_node_put() - drm: Consistently use struct drm_mode_rect for FB_DAMAGE_CLIPS - ALSA: hda/tas2781: Add new quirk for Lenovo Y990 Laptop - ALSA: core: add isascii() check to card ID generator - ALSA: usb-audio: Add delay quirk for VIVO USB-C HEADSET - ALSA: usb-audio: Add native DSD support for Luxman D-08u - ALSA: line6: add hw monitor volume control to POD HD500X - ALSA: hda/realtek: Add quirk for Huawei MateBook 13 KLV-WX9 - ALSA: hda/realtek: Add a quirk for HP Pavilion 15z-ec200 - ext4: correct encrypted dentry name hash when not casefolded - ext4: fix slab-use-after-free in ext4_split_extent_at() - ext4: propagate errors from ext4_find_extent() in ext4_insert_range() - ext4: fix incorrect tid assumption in ext4_fc_mark_ineligible() - ext4: dax: fix overflowing extents beyond inode size when partially writing - ext4: fix incorrect tid assumption in __jbd2_log_wait_for_space() - ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free - ext4: aovid use-after-free in ext4_ext_insert_extent() - ext4: fix double brelse() the buffer of the extents path - ext4: fix timer use-after-free on failed mount - ext4: update orig_path in ext4_find_extent() - ext4: fix incorrect tid assumption in ext4_wait_for_tail_page_commit() - ext4: fix incorrect tid assumption in jbd2_journal_shrink_checkpoint_list() - ext4: fix fast commit inode enqueueing during a full journal commit - ext4: use handle to mark fc as ineligible in __track_dentry_update() - ext4: mark fc as ineligible using an handle in ext4_xattr_set() - parisc: Fix 64-bit userspace syscall path - parisc: Allow mmap(MAP_STACK) memory to automatically expand upwards - parisc: Fix stack start for ADDR_NO_RANDOMIZE personality - drm/rockchip: vop: clear DMA stop bit on RK3066 - of: address: Report error on resource bounds overflow - of/irq: Support #msi-cells=<0> in of_msi_get_domain - drm: omapdrm: Add missing check for alloc_ordered_workqueue - resource: fix region_intersects() vs add_memory_driver_managed() - jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error - jbd2: correctly compare tids with tid_geq function in jbd2_fc_begin_commit - mm: krealloc: consider spare memory for __GFP_ZERO - mm: krealloc: Fix MTE false alarm in __do_krealloc - ocfs2: fix the la space leak when unmounting an ocfs2 volume - ocfs2: fix uninit-value in ocfs2_get_block() - ocfs2: reserve space for inline xattr before attaching reflink tree - ocfs2: cancel dqi_sync_work before freeing oinfo - ocfs2: remove unreasonable unlock in ocfs2_read_blocks - ocfs2: fix null-ptr-deref when journal load failed. - ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate - arm64: fix selection of HAVE_DYNAMIC_FTRACE_WITH_ARGS - arm64: Subscribe Microsoft Azure Cobalt 100 to erratum 3194386 - riscv: define ILLEGAL_POINTER_VALUE for 64bit - [Config] updateconfigs to set ILLEGAL_POINTER_VALUE for riscv64 - exfat: fix memory leak in exfat_load_bitmap() - perf python: Disable -Wno-cast-function-type-mismatch if present on clang - perf hist: Update hist symbol when updating maps - nfsd: fix delegation_blocked() to block correctly for at least 30 seconds - nfsd: map the EBADMSG to nfserr_io to avoid warning - NFSD: Fix NFSv4's PUTPUBFH operation - i3c: master: svc: Fix use after free vulnerability in svc_i3c_master Driver Due to Race Condition - RDMA/mana_ib: use the correct page size for mapping user-mode doorbell page - riscv: Fix kernel stack size when KASAN is enabled - aoe: fix the potential use-after-free problem in more places - media: ov5675: Fix power on/off delay timings - clk: rockchip: fix error for unknown clocks - remoteproc: k3-r5: Fix error handling when power-up failed - clk: qcom: dispcc-sm8250: use CLK_SET_RATE_PARENT for branch clocks - media: sun4i_csi: Implement link validate for sun4i_csi subdev - clk: qcom: gcc-sm8450: Do not turn off PCIe GDSCs during gdsc_disable() - media: uapi/linux/cec.h: cec_msg_set_reply_to: zero flags - clk: qcom: clk-rpmh: Fix overflow in BCM vote - clk: samsung: exynos7885: Update CLKS_NR_FSYS after bindings fix - clk: qcom: gcc-sm8150: De-register gcc_cpuss_ahb_clk_src - media: venus: fix use after free bug in venus_remove due to race condition - clk: qcom: gcc-sm8250: Do not turn off PCIe GDSCs during gdsc_disable() - media: qcom: camss: Remove use_count guard in stop_streaming - media: qcom: camss: Fix ordering of pm_runtime_enable - clk: qcom: gcc-sc8180x: Fix the sdcc2 and sdcc4 clocks freq table - clk: qcom: clk-alpha-pll: Fix CAL_L_VAL override for LUCID EVO PLL - smb: client: use actual path when queryfs - smb3: fix incorrect mode displayed for read-only files - iio: magnetometer: ak8975: Fix reading for ak099xx sensors - vrf: revert "vrf: Remove unnecessary RCU-bh critical section" - gso: fix udp gso fraglist segmentation after pull from frag_list - tomoyo: fallback to realpath if symlink's pathname does not exist - net: stmmac: Fix zero-division error when disabling tc cbs - rtc: at91sam9: fix OF node leak in probe() error path - Input: adp5589-keys - fix NULL pointer dereference - Input: adp5589-keys - fix adp5589_gpio_get_value() - cachefiles: fix dentry leak in cachefiles_open_file() - btrfs: fix a NULL pointer dereference when failed to start a new trasacntion - btrfs: send: fix invalid clone operation for file that got its size decreased - btrfs: wait for fixup workers before stopping cleaner kthread during umount - cpufreq: Avoid a bad reference count on CPU node - gpio: davinci: fix lazy disable - net: pcs: xpcs: fix the wrong register that was written back - Bluetooth: hci_event: Align BR/EDR JUST_WORKS paring with LE - mac802154: Fix potential RCU dereference issue in mac802154_scan_worker - ceph: fix cap ref leak via netfs init_request - tracing/hwlat: Fix a race during cpuhp processing - tracing/timerlat: Drop interface_lock in stop_kthread() - tracing/timerlat: Fix a race during cpuhp processing - tracing/timerlat: Fix duplicated kthread creation due to CPU online/offline - rtla: Fix the help text in osnoise and timerlat top tools - drm/i915/gem: fix bitwise and logical AND mixup - drm/sched: Add locking to drm_sched_entity_modify_sched - drm/amd/display: Add HDR workaround for specific eDP - cpufreq: intel_pstate: Make hwp_notify_lock a raw spinlock - kconfig: qconf: fix buffer overflow in debug links - platform/x86: x86-android-tablets: Fix use after free on platform_device_register() errors - i2c: core: Lock address during client device instantiation - i2c: synquacer: Remove a clk reference from struct synquacer_i2c - i2c: synquacer: Deal with optional PCLK correctly - arm64: cputype: Add Neoverse-N3 definitions - arm64: errata: Expand speculative SSBS workaround once more - io_uring/net: harden multishot termination case for recv - uprobes: fix kernel info leak via "[uprobes]" vma - mm: z3fold: deprecate CONFIG_Z3FOLD - [Config] updateconfigs for deprecated CONFIG_Z3FOLD - drm/amd/display: Allow backlight to go below `AMDGPU_DM_DEFAULT_MIN_BACKLIGHT` - build-id: require program headers to be right after ELF header - lib/buildid: harden build ID parsing logic - sched: psi: fix bogus pressure spikes from aggregation race - net: mana: Enable MANA driver on ARM64 with 4K page size - net: mana: Add support for page sizes other than 4KB on ARM64 - [Config] updateconfigs for MICROSOFT_MANA - RDMA/mana_ib: use the correct page table index based on hardware page size - media: imx335: Fix reset-gpio handling - remoteproc: k3-r5: Acquire mailbox handle during probe routine - remoteproc: k3-r5: Delay notification of wakeup event - dt-bindings: clock: qcom: Add missing UFS QREF clocks - dt-bindings: clock: qcom: Add GPLL9 support on gcc-sc8180x - iio: pressure: bmp280: Improve indentation and line wrapping - iio: pressure: bmp280: Use BME prefix for BME280 specifics - iio: pressure: bmp280: Fix regmap for BMP280 device - iio: pressure: bmp280: Fix waiting time for BMP3xx configuration - r8169: Fix spelling mistake: "tx_underun" -> "tx_underrun" - r8169: add tally counter fields added with RTL8125 - clk: qcom: gcc-sc8180x: Add GPLL9 support - ACPI: battery: Simplify battery hook locking - ACPI: battery: Fix possible crash when unregistering a battery hook - btrfs: drop the backref cache during relocation if we commit - drm/rockchip: vop: enable VOP_FEATURE_INTERNAL_RGB on RK3066 - rxrpc: Fix a race between socket set up and I/O thread creation - vhost/scsi: null-ptr-dereference in vhost_scsi_get_req() - crypto: octeontx* - Select CRYPTO_AUTHENC - drm/amd/display: Revert Avoid overflow assignment - perf report: Fix segfault when 'sym' sort key is not used - drm/amd/display: enable_hpo_dp_link_output: Check link_res->hpo_dp_link_enc before using it - Revert "ubifs: ubifs_symlink: Fix memleak of inode->i_link in error path" - perf python: Allow checking for the existence of warning options in clang - drm/i915/dp: Fix AUX IO power enabling for eDP PSR - drm/amd/display: handle nulled pipe context in DCE110's set_drr() - selftests: netfilter: Add missing return value - afs: Fix the setting of the server responding flag - net: dsa: improve shutdown sequence - bridge: mcast: Fail MDB get request on empty entry - net/ncsi: Disable the ncsi work before freeing the associated structure - drm/xe: Restore pci state upon resume - drm/xe: Resume TDR after GT reset - drm/xe: Prevent null pointer access in xe_migrate_copy - fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name - ACPI: resource: Skip IRQ override on Asus Vivobook Go E1404GAB - nvme-keyring: restrict match length for version '1' identifiers - nvme-tcp: sanitize TLS key handling - nvme-fabrics: typo in nvmf_parse_key() - nvme-tcp: check for invalidated or revoked key - net: fec: don't save PTP state if PTP is unsupported - wifi: mac80211: fix RCU list iterations - netdev-genl: Set extack and fix error on napi-get - block: fix integer overflow in BLKSECDISCARD - arm64: trans_pgd: mark PTEs entries as valid to avoid dead kexec() - net: phy: Check for read errors in SIOCGMIIREG - wifi: rtw89: avoid reading out of bounds when loading TX power FW elements - x86/bugs: Add missing NO_SSB flag - x86/bugs: Fix handling when SRSO mitigation is disabled - net: napi: Prevent overflow of napi_defer_hard_irqs - crypto: hisilicon - fix missed error branch - ALSA: usb-audio: Add quirk for RME Digiface USB - ALSA: usb-audio: Add mixer quirk for RME Digiface USB - ALSA: control: Use automatic cleanup of kfree() - ALSA: control: Fix unannotated kfree() cleanup - ALSA: control: Use guard() for locking - ALSA: control: Take power_ref lock primarily - x86/mm/ident_map: Use gbpages only where full GB page should be mapped. - ASoC: Intel: boards: always check the result of acpi_dev_get_first_match_dev() - rcu-tasks: Add data to eliminate RCU-tasks/do_exit() deadlocks - rcu-tasks: Initialize data to eliminate RCU-tasks/do_exit() deadlocks - rcu-tasks: Fix access non-existent percpu rtpcp variable in rcu_tasks_need_gpcb() - pmdomain: core: Don't hold the genpd-lock when calling dev_pm_domain_set() - iommu/vt-d: Unconditionally flush device TLB for pasid table updates - iommu/arm-smmu-v3: Do not use devm for the cd table allocations - drm/amd/display: Pass non-null to dcn20_validate_apply_pipe_split_flags - drm/amd/display: Check null pointers before using them - drm/amd/display: Add null check for head_pipe in dcn201_acquire_free_pipe_for_layer - drm/amd/display: Add null check for head_pipe in dcn32_acquire_idle_pipe_for_head_pipe_in_layer - drm/amd/display: Add NULL check for clk_mgr and clk_mgr->funcs in dcn30_init_hw - drm/amd/display: Add NULL check for clk_mgr in dcn32_init_hw - drm/amd/display: Use gpuvm_min_page_size_kbytes for DML2 surfaces - scsi: smartpqi: Add new controller PCI IDs - drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func - drm/amd/display: Add NULL check for function pointer in dcn32_set_output_transfer_func - scsi: smartpqi: add new controller PCI IDs - drm/amd/display: Check null-initialized variables - drm/amd/display: Check phantom_stream before it is used - drm/amdgpu/gfx9: properly handle error ints on all pipes - scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths - scsi: lpfc: Fix unsolicited FLOGI kref imbalance when in direct attached topology - drm/amdgpu: check PS, WS index - drm/amdgpu: fix wrong sizeof argument - drm/amdgpu: fix unchecked return value warning for amdgpu_atombios - drm/amdgpu/gfx11: enter safe mode before touching CP_INT_CNTL - drm/xe: Invert page fault queue head / tail - drm/xe: Add helper macro to loop each DSS - drm/xe: fix multicast support for Xe_LP platforms - drm/xe: Use topology to determine page fault queue size - drm/xe: Drop warn on xe_guc_pc_gucrc_disable in guc pc fini - ovl: fsync after metadata copy-up - HID: i2c-hid: ensure various commands do not interfere with each other - platform/mellanox: mlxbf-pmc: Replace uintN_t with kernel-style types - platform/mellanox: mlxbf-pmc: Cleanup signed/unsigned mix-up - platform/mellanox: mlxbf-pmc: fix signedness bugs - platform/mellanox: mlxbf-pmc: fix lockdep warning - bpf: Fix a sdiv overflow issue - ALSA: control: Fix power_ref lock order for compat code, too - perf callchain: Fix stitch LBR memory leaks - drm/xe: fixup xe_alloc_pf_queue - drm/xe: Fix memory leak on xe_alloc_pf_queue failure - nvme-tcp: fix link failure for TCP auth - f2fs: fix zoned block device information initialization - f2fs: add write priority option based on zone UFS - f2fs: make BG GC more aggressive for zoned devices - f2fs: introduce migration_window_granularity - f2fs: increase BG GC migration window granularity when boosted for zoned devices - f2fs: do FG_GC when GC boosting is required for zoned devices - f2fs: forcibly migrate to secure space for zoned device file pinning - mm, slub: avoid zeroing kmalloc redzone - drm/v3d: Prevent out of bounds access in performance query extensions - ext4: fix access to uninitialised lock in fc replay path - ext4: fix off by one issue in alloc_flex_gd() - scripts/gdb: add iteration function for rbtree - scripts/gdb: fix lx-mounts command error - sched/deadline: Comment sched_dl_entity::dl_server variable - sched/core: Add clearing of ->dl_server in put_prev_task_balance() - sched/core: Clear prev->dl_server in CFS pick fast path - drivers/perf: riscv: Align errno for unsupported perf event - ACPI: resource: Remove duplicate Asus E1504GAB IRQ override - ACPI: resource: Loosen the Asus E1404GAB DMI match to also cover the E1404GA - ACPI: resource: Add Asus Vivobook X1704VAP to irq1_level_low_skip_override[] - ACPI: resource: Add Asus ExpertBook B2502CVA to irq1_level_low_skip_override[] - firmware/sysfb: Disable sysfb for firmware buffers with unknown parent - close_range(): fix the logics in descriptor table trimming - drm/sched: Fix dynamic job-flow control race - drm/sched: Always wake up correct scheduler in drm_sched_entity_push_job - drm/sched: Always increment correct scheduler score - drm/xe: Delete unused GuC submission_state.suspend - drm/xe: Use ordered wq for preempt fence waiting - drm/xe: fix UAF around queue destruction - sunrpc: change sp_nrthreads from atomic_t to unsigned int. - NFSD: Async COPY result needs to return a write verifier - NFSD: Limit the number of concurrent async COPY operations - NFSD: Initialize struct nfsd4_copy earlier - NFSD: Never decrement pending_async_copies on error - drm/sched: revert "Always increment correct scheduler score" - ALSA: control: Fix leftover snd_power_unref() - Upstream stable to v6.6.55, v6.10.14 * By always inlining _compound_head(), clone() sees 3%+ performance increase (LP: #2089327) - mm: always inline _compound_head() with CONFIG_HUGETLB_PAGE_OPTIMIZE_VMEMMAP=y * Random flickering with Intel i915 (Comet Lake and Kaby Lake) on Linux 6.8+ (LP: #2086587) - SAUCE: iommu/intel: disable DMAR for KBL and CML integrated gfx * Add list of source files to linux-buildinfo (LP: #2086606) - [Packaging] Sort build dependencies alphabetically - [Packaging] Add list of used source files to buildinfo package * UFS: uspi->s_3apb UBSAN: shift-out-of-bounds (LP: #2087853) - ufs: ufs_sb_private_info: remove unused s_{2, 3}apb fields * Mute/mic LEDs don't function on HP EliteBook 645 G10 (LP: #2087983) - ALSA: hda/realtek: fix mute/micmute LEDs for a HP EliteBook 645 G10 * Noble update: upstream stable patchset 2024-11-22 (LP: #2089340) - EDAC/synopsys: Fix ECC status and IRQ control race condition - EDAC/synopsys: Fix error injection on Zynq UltraScale+ - wifi: rtw88: always wait for both firmware loading attempts - crypto: xor - fix template benchmarking - ACPI: PMIC: Remove unneeded check in tps68470_pmic_opregion_probe() - wifi: brcmfmac: export firmware interface functions - wifi: brcmfmac: introducing fwil query functions - wifi: ath9k: Remove error checks when creating debugfs entries - wifi: ath12k: fix BSS chan info request WMI command - wifi: ath12k: match WMI BSS chan info structure with firmware definition - wifi: ath12k: fix invalid AMPDU factor calculation in ath12k_peer_assoc_h_he() - net: stmmac: dwmac-loongson: Init ref and PTP clocks rate - arm64: signal: Fix some under-bracketed UAPI macros - wifi: rtw88: remove CPT execution branch never used - RISC-V: KVM: Fix sbiret init before forwarding to userspace - RISC-V: KVM: Allow legacy PMU access from guest - RISC-V: KVM: Fix to allow hpmcounter31 from the guest - mount: handle OOM on mnt_warn_timestamp_expiry - ARM: 9410/1: vfp: Use asm volatile in fmrx/fmxr macros - powercap: intel_rapl: Fix off by one in get_rpi() - kselftest/arm64: signal: fix/refactor SVE vector length enumeration - drivers/perf: Fix ali_drw_pmu driver interrupt status clearing - wifi: mac80211: don't use rate mask for offchannel TX either - wifi: iwlwifi: remove AX101, AX201 and AX203 support from LNL - wifi: iwlwifi: config: label 'gl' devices as discrete - wifi: iwlwifi: mvm: increase the time between ranging measurements - padata: Honor the caller's alignment in case of chunk_size 0 - drivers/perf: hisi_pcie: Record hardware counts correctly - drivers/perf: hisi_pcie: Fix TLP headers bandwidth counting - kselftest/arm64: Actually test SME vector length changes via sigreturn - can: j1939: use correct function name in comment - ACPI: CPPC: Fix MASK_VAL() usage - netfilter: nf_tables: elements with timeout below CONFIG_HZ never expire - netfilter: nf_tables: reject element expiration with no timeout - netfilter: nf_tables: reject expiration higher than timeout - netfilter: nf_tables: remove annotation to access set timeout while holding lock - perf/arm-cmn: Improve debugfs pretty-printing for large configs - perf/arm-cmn: Refactor node ID handling. Again. - perf/arm-cmn: Fix CCLA register offset - perf/arm-cmn: Ensure dtm_idx is big enough - cpufreq: ti-cpufreq: Introduce quirks to handle syscon fails appropriately - wifi: mt76: mt7915: fix oops on non-dbdc mt7986 - wifi: mt76: mt7996: use hweight16 to get correct tx antenna - wifi: mt76: mt7996: fix traffic delay when switching back to working channel - wifi: mt76: mt7996: fix wmm set of station interface to 3 - wifi: mt76: mt7996: fix HE and EHT beamforming capabilities - wifi: mt76: mt7996: fix EHT beamforming capability check - x86/sgx: Fix deadlock in SGX NUMA node search - pm:cpupower: Add missing powercap_set_enabled() stub function - crypto: hisilicon/hpre - mask cluster timeout error - crypto: hisilicon/qm - reset device before enabling it - crypto: hisilicon/qm - inject error before stopping queue - wifi: mt76: mt7603: fix mixed declarations and code - wifi: cfg80211: fix UBSAN noise in cfg80211_wext_siwscan() - wifi: mt76: mt7915: fix rx filter setting for bfee functionality - wifi: mt76: mt7996: ensure 4-byte alignment for beacon commands - wifi: mt76: mt7996: fix uninitialized TLV data - wifi: cfg80211: fix two more possible UBSAN-detected off-by-one errors - wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop() - wifi: wilc1000: fix potential RCU dereference issue in wilc_parse_join_bss_param - Bluetooth: hci_core: Fix sending MGMT_EV_CONNECT_FAILED - Bluetooth: hci_sync: Ignore errors from HCI_OP_REMOTE_NAME_REQ_CANCEL - sock_map: Add a cond_resched() in sock_hash_free() - can: bcm: Clear bo->bcm_proc_read after remove_proc_entry(). - can: m_can: enable NAPI before enabling interrupts - can: m_can: m_can_close(): stop clocks after device has been shut down - Bluetooth: btusb: Fix not handling ZPL/short-transfer - bareudp: Pull inner IP header in bareudp_udp_encap_recv(). - bareudp: Pull inner IP header on xmit. - net: enetc: Use IRQF_NO_AUTOEN flag in request_irq() - net: ipv6: rpl_iptunnel: Fix memory leak in rpl_input - net: tipc: avoid possible garbage value - ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev() - ublk: move zone report data out of request pdu - nbd: fix race between timeout and normal completion - block, bfq: fix possible UAF for bfqq->bic with merge chain - block, bfq: choose the last bfqq from merge chain in bfq_setup_cooperator() - block, bfq: don't break merge chain in bfq_split_bfqq() - cachefiles: Fix non-taking of sb_writers around set/removexattr - erofs: fix incorrect symlink detection in fast symlink - block, bfq: fix uaf for accessing waker_bfqq after splitting - block, bfq: fix procress reference leakage for bfqq in merge chain - io_uring/io-wq: do not allow pinning outside of cpuset - io_uring/io-wq: inherit cpuset of cgroup in io worker - block: fix potential invalid pointer dereference in blk_add_partition - spi: ppc4xx: handle irq_of_parse_and_map() errors - arm64: dts: exynos: exynos7885-jackpotlte: Correct RAM amount to 4GB - arm64: dts: mediatek: mt8186: Fix supported-hw mask for GPU OPPs - firmware: arm_scmi: Fix double free in OPTEE transport - spi: ppc4xx: Avoid returning 0 when failed to parse and map IRQ - regulator: Return actual error in of_regulator_bulk_get_all() - arm64: dts: renesas: r9a07g043u: Correct GICD and GICR sizes - arm64: dts: renesas: r9a07g054: Correct GICD and GICR sizes - arm64: dts: renesas: r9a07g044: Correct GICD and GICR sizes - ARM: dts: microchip: sam9x60: Fix rtc/rtt clocks - arm64: dts: rockchip: Correct vendor prefix for Hardkernel ODROID-M1 - arm64: dts: ti: k3-j721e-sk: Fix reversed C6x carveout locations - arm64: dts: ti: k3-j721e-beagleboneai64: Fix reversed C6x carveout locations - spi: bcmbca-hsspi: Fix missing pm_runtime_disable() - ARM: dts: microchip: sama7g5: Fix RTT clock - ARM: dts: imx7d-zii-rmu2: fix Ethernet PHY pinctrl property - ARM: versatile: fix OF node leak in CPUs prepare - reset: berlin: fix OF node leak in probe() error path - reset: k210: fix OF node leak in probe() error path - clocksource/drivers/qcom: Add missing iounmap() on errors in msm_dt_timer_init() - arm64: dts: mediatek: mt8195: Correct clock order for dp_intf* - x86/mm: Use IPIs to synchronize LAM enablement - ASoC: rt5682s: Return devm_of_clk_add_hw_provider to transfer the error - ASoC: tas2781: remove unused acpi_subysystem_id - ASoC: tas2781: Use of_property_read_reg() - ASoC: tas2781-i2c: Drop weird GPIO code - ASoC: tas2781-i2c: Get the right GPIO line - selftests/ftrace: Add required dependency for kprobe tests - ALSA: hda: cs35l41: fix module autoloading - m68k: Fix kernel_clone_args.flags in m68k_clone() - ASoC: loongson: fix error release - hwmon: (max16065) Fix overflows seen when writing limits - hwmon: (max16065) Remove use of i2c_match_id() - hwmon: (max16065) Fix alarm attributes - mtd: slram: insert break after errors in parsing the map - hwmon: (ntc_thermistor) fix module autoloading - power: supply: axp20x_battery: Remove design from min and max voltage - power: supply: max17042_battery: Fix SOC threshold calc w/ no current sense - fbdev: hpfb: Fix an error handling path in hpfb_dio_probe() - iommu/amd: Do not set the D bit on AMD v2 table entries - mtd: powernv: Add check devm_kasprintf() returned value - rcu/nocb: Fix RT throttling hrtimer armed from offline CPU - mtd: rawnand: mtk: Use for_each_child_of_node_scoped() - mtd: rawnand: mtk: Factorize out the logic cleaning mtk chips - mtd: rawnand: mtk: Fix init error path - iommu/arm-smmu-qcom: hide last LPASS SMMU context bank from linux - iommu/arm-smmu-qcom: Work around SDM845 Adreno SMMU w/ 16K pages - iommu/arm-smmu-qcom: apply num_context_bank fixes for SDM630 / SDM660 - pmdomain: core: Harden inter-column space in debug summary - drm/stm: Fix an error handling path in stm_drm_platform_probe() - drm/stm: ltdc: check memory returned by devm_kzalloc() - drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func - drm/amdgpu: properly handle vbios fake edid sizing - drm/radeon: properly handle vbios fake edid sizing - scsi: smartpqi: revert propagate-the-multipath-failure-to-SML-quickly - scsi: NCR5380: Check for phase match during PDMA fixup - drm/amd/amdgpu: Properly tune the size of struct - drm/rockchip: vop: Allow 4096px width scaling - drm/rockchip: dw_hdmi: Fix reading EDID when using a forced mode - drm/radeon/evergreen_cs: fix int overflow errors in cs track offsets - drm/bridge: lontium-lt8912b: Validate mode in drm_bridge_funcs::mode_valid() - drm/vc4: hdmi: Handle error case of pm_runtime_resume_and_get - scsi: elx: libefc: Fix potential use after free in efc_nport_vport_del() - jfs: fix out-of-bounds in dbNextAG() and diAlloc() - drm/mediatek: Fix missing configuration flags in mtk_crtc_ddp_config() - drm/mediatek: Use spin_lock_irqsave() for CRTC event lock - powerpc/8xx: Fix initial memory mapping - powerpc/8xx: Fix kernel vs user address comparison - powerpc/vdso: Inconditionally use CFUNC macro - drm/msm: Fix incorrect file name output in adreno_request_fw() - drm/msm/a5xx: disable preemption in submits by default - drm/msm/a5xx: properly clear preemption records on resume - drm/msm/a5xx: fix races in preemption evaluation stage - drm/msm/a5xx: workaround early ring-buffer emptiness check - ipmi: docs: don't advertise deprecated sysfs entries - drm/msm/dsi: correct programming sequence for SM8350 / SM8450 - drm/msm: fix %s null argument error - drivers:drm:exynos_drm_gsc:Fix wrong assignment in gsc_bind() - xen: use correct end address of kernel for conflict checking - HID: wacom: Support sequence numbers smaller than 16-bit - HID: wacom: Do not warn about dropped packets for first packet - ata: libata: Clear DID_TIME_OUT for ATA PT commands with sense data - minmax: avoid overly complex min()/max() macro arguments in xen - xen: introduce generic helper checking for memory map conflicts - xen: move max_pfn in xen_memory_setup() out of function scope - xen: add capability to remap non-RAM pages to different PFNs - xen: tolerate ACPI NVS memory overlapping with Xen allocated memory - xen/swiotlb: add alignment check for dma buffers - xen/swiotlb: fix allocated size - tpm: Clean up TPM space after command failure - sched/fair: Make SCHED_IDLE entity be preempted in strict hierarchy - selftests/bpf: Workaround strict bpf_lsm return value check. - selftests/bpf: Fix error linking uprobe_multi on mips - bpf: Use -Wno-error in certain tests when building with GCC - bpf: Disable some `attribute ignored' warnings in GCC - bpf: Temporarily define BPF_NO_PRESEVE_ACCESS_INDEX for GCC - selftests/bpf: Add CFLAGS per source file and runner - selftests/bpf: Fix wrong binary in Makefile log output - tools/runqslower: Fix LDFLAGS and add LDLIBS support - selftests/bpf: Use pid_t consistently in test_progs.c - selftests/bpf: Fix compile error from rlim_t in sk_storage_map.c - selftests/bpf: Fix error compiling bpf_iter_setsockopt.c with musl libc - selftests/bpf: Drop unneeded error.h includes - selftests/bpf: Fix missing ARRAY_SIZE() definition in bench.c - selftests/bpf: Fix missing UINT_MAX definitions in benchmarks - selftests/bpf: Fix missing BUILD_BUG_ON() declaration - selftests/bpf: Replace CHECK with ASSERT_* in ns_current_pid_tgid test - selftests/bpf: Refactor out some functions in ns_current_pid_tgid test - selftests/bpf: Add a cgroup prog bpf_get_ns_current_pid_tgid() test - selftests/bpf: Fix include of <sys/fcntl.h> - selftests/bpf: Fix compiling parse_tcp_hdr_opt.c with musl-libc - selftests/bpf: Fix compiling kfree_skb.c with musl-libc - selftests/bpf: Fix compiling flow_dissector.c with musl-libc - selftests/bpf: Fix compiling tcp_rtt.c with musl-libc - selftests/bpf: Fix compiling core_reloc.c with musl-libc - selftests/bpf: Fix errors compiling lwt_redirect.c with musl libc - selftests/bpf: Fix errors compiling decap_sanity.c with musl libc - selftests/bpf: Fix errors compiling cg_storage_multi.h with musl libc - selftests/bpf: Fix arg parsing in veristat, test_progs - selftests/bpf: Fix error compiling test_lru_map.c - selftests/bpf: Fix C++ compile error from missing _Bool type - selftests/bpf: Fix flaky selftest lwt_redirect/lwt_reroute - selftests/bpf: Fix redefinition errors compiling lwt_reroute.c - selftests/bpf: Fix compile if backtrace support missing in libc - selftests/bpf: Fix error compiling tc_redirect.c with musl libc - samples/bpf: Fix compilation errors with cf-protection option - bpf: correctly handle malformed BPF_CORE_TYPE_ID_LOCAL relos - xz: cleanup CRC32 edits from 2018 - kthread: fix task state in kthread worker if being frozen - ext4: clear EXT4_GROUP_INFO_WAS_TRIMMED_BIT even mount with discard - smackfs: Use rcu_assign_pointer() to ensure safe assignment in smk_set_cipso - ext4: avoid buffer_head leak in ext4_mark_inode_used() - ext4: avoid potential buffer_head leak in __ext4_new_inode() - ext4: avoid negative min_clusters in find_group_orlov() - ext4: return error on ext4_find_inline_entry - ext4: avoid OOB when system.data xattr changes underneath the filesystem - ext4: check stripe size compatibility on remount as well - sched/numa: Fix the vma scan starving issue - nilfs2: fix potential null-ptr-deref in nilfs_btree_insert() - nilfs2: determine empty node blocks as corrupted - nilfs2: fix potential oob read in nilfs_btree_check_delete() - bpf: Fix bpf_strtol and bpf_strtoul helpers for 32bit - bpf: Fix helper writes to read-only maps - bpf: Improve check_raw_mode_ok test for MEM_UNINIT-tagged types - bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error - perf mem: Free the allocated sort string, fixing a leak - perf inject: Fix leader sampling inserting additional samples - perf report: Fix --total-cycles --stdio output error - perf sched timehist: Fix missing free of session in perf_sched__timehist() - perf stat: Display iostat headers correctly - perf sched timehist: Fixed timestamp error when unable to confirm event sched_in time - perf time-utils: Fix 32-bit nsec parsing - clk: imx: clk-audiomix: Correct parent clock for earc_phy and audpll - clk: imx: imx6ul: fix default parent for enet*_ref_sel - clk: imx: composite-8m: Less function calls in __imx8m_clk_hw_composite() after error detection - clk: imx: composite-8m: Enable gate clk with mcore_booted - clk: imx: composite-93: keep root clock on when mcore enabled - clk: imx: composite-7ulp: Check the PCC present bit - clk: imx: fracn-gppll: fix fractional part of PLL getting lost - clk: imx: imx8mp: fix clock tree update of TF-A managed clocks - clk: imx: imx8qxp: Register dc0_bypass0_clk before disp clk - clk: imx: imx8qxp: Parent should be initialized earlier than the clock - remoteproc: imx_rproc: Correct ddr alias for i.MX8M - remoteproc: imx_rproc: Initialize workqueue earlier - clk: rockchip: Set parent rate for DCLK_VOP clock on RK3228 - clk: qcom: dispcc-sm8550: fix several supposed typos - clk: qcom: dispcc-sm8550: use rcg2_ops for mdss_dptx1_aux_clk_src - clk: qcom: dispcc-sm8650: Update the GDSC flags - clk: qcom: dispcc-sm8550: use rcg2_shared_ops for ESC RCGs - leds: bd2606mvv: Fix device child node usage in bd2606mvv_probe() - pinctrl: ti: iodelay: Use scope based of_node_put() cleanups - pinctrl: ti: ti-iodelay: Fix some error handling paths - Input: ilitek_ts_i2c - avoid wrong input subsystem sync - Input: ilitek_ts_i2c - add report id message validation - drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error - drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error - PCI: Wait for Link before restoring Downstream Buses - firewire: core: correct range of block for case of switch statement - PCI: keystone: Fix if-statement expression in ks_pcie_quirk() - clk: qcom: ipq5332: Register gcc_qdss_tsctr_clk_src - clk: qcom: dispcc-sm8250: use special function for Lucid 5LPE PLL - leds: leds-pca995x: Add support for NXP PCA9956B - leds: pca995x: Use device_for_each_child_node() to access device child nodes - leds: pca995x: Fix device child node usage in pca995x_probe() - x86/PCI: Check pcie_find_root_port() return for NULL - nvdimm: Fix devs leaks in scan_labels() - PCI: xilinx-nwl: Fix register misspelling - PCI: xilinx-nwl: Clean up clock on probe failure/removal - media: platform: rzg2l-cru: rzg2l-csi2: Add missing MODULE_DEVICE_TABLE - RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency - pinctrl: single: fix missing error code in pcs_probe() - clk: at91: sama7g5: Allocate only the needed amount of memory for PLLs - media: mediatek: vcodec: Fix H264 multi stateless decoder smatch warning - media: mediatek: vcodec: Fix VP8 stateless decoder smatch warning - media: mediatek: vcodec: Fix H264 stateless decoder smatch warning - RDMA/rtrs: Reset hb_missed_cnt after receiving other traffic from peer - RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds - clk: ti: dra7-atl: Fix leak of of_nodes - clk: starfive: Use pm_runtime_resume_and_get to fix pm_runtime_get_sync() usage - clk: rockchip: rk3588: Fix 32k clock name for pmu_24m_32k_100m_src_p - nfsd: remove unneeded EEXIST error check in nfsd_do_file_acquire - nfsd: fix refcount leak when file is unhashed after being found - pinctrl: mvebu: Fix devinit_dove_pinctrl_probe function - IB/core: Fix ib_cache_setup_one error flow cleanup - PCI: kirin: Fix buffer overflow in kirin_pcie_parse_port() - RDMA/erdma: Return QP state in erdma_query_qp - RDMA/mlx5: Limit usage of over-sized mkeys from the MR cache - watchdog: imx_sc_wdt: Don't disable WDT in suspend - RDMA/hns: Don't modify rq next block addr in HIP09 QPC - RDMA/hns: Fix Use-After-Free of rsv_qp on HIP08 - RDMA/hns: Fix the overflow risk of hem_list_calc_ba_range() - RDMA/hns: Fix spin_unlock_irqrestore() called with IRQs enabled - RDMA/hns: Fix VF triggering PF reset in abnormal interrupt handler - RDMA/hns: Fix 1bit-ECC recovery address in non-4K OS - RDMA/hns: Optimize hem allocation performance - RDMA/hns: Fix restricted __le16 degrades to integer issue - RDMA/mlx5: Obtain upper net device only when needed - riscv: Fix fp alignment bug in perf_callchain_user() - RDMA/cxgb4: Added NULL check for lookup_atid - RDMA/irdma: fix error message in irdma_modify_qp_roce() - ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir() - ntb_perf: Fix printk format - ntb: Force physically contiguous allocation of rx ring buffers - nfsd: call cache_put if xdr_reserve_space returns NULL - nfsd: return -EINVAL when namelen is 0 - crypto: caam - Pad SG length when allocating hash edesc - crypto: powerpc/p10-aes-gcm - Disable CRYPTO_AES_GCM_P10 - f2fs: atomic: fix to avoid racing w/ GC - f2fs: reduce expensive checkpoint trigger frequency - f2fs: fix to avoid racing in between read and OPU dio write - f2fs: Create COW inode from parent dentry for atomic write - f2fs: fix to wait page writeback before setting gcing flag - f2fs: atomic: fix to truncate pagecache before on-disk metadata truncation - f2fs: support .shutdown in f2fs_sops - f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread() - f2fs: compress: don't redirty sparse cluster during {,de}compress - f2fs: prevent atomic file from being dirtied before commit - f2fs: get rid of online repaire on corrupted directory - f2fs: fix to don't set SB_RDONLY in f2fs_handle_critical_error() - spi: atmel-quadspi: Undo runtime PM changes at driver exit time - spi: spi-fsl-lpspi: Undo runtime PM changes at driver exit time - lib/sbitmap: define swap_lock as raw_spinlock_t - spi: atmel-quadspi: Avoid overwriting delay register settings - nvme-multipath: system fails to create generic nvme device - iio: adc: ad7606: fix oversampling gpio array - iio: adc: ad7606: fix standby gpio state to match the documentation - driver core: Fix error handling in driver API device_rename() - ABI: testing: fix admv8818 attr description - iio: chemical: bme680: Fix read/write ops to device by adding mutexes - iio: magnetometer: ak8975: drop incorrect AK09116 compatible - dt-bindings: iio: asahi-kasei,ak8975: drop incorrect AK09116 compatible - driver core: Fix a potential null-ptr-deref in module_add_driver() - serial: 8250: omap: Cleanup on error in request_irq - coresight: tmc: sg: Do not leak sg_table - interconnect: icc-clk: Add missed num_nodes initialization - cxl/pci: Fix to record only non-zero ranges - vhost_vdpa: assign irq bypass producer token correctly - ep93xx: clock: Fix off by one in ep93xx_div_recalc_rate() - Revert "dm: requeue IO if mapping table not yet available" - net: xilinx: axienet: Schedule NAPI in two steps - net: xilinx: axienet: Fix packet counting - netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put() - net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition - net: ipv6: select DST_CACHE from IPV6_RPL_LWTUNNEL - tcp: check skb is non-NULL in tcp_rto_delta_us() - net: qrtr: Update packets cloning when broadcasting - bonding: Fix unnecessary warnings and logs from bond_xdp_get_xmit_slave() - virtio_net: Fix mismatched buf address when unmapping for small packets - netfilter: nf_tables: Keep deleted flowtable hooks until after RCU - netfilter: ctnetlink: compile ctnetlink_label_size with CONFIG_NF_CONNTRACK_EVENTS - netfilter: nf_tables: use rcu chain hook list iterator from netlink dump path - io_uring/sqpoll: do not allow pinning outside of cpuset - io_uring: check for presence of task_work rather than TIF_NOTIFY_SIGNAL - mm: call the security_mmap_file() LSM hook in remap_file_pages() - drm/amd/display: Fix Synaptics Cascaded Panamera DSC Determination - Revert "net: libwx: fix alloc msix vectors failed" - xen: move checks for e820 conflicts further up - xen: allow mapping ACPI data using a different physical address - io_uring/sqpoll: retain test for whether the CPU is valid - io_uring/sqpoll: do not put cpumask on stack - Remove *.orig pattern from .gitignore - PCI: Revert to the original speed after PCIe failed link retraining - PCI: Clear the LBMS bit after a link retrain - PCI: dra7xx: Fix threaded IRQ request for "dra7xx-pcie-main" IRQ - PCI: imx6: Fix missing call to phy_power_off() in error handling - PCI: Correct error reporting with PCIe failed link retraining - PCI: Use an error code with PCIe failed link retraining - PCI: xilinx-nwl: Fix off-by-one in INTx IRQ handler - Revert "soc: qcom: smd-rpm: Match rpmsg channel instead of compatible" - ASoC: rt5682: Return devm_of_clk_add_hw_provider to transfer the error - soc: fsl: cpm1: tsa: Fix tsa_write8() - soc: versatile: integrator: fix OF node leak in probe() error path - Revert "media: tuners: fix error return code of hybrid_tuner_request_state()" - iommufd: Protect against overflow of ALIGN() during iova allocation - Input: adp5588-keys - fix check on return code - Input: i8042 - add TUXEDO Stellaris 16 Gen5 AMD to i8042 quirk table - Input: i8042 - add TUXEDO Stellaris 15 Slim Gen6 AMD to i8042 quirk table - Input: i8042 - add another board name for TUXEDO Stellaris Gen5 AMD line - KVM: arm64: Add memory length checks and remove inline in do_ffa_mem_xfer - KVM: x86: Enforce x2APIC's must-be-zero reserved ICR bits - KVM: x86: Move x2APIC ICR helper above kvm_apic_write_nodecode() - KVM: Use dedicated mutex to protect kvm_usage_count to avoid deadlock - drm/amd/display: Add HDMI DSC native YCbCr422 support - drm/amd/display: Round calculated vtotal - drm/amd/display: Validate backlight caps are sane - KEYS: prevent NULL pointer dereference in find_asymmetric_key() - powerpc/atomic: Use YZ constraints for DS-form instructions - fs: Create a generic is_dot_dotdot() utility - ksmbd: make __dir_empty() compatible with POSIX - ksmbd: allow write with FILE_APPEND_DATA - ksmbd: handle caseless file creation - ata: libata-scsi: Fix ata_msense_control() CDL page reporting - scsi: sd: Fix off-by-one error in sd_read_block_characteristics() - scsi: ufs: qcom: Update MODE_MAX cfg_bw value - scsi: mac_scsi: Revise printk(KERN_DEBUG ...) messages - scsi: mac_scsi: Refactor polling loop - scsi: mac_scsi: Disallow bus errors during PDMA send - can: esd_usb: Remove CAN_CTRLMODE_3_SAMPLES for CAN-USB/3-FD - wifi: rtw88: Fix USB/SDIO devices not transmitting beacons - usbnet: fix cyclical race on disconnect with work queue - USB: appledisplay: close race between probe and completion handler - USB: misc: cypress_cy7c63: check for short transfer - USB: class: CDC-ACM: fix race between get_serial and set_serial - usb: cdnsp: Fix incorrect usb_request status - usb: dwc2: drd: fix clock gating on USB role switch - bus: integrator-lm: fix OF node leak in probe() - bus: mhi: host: pci_generic: Fix the name for the Telit FE990A - firmware_loader: Block path traversal - tty: rp2: Fix reset with non forgiving PCIe host bridges - xhci: Set quirky xHC PCI hosts to D3 _after_ stopping and freeing them. - serial: qcom-geni: fix fifo polling timeout - crypto: ccp - Properly unregister /dev/sev on sev PLATFORM_STATUS failure - drbd: Fix atomicity violation in drbd_uuid_set_bm() - drbd: Add NULL check for net_conf to prevent dereference in state validation - ACPI: sysfs: validate return type of _STR method - ACPI: resource: Add another DMI match for the TongFang GMxXGxx - efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption - perf/x86/intel/pt: Fix sampling synchronization - wifi: mt76: mt7921: Check devm_kasprintf() returned value - wifi: mt76: mt7915: check devm_kasprintf() returned value - wifi: mt76: mt7996: fix NULL pointer dereference in mt7996_mcu_sta_bfer_he - wifi: rtw88: 8821cu: Remove VID/PID 0bda:c82c - wifi: rtw88: 8822c: Fix reported RX band width - wifi: mt76: mt7615: check devm_kasprintf() returned value - debugobjects: Fix conditions in fill_pool() - btrfs: tree-checker: fix the wrong output of data backref objectid - btrfs: always update fstrim_range on failure in FITRIM ioctl - f2fs: fix several potential integer overflows in file offsets - f2fs: prevent possible int overflow in dir_block_index() - f2fs: avoid potential int overflow in sanity_check_area_boundary() - f2fs: Require FMODE_WRITE for atomic write ioctls - f2fs: fix to check atomic_file in f2fs ioctl interfaces - hwrng: mtk - Use devm_pm_runtime_enable - hwrng: bcm2835 - Add missing clk_disable_unprepare in bcm2835_rng_init - hwrng: cctrng - Add missing clk_disable_unprepare in cctrng_resume - arm64: esr: Define ESR_ELx_EC_* constants as UL - arm64: errata: Enable the AC03_CPU_38 workaround for ampere1a - arm64: dts: rockchip: Raise Pinebook Pro's panel backlight PWM frequency - arm64: dts: qcom: sa8775p: Mark APPS and PCIe SMMUs as DMA coherent - arm64: dts: rockchip: Correct the Pinebook Pro battery design capacity - vfs: fix race between evice_inodes() and find_inode()&iput() - fs: Fix file_set_fowner LSM hook inconsistencies - nfs: fix memory leak in error path of nfs4_do_reclaim - EDAC/igen6: Fix conversion of system address to physical memory address - icmp: change the order of rate limits - cpuidle: riscv-sbi: Use scoped device node handling to fix missing of_node_put - padata: use integer wrap around to prevent deadlock on seq_nr overflow - spi: fspi: involve lut_num for struct nxp_fspi_devtype_data - ARM: dts: imx6ul-geam: fix fsl,pins property in tscgrp pinctrl - soc: versatile: realview: fix memory leak during device remove - soc: versatile: realview: fix soc_dev leak during device remove - USB: misc: yurex: fix race between read and write - xhci: Add a quirk for writing ERST in high-low order - usb: xhci: fix loss of data on Cadence xHC - pps: remove usage of the deprecated ida_simple_xx() API - pps: add an error check in parport_attach - serial: don't use uninitialized value in uart_poll_init() - x86/idtentry: Incorporate definitions/declarations of the FRED entries - x86/entry: Remove unwanted instrumentation in common_interrupt() - lib/bitmap: add bitmap_{read,write}() - btrfs: subpage: fix the bitmap dump which can cause bitmap corruption - btrfs: fix race setting file private on concurrent lseek using same fd - dt-bindings: spi: nxp-fspi: support i.MX93 and i.MX95 - dt-bindings: spi: nxp-fspi: add imx8ulp support - thunderbolt: Improve DisplayPort tunnel setup process to be more robust - bpf: lsm: Set bpf_lsm_blob_sizes.lbs_task to 0 - dm-verity: restart or panic on an I/O error - lockdep: fix deadlock issue between lockdep and rcu - mm: only enforce minimum stack gap size if it's sensible - spi: fspi: add support for imx8ulp - module: Fix KCOV-ignored file name - mm/damon/vaddr: protect vma traversal in __damon_va_thre_regions() with rcu read lock - i2c: aspeed: Update the stop sw state when the bus recovery occurs - i2c: isch: Add missed 'else' - Documentation: KVM: fix warning in "make htmldocs" - bpf: Fix use-after-free in bpf_uprobe_multi_link_attach() - wifi: brcmfmac: add linefeed at end of file - x86/tdx: Fix "in-kernel MMIO" check - spi: atmel-quadspi: Fix wrong register value written to MR - Revert: "dm-verity: restart or panic on an I/O error" - wifi: ath11k: use work queue to process beacon tx event - crypto: qat - disable IOV in adf_dev_stop() - crypto: qat - fix recovery flow for VFs - crypto: qat - ensure correct order in VF restarting handler - crypto: iaa - Fix potential use after free bug - autofs: fix missing fput for FSCONFIG_SET_FD - arm64: smp: smp_send_stop() and crash_smp_send_stop() should try non-NMI first - thermal: core: Fold two functions into their respective callers - thermal: core: Fix rounding of delay jiffies - perf/dwc_pcie: Fix registration issue in multi PCIe controller instances - perf/dwc_pcie: Always register for PCIe bus notifier - ACPI: video: force native for some T2 macbooks - ACPI: video: force native for Apple MacbookPro9,2 - wifi: cfg80211: fix bug of mapping AF3x to incorrect User Priority - wifi: mac80211: fix the comeback long retry times - ACPICA: Implement ACPI_WARNING_ONCE and ACPI_ERROR_ONCE - ACPICA: executer/exsystem: Don't nag user about every Stall() violating the spec - netfilter: nft_dynset: annotate data-races around set timeout - wifi: mt76: mt7921: fix wrong UNII-4 freq range check for the channel usage - crypto: ccp - do not request interrupt on cmd completion when irqs disabled - wifi: mt76: connac: fix checksum offload fields of connac3 RXD - net: hsr: Use the seqnr lock for frames received via interlink port. - crypto: n2 - Set err to EINVAL if snprintf fails for hmac - firmware: qcom: scm: Disable SDI and write no dump to dump mode - arm64: dts: renesas: r9a08g045: Correct GICD and GICR sizes - arm64: tegra: Correct location of power-sensors for IGX Orin - arm64: dts: ti: k3-am654-idk: Fix dtbs_check warning in ICSSG dmas - selftests/ftrace: Fix eventfs ownership testcase to find mount point - iommu/amd: Introduce struct protection_domain.pd_mode - iommu/amd: Allocate the page table root using GFP_KERNEL - iommu/amd: Convert comma to semicolon - platform/x86: ideapad-laptop: Make the scope_guard() clear of its scope - kselftest: dt: Ignore nodes that have ancestors disabled - bpf, x64: Fix tailcall hierarchy - bpf, lsm: Add check for BPF LSM return value - bpf: Fix compare error in function retval_range_within - bpf: Fail verification for sign-extension of packet data/data_end/data_meta - selftests/bpf: Support checks against a regular expression - selftests/bpf: no need to track next_match_pos in struct test_loader - selftests/bpf: extract test_loader->expect_msgs as a data structure - selftests/bpf: allow checking xlated programs in verifier_* tests - selftests/bpf: __arch_* macro to limit test cases to specific archs - libbpf: Fix bpf_object__open_skeleton()'s mishandling of options - s390/ap: Fix deadlock caused by recursive lock of the AP bus scan mutex - sched/deadline: Fix schedstats vs deadline servers - perf scripts python cs-etm: Restore first sample log in verbose mode - perf lock contention: Change stack_id type to s32 - quota: avoid missing put_quota_format when DQUOT_SUSPENDED is passed - media: staging: media: starfive: camss: Drop obsolete return value documentation - leds: gpio: Set num_leds after allocation - iommufd/selftest: Fix buffer read overrrun in the dirty test - iommufd: Check the domain owner of the parent before creating a nesting domain - RDMA/mlx5: Fix counter update on MR cache mkey creation - RDMA/mlx5: Drop redundant work canceling from clean_keys() - RDMA/mlx5: Fix MR cache temp entries cleanup - RDMA/hns: Fix ah error counter in sw stat not increasing - Coresight: Set correct cs_mode for TPDM to fix disable issue - Coresight: Set correct cs_mode for dummy source to fix disable issue - interconnect: qcom: sm8250: Enable sync_state - vdpa/mlx5: Fix invalid mr resource destroy - net: stmmac: set PP_FLAG_DMA_SYNC_DEV only if XDP is enabled - selftests: netfilter: Avoid hanging ipvs.sh - io_uring/rw: treat -EOPNOTSUPP for IOCB_NOWAIT like -EAGAIN - mm: migrate: annotate data-race in migrate_folio_unmap() - selftests/bpf: correctly move 'log' upon successful match - soc: fsl: cpm1: qmc: Update TRNSYNC only in transparent mode - drm/amdgpu/vcn: enable AV1 on both instances - drm/amd/display: Clean up dsc blocks in accelerated mode - drm/amd/display: Skip to enable dsc if it has been off - arm64: dts: mediatek: mt8195-cherry: Mark USB 3.0 on xhci1 as disabled - usb: xHCI: add XHCI_RESET_ON_RESUME quirk for Phytium xHCI host - serial: qcom-geni: fix false console tx restart - crypto: qcom-rng - fix support for ACPI-based systems - ACPI: resource: Do IRQ override on MECHREV GM7XG0M - perf/x86/intel: Allow to setup LBR for counting event for BPF - f2fs: check discard support for conventional zones - netfs: Delete subtree of 'fs/netfs' when netfs module exits - md: Don't flush sync_work in md_write_start() - tools/nolibc: include arch.h from string.h - KVM: x86: Make x2APIC ID 100% readonly - x86/mm/cpa: Warn for set_memory_XXcrypted() VMM fails - x86/mm: Make x86_platform.guest.enc_status_change_*() return an error - x86/tdx: Account shared memory - x86/mm: Add callbacks to prepare encrypted memory for kexec - x86/tdx: Convert shared memory back to private on kexec - soc: qcom: geni-se: add GP_LENGTH/IRQ_EN_SET/IRQ_EN_CLEAR registers - serial: qcom-geni: fix arg types for qcom_geni_serial_poll_bit() - serial: qcom-geni: introduce qcom_geni_serial_poll_bitfield() - idpf: stop using macros for accessing queue descriptors - fs_parse: add uid & gid option option parsing helpers - compiler.h: specify correct attribute for .rodata..c_jump_table - exfat: resolve memory leak from exfat_create_upcase_table() - s390/ftrace: Avoid calling unwinder in ftrace_return_address() - fbdev: xen-fbfront: Assign fb_info->device - [Config] update configs for CONFIG_CRYPTO_AES_GCM_P10 - Upstream stable to v6.6.54, v6.10.13 * Backport some AppArmor complain-mode profile bugfixes from Oracular (LP: #2086210) - SAUCE: apparmor4.0.0 [94/99]: apparmor: allocate xmatch for nullpdf inside aa_alloc_null - SAUCE: apparmor4.0.0 [95/99]: apparmor: properly handle cx/px lookup failure for complain mode profiles * Noble update: upstream stable patchset 2024-11-08 (LP: #2087519) - ASoC: SOF: mediatek: Add missing board compatible - ASoC: mediatek: mt8188: Mark AFE_DAC_CON0 register as volatile - ASoC: allow module autoloading for table db1200_pids - ASoC: allow module autoloading for table board_ids - scsi: lpfc: Fix overflow build issue - pinctrl: at91: make it work with current gpiolib - hwmon: (asus-ec-sensors) remove VRM temp X570-E GAMING - microblaze: don't treat zero reserved memory regions as error - platform/x86: x86-android-tablets: Make Lenovo Yoga Tab 3 X90F DMI match less strict - net: ftgmac100: Ensure tx descriptor updates are visible - LoongArch: Define ARCH_IRQ_INIT_FLAGS as IRQ_NOPROBE - wifi: iwlwifi: lower message level for FW buffer destination - wifi: iwlwifi: mvm: fix iwl_mvm_scan_fits() calculation - wifi: iwlwifi: mvm: fix iwl_mvm_max_scan_ie_fw_cmd_room() - wifi: iwlwifi: mvm: pause TCM when the firmware is stopped - wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead - wifi: mac80211: free skb on error path in ieee80211_beacon_get_ap() - wifi: iwlwifi: clear trans->state earlier upon error - can: mcp251xfd: mcp251xfd_ring_init(): check TX-coalescing configuration - ASoC: Intel: soc-acpi-cht: Make Lenovo Yoga Tab 3 X90F DMI match less strict - ASoC: intel: fix module autoloading - ASoC: google: fix module autoloading - ASoC: tda7419: fix module autoloading - ASoC: fix module autoloading - spi: spidev: Add an entry for elgin,jg10309-01 - ASoC: amd: yc: Add a quirk for MSI Bravo 17 (D7VEK) - ALSA: hda: add HDMI codec ID for Intel PTL - drm: komeda: Fix an issue related to normalized zpos - spi: bcm63xx: Enable module autoloading - smb: client: fix hang in wait_for_response() for negproto - x86/hyperv: Set X86_FEATURE_TSC_KNOWN_FREQ when Hyper-V provides frequency - tools: hv: rm .*.cmd when make clean - spi: spidev: Add missing spi_device_id for jg10309-01 - ocfs2: add bounds checking to ocfs2_xattr_find_entry() - ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry() - drm: Use XArray instead of IDR for minors - accel: Use XArray instead of IDR for minors - drm: Expand max DRM device number to full MINORBITS - powercap/intel_rapl: Add support for AMD family 1Ah - netfilter: nft_socket: make cgroupsv2 matching work with namespaces - netfilter: nft_socket: Fix a NULL vs IS_ERR() bug in nft_socket_cgroup_subtree_level() - nvme-pci: qdepth 1 quirk - x86/mm: Switch to new Intel CPU model defines - can: mcp251xfd: properly indent labels - can: mcp251xfd: move mcp251xfd_timestamp_start()/stop() into mcp251xfd_chip_start/stop() - USB: serial: pl2303: add device id for Macrosilicon MS3020 - USB: usbtmc: prevent kernel-usb-infoleak - platform/x86: asus-wmi: Fix spurious rfkill on UX8406MA - ASoC: mediatek: mt8188-mt6359: Modify key - clk: qcom: gcc-sm8650: Don't use shared clk_ops for QUPs - ice: check for XDP rings instead of bpf program when unconfiguring - powercap/intel_rapl: Fix the energy-pkg event for AMD CPUs - powercap: intel_rapl: Change an error pointer to NULL - Upstream stable to v6.6.53, v6.10.12 -- Stefan Bader <stefan.bader@canonical.com> Thu, 23 Jan 2025 10:32:39 +0100 linux-hwe-6.8 (6.8.0-52.53~22.04.1) jammy; urgency=medium * jammy/linux-hwe-6.8: 6.8.0-52.53~22.04.1 -proposed tracker (LP: #2093520) [ Ubuntu: 6.8.0-52.53 ] * noble/linux: 6.8.0-52.53 -proposed tracker (LP: #2093521) * CVE-2024-53164 - net: sched: fix ordering of qlen adjustment * CVE-2024-53141 - netfilter: ipset: add missing range check in bitmap_ip_uadt * CVE-2024-53103 - hv_sock: Initializing vsk->trans to NULL to prevent a dangling pointer -- Stefan Bader <stefan.bader@canonical.com> Wed, 15 Jan 2025 17:27:15 +0100 linux-hwe-6.8 (6.8.0-51.52~22.04.1) jammy; urgency=medium * jammy/linux-hwe-6.8: 6.8.0-51.52~22.04.1 -proposed tracker (LP: #2090367) * Commit "net/mlx5e: Don't offload internal port if filter device is out device" breaks OpenStack/OVN distributed gateway use case (LP: #2085018) - SAUCE: net/mlx5e: Remove workaround to avoid syndrome for internal port [ Ubuntu: 6.8.0-51.52 ] * noble/linux: 6.8.0-51.52 -proposed tracker (LP: #2090369) * Packaging resync (LP: #1786013) - [Packaging] resync git-ubuntu-log - [Packaging] update variants * MGLRU: kswapd uses 100% CPU when MGLRU is enabled and under memory pressure (LP: #2087886) - mm/mglru: only clear kswapd_failures if reclaimable * CVE-2024-50264 - vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans * CVE-2024-53057 - net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT * CVE-2024-49967 - ext4: no need to continue when the number of entries is 1 -- Stefan Bader <stefan.bader@canonical.com> Mon, 09 Dec 2024 11:10:20 +0100 linux-hwe-6.8 (6.8.0-50.51~22.04.1) jammy; urgency=medium * jammy/linux-hwe-6.8: 6.8.0-50.51~22.04.1 -proposed tracker (LP: #2086300) * Packaging resync (LP: #1786013) - [Packaging] resync git-ubuntu-log - [Packaging] debian.hwe-6.8/dkms-versions -- update from kernel-versions (main/2024.10.28) [ Ubuntu: 6.8.0-50.51 ] * noble/linux: 6.8.0-50.51 -proposed tracker (LP: #2086301) * Packaging resync (LP: #1786013) - [Packaging] debian.master/dkms-versions -- update from kernel-versions (main/2024.10.28) * Noble update: upstream stable patchset 2024-10-31 (LP: #2086138) - device property: Add cleanup.h based fwnode_handle_put() scope based cleanup. - device property: Introduce device_for_each_child_node_scoped() - iio: adc: ad7124: Switch from of specific to fwnode based property handling - ksmbd: override fsids for share path check - ksmbd: override fsids for smb2_query_info() - usbnet: ipheth: remove extraneous rx URB length check - usbnet: ipheth: drop RX URBs with no payload - usbnet: ipheth: do not stop RX on failing RX callback - usbnet: ipheth: fix carrier detection in modes 1 and 4 - net: ethernet: use ip_hdrlen() instead of bit shift - drm: panel-orientation-quirks: Add quirk for Ayn Loki Zero - drm: panel-orientation-quirks: Add quirk for Ayn Loki Max - net: phy: vitesse: repair vsc73xx autonegotiation - powerpc/mm: Fix boot warning with hugepages and CONFIG_DEBUG_VIRTUAL - wifi: mt76: mt7921: fix NULL pointer access in mt7921_ipv6_addr_change - net: hns3: use correct release function during uninitialization - btrfs: update target inode's ctime on unlink - Input: ads7846 - ratelimit the spi_sync error message - Input: synaptics - enable SMBus for HP Elitebook 840 G2 - HID: multitouch: Add support for GT7868Q - scripts: kconfig: merge_config: config files: add a trailing newline - platform/surface: aggregator_registry: Add Support for Surface Pro 10 - platform/surface: aggregator_registry: Add support for Surface Laptop Go 3 - drm/msm/adreno: Fix error return if missing firmware-name - Input: i8042 - add Fujitsu Lifebook E756 to i8042 quirk table - smb/server: fix return value of smb2_open() - NFSv4: Fix clearing of layout segments in layoutreturn - NFS: Avoid unnecessary rescanning of the per-server delegation list - platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses - platform/x86: panasonic-laptop: Allocate 1 entry extra in the sinf array - mptcp: pm: Fix uaf in __timer_delete_sync - arm64: dts: rockchip: fix eMMC/SPI corruption when audio has been used on RK3399 Puma - arm64: dts: rockchip: override BIOS_DISABLE signal via GPIO hog on RK3399 Puma - minmax: reduce min/max macro expansion in atomisp driver - net: tighten bad gso csum offset check in virtio_net_hdr - dm-integrity: fix a race condition when accessing recalc_sector - x86/hyperv: fix kexec crash due to VP assist page corruption - mm: avoid leaving partial pfn mappings around in error case - arm64: dts: rockchip: fix PMIC interrupt pin in pinctrl for ROCK Pi E - drm/amd/display: Disable error correction if it's not supported - drm/amd/display: Fix FEC_READY write on DP LT - eeprom: digsy_mtc: Fix 93xx46 driver probe failure - cxl/core: Fix incorrect vendor debug UUID define - selftests/bpf: Support SOCK_STREAM in unix_inet_redir_to_connected() - hwmon: (pmbus) Conditionally clear individual status bits for pmbus rev >= 1.2 - ice: Fix lldp packets dropping after changing the number of channels - ice: fix accounting for filters shared by multiple VSIs - ice: fix VSI lists confusion when adding VLANs - igb: Always call igb_xdp_ring_update_tail() under Tx lock - net/mlx5: Update the list of the PCI supported devices - net/mlx5e: Add missing link modes to ptys2ethtool_map - net/mlx5e: Add missing link mode to ptys2ext_ethtool_map - net/mlx5: Explicitly set scheduling element and TSAR type - net/mlx5: Add missing masks and QoS bit masks for scheduling elements - net/mlx5: Correct TASR typo into TSAR - net/mlx5: Verify support for scheduling element and TSAR type - net/mlx5: Fix bridge mode operations when there are no VFs - fou: fix initialization of grc - octeontx2-af: Modify SMQ flush sequence to drop packets - net: ftgmac100: Enable TX interrupt to avoid TX timeout - selftests: net: csum: Fix checksums for packets with non-zero padding - netfilter: nft_socket: fix sk refcount leaks - net: dsa: felix: ignore pending status of TAS module when it's disabled - net: dpaa: Pad packets to ETH_ZLEN - tracing/osnoise: Fix build when timerlat is not enabled - spi: nxp-fspi: fix the KASAN report out-of-bounds bug - drm/syncobj: Fix syncobj leak in drm_syncobj_eventfd_ioctl - dma-buf: heaps: Fix off-by-one in CMA heap fault handler - drm/nouveau/fb: restore init() for ramgp102 - drm/amdgpu/atomfirmware: Silence UBSAN warning - drm/amd/amdgpu: apply command submission parser for JPEG v1 - spi: geni-qcom: Undo runtime PM changes at driver exit time - spi: geni-qcom: Fix incorrect free_irq() sequence - drm/i915/guc: prevent a possible int overflow in wq offsets - ASoC: codecs: avoid possible garbage value in peb2466_reg_read() - cifs: Fix signature miscalculation - pinctrl: meteorlake: Add Arrow Lake-H/U ACPI ID - ASoC: meson: axg-card: fix 'use-after-free' - drm/mediatek: Set sensible cursor width/height values to fix crash - Input: edt-ft5x06 - add support for FocalTech FT5452 and FT8719 - Input: edt-ft5x06 - add support for FocalTech FT8201 - cgroup/cpuset: Eliminate unncessary sched domains rebuilds in hotplug - spi: zynqmp-gqspi: Scale timeout by data size - drm/xe: use devm instead of drmm for managed bo - net: libwx: fix number of Rx and Tx descriptors - clocksource: hyper-v: Use lapic timer in a TDX VM without paravisor - bcachefs: Fix bch2_extents_match() false positive - bcachefs: Don't delete open files in online fsck - firmware: qcom: uefisecapp: Fix deadlock in qcuefi_acquire() - riscv: dts: starfive: jh7110-common: Fix lower rate of CPUfreq by setting PLL0 rate to 1.5GHz - cxl: Restore XOR'd position bits during address translation - netlink: specs: mptcp: fix port endianness - drm/amd/display: Avoid race between dcn10_set_drr() and dc_state_destruct() - drm/amd/display: Avoid race between dcn35_set_drr() and dc_state_destruct() - drm/amd/amdgpu: apply command submission parser for JPEG v2+ - drm/xe/client: fix deadlock in show_meminfo() - drm/xe/client: remove bogus rcu list usage - drm/xe/client: add missing bo locking in show_meminfo() - tracing/kprobes: Fix build error when find_module() is not available - drm/xe/display: fix compat IS_DISPLAY_STEP() range end - Upstream stable to v6.6.52, v6.10.11 * Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) - KVM: SVM: fix emulation of msr reads/writes of MSR_FS_BASE and MSR_GS_BASE - KVM: SVM: Don't advertise Bus Lock Detect to guest if SVM support is missing - ALSA: hda/conexant: Add pincfg quirk to enable top speakers on Sirius devices - ALSA: hda/realtek: add patch for internal mic in Lenovo V145 - ALSA: hda/realtek: Support mute LED on HP Laptop 14-dq2xxx - ksmbd: Unlock on in ksmbd_tcp_set_interfaces() - ata: libata: Fix memory leak for error path in ata_host_alloc() - irqchip/gic-v2m: Fix refcount leak in gicv2m_of_init() - x86/kaslr: Expose and use the end of the physical memory address space - nvme-pci: Add sleep quirk for Samsung 990 Evo - rust: types: Make Opaque::get const - rust: macros: provide correct provenance when constructing THIS_MODULE - Revert "Bluetooth: MGMT/SMP: Fix address type when using SMP over BREDR/LE" - Bluetooth: MGMT: Ignore keys being loaded with invalid type - mmc: core: apply SD quirks earlier during probe - mmc: dw_mmc: Fix IDMAC operation with pages bigger than 4K - mmc: sdhci-of-aspeed: fix module autoloading - mmc: cqhci: Fix checking of CQHCI_HALT state - fuse: update stats for pages in dropped aux writeback list - fuse: use unsigned type for getxattr/listxattr size truncation - fuse: fix memory leak in fuse_create_open - clk: starfive: jh7110-sys: Add notifier for PLL0 clock - clk: qcom: clk-alpha-pll: Fix the pll post div mask - clk: qcom: clk-alpha-pll: Fix the trion pll postdiv set rate API - kexec_file: fix elfcorehdr digest exclusion when CONFIG_CRASH_HOTPLUG=y - tracing: Avoid possible softlockup in tracing_iter_reset() - tracing/timerlat: Add interface_lock around clearing of kthread in stop_kthread() - net: mctp-serial: Fix missing escapes on transmit - x86/fpu: Avoid writing LBR bit to IA32_XSS unless supported - x86/apic: Make x2apic_disable() work correctly - drm/i915: Do not attempt to load the GSC multiple times - ALSA: control: Apply sanity check of input values for user elements - ALSA: hda: Add input value sanity checks to HDMI channel map controls - wifi: ath12k: fix uninitialize symbol error on ath12k_peer_assoc_h_he() - smack: unix sockets: fix accept()ed socket label - bpf, verifier: Correct tail_call_reachable for bpf prog - accel/habanalabs/gaudi2: unsecure edma max outstanding register - irqchip/armada-370-xp: Do not allow mapping IRQ 0 and 1 - af_unix: Remove put_pid()/put_cred() in copy_peercred(). - x86/kmsan: Fix hook for unaligned accesses - iommu: sun50i: clear bypass register - netfilter: nf_conncount: fix wrong variable type - fs/ntfs3: One more reason to mark inode bad - riscv: kprobes: Use patch_text_nosync() for insn slots - media: vivid: fix wrong sizeimage value for mplane - leds: spi-byte: Call of_node_put() on error path - wifi: brcmsmac: advertise MFP_CAPABLE to enable WPA3 - usb: uas: set host status byte on data completion error - drm/amd/display: Check HDCP returned status - drm/amdgpu: clear RB_OVERFLOW bit when enabling interrupts - media: vivid: don't set HDMI TX controls if there are no HDMI outputs - vfio/spapr: Always clear TCEs before unsetting the window - ice: Check all ice_vsi_rebuild() errors in function - Input: ili210x - use kvmalloc() to allocate buffer for firmware update - media: qcom: camss: Add check for v4l2_fwnode_endpoint_parse - pcmcia: Use resource_size function on resource object - drm/amdgpu: check for LINEAR_ALIGNED correctly in check_tiling_flags_gfx6 - can: m_can: Release irq on error in m_can_open - can: mcp251xfd: fix ring configuration when switching from CAN-CC to CAN-FD mode - rust: kbuild: fix export of bss symbols - cifs: Fix FALLOC_FL_ZERO_RANGE to preflush buffered part of target region - igb: Fix not clearing TimeSync interrupts for 82580 - platform/x86: dell-smbios: Fix error path in dell_smbios_init() - regulator: core: Stub devm_regulator_bulk_get_const() if !CONFIG_REGULATOR - can: kvaser_pciefd: Skip redundant NULL pointer check in ISR - can: kvaser_pciefd: Remove unnecessary comment - can: kvaser_pciefd: Rename board_irq to pci_irq - can: kvaser_pciefd: Move reset of DMA RX buffers to the end of the ISR - can: kvaser_pciefd: Use a single write when releasing RX buffers - Bluetooth: qca: If memdump doesn't work, re-enable IBS - Bluetooth: hci_sync: Introduce hci_cmd_sync_run/hci_cmd_sync_run_once - Bluetooth: MGMT: Fix not generating command complete for MGMT_OP_DISCONNECT - igc: Unlock on error in igc_io_resume() - ice: do not bring the VSI up, if it was down before the XDP setup - usbnet: modern method to get random MAC - bpf, net: Fix a potential race in do_sock_getsockopt() - bareudp: Fix device stats updates. - r8152: fix the firmware doesn't work - net: bridge: br_fdb_external_learn_add(): always set EXT_LEARN - net: dsa: vsc73xx: fix possible subblocks range of CAPT block - selftests: net: enable bind tests - firmware: cs_dsp: Don't allow writes to read-only controls - phy: zynqmp: Take the phy mutex in xlate - ASoC: topology: Properly initialize soc_enum values - dm init: Handle minors larger than 255 - iommu/vt-d: Handle volatile descriptor status read - cgroup: Protect css->cgroup write under css_set_lock - devres: Initialize an uninitialized struct member - virtio_ring: fix KMSAN error for premapped mode - crypto: qat - fix unintentional re-enabling of error interrupts - ASoc: TAS2781: replace beXX_to_cpup with get_unaligned_beXX for potentially broken alignment - libbpf: Add NULL checks to bpf_object__{prev_map,next_map} - drm/amdgpu: Set no_hw_access when VF request full GPU fails - ext4: fix possible tid_t sequence overflows - jbd2: avoid mount failed when commit block is partial submitted - dma-mapping: benchmark: Don't starve others when doing the test - drm/amdgpu: reject gang submit on reserved VMIDs - smp: Add missing destroy_work_on_stack() call in smp_call_on_cpu() - fs/ntfs3: Check more cases when directory is corrupted - btrfs: replace BUG_ON with ASSERT in walk_down_proc() - cxl/region: Verify target positions using the ordered target list - riscv: set trap vector earlier - tcp: Don't drop SYN+ACK for simultaneous connect(). - net: dpaa: avoid on-stack arrays of NR_CPUS elements - LoongArch: Use correct API to map cmdline in relocate_kernel() - regmap: maple: work around gcc-14.1 false-positive warning - vfs: Fix potential circular locking through setxattr() and removexattr() - i3c: master: svc: resend target address when get NACK - kselftests: dmabuf-heaps: Ensure the driver name is null-terminated - btrfs: initialize location to fix -Wmaybe-uninitialized in btrfs_lookup_dentry() - s390/vmlinux.lds.S: Move ro_after_init section behind rodata section - usbnet: ipheth: race between ipheth_close and error handling - spi: spi-fsl-lpspi: limit PRESCALE bit in TCR register - ata: pata_macio: Use WARN instead of BUG - NFSv4: Add missing rescheduling points in nfs_client_return_marked_delegations - ACPI: CPPC: Add helper to get the highest performance value - cpufreq: amd-pstate: Enable amd-pstate preferred core support - cpufreq: amd-pstate: fix the highest frequency issue which limits performance - tcp: process the 3rd ACK with sk_socket for TFO/MPTCP - iio: buffer-dmaengine: fix releasing dma channel on error - iio: fix scale application in iio_convert_raw_to_processed_unlocked - iio: adc: ad7124: fix config comparison - iio: adc: ad7606: remove frstdata check for serial mode - iio: adc: ad7124: fix chip ID mismatch - usb: dwc3: core: update LC timer as per USB Spec V3.2 - usb: cdns2: Fix controller reset issue - usb: dwc3: Avoid waking up gadget during startxfer - nvmem: Fix return type of devm_nvmem_device_get() in kerneldoc - Drivers: hv: vmbus: Fix rescind handling in uio_hv_generic - clocksource/drivers/imx-tpm: Fix return -ETIME when delta exceeds INT_MAX - clocksource/drivers/imx-tpm: Fix next event not taking effect sometime - clocksource/drivers/timer-of: Remove percpu irq related code - uprobes: Use kzalloc to allocate xol area - Revert "mm: skip CMA pages when they are not available" - workqueue: wq_watchdog_touch is always called with valid CPU - workqueue: Improve scalability of workqueue watchdog touch - ACPI: processor: Return an error if acpi_processor_get_info() fails in processor_add() - ACPI: processor: Fix memory leaks in error paths of processor_add() - arm64: acpi: Move get_cpu_for_acpi_id() to a header - can: mcp251xfd: mcp251xfd_handle_rxif_ring_uinc(): factor out in separate function - can: mcp251xfd: rx: prepare to workaround broken RX FIFO head index erratum - can: mcp251xfd: clarify the meaning of timestamp - can: mcp251xfd: rx: add workaround for erratum DS80000789E 6 of mcp2518fd - drm/amd: Add gfx12 swizzle mode defs - drm/amdgpu: handle gfx12 in amdgpu_display_verify_sizes - ata: libata-scsi: Remove redundant sense_buffer memsets - ata: libata-scsi: Check ATA_QCFLAG_RTF_FILLED before using result_tf - crypto: starfive - Align rsa input data to 32-bit - crypto: starfive - Fix nent assignment in rsa dec - clk: qcom: ipq9574: Update the alpha PLL type for GPLLs - powerpc/64e: remove unused IBM HTW code - powerpc/64e: split out nohash Book3E 64-bit code - powerpc/64e: Define mmu_pte_psize static - powerpc/vdso: Don't discard rela sections - ASoC: tegra: Fix CBB error during probe() - nvme-pci: allocate tagset on reset if necessary - ASoc: SOF: topology: Clear SOF link platform name upon unload - ASoC: sunxi: sun4i-i2s: fix LRCLK polarity in i2s mode - clk: qcom: gcc-sm8550: Don't use parking clk_ops for QUPs - clk: qcom: gcc-sm8550: Don't park the USB RCG at registration time - drm/i915/fence: Mark debug_fence_init_onstack() with __maybe_unused - drm/i915/fence: Mark debug_fence_free() with __maybe_unused - gpio: rockchip: fix OF node leak in probe() - gpio: modepin: Enable module autoloading - riscv: Fix toolchain vector detection - riscv: Do not restrict memory size because of linear mapping on nommu - membarrier: riscv: Add full memory barrier in switch_mm() - [Config] updateconfigs for ARCH_HAS_MEMBARRIER_CALLBACKS - x86/mm: Fix PTI for i386 some more - btrfs: fix race between direct IO write and fsync when using same fd - spi: spi-fsl-lpspi: Fix off-by-one in prescale max - ALSA: hda/realtek: Enable Mute Led for HP Victus 15-fb1xxx - ALSA: hda/realtek - Fix inactive headset mic jack for ASUS Vivobook 15 X1504VAP - fuse: clear PG_uptodate when using a stolen page - riscv: misaligned: remove CONFIG_RISCV_M_MODE specific code - parisc: Delay write-protection until mark_rodata_ro() call - pinctrl: qcom: x1e80100: Bypass PDC wakeup parent for now - maple_tree: remove rcu_read_lock() from mt_validate() - Revert "wifi: ath11k: restore country code during resume" - btrfs: qgroup: don't use extent changeset when not needed - btrfs: zoned: handle broken write pointer on zones - drm/xe/gsc: Do not attempt to load the GSC multiple times - drm/amdgpu: always allocate cleared VRAM for GEM allocations - drm/amd/display: Lock DC and exit IPS when changing backlight - ALSA: hda/realtek: extend quirks for Clevo V5[46]0 - cgroup/cpuset: Delay setting of CS_CPU_EXCLUSIVE until valid partition - virt: sev-guest: Mark driver struct with __refdata to prevent section mismatch - media: b2c2: flexcop-usb: fix flexcop_usb_memory_req - gve: Add adminq mutex lock - wifi: rtw89: wow: prevent to send unexpected H2C during download Firmware - drm/amdgpu: add missing error handling in function amdgpu_gmc_flush_gpu_tlb_pasid - crypto: qat - initialize user_input.lock for rate_limiting - locking: Add rwsem_assert_held() and rwsem_assert_held_write() - fs: don't copy to userspace under namespace semaphore - fs: relax permissions for statmount() - seccomp: release task filters when the task exits - drm/amdgpu/display: handle gfx12 in amdgpu_dm_plane_format_mod_supported - can: m_can: Remove m_can_rx_peripheral indirection - can: m_can: Do not cancel timer from within timer - mm: Provide a means of invalidation without using launder_folio - cifs: Fix copy offload to flush destination region - hwmon: ltc2991: fix register bits defines - scripts: fix gfp-translate after ___GFP_*_BITS conversion to an enum - ptp: ocp: convert serial ports to array - ptp: ocp: adjust sysfs entries to expose tty information - ice: check ICE_VSI_DOWN under rtnl_lock when preparing for reset - ice: remove ICE_CFG_BUSY locking from AF_XDP code - net: xilinx: axienet: Fix race in axienet_stop - iommu/vt-d: Remove control over Execute-Requested requests - block: don't call bio_uninit from bio_endio - tracing/kprobes: Add symbol counting check when module loads - perf/x86/intel: Hide Topdown metrics events if the feature is not enumerated - PCI: qcom: Override NO_SNOOP attribute for SA8775P RC - staging: vchiq_core: Bubble up wait_event_interruptible() return value - watchdog: imx7ulp_wdt: keep already running watchdog enabled - btrfs: slightly loosen the requirement for qgroup removal - drm/amdgpu: add PSP RAS address query command - drm/amdgpu: add mutex to protect ras shared memory - s390/boot: Do not assume the decompressor range is reserved - drm/amdgpu: Fix two reset triggered in a row - drm/amdgpu: Add reset_context flag for host FLR - drm/amdgpu: Fix amdgpu_device_reset_sriov retry logic - fs: only copy to userspace on success in listmount() - iio: adc: ad7124: fix DT configuration parsing - nvmem: u-boot-env: error if NVMEM device is too small - mm: zswap: rename is_zswap_enabled() to zswap_is_enabled() - mm/memcontrol: respect zswap.writeback setting from parent cg too - path: add cleanup helper - fs: simplify error handling - fs: relax permissions for listmount() - hid: bpf: add BPF_JIT dependency - net/mlx5e: SHAMPO, Use KSMs instead of KLMs - net/mlx5e: SHAMPO, Fix page leak - drm/xe/xe2: Add workaround 14021402888 - drm/xe/xe2lpg: Extend workaround 14021402888 - clk: qcom: gcc-x1e80100: Fix USB 0 and 1 PHY GDSC pwrsts flags - clk: qcom: gcc-x1e80100: Don't use parking clk_ops for QUPs - nouveau: fix the fwsec sb verification register. - riscv: Add tracepoints for SBI calls and returns - riscv: Improve sbi_ecall() code generation by reordering arguments - riscv: Fix RISCV_ALTERNATIVE_EARLY - cifs: Fix zero_point init on inode initialisation - nvme: rename nvme_sc_to_pr_err to nvme_status_to_pr_err - nvme: fix status magic numbers - nvme: rename CDR/MORE/DNR to NVME_STATUS_* - nvmet: Identify-Active Namespace ID List command should reject invalid nsid - drm/i915/display: Add mechanism to use sink model when applying quirk - drm/i915/display: Increase Fast Wake Sync length as a quirk - LoongArch: Use accessors to page table entries instead of direct dereference - Upstream stable to v6.6.51, v6.10.10 * Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) // CVE-2024-46823 - kunit/overflow: Fix UB in overflow_allocation_test * Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) // CVE-2024-46834 - ethtool: fail closed if we can't get max channel used in indirection tables * Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) // CVE-2024-46751 - btrfs: don't BUG_ON() when 0 reference count at btrfs_lookup_extent_info() * Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) // CVE-2024-46753 - btrfs: handle errors from btrfs_dec_ref() properly * Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) // CVE-2024-46841 - btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc() * Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) // CVE-2024-46754 - bpf: Remove tst_run from lwt_seg6local_prog_ops. * Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) // CVE-2024-46824 - iommufd: Require drivers to supply the cache_invalidate_user ops * Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) // CVE-2024-46842 - scsi: lpfc: Handle mailbox timeouts in lpfc_get_sfp_info * Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) // CVE-2024-46766 - ice: move netif_queue_set_napi to rtnl-protected sections * Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) // CVE-2024-46772 - drm/amd/display: Check denominator crb_pipes before used * Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) // CVE-2024-46774 - powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas() * Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) // CVE-2024-46775 - drm/amd/display: Validate function returns * Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) // CVE-2024-46778 - drm/amd/display: Check UnboundedRequestEnabled's value * Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) // CVE-2024-46779 - drm/imagination: Free pvr_vm_gpuva after unlink * Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) // CVE-2024-46792 - riscv: misaligned: Restrict user access to kernel memory * Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) // CVE-2024-46793 - ASoC: Intel: Boards: Fix NULL pointer deref in BYT/CHT boards harder * Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) // CVE-2024-46735 - ublk_drv: fix NULL pointer dereference in ublk_ctrl_start_recovery() * Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) // CVE-2024-46737 - nvmet-tcp: fix kernel crash if commands allocation fails * Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) // CVE-2024-46822 - arm64: acpi: Harden get_cpu_for_acpi_id() against missing CPU entry * Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) // CVE-2024-46713 - perf/aux: Fix AUX buffer serialization * Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) // CVE-2024-46739 - uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind * Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) // CVE-2024-46740 - binder: fix UAF caused by offsets overwrite * Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) // CVE-2024-46741 - misc: fastrpc: Fix double free of 'buf' in error path * Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) // CVE-2024-47663 - staging: iio: frequency: ad9834: Validate frequency parameter value * Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) // CVE-2024-46832 - MIPS: cevt-r4k: Don't call get_c0_compare_int if timer irq is installed * Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) // CVE-2024-47668 - lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc() * Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) // CVE-2024-46744 - Squashfs: sanity check symbolic link size * Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) // CVE-2024-46745 - Input: uinput - reject requests with unreasonable number of slots * Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) // CVE-2024-46746 - HID: amd_sfh: free driver_data after destroying hid device * Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) // CVE-2024-47664 - spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware * Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) // CVE-2024-47665 - i3c: mipi-i3c-hci: Error out instead on BUG_ON() in IBI DMA setup * Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) // CVE-2024-46749 - Bluetooth: btnxpuart: Fix Null pointer dereference in btnxpuart_flush() * Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) // CVE-2024-46750 - PCI: Add missing bridge lock to pci_bus_lock() * Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) // CVE-2024-46752 - btrfs: replace BUG_ON() with error handling at update_ref_for_cow() * Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) // CVE-2024-46840 - btrfs: clean up our handling of refs == 0 in snapshot delete * Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) // CVE-2024-46755 - wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id() * Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) // CVE-2024-47666 - scsi: pm80xx: Set phy->enable_completion only when we wait for it * Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) // CVE-2024-46843 - scsi: ufs: core: Remove SCSI host only if added * Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) // CVE-2024-46760 - wifi: rtw88: usb: schedule rx work after everything is set up * Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) // CVE-2024-46761 - pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv * Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) // CVE-2024-46844 - um: line: always fill *error_out in setup_one_line() * Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) // CVE-2024-46762 - xen: privcmd: Fix possible access to a freed kirqfd instance * Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) // CVE-2024-46763 - fou: Fix null-ptr-deref in GRO. * Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) // CVE-2024-46765 - ice: protect XDP configuration with a mutex * Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) // CVE-2024-46767 - net: phy: Fix missing of_node_put() for leds * Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) // CVE-2024-46768 - hwmon: (hp-wmi-sensors) Check if WMI event data exists * Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) // CVE-2024-46770 - ice: Add netif_device_attach/detach into PF reset flow * Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) // CVE-2024-46771 - can: bcm: Remove proc entry when dev is unregistered. * Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) // CVE-2024-46773 - drm/amd/display: Check denominator pbn_div before used * Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) // CVE-2024-47667 - PCI: keystone: Add workaround for Errata #i2037 (AM65x SR 1.0) * Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) // CVE-2024-46835 - drm/amdgpu: Fix smatch static checker warning * Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) // CVE-2024-46776 - drm/amd/display: Run DC_LOG_DC after checking link->link_enc * Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) // CVE-2024-46836 - usb: gadget: aspeed_udc: validate endpoint index for ast udc * Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) // CVE-2024-46777 - udf: Avoid excessive partition lengths * Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) // CVE-2024-46825 - wifi: iwlwifi: mvm: use IWL_FW_CHECK for link ID check * Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) // CVE-2024-46826 - ELF: fix kernel.randomize_va_space double read * Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) // CVE-2024-46827 - wifi: ath12k: fix firmware crash due to invalid peer nss * Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) // CVE-2024-47669 - nilfs2: fix state management in error path of log writing function * Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) // CVE-2024-46780 - nilfs2: protect references to superblock parameters exposed in sysfs * Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) // CVE-2024-46781 - nilfs2: fix missing cleanup on rollforward recovery error * Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) // CVE-2024-46828 - sched: sch_cake: fix bulk flow accounting logic for host fairness * Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) // CVE-2024-46782 - ila: call nf_unregister_net_hooks() sooner * Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) // CVE-2024-46783 - tcp_bpf: fix return value of tcp_bpf_sendmsg() * Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) // CVE-2024-46784 - net: mana: Fix error handling in mana_create_txq/rxq's NAPI cleanup * Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) // CVE-2024-46785 - eventfs: Use list_del_rcu() for SRCU protected list variable * Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) // CVE-2024-46786 - fscache: delete fscache_cookie_lru_timer when fscache exits to avoid UAF * Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) // CVE-2024-46787 - userfaultfd: fix checks for huge PMDs * Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) // CVE-2024-46838 - userfaultfd: don't BUG_ON() if khugepaged yanks our page table * Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) // CVE-2024-46845 - tracing/timerlat: Only clear timer if a kthread exists * Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) // CVE-2024-46788 - tracing/osnoise: Use a cpumask to know what threads are kthreads * Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) // CVE-2024-46846 - spi: rockchip: Resolve unbalanced runtime PM / system PM handling * Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) // CVE-2024-46847 - mm: vmalloc: ensure vmap_block is initialised before adding to queue * Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) // CVE-2024-46791 - can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open * Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) // CVE-2024-46829 - rtmutex: Drop rt_mutex::wait_lock before scheduling * Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) // CVE-2024-46848 - perf/x86/intel: Limit the period on Haswell * Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) // CVE-2024-46794 - x86/tdx: Fix data leak in mmio_read() * Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) // CVE-2024-46795 - ksmbd: unset the binding mark of a reused connection * Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) // CVE-2024-46797 - powerpc/qspinlock: Fix deadlock in MCS queue * Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) // CVE-2024-46830 - KVM: x86: Acquire kvm->srcu when handling KVM_SET_VCPU_EVENTS * Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) // CVE-2024-46798 - ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object * Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) // CVE-2024-46831 - net: microchip: vcap: Fix use-after-free error in kunit test * Navi24 RX6300 light up issue on 6.8 kernel (LP: #2084513) - drm/amd/display: Ensure populate uclk in bb construction * Noble update: upstream stable patchset 2024-10-18 (LP: #2084941) - drm/fb-helper: Don't schedule_work() to flush frame buffer during panic() - drm: panel-orientation-quirks: Add quirk for OrangePi Neo - scsi: ufs: core: Check LSDBS cap when !mcq - scsi: ufs: core: Bypass quick recovery if force reset is needed - btrfs: tree-checker: validate dref root and objectid - ALSA: hda/generic: Add a helper to mute speakers at suspend/shutdown - ALSA: hda/conexant: Mute speakers at suspend / shutdown - ALSA: ump: Transmit RPN/NRPN message at each MSB/LSB data reception - ALSA: ump: Explicitly reset RPN with Null RPN - ALSA: seq: ump: Use the common RPN/bank conversion context - ALSA: seq: ump: Transmit RPN/NRPN message at each MSB/LSB data reception - ALSA: seq: ump: Explicitly reset RPN with Null RPN - net/mlx5: DR, Fix 'stack guard page was hit' error in dr_rule - ASoC: amd: yc: Support mic on HP 14-em0002la - spi: hisi-kunpeng: Add validation for the minimum value of speed_hz - i2c: Fix conditional for substituting empty ACPI functions - dma-debug: avoid deadlock between dma debug vs printk and netconsole - net: usb: qmi_wwan: add MeiG Smart SRM825L - ASoC: amd: yc: Support mic on Lenovo Thinkpad E14 Gen 6 - ASoC: codecs: ES8326: button detect issue - selftests: mptcp: userspace pm create id 0 subflow - selftests: mptcp: dump userspace addrs list - selftests: mptcp: userspace pm get addr tests - selftests: mptcp: declare event macros in mptcp_lib - selftests: mptcp: join: cannot rm sf if closed - selftests: mptcp: add explicit test case for remove/readd - selftests: mptcp: join: check re-using ID of unused ADD_ADDR - selftests: mptcp: join: check re-adding init endp with != id - selftests: mptcp: add mptcp_lib_events helper - selftests: mptcp: join: validate event numbers - selftests: mptcp: join: check re-re-adding ID 0 signal - selftests: mptcp: join: test for flush/re-add endpoints - selftests: mptcp: join: disable get and dump addr checks - selftests: mptcp: join: stop transfer when check is done (part 2.2) - drm/amdgpu: Fix uninitialized variable warning in amdgpu_afmt_acr - drm/amd/display: Assign linear_pitch_alignment even for VM - drm/amdgpu: fix overflowed array index read warning - drm/amdgpu/pm: Check the return value of smum_send_msg_to_smc - drm/amd/pm: fix uninitialized variable warning - drm/amd/pm: fix uninitialized variable warning for smu8_hwmgr - drm/amd/pm: fix warning using uninitialized value of max_vid_step - drm/amd/pm: Fix negative array index read - drm/amd/pm: fix the Out-of-bounds read warning - drm/amd/pm: fix uninitialized variable warnings for vega10_hwmgr - drm/amdgpu: avoid reading vf2pf info size from FB - drm/amd/display: Check gpio_id before used as array index - drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6 - drm/amd/display: Check index for aux_rd_interval before using - drm/amd/display: Add array index check for hdcp ddc access - drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[] - drm/amd/display: Check msg_id before processing transcation - drm/amd/display: Fix Coverity INTERGER_OVERFLOW within construct_integrated_info - drm/amd/display: Fix Coverity INTEGER_OVERFLOW within dal_gpio_service_create - drm/amd/display: Spinlock before reading event - drm/amd/display: Fix Coverity INTEGER_OVERFLOW within decide_fallback_link_setting_max_bw_policy - drm/amd/display: Ensure index calculation will not overflow - drm/amd/display: Skip inactive planes within ModeSupportAndSystemConfiguration - drm/amd/display: Fix index may exceed array range within fpu_update_bw_bounding_box - drm/amd/amdgpu: Check tbo resource pointer - drm/amd/pm: fix uninitialized variable warnings for vangogh_ppt - drm/amdgpu/pm: Fix uninitialized variable warning for smu10 - drm/amdgpu/pm: Fix uninitialized variable agc_btc_response - drm/amdgpu: Fix the uninitialized variable warning - drm/amdkfd: Check debug trap enable before write dbg_ev_file - drm/amdkfd: Reconcile the definition and use of oem_id in struct kfd_topology_device - apparmor: fix possible NULL pointer dereference - wifi: ath12k: initialize 'ret' in ath12k_qmi_load_file_target_mem() - wifi: ath11k: initialize 'ret' in ath11k_qmi_load_file_target_mem() - drm/amdgpu/pm: Check input value for CUSTOM profile mode setting on legacy SOCs - drm/amdgpu: Fix the warning division or modulo by zero - drm/amdgpu: fix dereference after null check - drm/amdgpu: fix the waring dereferencing hive - drm/amd/pm: check specific index for aldebaran - drm/amd/pm: check specific index for smu13 - drm/amdgpu: the warning dereferencing obj for nbio_v7_4 - drm/amd/pm: check negtive return for table entries - wifi: rtw89: ser: avoid multiple deinit on same CAM - drm/kfd: Correct pinned buffer handling at kfd restore and validate process - drm/amdgpu: update type of buf size to u32 for eeprom functions - wifi: iwlwifi: remove fw_running op - cpufreq: scmi: Avoid overflow of target_freq in fast switch - PCI: al: Check IORESOURCE_BUS existence during probe - wifi: mac80211: check ieee80211_bss_info_change_notify() against MLD - hwspinlock: Introduce hwspin_lock_bust() - soc: qcom: smem: Add qcom_smem_bust_hwspin_lock_by_host() - RDMA/efa: Properly handle unexpected AQ completions - ionic: fix potential irq name truncation - pwm: xilinx: Fix u32 overflow issue in 32-bit width PWM mode. - rcu/nocb: Remove buggy bypass lock contention mitigation - media: v4l2-cci: Always assign *val - usbip: Don't submit special requests twice - usb: typec: ucsi: Fix null pointer dereference in trace - fsnotify: clear PARENT_WATCHED flags lazily - net: remove NULL-pointer net parameter in ip_metrics_convert - drm/amdgu: fix Unintentional integer overflow for mall size - regmap: spi: Fix potential off-by-one when calculating reserved size - smack: tcp: ipv4, fix incorrect labeling - platform/chrome: cros_ec_lpc: MEC access can use an AML mutex - net/mlx5e: SHAMPO, Fix incorrect page release - drm/meson: plane: Add error handling - crypto: stm32/cryp - call finalize with bh disabled - gfs2: Revert "Add quota_change type" - drm/bridge: tc358767: Check if fully initialized before signalling HPD event via IRQ - dmaengine: altera-msgdma: use irq variant of spin_lock/unlock while invoking callbacks - dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor - hwmon: (k10temp) Check return value of amd_smn_read() - wifi: cfg80211: make hash table duplicates more survivable - f2fs: fix to do sanity check on blocks for inline_data inode - driver: iio: add missing checks on iio_info's callback access - block: remove the blk_flush_integrity call in blk_integrity_unregister - drm/amdgpu: add skip_hw_access checks for sriov - drm/amdgpu: add lock in amdgpu_gart_invalidate_tlb - drm/amdgpu: add lock in kfd_process_dequeue_from_device - drm/amd/display: Don't use fsleep for PSR exit waits on dmub replay - drm/amd/display: added NULL check at start of dc_validate_stream - drm/amd/display: Correct the defined value for AMDGPU_DMUB_NOTIFICATION_MAX - drm/amd/display: use preferred link settings for dp signal only - drm/amd/display: Check BIOS images before it is used - drm/amd/display: Skip wbscl_set_scaler_filter if filter is null - media: uvcvideo: Enforce alignment of frame and interval - virtio_net: Fix napi_skb_cache_put warning - i2c: Use IS_REACHABLE() for substituting empty ACPI functions - btrfs: factor out stripe length calculation into a helper - btrfs: scrub: update last_physical after scrubbing one stripe - btrfs: fix qgroup reserve leaks in cow_file_range - virtio-net: check feature before configuring the vq coalescing command - drm/amd/display: Handle the case which quad_part is equal 0 - drm/amdgpu: Handle sg size limit for contiguous allocation - drm/amd/pm: fix uninitialized variable warning for smu_v13 - drm/amdgpu: fix uninitialized scalar variable warning - drm/amd/display: Ensure array index tg_inst won't be -1 - drm/amd/display: handle invalid connector indices - drm/amd/display: Increase MAX_LINKS by 2 - drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links - drm/amd/display: Fix incorrect size calculation for loop - drm/amd/display: Use kcalloc() instead of kzalloc() - drm/amd/display: Add missing NULL pointer check within dpcd_extend_address_range - drm/amd/display: Release state memory if amdgpu_dm_create_color_properties fail - drm/amd/display: Check link_index before accessing dc->links[] - drm/amd/display: Add otg_master NULL check within resource_log_pipe_topology_update - drm/amd/display: Release clck_src memory if clk_src_construct fails - drm/amd/display: Fix writeback job lock evasion within dm_crtc_high_irq - drm/xe: Demote CCS_MODE info to debug only - drm/drm-bridge: Drop conditionals around of_node pointers - drm/amdgpu: fix uninitialized variable warning for amdgpu_xgmi - drm/amdgpu: fix uninitialized variable warning for jpeg_v4 - drm/amdgpu: Fix uninitialized variable warning in amdgpu_info_ioctl - wifi: ath12k: initialize 'ret' in ath12k_dp_rxdma_ring_sel_config_wcn7850() - drm/amdgpu/pm: Check input value for power profile setting on smu11, smu13 and smu14 - drm/xe: Fix the warning conditions - drm/amd/display: Fix pipe addition logic in calc_blocks_to_ungate DCN35 - wifi: cfg80211: restrict operation during radar detection - remoteproc: qcom_q6v5_pas: Add hwspinlock bust on stop - tcp: annotate data-races around tw->tw_ts_recent and tw->tw_ts_recent_stamp - drm/xe: Don't overmap identity VRAM mapping - net: tcp/dccp: prepare for tw_timer un-pinning - drm/xe: Ensure caller uses sole domain for xe_force_wake_assert_held - drm/xe: Check valid domain is passed in xe_force_wake_ref - thermal: trip: Use READ_ONCE() for lockless access to trip properties - drm/xe: Add GuC state asserts to deregister_exec_queue - drm/amdgpu: fix overflowed constant warning in mmhub_set_clockgating() - drm/amd/display: Remove register from DCN35 DMCUB diagnostic collection - drm/amd/display: Disable DMCUB timeout for DCN35 - drm/amd/display: Avoid overflow from uint32_t to uint8_t - pinctrl: core: reset gpio_device in loop in pinctrl_pins_show() - Upstream stable to v6.6.50, v6.10.9 * CVE-2024-46747 - HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup * CVE-2024-46725 - drm/amdgpu: Fix out-of-bounds write warning * CVE-2024-46724 - drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number * [SRU] Fix AST DP output after resume (LP: #2083022) - drm/ast: Inline drm_simple_encoder_init() - drm/ast: Implement atomic enable/disable for encoders - drm/ast: Program mode for AST DP in atomic_mode_set - drm/ast: Move mode-setting code into mode_set_nofb CRTC helper - drm/ast: Handle primary-plane format setup in atomic_update - drm/ast: Remove gamma LUT updates from DPMS code - drm/ast: Only set VGA SCREEN_DISABLE bit in CRTC code - drm/ast: Inline ast_crtc_dpms() into callers - drm/ast: Use drm_atomic_helper_commit_tail() helper * UBSAN array-index-out-of-bounds reported with N-6.8 on P9 node baltar (LP: #2078038) - scripts/kernel-doc: reindent - compiler_types: add Endianness-dependent __counted_by_{le, be} - scsi: aacraid: union aac_init: Replace 1-element array with flexible array - scsi: aacraid: struct aac_ciss_phys_luns_resp: Replace 1-element array with flexible array - scsi: aacraid: Rearrange order of struct aac_srb_unit - scsi: aacraid: struct {user, }sgmap{, 64, raw}: Replace 1-element arrays with flexible arrays * r8169: transmit queue 0 timed out error when re-plugging the Ethernet cable (LP: #2084526) - r8169: disable ALDPS per default for RTL8125 * [SRU] cpufreq: intel_pstate: Support Emerald Rapids OOB mode (LP: #2084834) - cpufreq: intel_pstate: Support Emerald Rapids OOB mode * CVE-2024-46723 - drm/amdgpu: fix ucode out-of-bounds read warning * CVE-2024-46743 - of/irq: Prevent device address out-of-bounds read in interrupt map walk * CVE-2024-46757 - hwmon: (nct6775-core) Fix underflows seen when writing limit attributes * [SRU] Ubuntu 24.04 - GPU cannot be installed with DL380a Gen12 (2P, SRF-SP) (LP: #2081079) - perf/x86/uncore: Save the unit control address of all units - perf/x86/uncore: Support per PMU cpumask - perf/x86/uncore: Retrieve the unit ID from the unit control RB tree - perf/x86/uncore: Apply the unit control RB tree to MMIO uncore units - perf/x86/uncore: Apply the unit control RB tree to MSR uncore units - perf/x86/uncore: Apply the unit control RB tree to PCI uncore units - perf/x86/uncore: Cleanup unused unit structure - perf/x86/intel/uncore: Support HBM and CXL PMON counters * Noble update: upstream stable patchset 2024-10-11 (LP: #2084225) - ALSA: seq: Skip event type filtering for UMP events - LoongArch: Remove the unused dma-direct.h - btrfs: fix a use-after-free when hitting errors inside btrfs_submit_chunk() - btrfs: run delayed iputs when flushing delalloc - smb/client: avoid dereferencing rdata=NULL in smb2_new_read_req() - pinctrl: rockchip: correct RK3328 iomux width flag for GPIO2-B pins - pinctrl: single: fix potential NULL dereference in pcs_get_function() - wifi: wfx: repair open network AP mode - wifi: mwifiex: duplicate static structs used in driver instances - net: mana: Fix race of mana_hwc_post_rx_wqe and new hwc response - mptcp: close subflow when receiving TCP+FIN - mptcp: sched: check both backup in retrans - mptcp: pm: reuse ID 0 after delete and re-add - mptcp: pm: skip connecting to already established sf - mptcp: pm: reset MPC endp ID when re-added - mptcp: pm: send ACK on an active subflow - mptcp: pm: do not remove already closed subflows - mptcp: pm: fix ID 0 endp usage after multiple re-creations - mptcp: pm: ADD_ADDR 0 is not a new address - selftests: mptcp: join: check removing ID 0 endpoint - selftests: mptcp: join: no extra msg if no counter - selftests: mptcp: join: check re-re-adding ID 0 endp - drm/amdgpu/swsmu: always force a state reprogram on init - drm/vmwgfx: Fix prime with external buffers - usb: typec: fix up incorrectly backported "usb: typec: tcpm: unregister existing source caps before re-registration" - ASoC: amd: acp: fix module autoloading - ASoC: SOF: amd: Fix for acp init sequence - pinctrl: mediatek: common-v2: Fix broken bias-disable for PULL_PU_PD_RSEL_TYPE - pinctrl: starfive: jh7110: Correct the level trigger configuration of iev register - ovl: pass string to ovl_parse_layer() - ovl: fix wrong lowerdir number check for parameter Opt_lowerdir - ovl: ovl_parse_param_lowerdir: Add missed 'n' for pr_err - mm: Fix missing folio invalidation calls during truncation - cifs: Fix FALLOC_FL_PUNCH_HOLE support - selinux,smack: don't bypass permissions check in inode_setsecctx hook - iommufd: Do not allow creating areas without READ or WRITE - phy: fsl-imx8mq-usb: fix tuning parameter name - dmaengine: dw-edma: Fix unmasking STOP and ABORT interrupts for HDMA - dmaengine: dw-edma: Do not enable watermark interrupts for HDMA - phy: xilinx: phy-zynqmp: Fix SGMII linkup failure on resume - dmaengine: dw: Add peripheral bus width verification - dmaengine: dw: Add memory bus width verification - Bluetooth: btnxpuart: Resolve TX timeout error in power save stress test - Bluetooth: btnxpuart: Handle FW Download Abort scenario - Bluetooth: btnxpuart: Fix random crash seen while removing driver - Bluetooth: hci_core: Fix not handling hibernation actions - iommu: Do not return 0 from map_pages if it doesn't do anything - netfilter: nf_tables: restore IP sanity checks for netdev/egress - wifi: iwlwifi: fw: fix wgds rev 3 exact size - ethtool: check device is present when getting link settings - netfilter: nf_tables_ipv6: consider network offset in netdev/egress validation - selftests: forwarding: no_forwarding: Down ports on cleanup - selftests: forwarding: local_termination: Down ports on cleanup - bonding: implement xdo_dev_state_free and call it after deletion - bonding: extract the use of real_device into local variable - bonding: change ipsec_lock from spin lock to mutex - gtp: fix a potential NULL pointer dereference - sctp: fix association labeling in the duplicate COOKIE-ECHO case - drm/amd/display: avoid using null object of framebuffer - net: busy-poll: use ktime_get_ns() instead of local_clock() - nfc: pn533: Add poll mod list filling check - soc: qcom: cmd-db: Map shared memory as WC, not WB - soc: qcom: pmic_glink: Actually communicate when remote goes down - soc: qcom: pmic_glink: Fix race during initialization - cdc-acm: Add DISABLE_ECHO quirk for GE HealthCare UI Controller - scsi: sd: Ignore command SYNCHRONIZE CACHE error if format in progress - USB: serial: option: add MeiG Smart SRM825L - ARM: dts: imx6dl-yapp43: Increase LED current to match the yapp4 HW design - usb: dwc3: omap: add missing depopulate in probe error path - usb: dwc3: core: Prevent USB core invalid event buffer address access - usb: dwc3: st: fix probed platform device ref count on probe error path - usb: dwc3: st: add missing depopulate in probe error path - usb: core: sysfs: Unmerge @usb3_hardware_lpm_attr_group in remove_power_attributes() - usb: cdnsp: fix incorrect index in cdnsp_get_hw_deq function - usb: cdnsp: fix for Link TRB with TC - ARM: dts: omap3-n900: correct the accelerometer orientation - arm64: dts: imx8mp-beacon-kit: Fix Stereo Audio on WM8962 - arm64: dts: imx93: add nvmem property for fec1 - arm64: dts: imx93: add nvmem property for eqos - arm64: dts: imx93: update default value for snps,clk-csr - arm64: dts: freescale: imx93-tqma9352: fix CMA alloc-ranges - arm64: dts: freescale: imx93-tqma9352-mba93xxla: fix typo - scsi: aacraid: Fix double-free on probe failure - apparmor: fix policy_unpack_test on big endian systems - mptcp: pr_debug: add missing n at the end - mptcp: make pm_remove_addrs_and_subflows static - mptcp: pm: fix RM_ADDR ID for the initial subflow - mptcp: avoid duplicated SUB_CLOSED events - drm/i915/dsi: Make Lenovo Yoga Tab 3 X90F DMI match less strict - drm/vmwgfx: Prevent unmapping active read buffers - drm/vmwgfx: Disable coherent dumb buffers without 3d - firmware/sysfb: Set firmware-framebuffer parent device - firmware/sysfb: Create firmware device only for enabled PCI devices - video/aperture: optionally match the device in sysfb_disable() - drm/xe: Prepare display for D3Cold - drm/xe/display: Make display suspend/resume work on discrete - drm/xe/vm: Simplify if condition - drm/xe/exec_queue: Rename xe_exec_queue::compute to xe_exec_queue::lr - drm/xe: prevent UAF around preempt fence - pinctrl: qcom: x1e80100: Update PDC hwirq map - ASoC: SOF: amd: move iram-dram fence register programming sequence - nfsd: ensure that nfsd4_fattr_args.context is zeroed out - backing-file: convert to using fops->splice_write - pinctrl: qcom: x1e80100: Fix special pin offsets - afs: Fix post-setattr file edit to do truncation correctly - netfs: Fix netfs_release_folio() to say no if folio dirty - netfs: Fix missing iterator reset on retry of short read - dmaengine: ti: omap-dma: Initialize sglen after allocation - pktgen: use cpus_read_lock() in pg_net_init() - net_sched: sch_fq: fix incorrect behavior for small weights - tcp: fix forever orphan socket caused by tcp_abort - drm/xe/hwmon: Fix WRITE_I1 param from u32 to u16 - usb: typec: fsa4480: Relax CHIP_ID check - firmware: qcom: scm: Mark get_wq_ctx() as atomic call - usb: gadget: uvc: queue pump work in uvcg_video_enable() - usb: dwc3: xilinx: add missing depopulate in probe error path - usb: typec: ucsi: Move unregister out of atomic section - firmware: microchip: fix incorrect error report of programming:timeout on success - Upstream stable to v6.6.49, v6.10.8 * Fix blank screen on external display after reconnecting the USB type-C (LP: #2081786) // Noble update: upstream stable patchset 2024-10-11 (LP: #2084225) - drm/i915/display: add intel_display -> drm_device backpointer - drm/i915/display: add generic to_intel_display() macro - drm/i915/dp_mst: Fix MST state after a sink reset * Noble update: upstream stable patchset 2024-10-09 (LP: #2084005) - tty: serial: fsl_lpuart: mark last busy before uart_add_one_port - tty: atmel_serial: use the correct RTS flag. - Revert "ACPI: EC: Evaluate orphan _REG under EC device" - Revert "misc: fastrpc: Restrict untrusted app to attach to privileged PD" - Revert "usb: typec: tcpm: clear pd_event queue in PORT_RESET" - selinux: revert our use of vma_is_initial_heap() - fuse: Initialize beyond-EOF page contents before setting uptodate - char: xillybus: Don't destroy workqueue from work item running on it - char: xillybus: Refine workqueue handling - char: xillybus: Check USB endpoints when probing device - ALSA: usb-audio: Add delay quirk for VIVO USB-C-XE710 HEADSET - ALSA: usb-audio: Support Yamaha P-125 quirk entry - xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration - thunderbolt: Mark XDomain as unplugged when router is removed - ALSA: hda/tas2781: fix wrong calibrated data order - s390/dasd: fix error recovery leading to data corruption on ESE devices - KVM: s390: fix validity interception issue when gisa is switched off - riscv: change XIP's kernel_map.size to be size of the entire kernel - i2c: tegra: Do not mark ACPI devices as irq safe - ACPICA: Add a depth argument to acpi_execute_reg_methods() - ACPI: EC: Evaluate _REG outside the EC scope more carefully - arm64: ACPI: NUMA: initialize all values of acpi_early_node_map to NUMA_NO_NODE - dm resume: don't return EINVAL when signalled - dm persistent data: fix memory allocation failure - fs/ntfs3: add prefix to bitmap_size() and use BITS_TO_U64() - s390/cio: rename bitmap_size() -> idset_bitmap_size() - btrfs: rename bitmap_set_bits() -> btrfs_bitmap_set_bits() - bitmap: introduce generic optimized bitmap_size() - fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE - i2c: qcom-geni: Add missing geni_icc_disable in geni_i2c_runtime_resume - rtla/osnoise: Prevent NULL dereference in error handling - net: mana: Fix RX buf alloc_size alignment and atomic op panic - net: mana: Fix doorbell out of order violation and avoid unnecessary doorbell rings - wifi: brcmfmac: cfg80211: Handle SSID based pmksa deletion - selinux: fix potential counting error in avc_add_xperms_decision() - selinux: add the processing of the failure of avc_add_xperms_decision() - mm/memory-failure: use raw_spinlock_t in struct memory_failure_cpu - btrfs: tree-checker: reject BTRFS_FT_UNKNOWN dir type - btrfs: zoned: properly take lock to read/update block group's zoned variables - btrfs: tree-checker: add dev extent item checks - drm/amdgpu: Actually check flags for all context ops. - memcg_write_event_control(): fix a user-triggerable oops - drm/amdgpu/jpeg2: properly set atomics vmid field - drm/amdgpu/jpeg4: properly set atomics vmid field - s390/uv: Panic for set and remove shared access UVC errors - bpf: Fix updating attached freplace prog in prog_array map - igc: Fix packet still tx after gate close by reducing i226 MAC retry buffer - igc: Fix qbv_config_change_errors logics - igc: Fix reset adapter logics when tx mode change - net/mlx5e: Take state lock during tx timeout reporter - net/mlx5e: Correctly report errors for ethtool rx flows - net: axienet: Fix register defines comment description - net: dsa: vsc73xx: pass value in phy_write operation - net: dsa: vsc73xx: use read_poll_timeout instead delay loop - net: dsa: vsc73xx: check busy flag in MDIO operations - net: ethernet: mtk_wed: fix use-after-free panic in mtk_wed_setup_tc_block_cb() - mlxbf_gige: disable RX filters until RX path initialized - mptcp: correct MPTCP_SUBFLOW_ATTR_SSN_OFFSET reserved size - tcp: Update window clamping condition - netfilter: allow ipv6 fragments to arrive on different devices - netfilter: flowtable: initialise extack before use - netfilter: nf_queue: drop packets with cloned unconfirmed conntracks - netfilter: nf_tables: Audit log dump reset after the fact - netfilter: nf_tables: Introduce nf_tables_getobj_single - netfilter: nf_tables: Add locking for NFT_MSG_GETOBJ_RESET requests - vsock: fix recursive ->recvmsg calls - selftests: net: lib: ignore possible errors - selftests: net: lib: kill PIDs before del netns - net: hns3: fix wrong use of semaphore up - net: hns3: use the user's cfg after reset - net: hns3: fix a deadlock problem when config TC during resetting - gpio: mlxbf3: Support shutdown() function - ALSA: hda/realtek: Fix noise from speakers on Lenovo IdeaPad 3 15IAU7 - rust: work around `bindgen` 0.69.0 issue - rust: suppress error messages from CONFIG_{RUSTC,BINDGEN}_VERSION_TEXT - rust: fix the default format for CONFIG_{RUSTC,BINDGEN}_VERSION_TEXT - cpu/SMT: Enable SMT only if a core is online - powerpc/topology: Check if a core is online - arm64: Fix KASAN random tag seed initialization - block: Fix lockdep warning in blk_mq_mark_tag_wait - wifi: ath12k: Add missing qmi_txn_cancel() calls - quota: Remove BUG_ON from dqget() - riscv: blacklist assembly symbols for kprobe - kernfs: fix false-positive WARN(nr_mmapped) in kernfs_drain_open_files - media: pci: cx23885: check cx23885_vdev_init() return - fs: binfmt_elf_efpic: don't use missing interpreter's properties - scsi: lpfc: Initialize status local variable in lpfc_sli4_repost_sgl_list() - media: drivers/media/dvb-core: copy user arrays safely - wifi: iwlwifi: mvm: avoid garbage iPN - net/sun3_82586: Avoid reading past buffer in debug output - drm/lima: set gp bus_stop bit before hard reset - gpio: sysfs: extend the critical section for unregistering sysfs devices - hrtimer: Select housekeeping CPU during migration - virtiofs: forbid newlines in tags - accel/habanalabs: fix debugfs files permissions - clocksource/drivers/arm_global_timer: Guard against division by zero - tick: Move got_idle_tick away from common flags - netlink: hold nlk->cb_mutex longer in __netlink_dump_start() - md: clean up invalid BUG_ON in md_ioctl - x86: Increase brk randomness entropy for 64-bit systems - memory: stm32-fmc2-ebi: check regmap_read return value - parisc: Use irq_enter_rcu() to fix warning at kernel/context_tracking.c:367 - rxrpc: Don't pick values out of the wire header when setting up security - f2fs: stop checkpoint when get a out-of-bounds segment - powerpc/boot: Handle allocation failure in simple_realloc() - powerpc/boot: Only free if realloc() succeeds - btrfs: delayed-inode: drop pointless BUG_ON in __btrfs_remove_delayed_item() - btrfs: defrag: change BUG_ON to assertion in btrfs_defrag_leaves() - btrfs: change BUG_ON to assertion when checking for delayed_node root - btrfs: push errors up from add_async_extent() - btrfs: handle invalid root reference found in may_destroy_subvol() - btrfs: send: handle unexpected data in header buffer in begin_cmd() - btrfs: send: handle unexpected inode in header process_recorded_refs() - btrfs: change BUG_ON to assertion in tree_move_down() - btrfs: delete pointless BUG_ON check on quota root in btrfs_qgroup_account_extent() - f2fs: fix to do sanity check in update_sit_entry - usb: gadget: fsl: Increase size of name buffer for endpoints - nvme: clear caller pointer on identify failure - Bluetooth: bnep: Fix out-of-bound access - firmware: cirrus: cs_dsp: Initialize debugfs_root to invalid - rtc: nct3018y: fix possible NULL dereference - net: hns3: add checking for vf id of mailbox - nvmet-tcp: do not continue for invalid icreq - NFS: avoid infinite loop in pnfs_update_layout. - openrisc: Call setup_memory() earlier in the init sequence - s390/iucv: fix receive buffer virtual vs physical address confusion - irqchip/renesas-rzg2l: Do not set TIEN and TINT source at the same time - platform/x86: lg-laptop: fix %s null argument warning - usb: dwc3: core: Skip setting event buffers for host only controllers - irqchip/gic-v3-its: Remove BUG_ON in its_vpe_irq_domain_alloc - ext4: set the type of max_zeroout to unsigned int to avoid overflow - nvmet-rdma: fix possible bad dereference when freeing rsps - selftests/bpf: Fix a few tests for GCC related warnings. - Revert "bpf, sockmap: Prevent lock inversion deadlock in map delete elem" - nvme: use srcu for iterating namespace list - drm/amdgpu: fix dereference null return value for the function amdgpu_vm_pt_parent - hrtimer: Prevent queuing of hrtimer without a function callback - nvme: fix namespace removal list - gtp: pull network headers in gtp_dev_xmit() - riscv: entry: always initialize regs->a0 to -ENOSYS - smb3: fix lock breakage for cached writes - dm suspend: return -ERESTARTSYS instead of -EINTR - selftests: memfd_secret: don't build memfd_secret test on unsupported arches - mm/vmalloc: fix page mapping if vm_area_alloc_pages() with high order fallback to order 0 - btrfs: send: allow cloning non-aligned extent if it ends at i_size - drm/amd/amdgpu: command submission parser for JPEG - platform/surface: aggregator: Fix warning when controller is destroyed in probe - ALSA: hda/tas2781: Use correct endian conversion - Bluetooth: hci_core: Fix LE quote calculation - Bluetooth: SMP: Fix assumption of Central always being Initiator - net: mscc: ocelot: use ocelot_xmit_get_vlan_info() also for FDMA and register injection - net: mscc: ocelot: fix QoS class for injected packets with "ocelot-8021q" - net: mscc: ocelot: serialize access to the injection/extraction groups - tc-testing: don't access non-existent variable on exception - selftests: udpgro: report error when receive failed - tcp/dccp: bypass empty buckets in inet_twsk_purge() - tcp/dccp: do not care about families in inet_twsk_purge() - tcp: prevent concurrent execution of tcp_sk_exit_batch - net: mctp: test: Use correct skb for route input check - kcm: Serialise kcm_sendmsg() for the same socket. - netfilter: nft_counter: Disable BH in nft_counter_offload_stats(). - netfilter: nft_counter: Synchronize nft_counter_reset() against reader. - ip6_tunnel: Fix broken GRO - bonding: fix bond_ipsec_offload_ok return type - bonding: fix null pointer deref in bond_ipsec_offload_ok - bonding: fix xfrm real_dev null pointer dereference - bonding: fix xfrm state handling when clearing active slave - ice: fix page reuse when PAGE_SIZE is over 8k - ice: fix ICE_LAST_OFFSET formula - ice: fix truesize operations for PAGE_SIZE >= 8192 - dpaa2-switch: Fix error checking in dpaa2_switch_seed_bp() - igb: cope with large MAX_SKB_FRAGS - net: dsa: mv88e6xxx: Fix out-of-bound access - udp: fix receiving fraglist GSO packets - ipv6: fix possible UAF in ip6_finish_output2() - ipv6: prevent possible UAF in ip6_xmit() - bnxt_en: Fix double DMA unmapping for XDP_REDIRECT - netfilter: flowtable: validate vlan header - octeontx2-af: Fix CPT AF register offset calculation - net: xilinx: axienet: Always disable promiscuous mode - net: xilinx: axienet: Fix dangling multicast addresses - net: ovs: fix ovs_drop_reasons error - drm/msm/dpu: don't play tricks with debug macros - drm/msm/dp: fix the max supported bpp logic - drm/msm/dpu: split dpu_encoder_wait_for_event into two functions - drm/msm/dpu: capture snapshot on the first commit_done timeout - drm/msm/dpu: move dpu_encoder's connector assignment to atomic_enable() - drm/msm/dp: reset the link phy params before link training - drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails - drm/msm/dpu: take plane rotation into account for wide planes - drm/msm: fix the highest_bank_bit for sc7180 - mmc: mmc_test: Fix NULL dereference on allocation failure - Bluetooth: MGMT: Add error handling to pair_device() - scsi: core: Fix the return value of scsi_logical_block_count() - ksmbd: the buffer of smb2 query dir response has at least 1 byte - drm/amdgpu: Validate TA binary size - net: dsa: microchip: fix PTP config failure when using multiple ports - MIPS: Loongson64: Set timer mode in cpu-probe - HID: wacom: Defer calculation of resolution until resolution_code is known - Input: i8042 - add forcenorestore quirk to leave controller untouched even on s3 - Input: i8042 - use new forcenorestore quirk to replace old buggy quirk combination - cxgb4: add forgotten u64 ivlan cast before shift - KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3 - mmc: mtk-sd: receive cmd8 data when hs400 tuning fail - mmc: dw_mmc: allow biu and ciu clocks to defer - smb3: fix broken cached reads when posix locks - pmdomain: imx: scu-pd: Remove duplicated clocks - pmdomain: imx: wait SSAR when i.MX93 power domain on - nouveau/firmware: use dma non-coherent allocator - mptcp: pm: re-using ID of unused removed ADD_ADDR - mptcp: pm: re-using ID of unused removed subflows - mptcp: pm: re-using ID of unused flushed subflows - mptcp: pm: remove mptcp_pm_remove_subflow() - mptcp: pm: only mark 'subflow' endp as available - mptcp: pm: only decrement add_addr_accepted for MPJ req - mptcp: pm: check add_addr_accept_max before accepting new ADD_ADDR - mptcp: pm: only in-kernel cannot have entries with ID 0 - mptcp: pm: fullmesh: select the right ID later - mptcp: pm: avoid possible UaF when selecting endp - selftests: mptcp: join: validate fullmesh endp on 1st sf - selftests: mptcp: join: restrict fullmesh endp on 1st sf - selftests: mptcp: join: check re-using ID of closed subflow - tcp: do not export tcp_twsk_purge() - drm/msm/mdss: specify cfg bandwidth for SDM670 - drm/panel: nt36523: Set 120Hz fps for xiaomi,elish panels - igc: Fix qbv tx latency by setting gtxoffset - ALSA: timer: Relax start tick time check for slave timer elements - bpf: Fix a kernel verifier crash in stacksafe() - selftests/bpf: Add a test to verify previous stacksafe() fix - Revert "s390/dasd: Establish DMA alignment" - Input: MT - limit max slots - tools: move alignment-related macros to new <linux/align.h> - Revert "serial: 8250_omap: Set the console genpd always on if no console suspend" - usb: misc: ljca: Add Lunar Lake ljca GPIO HID to ljca_gpio_hids[] - usb: xhci: Check for xhci->interrupters being allocated in xhci_mem_clearup() - vfs: Don't evict inode under the inode lru traversing context - tracing: Return from tracing_buffers_read() if the file has been closed - mm: fix endless reclaim on machines with unaccepted memory - fs/netfs/fscache_cookie: add missing "n_accesses" check - mm/numa: no task_numa_fault() call if PMD is changed - mm/numa: no task_numa_fault() call if PTE is changed - btrfs: check delayed refs when we're checking if a ref exists - drm/amd/display: Adjust cursor position - drm/amd/display: fix s2idle entry for DCN3.5+ - drm/amd/display: Enable otg synchronization logic for DCN321 - drm/amd/display: fix cursor offset on rotation 180 - netfs: Fault in smaller chunks for non-large folio mappings - libfs: fix infinite directory reads for offset dir - kallsyms: Avoid weak references for kallsyms symbols - kbuild: avoid unneeded kallsyms step 3 - kbuild: refactor variables in scripts/link-vmlinux.sh - kbuild: remove PROVIDE() for kallsyms symbols - kallsyms: get rid of code for absolute kallsyms - [Config] Remove CONFIG_KALLSYMS_BASE_RELATIVE - kallsyms: Do not cleanup .llvm.<hash> suffix before sorting symbols - bpf: Replace deprecated strncpy with strscpy - kallsyms: replace deprecated strncpy with strscpy - kallsyms: rework symbol lookup return codes - kallsyms: Match symbols exactly with CONFIG_LTO_CLANG - drm/v3d: Fix out-of-bounds read in `v3d_csd_job_run()` - drm/amd/display: Don't register panel_power_savings on OLED panels - wifi: ath12k: use 128 bytes aligned iova in transmit path for WCN7850 - kbuild: merge temporary vmlinux for BTF and kallsyms - kbuild: avoid scripts/kallsyms parsing /dev/null - Bluetooth: HCI: Invert LE State quirk to be opt-out rather then opt-in - net/mlx5: Fix IPsec RoCE MPV trace call - selftests: udpgro: no need to load xdp for gro - ice: use internal pf id instead of function number - drm/msm/dpu: limit QCM2290 to RGB formats only - drm/msm/dpu: relax YUV requirements - spi: spi-cadence-quadspi: Fix OSPI NOR failures during system resume - drm/xe/display: stop calling domains_driver_remove twice - drm/xe: Fix opregion leak - drm/xe/mmio: move mmio_fini over to devm - drm/xe: reset mmio mappings with devm - drm/xe: Fix tile fini sequence - drm/xe: Fix missing workqueue destroy in xe_gt_pagefault - drm/xe: Free job before xe_exec_queue_put - thermal/debugfs: Fix the NULL vs IS_ERR() confusion in debugfs_create_dir() - nvme: move stopping keep-alive into nvme_uninit_ctrl() - drm/amdgpu/sdma5.2: limit wptr workaround to sdma 5.2.1 - s390/ap: Refine AP bus bindings complete processing - net: ngbe: Fix phy mode set to external phy - iommufd/device: Fix hwpt at err_unresv in iommufd_device_do_replace() - cgroup/cpuset: fix panic caused by partcmd_update - cgroup/cpuset: Clear effective_xcpus on cpus_allowed clearing only if cpus.exclusive not set - of: Introduce for_each_*_child_of_node_scoped() to automate of_node_put() handling - thermal: of: Fix OF node leak in thermal_of_trips_init() error path - thermal: of: Fix OF node leak in thermal_of_zone_register() - thermal: of: Fix OF node leak in of_thermal_zone_find() error paths - Upstream stable to v6.6.48, v6.10.7 * Unable to list directories using CIFS on 6.8 kernel (LP: #2082423) // Noble update: upstream stable patchset 2024-10-09 (LP: #2084005) - smb: client: ignore unhandled reparse tags * CVE-2024-46759 - hwmon: (adc128d818) Fix underflows seen when writing limit attributes * CVE-2024-46758 - hwmon: (lm95234) Fix underflows seen when writing limit attributes * CVE-2024-46756 - hwmon: (w83627ehf) Fix underflows seen when writing limit attributes * CVE-2024-46738 - VMCI: Fix use-after-free when removing resource in vmci_resource_remove() * CVE-2024-46722 - drm/amdgpu: fix mc_data out-of-bounds read warning * LXD fan bridge causes blocked tasks (LP: #2064176) - SAUCE: fan: release rcu_read_lock on skb discard path - SAUCE: fan: fix racy device stat update * x86/CPU/AMD: Add models 0x10-0x1f to the Zen5 range (LP: #2081863) - x86/CPU/AMD: Add models 0x60-0x6f to the Zen5 range * UBSAN: array-index-out-of-bounds in module mt76 (LP: #2081785) - wifi: mt76: mt7925: fix a potential array-index-out-of-bounds issue for clc * The system hangs after resume with thunderbolt monitor(AMD GPU [1002:1900]) (LP: #2083182) - SAUCE: drm/amd/display: Fix system hang while resume with TBT monitor * [SRU] GPU: support additional device ids for DG2 driver (LP: #2083701) - drm/i915: Add new PCI IDs to DG2 platform in driver * [SRU]Intel Arrow Lake IBECC feature backport request for ubuntu 22.04.5 and 24.04.1 server (LP: #2077861) - EDAC/igen6: Add Intel Arrow Lake-U/H SoCs support * Noble update: upstream stable patchset 2024-10-07 (LP: #2083794) - ASoC: topology: Clean up route loading - ASoC: topology: Fix route memory corruption - LoongArch: Define __ARCH_WANT_NEW_STAT in unistd.h - sunrpc: don't change ->sv_stats if it doesn't exist - nfsd: stop setting ->pg_stats for unused stats - sunrpc: pass in the sv_stats struct through svc_create_pooled - sunrpc: remove ->pg_stats from svc_program - nfsd: remove nfsd_stats, make th_cnt a global counter - nfsd: make svc_stat per-network namespace instead of global - mm: gup: stop abusing try_grab_folio - nvme/pci: Add APST quirk for Lenovo N60z laptop - genirq/cpuhotplug: Skip suspended interrupts when restoring affinity - genirq/cpuhotplug: Retry with cpu_online_mask when migration fails - quota: Detect loops in quota tree - bpf: Replace bpf_lpm_trie_key 0-length array with flexible array - fs: Annotate struct file_handle with __counted_by() and use struct_size() - mISDN: fix MISDN_TIME_STAMP handling - mm/page_table_check: support userfault wr-protect entries - bpf, net: Use DEV_STAT_INC() - f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC - f2fs: fix to cover read extent cache access with lock - fou: remove warn in gue_gro_receive on unsupported protocol - jfs: fix null ptr deref in dtInsertEntry - jfs: Fix shift-out-of-bounds in dbDiscardAG - fs/ntfs3: Do copy_to_user out of run_lock - ALSA: usb: Fix UBSAN warning in parse_audio_unit() - binfmt_flat: Fix corruption when not offsetting data start - mm/debug_vm_pgtable: drop RANDOM_ORVALUE trick - KVM: arm64: Don't defer TLB invalidation when zapping table entries - KVM: arm64: Don't pass a TLBI level hint when zapping table entries - drm/amd/display: Defer handling mst up request in resume - drm/amd/display: Guard cursor idle reallow by DC debug option - drm/amd/display: Separate setting and programming of cursor - drm/amd/display: Prevent IPX From Link Detect and Set Mode - ASoC: cs35l56: Patch CS35L56_IRQ1_MASK_18 to the default value - platform/x86/amd/pmf: Fix to Update HPD Data When ALS is Disabled - platform/x86: ideapad-laptop: introduce a generic notification chain - platform/x86: ideapad-laptop: move ymc_trigger_ec from lenovo-ymc - platform/x86: ideapad-laptop: add a mutex to synchronize VPC commands - drm/amd/display: Solve mst monitors blank out problem after resume - drm/amdgpu/display: Fix null pointer dereference in dc_stream_program_cursor_position - Upstream stable to v6.6.47, v6.10.6 * Noble update: upstream stable patchset 2024-10-04 (LP: #2083656) - irqchip/mbigen: Fix mbigen node address layout - platform/x86/intel/ifs: Initialize union ifs_status to zero - jump_label: Fix the fix, brown paper bags galore - x86/mm: Fix pti_clone_pgtable() alignment assumption - x86/mm: Fix pti_clone_entry_text() for i386 - smb: client: move most of reparse point handling code to common file - smb: client: set correct d_type for reparse DFS/DFSR and mount point - smb: client: handle lack of FSCTL_GET_REPARSE_POINT support - sctp: Fix null-ptr-deref in reuseport_add_sock(). - net: usb: qmi_wwan: fix memory leak for not ip packets - net: bridge: mcast: wait for previous gc cycles when removing port - net: linkwatch: use system_unbound_wq - ice: Fix reset handler - Bluetooth: l2cap: always unlock channel in l2cap_conless_channel() - Bluetooth: hci_sync: avoid dup filtering when passive scanning with adv monitor - net/smc: add the max value of fallback reason count - net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register() - l2tp: fix lockdep splat - net: bcmgenet: Properly overlay PHY and MAC Wake-on-LAN capabilities - net: fec: Stop PPS on driver remove - gpio: prevent potential speculation leaks in gpio_device_get_desc() - hwmon: corsair-psu: add USB id of HX1200i Series 2023 psu - rcutorture: Fix rcu_torture_fwd_cb_cr() data race - md: do not delete safemode_timer in mddev_suspend - md/raid5: avoid BUG_ON() while continue reshape after reassembling - block: change rq_integrity_vec to respect the iterator - rcu: Fix rcu_barrier() VS post CPUHP_TEARDOWN_CPU invocation - clocksource/drivers/sh_cmt: Address race condition for clock events - ACPI: battery: create alarm sysfs attribute atomically - ACPI: SBS: manage alarm sysfs attribute through psy core - xen: privcmd: Switch from mutex to spinlock for irqfds - wifi: nl80211: disallow setting special AP channel widths - wifi: ath12k: fix memory leak in ath12k_dp_rx_peer_frag_setup() - net/mlx5e: SHAMPO, Fix invalid WQ linked list unlink - selftests/bpf: Fix send_signal test with nested CONFIG_PARAVIRT - af_unix: Don't retry after unix_state_lock_nested() in unix_stream_connect(). - PCI: Add Edimax Vendor ID to pci_ids.h - udf: prevent integer overflow in udf_bitmap_free_blocks() - wifi: nl80211: don't give key data to userspace - can: mcp251xfd: tef: prepare to workaround broken TEF FIFO tail index erratum - can: mcp251xfd: tef: update workaround for erratum DS80000789E 6 of mcp2518fd - net: stmmac: qcom-ethqos: enable SGMII loopback during DMA reset on sa8775p-ride-r3 - btrfs: do not clear page dirty inside extent_write_locked_range() - btrfs: fix invalid mapping of extent xarray state - btrfs: fix bitmap leak when loading free space cache on duplicate entry - Bluetooth: btnxpuart: Shutdown timer and prevent rearming when driver unloading - drm/amd/display: Add delay to improve LTTPR UHBR interop - drm/amdgpu: fix potential resource leak warning - drm/amdgpu/pm: Fix the param type of set_power_profile_mode - drm/amdgpu/pm: Fix the null pointer dereference for smu7 - drm/amdgpu: Fix the null pointer dereference to ras_manager - drm/amdgpu/pm: Fix the null pointer dereference in apply_state_adjust_rules - drm/admgpu: fix dereferencing null pointer context - drm/amdgpu: Add lock around VF RLCG interface - drm/amd/pm: Fix the null pointer dereference for vega10_hwmgr - media: amphion: Remove lock in s_ctrl callback - drm/amd/display: Add null checker before passing variables - media: uvcvideo: Ignore empty TS packets - media: uvcvideo: Fix the bandwdith quirk on USB 3.x - media: xc2028: avoid use-after-free in load_firmware_cb() - ext4: fix uninitialized variable in ext4_inlinedir_to_tree - jbd2: avoid memleak in jbd2_journal_write_metadata_buffer - s390/sclp: Prevent release of buffer in I/O - SUNRPC: Fix a race to wake a sync task - profiling: remove profile=sleep support - scsi: mpt3sas: Avoid IOMMU page faults on REPORT ZONES - irqchip/meson-gpio: Convert meson_gpio_irq_controller::lock to 'raw_spinlock_t' - irqchip/loongarch-cpu: Fix return value of lpic_gsi_to_irq() - sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime - net: drop bad gso csum_start and offset in virtio_net_hdr - arm64: Add Neoverse-V2 part - arm64: barrier: Restore spec_bar() macro - arm64: cputype: Add Cortex-X4 definitions - arm64: cputype: Add Neoverse-V3 definitions - arm64: errata: Add workaround for Arm errata 3194386 and 3312417 - arm64: cputype: Add Cortex-X3 definitions - arm64: cputype: Add Cortex-A720 definitions - arm64: cputype: Add Cortex-X925 definitions - arm64: errata: Unify speculative SSBS errata logic - [Config] Set ARM64_ERRATUM_3194386=y - arm64: errata: Expand speculative SSBS workaround - arm64: cputype: Add Cortex-X1C definitions - arm64: cputype: Add Cortex-A725 definitions - arm64: errata: Expand speculative SSBS workaround (again) - i2c: smbus: Improve handling of stuck alerts - ASoC: codecs: wcd938x-sdw: Correct Soundwire ports mask - ASoC: codecs: wsa881x: Correct Soundwire ports mask - ASoC: codecs: wsa883x: parse port-mapping information - ASoC: codecs: wsa883x: Correct Soundwire ports mask - ASoC: codecs: wsa884x: parse port-mapping information - ASoC: codecs: wsa884x: Correct Soundwire ports mask - ASoC: sti: add missing probe entry for player and reader - spi: spidev: Add missing spi_device_id for bh2228fv - ASoC: SOF: Remove libraries from topology lookups - i2c: smbus: Send alert notifications to all devices if source not found - bpf: kprobe: remove unused declaring of bpf_kprobe_override - kprobes: Fix to check symbol prefixes correctly - i2c: qcom-geni: Add missing clk_disable_unprepare in geni_i2c_runtime_resume - i2c: qcom-geni: Add missing geni_icc_disable in geni_i2c_runtime_resume - spi: spi-fsl-lpspi: Fix scldiv calculation - ALSA: usb-audio: Re-add ScratchAmp quirk entries - ASoC: meson: axg-fifo: fix irq scheduling issue with PREEMPT_RT - cifs: cifs_inval_name_dfs_link_error: correct the check for fullpath - module: warn about excessively long module waits - module: make waiting for a concurrent module loader interruptible - drm/i915/gem: Fix Virtual Memory mapping boundaries calculation - drm/amd/display: Skip Recompute DSC Params if no Stream on Link - drm/amdgpu: Forward soft recovery errors to userspace - drm/i915/gem: Adjust vma offset for framebuffer mmap offset - drm/client: fix null pointer dereference in drm_client_modeset_probe - ALSA: line6: Fix racy access to midibuf - ALSA: hda: Add HP MP9 G4 Retail System AMS to force connect list - ALSA: hda/realtek: Add Framework Laptop 13 (Intel Core Ultra) to quirks - ALSA: hda/hdmi: Yet more pin fix for HP EliteDesk 800 G4 - usb: vhci-hcd: Do not drop references before new references are gained - USB: serial: debug: do not echo input by default - usb: gadget: core: Check for unset descriptor - usb: gadget: midi2: Fix the response for FB info with block 0xff - usb: gadget: u_serial: Set start_delayed during suspend - usb: gadget: u_audio: Check return codes from usb_ep_enable and config_ep_by_speed. - scsi: mpi3mr: Avoid IOMMU page faults on REPORT ZONES - scsi: ufs: core: Do not set link to OFF state while waking up from hibernation - scsi: ufs: core: Fix hba->last_dme_cmd_tstamp timestamp updating logic - tick/broadcast: Move per CPU pointer access into the atomic section - vhost-vdpa: switch to use vmf_insert_pfn() in the fault handler - ntp: Clamp maxerror and esterror to operating range - clocksource: Scale the watchdog read retries automatically - clocksource: Fix brown-bag boolean thinko in cs_watchdog_read() - driver core: Fix uevent_show() vs driver detach race - tracefs: Fix inode allocation - tracefs: Use generic inode RCU for synchronizing freeing - ntp: Safeguard against time_constant overflow - timekeeping: Fix bogus clock_was_set() invocation in do_adjtimex() - serial: core: check uartclk for zero to avoid divide by zero - memcg: protect concurrent access to mem_cgroup_idr - parisc: fix unaligned accesses in BPF - parisc: fix a possible DMA corruption - ASoC: amd: yc: Add quirk entry for OMEN by HP Gaming Laptop 16-n0xxx - kcov: properly check for softirq context - irqchip/xilinx: Fix shift out of bounds - genirq/irqdesc: Honor caller provided affinity in alloc_desc() - LoongArch: Enable general EFI poweroff method - power: supply: qcom_battmgr: return EAGAIN when firmware service is not up - power: supply: axp288_charger: Fix constant_charge_voltage writes - power: supply: axp288_charger: Round constant_charge_voltage writes down - tracing: Fix overflow in get_free_elt() - padata: Fix possible divide-by-0 panic in padata_mt_helper() - smb3: fix setting SecurityFlags when encryption is required - eventfs: Don't return NULL in eventfs_create_dir() - eventfs: Use SRCU for freeing eventfs_inodes - selftests: mm: add s390 to ARCH check - btrfs: avoid using fixed char array size for tree names - x86/paravirt: Fix incorrect virt spinlock setting on bare metal - x86/mtrr: Check if fixed MTRRs exist before saving them - sched/smt: Introduce sched_smt_present_inc/dec() helper - sched/smt: Fix unbalance sched_smt_present dec/inc - sched/core: Introduce sched_set_rq_on/offline() helper - sched/core: Fix unbalance set_rq_online/offline() in sched_cpu_deactivate() - drm/bridge: analogix_dp: properly handle zero sized AUX transactions - drm/dp_mst: Skip CSN if topology probing is not done yet - drm/lima: Mark simple_ondemand governor as softdep - drm/mgag200: Set DDC timeout in milliseconds - drm/mgag200: Bind I2C lifetime to DRM device - drm/radeon: Remove __counted_by from StateArray.states[] - mptcp: fully established after ADD_ADDR echo on MPJ - mptcp: pm: deny endp with signal + subflow + port - block: use the right type for stub rq_integrity_vec() - btrfs: fix corruption after buffer fault in during direct IO append write - tools headers arm64: Sync arm64's cputype.h with the kernel sources - mm/hugetlb: fix potential race in __update_and_free_hugetlb_folio() - xfs: fix log recovery buffer allocation for the legacy h_size fixup - mptcp: pm: reduce indentation blocks - mptcp: pm: don't try to create sf if alloc failed - mptcp: pm: do not ignore 'subflow' if 'signal' flag is also set - selftests: mptcp: join: ability to invert ADD_ADDR check - selftests: mptcp: join: test both signal & subflow - Revert "selftests: mptcp: simult flows: mark 'unbalanced' tests as flaky" - btrfs: fix double inode unlock for direct IO sync writes - perf/x86/intel/cstate: Switch to new Intel CPU model defines - perf/x86/intel/cstate: Add Arrowlake support - perf/x86/intel/cstate: Add Lunarlake support - perf/x86/intel/cstate: Add pkg C2 residency counter for Sierra Forest - platform/x86: intel-vbtn: Protect ACPI notify handler against recursion - perf/x86/amd: Use try_cmpxchg() in events/amd/{un,}core.c - perf/x86/intel: Support the PEBS event mask - perf/x86: Support counter mask - perf/x86: Fix smp_processor_id()-in-preemptible warnings - virtio-net: unbreak vq resizing when coalescing is not negotiated - net: dsa: microchip: Fix Wake-on-LAN check to not return an error - net: dsa: microchip: disable EEE for KSZ8567/KSZ9567/KSZ9896/KSZ9897. - regmap: kunit: Use a KUnit action to call regmap_exit() - regmap: kunit: Replace a kmalloc/kfree() pair with KUnit-managed alloc - regmap: kunit: Fix memory leaks in gen_regmap() and gen_raw_regmap() - debugobjects: Annotate racy debug variables - nvme: apple: fix device reference counting - cpufreq: amd-pstate: Allow users to write 'default' EPP string - cpufreq: amd-pstate: auto-load pstate driver by default - soc: qcom: icc-bwmon: Allow for interrupts to be shared across instances - ACPI: resource: Skip IRQ override on Asus Vivobook Pro N6506MU - ACPI: resource: Skip IRQ override on Asus Vivobook Pro N6506MJ - thermal: intel: hfi: Give HFI instances package scope - wifi: ath12k: fix race due to setting ATH12K_FLAG_EXT_IRQ_ENABLED too early - wifi: rtlwifi: handle return value of usb init TX/RX - wifi: rtw89: pci: fix RX tag race condition resulting in wrong RX length - wifi: mac80211: fix NULL dereference at band check in starting tx ba session - bpf: add missing check_func_arg_reg_off() to prevent out-of-bounds memory accesses - mlxsw: pci: Lock configuration space of upstream bridge during reset - btrfs: do not BUG_ON() when freeing tree block after error - btrfs: reduce nesting for extent processing at btrfs_lookup_extent_info() - btrfs: fix data race when accessing the last_trans field of a root - drm/xe/preempt_fence: enlarge the fence critical section - drm/amd/display: Handle HPD_IRQ for internal link - drm/amd/amdkfd: Fix a resource leak in svm_range_validate_and_map() - drm/xe/xe_guc_submit: Fix exec queue stop race condition - drm/amd/display: Add null checks for 'stream' and 'plane' before dereferencing - drm/amd/display: Wake DMCUB before sending a command for replay feature - drm/amd/display: reduce ODM slice count to initial new dc state only when needed - of: Add cleanup.h based auto release via __free(device_node) markings - media: i2c: ov5647: replacing of_node_put with __free(device_node) - drm/amd/display: Fix null pointer deref in dcn20_resource.c - ext4: sanity check for NULL pointer after ext4_force_shutdown - mm, slub: do not call do_slab_free for kfence object - ASoC: cs35l56: Revert support for dual-ownership of ASP registers - drm/atomic: allow no-op FB_ID updates for async flips - drm/amd/display: Replace dm_execute_dmub_cmd with dc_wake_and_execute_dmub_cmd - drm/xe/rtp: Fix off-by-one when processing rules - drm/xe: Use dma_fence_chain_free in chain fence unused as a sync - drm/xe/hwmon: Fix PL1 disable flow in xe_hwmon_power_max_write - drm/xe: Move lrc snapshot capturing to xe_lrc.c - drm/xe: Minor cleanup in LRC handling - drm/test: fix the gem shmem test to map the sg table. - usb: typec: pd: no opencoding of FIELD_GET - usb: typec: fsa4480: Check if the chip is really there - PM: runtime: Simplify pm_runtime_get_if_active() usage - scsi: ufs: core: Fix deadlock during RTC update - serial: sc16is7xx: fix invalid FIFO access with special register set - tracing: Have format file honor EVENT_FILE_FL_FREED - mm: list_lru: fix UAF for memory cgroup - net/tcp: Disable TCP-AO static key after RCU grace period - Revert "drm/amd/display: Handle HPD_IRQ for internal link" - idpf: fix memleak in vport interrupt configuration - drm/amd/display: Add null check in resource_log_pipe_topology_update - Upstream stable to v6.6.46, v6.10.5 * Noble update: upstream stable patchset 2024-10-02 (LP: #2083488) - sysctl: allow change system v ipc sysctls inside ipc namespace - sysctl: allow to change limits for posix messages queues - sysctl: treewide: drop unused argument ctl_table_root::set_ownership(table) - ext4: factor out a common helper to query extent map - ext4: check the extent status again before inserting delalloc block - leds: trigger: Store brightness set by led_trigger_event() - leds: trigger: Call synchronize_rcu() before calling trig->activate() - KVM: VMX: Move posted interrupt descriptor out of VMX code - fbdev/vesafb: Replace references to global screen_info by local pointer - video: Add helpers for decoding screen_info - [Config] Update CONFIG_SCREEN_INFO - video: Provide screen_info_get_pci_dev() to find screen_info's PCI device - firmware/sysfb: Update screen_info for relocated EFI framebuffers - mm: page_alloc: control latency caused by zone PCP draining - mm/page_alloc: fix pcp->count race between drain_pages_zone() vs __rmqueue_pcplist() - f2fs: fix to avoid use SSR allocate when do defragment - f2fs: assign CURSEG_ALL_DATA_ATGC if blkaddr is valid - dmaengine: fsl-edma: add address for channel mux register in fsl_edma_chan - dmaengine: fsl-edma: add i.MX8ULP edma support - perf: imx_perf: fix counter start and config sequence - MIPS: Loongson64: DTS: Fix PCIe port nodes for ls7a - MIPS: dts: loongson: Fix liointc IRQ polarity - MIPS: dts: loongson: Fix ls2k1000-rtc interrupt - ARM: 9406/1: Fix callchain_trace() return value - HID: amd_sfh: Move sensor discovery before HID device initialization - perf tool: fix dereferencing NULL al->maps - drm/nouveau: prime: fix refcount underflow - drm/vmwgfx: Fix overlay when using Screen Targets - drm/vmwgfx: Trigger a modeset when the screen moves - sched: act_ct: take care of padding in struct zones_ht_key - wifi: cfg80211: fix reporting failed MLO links status with cfg80211_connect_done - net: phy: realtek: add support for RTL8366S Gigabit PHY - ALSA: hda: conexant: Fix headset auto detect fail in the polling mode - Bluetooth: btintel: Fail setup on error - Bluetooth: hci_sync: Fix suspending with wrong filter policy - tcp: annotate data-races around tp->window_clamp - tcp: Adjust clamping window for applications specifying SO_RCVBUF - net: axienet: start napi before enabling Rx/Tx - rtnetlink: Don't ignore IFLA_TARGET_NETNSID when ifname is specified in rtnl_dellink(). - i915/perf: Remove code to update PWR_CLK_STATE for gen12 - ice: respect netif readiness in AF_XDP ZC related ndo's - ice: don't busy wait for Rx queue disable in ice_qp_dis() - ice: replace synchronize_rcu with synchronize_net - ice: add missing WRITE_ONCE when clearing ice_rx_ring::xdp_prog - drm/i915/hdcp: Fix HDCP2_STREAM_STATUS macro - net: mvpp2: Don't re-use loop iterator - net: phy: micrel: Fix the KSZ9131 MDI-X status issue - ALSA: hda: Conditionally use snooping for AMD HDMI - netfilter: iptables: Fix null-ptr-deref in iptable_nat_table_init(). - netfilter: iptables: Fix potential null-ptr-deref in ip6table_nat_table_init(). - net/mlx5: Always drain health in shutdown callback - net/mlx5: Fix error handling in irq_pool_request_irq - net/mlx5: Lag, don't use the hardcoded value of the first port - net/mlx5: Fix missing lock on sync reset reload - net/mlx5e: Require mlx5 tc classifier action support for IPsec prio capability - net/mlx5e: Fix CT entry update leaks of modify header context - net/mlx5e: Add a check for the return value from mlx5_port_set_eth_ptys - igc: Fix double reset adapter triggered from a single taprio cmd - ipv6: fix ndisc_is_useropt() handling for PIO - perf: riscv: Fix selecting counters in legacy mode - riscv/mm: Add handling for VM_FAULT_SIGSEGV in mm_fault_error() - riscv: Fix linear mapping checks for non-contiguous memory regions - arm64: jump_label: Ensure patched jump_labels are visible to all CPUs - rust: SHADOW_CALL_STACK is incompatible with Rust - platform/chrome: cros_ec_proto: Lock device when updating MKBP version - HID: wacom: Modify pen IDs - btrfs: zoned: fix zone_unusable accounting on making block group read-write again - btrfs: do not subtract delalloc from avail bytes - protect the fetch of ->fd[fd] in do_dup2() from mispredictions - mptcp: sched: check both directions for backup - ALSA: usb-audio: Correct surround channels in UAC1 channel map - ALSA: hda/realtek: Add quirk for Acer Aspire E5-574G - ALSA: seq: ump: Optimize conversions from SysEx to UMP - Revert "ALSA: firewire-lib: obsolete workqueue for period update" - Revert "ALSA: firewire-lib: operate for period elapse event in process context" - drm/vmwgfx: Fix a deadlock in dma buf fence polling - drm/virtio: Fix type of dma-fence context variable - drm/i915: Fix possible int overflow in skl_ddi_calculate_wrpll() - net: usb: sr9700: fix uninitialized variable use in sr_mdio_read - r8169: don't increment tx_dropped in case of NETDEV_TX_BUSY - mptcp: fix user-space PM announced address accounting - mptcp: distinguish rcv vs sent backup flag in requests - mptcp: fix NL PM announced address accounting - mptcp: mib: count MPJ with backup flag - mptcp: fix bad RCVPRUNED mib accounting - mptcp: pm: only set request_bkup flag when sending MP_PRIO - mptcp: fix duplicate data handling - selftests: mptcp: always close input's FD if opened - selftests: mptcp: join: validate backup in MPJ - selftests: mptcp: join: check backup support in signal endp - mm/huge_memory: mark racy access onhuge_anon_orders_always - mm: fix khugepaged activation policy - x86/cpu/vfm: Add/initialize x86_vfm field to struct cpuinfo_x86 - perf/x86/intel: Switch to new Intel CPU model defines - perf/x86/intel: Add a distinct name for Granite Rapids - drm/gpuvm: fix missing dependency to DRM_EXEC - netlink: specs: correct the spec of ethtool - ethtool: rss: echo the context number back - wifi: cfg80211: correct S1G beacon length calculation - ethtool: fix setting key and resetting indir at once - ice: modify error handling when setting XSK pool in ndo_bpf - ice: toggle netif_carrier when setting up XSK pool - ice: improve updating ice_{t,r}x_ring::xsk_pool - ice: xsk: fix txq interrupt mapping - drm/atomic: Allow userspace to use explicit sync with atomic async flips - drm/atomic: Allow userspace to use damage clips with async flips - riscv/purgatory: align riscv_kernel_entry - perf arch events: Fix duplicate RISC-V SBI firmware event name - RISC-V: Enable the IPI before workqueue_online_cpu() - ceph: force sending a cap update msg back to MDS for revoke op - drm/vmwgfx: Remove unused code - drm/vmwgfx: Fix handling of dumb buffers - drm/v3d: Prevent out of bounds access in performance query extensions - drm/v3d: Fix potential memory leak in the timestamp extension - drm/v3d: Fix potential memory leak in the performance extension - drm/v3d: Validate passed in drm syncobj handles in the timestamp extension - drm/v3d: Validate passed in drm syncobj handles in the performance extension - nouveau: set placement to original placement on uvmm validate. - wifi: ath12k: fix soft lockup on suspend - mptcp: pm: fix backup support in signal endpoints - selftests: mptcp: fix error path - Upstream stable to v6.6.45, v6.10.4 * [SRU] Fix AST DP output after resume (LP: #2083022) // Noble update: upstream stable patchset 2024-10-02 (LP: #2083488) - drm/ast: astdp: Wake up during connector status detection - drm/ast: Fix black screen after resume * [SRU]Fail to locate the LED of NVME disk behind Intel VMD (LP: #2077287) // Noble update: upstream stable patchset 2024-10-02 (LP: #2083488) - PCI: pciehp: Retain Power Indicator bits for userspace indicators * Noble update: upstream stable patchset 2024-09-30 (LP: #2083196) - powerpc/configs: Update defconfig with now user-visible CONFIG_FSL_IFC - spi: spi-microchip-core: Fix the number of chip selects supported - spi: atmel-quadspi: Add missing check for clk_prepare - EDAC, i10nm: make skx_common.o a separate module - rcu/tasks: Fix stale task snaphot for Tasks Trace - platform/chrome: cros_ec_debugfs: fix wrong EC message version - ubd: refactor the interrupt handler - ubd: untagle discard vs write zeroes not support handling - block: initialize integrity buffer to zero before writing it to media - x86/kconfig: Add as-instr64 macro to properly evaluate AS_WRUSS - hfsplus: fix to avoid false alarm of circular locking - x86/of: Return consistent error type from x86_of_pci_irq_enable() - x86/pci/intel_mid_pci: Fix PCIBIOS_* return code handling - x86/pci/xen: Fix PCIBIOS_* return code handling - x86/platform/iosf_mbi: Convert PCIBIOS_* return codes to errnos - cgroup/cpuset: Prevent UAF in proc_cpuset_show() - hwmon: (adt7475) Fix default duty on fan is disabled - block: Call .limit_depth() after .hctx has been set - block/mq-deadline: Fix the tag reservation code - md: Don't wait for MD_RECOVERY_NEEDED for HOT_REMOVE_DISK ioctl - pwm: stm32: Always do lazy disabling - nvmet-auth: fix nvmet_auth hash error handling - drm/meson: fix canvas release in bind function - pwm: atmel-tcb: Fix race condition and convert to guards - hwmon: (max6697) Fix underflow when writing limit attributes - hwmon: (max6697) Fix swapped temp{1,8} critical alarms - arm64: dts: qcom: sc8180x: Correct PCIe slave ports - arm64: dts: qcom: sc8180x: add power-domain to UFS PHY - arm64: dts: qcom: sdm845: add power-domain to UFS PHY - arm64: dts: qcom: sm6115: add power-domain to UFS PHY - arm64: dts: qcom: sm6350: add power-domain to UFS PHY - arm64: dts: qcom: sm8250: add power-domain to UFS PHY - arm64: dts: qcom: sm8350: add power-domain to UFS PHY - arm64: dts: qcom: sm8450: add power-domain to UFS PHY - arm64: dts: qcom: msm8996-xiaomi-common: drop excton from the USB PHY - arm64: dts: qcom: sdm850-lenovo-yoga-c630: fix IPA firmware path - arm64: dts: qcom: msm8998: enable adreno_smmu by default - soc: qcom: pmic_glink: Handle the return value of pmic_glink_init - soc: qcom: rpmh-rsc: Ensure irqs aren't disabled by rpmh_rsc_send_data() callers - arm64: dts: rockchip: Add sdmmc related properties on rk3308-rock-pi-s - arm64: dts: rockchip: Add pinctrl for UART0 to rk3308-rock-pi-s - arm64: dts: rockchip: Add mdio and ethernet-phy nodes to rk3308-rock-pi-s - arm64: dts: rockchip: Update WIFi/BT related nodes on rk3308-rock-pi-s - arm64: dts: qcom: msm8996: specify UFS core_clk frequencies - arm64: dts: qcom: sa8775p: mark ethernet devices as DMA-coherent - soc: xilinx: rename cpu_number1 to dummy_cpu_number - ARM: dts: sunxi: remove duplicated entries in makefile - ARM: dts: stm32: Add arm,no-tick-in-suspend to STM32MP15xx STGEN timer - arm64: dts: qcom: qrb4210-rb2: make L9A always-on - cpufreq: ti-cpufreq: Handle deferred probe with dev_err_probe() - OPP: ti: Fix ti_opp_supply_probe wrong return values - memory: fsl_ifc: Make FSL_IFC config visible and selectable - arm64: dts: ti: k3-am62x: Drop McASP AFIFOs - arm64: dts: ti: k3-am625-beagleplay: Drop McASP AFIFOs - arm64: dts: ti: k3-am62-verdin: Drop McASP AFIFOs - arm64: dts: qcom: qdu1000: Add secure qfprom node - soc: qcom: icc-bwmon: Fix refcount imbalance seen during bwmon_remove - soc: qcom: pdr: protect locator_addr with the main mutex - soc: qcom: pdr: fix parsing of domains lists - arm64: dts: rockchip: Increase VOP clk rate on RK3328 - arm64: dts: amlogic: sm1: fix spdif compatibles - ARM: dts: imx6qdl-kontron-samx6i: fix phy-mode - ARM: dts: imx6qdl-kontron-samx6i: fix PHY reset - ARM: dts: imx6qdl-kontron-samx6i: fix board reset - ARM: dts: imx6qdl-kontron-samx6i: fix SPI0 chip selects - ARM: dts: imx6qdl-kontron-samx6i: fix PCIe reset polarity - arm64: dts: mediatek: mt8195: Fix GPU thermal zone name for SVS - arm64: dts: mediatek: mt8183-kukui: Drop bogus output-enable property - arm64: dts: mediatek: mt8192-asurada: Add off-on-delay-us for pp3300_mipibrdg - arm64: dts: mediatek: mt7622: fix "emmc" pinctrl mux - arm64: dts: mediatek: mt8183-kukui: Fix the value of `dlg,jack-det-rate` mismatch - arm64: dts: mediatek: mt8183-kukui-jacuzzi: Add ports node for anx7625 - arm64: dts: amlogic: gx: correct hdmi clocks - arm64: dts: amlogic: add power domain to hdmitx - arm64: dts: amlogic: setup hdmi system clock - arm64: dts: rockchip: Drop invalid mic-in-differential on rk3568-rock-3a - arm64: dts: rockchip: Fix mic-in-differential usage on rk3566-roc-pc - arm64: dts: rockchip: Fix mic-in-differential usage on rk3568-evb1-v10 - arm64: dts: renesas: r8a779a0: Add missing hypervisor virtual timer IRQ - arm64: dts: renesas: r8a779f0: Add missing hypervisor virtual timer IRQ - arm64: dts: renesas: r8a779g0: Add missing hypervisor virtual timer IRQ - arm64: dts: renesas: r9a07g043u: Add missing hypervisor virtual timer IRQ - arm64: dts: renesas: r9a07g044: Add missing hypervisor virtual timer IRQ - arm64: dts: renesas: r9a07g054: Add missing hypervisor virtual timer IRQ - m68k: atari: Fix TT bootup freeze / unexpected (SCU) interrupt messages - arm64: dts: imx8mp: Fix pgc_mlmix location - arm64: dts: imx8mp: add HDMI power-domains - arm64: dts: imx8mp: Fix pgc vpu locations - x86/xen: Convert comma to semicolon - arm64: dts: rockchip: Add missing power-domains for rk356x vop_mmu - arm64: dts: rockchip: fix regulator name for Lunzn Fastrhino R6xS - arm64: dts: rockchip: fix usb regulator for Lunzn Fastrhino R6xS - arm64: dts: rockchip: fix pmu_io supply for Lunzn Fastrhino R6xS - arm64: dts: rockchip: remove unused usb2 nodes for Lunzn Fastrhino R6xS - arm64: dts: rockchip: disable display subsystem for Lunzn Fastrhino R6xS - arm64: dts: rockchip: fixes PHY reset for Lunzn Fastrhino R68S - arm64: dts: qcom: sm6350: Add missing qcom,non-secure-domain property - cpufreq/amd-pstate: Fix the scaling_max_freq setting on shared memory CPPC systems - m68k: cmpxchg: Fix return value for default case in __arch_xchg() - ARM: spitz: fix GPIO assignment for backlight - vmlinux.lds.h: catch .bss..L* sections into BSS") - firmware: turris-mox-rwtm: Do not complete if there are no waiters - firmware: turris-mox-rwtm: Fix checking return value of wait_for_completion_timeout() - firmware: turris-mox-rwtm: Initialize completion before mailbox - wifi: brcmsmac: LCN PHY code is used for BCM4313 2G-only device - wifi: ath12k: Correct 6 GHz frequency value in rx status - wifi: ath12k: Fix tx completion ring (WBM2SW) setup failure - bpftool: Un-const bpf_func_info to fix it for llvm 17 and newer - selftests/bpf: Fix prog numbers in test_sockmap - net: esp: cleanup esp_output_tail_tcp() in case of unsupported ESPINTCP - wifi: ath12k: change DMA direction while mapping reinjected packets - wifi: ath12k: fix invalid memory access while processing fragmented packets - wifi: ath12k: fix firmware crash during reo reinject - wifi: ath11k: fix wrong definition of CE ring's base address - wifi: ath12k: fix wrong definition of CE ring's base address - tcp: add tcp_done_with_error() helper - tcp: fix race in tcp_write_err() - tcp: fix races in tcp_v[46]_err() - net/smc: set rmb's SG_MAX_SINGLE_ALLOC limitation only when CONFIG_ARCH_NO_SG_CHAIN is defined - selftests/bpf: Check length of recv in test_sockmap - udf: Fix lock ordering in udf_evict_inode() - lib: objagg: Fix general protection fault - mlxsw: spectrum_acl_erp: Fix object nesting warning - mlxsw: spectrum_acl: Fix ACL scale regression and firmware errors - perf/x86: Serialize set_attr_rdpmc() - jump_label: Fix concurrency issues in static_key_slow_dec() - wifi: ath11k: fix wrong handling of CCMP256 and GCMP ciphers - wifi: cfg80211: fix typo in cfg80211_calculate_bitrate_he() - wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he() - udf: Fix bogus checksum computation in udf_rename() - net: fec: Refactor: #define magic constants - net: fec: Fix FEC_ECR_EN1588 being cleared on link-down - libbpf: Checking the btf_type kind when fixing variable offsets - xfrm: Fix unregister netdevice hang on hardware offload. - ipvs: Avoid unnecessary calls to skb_is_gso_sctp - netfilter: nf_tables: rise cap on SELinux secmark context - wifi: rtw89: 8852b: fix definition of KIP register number - wifi: rtl8xxxu: 8188f: Limit TX power index - xfrm: Export symbol xfrm_dev_state_delete. - bpftool: Mount bpffs when pinmaps path not under the bpffs - perf/x86/intel/pt: Fix pt_topa_entry_for_page() address calculation - perf: Fix perf_aux_size() for greater-than 32-bit size - perf: Prevent passing zero nr_pages to rb_alloc_aux() - perf: Fix default aux_watermark calculation - perf/x86/intel/cstate: Fix Alderlake/Raptorlake/Meteorlake - wifi: rtw89: Fix array index mistake in rtw89_sta_info_get_iter() - xfrm: fix netdev reference count imbalance - xfrm: call xfrm_dev_policy_delete when kill policy - wifi: virt_wifi: avoid reporting connection success with wrong SSID - gss_krb5: Fix the error handling path for crypto_sync_skcipher_setkey - wifi: virt_wifi: don't use strlen() in const context - locking/rwsem: Add __always_inline annotation to __down_write_common() and inlined callers - selftests/bpf: Close fd in error path in drop_on_reuseport - selftests/bpf: Null checks for links in bpf_tcp_ca - selftests/bpf: Close obj in error path in xdp_adjust_tail - selftests/resctrl: Convert perror() to ksft_perror() or ksft_print_msg() - selftests/resctrl: Fix closing IMC fds on error and open-code R+W instead of loops - bpf: annotate BTF show functions with __printf - bna: adjust 'name' buf size of bna_tcb and bna_ccb structures - bpf: Eliminate remaining "make W=1" warnings in kernel/bpf/btf.o - bpf: Fix null pointer dereference in resolve_prog_type() for BPF_PROG_TYPE_EXT - selftests: forwarding: devlink_lib: Wait for udev events after reloading - Bluetooth: hci_bcm4377: Use correct unit for timeouts - Bluetooth: btintel: Refactor btintel_set_ppag() - Bluetooth: btnxpuart: Add handling for boot-signature timeout errors - xdp: fix invalid wait context of page_pool_destroy() - net: bridge: mst: Check vlan state for egress decision - drm/rockchip: vop2: Fix the port mux of VP2 - drm/arm/komeda: Fix komeda probe failing if there are no links in the secondary pipeline - drm/amdkfd: Fix CU Masking for GFX 9.4.3 - drm/mipi-dsi: Fix theoretical int overflow in mipi_dsi_dcs_write_seq() - drm/mipi-dsi: Fix theoretical int overflow in mipi_dsi_generic_write_seq() - drm/amd/pm: Fix aldebaran pcie speed reporting - drm/amdgpu: Fix memory range calculation - drm/amdgpu: Check if NBIO funcs are NULL in amdgpu_device_baco_exit - drm/amdgpu: Remove GC HW IP 9.3.0 from noretry=1 - drm/panel: himax-hx8394: Handle errors from mipi_dsi_dcs_set_display_on() better - drm/panel: boe-tv101wum-nl6: If prepare fails, disable GPIO before regulators - drm/panel: boe-tv101wum-nl6: Check for errors on the NOP in prepare() - drm/bridge: Fixed a DP link training bug - drm/bridge: it6505: fix hibernate to resume no display issue - media: pci: ivtv: Add check for DMA map result - media: imon: Fix race getting ictx->lock - media: i2c: Fix imx412 exposure control - media: v4l: async: Fix NULL pointer dereference in adding ancillary links - s390/mm: Convert make_page_secure to use a folio - s390/mm: Convert gmap_make_secure to use a folio - s390/uv: Don't call folio_wait_writeback() without a folio reference - media: mediatek: vcodec: Handle invalid decoder vsi - x86/shstk: Make return uprobe work with shadow stack - ipmi: ssif_bmc: prevent integer overflow on 32bit systems - saa7134: Unchecked i2c_transfer function result fixed - media: i2c: imx219: fix msr access command sequence - media: uvcvideo: Disable autosuspend for Insta360 Link - media: uvcvideo: Quirk for invalid dev_sof in Logitech C922 - media: uvcvideo: Add quirk for invalid dev_sof in Logitech C920 - media: uvcvideo: Override default flags - drm: zynqmp_dpsub: Fix an error handling path in zynqmp_dpsub_probe() - drm: zynqmp_kms: Fix AUX bus not getting unregistered - media: rcar-vin: Fix YUYV8_1X16 handling for CSI-2 - media: rcar-csi2: Disable runtime_pm in probe error - media: rcar-csi2: Cleanup subdevice in remove() - media: renesas: vsp1: Fix _irqsave and _irq mix - media: renesas: vsp1: Store RPF partition configuration per RPF instance - drm/mediatek: Add missing plane settings when async update - drm/mediatek: Use 8-bit alpha in ETHDR - drm/mediatek: Fix XRGB setting error in OVL - drm/mediatek: Fix XRGB setting error in Mixer - drm/mediatek: Fix destination alpha error in OVL - drm/mediatek: Turn off the layers with zero width or height - drm/mediatek: Add OVL compatible name for MT8195 - media: imx-jpeg: Drop initial source change event if capture has been setup - leds: trigger: Unregister sysfs attributes before calling deactivate() - drm/msm/dsi: set VIDEO_COMPRESSION_MODE_CTRL_WC - drm/msm/dpu: drop validity checks for clear_pending_flush() ctl op - perf test: Make test_arm_callgraph_fp.sh more robust - perf pmus: Fixes always false when compare duplicates aliases - perf report: Fix condition in sort__sym_cmp() - drm/etnaviv: fix DMA direction handling for cached RW buffers - drm/qxl: Add check for drm_cvt_mode - Revert "leds: led-core: Fix refcount leak in of_led_get()" - drm/mediatek: Remove less-than-zero comparison of an unsigned value - ext4: fix infinite loop when replaying fast_commit - drm/mediatek/dp: switch to ->edid_read callback - drm/mediatek/dp: Fix spurious kfree() - media: venus: flush all buffers in output plane streamoff - perf intel-pt: Fix aux_watermark calculation for 64-bit size - perf intel-pt: Fix exclude_guest setting - mfd: rsmu: Split core code into separate module - mfd: omap-usb-tll: Use struct_size to allocate tll - xprtrdma: Fix rpcrdma_reqs_reset() - SUNRPC: avoid soft lockup when transmitting UDP to reachable server. - NFSv4.1 another fix for EXCHGID4_FLAG_USE_PNFS_DS for DS server - ext4: don't track ranges in fast_commit if inode has inlined data - ext4: avoid writing unitialized memory to disk in EA inodes - leds: flash: leds-qcom-flash: Test the correct variable in init - sparc64: Fix incorrect function signature and add prototype for prom_cif_init - SUNRPC: Fixup gss_status tracepoint error output - iio: Fix the sorting functionality in iio_gts_build_avail_time_table - PCI: Fix resource double counting on remove & rescan - PCI: keystone: Relocate ks_pcie_set/clear_dbi_mode() - PCI: keystone: Don't enable BAR 0 for AM654x - PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs() - PCI: rcar: Demote WARN() to dev_warn_ratelimited() in rcar_pcie_wakeup() - scsi: ufs: mcq: Fix missing argument 'hba' in MCQ_OPR_OFFSET_n - clk: qcom: gcc-sc7280: Update force mem core bit for UFS ICE clock - clk: qcom: camcc-sc7280: Add parent dependency to all camera GDSCs - iio: frequency: adrf6780: rm clk provider include - coresight: Fix ref leak when of_coresight_parse_endpoint() fails - RDMA/mlx5: Set mkeys for dmabuf at PAGE_SIZE - ASoc: tas2781: Enable RCA-based playback without DSP firmware download - ASoC: cs35l56: Accept values greater than 0 as IRQ numbers - usb: typec-mux: nb7vpq904m: unregister typec switch on probe error and remove - RDMA/cache: Release GID table even if leak is detected - clk: qcom: gpucc-sm8350: Park RCG's clk source at XO during disable - clk: qcom: gcc-sa8775p: Update the GDSC wait_val fields and flags - clk: qcom: gpucc-sa8775p: Remove the CLK_IS_CRITICAL and ALWAYS_ON flags - clk: qcom: gpucc-sa8775p: Park RCG's clk source at XO during disable - clk: qcom: gpucc-sa8775p: Update wait_val fields for GPU GDSC's - interconnect: qcom: qcm2290: Fix mas_snoc_bimc RPM master ID - Input: qt1050 - handle CHIP_ID reading error - RDMA/mlx4: Fix truncated output warning in mad.c - RDMA/mlx4: Fix truncated output warning in alias_GUID.c - RDMA/mlx5: Use sq timestamp as QP timestamp when RoCE is disabled - RDMA/rxe: Don't set BTH_ACK_MASK for UC or UD QPs - ASoC: qcom: Adjust issues in case of DT error in asoc_qcom_lpass_cpu_platform_probe() - scsi: lpfc: Fix a possible null pointer dereference - hwrng: core - Fix wrong quality calculation at hw rng registration - powerpc/prom: Add CPU info to hardware description string later - ASoC: max98088: Check for clk_prepare_enable() error - mtd: make mtd_test.c a separate module - RDMA/device: Return error earlier if port in not valid - Input: elan_i2c - do not leave interrupt disabled on suspend failure - ASoC: amd: Adjust error handling in case of absent codec device - PCI: endpoint: Clean up error handling in vpci_scan_bus() - PCI: endpoint: Fix error handling in epf_ntb_epc_cleanup() - vhost/vsock: always initialize seqpacket_allow - net: missing check virtio - nvmem: rockchip-otp: set add_legacy_fixed_of_cells config option - crypto: qat - extend scope of lock in adf_cfg_add_key_value_param() - clk: qcom: kpss-xcc: Return of_clk_add_hw_provider to transfer the error - clk: qcom: Park shared RCGs upon registration - clk: en7523: fix rate divider for slic and spi clocks - MIPS: Octeron: remove source file executable bit - PCI: qcom-ep: Disable resources unconditionally during PERST# assert - PCI: dwc: Fix index 0 incorrectly being interpreted as a free ATU slot - powerpc/xmon: Fix disassembly CPU feature checks - macintosh/therm_windtunnel: fix module unload. - RDMA/hns: Check atomic wr length - RDMA/hns: Fix unmatch exception handling when init eq table fails - RDMA/hns: Fix missing pagesize and alignment check in FRMR - RDMA/hns: Fix shift-out-bounds when max_inline_data is 0 - RDMA/hns: Fix undifined behavior caused by invalid max_sge - RDMA/hns: Fix insufficient extend DB for VFs. - iommu/vt-d: Fix identity map bounds in si_domain_init() - RDMA/core: Remove NULL check before dev_{put, hold} - RDMA: Fix netdev tracker in ib_device_set_netdev - bnxt_re: Fix imm_data endianness - netfilter: ctnetlink: use helper function to calculate expect ID - netfilter: nf_set_pipapo: fix initial map fill - ipvs: properly dereference pe in ip_vs_add_service - gve: Fix XDP TX completion handling when counters overflow - net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE - ipv4: Fix incorrect TOS in route get reply - ipv4: Fix incorrect TOS in fibmatch route get reply - net: dsa: mv88e6xxx: Limit chip-wide frame size config to CPU ports - net: dsa: b53: Limit chip-wide jumbo frame config to CPU ports - fs/ntfs3: Merge synonym COMPRESSION_UNIT and NTFS_LZNT_CUNIT - fs/ntfs3: Fix transform resident to nonresident for compressed files - fs/ntfs3: Deny getting attr data block in compressed frame - fs/ntfs3: Missed NI_FLAG_UPDATE_PARENT setting - fs/ntfs3: Fix getting file type - fs/ntfs3: Add missing .dirty_folio in address_space_operations - pinctrl: rockchip: update rk3308 iomux routes - pinctrl: core: fix possible memory leak when pinctrl_enable() fails - pinctrl: single: fix possible memory leak when pinctrl_enable() fails - pinctrl: ti: ti-iodelay: fix possible memory leak when pinctrl_enable() fails - pinctrl: freescale: mxs: Fix refcount of child - fs/ntfs3: Replace inode_trylock with inode_lock - fs/ntfs3: Correct undo if ntfs_create_inode failed - fs/ntfs3: Drop stray '' (backslash) in formatting string - fs/ntfs3: Fix field-spanning write in INDEX_HDR - pinctrl: renesas: r8a779g0: Fix CANFD5 suffix - pinctrl: renesas: r8a779g0: Fix FXR_TXEN[AB] suffixes - pinctrl: renesas: r8a779g0: Fix (H)SCIF1 suffixes - pinctrl: renesas: r8a779g0: Fix (H)SCIF3 suffixes - pinctrl: renesas: r8a779g0: Fix IRQ suffixes - pinctrl: renesas: r8a779g0: FIX PWM suffixes - pinctrl: renesas: r8a779g0: Fix TCLK suffixes - pinctrl: renesas: r8a779g0: Fix TPU suffixes - fs/proc/task_mmu: indicate PM_FILE for PMD-mapped file THP - fs/proc/task_mmu.c: add_to_pagemap: remove useless parameter addr - fs/proc/task_mmu: don't indicate PM_MMAP_EXCLUSIVE without PM_PRESENT - fs/proc/task_mmu: properly detect PM_MMAP_EXCLUSIVE per page of PMD-mapped THPs - nilfs2: avoid undefined behavior in nilfs_cnt32_ge macro - rtc: interface: Add RTC offset to alarm after fix-up - fs/ntfs3: Fix the format of the "nocase" mount option - fs/ntfs3: Missed error return - fs/ntfs3: Keep runs for $MFT::$ATTR_DATA and $MFT::$ATTR_BITMAP - powerpc/8xx: fix size given to set_huge_pte_at() - s390/dasd: fix error checks in dasd_copy_pair_store() - sbitmap: use READ_ONCE to access map->word - sbitmap: fix io hung due to race on sbitmap_word::cleared - LoongArch: Check TIF_LOAD_WATCH to enable user space watchpoint - landlock: Don't lose track of restrictions on cred_transfer - hugetlb: force allocating surplus hugepages on mempolicy allowed nodes - mm/hugetlb: fix possible recursive locking detected warning - mm/mglru: fix div-by-zero in vmpressure_calc_level() - mm: mmap_lock: replace get_memcg_path_buf() with on-stack buffer - mm/mglru: fix overshooting shrinker memory - x86/efistub: Avoid returning EFI_SUCCESS on error - x86/efistub: Revert to heap allocated boot_params for PE entrypoint - exfat: fix potential deadlock on __exfat_get_dentry_set - dt-bindings: thermal: correct thermal zone node name limit - tick/broadcast: Make takeover of broadcast hrtimer reliable - net: netconsole: Disable target before netpoll cleanup - af_packet: Handle outgoing VLAN packets without hardware offloading - btrfs: fix extent map use-after-free when adding pages to compressed bio - kernel: rerun task_work while freezing in get_signal() - ipv4: fix source address selection with route leak - ipv6: take care of scope when choosing the src addr - NFSD: Support write delegations in LAYOUTGET - sched/fair: set_load_weight() must also call reweight_task() for SCHED_IDLE tasks - fuse: verify {g,u}id mount options correctly - ata: libata-scsi: Fix offsets for the fixed format sense data - char: tpm: Fix possible memory leak in tpm_bios_measurements_open() - media: venus: fix use after free in vdec_close - ata: libata-scsi: Do not overwrite valid sense data when CK_COND=1 - hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode() - ext2: Verify bitmap and itable block numbers before using them - io_uring/io-wq: limit retrying worker initialisation - drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes - drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes - scsi: qla2xxx: Fix optrom version displayed in FDMI - drm/amd/display: Check for NULL pointer - apparmor: use kvfree_sensitive to free data->data - cifs: fix potential null pointer use in destroy_workqueue in init_cifs error path - cifs: fix reconnect with SMB1 UNIX Extensions - cifs: mount with "unix" mount option for SMB1 incorrectly handled - task_work: s/task_work_cancel()/task_work_cancel_func()/ - task_work: Introduce task_work_cancel() again - udf: Avoid using corrupted block bitmap buffer - m68k: amiga: Turn off Warp1260 interrupts during boot - ext4: check dot and dotdot of dx_root before making dir indexed - ext4: make sure the first directory block is not a hole - io_uring: tighten task exit cancellations - trace/pid_list: Change gfp flags in pid_list_fill_irq() - selftests/landlock: Add cred_transfer test - wifi: mwifiex: Fix interface type change - wifi: rtw88: usb: Fix disconnection after beacon loss - drivers: soc: xilinx: check return status of get_api_version() - leds: ss4200: Convert PCIBIOS_* return codes to errnos - leds: mt6360: Fix memory leak in mt6360_init_isnk_properties() - media: imx-pxp: Fix ERR_PTR dereference in pxp_probe() - jbd2: make jbd2_journal_get_max_txn_bufs() internal - jbd2: precompute number of transaction descriptor blocks - jbd2: avoid infinite transaction commit loop - media: uvcvideo: Fix integer overflow calculating timestamp - KVM: VMX: Split out the non-virtualization part of vmx_interrupt_blocked() - KVM: nVMX: Request immediate exit iff pending nested event needs injection - ALSA: ump: Don't update FB name for static blocks - ALSA: ump: Force 1 Group for MIDI1 FBs - ALSA: usb-audio: Fix microphone sound on HD webcam. - ALSA: usb-audio: Move HD Webcam quirk to the right place - ALSA: usb-audio: Add a quirk for Sonix HD USB Camera - tools/memory-model: Fix bug in lock.cat - hwrng: amd - Convert PCIBIOS_* return codes to errnos - parisc: Fix warning at drivers/pci/msi/msi.h:121 - PCI: hv: Return zero, not garbage, when reading PCI_INTERRUPT_PIN - PCI: dw-rockchip: Fix initial PERST# GPIO value - PCI: rockchip: Use GPIOD_OUT_LOW flag while requesting ep_gpio - PCI: loongson: Enable MSI in LS7A Root Complex - binder: fix hang of unregistered readers - hostfs: fix dev_t handling - efi/libstub: Zero initialize heap allocated struct screen_info - fs/ntfs3: Update log->page_{mask,bits} if log->page_size changed - scsi: qla2xxx: Return ENOBUFS if sg_cnt is more than one for ELS cmds - ASoC: fsl: fsl_qmc_audio: Check devm_kasprintf() returned value - f2fs: fix to force buffered IO on inline_data inode - f2fs: fix to don't dirty inode for readonly filesystem - f2fs: fix return value of f2fs_convert_inline_inode() - f2fs: use meta inode for GC of atomic file - f2fs: use meta inode for GC of COW file - clk: davinci: da8xx-cfgchip: Initialize clk_init_data before use - ubi: eba: properly rollback inside self_check_eba - block: fix deadlock between sd_remove & sd_release - mm: fix old/young bit handling in the faulting path - decompress_bunzip2: fix rare decompression failure - kbuild: Fix '-S -c' in x86 stack protector scripts - ASoC: SOF: ipc4-topology: Preserve the DMA Link ID for ChainDMA on unprepare - ASoC: amd: yc: Support mic on Lenovo Thinkpad E16 Gen 2 - kobject_uevent: Fix OOB access within zap_modalias_env() - gve: Fix an edge case for TSO skb validity check - ice: Add a per-VF limit on number of FDIR filters - devres: Fix devm_krealloc() wasting memory - devres: Fix memory leakage caused by driver API devm_free_percpu() - irqdomain: Fixed unbalanced fwnode get and put - irqchip/imx-irqsteer: Handle runtime power management correctly - mm/numa_balancing: teach mpol_to_str about the balancing mode - rtc: cmos: Fix return value of nvmem callbacks - scsi: lpfc: Allow DEVICE_RECOVERY mode after RSCN receipt if in PRLI_ISSUE state - scsi: qla2xxx: During vport delete send async logout explicitly - scsi: qla2xxx: Unable to act on RSCN for port online - scsi: qla2xxx: Fix for possible memory corruption - scsi: qla2xxx: Use QP lock to search for bsg - scsi: qla2xxx: Reduce fabric scan duplicate code - scsi: qla2xxx: Fix flash read failure - scsi: qla2xxx: Complete command early within lock - scsi: qla2xxx: validate nvme_local_port correctly - perf: Fix event leak upon exit - perf: Fix event leak upon exec and file release - perf stat: Fix the hard-coded metrics calculation on the hybrid - perf/x86/intel/uncore: Fix the bits of the CHA extended umask for SPR - perf/x86/intel/ds: Fix non 0 retire latency on Raptorlake - perf/x86/intel/pt: Fix topa_entry base length - perf/x86/intel/pt: Fix a topa_entry base address calculation - drm/i915/gt: Do not consider preemption during execlists_dequeue for gen8 - drm/amdgpu/sdma5.2: Update wptr registers as well as doorbell - drm/udl: Remove DRM_CONNECTOR_POLL_HPD - drm/dp_mst: Fix all mstb marked as not probed after suspend/resume - drm/amdgpu: reset vm state machine after gpu reset(vram lost) - drm/amd/amdgpu: Fix uninitialized variable warnings - drm/i915/dp: Reset intel_dp->link_trained before retraining the link - drm/i915/dp: Don't switch the LTTPR mode on an active link - rtc: isl1208: Fix return value of nvmem callbacks - rtc: abx80x: Fix return value of nvmem callback on read - watchdog/perf: properly initialize the turbo mode timestamp and rearm counter - platform: mips: cpu_hwmon: Disable driver on unsupported hardware - RDMA/iwcm: Fix a use-after-free related to destroying CM IDs - selftests/sigaltstack: Fix ppc64 GCC build - dm-verity: fix dm_is_verity_target() when dm-verity is builtin - rbd: don't assume rbd_is_lock_owner() for exclusive mappings - remoteproc: stm32_rproc: Fix mailbox interrupts queuing - remoteproc: imx_rproc: Skip over memory region when node value is NULL - remoteproc: imx_rproc: Fix refcount mistake in imx_rproc_addr_init - MIPS: dts: loongson: Add ISA node - MIPS: ip30: ip30-console: Add missing include - MIPS: dts: loongson: Fix GMAC phy node - MIPS: Loongson64: env: Hook up Loongsson-2K - MIPS: Loongson64: Remove memory node for builtin-dtb - MIPS: Loongson64: reset: Prioritise firmware service - MIPS: Loongson64: Test register availability before use - drm/etnaviv: don't block scheduler when GPU is still active - drm/panfrost: Mark simple_ondemand governor as softdep - rbd: rename RBD_LOCK_STATE_RELEASING and releasing_wait - rbd: don't assume RBD_LOCK_STATE_LOCKED for exclusive mappings - lib/build_OID_registry: don't mention the full path of the script in output - video: logo: Drop full path of the input filename in generated file - Bluetooth: btusb: Add RTL8852BE device 0489:e125 to device tables - Bluetooth: btusb: Add Realtek RTL8852BE support ID 0x13d3:0x3591 - minmax: scsi: fix mis-use of 'clamp()' in sr.c - mm/mglru: fix ineffective protection calculation - PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal - f2fs: fix to truncate preallocated blocks in f2fs_file_open() - kdb: address -Wformat-security warnings - kdb: Use the passed prompt in kdb_position_cursor() - dmaengine: ti: k3-udma: Fix BCHAN count with UHC and HC channels - phy: cadence-torrent: Check return value on register read - phy: zynqmp: Enable reference clock correctly - um: time-travel: fix time-travel-start option - um: time-travel: fix signal blocking race/hang - f2fs: fix start segno of large section - watchdog: rzg2l_wdt: Use pm_runtime_resume_and_get() - watchdog: rzg2l_wdt: Check return status of pm_runtime_put() - f2fs: fix to update user block counts in block_operations() - kbuild: avoid build error when single DTB is turned into composite DTB - selftests/bpf: fexit_sleep: Fix stack allocation for arm64 - libbpf: Fix no-args func prototype BTF dumping syntax - af_unix: Disable MSG_OOB handling for sockets in sockmap/sockhash - dma: fix call order in dmam_free_coherent - bpf, events: Use prog to emit ksymbol event for main program - tools/resolve_btfids: Fix comparison of distinct pointer types warning in resolve_btfids - MIPS: SMP-CPS: Fix address for GCR_ACCESS register for CM3 and later - ipv4: Fix incorrect source address in Record Route option - net: bonding: correctly annotate RCU in bond_should_notify_peers() - ice: Fix recipe read procedure - netfilter: nft_set_pipapo_avx2: disable softinterrupts - net: stmmac: Correct byte order of perfect_match - net: nexthop: Initialize all fields in dumped nexthops - bpf: Fix a segment issue when downgrading gso_size - apparmor: Fix null pointer deref when receiving skb during sock creation - powerpc: fix a file leak in kvm_vcpu_ioctl_enable_cap() - lirc: rc_dev_get_from_fd(): fix file leak - auxdisplay: ht16k33: Drop reference after LED registration - ASoC: SOF: imx8m: Fix DSP control regmap retrieval - spi: microchip-core: fix the issues in the isr - spi: microchip-core: defer asserting chip select until just before write to TX FIFO - spi: microchip-core: only disable SPI controller when register value change requires it - spi: microchip-core: fix init function not setting the master and motorola modes - spi: microchip-core: ensure TX and RX FIFOs are empty at start of a transfer - nvme-pci: Fix the instructions for disabling power management - ASoC: sof: amd: fix for firmware reload failure in Vangogh platform - spi: spidev: add correct compatible for Rohm BH2228FV - ASoC: Intel: use soc_intel_is_byt_cr() only when IOSF_MBI is reachable - ASoC: TAS2781: Fix tasdev_load_calibrated_data() - ceph: fix incorrect kmalloc size of pagevec mempool - s390/pci: Refactor arch_setup_msi_irqs() - s390/pci: Allow allocation of more than 1 MSI interrupt - s390/cpum_cf: Fix endless loop in CF_DIAG event stop - iommu: sprd: Avoid NULL deref in sprd_iommu_hw_en - io_uring: fix io_match_task must_hold - nvme-pci: add missing condition check for existence of mapped data - fs: don't allow non-init s_user_ns for filesystems without FS_USERNS_MOUNT - md/raid0: don't free conf on raid0_run failure - md/raid1: don't free conf on raid0_run failure - io_uring: Fix probe of disabled operations - cgroup/cpuset: Optimize isolated partition only generate_sched_domains() calls - cgroup/cpuset: Fix remote root partition creation problem - x86/syscall: Mark exit[_group] syscall handlers __noreturn - perf: arm_pmuv3: Avoid assigning fixed cycle counter with threshold - md/raid5: recheck if reshape has finished with device_lock held - hwmon: (ltc2991) re-order conditions to fix off by one bug - arm64: smp: Fix missing IPI statistics - arm64: dts: qcom: sc7280: Remove CTS/RTS configuration - ARM: dts: qcom: msm8226-microsoft-common: Enable smbb explicitly - OPP: Fix missing cleanup on error in _opp_attach_genpd() - arm64: dts: qcom: sc8280xp-*: Remove thermal zone polling delays - arm64: dts: ti: k3-am62-main: Fix the reg-range for main_pktdma - arm64: dts: ti: k3-am62a-main: Fix the reg-range for main_pktdma - arm64: dts: ti: k3-am62p-main: Fix the reg-range for main_pktdma - arm64: dts: ti: k3-am62a7: Drop McASP AFIFOs - arm64: dts: ti: k3-am62p5: Drop McASP AFIFOs - arm64: dts: ti: k3-am62p5-sk: Fix pinmux for McASP1 TX - arm64: dts: qcom: sc7180-trogdor: Disable pwmleds node where unused - arm64: dts: mediatek: mt8192: Fix GPU thermal zone name for SVS - arm64: dts: mediatek: mt8183-pico6: Fix wake-on-X event node names - arm64: dts: renesas: r9a08g045: Add missing hypervisor virtual timer IRQ - cpufreq/amd-pstate-ut: Convert nominal_freq to khz during comparisons - wifi: mac80211: cancel multi-link reconf work on disconnect - wifi: ath11k: refactor setting country code logic - wifi: ath11k: restore country code during resume - net: ethernet: cortina: Restore TSO support - tcp: fix races in tcp_abort() - hns3: avoid linking objects into multiple modules - sched/core: Move preempt_model_*() helpers from sched.h to preempt.h - sched/core: Drop spinlocks on contention iff kernel is preemptible - net: dsa: ksz_common: Allow only up to two HSR HW offloaded ports for KSZ9477 - libbpf: Skip base btf sanity checks - wifi: mac80211: add ieee80211_tdls_sta_link_id() - wifi: iwlwifi: fix iwl_mvm_get_valid_rx_ant() - wifi: ath12k: advertise driver capabilities for MBSSID and EMA - riscv, bpf: Fix out-of-bounds issue when preparing trampoline image - perf/x86/amd/uncore: Avoid PMU registration if counters are unavailable - perf/x86/amd/uncore: Fix DF and UMC domain identification - NFSD: Fix nfsdcld warning - net: page_pool: fix warning code - bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG - Bluetooth: hci_event: Set QoS encryption from BIGInfo report - Bluetooth: hci_core, hci_sync: cleanup struct discovery_state - Bluetooth: Fix usage of __hci_cmd_sync_status - tcp: Don't access uninit tcp_rsk(req)->ao_keyid in tcp_create_openreq_child(). - drm/panel: ilitek-ili9882t: If prepare fails, disable GPIO before regulators - drm/panel: ilitek-ili9882t: Check for errors on the NOP in prepare() - drm/amd/display: Move 'struct scaler_data' off stack - media: i2c: hi846: Fix V4L2_SUBDEV_FORMAT_TRY get_selection() - drm/msm/dpu: fix encoder irq wait skip - drm/msm/dpu: drop duplicate drm formats from wb2_formats arrays - drm/msm/dp: fix runtime_pm handling in dp_wait_hpd_asserted - perf maps: Switch from rbtree to lazily sorted array for addresses - perf maps: Fix use after free in __maps__fixup_overlap_and_insert - drm/bridge: samsung-dsim: Set P divider based on min/max of fin pll - drm/i915/psr: Print Panel Replay status instead of frame lock status - drm/mediatek: Set DRM mode configs accordingly - drm/msm/dsi: set video mode widebus enable bit when widebus is enabled - tools/perf: Fix the string match for "/tmp/perf-$PID.map" files in dso__load - drm/amd/display: Add null check before access structs - nfs: pass explicit offset/count to trace events - PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init() - PCI: tegra194: Set EP alignment restriction for inbound ATU - riscv: smp: fail booting up smp if inconsistent vlen is detected - clk: meson: s4: fix fixed_pll_dco clock - clk: meson: s4: fix pwm_j_div parent clock - usb: typec-mux: ptn36502: unregister typec switch on probe error and remove - mtd: spi-nor: winbond: fix w25q128 regression - iommufd/selftest: Fix dirty bitmap tests with u8 bitmaps - iommufd/selftest: Fix iommufd_test_dirty() to handle <u8 bitmaps - iommufd/selftest: Add tests for <= u8 bitmap sizes - iommufd/selftest: Fix tests to use MOCK_PAGE_SIZE based buffer sizes - iommufd/iova_bitmap: Check iova_bitmap_done() after set ahead - clk: qcom: gcc-x1e80100: Fix halt_check for all pipe clocks - dm-raid: Fix WARN_ON_ONCE check for sync_thread in raid_resume - kvm: s390: Reject memory region operations for ucontrol VMs - eeprom: ee1004: Call i2c_new_scanned_device to instantiate thermal sensor - clk: qcom: gcc-x1e80100: Set parent rate for USB3 sec and tert PHY pipe clks - workqueue: Introduce from_work() helper for cleaner callback declarations - RDMA/hns: Fix mbx timing out before CMD execution is completed - crypto: mxs-dcp - Ensure payload is zero when using key slot - RDMA/mana_ib: Enable RoCE on port 1 - RDMA/mana_ib: set node_guid - rtc: tps6594: Fix memleak in probe - selftests/damon/access_memory: use user-defined region size - md-cluster: fix hanging issue while a new disk adding - power: supply: ab8500: Fix error handling when calling iio_read_channel_processed() - power: supply: ingenic: Fix some error handling paths in ingenic_battery_get_property() - remoteproc: mediatek: Don't attempt to remap l1tcm memory if missing - remoteproc: k3-r5: Fix IPC-only mode detection - mailbox: imx: fix TXDB_V2 channel race condition - mailbox: mtk-cmdq: Move devm_mbox_controller_register() after devm_pm_runtime_enable() - mm: huge_memory: use !CONFIG_64BIT to relax huge page alignment on 32 bit machines - mm/huge_memory: avoid PMD-size page cache if needed - thermal/drivers/broadcom: Fix race between removal and clock disable - workqueue: Always queue work items to the newest PWQ for order workqueues - ipv6: fix source address selection with route leak - drm/xe: Use write-back caching mode for system memory on DGFX - md/raid5: fix spares errors about rcu usage - media: stm32: dcmipp: correct error handling in dcmipp_create_subdevs - tpm_tis_spi: add missing attpm20p SPI device ID entry - sysctl: always initialize i_uid/i_gid - media: i2c: Kconfig: Fix missing firmware upload config select - genirq: Set IRQF_COND_ONESHOT in request_irq() - cpufreq: qcom-nvmem: fix memory leaks in probe error paths - leds: triggers: Flush pending brightness before activating trigger - media: i2c: alvium: Move V4L2_CID_GAIN to V4L2_CID_ANALOG_GAIN - KVM: nVMX: Add a helper to get highest pending from Posted Interrupt vector - KVM: nVMX: Check for pending posted interrupts when looking for nested events - ALSA: hda/realtek: cs35l41: Fixup remaining asus strix models - fbdev: vesafb: Detect VGA compatibility from screen info's VESA attributes - drm/fbdev-dma: Fix framebuffer mode for big endian devices - xhci: Apply XHCI_RESET_TO_DEFAULT quirk to TGL - dmaengine: fsl-edma: clean up unused "fsl,imx8qm-adma" compatible string - dmaengine: fsl-edma: change the memory access from local into remote mode in i.MX 8QM - clk: samsung: fix getting Exynos4 fin_pll rate from external clocks - bus: mhi: ep: Do not allocate memory for MHI objects from DMA zone - ASoC: SOF: ipc4-topology: Use correct queue_id for requesting input pin format - arch: um: rust: Use the generated target.json again - f2fs: fix null reference error when checking end of zone - selftests: forwarding: skip if kernel not support setting bridge fdb learning limit - xsk: Require XDP_UMEM_TX_METADATA_LEN to actuate tx_metadata_len - drm/xe/exec: Fix minor bug related to xe_sync_entry_cleanup - thermal: trip: Split thermal_zone_device_set_mode() - apparmor: unpack transition table if dfa is not present - i3c: mipi-i3c-hci: Fix number of DAT/DCT entries for HCI versions < 1.1 - selinux,smack: remove the capability checks in the removexattr hooks - selftests/bpf: DENYLIST.aarch64: Skip fexit_sleep again - nilfs2: handle inconsistent state in nilfs_btnode_create_block() - Upstream stable to v6.6.44, v6.10.3 * Noble update: upstream stable patchset 2024-09-30 (LP: #2083196) // CVE-2024-42284 - tipc: Return non-zero value from tipc_udp_addr2str() on error * CVE-2024-44987 - ipv6: prevent UAF in ip6_send_skb() * CVE-2024-42301 - dev/parport: fix the array out-of-bounds risk * CVE-2024-44998 - atm: idt77252: prevent use after free in dequeue_rx() -- Stefan Bader <stefan.bader@canonical.com> Thu, 21 Nov 2024 10:26:42 +0100 linux-hwe-6.8 (6.8.0-49.49~22.04.1) jammy; urgency=medium * jammy/linux-hwe-6.8: 6.8.0-49.49~22.04.1 -proposed tracker (LP: #2085941) - [Packaging] resync git-ubuntu-log [ Ubuntu: 6.8.0-49.49 ] * noble/linux: 6.8.0-49.49 -proposed tracker (LP: #2085942) * CVE-2024-46800 - sch/netem: fix use after free in netem_dequeue * mm/folios: xfs hangs with hung task timeouts with corrupted folio pointer lists (LP: #2085495) - lib/xarray: introduce a new helper xas_get_order - mm/filemap: return early if failed to allocate memory for split - mm/filemap: optimize filemap folio adding * CVE-2024-43882 - exec: Fix ToCToU between perm check and set-uid/gid usage -- Stefan Bader <stefan.bader@canonical.com> Wed, 06 Nov 2024 16:57:41 +0100 # For older changelog entries, run 'apt-get changelog linux-headers-6.8.0-58-generic'
Generated by dwww version 1.14 on Fri Jul 18 17:41:19 CEST 2025.